dual-brain 7.0.0 → 7.0.1

package/bin/dual-brain.mjs

@@ -10,6 +10,7 @@ import {
   ensureProfile, loadProfile, saveProfile, runOnboarding,
   rememberPreference, forgetPreference, getActivePreferences,
   getAvailableProviders, isSoloBrain, getHeadModel,
+  detectAuth, detectEnvironment,
 } from '../src/profile.mjs';
 
 import { detectTask } from '../src/detect.mjs';
@@ -45,6 +46,7 @@ dual-brain <command> [options]
 
 Commands:
   init                      First-time setup (providers, plans, optimization)
+  auth                      Show authentication status for all providers
   install                   Install Claude Code hooks into the current project
   go "task description"     Detect → decide → dispatch a task
     --dry-run               Show routing decision without executing
@@ -64,6 +66,44 @@ Options:
 `.trim());
 }
 
+// ─── Auth helpers ─────────────────────────────────────────────────────────────
+
+/**
+ * Print a compact auth status table to stdout.
+ * @param {{ claude: object, openai: object }} auth  Result from detectAuth()
+ */
+function printAuthTable(auth) {
+  const W = 55; // inner width (wide enough for source labels)
+  const bar = '═'.repeat(W);
+  const pad = (s) => {
+    const visible = s.replace(/[̀-ͯ]/g, ''); // strip combining chars for length
+    return s + ' '.repeat(Math.max(0, W - visible.length));
+  };
+
+  const claudeLine1 = auth.claude.found
+    ? `  Claude:  ✓ found via ${auth.claude.source}`
+    : `  Claude:  ✗ not found`;
+  const claudeLine2 = auth.claude.found
+    ? `           ${auth.claude.masked}`
+    : `           run: claude auth login`;
+
+  const openaiLine1 = auth.openai.found
+    ? `  OpenAI:  ✓ found via ${auth.openai.source}`
+    : `  OpenAI:  ✗ not found`;
+  const openaiLine2 = auth.openai.found
+    ? `           ${auth.openai.masked}`
+    : `           run: codex auth  OR  export OPENAI_API_KEY=sk-...`;
+
+  console.log(`╔${bar}╗`);
+  console.log(`║${pad('  Auth Status')}║`);
+  console.log(`╠${bar}╣`);
+  console.log(`║${pad(claudeLine1)}║`);
+  console.log(`║${pad(claudeLine2)}║`);
+  console.log(`║${pad(openaiLine1)}║`);
+  console.log(`║${pad(openaiLine2)}║`);
+  console.log(`╚${bar}╝`);
+}
+
 // ─── Card command (default) ──────────────────────────────────────────────────
 
 async function cmdCard() {
@@ -83,19 +123,70 @@ async function cmdCard() {
   const health  = getHealth(cwd);
   const card    = formatSessionCard(session, repo, health);
   console.log(card);
+
+  // Auth status warnings (non-blocking)
+  const auth = await detectAuth();
+  const warnings = [];
+  if (!auth.claude.found) warnings.push('Claude auth not found — run: claude auth login');
+  if (!auth.openai.found) warnings.push('OpenAI auth not found — run: codex auth  OR  export OPENAI_API_KEY=sk-...');
+  if (warnings.length > 0) {
+    console.log('\nAuth warnings:');
+    for (const w of warnings) console.log(`  ⚠  ${w}`);
+  }
+
+  // Environment info
+  const env = detectEnvironment();
+  if (env.isReplit || env.hasReplitTools) {
+    const envLabel = env.hasReplitTools ? 'Replit + replit-tools' : 'Replit';
+    console.log(`\nRuntime: ${envLabel}`);
+  }
 }
 
 // ─── Commands ─────────────────────────────────────────────────────────────────
 
 async function cmdInit() {
-  const profile = await runOnboarding({ interactive: true });
-  saveProfile(profile, { cwd: process.cwd() });
-  const rt = await detectRuntime();
-  const providers = getAvailableProviders(profile);
-  const providerSummary = providers.length
-    ? providers.map(p => `${p.name === 'claude' ? 'Claude' : 'OpenAI'} (${p.plan})`).join(', ')
-    : 'none';
-  console.log(`Profile saved. Providers: ${providerSummary}. Mode: ${profile.mode}. Runtime: ${rt.runtime}`);
+  const cwd = process.cwd();
+
+  // --- Step 1: Auth preflight ---
+  const auth = await detectAuth();
+  printAuthTable(auth);
+
+  const noneFound = !auth.claude.found && !auth.openai.found;
+  if (noneFound) {
+    console.log('\nNo AI provider credentials found. Set up at least one before continuing:\n');
+    console.log('  Claude : claude auth login');
+    console.log('  OpenAI : codex auth   OR   export OPENAI_API_KEY=sk-...\n');
+    console.log('Re-run "dual-brain init" after authenticating.');
+    return;
+  }
+
+  // --- Step 2: Run onboarding wizard, skipping tiers for auto-detected plans ---
+  const profile = await runOnboarding({ interactive: true, detectedAuth: auth });
+  saveProfile(profile, { cwd });
+
+  // --- Step 3: Show dashboard + next step ---
+  console.log('');
+  const repo    = loadRepoCache(cwd);
+  const session = loadSession(cwd);
+  const health  = getHealth(cwd);
+  const card    = formatSessionCard(session, repo, health);
+  console.log(card);
+  console.log('\nReady! Try: dual-brain go "your task here"\n');
+}
+
+async function cmdAuth() {
+  const auth = await detectAuth();
+  printAuthTable(auth);
+
+  // If anything is missing, print setup commands
+  if (!auth.claude.found) {
+    console.log('\nTo set up Claude:');
+    console.log('  claude auth login');
+  }
+  if (!auth.openai.found) {
+    console.log('\nTo set up OpenAI:');
+    console.log('  codex auth   OR   export OPENAI_API_KEY=sk-...');
+  }
 }
 
 async function cmdGo(args) {
@@ -410,6 +501,7 @@ async function main() {
 
   if (cmd === 'init')     { await cmdInit(); return; }
   if (cmd === 'install')  { await cmdInstall(); return; }
+  if (cmd === 'auth')     { await cmdAuth(); return; }
   if (cmd === 'go')       { await cmdGo(args.slice(1)); return; }
   if (cmd === 'status')   { await cmdStatus(args.slice(1)); return; }
   if (cmd === 'hot')      { cmdHot(args[1]); return; }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dual-brain",
-  "version": "7.0.0",
+  "version": "7.0.1",
   "description": "AI orchestration across Claude + OpenAI subscriptions — smart routing, budget awareness, and dual-brain collaboration",
   "type": "module",
   "bin": {

package/src/profile.mjs

@@ -106,6 +106,118 @@ function syncPreferencesToMemory(profile, cwd) {
   }
 }
 
+// ---------------------------------------------------------------------------
+// Environment detection
+// ---------------------------------------------------------------------------
+
+/**
+ * Detect the runtime environment.
+ * Returns { isReplit, hasReplitTools, isCI }.
+ */
+function detectEnvironment() {
+  const isReplit = !!(process.env.REPL_ID || process.env.REPLIT_DB_URL);
+  const hasReplitTools = existsSync(join(process.cwd(), '.replit-tools'));
+  const isCI = !!(process.env.CI || process.env.GITHUB_ACTIONS);
+  return { isReplit, hasReplitTools, isCI };
+}
+
+// ---------------------------------------------------------------------------
+// Auth detection
+// ---------------------------------------------------------------------------
+
+/**
+ * Mask a credential string: show first 4 + "..." + last 4 chars.
+ * For short strings (< 8 chars), just returns "***".
+ * @param {string} str
+ * @returns {string}
+ */
+function _maskCredential(str) {
+  if (!str || str.length < 8) return '***';
+  return str.slice(0, 4) + '...' + str.slice(-4);
+}
+
+/**
+ * Detect authentication credentials from all known sources.
+ * Checks in priority order: config files first, then env vars.
+ * Never makes network calls — validation is always null in v1.
+ *
+ * @returns {{ claude: AuthEntry, openai: AuthEntry }}
+ * @typedef {{ found: boolean, source: string|null, masked: string|null, validated: null }} AuthEntry
+ */
+async function detectAuth() {
+  const results = {
+    claude: { found: false, source: null, masked: null, validated: null },
+    openai: { found: false, source: null, masked: null, validated: null },
+  };
+
+  // --- Claude: check .claude.json for oauthAccount or apiKey ---
+  const claudePaths = [
+    '/home/runner/workspace/.replit-tools/.claude-persistent/.claude.json',
+    join(homedir(), '.claude', '.claude.json'),
+  ];
+  for (const p of claudePaths) {
+    try {
+      const data = JSON.parse(readFileSync(p, 'utf8'));
+      if (data?.oauthAccount) {
+        // OAuth session found
+        results.claude.found   = true;
+        results.claude.source  = p.includes('.replit-tools') ? '.claude.json (replit-tools)' : '.claude.json';
+        results.claude.masked  = 'oauth:configured';
+        break;
+      }
+      if (data?.apiKey && typeof data.apiKey === 'string') {
+        results.claude.found   = true;
+        results.claude.source  = p.includes('.replit-tools') ? '.claude.json (replit-tools)' : '.claude.json';
+        results.claude.masked  = _maskCredential(data.apiKey);
+        break;
+      }
+    } catch { continue; }
+  }
+
+  // --- Claude: fallback to ANTHROPIC_API_KEY env var ---
+  if (!results.claude.found && process.env.ANTHROPIC_API_KEY) {
+    results.claude.found  = true;
+    results.claude.source = 'env:ANTHROPIC_API_KEY';
+    results.claude.masked = _maskCredential(process.env.ANTHROPIC_API_KEY);
+  }
+
+  // --- OpenAI/Codex: check auth.json for access_token or id_token ---
+  const codexPaths = [
+    '/home/runner/workspace/.replit-tools/.codex-persistent/auth.json',
+    join(homedir(), '.codex', 'auth.json'),
+  ];
+  for (const p of codexPaths) {
+    try {
+      const data = JSON.parse(readFileSync(p, 'utf8'));
+      const accessToken = data?.tokens?.access_token || data?.access_token;
+      const idToken     = data?.tokens?.id_token     || data?.id_token;
+      const apiKey      = data?.apiKey ?? data?.api_key ?? null;
+
+      if (accessToken || idToken) {
+        results.openai.found   = true;
+        results.openai.source  = p.includes('.replit-tools') ? 'codex auth.json (replit-tools)' : 'codex auth.json';
+        results.openai.masked  = 'oauth:configured';
+        break;
+      }
+      if (apiKey && typeof apiKey === 'string') {
+        results.openai.found   = true;
+        results.openai.source  = p.includes('.replit-tools') ? 'codex auth.json (replit-tools)' : 'codex auth.json';
+        results.openai.masked  = _maskCredential(apiKey);
+        break;
+      }
+    } catch { continue; }
+  }
+
+  // --- OpenAI: fallback to OPENAI_API_KEY env var ---
+  if (!results.openai.found && process.env.OPENAI_API_KEY) {
+    results.openai.found  = true;
+    results.openai.source = 'env:OPENAI_API_KEY';
+    results.openai.masked = _maskCredential(process.env.OPENAI_API_KEY);
+  }
+
+  return results;
+}
+
 // ---------------------------------------------------------------------------
 // Auto-detect subscription plans from provider config files
 // ---------------------------------------------------------------------------
@@ -469,4 +581,5 @@ export {
   rememberPreference, forgetPreference, getActivePreferences,
   getAvailableProviders, isSoloBrain, getHeadModel,
   detectPlans, syncPreferencesToMemory,
+  detectAuth, detectEnvironment,
 };