Merge branch 'master' of https://github.com/Graphene-Lab/AgentBridge

Author: Andrea-Bruno

AgentTools.cs

@@ -46,7 +46,7 @@ public static readonly (string Id, string[] Tools)[] Presets =
         ("spreadsheet-files", new[] { "FileTool", "SpreadsheetTool", "GitTool" }),
         ("email-agent", new[] { "EMailTool" }),
         ("office-files", new[] { "FileTool", "OfficeTool", "GitTool" }),
-        ("multi-files", new[] { "FileTool", "WebTool", "DocumentTool", "SpreadsheetTool", "EMailTool", "GitTool" }),
+        ("multi-files", new[] { "FileTool", "WebTool", "DocumentTool", "SpreadsheetTool", "PresentationTool", "EMailTool", "GitTool" }),
     };
 
     /// <summary>Agent-set ids exposed as models: the static presets plus the dynamic

Tui.cs

@@ -4020,15 +4020,26 @@ private void ShowProvidersPanel()
             };
             dlg.Add(activeModelLabel);
 
+            // API key of the provider shown in the dropdown, editable right here (issue #11:
+            // the key was only reachable through the provider's Edit dialog, so users could
+            // not find where to paste it). The field follows the dropdown — switching the
+            // provider loads that provider's current key — and Save writes the edited value
+            // back through the single key-mutation path (ProviderConfigs.SetApiKey). Local
+            // providers simply leave it empty. The field is added to the view tree AFTER the
+            // Add/Edit/Remove buttons so the keyboard focus order (dropdown → list → Add →
+            // Edit) that the setup tests rely on is preserved.
+            dlg.Add(new Label { Text = Dictionary.ProviderApiKey, X = 1, Y = 2, Width = 18 });
+            var apiKeyField = new TextField { Text = "", X = 20, Y = 2, Width = 44, Secret = true };
+
             // Validation message shown next to the dropdown when no provider is selected.
             var validationLabel = new Label
             {
-                Text = "", X = 1, Y = 2, Width = Dim.Fill() - 2,
+                Text = "", X = 1, Y = 3, Width = Dim.Fill() - 2,
                 SchemeName = "Hint",
             };
             dlg.Add(validationLabel);
 
-            int y = 3;
+            int y = 4;
             dlg.Add(new Label { Text = Dictionary.SetupConfiguredProviders, X = 1, Y = y, Width = Dim.Fill() });
             y++;
             providersList.X = 1; providersList.Y = y; providersList.Width = 62; providersList.Height = 6;
@@ -4038,10 +4049,11 @@ private void ShowProvidersPanel()
             var editBtn = new Button { Text = Dictionary.SetupEdit, X = Pos.Right(addBtn) + 1, Y = y };
             var removeBtn = new Button { Text = Dictionary.SetupRemove, X = Pos.Right(editBtn) + 1, Y = y };
             dlg.Add(addBtn, editBtn, removeBtn);
+            dlg.Add(apiKeyField);
 
             // The list mirrors the dropdown selection with a single "(attivo)" marker — the
             // user sees exactly one active provider, no redundant "default" tag.
-            providerDropdown.ValueChanged += (_, _) => RefreshProviderList();
+            providerDropdown.ValueChanged += (_, _) => { RefreshProviderList(); LoadApiKeyForSelection(); };
             void RefreshProviderList()
             {
                 providersList.Source = new ListWrapper<string>(new ObservableCollection<string>(
@@ -4075,6 +4087,17 @@ void RefreshProviders()
                         ? _provider
                         : ProviderConfigs.Default.ProviderName;
                 RefreshProviderList();
+                LoadApiKeyForSelection();
+            }
+            // Loads the selected provider's current API key into the panel's key field so the
+            // user can see and edit it without opening the provider's Edit dialog (issue #11).
+            void LoadApiKeyForSelection()
+            {
+                var name = providerDropdown.Text;
+                apiKeyField.Text = !string.IsNullOrWhiteSpace(name)
+                    && ProviderConfigs.TryGet(name, out var cfg) && cfg != null
+                    ? cfg.ApiKey ?? ""
+                    : "";
             }
             RefreshProviders();
 
@@ -4141,6 +4164,15 @@ void RefreshProviders()
                     return;
                 }
                 validationLabel.Text = "";
+                // Persist an edited API key for the selected provider (issue #11). Written
+                // only when the value actually changed, so opening and saving without
+                // touching the key never rewrites providers.json for nothing.
+                if (ProviderConfigs.TryGet(chosen, out var chosenCfg) && chosenCfg != null)
+                {
+                    var newKey = (apiKeyField.Text ?? "").Trim();
+                    if (!string.Equals(newKey, chosenCfg.ApiKey ?? "", StringComparison.Ordinal))
+                        ProviderConfigs.SetApiKey(chosen, newKey, persist: true);
+                }
                 // The dropdown selection is the definitive active provider: persist it as the
                 // default (new chats start from it) and adopt it for the running process.
                 ProviderConfigs.SetDefault(chosen, persist: true);

docs/MANUAL.md

@@ -53,6 +53,13 @@ On Linux/macOS, make the executable runnable:
 chmod +x agent
 ```
 
+> **Windows SmartScreen / Smart App Control.** The release binaries are not yet code-signed, so
+> Windows may warn or block `agent.exe` on first run. For SmartScreen use **More info → Run
+> anyway**, or right-click the file → **Properties → Unblock**. Smart App Control (Windows 11)
+> has no per-app override and must be turned off in Windows Security. See
+> [Getting started → If Windows blocks the app the first time](guide/01-Getting-Started.md) for
+> the full steps. Code signing is on the roadmap.
+
 **From source (developers):**
 
 ```bash
@@ -305,6 +312,15 @@ see [section 6](#6-connect-a-client-to-localhost)):
 > server reports them unavailable (the UI shows it, the API returns 501 and
 > `GET /v1/control` lists exactly what is available).
 
+> **Creating documents, spreadsheets, presentations and PDFs.** The `default-agent` set
+> carries only the everyday tools (files, web, versioning) and has **no** document-creation
+> tool, so a request for a `.docx`/`.xlsx`/`.pptx`/PDF there returns "no tool available".
+> Switch to a file-capable set for the conversation: `/tools multi-files` (Word, Excel,
+> browser slide decks and PDF reports together), `/tools document-files` (documents + PDF
+> reports), `/tools spreadsheet-files` (Excel), or `/tools office-files` for genuine
+> Microsoft Office files (real `.docx`/`.xlsx`/`.pptx`). See
+> [Creating documents](guide/05-Creating-Documents.md).
+
 ---
 
 ## 6. Connect a client to localhost

docs/guide/01-Getting-Started.md

@@ -14,6 +14,18 @@ After the download finishes, extract the archive into a folder of your choice. O
 
 When AgentBridge starts, you will see a full-screen chat window, similar to a messaging application. At the same time, a small local server starts on your machine that other programs can use to speak with the same assistant. You do not need to worry about this detail, because everything works together automatically.
 
+## If Windows blocks the app the first time
+
+Windows has a built-in protection that watches programs you download from the internet. Because AgentBridge is not yet digitally signed with a commercial certificate (we are still arranging one), Windows may stop it the first time you open it and show a warning. This is normal for newer software that is not signed, and it does not mean the program is harmful. AgentBridge is open source, so anyone can read exactly what it does. Here is how to get past the warning.
+
+**The blue "Windows protected your PC" window (SmartScreen).** This is the most common case. The window says that SmartScreen prevented an unrecognized app from starting. Click the small **More info** link in that window, and a **Run anyway** button appears. Click it and the program starts. You only need to do this once.
+
+**Unblock the file instead.** If you prefer, right-click the file named agent.exe, choose **Properties**, and at the bottom of the General tab tick the **Unblock** checkbox, then click **Apply** and **OK**. This tells Windows the file is trusted, so it stops interrupting you. You can also do it for the whole folder from PowerShell with `Unblock-File` on the files inside it.
+
+**"Smart App Control blocked an app" (Windows 11).** Smart App Control is a stricter protection that some Windows 11 computers have turned on. Unlike SmartScreen, it blocks every unsigned program and does not offer a "Run anyway" button for a single app. To run AgentBridge you need to turn Smart App Control off: open the Start menu, search for **Windows Security**, go to **App & browser control**, open **Smart App Control settings**, and choose **Off**. Please read this before you do it: once Smart App Control is turned off it cannot be turned back on again without reinstalling Windows, so only turn it off if you trust where you downloaded the program from. Downloading AgentBridge from the official download page or the official GitHub releases page is the trusted source.
+
+If you would rather not change any Windows setting, the one-line installer described above runs the download and setup for you and is the smoothest way to get going on Windows.
+
 ## The first start
 
 The first time you start AgentBridge, the assistant begins reading your documents folder in the background. If you have a large collection of files, this first indexing can take a few minutes, but you can start chatting right away while it works. From that moment on, the assistant can answer questions using the information found in your own files, instead of guessing.

docs/guide/02-Choosing-Your-AI.md

@@ -8,7 +8,7 @@ Open the chat window and type /providers, or use the menu Settings and then LLM
 
 ## API keys
 
-Most cloud providers require a key that identifies you. When you add a cloud provider, the window asks for its API key, and the key is hidden while you type. Local providers, which run on your own computer, do not need a key. All your keys are stored on your machine and are never touched by an update.
+Most cloud providers require a key that identifies you. Open the LLM & Provider panel and you will see a "API key" box right under the provider selector: it shows the key of the provider currently chosen in the dropdown, and you can paste or change it there and press Save. Switching the provider in the dropdown loads that provider's own key, so you always edit the right one. The key stays hidden while you type. You can also set it when you add or edit a provider from the list below. Local providers, which run on your own computer, do not need a key, so you can leave the box empty for them. All your keys are stored on your machine and are never touched by an update.
 
 ## Switching at any time
 

docs/guide/05-Creating-Documents.md

@@ -10,6 +10,32 @@ Ask for a Word document and the agent writes the text and lays it out for you. A
 
 For market analysis, financial reports, or any analytical document, the assistant produces accurate PDF reports with professional sources and a level of detail that is hard to match by hand. Just describe the topic and the depth you need, and the report comes back as a finished PDF.
 
+## Turning the document tools on
+
+These abilities come from tools, and the assistant starts with only the everyday ones
+switched on so that it stays quick and light. If you ask for a document, a spreadsheet,
+a presentation or a PDF and it replies that it has no tool for that, it simply means the
+right tool is not active in your current conversation yet. Turn it on with the
+**`/tools`** command: a checklist opens, tick the tool you need, and close it — your choice
+is remembered. If you already know what the conversation is about, name a ready-made
+combination straight after the command.
+
+Which combination to pick:
+
+- **`/tools multi-files`** is the easiest all-round choice. It lets the assistant write
+  Word documents, build spreadsheets with charts, make a slide deck you open in the
+  browser, and produce PDF reports, all in the same conversation.
+- **`/tools document-files`** when you only want documents and PDF reports.
+- **`/tools office-files`** when you need a real PowerPoint file (`.pptx`), a real Word
+  file (`.docx`) or a real Excel file (`.xlsx`) that you will keep editing in Microsoft
+  Office. This is the tool that produces genuine Office files rather than a browser deck.
+- **`/tools all-files`** turns on everything at once.
+
+A note on presentations: the slide decks made in the `multi-files` conversation open in
+your web browser (press F11 for full screen) and look like a real presentation, but they
+are not a `.pptx` file. If you specifically need a `.pptx` you can hand to someone else or
+open in PowerPoint, use `/tools office-files`.
+
 ## A personal style
 
 The assistant remembers the style it used for your documents and keeps it for future work. If you want a different look, you simply ask, and it adjusts the result to your taste.