agentaudit 3.9.20 → 3.9.21

package/cli.mjs

@@ -58,6 +58,7 @@ function resolveProvider(flagOverride, keys) {
 // ── Global flags (set in main before command routing) ────
 let jsonMode = false;
 let quietMode = false;
+let modelOverride = null; // --model flag or AGENTAUDIT_MODEL env or config
 
 // ── ANSI Colors (respects NO_COLOR and --no-color) ───────
 
@@ -1486,7 +1487,7 @@ async function auditRepo(url) {
           'content-type': 'application/json',
         },
         body: JSON.stringify({
-          model: 'claude-sonnet-4-20250514',
+          model: modelOverride || 'claude-sonnet-4-20250514',
           max_tokens: 8192,
           system: systemPrompt,
           messages: [{ role: 'user', content: userMessage }],
@@ -1509,22 +1510,22 @@ async function auditRepo(url) {
       switch (resolvedProvider.id) {
         case 'openrouter':
           apiUrl = 'https://openrouter.ai/api/v1/chat/completions';
-          modelName = process.env.OPENROUTER_MODEL || 'anthropic/claude-sonnet-4';
+          modelName = modelOverride || process.env.OPENROUTER_MODEL || 'anthropic/claude-sonnet-4';
           authHeaders = { 'Authorization': `Bearer ${resolvedProvider.key}`, 'HTTP-Referer': 'https://agentaudit.dev', 'X-Title': 'AgentAudit' };
           break;
         case 'ollama':
           apiUrl = `${resolvedProvider.host}/v1/chat/completions`;
-          modelName = resolvedProvider.model;
+          modelName = modelOverride || resolvedProvider.model;
           authHeaders = {};
           break;
         case 'custom':
           apiUrl = resolvedProvider.url.endsWith('/chat/completions') ? resolvedProvider.url : `${resolvedProvider.url.replace(/\/$/, '')}/chat/completions`;
-          modelName = resolvedProvider.model;
+          modelName = modelOverride || resolvedProvider.model;
           authHeaders = resolvedProvider.key ? { 'Authorization': `Bearer ${resolvedProvider.key}` } : {};
           break;
         default: // openai
           apiUrl = 'https://api.openai.com/v1/chat/completions';
-          modelName = 'gpt-4o';
+          modelName = modelOverride || 'gpt-4o';
           authHeaders = { 'Authorization': `Bearer ${resolvedProvider.key}` };
       }
 
@@ -1731,9 +1732,25 @@ async function main() {
   quietMode = rawArgs.includes('--quiet') || rawArgs.includes('-q');
   // --no-color already handled at top level for `c` object
   
+  // --model flag: --model=<name> or --model <name>
+  const modelFlagIdx = rawArgs.findIndex(a => a === '--model');
+  const modelFlagEq = rawArgs.find(a => a.startsWith('--model='));
+  modelOverride = modelFlagEq?.split('=')[1]
+    || (modelFlagIdx >= 0 ? rawArgs[modelFlagIdx + 1] : null)
+    || process.env.AGENTAUDIT_MODEL
+    || loadConfig()?.preferred_model
+    || null;
+  
   // Strip global flags from args
   const globalFlags = new Set(['--json', '--quiet', '-q', '--no-color']);
-  const args = rawArgs.filter(a => !globalFlags.has(a));
+  let args = rawArgs.filter(a => !globalFlags.has(a));
+  // Strip --model and its value
+  args = args.filter((a, i, arr) => {
+    if (a.startsWith('--model=')) return false;
+    if (a === '--model') { arr[i + 1] = '__skip__'; return false; }
+    if (a === '__skip__') return false;
+    return true;
+  });
   
   if (args[0] === '-v' || args[0] === '--version') {
     console.log(`agentaudit ${getVersion()}`);
@@ -1764,6 +1781,7 @@ async function main() {
     console.log(`    ${c.dim}--quiet        Suppress banner${c.reset}`);
     console.log(`    ${c.dim}--no-color     Disable colors ${c.reset}${c.dim}(also: NO_COLOR=1)${c.reset}`);
     console.log(`    ${c.dim}--provider <p> Force provider ${c.reset}${c.dim}(anthropic|openai|openrouter|ollama|custom)${c.reset}`);
+    console.log(`    ${c.dim}--model <m>    Override model ${c.reset}${c.dim}(e.g. gpt-4o-mini, claude-3.5-sonnet)${c.reset}`);
     console.log(`    ${c.dim}--export       Export audit payload to markdown${c.reset}`);
     console.log(`    ${c.dim}--debug        Show raw LLM response on errors${c.reset}`);
     console.log();
@@ -1775,7 +1793,9 @@ async function main() {
     console.log();
     console.log(`  ${c.bold}PROVIDERS${c.reset} ${c.dim}(set any one for deep audits)${c.reset}`);
     console.log(`    ${c.dim}ANTHROPIC_API_KEY · OPENAI_API_KEY · OPENROUTER_API_KEY · OLLAMA_MODEL · LLM_API_URL${c.reset}`);
-    console.log(`    ${c.dim}Set default: AGENTAUDIT_PROVIDER=openai or agentaudit config set provider openai${c.reset}`);
+    console.log(`    ${c.dim}Set default: AGENTAUDIT_PROVIDER=openai  AGENTAUDIT_MODEL=gpt-4o-mini${c.reset}`);
+    console.log(`    ${c.dim}Or persist: agentaudit config set provider openai${c.reset}`);
+    console.log(`    ${c.dim}            agentaudit config set model gpt-4o-mini${c.reset}`);
     console.log(`    ${c.dim}Run ${c.cyan}agentaudit status${c.dim} to check configuration.${c.reset}`);
     console.log();
     process.exitCode = 0; return;
@@ -1858,9 +1878,11 @@ async function main() {
     const resolved = resolveProvider(null, keys);
     console.log();
     if (resolved) {
-      console.log(`    ${c.bold}Active:${c.reset} ${c.green}${resolved.label}${c.reset}`);
-      console.log(`    ${c.dim}Override: --provider=<name> or AGENTAUDIT_PROVIDER=<name>${c.reset}`);
+      const activeModel = modelOverride || process.env.AGENTAUDIT_MODEL || loadConfig()?.preferred_model;
+      console.log(`    ${c.bold}Active:${c.reset} ${c.green}${resolved.label}${c.reset}${activeModel ? `  ${c.dim}model: ${activeModel}${c.reset}` : ''}`);
+      console.log(`    ${c.dim}Override: --provider=<name> --model=<name>${c.reset}`);
       console.log(`    ${c.dim}Set default: agentaudit config set provider <name>${c.reset}`);
+      console.log(`    ${c.dim}             agentaudit config set model <name>${c.reset}`);
     } else {
       console.log(`    ${c.yellow}⚠  No working LLM provider.${c.reset} Deep audits require one.`);
       console.log(`    ${c.dim}Set a key: export ANTHROPIC_API_KEY=sk-ant-...${c.reset}`);
@@ -1902,6 +1924,12 @@ async function main() {
       console.log(`  ${c.green}✔${c.reset}  Default provider set to: ${c.bold}${val}${c.reset}`);
       console.log(`     ${c.dim}Override per-command: --provider=<name>${c.reset}`);
       console.log(`     ${c.dim}Or env: AGENTAUDIT_PROVIDER=<name>${c.reset}`);
+    } else if (subCmd === 'set' && targets[1] === 'model' && targets[2]) {
+      const val = targets[2];
+      saveConfig({ preferred_model: val });
+      console.log(`  ${c.green}✔${c.reset}  Default model set to: ${c.bold}${val}${c.reset}`);
+      console.log(`     ${c.dim}Override per-command: --model=<name>${c.reset}`);
+      console.log(`     ${c.dim}Or env: AGENTAUDIT_MODEL=<name>${c.reset}`);
     } else if (subCmd === 'get' || !subCmd) {
       const cfg = loadConfig();
       console.log(`  ${c.bold}Config:${c.reset} ${USER_CONFIG_FILE}`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentaudit",
-  "version": "3.9.20",
+  "version": "3.9.21",
   "description": "Security scanner for AI packages — MCP server + CLI",
   "type": "module",
   "bin": {