@sean.holung/minicode 0.3.4 → 0.3.6

package/dist/tests/serve.integration.test.js

@@ -1,9 +1,12 @@
 import assert from "node:assert/strict";
 import { test, afterEach } from "node:test";
 import { createServer } from "node:http";
-import { mkdirSync, writeFileSync, rmSync } from "node:fs";
+import { mkdirSync, mkdtempSync, readFileSync, writeFileSync, rmSync } from "node:fs";
+import os from "node:os";
+import path from "node:path";
 import { createRequestHandler, shutdownServe } from "../src/serve/server.js";
 import { AgentBridge } from "../src/serve/agent-bridge.js";
+import { Session } from "@minicode/agent-sdk";
 import { createTestAgentConfig } from "./test-utils.js";
 /**
  * Lightweight AgentBridge subclass for testing.
@@ -12,7 +15,11 @@ import { createTestAgentConfig } from "./test-utils.js";
 class MockBridge extends AgentBridge {
     _busy = false;
     _currentSessionId = "sess-1";
+    _baseConfig = createTestAgentConfig("/tmp/test-workspace");
+    _config = createTestAgentConfig("/tmp/test-workspace");
     turnHistory = [];
+    openRouterKey;
+    openRouterSessionActive = false;
     constructor() {
         super(() => { }, false);
     }
@@ -20,7 +27,7 @@ class MockBridge extends AgentBridge {
         return this._busy;
     }
     getConfig() {
-        return createTestAgentConfig("/tmp/test-workspace");
+        return this._config;
     }
     async runTurn(message) {
         if (this._busy)
@@ -65,11 +72,47 @@ class MockBridge extends AgentBridge {
     async loadSess(label) {
         if (label === "nonexistent")
             return null;
-        return { session: {}, label };
+        const session = new Session("sess-1");
+        session.addMessage({
+            role: "user",
+            content: "[Conversation Summary — earlier messages were compacted to save context]\nOlder summary",
+        });
+        for (let i = 1; i <= 11; i += 1) {
+            session.addMessage({
+                role: i % 2 === 0 ? "assistant" : "user",
+                content: `message-${i}`,
+            });
+        }
+        return { session, label };
     }
     getCurrentSessionId() {
         return this._currentSessionId;
     }
+    connectOpenRouter(apiKey) {
+        this.openRouterKey = apiKey;
+        this.openRouterSessionActive = true;
+        this._config.modelProvider = "openai-compatible";
+        this._config.openAiBaseUrl = "https://openrouter.ai/api/v1";
+        this._config.openAiApiKey = apiKey;
+    }
+    disconnectOpenRouter() {
+        if (!this.openRouterSessionActive) {
+            return false;
+        }
+        this.openRouterSessionActive = false;
+        this.openRouterKey = undefined;
+        this._config.modelProvider = this._baseConfig.modelProvider;
+        this._config.model = this._baseConfig.model;
+        this._config.openAiBaseUrl = this._baseConfig.openAiBaseUrl;
+        delete this._config.openAiApiKey;
+        return true;
+    }
+    isOpenRouterSessionConnected() {
+        return this.openRouterSessionActive;
+    }
+    switchModel(modelId) {
+        this._config.model = modelId;
+    }
     setBusy(busy) {
         this._busy = busy;
     }
@@ -84,11 +127,19 @@ class MockBridge extends AgentBridge {
         ];
     }
     getSymbol(name) {
-        const syms = this.getSymbols();
-        const match = syms.find((s) => s.qualifiedName === name || s.name === name);
+        const [match] = this.getSymbolMatches(name);
         if (!match)
             return undefined;
-        return { ...match, dependencies: [], kind: match.kind };
+        return match;
+    }
+    getSymbolMatches(name) {
+        return this.getSymbols()
+            .filter((s) => s.qualifiedName === name || s.name === name)
+            .map((match) => ({
+            ...match,
+            dependencies: [],
+            kind: match.kind,
+        }));
     }
     getDependencies(symbolName) {
         if (symbolName === "foo") {
@@ -247,10 +298,63 @@ class MockBridge extends AgentBridge {
         return `Interpreting ${findingId}...`;
     }
 }
+class AmbiguousMockBridge extends MockBridge {
+    getSymbols() {
+        return [
+            ...super.getSymbols(),
+            {
+                name: "Review (type)",
+                qualifiedName: "Review#type",
+                kind: "type",
+                filePath: "src/review.ts",
+                startLine: 1,
+                endLine: 1,
+                signature: "type Review = { id: string }",
+                exported: true,
+            },
+            {
+                name: "Review (class)",
+                qualifiedName: "Review#class",
+                kind: "class",
+                filePath: "src/review.ts",
+                startLine: 3,
+                endLine: 7,
+                signature: "class Review",
+                exported: true,
+            },
+        ];
+    }
+    getSymbolMatches(name) {
+        if (name === "Review") {
+            return this.getSymbols()
+                .filter((symbol) => symbol.qualifiedName.startsWith("Review#"))
+                .map((match) => ({
+                ...match,
+                dependencies: [],
+                kind: match.kind,
+            }));
+        }
+        return super.getSymbolMatches(name);
+    }
+}
+class EmptySessionsBridge extends MockBridge {
+    async listSess() {
+        return [];
+    }
+    async saveSess(label) {
+        return {
+            id: "sess-1",
+            label: label ?? "auto-label",
+            createdAt: "2026-01-01T00:00:00.000Z",
+            savedAt: "2026-01-01T00:00:00.000Z",
+            messageCount: 1,
+        };
+    }
+}
 // ── Test harness ──
 let activeServer;
-function startTestServer(bridge) {
-    const handler = createRequestHandler(bridge);
+function startTestServer(bridge, options = {}) {
+    const handler = createRequestHandler(bridge, undefined, options);
     const server = createServer(handler);
     activeServer = server;
     return new Promise((resolve) => {
@@ -306,7 +410,7 @@ test("GET /api/config returns formatted config plus structured settings", async
     assert.ok(body.config.includes("test-model"));
     assert.equal(body.restartRequired, true);
     assert.equal(body.secretsUiSupported, false);
-    assert.ok(body.settings.configPath.endsWith("/.minicode/agent.config.json"));
+    assert.ok(body.settings.configPath.endsWith("/.minicode/.env"));
     assert.ok(body.settings.entries.some((entry) => entry.key === "maxSteps"));
 });
 test("GET /api/sessions returns session list", async () => {
@@ -332,6 +436,24 @@ test("POST /api/sessions/save saves a session", async () => {
     const body = (await res.json());
     assert.equal(body.label, "my-save");
 });
+test("session APIs support the first save when no sessions exist yet", async () => {
+    const bridge = new EmptySessionsBridge();
+    const base = await startTestServer(bridge);
+    const listRes = await fetch(`${base}/api/sessions`);
+    assert.equal(listRes.status, 200);
+    const listBody = (await listRes.json());
+    assert.equal(listBody.sessions.length, 0);
+    assert.equal(listBody.currentSessionId, "sess-1");
+    const saveRes = await fetch(`${base}/api/sessions/save`, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({}),
+    });
+    assert.equal(saveRes.status, 200);
+    const saveBody = (await saveRes.json());
+    assert.equal(saveBody.id, "sess-1");
+    assert.equal(saveBody.label, "auto-label");
+});
 test("POST /api/sessions/load returns 404 for unknown session", async () => {
     const bridge = new MockBridge();
     const base = await startTestServer(bridge);
@@ -353,6 +475,10 @@ test("POST /api/sessions/load returns success for known session", async () => {
     assert.equal(res.status, 200);
     const body = (await res.json());
     assert.equal(body.label, "test-session");
+    assert.equal(body.messages.length, 10);
+    assert.equal(body.messages[0]?.content, "message-2");
+    assert.equal(body.messages[9]?.content, "message-11");
+    assert.ok(body.messages.every((message) => !message.content.startsWith("[Conversation Summary")));
 });
 test("POST /api/chat returns agent response", async () => {
     const bridge = new MockBridge();
@@ -389,6 +515,179 @@ test("POST /api/chat returns 429 when agent is busy", async () => {
     });
     assert.equal(res.status, 429);
 });
+test("POST /api/openrouter/connect exchanges code and stores a session-only key", async () => {
+    const bridge = new MockBridge();
+    const base = await startTestServer(bridge);
+    const originalFetch = globalThis.fetch;
+    globalThis.fetch = async (input, init) => {
+        if (String(input) !== "https://openrouter.ai/api/v1/auth/keys") {
+            return originalFetch(input, init);
+        }
+        assert.equal(init?.method, "POST");
+        assert.equal((init?.headers)["Content-Type"], "application/json");
+        const body = JSON.parse(String(init?.body));
+        assert.equal(body.code, "oauth-code");
+        assert.equal(body.code_verifier, "pkce-verifier");
+        assert.equal(body.code_challenge_method, "S256");
+        return new Response(JSON.stringify({ key: "sk-or-v1-session-key" }), { status: 200, headers: { "content-type": "application/json" } });
+    };
+    try {
+        const res = await originalFetch(`${base}/api/openrouter/connect`, {
+            method: "POST",
+            headers: { "Content-Type": "application/json" },
+            body: JSON.stringify({ code: "oauth-code", codeVerifier: "pkce-verifier" }),
+        });
+        assert.equal(res.status, 200);
+        const body = await res.json();
+        assert.equal(body.ok, true);
+        assert.equal(body.sessionOnly, true);
+        assert.equal(body.persistedToEnv, false);
+        assert.equal(body.persistedEnvPath, null);
+        assert.equal(body.persistWarning, null);
+        assert.equal(body.baseUrl, "https://openrouter.ai/api/v1");
+        assert.equal(body.needsSetup, false);
+        assert.deepEqual(body.missing, []);
+        assert.equal(body.message, "OpenRouter connected for this serve session.");
+        assert.equal(bridge.openRouterKey, "sk-or-v1-session-key");
+        assert.equal(bridge.getConfig().modelProvider, "openai-compatible");
+        assert.equal(bridge.getConfig().openAiBaseUrl, "https://openrouter.ai/api/v1");
+        assert.equal(bridge.getConfig().openAiApiKey, "sk-or-v1-session-key");
+    }
+    finally {
+        globalThis.fetch = originalFetch;
+    }
+});
+test("POST /api/openrouter/connect can persist OpenRouter setup to ~/.minicode/.env", async () => {
+    const bridge = new MockBridge();
+    const minicodeHome = mkdtempSync(path.join(os.tmpdir(), "minicode-openrouter-home-"));
+    const base = await startTestServer(bridge, { minicodeHome });
+    const originalFetch = globalThis.fetch;
+    globalThis.fetch = async (input, init) => {
+        if (String(input) !== "https://openrouter.ai/api/v1/auth/keys") {
+            return originalFetch(input, init);
+        }
+        return new Response(JSON.stringify({ key: "sk-or-v1-session-key" }), { status: 200, headers: { "content-type": "application/json" } });
+    };
+    try {
+        const res = await originalFetch(`${base}/api/openrouter/connect`, {
+            method: "POST",
+            headers: { "Content-Type": "application/json" },
+            body: JSON.stringify({ code: "oauth-code", codeVerifier: "pkce-verifier", persistToEnv: true }),
+        });
+        assert.equal(res.status, 200);
+        const body = await res.json();
+        assert.equal(body.persistedToEnv, true);
+        assert.equal(body.persistWarning, null);
+        assert.equal(body.persistedEnvPath, path.join(minicodeHome, ".env"));
+        assert.match(body.message, /saved to ~\/\.minicode\/\.env/);
+        const envContents = readFileSync(path.join(minicodeHome, ".env"), "utf8");
+        assert.match(envContents, /^MODEL_PROVIDER=openai-compatible$/m);
+        assert.match(envContents, /^OPENAI_BASE_URL=https:\/\/openrouter\.ai\/api\/v1$/m);
+        assert.match(envContents, /^OPENROUTER_API_KEY=sk-or-v1-session-key$/m);
+    }
+    finally {
+        globalThis.fetch = originalFetch;
+        rmSync(minicodeHome, { recursive: true, force: true });
+    }
+});
+test("POST /api/model persists the selected model to ~/.minicode/.env", async () => {
+    const bridge = new MockBridge();
+    const minicodeHome = mkdtempSync(path.join(os.tmpdir(), "minicode-model-home-"));
+    const envPath = path.join(minicodeHome, ".env");
+    writeFileSync(envPath, [
+        "MODEL_PROVIDER=openai-compatible",
+        "OPENAI_BASE_URL=https://openrouter.ai/api/v1",
+        "OPENROUTER_API_KEY=sk-or-v1-session-key",
+        "",
+    ].join("\n"), "utf8");
+    const base = await startTestServer(bridge, { minicodeHome });
+    try {
+        const res = await fetch(`${base}/api/model`, {
+            method: "POST",
+            headers: { "Content-Type": "application/json" },
+            body: JSON.stringify({ model: "openrouter/test-model" }),
+        });
+        assert.equal(res.status, 200);
+        const body = await res.json();
+        assert.equal(body.model, "openrouter/test-model");
+        assert.equal(body.persistedToEnv, true);
+        assert.equal(body.persistedEnvPath, envPath);
+        const envContents = readFileSync(envPath, "utf8");
+        assert.match(envContents, /^MODEL=openrouter\/test-model$/m);
+        assert.match(envContents, /^OPENROUTER_API_KEY=sk-or-v1-session-key$/m);
+        assert.equal(bridge.getConfig().model, "openrouter/test-model");
+    }
+    finally {
+        rmSync(minicodeHome, { recursive: true, force: true });
+    }
+});
+test("POST /api/openrouter/disconnect removes the session-only OpenRouter connection", async () => {
+    const bridge = new MockBridge();
+    bridge.connectOpenRouter("sk-or-v1-session-key");
+    const base = await startTestServer(bridge);
+    const res = await fetch(`${base}/api/openrouter/disconnect`, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+    });
+    assert.equal(res.status, 200);
+    const body = await res.json();
+    assert.equal(body.ok, true);
+    assert.equal(body.disconnected, true);
+    assert.equal(body.sessionOnly, true);
+    assert.equal(body.provider, "anthropic");
+    assert.equal(body.baseUrl, "http://localhost:1234/v1");
+    assert.equal(body.message, "Removed the session-only OpenRouter connection and restored your original provider settings.");
+    assert.equal(bridge.openRouterSessionActive, false);
+    assert.equal(bridge.getConfig().modelProvider, "anthropic");
+    assert.equal(bridge.getConfig().openAiBaseUrl, "http://localhost:1234/v1");
+    assert.equal(bridge.getConfig().openAiApiKey, undefined);
+});
+test("GET /api/status exposes OpenRouter session state and base URL", async () => {
+    const bridge = new MockBridge();
+    bridge.connectOpenRouter("sk-or-v1-session-key");
+    const base = await startTestServer(bridge);
+    const res = await fetch(`${base}/api/status`);
+    assert.equal(res.status, 200);
+    const body = await res.json();
+    assert.equal(body.provider, "openai-compatible");
+    assert.equal(body.baseUrl, "https://openrouter.ai/api/v1");
+    assert.equal(body.sessionOpenRouterConnected, true);
+});
+test("POST /api/openrouter/connect returns 400 when code is missing", async () => {
+    const bridge = new MockBridge();
+    const base = await startTestServer(bridge);
+    const res = await fetch(`${base}/api/openrouter/connect`, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({ codeVerifier: "pkce-verifier" }),
+    });
+    assert.equal(res.status, 400);
+});
+test("POST /api/openrouter/connect surfaces exchange failures", async () => {
+    const bridge = new MockBridge();
+    const base = await startTestServer(bridge);
+    const originalFetch = globalThis.fetch;
+    globalThis.fetch = async (input, init) => {
+        if (String(input) !== "https://openrouter.ai/api/v1/auth/keys") {
+            return originalFetch(input, init);
+        }
+        return new Response("Invalid code", { status: 403 });
+    };
+    try {
+        const res = await originalFetch(`${base}/api/openrouter/connect`, {
+            method: "POST",
+            headers: { "Content-Type": "application/json" },
+            body: JSON.stringify({ code: "bad-code", codeVerifier: "pkce-verifier" }),
+        });
+        assert.equal(res.status, 403);
+        const body = await res.json();
+        assert.ok(body.error.includes("OpenRouter OAuth exchange failed"));
+        assert.ok(body.error.includes("Invalid code"));
+    }
+    finally {
+        globalThis.fetch = originalFetch;
+    }
+});
 // ── OpenAI-compatible API tests ──
 test("GET /v1/models returns minicode-agent model", async () => {
     const bridge = new MockBridge();
@@ -497,6 +796,7 @@ test("GET / serves index.html", async () => {
     const res = await fetch(`${base}/`);
     assert.equal(res.status, 200);
     assert.equal(res.headers.get("content-type"), "text/html");
+    assert.equal(res.headers.get("cache-control"), "no-store");
     const html = await res.text();
     assert.ok(html.includes("minicode"));
 });
@@ -506,6 +806,7 @@ test("GET /style.css serves CSS file", async () => {
     const res = await fetch(`${base}/style.css`);
     assert.equal(res.status, 200);
     assert.equal(res.headers.get("content-type"), "text/css");
+    assert.equal(res.headers.get("cache-control"), "no-store");
 });
 test("GET /app.js serves JS file", async () => {
     const bridge = new MockBridge();
@@ -513,6 +814,7 @@ test("GET /app.js serves JS file", async () => {
     const res = await fetch(`${base}/app.js`);
     assert.equal(res.status, 200);
     assert.equal(res.headers.get("content-type"), "application/javascript");
+    assert.equal(res.headers.get("cache-control"), "no-store");
 });
 test("GET /nonexistent returns 404", async () => {
     const bridge = new MockBridge();
@@ -570,6 +872,15 @@ test("GET /api/symbols/:name/dependencies returns 404 for unknown symbol", async
     const res = await fetch(`${base}/api/symbols/nonexistent/dependencies`);
     assert.equal(res.status, 404);
 });
+test("GET /api/symbols/:name/dependencies returns 409 for ambiguous symbol", async () => {
+    const bridge = new AmbiguousMockBridge();
+    const base = await startTestServer(bridge);
+    const res = await fetch(`${base}/api/symbols/Review/dependencies`);
+    assert.equal(res.status, 409);
+    const body = (await res.json());
+    assert.equal(body.error, 'Symbol "Review" is ambiguous');
+    assert.deepEqual(body.candidates.map((candidate) => candidate.qualifiedName).sort(), ["Review#class", "Review#type"]);
+});
 test("GET /api/symbols/:name/references returns references", async () => {
     const bridge = new MockBridge();
     const base = await startTestServer(bridge);
@@ -586,6 +897,15 @@ test("GET /api/symbols/:name/references returns 404 for unknown symbol", async (
     const res = await fetch(`${base}/api/symbols/nonexistent/references`);
     assert.equal(res.status, 404);
 });
+test("GET /api/symbols/:name/references returns 409 for ambiguous symbol", async () => {
+    const bridge = new AmbiguousMockBridge();
+    const base = await startTestServer(bridge);
+    const res = await fetch(`${base}/api/symbols/Review/references`);
+    assert.equal(res.status, 409);
+    const body = (await res.json());
+    assert.equal(body.error, 'Symbol "Review" is ambiguous');
+    assert.deepEqual(body.candidates.map((candidate) => candidate.qualifiedName).sort(), ["Review#class", "Review#type"]);
+});
 test("GET /api/code-map returns code map", async () => {
     const bridge = new MockBridge();
     const base = await startTestServer(bridge);
@@ -741,6 +1061,15 @@ test("GET /api/symbols/:name/source returns 404 for unknown symbol", async () =>
     const body = (await res.json());
     assert.ok(body.error.includes("nonexistent"));
 });
+test("GET /api/symbols/:name/source returns 409 for ambiguous symbol", async () => {
+    const bridge = new AmbiguousMockBridge();
+    const base = await startTestServer(bridge);
+    const res = await fetch(`${base}/api/symbols/Review/source`);
+    assert.equal(res.status, 409);
+    const body = (await res.json());
+    assert.equal(body.error, 'Symbol "Review" is ambiguous');
+    assert.deepEqual(body.candidates.map((candidate) => candidate.qualifiedName).sort(), ["Review#class", "Review#type"]);
+});
 test("GET /api/symbols/:name/source returns 500 when file is missing", async () => {
     const bridge = new MockBridge();
     const base = await startTestServer(bridge);

package/dist/tests/session-preview.test.js

@@ -0,0 +1,56 @@
+import assert from "node:assert/strict";
+import { test } from "node:test";
+import { buildSessionPreview, isCompactionSummaryMessage, } from "../src/session/session-preview.js";
+test("isCompactionSummaryMessage detects compacted summary stubs", () => {
+    assert.equal(isCompactionSummaryMessage({
+        role: "user",
+        content: "[Conversation Summary — earlier messages were compacted to save context]\nSummary text",
+    }), true);
+    assert.equal(isCompactionSummaryMessage({
+        role: "assistant",
+        content: "[Conversation Summary — earlier messages were compacted to save context]\nSummary text",
+    }), false);
+});
+test("buildSessionPreview filters compaction summaries and keeps the last ten messages", () => {
+    const preview = buildSessionPreview([
+        {
+            role: "user",
+            content: "[Conversation Summary — earlier messages were compacted using LLM summarization]\nSummary text",
+        },
+        { role: "user", content: "message-1" },
+        { role: "assistant", content: "message-2" },
+        { role: "user", content: "message-3" },
+        { role: "assistant", content: "message-4" },
+        { role: "user", content: "message-5" },
+        { role: "assistant", content: "message-6" },
+        { role: "user", content: "message-7" },
+        { role: "assistant", content: "message-8" },
+        { role: "user", content: "message-9" },
+        { role: "assistant", content: "message-10" },
+        { role: "user", content: "message-11" },
+    ]);
+    assert.equal(preview.length, 10);
+    assert.equal(preview[0]?.content, "message-2");
+    assert.equal(preview[9]?.content, "message-11");
+    assert.ok(preview.every((message) => !message.content.startsWith("[Conversation Summary")));
+});
+test("buildSessionPreview preserves tool messages in order", () => {
+    const preview = buildSessionPreview([
+        {
+            role: "assistant",
+            content: "Let me check that",
+            toolCalls: [{ id: "tool-1", name: "search", input: { query: "foo" } }],
+        },
+        {
+            role: "tool",
+            toolCallId: "tool-1",
+            toolName: "search",
+            content: "search output",
+        },
+        {
+            role: "assistant",
+            content: "Found it",
+        },
+    ]);
+    assert.deepEqual(preview.map((message) => message.role), ["assistant", "tool", "assistant"]);
+});

package/dist/tests/session-ui.test.js

@@ -18,4 +18,8 @@ test("built JS contains active saved session update logic", () => {
     assert.ok(js.includes("activeSavedSession"), "JS should track the active saved session");
     assert.ok(js.includes("currentSessionId"), "JS should read the current session id from the sessions API");
     assert.ok(js.includes("Session updated:"), "JS should emit the update confirmation message");
+    assert.ok(js.includes("sessionRefreshTracker"), "JS should guard session list refreshes against stale responses");
+    assert.ok(js.includes('saveBtn.setAttribute("disabled", "true")'), "JS should disable saving while the first save is in flight");
+    assert.ok(js.includes("renderLoadedSessionMessages"), "JS should render session previews after load");
+    assert.ok(js.includes("body.messages"), "JS should read preview messages from the load session response");
 });

package/dist/tests/settings-ui.test.js

@@ -7,6 +7,12 @@ test("built HTML contains settings entry point and modal shell", () => {
     const html = readFileSync(join(distWeb, "index.html"), "utf8");
     assert.ok(html.includes('id="settings-btn"'), "HTML should contain the settings button");
     assert.ok(html.includes('id="settings-modal"'), "HTML should contain the settings modal");
+    assert.ok(html.includes('id="connect-openrouter-btn"'), "HTML should contain the OpenRouter connect button");
+    assert.ok(html.includes('id="config-overlay-intro"'), "HTML should contain the setup overlay intro copy");
+    assert.ok(html.includes("Try minicode for free with OpenRouter"), "HTML should promote the free OpenRouter quick start");
+    assert.ok(html.includes('id="openrouter-connect-modal"'), "HTML should contain the OpenRouter consent modal");
+    assert.ok(html.includes('id="openrouter-persist-checkbox"'), "HTML should contain the OpenRouter persistence checkbox");
+    assert.ok(html.includes('id="disconnect-openrouter-btn"'), "HTML should contain the OpenRouter disconnect button");
     assert.ok(!html.includes('id="settings-scope"'), "HTML should no longer contain the settings scope selector");
     assert.ok(html.includes('id="settings-save"'), "HTML should contain the settings save action");
 });
@@ -16,11 +22,23 @@ test("built CSS contains modal and settings layout styles", () => {
     assert.ok(css.includes(".settings-list"), "CSS should contain settings list styles");
     assert.ok(css.includes(".settings-item-meta"), "CSS should contain settings metadata grid styles");
     assert.ok(css.includes(".settings-help-warning"), "CSS should contain warning styling for env overrides");
+    assert.ok(css.includes("align-items: flex-start;"), "CSS should top-align scrollable setup overlay content");
+    assert.ok(css.includes(".config-overlay-spotlight"), "CSS should style the OpenRouter quick-start spotlight");
+    assert.ok(css.includes(".openrouter-connect-body"), "CSS should style the OpenRouter consent modal body");
+    assert.ok(css.includes(".config-connect-status.success"), "CSS should style OpenRouter connect success state");
+    assert.ok(css.includes(".settings-session-banner"), "CSS should style the OpenRouter session banner");
     assert.ok(css.includes("body.modal-open"), "CSS should lock scroll while the settings modal is open");
 });
 test("built JS contains config loading and saving logic for settings", () => {
     const js = readFileSync(join(distWeb, "app.js"), "utf8");
     assert.ok(js.includes("/api/config"), "JS should fetch the config API");
+    assert.ok(js.includes("/api/openrouter/connect"), "JS should call the OpenRouter connect API");
+    assert.ok(js.includes("/api/openrouter/disconnect"), "JS should call the OpenRouter disconnect API");
+    assert.ok(js.includes("persistToHomeEnv"), "JS should support persisting the selected model after OpenRouter setup");
+    assert.ok(js.includes("code_challenge_method"), "JS should generate an OpenRouter PKCE auth request");
+    assert.ok(js.includes("sessionStorage"), "JS should persist the PKCE verifier for the OAuth callback");
+    assert.ok(js.includes("minicode:openrouter:persist-to-env"), "JS should persist the optional OpenRouter env-write choice across OAuth");
+    assert.ok(js.includes("sessionOpenRouterConnected"), "JS should track session-only OpenRouter state");
     assert.ok(js.includes("Save settings"), "JS should contain the settings save action text");
     assert.ok(js.includes("settingsPayload"), "JS should track settings payload state");
     assert.ok(js.includes("persistedValue"), "JS should wire persisted settings behavior");

package/node_modules/@minicode/agent-sdk/dist/src/agent/agent.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent.d.ts","sourceRoot":"","sources":["../../../src/agent/agent.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEzD,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAChD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEpD,OAAO,KAAK,EAAE,WAAW,EAAE,WAAW,EAAY,MAAM,YAAY,CAAC;AAgGrE,MAAM,MAAM,gBAAgB,GAAG;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AACrE,MAAM,MAAM,sBAAsB,GAAG;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAClF,MAAM,MAAM,YAAY,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAC1D,MAAM,MAAM,qBAAqB,GAAG;IAClC,IAAI,EAAE,iBAAiB,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC,CAAC;AACF,MAAM,MAAM,mBAAmB,GAAG;IAChC,IAAI,EAAE,eAAe,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AACF,MAAM,MAAM,qBAAqB,GAAG;IAClC,IAAI,EAAE,gBAAgB,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;CAC1B,CAAC;AACF,MAAM,MAAM,QAAQ,GAChB,gBAAgB,GAChB,sBAAsB,GACtB,YAAY,GACZ,qBAAqB,GACrB,mBAAmB,GACnB,qBAAqB,CAAC;AA+B1B,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAU;IAClC,OAAO,CAAC,MAAM,CAAc;IAC5B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAc;IAC1C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAe;IAC5C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA0E;IACrG,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAU;IAClC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA0C;IACrE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA0C;IACrE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA0C;IACpE,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAyC;IAE/E;;;;OAIG;IACH,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAsB;IAEnD;;;;OAIG;IACH,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAkC;IAEhE,kEAAkE;IAClE,OAAO,CAAC,kBAAkB,CAAqB;gBAEnC,MAAM,EAAE;QAClB,MAAM,EAAE,WAAW,CAAC;QACpB,WAAW,EAAE,WAAW,CAAC;QACzB,YAAY,EAAE,YAAY,CAAC;QAC3B,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,UAAU,CAAC,EAAE,CAAC,YAAY,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,aAAa,GAAG,SAAS,CAAC;QACvE,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;QACvC,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,QAAQ,KAAK,IAAI,CAAC;QACvC,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;QACtC,qBAAqB,CAAC,EAAE,MAAM,MAAM,GAAG,SAAS,CAAC;KAClD;IAaD,OAAO,CAAC,UAAU;IASlB,UAAU,IAAI,OAAO;IAIrB,kBAAkB,IAAI,WAAW,CAAC,iBAAiB,CAAC;IAIpD,gBAAgB,IAAI;QAAE,aAAa,EAAE,MAAM,CAAC;QAAC,gBAAgB,EAAE,MAAM,CAAA;KAAE;IAOvE,kBAAkB,CAAC,MAAM,EAAE,WAAW,CAAC,iBAAiB,CAAC,GAAG,IAAI;IAKhE;;;;OAIG;IACG,cAAc,IAAI,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAQxD,OAAO,CAAC,WAAW;IAKnB;;;;;OAKG;IACH,OAAO,CAAC,wBAAwB;IAe1B,OAAO,CACX,WAAW,EAAE,MAAM,EACnB,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GACjC,OAAO,CAAC;QACT,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,CAAC,EAAE;YAAE,WAAW,EAAE,MAAM,CAAC;YAAC,YAAY,EAAE,MAAM,CAAA;SAAE,CAAC;QACtD,QAAQ,CAAC,EAAE,OAAO,CAAC;KACpB,CAAC;CA8SH"}
+{"version":3,"file":"agent.d.ts","sourceRoot":"","sources":["../../../src/agent/agent.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEzD,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAChD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEpD,OAAO,KAAK,EAAE,WAAW,EAAE,WAAW,EAAY,MAAM,YAAY,CAAC;AAgGrE,MAAM,MAAM,gBAAgB,GAAG;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AACrE,MAAM,MAAM,sBAAsB,GAAG;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAClF,MAAM,MAAM,YAAY,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAC1D,MAAM,MAAM,qBAAqB,GAAG;IAClC,IAAI,EAAE,iBAAiB,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC,CAAC;AACF,MAAM,MAAM,mBAAmB,GAAG;IAChC,IAAI,EAAE,eAAe,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AACF,MAAM,MAAM,qBAAqB,GAAG;IAClC,IAAI,EAAE,gBAAgB,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;CAC1B,CAAC;AACF,MAAM,MAAM,QAAQ,GAChB,gBAAgB,GAChB,sBAAsB,GACtB,YAAY,GACZ,qBAAqB,GACrB,mBAAmB,GACnB,qBAAqB,CAAC;AA+B1B,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAU;IAClC,OAAO,CAAC,MAAM,CAAc;IAC5B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAc;IAC1C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAe;IAC5C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA0E;IACrG,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAU;IAClC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA0C;IACrE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA0C;IACrE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA0C;IACpE,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAyC;IAE/E;;;;OAIG;IACH,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAsB;IAEnD;;;;OAIG;IACH,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAkC;IAEhE,kEAAkE;IAClE,OAAO,CAAC,kBAAkB,CAAqB;gBAEnC,MAAM,EAAE;QAClB,MAAM,EAAE,WAAW,CAAC;QACpB,WAAW,EAAE,WAAW,CAAC;QACzB,YAAY,EAAE,YAAY,CAAC;QAC3B,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,UAAU,CAAC,EAAE,CAAC,YAAY,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,aAAa,GAAG,SAAS,CAAC;QACvE,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;QACvC,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,QAAQ,KAAK,IAAI,CAAC;QACvC,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;QACtC,qBAAqB,CAAC,EAAE,MAAM,MAAM,GAAG,SAAS,CAAC;KAClD;IAaD,OAAO,CAAC,UAAU;IASlB,UAAU,IAAI,OAAO;IAIrB,kBAAkB,IAAI,WAAW,CAAC,iBAAiB,CAAC;IAIpD,gBAAgB,IAAI;QAAE,aAAa,EAAE,MAAM,CAAC;QAAC,gBAAgB,EAAE,MAAM,CAAA;KAAE;IAOvE,kBAAkB,CAAC,MAAM,EAAE,WAAW,CAAC,iBAAiB,CAAC,GAAG,IAAI;IAMhE;;;;OAIG;IACG,cAAc,IAAI,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAQxD,OAAO,CAAC,WAAW;IAKnB;;;;;OAKG;IACH,OAAO,CAAC,wBAAwB;IAe1B,OAAO,CACX,WAAW,EAAE,MAAM,EACnB,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GACjC,OAAO,CAAC;QACT,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,CAAC,EAAE;YAAE,WAAW,EAAE,MAAM,CAAC;YAAC,YAAY,EAAE,MAAM,CAAA;SAAE,CAAC;QACtD,QAAQ,CAAC,EAAE,OAAO,CAAC;KACpB,CAAC;CA8SH"}

package/node_modules/@minicode/agent-sdk/dist/src/agent/agent.js

@@ -157,7 +157,8 @@ export class CodingAgent {
         };
     }
     setReasoningEffort(effort) {
-        const { reasoningEffort: _, ...rest } = this.config;
+        const rest = { ...this.config };
+        delete rest.reasoningEffort;
         this.config = effort ? { ...rest, reasoningEffort: effort } : { ...rest };
     }
     /**