isorite 0.5.0 → 0.6.0

package/dist/main.js

@@ -62,7 +62,7 @@ function cmpTuple(a, b) {
 }
 /** A frontmatter value as text: true/false, whole-number floats without ".0",
 *  nothing for null. */
-function text(value) {
+function text$1(value) {
 	if (value === null || value === void 0) return "";
 	if (typeof value === "boolean") return value ? "true" : "false";
 	return String(value);
@@ -450,14 +450,14 @@ function kindOf(type) {
 }
 /** Note ids from frontmatter: a list, or one; `/a/b.md` and `a/b` alike. */
 function idsOf(raw) {
-	return (typeof raw === "string" ? [raw] : Array.isArray(raw) ? raw : []).map((t) => text(t).trim().replace(/^\/+/, "").replace(/\.md$/, "")).filter(Boolean);
+	return (typeof raw === "string" ? [raw] : Array.isArray(raw) ? raw : []).map((t) => text$1(t).trim().replace(/^\/+/, "").replace(/\.md$/, "")).filter(Boolean);
 }
 /** When it was resolved or solved, as written (a date), or null while it is open. */
 function doneOf(meta, kind) {
 	if (kind === "note") return null;
 	const v = meta[DONE[kind]];
 	if (v === null || v === void 0 || v === false || v === "") return null;
-	return v instanceof Date ? v.toISOString().slice(0, 10) : text(v);
+	return v instanceof Date ? v.toISOString().slice(0, 10) : text$1(v);
 }
 /** The embeds in a note's body, in order, as written (a name, or a path). */
 function embedRefs(body) {
@@ -575,17 +575,17 @@ var init_bundle = __esmMin((() => {
 		}
 		get type() {
 			const t = this.meta.type;
-			return t === null || t === void 0 || t === "" ? "" : text(t);
+			return t === null || t === void 0 || t === "" ? "" : text$1(t);
 		}
 		get title() {
 			const t = this.meta.title;
-			if (t) return text(t);
+			if (t) return text$1(t);
 			const stem = basename$1(this.id);
 			const words = strip(stem.replaceAll("-", " ").replaceAll("_", " "));
 			return words ? words[0].toUpperCase() + words.slice(1).toLowerCase() : stem;
 		}
 		get description() {
-			return text(this.meta.description || "");
+			return text$1(this.meta.description || "");
 		}
 		/** A note, an open question, or a problem (M12). */
 		get kind() {
@@ -598,10 +598,10 @@ var init_bundle = __esmMin((() => {
 		get tags() {
 			let tags = this.meta.tags || [];
 			if (typeof tags === "string") tags = [tags];
-			return Array.isArray(tags) ? tags.filter((t) => t !== null && t !== void 0).map(text) : [];
+			return Array.isArray(tags) ? tags.filter((t) => t !== null && t !== void 0).map(text$1) : [];
 		}
 		get status() {
-			return text(this.meta.status || "stable");
+			return text$1(this.meta.status || "stable");
 		}
 		get generated() {
 			return isEntry(this.meta.generated) ? this.meta.generated : {};
@@ -618,10 +618,10 @@ var init_bundle = __esmMin((() => {
 		get trust() {
 			const events = this.verified;
 			if (!events.length) return "unverified";
-			return events.some((e) => text(e.by).startsWith("human:")) ? "human-reviewed" : "machine-confirmed";
+			return events.some((e) => text$1(e.by).startsWith("human:")) ? "human-reviewed" : "machine-confirmed";
 		}
 		get lastHumanVerification() {
-			const times = this.verified.filter((e) => text(e.by).startsWith("human:")).map((e) => toTime(e.at)).filter((t) => t !== null);
+			const times = this.verified.filter((e) => text$1(e.by).startsWith("human:")).map((e) => toTime(e.at)).filter((t) => t !== null);
 			return times.length ? Math.max(...times) : null;
 		}
 		/** Human-reviewed, but meaningfully changed since the latest human check. */
@@ -1757,14 +1757,14 @@ function parseStudyConfig(source) {
 	}
 	const base = raw.base ?? {};
 	const format = raw.format === void 0 ? 1 : Number(raw.format);
-	if (format !== 1) throw new StudyError(`${CONFIG_FILE} is format ${text(raw.format)}; this isorite reads format 1`);
+	if (format !== 1) throw new StudyError(`${CONFIG_FILE} is format ${text$1(raw.format)}; this isorite reads format 1`);
 	if (typeof base.path !== "string" || !base.path) throw new StudyError(`${CONFIG_FILE} needs [base] path, the knowledge base's folder`);
 	return {
 		format,
 		base: {
 			path: base.path,
-			remote: text(base.remote ?? ""),
-			root: text(base.root ?? "")
+			remote: text$1(base.remote ?? ""),
+			root: text$1(base.root ?? "")
 		}
 	};
 }
@@ -4365,6 +4365,14 @@ var init_engine = __esmMin((() => {
 		get provider() {
 			return this.opts.provider ?? OPENROUTER;
 		}
+		/** Take another provider into use, from the next request on: a setup kept from the settings (M18). What was
+		*  asked of the last one (its key's limit, its model's window) is asked again. */
+		setProvider(provider, http) {
+			this.opts.provider = provider;
+			this.opts.http = http;
+			this.window = void 0;
+			this.keyLimit = void 0;
+		}
 		async settings() {
 			return {
 				provider: this.provider.name,
@@ -4561,7 +4569,7 @@ var init_engine = __esmMin((() => {
 		async begin(req, http, asked) {
 			if (asked.length > 4e3) throw new EngineError("that is too long to ask at once", 413);
 			const key = await this.opts.secrets?.get("provider.key") ?? null;
-			if (!key && /\/\/(?:[^/]*\.)?openrouter\.ai\b/.test(this.provider.url)) throw new EngineError("There is no provider key yet. Set one in settings, behind the logo.", 409);
+			if (!key && /\/\/(?:[^/]*\.)?openrouter\.ai\b/.test(this.provider.url)) throw new EngineError("There is no provider key yet. Set one in Iso's settings.", 409);
 			const { messages, olds } = await this.compose(req, asked);
 			const maxTokens = req.form === "insert" ? REPLY_TOKENS : req.form === "note" ? NOTE_TOKENS : Math.max(REPLY_TOKENS, Math.ceil(olds.join("").length / 3) + 1e3);
 			const most = (req.form === "insert" || req.form === "rewrite") && req.choice?.lookup === false ? 0 : void 0;
@@ -5506,7 +5514,7 @@ var init_engine = __esmMin((() => {
 		async beginTurn(conversation, req, http) {
 			const study = this.opts.own;
 			const key = await this.opts.secrets?.get("provider.key") ?? null;
-			if (!key && /\/\/(?:[^/]*\.)?openrouter\.ai\b/.test(this.provider.url)) throw new EngineError("There is no provider key yet. Set one in settings, behind the logo.", 409);
+			if (!key && /\/\/(?:[^/]*\.)?openrouter\.ai\b/.test(this.provider.url)) throw new EngineError("There is no provider key yet. Set one in Iso's settings.", 409);
 			const lookupOn = req.lookup !== false, mode = req.mode;
 			let w = await this.working({
 				...req,
@@ -6702,7 +6710,11 @@ const textTable = (field, v, env) => v === void 0 ? void 0 : Object.fromEntries(
 *  `headers`, `key_header`, `query` and `stream_usage = false`; `max_tokens` for models that think at length; its
 *  client certificate is `gatewayTls`'s. */
 function providerConfig(path = configPath(), env = process.env) {
-	const config = readConfig(path), p = table(config.provider), tiers = table(config.tiers), prices = table(config.prices);
+	return providerFrom(readConfig(path), env);
+}
+/** The provider a configuration names, as `providerConfig` reads it from the file: for a setup not yet kept (M18). */
+function providerFrom(config, env = process.env) {
+	const p = table(config.provider), tiers = table(config.tiers), prices = table(config.prices);
 	const custom = typeof p.url === "string" && p.url !== "";
 	const base = custom ? {
 		name: typeof p.name === "string" && p.name ? p.name : "custom",
@@ -6733,10 +6745,14 @@ function providerConfig(path = configPath(), env = process.env) {
 	return out;
 }
 function gatewayTls(path = configPath(), env = process.env) {
-	const p = table(readConfig(path).provider), files = [];
+	return gatewayTlsFrom(readConfig(path), dirname(path), env);
+}
+/** The certificate a configuration names, its paths from `dir` (the configuration's folder). */
+function gatewayTlsFrom(config, dir, env = process.env) {
+	const p = table(config.provider), files = [];
 	const file = (field) => {
-		if (p[field] === void 0) return void 0;
-		const named = valueOf(field, p[field], env), at = named.startsWith("~/") ? join(homedir(), named.slice(2)) : resolve(dirname(path), named);
+		if (p[field] === void 0 || p[field] === "") return void 0;
+		const named = valueOf(field, p[field], env), at = named.startsWith("~/") ? join(homedir(), named.slice(2)) : resolve(dir, named);
 		if (!existsSync(at)) throw new Error(`[provider] ${field}: there is no file at ${at}`);
 		files.push(at);
 		return readFileSync(at);
@@ -6754,6 +6770,10 @@ function gatewayTls(path = configPath(), env = process.env) {
 	if (p.pfx_passphrase !== void 0) tls.passphrase = valueOf("pfx_passphrase", p.pfx_passphrase, env);
 	return files.length ? tls : null;
 }
+/** Whether Iso has a model here: a key kept, or a provider of your own (a gateway may need no key). */
+async function hasModel$1(config = configPath()) {
+	return await new ConfigSecrets(config).get("provider.key") !== null || providerConfig(config).url !== OPENROUTER.url;
+}
 //#endregion
 //#region packages/server/src/model.ts
 /** Where the server looks for the model, in order, and why each place is there. */
@@ -6784,7 +6804,7 @@ function modelPlaces(env = process.env) {
 /** Where the model is, or null when it is not installed or is switched off (ISORITE_EMBED=off). */
 function modelDir(env = process.env) {
 	if (env.ISORITE_EMBED === "off") return null;
-	return modelPlaces(env).find((p) => hasModel$1(p.dir))?.dir ?? null;
+	return modelPlaces(env).find((p) => hasModel(p.dir))?.dir ?? null;
 }
 /** What is in a model's folder. `isorite-model.json` beside the files may give its `name` and `pooling` ("cls",
 *  the first token's state, as granite is used; or "mean", the average of them all, as all-MiniLM is). */
@@ -6918,7 +6938,7 @@ async function fetchModel(out, say = console.log, { from, pkg = PACKAGE, release
 *  checked by using it: it must load, and give DIM numbers for a sentence. Kept in the user's models, and used from
 *  then on. */
 async function installFrom(from, say = console.log, env = process.env) {
-	if (!hasModel$1(from)) throw new Error(`${from} has no model: it needs model.onnx and tokenizer.json`);
+	if (!hasModel(from)) throw new Error(`${from} has no model: it needs model.onnx and tokenizer.json`);
 	const granite = !existsSync(join(from, "isorite-model.json")) && FILES.every(([, to, want]) => existsSync(join(from, to)) && sha(readFileSync(join(from, to))) === want);
 	let out = userModelDir(env);
 	if (granite) await fetchModel(out, say, { from });
@@ -6955,7 +6975,7 @@ async function modelCommand(from, say = console.log, env = process.env, sources
 		say(e.message);
 		return 1;
 	}
-	const places = modelPlaces(env), found = places.find((p) => hasModel$1(p.dir));
+	const places = modelPlaces(env), found = places.find((p) => hasModel(p.dir));
 	if (found) {
 		told(modelInfo(found.dir), found.why);
 		say("Nothing to fetch.");
@@ -6977,7 +6997,7 @@ async function modelCommand(from, say = console.log, env = process.env, sources
 		return 1;
 	}
 }
-var NAME$1, MODEL, RELEASE, PACKAGE, HUB, FILES, sha, userModelsDir, userModelDir, hasModel$1, ModelFetchError, modelFiles;
+var NAME$1, MODEL, RELEASE, PACKAGE, HUB, FILES, sha, userModelsDir, userModelDir, hasModel, ModelFetchError, modelFiles;
 var init_model = __esmMin((() => {
 	init_src();
 	NAME$1 = "granite-embedding-small-english-r2";
@@ -7010,7 +7030,7 @@ var init_model = __esmMin((() => {
 	sha = (buf) => createHash("sha256").update(buf).digest("hex");
 	userModelsDir = (env = process.env) => join(env.XDG_DATA_HOME || join(homedir(), ".local", "share"), "isorite", "models");
 	userModelDir = (env = process.env) => join(userModelsDir(env), NAME$1);
-	hasModel$1 = (dir) => existsSync(join(dir, "model.onnx")) && existsSync(join(dir, "tokenizer.json"));
+	hasModel = (dir) => existsSync(join(dir, "model.onnx")) && existsSync(join(dir, "tokenizer.json"));
 	ModelFetchError = class extends Error {
 		tried;
 		constructor(tried) {
@@ -7145,16 +7165,17 @@ function gatewayHttp(provider, tls, env = process.env) {
 }
 /** What OpenCode may ask of the provider through isorite. */
 const RELAYED = /* @__PURE__ */ new Set(["/chat/completions", "/models"]);
-/** The provider at /api/gateway: each request is sent on with what `endpoint` adds (the key, where the provider
+/** The provider at /api/gateway, as `live` has it: each request is sent on with what `endpoint` adds (the key, where the provider
 *  wants it, its headers and query) by `http`, and the reply streamed back. A provider that can't be reached is
 *  answered as an OpenAI-compatible one answers an error, so OpenCode shows why. */
-function relay(provider, http, key) {
+function relay(live, key) {
 	const json = (status, message) => new Response(JSON.stringify({ error: { message } }), {
 		status,
 		headers: { "Content-Type": "application/json" }
 	});
 	return async (path, req) => {
 		if (!RELAYED.has(path)) return json(404, `isorite relays only ${[...RELAYED].join(" and ")}`);
+		const { provider, http } = live();
 		const to = endpoint(provider, await key(), path), type = req.headers.get("content-type");
 		const body = req.method === "POST" ? await req.text() : void 0;
 		let res;
@@ -7641,6 +7662,35 @@ const Revised = z.object({
 	text: z.union([z.string(), z.array(z.string()).max(40)])
 }).strict();
 const Key = z.object({ key: z.string().nullable() }).strict();
+const Pair = z.object({
+	name: z.string().max(200),
+	value: z.string().max(4e3),
+	held: z.boolean().optional()
+}).strict();
+const Path = z.string().max(1e3);
+const SetupDraft = z.object({
+	kind: z.enum(["openrouter", "gateway"]),
+	name: z.string().max(100),
+	url: z.string().max(2e3),
+	keyHeld: z.boolean(),
+	keyHeader: z.string().max(200),
+	headers: z.array(Pair).max(40),
+	query: z.array(Pair).max(40),
+	pfx: Path,
+	passphraseHeld: z.boolean(),
+	cert: Path,
+	certKey: Path,
+	ca: Path,
+	streamUsage: z.boolean(),
+	maxTokens: z.number().int().positive().max(1e6).nullable(),
+	tiers: z.object({
+		low: z.string().max(200),
+		mid: z.string().max(200),
+		max: z.string().max(200)
+	}).strict(),
+	key: z.string().max(400).nullable().optional(),
+	passphrase: z.string().max(1e3).nullable().optional()
+}).strict();
 const AgentName = z.string().regex(/^[a-z0-9][a-z0-9-]{0,39}$/);
 const AgentLook = z.object({
 	agent: AgentName,
@@ -7666,7 +7716,7 @@ const AgentStatus = z.object({
 	session: z.string().min(1).max(200),
 	busy: z.boolean()
 }).strict();
-function createApp({ api, token, loopback, web, allowHosts = [], notes, terminal, gateway }) {
+function createApp({ api, token, loopback, web, allowHosts = [], notes, terminal, gateway, setup }) {
 	const app = new Hono();
 	const allowed = new Set([...allowHosts].map((h) => h.toLowerCase()));
 	const reply = (c, status, value) => c.body(JSON.stringify(value), status, {
@@ -7681,6 +7731,16 @@ function createApp({ api, token, loopback, web, allowHosts = [], notes, terminal
 		} catch {}
 		return !loopback || LOOPBACK.has(host) || host.endsWith(".ts.net") || allowed.has(host);
 	};
+	/** Asked from this machine itself: its own name, and (where the connection says) from its own address. A
+	*  tailnet's name is not, even through tailscale serve, whose connections come from this machine. */
+	const local = (c) => {
+		let host = "";
+		try {
+			host = new URL("http://" + (c.req.header("host") ?? "")).hostname.replace(/^\[|\]$/g, "").toLowerCase();
+		} catch {}
+		const from = c.env?.incoming?.socket?.remoteAddress;
+		return LOOPBACK.has(host) && (from === void 0 || /^(127\.|::1$|::ffff:127\.)/.test(from));
+	};
 	const NOT_HERE = "isorite answers only to this machine's own names (localhost) and to a tailnet's (….ts.net). To be reached by another name, start it with: isorite serve <base> --allow-host <that name>";
 	/** Why a write is refused, or null. */
 	const writeRefused = (c) => {
@@ -7829,14 +7889,36 @@ function createApp({ api, token, loopback, web, allowHosts = [], notes, terminal
 	app.get("/api/context", (c) => answer(c, () => api.context(c.req.query("id") || void 0, choiceOf(c.req.query("choice")))));
 	post("/api/context/clear", z.object({}).strict(), () => api.clearConversation());
 	app.get("/api/settings", (c) => answer(c, () => api.settings()));
-	post("/api/settings/key", Key, (_c, b) => api.setKey(b.key), "put");
+	post("/api/settings/key", Key, async (_c, b) => {
+		const s = await api.setKey(b.key);
+		await setup?.changed();
+		return api.settings().catch(() => s);
+	}, "put");
 	app.get("/api/spend", (c) => answer(c, () => api.spend()));
 	post("/api/settings/spend-cap", z.object({ usd: z.number().positive().max(1e6).nullable() }).strict(), (_c, b) => api.setSpendCap(b.usd), "put");
 	post("/api/settings/connect", z.object({ callback: z.string().max(2e3) }).strict(), (_c, b) => api.connect(b.callback));
 	post("/api/settings/connected", z.object({
 		code: z.string().min(1).max(2e3),
 		state: z.string().min(1).max(200)
-	}).strict(), (_c, b) => api.connected(b.code, b.state));
+	}).strict(), async (_c, b) => {
+		const s = await api.connected(b.code, b.state);
+		await setup?.changed();
+		return api.settings().catch(() => s);
+	});
+	if (setup) {
+		const FROM_HERE = "The provider's setup is changed only from this machine (localhost): the key goes where it says.";
+		const here = (c) => {
+			if (!local(c)) throw new EngineError(FROM_HERE, 403);
+		};
+		app.get("/api/settings/provider", (c) => answer(c, async () => setup.view(local(c))));
+		post("/api/settings/provider", SetupDraft, (c, b) => {
+			here(c);
+			return setup.keep(b, true);
+		}, "put");
+		post("/api/settings/provider/check", z.object({ draft: SetupDraft.nullable() }).strict(), (c, b) => setup.check(local(c) ? b.draft : null));
+		post("/api/settings/provider/models", z.object({ draft: SetupDraft.nullable() }).strict(), async (c, b) => ({ models: await setup.models(local(c) ? b.draft : null) }));
+		post("/api/settings/report", z.object({}).strict(), async () => ({ text: await setup.report() }));
+	}
 	app.get("/api/agent/tools", (c) => answer(c, () => api.agentTools()));
 	post("/api/agent/look", AgentLook, (_c, b) => api.agentLook(b));
 	app.get("/api/agent/base", (c) => answer(c, async () => ({ notes: notes ?? null })));
@@ -8037,6 +8119,251 @@ var NodeFiles = class {
 	}
 };
 //#endregion
+//#region packages/server/src/setup.ts
+init_src();
+/** What the page sent that cannot be kept: said back to it as it is (400). */
+var SetupError = class extends EngineError {};
+/** The fields of [provider] the form holds. The rest (spend_cap, cache_marks, context, …) are left as they are. */
+const FORM = [
+	"url",
+	"name",
+	"auth",
+	"key",
+	"key_header",
+	"headers",
+	"query",
+	"pfx",
+	"pfx_passphrase",
+	"cert",
+	"cert_key",
+	"ca",
+	"stream_usage",
+	"max_tokens"
+];
+const NAMED = /^\$[A-Za-z_][A-Za-z0-9_]*$/;
+const text = (v) => typeof v === "string" || typeof v === "number" ? String(v) : "";
+const secretPair = (name, value) => SECRET.test(name) && !NAMED.test(value);
+/** The setup a configuration holds, its secrets held back. */
+function readSetup(config) {
+	const p = table(config.provider), tiers = table(config.tiers);
+	const pairs = (v) => Object.entries(table(v)).map(([name, x]) => secretPair(name, text(x)) ? {
+		name,
+		value: "",
+		held: true
+	} : {
+		name,
+		value: text(x)
+	});
+	const gateway = typeof p.url === "string" && p.url !== "";
+	return {
+		kind: gateway ? "gateway" : "openrouter",
+		name: text(p.name),
+		url: gateway ? p.url : OPENROUTER.url,
+		keyHeld: text(p.key) !== "",
+		keyHeader: text(p.key_header),
+		headers: pairs(p.headers),
+		query: pairs(p.query),
+		pfx: text(p.pfx),
+		passphraseHeld: p.pfx_passphrase !== void 0 && text(p.pfx_passphrase) !== "",
+		cert: text(p.cert),
+		certKey: text(p.cert_key),
+		ca: text(p.ca),
+		streamUsage: p.stream_usage !== false,
+		maxTokens: typeof p.max_tokens === "number" && p.max_tokens > 0 ? p.max_tokens : null,
+		tiers: Object.fromEntries(TIERS.map((t) => [t, text(tiers[t]) || OPENROUTER.tiers[t]]))
+	};
+}
+/** The configuration with `draft` in place of its setup; and whether the key was forgotten for a new address. */
+function applySetup(config, draft) {
+	const old = table(config.provider), p = Object.fromEntries(Object.entries(old).filter(([k]) => !FORM.includes(k)));
+	const gateway = draft.kind === "gateway", url = gateway ? draft.url.trim() : "";
+	if (gateway) {
+		let parsed;
+		try {
+			parsed = new URL(url);
+		} catch {
+			throw new SetupError("the gateway's address is not an address: it begins https:// (or http:// on this machine)");
+		}
+		if (parsed.protocol !== "https:" && parsed.protocol !== "http:") throw new SetupError("the gateway's address begins https:// (or http:// on this machine)");
+		p.url = url.replace(/\/+$/, "");
+		if (draft.name.trim()) p.name = draft.name.trim();
+	}
+	const at = (url) => (url || OPENROUTER.url).replace(/\/+$/, "");
+	const moved = at(text(old.url)) !== at(text(p.url));
+	if (!moved && old.auth !== void 0) p.auth = old.auth;
+	let forgot = false;
+	if (typeof draft.key === "string" && draft.key.trim()) {
+		const key = draft.key.trim();
+		if (key.length > 400 || /\s/.test(key)) throw new SetupError("that does not look like a key");
+		p.key = key;
+	} else if (draft.key === void 0 && old.key !== void 0) {
+		if (moved) forgot = true;
+		else p.key = old.key;
+	}
+	if (gateway) {
+		if (draft.keyHeader.trim()) p.key_header = draft.keyHeader.trim();
+		const pairs = (field, given) => {
+			const before = table(old[field]), out = {};
+			for (const pair of given) {
+				const name = pair.name.trim();
+				if (!name) continue;
+				if (!/^[A-Za-z0-9!#$%&'*+.^_`|~-]+$/.test(name)) throw new SetupError(`${field === "headers" ? "a header's" : "a query value's"} name has a character it cannot have: ${name}`);
+				if (pair.held && !pair.value) {
+					if (before[name] !== void 0 && !moved) out[name] = before[name];
+					continue;
+				}
+				out[name] = pair.value;
+			}
+			if (Object.keys(out).length) p[field] = out;
+		};
+		pairs("headers", draft.headers);
+		pairs("query", draft.query);
+		for (const [field, value] of [
+			["pfx", draft.pfx],
+			["cert", draft.cert],
+			["cert_key", draft.certKey],
+			["ca", draft.ca]
+		]) if (value.trim()) p[field] = value.trim();
+		if (p.pfx !== void 0) {
+			if (typeof draft.passphrase === "string" && draft.passphrase) p.pfx_passphrase = draft.passphrase;
+			else if (draft.passphrase === void 0 && old.pfx_passphrase !== void 0) p.pfx_passphrase = old.pfx_passphrase;
+		}
+		if (!draft.streamUsage) p.stream_usage = false;
+		if (draft.maxTokens !== null) {
+			if (!(Number.isInteger(draft.maxTokens) && draft.maxTokens > 0 && draft.maxTokens <= 1e6)) throw new SetupError("max_tokens is a whole number of tokens");
+			p.max_tokens = draft.maxTokens;
+		}
+	}
+	const tiers = Object.fromEntries(Object.entries(table(config.tiers)).filter(([k]) => !TIERS.includes(k)));
+	for (const t of TIERS) {
+		const model = draft.tiers[t]?.trim() ?? "";
+		if (model.length > 200 || /\s/.test(model)) throw new SetupError(`the ${t} tier's model is not a model's name`);
+		if (model && (gateway || model !== OPENROUTER.tiers[t])) tiers[t] = model;
+	}
+	const out = {
+		...config,
+		provider: p
+	};
+	if (Object.keys(tiers).length) out.tiers = tiers;
+	else delete out.tiers;
+	if (!Object.keys(p).length) delete out.provider;
+	return {
+		config: out,
+		forgot
+	};
+}
+function reach(config, dir, env = process.env) {
+	const provider = providerFrom(config, env), tls = gatewayTlsFrom(config, dir, env);
+	return {
+		provider,
+		http: gatewayHttp(provider, tls, env),
+		key: text(table(config.provider).key) || null,
+		tls
+	};
+}
+/** The setup, for the server's routes. */
+var Setup = class {
+	path;
+	env;
+	o;
+	constructor(o = {}) {
+		this.o = o;
+		this.env = o.env ?? process.env;
+		this.path = o.config ?? configPath(this.env);
+	}
+	view(local) {
+		return {
+			setup: readSetup(readConfig(this.path)),
+			local,
+			config: this.path
+		};
+	}
+	/** The configuration a draft would make, or the one kept (null). */
+	draft(draft) {
+		const config = readConfig(this.path);
+		return draft ? applySetup(config, draft).config : config;
+	}
+	/** Doctor's checks of the provider, on the draft as if it were kept. Nothing is written. */
+	async check(draft) {
+		const checks = [], say = (step, outcome, said) => void checks.push({
+			step,
+			outcome,
+			said
+		});
+		let r;
+		try {
+			r = reach(this.draft(draft), dirname(this.path), this.env);
+		} catch (e) {
+			say("setup", "fail", e.message);
+			return checks;
+		}
+		if (!r.key && !r.tls && /\/\/(?:[^/]*\.)?openrouter\.ai\b/.test(r.provider.url)) {
+			say("key", "fail", "none: paste one, or sign in for one");
+			return checks;
+		}
+		await checkProvider(r.provider, r.http, r.key, say);
+		return checks;
+	}
+	/** The models the provider lists, for the tiers to be chosen from. Empty where it has no list. */
+	async models(draft) {
+		let r;
+		try {
+			r = reach(this.draft(draft), dirname(this.path), this.env);
+		} catch (e) {
+			throw new SetupError(e.message);
+		}
+		const to = endpoint(r.provider, r.key, "/models");
+		let res;
+		try {
+			res = await r.http.fetch(to.url, {
+				headers: to.headers,
+				signal: AbortSignal.timeout(2e4)
+			});
+		} catch (e) {
+			throw new SetupError(unreachable(e, r.provider.url));
+		}
+		if (!res.ok) {
+			await res.body?.cancel();
+			return [];
+		}
+		const listed = ((await res.json().catch(() => ({}))).data ?? []).map((m) => m.id).filter((id) => typeof id === "string");
+		return [...new Set(listed)].sort();
+	}
+	/** Keep the draft, once it is known to be usable, and take it into use. The file as it was is kept beside it the
+	*  first time, since writing it loses its comments. */
+	async keep(draft, local) {
+		const { config } = applySetup(readConfig(this.path), draft);
+		try {
+			reach(config, dirname(this.path), this.env);
+		} catch (e) {
+			throw new SetupError(e.message);
+		}
+		if (existsSync(this.path) && !existsSync(`${this.path}.bak`)) copyFileSync(this.path, `${this.path}.bak`);
+		writeConfig(config, this.path);
+		await this.o.kept?.();
+		return this.view(local);
+	}
+	/** A key was kept or forgotten by the engine: taken into use as a setup is. */
+	async changed() {
+		await this.o.kept?.();
+	}
+	/** isorite doctor --report, as one block with its secrets hidden. */
+	async report() {
+		const lines = [];
+		await doctor(this.o.notes, {
+			report: true,
+			env: this.env,
+			out: (l) => lines.push(l),
+			...this.o.version ? { version: this.o.version } : {},
+			...this.o.port ? { port: this.o.port } : {}
+		});
+		return lines.join("\n");
+	}
+};
+//#endregion
+//#region packages/server/src/version.ts
+const VERSION = "0.6.0";
+//#endregion
 //#region packages/server/src/studybase.ts
 init_src$1();
 function git(cwd, ...args) {
@@ -8131,20 +8458,49 @@ async function openEngine({ notes }, device = deviceId(), config = configPath(),
 		} : {}
 	});
 }
+/** The guide's finder, as a provider: no key, no sign-in, and a name that says what it is. */
+const { auth: _auth, ...openrouter } = OPENROUTER;
+const FINDER = {
+	...openrouter,
+	name: "finder",
+	url: "http://finder.invalid/v1"
+};
+/** The provider as the configuration has it now: kept from the settings (M18), it is taken into use at once, by
+*  Iso and the relay. With `stand`, that is asked while there is no model here. */
+async function liveProvider(config, stand) {
+	if (stand && !await hasModel$1(config)) return {
+		provider: FINDER,
+		http: stand
+	};
+	const provider = providerConfig(config);
+	return {
+		provider,
+		http: gatewayHttp(provider, gatewayTls(config))
+	};
+}
 /** A link most terminals let you click (OSC 8), when the output is a terminal; the address as it is otherwise. */
 const link$1 = (url, tty = Boolean(process.stdout.isTTY)) => tty ? `\x1b]8;;${url}\x1b\\${url}\x1b]8;;\x1b\\` : url;
 /** `stand`: in place of the provider, an answerer of its own, as the guide's finder is when no model is set up
-*  (M16). It needs no key, and the key kept, if any, is not sent to it. */
+*  (M16). It is asked while there is no model here (no key, no provider of your own), and needs no key. */
 async function serve$1(path, { host = "127.0.0.1", port = 4767, allowHosts = [], stand } = {}) {
 	const opened = locate(path);
-	const config = configPath(), provider = providerConfig(config), http = stand ?? gatewayHttp(provider, gatewayTls(config));
-	const kept = new ConfigSecrets(config);
-	const secrets = stand ? {
-		get: (name) => name === "provider.key" ? Promise.resolve("none") : kept.get(name),
-		set: (name, value) => kept.set(name, value)
-	} : kept;
-	const api = await openEngine(opened, deviceId(config), config, http, modelDir(), secrets);
-	const gateway = LOOPBACK.has(host) ? relay(provider, http, () => secrets.get(KEY)) : void 0;
+	const config = configPath();
+	const current = () => liveProvider(config, stand);
+	let live = await current();
+	const secrets = new ConfigSecrets(config);
+	const api = await openEngine(opened, deviceId(config), config, live.http, modelDir(), secrets);
+	api.setProvider(live.provider, live.http);
+	const setup = new Setup({
+		config,
+		notes: opened.notes,
+		version: VERSION,
+		port,
+		kept: async () => {
+			live = await current();
+			api.setProvider(live.provider, live.http);
+		}
+	});
+	const gateway = LOOPBACK.has(host) ? relay(() => live, () => secrets.get(KEY)) : void 0;
 	const web = existsSync(join(WEB_DIR, "index.html")) ? WEB_DIR : null;
 	const terminal = new Terminal();
 	const app = createApp({
@@ -8155,7 +8511,8 @@ async function serve$1(path, { host = "127.0.0.1", port = 4767, allowHosts = [],
 		allowHosts,
 		notes: opened.notes,
 		terminal,
-		gateway
+		gateway,
+		setup
 	});
 	const server = serve({
 		fetch: app.fetch,
@@ -8502,6 +8859,65 @@ const TOOL = {
 		}
 	}
 };
+/** The provider asked, as doctor asks it and as the page's check does (M18): its list of models, a short reply from
+*  each tier's model, and one tool call. A few hundred tokens in all. */
+async function checkProvider(p, h, key, say) {
+	const models = [.../* @__PURE__ */ new Set([
+		p.tiers.low,
+		p.tiers.mid,
+		p.tiers.max
+	])];
+	let reached = true;
+	try {
+		const to = endpoint(p, key, "/models");
+		const res = await h.fetch(to.url, {
+			headers: to.headers,
+			signal: AbortSignal.timeout(2e4)
+		});
+		if (res.ok) {
+			const listed = ((await res.json().catch(() => ({}))).data ?? []).map((m) => m.id ?? "");
+			const missing = models.filter((m) => !listed.includes(m));
+			say("reached", "ok", `${to.url.replace(/\?.*$/, "")} answered with ${listed.length} models`);
+			if (listed.length && missing.length) say("models", "fail", `${missing.join(", ")} not among them; it has ${listed.slice(0, 12).join(", ")}${listed.length > 12 ? ", …" : ""}. Name its models under [tiers]`);
+		} else say("reached", res.status === 401 || res.status === 403 ? "fail" : "ok", res.status === 401 || res.status === 403 ? `it said ${res.status} to the list of models: the key${p.keyHeader ? "" : ", or the header it goes in (key_header)"}, or a header it wants (headers), is not accepted` : `it answered (${res.status} for the list of models, which some gateways don't have)`);
+	} catch (e) {
+		reached = false;
+		say("reached", "fail", unreachable(e, p.url));
+	}
+	if (reached) {
+		for (const model of models) try {
+			const reply = await complete(h, p, key, {
+				model,
+				maxTokens: 16,
+				messages: [{
+					role: "user",
+					content: "Reply with the one word: ready"
+				}],
+				signal: AbortSignal.timeout(6e4)
+			});
+			const usage = reply.usage.tokensIn + reply.usage.tokensOut > 0;
+			say(`reply from ${model}`, usage || p.streamUsage === false ? "ok" : "warn", `"${reply.text.trim().slice(0, 40)}"${usage ? `, ${reply.usage.tokensIn} tokens in and ${reply.usage.tokensOut} out` : p.streamUsage === false ? "" : ": no usage reported, so the gauge can't count it"}`);
+		} catch (e) {
+			const said = e.message;
+			say(`reply from ${model}`, "fail", /stream_options/i.test(said) ? `${said} Set stream_usage = false under [provider].` : said);
+		}
+		try {
+			const reply = await complete(h, p, key, {
+				model: p.tiers.mid,
+				maxTokens: 64,
+				tools: [TOOL],
+				messages: [{
+					role: "user",
+					content: "Ping, using the ping tool."
+				}],
+				signal: AbortSignal.timeout(6e4)
+			});
+			say("tools", reply.calls.length ? "ok" : "fail", reply.calls.length ? `${p.tiers.mid} called ${reply.calls[0].name}` : `${p.tiers.mid} answered without calling the tool: Iso and the terminal need a model, and a gateway, that pass tools on`);
+		} catch (e) {
+			say("tools", "fail", e instanceof ModelError ? e.message : String(e));
+		}
+	}
+}
 /** Run the checks; 0 when none failed. */
 async function doctor(folder, o = {}) {
 	const env = o.env ?? process.env, out = o.out ?? console.log, checks = [];
@@ -8515,7 +8931,7 @@ async function doctor(folder, o = {}) {
 	};
 	const path = configPath(env), execArgv = o.execArgv ?? process.execArgv;
 	let provider = null, http = o.http ?? null, key = null;
-	if (!existsSync(path)) say("config", "warn", `there is no ${path}: Iso uses OpenRouter, and needs a key (settings, behind the logo, or key under [provider] there)`);
+	if (!existsSync(path)) say("config", "warn", `there is no ${path}: Iso uses OpenRouter, and needs a key (in Iso's settings, or key under [provider] there)`);
 	try {
 		readConfig(path);
 		provider = providerConfig(path, env);
@@ -8523,7 +8939,7 @@ async function doctor(folder, o = {}) {
 		const tls = gatewayTls(path, env);
 		http ??= gatewayHttp(provider, tls, env);
 		if (existsSync(path)) say("config", "ok", `${path}: ${provider.name} at ${provider.url}`);
-		say("key", key ? "ok" : tls ? "warn" : "fail", key ? `${hidden(key)}, sent ${provider.keyHeader ? `in ${provider.keyHeader}` : "as Authorization: Bearer"}` : tls ? "none; the client certificate alone is sent" : "none: set one in settings (behind the logo), or as key under [provider]");
+		say("key", key ? "ok" : tls ? "warn" : "fail", key ? `${hidden(key)}, sent ${provider.keyHeader ? `in ${provider.keyHeader}` : "as Authorization: Bearer"}` : tls ? "none; the client certificate alone is sent" : "none: set one in Iso's settings, or as key under [provider]");
 		if (tls) say("certificate", "ok", `${tls.files.join(", ")}${tls.pfx || tls.cert ? "" : " (an authority only, no client certificate)"}`);
 		const tiers = `low ${provider.tiers.low}, mid ${provider.tiers.mid}, max ${provider.tiers.max}`;
 		say("models", provider.defaultTiers ? "warn" : "ok", provider.defaultTiers ? `${tiers}: OpenRouter's names, kept because [tiers] names none for ${provider.name}; a gateway usually calls its models otherwise` : tiers);
@@ -8547,56 +8963,7 @@ async function doctor(folder, o = {}) {
 			p.tiers.max
 		])];
 		if (!o.report) out(`  asking ${p.name}: its models, then ${models.length + 1} replies of a few words (a few hundred tokens in all)`);
-		let reached = true;
-		try {
-			const to = endpoint(p, key, "/models");
-			const res = await h.fetch(to.url, {
-				headers: to.headers,
-				signal: AbortSignal.timeout(2e4)
-			});
-			if (res.ok) {
-				const listed = ((await res.json().catch(() => ({}))).data ?? []).map((m) => m.id ?? "");
-				const missing = models.filter((m) => !listed.includes(m));
-				say("reached", "ok", `${to.url.replace(/\?.*$/, "")} answered with ${listed.length} models`);
-				if (listed.length && missing.length) say("models", "fail", `${missing.join(", ")} not among them; it has ${listed.slice(0, 12).join(", ")}${listed.length > 12 ? ", …" : ""}. Name its models under [tiers]`);
-			} else say("reached", res.status === 401 || res.status === 403 ? "fail" : "ok", res.status === 401 || res.status === 403 ? `it said ${res.status} to the list of models: the key${p.keyHeader ? "" : ", or the header it goes in (key_header)"}, or a header it wants (headers), is not accepted` : `it answered (${res.status} for the list of models, which some gateways don't have)`);
-		} catch (e) {
-			reached = false;
-			say("reached", "fail", unreachable(e, p.url));
-		}
-		if (reached) {
-			for (const model of models) try {
-				const reply = await complete(h, p, key, {
-					model,
-					maxTokens: 16,
-					messages: [{
-						role: "user",
-						content: "Reply with the one word: ready"
-					}],
-					signal: AbortSignal.timeout(6e4)
-				});
-				const usage = reply.usage.tokensIn + reply.usage.tokensOut > 0;
-				say(`reply from ${model}`, usage || p.streamUsage === false ? "ok" : "warn", `"${reply.text.trim().slice(0, 40)}"${usage ? `, ${reply.usage.tokensIn} tokens in and ${reply.usage.tokensOut} out` : p.streamUsage === false ? "" : ": no usage reported, so the gauge can't count it"}`);
-			} catch (e) {
-				const said = e.message;
-				say(`reply from ${model}`, "fail", /stream_options/i.test(said) ? `${said} Set stream_usage = false under [provider].` : said);
-			}
-			try {
-				const reply = await complete(h, p, key, {
-					model: p.tiers.mid,
-					maxTokens: 64,
-					tools: [TOOL],
-					messages: [{
-						role: "user",
-						content: "Ping, using the ping tool."
-					}],
-					signal: AbortSignal.timeout(6e4)
-				});
-				say("tools", reply.calls.length ? "ok" : "fail", reply.calls.length ? `${p.tiers.mid} called ${reply.calls[0].name}` : `${p.tiers.mid} answered without calling the tool: Iso and the terminal need a model, and a gateway, that pass tools on`);
-			} catch (e) {
-				say("tools", "fail", e instanceof ModelError ? e.message : String(e));
-			}
-		}
+		await checkProvider(p, h, key, say);
 	}
 	try {
 		const found = findOpenCode(env, o.probe);
@@ -10015,7 +10382,6 @@ function loadGuide(dir = GUIDE_DIR) {
 }
 //#endregion
 //#region packages/server/src/guide.ts
-init_src();
 init_src$1();
 const GUIDE_FOLDER = join(homedir(), "isorite-guide");
 /** Write the guide into `folder`, unless it is there already. Returns whether it was written now. A folder that
@@ -10037,19 +10403,15 @@ function writeGuide(folder) {
 		fresh: true
 	};
 }
-/** Whether Iso has a model here: a key kept, or a provider of your own (a gateway may need no key). */
-async function hasModel(config = configPath()) {
-	return await new ConfigSecrets(config).get("provider.key") !== null || providerConfig(config).url !== OPENROUTER.url;
-}
 async function guide(folder = GUIDE_FOLDER, { port = 4767, out = console.log } = {}) {
 	const { notes, fresh } = writeGuide(folder);
-	const model = await hasModel();
+	const model = await hasModel$1();
 	out(fresh ? `isorite guide: written to ${notes}; it is yours to change, and run again it opens as you left it` : `isorite guide: ${notes}, as you left it`);
 	out(model ? "  Iso: your provider's model" : "  Iso: the guide's finder, which answers with the notes that match (no model is set up)");
 	out(`  start at http://localhost:${port}/#/n/${START}`);
 	await serve$1(notes, {
 		port,
-		...model ? {} : { stand: finderHttp(16) }
+		stand: finderHttp(16)
 	});
 	if (process.env.ISORITE_NO_BROWSER !== "1") openBrowser(`http://localhost:${port}/#/n/${START}`);
 }
@@ -10126,7 +10488,6 @@ async function writeGeometry(folder, now = Date.now()) {
 //#region packages/server/src/main.ts
 init_src$1();
 init_model();
-const VERSION = "0.5.0";
 const USAGE = `isorite: an agentic harness for understanding
 
   isorite new <folder>                   start a knowledge base: the folder, empty, with isorite's .isorite/