@oooooooooo/ch0de 1.9.57 → 1.9.59

package/chode.js

@@ -3840,7 +3840,12 @@ async function runAgentLoop(prompt, sessionId, force, callOptions, aiCall, onToo
         mutating.push(executable[mi].args.file);
       }
     }
-    if (mutating.length) takeSnapshot('agent turn ' + steps, mutating, sessionId);
+    if (mutating.length) {
+      // Auto-commit checkpoint before mutating agent turn so work can be rolled back.
+      try { run('git add -A', { silent: true, cwd: ROOT }); } catch (e) {}
+      try { run('git commit --allow-empty -m "chode checkpoint: agent turn ' + steps + '"', { silent: true, cwd: ROOT }); } catch (e) {}
+      takeSnapshot('agent turn ' + steps, mutating, sessionId);
+    }
     var toolCtx = { yolo:callOptions.yolo===true,onChildAuthors:ids=>{for(const id of ids)draftAuthors.add(String(id).toLowerCase());},taskGroup,mode:callOptions.mode,acceptanceTest:callOptions.acceptanceTest,sessionId: sessionId, actions: actions, aiCall: aiCall, onTool: onTool, onAsk: onAsk, planTargets: effTargets, overwriteTargets: effOverwrites, scopeTargets: callOptions.scopeTargets || null, inspectedUrls: taskContext.inspectedUrls };
     var acceptanceChangedThisTurn=false;
     async function execOne(call) {
@@ -7298,6 +7303,40 @@ function cmdServe(argv) {
     return 'ses_' + crypto.randomBytes(8).toString('hex');
   }
 
+  function verifyProviderKey(baseUrl, key) {
+    return new Promise(function(resolve){
+      try {
+        var u = new URL(baseUrl + '/models');
+        var req = http.request(u, {
+          method: 'GET',
+          headers: {'Authorization': 'Bearer ' + key, 'Accept': 'application/json'},
+          timeout: 8000
+        }, function(resp){
+          var working = resp.statusCode >= 200 && resp.statusCode < 400;
+          resp.resume();
+          resolve(working);
+        });
+        req.on('error', function(){ resolve(false); });
+        req.on('timeout', function(){ req.destroy(); resolve(false); });
+        req.end();
+      } catch(e) { resolve(false); }
+    });
+  }
+
+  function providerInfo(pid) {
+    var info = null;
+    try {
+      for (var id in PROVIDERS) { if (id === pid) { info = PROVIDERS[id]; break; } }
+    } catch(e) {}
+    if (info) return info;
+    try {
+      var dir = require('./provider-directory');
+      var listed = dir.list();
+      for (var i = 0; i < listed.length; i++) { if (listed[i].id === pid) { info = listed[i]; break; } }
+    } catch(e) {}
+    return info;
+  }
+
   function loadServeConfig() {
     try { return JSON.parse(fs.readFileSync(CONFIG_PATH, 'utf8')); } catch(e) { return { freeOnly: true, defaultProvider: 'auto', providers: {}, connections: {} }; }
   }
@@ -7434,9 +7473,11 @@ function cmdServe(argv) {
     if (pathname === '/api/providers' && req.method === 'GET') {
       var out = [];
       try {
+        var cfg = loadServeConfig();
+        var keys = cfg.providerKeys || {};
         for (var id in PROVIDERS) {
           var p = PROVIDERS[id];
-          out.push({id: id, name: p.name || id, requiresKey: !!p.requiresKey, free: require('./provider-capacity').free ? require('./provider-capacity').free(p) : true, category: p.category || '', builtIn: true});
+          out.push({id: id, name: p.name || id, requiresKey: !!p.requiresKey, free: require('./provider-capacity').free ? require('./provider-capacity').free(p) : true, category: p.category || '', builtIn: true, hasKey: !!keys[id]});
         }
         var dir = require('./provider-directory');
         var listed = dir.list();
@@ -7444,11 +7485,59 @@ function cmdServe(argv) {
         out.forEach(function(x){ids[x.id]=true;});
         listed.forEach(function(p){
           if (!ids[p.id]) {
-            out.push({id: p.id, name: p.name, requiresKey: !!p.env, free: !p.env, category: 'directory', builtIn: false, baseUrl: p.baseUrl, models: p.models.length, doc: p.doc, verification: p.verification});
+            out.push({id: p.id, name: p.name, requiresKey: !!p.env, free: !p.env, category: 'directory', builtIn: false, baseUrl: p.baseUrl, models: p.models.length, doc: p.doc, verification: p.verification, hasKey: !!keys[p.id]});
           }
         });
       } catch(e) {}
       json(res, 200, {ok: true, providers: out});
+      return;
+    }
+
+    var keyM = pathname.match(/^\/api\/provider\/([^\/]+)\/key(\/test)?$/);
+    if (keyM) {
+      var pid = keyM[1];
+      var isTest = !!keyM[2];
+      if (req.method === 'GET' && !isTest) {
+        var cfg2 = loadServeConfig();
+        var keys2 = cfg2.providerKeys || {};
+        json(res, 200, {ok: true, hasKey: !!keys2[pid]});
+        return;
+      }
+      if (req.method === 'POST' && !isTest) {
+        readBody(req).then(function(body){
+          var parsed;
+          try { parsed = JSON.parse(body || '{}'); } catch(e) { json(res, 400, {ok:false, error:'invalid json'}); return; }
+          var key = String(parsed.key || '');
+          var cfg3 = loadServeConfig();
+          if (!cfg3.providerKeys) cfg3.providerKeys = {};
+          cfg3.providerKeys[pid] = key;
+          saveServeConfig(cfg3);
+          var pinfo = providerInfo(pid);
+          if (pinfo && pinfo.baseUrl) {
+            verifyProviderKey(pinfo.baseUrl, key).then(function(working){
+              json(res, 200, {ok: true, working: working});
+            }).catch(function(){ json(res, 200, {ok: true, working: false}); });
+          } else {
+            json(res, 200, {ok: true, working: false});
+          }
+        }).catch(function(e){ json(res, 500, {ok:false, error: e.message}); });
+        return;
+      }
+      if (req.method === 'GET' && isTest) {
+        var cfg4 = loadServeConfig();
+        var keys4 = cfg4.providerKeys || {};
+        var key = String(keys4[pid] || '');
+        if (!key) { json(res, 200, {ok: true, working: false, hasKey: false}); return; }
+        var pinfo2 = providerInfo(pid);
+        if (pinfo2 && pinfo2.baseUrl) {
+          verifyProviderKey(pinfo2.baseUrl, key).then(function(working){
+            json(res, 200, {ok: true, working: working, hasKey: true});
+          }).catch(function(){ json(res, 200, {ok: true, working: false, hasKey: true}); });
+        } else {
+          json(res, 200, {ok: true, working: false, hasKey: true});
+        }
+        return;
+      }
     }
 
     res.writeHead(404, {'Content-Type': 'text/plain'});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oooooooooo/ch0de",
-  "version": "1.9.57",
+  "version": "1.9.59",
   "description": "The self-healing AI coding harness. Free tiers. HEMO auto-provisioning. Zero lock-in. Canonical brand: ch0de.",
   "main": "chode.js",
   "bin": {
@@ -151,7 +151,7 @@
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "1.32.2",
-    "@oooooooooo/ch0de": "^1.9.56",
+    "@oooooooooo/ch0de": "^1.9.58",
     "lean": "^0.1.1"
   },
   "devDependencies": {

package/serve-frontend.html

@@ -58,8 +58,9 @@ body { background: #000; color: #e0e0e0; font-family: "IBM Plex Mono", monospace
 .setting-select, .setting-input { background: #000; border: 1px solid #22dd5533; color: #e0e0e0; padding: 6px 10px; border-radius: 6px; font-family: inherit; font-size: 12px; outline: none; }
 .setting-select:focus, .setting-input:focus { border-color: #22dd55; }
 .setting-checkbox { width: 18px; height: 18px; accent-color: #22dd55; background: #000; border: 1px solid #22dd5533; cursor: pointer; }
-.provider-row { display: flex; align-items: center; justify-content: space-between; padding: 8px 0; border-bottom: 1px solid #141414; font-size: 12px; }
+.provider-row { display: flex; align-items: center; justify-content: space-between; padding: 8px 0; border-bottom: 1px solid #141414; font-size: 12px; cursor: pointer; }
 .provider-row:last-child { border-bottom: none; }
+.provider-row:hover { background: #141414; }
 #providersList { max-height: 340px; overflow-y: auto; border: 1px solid #141414; border-radius: 6px; padding: 10px; background: #000; margin-top: 8px; }
 .provider-info { display: flex; align-items: center; gap: 10px; flex: 1; }
 .provider-name { font-weight: bold; color: #e0e0e0; }
@@ -67,9 +68,27 @@ body { background: #000; color: #e0e0e0; font-family: "IBM Plex Mono", monospace
 .provider-status { font-size: 11px; padding: 2px 8px; border-radius: 4px; }
 .provider-status.free { background: #1a1a1a; color: #22dd55; border: 1px solid #22dd5533; }
 .provider-status.keyed { background: #1a1a1a; color: #ff9900; border: 1px solid #ff990033; }
+.provider-status.haskey { background: #1a1a1a; color: #22dd55; border: 1px solid #22dd5533; }
+.provider-status.working { background: #1a1a1a; color: #22dd55; border: 1px solid #22dd55; }
+.provider-status.badkey { background: #1a1a1a; color: #ff4444; border: 1px solid #ff444433; }
 .btn-save { background: #22dd55; color: #000; border: none; border-radius: 6px; padding: 8px 16px; font-family: inherit; font-weight: bold; cursor: pointer; margin-top: 20px; }
 .btn-save:hover { background: #3dffa0; }
 .btn-save:disabled { background: #1a1a1a; color: #666; cursor: not-allowed; }
+
+/* Key input modal */
+.key-modal-overlay { position: fixed; inset: 0; background: rgba(0,0,0,0.7); z-index: 100; display: none; }
+.key-modal { position: fixed; top: 20%; left: 25%; right: 25%; background: #0a0a0a; border: 1px solid #22dd5533; border-radius: 12px; z-index: 110; padding: 24px; display: none; box-shadow: 0 4px 20px rgba(0,0,0,0.4); }
+.key-modal.open, .key-modal-overlay.open { display: block; }
+.key-modal-title { color: #22dd55; font-weight: bold; font-size: 1.1rem; margin-bottom: 16px; }
+.key-modal-field { margin-bottom: 16px; }
+.key-modal-label { display: block; color: #888; font-size: 11px; text-transform: uppercase; letter-spacing: 1px; margin-bottom: 8px; }
+.key-modal-input { width: 100%; background: #000; border: 1px solid #22dd5533; color: #e0e0e0; padding: 10px 14px; border-radius: 6px; font-family: inherit; font-size: 13px; outline: none; }
+.key-modal-input:focus { border-color: #22dd55; }
+.key-modal-actions { display: flex; gap: 10px; margin-top: 20px; }
+.key-status { margin-top: 12px; padding: 8px 12px; border-radius: 6px; font-size: 12px; display: none; }
+.key-status.ok { background: #141414; color: #22dd55; border: 1px solid #22dd5533; display: block; }
+.key-status.err { background: #141414; color: #ff4444; border: 1px solid #ff444433; display: block; }
+.key-status.saving { background: #141414; color: #ff9900; border: 1px solid #ff990033; display: block; }
 </style>
 </head>
 <body>
@@ -175,6 +194,19 @@ body { background: #000; color: #e0e0e0; font-family: "IBM Plex Mono", monospace
     </div>
   </div>
 </div>
+<div class="key-modal-overlay" id="keyModalOverlay"></div>
+<div class="key-modal" id="keyModal">
+  <div class="key-modal-title" id="keyModalTitle">API Key</div>
+  <div class="key-modal-field">
+    <span class="key-modal-label" id="keyModalLabel">API Key</span>
+    <input type="password" id="keyModalInput" class="key-modal-input" placeholder="Enter API key">
+  </div>
+  <div class="key-modal-actions">
+    <button class="btn-save" id="keyCancelBtn" style="background:#141414;color:#e0e0e0;border:1px solid #22dd5533;">Cancel</button>
+    <button class="btn-save" id="keySubmitBtn">Save & Test</button>
+  </div>
+  <div class="key-status" id="keyStatus"></div>
+</div>
 <script>
 const API = "http://127.0.0.1:" + (window.location.port || "4096");
 let currentSessionId = null;
@@ -309,8 +341,10 @@ async function loadProviders() {
       select.appendChild(opt);
       var row = document.createElement("div");
       row.className = "provider-row";
-      var statusCls = p.requiresKey ? "keyed" : "free";
-      var statusText = p.requiresKey ? "needs API key" : "free";
+      var statusCls, statusText;
+      if (!p.requiresKey) { statusCls = "free"; statusText = "free"; }
+      else if (p.hasKey) { statusCls = "working"; statusText = "key saved"; }
+      else { statusCls = "keyed"; statusText = "needs API key"; }
       var extra = p.builtIn ? "" : ' <span style="font-size:10px;color:#888;margin-left:6px;">(' + (p.models||0) + ' models)</span>';
       row.innerHTML =
         '<div class="provider-info">' +
@@ -318,6 +352,7 @@ async function loadProviders() {
         '<div class="provider-id">' + escapeHtml(p.id) + (p.baseUrl ? ' · ' + escapeHtml(String(p.baseUrl).slice(0,40)) : '') + '</div>' +
         '</div>' +
         '<div class="provider-status ' + statusCls + '">' + statusText + '</div>';
+      row.onclick = function() { openKeyModal(p); };
       list.appendChild(row);
     });
   } catch(e) {}
@@ -366,6 +401,80 @@ function closeSettings() {
   settingsOpen = false;
 }
 
+var keyModalProvider = null;
+function openKeyModal(p) {
+  keyModalProvider = p;
+  document.getElementById("keyModalTitle").textContent = "API Key · " + (p.name || p.id);
+  document.getElementById("keyModalLabel").textContent = p.env ? ("API Key (" + p.env + ")") : "API Key";
+  document.getElementById("keyModalInput").value = "";
+  document.getElementById("keyStatus").style.display = "none";
+  document.getElementById("keyModalOverlay").classList.add("open");
+  document.getElementById("keyModal").classList.add("open");
+  document.getElementById("keyModalInput").focus();
+}
+function closeKeyModal() {
+  document.getElementById("keyModalOverlay").classList.remove("open");
+  document.getElementById("keyModal").classList.remove("open");
+  keyModalProvider = null;
+}
+async function submitKey() {
+  if (!keyModalProvider) return;
+  var input = document.getElementById("keyModalInput");
+  var key = input.value.trim();
+  if (!key) return;
+  var status = document.getElementById("keyStatus");
+  var btn = document.getElementById("keySubmitBtn");
+  status.textContent = "Saving and testing key…";
+  status.className = "key-status saving";
+  status.style.display = "block";
+  btn.disabled = true;
+  try {
+    const res = await fetch(API + "/api/provider/" + encodeURIComponent(keyModalProvider.id) + "/key", {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({ key: key })
+    });
+    const data = await res.json();
+    if (data.ok && data.working) {
+      status.textContent = "Key is working ✓";
+      status.className = "key-status ok";
+      // Refresh provider list to show updated status
+      await loadProviders();
+      setTimeout(closeKeyModal, 800);
+    } else {
+      status.textContent = "Key saved but could not be verified";
+      status.className = "key-status err";
+    }
+  } catch(e) {
+    status.textContent = "Error: " + e.message;
+    status.className = "key-status err";
+  } finally {
+    btn.disabled = false;
+  }
+}
+async function testKey() {
+  if (!keyModalProvider) return;
+  var status = document.getElementById("keyStatus");
+  status.textContent = "Testing key…";
+  status.className = "key-status saving";
+  status.style.display = "block";
+  try {
+    const res = await fetch(API + "/api/provider/" + encodeURIComponent(keyModalProvider.id) + "/key/test");
+    const data = await res.json();
+    if (data.ok && data.working) {
+      status.textContent = "Key is working ✓";
+      status.className = "key-status ok";
+      await loadProviders();
+    } else {
+      status.textContent = "Key verification failed";
+      status.className = "key-status err";
+    }
+  } catch(e) {
+    status.textContent = "Error: " + e.message;
+    status.className = "key-status err";
+  }
+}
+
 document.getElementById("newSessionBtn").onclick = createSession;
 document.getElementById("sendBtn").onclick = sendMessage;
 document.getElementById("messageInput").addEventListener("keypress", function(e) {
@@ -375,6 +484,12 @@ document.getElementById("settingsBtn").onclick = openSettings;
 document.getElementById("settingsClose").onclick = closeSettings;
 document.getElementById("settingsOverlay").onclick = function(e) { if (e.target === this) closeSettings(); };
 document.getElementById("settingsSave").onclick = function() { saveSettings(); closeSettings(); };
+document.getElementById("keyCancelBtn").onclick = closeKeyModal;
+document.getElementById("keySubmitBtn").onclick = submitKey;
+document.getElementById("keyModalOverlay").onclick = function(e) { if (e.target === this) closeKeyModal(); };
+document.getElementById("keyModalInput").addEventListener("keypress", function(e) {
+  if (e.key === "Enter") submitKey();
+});
 
 document.querySelectorAll(".settings-tab").forEach(function(tab) {
   tab.onclick = function() {