codebase-cli 2.0.0-pre.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Codebase Foundation
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,266 @@
+# Codebase CLI
+
+AI coding agent in your terminal. Reads your project, writes code, runs commands, searches the web. Works with any LLM provider — or sign in with codebase.foundation and we proxy inference for you.
+
+> **v2 (TypeScript)** — codebase-cli has been rewritten on top of the
+> [pi-mono](https://github.com/earendil-works/pi-mono) runtime. Existing
+> v1 (Go) users: the installer below auto-detects the old binary and
+> migrates your data. See [`docs/MIGRATION_v1_to_v2.md`](docs/MIGRATION_v1_to_v2.md).
+
+## Install
+
+Requires **Node.js ≥ 20**. The one-liner installer prints a hint with Volta/fnm/nvm if Node is missing or too old.
+
+**macOS / Linux (one-liner — recommended):**
+
+```sh
+curl -fsSL https://codebase.design/install.sh | sh
+```
+
+This detects an existing v1 binary, asks before removing it, then installs v2 via npm.
+
+**Windows (PowerShell):**
+
+```powershell
+irm https://codebase.design/install.ps1 | iex
+```
+
+**With npm (any platform, requires Node.js ≥ 20):**
+
+```sh
+npm install -g codebase-cli
+```
+
+**With Homebrew:**
+
+```sh
+brew install codebase-foundation/codebase/codebase
+```
+
+**From source:**
+
+```sh
+git clone https://github.com/codebase-foundation/codebase-cli.git
+cd codebase-cli
+npm install
+npm run build
+npm link        # symlinks `codebase` into your npm prefix
+```
+
+After install, run `codebase` from any project directory.
+
+## Quick Start
+
+**Option 1: Login with Codebase (easiest)**
+
+```sh
+codebase auth login
+```
+
+Opens your browser, logs you into codebase.foundation, and you're ready. Uses our inference providers (Claude, MiniMax, Qwen, etc.) with your account credits. No API keys needed.
+
+**Option 2: Bring your own API key**
+
+```sh
+export ANTHROPIC_API_KEY=sk-ant-...
+codebase
+```
+
+Works with any provider:
+
+```sh
+# OpenAI
+export OPENAI_API_KEY=sk-...
+
+# Groq
+export OPENAI_BASE_URL=https://api.groq.com/openai/v1
+export OPENAI_API_KEY=gsk-...
+export OPENAI_MODEL=llama-3.3-70b-versatile
+
+# Ollama (local, free)
+export OPENAI_BASE_URL=http://localhost:11434/v1
+export OPENAI_API_KEY=ollama
+export OPENAI_MODEL=qwen2.5-coder:32b
+```
+
+**Option 3: First-run setup wizard**
+
+Just run `codebase` with no config. The setup wizard walks you through picking a provider, entering your key, and selecting a model. "Login with Codebase" is the first option.
+
+## What It Does
+
+You describe what you want. The agent reads your code, makes changes, runs commands, and explains what it did.
+
+```
+> add a /health endpoint that returns uptime and version
+
+  read_file server.go                    ✓
+  read_file go.mod                       ✓
+  edit_file server.go                    ✓
+  shell go build ./...                   ✓
+
+Added GET /health endpoint at server.go:47 returning JSON with
+uptime, version, and go runtime. Build passes.
+```
+
+## Tools (30)
+
+| Category | Tools |
+|----------|-------|
+| **File read** | `read_file`, `list_files`, `glob`, `grep`, `search_files` |
+| **File write** | `write_file`, `edit_file`, `multi_edit`, `notebook_edit` |
+| **Shell** | `shell` (input-aware parallelism — read-only commands run concurrently) |
+| **Git** | `git_status`, `git_diff`, `git_log`, `git_commit`, `git_branch`, `enter_worktree`, `exit_worktree` |
+| **Web** | `web_search`, `web_fetch` |
+| **Agent** | `dispatch_agent` (explore, plan, or general-purpose subagents with optional worktree isolation) |
+| **Tasks** | `create_task`, `update_task`, `list_tasks`, `get_task` |
+| **Planning** | `enter_plan_mode`, `exit_plan_mode` |
+| **Memory** | `save_memory`, `read_memory` (persist context across sessions) |
+| **Other** | `config`, `ask_user` |
+
+Plus any tools from connected MCP servers.
+
+## Commands (22)
+
+| Command | What it does |
+|---------|-------------|
+| `/help` | List all commands |
+| `/status` | Model, tokens, turns, cost |
+| `/cost` | Token usage and estimated cost |
+| `/context` | Visual context window usage bar |
+| `/model [name]` | Show or switch model |
+| `/commit` | Generate commit from current diff |
+| `/review` | Code review of uncommitted changes |
+| `/plan` | Enter planning mode |
+| `/diff` | Open diff in VS Code/Cursor |
+| `/compact` | Manually compact conversation |
+| `/clear` | Clear display |
+| `/memory` | View saved project memories |
+| `/undo [file]` | Revert file from session history or git |
+| `/export [file]` | Export conversation to markdown |
+| `/tasks` | Show task checklist |
+| `/theme` | Switch color theme |
+| `/trust` | Set permission level |
+| `/diagnostics` | Toggle language checkers |
+| `/copy` | Copy last response to clipboard |
+| `/session` | Full session info |
+| `/setup` | Re-run setup wizard |
+| `/quit` | Exit (or ctrl+c twice) |
+
+## Features
+
+- **30 tools** with schema validation and input-dependent parallel execution
+- **Streaming tool execution** — tools start running before the model finishes responding
+- **3 agent types** — explore (read-only), plan (architecture), general-purpose (full access)
+- **Worktree isolation** — subagents can work in isolated git branches
+- **Cross-session memory** — remembers your preferences and project context
+- **Error recovery** — auto-retries on context overflow, output limits, rate limits
+- **Structured compaction** — 9-section summaries when context gets long
+- **Hooks system** — automate lint/test/format after edits
+- **7 language checkers** — Go, TypeScript, ESLint, Python (pyright/mypy), Rust
+- **MCP support** — connect external tool servers for extensibility
+- **IDE detection** — discovers VS Code/Cursor/JetBrains via lockfiles
+- **File history** — undo any edit within the session, even without git
+- **Glue models** — route cheap tasks to a fast model, save money
+- **Permission explainer** — risk-rated permission prompts (LOW/MEDIUM/HIGH)
+- **Multi-provider** — OpenAI, Anthropic, MiniMax, Groq, Ollama, any compatible endpoint
+- **OAuth-aware platform** — sign-in unlocks proxied inference and account-curated skills/templates/prompts
+
+## Authentication
+
+```sh
+codebase auth login            # browser OAuth — log in with Google, GitHub, or wallet
+codebase auth <cbk_xxx>        # save an API key from the dashboard (SSH / headless)
+codebase auth status           # show current sign-in
+codebase auth refresh          # force-refresh the access token
+codebase auth logout           # revoke session
+```
+
+Credentials are stored at `~/.codebase/credentials.json` (mode 0600).
+
+When logged in, the CLI routes through `codebase.foundation` — you get access to all providers (Claude, MiniMax, Qwen, etc.) using your account credits. No API keys to manage. Skill, template, and prompt definitions you author in the web app become available automatically (Phase 7+).
+
+## MCP (External Tool Servers)
+
+Connect to any MCP-compatible server. Add to `~/.codebase/config.json`:
+
+```json
+{
+  "mcp_servers": {
+    "github": {
+      "command": "mcp-server-github",
+      "args": ["--token", "$GITHUB_TOKEN"],
+      "transport": "stdio"
+    }
+  }
+}
+```
+
+MCP tools appear alongside built-in tools automatically.
+
+## Hooks
+
+Automate actions on events. Add to `~/.codebase/hooks.json`:
+
+```json
+[
+  {
+    "event": "PostEdit",
+    "matcher": "write_file|edit_file",
+    "command": "go vet ./...",
+    "timeout": 15
+  }
+]
+```
+
+Events: `PreToolUse`, `PostToolUse`, `PostEdit`, `UserPromptSubmit`, `SessionStart`, `Stop`.
+
+## Project Instructions
+
+The CLI reads these files from your project root for context:
+
+- `CLAUDE.md` — project instructions (Claude Code convention)
+- `AGENTS.md` — agent instructions (OpenAI Codex convention)
+- `CODEX.md` — project instructions (Codex convention)
+- `.cursorrules` — project instructions (Cursor convention)
+
+## Flags
+
+```
+codebase                            # run in current directory
+codebase --dir /path/to/proj        # run in specific directory
+codebase --model claude-sonnet-4-5  # override model
+codebase --resume                   # resume previous session
+codebase --version                  # print version
+codebase auth login                 # authenticate with codebase.foundation
+codebase auth logout                # revoke authentication
+codebase --headless "fix the build" # one-shot, no TUI
+```
+
+## Environment Variables
+
+```sh
+# LLM Provider (pick one)
+OPENAI_API_KEY=...           # OpenAI or compatible
+ANTHROPIC_API_KEY=...        # Anthropic (auto-detected)
+OPENAI_BASE_URL=...          # Custom endpoint
+OPENAI_MODEL=...             # Override model
+
+# Glue (optional — cheap model for routing/narration)
+GLUE_API_KEY=...
+GLUE_BASE_URL=...
+GLUE_FAST_MODEL=...
+GLUE_SMART_MODEL=...
+
+# Web Search (optional — DuckDuckGo works without keys)
+TAVILY_API_KEY=...
+BRAVE_API_KEY=...
+
+# Behavior
+CODEBASE_NOBOOT=1            # skip boot animation
+CODEBASE_NOSOUND=1           # skip boot audio
+```
+
+## License
+
+MIT

package/bin/codebase

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+import("../dist/cli.js");

package/dist/agent/agent.js

@@ -0,0 +1,198 @@
+import { homedir } from "node:os";
+import { isAbsolute, join, resolve } from "node:path";
+import { Agent } from "@earendil-works/pi-agent-core";
+import { CompactionEngine } from "../compaction/engine.js";
+import { DiagnosticsEngine, formatDiagnostics } from "../diagnostics/engine.js";
+import { GlueClient, resolveGlueModels } from "../glue/client.js";
+import { HookManager } from "../hooks/manager.js";
+import { buildMemoryAddendum } from "../memory/inject.js";
+import { MemoryStore } from "../memory/store.js";
+import { PermissionStore } from "../permissions/store.js";
+import { PlanModeStore } from "../plan/store.js";
+import { SessionStore } from "../sessions/store.js";
+import { FileStateCache } from "../tools/file-state-cache.js";
+import { buildTools } from "../tools/registry.js";
+import { TaskStore } from "../tools/task-store.js";
+import { UserQueryStore } from "../user-queries/store.js";
+import { resolveConfig } from "./config.js";
+import { buildSystemPrompt } from "./system-prompt.js";
+const WRITE_TOOL_NAMES = new Set(["write_file", "edit_file", "multi_edit", "notebook_edit"]);
+/**
+ * Tools blocked while plan mode is active. Anything that mutates working-tree
+ * state, runs commands, or talks to git's index belongs here. Read tools
+ * (read_file, list_files, glob, grep, dispatch_agent, web_*, git read trio)
+ * stay available so the agent can investigate and write the plan.
+ */
+const PLAN_MODE_BLOCKED = new Set([
+    "write_file",
+    "edit_file",
+    "multi_edit",
+    "notebook_edit",
+    "shell",
+    "git_commit",
+    "git_branch",
+    "enter_worktree",
+    "exit_worktree",
+]);
+export function createAgent(opts = {}) {
+    const { model, apiKey, source } = resolveConfig();
+    const cwd = opts.cwd ?? process.cwd();
+    const systemPrompt = opts.systemPrompt ?? buildSystemPrompt(cwd);
+    const permissions = new PermissionStore();
+    const userQueries = new UserQueryStore();
+    const planMode = new PlanModeStore();
+    const memory = new MemoryStore({ cwd });
+    const hooks = new HookManager();
+    hooks.loadFrom(join(homedir(), ".codebase", "hooks.json"), join(cwd, ".codebase", "hooks.json"));
+    const diagnostics = new DiagnosticsEngine({ cwd });
+    const glueModels = resolveGlueModels({ parentModel: model, parentApiKey: apiKey });
+    const glue = new GlueClient({
+        fastModel: glueModels.fast,
+        smartModel: glueModels.smart,
+        apiKey: glueModels.apiKey,
+    });
+    const compaction = new CompactionEngine({ glue, modelId: model.id });
+    const sessions = new SessionStore({ cwd });
+    const resumed = opts.resume ? sessions.load(model.id) : null;
+    const toolContext = {
+        cwd,
+        fileStateCache: new FileStateCache(),
+        tasks: new TaskStore(),
+        userQueries,
+        planMode,
+        memory,
+        spawnSubagent: ({ systemPrompt: subPrompt, tools: subTools }) => new Agent({
+            initialState: { model, systemPrompt: subPrompt, tools: subTools },
+            getApiKey: () => apiKey,
+        }),
+    };
+    // MEMORY.md gets concatenated onto the system prompt at agent creation.
+    // Reload-after-save is a Phase 11 polish item.
+    const fullSystemPrompt = systemPrompt + buildMemoryAddendum(memory);
+    const agent = new Agent({
+        initialState: {
+            model,
+            systemPrompt: fullSystemPrompt,
+            tools: buildTools(toolContext),
+            messages: resumed?.messages ?? [],
+        },
+        getApiKey: () => apiKey,
+        transformContext: async (messages, signal) => {
+            if (!compaction.needsCompaction(messages))
+                return messages;
+            const result = await compaction.compact(messages, signal);
+            return result.messages;
+        },
+        beforeToolCall: async (ctx, signal) => {
+            // 1. Plan mode gate: block destructive tools entirely while planning.
+            if (planMode.isActive() && PLAN_MODE_BLOCKED.has(ctx.toolCall.name)) {
+                return {
+                    block: true,
+                    reason: `${ctx.toolCall.name} is blocked while plan mode is active. ` +
+                        "Use exit_plan_mode after presenting your plan to regain write access.",
+                };
+            }
+            // 2. Built-in permission gate (fast, sync for read-only tools).
+            const decision = await permissions.evaluate(ctx.toolCall.name, ctx.args);
+            if (decision === "block") {
+                return { block: true, reason: "Permission denied by user." };
+            }
+            // 3. User-defined hooks (typically audit/lint/validation steps).
+            const filePath = ctx.args?.path;
+            const outcome = await hooks.dispatch("PreToolUse", {
+                event: "PreToolUse",
+                toolName: ctx.toolCall.name,
+                toolArgs: ctx.args,
+                filePath,
+                workingDir: cwd,
+            }, signal);
+            if (outcome.blocked) {
+                return { block: true, reason: outcome.reason ?? "Blocked by hook." };
+            }
+            return undefined;
+        },
+        afterToolCall: async (ctx, signal) => {
+            const filePath = ctx.args?.path;
+            await hooks.dispatch("PostToolUse", {
+                event: "PostToolUse",
+                toolName: ctx.toolCall.name,
+                toolArgs: ctx.args,
+                filePath,
+                workingDir: cwd,
+            }, signal);
+            // After a write/edit tool, run language checkers on the affected file
+            // and steer the result into the next turn. Fire-and-forget so the
+            // tool result return isn't blocked by a 15s checker run.
+            if (filePath && WRITE_TOOL_NAMES.has(ctx.toolCall.name)) {
+                const absPath = isAbsolute(filePath) ? filePath : resolve(cwd, filePath);
+                diagnostics
+                    .forFiles([absPath], signal)
+                    .then((diags) => {
+                    if (diags.length === 0)
+                        return;
+                    const body = formatDiagnostics(diags);
+                    agentRef?.steer({
+                        role: "user",
+                        content: `<system-reminder>\n${body}\n</system-reminder>`,
+                        timestamp: Date.now(),
+                    });
+                })
+                    .catch(() => {
+                    // Diagnostics failures are non-fatal — surface nothing.
+                });
+            }
+            return undefined;
+        },
+    });
+    // agentRef lets the afterToolCall closure call agent.steer() once the
+    // Agent is constructed. JS hoisting makes the assignment safe because
+    // afterToolCall fires inside the event loop, well after this assignment.
+    const agentRef = agent;
+    const subscribe = (listener) => agent.subscribe((event) => {
+        listener(event);
+    });
+    // Persist after every agent_end so a crash mid-session doesn't lose work.
+    agent.subscribe((event) => {
+        if (event.type !== "agent_end")
+            return;
+        try {
+            const messages = event.messages.length > 0 ? event.messages : (resumed?.messages ?? []);
+            if (messages.length === 0)
+                return;
+            sessions.save({
+                modelId: model.id,
+                title: resumed?.title ?? null,
+                messages,
+                usage: resumed?.usage ?? {
+                    input: 0,
+                    output: 0,
+                    cacheRead: 0,
+                    cacheWrite: 0,
+                    totalTokens: 0,
+                    cost: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0, total: 0 },
+                },
+            });
+        }
+        catch {
+            // Persistence is best-effort — don't crash the agent over a write failure.
+        }
+    });
+    void agentRef;
+    return {
+        agent,
+        model,
+        source,
+        toolContext,
+        permissions,
+        userQueries,
+        planMode,
+        memory,
+        glue,
+        compaction,
+        sessions,
+        hooks,
+        diagnostics,
+        subscribe,
+    };
+}
+//# sourceMappingURL=agent.js.map

package/dist/agent/agent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent.js","sourceRoot":"","sources":["../../src/agent/agent.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACtD,OAAO,EAAE,KAAK,EAAmB,MAAM,+BAA+B,CAAC;AAEvE,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAChF,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAClE,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAEnD,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAuB,aAAa,EAAE,MAAM,aAAa,CAAC;AACjE,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAEvD,MAAM,gBAAgB,GAAwB,IAAI,GAAG,CAAC,CAAC,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,eAAe,CAAC,CAAC,CAAC;AAElH;;;;;GAKG;AACH,MAAM,iBAAiB,GAAwB,IAAI,GAAG,CAAC;IACtD,YAAY;IACZ,WAAW;IACX,YAAY;IACZ,eAAe;IACf,OAAO;IACP,YAAY;IACZ,YAAY;IACZ,gBAAgB;IAChB,eAAe;CACf,CAAC,CAAC;AA0BH,MAAM,UAAU,WAAW,CAAC,OAA2B,EAAE;IACxD,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,aAAa,EAAE,CAAC;IAClD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACtC,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAEjE,MAAM,WAAW,GAAG,IAAI,eAAe,EAAE,CAAC;IAC1C,MAAM,WAAW,GAAG,IAAI,cAAc,EAAE,CAAC;IACzC,MAAM,QAAQ,GAAG,IAAI,aAAa,EAAE,CAAC;IACrC,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC;IAChC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,YAAY,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC;IACjG,MAAM,WAAW,GAAG,IAAI,iBAAiB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;IAEnD,MAAM,UAAU,GAAG,iBAAiB,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,CAAC;IACnF,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC;QAC3B,SAAS,EAAE,UAAU,CAAC,IAAI;QAC1B,UAAU,EAAE,UAAU,CAAC,KAAK;QAC5B,MAAM,EAAE,UAAU,CAAC,MAAM;KACzB,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,IAAI,gBAAgB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;IACrE,MAAM,QAAQ,GAAG,IAAI,YAAY,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAE7D,MAAM,WAAW,GAAgB;QAChC,GAAG;QACH,cAAc,EAAE,IAAI,cAAc,EAAE;QACpC,KAAK,EAAE,IAAI,SAAS,EAAE;QACtB,WAAW;QACX,QAAQ;QACR,MAAM;QACN,aAAa,EAAE,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,CAC/D,IAAI,KAAK,CAAC;YACT,YAAY,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE;YACjE,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM;SACvB,CAAC;KACH,CAAC;IAEF,wEAAwE;IACxE,+CAA+C;IAC/C,MAAM,gBAAgB,GAAG,YAAY,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAEpE,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC;QACvB,YAAY,EAAE;YACb,KAAK;YACL,YAAY,EAAE,gBAAgB;YAC9B,KAAK,EAAE,UAAU,CAAC,WAAW,CAAC;YAC9B,QAAQ,EAAE,OAAO,EAAE,QAAQ,IAAI,EAAE;SACjC;QACD,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM;QACvB,gBAAgB,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;YAC5C,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,QAAQ,CAAC;gBAAE,OAAO,QAAQ,CAAC;YAC3D,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAC1D,OAAO,MAAM,CAAC,QAAQ,CAAC;QACxB,CAAC;QACD,cAAc,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;YACrC,sEAAsE;YACtE,IAAI,QAAQ,CAAC,QAAQ,EAAE,IAAI,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrE,OAAO;oBACN,KAAK,EAAE,IAAI;oBACX,MAAM,EACL,GAAG,GAAG,CAAC,QAAQ,CAAC,IAAI,yCAAyC;wBAC7D,uEAAuE;iBACxE,CAAC;YACH,CAAC;YACD,gEAAgE;YAChE,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;YACzE,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;gBAC1B,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC;YAC9D,CAAC;YACD,iEAAiE;YACjE,MAAM,QAAQ,GAAI,GAAG,CAAC,IAAsC,EAAE,IAAI,CAAC;YACnE,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,QAAQ,CACnC,YAAY,EACZ;gBACC,KAAK,EAAE,YAAY;gBACnB,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,IAAI;gBAC3B,QAAQ,EAAE,GAAG,CAAC,IAAI;gBAClB,QAAQ;gBACR,UAAU,EAAE,GAAG;aACf,EACD,MAAM,CACN,CAAC;YACF,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;gBACrB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,kBAAkB,EAAE,CAAC;YACtE,CAAC;YACD,OAAO,SAAS,CAAC;QAClB,CAAC;QACD,aAAa,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;YACpC,MAAM,QAAQ,GAAI,GAAG,CAAC,IAAsC,EAAE,IAAI,CAAC;YACnE,MAAM,KAAK,CAAC,QAAQ,CACnB,aAAa,EACb;gBACC,KAAK,EAAE,aAAa;gBACpB,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,IAAI;gBAC3B,QAAQ,EAAE,GAAG,CAAC,IAAI;gBAClB,QAAQ;gBACR,UAAU,EAAE,GAAG;aACf,EACD,MAAM,CACN,CAAC;YAEF,sEAAsE;YACtE,kEAAkE;YAClE,yDAAyD;YACzD,IAAI,QAAQ,IAAI,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBACzD,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;gBACzE,WAAW;qBACT,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;qBAC3B,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;oBACf,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;wBAAE,OAAO;oBAC/B,MAAM,IAAI,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;oBACtC,QAAQ,EAAE,KAAK,CAAC;wBACf,IAAI,EAAE,MAAM;wBACZ,OAAO,EAAE,sBAAsB,IAAI,sBAAsB;wBACzD,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;qBACrB,CAAC,CAAC;gBACJ,CAAC,CAAC;qBACD,KAAK,CAAC,GAAG,EAAE;oBACX,wDAAwD;gBACzD,CAAC,CAAC,CAAC;YACL,CAAC;YACD,OAAO,SAAS,CAAC;QAClB,CAAC;KACD,CAAC,CAAC;IAEH,sEAAsE;IACtE,sEAAsE;IACtE,yEAAyE;IACzE,MAAM,QAAQ,GAAU,KAAK,CAAC;IAE9B,MAAM,SAAS,GAAG,CAAC,QAAqC,EAAgB,EAAE,CACzE,KAAK,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE;QACzB,QAAQ,CAAC,KAAK,CAAC,CAAC;IACjB,CAAC,CAAC,CAAC;IAEJ,0EAA0E;IAC1E,KAAK,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE;QACzB,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;YAAE,OAAO;QACvC,IAAI,CAAC;YACJ,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC;YACxF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO;YAClC,QAAQ,CAAC,IAAI,CAAC;gBACb,OAAO,EAAE,KAAK,CAAC,EAAE;gBACjB,KAAK,EAAE,OAAO,EAAE,KAAK,IAAI,IAAI;gBAC7B,QAAQ;gBACR,KAAK,EAAE,OAAO,EAAE,KAAK,IAAI;oBACxB,KAAK,EAAE,CAAC;oBACR,MAAM,EAAE,CAAC;oBACT,SAAS,EAAE,CAAC;oBACZ,UAAU,EAAE,CAAC;oBACb,WAAW,EAAE,CAAC;oBACd,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE;iBACpE;aACD,CAAC,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACR,2EAA2E;QAC5E,CAAC;IACF,CAAC,CAAC,CAAC;IAEH,KAAK,QAAQ,CAAC;IACd,OAAO;QACN,KAAK;QACL,KAAK;QACL,MAAM;QACN,WAAW;QACX,WAAW;QACX,WAAW;QACX,QAAQ;QACR,MAAM;QACN,IAAI;QACJ,UAAU;QACV,QAAQ;QACR,KAAK;QACL,WAAW;QACX,SAAS;KACT,CAAC;AACH,CAAC"}

package/dist/agent/config.js

@@ -0,0 +1,117 @@
+import { getEnvApiKey, getModel } from "@earendil-works/pi-ai";
+import { CredentialsStore } from "../auth/credentials.js";
+/**
+ * Provider+model selection, in priority order:
+ *   1. Saved OAuth/API credentials (~/.codebase/credentials.json) — if
+ *      present and not expired, route the chosen model through the
+ *      codebase.foundation inference proxy so the backend can deduct
+ *      credits. The model metadata stays the same; only baseUrl + apiKey
+ *      change.
+ *   2. CODEBASE_PROVIDER + CODEBASE_MODEL env (explicit override)
+ *   3. First provider in {@link AUTO_DETECT_ORDER} with a usable env key
+ *   4. Throw — caller should surface this as an onboarding hint
+ *
+ * pi-ai's `getEnvApiKey` already handles every quirky case: OAuth-only
+ * providers, Vertex ADC, AWS multi-source. We just trust it.
+ */
+const DEFAULT_PROXY_BASE = "https://codebase.foundation/api/cli";
+const AUTO_DETECT_ORDER = [
+    "anthropic",
+    "openai",
+    "groq",
+    "google",
+    "mistral",
+    "deepseek",
+    "cerebras",
+    "xai",
+    "openrouter",
+];
+const DEFAULT_MODELS = {
+    anthropic: "claude-sonnet-4-6",
+    openai: "gpt-5.1",
+    groq: "llama-3.3-70b-versatile",
+    google: "gemini-2.5-pro",
+    mistral: "mistral-large-latest",
+    deepseek: "deepseek-chat",
+    cerebras: "llama-3.3-70b",
+    xai: "grok-4",
+    openrouter: "anthropic/claude-sonnet-4-6",
+};
+export class ConfigError extends Error {
+}
+export function resolveConfig(envOrOpts = process.env) {
+    const opts = isProcessEnv(envOrOpts) ? { env: envOrOpts } : envOrOpts;
+    const env = opts.env ?? process.env;
+    const credentials = opts.credentials ?? new CredentialsStore();
+    // 1. OAuth/API credentials → proxy mode (unless explicitly disabled).
+    const useProxy = env.CODEBASE_DISABLE_PROXY !== "1";
+    if (useProxy) {
+        const creds = credentials.load();
+        if (creds && !credentials.isExpired(creds)) {
+            const proxied = buildProxiedConfig(env, creds.accessToken);
+            if (proxied)
+                return proxied;
+        }
+    }
+    const explicitProvider = env.CODEBASE_PROVIDER;
+    const explicitModel = env.CODEBASE_MODEL;
+    if (explicitProvider && explicitModel) {
+        const model = getModel(explicitProvider, explicitModel);
+        if (!model) {
+            throw new ConfigError(`CODEBASE_PROVIDER=${explicitProvider} CODEBASE_MODEL=${explicitModel} not in pi-ai's model registry. ` +
+                `Check the spelling, or unset both to auto-detect.`);
+        }
+        const apiKey = getEnvApiKey(explicitProvider);
+        if (!apiKey) {
+            throw new ConfigError(`CODEBASE_PROVIDER=${explicitProvider} has no API key in env. Set the appropriate *_API_KEY var.`);
+        }
+        return { model, apiKey, source: "explicit" };
+    }
+    for (const provider of AUTO_DETECT_ORDER) {
+        const apiKey = getEnvApiKey(provider);
+        if (!apiKey)
+            continue;
+        const modelId = DEFAULT_MODELS[provider];
+        if (!modelId)
+            continue;
+        const model = getModel(provider, modelId);
+        if (!model)
+            continue;
+        return { model, apiKey, source: "auto" };
+    }
+    throw new ConfigError("No usable LLM provider found. Sign in with `codebase auth login`, paste an API key with " +
+        "`codebase auth <key>`, or set one of: ANTHROPIC_API_KEY, OPENAI_API_KEY, GROQ_API_KEY, " +
+        "GOOGLE_API_KEY, MISTRAL_API_KEY, DEEPSEEK_API_KEY, CEREBRAS_API_KEY, XAI_API_KEY, OPENROUTER_API_KEY. " +
+        "Or set CODEBASE_PROVIDER + CODEBASE_MODEL explicitly.");
+}
+/**
+ * Build a model whose baseUrl points at the codebase.foundation
+ * inference proxy. The proxy MUST mimic the chosen provider's wire
+ * protocol (Anthropic Messages, OpenAI Responses, etc.) — what we send
+ * here is identical to a direct call, the bearer token is the only
+ * thing that changes.
+ */
+function buildProxiedConfig(env, accessToken) {
+    const explicitProvider = env.CODEBASE_PROVIDER;
+    const explicitModel = env.CODEBASE_MODEL;
+    const provider = explicitProvider ?? "anthropic";
+    const modelId = explicitModel ?? DEFAULT_MODELS[provider];
+    if (!modelId)
+        return null;
+    const baseModel = getModel(provider, modelId);
+    if (!baseModel)
+        return null;
+    const proxyBase = (env.CODEBASE_PROXY_BASE_URL ?? DEFAULT_PROXY_BASE).replace(/\/+$/, "");
+    const proxiedModel = { ...baseModel, baseUrl: proxyBase };
+    return { model: proxiedModel, apiKey: accessToken, source: "proxy" };
+}
+function isProcessEnv(value) {
+    if (!value)
+        return true;
+    // ResolveConfigOptions has at most env/credentials properties; ProcessEnv has many.
+    const keys = Object.keys(value);
+    if (keys.length === 0)
+        return true;
+    return !keys.every((k) => k === "env" || k === "credentials");
+}
+//# sourceMappingURL=config.js.map

package/dist/agent/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/agent/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAkC,MAAM,uBAAuB,CAAC;AAC/F,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE1D;;;;;;;;;;;;;GAaG;AAEH,MAAM,kBAAkB,GAAG,qCAAqC,CAAC;AAEjE,MAAM,iBAAiB,GAA6B;IACnD,WAAW;IACX,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,SAAS;IACT,UAAU;IACV,UAAU;IACV,KAAK;IACL,YAAY;CACH,CAAC;AAEX,MAAM,cAAc,GAA2C;IAC9D,SAAS,EAAE,mBAAmB;IAC9B,MAAM,EAAE,SAAS;IACjB,IAAI,EAAE,yBAAyB;IAC/B,MAAM,EAAE,gBAAgB;IACxB,OAAO,EAAE,sBAAsB;IAC/B,QAAQ,EAAE,eAAe;IACzB,QAAQ,EAAE,eAAe;IACzB,GAAG,EAAE,QAAQ;IACb,UAAU,EAAE,6BAA6B;CACzC,CAAC;AAQF,MAAM,OAAO,WAAY,SAAQ,KAAK;CAAG;AAOzC,MAAM,UAAU,aAAa,CAAC,YAAsD,OAAO,CAAC,GAAG;IAC9F,MAAM,IAAI,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACtE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACpC,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,IAAI,gBAAgB,EAAE,CAAC;IAE/D,sEAAsE;IACtE,MAAM,QAAQ,GAAG,GAAG,CAAC,sBAAsB,KAAK,GAAG,CAAC;IACpD,IAAI,QAAQ,EAAE,CAAC;QACd,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC;QACjC,IAAI,KAAK,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5C,MAAM,OAAO,GAAG,kBAAkB,CAAC,GAAG,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;YAC3D,IAAI,OAAO;gBAAE,OAAO,OAAO,CAAC;QAC7B,CAAC;IACF,CAAC;IAED,MAAM,gBAAgB,GAAG,GAAG,CAAC,iBAA8C,CAAC;IAC5E,MAAM,aAAa,GAAG,GAAG,CAAC,cAAc,CAAC;IAEzC,IAAI,gBAAgB,IAAI,aAAa,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,QAAQ,CAAC,gBAAgB,EAAE,aAAsB,CAAC,CAAC;QACjE,IAAI,CAAC,KAAK,EAAE,CAAC;YACZ,MAAM,IAAI,WAAW,CACpB,qBAAqB,gBAAgB,mBAAmB,aAAa,kCAAkC;gBACtG,mDAAmD,CACpD,CAAC;QACH,CAAC;QACD,MAAM,MAAM,GAAG,YAAY,CAAC,gBAAgB,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,MAAM,IAAI,WAAW,CACpB,qBAAqB,gBAAgB,4DAA4D,CACjG,CAAC;QACH,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAC9C,CAAC;IAED,KAAK,MAAM,QAAQ,IAAI,iBAAiB,EAAE,CAAC;QAC1C,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM;YAAE,SAAS;QAEtB,MAAM,OAAO,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAI,CAAC,OAAO;YAAE,SAAS;QAEvB,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,EAAE,OAAgB,CAAC,CAAC;QACnD,IAAI,CAAC,KAAK;YAAE,SAAS;QAErB,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC1C,CAAC;IAED,MAAM,IAAI,WAAW,CACpB,0FAA0F;QACzF,yFAAyF;QACzF,wGAAwG;QACxG,uDAAuD,CACxD,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,kBAAkB,CAAC,GAAsB,EAAE,WAAmB;IACtE,MAAM,gBAAgB,GAAG,GAAG,CAAC,iBAA8C,CAAC;IAC5E,MAAM,aAAa,GAAG,GAAG,CAAC,cAAc,CAAC;IACzC,MAAM,QAAQ,GAAG,gBAAgB,IAAI,WAAW,CAAC;IACjD,MAAM,OAAO,GAAG,aAAa,IAAI,cAAc,CAAC,QAAQ,CAAC,CAAC;IAC1D,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,MAAM,SAAS,GAAG,QAAQ,CAAC,QAAQ,EAAE,OAAgB,CAA8B,CAAC;IACpF,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAE5B,MAAM,SAAS,GAAG,CAAC,GAAG,CAAC,uBAAuB,IAAI,kBAAkB,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC1F,MAAM,YAAY,GAAkB,EAAE,GAAG,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;IACzE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AACtE,CAAC;AAED,SAAS,YAAY,CAAC,KAA+C;IACpE,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,oFAAoF;IACpF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,aAAa,CAAC,CAAC;AAC/D,CAAC"}