@soyrageagency/docker-mcp 1.1.0

package/dist/ai/credentials.d.ts

@@ -0,0 +1,72 @@
+/**
+ * AI credentials — where your Claude / ChatGPT keys live.
+ *
+ * A company laptop shouldn't have API keys scattered through shell profiles and
+ * `.env` files. `ragedocker ia login` walks you through it once and writes a
+ * single file at `~/.ragedocker/ai.json`, owner-readable only. Everything else —
+ * the TUI copilot, the panel's AI terminal — reads from there.
+ *
+ * Two slots so a team can keep both a shared work key and a personal one, or a
+ * fast cheap model alongside a strong one, and switch between them without
+ * re-entering anything: `primary` and `secondary`.
+ *
+ * Environment variables still win when set (`DOCKER_MCP_AI_*`), so an unattended
+ * gateway is configured the way it always was; the file is the interactive path
+ * for a human at a terminal.
+ *
+ * Part of Docker MCP Server.
+ * Crafted by SoyRage Agency — https://soyrage.es/
+ * MIT licensed (see LICENSE).
+ */
+/** Which AI service an account talks to. */
+export type AiProvider = "anthropic" | "openai" | "custom";
+/** One configured AI account. The key is a secret; never log or echo it. */
+export interface AiAccount {
+    provider: AiProvider;
+    /** API key / bearer token. */
+    key: string;
+    /** Model id — sensible default per provider when the user just hits enter. */
+    model: string;
+    /** Base URL. Fixed for the hosted providers; free-form for "custom". */
+    endpoint: string;
+    /** A human label so `ia list` reads nicely ("work Claude", "my ChatGPT"). */
+    label: string;
+}
+/** The two slots plus which one is active. */
+export interface AiConfig {
+    active: "primary" | "secondary";
+    primary: AiAccount | null;
+    secondary: AiAccount | null;
+}
+export type AiSlot = "primary" | "secondary";
+/** The defaults each provider gets when the user doesn't override them. */
+export declare const PROVIDER_DEFAULTS: Record<AiProvider, {
+    endpoint: string;
+    model: string;
+    label: string;
+    keyHint: string;
+    console: string;
+}>;
+/** The file we read and write. Honours RAGEDOCKER_HOME for tests and CI. */
+export declare function credentialsPath(): string;
+/** Load the stored config. Never throws; a corrupt file reads as empty. */
+export declare function loadCredentials(): AiConfig;
+/** Persist the config, creating the directory and locking the file down. */
+export declare function saveCredentials(config: AiConfig): void;
+/** Fill in the defaults for a provider around a key the user supplied. */
+export declare function buildAccount(provider: AiProvider, key: string, model?: string, endpoint?: string, label?: string): AiAccount;
+/** Write one slot and make it the active one. */
+export declare function setAccount(slot: AiSlot, account: AiAccount): AiConfig;
+/** Switch the active slot (if it has an account). */
+export declare function useSlot(slot: AiSlot): AiConfig;
+/** Remove one slot, or both when none is named. */
+export declare function clearAccount(slot?: AiSlot): AiConfig;
+/**
+ * The account the app should use right now.
+ *
+ * Precedence: an explicit `DOCKER_MCP_AI_*` environment configuration wins (so
+ * a server deployment is unchanged), otherwise the active slot from the file.
+ */
+export declare function activeAccount(): AiAccount | null;
+/** Mask a key for display — first 6 and last 4, nothing in between. */
+export declare function maskKey(key: string): string;

package/dist/ai/credentials.js

@@ -0,0 +1,157 @@
+/**
+ * AI credentials — where your Claude / ChatGPT keys live.
+ *
+ * A company laptop shouldn't have API keys scattered through shell profiles and
+ * `.env` files. `ragedocker ia login` walks you through it once and writes a
+ * single file at `~/.ragedocker/ai.json`, owner-readable only. Everything else —
+ * the TUI copilot, the panel's AI terminal — reads from there.
+ *
+ * Two slots so a team can keep both a shared work key and a personal one, or a
+ * fast cheap model alongside a strong one, and switch between them without
+ * re-entering anything: `primary` and `secondary`.
+ *
+ * Environment variables still win when set (`DOCKER_MCP_AI_*`), so an unattended
+ * gateway is configured the way it always was; the file is the interactive path
+ * for a human at a terminal.
+ *
+ * Part of Docker MCP Server.
+ * Crafted by SoyRage Agency — https://soyrage.es/
+ * MIT licensed (see LICENSE).
+ */
+import { chmodSync, existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { dirname, join } from "node:path";
+/** The defaults each provider gets when the user doesn't override them. */
+export const PROVIDER_DEFAULTS = {
+    anthropic: {
+        endpoint: "https://api.anthropic.com",
+        model: "claude-opus-5",
+        label: "Claude",
+        keyHint: "sk-ant-…",
+        console: "https://console.anthropic.com/settings/keys",
+    },
+    openai: {
+        endpoint: "https://api.openai.com/v1",
+        model: "gpt-4o-mini",
+        label: "ChatGPT",
+        keyHint: "sk-…",
+        console: "https://platform.openai.com/api-keys",
+    },
+    custom: {
+        endpoint: "http://localhost:11434/v1",
+        model: "llama3.1",
+        label: "Local model",
+        keyHint: "(often blank for Ollama / LM Studio)",
+        console: "https://ollama.com",
+    },
+};
+const EMPTY = { active: "primary", primary: null, secondary: null };
+/** The file we read and write. Honours RAGEDOCKER_HOME for tests and CI. */
+export function credentialsPath() {
+    const base = process.env.RAGEDOCKER_HOME?.trim() || join(homedir(), ".ragedocker");
+    return join(base, "ai.json");
+}
+/** Load the stored config. Never throws; a corrupt file reads as empty. */
+export function loadCredentials() {
+    const path = credentialsPath();
+    if (!existsSync(path))
+        return { ...EMPTY };
+    try {
+        const raw = JSON.parse(readFileSync(path, "utf8"));
+        return {
+            active: raw.active === "secondary" ? "secondary" : "primary",
+            primary: normaliseAccount(raw.primary),
+            secondary: normaliseAccount(raw.secondary),
+        };
+    }
+    catch {
+        return { ...EMPTY };
+    }
+}
+/** Persist the config, creating the directory and locking the file down. */
+export function saveCredentials(config) {
+    const path = credentialsPath();
+    mkdirSync(dirname(path), { recursive: true });
+    writeFileSync(path, `${JSON.stringify(config, null, 2)}\n`, "utf8");
+    // Keys are secrets: 0600, so no other user on the box can read them.
+    try {
+        chmodSync(path, 0o600);
+    }
+    catch { /* Windows / unsupported fs — best effort */ }
+}
+/** Fill in the defaults for a provider around a key the user supplied. */
+export function buildAccount(provider, key, model = "", endpoint = "", label = "") {
+    const d = PROVIDER_DEFAULTS[provider];
+    return {
+        provider,
+        key: key.trim(),
+        model: model.trim() || d.model,
+        endpoint: (endpoint.trim() || d.endpoint).replace(/\/+$/, ""),
+        label: label.trim() || d.label,
+    };
+}
+/** Write one slot and make it the active one. */
+export function setAccount(slot, account) {
+    const config = loadCredentials();
+    config[slot] = account;
+    config.active = slot;
+    saveCredentials(config);
+    return config;
+}
+/** Switch the active slot (if it has an account). */
+export function useSlot(slot) {
+    const config = loadCredentials();
+    if (config[slot]) {
+        config.active = slot;
+        saveCredentials(config);
+    }
+    return config;
+}
+/** Remove one slot, or both when none is named. */
+export function clearAccount(slot) {
+    const config = loadCredentials();
+    if (slot)
+        config[slot] = null;
+    else {
+        config.primary = null;
+        config.secondary = null;
+    }
+    if (!config[config.active])
+        config.active = config.primary ? "primary" : "secondary";
+    saveCredentials(config);
+    return config;
+}
+/**
+ * The account the app should use right now.
+ *
+ * Precedence: an explicit `DOCKER_MCP_AI_*` environment configuration wins (so
+ * a server deployment is unchanged), otherwise the active slot from the file.
+ */
+export function activeAccount() {
+    const envKey = process.env.DOCKER_MCP_AI_KEY?.trim();
+    const envEndpoint = process.env.DOCKER_MCP_AI_ENDPOINT?.trim();
+    if (envKey || envEndpoint) {
+        // The legacy env path is OpenAI-compatible; that's what it always was.
+        return buildAccount("openai", envKey ?? "", process.env.DOCKER_MCP_AI_MODEL ?? "", envEndpoint ?? "", "env");
+    }
+    const config = loadCredentials();
+    return config[config.active] ?? config.primary ?? config.secondary;
+}
+/** Mask a key for display — first 6 and last 4, nothing in between. */
+export function maskKey(key) {
+    if (!key)
+        return "(none)";
+    if (key.length <= 12)
+        return "•".repeat(key.length);
+    return `${key.slice(0, 6)}…${key.slice(-4)}`;
+}
+function normaliseAccount(raw) {
+    if (!raw || typeof raw !== "object")
+        return null;
+    const a = raw;
+    if (typeof a.key !== "string" && typeof a.endpoint !== "string")
+        return null;
+    const provider = a.provider === "anthropic" || a.provider === "custom" ? a.provider : "openai";
+    return buildAccount(provider, String(a.key ?? ""), String(a.model ?? ""), String(a.endpoint ?? ""), String(a.label ?? ""));
+}
+//# sourceMappingURL=credentials.js.map

package/dist/ai/credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../../src/ai/credentials.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxF,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AA2B1C,2EAA2E;AAC3E,MAAM,CAAC,MAAM,iBAAiB,GAA6G;IACzI,SAAS,EAAE;QACT,QAAQ,EAAE,2BAA2B;QACrC,KAAK,EAAE,eAAe;QACtB,KAAK,EAAE,QAAQ;QACf,OAAO,EAAE,UAAU;QACnB,OAAO,EAAE,6CAA6C;KACvD;IACD,MAAM,EAAE;QACN,QAAQ,EAAE,2BAA2B;QACrC,KAAK,EAAE,aAAa;QACpB,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE,MAAM;QACf,OAAO,EAAE,sCAAsC;KAChD;IACD,MAAM,EAAE;QACN,QAAQ,EAAE,2BAA2B;QACrC,KAAK,EAAE,UAAU;QACjB,KAAK,EAAE,aAAa;QACpB,OAAO,EAAE,sCAAsC;QAC/C,OAAO,EAAE,oBAAoB;KAC9B;CACF,CAAC;AAEF,MAAM,KAAK,GAAa,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AAE9E,4EAA4E;AAC5E,MAAM,UAAU,eAAe;IAC7B,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,aAAa,CAAC,CAAC;IACnF,OAAO,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;AAC/B,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,eAAe;IAC7B,MAAM,IAAI,GAAG,eAAe,EAAE,CAAC;IAC/B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,GAAG,KAAK,EAAE,CAAC;IAC3C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAsB,CAAC;QACxE,OAAO;YACL,MAAM,EAAE,GAAG,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;YAC5D,OAAO,EAAE,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC;YACtC,SAAS,EAAE,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC;SAC3C,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,GAAG,KAAK,EAAE,CAAC;IACtB,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,eAAe,CAAC,MAAgB;IAC9C,MAAM,IAAI,GAAG,eAAe,EAAE,CAAC;IAC/B,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,aAAa,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACpE,qEAAqE;IACrE,IAAI,CAAC;QAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,4CAA4C,CAAC,CAAC;AACxF,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,YAAY,CAAC,QAAoB,EAAE,GAAW,EAAE,KAAK,GAAG,EAAE,EAAE,QAAQ,GAAG,EAAE,EAAE,KAAK,GAAG,EAAE;IACnG,MAAM,CAAC,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IACtC,OAAO;QACL,QAAQ;QACR,GAAG,EAAE,GAAG,CAAC,IAAI,EAAE;QACf,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK;QAC9B,QAAQ,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QAC7D,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK;KAC/B,CAAC;AACJ,CAAC;AAED,iDAAiD;AACjD,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,OAAkB;IACzD,MAAM,MAAM,GAAG,eAAe,EAAE,CAAC;IACjC,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC;IACvB,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC;IACrB,eAAe,CAAC,MAAM,CAAC,CAAC;IACxB,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,qDAAqD;AACrD,MAAM,UAAU,OAAO,CAAC,IAAY;IAClC,MAAM,MAAM,GAAG,eAAe,EAAE,CAAC;IACjC,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QAAC,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC;QAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IAAC,CAAC;IACpE,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,YAAY,CAAC,IAAa;IACxC,MAAM,MAAM,GAAG,eAAe,EAAE,CAAC;IACjC,IAAI,IAAI;QAAE,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;SACzB,CAAC;QAAC,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;QAAC,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC;IAAC,CAAC;IACxD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;QAAE,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC;IACrF,eAAe,CAAC,MAAM,CAAC,CAAC;IACxB,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa;IAC3B,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,IAAI,EAAE,CAAC;IACrD,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,IAAI,EAAE,CAAC;IAC/D,IAAI,MAAM,IAAI,WAAW,EAAE,CAAC;QAC1B,uEAAuE;QACvE,OAAO,YAAY,CAAC,QAAQ,EAAE,MAAM,IAAI,EAAE,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,EAAE,EAAE,WAAW,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;IAC/G,CAAC;IACD,MAAM,MAAM,GAAG,eAAe,EAAE,CAAC;IACjC,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,SAAS,CAAC;AACrE,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,OAAO,CAAC,GAAW;IACjC,IAAI,CAAC,GAAG;QAAE,OAAO,QAAQ,CAAC;IAC1B,IAAI,GAAG,CAAC,MAAM,IAAI,EAAE;QAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACpD,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC/C,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAY;IACpC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACjD,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC7E,MAAM,QAAQ,GAAe,CAAC,CAAC,QAAQ,KAAK,WAAW,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC3G,OAAO,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC;AAC7H,CAAC"}

package/dist/ai/login.d.ts

@@ -0,0 +1,22 @@
+/**
+ * `ragedocker ia …` — signing in to Claude or ChatGPT from the terminal.
+ *
+ *   ragedocker ia login        set up (or replace) your main AI account
+ *   ragedocker ia relogin      re-enter the key for the account in use
+ *   ragedocker ia secundaria   set up a second account to switch to
+ *   ragedocker ia use <slot>   switch between primary and secondary
+ *   ragedocker ia list         show what's configured (keys masked)
+ *   ragedocker ia test         call the model once and report back
+ *   ragedocker ia logout       forget an account
+ *
+ * A short readline wizard, not a config file to hand-edit: pick the provider,
+ * paste the key, accept or change the model, and it verifies the credential
+ * before saving so a typo is caught here rather than the first time the copilot
+ * is used.
+ *
+ * Part of Docker MCP Server.
+ * Crafted by SoyRage Agency — https://soyrage.es/
+ * MIT licensed (see LICENSE).
+ */
+/** Entry point dispatched from the launcher. `argv` is everything after `ia`. */
+export declare function runIa(argv: string[]): Promise<void>;

package/dist/ai/login.js

@@ -0,0 +1,189 @@
+/**
+ * `ragedocker ia …` — signing in to Claude or ChatGPT from the terminal.
+ *
+ *   ragedocker ia login        set up (or replace) your main AI account
+ *   ragedocker ia relogin      re-enter the key for the account in use
+ *   ragedocker ia secundaria   set up a second account to switch to
+ *   ragedocker ia use <slot>   switch between primary and secondary
+ *   ragedocker ia list         show what's configured (keys masked)
+ *   ragedocker ia test         call the model once and report back
+ *   ragedocker ia logout       forget an account
+ *
+ * A short readline wizard, not a config file to hand-edit: pick the provider,
+ * paste the key, accept or change the model, and it verifies the credential
+ * before saving so a typo is caught here rather than the first time the copilot
+ * is used.
+ *
+ * Part of Docker MCP Server.
+ * Crafted by SoyRage Agency — https://soyrage.es/
+ * MIT licensed (see LICENSE).
+ */
+import { createInterface } from "node:readline";
+import { color } from "../tui/ansi.js";
+import { BRAND } from "../branding.js";
+import { buildAccount, clearAccount, credentialsPath, loadCredentials, maskKey, PROVIDER_DEFAULTS, setAccount, useSlot, } from "./credentials.js";
+import { verify } from "./provider.js";
+const out = (s = "") => process.stdout.write(s + "\n");
+/** Prompt for a line of input, with an optional default shown in brackets. */
+function ask(rl, question, fallback = "") {
+    const suffix = fallback ? color.dim(` [${fallback}]`) : "";
+    return new Promise((resolve) => rl.question(`  ${question}${suffix} `, (answer) => resolve(answer.trim() || fallback)));
+}
+/** Read an API key without echoing it to the terminal. */
+function askSecret(question) {
+    return new Promise((resolve) => {
+        const stdin = process.stdin;
+        const wasRaw = stdin.isRaw;
+        process.stdout.write(`  ${question} `);
+        let value = "";
+        const onData = (chunk) => {
+            const s = chunk.toString("utf8");
+            if (s === "\r" || s === "\n") {
+                stdin.removeListener("data", onData);
+                if (stdin.isTTY && !wasRaw)
+                    stdin.setRawMode(false);
+                process.stdout.write("\n");
+                resolve(value.trim());
+                return;
+            }
+            if (s === "\x7f" || s === "\b") {
+                value = value.slice(0, -1);
+                return;
+            }
+            if (s === "\x03") {
+                process.stdout.write("\n");
+                process.exit(130);
+            }
+            // Ignore other control characters; append printable input.
+            if (s >= " ")
+                value += s;
+        };
+        if (stdin.isTTY)
+            stdin.setRawMode(true);
+        stdin.resume();
+        stdin.on("data", onData);
+    });
+}
+/** Choose a provider by number. */
+async function chooseProvider(rl) {
+    out();
+    out(`  ${color.bold("Which AI?")}`);
+    out(`    ${color.accent("1")}  Claude       ${color.dim("(Anthropic — recommended)")}`);
+    out(`    ${color.accent("2")}  ChatGPT      ${color.dim("(OpenAI)")}`);
+    out(`    ${color.accent("3")}  Other        ${color.dim("(Ollama, LM Studio, any OpenAI-compatible endpoint)")}`);
+    const pick = await ask(rl, "Pick 1-3", "1");
+    return pick === "2" ? "openai" : pick === "3" ? "custom" : "anthropic";
+}
+/** The shared login flow for a slot. */
+async function runLogin(slot, presetProvider) {
+    const rl = createInterface({ input: process.stdin, output: process.stdout });
+    try {
+        const existing = loadCredentials()[slot];
+        const provider = presetProvider ?? (await chooseProvider(rl));
+        const d = PROVIDER_DEFAULTS[provider];
+        out();
+        out(`  ${color.gray("Get a key here:")} ${color.brightBlue(d.console)}`);
+        const key = await askSecret(`Paste your ${color.bold(d.label)} API key ${color.dim(d.keyHint)}:`);
+        if (!key && provider !== "custom") {
+            out(`\n  ${color.red("✗ No key entered.")}\n`);
+            return;
+        }
+        const endpoint = provider === "custom"
+            ? await ask(rl, "Endpoint (OpenAI-compatible base URL)", existing?.endpoint || d.endpoint)
+            : d.endpoint;
+        const model = await ask(rl, "Model", existing?.model || d.model);
+        const label = await ask(rl, "Label (for your own reference)", existing?.label || d.label);
+        const account = buildAccount(provider, key, model, endpoint, label);
+        out(`\n  ${color.gray("Checking the credentials…")}`);
+        const check = await verify(account);
+        if (!check.ok) {
+            out(`  ${color.red("✗ " + check.message)}`);
+            const anyway = await ask(rl, "Save it anyway? (y/N)", "n");
+            if (!/^y/i.test(anyway)) {
+                out(`\n  ${color.gray("Not saved.")}\n`);
+                return;
+            }
+        }
+        else {
+            out(`  ${color.green("✓ " + account.label + " answered: " + check.message)}`);
+        }
+        setAccount(slot, account);
+        out(`\n  ${color.green("✓ Saved")} to ${color.dim(credentialsPath())} as the ${color.bold(slot)} account, and made active.`);
+        out(`  ${color.gray("The TUI copilot (press")} ${color.accent("a")}${color.gray(") and the panel now use it.")}\n`);
+    }
+    finally {
+        rl.close();
+    }
+}
+/** Entry point dispatched from the launcher. `argv` is everything after `ia`. */
+export async function runIa(argv) {
+    const sub = (argv[0] || "login").toLowerCase();
+    switch (sub) {
+        case "login":
+            return runLogin("primary");
+        case "relogin": {
+            const config = loadCredentials();
+            const slot = config.active;
+            return runLogin(slot, config[slot]?.provider);
+        }
+        case "secondary":
+        case "secundaria":
+            return runLogin("secondary");
+        case "use":
+        case "switch": {
+            const target = /^sec/i.test(argv[1] || "") ? "secondary" : "primary";
+            const config = useSlot(target);
+            if (!config[target])
+                out(`\n  ${color.yellow("The " + target + " account is empty.")} Set it up with ${color.bold("ragedocker ia " + (target === "secondary" ? "secundaria" : "login"))}.\n`);
+            else
+                out(`\n  ${color.green("✓ Now using the " + target + " account")} (${config[target].label}).\n`);
+            return;
+        }
+        case "list":
+        case "status":
+            return listAccounts();
+        case "test":
+        case "check": {
+            const config = loadCredentials();
+            const account = config[config.active];
+            if (!account) {
+                out(`\n  ${color.yellow("No AI configured.")} Run ${color.bold("ragedocker ia login")}.\n`);
+                return;
+            }
+            out(`\n  ${color.gray("Asking " + account.label + " (" + account.model + ")…")}`);
+            const check = await verify(account);
+            out(check.ok ? `  ${color.green("✓ " + check.message)}\n` : `  ${color.red("✗ " + check.message)}\n`);
+            return;
+        }
+        case "logout":
+        case "clear": {
+            const which = argv[1] ? (/^sec/i.test(argv[1]) ? "secondary" : "primary") : undefined;
+            clearAccount(which);
+            out(`\n  ${color.green("✓ Forgotten")} ${which ? "the " + which + " account" : "all AI accounts"}.\n`);
+            return;
+        }
+        default:
+            out(`\n  Unknown: ${color.bold("ia " + sub)}. Try: login · relogin · secundaria · use · list · test · logout\n`);
+    }
+}
+function listAccounts() {
+    const config = loadCredentials();
+    out();
+    out(`  ${color.accent(color.bold("SOYRAGE"))} ${color.gray("▸")} ${color.bold(BRAND.product)} ${color.gray("· AI accounts")}`);
+    out();
+    for (const slot of ["primary", "secondary"]) {
+        const a = config[slot];
+        const active = config.active === slot;
+        const marker = active ? color.green("●") : color.gray("○");
+        if (!a) {
+            out(`  ${marker} ${color.bold(slot.padEnd(10))} ${color.dim("(empty)")}`);
+            continue;
+        }
+        out(`  ${marker} ${color.bold(slot.padEnd(10))} ${a.label}  ${color.gray(a.provider)} ${color.dim(a.model)}`);
+        out(`     ${color.gray("key")} ${color.dim(maskKey(a.key))}   ${color.gray("endpoint")} ${color.dim(a.endpoint)}`);
+    }
+    out();
+    out(`  ${color.gray("Switch with")} ${color.bold("ragedocker ia use secondary")}${color.gray(", set up with")} ${color.bold("ragedocker ia login")}${color.gray(".")}`);
+    out(`  ${color.gray("Stored at")} ${color.dim(credentialsPath())} ${color.gray("(owner-readable only).")}\n`);
+}
+//# sourceMappingURL=login.js.map

package/dist/ai/login.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.js","sourceRoot":"","sources":["../../src/ai/login.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,eAAe,EAAkB,MAAM,eAAe,CAAC;AAChE,OAAO,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AACvC,OAAO,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AACvC,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,eAAe,EACf,OAAO,EACP,iBAAiB,EACjB,UAAU,EACV,OAAO,GAGR,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAEvC,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;AAEvD,8EAA8E;AAC9E,SAAS,GAAG,CAAC,EAAa,EAAE,QAAgB,EAAE,QAAQ,GAAG,EAAE;IACzD,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,KAAK,QAAQ,GAAG,MAAM,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,QAAQ,CAAC,CAAC,CAAC,CAAC;AAC1H,CAAC;AAED,0DAA0D;AAC1D,SAAS,SAAS,CAAC,QAAgB;IACjC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC5B,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC;QAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,QAAQ,GAAG,CAAC,CAAC;QACvC,IAAI,KAAK,GAAG,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,EAAE;YAC/B,MAAM,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACjC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC7B,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBACrC,IAAI,KAAK,CAAC,KAAK,IAAI,CAAC,MAAM;oBAAE,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;gBACpD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC3B,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;gBACtB,OAAO;YACT,CAAC;YACD,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;gBAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;gBAAC,OAAO;YAAC,CAAC;YACvE,IAAI,CAAC,KAAK,MAAM,EAAE,CAAC;gBAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAAC,CAAC;YACpE,2DAA2D;YAC3D,IAAI,CAAC,IAAI,GAAG;gBAAE,KAAK,IAAI,CAAC,CAAC;QAC3B,CAAC,CAAC;QACF,IAAI,KAAK,CAAC,KAAK;YAAE,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACxC,KAAK,CAAC,MAAM,EAAE,CAAC;QACf,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,mCAAmC;AACnC,KAAK,UAAU,cAAc,CAAC,EAAa;IACzC,GAAG,EAAE,CAAC;IACN,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IACpC,GAAG,CAAC,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,kBAAkB,KAAK,CAAC,GAAG,CAAC,2BAA2B,CAAC,EAAE,CAAC,CAAC;IACxF,GAAG,CAAC,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,kBAAkB,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IACvE,GAAG,CAAC,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,kBAAkB,KAAK,CAAC,GAAG,CAAC,qDAAqD,CAAC,EAAE,CAAC,CAAC;IAClH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC;IAC5C,OAAO,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC;AACzE,CAAC;AAED,wCAAwC;AACxC,KAAK,UAAU,QAAQ,CAAC,IAAY,EAAE,cAA2B;IAC/D,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7E,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,QAAQ,GAAG,cAAc,IAAI,CAAC,MAAM,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC;QAC9D,MAAM,CAAC,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QAEtC,GAAG,EAAE,CAAC;QACN,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACzE,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,cAAc,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAClG,IAAI,CAAC,GAAG,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAClC,GAAG,CAAC,OAAO,KAAK,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;YAC/C,OAAO;QACT,CAAC;QAED,MAAM,QAAQ,GAAG,QAAQ,KAAK,QAAQ;YACpC,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,EAAE,uCAAuC,EAAE,QAAQ,EAAE,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC;YAC1F,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QACf,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC;QACjE,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,EAAE,EAAE,gCAAgC,EAAE,QAAQ,EAAE,KAAK,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC;QAE1F,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;QAEpE,GAAG,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,2BAA2B,CAAC,EAAE,CAAC,CAAC;QACtD,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC;QACpC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YACd,GAAG,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAC5C,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,EAAE,EAAE,uBAAuB,EAAE,GAAG,CAAC,CAAC;YAC3D,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBAAC,GAAG,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;gBAAC,OAAO;YAAC,CAAC;QAChF,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC,IAAI,GAAG,OAAO,CAAC,KAAK,GAAG,aAAa,GAAG,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAChF,CAAC;QAED,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC1B,GAAG,CAAC,OAAO,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,KAAK,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC,WAAW,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QAC7H,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,wBAAwB,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAAC,CAAC;IACtH,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,CAAC;IACb,CAAC;AACH,CAAC;AAED,iFAAiF;AACjF,MAAM,CAAC,KAAK,UAAU,KAAK,CAAC,IAAc;IACxC,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;IAE/C,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,OAAO;YACV,OAAO,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC7B,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,MAAM,MAAM,GAAG,eAAe,EAAE,CAAC;YACjC,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC;YAC3B,OAAO,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,CAAC;QAChD,CAAC;QACD,KAAK,WAAW,CAAC;QACjB,KAAK,YAAY;YACf,OAAO,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC/B,KAAK,KAAK,CAAC;QACX,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACrE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;YAC/B,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;gBAAE,GAAG,CAAC,OAAO,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,MAAM,GAAG,oBAAoB,CAAC,mBAAmB,KAAK,CAAC,IAAI,CAAC,gBAAgB,GAAG,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC;;gBACzL,GAAG,CAAC,OAAO,KAAK,CAAC,KAAK,CAAC,kBAAkB,GAAG,MAAM,GAAG,UAAU,CAAC,KAAK,MAAM,CAAC,MAAM,CAAE,CAAC,KAAK,MAAM,CAAC,CAAC;YACvG,OAAO;QACT,CAAC;QACD,KAAK,MAAM,CAAC;QACZ,KAAK,QAAQ;YACX,OAAO,YAAY,EAAE,CAAC;QACxB,KAAK,MAAM,CAAC;QACZ,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,MAAM,GAAG,eAAe,EAAE,CAAC;YACjC,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACtC,IAAI,CAAC,OAAO,EAAE,CAAC;gBAAC,GAAG,CAAC,OAAO,KAAK,CAAC,MAAM,CAAC,mBAAmB,CAAC,QAAQ,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC;gBAAC,OAAO;YAAC,CAAC;YACtH,GAAG,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC;YAClF,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC;YACpC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACtG,OAAO;QACT,CAAC;QACD,KAAK,QAAQ,CAAC;QACd,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACtF,YAAY,CAAC,KAA2B,CAAC,CAAC;YAC1C,GAAG,CAAC,OAAO,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,MAAM,GAAG,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,iBAAiB,KAAK,CAAC,CAAC;YACvG,OAAO;QACT,CAAC;QACD;YACE,GAAG,CAAC,gBAAgB,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,GAAG,CAAC,oEAAoE,CAAC,CAAC;IACrH,CAAC;AACH,CAAC;AAED,SAAS,YAAY;IACnB,MAAM,MAAM,GAAG,eAAe,EAAE,CAAC;IACjC,GAAG,EAAE,CAAC;IACN,GAAG,CAAC,KAAK,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;IAC/H,GAAG,EAAE,CAAC;IACN,KAAK,MAAM,IAAI,IAAI,CAAC,SAAS,EAAE,WAAW,CAAa,EAAE,CAAC;QACxD,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QACvB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC;QACtC,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3D,IAAI,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,KAAK,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAC1E,SAAS;QACX,CAAC;QACD,GAAG,CAAC,KAAK,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC9G,GAAG,CAAC,QAAQ,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACrH,CAAC;IACD,GAAG,EAAE,CAAC;IACN,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,6BAA6B,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACxK,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC;AAChH,CAAC"}

package/dist/ai/provider.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Talking to the model — Claude natively, ChatGPT and friends over the
+ * OpenAI-compatible shape.
+ *
+ * The two APIs differ in exactly the ways that matter here: Anthropic wants the
+ * key in `x-api-key` with an `anthropic-version` header and a `system` field
+ * beside `messages`, and returns the answer under `content[].text`; the OpenAI
+ * shape wants `Authorization: Bearer`, folds the system prompt into the message
+ * list, and returns it under `choices[].message.content`. One function per
+ * provider keeps each honest rather than pretending one client fits both.
+ *
+ * Every call has a timeout and turns a non-2xx into a readable error — an AI
+ * copilot that hangs is worse than one that says "your key was rejected".
+ *
+ * Part of Docker MCP Server.
+ * Crafted by SoyRage Agency — https://soyrage.es/
+ * MIT licensed (see LICENSE).
+ */
+import type { AiAccount } from "./credentials.js";
+/** Ask the configured model a single question. Returns its plain-text reply. */
+export declare function chat(account: AiAccount, system: string, user: string, timeoutMs?: number): Promise<string>;
+/**
+ * A quick credential check for `ia login` / `doctor`: one tiny prompt, and a
+ * boolean plus the model's echo. Never throws — a failure is a message.
+ */
+export declare function verify(account: AiAccount): Promise<{
+    ok: boolean;
+    message: string;
+}>;

package/dist/ai/provider.js

@@ -0,0 +1,113 @@
+/**
+ * Talking to the model — Claude natively, ChatGPT and friends over the
+ * OpenAI-compatible shape.
+ *
+ * The two APIs differ in exactly the ways that matter here: Anthropic wants the
+ * key in `x-api-key` with an `anthropic-version` header and a `system` field
+ * beside `messages`, and returns the answer under `content[].text`; the OpenAI
+ * shape wants `Authorization: Bearer`, folds the system prompt into the message
+ * list, and returns it under `choices[].message.content`. One function per
+ * provider keeps each honest rather than pretending one client fits both.
+ *
+ * Every call has a timeout and turns a non-2xx into a readable error — an AI
+ * copilot that hangs is worse than one that says "your key was rejected".
+ *
+ * Part of Docker MCP Server.
+ * Crafted by SoyRage Agency — https://soyrage.es/
+ * MIT licensed (see LICENSE).
+ */
+/** Ask the configured model a single question. Returns its plain-text reply. */
+export async function chat(account, system, user, timeoutMs = 20000) {
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), timeoutMs);
+    try {
+        return account.provider === "anthropic"
+            ? await anthropic(account, system, user, controller.signal)
+            : await openai(account, system, user, controller.signal);
+    }
+    catch (err) {
+        if (err.name === "AbortError")
+            throw new Error("The AI request timed out.");
+        throw err;
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+/** Claude, via the native Messages API. */
+async function anthropic(account, system, user, signal) {
+    const res = await fetch(`${account.endpoint.replace(/\/+$/, "")}/v1/messages`, {
+        method: "POST",
+        signal,
+        headers: {
+            "content-type": "application/json",
+            "x-api-key": account.key,
+            "anthropic-version": "2023-06-01",
+        },
+        body: JSON.stringify({
+            model: account.model,
+            max_tokens: 1024,
+            system,
+            messages: [{ role: "user", content: user }],
+        }),
+    });
+    if (!res.ok)
+        throw new Error(await describeError(res, "Claude"));
+    const data = (await res.json());
+    // The answer is the concatenation of the text blocks; thinking blocks, if any,
+    // carry no text under the default display and drop out naturally.
+    return (data.content ?? []).filter((b) => b.type === "text" || b.text).map((b) => b.text ?? "").join("").trim();
+}
+/** ChatGPT / Ollama / LM Studio / anything OpenAI-compatible. */
+async function openai(account, system, user, signal) {
+    const res = await fetch(`${account.endpoint.replace(/\/+$/, "")}/chat/completions`, {
+        method: "POST",
+        signal,
+        headers: {
+            "content-type": "application/json",
+            ...(account.key ? { authorization: `Bearer ${account.key}` } : {}),
+        },
+        body: JSON.stringify({
+            model: account.model,
+            temperature: 0.1,
+            messages: [
+                { role: "system", content: system },
+                { role: "user", content: user },
+            ],
+        }),
+    });
+    if (!res.ok)
+        throw new Error(await describeError(res, account.label || "the AI endpoint"));
+    const data = (await res.json());
+    return (data.choices?.[0]?.message?.content ?? "").trim();
+}
+/** Turn a failed HTTP response into the provider's own words where possible. */
+async function describeError(res, who) {
+    let detail = "";
+    try {
+        const body = (await res.json());
+        detail = typeof body.error === "string" ? body.error : body.error?.message ?? "";
+    }
+    catch { /* non-JSON error body */ }
+    if (res.status === 401 || res.status === 403)
+        return `${who} rejected the API key (${res.status}). Re-run "ragedocker ia relogin".`;
+    if (res.status === 404)
+        return `${who} has no such model or endpoint (404). Check the model name.`;
+    if (res.status === 429)
+        return `${who} is rate-limiting the request (429). Try again shortly.`;
+    return `${who} returned ${res.status}${detail ? `: ${detail}` : ""}.`;
+}
+/**
+ * A quick credential check for `ia login` / `doctor`: one tiny prompt, and a
+ * boolean plus the model's echo. Never throws — a failure is a message.
+ */
+export async function verify(account) {
+    try {
+        const reply = await chat(account, "You are a health check. Reply with exactly: OK", "ping", 12000);
+        return { ok: true, message: reply.slice(0, 40) || "(empty reply)" };
+    }
+    catch (err) {
+        return { ok: false, message: err.message };
+    }
+}
+//# sourceMappingURL=provider.js.map

package/dist/ai/provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.js","sourceRoot":"","sources":["../../src/ai/provider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAIH,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,OAAkB,EAAE,MAAc,EAAE,IAAY,EAAE,SAAS,GAAG,KAAK;IAC5F,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;IAC9D,IAAI,CAAC;QACH,OAAO,OAAO,CAAC,QAAQ,KAAK,WAAW;YACrC,CAAC,CAAC,MAAM,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC;YAC3D,CAAC,CAAC,MAAM,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;IAC7D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAAa,CAAC,IAAI,KAAK,YAAY;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QACvF,MAAM,GAAG,CAAC;IACZ,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED,2CAA2C;AAC3C,KAAK,UAAU,SAAS,CAAC,OAAkB,EAAE,MAAc,EAAE,IAAY,EAAE,MAAmB;IAC5F,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,cAAc,EAAE;QAC7E,MAAM,EAAE,MAAM;QACd,MAAM;QACN,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,WAAW,EAAE,OAAO,CAAC,GAAG;YACxB,mBAAmB,EAAE,YAAY;SAClC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,UAAU,EAAE,IAAI;YAChB,MAAM;YACN,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;SAC5C,CAAC;KACH,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,MAAM,aAAa,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC;IACjE,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA0D,CAAC;IACzF,+EAA+E;IAC/E,kEAAkE;IAClE,OAAO,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;AAClH,CAAC;AAED,iEAAiE;AACjE,KAAK,UAAU,MAAM,CAAC,OAAkB,EAAE,MAAc,EAAE,IAAY,EAAE,MAAmB;IACzF,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,mBAAmB,EAAE;QAClF,MAAM,EAAE,MAAM;QACd,MAAM;QACN,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACnE;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,WAAW,EAAE,GAAG;YAChB,QAAQ,EAAE;gBACR,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE;gBACnC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE;aAChC;SACF,CAAC;KACH,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,MAAM,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC,KAAK,IAAI,iBAAiB,CAAC,CAAC,CAAC;IAC3F,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA4D,CAAC;IAC3F,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;AAC5D,CAAC;AAED,gFAAgF;AAChF,KAAK,UAAU,aAAa,CAAC,GAAa,EAAE,GAAW;IACrD,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA8C,CAAC;QAC7E,MAAM,GAAG,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,IAAI,EAAE,CAAC;IACnF,CAAC;IAAC,MAAM,CAAC,CAAC,yBAAyB,CAAC,CAAC;IACrC,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,GAAG,GAAG,0BAA0B,GAAG,CAAC,MAAM,oCAAoC,CAAC;IACpI,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,GAAG,GAAG,6DAA6D,CAAC;IACnG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,GAAG,GAAG,yDAAyD,CAAC;IAC/F,OAAO,GAAG,GAAG,aAAa,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC;AACxE,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,OAAkB;IAC7C,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,gDAAgD,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QACnG,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,eAAe,EAAE,CAAC;IACtE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC;IACxD,CAAC;AACH,CAAC"}

package/dist/assets.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Bundled-asset access — works the same whether we're running from `dist/` on a
+ * machine with Node, or as a single-file standalone binary (Node SEA) with no
+ * Node installed at all.
+ *
+ * When packaged, the panel's static files and the update channel are baked into
+ * the executable and read from the SEA blob; otherwise they're read from disk.
+ * Callers pass both an asset key and the on-disk path, and get back whichever is
+ * available — so the same code path serves both builds.
+ *
+ * Part of Docker MCP Server.
+ * Crafted by SoyRage Agency — https://soyrage.es/
+ * MIT licensed (see LICENSE).
+ */
+/** True when running as an injected single-file executable. */
+export declare function isPackaged(): boolean;
+/** Read a bundled asset as a Buffer: from the SEA blob when packaged, else disk. */
+export declare function readAssetBuffer(key: string, diskPath: string): Buffer;
+/** Read a bundled asset as UTF-8 text. Returns null if it can't be read. */
+export declare function readAssetText(key: string, diskPath: string): string | null;