# VehicleHelper (aiguide_0328): For AI agents

This page needs no authentication and contains no secrets.

## 1. Get a token
- Every other `/api/*` route needs `Authorization: Bearer <token>`. Missing token = HTTP 401, wrong token = HTTP 403.
- The token is shown to a logged-in human at: web UI > **AI Operations** > **Skills & History** > **API Token**. Ask the machine's owner for it.
- Fresh installs use `123456`. Default token still accepted here: **yes**.

## 2. Read the full guide (needs the token)
```
curl -H "Authorization: Bearer <token>" http://<host>:<port>/api/ai/help/read-skills
```
It covers the shared terminal, screenshots/mouse/keyboard, the file API, proxy, crash diagnosis and artifacts.

## 3. Five calls to start
```
POST /api/ai/terminal/reset                      start the shared terminal
POST /api/ai/terminal/input   {"Input":"dir"}  type text (does NOT run it)
POST /api/ai/terminal/sendkey {"Key":"Enter"}  run it
GET  /api/ai/terminal/output                     read the screen (this is the result)
POST /api/ai/files/list       {"Path":"C:\\"}  list a folder
```

## Rules
- The terminal is shared with a human watching it; send one command at a time and read the screen before the next.
- Every AI call, file uploads and downloads included, is recorded in **AI Operations > Skills & History** (last 100).
- Never paste the token, or a URL containing `?token=`, into logs, transcripts or prompts.