tinybeeai 0.0.0-stage → 0.16.1

package/dist/connect/github-app.js

@@ -0,0 +1,129 @@
+// GitHub App manifest flow (KAT-66). The browser posts a manifest to github.com, the person names the
+// App and confirms, GitHub redirects back with a one-time code, and the server trades it for the App id,
+// private key, and webhook secret (POST /app-manifests/{code}/conversions). Permissions and events
+// follow docs/GITHUB.md.
+import { randomBytes } from 'node:crypto';
+import { existsSync, readFileSync } from 'node:fs';
+import { config, liveEnv } from '../config.js';
+import { fetchT } from './deps.js';
+export const apiBase = () => (liveEnv.GITHUB_API_URL ?? 'https://api.github.com').replace(/\/$/, '');
+export const serverBase = () => (liveEnv.GITHUB_SERVER_URL ?? 'https://github.com').replace(/\/$/, '');
+export function ghHeaders(token) {
+    return {
+        Authorization: `Bearer ${token}`,
+        Accept: 'application/vnd.github+json',
+        'X-GitHub-Api-Version': '2022-11-28',
+        'User-Agent': 'localdost',
+    };
+}
+/**
+ * Permissions from docs/GITHUB.md. Deployments read backs the deployment_status event. `members` is an organization
+ * permission: the PR scope team rule reads GET /orgs/{org}/teams/{slug}/members with it (KAT-354). Without it that read
+ * fails and a team scope lets every PR in.
+ */
+export const APP_PERMISSIONS = {
+    metadata: 'read',
+    contents: 'read',
+    pull_requests: 'write',
+    checks: 'write',
+    statuses: 'write',
+    actions: 'read',
+    deployments: 'read',
+    issues: 'write',
+    members: 'read',
+};
+/** Webhook events from docs/GITHUB.md "Webhook events". */
+export const APP_EVENTS = ['pull_request', 'push', 'workflow_run', 'deployment_status', 'issue_comment', 'issues'];
+const STATE_TTL_MS = 15 * 60_000;
+const states = new Map();
+function sweep() {
+    const now = Date.now();
+    for (const [k, v] of states)
+        if (now - v.at > STATE_TTL_MS)
+            states.delete(k);
+}
+/** Origin of a URL, or undefined when it is not http or https. */
+export function httpOrigin(raw) {
+    if (!raw)
+        return undefined;
+    try {
+        const u = new URL(raw);
+        return u.protocol === 'http:' || u.protocol === 'https:' ? u.origin : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * Builds the manifest. `origin` is where the browser reaches this server; GitHub sends the browser back
+ * there, so a laptop on localhost works. The webhook URL needs the public HTTPS URL.
+ */
+export function buildManifest(origin, opts = {}) {
+    sweep();
+    const state = randomBytes(24).toString('base64url');
+    states.set(state, { at: Date.now(), origin, actor: opts.actor });
+    const pub = httpOrigin(config.publicUrl);
+    const webhook = !!pub && pub.startsWith('https://');
+    const name = (opts.name?.trim() || `localdost ${randomBytes(2).toString('hex')}`).slice(0, 34);
+    const manifest = {
+        name,
+        url: pub ?? origin,
+        redirect_url: `${origin}/connect/github/callback`,
+        public: false,
+        default_permissions: APP_PERMISSIONS,
+    };
+    if (webhook) {
+        manifest.hook_attributes = { url: `${pub}/hooks/github`, active: true };
+        manifest.default_events = APP_EVENTS;
+    }
+    const org = opts.org?.trim();
+    if (org && !/^[A-Za-z0-9-]{1,39}$/.test(org))
+        throw new Error('Organization names use letters, digits, and dashes.');
+    const path = org ? `/organizations/${org}/settings/apps/new` : '/settings/apps/new';
+    return { action: `${serverBase()}${path}?state=${encodeURIComponent(state)}`, manifest, state, webhook };
+}
+/** Consumes a state. One use only, 15 minutes. */
+export function takeState(state) {
+    sweep();
+    if (!state)
+        return undefined;
+    const s = states.get(state);
+    states.delete(state);
+    return s;
+}
+/** Trades the one-time code for the App credentials. */
+export async function convertManifestCode(code) {
+    if (!/^[A-Za-z0-9_-]{1,100}$/.test(code))
+        throw new Error('GitHub sent an unexpected code.');
+    const res = await fetchT(`${apiBase()}/app-manifests/${encodeURIComponent(code)}/conversions`, {
+        method: 'POST',
+        headers: { Accept: 'application/vnd.github+json', 'X-GitHub-Api-Version': '2022-11-28', 'User-Agent': 'localdost' },
+    });
+    if (!res.ok)
+        throw new Error(`GitHub did not create the App (HTTP ${res.status}). Start again from Setup.`);
+    const body = (await res.json());
+    if (!body.id || !body.pem || !body.slug)
+        throw new Error('GitHub answered without the App id or key.');
+    const out = { id: body.id, slug: body.slug, pem: body.pem };
+    if (body.name)
+        out.name = body.name;
+    if (body.webhook_secret)
+        out.webhookSecret = body.webhook_secret;
+    if (body.html_url)
+        out.htmlUrl = body.html_url;
+    return out;
+}
+export function installUrl(slug) {
+    return `${serverBase()}/apps/${encodeURIComponent(slug)}/installations/new`;
+}
+/** PEM text with \n escapes, or a path to a .pem file, as GITHUB_PRIVATE_KEY allows. */
+function pem(raw) {
+    if (!raw.includes('-----BEGIN') && existsSync(raw))
+        return readFileSync(raw, 'utf8');
+    return raw.replace(/\\n/g, '\n');
+}
+export async function appAuth(appId, privateKey) {
+    const { createAppAuth } = await import('@octokit/auth-app');
+    return createAppAuth({ appId, privateKey: pem(privateKey) });
+}
+//# sourceMappingURL=github-app.js.map

package/dist/connect/github-app.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-app.js","sourceRoot":"","sources":["../../src/connect/github-app.ts"],"names":[],"mappings":"AAAA,sGAAsG;AACtG,yGAAyG;AACzG,mGAAmG;AACnG,yBAAyB;AACzB,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAEnC,MAAM,CAAC,MAAM,OAAO,GAAG,GAAW,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,IAAI,wBAAwB,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAC7G,MAAM,CAAC,MAAM,UAAU,GAAG,GAAW,EAAE,CAAC,CAAC,OAAO,CAAC,iBAAiB,IAAI,oBAAoB,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAE/G,MAAM,UAAU,SAAS,CAAC,KAAa;IACrC,OAAO;QACL,aAAa,EAAE,UAAU,KAAK,EAAE;QAChC,MAAM,EAAE,6BAA6B;QACrC,sBAAsB,EAAE,YAAY;QACpC,YAAY,EAAE,WAAW;KAC1B,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,eAAe,GAAqC;IAC/D,QAAQ,EAAE,MAAM;IAChB,QAAQ,EAAE,MAAM;IAChB,aAAa,EAAE,OAAO;IACtB,MAAM,EAAE,OAAO;IACf,QAAQ,EAAE,OAAO;IACjB,OAAO,EAAE,MAAM;IACf,WAAW,EAAE,MAAM;IACnB,MAAM,EAAE,OAAO;IACf,OAAO,EAAE,MAAM;CAChB,CAAC;AAEF,2DAA2D;AAC3D,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,cAAc,EAAE,MAAM,EAAE,cAAc,EAAE,mBAAmB,EAAE,eAAe,EAAE,QAAQ,CAAC,CAAC;AAEnH,MAAM,YAAY,GAAG,EAAE,GAAG,MAAM,CAAC;AACjC,MAAM,MAAM,GAAG,IAAI,GAAG,EAA0D,CAAC;AAEjF,SAAS,KAAK;IACZ,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM;QAAE,IAAI,GAAG,GAAG,CAAC,CAAC,EAAE,GAAG,YAAY;YAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,UAAU,CAAC,GAAuB;IAChD,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACvB,OAAO,CAAC,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAClF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAUD;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,MAAc,EAAE,OAAwD,EAAE;IACtG,KAAK,EAAE,CAAC;IACR,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACpD,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IACjE,MAAM,GAAG,GAAG,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,aAAa,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC/F,MAAM,QAAQ,GAA4B;QACxC,IAAI;QACJ,GAAG,EAAE,GAAG,IAAI,MAAM;QAClB,YAAY,EAAE,GAAG,MAAM,0BAA0B;QACjD,MAAM,EAAE,KAAK;QACb,mBAAmB,EAAE,eAAe;KACrC,CAAC;IACF,IAAI,OAAO,EAAE,CAAC;QACZ,QAAQ,CAAC,eAAe,GAAG,EAAE,GAAG,EAAE,GAAG,GAAG,eAAe,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QACxE,QAAQ,CAAC,cAAc,GAAG,UAAU,CAAC;IACvC,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;IAC7B,IAAI,GAAG,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACrH,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,kBAAkB,GAAG,oBAAoB,CAAC,CAAC,CAAC,oBAAoB,CAAC;IACpF,OAAO,EAAE,MAAM,EAAE,GAAG,UAAU,EAAE,GAAG,IAAI,UAAU,kBAAkB,CAAC,KAAK,CAAC,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AAC3G,CAAC;AAED,kDAAkD;AAClD,MAAM,UAAU,SAAS,CAAC,KAAyB;IACjD,KAAK,EAAE,CAAC;IACR,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC5B,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACrB,OAAO,CAAC,CAAC;AACX,CAAC;AAWD,wDAAwD;AACxD,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAAY;IACpD,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAC7F,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,GAAG,OAAO,EAAE,kBAAkB,kBAAkB,CAAC,IAAI,CAAC,cAAc,EAAE;QAC7F,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,MAAM,EAAE,6BAA6B,EAAE,sBAAsB,EAAE,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE;KACpH,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,GAAG,CAAC,MAAM,4BAA4B,CAAC,CAAC;IAC5G,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAmH,CAAC;IAClJ,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IACvG,MAAM,GAAG,GAAmB,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;IAC5E,IAAI,IAAI,CAAC,IAAI;QAAE,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IACpC,IAAI,IAAI,CAAC,cAAc;QAAE,GAAG,CAAC,aAAa,GAAG,IAAI,CAAC,cAAc,CAAC;IACjE,IAAI,IAAI,CAAC,QAAQ;QAAE,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC;IAC/C,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,OAAO,GAAG,UAAU,EAAE,SAAS,kBAAkB,CAAC,IAAI,CAAC,oBAAoB,CAAC;AAC9E,CAAC;AAID,wFAAwF;AACxF,SAAS,GAAG,CAAC,GAAW;IACtB,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACrF,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,KAAa,EAAE,UAAkB;IAC7D,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;IAC5D,OAAO,aAAa,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,EAAE,CAAuB,CAAC;AACrF,CAAC"}

package/dist/connect/index.js

@@ -0,0 +1,9 @@
+// Native connections (KAT-66): encrypted settings store, provider registry, GitHub App manifest flow,
+// and the quick tunnel. Routes live in src/routes/connect.ts.
+export { auditLog, getMeta, initConnectStore, reloadConnectStore, saveValues, storedValue } from './store.js';
+export { allViews, connectProvider, detect, disconnectProvider, providerOptions, providerView, saveSettings, startConnect, testProvider, } from './registry.js';
+export { PROVIDERS, providerFor, slackCreateUrl, slackManifest } from './providers.js';
+export { startTunnel, stopTunnel, tunnelState, setTunnelSpawner } from './tunnel.js';
+export { setConnectDeps } from './deps.js';
+export { ConnectError } from './types.js';
+//# sourceMappingURL=index.js.map

package/dist/connect/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/connect/index.ts"],"names":[],"mappings":"AAAA,sGAAsG;AACtG,8DAA8D;AAC9D,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,UAAU,EAAE,WAAW,EAAiB,MAAM,YAAY,CAAC;AAC7H,OAAO,EACL,QAAQ,EACR,eAAe,EACf,MAAM,EACN,kBAAkB,EAClB,eAAe,EACf,YAAY,EACZ,YAAY,EACZ,YAAY,EACZ,YAAY,GAGb,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AACvF,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACrF,OAAO,EAAE,cAAc,EAAoB,MAAM,WAAW,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAwE,MAAM,YAAY,CAAC"}

package/dist/connect/model-choices.js

@@ -0,0 +1,201 @@
+// Model choices (KAT-83): every way this server can reach a model, which one is active, a switch
+// that tests before it saves, and the first-run pick of a signed-in subscription.
+import { config, log, onSettingsChange, setting, settingSource } from '../config.js';
+import { deps } from './deps.js';
+import { FAMILY_OF_METHOD, PAID_FALLBACK_KEY, getUnavailability, paidFallbackAllowed, unavailableDetail, viewOf, } from '../agent/model-availability.js';
+import { connectProvider, detect, detectModelClis } from './registry.js';
+import { getMeta, saveValues, setMeta, storedValue } from './store.js';
+import { ConnectError } from './types.js';
+function activeMethod() {
+    const pick = (setting('LOCALDOST_LLM') ?? '').trim().toLowerCase();
+    if (pick === 'claude-cli')
+        return setting('CLAUDE_CODE_OAUTH_TOKEN') ? 'claude-token' : 'claude-cli';
+    if (pick === 'codex-cli')
+        return 'codex-cli';
+    if (pick === 'mock')
+        return undefined;
+    return pick === 'anthropic' || setting('ANTHROPIC_API_KEY') ? 'anthropic' : undefined;
+}
+function ending(key) {
+    const last4 = storedValue(key)?.last4;
+    return last4 ? ` ending in ${last4}` : '';
+}
+export async function modelChoices() {
+    return buildChoices(await detect());
+}
+function buildChoices(d, opts = { showUnavailable: true }) {
+    const active = activeMethod();
+    const tokenSaved = !!setting('CLAUDE_CODE_OAUTH_TOKEN');
+    const keySaved = !!setting('ANTHROPIC_API_KEY');
+    const claude = d.claudeCli;
+    const codex = d.codexCli;
+    // A token set in the environment stays when the CLI is picked, so the CLI would sign in with it.
+    const envToken = settingSource('CLAUDE_CODE_OAUTH_TOKEN') === 'env';
+    const choices = [
+        {
+            method: 'claude-cli',
+            label: 'Claude subscription',
+            brand: 'claude',
+            available: claude.found && claude.signedIn && !envToken,
+            active: active === 'claude-cli',
+            detail: envToken
+                ? 'CLAUDE_CODE_OAUTH_TOKEN is set by the environment, so the Claude CLI signs in with that token. Unset it to use the CLI login.'
+                : claude.signedIn
+                    ? `Claude CLI signed in${claude.account ? ` as ${claude.account}` : ''}`
+                    : claude.found
+                        ? 'Claude CLI found, not signed in. Run claude auth login on this machine.'
+                        : 'No Claude CLI on this machine.',
+        },
+        {
+            method: 'codex-cli',
+            label: 'Codex subscription (ChatGPT)',
+            brand: 'openai',
+            available: codex.found && codex.signedIn,
+            active: active === 'codex-cli',
+            detail: codex.signedIn
+                ? `Codex CLI signed in${setting('LOCALDOST_CODEX_MODEL') ? `, ${setting('LOCALDOST_CODEX_MODEL')}` : ''}`
+                : codex.found
+                    ? 'Codex CLI found, not signed in. Run codex login on this machine.'
+                    : 'No Codex CLI on this machine.',
+        },
+        {
+            method: 'claude-token',
+            label: 'Claude subscription token',
+            brand: 'claude',
+            available: tokenSaved,
+            active: active === 'claude-token',
+            detail: tokenSaved ? `Saved token${ending('CLAUDE_CODE_OAUTH_TOKEN')}` : 'No token saved.',
+        },
+        {
+            method: 'anthropic',
+            label: 'Anthropic API key',
+            brand: 'anthropic',
+            available: keySaved,
+            active: active === 'anthropic',
+            detail: keySaved ? `Saved key${ending('ANTHROPIC_API_KEY')}, billed per use` : 'No API key saved.',
+        },
+    ];
+    // A model whose last call failed for quota, spend cap, rate limit or sign-in shows why, and is not offered to switch to.
+    for (const c of opts.showUnavailable === false ? [] : choices) {
+        const e = getUnavailability(FAMILY_OF_METHOD[c.method]);
+        if (!e)
+            continue;
+        c.unavailable = viewOf(e);
+        c.detail = unavailableDetail(e);
+        c.available = false;
+    }
+    const cli = choices[0];
+    if (tokenSaved && settingSource('CLAUDE_CODE_OAUTH_TOKEN') === 'stored')
+        cli.note = 'Switching removes the saved Claude token.';
+    const out = { choices, allowPaidFallback: paidFallbackAllowed() };
+    if (settingSource(PAID_FALLBACK_KEY) === 'env')
+        out.paidFallbackEnv = { name: PAID_FALLBACK_KEY, value: setting(PAID_FALLBACK_KEY) ?? '' };
+    if (active)
+        out.active = active;
+    if (settingSource('LOCALDOST_LLM') === 'env')
+        out.envOverride = { name: 'LOCALDOST_LLM', value: setting('LOCALDOST_LLM') ?? '' };
+    if (getMeta('model').auto === true)
+        out.autoPicked = true;
+    return out;
+}
+/** Turns the workspace setting allowPaidFallback on or off (KAT-188). The environment wins and makes it read-only. */
+export async function savePaidFallback(allow, actor) {
+    if (typeof allow !== 'boolean')
+        throw new ConnectError(400, 'Send allow as true or false.');
+    if (settingSource(PAID_FALLBACK_KEY) === 'env')
+        throw new ConnectError(409, `${PAID_FALLBACK_KEY} is set by the environment. Unset it to change this here.`);
+    saveValues('model', { [PAID_FALLBACK_KEY]: allow ? '1' : null }, { actor });
+    return modelChoices();
+}
+/** Tests the method with the saved values, then makes it the active model. No restart. */
+export async function switchModel(method, actor) {
+    const valid = ['claude-cli', 'codex-cli', 'claude-token', 'anthropic'];
+    if (typeof method !== 'string' || !valid.includes(method))
+        throw new ConnectError(400, `Pick one of ${valid.join(', ')}.`);
+    if (settingSource('LOCALDOST_LLM') === 'env')
+        throw new ConnectError(409, 'LOCALDOST_LLM is set by the environment. Change it there, or unset it to switch here.');
+    if (method === 'claude-cli' && settingSource('CLAUDE_CODE_OAUTH_TOKEN') === 'env')
+        throw new ConnectError(409, 'CLAUDE_CODE_OAUTH_TOKEN is set by the environment, so the Claude CLI would sign in with it. Unset it to use the CLI login.');
+    if (method === 'claude-token' && !setting('CLAUDE_CODE_OAUTH_TOKEN'))
+        throw new ConnectError(400, 'No Claude token is saved. Add one with Change connection.');
+    if (method === 'anthropic' && !setting('ANTHROPIC_API_KEY'))
+        throw new ConnectError(400, 'No Anthropic API key is saved. Add one with Change connection.');
+    const view = await connectProvider('model', { method, values: {} }, actor);
+    setMeta('model', { auto: null }, actor);
+    return view;
+}
+/**
+ * First start with nothing chosen: use a signed-in subscription instead of the mock model. Codex
+ * first, then the Claude CLI. Nothing happens when any model setting exists. A server with LOCALDOST_TOKEN
+ * is shared, and the CLI login on it belongs to one person: it picks nothing, and the Model step of the
+ * first-run flow asks which account the team uses (KAT-357).
+ */
+export async function autoPickModel() {
+    if (config.token)
+        return undefined;
+    if (modelChosen())
+        return undefined;
+    const codexBin = setting('LOCALDOST_CODEX_BIN')?.trim() || 'codex';
+    if (deps.which(codexBin)) {
+        const r = await deps.run(codexBin, ['login', 'status'], { timeoutMs: 15_000 });
+        if (r.code === 0)
+            return pick('codex-cli');
+    }
+    const claudeBin = setting('LOCALDOST_CLAUDE_BIN')?.trim() || 'claude';
+    if (deps.which(claudeBin)) {
+        const r = await deps.run(claudeBin, ['auth', 'status', '--json'], { timeoutMs: 15_000 });
+        if (claudeSignedIn(r.code, r.stdout))
+            return pick('claude-cli');
+    }
+    return undefined;
+}
+/** True when any model setting exists: an environment value, a saved key or token, or a recorded method. */
+function modelChosen() {
+    for (const k of ['LOCALDOST_LLM', 'ANTHROPIC_API_KEY', 'CLAUDE_CODE_OAUTH_TOKEN'])
+        if (settingSource(k) !== 'none')
+            return true;
+    return !!getMeta('model').method;
+}
+function claudeSignedIn(code, stdout) {
+    try {
+        return !!JSON.parse(stdout).loggedIn;
+    }
+    catch {
+        return code === 0 && !!stdout.trim();
+    }
+}
+function pick(method) {
+    // The sign-in check above was async: a model the user chose meanwhile wins. This check and the
+    // writes below run in one synchronous step, so nothing can be chosen in between.
+    if (modelChosen())
+        return undefined;
+    saveValues('model', { LOCALDOST_LLM: method }, { actor: 'auto' });
+    setMeta('model', { method, auto: true, checkedAt: new Date().toISOString() }, 'auto');
+    log.info(`model: no model was chosen, using the signed-in ${method === 'codex-cli' ? 'Codex' : 'Claude'} CLI`);
+    return method;
+}
+let working;
+const WORKING_TTL_MS = 60_000;
+/**
+ * The backends a call can fall back to (KAT-102): the entries of the switcher list that are signed in or
+ * have a saved key, in list order, one per backend. A backend that failed is still listed; the guard
+ * decides by its wait time. Sign-in checks spend no usage and are cached for a minute. This is detection only: the
+ * guard leaves out a paid key while paid fallback is off (KAT-188), and on a team server a CLI login no admin chose (KAT-362).
+ */
+export async function workingFamilies() {
+    if (!working || Date.now() - working.at > WORKING_TTL_MS) {
+        // Detection alone: a model that failed lately is still a candidate once its wait is over.
+        const list = buildChoices(await detectModelClis(), { showUnavailable: false });
+        const found = list.choices.filter((c) => c.available).map((c) => FAMILY_OF_METHOD[c.method]);
+        working = { at: Date.now(), families: [...new Set(found)] };
+    }
+    return working.families;
+}
+onSettingsChange(() => {
+    working = undefined;
+});
+/** Test hook: forget the cached sign-in checks. */
+export function resetWorkingFamilies() {
+    working = undefined;
+}
+//# sourceMappingURL=model-choices.js.map

package/dist/connect/model-choices.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-choices.js","sourceRoot":"","sources":["../../src/connect/model-choices.ts"],"names":[],"mappings":"AAAA,iGAAiG;AACjG,kFAAkF;AAClF,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,gBAAgB,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AACrF,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EACjB,mBAAmB,EACnB,iBAAiB,EACjB,MAAM,GAGP,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,eAAe,EAAiB,MAAM,eAAe,CAAC;AACxF,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACvE,OAAO,EAAE,YAAY,EAAqB,MAAM,YAAY,CAAC;AAoC7D,SAAS,YAAY;IACnB,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACnE,IAAI,IAAI,KAAK,YAAY;QAAE,OAAO,OAAO,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,YAAY,CAAC;IACrG,IAAI,IAAI,KAAK,WAAW;QAAE,OAAO,WAAW,CAAC;IAC7C,IAAI,IAAI,KAAK,MAAM;QAAE,OAAO,SAAS,CAAC;IACtC,OAAO,IAAI,KAAK,WAAW,IAAI,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;AACxF,CAAC;AAED,SAAS,MAAM,CAAC,GAAW;IACzB,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC;IACtC,OAAO,KAAK,CAAC,CAAC,CAAC,cAAc,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAC5C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY;IAChC,OAAO,YAAY,CAAC,MAAM,MAAM,EAAE,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,YAAY,CAAC,CAA2C,EAAE,OAAsC,EAAE,eAAe,EAAE,IAAI,EAAE;IAChI,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;IAC9B,MAAM,UAAU,GAAG,CAAC,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAG,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,CAAC,CAAC,SAAS,CAAC;IAC3B,MAAM,KAAK,GAAG,CAAC,CAAC,QAAQ,CAAC;IACzB,iGAAiG;IACjG,MAAM,QAAQ,GAAG,aAAa,CAAC,yBAAyB,CAAC,KAAK,KAAK,CAAC;IACpE,MAAM,OAAO,GAAkB;QAC7B;YACE,MAAM,EAAE,YAAY;YACpB,KAAK,EAAE,qBAAqB;YAC5B,KAAK,EAAE,QAAQ;YACf,SAAS,EAAE,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,QAAQ,IAAI,CAAC,QAAQ;YACvD,MAAM,EAAE,MAAM,KAAK,YAAY;YAC/B,MAAM,EAAE,QAAQ;gBACd,CAAC,CAAC,+HAA+H;gBACjI,CAAC,CAAC,MAAM,CAAC,QAAQ;oBACf,CAAC,CAAC,uBAAuB,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;oBACxE,CAAC,CAAC,MAAM,CAAC,KAAK;wBACZ,CAAC,CAAC,yEAAyE;wBAC3E,CAAC,CAAC,gCAAgC;SACzC;QACD;YACE,MAAM,EAAE,WAAW;YACnB,KAAK,EAAE,8BAA8B;YACrC,KAAK,EAAE,QAAQ;YACf,SAAS,EAAE,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,QAAQ;YACxC,MAAM,EAAE,MAAM,KAAK,WAAW;YAC9B,MAAM,EAAE,KAAK,CAAC,QAAQ;gBACpB,CAAC,CAAC,sBAAsB,OAAO,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,uBAAuB,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;gBACzG,CAAC,CAAC,KAAK,CAAC,KAAK;oBACX,CAAC,CAAC,kEAAkE;oBACpE,CAAC,CAAC,+BAA+B;SACtC;QACD;YACE,MAAM,EAAE,cAAc;YACtB,KAAK,EAAE,2BAA2B;YAClC,KAAK,EAAE,QAAQ;YACf,SAAS,EAAE,UAAU;YACrB,MAAM,EAAE,MAAM,KAAK,cAAc;YACjC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,cAAc,MAAM,CAAC,yBAAyB,CAAC,EAAE,CAAC,CAAC,CAAC,iBAAiB;SAC3F;QACD;YACE,MAAM,EAAE,WAAW;YACnB,KAAK,EAAE,mBAAmB;YAC1B,KAAK,EAAE,WAAW;YAClB,SAAS,EAAE,QAAQ;YACnB,MAAM,EAAE,MAAM,KAAK,WAAW;YAC9B,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,YAAY,MAAM,CAAC,mBAAmB,CAAC,kBAAkB,CAAC,CAAC,CAAC,mBAAmB;SACnG;KACF,CAAC;IACF,yHAAyH;IACzH,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,eAAe,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QAC9D,MAAM,CAAC,GAAG,iBAAiB,CAAC,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QACxD,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,CAAC,CAAC,WAAW,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QAC1B,CAAC,CAAC,MAAM,GAAG,iBAAiB,CAAC,CAAC,CAAC,CAAC;QAChC,CAAC,CAAC,SAAS,GAAG,KAAK,CAAC;IACtB,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC;IACxB,IAAI,UAAU,IAAI,aAAa,CAAC,yBAAyB,CAAC,KAAK,QAAQ;QAAE,GAAG,CAAC,IAAI,GAAG,2CAA2C,CAAC;IAChI,MAAM,GAAG,GAAiB,EAAE,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,EAAE,CAAC;IAChF,IAAI,aAAa,CAAC,iBAAiB,CAAC,KAAK,KAAK;QAAE,GAAG,CAAC,eAAe,GAAG,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,OAAO,CAAC,iBAAiB,CAAC,IAAI,EAAE,EAAE,CAAC;IAC3I,IAAI,MAAM;QAAE,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC;IAChC,IAAI,aAAa,CAAC,eAAe,CAAC,KAAK,KAAK;QAAE,GAAG,CAAC,WAAW,GAAG,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,OAAO,CAAC,eAAe,CAAC,IAAI,EAAE,EAAE,CAAC;IACjI,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,IAAI;QAAE,GAAG,CAAC,UAAU,GAAG,IAAI,CAAC;IAC1D,OAAO,GAAG,CAAC;AACb,CAAC;AAED,sHAAsH;AACtH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,KAAc,EAAE,KAAc;IACnE,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,8BAA8B,CAAC,CAAC;IAC5F,IAAI,aAAa,CAAC,iBAAiB,CAAC,KAAK,KAAK;QAAE,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,GAAG,iBAAiB,2DAA2D,CAAC,CAAC;IAC7J,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5E,OAAO,YAAY,EAAE,CAAC;AACxB,CAAC;AAED,0FAA0F;AAC1F,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,MAAe,EAAE,KAAc;IAC/D,MAAM,KAAK,GAAkB,CAAC,YAAY,EAAE,WAAW,EAAE,cAAc,EAAE,WAAW,CAAC,CAAC;IACtF,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAqB,CAAC;QAAE,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,eAAe,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1I,IAAI,aAAa,CAAC,eAAe,CAAC,KAAK,KAAK;QAC1C,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,uFAAuF,CAAC,CAAC;IACvH,IAAI,MAAM,KAAK,YAAY,IAAI,aAAa,CAAC,yBAAyB,CAAC,KAAK,KAAK;QAC/E,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,4HAA4H,CAAC,CAAC;IAC5J,IAAI,MAAM,KAAK,cAAc,IAAI,CAAC,OAAO,CAAC,yBAAyB,CAAC;QAClE,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,2DAA2D,CAAC,CAAC;IAC3F,IAAI,MAAM,KAAK,WAAW,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC;QAAE,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,gEAAgE,CAAC,CAAC;IAC3J,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC;IAC3E,OAAO,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;IACxC,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa;IACjC,IAAI,MAAM,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IACnC,IAAI,WAAW,EAAE;QAAE,OAAO,SAAS,CAAC;IACpC,MAAM,QAAQ,GAAG,OAAO,CAAC,qBAAqB,CAAC,EAAE,IAAI,EAAE,IAAI,OAAO,CAAC;IACnE,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzB,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;QAC/E,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC,WAAW,CAAC,CAAC;IAC7C,CAAC;IACD,MAAM,SAAS,GAAG,OAAO,CAAC,sBAAsB,CAAC,EAAE,IAAI,EAAE,IAAI,QAAQ,CAAC;IACtE,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1B,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;QACzF,IAAI,cAAc,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,4GAA4G;AAC5G,SAAS,WAAW;IAClB,KAAK,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,mBAAmB,EAAE,yBAAyB,CAAC;QAAE,IAAI,aAAa,CAAC,CAAC,CAAC,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;IAChI,OAAO,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;AACnC,CAAC;AAED,SAAS,cAAc,CAAC,IAAmB,EAAE,MAAc;IACzD,IAAI,CAAC;QACH,OAAO,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAA4B,CAAC,QAAQ,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACvC,CAAC;AACH,CAAC;AAED,SAAS,IAAI,CAAC,MAAkC;IAC9C,+FAA+F;IAC/F,iFAAiF;IACjF,IAAI,WAAW,EAAE;QAAE,OAAO,SAAS,CAAC;IACpC,UAAU,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IAClE,OAAO,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;IACtF,GAAG,CAAC,IAAI,CAAC,mDAAmD,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,MAAM,CAAC,CAAC;IAC/G,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,IAAI,OAA4D,CAAC;AACjE,MAAM,cAAc,GAAG,MAAM,CAAC;AAE9B;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,EAAE,GAAG,cAAc,EAAE,CAAC;QACzD,0FAA0F;QAC1F,MAAM,IAAI,GAAG,YAAY,CAAC,MAAM,eAAe,EAAE,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/E,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QAC7F,OAAO,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;IAC9D,CAAC;IACD,OAAO,OAAO,CAAC,QAAQ,CAAC;AAC1B,CAAC;AAED,gBAAgB,CAAC,GAAG,EAAE;IACpB,OAAO,GAAG,SAAS,CAAC;AACtB,CAAC,CAAC,CAAC;AAEH,mDAAmD;AACnD,MAAM,UAAU,oBAAoB;IAClC,OAAO,GAAG,SAAS,CAAC;AACtB,CAAC"}