@spfunctions/cli 1.7.11 → 1.7.12

package/dist/commands/agent.js

@@ -465,35 +465,46 @@ async function selectThesis(theses) {
 // ─── Main command ────────────────────────────────────────────────────────────
 async function agentCommand(thesisId, opts) {
     // ── Validate API keys ──────────────────────────────────────────────────────
-    const openrouterKey = opts?.modelKey || process.env.OPENROUTER_API_KEY;
+    const directOrKey = opts?.modelKey || process.env.OPENROUTER_API_KEY;
+    const sfApiKey = process.env.SF_API_KEY;
+    const sfApiUrl = process.env.SF_API_URL || 'https://simplefunctions.dev';
+    // Proxy mode: no local OpenRouter key, but have SF API key → route through server
+    const useProxy = !directOrKey && !!sfApiKey;
+    const openrouterKey = directOrKey || sfApiKey; // SF key used as Bearer for proxy
+    const llmBaseUrl = useProxy ? `${sfApiUrl}/api/proxy` : 'https://openrouter.ai/api/v1';
     if (!openrouterKey) {
-        console.error('Need OpenRouter API key to power the agent LLM.');
+        console.error('Need an API key to power the agent LLM.');
         console.error('');
-        console.error('  1. Get a key at https://openrouter.ai/keys');
-        console.error('  2. Then either:');
+        console.error('  Option 1 (recommended): sf login');
+        console.error('  Option 2: Get an OpenRouter key at https://openrouter.ai/keys');
         console.error('     export OPENROUTER_API_KEY=sk-or-v1-...');
         console.error('     sf agent --model-key sk-or-v1-...');
         console.error('     sf setup  (saves to ~/.sf/config.json)');
         process.exit(1);
     }
-    // Pre-flight: validate OpenRouter key
-    try {
-        const checkRes = await fetch('https://openrouter.ai/api/v1/auth/key', {
-            headers: { 'Authorization': `Bearer ${openrouterKey}` },
-            signal: AbortSignal.timeout(8000),
-        });
-        if (!checkRes.ok) {
-            console.error('OpenRouter API key is invalid or expired.');
-            console.error('Get a new key at https://openrouter.ai/keys');
-            process.exit(1);
+    // Pre-flight: validate key (skip for proxy mode — server validates)
+    if (!useProxy) {
+        try {
+            const checkRes = await fetch('https://openrouter.ai/api/v1/auth/key', {
+                headers: { 'Authorization': `Bearer ${openrouterKey}` },
+                signal: AbortSignal.timeout(8000),
+            });
+            if (!checkRes.ok) {
+                console.error('OpenRouter API key is invalid or expired.');
+                console.error('Get a new key at https://openrouter.ai/keys');
+                process.exit(1);
+            }
         }
-    }
-    catch (err) {
-        const msg = err instanceof Error ? err.message : String(err);
-        if (!msg.includes('timeout')) {
-            console.warn(`Warning: Could not verify OpenRouter key (${msg}). Continuing anyway.`);
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            if (!msg.includes('timeout')) {
+                console.warn(`Warning: Could not verify OpenRouter key (${msg}). Continuing anyway.`);
+            }
         }
     }
+    else {
+        console.log('  \x1b[2mUsing SimpleFunctions LLM proxy (no OpenRouter key needed)\x1b[22m');
+    }
     const sfClient = new client_js_1.SFClient();
     // ── Resolve thesis ID (interactive selection if needed) ─────────────────────
     let resolvedThesisId = thesisId;
@@ -536,7 +547,7 @@ async function agentCommand(thesisId, opts) {
     let latestContext = await sfClient.getContext(resolvedThesisId);
     // ── Branch: plain-text mode ────────────────────────────────────────────────
     if (opts?.noTui) {
-        return runPlainTextAgent({ openrouterKey, sfClient, resolvedThesisId: resolvedThesisId, latestContext, opts });
+        return runPlainTextAgent({ openrouterKey, sfClient, resolvedThesisId: resolvedThesisId, latestContext, useProxy, llmBaseUrl, sfApiKey, sfApiUrl, opts });
     }
     // ── Dynamic imports (all ESM-only packages) ────────────────────────────────
     const piTui = await import('@mariozechner/pi-tui');
@@ -552,11 +563,12 @@ async function agentCommand(thesisId, opts) {
     const rawModelName = opts?.model || 'anthropic/claude-sonnet-4.6';
     let currentModelName = rawModelName.replace(/^openrouter\//, '');
     function resolveModel(name) {
+        let m;
         try {
-            return getModel('openrouter', name);
+            m = getModel('openrouter', name);
         }
         catch {
-            return {
+            m = {
                 modelId: name,
                 provider: 'openrouter',
                 api: 'openai-completions',
@@ -570,6 +582,10 @@ async function agentCommand(thesisId, opts) {
                 supportsTools: true,
             };
         }
+        // Override baseUrl in proxy mode
+        if (useProxy)
+            m.baseUrl = llmBaseUrl;
+        return m;
     }
     let model = resolveModel(currentModelName);
     // ── Tracking state ─────────────────────────────────────────────────────────
@@ -958,24 +974,45 @@ async function agentCommand(thesisId, opts) {
             description: 'Search latest news and information. Use for real-time info not yet covered by the causal tree or heartbeat engine.',
             parameters: webSearchParams,
             execute: async (_toolCallId, params) => {
-                const apiKey = process.env.TAVILY_API_KEY;
-                if (!apiKey) {
+                const tavilyKey = process.env.TAVILY_API_KEY;
+                const canProxy = !tavilyKey && sfApiKey;
+                if (!tavilyKey && !canProxy) {
                     return {
-                        content: [{ type: 'text', text: 'Tavily not configured. Set TAVILY_API_KEY to enable web search. You can also manually inject a signal and let the heartbeat engine search.' }],
+                        content: [{ type: 'text', text: 'Web search not available. Run sf login (proxied search) or set TAVILY_API_KEY.' }],
                         details: {},
                     };
                 }
-                const res = await fetch('https://api.tavily.com/search', {
-                    method: 'POST',
-                    headers: { 'Content-Type': 'application/json' },
-                    body: JSON.stringify({
-                        api_key: apiKey,
-                        query: params.query,
-                        max_results: 5,
-                        search_depth: 'basic',
-                        include_answer: true,
-                    }),
-                });
+                let res;
+                if (tavilyKey) {
+                    // Direct mode
+                    res = await fetch('https://api.tavily.com/search', {
+                        method: 'POST',
+                        headers: { 'Content-Type': 'application/json' },
+                        body: JSON.stringify({
+                            api_key: tavilyKey,
+                            query: params.query,
+                            max_results: 5,
+                            search_depth: 'basic',
+                            include_answer: true,
+                        }),
+                    });
+                }
+                else {
+                    // Proxy mode
+                    res = await fetch(`${sfApiUrl}/api/proxy/search`, {
+                        method: 'POST',
+                        headers: {
+                            'Content-Type': 'application/json',
+                            'Authorization': `Bearer ${sfApiKey}`,
+                        },
+                        body: JSON.stringify({
+                            query: params.query,
+                            max_results: 5,
+                            search_depth: 'basic',
+                            include_answer: true,
+                        }),
+                    });
+                }
                 if (!res.ok) {
                     return {
                         content: [{ type: 'text', text: `Search failed: ${res.status}` }],
@@ -2152,7 +2189,19 @@ ${ctx.lastEvaluation?.summary ? `Latest evaluation summary: ${ctx.lastEvaluation
 Output a structured summary. Be concise but preserve every important detail — this summary replaces the original messages for continued conversation. Do NOT add commentary or meta-text. Just the summary.`;
                     let summaryText;
                     try {
-                        const orRes = await fetch('https://openrouter.ai/api/v1/chat/completions', {
+                        const compactUrl = useProxy
+                            ? `${sfApiUrl}/api/proxy/llm`
+                            : 'https://openrouter.ai/api/v1/chat/completions';
+                        const compactBody = {
+                            model: summaryModel,
+                            messages: [
+                                { role: 'system', content: summarySystemPrompt },
+                                { role: 'user', content: `Summarize this conversation (${toCompress.length} messages):\n\n${conversationDump}` },
+                            ],
+                            max_tokens: 2000,
+                            temperature: 0.2,
+                        };
+                        const orRes = await fetch(compactUrl, {
                             method: 'POST',
                             headers: {
                                 'Content-Type': 'application/json',
@@ -2160,15 +2209,7 @@ Output a structured summary. Be concise but preserve every important detail —
                                 'HTTP-Referer': 'https://simplefunctions.com',
                                 'X-Title': 'SF Agent Compact',
                             },
-                            body: JSON.stringify({
-                                model: summaryModel,
-                                messages: [
-                                    { role: 'system', content: summarySystemPrompt },
-                                    { role: 'user', content: `Summarize this conversation (${toCompress.length} messages):\n\n${conversationDump}` },
-                                ],
-                                max_tokens: 2000,
-                                temperature: 0.2,
-                            }),
+                            body: JSON.stringify(compactBody),
                         });
                         if (!orRes.ok) {
                             const errText = await orRes.text().catch(() => '');
@@ -2581,7 +2622,7 @@ Output a structured summary. Be concise but preserve every important detail —
 // PLAIN-TEXT MODE (--no-tui)
 // ============================================================================
 async function runPlainTextAgent(params) {
-    const { openrouterKey, sfClient, resolvedThesisId, opts } = params;
+    const { openrouterKey, sfClient, resolvedThesisId, opts, useProxy, llmBaseUrl, sfApiKey, sfApiUrl } = params;
     let latestContext = params.latestContext;
     const readline = await import('readline');
     const piAi = await import('@mariozechner/pi-ai');
@@ -2591,17 +2632,21 @@ async function runPlainTextAgent(params) {
     const rawModelName = opts?.model || 'anthropic/claude-sonnet-4.6';
     let currentModelName = rawModelName.replace(/^openrouter\//, '');
     function resolveModel(name) {
+        let m;
         try {
-            return getModel('openrouter', name);
+            m = getModel('openrouter', name);
         }
         catch {
-            return {
+            m = {
                 modelId: name, provider: 'openrouter', api: 'openai-completions',
                 baseUrl: 'https://openrouter.ai/api/v1', id: name, name,
                 inputPrice: 0, outputPrice: 0, contextWindow: 200000,
                 supportsImages: true, supportsTools: true,
             };
         }
+        if (useProxy)
+            m.baseUrl = llmBaseUrl;
+        return m;
     }
     let model = resolveModel(currentModelName);
     // ── Tools (same definitions as TUI mode) ──────────────────────────────────
@@ -2739,13 +2784,23 @@ async function runPlainTextAgent(params) {
             description: 'Search latest news and information',
             parameters: webSearchParams,
             execute: async (_id, p) => {
-                const apiKey = process.env.TAVILY_API_KEY;
-                if (!apiKey)
-                    return { content: [{ type: 'text', text: 'Tavily not configured. Set TAVILY_API_KEY.' }], details: {} };
-                const res = await fetch('https://api.tavily.com/search', {
-                    method: 'POST', headers: { 'Content-Type': 'application/json' },
-                    body: JSON.stringify({ api_key: apiKey, query: p.query, max_results: 5, search_depth: 'basic', include_answer: true }),
-                });
+                const tavilyKey2 = process.env.TAVILY_API_KEY;
+                const canProxy2 = !tavilyKey2 && sfApiKey;
+                if (!tavilyKey2 && !canProxy2)
+                    return { content: [{ type: 'text', text: 'Web search not available. Run sf login or set TAVILY_API_KEY.' }], details: {} };
+                let res;
+                if (tavilyKey2) {
+                    res = await fetch('https://api.tavily.com/search', {
+                        method: 'POST', headers: { 'Content-Type': 'application/json' },
+                        body: JSON.stringify({ api_key: tavilyKey2, query: p.query, max_results: 5, search_depth: 'basic', include_answer: true }),
+                    });
+                }
+                else {
+                    res = await fetch(`${sfApiUrl}/api/proxy/search`, {
+                        method: 'POST', headers: { 'Content-Type': 'application/json', 'Authorization': `Bearer ${sfApiKey}` },
+                        body: JSON.stringify({ query: p.query, max_results: 5, search_depth: 'basic', include_answer: true }),
+                    });
+                }
                 if (!res.ok)
                     return { content: [{ type: 'text', text: `Search failed: ${res.status}` }], details: {} };
                 const data = await res.json();

package/dist/commands/context.js

@@ -19,8 +19,11 @@ async function contextCommand(id, opts) {
             return;
         }
         const scanTime = data.scannedAt ? (0, utils_js_1.shortDate)(data.scannedAt) : 'no scan yet';
-        console.log(`\n${utils_js_1.c.bold}Markets${utils_js_1.c.reset}  ${utils_js_1.c.dim}scan: ${scanTime}${utils_js_1.c.reset}\n`);
-        // ── Traditional markets ticker bar ──────────────────────────────────────
+        const meta = data.meta || {};
+        console.log();
+        console.log(`${utils_js_1.c.bold}Markets${utils_js_1.c.reset}  ${utils_js_1.c.dim}${meta.totalMarkets || 0} markets (K:${meta.kalshiMarkets || 0} P:${meta.polymarketMarkets || 0}) · scan: ${scanTime}${utils_js_1.c.reset}`);
+        console.log();
+        // ── Traditional markets ────────────────────────────────────────────────
         const trad = data.traditional || [];
         if (trad.length > 0) {
             const line = trad.map((m) => {
@@ -32,51 +35,54 @@ async function contextCommand(id, opts) {
             console.log(`  ${line}`);
             console.log();
         }
-        // ── Movers ─────────────────────────────────────────────────────────────
-        const movers = data.movers || [];
-        if (movers.length > 0) {
-            console.log(`${utils_js_1.c.bold}Movers (24h)${utils_js_1.c.reset}`);
-            for (const m of movers.slice(0, 8)) {
-                const venue = m.venue === 'kalshi' ? `${utils_js_1.c.cyan}K${utils_js_1.c.reset}` : `${utils_js_1.c.magenta}P${utils_js_1.c.reset}`;
-                const ch = m.change24h || 0;
-                const chColor = ch > 0 ? utils_js_1.c.green : utils_js_1.c.red;
-                const chStr = `${chColor}${ch > 0 ? '+' : ''}${ch}¢${utils_js_1.c.reset}`;
-                const cat = m.category ? `${utils_js_1.c.dim}[${m.category}]${utils_js_1.c.reset}` : '';
-                console.log(`  ${venue} ${(0, utils_js_1.rpad)(`${m.price}¢`, 5)} ${(0, utils_js_1.rpad)(chStr, 16)}  ${(0, utils_js_1.trunc)(m.title, 50)}  ${cat}`);
-                // Actionable: show command to dig deeper
-                if (m.venue === 'kalshi' && m.ticker) {
-                    console.log(`    ${utils_js_1.c.dim}→ sf book ${m.ticker}${utils_js_1.c.reset}`);
-                }
-                else {
-                    console.log(`    ${utils_js_1.c.dim}→ sf query "${extractQuery(m.title)}"${utils_js_1.c.reset}`);
+        // ── Highlights (cross-category stories) ────────────────────────────────
+        const highlights = data.highlights || [];
+        if (highlights.length > 0) {
+            console.log(`${utils_js_1.c.bold}${utils_js_1.c.cyan}Highlights${utils_js_1.c.reset}`);
+            for (const h of highlights) {
+                console.log(`  ${utils_js_1.c.bold}${h.title}${utils_js_1.c.reset}`);
+                console.log(`  ${utils_js_1.c.dim}${h.detail}${utils_js_1.c.reset}`);
+                if (h.relatedTickers?.length > 0) {
+                    console.log(`  ${utils_js_1.c.dim}tickers: ${h.relatedTickers.join(', ')}${utils_js_1.c.reset}`);
                 }
+                console.log(`  ${utils_js_1.c.cyan}→ ${h.suggestedAction}${utils_js_1.c.reset}`);
+                console.log();
             }
-            console.log();
-        }
-        // ── Liquid markets ─────────────────────────────────────────────────────
-        const liquid = data.liquid || [];
-        if (liquid.length > 0) {
-            console.log(`${utils_js_1.c.bold}Most Liquid${utils_js_1.c.reset}`);
-            for (const m of liquid.slice(0, 6)) {
-                const venue = m.venue === 'kalshi' ? `${utils_js_1.c.cyan}K${utils_js_1.c.reset}` : `${utils_js_1.c.magenta}P${utils_js_1.c.reset}`;
-                console.log(`  ${venue} ${(0, utils_js_1.rpad)(`${m.price}¢`, 5)}  spread ${m.spread}¢  vol ${(0, utils_js_1.vol)(Math.round(m.volume24h))}  ${(0, utils_js_1.trunc)(m.title, 45)}`);
-            }
-            console.log();
         }
         // ── Categories ─────────────────────────────────────────────────────────
         const cats = data.categories || [];
         if (cats.length > 0) {
-            console.log(`${utils_js_1.c.bold}Categories${utils_js_1.c.reset}`);
-            for (const cat of cats.slice(0, 8)) {
-                const mover = cat.topMover;
-                const moverStr = mover
-                    ? `${utils_js_1.c.dim}top: ${(0, utils_js_1.trunc)(mover.title, 30)} ${mover.change24h > 0 ? utils_js_1.c.green + '+' : utils_js_1.c.red}${mover.change24h}¢${utils_js_1.c.reset}`
-                    : '';
-                console.log(`  ${(0, utils_js_1.pad)(cat.name, 14)} ${(0, utils_js_1.rpad)(String(cat.marketCount) + ' mkts', 10)} vol ${(0, utils_js_1.vol)(cat.totalVolume24h)}  ${moverStr}`);
+            console.log(`${utils_js_1.c.bold}Categories${utils_js_1.c.reset}  ${utils_js_1.c.dim}(${cats.length} total)${utils_js_1.c.reset}`);
+            console.log(`${utils_js_1.c.dim}${'─'.repeat(70)}${utils_js_1.c.reset}`);
+            for (const cat of cats) {
+                const desc = cat.description ? `  ${utils_js_1.c.dim}${cat.description}${utils_js_1.c.reset}` : '';
+                console.log(`\n  ${utils_js_1.c.bold}${cat.name}${utils_js_1.c.reset}  ${utils_js_1.c.dim}${cat.marketCount} mkts · vol ${(0, utils_js_1.vol)(cat.totalVolume24h)}${utils_js_1.c.reset}${desc}`);
+                // Top movers in category
+                const movers = cat.topMovers || [];
+                if (movers.length > 0) {
+                    for (const m of movers) {
+                        const venue = m.venue === 'kalshi' ? `${utils_js_1.c.cyan}K${utils_js_1.c.reset}` : `${utils_js_1.c.magenta}P${utils_js_1.c.reset}`;
+                        const ch = m.change24h || 0;
+                        const chColor = ch > 0 ? utils_js_1.c.green : ch < 0 ? utils_js_1.c.red : utils_js_1.c.dim;
+                        const chStr = ch !== 0 ? `${chColor}${ch > 0 ? '+' : ''}${ch}¢${utils_js_1.c.reset}` : '';
+                        console.log(`    ${venue} ${(0, utils_js_1.rpad)(`${m.price}¢`, 5)} ${(0, utils_js_1.rpad)(chStr, 14)} ${(0, utils_js_1.trunc)(m.title, 45)}  ${utils_js_1.c.dim}${m.ticker.slice(0, 18)}${utils_js_1.c.reset}`);
+                        if (m.whyInteresting) {
+                            console.log(`      ${utils_js_1.c.dim}${m.whyInteresting}${utils_js_1.c.reset}`);
+                        }
+                    }
+                }
+                // Most liquid
+                const liquid = cat.mostLiquid || [];
+                if (liquid.length > 0) {
+                    for (const m of liquid) {
+                        const venue = m.venue === 'kalshi' ? `${utils_js_1.c.cyan}K${utils_js_1.c.reset}` : `${utils_js_1.c.magenta}P${utils_js_1.c.reset}`;
+                        console.log(`    ${venue} ${(0, utils_js_1.rpad)(`${m.price}¢`, 5)} spread ${m.spread}¢  vol ${(0, utils_js_1.vol)(Math.round(m.volume24h))}  ${utils_js_1.c.dim}${(0, utils_js_1.trunc)(m.title, 35)}${utils_js_1.c.reset}`);
+                    }
+                }
             }
             console.log();
         }
-        // ── Thesis edges (from public theses) ──────────────────────────────────
+        // ── Thesis edges ───────────────────────────────────────────────────────
         const edges = data.edges || [];
         if (edges.length > 0) {
             console.log(`${utils_js_1.c.bold}Thesis Edges${utils_js_1.c.reset}`);
@@ -122,7 +128,6 @@ async function contextCommand(id, opts) {
     console.log(`${utils_js_1.c.bold}Confidence:${utils_js_1.c.reset} ${confStr}${deltaStr}`);
     console.log(`${utils_js_1.c.bold}Status:${utils_js_1.c.reset} ${ctx.status}`);
     console.log(`${utils_js_1.c.bold}Last Updated:${utils_js_1.c.reset} ${(0, utils_js_1.shortDate)(ctx.updatedAt)}`);
-    // Causal tree nodes
     const nodes = ctx.causalTree?.nodes;
     if (nodes && nodes.length > 0) {
         (0, utils_js_1.header)('Causal Tree');
@@ -133,7 +138,6 @@ async function contextCommand(id, opts) {
             console.log(`${indent}${utils_js_1.c.cyan}${node.id}${utils_js_1.c.reset}  ${(0, utils_js_1.pad)(label, 40)} ${(0, utils_js_1.rpad)(prob, 5)}`);
         }
     }
-    // Fetch positions if Kalshi is configured
     let positions = null;
     if ((0, kalshi_js_1.isKalshiConfigured)()) {
         try {
@@ -146,7 +150,6 @@ async function contextCommand(id, opts) {
         for (const p of positions)
             posMap.set(p.ticker, p);
     }
-    // Top edges
     const edges = ctx.edges;
     if (edges && edges.length > 0) {
         (0, utils_js_1.header)('Top Edges');
@@ -171,7 +174,6 @@ async function contextCommand(id, opts) {
                 `  ${utils_js_1.c.dim}${edge.venue || ''}${utils_js_1.c.reset}` + obStr + posStr);
         }
     }
-    // Last evaluation
     if (ctx.lastEvaluation?.summary) {
         (0, utils_js_1.header)('Last Evaluation');
         console.log(`  ${utils_js_1.c.dim}${(0, utils_js_1.shortDate)(ctx.lastEvaluation.evaluatedAt)} | model: ${ctx.lastEvaluation.model || ''}${utils_js_1.c.reset}`);
@@ -189,18 +191,6 @@ async function contextCommand(id, opts) {
     }
     console.log('');
 }
-/** Extract a short search query from a market title */
-function extractQuery(title) {
-    return title
-        .replace(/^Will\s+/i, '')
-        .replace(/\?.*$/, '')
-        .replace(/by\s+\w+\s+\d{1,2}.*$/i, '')
-        .replace(/\*\*/g, '')
-        .trim()
-        .slice(0, 40)
-        .trim();
-}
-/** Human-readable time ago */
 function timeAgo(iso) {
     const ms = Date.now() - new Date(iso).getTime();
     const min = Math.round(ms / 60000);

package/dist/commands/login.d.ts

@@ -0,0 +1,9 @@
+/**
+ * sf login — Browser-based authentication.
+ *
+ * Opens the browser, user logs in via magic link, CLI receives an API key.
+ * Zero manual key configuration needed.
+ */
+export declare function loginCommand(opts: {
+    apiUrl?: string;
+}): Promise<void>;

package/dist/commands/login.js

@@ -0,0 +1,98 @@
+"use strict";
+/**
+ * sf login — Browser-based authentication.
+ *
+ * Opens the browser, user logs in via magic link, CLI receives an API key.
+ * Zero manual key configuration needed.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.loginCommand = loginCommand;
+const crypto_1 = require("crypto");
+const config_js_1 = require("../config.js");
+const utils_js_1 = require("../utils.js");
+const SF_API_URL = process.env.SF_API_URL || 'https://simplefunctions.dev';
+async function loginCommand(opts) {
+    const apiUrl = opts.apiUrl || (0, config_js_1.loadConfig)().apiUrl || SF_API_URL;
+    // Only block if the CONFIG FILE has an API key (not env vars)
+    const fileConfig = (0, config_js_1.loadFileConfig)();
+    if (fileConfig.apiKey) {
+        console.log(`\n  ${utils_js_1.c.dim}Already configured with API key ${fileConfig.apiKey.slice(0, 12)}...${utils_js_1.c.reset}`);
+        console.log(`  ${utils_js_1.c.dim}Run ${utils_js_1.c.cyan}sf setup --reset${utils_js_1.c.dim} first to reconfigure.${utils_js_1.c.reset}\n`);
+        return;
+    }
+    // Generate session token
+    const sessionToken = (0, crypto_1.randomBytes)(32).toString('base64url');
+    // Register session on server
+    console.log(`\n  ${utils_js_1.c.dim}Registering login session...${utils_js_1.c.reset}`);
+    try {
+        const res = await fetch(`${apiUrl}/api/auth/cli`, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({ sessionToken }),
+        });
+        if (!res.ok) {
+            const data = await res.json().catch(() => ({}));
+            console.error(`  ${utils_js_1.c.red}Failed to create session: ${data.error || res.status}${utils_js_1.c.reset}`);
+            return;
+        }
+    }
+    catch (err) {
+        console.error(`  ${utils_js_1.c.red}Could not reach ${apiUrl}${utils_js_1.c.reset}`);
+        return;
+    }
+    // Open browser
+    const loginUrl = `${apiUrl}/auth/cli?token=${sessionToken}`;
+    console.log(`\n  ${utils_js_1.c.bold}Opening browser...${utils_js_1.c.reset}`);
+    console.log(`  ${utils_js_1.c.dim}${loginUrl}${utils_js_1.c.reset}\n`);
+    try {
+        const { exec } = await import('child_process');
+        const platform = process.platform;
+        const cmd = platform === 'darwin' ? 'open'
+            : platform === 'win32' ? 'start'
+                : 'xdg-open';
+        exec(`${cmd} "${loginUrl}"`);
+    }
+    catch {
+        console.log(`  ${utils_js_1.c.dim}Could not open browser. Visit the URL above manually.${utils_js_1.c.reset}`);
+    }
+    // Poll for completion
+    console.log(`  ${utils_js_1.c.dim}Waiting for login...${utils_js_1.c.reset}`);
+    const maxWait = 5 * 60 * 1000; // 5 minutes
+    const pollInterval = 2000;
+    const startTime = Date.now();
+    while (Date.now() - startTime < maxWait) {
+        await new Promise(r => setTimeout(r, pollInterval));
+        try {
+            const res = await fetch(`${apiUrl}/api/auth/cli/poll?token=${sessionToken}`);
+            const data = await res.json();
+            if (data.status === 'ready' && data.apiKey) {
+                // Save to config
+                (0, config_js_1.saveConfig)({
+                    ...fileConfig,
+                    apiKey: data.apiKey,
+                    apiUrl: apiUrl !== SF_API_URL ? apiUrl : undefined,
+                });
+                console.log(`\n  ${utils_js_1.c.green}✓${utils_js_1.c.reset} ${utils_js_1.c.bold}Authenticated!${utils_js_1.c.reset}`);
+                console.log(`  ${utils_js_1.c.dim}API key saved to ~/.sf/config.json${utils_js_1.c.reset}`);
+                console.log(`\n  ${utils_js_1.c.dim}OpenRouter & Tavily are proxied through ${apiUrl}${utils_js_1.c.reset}`);
+                console.log(`  ${utils_js_1.c.dim}No additional API keys needed.${utils_js_1.c.reset}`);
+                console.log(`\n  ${utils_js_1.c.cyan}sf context${utils_js_1.c.reset}        ${utils_js_1.c.dim}market intelligence${utils_js_1.c.reset}`);
+                console.log(`  ${utils_js_1.c.cyan}sf agent${utils_js_1.c.reset} ${utils_js_1.c.dim}<thesis>${utils_js_1.c.reset}  ${utils_js_1.c.dim}start the agent${utils_js_1.c.reset}`);
+                console.log(`  ${utils_js_1.c.cyan}sf setup --check${utils_js_1.c.reset}   ${utils_js_1.c.dim}verify config${utils_js_1.c.reset}`);
+                console.log();
+                return;
+            }
+            if (data.status === 'expired') {
+                console.error(`\n  ${utils_js_1.c.red}Session expired. Run ${utils_js_1.c.cyan}sf login${utils_js_1.c.red} again.${utils_js_1.c.reset}\n`);
+                return;
+            }
+            // status === 'pending' — keep polling
+            process.stdout.write('.');
+        }
+        catch {
+            // Network error — keep trying
+            process.stdout.write('x');
+        }
+    }
+    console.error(`\n  ${utils_js_1.c.red}Timed out waiting for login. Run ${utils_js_1.c.cyan}sf login${utils_js_1.c.red} again.${utils_js_1.c.reset}\n`);
+}

package/dist/commands/setup.js

@@ -210,10 +210,13 @@ async function showCheck() {
     }
     // OpenRouter
     if (config.openrouterKey) {
-        ok(`OPENROUTER_KEY    ${dim(mask(config.openrouterKey))}`);
+        ok(`OPENROUTER        ${dim(mask(config.openrouterKey))} (direct)`);
+    }
+    else if (config.apiKey) {
+        ok(`OPENROUTER        ${dim('proxied via SimpleFunctions')}`);
     }
     else {
-        fail(`OPENROUTER_KEY    not configured (agent unavailable)`);
+        fail(`OPENROUTER        not configured (run sf login or set key)`);
     }
     // Kalshi
     if (config.kalshiKeyId && config.kalshiPrivateKeyPath) {
@@ -231,7 +234,10 @@ async function showCheck() {
     }
     // Tavily
     if (config.tavilyKey) {
-        ok(`TAVILY            ${dim(mask(config.tavilyKey))}`);
+        ok(`TAVILY            ${dim(mask(config.tavilyKey))} (direct)`);
+    }
+    else if (config.apiKey) {
+        ok(`TAVILY            ${dim('proxied via SimpleFunctions')}`);
     }
     else {
         info(`${dim('○')} TAVILY            ${dim('skipped')}`);

package/dist/index.js

@@ -58,6 +58,7 @@ const prompt_js_1 = require("./commands/prompt.js");
 const augment_js_1 = require("./commands/augment.js");
 const telegram_js_1 = require("./commands/telegram.js");
 const delta_js_1 = require("./commands/delta.js");
+const login_js_1 = require("./commands/login.js");
 const query_js_1 = require("./commands/query.js");
 const markets_js_1 = require("./commands/markets.js");
 const x_js_1 = require("./commands/x.js");
@@ -73,7 +74,8 @@ const GROUPED_HELP = `
         sf <command> --help for detailed options
 
 \x1b[1mSetup\x1b[22m
-  \x1b[36msetup\x1b[39m                     Interactive config wizard
+  \x1b[36mlogin\x1b[39m                      Browser login (recommended)
+  \x1b[36msetup\x1b[39m                      Interactive config wizard (power users)
   \x1b[36msetup --check\x1b[39m              Show config status
   \x1b[36msetup --polymarket\x1b[39m         Configure Polymarket wallet
 
@@ -236,7 +238,7 @@ async function interactiveEntry() {
     console.log();
 }
 // ── Pre-action guard: check configuration ────────────────────────────────────
-const NO_CONFIG_COMMANDS = new Set(['setup', 'help', 'scan', 'explore', 'query', 'context', 'markets', 'milestones', 'forecast', 'settlements', 'balance', 'orders', 'fills', 'schedule', 'announcements', 'history', 'liquidity', 'book', 'prompt', 'sf']);
+const NO_CONFIG_COMMANDS = new Set(['setup', 'login', 'help', 'scan', 'explore', 'query', 'context', 'markets', 'milestones', 'forecast', 'settlements', 'balance', 'orders', 'fills', 'schedule', 'announcements', 'history', 'liquidity', 'book', 'prompt', 'sf']);
 program.hook('preAction', (thisCommand, actionCommand) => {
     const cmdName = actionCommand.name();
     if (NO_CONFIG_COMMANDS.has(cmdName))
@@ -252,9 +254,10 @@ program.hook('preAction', (thisCommand, actionCommand) => {
         }
         else {
             console.log();
-            console.log('  This command needs an API key. Two options:');
-            console.log('    1. \x1b[36msf setup\x1b[39m          Interactive wizard (2 min)');
-            console.log('    2. \x1b[36msf --api-key KEY\x1b[39m  Pass inline');
+            console.log('  This command needs an API key. Three options:');
+            console.log('    1. \x1b[36msf login\x1b[39m           Browser login (30 sec, recommended)');
+            console.log('    2. \x1b[36msf setup\x1b[39m           Interactive wizard (2 min)');
+            console.log('    3. \x1b[36msf --api-key KEY\x1b[39m   Pass inline');
             console.log();
             console.log('  \x1b[2mDon\'t have a key? Try \x1b[36msf scan "oil"\x1b[22m\x1b[2m — works without login.\x1b[22m');
         }
@@ -276,6 +279,14 @@ program
     .action(async (opts) => {
     await run(() => (0, setup_js_1.setupCommand)({ check: opts.check, reset: opts.reset, key: opts.key, enableTrading: opts.enableTrading, disableTrading: opts.disableTrading, kalshi: opts.kalshi, polymarket: opts.polymarket }));
 });
+// ── sf login ─────────────────────────────────────────────────────────────────
+program
+    .command('login')
+    .description('Browser-based login (recommended — no API keys needed)')
+    .action(async (_opts, cmd) => {
+    const g = cmd.optsWithGlobals();
+    await run(() => (0, login_js_1.loginCommand)({ apiUrl: g.apiUrl }));
+});
 // ── sf list ──────────────────────────────────────────────────────────────────
 program
     .command('list')

package/dist/telegram/agent-bridge.js

@@ -242,12 +242,24 @@ async function buildTools(sfClient, thesisId, latestContext) {
             parameters: Type.Object({ query: Type.String({ description: 'Search query' }) }),
             execute: async (_id, p) => {
                 const tavilyKey = process.env.TAVILY_API_KEY || config.tavilyKey;
-                if (!tavilyKey)
-                    return { content: [{ type: 'text', text: 'Tavily not configured.' }], details: {} };
-                const res = await fetch('https://api.tavily.com/search', {
-                    method: 'POST', headers: { 'Content-Type': 'application/json' },
-                    body: JSON.stringify({ api_key: tavilyKey, query: p.query, max_results: 3, search_depth: 'basic', include_answer: true }),
-                });
+                const tgSfKey = config.apiKey || process.env.SF_API_KEY;
+                const tgSfUrl = config.apiUrl || process.env.SF_API_URL || 'https://simplefunctions.dev';
+                const canProxySearch = !tavilyKey && tgSfKey;
+                if (!tavilyKey && !canProxySearch)
+                    return { content: [{ type: 'text', text: 'Web search not available. Run sf login or set TAVILY_API_KEY.' }], details: {} };
+                let res;
+                if (tavilyKey) {
+                    res = await fetch('https://api.tavily.com/search', {
+                        method: 'POST', headers: { 'Content-Type': 'application/json' },
+                        body: JSON.stringify({ api_key: tavilyKey, query: p.query, max_results: 3, search_depth: 'basic', include_answer: true }),
+                    });
+                }
+                else {
+                    res = await fetch(`${tgSfUrl}/api/proxy/search`, {
+                        method: 'POST', headers: { 'Content-Type': 'application/json', 'Authorization': `Bearer ${tgSfKey}` },
+                        body: JSON.stringify({ query: p.query, max_results: 3, search_depth: 'basic', include_answer: true }),
+                    });
+                }
                 if (!res.ok)
                     return { content: [{ type: 'text', text: `Search failed: ${res.status}` }], details: {} };
                 const data = await res.json();
@@ -407,9 +419,13 @@ async function getOrCreateAgent(sfClient, session) {
     const piAi = await import('@mariozechner/pi-ai');
     const { getModel } = piAi;
     const config = (0, config_js_1.loadConfig)();
-    const openrouterKey = config.openrouterKey || process.env.OPENROUTER_API_KEY;
+    const directOrKey = config.openrouterKey || process.env.OPENROUTER_API_KEY;
+    const sfApiKey = config.apiKey || process.env.SF_API_KEY;
+    const sfApiUrl = config.apiUrl || process.env.SF_API_URL || 'https://simplefunctions.dev';
+    const tgUseProxy = !directOrKey && !!sfApiKey;
+    const openrouterKey = directOrKey || sfApiKey;
     if (!openrouterKey)
-        throw new Error('OpenRouter not configured. Use slash commands or run sf setup.');
+        throw new Error('Need API key. Run sf login or sf setup.');
     const ctx = await sfClient.getContext(session.thesisId);
     const conf = typeof ctx.confidence === 'number' ? Math.round(ctx.confidence * 100) : 50;
     const tools = await buildTools(sfClient, session.thesisId, ctx);
@@ -427,6 +443,8 @@ async function getOrCreateAgent(sfClient, session) {
             supportsImages: true, supportsTools: true,
         };
     }
+    if (tgUseProxy)
+        model.baseUrl = `${sfApiUrl}/api/proxy`;
     const edgesSummary = (ctx.edges || [])
         .sort((a, b) => Math.abs(b.edge) - Math.abs(a.edge))
         .slice(0, 5)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@spfunctions/cli",
-  "version": "1.7.11",
+  "version": "1.7.12",
   "description": "Prediction market intelligence CLI. Causal thesis model, 24/7 Kalshi/Polymarket scan, live orderbook, edge detection. Interactive agent mode with tool calling.",
   "bin": {
     "sf": "./dist/index.js"