@polderlabs/bizar 10.23.3 → 10.23.5

package/cli/bin.mjs

@@ -113,7 +113,7 @@ function showHelp() {
     backup                 Create / list / verify / delete backups of BizarHarness state
     restore                Restore BizarHarness from a backup
     validate               Validate the Bizar install
-    setup-provider         Configure a provider in ~/.claude/settings.json (since v6.2.2 installer doesn't touch providers)
+    setup-provider         Configure the global provider used by Bizar and Claude Code
     release-provenance     Generate SBOM + provenance + minisig for a release (audit #83)
     verify-release         Verify a release artifact set against the pinned allowlist
     spec-list              List SDK schemas, policy docs, and mirror sync status (audit #84)

package/cli/commands/install.mjs

@@ -29,7 +29,8 @@ export function showInstallHelp() {
                                         from the repo. Preserves ~/.config/bizar/
                                         login state. Combine with --yes to skip prompts.
     bizar install --deep                Alias for --force (clean-install semantics)
-    bizar install --yes                 Assume yes for any non-destructive prompt
+    bizar install --yes                 Non-interactive install (CI/script friendly)
+    bizar install --non-interactive     Alias for --yes
     bizar install --help                Show this help
 
   Description:
@@ -59,8 +60,13 @@ export function showInstallHelp() {
     4. Registers the Bizar MCP server in ~/.claude/settings.json.
     5. Wires Claude Code lifecycle hooks (SessionStart / PreToolUse /
        PostToolUse / UserPromptSubmit) under ~/.claude/hooks/.
-    6. Runs 'bizar doctor' as a post-install health check.
-    No API key collection, no interactive prompts.
+    6. In a terminal, confirms the install and securely asks for a provider
+       URL and key only when they are not already configured.
+    7. Runs 'bizar doctor' as a post-install health check.
+
+    Provider settings are global (~/.claude/settings.json), so they work from
+    every project. Key input is hidden. Use --yes or --non-interactive to skip
+    all prompts; missing provider values then produce actionable guidance.
   `);
 }
 

package/cli/commands/setup-provider.mjs

@@ -2,7 +2,7 @@
  * Configure Claude Code's provider environment in settings.json.
  *
  * Bizar does not maintain a parallel provider registry. Claude Code reads
- * ANTHROPIC_BASE_URL, ANTHROPIC_API_KEY, and ANTHROPIC_MODEL directly.
+ * ANTHROPIC_BASE_URL, ANTHROPIC_AUTH_TOKEN, and ANTHROPIC_MODEL directly.
  */
 import chalk from 'chalk';
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
@@ -41,10 +41,16 @@ export function parseProviderArgs(args = []) {
 
 export function updateProviderSettings(current, options) {
   const next = { ...current, env: { ...(current.env || {}) } };
-  if (options.gateway !== undefined) next.env.ANTHROPIC_BASE_URL = options.gateway;
-  if (options.key !== undefined) next.env.ANTHROPIC_API_KEY = options.key;
+  if (options.gateway !== undefined) {
+    next.env.ANTHROPIC_BASE_URL = options.gateway;
+    next.env.BIZAR_MODEL_ROUTER_URL = options.gateway;
+  }
+  if (options.key !== undefined) next.env.ANTHROPIC_AUTH_TOKEN = options.key;
   if (options.model !== undefined) next.env.ANTHROPIC_MODEL = options.model;
-  if (options.removeKey) delete next.env.ANTHROPIC_API_KEY;
+  if (options.removeKey) {
+    delete next.env.ANTHROPIC_AUTH_TOKEN;
+    delete next.env.ANTHROPIC_API_KEY;
+  }
   return next;
 }
 
@@ -81,9 +87,9 @@ export async function runSetupProvider(args = []) {
 
   if (options.list) {
     console.log(`  Settings: ${path}`);
-    console.log(`  Gateway: ${current.env?.ANTHROPIC_BASE_URL || '(Anthropic default)'}`);
+    console.log(`  Gateway: ${current.env?.ANTHROPIC_BASE_URL || current.env?.BIZAR_MODEL_ROUTER_URL || '(Anthropic default)'}`);
     console.log(`  Model:   ${current.env?.ANTHROPIC_MODEL || '(Claude Code default)'}`);
-    console.log(`  API key: ${redact(current.env?.ANTHROPIC_API_KEY)}`);
+    console.log(`  API key: ${redact(current.env?.ANTHROPIC_AUTH_TOKEN || current.env?.ANTHROPIC_API_KEY)}`);
     return { ok: true, path, settings: current };
   }
 

package/cli/install/index.mjs

@@ -9,6 +9,7 @@ import { runProvision, forceCleanInstall, clearSavedEnv } from '../provision.mjs
 import { runDoctor } from '../doctor.mjs';
 import { showBanner, sectionHeading } from './banner.mjs';
 import { printInstallLocations } from './paths.mjs';
+import { runInteractiveSetup } from './interactive-setup.mjs';
 
 /**
  * Thin orchestrator entry point.
@@ -43,6 +44,15 @@ export async function runInstaller(opts = {}) {
   showBanner();
   printInstallLocations({ dryRun, force });
 
+  // A normal TTY install is a guided setup. Automation remains prompt-free
+  // via --yes / --non-interactive, and update runs never request credentials.
+  let interactive = null;
+  if (mode !== 'update' && !dryRun) {
+    interactive = await runInteractiveSetup({ enabled: !yes });
+    if (!interactive.ok) return { ok: false, interactive };
+    if (interactive.cancelled) return { ok: true, cancelled: true, interactive };
+  }
+
   // F-183 — pre-provision wipe for forced installs. Force-clean is what
   // makes `--force` actually a clean install: dirs under ~/.claude/ are
   // wiped (BIZAR_HOME and third-party state preserved), settings.json
@@ -94,5 +104,5 @@ export async function runInstaller(opts = {}) {
     }
   }
 
-  return { ...provisionResult, clean };
-}
+  return { ...provisionResult, clean, interactive };
+}

package/cli/install/interactive-setup.mjs

@@ -0,0 +1,131 @@
+import { existsSync, readFileSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import { Writable } from 'node:stream';
+import { createInterface } from 'node:readline/promises';
+
+export function providerSettingsPath(env = process.env) {
+  const root = env.CLAUDE_CONFIG_DIR?.trim()
+    || join(env.HOME?.trim() || homedir(), '.claude');
+  return join(root, 'settings.json');
+}
+
+export function readProviderSettings(path = providerSettingsPath()) {
+  if (!existsSync(path)) return {};
+  return JSON.parse(readFileSync(path, 'utf8'));
+}
+
+export function detectProviderConfiguration({ env = process.env, settings = {} } = {}) {
+  const settingsEnv = settings?.env && typeof settings.env === 'object' ? settings.env : {};
+  const url = env.BIZAR_MODEL_ROUTER_URL?.trim()
+    || env.ANTHROPIC_BASE_URL?.trim()
+    || settingsEnv.BIZAR_MODEL_ROUTER_URL?.trim()
+    || settingsEnv.ANTHROPIC_BASE_URL?.trim()
+    || '';
+  const key = env.ANTHROPIC_AUTH_TOKEN?.trim()
+    || env.ANTHROPIC_API_KEY?.trim()
+    || settingsEnv.ANTHROPIC_AUTH_TOKEN?.trim()
+    || settingsEnv.ANTHROPIC_API_KEY?.trim()
+    || '';
+  return { url, key, missing: [...(!url ? ['url'] : []), ...(!key ? ['key'] : [])] };
+}
+
+export function isValidProviderUrl(value) {
+  try {
+    const parsed = new URL(value);
+    return parsed.protocol === 'https:' || parsed.protocol === 'http:';
+  } catch {
+    return false;
+  }
+}
+
+export async function askLine(prompt, { input = process.stdin, output = process.stdout } = {}) {
+  const rl = createInterface({ input, output });
+  try {
+    return await rl.question(prompt);
+  } finally {
+    rl.close();
+  }
+}
+
+/** Read a secret through readline without forwarding its terminal redraws. */
+export async function askSecret(prompt, { input = process.stdin, output = process.stdout } = {}) {
+  const muted = new Writable({
+    write(_chunk, _encoding, callback) { callback(); },
+  });
+  const rl = createInterface({ input, output: muted, terminal: true });
+  output.write(prompt);
+  try {
+    return await rl.question('');
+  } finally {
+    rl.close();
+    output.write('\n');
+  }
+}
+
+function writeLine(output, value = '') {
+  output.write(`${value}\n`);
+}
+
+/**
+ * Guided install preflight. Credentials are placed only in the current
+ * process; the provisioner's settings writer persists them globally with the
+ * rest of the install. Injected question functions keep the policy testable.
+ */
+export async function runInteractiveSetup({
+  env = process.env,
+  input = process.stdin,
+  output = process.stdout,
+  enabled = true,
+  readSettings = readProviderSettings,
+  askText = askLine,
+  askHidden = askSecret,
+} = {}) {
+  let settings;
+  try {
+    settings = readSettings(providerSettingsPath(env));
+  } catch (error) {
+    return { ok: false, error: `Cannot read global Claude settings: ${error.message}` };
+  }
+
+  const detected = detectProviderConfiguration({ env, settings });
+  const interactive = enabled && input.isTTY === true && output.isTTY === true;
+  if (!interactive) {
+    if (detected.missing.length > 0) {
+      writeLine(output, `  ! Provider ${detected.missing.join(' and ')} not detected; set ANTHROPIC_BASE_URL and ANTHROPIC_AUTH_TOKEN or run \`bizar setup-provider\`.`);
+    }
+    return { ok: true, interactive: false, configured: detected.missing.length === 0, missing: detected.missing };
+  }
+
+  writeLine(output, '');
+  writeLine(output, '  Interactive setup');
+  const confirmation = (await askText('  Continue with the installation? [Y/n] ', { input, output })).trim().toLowerCase();
+  if (confirmation === 'n' || confirmation === 'no') {
+    writeLine(output, '  Installation cancelled.');
+    return { ok: true, interactive: true, cancelled: true, configured: detected.missing.length === 0 };
+  }
+
+  let url = detected.url;
+  let key = detected.key;
+  if (url) writeLine(output, `  ✓ Provider URL detected: ${url}`);
+  while (!url) {
+    const answer = (await askText('  Provider URL (for example https://gateway.example/v1): ', { input, output })).trim();
+    if (!isValidProviderUrl(answer)) {
+      writeLine(output, '  ! Enter a valid http:// or https:// URL.');
+      continue;
+    }
+    url = answer.replace(/\/+$/, '');
+  }
+
+  if (key) writeLine(output, '  ✓ Provider key detected (hidden)');
+  while (!key) {
+    key = (await askHidden('  Provider API key (input hidden): ', { input, output })).trim();
+    if (!key) writeLine(output, '  ! Provider key cannot be empty.');
+  }
+
+  env.ANTHROPIC_BASE_URL = url;
+  env.BIZAR_MODEL_ROUTER_URL = url;
+  env.ANTHROPIC_AUTH_TOKEN = key;
+  writeLine(output, '  ✓ Provider configuration ready; the key will be stored in global Claude settings.');
+  return { ok: true, interactive: true, cancelled: false, configured: true, missing: detected.missing };
+}

package/cli/provision.mjs

@@ -1000,7 +1000,7 @@ export function writeClaudeSettings({ dryRun = false, force = false } = {}) {
   // malformed router has no enabled candidate; dispatch will fail closed.
   if (installModel) {
     merged.model = installModel;
-    merged.modelOverrides = { [installModel]: installModel };
+    merged.modelOverrides = bizarSettings.modelOverrides;
   }
 
   // Auto-compaction is part of the Bizar reliability contract. Remove legacy

package/config/claude/commands/setup-provider.md

@@ -14,10 +14,13 @@ bizar setup-provider --remove-key
 ```
 
 The command edits only `env.ANTHROPIC_BASE_URL`,
-`env.ANTHROPIC_API_KEY`, and `env.ANTHROPIC_MODEL` in
+`env.BIZAR_MODEL_ROUTER_URL`, `env.ANTHROPIC_AUTH_TOKEN`, and
+`env.ANTHROPIC_MODEL` in
 `~/.claude/settings.json` (or `$CLAUDE_CONFIG_DIR/settings.json`).
 All unrelated settings are preserved. It rejects invalid existing JSON
 and never prints a full API key.
 
 With no arguments it shows help; it does not guess credentials or query
-an untrusted model catalog.
+an untrusted model catalog. A normal `bizar install` provides the safer
+interactive path with hidden key entry; this command remains useful for
+automation and explicit changes.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@polderlabs/bizar",
-  "version": "10.23.3",
+  "version": "10.23.5",
   "description": "Autonomous, human-in-the-loop multi-agent harness for Claude Code with guarded workflows, typed SDK primitives, and MCP tools.",
   "type": "module",
   "bin": {

package/packages/sdk/dist/version.d.ts

@@ -1,5 +1,5 @@
 /**
  * SDK version constant. Keep synchronized with the workspace package versions.
  */
-export declare const SDK_VERSION: "10.23.3";
+export declare const SDK_VERSION: "10.23.5";
 //# sourceMappingURL=version.d.ts.map

package/packages/sdk/dist/version.js

@@ -1,5 +1,5 @@
 /**
  * SDK version constant. Keep synchronized with the workspace package versions.
  */
-export const SDK_VERSION = "10.23.3";
+export const SDK_VERSION = "10.23.5";
 //# sourceMappingURL=version.js.map

package/packages/sdk/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@polderlabs/bizar-sdk",
-  "version": "10.23.3",
+  "version": "10.23.5",
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",