thwip-cli 1.3.0__tar.gz → 1.5.0__tar.gz

{thwip_cli-1.3.0 → thwip_cli-1.5.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: thwip-cli
-Version: 1.3.0
+Version: 1.5.0
 Summary: Universal coding agent multiplexer: detect, switch, and route between AI coding agents seamlessly
 Project-URL: Homepage, https://github.com/tanmayhutt/thwip-cli
 Project-URL: Repository, https://github.com/tanmayhutt/thwip-cli
@@ -46,6 +46,7 @@ Description-Content-Type: text/markdown
 ## Features
 
 - **Auto-Detection**: Discovers installed AI coding agents (Claude Code, Antigravity, Gemini CLI, OpenAI/Codex, Aider, Copilot, Cursor, Windsurf, Cline, Ollama) and configured credentials.
+- **Existing Sign-ins**: Chats through installed Codex, Claude Code, and Antigravity CLIs using their own logins and live model lists, with no API key required.
 - **Context Portability**: Switch providers with stored conversational text. Working files remain in the selected local project; they are not automatically uploaded.
 - **Handoff Preview**: Inspect text continuity, omitted state, capability changes, approximate context pressure, and a text fingerprint before switching. Runs locally without model calls.
 - **Dynamic UI**: Terminal interface adapts its status bar, capabilities, and theme based on the active provider.
@@ -53,7 +54,8 @@ Description-Content-Type: text/markdown
 - **Rate Limit Failover**: Detects HTTP 429 errors or quota exhaustion and prompts instant switching to ready fallback models.
 - **Tool Layer**: Shared file editing, code execution (Python, Node, Shell), and Git integration across connected models.
 - **Session Persistence**: Save and resume sessions across projects with `/session save` and `/session load`.
-- **Terminal Ergonomics**: Autocompletion (Tab), keyboard shortcuts (Ctrl+S, Ctrl+T, Ctrl+H), and streaming markdown rendering.
+- **Familiar Flow**: The same everyday commands as Codex, Claude Code, and Antigravity (`/model`, `/new`, `/resume`, `/compact`, `/diff`, `/copy`, `!cmd`, `@file`), plus autocompletion, Ctrl+S / Ctrl+T shortcuts, and streaming Markdown.
+- **Live Model Lists**: Model catalogs come from the connected CLI or the provider's list-models endpoint, never from a hardcoded list.
 
 ---
 
@@ -81,6 +83,8 @@ Start the interactive terminal in your current project directory:
 
 ```bash
 thwip
+thwip --project ~/code/my-app   # open a specific project
+thwip --version
 ```
 
 ---
@@ -91,13 +95,22 @@ thwip
 |:---|:---|
 | `/switch [agent] [model]` | Switch active agent or model mid-conversation |
 | `/handoff [agent] [model]` | Preview a target locally without switching or sending data |
-| `/native codex` | Save and leave Thwip for the installed Codex CLI using its own authentication |
+| `/native codex` | Save and leave Thwip for the installed Codex CLI itself (launcher, no context transfer) |
 | `/agents` | Show all detected coding agents, company status, and capabilities |
 | `/models [agent]` | List available models for current or target agent |
 | `/key [provider]` | Enter an API key securely without placing it in prompt history |
 | `/status` | Display current session, project, and token stats |
-| `/limits` | View token usage, quota, and spend metrics |
-| `/detect` | Re-scan system for newly installed coding agents |
+| `/limits`, `/usage` | View token usage, CLI account usage windows, and spend metrics |
+| `/detect` | Re-scan installed agents and reconnect CLI sign-ins |
+| `/model [id]` | Pick a model for the current agent from a numbered list or by ID |
+| `/new` | Start a fresh conversation; the current one is saved first |
+| `/resume [name]` | Resume a saved session from a numbered list |
+| `/compact` | Summarize the conversation with the current model to free context; the summary is plain text and travels across providers |
+| `/diff [staged]` | Show the project's git diff |
+| `/copy` | Copy the last response to the clipboard |
+| `/export [path]` | Write the conversation to Markdown with per-message model attribution |
+| `!<command>` | Run a shell command in the project without involving a model |
+| `@path` in a message | Attach a project file's content to the message (files outside the project are ignored) |
 | `/session save [name]` | Save current chat session |
 | `/session load <name>` | Load a previously saved session |
 | `/session list` | List all saved sessions |
@@ -110,23 +123,68 @@ thwip
 | `Ctrl + H` | View history |
 | `/quit` | Exit thwip |
 
-Short aliases are available for frequent commands: `/a`, `/m`, `/s`, `/k`, `/g`, and `/t`.
-
-### Existing Codex login
-
-Use `/native codex` to open the installed native CLI without configuring a Thwip API
-key. After confirmation, Thwip saves its session and replaces itself with Codex in
-the selected project, using a read-only sandbox and on-request approvals. Codex
-owns authentication, model selection, permissions, and usage limits. An expired
-or missing login must be resolved in Codex itself.
-
-This is a launcher, not an in-REPL provider adapter. Conversation history is not
-transferred, native activity is not included in Thwip usage totals, and exiting
-Codex does not automatically restart Thwip. Restart `thwip` and use `/session load`
-to resume the saved Thwip conversation. Claude and Gemini native launchers are not
-implemented. Direct API mode remains unchanged.
-
----
+Short aliases are available for frequent commands: `/a`, `/m`, `/s`, `/sw`, `/k`, `/g`, and `/t`.
+
+### Existing CLI sign-ins (no API key needed)
+
+If Codex, Claude Code, or the Antigravity CLI is installed and signed in, Thwip
+connects to it at startup and uses that sign-in for chat. No API key is copied or
+required, and Thwip never reads the CLI's stored credentials. A configured direct
+API key for the same provider always takes precedence over the native connection.
+
+| Provider | Installed CLI | Transport | Model list |
+|:---|:---|:---|:---|
+| OpenAI | `codex` | Codex App Server (JSON-RPC over stdio) | Live from `model/list` |
+| Anthropic | `claude` | Claude Code print mode (`stream-json`) | Aliases `fable`, `opus`, `sonnet`, `haiku`; explicit IDs pass through |
+| Google | `agy` (Antigravity CLI) or `gemini` | Antigravity print mode (`stream-json`) or Gemini ACP | Live from `agy models` or the ACP session |
+
+`/models` refreshes the catalog supplied by each CLI. An explicit model ID that is
+not in the catalog is passed to the CLI for validation instead of being rejected by
+a bundled list. A model available in a desktop app may still be absent from the
+installed CLI's catalog or account access.
+
+Native connections are read-only by default. Codex starts with a read-only sandbox
+and asks before operations outside it; approval requests appear in Thwip with the
+command or file list and default to denial. Claude Code and the Antigravity CLI run
+in their non-interactive print modes, where tools that would need an approval are
+declined by the CLI itself. Each turn sends the portable text conversation to a
+fresh native session, so native reasoning and tool state do not carry between turns.
+Ctrl+C interrupts the current turn and stops the child process; the unanswered
+message is removed so it can be re-sent or handed to another provider.
+
+Native billing and usage limits are managed by each CLI account. Thwip records the
+token counts the CLIs report but does not estimate cost for them. Codex and Claude
+Code also report their account usage windows (5 hour and 7 day) after each response;
+`/limits` and `/status` show the used percentage and reset time. When a CLI reports
+an exhausted usage limit, the standard failover prompt offers the other connected
+providers.
+
+`/native codex` remains available as a launcher: it saves the Thwip session and
+replaces Thwip with the Codex CLI itself in the selected project. Conversation
+history is not transferred by the launcher; use `/session load` after restarting
+Thwip to resume.
+
+## Live model lists
+
+Model lists are not hardcoded. Each connected source supplies its own list:
+
+- Installed CLIs report their models (Codex `model/list`, `agy models`, Claude Code aliases).
+- Direct providers with a key are queried through their list-models endpoint (OpenAI,
+  Anthropic, Google, DeepSeek, Groq, OpenRouter) at startup, on `/models`, and right
+  after `/key`. Non-chat models (embeddings, speech, image, moderation) are filtered
+  out. Context sizes and prices are taken from the provider when it publishes them.
+- A small bundled list per provider remains only as an offline fallback and is labelled
+  "bundled fallback" in `/models` until a key or connection is available.
+
+## Usage-limit failover
+
+When the active provider reports an exhausted limit (Codex "You've hit your usage
+limit", Claude Code "usage limit reached" or a rejected rate-limit event, Google
+`RESOURCE_EXHAUSTED`, or HTTP 429 from a direct API), Thwip stops, shows the ready
+alternatives with their default models, and offers to switch. Accepting switches the
+provider, keeps the text conversation, and re-sends the unanswered message. Set
+`[limits] auto_switch = true` to skip the question. The `[fallback] chain` order is
+honored; a chain model the provider does not list falls back to that provider's default.
 
 ## Auditable handoffs
 
@@ -165,9 +223,9 @@ See [research and prior art](docs/handoff-research.md) for the differentiation r
 
 | Company | Agent | Capabilities |
 |:---|:---|:---|
-| Anthropic | Claude API (Fable 5, Opus 5, Sonnet 5, Haiku 4.5) | Chat, File Edit, Code Run, Terminal, Git |
-| Google | Gemini API (3.1 Pro Preview, 3.7 Flash, 3.5 Flash-Lite) | Chat, File Edit, Code Run, Terminal, Git |
-| OpenAI | OpenAI API (GPT-5.6 Sol, Terra, Luna) | Chat, File Edit, Code Run, Terminal, Git |
+| Anthropic | Claude Code sign-in, or Claude API (Fable 5, Opus 5, Sonnet 5, Haiku 4.5) | Chat, File Edit, Code Run, Terminal, Git |
+| Google | Antigravity or Gemini CLI sign-in, or Gemini API (3.1 Pro Preview, 3.7 Flash, 3.5 Flash-Lite) | Chat, File Edit, Code Run, Terminal, Git |
+| OpenAI | Codex CLI sign-in, or OpenAI API (GPT-5.6 Sol, Terra, Luna) | Chat, File Edit, Code Run, Terminal, Git |
 | DeepSeek | DeepSeek V3 / R1 Reasoner | Chat, File Edit, Code Run, Reasoning |
 | Groq | GPT-OSS 120B (default); Llama 3.3 for eligible enterprise accounts only | Chat, File Edit, Code Run |
 | Ollama | Local Models (Llama 3.3, Qwen Coder, DeepSeek R1) | Chat, File Edit, Code Run (Local, Offline) |
@@ -179,7 +237,7 @@ See [research and prior art](docs/handoff-research.md) for the differentiation r
 
 thwip auto-detects existing API keys from environment variables and existing agent configs (`~/.claude.json`, `~/.gemini/config.json`). Configuration can also be set manually:
 
-Installed apps, CLI sign-ins, and API access are separate. thwip can report a detected Claude, Gemini, or Codex CLI login, but the current SDK adapters require a provider API key. A ChatGPT, Claude, or Google subscription does not automatically provide a reusable third-party API key. Ollama needs no key when its local server is running.
+Installed CLI sign-ins and API access are separate paths. A signed-in Codex, Claude Code, or Antigravity CLI is used directly through its own protocol (see above). The direct SDK adapters for Anthropic, Google, OpenAI, DeepSeek, Groq, and OpenRouter require a provider API key. Ollama needs no key when its local server is running.
 
 ```toml
 [defaults]

{thwip_cli-1.3.0 → thwip_cli-1.5.0}/README.md

@@ -9,6 +9,7 @@
 ## Features
 
 - **Auto-Detection**: Discovers installed AI coding agents (Claude Code, Antigravity, Gemini CLI, OpenAI/Codex, Aider, Copilot, Cursor, Windsurf, Cline, Ollama) and configured credentials.
+- **Existing Sign-ins**: Chats through installed Codex, Claude Code, and Antigravity CLIs using their own logins and live model lists, with no API key required.
 - **Context Portability**: Switch providers with stored conversational text. Working files remain in the selected local project; they are not automatically uploaded.
 - **Handoff Preview**: Inspect text continuity, omitted state, capability changes, approximate context pressure, and a text fingerprint before switching. Runs locally without model calls.
 - **Dynamic UI**: Terminal interface adapts its status bar, capabilities, and theme based on the active provider.
@@ -16,7 +17,8 @@
 - **Rate Limit Failover**: Detects HTTP 429 errors or quota exhaustion and prompts instant switching to ready fallback models.
 - **Tool Layer**: Shared file editing, code execution (Python, Node, Shell), and Git integration across connected models.
 - **Session Persistence**: Save and resume sessions across projects with `/session save` and `/session load`.
-- **Terminal Ergonomics**: Autocompletion (Tab), keyboard shortcuts (Ctrl+S, Ctrl+T, Ctrl+H), and streaming markdown rendering.
+- **Familiar Flow**: The same everyday commands as Codex, Claude Code, and Antigravity (`/model`, `/new`, `/resume`, `/compact`, `/diff`, `/copy`, `!cmd`, `@file`), plus autocompletion, Ctrl+S / Ctrl+T shortcuts, and streaming Markdown.
+- **Live Model Lists**: Model catalogs come from the connected CLI or the provider's list-models endpoint, never from a hardcoded list.
 
 ---
 
@@ -44,6 +46,8 @@ Start the interactive terminal in your current project directory:
 
 ```bash
 thwip
+thwip --project ~/code/my-app   # open a specific project
+thwip --version
 ```
 
 ---
@@ -54,13 +58,22 @@ thwip
 |:---|:---|
 | `/switch [agent] [model]` | Switch active agent or model mid-conversation |
 | `/handoff [agent] [model]` | Preview a target locally without switching or sending data |
-| `/native codex` | Save and leave Thwip for the installed Codex CLI using its own authentication |
+| `/native codex` | Save and leave Thwip for the installed Codex CLI itself (launcher, no context transfer) |
 | `/agents` | Show all detected coding agents, company status, and capabilities |
 | `/models [agent]` | List available models for current or target agent |
 | `/key [provider]` | Enter an API key securely without placing it in prompt history |
 | `/status` | Display current session, project, and token stats |
-| `/limits` | View token usage, quota, and spend metrics |
-| `/detect` | Re-scan system for newly installed coding agents |
+| `/limits`, `/usage` | View token usage, CLI account usage windows, and spend metrics |
+| `/detect` | Re-scan installed agents and reconnect CLI sign-ins |
+| `/model [id]` | Pick a model for the current agent from a numbered list or by ID |
+| `/new` | Start a fresh conversation; the current one is saved first |
+| `/resume [name]` | Resume a saved session from a numbered list |
+| `/compact` | Summarize the conversation with the current model to free context; the summary is plain text and travels across providers |
+| `/diff [staged]` | Show the project's git diff |
+| `/copy` | Copy the last response to the clipboard |
+| `/export [path]` | Write the conversation to Markdown with per-message model attribution |
+| `!<command>` | Run a shell command in the project without involving a model |
+| `@path` in a message | Attach a project file's content to the message (files outside the project are ignored) |
 | `/session save [name]` | Save current chat session |
 | `/session load <name>` | Load a previously saved session |
 | `/session list` | List all saved sessions |
@@ -73,23 +86,68 @@ thwip
 | `Ctrl + H` | View history |
 | `/quit` | Exit thwip |
 
-Short aliases are available for frequent commands: `/a`, `/m`, `/s`, `/k`, `/g`, and `/t`.
-
-### Existing Codex login
-
-Use `/native codex` to open the installed native CLI without configuring a Thwip API
-key. After confirmation, Thwip saves its session and replaces itself with Codex in
-the selected project, using a read-only sandbox and on-request approvals. Codex
-owns authentication, model selection, permissions, and usage limits. An expired
-or missing login must be resolved in Codex itself.
-
-This is a launcher, not an in-REPL provider adapter. Conversation history is not
-transferred, native activity is not included in Thwip usage totals, and exiting
-Codex does not automatically restart Thwip. Restart `thwip` and use `/session load`
-to resume the saved Thwip conversation. Claude and Gemini native launchers are not
-implemented. Direct API mode remains unchanged.
-
----
+Short aliases are available for frequent commands: `/a`, `/m`, `/s`, `/sw`, `/k`, `/g`, and `/t`.
+
+### Existing CLI sign-ins (no API key needed)
+
+If Codex, Claude Code, or the Antigravity CLI is installed and signed in, Thwip
+connects to it at startup and uses that sign-in for chat. No API key is copied or
+required, and Thwip never reads the CLI's stored credentials. A configured direct
+API key for the same provider always takes precedence over the native connection.
+
+| Provider | Installed CLI | Transport | Model list |
+|:---|:---|:---|:---|
+| OpenAI | `codex` | Codex App Server (JSON-RPC over stdio) | Live from `model/list` |
+| Anthropic | `claude` | Claude Code print mode (`stream-json`) | Aliases `fable`, `opus`, `sonnet`, `haiku`; explicit IDs pass through |
+| Google | `agy` (Antigravity CLI) or `gemini` | Antigravity print mode (`stream-json`) or Gemini ACP | Live from `agy models` or the ACP session |
+
+`/models` refreshes the catalog supplied by each CLI. An explicit model ID that is
+not in the catalog is passed to the CLI for validation instead of being rejected by
+a bundled list. A model available in a desktop app may still be absent from the
+installed CLI's catalog or account access.
+
+Native connections are read-only by default. Codex starts with a read-only sandbox
+and asks before operations outside it; approval requests appear in Thwip with the
+command or file list and default to denial. Claude Code and the Antigravity CLI run
+in their non-interactive print modes, where tools that would need an approval are
+declined by the CLI itself. Each turn sends the portable text conversation to a
+fresh native session, so native reasoning and tool state do not carry between turns.
+Ctrl+C interrupts the current turn and stops the child process; the unanswered
+message is removed so it can be re-sent or handed to another provider.
+
+Native billing and usage limits are managed by each CLI account. Thwip records the
+token counts the CLIs report but does not estimate cost for them. Codex and Claude
+Code also report their account usage windows (5 hour and 7 day) after each response;
+`/limits` and `/status` show the used percentage and reset time. When a CLI reports
+an exhausted usage limit, the standard failover prompt offers the other connected
+providers.
+
+`/native codex` remains available as a launcher: it saves the Thwip session and
+replaces Thwip with the Codex CLI itself in the selected project. Conversation
+history is not transferred by the launcher; use `/session load` after restarting
+Thwip to resume.
+
+## Live model lists
+
+Model lists are not hardcoded. Each connected source supplies its own list:
+
+- Installed CLIs report their models (Codex `model/list`, `agy models`, Claude Code aliases).
+- Direct providers with a key are queried through their list-models endpoint (OpenAI,
+  Anthropic, Google, DeepSeek, Groq, OpenRouter) at startup, on `/models`, and right
+  after `/key`. Non-chat models (embeddings, speech, image, moderation) are filtered
+  out. Context sizes and prices are taken from the provider when it publishes them.
+- A small bundled list per provider remains only as an offline fallback and is labelled
+  "bundled fallback" in `/models` until a key or connection is available.
+
+## Usage-limit failover
+
+When the active provider reports an exhausted limit (Codex "You've hit your usage
+limit", Claude Code "usage limit reached" or a rejected rate-limit event, Google
+`RESOURCE_EXHAUSTED`, or HTTP 429 from a direct API), Thwip stops, shows the ready
+alternatives with their default models, and offers to switch. Accepting switches the
+provider, keeps the text conversation, and re-sends the unanswered message. Set
+`[limits] auto_switch = true` to skip the question. The `[fallback] chain` order is
+honored; a chain model the provider does not list falls back to that provider's default.
 
 ## Auditable handoffs
 
@@ -128,9 +186,9 @@ See [research and prior art](docs/handoff-research.md) for the differentiation r
 
 | Company | Agent | Capabilities |
 |:---|:---|:---|
-| Anthropic | Claude API (Fable 5, Opus 5, Sonnet 5, Haiku 4.5) | Chat, File Edit, Code Run, Terminal, Git |
-| Google | Gemini API (3.1 Pro Preview, 3.7 Flash, 3.5 Flash-Lite) | Chat, File Edit, Code Run, Terminal, Git |
-| OpenAI | OpenAI API (GPT-5.6 Sol, Terra, Luna) | Chat, File Edit, Code Run, Terminal, Git |
+| Anthropic | Claude Code sign-in, or Claude API (Fable 5, Opus 5, Sonnet 5, Haiku 4.5) | Chat, File Edit, Code Run, Terminal, Git |
+| Google | Antigravity or Gemini CLI sign-in, or Gemini API (3.1 Pro Preview, 3.7 Flash, 3.5 Flash-Lite) | Chat, File Edit, Code Run, Terminal, Git |
+| OpenAI | Codex CLI sign-in, or OpenAI API (GPT-5.6 Sol, Terra, Luna) | Chat, File Edit, Code Run, Terminal, Git |
 | DeepSeek | DeepSeek V3 / R1 Reasoner | Chat, File Edit, Code Run, Reasoning |
 | Groq | GPT-OSS 120B (default); Llama 3.3 for eligible enterprise accounts only | Chat, File Edit, Code Run |
 | Ollama | Local Models (Llama 3.3, Qwen Coder, DeepSeek R1) | Chat, File Edit, Code Run (Local, Offline) |
@@ -142,7 +200,7 @@ See [research and prior art](docs/handoff-research.md) for the differentiation r
 
 thwip auto-detects existing API keys from environment variables and existing agent configs (`~/.claude.json`, `~/.gemini/config.json`). Configuration can also be set manually:
 
-Installed apps, CLI sign-ins, and API access are separate. thwip can report a detected Claude, Gemini, or Codex CLI login, but the current SDK adapters require a provider API key. A ChatGPT, Claude, or Google subscription does not automatically provide a reusable third-party API key. Ollama needs no key when its local server is running.
+Installed CLI sign-ins and API access are separate paths. A signed-in Codex, Claude Code, or Antigravity CLI is used directly through its own protocol (see above). The direct SDK adapters for Anthropic, Google, OpenAI, DeepSeek, Groq, and OpenRouter require a provider API key. Ollama needs no key when its local server is running.
 
 ```toml
 [defaults]

thwip_cli-1.5.0/docs/verification.md

@@ -0,0 +1,62 @@
+# Verification status
+
+Verified locally on 2026-09-24 for v1.5.0. The Python suite
+passes 240 offline tests. Exhaustive behavior across every provider and
+configuration has not been established.
+
+## Native CLI connections (2026-09-24)
+
+Live checks were run on macOS through a pseudo-terminal driving the real REPL with
+the installed Codex CLI 0.152.1, Claude Code 2.1.281, and Antigravity CLI 1.2.8,
+each using its existing sign-in. No API keys were configured.
+
+| Flow | Result |
+| --- | --- |
+| Startup discovery | All three CLIs connected; live model lists shown (Codex 4 models, Antigravity 14, Claude aliases) |
+| Chat turn per provider | Claude Code, Codex, and Antigravity each answered; text streamed into the Live view |
+| Context across `/switch` | Codex and Antigravity both recalled the answer given by the previous provider |
+| Codex approval request | A write command outside the read-only sandbox produced a permission prompt; denial left the workspace unchanged |
+| Ctrl+C during a response | Turn cancelled, child process terminated, REPL continued, unanswered message removed |
+| Ctrl+C at a Codex permission prompt | Turn cancelled, no file created, no leftover process, REPL continued |
+| Usage-limit failover | With a test-only shim making Codex report "You've hit your usage limit", the real REPL showed the alternatives, switched to Claude Code on `1`, retried the message, and answered; history held one clean pair |
+| Parity commands | Live REPL run: `!git log`, `/model` picker, `@file` mention answered by Codex, `/compact` summary, `/export`, `/copy`, `/diff`, `/new`, `/resume`, `/usage` |
+| Live catalogs | OpenRouter public list fetched live (459 models with context and pricing); other providers covered by recorded-payload tests because no keys are present here |
+| `/session save` and `/session load` | Session with a native provider saved and reloaded in a fresh run |
+| `/models`, `/models <provider>`, `/models <tier>` | Live catalogs listed with `CLI account` in place of API pricing |
+| `thwip --version`, `--help`, `--project` | Handled without starting the REPL; invalid project exits with code 2 |
+| `/limits` and `/status` usage windows | Codex and Claude Code account windows (5h, 7d) displayed with reset times after live turns |
+| Leftover processes | None after each run |
+
+The defect that blocked the previous attempt was the Codex sandbox value: the
+adapter sent `readOnly` and Codex rejected `thread/start` with an invalid-request
+error. The protocol enum is `read-only`. A regression test now checks the request.
+
+Remaining limitations: the Antigravity CLI showed intermittent network resets to
+Google's backend during testing, which surface as turn errors; Claude Code's model
+aliases are a curated list because the CLI exposes no model listing; native usage
+limit failover was observed live only through an injected limit, not a real provider cap; the real Gemini
+CLI ACP path is covered by mocked tests only because it is not installed here.
+
+| Area | Evidence | Remaining limitation |
+| --- | --- | --- |
+| Commands and aliases | Offline command smoke tests, invalid input cases | Most smoke tests check exceptions, not all rendered content |
+| Sessions | Save/load, separate fresh conversations, malformed metadata, permissions, project rebinding | Concurrent writes to the same explicitly named session are not coordinated |
+| Provider switching and handoff | All seven provider catalogs, portable history, bounded failover | Live account quotas and model availability unverified |
+| Tool execution | Real temporary-file operations, path containment, process timeout/cancellation, invalid arguments | Shell and code tools retain local user privileges; output capture memory is unbounded |
+| Native Codex launcher | Save-before-launch, consent, flags, missing binary, terminal checks, failures | Mocked process replacement; no conversation transfer |
+| Native CLI connections | Live REPL runs above; mocked protocol tests for approvals, failures, limits, prompt building, discovery parsing | Gemini ACP path mocked only; live limit failover not observed |
+| Provider responses | Mocked native tool continuations; DeepSeek/Groq/OpenRouter streaming, usage-only chunks, 429/500 errors and serialized tool arguments | Other streaming and error branches still have coverage gaps |
+| Display/config/auth | Configuration validation, display settings, credential boundaries, short-key masking | No full terminal/platform matrix |
+| Usage | Atomic writes, malformed records, valid totals | Unknown catalog pricing may appear as zero estimated cost |
+| Website | Production build and deterministic demo completion/replay test | Real browser, layout, clipboard, keyboard and accessibility checks remain incomplete |
+| Dependencies | npm audit: zero advisories; Python installed-dependency audit: none found | Python audit skipped legacy local `thwip 1.0.0` metadata |
+| Packaging | Wheel/source build and metadata checks | Publication is separately verified through the release workflow |
+
+The Python suite measured 69% statement coverage with 160 passing tests before
+the final credential-masking tests were added. Coverage is diagnostic evidence,
+not proof that every feature works. The website test uses a minimal DOM stand-in
+and controlled timers, not a browser.
+
+This pass fixed default-session save collisions, malformed session/message
+metadata acceptance, tool-argument display crashes, Rich markup interpretation
+in action output, and short-key masking leakage.

{thwip_cli-1.3.0 → thwip_cli-1.5.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "thwip-cli"
-version = "1.3.0"
+version = "1.5.0"
 description = "Universal coding agent multiplexer: detect, switch, and route between AI coding agents seamlessly"
 readme = "README.md"
 license = "MIT"

{thwip_cli-1.3.0 → thwip_cli-1.5.0}/tests/test_audit_regressions.py

@@ -6,7 +6,7 @@ import pytest
 from rich.console import Console
 
 from thwip.agents import AgentRegistry
-from thwip.agents.base import AgentDone, Capability, LimitHit, LimitStatus, TextDelta
+from thwip.agents.base import AgentDone, Capability, LimitHit, LimitStatus, ModelInfo, TextDelta
 from thwip.cli import ThwipCLI
 from thwip.config import ThwipConfig, get_usage_path
 from thwip.limits import UsageTracker
@@ -20,6 +20,9 @@ def cli(tmp_path, monkeypatch):
     cli = ThwipCLI.__new__(ThwipCLI)
     cli.config = ThwipConfig(project=str(tmp_path), auto_save=False)
     cli.registry = AgentRegistry(cli.config)
+    async def no_native_discovery(project):
+        return None
+    monkeypatch.setattr(cli.registry, 'connect_native_agents', no_native_discovery)
     for a in cli.registry.list_agents():
         monkeypatch.setattr(a, 'is_installed', lambda: True)
         monkeypatch.setattr(a, 'is_configured', lambda: False)
@@ -162,3 +165,100 @@ async def test_failover_does_not_retry_already_failed_provider(cli, monkeypatch)
     cli.config.limits.auto_switch = True
     await cli.process_user_message('hello')
     assert len(attempts) <= len(agents), f'Repeated failed providers: {attempts}'
+
+
+def test_main_handles_version_and_help_without_starting_the_repl(capsys):
+    from thwip import __version__
+    from thwip import cli as cli_module
+
+    with pytest.raises(SystemExit) as exit_info:
+        cli_module.main(['--version'])
+    assert exit_info.value.code == 0 and f'thwip {__version__}' in capsys.readouterr().out
+    with pytest.raises(SystemExit) as exit_info:
+        cli_module.main(['--help'])
+    assert exit_info.value.code == 0 and '--project' in capsys.readouterr().out
+    with pytest.raises(SystemExit) as exit_info:
+        cli_module.main(['--project', '/definitely/missing/dir'])
+    assert exit_info.value.code == 2
+
+
+@pytest.mark.asyncio
+async def test_failed_turn_removes_unanswered_user_message(cli, monkeypatch):
+    class Broken:
+        name = 'openai'
+        display_name = 'Broken'
+        company = 'OpenAI'
+        native_tools = True
+        project = '.'
+        def is_configured(self):
+            return True
+        def is_installed(self):
+            return True
+        def get_capabilities_for_model(self, model):
+            return set()
+        async def chat(self, **kwargs):
+            raise RuntimeError('Native CLI rejected thread/start')
+            yield
+    cli.current_agent = Broken()
+    cli.session.current_agent = 'openai'
+    await cli.process_user_message('hello')
+    assert cli.session.messages == []
+
+
+@pytest.mark.asyncio
+async def test_ctrl_c_at_native_permission_prompt_cancels_turn_and_closes_adapter(cli, monkeypatch):
+    from thwip.agents.base import NativePermission
+    from thwip.cli import TurnInterrupted
+
+    closed = []
+
+    class NativeAsking:
+        name = 'openai'
+        display_name = 'Native'
+        company = 'OpenAI'
+        native_tools = True
+        project = '.'
+        def is_configured(self):
+            return True
+        def is_installed(self):
+            return True
+        def get_capabilities_for_model(self, model):
+            return set()
+        async def chat(self, **kwargs):
+            try:
+                yield NativePermission('run something')
+                yield TextDelta(content='never reached')
+            finally:
+                closed.append(True)
+
+    async def interrupted(self, question):
+        raise TurnInterrupted
+
+    monkeypatch.setattr(ThwipCLI, '_ask_yes_no', interrupted)
+    cli.current_agent = NativeAsking()
+    cli.session.current_agent = 'openai'
+    await cli._run_interruptible(cli.process_user_message('hello'))
+    assert cli.session.messages == []
+    assert closed == [True]
+
+
+@pytest.mark.asyncio
+async def test_failover_chain_model_must_be_listed_by_provider(cli, monkeypatch):
+    """A chain entry like claude/claude-opus-5 must not force an unlisted model onto a native adapter."""
+    from thwip.agents.native_print import PrintAgent
+
+    native = PrintAgent('claude', '.')
+    native.ready = True
+    native.available_models = [ModelInfo(id='fable', name='Fable', is_default=True)]
+    monkeypatch.setattr(native, 'is_installed', lambda: True)
+    cli.registry._agents['claude'] = native
+    cli.config.fallback.chain = ['claude/claude-opus-5']
+    switched = []
+
+    async def fake_switch(name, model=''):
+        switched.append((name, model))
+    monkeypatch.setattr(cli, 'cmd_switch', fake_switch)
+    monkeypatch.setattr('builtins.input', lambda *args: '1')
+    cli.current_agent = cli.registry.get_agent('openai')
+    await cli.handle_limit_failover(LimitHit(error_type=LimitStatus.QUOTA_EXHAUSTED, message='usage limit'), {'openai'})
+    assert switched == [('claude', 'fable')]