indusagi-coding-agent 0.1.41 → 0.1.43

package/dist/command-line/login-handler.js

@@ -0,0 +1,753 @@
+/**
+ * Login Handler - AI provider authentication and credential management
+ *
+ * Responsibilities:
+ * - Handle login and logout commands for AI providers
+ * - Support OAuth and API key-based authentication
+ * - Manage multi-account support per provider
+ * - Store and retrieve credentials securely
+ * - Validate credentials before storage
+ * - Display available providers and saved accounts
+ *
+ * SECURITY CONSIDERATIONS:
+ * - Credentials are stored in ~/.indusagi/agent/auth.json with restricted file permissions
+ * - API keys are never logged or printed to console
+ * - OAuth tokens are stored with expiration times
+ * - Environment variables are checked before prompting for input
+ * - Credentials are validated before being saved
+ *
+ * MULTI-ACCOUNT SUPPORT:
+ * - Each provider can have multiple named accounts
+ * - Default account can be set for each provider
+ * - Users can switch between accounts using --account flag
+ *
+ * Based on login/logout patterns from openclaw
+ * Original: https://github.com/varunisrani/indusagi-ts/vendor/indusagi-agent
+ *
+ * Adapted to:
+ * - Improve error messages
+ * - Add comprehensive documentation
+ * - Add security-focused comments
+ * - Add credential validation
+ * - Enhance UX with better prompts
+ */
+// ============================================================================
+// IMPORTS
+// ============================================================================
+// External dependencies
+import { getEnvApiKey, getOAuthProviders } from "indusagi/ai";
+import chalk from "chalk";
+import { createInterface } from "readline";
+// Local module imports
+import { AuthStorage } from "../runtime/auth-storage.js";
+import { getAgentDir } from "../config.js";
+// ============================================================================
+// CUSTOM ERROR CLASSES
+// ============================================================================
+/**
+ * Login/authentication error with helpful suggestions
+ *
+ * @class LoginError
+ * @extends {Error}
+ */
+export class LoginError extends Error {
+    constructor(message, code, suggestion) {
+        super(message);
+        this.code = code;
+        this.suggestion = suggestion;
+        this.name = "LoginError";
+    }
+}
+/**
+ * Credential validation error
+ *
+ * @class CredentialValidationError
+ * @extends {Error}
+ */
+export class CredentialValidationError extends Error {
+    constructor(message, code, suggestion) {
+        super(message);
+        this.code = code;
+        this.suggestion = suggestion;
+        this.name = "CredentialValidationError";
+    }
+}
+// ============================================================================
+// VALIDATION FUNCTIONS
+// ============================================================================
+/**
+ * Validate API key format
+ *
+ * Checks for common API key patterns and basic format validation
+ * Note: This is a basic check; actual validation happens when the key is used
+ *
+ * @param apiKey - The API key to validate
+ * @param provider - Provider name for error messages
+ * @throws {CredentialValidationError} If key format appears invalid
+ */
+function validateApiKey(apiKey, provider) {
+    if (!apiKey || apiKey.trim().length === 0) {
+        throw new CredentialValidationError("API key cannot be empty", "EMPTY_API_KEY");
+    }
+    const trimmedKey = apiKey.trim();
+    // Basic length check (most API keys are at least 20 characters)
+    if (trimmedKey.length < 20) {
+        throw new CredentialValidationError(`API key appears too short (${trimmedKey.length} characters). Most API keys are 20+ characters.`, "API_KEY_TOO_SHORT");
+    }
+    // Check for obvious placeholder values
+    const lowerKey = trimmedKey.toLowerCase();
+    const placeholders = ["your-api-key", "api-key", "enter-key", "paste-key"];
+    if (placeholders.some((p) => lowerKey.includes(p))) {
+        throw new CredentialValidationError("API key appears to be a placeholder. Please enter your actual API key.", "PLACEHOLDER_API_KEY");
+    }
+}
+/**
+ * Validate account name format
+ *
+ * @param accountName - Account name to validate
+ * @throws {CredentialValidationError} If account name is invalid
+ */
+function validateAccountName(accountName) {
+    if (!accountName || accountName.trim().length === 0) {
+        throw new CredentialValidationError("Account name cannot be empty", "EMPTY_ACCOUNT_NAME");
+    }
+    const trimmed = accountName.trim();
+    // Check length limit
+    if (trimmed.length > 50) {
+        throw new CredentialValidationError("Account name must be 50 characters or less", "ACCOUNT_NAME_TOO_LONG");
+    }
+    // Check for invalid characters
+    if (!/^[a-zA-Z0-9_-]+$/.test(trimmed)) {
+        throw new CredentialValidationError("Account name can only contain letters, numbers, hyphens, and underscores", "INVALID_ACCOUNT_NAME");
+    }
+}
+/**
+ * Validate provider ID
+ *
+ * @param provider - Provider ID to validate
+ * @returns True if provider is valid
+ */
+function isValidProvider(provider) {
+    const validProviders = [
+        "kimi",
+        "kimi-coding",
+        "anthropic",
+        "openai",
+        "google",
+        "groq",
+        "cerebras",
+        "xai",
+        "openrouter",
+        "vercel-ai-gateway",
+        "zai",
+        "mistral",
+        "minimax",
+        "minimax-cn",
+        "opencode",
+        "sarvam",
+    ];
+    return validProviders.includes(provider);
+}
+// ============================================================================
+// PARSER FUNCTIONS
+// ============================================================================
+/**
+ * Parse login/logout command arguments
+ *
+ * Extracts options from command line arguments
+ *
+ * @param args - Array of command line arguments
+ * @returns LoginOptions object or undefined if not a login/logout command
+ */
+function parseLoginCommand(args) {
+    const [command, ...rest] = args;
+    // Check if this is a login or logout command
+    if (command !== "login" && command !== "logout") {
+        return undefined;
+    }
+    const options = {};
+    const isLogout = command === "logout";
+    // Parse command options
+    for (let i = 0; i < rest.length; i++) {
+        const arg = rest[i];
+        if (arg === "--provider" && i + 1 < rest.length) {
+            options.provider = rest[++i];
+        }
+        else if (arg === "--account" && i + 1 < rest.length) {
+            options.account = rest[++i];
+        }
+        else if (arg === "--list") {
+            options.list = true;
+        }
+        else if (arg === "--all" && isLogout) {
+            options.all = true;
+        }
+    }
+    return options;
+}
+// ============================================================================
+// MAIN HANDLER FUNCTIONS
+// ============================================================================
+/**
+ * Handle login/logout commands
+ *
+ * Entry point for the login/logout command flow:
+ * 1. Parse command options
+ * 2. Initialize auth storage
+ * 3. Route to appropriate handler (list, logout, login)
+ *
+ * @param args - Command line arguments
+ * @returns Promise resolving to true if command was handled
+ *
+ * @throws {LoginError} If command fails
+ *
+ * @example
+ * ```typescript
+ * // Handle login command
+ * await handleLoginCommand(["login", "--provider", "openai"]);
+ *
+ * // Handle logout command
+ * await handleLoginCommand(["logout", "--provider", "openai"]);
+ * ```
+ */
+export async function handleLoginCommand(args) {
+    const options = parseLoginCommand(args);
+    // Return false if not a login/logout command
+    if (!options) {
+        return false;
+    }
+    // Initialize auth storage with agent directory
+    const agentDir = getAgentDir();
+    const authStorage = new AuthStorage(agentDir);
+    // Handle --list flag: show saved accounts
+    if (options.list) {
+        await listAccounts(authStorage);
+        return true;
+    }
+    // If provider not specified, show provider selection
+    if (!options.provider) {
+        await showProviderSelection(authStorage);
+        return true;
+    }
+    // Validate provider
+    if (!isValidProvider(options.provider)) {
+        throw new LoginError(`Unknown provider: ${options.provider}`, "UNKNOWN_PROVIDER", "Run with --list to see available providers");
+    }
+    // Handle logout command
+    if (args[0] === "logout") {
+        await logoutFromProvider(authStorage, options.provider, options.account, options.all);
+        return true;
+    }
+    // Login to specific provider
+    await loginToProvider(authStorage, options.provider, options.account);
+    return true;
+}
+// ============================================================================
+// LIST ACCOUNTS
+// ============================================================================
+/**
+ * List all saved accounts across all providers
+ *
+ * Displays:
+ * - Provider name and account count
+ * - Each account with name and type
+ * - Default account indicator
+ * - Credential status (valid/expired)
+ *
+ * @param authStorage - Auth storage instance
+ */
+async function listAccounts(authStorage) {
+    console.log(chalk.bold("\n🔐 Saved Accounts:\n"));
+    const providers = authStorage.list();
+    if (providers.length === 0) {
+        console.log(chalk.dim("No saved accounts. Use 'indusagi login --provider <provider>' to add accounts.\n"));
+        return;
+    }
+    // Display each provider and its accounts
+    for (const provider of providers) {
+        const accounts = authStorage.getAccounts(provider);
+        const defaultAccount = authStorage.getDefaultAccount(provider);
+        console.log(chalk.cyan(`${provider} (${accounts.length} account${accounts.length !== 1 ? "s" : ""}):`));
+        for (const { accountId, credential } of accounts) {
+            const isDefault = accountId === defaultAccount;
+            const defaultMarker = isDefault ? chalk.green(" [default]") : "";
+            const type = credential.type === "oauth" ? "OAuth" : "API key";
+            const name = credential.accountName || accountId;
+            let status = "✓";
+            if (credential.type === "oauth") {
+                // Check if OAuth token is expired
+                const expired = Date.now() >= credential.expires;
+                status = expired ? chalk.yellow("⚠ expired") : chalk.green("✓");
+            }
+            console.log(`  ${status} ${name}${defaultMarker} (${type})`);
+        }
+        console.log();
+    }
+}
+// ============================================================================
+// PROVIDER SELECTION
+// ============================================================================
+/**
+ * Show interactive provider selection and help
+ *
+ * Displays:
+ * - List of OAuth providers with account counts
+ * - List of API key providers with account counts
+ * - Usage examples
+ *
+ * @param authStorage - Auth storage instance
+ */
+async function showProviderSelection(authStorage) {
+    // Get OAuth providers from indusagi/ai
+    const oauthProviders = getOAuthProviders().map((p) => ({
+        id: p.id,
+        name: p.name,
+        auth: "OAuth",
+    }));
+    // Define API key providers
+    const apiKeyProviders = [
+        { id: "kimi", name: "Kimi (Moonshot AI)", auth: "API key" },
+        { id: "kimi-coding", name: "Kimi Code (Moonshot - Subscription)", auth: "API key" },
+        { id: "anthropic", name: "Anthropic (Claude)", auth: "API key" },
+        { id: "openai", name: "OpenAI", auth: "API key" },
+        { id: "google", name: "Google (Gemini)", auth: "API key" },
+        { id: "groq", name: "Groq", auth: "API key" },
+        { id: "cerebras", name: "Cerebras", auth: "API key" },
+        { id: "xai", name: "xAI (Grok)", auth: "API key" },
+        { id: "openrouter", name: "OpenRouter", auth: "API key" },
+        { id: "vercel-ai-gateway", name: "Vercel AI Gateway", auth: "API key" },
+        { id: "zai", name: "Z.AI (GLM)", auth: "API key" },
+        { id: "mistral", name: "Mistral", auth: "API key" },
+        { id: "minimax", name: "MiniMax", auth: "API key" },
+        { id: "minimax-cn", name: "MiniMax (China)", auth: "API key" },
+        { id: "opencode", name: "OpenCode Zen", auth: "API key" },
+        { id: "sarvam", name: "Sarvam AI", auth: "API key" },
+    ];
+    console.log(chalk.bold("\n🔐 Available Providers for Authentication\n"));
+    // Display OAuth providers
+    console.log(chalk.dim("OAuth Providers:"));
+    oauthProviders.forEach((p, idx) => {
+        const accountCount = authStorage.getAccounts(p.id).length;
+        const accountInfo = accountCount > 0 ? chalk.green(` (${accountCount} saved)`) : "";
+        console.log(`  ${idx + 1}. ${p.name} ${chalk.dim(`(${p.auth})`)}${accountInfo}`);
+    });
+    // Display API key providers
+    console.log(chalk.dim("\nAPI Key Providers:"));
+    apiKeyProviders.forEach((p, idx) => {
+        const accountCount = authStorage.getAccounts(p.id).length;
+        const accountInfo = accountCount > 0 ? chalk.green(` (${accountCount} saved)`) : "";
+        console.log(`  ${oauthProviders.length + idx + 1}. ${p.name} ${chalk.dim(`(${p.auth})`)}${accountInfo}`);
+    });
+    console.log("\n" + chalk.dim("Run: indusagi login --provider <provider-id> [--account <name>]"));
+    console.log(chalk.dim("Example: indusagi login --provider minimax --account production\n"));
+    // Show examples
+    console.log(chalk.bold("Examples:"));
+    console.log(`  ${chalk.cyan("indusagi login --provider anthropic --account personal")} ${chalk.dim("# Login to Claude (personal)")}`);
+    console.log(`  ${chalk.cyan("indusagi login --provider anthropic --account work")} ${chalk.dim("# Login to Claude (work)")}`);
+    console.log(`  ${chalk.cyan("indusagi login --provider minimax --account prod")} ${chalk.dim("# Add MiniMax API key (prod)")}`);
+    console.log(`  ${chalk.cyan("indusagi login --provider minimax --account dev")} ${chalk.dim("# Add MiniMax API key (dev)")}`);
+    console.log(`  ${chalk.cyan("indusagi login --list")} ${chalk.dim("# List all saved accounts")}`);
+    console.log(`  ${chalk.cyan("indusagi logout --provider minimax --account dev")} ${chalk.dim("# Logout specific account")}\n`);
+}
+// ============================================================================
+// LOGIN FLOW
+// ============================================================================
+/**
+ * Handle login to a specific provider
+ *
+ * Flow:
+ * 1. Check if provider supports OAuth
+ * 2. If accounts exist, ask to use existing or add new
+ * 3. For OAuth: start OAuth flow with browser
+ * 4. For API key: prompt for key and validate
+ * 5. Save credentials securely
+ * 6. Set as default if first account
+ *
+ * @param authStorage - Auth storage instance
+ * @param provider - Provider ID
+ * @param accountId - Optional account name (defaults to "default")
+ *
+ * @throws {LoginError} If login fails
+ */
+async function loginToProvider(authStorage, provider, accountId) {
+    // Check if this is an OAuth provider
+    const oauthProviders = getOAuthProviders();
+    const oauthProvider = oauthProviders.find((p) => p.id === provider);
+    // Generate or validate account name
+    let targetAccountId = accountId || "default";
+    const existingAccounts = authStorage.getAccounts(provider);
+    // If no account specified and accounts exist, ask user what to do
+    if (!accountId && existingAccounts.length > 0) {
+        console.log(chalk.yellow(`\n⚠️  Provider '${provider}' already has ${existingAccounts.length} saved account(s):`));
+        for (const { accountId: id, credential } of existingAccounts) {
+            const name = credential.accountName || id;
+            const isDefault = id === authStorage.getDefaultAccount(provider);
+            console.log(`  - ${name}${isDefault ? " [default]" : ""}`);
+        }
+        const choice = await promptChoice("What would you like to do?", ["Use existing account", "Add new account"]);
+        if (choice === "Use existing account") {
+            // Select existing account
+            const selected = await promptChoice("Select account:", existingAccounts.map((a) => a.credential.accountName || a.accountId));
+            const selectedAccount = existingAccounts.find((a) => (a.credential.accountName || a.accountId) === selected);
+            if (selectedAccount) {
+                authStorage.setDefaultAccount(provider, selectedAccount.accountId);
+                console.log(chalk.green.bold(`\n✅ Switched to account: ${selected}\n`));
+            }
+            return;
+        }
+        // User wants to add new account - prompt for name
+        const newName = await promptInput("Enter new account name (e.g., 'work', 'personal'):");
+        if (!newName || newName.trim() === "") {
+            throw new LoginError("Account name is required", "ACCOUNT_NAME_REQUIRED", "Provide a descriptive account name");
+        }
+        // Validate account name
+        try {
+            validateAccountName(newName.trim());
+        }
+        catch (error) {
+            if (error instanceof CredentialValidationError) {
+                throw new LoginError(error.message, error.code, "Use letters, numbers, hyphens, and underscores only");
+            }
+            throw error;
+        }
+        // Check if name already exists
+        const nameExists = existingAccounts.some((a) => (a.credential.accountName || a.accountId) === newName.trim());
+        if (nameExists) {
+            throw new LoginError(`Account '${newName}' already exists for ${provider}`, "ACCOUNT_EXISTS", "Choose a different account name");
+        }
+        accountId = newName.trim();
+    }
+    // Ensure accountId is set (default to targetAccountId if not explicitly set)
+    const finalAccountId = accountId || targetAccountId;
+    console.log(chalk.bold(`\n🔐 Logging in to ${provider}${finalAccountId ? ` [${finalAccountId}]` : ""}...\n`));
+    // Handle OAuth login
+    if (oauthProvider) {
+        await handleOAuthLogin(authStorage, provider, oauthProvider.name, targetAccountId, finalAccountId);
+        return;
+    }
+    // Handle API key login
+    await handleApiKeyLogin(authStorage, provider, targetAccountId, finalAccountId);
+}
+/**
+ * Handle OAuth login flow
+ *
+ * @param authStorage - Auth storage instance
+ * @param provider - Provider ID
+ * @param providerName - Human-readable provider name
+ * @param targetAccountId - Account ID to use
+ * @param displayAccountId - Account name for display
+ */
+async function handleOAuthLogin(authStorage, provider, providerName, targetAccountId, displayAccountId) {
+    console.log(chalk.dim(`Starting OAuth flow for ${providerName}...`));
+    console.log(chalk.dim("A browser window should open. Complete login to finish.\n"));
+    try {
+        // Execute OAuth login
+        await authStorage.login(provider, {
+            // Called when auth URL is available
+            onAuth: (info) => {
+                console.log(chalk.dim(`Opening: ${info.url}`));
+                if (info.instructions) {
+                    console.log(chalk.dim(info.instructions));
+                }
+            },
+            // Called when user input is needed during OAuth
+            onPrompt: async (prompt) => {
+                return promptInput(prompt.message);
+            },
+            // Called for progress updates
+            onProgress: (msg) => {
+                console.log(chalk.dim(msg));
+            },
+        }, targetAccountId, displayAccountId);
+        console.log(chalk.green.bold(`\n✅ Login successful! Account: ${displayAccountId || "default"}\n`));
+        console.log(chalk.dim(`Use: indusagi --provider ${provider} --account ${displayAccountId || "default"} [options]\n`));
+    }
+    catch (error) {
+        throw new LoginError(`Login failed: ${error instanceof Error ? error.message : error}`, "OAUTH_LOGIN_FAILED", "Try again or check your internet connection");
+    }
+}
+/**
+ * Handle API key login flow
+ *
+ * @param authStorage - Auth storage instance
+ * @param provider - Provider ID
+ * @param targetAccountId - Account ID to use
+ * @param displayAccountId - Account name for display
+ */
+async function handleApiKeyLogin(authStorage, provider, targetAccountId, displayAccountId) {
+    // Check for existing environment variable
+    const envKey = getEnvApiKey(provider);
+    // Get provider info for help message
+    const providerInfo = getProviderInfo(provider);
+    if (!providerInfo) {
+        throw new LoginError(`Unknown provider: ${provider}`, "UNKNOWN_PROVIDER");
+    }
+    // Show help message with API key URL
+    if (providerInfo.helpUrl) {
+        prompter.note(`Get your ${providerInfo.name} API key at:\n${providerInfo.helpUrl}`, providerInfo.name);
+    }
+    // Check for existing env variable
+    if (envKey) {
+        const useExisting = await promptChoice(`Use existing ${providerInfo.envVar} (from environment)?`, ["Yes", "No, enter a new key"]);
+        if (useExisting === "Yes") {
+            // Validate environment variable API key
+            try {
+                validateApiKey(envKey, provider);
+            }
+            catch (error) {
+                if (error instanceof CredentialValidationError) {
+                    throw new LoginError(error.message, error.code, error.suggestion);
+                }
+                throw error;
+            }
+            // Save using environment variable
+            authStorage.set(provider, targetAccountId, {
+                type: "api_key",
+                key: envKey,
+                accountId: targetAccountId,
+                accountName: displayAccountId || "Default",
+            });
+            console.log(chalk.green.bold(`\n✅ Login successful! Account: ${displayAccountId || "default"}\n`));
+            console.log(chalk.dim(`Using ${providerInfo.envVar} from environment`));
+            console.log(chalk.dim(`Use: indusagi --provider ${provider} --account ${displayAccountId || "default"} [options]\n`));
+            return;
+        }
+    }
+    // Prompt for API key
+    const apiKey = await promptInput(`Enter ${providerInfo.name} API key:`);
+    if (!apiKey || apiKey.trim() === "") {
+        throw new LoginError("API key is required", "API_KEY_REQUIRED", "Provide your API key to continue");
+    }
+    // Validate API key
+    try {
+        validateApiKey(apiKey.trim(), provider);
+    }
+    catch (error) {
+        if (error instanceof CredentialValidationError) {
+            throw new LoginError(error.message, error.code, error.suggestion);
+        }
+        throw error;
+    }
+    // Save API key securely
+    authStorage.set(provider, targetAccountId, {
+        type: "api_key",
+        key: apiKey.trim(),
+        accountId: targetAccountId,
+        accountName: displayAccountId || "Default",
+    });
+    console.log(chalk.green.bold(`\n✅ Login successful! Account: ${displayAccountId || "default"}\n`));
+    console.log(chalk.dim(`API key saved for ${provider}/${displayAccountId || "default"}`));
+    console.log(chalk.dim(`Use: indusagi --provider ${provider} --account ${displayAccountId || "default"} [options]\n`));
+}
+// ============================================================================
+// LOGOUT FLOW
+// ============================================================================
+/**
+ * Handle logout from provider
+ *
+ * @param authStorage - Auth storage instance
+ * @param provider - Provider ID
+ * @param accountId - Optional account ID to logout
+ * @param all - If true, logout all accounts for provider
+ */
+async function logoutFromProvider(authStorage, provider, accountId, all) {
+    // Logout all accounts if --all flag is set
+    if (all) {
+        authStorage.logout(provider);
+        console.log(chalk.green.bold(`\n✅ Logged out all accounts for: ${provider}\n`));
+        return;
+    }
+    const accounts = authStorage.getAccounts(provider);
+    // Check if any accounts exist
+    if (accounts.length === 0) {
+        console.log(chalk.yellow(`\n⚠️  No accounts found for: ${provider}\n`));
+        return;
+    }
+    // If specific account provided, logout it
+    if (accountId) {
+        authStorage.logout(provider, accountId);
+        console.log(chalk.green.bold(`\n✅ Logged out: ${provider}/${accountId}\n`));
+        return;
+    }
+    // If multiple accounts exist, ask which one to logout
+    if (accounts.length > 1) {
+        const selected = await promptChoice("Select account to logout:", [...accounts.map((a) => a.credential.accountName || a.accountId), "All accounts"]);
+        if (selected === "All accounts") {
+            authStorage.logout(provider);
+            console.log(chalk.green.bold(`\n✅ Logged out all accounts for: ${provider}\n`));
+        }
+        else {
+            const selectedAccount = accounts.find((a) => (a.credential.accountName || a.accountId) === selected);
+            if (selectedAccount) {
+                authStorage.logout(provider, selectedAccount.accountId);
+                console.log(chalk.green.bold(`\n✅ Logged out: ${provider}/${selected}\n`));
+            }
+        }
+        return;
+    }
+    // Single account - logout it
+    const singleAccount = accounts[0];
+    authStorage.logout(provider, singleAccount.accountId);
+    console.log(chalk.green.bold(`\n✅ Logged out: ${provider}/${singleAccount.credential.accountName || singleAccount.accountId}\n`));
+}
+// ============================================================================
+// PROVIDER INFO
+// ============================================================================
+/**
+ * Get provider information for help messages
+ *
+ * @param provider - Provider ID
+ * @returns Provider info or undefined if provider not found
+ */
+function getProviderInfo(provider) {
+    const providers = {
+        kimi: {
+            name: "Kimi (Moonshot AI)",
+            envVar: "MOONSHOT_API_KEY",
+            helpUrl: "https://www.moonshot.cn/",
+        },
+        "kimi-coding": {
+            name: "Kimi Code (Moonshot - Subscription)",
+            envVar: "KIMI_API_KEY",
+            helpUrl: "https://www.kimi.com/code/en",
+        },
+        moonshot: {
+            name: "Moonshot AI (Kimi)",
+            envVar: "MOONSHOT_API_KEY",
+            helpUrl: "https://www.moonshot.cn/",
+        },
+        anthropic: {
+            name: "Anthropic (Claude)",
+            envVar: "ANTHROPIC_API_KEY",
+            helpUrl: "https://console.anthropic.com/",
+        },
+        openai: {
+            name: "OpenAI",
+            envVar: "OPENAI_API_KEY",
+            helpUrl: "https://platform.openai.com/api-keys",
+        },
+        google: {
+            name: "Google (Gemini)",
+            envVar: "GEMINI_API_KEY",
+            helpUrl: "https://aistudio.google.com/app/apikey",
+        },
+        groq: {
+            name: "Groq",
+            envVar: "GROQ_API_KEY",
+            helpUrl: "https://console.groq.com/keys",
+        },
+        cerebras: {
+            name: "Cerebras",
+            envVar: "CEREBRAS_API_KEY",
+            helpUrl: "https://cloud.cerebras.ai/",
+        },
+        xai: {
+            name: "xAI (Grok)",
+            envVar: "XAI_API_KEY",
+            helpUrl: "https://x.ai/api",
+        },
+        openrouter: {
+            name: "OpenRouter",
+            envVar: "OPENROUTER_API_KEY",
+            helpUrl: "https://openrouter.ai/keys",
+        },
+        "vercel-ai-gateway": {
+            name: "Vercel AI Gateway",
+            envVar: "AI_GATEWAY_API_KEY",
+            helpUrl: "https://vercel.com/docs/ai-gateway",
+        },
+        zai: {
+            name: "Z.AI (GLM)",
+            envVar: "ZAI_API_KEY",
+            helpUrl: "https://api.z.ai/",
+        },
+        mistral: {
+            name: "Mistral",
+            envVar: "MISTRAL_API_KEY",
+            helpUrl: "https://console.mistral.ai/",
+        },
+        minimax: {
+            name: "MiniMax",
+            envVar: "MINIMAX_API_KEY",
+            helpUrl: "https://www.minimaxi.com/",
+        },
+        "minimax-cn": {
+            name: "MiniMax (China)",
+            envVar: "MINIMAX_CN_API_KEY",
+            helpUrl: "https://www.minimaxi.com/",
+        },
+        opencode: {
+            name: "OpenCode Zen",
+            envVar: "OPENCODE_API_KEY",
+            helpUrl: "https://opencode.ai/",
+        },
+        sarvam: {
+            name: "Sarvam AI",
+            envVar: "SARVAM_API_KEY",
+            helpUrl: "https://docs.sarvam.ai/api-reference-docs/authentication",
+        },
+    };
+    return providers[provider];
+}
+// ============================================================================
+// PROMPT UTILITIES
+// ============================================================================
+/**
+ * Prompter object with helper methods
+ * Provides consistent formatting for user prompts
+ */
+const prompter = {
+    /**
+     * Display a note/info message to user
+     *
+     * @param message - The message to display
+     * @param title - Title for the note
+     */
+    note(message, title) {
+        console.log(`\n${chalk.bold(title)}`);
+        console.log(chalk.dim(message) + "\n");
+    },
+};
+/**
+ * Prompt user to select from a list of options
+ *
+ * @param question - The question to ask
+ * @param options - Array of option strings
+ * @returns Promise resolving to selected option
+ */
+function promptChoice(question, options) {
+    return new Promise((resolve) => {
+        const rl = createInterface({
+            input: process.stdin,
+            output: process.stdout,
+        });
+        console.log(chalk.bold(`\n? ${question}`));
+        options.forEach((opt, idx) => {
+            console.log(`  ${idx + 1}. ${opt}`);
+        });
+        rl.question(chalk.bold("Select (1-" + options.length + "): "), (answer) => {
+            rl.close();
+            const idx = parseInt(answer, 10) - 1;
+            resolve(options[idx] || options[0]);
+        });
+    });
+}
+/**
+ * Prompt user for text input
+ *
+ * @param question - The question to ask
+ * @returns Promise resolving to user's input
+ */
+function promptInput(question) {
+    return new Promise((resolve) => {
+        const rl = createInterface({
+            input: process.stdin,
+            output: process.stdout,
+        });
+        rl.question(chalk.bold(`\n? ${question}: `), (answer) => {
+            rl.close();
+            resolve(answer.trim());
+        });
+    });
+}
+//# sourceMappingURL=login-handler.js.map