thincoder 0.12.32 → 0.12.33

package/README.md

@@ -96,7 +96,7 @@ Running from source: replace `thincoder` above with `node bin/thincoder.mjs`.
 
 Slash commands in the TUI: `/help`, `/model` (two-level picker: first select provider, then model; `/model <provider>:<name>` switches directly), `/submodel` (subagent models per type — picker over global + explore/plan/coder/eng-coder slots, or `/submodel <type> <provider:model>` directly), `/shell` (platform-aware picker of available shells — e.g. `/shell` → pick Git Bash/pwsh, or `/shell "C:\Program Files\Git\bin\bash.exe"`, `/shell reset`; fixes win11 cmd encoding/command issues), `/provider` (add/remove providers, set keys, custom endpoints), `/think` (thinking mode toggle and reasoning effort), `/config` (view config, `/config embedkey` for the embedding key, `/config set` for parameters), `/session` (list/switch archived sessions), `/reindex` (rebuild the index), `/extract` (extract knowledge from the current session), `/restore` (restore checkpoint), `/clear`, `/exit`. High-frequency commands support abbreviations: `/h` `/x` `/m` `/p` `/t` `/c` `/n`. Typing `/` shows live matching hints in the status bar. Model picker supports search/filter — type to narrow down results.
 
-Environment variables: `THINCODER_API_KEY` (or `DEEPSEEK_API_KEY` / `OPENAI_API_KEY`), `THINCODER_BASE_URL`, `THINCODER_MODEL`, `SILICONFLOW_API_KEY`.
+Configuration comes exclusively from `~/.thincoder/config.json` — no environment-variable configuration is supported.
 
 > **Kimi note**: Kimi has **two separate platforms with non-interchangeable API keys** — Moonshot (`https://api.moonshot.cn/v1`, keys `sk-...`, platform.moonshot.cn) and **Kimi For Coding** (`https://api.kimi.com/coding/v1`, keys `sk-kimi-...`, platform.kimi.com, model ID `k3`). Use the `kimi` preset for Moonshot and `kimi-code` for Kimi For Coding — putting one platform's key on the other's endpoint fails with 401 (a hint is appended when the key/baseURL look mismatched).
 
@@ -125,7 +125,7 @@ Environment variables: `THINCODER_API_KEY` (or `DEEPSEEK_API_KEY` / `OPENAI_API_
   "embedding": {
     // optional: without it, retrieval is pure FTS
     "baseURL": "https://api.siliconflow.cn/v1",
-    "apiKey": "sk-...", // or SILICONFLOW_API_KEY
+    "apiKey": "sk-...",
     "model": "BAAI/bge-m3",
   },
   "agent": {

package/bin/thincoder.mjs

@@ -56,7 +56,6 @@ Usage:
   thincoder -v, --version   Print version
 
 Config: ~/.thincoder/config.json (providers[] + activeProvider; manage via /provider, /model in TUI)
-Env:    THINCODER_API_KEY, THINCODER_BASE_URL, THINCODER_MODEL, THINCODER_ACTIVE_PROVIDER
 `
 
 /** Unified message when no API key is configured */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "thincoder",
-  "version": "0.12.32",
+  "version": "0.12.33",
   "description": "Thin coding agent - zero dependencies, no build step, Node.js native. Sharp code, zero bloat.",
   "keywords": [
     "ai",

package/src/agent-tools/consult.mjs

@@ -11,8 +11,9 @@
  * CONSULT_BASE overlay }); activity streams to the parent TUI via the relay
  * prefix `consult#<id>/` (same channel subagent uses), not onSubagent/onToolPanel.
  */
-import { createAgent, runAgent, readonlyToolNames } from "../agent.mjs"
+import { createAgent, runAgent, readonlyToolNames, ContinueError } from "../agent.mjs"
 import { resolveChildProvider } from "./subagent.mjs"
+import { specForModel } from "../config.mjs"
 
 function consultLabel(m) {
   return `${m.provider}:${m.model}`
@@ -90,21 +91,38 @@ async function runConsultChild(ctx, session, id, m, problem, ctrl) {
   const agent = ctx.agent
   const timeoutMs = agent?.config?.agent?.consultTimeoutMs ?? 600_000
   let timedOut = false
-  const watchdog = setTimeout(() => {
-    timedOut = true
-    try { ctrl.abort() } catch { /* already settled */ }
-  }, timeoutMs)
+  const armWatchdog = () => {
+    const t = setTimeout(() => {
+      timedOut = true
+      try { ctrl.abort() } catch { /* already settled */ }
+    }, timeoutMs)
+    t.unref?.()
+    return t
+  }
+  let watchdog = armWatchdog()
   const label = consultLabel(m)
   try {
     // Provider resolution: consultModels entries are { provider, model, effort? } — resolve
     // via the subagent's provider resolver ("provider:model" handles cross-provider picks).
     const provider = resolveChildProvider(agent, `${m.provider}:${m.model}`)
-    if (!provider?.apiKey?.trim() && !process.env.THINCODER_API_KEY) {
+    if (!provider?.apiKey?.trim()) {
       // resolveChildProvider may still lack a key; fail loudly like the plugin precheck
       // (settleChild turns this message into a clear failed reply instead of a raw 401)
-      throw new Error(`consult model ${label} has no API key — check providers[${m.provider}].apiKey or THINCODER_API_KEY`)
+      throw new Error(`consult model ${label} has no API key — check providers[${m.provider}].apiKey in config.json`)
+    }
+    // Clamp the pool's effort to the model's reasoningEffortEnum — an out-of-enum
+    // value makes provider/core throw on EVERY chat call (candidate dies on takeoff).
+    // Symmetric with escalate.mjs; 2026-08-16 a real consult died on qwen3.8-max
+    // effort "high" (enum is xhigh/medium/low). Out-of-enum: DROP the effort entirely
+    // (the provider preset default may ALSO be out-of-enum for this override model).
+    if (m.effort) {
+      const enumList = specForModel(m.model).reasoningEffortEnum
+      if (enumList && !enumList.includes(m.effort)) {
+        delete provider.reasoningEffort
+      } else {
+        provider.reasoningEffort = m.effort
+      }
     }
-    if (m.effort) provider.reasoningEffort = m.effort
 
     // Read-only consultant: filter the parent tool set down to readonly tools + main_history.
     const allowed = readonlyToolNames(agent.tools ?? [])
@@ -135,16 +153,50 @@ async function runConsultChild(ctx, session, id, m, problem, ctrl) {
       onToolCall: ctx.callbacks?.onToolCall ? (name, args) => ctx.callbacks.onToolCall(`${relayPrefix}${name}`, args) : null,
     }
 
+    // Turn-cap continue loop (TURN-CAP-CONTINUE.md): hitting the cap asks the user via
+    // the SAME y/n panel the main agent uses (ctx.onPermissionRequest "continue") —
+    // unlimited continues, each with a fresh turn budget AND a re-armed wall-clock
+    // watchdog (a continue is a fresh budget, the clock restarts too). Parallel
+    // consultants serialize their prompts through a session-level queue. Declined /
+    // headless → failed reply (partial diagnosis).
     const runner = ctx.runAgent ?? runAgent
-    const result = await runner(child, "# Problem\n" + problem, childCallbacks, {
-      depth: 1,
-      maxTurns: agent?.config?.agent?.consultTurns ?? 40,
-      signal: ctrl.signal,
-    })
-    settleChild(session, id, label, true, String(result ?? ""))
+    for (let resume = false; ; resume = true) {
+      try {
+        const result = await runner(child, "# Problem\n" + problem, childCallbacks, {
+          depth: 1,
+          maxTurns: agent?.config?.agent?.consultTurns ?? 40,
+          signal: ctrl.signal,
+          resume,
+        })
+        settleChild(session, id, label, true, String(result ?? ""))
+        return
+      } catch (e) {
+        if (e instanceof ContinueError) {
+          let go = false
+          if (ctx.onPermissionRequest) {
+            const ask = () => ctx.onPermissionRequest("continue", { turns: e.turn, agent: label })
+            session.continueQueue = (session.continueQueue ?? Promise.resolve()).then(ask, ask)
+            go = await session.continueQueue
+          }
+          if (go) {
+            clearTimeout(watchdog)
+            timedOut = false // fresh budget → fresh clock
+            watchdog = armWatchdog()
+            continue
+          }
+          settleChild(session, id, label, false, `turn cap reached (${e.turn} turns) — stopped, diagnosis may be partial`)
+          return
+        }
+        const note = timedOut ? `consultation timed out after ${Math.round(timeoutMs / 60000)}min (agent.consultTimeoutMs)` : e?.message ?? String(e)
+        settleChild(session, id, label, false, note)
+        return
+      }
+    }
   } catch (e) {
-    const note = timedOut ? `consultation timed out after ${Math.round(timeoutMs / 60000)}min (agent.consultTimeoutMs)` : e?.message ?? String(e)
-    settleChild(session, id, label, false, note)
+    // Errors BEFORE the runner (provider resolution, createAgent) or a throwing
+    // continue-prompt settle as failed replies — the runner's own errors are already
+    // handled inside the loop above.
+    settleChild(session, id, label, false, e?.message ?? String(e))
   } finally {
     clearTimeout(watchdog)
   }

package/src/agent-tools/escalate.mjs

@@ -70,16 +70,20 @@ export const escalateTool = {
     } catch (e) {
       return `Error: ${e.message}`
     }
-    if (!provider?.apiKey?.trim() && !process.env.THINCODER_API_KEY) {
-      return `Error: provider "${pick.provider}" has no API key — set it in config.json (or THINCODER_API_KEY) before flying it in`
+    if (!provider?.apiKey?.trim()) {
+      return `Error: provider "${pick.provider}" has no API key — set it in config.json before flying it in`
     }
     let effortNote = ""
     if (pick.effort) {
       // Clamp the pool's effort to the model's reasoningEffortEnum — an out-of-enum
       // value makes provider/core.mjs throw on EVERY chat call (candidate dies on takeoff).
+      // Out-of-enum: DROP the effort entirely (the provider preset default may ALSO be
+      // out-of-enum for this override model — e.g. qwenplan preset default "high" is
+      // invalid for qwen3.8-max, enum xhigh/medium/low).
       const enumList = specForModel(pick.model).reasoningEffortEnum
       if (enumList && !enumList.includes(pick.effort)) {
-        effortNote = ` (effort "${pick.effort}" unsupported by ${pick.model}, using preset default)`
+        effortNote = ` (effort "${pick.effort}" unsupported by ${pick.model}, dropped)`
+        delete provider.reasoningEffort
       } else {
         provider.reasoningEffort = pick.effort
       }
@@ -131,9 +135,8 @@ export const escalateTool = {
       // resumed run passes resume:true, so runAgent does NOT re-inject the task text
       // (setup.mjs skips input on resume) and keeps the child's history + mutation
       // bookkeeping, with a fresh maxTurns budget per run. No permission handler
-      // (headless) or a declined prompt falls through to the partial-work return;
-      // MAX_RESUMES caps continues so a stuck child cannot loop forever.
-      const MAX_RESUMES = 2
+      // (headless) or a declined prompt falls through to the partial-work return.
+      // Continues are UNLIMITED — the user can decline at any prompt.
       for (let resumes = 0; ; resumes++) {
         try {
           const report = await runner(child, task, {
@@ -152,7 +155,7 @@ export const escalateTool = {
           const msg = e?.message ?? String(e)
           if (ctx.signal?.aborted || e?.name === "AbortError") throw e
           if (e instanceof ContinueError) {
-            if (resumes < MAX_RESUMES && ctx.onPermissionRequest) {
+            if (ctx.onPermissionRequest) {
               const go = await ctx.onPermissionRequest("continue", { turns: e.turn, agent: tag })
               if (go) continue // fresh maxTurns budget; task NOT re-injected (resume:true)
             }

package/src/agent-tools/subagent.mjs

@@ -32,19 +32,12 @@ export function effectiveSubagentModel(parent, role, modelArg) {
  *   "provider"        → the named provider's configured model
  *   "model"           → same provider as the parent, different model
  * null → parent's provider unchanged.
- * API keys follow the config fallback order (provider.apiKey → THINCODER_API_KEY → provider-specific env).
+ * API keys come from config.json only (env vars are not a key source).
  */
 export function resolveChildProvider(parent, modelArg) {
   if (!modelArg) return { ...parent.provider }
   const providers = parent.config?.providersList ?? []
-  const withKey = (p) => {
-    if (p.apiKey?.trim()) return { ...p, apiKey: p.apiKey.trim() }
-    if (process.env.THINCODER_API_KEY) return { ...p, apiKey: process.env.THINCODER_API_KEY }
-    const envMap = { deepseek: "DEEPSEEK_API_KEY", openai: "OPENAI_API_KEY" }
-    const keyVar = envMap[p.name]
-    if (keyVar && process.env[keyVar]) return { ...p, apiKey: process.env[keyVar] }
-    return { ...p }
-  }
+  const withKey = (p) => (p.apiKey?.trim() ? { ...p, apiKey: p.apiKey.trim() } : { ...p })
   if (modelArg.includes(":")) {
     const [pname, mname] = modelArg.split(":")
     const p = providers.find((x) => x.name === pname)
@@ -181,7 +174,31 @@ export const subagentTool = {
         : null,
     }
     const childRunOpts = buildChildRunOpts(ctx)
-    let report = await runAgent(child, input, childOpts, childRunOpts)
+    let report = ""
+    // Turn-cap continue loop (TURN-CAP-CONTINUE.md): hitting the cap asks the user via
+    // the SAME y/n panel the main agent uses (ctx.onPermissionRequest "continue") —
+    // unlimited continues, resume:true keeps the child's history + mutation bookkeeping,
+    // fresh budget each run. Prompts queue through parent._permQueue (same as write
+    // approval) so parallel children never pop two panels at once. Declined / headless
+    // → partial-work return. Non-ContinueError errors still propagate (dispatch.mjs
+    // turns them into Error tool results — unchanged behavior).
+    for (let resume = false; ; resume = true) {
+      try {
+        report = await runAgent(child, input, childOpts, { ...childRunOpts, resume })
+        break
+      } catch (e) {
+        if (!(e instanceof ContinueError)) throw e
+        let go = false
+        if (ctx.onPermissionRequest) {
+          const ask = () => ctx.onPermissionRequest("continue", { turns: e.turn, agent: `${role ?? "sub"}#${subId}` })
+          parent._permQueue = (parent._permQueue ?? Promise.resolve()).then(ask, ask)
+          go = await parent._permQueue
+        }
+        if (go) continue
+        if (role === "eng-coder" && child._mutatedThisRun) mergeChildMutations(parent, child)
+        return `Subagent (${role}) stopped: turn cap reached (${e.turn} turns) — work may be partial; review recent_changes before deciding next steps.\nPartial output: ${report || ""}`
+      }
+    }
 
     // Report too short = incomplete handoff: send back for expansion once (inspired by kimi-code's summaryPolicy: min 200 chars, retry 1 time).
     // The child agent's history is still intact; the continuation instruction is appended as new input so it can see its own earlier work.

package/src/config.mjs

@@ -21,6 +21,8 @@ export const PROVIDER_PRESETS = {
   "glm-code": { baseURL: "https://open.bigmodel.cn/api/coding/paas/v4", model: "glm-5.2", thinking: { type: "enabled" }, reasoningEffort: "max", maxTokens: 128000, desc: "Zhipu GLM Coding Plan (coding endpoint — same key as GLM; server-forced thinking)" },
   qwen:     { baseURL: "https://dashscope.aliyuncs.com/compatible-mode/v1", model: "qwen3.7-max", reasoningEffort: "high", maxTokens: 131072, desc: "Qwen / Alibaba" },
   qwenplan: { baseURL: "https://token-plan.cn-beijing.maas.aliyuncs.com/compatible-mode/v1", model: "qwen3.7-max", reasoningEffort: "high", maxTokens: 131072, desc: "Qwen Token Plan (百炼套餐)" },
+  mimo:     { baseURL: "https://api.xiaomimimo.com/v1", model: "mimo-v2.5-pro", thinking: { type: "enabled" }, maxTokens: 131072, desc: "MiMo (Xiaomi)" },
+  mimoplan: { baseURL: "https://token-plan-cn.xiaomimimo.com/v1", model: "mimo-v2.5-pro", thinking: { type: "enabled" }, maxTokens: 131072, desc: "MiMo Token Plan (小米套餐 — tp- keys; 与按量付费 sk- 密钥不通用)" },
   minimax:  { baseURL: "https://api.minimaxi.com/v1", model: "MiniMax-M3", thinking: { type: "adaptive" }, maxTokens: 128000, chatPath: "/text/chatcompletion_v2", desc: "MiniMax" },
   openai:   { baseURL: "https://api.openai.com/v1", model: "gpt-4o", desc: "OpenAI" },
   claude:   { baseURL: "https://api.anthropic.com/v1", model: "claude-sonnet-4", format: "anthropic", maxTokens: 8192, desc: "Claude (Anthropic)" },
@@ -34,12 +36,7 @@ export const PROVIDER_PRESETS = {
   groq:     { baseURL: "https://api.groq.com/openai/v1", model: "llama-3.3-70b-versatile", maxTokens: 32768, desc: "Groq" },
 }
 
-// Default provider matches deepseek preset (strip the desc display field)
-const { desc: _, ...deepseekPreset } = PROVIDER_PRESETS.deepseek
-
 const DEFAULTS = {
-  providers: [{ name: "deepseek", ...deepseekPreset }],
-  activeProvider: "deepseek",
   activeModel: null,  // optional: override provider.model (set via /model picker or /model provider:model)
   agent: {
     maxTurns: 100,
@@ -116,12 +113,17 @@ const MODEL_SPECS = [
   ["qwen3.8-max-preview", { context: 1_000_000, maxOutput: 128_000, thinking: true, partialMode: true, multimodal: true, cacheMode: "none", thinkApi: "effort", reasoningEffortEnum: ["xhigh", "high"], tempRange: [0, 2] }],
   // qwen3.7-max rejects image parts outright (DashScope 400 "Unexpected item type in content") — text-only
   ["qwen3.7-max",       { context: 1_000_000, maxOutput: 128_000, thinking: true, partialMode: true, cacheMode: "none", thinkApi: "effort", reasoningEffortEnum: ["xhigh", "high"], tempRange: [0, 2] }],
-  ["qwen3.8-max",       { context: 1_000_000, maxOutput: 128_000, thinking: true, partialMode: true, multimodal: true, cacheMode: "none", thinkApi: "effort", reasoningEffortEnum: ["xhigh", "high"], tempRange: [0, 2] }],
+  ["qwen3.8-max",       { context: 1_000_000, maxOutput: 128_000, thinking: true, partialMode: true, multimodal: true, cacheMode: "none", thinkApi: "effort", reasoningEffortEnum: ["xhigh", "medium", "low"], tempRange: [0, 2] }],
   ["qwen-max",          { context: 1_000_000, maxOutput: 131_072, thinking: false, partialMode: true, multimodal: true, cacheMode: "none", thinkApi: "effort", tempRange: [0, 2] }],
   ["qwen-plus",         { context: 1_000_000, maxOutput: 131_072,  thinking: false, partialMode: true, multimodal: true, cacheMode: "none", thinkApi: "effort", tempRange: [0, 2] }],
   ["qwen",              { context: 1_000_000, maxOutput: 131_072, thinking: false, partialMode: true, multimodal: true, cacheMode: "none", thinkApi: "effort", tempRange: [0, 2] }],
   // MiniMax series
   ["MiniMax-M3",        { context: 1_000_000, maxOutput: 128_000, thinking: true,  multimodal: true, cacheMode: "auto", thinkApi: "type", thinkEnabledValue: "adaptive", tempRange: [0, 2], noUsageStream: true }],
+  // MiMo series (Xiaomi — OpenAI-compatible https://api.xiaomimimo.com/v1;
+  // deep thinking via thinking.type, default ON; multi-turn tool calls MUST echo
+  // reasoning_content back exactly like DeepSeek V4, else 400 on follow-ups)
+  ["mimo-v2.5-pro",     { context: 1_000_000, maxOutput: 128_000, thinking: true,  thinkApi: "type", reasoningEcho: "required", tempRange: [0, 1.5] }],
+  ["mimo-v2.5",         { context: 1_000_000, maxOutput: 128_000, thinking: true,  multimodal: true, thinkApi: "type", reasoningEcho: "required", tempRange: [0, 1.5] }],
   ["minimax-m3",        { context: 1_000_000, maxOutput: 128_000, thinking: true,  multimodal: true, cacheMode: "auto", thinkApi: "type", thinkEnabledValue: "adaptive", tempRange: [0, 2], noUsageStream: true }],
   ["minimax-m1",        { context: 256_000,   maxOutput: 128_000, thinking: false, cacheMode: "auto", noUsageStream: true }],
   // Grok series (xAI — OpenAI-compatible)
@@ -198,10 +200,8 @@ export function normalizeProxy(proxy) {
 
 /**
  * Load configuration.
- * Env var priority: THINCODER_ACTIVE_PROVIDER > config file activeProvider
- * THINCODER_API_KEY / THINCODER_BASE_URL / THINCODER_MODEL override the current active provider's corresponding fields
- * THINCODER_ACTIVE_MODEL overrides the active model (wins over THINCODER_MODEL — see loadConfig)
- * Provider-specific key fallbacks (when providers[] lacks a key): DEEPSEEK_API_KEY / OPENAI_API_KEY
+ * No env-var overrides — config.json is the single source of truth
+ * (API keys, baseURL, model, activeProvider all come from the file).
  */
 /** Keep only { header: "string value" } pairs from a provider's headers field — anything
  *  else (null, arrays, nested objects) is dropped so it can never reach a fetch call.
@@ -230,10 +230,10 @@ export function loadConfig() {
   const merged = {
     ...DEFAULTS,
     ...config,
-    providers: Array.isArray(config.providers) && config.providers.length
+    providers: Array.isArray(config.providers)
       ? config.providers.map((p) => sanitizeProviderHeaders({ ...p }))
-      : DEFAULTS.providers.map((p) => ({ ...p })),
-    activeProvider: config.activeProvider ?? DEFAULTS.activeProvider,
+      : [],
+    activeProvider: config.activeProvider ?? "",
     agent: { ...DEFAULTS.agent, ...config.agent },
     memory: { ...DEFAULTS.memory, ...config.memory },
     embedding: { ...DEFAULTS.embedding, ...config.embedding },
@@ -275,41 +275,15 @@ export function loadConfig() {
   // 保证 agent.config.proxy 永远是规范形态或 undefined
   merged.proxy = normalizeProxy(merged.proxy)
 
-  // Env var overrides activeProvider
-  if (process.env.THINCODER_ACTIVE_PROVIDER) {
-    merged.activeProvider = process.env.THINCODER_ACTIVE_PROVIDER
-  }
-
   // Get the currently active provider
   const active = findProvider(merged.providers, merged.activeProvider)
 
   // Build runtime provider object (for agent.provider usage)
   const runtimeProvider = { ...active }
 
-  // Env vars override current active provider's fields
-  if (process.env.THINCODER_API_KEY) runtimeProvider.apiKey = process.env.THINCODER_API_KEY
-  if (process.env.THINCODER_BASE_URL) runtimeProvider.baseURL = process.env.THINCODER_BASE_URL
-  if (process.env.THINCODER_MODEL) runtimeProvider.model = process.env.THINCODER_MODEL
-
-  // activeModel overrides provider's default model (env > config)
-  const activeModel = process.env.THINCODER_ACTIVE_MODEL || merged.activeModel
-  if (activeModel) runtimeProvider.model = activeModel
-  merged.activeModel = activeModel || null  // normalize for agent.activeModel
-
-  // apiKey also falls back to env vars (when providers doesn't include a key)
-  // Provider-specific env vars only apply to the matching provider name, preventing keys from leaking to wrong endpoints
-  // NOTE: only deepseek/openai have provider-specific fallbacks by design — the other presets
-  // intentionally rely on THINCODER_API_KEY or keys stored in config.json (no silent env pickup).
-  if (!runtimeProvider.apiKey?.trim()) {
-    const envMap = { deepseek: "DEEPSEEK_API_KEY", openai: "OPENAI_API_KEY" }
-    const keyVar = envMap[merged.activeProvider]
-    if (keyVar && process.env[keyVar]) runtimeProvider.apiKey = process.env[keyVar]
-  }
-
-  // embedding apiKey
-  if (!merged.embedding.apiKey) {
-    merged.embedding.apiKey = process.env.SILICONFLOW_API_KEY || process.env.THINCODER_EMBEDDING_API_KEY
-  }
+  // activeModel overrides provider's default model (config only)
+  if (merged.activeModel) runtimeProvider.model = merged.activeModel
+  merged.activeModel = merged.activeModel || null  // normalize for agent.activeModel
 
   // Compaction threshold follows the model
   const explicitThreshold = config.agent?.compactThreshold

package/src/embedding.mjs

@@ -12,7 +12,7 @@ const BATCH_SIZE = 32 // max texts per request (within SiliconFlow limits)
 /** Create an embedder. config: { baseURL, apiKey, model } */
 export function createEmbedder(config) {
   if (!config?.baseURL) throw new Error("embedding config: baseURL is required — configure embedding.baseURL in ~/.thincoder/config.json")
-  if (!config?.apiKey) throw new Error("embedding config: apiKey is required — set SILICONFLOW_API_KEY env or configure embedding.apiKey in ~/.thincoder/config.json")
+  if (!config?.apiKey) throw new Error("embedding config: apiKey is required — configure embedding.apiKey in ~/.thincoder/config.json")
   if (!config?.model) throw new Error("embedding config: model is required — configure embedding.model in ~/.thincoder/config.json")
   return {
     baseURL: config.baseURL.replace(/\/+$/, ""),

package/src/provider/core.mjs

@@ -19,7 +19,7 @@ const FETCH_TIMEOUT_MS = 600_000
 /** Create a validated provider config object from raw config */
 export function createProvider(config) {
   if (!config?.baseURL) throw new Error("provider config: baseURL is required — configure providers in ~/.thincoder/config.json")
-  if (!config?.apiKey) throw new Error("provider config: apiKey is required — set THINCODER_API_KEY env or configure in ~/.thincoder/config.json")
+  if (!config?.apiKey) throw new Error("provider config: apiKey is required — configure it in ~/.thincoder/config.json")
   if (!config?.model) throw new Error("provider config: model is required — configure in ~/.thincoder/config.json")
   return {
     baseURL: config.baseURL.replace(/\/+$/, ""),

package/src/tui/cmd-advisor.mjs

@@ -174,11 +174,7 @@ async function fetchAdvisorModels(agent) {
   const result = new Map()
   await Promise.all((agent.providers || []).map(async (p) => {
     try {
-      const envKey = { deepseek: "DEEPSEEK_API_KEY", openai: "OPENAI_API_KEY" }[p.name]
-      let apiKey = p.apiKey
-      if (!apiKey && envKey && process.env[envKey]) apiKey = process.env[envKey]
-      if (!apiKey) apiKey = process.env.THINCODER_API_KEY
-      const models = await listModels({ baseURL: p.baseURL, apiKey: apiKey ?? "" }, { signal: AbortSignal.timeout(10000) })
+      const models = await listModels({ baseURL: p.baseURL, apiKey: p.apiKey ?? "" }, { signal: AbortSignal.timeout(10000) })
       result.set(p.name, { models, error: null })
     } catch (err) {
       result.set(p.name, { models: [], error: err.message.slice(0, 40) })
@@ -193,10 +189,7 @@ function buildModelEntries(agent, cfg, cache) {
 
   for (const p of agent.providers || []) {
     const cached = cache.get(p.name)
-    const hasKey = !!(p.apiKey
-      || (p.name === "deepseek" && process.env.DEEPSEEK_API_KEY)
-      || (p.name === "openai" && process.env.OPENAI_API_KEY)
-      || process.env.THINCODER_API_KEY)
+    const hasKey = !!p.apiKey
     const noteParts = [p.baseURL]
     if (!hasKey) noteParts.push("(no key)")
     if (agent.activeProvider === p.name) noteParts.push("← active")

package/src/tui/pickers.mjs

@@ -121,13 +121,9 @@ export function createPickers(ctx) {
     return e.action === "switch" ? `switch:${e.provider}:${e.model}` : `action:${e.action}`
   }
 
-  /** Get API key for a provider (from config or env vars) */
+  /** Get API key for a provider (config.json only — env vars are not a key source) */
   function getApiKey(providerName, providerConfig) {
-    const envKey = { deepseek: "DEEPSEEK_API_KEY", openai: "OPENAI_API_KEY" }[providerName]
-    let apiKey = providerConfig.apiKey
-    if (!apiKey && envKey && process.env[envKey]) apiKey = process.env[envKey]
-    if (!apiKey) apiKey = process.env.THINCODER_API_KEY
-    return apiKey
+    return providerConfig.apiKey
   }
 
   /** Level 1: Show provider list. Selecting a provider opens Level 2 (model list). */
@@ -296,11 +292,6 @@ export function createPickers(ctx) {
     // If selecting the provider's default model, clear activeModel; otherwise set it
     agent.activeModel = item.model !== providerDefault ? item.model : null
     agent.provider = { ...target }
-    if (!agent.provider.apiKey) {
-      const envKey = { deepseek: "DEEPSEEK_API_KEY", openai: "OPENAI_API_KEY" }[item.provider]
-      if (envKey && process.env[envKey]) agent.provider.apiKey = process.env[envKey]
-    }
-    if (!agent.provider.apiKey) agent.provider.apiKey = process.env.THINCODER_API_KEY
     if (agent.config?.agent?.compactThresholdAuto) {
       const { resolveCompactThreshold } = await import("../config.mjs")
       agent.config.agent.compactThreshold = resolveCompactThreshold(null, item.model).value