@tuned-tensor/cli 0.13.1-beta.0 → 0.13.1-beta.1

package/README.md

@@ -84,7 +84,7 @@ such as `runs list` and `doctor` work immediately. Chat waits until you choose
 a provider and model from inside the shell:
 
 ```text
-tt v0.13.1-beta.0
+tt v0.13.1-beta.1
 agent not configured · workflow model base
 ctrl+c stop/clear · ctrl+d exit · /help commands · tab complete
 
@@ -113,7 +113,7 @@ After a model is selected, the banner shows it and ordinary sentences go to
 the agent:
 
 ```text
-tt v0.13.1-beta.0
+tt v0.13.1-beta.1
 agent anthropic/claude-sonnet-4-5 · workflow model base
 ctrl+c stop/clear · ctrl+d exit · /help commands · tab complete
 

package/dist/index.js

@@ -660,8 +660,8 @@ function getAgentSelection(env = process.env) {
 }
 
 // src/agent-model.ts
-function missingProviderAuthMessage(provider) {
-  return `Provider "${provider}" is not authenticated. Open the tt shell and run /login ${provider} to save a key, then try again.`;
+function missingProviderAuthMessage() {
+  return "No API key is saved for the selected model. Run /login, or /model to pick a different one.";
 }
 function unknownAgentProviderMessage(provider) {
   return `Unknown provider "${provider}". Use /login <id> or /model <id>.`;
@@ -676,6 +676,29 @@ function pushSecret(secrets, value) {
   if (secret.length < MIN_REDACTED_SECRET_LENGTH) return;
   if (!secrets.includes(secret)) secrets.push(secret);
 }
+function persistProviderApiKey(provider, apiKey, authPath = getAgentAuthPath()) {
+  const key = apiKey.trim();
+  if (!key) {
+    throw new Error("API key cannot be empty.");
+  }
+  let stored = {};
+  if (existsSync2(authPath)) {
+    let parsed;
+    try {
+      parsed = JSON.parse(readFileSync2(authPath, "utf-8"));
+    } catch (error) {
+      throw new Error(
+        `Failed to read ${authPath}: ${error instanceof Error ? error.message : String(error)}`
+      );
+    }
+    if (!isRecord(parsed)) {
+      throw new Error(`Invalid auth.json: expected an object at ${authPath}`);
+    }
+    stored = parsed;
+  }
+  stored[provider] = { type: "api_key", key };
+  writePrivateJson(authPath, stored);
+}
 function readStoredProviderSecrets(authPath = getAgentAuthPath()) {
   if (!existsSync2(authPath)) return [];
   let parsed;
@@ -700,7 +723,7 @@ function readStoredProviderSecrets(authPath = getAgentAuthPath()) {
 function resolveAgentModel(runtime, selection) {
   const resolved = resolveAgentModelDefinition(runtime, selection);
   if (!runtime.hasConfiguredAuth(selection.provider)) {
-    throw new Error(missingProviderAuthMessage(selection.provider));
+    throw new Error(missingProviderAuthMessage());
   }
   return resolved;
 }
@@ -1970,7 +1993,6 @@ function formatShellStatus(context) {
 }
 
 // src/agent-control.ts
-import { chmodSync as chmodSync3, existsSync as existsSync3 } from "fs";
 var FEATURED_AGENT_PROVIDERS = [
   "openai",
   "openrouter"
@@ -2089,12 +2111,10 @@ async function loginAgentProvider(runtime, provider, apiKey) {
   if (!key) {
     throw new Error("API key cannot be empty.");
   }
-  if (typeof runtime.setRuntimeApiKey !== "function") {
-    throw new Error("This session cannot store provider credentials.");
+  persistProviderApiKey(choice.id, key);
+  if (typeof runtime.setRuntimeApiKey === "function") {
+    await runtime.setRuntimeApiKey(choice.id, key);
   }
-  await runtime.setRuntimeApiKey(choice.id, key);
-  const authPath = getAgentAuthPath();
-  if (existsSync3(authPath)) chmodSync3(authPath, 384);
   return { provider: choice.id };
 }
 function setAgentModel(runtime, env, provider, model, options = {}) {
@@ -3568,7 +3588,7 @@ ${chalk3.yellow.bold("Approval required")}  ${chalk3.dim(action.id.slice(0, 8))}
 import { constants as osConstants } from "os";
 import { randomUUID as randomUUID4 } from "crypto";
 import { spawn } from "child_process";
-import { existsSync as existsSync4 } from "fs";
+import { existsSync as existsSync3 } from "fs";
 import { fileURLToPath } from "url";
 import {
   readFile as readFile3,
@@ -4388,7 +4408,7 @@ async function projectSpecArguments(originalArgs, cwd) {
 }
 function resolveLocalCliEntrypoint() {
   const entrypoint = fileURLToPath(new URL("./local-runtime.js", import.meta.url));
-  if (!existsSync4(entrypoint)) {
+  if (!existsSync3(entrypoint)) {
     throw new Error(
       "The bundled local runtime is missing. Rebuild or reinstall @tuned-tensor/cli."
     );
@@ -4718,7 +4738,7 @@ function registerAgentCommands(parent, options) {
 }
 
 // src/commands/pipeline.ts
-import { existsSync as existsSync5, readFileSync as readFileSync4, writeFileSync as writeFileSync3 } from "fs";
+import { existsSync as existsSync4, readFileSync as readFileSync4, writeFileSync as writeFileSync3 } from "fs";
 import { resolve as resolve4 } from "path";
 var DEFAULT_PIPELINE_FILE = "tunedtensor.pipeline.json";
 function parseList(value) {
@@ -4729,7 +4749,7 @@ function parseList(value) {
 }
 function loadPipeline(path) {
   const resolved = resolve4(path);
-  if (!existsSync5(resolved)) throw new Error(`Pipeline file not found: ${path}. Run \`tt pipeline init\` to create one.`);
+  if (!existsSync4(resolved)) throw new Error(`Pipeline file not found: ${path}. Run \`tt pipeline init\` to create one.`);
   try {
     return JSON.parse(readFileSync4(resolved, "utf8"));
   } catch (error) {
@@ -4748,7 +4768,7 @@ function registerPipelineCommands(parent) {
   const pipeline = parent.command("pipeline").description("Create, validate, inspect, and safely dry-run ordered pipeline recipes");
   pipeline.command("init").description("Write a canonical v1 pipeline recipe").option("-f, --file <path>", "Output file", DEFAULT_PIPELINE_FILE).action((options) => {
     const path = resolve4(options.file);
-    if (existsSync5(path)) throw new Error(`Pipeline file already exists: ${options.file}.`);
+    if (existsSync4(path)) throw new Error(`Pipeline file already exists: ${options.file}.`);
     const recipe = canonicalPipeline("local");
     writeFileSync3(path, `${JSON.stringify(recipe, null, 2)}
 `);
@@ -5186,7 +5206,7 @@ async function runCli(version, runtime = {}) {
 }
 
 // src/index.ts
-runCli("0.13.1-beta.0").catch((err) => {
+runCli("0.13.1-beta.1").catch((err) => {
   reportError(err);
   process.exit(1);
 });