@polderlabs/bizar 6.2.0 → 6.2.2

package/cli/commands/validate.test.mjs

@@ -10,7 +10,7 @@
  */
 import { test, describe, beforeEach, afterEach } from 'node:test';
 import assert from 'node:assert/strict';
-import { mkdtempSync, mkdirSync, writeFileSync, rmSync, existsSync, readFileSync } from 'node:fs';
+import { mkdtempSync, mkdirSync, writeFileSync, rmSync, existsSync, readFileSync, chmodSync } from 'node:fs';
 import { tmpdir } from 'node:os';
 import { join } from 'node:path';
 import { Writable } from 'node:stream';
@@ -68,7 +68,7 @@ function makeFakeClineInstall(root) {
     'audit.md', 'bizar.md', 'explain.md', 'init.md', 'learn.md',
     'plan.md', 'plow-through.md', 'pr-review.md', 'tailscale-serve.md',
     'visual-plan.md',
-    'team.md', 'test.md', 'validate.md',
+    'team.md', 'test.md', 'validate.md', 'setup-provider.md',
   ]) {
     writeFileSync(join(cmdsDir, f), '# fake command');
   }
@@ -85,8 +85,10 @@ function makeFakeClineInstall(root) {
   }
   const hooksDir = join(root, 'hooks');
   mkdirSync(hooksDir, { recursive: true });
-  for (const h of ['pre-tool-use.md', 'post-tool-use.md', 'README.md']) {
-    writeFileSync(join(hooksDir, h), '# fake hook');
+  for (const h of ['PreToolUse', 'PostToolUse', 'TaskStart', 'TaskResume', 'UserPromptSubmit']) {
+    // Cline hooks must be executable scripts with a shebang line.
+    writeFileSync(join(hooksDir, h), '#!/usr/bin/env node\n// fake hook\n');
+    chmodSync(join(hooksDir, h), 0o755);
   }
   const pluginDir = join(root, 'plugins', 'bizar');
   mkdirSync(pluginDir, { recursive: true });
@@ -203,28 +205,54 @@ describe('runValidate() — JSON output', () => {
     assert.equal(exitCode, 1, 'should fail when enableAgentTeams is false');
   });
 
-  test('fails when provider config is missing', async () => {
+  test('passes when no provider is configured (v6.2.2+ — user must configure)', async () => {
+    // v6.2.2: the installer no longer touches provider config. The
+    // user must add their own provider. The provider-config check
+    // is therefore ALWAYS lenient — it just reports state.
     const cfg = JSON.parse(readFileSync(join(workDir, 'cline.json'), 'utf8'));
     delete cfg.provider;
     writeFileSync(join(workDir, 'cline.json'), JSON.stringify(cfg, null, 2));
-    const { exitCode } = await captureRun({ json: true });
-    assert.equal(exitCode, 1);
+    const { exitCode, stdout } = await captureRun({ json: true });
+    assert.equal(exitCode, 0, 'no-provider must not fail validation (v6.2.2+ contract)');
+    const parsed = JSON.parse(stdout);
+    const p = parsed.results.find((r) => r.name === 'provider-config');
+    assert.ok(p, 'provider-config check should be present');
+    assert.equal(p.ok, true, 'provider-config always returns ok (lenient)');
+    assert.match(p.message, /no provider configured/);
   });
 
-  test('passes when only 9router is configured (no minimax)', async () => {
+  test('reports user-configured providers when present', async () => {
+    // User has set up their own provider (anything goes).
     const cfg = JSON.parse(readFileSync(join(workDir, 'cline.json'), 'utf8'));
-    delete cfg.provider.minimax;
+    cfg.provider = {
+      'my-custom-provider': {
+        baseUrl: 'https://my-llm.example/v1',
+        apiKey: 'sk-test',
+        models: { 'my-model-1': {}, 'my-model-2': {} },
+      },
+    };
     writeFileSync(join(workDir, 'cline.json'), JSON.stringify(cfg, null, 2));
-    const { exitCode } = await captureRun({ json: true });
+    const { exitCode, stdout } = await captureRun({ json: true });
     assert.equal(exitCode, 0);
+    const parsed = JSON.parse(stdout);
+    const p = parsed.results.find((r) => r.name === 'provider-config');
+    assert.match(p.message, /my-custom-provider/);
+    assert.match(p.message, /2 models/);
   });
 
-  test('passes when only minimax is configured (no 9router)', async () => {
+  test('reports both providers if user has multiple', async () => {
     const cfg = JSON.parse(readFileSync(join(workDir, 'cline.json'), 'utf8'));
-    delete cfg.provider['9router'];
+    cfg.provider = {
+      'a': { baseUrl: 'https://a.example/v1', models: { 'm1': {} } },
+      'b': { baseUrl: 'https://b.example/v1', models: { 'm2': {}, 'm3': {} } },
+    };
     writeFileSync(join(workDir, 'cline.json'), JSON.stringify(cfg, null, 2));
-    const { exitCode } = await captureRun({ json: true });
+    const { exitCode, stdout } = await captureRun({ json: true });
     assert.equal(exitCode, 0);
+    const parsed = JSON.parse(stdout);
+    const p = parsed.results.find((r) => r.name === 'provider-config');
+    assert.match(p.message, /\ba\b/);
+    assert.match(p.message, /\bb\b/);
   });
 
   test('default mode is lenient on 9router-unreachable', async () => {

package/cli/provision.mjs

@@ -38,7 +38,7 @@
 
 import chalk from 'chalk';
 import { execSync, spawn, spawnSync } from 'node:child_process';
-import { existsSync, readFileSync, readdirSync, rmSync, writeFileSync, mkdirSync, statSync, copyFileSync } from 'node:fs';
+import { existsSync, readFileSync, readdirSync, rmSync, writeFileSync, mkdirSync, statSync, copyFileSync, chmodSync } from 'node:fs';
 import { homedir } from 'node:os';
 import { join, dirname, sep } from 'node:path';
 import { fileURLToPath } from 'node:url';
@@ -860,94 +860,69 @@ export async function patchClineJson({ dryRun, force }) {
     (p) => Array.isArray(p) && typeof p[0] === 'string' && p[0].includes('plugins/bizar'),
   );
 
-  // v6.2.0 — Multi-patch installer. On every install/update, ensure the
-  // full Bizar config surface is present in cline.json:
+  // v6.2.2 — Multi-patch installer. On every install/update, ensure the
+  // Bizar config surface is present in cline.json:
   //
-  //   1. provider.9router (preferred gateway since v6.0.1) — add if
-  //      missing so the install is "complete" out of the box.
-  //   2. provider.minimax (legacy fallback) — kept for back-compat.
-  //   3. default_agent — set to "odin" if missing.
-  //   4. $schema — add if missing (helps editors validate).
-  //   5. instructions — point at .cline/instructions/bizar-tools.md if
-  //      missing, so Cline loads the tool reference on every session.
-  //   6. plugin entry — add if missing (the critical one; without this
+  //   1. plugin entry — add if missing (the critical one; without this
   //      the Bizar plugin never loads).
-  //   7. permissions — set to "allow" if missing.
-  //   8. snapshot — set to false if missing.
+  //   2. default_agent — set to "odin" if missing.
+  //   3. $schema — add if missing (helps editors validate).
+  //   4. instructions — point at .cline/instructions/bizar-tools.md if
+  //      missing, so Cline loads the tool reference on every session.
+  //   5. permissions — set to "allow" if missing.
+  //   6. snapshot — set to false if missing.
+  //
+  // v6.2.2 REMOVED:
+  //   - provider.9router (was added automatically in v6.0.1–v6.2.1)
+  //   - provider.minimax (legacy fallback)
+  //
+  // Per user request: "the installer should do nothing with providers,
+  // the user has to configure it themselves." The user picks their own
+  // provider, plugs in their API key, and configures which model catalog
+  // to use. The installer just sets up the Bizar scaffolding (plugin
+  // entry, default agent, schema, instructions, etc.) and stays out of
+  // provider configuration entirely.
   //
   // All patches are additive and idempotent. We never overwrite a value
   // the user has set; the `force` flag bypasses that protection for the
   // plugin entry only.
-  let addedProvider = false;
   let addedDefaultAgent = false;
   let addedSchema = false;
   let addedInstructions = false;
   let addedPermissions = false;
   let addedSnapshot = false;
-  let added9router = false;
-
-  if (!cfg.provider) cfg.provider = {};
-
-  // 1. provider.9router — preferred gateway.
-  if (!cfg.provider['9router'] && existsSync(join(REPO_ROOT, 'config', 'cline.json'))) {
-    try {
-      const tpl = JSON.parse(readFileSync(join(REPO_ROOT, 'config', 'cline.json'), 'utf8'));
-      if (tpl.provider && tpl.provider['9router']) {
-        cfg.provider['9router'] = tpl.provider['9router'];
-        added9router = true;
-      }
-    } catch { /* ignore template parse errors */ }
-  }
-
-  // 2. provider.minimax — legacy fallback.
-  const DEFAULT_MINIMAX_BLOCK = {
-    options: {
-      baseURL: 'https://api.minimax.io/v1',
-      apiKey: '{env:MiniMax_API_KEY}',
-    },
-    models: {
-      'MiniMax-M2.7-Flash': { name: 'MiniMax M2.7 Flash', interleaved: { field: 'reasoning_details' }, reasoning: true },
-      'MiniMax-M2.7': { name: 'MiniMax M2.7', interleaved: { field: 'reasoning_details' }, reasoning: true },
-      'MiniMax-M3': { name: 'MiniMax M3', interleaved: { field: 'reasoning_details' }, reasoning: true },
-      'MiniMax-M3-Reasoning': { name: 'MiniMax M3 Reasoning', interleaved: { field: 'reasoning_details' }, reasoning: true },
-    },
-  };
-  if (!cfg.provider.minimax) {
-    cfg.provider.minimax = DEFAULT_MINIMAX_BLOCK;
-    addedProvider = true;
-  }
 
-  // 3. default_agent
+  // 1. default_agent
   if (!cfg.default_agent) {
     cfg.default_agent = 'odin';
     addedDefaultAgent = true;
   }
 
-  // 4. $schema
+  // 2. $schema
   if (!cfg.$schema) {
     cfg.$schema = 'https://docs.cline.bot/config.json';
     addedSchema = true;
   }
 
-  // 5. instructions — point at the bundled Bizar tools reference.
+  // 3. instructions — point at the bundled Bizar tools reference.
   if (!cfg.instructions || (Array.isArray(cfg.instructions) && cfg.instructions.length === 0)) {
     cfg.instructions = ['.cline/instructions/bizar-tools.md'];
     addedInstructions = true;
   }
 
-  // 6. permission
+  // 4. permission
   if (!cfg.permission) {
     cfg.permission = 'allow';
     addedPermissions = true;
   }
 
-  // 7. snapshot
+  // 5. snapshot
   if (typeof cfg.snapshot !== 'boolean') {
     cfg.snapshot = false;
     addedSnapshot = true;
   }
 
-  const anyAdded = addedProvider || added9router || addedDefaultAgent || addedSchema
+  const anyAdded = addedDefaultAgent || addedSchema
     || addedInstructions || addedPermissions || addedSnapshot;
 
   if (hasEntry && !force && !anyAdded) {
@@ -957,8 +932,6 @@ export async function patchClineJson({ dryRun, force }) {
   if (dryRun) {
     const added = [];
     if (!hasEntry) added.push('plugin entry');
-    if (added9router) added.push('provider.9router');
-    if (addedProvider) added.push('provider.minimax');
     if (addedDefaultAgent) added.push('default_agent');
     if (addedSchema) added.push('$schema');
     if (addedInstructions) added.push('instructions');
@@ -988,8 +961,6 @@ export async function patchClineJson({ dryRun, force }) {
   writeFileSync(cfgPath, JSON.stringify(cfg, null, 2) + '\n');
   const added = [];
   if (!hasEntry) added.push('plugin entry');
-  if (added9router) added.push('provider.9router');
-  if (addedProvider) added.push('provider.minimax');
   if (addedDefaultAgent) added.push('default_agent');
   if (addedSchema) added.push('$schema');
   if (addedInstructions) added.push('instructions');
@@ -1278,12 +1249,47 @@ export async function syncConfigExtras({ dryRun }) {
   }
 
   // ── Hooks ────────────────────────────────────────────────────
+  // v6.2.1 — Cline hooks are real executable scripts (PreToolUse,
+  // PostToolUse, TaskStart, TaskResume, UserPromptSubmit). They live in
+  // `~/.cline/hooks/` AND `~/Documents/Cline/Hooks/`. Cline only loads
+  // hooks from the second path (the first is for additional runtime
+  // hook injection via `--hooks-dir`), but we install to BOTH so:
+  //   1. `bizar validate` can verify the hooks are on disk.
+  //   2. Power users who pass `--hooks-dir ~/.cline/hooks` get them.
+  //   3. The official `~/Documents/Cline/Hooks/` location is canonical
+  //      and works without any extra config.
+  //
+  // Hooks must be `chmod +x` executable (Cline silently skips
+  // non-executable hook files per the Cline hooks contract).
   const hooksSrc = join(REPO_ROOT, 'config', 'hooks');
   if (existsSync(hooksSrc)) {
-    const hooksDst = join(CLINE_DIR, 'hooks');
-    mkdirSync(hooksDst, { recursive: true });
-    await copyDirIfExists(hooksSrc, hooksDst);
-    counts.hooks = 1;
+    const hookEntries = readdirSync(hooksSrc, { withFileTypes: true });
+    const hookFiles = hookEntries
+      .filter((e) => e.isFile() && !e.name.endsWith('.md') && !e.name.endsWith('.txt'))
+      .map((e) => e.name);
+
+    // Install to ~/.cline/hooks/ (used by --hooks-dir override)
+    const hooksDst1 = join(CLINE_DIR, 'hooks');
+    mkdirSync(hooksDst1, { recursive: true });
+    for (const hookFile of hookFiles) {
+      const src = join(hooksSrc, hookFile);
+      const dst = join(hooksDst1, hookFile);
+      copyFileSync(src, dst);
+      try { chmodSync(dst, 0o755); } catch { /* best-effort */ }
+    }
+
+    // Also install to the canonical location: ~/Documents/Cline/Hooks/
+    // (Cline's default global hooks directory per the official docs)
+    const hooksDst2 = join(HOME, 'Documents', 'Cline', 'Hooks');
+    mkdirSync(hooksDst2, { recursive: true });
+    for (const hookFile of hookFiles) {
+      const src = join(hooksSrc, hookFile);
+      const dst = join(hooksDst2, hookFile);
+      copyFileSync(src, dst);
+      try { chmodSync(dst, 0o755); } catch { /* best-effort */ }
+    }
+
+    counts.hooks = hookFiles.length;
   }
 
   // ── Rules ────────────────────────────────────────────────────
@@ -1938,29 +1944,33 @@ export async function runProvision(opts = {}) {
     console.log(chalk.green(`\n  ✓ ${mode === 'update' ? 'Update' : 'Install'} complete\n`));
   }
 
-  // ── 13. API key bootstrap warning ────────────────────────────────────
-  // v5.x — After a successful install, check whether any API keys are
-  // configured. If not, surface a prominent warning (but don't block —
-  // many users configure keys later).
+  // ── 13. Provider bootstrap warning ───────────────────────────────
+  // v6.2.2 — The installer no longer configures a provider. The user
+  // must add their own. After a successful install, surface a clear
+  // hint pointing them at the right places.
   if (mode === 'install' && !dryRun && !anyFail) {
-    const envJsonPath = join(BIZAR_HOME, 'env.json');
-    const marker = readInstallMarker();
-    const hasApiKeys = Boolean(
-      process.env.OPENAI_API_KEY ||
-      process.env.ANTHROPIC_API_KEY ||
-      process.env.MINIMAX_API_KEY ||
-      (existsSync(envJsonPath) && (() => {
-        try {
-          const env = JSON.parse(readFileSync(envJsonPath, 'utf8'));
-          return Boolean(env?.OPENAI_API_KEY || env?.ANTHROPIC_API_KEY || env?.MINIMAX_API_KEY);
-        } catch { return false; }
-      })())
-    );
-    if (!hasApiKeys) {
-      console.log(chalk.yellow('  ⚠  No API keys configured.'));
-      console.log(chalk.yellow('     Run `bizar connect` to add providers.'));
-      const dashPort = process.env.BIZAR_DASHBOARD_PORT || '4097';
-      console.log(chalk.yellow(`     Or visit http://localhost:${dashPort}/connect after starting the dashboard.`));
+    const cfgPath = join(CLINE_DIR, 'cline.json');
+    const cfg = readJsonSafe(cfgPath, null);
+    const hasProvider = cfg && cfg.provider && Object.keys(cfg.provider).length > 0;
+    if (!hasProvider) {
+      console.log(chalk.yellow('  ⚠  No provider configured in cline.json.'));
+      console.log(chalk.yellow('     `bizar install` no longer touches provider config (v6.2.2+).'));
+      console.log(chalk.yellow('     You must add one yourself — see the "Provider setup" section below.'));
+      console.log('');
+      console.log(chalk.cyan('  ┌─ Provider setup ─────────────────────────────────────────────┐'));
+      console.log(chalk.cyan('  │ 1. Edit ~/.cline/cline.json and add a `provider` block:        │'));
+      console.log(chalk.cyan('  │    { "provider": { "9router": {                              │'));
+      console.log(chalk.cyan('  │        "baseUrl": "http://localhost:20128/v1",                │'));
+      console.log(chalk.cyan('  │        "apiKey": "<your-key>",                                │'));
+      console.log(chalk.cyan('  │        "models": { "minimax/MiniMax-M3": {},                  │'));
+      console.log(chalk.cyan('  │                    "minimax/MiniMax-M2.7": {} } } }            │'));
+      console.log(chalk.cyan('  │                                                              │'));
+      console.log(chalk.cyan('  │ 2. Or run `bizar connect` for an interactive TUI setup.       │'));
+      console.log(chalk.cyan('  └──────────────────────────────────────────────────────────────┘'));
+      console.log('');
+      console.log(chalk.dim('  Models available at http://localhost:20128/v1/models:'));
+      console.log(chalk.dim('    minimax/MiniMax-M3, minimax/MiniMax-M2.7, nvidia/minimaxai/minimax-m3,'));
+      console.log(chalk.dim('    nvidia/z-ai/glm-5.2, nvidia/deepseek-ai/deepseek-v4-pro, etc.'));
       console.log('');
     }
   }

package/config/agents/baldr.md

@@ -1,7 +1,7 @@
 ---
 description: Baldr — UI/UX design system specialist. Creates DESIGN.md files using Google's design.md standard. Aesthetic direction, typography, design tokens, anti-slop audits. Does not implement code.
 mode: subagent
-model: minimax/MiniMax-M2.7
+model: minimaxcustom/MiniMax-M2.7
 color: "#ec4899"
 permission:
   read: allow

package/config/agents/forseti.md

@@ -1,7 +1,7 @@
 ---
 description: Forseti — Audits, criticizes, and corrects implementation plans before execution. No write permissions. Review only.
 mode: subagent
-model: minimax/MiniMax-M3
+model: minimaxcustom/MiniMax-M3
 color: "#ef4444"
 permission:
   read: allow

package/config/agents/frigg.md

@@ -1,7 +1,7 @@
 ---
 description: Frigg — Read-only codebase Q&A. Answers questions about the project with file references, never modifies anything. Routes to no one.
 mode: subagent
-model: minimax/MiniMax-M2.7
+model: minimaxcustom/MiniMax-M2.7
 color: "#f472b6"
 permission:
   read: allow

package/config/agents/heimdall.md

@@ -1,7 +1,7 @@
 ---
 description: Heimdall — Simple, routine, and deterministic tasks using DeepSeek. Quick edits, mechanical work, file operations. The ever-watchful guardian.
 mode: subagent
-model: minimax/MiniMax-M2.7
+model: minimaxcustom/MiniMax-M2.7
 color: "#10b981"
 permission:
   read: allow

package/config/agents/hermod.md

@@ -1,7 +1,7 @@
 ---
 description: Hermod — Git and GitHub operations specialist using MiniMax M2.7. The only agent allowed to perform write-level git (commit, push, merge, rebase, branch) and `gh` CLI operations.
 mode: subagent
-model: minimax/MiniMax-M2.7
+model: minimaxcustom/MiniMax-M2.7
 color: "#f59e0b"
 permission:
   read: allow

package/config/agents/mimir.md

@@ -1,7 +1,7 @@
 ---
 description: Mimir — Deep codebase research and exploration. Uses Semble as primary search tool. Architecture analysis, pattern discovery, documentation research, and project initialization.
 mode: subagent
-model: minimax/MiniMax-M2.7
+model: minimaxcustom/MiniMax-M2.7
 color: "#06b6d4"
 permission:
   read: allow

package/config/agents/odin.md

@@ -1,7 +1,7 @@
 ---
 description: Odin — Pure router that delegates all work to subagents. Routes across Frigg (DeepSeek/Q&A), Vör (DeepSeek/clarify), Mimir (DeepSeek/research), Heimdall (DeepSeek/simple), Hermod (M2.7/git), Thor (M2.7/mid), Baldr (M2.7/design), Tyr (M3/top), Vidarr (GPT-5.5/ultra), Forseti (verifier/M3).
 mode: primary
-model: minimax/MiniMax-M3
+model: minimaxcustom/MiniMax-M3
 color: "#6366f1"
 permission:
   task: allow

package/config/agents/quick.md

@@ -1,7 +1,7 @@
 ---
 description: Quick (quick) — fast single-shot tasks. No delegation, no parallel streams. Use for small edits, mechanical changes, one-shot questions. Routes to no one.
 mode: primary
-model: minimax/MiniMax-M2.7-Flash
+model: minimaxcustom/MiniMax-M2.7-highspeed
 color: "#22d3ee"
 permission:
   read: allow

package/config/agents/semble-search.md

@@ -1,7 +1,7 @@
 ---
 description: Code search agent for exploring any codebase. Use for finding code by intent, locating implementations, understanding how something works, or discovering related code. Prefer over Bash/Read for any semantic or exploratory question.
 mode: subagent
-model: minimax/MiniMax-M2.7
+model: minimaxcustom/MiniMax-M2.7
 color: "#64748b"
 permission:
   read: allow

package/config/agents/thor.md

@@ -1,7 +1,7 @@
 ---
 description: Thor — Handles medium-complexity implementation tasks using MiniMax M2.7. New features, non-trivial debugging, refactoring, code review, and writing tests.
 mode: subagent
-model: minimax/MiniMax-M2.7
+model: minimaxcustom/MiniMax-M2.7
 color: "#a855f7"
 permission:
   read: allow

package/config/agents/tyr.md

@@ -1,7 +1,7 @@
 ---
 description: Tyr — Handles the most complex implementation, debugging, and architectural work using MiniMax M3. Reserved for the hardest problems. Always plan-then-Forseti-gate.
 mode: subagent
-model: minimax/MiniMax-M3
+model: minimaxcustom/MiniMax-M3
 color: "#dc2626"
 permission:
   read: allow

package/config/agents/vidarr.md

@@ -1,7 +1,7 @@
 ---
 description: Vidarr — The ultimate fallback via MiniMax M3. For the hardest problems when Tyr stalls, debugging is stuck, or novel insight is needed. Use sparingly — highest cost.
 mode: subagent
-model: minimax/MiniMax-M3
+model: minimaxcustom/MiniMax-M3
 color: "#0ea5e9"
 permission:
   read: allow

package/config/agents/vor.md

@@ -1,7 +1,7 @@
 ---
 description: Vör — Asks clarifying questions for ambiguous or incomplete requests. Reads project context first, then asks one targeted, project-specific question.
 mode: subagent
-model: minimax/MiniMax-M2.7
+model: minimaxcustom/MiniMax-M2.7
 color: "#a78bfa"
 permission:
   read: allow