fix: make the fully-local (no API key) path work — PROXY_PORT, --provider ollama, proxy base URL, ONNX model paths

[vidaunited]

Fixes five defects that together make agentic-flow unusable for a fully local,
no-API-key setup. Each commit is atomic and maps to one issue.

Commit	Issue	Defect
5273a11	#223	PROXY_PORT honoured on the bind but not on the dial
a07574d	#224	--provider ollama accepted and then silently ignored
f0cc1ea	#225	runStandaloneProxy drops ANTHROPIC_PROXY_BASE_URL
bb3f2f5	#226	ONNX model paths resolved under process.cwd()
2d2d24a	#227	ONNX downloader and readers resolve different paths

They are in one PR because three of the five touch src/cli-proxy.ts and
separate PRs would conflict on merge. Happy to split per issue if you prefer —
say the word and I'll open five.

---

#223 — PROXY_PORT on the dial

cli-proxy.ts read PROXY_PORT when starting the proxy but claudeAgentDirect.ts
hardcoded http://localhost:3000 in three places, so setting PROXY_PORT moved the
listener and left the client dialling the old port. This is a regression of #81.

Also fixes the ONNX sibling at line 58 (ONNX_PROXY_PORT, default 3001), which had
the same shape.

Verified: with :3000 deliberately held by another process, PROXY_PORT=3999
now completes a request end to end. Before the change the same invocation failed
ECONNREFUSED 127.0.0.1:3000.

#224 — --provider ollama

--provider ollama parsed without error, then fell through every shouldUseX()
guard to the Anthropic path and demanded ANTHROPIC_API_KEY. There was no code
path to a local Ollama at all.

Ollama already serves an OpenAI-compatible /v1/chat/completions, so this needs no
new proxy class — AnthropicToOpenRouterProxy is reused with
openrouterBaseUrl: ${host}/v1 and a placeholder key (Ollama ignores auth).
9 edits: the guard, the branch, the launcher, the key check, the error text, the
display line and the help text.

Verified: --provider ollama --model qwen2.5-coder:7b with no API key set at
all, asked to echo a nonsense sentinel token, returned it exactly 5 times out
of 5. The sentinel was chosen to have no plausible alternate spelling after a
first attempt used a real word and the model "corrected" it.

#225 — openrouterBaseUrl in the standalone proxy

runStandaloneProxy() constructed the proxy without passing openrouterBaseUrl,
so ANTHROPIC_PROXY_BASE_URL was silently ignored in exactly the mode where a
user is most likely to set it.

#226 / #227 — ONNX model paths

model-downloader.ts wrote the model under join(process.cwd(), '.agentic-flow', ...)
while six reader sites each rebuilt their own path — some relative to cwd, some
not. Running the CLI from a different directory silently re-downloaded, and the
reader could look somewhere the writer had never written.

#226 exports MODEL_ROOT / PHI4_MODEL_PATH / PHI4_MODEL_DATA_PATH rooted at
~/.agentic-flow/models (overridable via AGENTIC_FLOW_MODEL_DIR).
#227 points all six readers at the exported constant, so writer and readers cannot
diverge again.

---

Verification notes, including the limits

• Behaviour was verified against the built 2.1.2 dist/ with the equivalent
  edits applied, not against a fresh npm run build of this branch — the clone has
  no node_modules and this repo's install is large. The TypeScript here is the
  same change, typecheck-clean, but the built artefact was not re-verified from
  this branch and I'd rather say so than imply otherwise.
• Each commit typechecks with tsc --noEmit --skipLibCheck. Zero TS1xxx syntax
  errors introduced. Two pre-existing diagnostics (TS2591, TS18048) are
  unchanged — confirmed by stashing the branch and re-running: 2 before, 2 after.
• For --provider ollama is unimplemented in the agent path and fails with "ANTHROPIC_API_KEY is required" #224 the discriminator between "the local path ran" and "it fell through to
  Anthropic" is the error shape, not the exit code: before the change, 7 runs
  produced proxy_error and 0 produced a completion; after, 0 proxy_error and
  the completions above. ECONNREFUSED went 2 → 0 for PROXY_PORT is documented in --help but read nowhere in 2.1.2 (regression of #81) #223 on the same basis.
• The edits were applied and reverted round-trip; the reverted tree was
  byte-identical to the original.

Tested on macOS 26.6.1 (arm64), Node v22.23.0, Ollama 0.32.5 with qwen2.5-coder:7b.