@sean.holung/minicode 0.3.6 → 0.3.8

package/dist/tests/mcp-and-plugin.test.js

@@ -42,6 +42,7 @@ test("MCP POST with malformed JSON returns 400 with JSON-RPC error", async () =>
                 model: "test",
                 maxSteps: 10,
                 maxTokens: 1024,
+                modelTimeoutSeconds: 60,
                 maxContextTokens: 4000,
                 workspaceRoot: "/tmp/mcp-test",
                 commandTimeoutMs: 5000,
@@ -88,6 +89,7 @@ test("MCP POST without session ID and non-init request returns 400", async () =>
                 model: "test",
                 maxSteps: 10,
                 maxTokens: 1024,
+                modelTimeoutSeconds: 60,
                 maxContextTokens: 4000,
                 workspaceRoot: "/tmp/mcp-test",
                 commandTimeoutMs: 5000,
@@ -132,6 +134,7 @@ test("MCP PATCH returns 405", async () => {
                 model: "test",
                 maxSteps: 10,
                 maxTokens: 1024,
+                modelTimeoutSeconds: 60,
                 maxContextTokens: 4000,
                 workspaceRoot: "/tmp/mcp-test",
                 commandTimeoutMs: 5000,

package/dist/tests/model-client-openai.test.js

@@ -102,6 +102,47 @@ test("openai-compatible client sends correct app URL in HTTP-Referer header", as
     assert.equal(capturedHeaders["HTTP-Referer"], "https://minicode.seanholung.com", "HTTP-Referer should point to minicode.seanholung.com");
     assert.equal(capturedHeaders["X-Title"], "minicode");
 });
+test("openai-compatible client repairs missing tool results before sending", async () => {
+    let capturedBody = "";
+    const fetchImpl = async (_input, init) => {
+        capturedBody = String(init?.body ?? "");
+        return new Response(JSON.stringify({
+            choices: [
+                {
+                    finish_reason: "stop",
+                    message: { content: "ok", tool_calls: [] },
+                },
+            ],
+            usage: { prompt_tokens: 5, completion_tokens: 3 },
+        }), { status: 200, headers: { "content-type": "application/json" } });
+    };
+    const client = new OpenAICompatibleModelClient({
+        baseUrl: "http://localhost:1234/v1",
+        fetchImpl,
+    });
+    await client.chat({
+        model: "test-model",
+        system: "sys",
+        messages: [
+            { role: "user", content: "start" },
+            {
+                role: "assistant",
+                content: "checking",
+                toolCalls: [{ id: "call-missing", name: "read_file", input: { path: "src/index.ts" } }],
+            },
+            { role: "user", content: "continue" },
+        ],
+        tools: [],
+        maxTokens: 64,
+    });
+    const parsedBody = JSON.parse(capturedBody);
+    const messages = parsedBody.messages;
+    assert.equal(messages[2]?.role, "assistant");
+    assert.equal(messages[3]?.role, "tool");
+    assert.equal(messages[3]?.tool_call_id, "call-missing");
+    assert.match(String(messages[3]?.content), /Tool result unavailable/);
+    assert.equal(messages[4]?.role, "user");
+});
 test("createModelClient returns openai-compatible client", () => {
     const config = {
         ...createTestAgentConfig("/tmp"),

package/dist/tests/model-dropdown-ui.test.js

@@ -0,0 +1,23 @@
+import assert from "node:assert/strict";
+import { readFileSync } from "node:fs";
+import { join } from "node:path";
+import { test } from "node:test";
+const distWeb = join(import.meta.dirname, "..", "dist", "src", "web");
+test("built HTML contains model search input", () => {
+    const html = readFileSync(join(distWeb, "index.html"), "utf8");
+    assert.ok(html.includes('id="model-search"'), "HTML should expose a dedicated model search input");
+    assert.ok(html.includes('placeholder="Search models..."'), "HTML should prompt users to search models");
+});
+test("built CSS contains searchable model dropdown styling", () => {
+    const css = readFileSync(join(distWeb, "style.css"), "utf8");
+    assert.ok(css.includes("#model-search"), "CSS should style the model search input");
+    assert.ok(css.includes(".model-item-body"), "CSS should support stacked model result content");
+    assert.ok(css.includes(".model-item-badge"), "CSS should style the active model badge");
+});
+test("built JS contains searchable model dropdown behavior", () => {
+    const js = readFileSync(join(distWeb, "app.js"), "utf8");
+    assert.ok(js.includes("filterModelsByQuery"), "JS should filter models by the dropdown query");
+    assert.ok(js.includes("focusModelSearchInput"), "JS should focus the search field when opening the dropdown");
+    assert.ok(js.includes("No matching models"), "JS should render an empty state for unmatched queries");
+    assert.ok(js.includes('modelSearchInput.addEventListener("input"'), "JS should update results as the user types");
+});

package/dist/tests/model-utils.test.js

@@ -1,6 +1,6 @@
 import assert from "node:assert/strict";
 import { test } from "node:test";
-import { sortModelsAlphabetically } from "../src/model-utils.js";
+import { filterModelsByQuery, getModelDisplayName, sortModelsAlphabetically } from "../src/model-utils.js";
 test("sortModelsAlphabetically sorts by display name without mutating input", () => {
     const models = [
         { id: "zeta-2", name: "Zeta 2" },
@@ -20,3 +20,28 @@ test("sortModelsAlphabetically uses id as a stable tiebreaker", () => {
     const sorted = sortModelsAlphabetically(models);
     assert.deepEqual(sorted.map((model) => model.id), ["gpt-4.1-a", "gpt-4.1-b"]);
 });
+test("getModelDisplayName falls back to id and trims whitespace", () => {
+    assert.equal(getModelDisplayName({ id: "google/gemini-2.5-flash-preview", name: "  Gemini 2.5 Flash  " }), "Gemini 2.5 Flash");
+    assert.equal(getModelDisplayName({ id: "qwen/qwen3-coder" }), "qwen/qwen3-coder");
+});
+test("filterModelsByQuery matches on display name and id without mutating order", () => {
+    const models = [
+        { id: "z-ai/glm-4.5-air", name: "GLM 4.5 Air" },
+        { id: "google/gemini-2.5-flash-preview", name: "Gemini 2.5 Flash" },
+        { id: "openai/gpt-4.1-mini", name: "GPT-4.1 Mini" },
+    ];
+    const byName = filterModelsByQuery(models, "gemini flash");
+    const byId = filterModelsByQuery(models, "glm-4.5");
+    const blank = filterModelsByQuery(models, "   ");
+    assert.deepEqual(byName.map((model) => model.id), ["google/gemini-2.5-flash-preview"]);
+    assert.deepEqual(byId.map((model) => model.id), ["z-ai/glm-4.5-air"]);
+    assert.deepEqual(blank.map((model) => model.id), models.map((model) => model.id));
+});
+test("filterModelsByQuery returns all tokens match across name and id", () => {
+    const models = [
+        { id: "google/gemini-2.5-flash-preview", name: "Gemini Flash Preview" },
+        { id: "google/gemini-2.5-pro-preview", name: "Gemini Pro Preview" },
+    ];
+    const filtered = filterModelsByQuery(models, "google flash");
+    assert.deepEqual(filtered.map((model) => model.id), ["google/gemini-2.5-flash-preview"]);
+});

package/dist/tests/search-code-map.test.js

@@ -20,6 +20,15 @@ test("search_code_map returns empty when no match", async () => {
     const result = await tool.execute({ pattern: "XyZNoSymbol123" });
     assert.ok(result.includes("No symbols matching"));
 });
+test("search_code_map returns similar matches when exact substring lookup fails", async () => {
+    const root = path.resolve(import.meta.dirname, "..");
+    const projectIndex = await buildProjectIndex(root);
+    const tool = createSearchCodeMapTool(projectIndex);
+    const result = await tool.execute({ pattern: "ModelRespnse" });
+    assert.ok(result.includes('No exact substring matches for "ModelRespnse"'));
+    assert.ok(result.includes("Showing similar symbols instead"));
+    assert.ok(result.includes("ModelResponse"));
+});
 test("search_code_map appears in tool registry when projectIndex provided", async () => {
     const root = path.resolve(import.meta.dirname, "..");
     const projectIndex = await buildProjectIndex(root);

package/dist/tests/serve.integration.test.js

@@ -7,6 +7,7 @@ import path from "node:path";
 import { createRequestHandler, shutdownServe } from "../src/serve/server.js";
 import { AgentBridge } from "../src/serve/agent-bridge.js";
 import { Session } from "@minicode/agent-sdk";
+import { DuplicateSessionLabelError } from "../src/session/session-store.js";
 import { createTestAgentConfig } from "./test-utils.js";
 /**
  * Lightweight AgentBridge subclass for testing.
@@ -20,6 +21,9 @@ class MockBridge extends AgentBridge {
     turnHistory = [];
     openRouterKey;
     openRouterSessionActive = false;
+    openAiCompatibleApiKey;
+    openAiCompatibleSessionActive = false;
+    refreshIndexCount = 0;
     constructor() {
         super(() => { }, false);
     }
@@ -91,10 +95,26 @@ class MockBridge extends AgentBridge {
     connectOpenRouter(apiKey) {
         this.openRouterKey = apiKey;
         this.openRouterSessionActive = true;
+        this.openAiCompatibleApiKey = undefined;
+        this.openAiCompatibleSessionActive = false;
         this._config.modelProvider = "openai-compatible";
         this._config.openAiBaseUrl = "https://openrouter.ai/api/v1";
         this._config.openAiApiKey = apiKey;
     }
+    connectOpenAiCompatible(baseUrl, apiKey) {
+        this.openAiCompatibleSessionActive = true;
+        this.openRouterKey = undefined;
+        this.openRouterSessionActive = false;
+        this.openAiCompatibleApiKey = apiKey?.trim() || undefined;
+        this._config.modelProvider = "openai-compatible";
+        this._config.openAiBaseUrl = baseUrl.trim().replace(/\/+$/, "");
+        if (this.openAiCompatibleApiKey) {
+            this._config.openAiApiKey = this.openAiCompatibleApiKey;
+        }
+        else {
+            delete this._config.openAiApiKey;
+        }
+    }
     disconnectOpenRouter() {
         if (!this.openRouterSessionActive) {
             return false;
@@ -110,6 +130,21 @@ class MockBridge extends AgentBridge {
     isOpenRouterSessionConnected() {
         return this.openRouterSessionActive;
     }
+    disconnectOpenAiCompatible() {
+        if (!this.openAiCompatibleSessionActive) {
+            return false;
+        }
+        this.openAiCompatibleSessionActive = false;
+        this.openAiCompatibleApiKey = undefined;
+        this._config.modelProvider = this._baseConfig.modelProvider;
+        this._config.model = this._baseConfig.model;
+        this._config.openAiBaseUrl = this._baseConfig.openAiBaseUrl;
+        delete this._config.openAiApiKey;
+        return true;
+    }
+    isOpenAiCompatibleSessionConnected() {
+        return this.openAiCompatibleSessionActive;
+    }
     switchModel(modelId) {
         this._config.model = modelId;
     }
@@ -119,6 +154,10 @@ class MockBridge extends AgentBridge {
     hasIndex() {
         return true;
     }
+    async refreshIndex() {
+        this.refreshIndexCount += 1;
+        return true;
+    }
     getSymbols() {
         return [
             { name: "foo", qualifiedName: "foo", kind: "function", filePath: "src/foo.ts", startLine: 1, endLine: 5, signature: "function foo(): void", exported: true },
@@ -351,6 +390,11 @@ class EmptySessionsBridge extends MockBridge {
         };
     }
 }
+class DuplicateSessionLabelBridge extends MockBridge {
+    async saveSess() {
+        throw new DuplicateSessionLabelError("test-session", "sess-1");
+    }
+}
 // ── Test harness ──
 let activeServer;
 function startTestServer(bridge, options = {}) {
@@ -436,6 +480,18 @@ test("POST /api/sessions/save saves a session", async () => {
     const body = (await res.json());
     assert.equal(body.label, "my-save");
 });
+test("POST /api/sessions/save rejects duplicate session labels", async () => {
+    const bridge = new DuplicateSessionLabelBridge();
+    const base = await startTestServer(bridge);
+    const res = await fetch(`${base}/api/sessions/save`, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({ label: "test-session" }),
+    });
+    assert.equal(res.status, 409);
+    const body = (await res.json());
+    assert.match(body.error, /already exists/);
+});
 test("session APIs support the first save when no sessions exist yet", async () => {
     const bridge = new EmptySessionsBridge();
     const base = await startTestServer(bridge);
@@ -653,6 +709,90 @@ test("GET /api/status exposes OpenRouter session state and base URL", async () =
     assert.equal(body.baseUrl, "https://openrouter.ai/api/v1");
     assert.equal(body.sessionOpenRouterConnected, true);
 });
+test("POST /api/openai-compatible/connect stores a session-only endpoint", async () => {
+    const bridge = new MockBridge();
+    const base = await startTestServer(bridge);
+    const res = await fetch(`${base}/api/openai-compatible/connect`, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({ baseUrl: "http://localhost:1234/v1/", apiKey: "local-key" }),
+    });
+    assert.equal(res.status, 200);
+    const body = await res.json();
+    assert.equal(body.ok, true);
+    assert.equal(body.sessionOnly, true);
+    assert.equal(body.persistedToEnv, false);
+    assert.equal(body.persistedEnvPath, null);
+    assert.equal(body.persistWarning, null);
+    assert.equal(body.baseUrl, "http://localhost:1234/v1");
+    assert.equal(body.needsSetup, false);
+    assert.deepEqual(body.missing, []);
+    assert.equal(body.message, "The OpenAI-compatible provider connected for this serve session.");
+    assert.equal(bridge.getConfig().modelProvider, "openai-compatible");
+    assert.equal(bridge.getConfig().openAiBaseUrl, "http://localhost:1234/v1");
+    assert.equal(bridge.getConfig().openAiApiKey, "local-key");
+    assert.equal(bridge.isOpenAiCompatibleSessionConnected(), true);
+});
+test("POST /api/openai-compatible/connect can persist the endpoint to ~/.minicode/.env", async () => {
+    const bridge = new MockBridge();
+    const minicodeHome = mkdtempSync(path.join(os.tmpdir(), "minicode-openai-compatible-home-"));
+    const base = await startTestServer(bridge, { minicodeHome });
+    try {
+        const res = await fetch(`${base}/api/openai-compatible/connect`, {
+            method: "POST",
+            headers: { "Content-Type": "application/json" },
+            body: JSON.stringify({
+                baseUrl: "http://127.0.0.1:1234/v1",
+                apiKey: "",
+                persistToEnv: true,
+            }),
+        });
+        assert.equal(res.status, 200);
+        const body = await res.json();
+        assert.equal(body.persistedToEnv, true);
+        assert.equal(body.persistWarning, null);
+        assert.equal(body.persistedEnvPath, path.join(minicodeHome, ".env"));
+        assert.match(body.message, /saved to ~\/\.minicode\/\.env/);
+        const envContents = readFileSync(path.join(minicodeHome, ".env"), "utf8");
+        assert.match(envContents, /^MODEL_PROVIDER=openai-compatible$/m);
+        assert.match(envContents, /^OPENAI_BASE_URL=http:\/\/127\.0\.0\.1:1234\/v1$/m);
+        assert.doesNotMatch(envContents, /^OPENAI_API_KEY=/m);
+    }
+    finally {
+        rmSync(minicodeHome, { recursive: true, force: true });
+    }
+});
+test("POST /api/openai-compatible/disconnect removes the session-only endpoint", async () => {
+    const bridge = new MockBridge();
+    bridge.connectOpenAiCompatible("http://localhost:1234/v1", "local-key");
+    const base = await startTestServer(bridge);
+    const res = await fetch(`${base}/api/openai-compatible/disconnect`, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+    });
+    assert.equal(res.status, 200);
+    const body = await res.json();
+    assert.equal(body.ok, true);
+    assert.equal(body.disconnected, true);
+    assert.equal(body.sessionOnly, true);
+    assert.equal(body.provider, "anthropic");
+    assert.equal(body.baseUrl, "http://localhost:1234/v1");
+    assert.equal(body.message, "Removed the session-only OpenAI-compatible connection and restored your original provider settings.");
+    assert.equal(bridge.isOpenAiCompatibleSessionConnected(), false);
+    assert.equal(bridge.getConfig().modelProvider, "anthropic");
+    assert.equal(bridge.getConfig().openAiApiKey, undefined);
+});
+test("GET /api/status exposes OpenAI-compatible session state and base URL", async () => {
+    const bridge = new MockBridge();
+    bridge.connectOpenAiCompatible("http://localhost:1234/v1");
+    const base = await startTestServer(bridge);
+    const res = await fetch(`${base}/api/status`);
+    assert.equal(res.status, 200);
+    const body = await res.json();
+    assert.equal(body.provider, "openai-compatible");
+    assert.equal(body.baseUrl, "http://localhost:1234/v1");
+    assert.equal(body.sessionOpenAiCompatibleConnected, true);
+});
 test("POST /api/openrouter/connect returns 400 when code is missing", async () => {
     const bridge = new MockBridge();
     const base = await startTestServer(bridge);
@@ -688,6 +828,18 @@ test("POST /api/openrouter/connect surfaces exchange failures", async () => {
         globalThis.fetch = originalFetch;
     }
 });
+test("POST /api/openai-compatible/connect rejects an invalid endpoint", async () => {
+    const bridge = new MockBridge();
+    const base = await startTestServer(bridge);
+    const res = await fetch(`${base}/api/openai-compatible/connect`, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({ baseUrl: "localhost:1234/v1" }),
+    });
+    assert.equal(res.status, 400);
+    const body = await res.json();
+    assert.match(body.error, /valid absolute http\(s\) URL/);
+});
 // ── OpenAI-compatible API tests ──
 test("GET /v1/models returns minicode-agent model", async () => {
     const bridge = new MockBridge();
@@ -928,6 +1080,17 @@ test("GET /api/graph returns nodes and edges", async () => {
     assert.equal(body.edges[0].to, "Bar");
     assert.equal(body.edges[0].kind, "calls");
 });
+test("POST /api/index/refresh rebuilds the project index", async () => {
+    const bridge = new MockBridge();
+    const base = await startTestServer(bridge);
+    const res = await fetch(`${base}/api/index/refresh`, { method: "POST" });
+    assert.equal(res.status, 200);
+    const body = (await res.json());
+    assert.equal(body.ok, true);
+    assert.equal(body.symbolCount, 2);
+    assert.equal(body.edgeCount, 1);
+    assert.equal(bridge.refreshIndexCount, 1);
+});
 test("GET /api/analysis returns deterministic structural findings", async () => {
     const bridge = new MockBridge();
     const base = await startTestServer(bridge);
@@ -1079,6 +1242,32 @@ test("GET /api/symbols/:name/source returns 500 when file is missing", async ()
     const body = (await res.json());
     assert.ok(body.error.includes("src/foo.ts"));
 });
+test("GET /api/file-source returns full file contents for a workspace file", async () => {
+    const bridge = new MockBridge();
+    const base = await startTestServer(bridge);
+    const wsRoot = "/tmp/test-workspace";
+    mkdirSync(`${wsRoot}/src`, { recursive: true });
+    writeFileSync(`${wsRoot}/src/foo.ts`, "line1\nfunction foo(): void {\n  return;\n}\nline5\n");
+    try {
+        const res = await fetch(`${base}/api/file-source?path=${encodeURIComponent("src/foo.ts")}`);
+        assert.equal(res.status, 200);
+        const body = (await res.json());
+        assert.equal(body.filePath, "src/foo.ts");
+        assert.ok(body.source.includes("function foo(): void"));
+        assert.ok(body.source.includes("line5"));
+    }
+    finally {
+        rmSync(wsRoot, { recursive: true, force: true });
+    }
+});
+test("GET /api/file-source rejects path traversal", async () => {
+    const bridge = new MockBridge();
+    const base = await startTestServer(bridge);
+    const res = await fetch(`${base}/api/file-source?path=${encodeURIComponent("../secret.txt")}`);
+    assert.equal(res.status, 403);
+    const body = (await res.json());
+    assert.ok(body.error.includes("Invalid workspace file path"));
+});
 // ── Annotations API tests ──
 test("GET /api/annotations returns empty annotations initially", async () => {
     const bridge = new MockBridge();

package/dist/tests/session-store.test.js

@@ -4,7 +4,7 @@ import { mkdtemp, readdir, rm } from "node:fs/promises";
 import path from "node:path";
 import os from "node:os";
 import { Session } from "@minicode/agent-sdk";
-import { listSessions, loadSession, loadSessionByLabel, saveSession, setSessionsDir, } from "../src/session/session-store.js";
+import { DuplicateSessionLabelError, listSessions, loadSession, loadSessionByLabel, saveSession, setSessionsDir, } from "../src/session/session-store.js";
 async function withTmpDir(fn) {
     const dir = await mkdtemp(path.join(os.tmpdir(), "minicode-test-"));
     setSessionsDir(dir);
@@ -98,6 +98,20 @@ test("loadSessionByLabel returns undefined for no match", async () => {
         assert.equal(result, undefined);
     });
 });
+test("saveSession rejects duplicate labels for different sessions", async () => {
+    await withTmpDir(async (dir) => {
+        const firstSession = new Session("first-id");
+        firstSession.addMessage({ role: "user", content: "first" });
+        await saveSession(firstSession, "My Label");
+        const secondSession = new Session("second-id");
+        secondSession.addMessage({ role: "user", content: "second" });
+        await assert.rejects(() => saveSession(secondSession, " my label "), (error) => error instanceof DuplicateSessionLabelError &&
+            error.label === "my label" &&
+            error.existingSessionId === "first-id");
+        const files = await readdir(dir);
+        assert.deepEqual(files, ["first-id.json"]);
+    });
+});
 test("saving same session twice overwrites the file", async () => {
     await withTmpDir(async (dir) => {
         const session = new Session("test-id");

package/dist/tests/settings-ui.test.js

@@ -8,11 +8,15 @@ test("built HTML contains settings entry point and modal shell", () => {
     assert.ok(html.includes('id="settings-btn"'), "HTML should contain the settings button");
     assert.ok(html.includes('id="settings-modal"'), "HTML should contain the settings modal");
     assert.ok(html.includes('id="connect-openrouter-btn"'), "HTML should contain the OpenRouter connect button");
+    assert.ok(html.includes('id="connect-openai-compatible-btn"'), "HTML should contain the OpenAI-compatible connect button");
     assert.ok(html.includes('id="config-overlay-intro"'), "HTML should contain the setup overlay intro copy");
     assert.ok(html.includes("Try minicode for free with OpenRouter"), "HTML should promote the free OpenRouter quick start");
     assert.ok(html.includes('id="openrouter-connect-modal"'), "HTML should contain the OpenRouter consent modal");
+    assert.ok(html.includes('id="openai-compatible-connect-modal"'), "HTML should contain the OpenAI-compatible connect modal");
+    assert.ok(html.includes('id="openai-compatible-preset"'), "HTML should contain the OpenAI-compatible preset selector");
     assert.ok(html.includes('id="openrouter-persist-checkbox"'), "HTML should contain the OpenRouter persistence checkbox");
     assert.ok(html.includes('id="disconnect-openrouter-btn"'), "HTML should contain the OpenRouter disconnect button");
+    assert.ok(html.includes('id="disconnect-openai-compatible-btn"'), "HTML should contain the OpenAI-compatible disconnect button");
     assert.ok(!html.includes('id="settings-scope"'), "HTML should no longer contain the settings scope selector");
     assert.ok(html.includes('id="settings-save"'), "HTML should contain the settings save action");
 });
@@ -24,9 +28,12 @@ test("built CSS contains modal and settings layout styles", () => {
     assert.ok(css.includes(".settings-help-warning"), "CSS should contain warning styling for env overrides");
     assert.ok(css.includes("align-items: flex-start;"), "CSS should top-align scrollable setup overlay content");
     assert.ok(css.includes(".config-overlay-spotlight"), "CSS should style the OpenRouter quick-start spotlight");
+    assert.ok(css.includes(".config-overlay-shortcuts"), "CSS should lay out the setup quick-connect cards");
     assert.ok(css.includes(".openrouter-connect-body"), "CSS should style the OpenRouter consent modal body");
+    assert.ok(css.includes(".provider-input"), "CSS should style provider connection form inputs");
     assert.ok(css.includes(".config-connect-status.success"), "CSS should style OpenRouter connect success state");
     assert.ok(css.includes(".settings-session-banner"), "CSS should style the OpenRouter session banner");
+    assert.ok(css.includes(".settings-provider-shortcuts"), "CSS should style provider shortcuts inside settings");
     assert.ok(css.includes("body.modal-open"), "CSS should lock scroll while the settings modal is open");
 });
 test("built JS contains config loading and saving logic for settings", () => {
@@ -34,11 +41,15 @@ test("built JS contains config loading and saving logic for settings", () => {
     assert.ok(js.includes("/api/config"), "JS should fetch the config API");
     assert.ok(js.includes("/api/openrouter/connect"), "JS should call the OpenRouter connect API");
     assert.ok(js.includes("/api/openrouter/disconnect"), "JS should call the OpenRouter disconnect API");
+    assert.ok(js.includes("/api/openai-compatible/connect"), "JS should call the OpenAI-compatible connect API");
+    assert.ok(js.includes("/api/openai-compatible/disconnect"), "JS should call the OpenAI-compatible disconnect API");
     assert.ok(js.includes("persistToHomeEnv"), "JS should support persisting the selected model after OpenRouter setup");
     assert.ok(js.includes("code_challenge_method"), "JS should generate an OpenRouter PKCE auth request");
     assert.ok(js.includes("sessionStorage"), "JS should persist the PKCE verifier for the OAuth callback");
     assert.ok(js.includes("minicode:openrouter:persist-to-env"), "JS should persist the optional OpenRouter env-write choice across OAuth");
     assert.ok(js.includes("sessionOpenRouterConnected"), "JS should track session-only OpenRouter state");
+    assert.ok(js.includes("sessionOpenAiCompatibleConnected"), "JS should track session-only OpenAI-compatible state");
+    assert.ok(js.includes("OPENAI_COMPATIBLE_PRESETS"), "JS should include OpenAI-compatible endpoint presets");
     assert.ok(js.includes("Save settings"), "JS should contain the settings save action text");
     assert.ok(js.includes("settingsPayload"), "JS should track settings payload state");
     assert.ok(js.includes("persistedValue"), "JS should wire persisted settings behavior");

package/dist/tests/setup-overlay-state.test.js

@@ -0,0 +1,49 @@
+import assert from "node:assert/strict";
+import { test } from "node:test";
+import { DEFAULT_SETUP_INTRO, deriveSetupOverlayState } from "../src/web/setup-overlay-state.js";
+test("fresh install hides MODEL missing copy until a provider is configured", () => {
+    const state = deriveSetupOverlayState({
+        configuredProvider: null,
+        missing: ["MODEL is not set"],
+    });
+    assert.equal(state.introText, DEFAULT_SETUP_INTRO);
+    assert.equal(state.hideQuickConnects, false);
+    assert.equal(state.hideOpenRouterSpotlight, false);
+    assert.deepEqual(state.missingItems, []);
+    assert.equal(state.showModelSelectionHint, false);
+    assert.equal(state.modelSelectionNote, null);
+});
+test("configured OpenAI-compatible provider keeps model guidance visible", () => {
+    const state = deriveSetupOverlayState({
+        configuredProvider: "openai-compatible",
+        missing: ["MODEL is not set"],
+    });
+    assert.equal(state.introText, "An OpenAI-compatible provider is already configured. Select a model to continue:");
+    assert.equal(state.hideQuickConnects, true);
+    assert.equal(state.hideOpenRouterSpotlight, false);
+    assert.deepEqual(state.missingItems, ["MODEL is not set"]);
+    assert.equal(state.showModelSelectionHint, true);
+    assert.equal(state.modelSelectionNote, null);
+});
+test("configured OpenRouter provider keeps model guidance and hides spotlight", () => {
+    const state = deriveSetupOverlayState({
+        configuredProvider: "openrouter",
+        missing: ["MODEL is not set"],
+    });
+    assert.equal(state.introText, "OpenRouter is already configured. Select a model to continue:");
+    assert.equal(state.hideQuickConnects, true);
+    assert.equal(state.hideOpenRouterSpotlight, true);
+    assert.deepEqual(state.missingItems, ["MODEL is not set"]);
+    assert.equal(state.showModelSelectionHint, true);
+    assert.equal(state.modelSelectionNote, 'If you are on the OpenRouter free tier, search "free" in the model dropdown to find supported free models.');
+});
+test("non-model missing items still surface before provider selection", () => {
+    const state = deriveSetupOverlayState({
+        configuredProvider: null,
+        missing: ["SOME_OTHER_SETTING is not set"],
+    });
+    assert.equal(state.introText, DEFAULT_SETUP_INTRO);
+    assert.deepEqual(state.missingItems, ["SOME_OTHER_SETTING is not set"]);
+    assert.equal(state.showModelSelectionHint, false);
+    assert.equal(state.modelSelectionNote, null);
+});

package/dist/tests/system-prompt.test.js

@@ -8,6 +8,7 @@ function createMinimalConfig(workspaceRoot) {
         model: "test",
         maxSteps: 10,
         maxTokens: 1024,
+        modelTimeoutSeconds: 60,
         maxContextTokens: 16_000,
         workspaceRoot,
         commandTimeoutMs: 5000,

package/dist/tests/test-utils.js

@@ -4,6 +4,7 @@ export function createTestAgentConfig(workspaceRoot) {
         model: "test-model",
         maxSteps: 10,
         maxTokens: 1024,
+        modelTimeoutSeconds: 60,
         maxContextTokens: 16_000,
         workspaceRoot,
         commandTimeoutMs: 2_000,

package/node_modules/@minicode/agent-sdk/dist/src/agent/agent.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent.d.ts","sourceRoot":"","sources":["../../../src/agent/agent.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEzD,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAChD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEpD,OAAO,KAAK,EAAE,WAAW,EAAE,WAAW,EAAY,MAAM,YAAY,CAAC;AAgGrE,MAAM,MAAM,gBAAgB,GAAG;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AACrE,MAAM,MAAM,sBAAsB,GAAG;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAClF,MAAM,MAAM,YAAY,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAC1D,MAAM,MAAM,qBAAqB,GAAG;IAClC,IAAI,EAAE,iBAAiB,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC,CAAC;AACF,MAAM,MAAM,mBAAmB,GAAG;IAChC,IAAI,EAAE,eAAe,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AACF,MAAM,MAAM,qBAAqB,GAAG;IAClC,IAAI,EAAE,gBAAgB,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;CAC1B,CAAC;AACF,MAAM,MAAM,QAAQ,GAChB,gBAAgB,GAChB,sBAAsB,GACtB,YAAY,GACZ,qBAAqB,GACrB,mBAAmB,GACnB,qBAAqB,CAAC;AA+B1B,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAU;IAClC,OAAO,CAAC,MAAM,CAAc;IAC5B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAc;IAC1C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAe;IAC5C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA0E;IACrG,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAU;IAClC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA0C;IACrE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA0C;IACrE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA0C;IACpE,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAyC;IAE/E;;;;OAIG;IACH,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAsB;IAEnD;;;;OAIG;IACH,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAkC;IAEhE,kEAAkE;IAClE,OAAO,CAAC,kBAAkB,CAAqB;gBAEnC,MAAM,EAAE;QAClB,MAAM,EAAE,WAAW,CAAC;QACpB,WAAW,EAAE,WAAW,CAAC;QACzB,YAAY,EAAE,YAAY,CAAC;QAC3B,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,UAAU,CAAC,EAAE,CAAC,YAAY,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,aAAa,GAAG,SAAS,CAAC;QACvE,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;QACvC,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,QAAQ,KAAK,IAAI,CAAC;QACvC,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;QACtC,qBAAqB,CAAC,EAAE,MAAM,MAAM,GAAG,SAAS,CAAC;KAClD;IAaD,OAAO,CAAC,UAAU;IASlB,UAAU,IAAI,OAAO;IAIrB,kBAAkB,IAAI,WAAW,CAAC,iBAAiB,CAAC;IAIpD,gBAAgB,IAAI;QAAE,aAAa,EAAE,MAAM,CAAC;QAAC,gBAAgB,EAAE,MAAM,CAAA;KAAE;IAOvE,kBAAkB,CAAC,MAAM,EAAE,WAAW,CAAC,iBAAiB,CAAC,GAAG,IAAI;IAMhE;;;;OAIG;IACG,cAAc,IAAI,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAQxD,OAAO,CAAC,WAAW;IAKnB;;;;;OAKG;IACH,OAAO,CAAC,wBAAwB;IAe1B,OAAO,CACX,WAAW,EAAE,MAAM,EACnB,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GACjC,OAAO,CAAC;QACT,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,CAAC,EAAE;YAAE,WAAW,EAAE,MAAM,CAAC;YAAC,YAAY,EAAE,MAAM,CAAA;SAAE,CAAC;QACtD,QAAQ,CAAC,EAAE,OAAO,CAAC;KACpB,CAAC;CA8SH"}
+{"version":3,"file":"agent.d.ts","sourceRoot":"","sources":["../../../src/agent/agent.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEzD,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAChD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEpD,OAAO,KAAK,EAAE,WAAW,EAAE,WAAW,EAAY,MAAM,YAAY,CAAC;AAgGrE,MAAM,MAAM,gBAAgB,GAAG;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AACrE,MAAM,MAAM,sBAAsB,GAAG;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAClF,MAAM,MAAM,YAAY,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAC1D,MAAM,MAAM,qBAAqB,GAAG;IAClC,IAAI,EAAE,iBAAiB,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC,CAAC;AACF,MAAM,MAAM,mBAAmB,GAAG;IAChC,IAAI,EAAE,eAAe,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AACF,MAAM,MAAM,qBAAqB,GAAG;IAClC,IAAI,EAAE,gBAAgB,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;CAC1B,CAAC;AACF,MAAM,MAAM,QAAQ,GAChB,gBAAgB,GAChB,sBAAsB,GACtB,YAAY,GACZ,qBAAqB,GACrB,mBAAmB,GACnB,qBAAqB,CAAC;AA+B1B,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAU;IAClC,OAAO,CAAC,MAAM,CAAc;IAC5B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAc;IAC1C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAe;IAC5C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA0E;IACrG,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAU;IAClC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA0C;IACrE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA0C;IACrE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA0C;IACpE,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAyC;IAE/E;;;;OAIG;IACH,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAsB;IAEnD;;;;OAIG;IACH,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAkC;IAEhE,kEAAkE;IAClE,OAAO,CAAC,kBAAkB,CAAqB;gBAEnC,MAAM,EAAE;QAClB,MAAM,EAAE,WAAW,CAAC;QACpB,WAAW,EAAE,WAAW,CAAC;QACzB,YAAY,EAAE,YAAY,CAAC;QAC3B,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,UAAU,CAAC,EAAE,CAAC,YAAY,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,aAAa,GAAG,SAAS,CAAC;QACvE,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;QACvC,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,QAAQ,KAAK,IAAI,CAAC;QACvC,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;QACtC,qBAAqB,CAAC,EAAE,MAAM,MAAM,GAAG,SAAS,CAAC;KAClD;IAaD,OAAO,CAAC,UAAU;IASlB,UAAU,IAAI,OAAO;IAIrB,kBAAkB,IAAI,WAAW,CAAC,iBAAiB,CAAC;IAIpD,gBAAgB,IAAI;QAAE,aAAa,EAAE,MAAM,CAAC;QAAC,gBAAgB,EAAE,MAAM,CAAA;KAAE;IAOvE,kBAAkB,CAAC,MAAM,EAAE,WAAW,CAAC,iBAAiB,CAAC,GAAG,IAAI;IAMhE;;;;OAIG;IACG,cAAc,IAAI,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAQxD,OAAO,CAAC,WAAW;IAKnB;;;;;OAKG;IACH,OAAO,CAAC,wBAAwB;IAe1B,OAAO,CACX,WAAW,EAAE,MAAM,EACnB,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GACjC,OAAO,CAAC;QACT,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,CAAC,EAAE;YAAE,WAAW,EAAE,MAAM,CAAC;YAAC,YAAY,EAAE,MAAM,CAAA;SAAE,CAAC;QACtD,QAAQ,CAAC,EAAE,OAAO,CAAC;KACpB,CAAC;CAuTH"}

package/node_modules/@minicode/agent-sdk/dist/src/agent/agent.js

@@ -343,7 +343,8 @@ export class CodingAgent {
                 content: thinkingContent,
                 toolCalls: response.toolCalls,
             });
-            for (const toolCall of response.toolCalls) {
+            for (let toolCallIndex = 0; toolCallIndex < response.toolCalls.length; toolCallIndex += 1) {
+                const toolCall = response.toolCalls[toolCallIndex];
                 const fingerprint = signatureForToolCall(toolCall);
                 recentToolCallFingerprints.push(fingerprint);
                 if (recentToolCallFingerprints.length >
@@ -353,6 +354,14 @@ export class CodingAgent {
                 const repeatedCalls = recentToolCallFingerprints.filter((value) => value === fingerprint).length;
                 if (repeatedCalls >= 3) {
                     const loopMessage = "Stopped due to repeated identical tool calls. Please refine the prompt or provide additional constraints.";
+                    for (const skippedToolCall of response.toolCalls.slice(toolCallIndex)) {
+                        this.session.addMessage({
+                            role: "tool",
+                            toolCallId: skippedToolCall.id,
+                            toolName: skippedToolCall.name,
+                            content: `Tool skipped: ${loopMessage}`,
+                        });
+                    }
                     this.session.addMessage({
                         role: "assistant",
                         content: loopMessage,