@chojs23/concord 2.1.13 → 2.2.0

package/CHANGELOG.md

@@ -2,7 +2,21 @@
 
 All notable changes to this project will be documented in this file.
 
-## [2.1.13] - 2026-06-08
+## [2.2.0] - 2026-06-07
+
+Concord save token in system keychain and use it for authentication, so you may need to re-login after this update.
+
+### Documentation
+
+- Update homebrew installation by @chojs23
+- Update image by @chojs23
+
+### Features
+
+- Wrap message text at word boundaries (#174) in [#174](https://github.com/chojs23/concord/pull/174) by @chojs23
+- Use system keychain and move ui state to XDG_STATE_HOME (#173) in [#173](https://github.com/chojs23/concord/pull/173) by @chojs23
+
+## [2.1.13] - 2026-06-07
 
 ### Bug Fixes
 
@@ -707,9 +721,18 @@ All notable changes to this project will be documented in this file.
 
 ### Bug Fixes
 
-- _(flake)_ Use crane (#4) in [#4](https://github.com/chojs23/concord/pull/4) by @M4jor-Tom
 - Keep original image width:height ratio (#6) in [#6](https://github.com/chojs23/concord/pull/6) by @chojs23
 
+### Cd
+
+- Chain crates publish after release by @chojs23
+
+## [1.1.0] - 2026-05-09
+
+### Bug Fixes
+
+- _(flake)_ Use crane (#4) in [#4](https://github.com/chojs23/concord/pull/4) by @M4jor-Tom
+
 ### Documentation
 
 - Add CONTRIBUTING.md by @chojs23
@@ -724,10 +747,6 @@ All notable changes to this project will be documented in this file.
 
 - Enable generated github release notes by @chojs23
 
-### Cd
-
-- Chain crates publish after release by @chojs23
-
 ### New Contributors
 
 - @M4jor-Tom made their first contribution in [#4](https://github.com/chojs23/concord/pull/4)

package/README.md

@@ -20,6 +20,12 @@ Concord is a feature-rich TUI (terminal user interface) client for Discord, writ
 
 ### Homebrew
 
+```sh
+brew install concord
+```
+
+Or with the tap for the latest version:
+
 ```sh
 brew install chojs23/tap/concord
 ```
@@ -40,7 +46,9 @@ The npm package installs a prebuilt binary from the GitHub Release artifacts.
 
 ### Cargo
 
-Install native audio dependencies first. On macOS with Homebrew:
+Install native dependencies first.
+
+On macOS with Homebrew:
 
 ```sh
 brew install opus pkg-config
@@ -58,12 +66,6 @@ On Debian or Ubuntu:
 sudo apt install libopus-dev libasound2-dev pkg-config
 ```
 
-On macOS with Homebrew:
-
-```sh
-brew install opus pkg-config
-```
-
 ```sh
 cargo install concord --locked
 ```
@@ -162,7 +164,9 @@ aplay -D pulse /usr/share/sounds/alsa/Front_Center.wav
 
 Email and QR code logins may trigger a CAPTCHA challenge on Discord's side. We cannot solve that, so I strongly recommend using token authentication.
 
-Tokens are saved under Concord's config directory in plain text. See the Security section below for details.
+By default, tokens are saved in the system keychain when available. In the
+default `auto` mode, Concord falls back to its state directory when keychain
+storage is unavailable. See the Security section below for details.
 
 ### Guilds & Channels
 
@@ -274,7 +278,7 @@ With default vim-style navigation:
 | `/`                                       | Filter Guilds/Channels, search Messages/Members |
 | `Space`                                   | Open leader shortcut window                     |
 | `i`                                       | Text insert mode                                |
-| `Esc`                                     | Close popup, cancel mode, or go back            |
+| `Esc` / `q`                               | Close popup, cancel mode, or go back            |
 | `q`                                       | Quit Concord                                    |
 
 `Ctrl+n` and `Ctrl+p` are fixed row movement keys. The default `j` and `k`
@@ -367,14 +371,14 @@ Voice commands:
 You can paste copied files into the composer to attach them. Pending uploads
 are shown above the input before sending.
 
-| Shortcut                   | Action            | Description                                                      |
-| -------------------------- | ----------------- | ---------------------------------------------------------------- |
-| `Ctrl+v`                   | paste clipboard   | Attach copied files or images when present, otherwise paste text |
-| `Ctrl+e`                   | open $EDITOR      | Open $EDITOR on the current draft for long editing               |
-| `Ctrl+c`                   | clear             | Clear current draft                                              |
-| `Ctrl+Left`/ `Ctrl+Right`  | Jump word         | Jump the cursor by word                                          |
-| `Ctrl+Backspace`/ `Ctrl+w` | Delete word       | Delete the word before the cursor                                |
-| `Delete`                   | Detach attachment | Removes the last pending attachment                              |
+| Shortcut                                     | Action            | Description                                                      |
+| -------------------------------------------- | ----------------- | ---------------------------------------------------------------- |
+| `Ctrl+v`                                     | paste clipboard   | Attach copied files or images when present, otherwise paste text |
+| `Ctrl+e`                                     | open $EDITOR      | Open $EDITOR on the current draft for long editing               |
+| `Ctrl+c`                                     | clear             | Clear current draft                                              |
+| `Ctrl+Left`/ `Ctrl+Right`                    | Jump word         | Jump the cursor by word                                          |
+| `Alt+Backspace`, `Ctrl+Backspace` / `Ctrl+w` | Delete word       | Delete the word before the cursor                                |
+| `Delete`                                     | Detach attachment | Removes the last pending attachment                              |
 
 #### Mention picker
 
@@ -407,6 +411,13 @@ Otherwise it uses the platform config directory. The usual fallback is
 matching files under `~/Library/Application Support/concord/` on macOS, and the
 roaming AppData config directory on Windows.
 
+Local UI state and plaintext fallback credentials are stored under Concord's
+state directory instead. If `XDG_STATE_HOME` is set, Concord uses
+`$XDG_STATE_HOME/concord/state.toml` and
+`$XDG_STATE_HOME/concord/credentials.toml`. Otherwise it uses
+`~/.local/state/concord/state.toml` and
+`~/.local/state/concord/credentials.toml`.
+
 You can change some configuration from the in-app Options menu, and Concord saves them back
 to `config.toml`. Key settings are read from `keymap.toml`.
 
@@ -437,6 +448,11 @@ circular_avatars = false
 # Send custom emoji your account cannot use directly as image links.
 emojis_as_links = false
 
+[credentials]
+# Credential storage: auto, keychain, or plain.
+# auto tries the system keychain first and falls back to the state file.
+store = "auto"
+
 [notifications]
 # Show desktop notifications for Discord messages that pass notification rules.
 desktop_notifications = true
@@ -483,6 +499,12 @@ voice_output_volume = 100
 This setting only applies to attachment, embed, and attachment viewer previews.
 Avatars and custom emoji keep their separate small-image behavior.
 
+`credentials.store` supports these values:
+
+- `auto`: try the system keychain first, then fall back to the state-file credential store.
+- `keychain`: use only the system keychain. If keychain storage is unavailable, the token is not saved.
+- `plain`: use only the plain-text state-file credential store.
+
 <details>
 <summary>Default keymap config</summary>
 
@@ -491,6 +513,7 @@ Avatars and custom emoji keep their separate small-image behavior.
 leader = "space"
 StartComposer = "i"
 OpenPaneFilter = "/"
+ClosePopup = "q"
 FocusGuildPane = "1"
 FocusChannelPane = "2"
 FocusMessagePane = "3"
@@ -565,13 +588,13 @@ ShowProfile = "p"
 [keymap.composer]
 OpenEditor = "<C-e>"
 PasteClipboard = "<C-v>"
-InsertNewline = { keys = ["<S-enter>", "<C-enter>", "<A-enter>"] }
+InsertNewline = { keys = ["<C-j>", "<S-enter>", "<C-enter>", "<A-enter>"] }
 Submit = "enter"
 Close = "esc"
 ClearInput = "<C-c>"
 RemoveLastAttachment = "delete"
 DeletePreviousChar = "backspace"
-DeletePreviousWord = { keys = ["<C-backspace>", "<C-w>"] }
+DeletePreviousWord = { keys = ["<A-backspace>", "<C-backspace>", "<C-w>"] }
 MoveCursorUp = "up"
 MoveCursorDown = "down"
 MoveCursorWordLeft = "<C-left>"
@@ -632,10 +655,10 @@ No. If Discord requires a CAPTCHA during login, use token login instead.
 
 ## Security
 
-- Tokens are stored as **plain text** in Concord's config directory. So keep that file secure and do not share it. You can use the token from that file to log in to the official Discord client, so treat it like a password.
-- On Unix, the credential's parent directory is created with `0700` and the credential file with `0600` permissions.
-- All concord state (config, keymap, credential, log) lives under a single `concord/` directory inside `XDG_CONFIG_HOME` when it is set, or inside the platform config directory otherwise.
-- No system keychain integration yet.
+- By default, tokens are stored in the system keychain when available.
+- On Linux, keychain storage uses Secret Service when a compatible service is available.
+- In `credentials.store = "auto"`, Concord falls back to **plain text** credentials under Concord's state directory when keychain storage is unavailable. In `keychain` mode, Concord does not fall back to plain storage. Keep fallback credential files secure and do not share them. You can use a token from that file to log in to the official Discord client, so treat it like a password.
+- On Unix, the fallback credential's parent directory is created with `0700` and the credential file with `0600` permissions.
 
 ## Contributing
 

package/npm-shrinkwrap.json

@@ -23,7 +23,7 @@
       "hasInstallScript": true,
       "license": "GPL-3.0-only",
       "name": "@chojs23/concord",
-      "version": "2.1.13"
+      "version": "2.2.0"
     },
     "node_modules/@isaacs/cliui": {
       "engines": {
@@ -542,5 +542,5 @@
     }
   },
   "requires": true,
-  "version": "2.1.13"
+  "version": "2.2.0"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "artifactDownloadUrls": [
-    "https://github.com/chojs23/concord/releases/download/v2.1.13"
+    "https://github.com/chojs23/concord/releases/download/v2.2.0"
   ],
   "bin": {
     "concord": "run-concord.js"
@@ -93,7 +93,7 @@
       "zipExt": ".tar.xz"
     }
   },
-  "version": "2.1.13",
+  "version": "2.2.0",
   "volta": {
     "node": "18.14.1",
     "npm": "9.5.0"