dgxay-code-cli 0.0.0-stage → 1.1.0

package/src/commands/oauth.js

@@ -0,0 +1,246 @@
+'use strict';
+
+/**
+ * oauth：账户连接（对应桌面版「设置 → 账户连接」）。
+ *
+ *   dgxay oauth list
+ *   dgxay oauth connect <openai|anthropic|xai|google>
+ *   dgxay oauth disconnect <平台>
+ *   dgxay oauth client <平台> [--client-id X] [--client-secret Y] [--authorize-url U] [--token-url U] [--scopes S]
+ *
+ * 说明：CLI 用系统浏览器发起授权；Anthropic 需要把浏览器显示的 code#state 粘贴回来。
+ */
+
+const print = require('../cli/print');
+const { parseArgs, actionFirst } = require('../cli/args');
+const { COLORS } = require('../cli/ansi');
+const oauth = require('../core/oauth');
+const { ask } = require('../services/input');
+
+const options = [
+  { name: 'client-id', type: 'string', valueName: 'id', desc: 'OAuth Client ID' },
+  { name: 'client-secret', type: 'string', valueName: 'secret', desc: 'OAuth Client Secret (optional)' },
+  { name: 'authorize-url', type: 'string', valueName: 'url', desc: 'Authorize endpoint' },
+  { name: 'token-url', type: 'string', valueName: 'url', desc: 'Token endpoint' },
+  { name: 'scopes', type: 'string', valueName: 'text', desc: 'Permission scope' },
+  { name: 'code', type: 'string', valueName: 'code', desc: 'Manual flow: submit the auth code directly (code#state)' },
+  { name: 'no-browser', type: 'boolean', desc: 'Do not open the browser, only print the authorize link' },
+  { name: 'yes', alias: 'y', type: 'boolean', desc: 'Skip confirmation' }
+];
+
+function formatExpiry(ts) {
+  if (!ts) return 'never expires';
+  const date = new Date(ts);
+  const pad = (value) => String(value).padStart(2, '0');
+  return `${date.getFullYear()}-${pad(date.getMonth() + 1)}-${pad(date.getDate())} ${pad(date.getHours())}:${pad(
+    date.getMinutes()
+  )}`;
+}
+
+function list() {
+  const providers = oauth.listProviders();
+  print.blank();
+  print.heading('Account connections');
+  const rows = providers.map((item) => {
+    const connection = item.connection;
+    const status = !connection ? 'not connected' : connection.expired ? 'expired' : 'connected';
+    const tone = !connection ? (value) => value : connection.expired ? COLORS.yellow : COLORS.green;
+    return [
+      item.id,
+      item.name,
+      item.subtitle,
+      tone(status),
+      connection?.account || '',
+      connection ? formatExpiry(connection.expiresAt) : '',
+      item.redirectMode === 'manual' ? 'manual auth code' : 'system browser'
+    ];
+  });
+  print.table(
+    [
+      { title: 'ID', max: 10 },
+      { title: 'Platform', max: 10 },
+      { title: 'Account type', max: 24 },
+      { title: 'Status', max: 8 },
+      { title: 'Account', max: 28 },
+      { title: 'Expires', max: 18 },
+      { title: 'Auth method', max: 12 }
+    ],
+    rows
+  );
+  print.blank();
+  print.hint('dgxay oauth connect <platform> to connect · dgxay oauth disconnect <platform> to disconnect');
+  print.hint('After connecting, enable OAuth on a provider: dgxay provider edit <name> --oauth-provider <platform>');
+  print.blank();
+  return 0;
+}
+
+async function connect(id, opts) {
+  const def = oauth.PROVIDERS[id];
+  if (!def) {
+    print.fail(`Unsupported platform: ${id} (choose openai / anthropic / xai / google)`);
+    return 1;
+  }
+  const current = oauth.listProviders().find((item) => item.id === id);
+  if (current.connection && !current.connection.expired && !opts.yes && process.stdin.isTTY) {
+    const answer = await ask(`${def.name} is already connected (${current.connection.account}). Re-authorizing overwrites the existing token. Continue? [y/N] `);
+    if (!/^y/i.test(String(answer || '').trim())) {
+      print.hint('Cancelled');
+      return 1;
+    }
+  }
+
+  if (opts.noBrowser) process.env.DGXAY_OAUTH_NO_BROWSER = '1';
+
+  let flow;
+  try {
+    flow = await oauth.begin({ provider: id });
+  } catch (err) {
+    print.fail(err.message);
+    if (/Client ID/i.test(err.message)) {
+      print.hint(`Google requires a desktop-app OAuth client first: dgxay oauth client google --client-id <ID>`);
+    }
+    return 1;
+  }
+
+  print.blank();
+  print.heading(`Connect ${def.name}`);
+  print.hint(def.hint);
+  print.blank();
+  if (flow.browserOpened) print.ok('Opened the system browser; complete authorization in the browser');
+  else {
+    print.warn('Could not open the browser automatically; open the link below manually:');
+  }
+  print.blank();
+  process.stdout.write(`${COLORS.cyan(flow.authUrl)}\n`);
+  print.blank();
+
+  if (flow.mode === 'manual') {
+    print.write('After authorizing in the browser, copy the auth code (like code#state) and paste it here:');
+    let code = opts.code;
+    if (!code) {
+      if (!process.stdin.isTTY) {
+        print.fail('In non-interactive environments use --code <auth code>');
+        return 1;
+      }
+      code = await ask('Auth code: ');
+    }
+    if (!code) {
+      print.fail('Auth code is empty');
+      return 1;
+    }
+    try {
+      const connection = await oauth.complete(flow.id, code);
+      print.ok(`${def.name} account connected: ${connection.account}`);
+      return 0;
+    } catch (err) {
+      print.fail(err.message || 'Authorization failed');
+      return 1;
+    }
+  }
+
+  process.stdout.write(`${COLORS.faint('Waiting for the browser callback to finish authorization... (Ctrl+C to cancel)')}\n`);
+  try {
+    const connection = await oauth.wait(flow.id);
+    print.blank();
+    print.ok(`${def.name} account connected: ${connection.account}`);
+    print.hint('Enable it on a provider: dgxay provider edit <name> --oauth-provider ' + id);
+    return 0;
+  } catch (err) {
+    print.fail(err.message || 'Authorization failed');
+    return 1;
+  }
+}
+
+function disconnect(id, opts) {
+  const def = oauth.PROVIDERS[id];
+  if (!def) {
+    print.fail(`Unsupported platform: ${id}`);
+    return 1;
+  }
+  const current = oauth.listProviders().find((item) => item.id === id);
+  if (!current?.connection) {
+    print.warn(`${def.name} is not connected`);
+    return 1;
+  }
+  oauth.disconnect(id);
+  print.ok(`Disconnected ${def.name} account (${current.connection.account})`);
+  print.hint('Providers using this account cannot make requests until you reconnect or switch to an API Key');
+  return 0;
+}
+
+function saveClient(id, opts) {
+  const def = oauth.PROVIDERS[id];
+  if (!def) {
+    print.fail(`Unsupported platform: ${id}`);
+    return 1;
+  }
+  const patch = {};
+  for (const key of ['clientId', 'clientSecret', 'authorizeUrl', 'tokenUrl', 'scopes']) {
+    if (opts[key] !== undefined) patch[key] = opts[key];
+  }
+  if (!Object.keys(patch).length) {
+    const current = oauth.listProviders().find((item) => item.id === id);
+    print.blank();
+    print.heading(`${def.name} OAuth client`);
+    print.keyValue([
+      { label: 'Client ID', value: current.clientId ? `${current.clientId.slice(0, 8)}…` : '(empty)' },
+      { label: 'Client Secret', value: current.hasSecret ? 'set' : 'not set' },
+      { label: 'Authorize endpoint', value: current.authorizeUrl },
+      { label: 'Token endpoint', value: current.tokenUrl },
+      { label: 'Permission scope', value: current.scopes },
+      { label: 'Redirect URI', value: current.redirectUri }
+    ]);
+    print.blank();
+    print.hint(`Modify: dgxay oauth client ${id} --client-id <ID> [--client-secret <Secret>]`);
+    print.blank();
+    return 0;
+  }
+  try {
+    const saved = oauth.saveClient(id, patch);
+    print.ok(`Saved OAuth client config for ${def.name}`);
+    print.hint(`You can connect now: dgxay oauth connect ${saved.id}`);
+    return 0;
+  } catch (err) {
+    print.fail(err.message);
+    return 1;
+  }
+}
+
+async function run({ argv }) {
+  const { action: rawAction, rest, options: opts } = actionFirst(argv, options);
+  const action = rawAction || 'list';
+  const target = rest[0];
+
+  if (action === 'list' || action === 'ls') return list();
+  if (action === 'connect' || action === 'login') {
+    if (!target) throw Object.assign(new Error('Usage: dgxay oauth connect <openai|anthropic|xai|google>'), { userError: true });
+    return connect(target, opts);
+  }
+  if (action === 'disconnect' || action === 'logout') {
+    if (!target) throw Object.assign(new Error('Usage: dgxay oauth disconnect <platform>'), { userError: true });
+    return disconnect(target, opts);
+  }
+  if (action === 'client') {
+    if (!target) throw Object.assign(new Error('Usage: dgxay oauth client <platform> [--client-id ...]'), { userError: true });
+    return saveClient(target, opts);
+  }
+  print.fail(`Unknown subcommand: ${action}`);
+  print.hint('Available: list / connect / disconnect / client');
+  return 1;
+}
+
+module.exports = {
+  name: 'oauth',
+  aliases: ['account'],
+  summary: 'OAuth account connections',
+  usage: 'dgxay oauth <list|connect|disconnect|client>',
+  options,
+  subcommands: [
+    ['list', 'View connection status per platform'],
+    ['connect <platform>', 'Connect (system browser + PKCE)'],
+    ['disconnect <platform>', 'Disconnect and delete the local token'],
+    ['client <platform>', 'View / modify OAuth client config']
+  ],
+  examples: ['dgxay oauth list', 'dgxay oauth connect anthropic', 'dgxay oauth client google --client-id xxx.apps.googleusercontent.com'],
+  run
+};

package/src/commands/permission.js

@@ -0,0 +1,108 @@
+'use strict';
+
+/**
+ * permission：四档权限（对应桌面版权限列表）。
+ *
+ *   dgxay permission          查看当前权限与可用性
+ *   dgxay permission list     同上（带说明）
+ *   dgxay permission set auto 切换权限并写入配置
+ *
+ * 自动审查只有在「当前供应商或默认供应商」配置了有效审查模型时才可用；
+ * 移除审查模型后自动回落到普通权限。
+ */
+
+const print = require('../cli/print');
+const { actionFirst } = require('../cli/args');
+const { COLORS } = require('../cli/ansi');
+const settings = require('../services/settings');
+const { resolveReviewer } = require('../core/prompt');
+
+const options = [];
+
+function overview() {
+  const config = settings.readConfig();
+  const current = settings.currentPermission(config);
+  const available = settings.availablePermissions(config);
+  const reviewer = resolveReviewer(config, config.activeProviderId);
+  print.blank();
+  print.heading('Permission');
+  for (const [key, meta] of Object.entries(settings.PERMISSIONS)) {
+    const usable = available.includes(key);
+    const active = current === key;
+    print.write(
+      `  ${active ? COLORS.accent('❯') : ' '} ${COLORS.accent(key.padEnd(8))} ${usable ? meta.label : COLORS.faint(`${meta.label} (unavailable)`)}`
+    );
+    print.write(`    ${COLORS.faint(meta.desc)}`);
+  }
+  print.blank();
+  if (reviewer) {
+    print.hint(`Review model: ${reviewer.provider.name} / ${reviewer.modelId} (from: ${reviewer.source === 'own' ? 'current provider' : 'default provider'})`);
+  } else {
+    print.hint('No review model configured, so auto review is unavailable. Set one with dgxay provider review <provider> --model <model-id>');
+  }
+  if (config.ui?.permission === 'auto' && !available.includes('auto')) {
+    print.warn('Auto review from config is no longer valid; running with normal permission');
+  }
+  print.blank();
+  print.hint('dgxay permission set <none|normal|auto|full>');
+  print.blank();
+  return 0;
+}
+
+async function run({ argv, runtime }) {
+  const { action: rawAction, rest } = actionFirst(argv, options);
+  const action = rawAction || 'list';
+  const config = settings.readConfig();
+
+  if (action === 'list' || action === 'show') return overview();
+
+  if (action === 'set' || action === 'use') {
+    const level = rest[0];
+    if (!level) throw Object.assign(new Error('Usage: dgxay permission set <none|normal|auto|full>'), { userError: true });
+    if (!settings.PERMISSIONS[level]) {
+      print.fail('Permission must be one of none / normal / auto / full');
+      return 1;
+    }
+    if (level === 'auto' && !settings.hasReviewModel(config)) {
+      print.fail('Auto review unavailable: neither the current nor the default provider has a valid review model');
+      print.hint('Run first: dgxay provider review <provider> --model <model-id>');
+      return 1;
+    }
+    settings.setPermission(level);
+    print.ok(`Permission set to: ${settings.PERMISSIONS[level].label}`);
+    if (level === 'full') {
+      print.warn('With full access the AI can run any command and read or write any file without asking');
+    }
+    void runtime;
+    return 0;
+  }
+
+  if (settings.PERMISSIONS[action]) {
+    const level = action;
+    if (level === 'auto' && !settings.hasReviewModel(config)) {
+      print.fail('Auto review unavailable: configure a review model first');
+      return 1;
+    }
+    settings.setPermission(level);
+    print.ok(`Permission set to: ${settings.PERMISSIONS[level].label}`);
+    return 0;
+  }
+
+  print.fail(`Unknown usage: ${action}`);
+  print.hint('Available: list / set <level>');
+  return 1;
+}
+
+module.exports = {
+  name: 'permission',
+  aliases: ['perm'],
+  summary: 'Four permission levels: show and switch',
+  usage: 'dgxay permission [list|show|set <level>]',
+  options,
+  subcommands: [
+    ['list', 'Show permissions and availability'],
+    ['set <level>', 'Switch permission (writes config)']
+  ],
+  examples: ['dgxay permission', 'dgxay permission set normal', 'dgxay permission set auto'],
+  run
+};

package/src/commands/provider.js

@@ -0,0 +1,332 @@
+'use strict';
+
+/**
+ * provider：供应商管理（对应桌面版「设置 → 供应商与模型」）。
+ *
+ *   dgxay provider list
+ *   dgxay provider add --name DeepSeek --base-url https://api.deepseek.com/v1 --model deepseek-chat [--api-key sk-...]
+ *   dgxay provider edit <名称> [--base-url ...] [--api-key ...] [--model ...]
+ *   dgxay provider rm <名称>
+ *   dgxay provider use <名称>          设为当前供应商
+ *   dgxay provider mv <名称> up|down   调整顺序（第一个是默认供应商，也是审查模型回退来源）
+ *   dgxay provider review <名称> [--model <id>]  设置自动审查模型；不带 --model 显示当前值
+ */
+
+const print = require('../cli/print');
+const { parseArgs, actionFirst } = require('../cli/args');
+const { COLORS } = require('../cli/ansi');
+const settings = require('../services/settings');
+const cfg = require('../services/config');
+const oauth = require('../core/oauth');
+const { ask, askSecret, confirm } = require('../services/input');
+
+const options = [
+  { name: 'name', type: 'string', valueName: 'text', desc: 'Provider name' },
+  { name: 'protocol', type: 'string', valueName: 'p', desc: 'openai / anthropic / responses' },
+  { name: 'base-url', type: 'string', valueName: 'url', desc: 'Base URL' },
+  { name: 'api-key', type: 'string', valueName: 'key', desc: 'API Key' },
+  { name: 'model', type: 'list', valueName: 'id', desc: 'Model ID (repeatable or comma-separated)' },
+  { name: 'oauth-provider', type: 'string', valueName: 'id', desc: 'Use a connected OAuth account' },
+  { name: 'review-model', type: 'string', valueName: 'id', desc: 'Auto review model ID' },
+  { name: 'context-window', type: 'number', valueName: 'n', desc: 'Context window (optional)' },
+  { name: 'yes', alias: 'y', type: 'boolean', desc: 'Skip confirmation' }
+];
+
+function list() {
+  const config = settings.readConfig();
+  const providers = config.providers || [];
+  print.blank();
+  if (!providers.length) {
+    print.hint('No providers yet. Run dgxay provider add or dgxay config init');
+    print.blank();
+    return 0;
+  }
+  print.heading(`Providers (${providers.length})`);
+  const rows = providers.map((provider, index) => [
+    String(index + 1),
+    index === 0 ? COLORS.accent('default') : '',
+    provider.id === config.activeProviderId ? COLORS.green('active') : '',
+    provider.name,
+    settings.PROTOCOL_META[provider.protocol || 'openai'].short,
+    provider.baseUrl,
+    (provider.models || []).map((m) => m.id || m.name).join(', '),
+    provider.reviewModelId || '-',
+    provider.authMode === 'oauth' ? `OAuth(${provider.oauthProvider || '?'})` : provider.apiKey ? cfg.maskKey(provider.apiKey) : '-'
+  ]);
+  print.table(
+    [
+      { title: '#', max: 3 },
+      { title: '', max: 4 },
+      { title: '', max: 4 },
+      { title: 'Name', max: 16 },
+      { title: 'Protocol', max: 16 },
+      { title: 'Base URL', max: 40 },
+      { title: 'Models', max: 30 },
+      { title: 'Review model', max: 18 },
+      { title: 'Auth', max: 16 }
+    ],
+    rows
+  );
+  print.blank();
+  print.hint('Provider order matters: the first one is the default provider and the fallback source when no review model is configured');
+  print.blank();
+  return 0;
+}
+
+async function add(opts) {
+  const interactive = process.stdin.isTTY && !opts.baseUrl;
+  let protocol = opts.protocol || 'openai';
+  let baseUrl = opts.baseUrl || '';
+  let name = opts.name || '';
+  let apiKey = opts.apiKey;
+  let models = opts.model || [];
+  let oauthProvider = opts.oauthProvider || '';
+
+  if (interactive) {
+    if (!opts.protocol) {
+      const answer = await ask('Protocol [1] OpenAI ChatCompletions  [2] Anthropic Messages  [3] OpenAI Responses : ');
+      const index = Number(String(answer || '').trim()) || 1;
+      protocol = ['openai', 'anthropic', 'responses'][index - 1] || 'openai';
+    }
+    if (!baseUrl) {
+      const answer = await ask(`Base URL [${settings.PROTOCOL_META[protocol].basePlaceholder}]: `);
+      baseUrl = String(answer || '').trim() || settings.PROTOCOL_META[protocol].basePlaceholder;
+    }
+    if (!name) {
+      const answer = await ask('Provider name: ');
+      name = String(answer || '').trim();
+    }
+    if (!oauthProvider && apiKey === undefined) {
+      const secret = await askSecret('API Key (may be empty for local models): ');
+      apiKey = secret === null ? undefined : secret;
+    }
+    if (!models.length) {
+      const answer = await ask('Model ID (separate multiple with commas): ');
+      models = String(answer || '')
+        .split(/[,，\s]+/)
+        .filter(Boolean);
+    }
+  }
+
+  const result = settings.upsertProvider({
+    name: name || undefined,
+    protocol,
+    baseUrl,
+    apiKey,
+    models,
+    authMode: oauthProvider ? 'oauth' : 'apiKey',
+    oauthProvider,
+    reviewModelId: opts.reviewModelId
+  });
+  print.ok(`Provider added: ${result.provider.name} (${result.provider.id})`);
+  return 0;
+}
+
+function edit(ref, opts) {
+  const provider = settings.findProvider(ref);
+  if (!provider) {
+    print.fail(`Provider not found: ${ref}`);
+    return 1;
+  }
+  const result = settings.upsertProvider({
+    ref: provider.id,
+    name: opts.name,
+    protocol: opts.protocol,
+    baseUrl: opts.baseUrl,
+    apiKey: opts.apiKey,
+    models: opts.model?.length ? opts.model : undefined,
+    authMode: opts.oauthProvider ? 'oauth' : provider.authMode,
+    oauthProvider: opts.oauthProvider,
+    reviewModelId: opts.reviewModelId
+  });
+  print.ok(`Provider updated: ${result.provider.name}`);
+  return 0;
+}
+
+async function remove(ref, opts) {
+  const provider = settings.findProvider(ref);
+  if (!provider) {
+    print.fail(`Provider not found: ${ref}`);
+    return 1;
+  }
+  if (!opts.yes && process.stdin.isTTY) {
+    const ok = await confirm(`Delete provider "${provider.name}" and its API key?`, false);
+    if (!ok) {
+      print.hint('Cancelled');
+      return 1;
+    }
+  }
+  const config = settings.removeProvider(provider.id);
+  print.ok(`Deleted "${provider.name}"`);
+  if (!config.providers?.length) print.hint('No providers left; run dgxay config init to reconfigure');
+  else if (config.activeProviderId !== settings.readConfig().activeProviderId) {
+    print.hint(`Active provider switched to "${(config.providers || []).find((p) => p.id === config.activeProviderId)?.name || 'unknown'}"`);
+  }
+  return 0;
+}
+
+function use(ref) {
+  const provider = settings.findProvider(ref);
+  if (!provider) {
+    print.fail(`Provider not found: ${ref}`);
+    return 1;
+  }
+  const model = provider.models?.[0];
+  if (!model) {
+    print.fail(`Provider ${provider.name} has no models`);
+    return 1;
+  }
+  settings.saveConfig({ activeProviderId: provider.id, activeModelId: model.id });
+  print.ok(`Active provider: ${provider.name} / ${model.name || model.id}`);
+  return 0;
+}
+
+function review(ref, opts) {
+  const provider = settings.findProvider(ref);
+  if (!provider) {
+    print.fail(`Provider not found: ${ref}`);
+    return 1;
+  }
+  if (opts.reviewModel === undefined) {
+    const model = (provider.models || []).find((m) => m.id === provider.reviewModelId);
+    if (model) print.write(`Review model for ${provider.name}: ${model.name || model.id} (${model.id})`);
+    else print.write(`${provider.name} has no review model configured; auto review falls back to the default provider`);
+    return 0;
+  }
+  const models = provider.models || [];
+  const target = models.find((m) => m.id === opts.reviewModel);
+  if (opts.reviewModel && !target) {
+    print.fail(`Provider ${provider.name} has no model ${opts.reviewModel}`);
+    print.hint(`Available: ${models.map((m) => m.id).join(', ')}`);
+    return 1;
+  }
+  const next = (settings.readConfig().providers || []).map((p) =>
+    p.id === provider.id ? { ...p, reviewModelId: target ? target.id : '' } : p
+  );
+  settings.saveConfig({ providers: next });
+  if (target) {
+    print.ok(`Auto review model for ${provider.name}: ${target.name || target.id}`);
+    print.hint('You can now select "Auto review" in /permission');
+  } else {
+    print.ok(`Cleared the review model for ${provider.name}`);
+  }
+  return 0;
+}
+
+function move(ref, direction) {
+  const dir = direction === 'up' || direction === 'u' || direction === '-1' ? -1 : 1;
+  settings.moveProvider(ref, dir);
+  print.ok(`${dir < 0 ? 'Moved up' : 'Moved down'} "${settings.findProvider(ref)?.name || ref}"`);
+  return list();
+}
+
+function oauthAccounts() {
+  const list = oauth.listProviders();
+  print.blank();
+  print.heading('OAuth accounts');
+  const rows = list.map((item) => [
+    item.name,
+    item.subtitle,
+    item.connection && !item.connection.expired
+      ? COLORS.green('connected')
+      : item.connection?.expired
+        ? COLORS.yellow('expired')
+        : 'not connected',
+    item.connection?.account || '',
+    item.redirectMode === 'manual' ? 'manual auth code' : 'system browser'
+  ]);
+  print.table(
+    [
+      { title: 'Platform', max: 12 },
+      { title: 'Account type', max: 24 },
+      { title: 'Status', max: 8 },
+      { title: 'Account', max: 30 },
+      { title: 'Auth method', max: 12 }
+    ],
+    rows
+  );
+  print.blank();
+  print.hint('dgxay oauth connect <platform> to connect an account; then use dgxay provider add --oauth-provider <platform>');
+  print.blank();
+  return 0;
+}
+
+async function run({ argv }) {
+  const { action: rawAction, rest, options: opts } = actionFirst(argv, options);
+  const action = rawAction || 'list';
+
+  switch (action) {
+    case 'list':
+    case 'ls':
+      return list();
+    case 'add':
+      return add(opts);
+    case 'edit':
+    case 'set': {
+      if (!rest[0]) throw Object.assign(new Error('Usage: dgxay provider edit <name> [options]'), { userError: true });
+      return edit(rest[0], opts);
+    }
+    case 'rm':
+    case 'remove':
+    case 'delete': {
+      if (!rest[0]) throw Object.assign(new Error('Usage: dgxay provider rm <name>'), { userError: true });
+      return remove(rest[0], opts);
+    }
+    case 'use': {
+      if (!rest[0]) throw Object.assign(new Error('Usage: dgxay provider use <name>'), { userError: true });
+      return use(rest[0]);
+    }
+    case 'mv':
+    case 'move': {
+      if (!rest[0]) throw Object.assign(new Error('Usage: dgxay provider mv <name> up|down'), { userError: true });
+      return move(rest[0], rest[1] || 'down');
+    }
+    case 'review': {
+      if (!rest[0]) {
+        const config = settings.readConfig();
+        const rows = (config.providers || []).map((p) => [p.name, p.reviewModelId || '(not configured)']);
+        print.blank();
+        print.table(
+          [
+            { title: 'Provider', max: 20 },
+            { title: 'Review model', max: 30 }
+          ],
+          rows
+        );
+        print.blank();
+        return 0;
+      }
+      return review(rest[0], opts);
+    }
+    case 'oauth':
+      return oauthAccounts();
+    default:
+      print.fail(`Unknown subcommand: ${action}`);
+      print.hint('Available: list / add / edit / rm / use / mv / review / oauth');
+      return 1;
+  }
+}
+
+module.exports = {
+  name: 'provider',
+  aliases: ['prov'],
+  summary: 'Provider and review model management',
+  usage: 'dgxay provider <list|add|edit|rm|use|mv|review>',
+  options,
+  subcommands: [
+    ['list', 'List all providers'],
+    ['add', 'Add a provider'],
+    ['edit <name>', 'Edit a provider'],
+    ['rm <name>', 'Delete a provider'],
+    ['use <name>', 'Set as the active provider'],
+    ['mv <name> up|down', 'Reorder providers'],
+    ['review [name] [--model id]', 'View / set the auto review model']
+  ],
+  examples: [
+    'dgxay provider list',
+    'dgxay provider add --name DeepSeek --base-url https://api.deepseek.com/v1 --model deepseek-chat',
+    'dgxay provider add --oauth-provider openai --base-url https://api.openai.com/v1 --model gpt-5',
+    'dgxay provider review DeepSeek --model deepseek-chat'
+  ],
+  run
+};