gdmcode 0.1.3__tar.gz → 0.1.5__tar.gz

{gdmcode-0.1.3 → gdmcode-0.1.5}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: gdmcode
-Version: 0.1.3
+Version: 0.1.5
 Summary: gdm: AI coding agent for professional developers
 Project-URL: Homepage, https://github.com/guidegdm/gdmcode
 Project-URL: Repository, https://github.com/guidegdm/gdmcode
@@ -204,7 +204,7 @@ gdm login grok        # or: gemini | codex | all
 
 Secrets are stored in the OS keychain — never in TOML files.
 
-Interactive setup is also available inside `gdm` with `/login` and `/proxy`. First launch without credentials shows onboarding instead of starting model agents.
+Interactive setup is also available inside `gdm` with `/login`, `/logout`, and `/proxy`. First launch without credentials shows onboarding instead of starting model agents; type a normal message like `hey` to test the connected LLM.
 
 Full configuration reference: [docs/configuration.md](docs/configuration.md)
 

{gdmcode-0.1.3 → gdmcode-0.1.5}/README.md

@@ -107,7 +107,7 @@ gdm login grok        # or: gemini | codex | all
 
 Secrets are stored in the OS keychain — never in TOML files.
 
-Interactive setup is also available inside `gdm` with `/login` and `/proxy`. First launch without credentials shows onboarding instead of starting model agents.
+Interactive setup is also available inside `gdm` with `/login`, `/logout`, and `/proxy`. First launch without credentials shows onboarding instead of starting model agents; type a normal message like `hey` to test the connected LLM.
 
 Full configuration reference: [docs/configuration.md](docs/configuration.md)
 

{gdmcode-0.1.3 → gdmcode-0.1.5}/docs/cli-reference.md

@@ -71,11 +71,11 @@ Authenticate with an AI provider and store credentials in the OS keychain.
 gdm logout [PROVIDER]
 ```
 
-Remove stored credentials for a provider.
+Remove stored credentials for a provider, proxy, or all routes.
 
 | Argument | Values | Default |
 |----------|--------|---------|
-| `PROVIDER` | `grok`, `gemini`, `codex`, `all` | `all` |
+| `PROVIDER` | `grok`, `gemini`, `codex`, `proxy`, `all` | `all` |
 
 ---
 
@@ -186,4 +186,4 @@ Manage the gdm background daemon (code indexing, session compression, security s
 
 | Argument | Values | Default |
 |----------|--------|---------|
-| `ACTION` | `start`, `stop`, `status` | `status` |
+| `ACTION` | `start`, `stop`, `status` | `status` |

{gdmcode-0.1.3 → gdmcode-0.1.5}/docs/quick-start.md

@@ -48,6 +48,10 @@ requests and should not store provider keys server-side.
 You can run `gdm health` after login/proxy setup to check API connectivity, the database, tool
 availability, and budget state.
 
+To disconnect later, run `gdm logout grok` or use `/logout grok` inside the interactive shell.
+`/logout all` forgets stored provider and proxy credentials; environment variables or TOML keys
+must be removed manually if they are still present.
+
 ## 4. Navigate to your project
 
 ```bash
@@ -65,7 +69,9 @@ gdm "fix the login bug"
 
 If you start `gdm` before connecting a model, it shows setup guidance and keeps slash commands
 available instead of loading the agent loop. Once connected, the agent will read relevant files,
-plan a solution, and propose edits. At autonomy level 2
+plan a solution, and propose edits. Type `hey` as a quick connection test; if the provider rejects
+the request, gdm explains whether it looks like no LLM, invalid key, rate limit, billing/credit, or
+network/proxy trouble. At autonomy level 2
 (default) it will ask before writing files or running shell commands. Lower the level for more
 prompts; raise it for more independence.
 

{gdmcode-0.1.3 → gdmcode-0.1.5}/docs/security-hardening.md

@@ -144,6 +144,8 @@ actor attribution in audit logs.
 **Rules:**
 - API keys, tokens, and passwords must be stored in the OS keychain via `gdm login`.
 - Relay tokens should be entered with `/proxy token` so they are hidden at the terminal.
+- Use `gdm logout <provider>` or `/logout <provider>` to remove keychain/fallback credentials.
+  Environment variables and TOML entries override logout and must be removed manually.
 - They must **never** appear in `config.toml`, `team.toml`, or any environment variable committed
   to version control.
 - `team.toml` is committed to git — treat it as fully public.

gdmcode-0.1.5/gdmcode/__init__.py

@@ -0,0 +1 @@
+__version__ = "0.1.5"

{gdmcode-0.1.3 → gdmcode-0.1.5}/gdmcode/agent/tool_orchestrator.py

@@ -25,7 +25,7 @@ from typing import Any
 from gdmcode._internal.constants import _ALWAYS_DENY_TOOLS, _WRITE_TOOLS
 from gdmcode.exceptions import ToolPermissionError
 from gdmcode.security import AuditLogger
-from gdmcode.tools import REGISTRY, ToolResult
+from gdmcode.tools import REGISTRY, ToolResult, ensure_default_tools_registered
 
 __all__ = ["ToolOrchestrator"]
 
@@ -144,15 +144,7 @@ _TOOL_CACHE: _ToolResultCache = _ToolResultCache()
 
 def _ensure_tools_registered() -> None:
     """Import all tool modules so they register themselves with REGISTRY."""
-    import gdmcode.tools.bash_tool      # noqa: F401
-    import gdmcode.tools.read_tools     # noqa: F401
-    import gdmcode.tools.search_tools   # noqa: F401
-    import gdmcode.tools.shell_tools    # noqa: F401
-    import gdmcode.tools.ask_user_tool  # noqa: F401
-    import gdmcode.tools.write_tools    # noqa: F401
-    import gdmcode.tools.dep_tools      # noqa: F401
-    import gdmcode.tools.impact_tools   # noqa: F401
-    import gdmcode.tools.browser_tool   # noqa: F401
+    ensure_default_tools_registered()
 
 
 _ensure_tools_registered()
@@ -399,4 +391,4 @@ class ToolOrchestrator:
         """Dispatch a registered plugin tool by its namespaced tool_name."""
         if tool_name not in self._plugin_channels:
             raise KeyError(f"Unknown plugin tool: {tool_name}")
-        return self._dispatch_plugin(tool_name, args)
+        return self._dispatch_plugin(tool_name, args)

{gdmcode-0.1.3 → gdmcode-0.1.5}/gdmcode/auth.py

@@ -217,7 +217,7 @@ def login_interactive(provider: str, store: CredentialStore | None = None) -> No
       - "codex" → paste API key
 
     Args:
-        provider: one of "grok", "gemini", "codex", "all"
+        provider: one of "grok", "gemini", "codex", "proxy", "all"
         store: CredentialStore instance (creates a new one if None)
     """
     from rich.console import Console
@@ -254,15 +254,18 @@ def logout(provider: str, store: CredentialStore | None = None) -> None:
     console = Console()
     s = store or CredentialStore()
 
+    provider = provider.lower().strip()
     if provider == "all":
-        for prov in ("grok", "gemini", "gemini_refresh", "codex"):
+        for prov in ("grok", "gemini", "gemini_refresh", "codex", "proxy"):
             s.delete(prov)
-        console.print("[green]✓[/green] Logged out from all providers.")
-    else:
+        console.print("[green]✓[/green] Logged out from all providers and proxy.")
+    elif provider in {"grok", "gemini", "codex", "proxy"}:
         s.delete(provider)
         if provider == "gemini":
             s.delete("gemini_refresh")
         console.print(f"[green]✓[/green] Logged out from [bold]{provider}[/bold].")
+    else:
+        console.print("[red]Unknown provider.[/red] Valid providers: grok, gemini, codex, proxy, all")
 
 
 # ---------------------------------------------------------------------------

{gdmcode-0.1.3 → gdmcode-0.1.5}/gdmcode/cli.py

@@ -92,10 +92,10 @@ def cmd_login(
 def cmd_logout(
     provider: Annotated[
         str,
-        typer.Argument(help="Provider to log out from: grok | gemini | codex | all"),
+        typer.Argument(help="Provider to log out from: grok | gemini | codex | proxy | all"),
     ] = "all",
 ) -> None:
-    """Remove stored credentials for a provider."""
+    """Remove stored credentials for a provider, proxy, or all routes."""
     from gdmcode.auth import logout
     logout(provider)
 
@@ -287,7 +287,8 @@ def cmd_health(
         GdmDatabase = _GdmDatabase
     from gdmcode.models.definitions import PROVIDER_BASE_URLS, ModelTier, get_model
     if REGISTRY is None:
-        from gdmcode.tools import REGISTRY as _REGISTRY
+        from gdmcode.tools import REGISTRY as _REGISTRY, ensure_default_tools_registered
+        ensure_default_tools_registered()
         REGISTRY = _REGISTRY
 
     @dataclass
@@ -352,8 +353,28 @@ def cmd_health(
         try:
             tools = REGISTRY.all_tools()
             count = len(tools)
-            status = "ok" if count > 0 else "fail"
-            return CheckResult("tools", status, latency_ms=int((time.monotonic() - t0) * 1000), detail=f"{count} tools")
+            if count == 0:
+                return CheckResult("tools", "fail", latency_ms=int((time.monotonic() - t0) * 1000), detail="0 tools registered")
+            probe_name = "powershell" if sys.platform == "win32" else "bash"
+            probe_args = (
+                {"command": "$PWD.Path", "timeout": 5}
+                if probe_name == "powershell"
+                else {"command": "pwd", "timeout": 5, "read_only": True}
+            )
+            probe = REGISTRY.call(probe_name, probe_args)
+            if not probe.ok:
+                return CheckResult(
+                    "tools",
+                    "fail",
+                    latency_ms=int((time.monotonic() - t0) * 1000),
+                    detail=f"{count} registered; {probe_name} probe failed: {probe.error}",
+                )
+            return CheckResult(
+                "tools",
+                "ok",
+                latency_ms=int((time.monotonic() - t0) * 1000),
+                detail=f"{count} registered; {probe_name} probe ok",
+            )
         except Exception as exc:  # noqa: BLE001
             return CheckResult("tools", "fail", detail=str(exc))
 
@@ -398,7 +419,8 @@ def cmd_health(
     ]
 
     overall_fail = any(
-        r.status in ("fail", "missing") and r.priority in ("P0", "P1")
+        r.status == "fail" and r.priority in ("P0", "P1")
+        or r.status == "missing" and r.priority == "P0"
         for r in all_checks
     )
 
@@ -1179,6 +1201,7 @@ def _run_one_shot(cfg: object, prompt: str, *, yes: bool, model_override: str |
     """
     from rich.status import Status
     from gdmcode.agent.loop import EventType
+    from gdmcode.repl import _format_llm_error
 
     if not _has_model_connection(cfg):
         console.print("[red]No model connection configured.[/red]")
@@ -1248,10 +1271,21 @@ def _run_one_shot(cfg: object, prompt: str, *, yes: bool, model_override: str |
                 console.print(event.content)
             elif event.type == EventType.ERROR:
                 status.stop()
-                console.print(f"[red]Error:[/red] {event.content}")
+                console.print(_format_llm_error(event.content))
                 had_error = True
             elif event.type == EventType.TOOL_CALL:
+                status.stop()
                 console.print(f"[yellow]  [tool] {event.tool_name}[/yellow]")
+            elif event.type == EventType.TOOL_RESULT:
+                status.stop()
+                result = event.result
+                if result is not None and getattr(result, "error", None):
+                    console.print(f"[red]  [tool error] {event.tool_name}:[/red] {getattr(result, 'error')}")
+                    had_error = True
+                elif result is not None:
+                    output = (getattr(result, "output", "") or "").strip()
+                    if output:
+                        console.print(f"[dim]{output[:2000]}[/dim]")
             elif event.type == EventType.DONE:
                 status.stop()
     except Exception as exc:  # noqa: BLE001

{gdmcode-0.1.3 → gdmcode-0.1.5}/gdmcode/commands.py

@@ -7,7 +7,9 @@ Supported commands: /help /model /cost /tasks /btw /compact /clear /status
 from __future__ import annotations
 
 import logging
+import os
 import subprocess
+import tomllib
 from dataclasses import dataclass
 from datetime import datetime, timezone
 from pathlib import Path
@@ -78,10 +80,25 @@ _COMMANDS: dict[str, str] = {
     "/artifacts [view|diff|search|export] ...": "List, view, diff, search, or export saved artifacts",
     "/save [name]": "Save the last assistant response as a named artifact",
     "/login [provider]": "Authenticate inside the REPL: grok | gemini | codex | all",
+    "/logout [provider]": "Forget credentials: grok | gemini | codex | proxy | all",
     "/proxy [on|off|url <url>|token <tok>|status]": "Route LLM calls via proxy (for geo-blocked regions)",
     "/exit, /quit": "Exit the REPL",
 }
 
+_LOGOUT_PROVIDERS: frozenset[str] = frozenset({"grok", "gemini", "codex", "proxy", "all"})
+_PROVIDER_ENV_KEYS: dict[str, tuple[str, ...]] = {
+    "grok": ("XAI_API_KEY",),
+    "gemini": ("GEMINI_API_KEY",),
+    "codex": ("OPENAI_API_KEY",),
+    "proxy": ("GDM_PROXY_TOKEN", "GDM_PROXY_ENABLED"),
+}
+_PROVIDER_TOML_KEYS: dict[str, tuple[tuple[str, str], ...]] = {
+    "grok": (("api", "xai_api_key"),),
+    "gemini": (("api", "gemini_api_key"),),
+    "codex": (("api", "openai_api_key"),),
+    "proxy": (("proxy", "enabled"),),
+}
+
 
 @dataclass
 class CommandResult:
@@ -102,6 +119,7 @@ class CommandResult:
     proxy_url: str | None = None
     proxy_token: str | None = None
     prompt_secret: str | None = None  # if set, REPL prompts for hidden input then calls apply_proxy_token
+    reset_agent: bool = False  # credentials/model route changed; caller should rebuild loop
 
 
 class CommandDispatcher:
@@ -221,6 +239,8 @@ class CommandDispatcher:
                 return self._cmd_save(parts[1] if len(parts) > 1 else "")
             case "/login":
                 return self._cmd_login(parts[1] if len(parts) > 1 else "all")
+            case "/logout":
+                return self._cmd_logout(parts[1] if len(parts) > 1 else "all")
             case "/proxy":
                 return self._cmd_proxy(parts[1:])
             case "/exit" | "/quit":
@@ -237,7 +257,12 @@ class CommandDispatcher:
 
     def _cmd_help(self) -> CommandResult:
         """Display a table of all available slash commands."""
-        tbl = Table(title="gdm slash commands", header_style="bold cyan", show_lines=False)
+        tbl = Table(
+            title="gdm interactive commands",
+            caption="Type a normal message like 'hey' to talk to the connected LLM.",
+            header_style="bold cyan",
+            show_lines=False,
+        )
         tbl.add_column("Command", style="cyan", no_wrap=True)
         tbl.add_column("Description")
         for cmd, desc in _COMMANDS.items():
@@ -1383,9 +1408,76 @@ class CommandDispatcher:
         return CommandResult(
             handled=True,
             refresh_config=True,
+            reset_agent=True,
             output="[green]Login updated.[/green] The next agent turn will use the refreshed credentials.",
         )
 
+    def _credential_sources_after_logout(self, providers: list[str]) -> list[str]:
+        """Return non-keychain sources that can still reconnect after /logout."""
+        targets = ["grok", "gemini", "codex", "proxy"] if "all" in providers else providers
+        sources: list[str] = []
+        for provider in targets:
+            for env_key in _PROVIDER_ENV_KEYS.get(provider, ()):
+                if os.environ.get(env_key):
+                    sources.append(f"environment variable {env_key}")
+
+        cfg_file = Path.home() / ".config" / "gdm" / "config.toml"
+        if cfg_file.exists():
+            try:
+                cfg = tomllib.loads(cfg_file.read_text(encoding="utf-8"))
+            except Exception as exc:  # noqa: BLE001
+                sources.append(f"{cfg_file} could not be checked ({exc})")
+            else:
+                for provider in targets:
+                    for section, key in _PROVIDER_TOML_KEYS.get(provider, ()):
+                        if cfg.get(section, {}).get(key):
+                            sources.append(f"{cfg_file} [{section}].{key}")
+        return sources
+
+    def _cmd_logout(self, provider: str) -> CommandResult:
+        """Forget stored credentials for one provider, proxy, or all routes."""
+        provider = provider.lower().strip()
+        if provider not in _LOGOUT_PROVIDERS:
+            return CommandResult(
+                handled=True,
+                output="[red]Usage:[/red] /logout [grok|gemini|codex|proxy|all]",
+            )
+
+        providers = ["grok", "gemini", "codex", "proxy"] if provider == "all" else [provider]
+        try:
+            from gdmcode.auth import CredentialStore
+
+            store = CredentialStore()
+            for prov in providers:
+                store.delete(prov)
+                if prov == "gemini":
+                    store.delete("gemini_refresh")
+        except Exception as exc:  # noqa: BLE001
+            log.exception("logout failed")
+            return CommandResult(handled=True, output=f"[red]Logout failed:[/red] {exc}")
+
+        if "proxy" in providers:
+            self._proxy_enabled = False
+            self._proxy_token = ""
+
+        label = "all providers and proxy" if provider == "all" else provider
+        lines = [f"[green]✓ Logged out from {label}.[/green]"]
+        sources = self._credential_sources_after_logout(providers)
+        if sources:
+            lines.append("[yellow]Still connected through source(s) /logout cannot remove:[/yellow]")
+            lines.extend(f"  [dim]- {source}[/dim]" for source in sources)
+            lines.append("[dim]Remove those values manually, then restart or run /logout again.[/dim]")
+        else:
+            lines.append("[dim]Type /login or /proxy token when you want to reconnect.[/dim]")
+
+        return CommandResult(
+            handled=True,
+            output="\n".join(lines),
+            refresh_config=True,
+            reset_agent=True,
+            proxy_action="disable" if "proxy" in providers else None,
+        )
+
     def apply_proxy_token(self, token: str) -> CommandResult:
         """Store proxy token received via hidden prompt (never written to history)."""
         token = token.strip()

{gdmcode-0.1.3 → gdmcode-0.1.5}/gdmcode/integrations/mcp_server.py

@@ -51,7 +51,7 @@ _INTERNAL_ERROR   = -32603
 class MCPServer:
     """Minimal MCP server with stdio transport."""
 
-    def __init__(self, name: str = "gdmcode", version: str = "0.1.3") -> None:
+    def __init__(self, name: str = "gdmcode", version: str = "0.1.5") -> None:
         self._name = name
         self._version = version
         self._tools: dict[str, MCPTool] = {}

{gdmcode-0.1.3 → gdmcode-0.1.5}/gdmcode/main.py

@@ -6,6 +6,7 @@ pyproject.toml's `gdm = "gdmcode.main:main"` script works.
 from __future__ import annotations
 
 from importlib.metadata import version as _pkg_version, PackageNotFoundError
+import sys
 
 from gdmcode.cli import app
 
@@ -20,8 +21,21 @@ def _get_version() -> str:
 
 def main() -> None:
     """Entry point for the `gdm` CLI command."""
+    _configure_stdio()
     app()
 
 
+def _configure_stdio() -> None:
+    """Avoid Windows cp1252 crashes when Rich output is redirected."""
+    for stream_name in ("stdout", "stderr"):
+        stream = getattr(sys, stream_name, None)
+        if stream is None or not hasattr(stream, "reconfigure"):
+            continue
+        try:
+            stream.reconfigure(encoding="utf-8", errors="replace")
+        except (OSError, ValueError):
+            pass
+
+
 if __name__ == "__main__":
     main()