codeshark-cli 0.1.1 → 0.1.4

package/dist/banner.js

@@ -1,65 +1,133 @@
 import { hex, bold, dim, stripAnsi } from "./ansi.js";
 import { modelLabel, loadConfig, activeModelId } from "./config.js";
 import { findModel } from "./models.js";
-/**
- * A front-facing pixel shark head, reproduced from the 16×16 mascot artwork:
- * a rounded dome, two eyes, and one open mouth with pointy zigzag teeth —
- * white triangular points separated by red gaps, over a white lower jaw.
- * There is no badge background; the sprite floats directly on the terminal's
- * own background.
- */
-const SPRITE_WIDTH = 16;
-function spriteRow(value) {
-    if (value.length !== SPRITE_WIDTH) {
-        throw new Error(`Mascot row is ${value.length} cells; expected ${SPRITE_WIDTH}`);
-    }
-    return value;
-}
-/**
- * Character grid:
- *   '.' transparent (terminal background)
- *   'D' head
- *   'E' eye
- *   'W' teeth
- *   'R' mouth interior
- */
-export const SPRITE = [
-    spriteRow(".......D........"),
-    spriteRow("......DDDD......"),
-    spriteRow("....DDDDDDDD...."),
-    spriteRow("...DDDDDDDDDD..."),
-    spriteRow("...DDDDDDDDDD..."),
-    spriteRow("..DDDDDDDDDDDD.."),
-    spriteRow(".DDDDDDDDDDDDDD."),
-    spriteRow(".DDEDDWWWWDDEDD."),
-    spriteRow(".DDWDWWWWWWDWDD."),
-    spriteRow(".DWWDWRRRRWDWWD."),
-    spriteRow("DDWDWRRRRRRWDWDD"),
-    spriteRow("DDWDRRRRRRRRDWDD"),
-    spriteRow("DDWWWRWRWRWWWWDD"),
-    spriteRow("DDWWWRWWRWWRWWDD"),
-    spriteRow("DDWWWWWWWWWWWWDD"),
-    spriteRow("DDWWWWWWWWWWWWDD"),
-];
-const COLORS = {
-    D: { fg: "#4a5a68" },
-    E: { fg: "#0b1220" },
-    W: { fg: "#f8fafc" },
-    R: { fg: "#e5484d" },
+const WORDMARK = "CODESHARK";
+const WORDMARK_GLYPHS = {
+    "C": [
+        "01111",
+        "10000",
+        "10000",
+        "10000",
+        "10000",
+        "10000",
+        "01111"
+    ],
+    "O": [
+        "01110",
+        "10001",
+        "10001",
+        "10001",
+        "10001",
+        "10001",
+        "01110"
+    ],
+    "D": [
+        "11110",
+        "10001",
+        "10001",
+        "10001",
+        "10001",
+        "10001",
+        "11110"
+    ],
+    "E": [
+        "11111",
+        "10000",
+        "10000",
+        "11110",
+        "10000",
+        "10000",
+        "11111"
+    ],
+    "S": [
+        "01111",
+        "10000",
+        "10000",
+        "01110",
+        "00001",
+        "00001",
+        "11110"
+    ],
+    "H": [
+        "10001",
+        "10001",
+        "10001",
+        "11111",
+        "10001",
+        "10001",
+        "10001"
+    ],
+    "A": [
+        "01110",
+        "10001",
+        "10001",
+        "11111",
+        "10001",
+        "10001",
+        "10001"
+    ],
+    "R": [
+        "11110",
+        "10001",
+        "10001",
+        "11110",
+        "10100",
+        "10010",
+        "10001"
+    ],
+    "K": [
+        "10001",
+        "10010",
+        "10100",
+        "11000",
+        "10100",
+        "10010",
+        "10001"
+    ]
 };
-function renderSpriteCell(ch, plain) {
-    if (ch === ".")
-        return "  ";
-    if (plain) {
-        if (ch === "E")
-            return "● ";
-        if (ch === "W")
-            return "░░";
-        if (ch === "R")
-            return "▒▒";
-        return "██";
-    }
-    return hex(COLORS[ch]?.fg ?? "#4a5a68", "██");
+function interpolate(start, end, amount) {
+    return Math.round(start + (end - start) * amount);
+}
+function gradientColor(index, length) {
+    const stops = [
+        ["#0b2a5b", 11, 42, 91],
+        ["#1677c8", 22, 119, 200],
+        ["#9bdcff", 155, 220, 255],
+    ];
+    const amount = length <= 1 ? 0 : index / (length - 1);
+    const start = amount <= 0.5 ? stops[0] : stops[1];
+    const end = amount <= 0.5 ? stops[1] : stops[2];
+    const segmentAmount = amount <= 0.5 ? amount * 2 : (amount - 0.5) * 2;
+    const [, startR, startG, startB] = start;
+    const [, endR, endG, endB] = end;
+    return `#${[interpolate(startR, endR, segmentAmount), interpolate(startG, endG, segmentAmount), interpolate(startB, endB, segmentAmount)]
+        .map((value) => value.toString(16).padStart(2, "0"))
+        .join("")}`;
+}
+function renderWordmark(plain, columns) {
+    // Leave a spare column to avoid terminal auto-wrap.
+    if (columns < 56)
+        return plain ? WORDMARK : bold(hex("#9bdcff", WORDMARK));
+    const pixelWidth = columns >= 101 ? 2 : 1;
+    const letters = [...WORDMARK.toUpperCase()];
+    const sharkStart = 4;
+    const sharkLength = letters.length - sharkStart;
+    return Array.from({ length: 7 }, (_, row) => {
+        const parts = [];
+        letters.forEach((letter, letterIndex) => {
+            const glyph = WORDMARK_GLYPHS[letter];
+            const pixels = [...glyph[row]].map((pixel) => {
+                if (pixel === "0")
+                    return " ".repeat(pixelWidth);
+                const block = "\u2588".repeat(pixelWidth);
+                if (plain)
+                    return block;
+                return letterIndex < sharkStart ? bold(hex("#f8fafc", block)) : hex(gradientColor(letterIndex - sharkStart, sharkLength), block);
+            });
+            parts.push(pixels.join(""));
+        });
+        return parts.join(" ");
+    }).join("\n");
 }
 export function renderBanner(opts = {}) {
     const plain = opts.plain ?? false;
@@ -68,20 +136,10 @@ export function renderBanner(opts = {}) {
     const baseLabel = modelLabel(cfg);
     const modelLine = opts.modelLine ?? (entry ? `${baseLabel} · ${entry.context} context` : baseLabel);
     const cwd = opts.cwd ?? process.cwd();
-    const title = plain ? "CodeShark" : bold("CodeShark");
+    const title = renderWordmark(plain, opts.columns ?? process.stdout.columns ?? 80);
     const sub = plain ? modelLine : hex("#8ba3ba", modelLine);
     const dir = plain ? cwd : dim(cwd);
-    const lines = [];
-    const textLines = [title, sub, dir];
-    for (let i = 0; i < SPRITE.length; i++) {
-        let line = "  ";
-        for (const ch of SPRITE[i])
-            line += renderSpriteCell(ch, plain);
-        const text = textLines[i];
-        if (text !== undefined)
-            line += "   " + text;
-        lines.push(line);
-    }
+    const lines = [...title.split("\n").map((line) => "  " + line), "", "  " + sub, "  " + dir];
     if (opts.footer)
         lines.push("", opts.footer);
     return lines.join("\n") + "\n";
@@ -90,5 +148,6 @@ export function printBanner(opts = {}) {
     process.stdout.write(renderBanner(opts));
 }
 export function bannerHasTitle(text) {
-    return stripAnsi(text).includes("CodeShark");
+    const clean = stripAnsi(text);
+    return clean.includes(WORDMARK) || [56, 101].some((columns) => clean.includes(renderWordmark(true, columns).split("\n").map((line) => "  " + line).join("\n")));
 }

package/dist/config.js

@@ -1,10 +1,11 @@
+import { randomUUID } from "node:crypto";
 import { homedir } from "node:os";
-import { existsSync, mkdirSync, readFileSync, writeFileSync, chmodSync } from "node:fs";
+import { existsSync, mkdirSync, readFileSync, writeFileSync, chmodSync, renameSync, unlinkSync } from "node:fs";
 import { dirname, join } from "node:path";
-import { DEFAULT_MODEL_ID, findModel, toApiSlug } from "./models.js";
+import { DEFAULT_MODEL_ID, findModel, isRetiredModel, toApiSlug } from "./models.js";
 export const DEFAULT_GATEWAY_URL = "https://codeshark-gateway.ajrgp.workers.dev";
 /** Kept for backwards compatibility; the catalog in src/models.ts is canonical. */
-export const DEFAULT_MODEL = "glm-5.3-flash-thinking:free";
+export const DEFAULT_MODEL = "glm-5.3-flash-think-search:free";
 /** Fallback slug for OpenRouter when the active model lives on another provider. */
 export const DEFAULT_OPENROUTER_MODEL = "z-ai/glm-5.2:free";
 export const DEFAULT_GEMINI_MODEL = "gemini-2.5-pro";
@@ -20,7 +21,22 @@ export function loadConfig() {
         if (!existsSync(p))
             return {};
         const raw = readFileSync(p, "utf8");
-        return JSON.parse(raw);
+        const parsed = JSON.parse(raw.replace(/^\uFEFF/, ""));
+        if (!parsed || typeof parsed !== "object" || Array.isArray(parsed))
+            return {};
+        const cfg = parsed;
+        if (cfg.maxIterations !== undefined && (!Number.isSafeInteger(cfg.maxIterations) || cfg.maxIterations < 1))
+            delete cfg.maxIterations;
+        const strings = ["model", "systemPrompt", "openrouterApiKey", "openrouterBaseUrl", "unorouterApiKey", "unorouterBaseUrl", "nvidiaApiKey", "nvidiaBaseUrl", "geminiApiKey", "geminiBaseUrl", "gatewayUrl", "gatewayKey", "ollamaBaseUrl", "ollamaModel"];
+        for (const key of strings)
+            if (cfg[key] !== undefined && typeof cfg[key] !== "string")
+                delete cfg[key];
+        for (const key of ["termsAccepted", "setupCompleted"])
+            if (typeof cfg[key] !== "boolean")
+                delete cfg[key];
+        if (cfg.provider && !["gateway", "openrouter", "nvidia", "gemini", "ollama", "unorouter"].includes(cfg.provider))
+            delete cfg.provider;
+        return cfg;
     }
     catch {
         return {};
@@ -30,7 +46,17 @@ export function loadConfig() {
 export function saveConfig(cfg) {
     const p = configPath();
     mkdirSync(dirname(p), { recursive: true });
-    writeFileSync(p, JSON.stringify(cfg, null, 2) + "\n", "utf8");
+    const temporary = p + "." + randomUUID() + ".tmp";
+    try {
+        writeFileSync(temporary, JSON.stringify(cfg, null, 2) + "\n", { encoding: "utf8", mode: 0o600, flag: "wx" });
+        renameSync(temporary, p);
+    }
+    finally {
+        try {
+            unlinkSync(temporary);
+        }
+        catch { /* Already renamed, or never created. */ }
+    }
     try {
         chmodSync(p, 0o600);
     }
@@ -43,9 +69,9 @@ export function saveConfig(cfg) {
  * Falls back sensibly when config/env only name a provider.
  */
 export function activeModelId(cfg) {
-    if (process.env.CODESHARK_MODEL)
+    if (process.env.CODESHARK_MODEL && !isRetiredModel(process.env.CODESHARK_MODEL))
         return process.env.CODESHARK_MODEL;
-    if (cfg.model)
+    if (cfg.model && !isRetiredModel(cfg.model))
         return cfg.model;
     return DEFAULT_MODEL_ID;
 }
@@ -74,7 +100,8 @@ export function activeProvider(cfg) {
 /** Effective model for a provider, honoring env overrides and config. */
 export function effectiveModel(cfg, provider) {
     if (provider === "gemini") {
-        const configured = cfg.model && !findModel(cfg.model) ? cfg.model : undefined;
+        const selected = findModel(activeModelId(cfg));
+        const configured = selected?.provider === "gemini" ? selected.model : cfg.model && !selected ? cfg.model : undefined;
         return process.env.GEMINI_MODEL ?? configured ?? DEFAULT_GEMINI_MODEL;
     }
     if (provider === "ollama")

package/dist/index.js

@@ -15,6 +15,8 @@ import { runAgent } from "./agent.js";
 import { errorMessage } from "./provider/types.js";
 import { launchKeysPage } from "./keysPage.js";
 import { extractFolderArg, openProjectFolder } from "./project.js";
+import { installLatestVersion, isNewerVersion, latestPublishedVersion } from "./update.js";
+import { checkModelAvailability, modelAvailabilitySnapshot } from "./modelAvailability.js";
 const require = createRequire(import.meta.url);
 const VERSION = require("../package.json").version;
 function printHelp() {
@@ -27,10 +29,11 @@ function printHelp() {
         "    codeshark <prompt…>        one-shot prompt for the current project folder",
         "    codeshark --folder <path>  open a specific project folder first",
         "    codeshark --folder <path> \"prompt…\"  run a prompt in that folder",
-        "    codeshark banner [--plain] print just the mascot banner",
+        "    codeshark banner [--plain] print just the CodeShark wordmark",
         "    codeshark setup            guided setup for providers / API keys",
         "    codeshark keys             open the password-protected local key page",
         "    codeshark model            list and switch the model catalog",
+        "    codeshark update           check for and install the latest published version",
         "    codeshark terms            read the Terms of Service",
         "    codeshark --version        print the version",
         "",
@@ -39,11 +42,38 @@ function printHelp() {
         "",
     ].join("\n"));
 }
+async function updatePackage() {
+    console.log(dim("Checking npm for a newer CodeShark version…"));
+    const latest = await latestPublishedVersion();
+    if (!latest) {
+        console.log(dim("Could not check npm right now. You can retry with `codeshark update`."));
+        return;
+    }
+    if (!isNewerVersion(VERSION, latest)) {
+        console.log(dim(`CodeShark ${VERSION} is up to date.`));
+        return;
+    }
+    const rl = createInterface({ input, output });
+    const answer = await rl.question(`CodeShark ${latest} is available (you have ${VERSION}). Install it now? [y/N]: `);
+    rl.close();
+    if (answer.trim().toLowerCase() !== "y" && answer.trim().toLowerCase() !== "yes") {
+        console.log(dim("Update skipped."));
+        return;
+    }
+    try {
+        await installLatestVersion();
+        console.log(hex("#4ade80", `Updated to CodeShark ${latest}. Restart CodeShark to use it.`));
+    }
+    catch (e) {
+        console.log(hex("#f87171", `Update failed: ${errorMessage(e)}`));
+    }
+}
 function isTTY() {
     return Boolean(process.stdout.isTTY) && !process.env.CODESHARK_NO_BANNER;
 }
 async function runOneShot(prompt) {
     const cfg = loadConfig();
+    await checkModelAvailability(cfg);
     const cwd = process.cwd();
     const registry = createRegistry();
     const clients = resolveClients(cfg, (m) => console.error(dim(m)));
@@ -59,8 +89,19 @@ async function runOneShot(prompt) {
             process.stdout.write(d);
         },
     };
+    const approvalRl = process.stdin.isTTY ? createInterface({ input, output }) : undefined;
     try {
-        const result = await runAgent(prompt, { clients, registry, cwd }, events);
+        const result = await runAgent(prompt, {
+            clients,
+            registry,
+            cwd,
+            approveToolCall: approvalRl
+                ? async (call) => {
+                    const answer = await approvalRl.question(`\nApprove ${call.name}? [y/N]: `);
+                    return answer.trim().toLowerCase() === "y" || answer.trim().toLowerCase() === "yes";
+                }
+                : async () => false,
+        }, events);
         if (thinking) {
             thinking = false;
             stopThinking();
@@ -79,6 +120,9 @@ async function runOneShot(prompt) {
         console.error(hex("#f87171", `✗ ${errorMessage(e)}`));
         process.exitCode = 1;
     }
+    finally {
+        approvalRl?.close();
+    }
 }
 async function main() {
     const parsed = extractFolderArg(process.argv.slice(2));
@@ -101,12 +145,13 @@ async function main() {
         console.log(readTerms());
         return;
     }
-    // Every operational command is explicitly project-scoped. Requiring the
-    // folder argument makes it impossible to start the agent in the wrong place.
-    if (!parsed.folder) {
-        throw new Error("CodeShark needs a project folder. Open your project in a terminal, then run `codeshark --folder .` (or pass its full path).");
+    if (command === "update") {
+        await updatePackage();
+        return;
     }
-    const projectFolder = openProjectFolder(parsed.folder);
+    // Plain `codeshark` uses the current directory; all agent work remains
+    // scoped to that directory, which must be a real folder.
+    const projectFolder = openProjectFolder(parsed.folder ?? process.cwd());
     switch (command) {
         case "setup":
             await runSetup();
@@ -120,6 +165,7 @@ async function main() {
         }
         case "model": {
             // `codeshark model` lists the catalog; `codeshark model <name>` switches.
+            await checkModelAvailability(loadConfig());
             if (rest.length) {
                 switchModel(rest.join(" "));
                 return;
@@ -163,12 +209,33 @@ async function main() {
                 process.env.OPENROUTER_API_KEY ||
                 process.env.NVIDIA_API_KEY ||
                 process.env.GEMINI_API_KEY);
-        if (!hasProviderSetup) {
+        const setupCompleted = cfg.setupCompleted ?? hasProviderSetup;
+        if (!setupCompleted) {
             const rl = createInterface({ input, output });
-            await runSetupFlow(cfg, rl, { title: "🦈  Welcome to CodeShark" });
+            await runSetupFlow(cfg, rl, { title: "Welcome to CodeShark" });
             rl.close();
+            cfg.setupCompleted = true;
+            saveConfig(cfg);
             console.log("");
         }
+        if (process.env.CODESHARK_NO_UPDATE === undefined) {
+            const latest = await latestPublishedVersion();
+            if (latest && isNewerVersion(VERSION, latest)) {
+                const rl = createInterface({ input, output });
+                const answer = await rl.question(`  CodeShark ${latest} is available. Install it now? [y/N]: `);
+                rl.close();
+                if (answer.trim().toLowerCase() === "y" || answer.trim().toLowerCase() === "yes") {
+                    try {
+                        await installLatestVersion();
+                        console.log(hex("#4ade80", `  Updated to CodeShark ${latest}. Restart to use the new version.`));
+                    }
+                    catch (e) {
+                        console.log(hex("#f87171", `  Update failed: ${errorMessage(e)}`));
+                    }
+                }
+            }
+        }
+        await checkModelAvailability(loadConfig());
         // The REPL prints the input instructions once after the banner. Keeping
         // them out of the banner avoids the duplicated startup line. The loading
         // screen types itself out with a spinner, then hands off to the REPL.
@@ -178,6 +245,15 @@ async function main() {
             "Loading model catalog",
             "Starting the agent",
         ]);
+        console.log(dim("  Model health"));
+        for (const { model, status, reason } of modelAvailabilitySnapshot()) {
+            if (status === "available") {
+                console.log(`    ${hex("#4ade80", "✓ Available")}  ${model.label}`);
+            }
+            else {
+                console.log(`    ${hex("#f87171", "✗ Unavailable")}  ${model.label}${reason ? dim(` — ${reason}`) : ""}`);
+            }
+        }
         console.log("");
     }
     const registry = createRegistry();

package/dist/keysPage.js

@@ -107,14 +107,14 @@ body{max-width:760px;margin:0 auto;padding:42px 22px}h1{font-size:25px;margin:0
 function loginPage(message = "") {
     const auth = readAuth();
     if (!auth) {
-        return page("Create local password", `<h1>🦈 CodeShark key vault</h1><p>Set a local password before viewing API keys. This password is stored as a one-way hash and never leaves this computer.</p>${message ? `<p class="warning">${htmlEscape(message)}</p>` : ""}<div class="card"><form method="post" action="/setup"><label for="password">Create password</label><input id="password" name="password" type="password" minlength="8" required autofocus><label for="confirm">Confirm password</label><input id="confirm" name="confirm" type="password" minlength="8" required><button>Protect my keys</button></form></div><p class="small">The page only listens on 127.0.0.1. Do not expose this port publicly.</p>`);
+        return page("Create local password", `<h1>CodeShark key vault</h1><p>Set a local password before viewing API keys. This password is stored as a one-way hash and never leaves this computer.</p>${message ? `<p class="warning">${htmlEscape(message)}</p>` : ""}<div class="card"><form method="post" action="/setup"><label for="password">Create password</label><input id="password" name="password" type="password" minlength="8" required autofocus><label for="confirm">Confirm password</label><input id="confirm" name="confirm" type="password" minlength="8" required><button>Protect my keys</button></form></div><p class="small">The page only listens on 127.0.0.1. Do not expose this port publicly.</p>`);
     }
-    return page("Unlock key vault", `<h1>🦈 CodeShark key vault</h1><p>Enter your local password to view or edit saved provider keys.</p>${message ? `<p class="warning">${htmlEscape(message)}</p>` : ""}<div class="card"><form method="post" action="/login"><input type="hidden" name="csrf" value="${htmlEscape(randomBytes(16).toString("hex"))}"><label for="password">Password</label><input id="password" name="password" type="password" required autofocus><button>Unlock</button></form></div><p class="small">Forgot the password? Delete ${htmlEscape(authFilePath ?? authPath())} to reset local protection.</p>`);
+    return page("Unlock key vault", `<h1>CodeShark key vault</h1><p>Enter your local password to view or edit saved provider keys.</p>${message ? `<p class="warning">${htmlEscape(message)}</p>` : ""}<div class="card"><form method="post" action="/login"><input type="hidden" name="csrf" value="${htmlEscape(randomBytes(16).toString("hex"))}"><label for="password">Password</label><input id="password" name="password" type="password" required autofocus><button>Unlock</button></form></div><p class="small">Forgot the password? Delete ${htmlEscape(authFilePath ?? authPath())} to reset local protection.</p>`);
 }
 function vaultPage(session) {
     const cfg = loadConfig();
     const secretInput = (id, label, placeholder) => `<label for="${id}">${label}</label><input id="${id}" name="${id}" type="password" value="" placeholder="${placeholder}" autocomplete="new-password" spellcheck="false"><label class="small"><input type="checkbox" name="clear_${id}" value="1" style="width:auto;margin-right:8px"> Clear this saved key</label>`;
-    return page("API keys", `<h1>🦈 CodeShark key vault</h1><p>Unlocked locally. Values are saved to <code>${htmlEscape(configPath())}</code>. Keep this page on your own computer.</p><div class="card"><form method="post" action="/save"><input type="hidden" name="csrf" value="${htmlEscape(session.csrf)}"><h2>Provider keys</h2>${secretInput("unorouterApiKey", "UnoRouter API key", "paste a replacement (shown once)…")}${secretInput("openrouterApiKey", "OpenRouter API key", "paste a replacement: sk-or-v1-…")}${secretInput("nvidiaApiKey", "NVIDIA NIM API key", "paste a replacement: nvapi-…")}${secretInput("geminiApiKey", "Google Gemini API key", "paste a replacement: AIza…")}<p class="small">Saved keys are never placed in this page's HTML. Leave a field blank to keep its current value, or check Clear to remove it.</p><button>Save keys</button></form></div><div class="card"><h2>Current status</h2><p class="key">UnoRouter: ${htmlEscape(mask(cfg.unorouterApiKey) || "not set")}</p><p class="key">OpenRouter: ${htmlEscape(mask(cfg.openrouterApiKey) || "not set")}</p><p class="key">NVIDIA: ${htmlEscape(mask(cfg.nvidiaApiKey) || "not set")}</p><p class="key">Gemini: ${htmlEscape(mask(cfg.geminiApiKey) || "not set")}</p><p class="hint">Your keys are never printed to the terminal by CodeShark.</p><form method="post" action="/logout"><input type="hidden" name="csrf" value="${htmlEscape(session.csrf)}"><button class="danger">Lock vault</button></form></div>`);
+    return page("API keys", `<h1>CodeShark key vault</h1><p>Unlocked locally. Values are saved to <code>${htmlEscape(configPath())}</code>. Keep this page on your own computer.</p><div class="card"><form method="post" action="/save"><input type="hidden" name="csrf" value="${htmlEscape(session.csrf)}"><h2>Provider keys</h2>${secretInput("unorouterApiKey", "Primary model API key", "paste a replacement (shown once)…")}${secretInput("openrouterApiKey", "OpenRouter API key", "paste a replacement: sk-or-v1-…")}${secretInput("nvidiaApiKey", "NVIDIA NIM API key", "paste a replacement: nvapi-…")}${secretInput("geminiApiKey", "Gemini API key", "paste a replacement: AIza…")}<p class="small">Saved keys are never placed in this page's HTML. Leave a field blank to keep its current value, or check Clear to remove it.</p><button>Save keys</button></form></div><div class="card"><h2>Current status</h2><p class="key">Primary model API: ${htmlEscape(mask(cfg.unorouterApiKey) || "not set")}</p><p class="key">OpenRouter: ${htmlEscape(mask(cfg.openrouterApiKey) || "not set")}</p><p class="key">NVIDIA: ${htmlEscape(mask(cfg.nvidiaApiKey) || "not set")}</p><p class="key">Gemini: ${htmlEscape(mask(cfg.geminiApiKey) || "not set")}</p><p class="hint">Your keys are never printed to the terminal by CodeShark.</p><form method="post" action="/logout"><input type="hidden" name="csrf" value="${htmlEscape(session.csrf)}"><button class="danger">Lock vault</button></form></div>`);
 }
 function parseBody(req) {
     return new Promise((resolve, reject) => {

package/dist/modelAvailability.js

@@ -0,0 +1,86 @@
+import { DEFAULT_GATEWAY_URL, envApiKey } from "./config.js";
+import { MODELS } from "./models.js";
+const statuses = new Map();
+const reasons = new Map();
+const TIMEOUT_MS = 8_000;
+export function modelAvailability(modelId) {
+    return statuses.get(modelId) ?? "checking";
+}
+export function modelAvailabilityReason(modelId) {
+    return reasons.get(modelId);
+}
+export function modelAvailabilitySnapshot() {
+    return MODELS.map((model) => ({
+        model,
+        status: modelAvailability(model.id),
+        reason: modelAvailabilityReason(model.id),
+    }));
+}
+function endpointFor(model, cfg) {
+    if (model.provider === "gemini") {
+        return {
+            url: `${(cfg.geminiBaseUrl ?? "https://generativelanguage.googleapis.com/v1beta").replace(/\/+$/, "")}/models/${model.model}:generateContent`,
+            key: cfg.geminiApiKey ?? envApiKey("gemini"),
+        };
+    }
+    const key = cfg.unorouterApiKey ?? envApiKey("unorouter");
+    if (key) {
+        return { url: `${(cfg.unorouterBaseUrl ?? "https://api.unorouter.com/v1").replace(/\/+$/, "")}/chat/completions`, key };
+    }
+    return {
+        url: `${(cfg.gatewayUrl ?? process.env.CODESHARK_GATEWAY_URL ?? DEFAULT_GATEWAY_URL).replace(/\/+$/, "")}/v1/chat/completions`,
+        key: cfg.gatewayKey ?? process.env.CODESHARK_GATEWAY_KEY,
+    };
+}
+async function checkOne(model, cfg) {
+    const target = endpointFor(model, cfg);
+    if (!target.key && model.provider === "gemini") {
+        statuses.set(model.id, "unavailable");
+        reasons.set(model.id, "GEMINI_API_KEY is not configured");
+        return;
+    }
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), TIMEOUT_MS);
+    try {
+        const headers = { "content-type": "application/json" };
+        if (target.key)
+            headers.authorization = `Bearer ${target.key}`;
+        if (model.provider === "gemini") {
+            const url = `${target.url}?key=${encodeURIComponent(target.key ?? "")}`;
+            const response = await fetch(url, {
+                method: "POST",
+                headers: { "content-type": "application/json" },
+                body: JSON.stringify({ contents: [{ role: "user", parts: [{ text: "Reply with OK." }] }] }),
+                signal: controller.signal,
+            });
+            if (!response.ok)
+                throw new Error(`HTTP ${response.status}`);
+        }
+        else {
+            const response = await fetch(target.url, {
+                method: "POST",
+                headers,
+                body: JSON.stringify({ model: model.model, messages: [{ role: "user", content: "Reply with OK." }], stream: false, max_tokens: 4 }),
+                signal: controller.signal,
+            });
+            if (!response.ok)
+                throw new Error(`HTTP ${response.status}`);
+        }
+        statuses.set(model.id, "available");
+        reasons.delete(model.id);
+    }
+    catch (error) {
+        statuses.set(model.id, "unavailable");
+        reasons.set(model.id, error instanceof Error && error.name === "AbortError" ? "check timed out" : error instanceof Error ? error.message : String(error));
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+export async function checkModelAvailability(cfg) {
+    for (const model of MODELS) {
+        statuses.set(model.id, "checking");
+        reasons.delete(model.id);
+    }
+    await Promise.all(MODELS.map((model) => checkOne(model, cfg)));
+}