@kernelonpanic/kitcode 1.0.0-beta → 1.1.1

package/dist/index.js

@@ -62,7 +62,7 @@ var diagnosticsSchema = z.object({
   commands: z.array(z.string().trim().min(1).max(2e4)).max(8).default([])
 });
 var updatesSchema = z.object({
-  checkOnStart: z.boolean().default(false)
+  checkOnStart: z.boolean().default(true)
 });
 var configSchema = z.object({
   version: z.literal(1).default(1),
@@ -658,6 +658,7 @@ import path3 from "path";
 import { randomUUID } from "crypto";
 import { readFile, realpath, rename, rm, writeFile } from "fs/promises";
 import path2 from "path";
+var trustLock = Promise.resolve();
 var emptyTrust = () => ({ version: 1, workspaces: [] });
 async function canonicalWorkspace(cwd) {
   const resolved = await workspaceRootFor(cwd);
@@ -686,6 +687,7 @@ async function revokeWorkspaceTrust(cwd) {
   return workspace;
 }
 async function loadTrust() {
+  await trustLock;
   let parsed;
   try {
     parsed = JSON.parse(await readFile(trustPath, "utf8"));
@@ -702,15 +704,25 @@ async function loadTrust() {
   };
 }
 async function saveTrust(value) {
-  await ensureDir(path2.dirname(trustPath));
-  const temp = `${trustPath}.${randomUUID()}.tmp`;
+  const release = trustLock;
+  let resolveLock;
+  trustLock = new Promise((resolve3) => {
+    resolveLock = resolve3;
+  });
+  await release;
   try {
-    await writeFile(temp, `${JSON.stringify(value, null, 2)}
+    await ensureDir(path2.dirname(trustPath));
+    const temp = `${trustPath}.${randomUUID()}.tmp`;
+    try {
+      await writeFile(temp, `${JSON.stringify(value, null, 2)}
 `, { encoding: "utf8", mode: 384 });
-    await rename(temp, trustPath);
-  } catch (error) {
-    await rm(temp, { force: true });
-    throw error;
+      await rename(temp, trustPath);
+    } catch (error) {
+      await rm(temp, { force: true });
+      throw error;
+    }
+  } finally {
+    resolveLock();
   }
 }
 
@@ -1631,11 +1643,12 @@ function createTurnBudget(limits, resolvePricing = pricingFor) {
         };
       }
       const pricing = resolvePricing(request.modelRef);
-      if (pricing && current.costUsd !== null) {
+      if (current.costUsd !== null) {
         const remainingUsd = limits.maxCostUsdPerTurn - current.costUsd;
-        const inputUsd = estimatedInput * pricing.input / 1e6;
+        const effectivePricing = pricing ?? { input: 3e-3, output: 0.015 };
+        const inputUsd = estimatedInput * effectivePricing.input / 1e6;
         const affordableOutput = Math.floor(
-          (remainingUsd - inputUsd) * 1e6 / pricing.output
+          (remainingUsd - inputUsd) * 1e6 / effectivePricing.output
         );
         outputLimit = Math.min(outputLimit, affordableOutput);
         if (outputLimit < 1) {
@@ -1813,7 +1826,7 @@ function beginCheckpoint(options) {
       lastCheckpointTimestamp = Math.max(Date.now(), lastCheckpointTimestamp + 1);
       const id = `${String(lastCheckpointTimestamp).padStart(13, "0")}-${randomBytes2(4).toString("hex")}`;
       await writeCheckpoint(path5.join(sessionDir, `${id}.json`), stored);
-      await pruneCheckpoints(sessionDir);
+      pruneCheckpoints(sessionDir).catch(() => void 0);
       return { id, paths: entries.map((entry) => entry.path) };
     }
   };
@@ -2315,7 +2328,7 @@ async function isFile2(file) {
 
 // src/core/attachments.ts
 import { execFile } from "child_process";
-import { readFile as readFile6, stat as stat5 } from "fs/promises";
+import { lstat as lstat2, readFile as readFile6, stat as stat5 } from "fs/promises";
 import os2 from "os";
 import path7 from "path";
 import { fileURLToPath } from "url";
@@ -2328,6 +2341,8 @@ var SENSITIVE_AUTO_NAMES = /* @__PURE__ */ new Set([
   ".netrc",
   ".npmrc",
   ".pypirc",
+  ".pgpass",
+  ".my.cnf",
   "auth.json",
   "credentials.json",
   "id_dsa",
@@ -2337,11 +2352,17 @@ var SENSITIVE_AUTO_NAMES = /* @__PURE__ */ new Set([
   "kitcode.json",
   "secret.json",
   "secrets.json",
-  "tokens.json"
+  "tokens.json",
+  "kubeconfig",
+  "service-account.json"
 ]);
-var SENSITIVE_AUTO_EXTENSIONS = /* @__PURE__ */ new Set([".jks", ".key", ".keystore", ".p12", ".pem", ".pfx"]);
+var SENSITIVE_AUTO_EXTENSIONS = /* @__PURE__ */ new Set([".jks", ".key", ".keystore", ".p12", ".pem", ".pfx", ".p8", ".der"]);
 async function loadAttachment(cwd, requestedPath) {
   const resolved = resolveAttachmentPath(cwd, requestedPath);
+  const linkInfo = await lstat2(resolved).catch(() => null);
+  if (linkInfo?.isSymbolicLink()) {
+    throw new Error(`Cannot attach symbolic links: ${path7.basename(resolved)}`);
+  }
   const info = await stat5(resolved).catch((error) => {
     if (error.code === "ENOENT") throw new Error(`Attachment not found: ${resolved}`);
     throw error;
@@ -2352,16 +2373,23 @@ async function loadAttachment(cwd, requestedPath) {
 async function loadAutomaticAttachment(cwd, requestedPath) {
   if (!looksLikeAttachmentPath(requestedPath)) return null;
   const resolved = resolveAttachmentPath(cwd, requestedPath);
-  const info = await stat5(resolved).catch((error) => {
-    if (error.code === "ENOENT" || error.code === "ENOTDIR") return null;
-    throw error;
-  });
-  if (!info?.isFile()) return null;
   if (isSensitiveAutomaticPath(resolved)) {
     throw new Error(
       `For safety, sensitive-looking files must be attached explicitly with /attach: ${path7.basename(resolved)}`
     );
   }
+  if (path7.isAbsolute(resolved)) {
+    const normalized = resolved.toLowerCase();
+    const isProjectFile = normalized.includes(path7.sep + "src" + path7.sep) || normalized.includes(path7.sep + "lib" + path7.sep) || normalized.includes(path7.sep + "app" + path7.sep) || normalized.includes(path7.sep + "test" + path7.sep) || normalized.includes(path7.sep + "tests" + path7.sep) || normalized.includes(path7.sep + "public" + path7.sep) || normalized.includes(path7.sep + "assets" + path7.sep) || normalized.includes(path7.sep + "static" + path7.sep) || normalized.endsWith(".ts") || normalized.endsWith(".js") || normalized.endsWith(".tsx") || normalized.endsWith(".jsx") || normalized.endsWith(".py") || normalized.endsWith(".go") || normalized.endsWith(".rs") || normalized.endsWith(".java") || normalized.endsWith(".c") || normalized.endsWith(".cpp") || normalized.endsWith(".h") || normalized.endsWith(".hpp") || normalized.endsWith(".css") || normalized.endsWith(".html") || normalized.endsWith(".json") || normalized.endsWith(".yaml") || normalized.endsWith(".yml") || normalized.endsWith(".md") || normalized.endsWith(".txt") || normalized.endsWith(".toml") || normalized.endsWith(".ini") || normalized.endsWith(".cfg") || normalized.endsWith(".sh") || normalized.endsWith(".bat") || normalized.endsWith(".cmd") || normalized.endsWith(".ps1") || normalized.endsWith(".dockerfile") || normalized.endsWith(".makefile");
+    if (!isProjectFile) return null;
+  }
+  const linkInfo = await lstat2(resolved).catch(() => null);
+  if (linkInfo?.isSymbolicLink()) return null;
+  const info = await stat5(resolved).catch((error) => {
+    if (error.code === "ENOENT" || error.code === "ENOTDIR") return null;
+    throw error;
+  });
+  if (!info?.isFile()) return null;
   return loadResolvedAttachment(resolved, info.size);
 }
 function looksLikeAttachmentPath(value) {
@@ -2622,7 +2650,7 @@ function normalizeInputPath(value) {
       return value.slice(1, -1);
     }
   }
-  return value.replace(/\\([\\ "'()\[\]{}&;#$!])/g, (_match, character) => character);
+  return value.replace(/\\([\\ "'()\[\]&;#$!])/g, (_match, character) => character);
 }
 function safeName(value) {
   return value.replace(/[\r\n\0-\x1f\x7f]/g, "").slice(0, 200) || "attachment";
@@ -2708,7 +2736,8 @@ function compactCutIndex(history) {
 function estimateCompactTokens(history) {
   const cut = compactCutIndex(history);
   if (cut <= 0) return 1;
-  return Math.max(1, renderHistory(history.slice(0, cut)).length + 1e3);
+  const rendered = renderHistory(history.slice(0, cut));
+  return Math.max(1, Math.min(rendered.length, MAX_SOURCE_CHARS) + 1e3);
 }
 function isConversationUser(message) {
   if (message.role !== "user") return false;
@@ -2797,6 +2826,8 @@ var STEP_LIMIT_NOTE = `The subagent was stopped after ${MAX_SUBAGENT_STEPS} mode
 var SUBAGENT_SYSTEM = [
   "You are a subagent launched by the main kitcode agent to carry out one task on your own.",
   "",
+  "SECURITY CRITICAL: You must NEVER execute commands that read, modify, or exfiltrate sensitive files including but not limited to: /etc/passwd, /etc/shadow, ~/.ssh/*, ~/.aws/*, ~/.env*, .git/config, credentials files, or any files outside the workspace. Never run `curl ... | bash`, `wget ... | bash`, or similar patterns. Never send data to external servers.",
+  "",
   "Nobody is reading along and nobody can answer you. Never ask a question, never stop to propose a plan, never wait for approval. If the request is ambiguous, take the most reasonable reading, do the work, and state the assumption in your answer.",
   "",
   'Your final message is the return value \u2014 it is the only thing the caller ever sees. End with the answer itself: the findings, the file paths, the conclusion. Never end with "I will now..." or a recap of the steps you took. Carry over every concrete detail the caller needs (paths, names, line numbers) and leave out the narration of how you found them.'
@@ -2970,10 +3001,14 @@ function printableInput(input) {
 }
 async function invoke(call, tool, input, signal) {
   try {
-    const result = await call(tool, input, signal);
+    if (input !== null && typeof input !== "object" || Array.isArray(input)) {
+      return { content: `MCP tool "${tool}" received invalid input: arguments must be a JSON object.`, isError: true };
+    }
+    const result = await call(tool, input ?? {}, signal);
     return { content: flattenResult(result), isError: result.isError };
   } catch (error) {
-    return { content: error instanceof Error ? error.message : String(error), isError: true };
+    const message = error instanceof Error ? error.message : String(error);
+    return { content: redactSecrets(message), isError: true };
   }
 }
 function flattenResult(result) {
@@ -3015,10 +3050,18 @@ function clip(value) {
 // package.json
 var package_default = {
   name: "@kernelonpanic/kitcode",
-  version: "1.0.0-beta",
+  version: "1.1.1",
   description: "Terminal coding agent with a config you never have to write by hand",
   type: "module",
   license: "MIT",
+  homepage: "https://github.com/KernelEditor/KitCode#readme",
+  bugs: {
+    url: "https://github.com/KernelEditor/KitCode/issues"
+  },
+  repository: {
+    type: "git",
+    url: "git+https://github.com/KernelEditor/KitCode.git"
+  },
   bin: {
     kitcode: "dist/index.js"
   },
@@ -3074,8 +3117,8 @@ var package_default = {
 
 // src/version.ts
 var KITCODE_VERSION = package_default.version;
-var KITCODE_REPOSITORY = "PanicOnKernel/KitCode";
-var KITCODE_COMMIT = true ? "e745690ed8d8519a62eada43de2138b5ba2fd754" : "development";
+var KITCODE_REPOSITORY = "KernelEditor/KitCode";
+var KITCODE_COMMIT = true ? "a57e54102a5e1ca1e60cec4ee9c629c890d27057" : "development";
 
 // src/mcp/client.ts
 var clientInfo = { name: "kitcode", version: KITCODE_VERSION };
@@ -3099,6 +3142,36 @@ var inheritedEnvKeys = /* @__PURE__ */ new Set([
   "APPDATA",
   "LOCALAPPDATA"
 ]);
+var blockedEnvKeys = /* @__PURE__ */ new Set([
+  "ANTHROPIC_API_KEY",
+  "OPENAI_API_KEY",
+  "AWS_ACCESS_KEY_ID",
+  "AWS_SECRET_ACCESS_KEY",
+  "AWS_SESSION_TOKEN",
+  "GITHUB_TOKEN",
+  "GH_TOKEN",
+  "GIT_TOKEN",
+  "NPM_TOKEN",
+  "PYPI_TOKEN",
+  "TWINE_PASSWORD",
+  "DOCKER_PASSWORD",
+  "DATABASE_URL",
+  "REDIS_URL",
+  "MONGODB_URI",
+  "POSTGRES_PASSWORD",
+  "MYSQL_PASSWORD",
+  "PRIVATE_KEY",
+  "SSH_KEY",
+  "GPG_KEY",
+  "SIGNING_KEY",
+  "COOKIE",
+  "SESSION_SECRET",
+  "JWT_SECRET",
+  "ENCRYPTION_KEY",
+  "MASTER_KEY",
+  "API_KEY",
+  "API_SECRET"
+]);
 function createMcpManager(servers) {
   const serverStates = /* @__PURE__ */ new Map();
   const sessions = /* @__PURE__ */ new Map();
@@ -3245,7 +3318,9 @@ function configuredSecrets(config) {
 function inheritedEnv(source = process.env) {
   const env = {};
   for (const [key, value] of Object.entries(source)) {
-    if (value !== void 0 && inheritedEnvKeys.has(key)) env[key] = value;
+    if (value !== void 0 && inheritedEnvKeys.has(key) && !blockedEnvKeys.has(key)) {
+      env[key] = value;
+    }
   }
   return env;
 }
@@ -4070,7 +4145,7 @@ function isFileEdit(tool) {
 }
 
 // src/tools/edit.ts
-import { readFile as readFile8, stat as stat6, writeFile as writeFile6 } from "fs/promises";
+import { lstat as lstat3, readFile as readFile8, stat as stat6, writeFile as writeFile6 } from "fs/promises";
 var MAX_FILE_BYTES2 = 5e6;
 function countOccurrences(haystack, needle) {
   if (needle === "") return 0;
@@ -4126,6 +4201,10 @@ var editTool = {
     const { path: path14, oldString, newString, replaceAll = false } = input;
     const safe = resolveInside(ctx.cwd, path14);
     if (!safe.ok) return { content: safe.reason, isError: true };
+    const linkInfo = await lstat3(safe.path).catch(() => null);
+    if (linkInfo?.isSymbolicLink()) {
+      return { content: `Cannot edit ${path14}: the path is a symbolic link. Remove the symlink first.`, isError: true };
+    }
     const info = await stat6(safe.path).catch(() => null);
     if (info && info.size > MAX_FILE_BYTES2) {
       return {
@@ -4243,13 +4322,25 @@ var sensitiveNames = /* @__PURE__ */ new Set([
   ".npmrc",
   ".pypirc",
   ".git-credentials",
+  ".netrc",
+  ".pgpass",
+  ".my.cnf",
+  ".docker/config.json",
   "auth.json",
   "credentials",
   "credentials.json",
   "id_rsa",
-  "id_ed25519"
+  "id_ed25519",
+  "id_dsa",
+  "id_ecdsa",
+  "kubeconfig",
+  "known_hosts",
+  "secret.json",
+  "secrets.json",
+  "tokens.json",
+  "service-account.json"
 ]);
-var sensitiveExtensions = /* @__PURE__ */ new Set([".pem", ".key", ".p12", ".pfx"]);
+var sensitiveExtensions = /* @__PURE__ */ new Set([".pem", ".key", ".p12", ".pfx", ".jks", ".keystore", ".p8", ".der"]);
 function isSensitivePath(value) {
   if (typeof value !== "string") return false;
   const normalized = value.replaceAll("\\", "/").toLowerCase();
@@ -4261,7 +4352,7 @@ function isSensitivePath(value) {
 function mentionsSensitivePattern(value) {
   if (typeof value !== "string") return false;
   const lower = value.toLowerCase();
-  return isSensitivePath(lower) || lower.includes(".env") || lower.includes(".npmrc") || lower.includes("auth.json") || /\.(?:pem|key|p12|pfx)(?:$|[^a-z0-9])/.test(lower);
+  return isSensitivePath(lower) || lower.includes(".env") || lower.includes(".npmrc") || lower.includes(".netrc") || lower.includes(".pgpass") || lower.includes("auth.json") || lower.includes("credentials") || lower.includes("kubeconfig") || lower.includes("secret") || lower.includes("tokens.json") || /\.(?:pem|key|p12|pfx|jks|keystore|p8|der)(?:$|[^a-z0-9])/.test(lower);
 }
 
 // src/tools/regex.ts
@@ -4538,7 +4629,7 @@ function toToolSchema(tool) {
 }
 
 // src/tools/write.ts
-import { mkdir as mkdir3, readFile as readFile11, stat as stat9, writeFile as writeFile7 } from "fs/promises";
+import { lstat as lstat4, mkdir as mkdir3, readFile as readFile11, stat as stat9, writeFile as writeFile7 } from "fs/promises";
 import { dirname as dirname2 } from "path";
 var MAX_FILE_BYTES5 = 5e6;
 var writeTool = {
@@ -4589,6 +4680,10 @@ var writeTool = {
     }
     const safe = resolveInside(ctx.cwd, path14);
     if (!safe.ok) return { content: safe.reason, isError: true };
+    const linkInfo = await lstat4(safe.path).catch(() => null);
+    if (linkInfo?.isSymbolicLink()) {
+      return { content: `Cannot write ${path14}: the path is a symbolic link. Remove the symlink first.`, isError: true };
+    }
     const beforeInfo = await stat9(safe.path).catch(() => null);
     if (beforeInfo && beforeInfo.size > MAX_FILE_BYTES5) {
       return {
@@ -5438,6 +5533,28 @@ async function boot(options) {
       }
       return { removed: providerId, wasActive, ...nextModel ? { nextModel } : {} };
     },
+    async changeProviderKey(providerId, newKey) {
+      const provider = config.providers[providerId];
+      if (!provider) throw new Error(`Provider "${providerId}" is not configured.`);
+      const previousKey = auth[providerId];
+      auth[providerId] = newKey;
+      try {
+        const testRegistry = createRegistry(config, auth);
+        await loadModels(testRegistry.get(providerId));
+      } catch (error) {
+        auth[providerId] = previousKey;
+        throw new Error(
+          `Key verification failed for "${providerId}": ${error instanceof Error ? error.message : String(error)}`
+        );
+      }
+      await saveAuth(auth);
+      registry = createRegistry(config, auth);
+      if (parseModelRef(modelRef)?.provider === providerId) {
+        const models = await loadModels(registry.get(providerId));
+        rememberModels(providerId, models);
+        void refreshModelContextWindow();
+      }
+    },
     sessionId: () => session.id,
     async newSession() {
       await persistQueue.catch(() => void 0);
@@ -5744,6 +5861,17 @@ ${lines.join("\n")}` : null;
     startupUpdateCheck: () => startupUpdate,
     async run(history, hooks, signal) {
       syncMcpTools();
+      const runProviderId = parseModelRef(modelRef)?.provider;
+      if (runProviderId) {
+        try {
+          const models = await loadModels(registry.get(runProviderId));
+          rememberModels(runProviderId, models);
+        } catch (error) {
+          warnings.push(
+            `Could not refresh models for "${runProviderId}": ${error instanceof Error ? error.message : String(error)}`
+          );
+        }
+      }
       let requestHistory = history;
       const budget = createTurnBudget(config.budget, resolvePricing);
       const previousContext = runtime.modelContext();
@@ -6037,7 +6165,7 @@ function validateKey(value) {
 import { render } from "ink";
 
 // src/ui/App.tsx
-import { Box as Box12, useApp } from "ink";
+import { Box as Box12, Text as Text12, useApp, useInput as useInput2 } from "ink";
 import { execFile as execFile2, execFileSync as execFileSync2 } from "child_process";
 import { useCallback, useEffect as useEffect2, useMemo as useMemo4, useRef as useRef4, useState as useState5 } from "react";
 
@@ -6079,6 +6207,7 @@ var COMMANDS = [
   { name: "login" },
   { name: "provider" },
   { name: "logout", args: "[provider]" },
+  { name: "key", args: "[provider]" },
   { name: "effort" },
   { name: "thinking" },
   { name: "budget", args: "[tokens]" },
@@ -6166,6 +6295,43 @@ function editDistance(a, b) {
   return previous[b.length] ?? 0;
 }
 
+// src/ui/App.tsx
+import TextInput2 from "ink-text-input";
+
+// src/ui/theme.ts
+import { createContext, useContext } from "react";
+var PRESETS = {
+  purple: "#a78bfa",
+  violet: "#8b5cf6",
+  blue: "#60a5fa",
+  cyan: "#22d3ee",
+  green: "#4ade80",
+  orange: "#fb923c",
+  pink: "#f472b6",
+  red: "#f87171",
+  yellow: "#fbbf24",
+  white: "#e5e7eb"
+};
+var DEFAULT_ACCENT = PRESETS.purple;
+function resolveAccent(value) {
+  if (!value) return DEFAULT_ACCENT;
+  const preset = PRESETS[value.toLowerCase()];
+  if (preset) return preset;
+  return /^#[0-9a-f]{6}$/i.test(value) ? value : DEFAULT_ACCENT;
+}
+function makeTheme(accent) {
+  return {
+    accent: resolveAccent(accent),
+    ok: PRESETS.green,
+    warn: PRESETS.yellow,
+    error: PRESETS.red
+  };
+}
+var ThemeContext = createContext(makeTheme(void 0));
+function useTheme() {
+  return useContext(ThemeContext);
+}
+
 // src/ui/components/Confirm.tsx
 import { Box, Text } from "ink";
 
@@ -6199,7 +6365,7 @@ function normalizeHotkey(char) {
 }
 
 // src/ui/i18n.ts
-import { createContext, useContext } from "react";
+import { createContext as createContext2, useContext as useContext2 } from "react";
 var LANGS = [
   { key: "en", label: "English" },
   { key: "ru", label: "\u0420\u0443\u0441\u0441\u043A\u0438\u0439" }
@@ -6229,6 +6395,7 @@ var en = {
   workingFor: (elapsed) => `working ${elapsed}`,
   titleProvider: "Provider",
   titleLogout: "Sign out of a provider",
+  titleKeyChange: "Change API key for a provider",
   titleSessions: "Resume a session",
   titleSessionAction: "Session action",
   resumed: (id, count) => `Resumed ${id} \u2014 ${count} messages restored`,
@@ -6316,6 +6483,9 @@ var en = {
   logoutAskBody: "Its API key is removed from auth.json and the provider is dropped from the config.",
   loggedOut: (provider) => `Signed out of "${provider}".`,
   logoutNothing: "No provider is signed in.",
+  keyChangeAsk: (provider) => `Change API key for "${provider}"?`,
+  keyChangeAskBody: "The new key replaces the old one. Models are re-fetched automatically.",
+  keyChanged: (provider) => `API key updated for "${provider}".`,
   promptUsage: "Usage: /prompt save <name>",
   promptNothing: "Nothing to save yet \u2014 send a message first.",
   promptSaved: (name) => `Saved prompt "${name}"`,
@@ -6347,6 +6517,7 @@ var en = {
     login: "add a provider (url + key)",
     provider: "switch between configured providers",
     logout: "choose a provider to sign out from",
+    key: "change API key for a provider",
     effort: "set reasoning depth",
     thinking: "toggle reasoning",
     budget: "set token budget per turn",
@@ -6407,6 +6578,7 @@ var ru = {
   workingFor: (elapsed) => `\u0434\u0443\u043C\u0430\u0435\u0442 ${elapsed}`,
   titleProvider: "\u041F\u0440\u043E\u0432\u0430\u0439\u0434\u0435\u0440",
   titleLogout: "\u0412\u044B\u0431\u0440\u0430\u0442\u044C API \u0434\u043B\u044F \u0432\u044B\u0445\u043E\u0434\u0430",
+  titleKeyChange: "\u0421\u043C\u0435\u043D\u0438\u0442\u044C \u043A\u043B\u044E\u0447 \u043F\u0440\u043E\u0432\u0430\u0439\u0434\u0435\u0440\u0430",
   titleSessions: "\u0412\u043E\u0441\u0441\u0442\u0430\u043D\u043E\u0432\u0438\u0442\u044C \u0441\u0435\u0441\u0441\u0438\u044E",
   titleSessionAction: "\u0414\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u0441 \u0441\u0435\u0441\u0441\u0438\u0435\u0439",
   resumed: (id, count) => `\u0421\u0435\u0441\u0441\u0438\u044F ${id} \u0432\u043E\u0441\u0441\u0442\u0430\u043D\u043E\u0432\u043B\u0435\u043D\u0430 \u2014 \u0441\u043E\u043E\u0431\u0449\u0435\u043D\u0438\u0439: ${count}`,
@@ -6494,6 +6666,9 @@ var ru = {
   logoutAskBody: "\u041A\u043B\u044E\u0447 \u0431\u0443\u0434\u0435\u0442 \u0443\u0434\u0430\u043B\u0451\u043D \u0438\u0437 auth.json, \u0430 \u043F\u0440\u043E\u0432\u0430\u0439\u0434\u0435\u0440 \u2014 \u0438\u0437 \u043A\u043E\u043D\u0444\u0438\u0433\u0430.",
   loggedOut: (provider) => `\u0412\u044B\u043F\u043E\u043B\u043D\u0435\u043D \u0432\u044B\u0445\u043E\u0434 \u0438\u0437 \xAB${provider}\xBB.`,
   logoutNothing: "\u041D\u0438 \u043E\u0434\u0438\u043D \u043F\u0440\u043E\u0432\u0430\u0439\u0434\u0435\u0440 \u043D\u0435 \u043F\u043E\u0434\u043A\u043B\u044E\u0447\u0451\u043D.",
+  keyChangeAsk: (provider) => `\u0421\u043C\u0435\u043D\u0438\u0442\u044C \u043A\u043B\u044E\u0447 \u0434\u043B\u044F \xAB${provider}\xBB?`,
+  keyChangeAskBody: "\u041D\u043E\u0432\u044B\u0439 \u043A\u043B\u044E\u0447 \u0437\u0430\u043C\u0435\u043D\u0438\u0442 \u0441\u0442\u0430\u0440\u044B\u0439. \u041C\u043E\u0434\u0435\u043B\u0438 \u043E\u0431\u043D\u043E\u0432\u044F\u0442\u0441\u044F \u0430\u0432\u0442\u043E\u043C\u0430\u0442\u0438\u0447\u0435\u0441\u043A\u0438.",
+  keyChanged: (provider) => `\u041A\u043B\u044E\u0447 \u043E\u0431\u043D\u043E\u0432\u043B\u0451\u043D \u0434\u043B\u044F \xAB${provider}\xBB.`,
   promptUsage: "\u0418\u0441\u043F\u043E\u043B\u044C\u0437\u043E\u0432\u0430\u043D\u0438\u0435: /prompt save <\u0438\u043C\u044F>",
   promptNothing: "\u041F\u043E\u043A\u0430 \u043D\u0435\u0447\u0435\u0433\u043E \u0441\u043E\u0445\u0440\u0430\u043D\u044F\u0442\u044C \u2014 \u0441\u043D\u0430\u0447\u0430\u043B\u0430 \u043E\u0442\u043F\u0440\u0430\u0432\u044C \u0441\u043E\u043E\u0431\u0449\u0435\u043D\u0438\u0435.",
   promptSaved: (name) => `\u041F\u0440\u043E\u043C\u0442 \xAB${name}\xBB \u0441\u043E\u0445\u0440\u0430\u043D\u0451\u043D`,
@@ -6525,6 +6700,7 @@ var ru = {
     login: "\u0434\u043E\u0431\u0430\u0432\u0438\u0442\u044C \u043F\u0440\u043E\u0432\u0430\u0439\u0434\u0435\u0440\u0430 (url + \u043A\u043B\u044E\u0447)",
     provider: "\u043F\u0435\u0440\u0435\u043A\u043B\u044E\u0447\u0438\u0442\u044C\u0441\u044F \u043C\u0435\u0436\u0434\u0443 \u043F\u0440\u043E\u0432\u0430\u0439\u0434\u0435\u0440\u0430\u043C\u0438",
     logout: "\u0432\u044B\u0431\u0440\u0430\u0442\u044C \u043F\u0440\u043E\u0432\u0430\u0439\u0434\u0435\u0440\u0430 \u0438 \u0443\u0434\u0430\u043B\u0438\u0442\u044C \u0435\u0433\u043E \u043A\u043B\u044E\u0447",
+    key: "\u0441\u043C\u0435\u043D\u0438\u0442\u044C \u043A\u043B\u044E\u0447 \u043F\u0440\u043E\u0432\u0430\u0439\u0434\u0435\u0440\u0430",
     effort: "\u0433\u043B\u0443\u0431\u0438\u043D\u0430 \u0440\u0430\u0437\u043C\u044B\u0448\u043B\u0435\u043D\u0438\u0439",
     thinking: "\u0432\u043A\u043B\u044E\u0447\u0438\u0442\u044C/\u0432\u044B\u043A\u043B\u044E\u0447\u0438\u0442\u044C \u0440\u0430\u0437\u043C\u044B\u0448\u043B\u0435\u043D\u0438\u044F",
     budget: "\u043B\u0438\u043C\u0438\u0442 \u0442\u043E\u043A\u0435\u043D\u043E\u0432 \u0437\u0430 \u0445\u043E\u0434 (0 = \u0431\u0435\u0437\u043B\u0438\u043C\u0438\u0442)",
@@ -6562,43 +6738,9 @@ var DICTIONARIES = { en, ru };
 function stringsFor(lang) {
   return DICTIONARIES[lang ?? "en"];
 }
-var StringsContext = createContext(en);
+var StringsContext = createContext2(en);
 function useStrings() {
-  return useContext(StringsContext);
-}
-
-// src/ui/theme.ts
-import { createContext as createContext2, useContext as useContext2 } from "react";
-var PRESETS = {
-  purple: "#a78bfa",
-  violet: "#8b5cf6",
-  blue: "#60a5fa",
-  cyan: "#22d3ee",
-  green: "#4ade80",
-  orange: "#fb923c",
-  pink: "#f472b6",
-  red: "#f87171",
-  yellow: "#fbbf24",
-  white: "#e5e7eb"
-};
-var DEFAULT_ACCENT = PRESETS.purple;
-function resolveAccent(value) {
-  if (!value) return DEFAULT_ACCENT;
-  const preset = PRESETS[value.toLowerCase()];
-  if (preset) return preset;
-  return /^#[0-9a-f]{6}$/i.test(value) ? value : DEFAULT_ACCENT;
-}
-function makeTheme(accent) {
-  return {
-    accent: resolveAccent(accent),
-    ok: PRESETS.green,
-    warn: PRESETS.yellow,
-    error: PRESETS.red
-  };
-}
-var ThemeContext = createContext2(makeTheme(void 0));
-function useTheme() {
-  return useContext2(ThemeContext);
+  return useContext2(StringsContext);
 }
 
 // src/ui/components/Confirm.tsx
@@ -7375,7 +7517,10 @@ function StatusBar({ status }) {
             }
           )
         ] }),
-        details.length > 0 && /* @__PURE__ */ jsx9(Box9, { flexWrap: "wrap", children: /* @__PURE__ */ jsx9(Segments, { items: details }) })
+        details.length > 0 && /* @__PURE__ */ jsx9(Box9, { flexWrap: "wrap", children: details.map((item, index) => /* @__PURE__ */ jsxs9(Fragment2, { children: [
+          index > 0 && /* @__PURE__ */ jsx9(Text9, { dimColor: true, children: " \xB7 " }),
+          item
+        ] }, index)) })
       ]
     }
   );
@@ -7385,11 +7530,7 @@ function Segments({ items }) {
     const elements = [];
     if (index > 0) {
       elements.push(
-        /* @__PURE__ */ jsxs9(Text9, { dimColor: true, children: [
-          " ",
-          "\xB7",
-          " "
-        ] }, `sep-${index}`)
+        /* @__PURE__ */ jsx9(Box9, { marginTop: 1, children: /* @__PURE__ */ jsx9(Text9, { dimColor: true, children: " \xB7 " }) }, `sep-${index}`)
       );
     }
     elements.push(/* @__PURE__ */ jsx9(Fragment2, { children: item }, `item-${index}`));
@@ -7475,7 +7616,7 @@ import Spinner2 from "ink-spinner";
 // src/ui/markdown.tsx
 import { Box as Box10, Text as Text10 } from "ink";
 import { useMemo as useMemo2 } from "react";
-import { jsx as jsx10, jsxs as jsxs10 } from "react/jsx-runtime";
+import { Fragment as Fragment4, jsx as jsx10, jsxs as jsxs10 } from "react/jsx-runtime";
 function Markdown({ children }) {
   const blocks = useMemo2(() => extractBlocks(children), [children]);
   return /* @__PURE__ */ jsx10(Box10, { flexDirection: "column", children: blocks.map((block, i) => /* @__PURE__ */ jsx10(BlockView, { block }, i)) });
@@ -7488,38 +7629,108 @@ function BlockView({ block }) {
       return /* @__PURE__ */ jsx10(Box10, { marginTop: block.level === 1 ? 1 : 0, children: /* @__PURE__ */ jsx10(Text10, { bold: true, children: truncateBySize(block.text ?? "", size) }) });
     }
     case "blockquote":
-      return /* @__PURE__ */ jsx10(Box10, { marginLeft: 2, children: /* @__PURE__ */ jsxs10(Text10, { dimColor: true, children: [
-        "\u2502 ",
-        block.text
-      ] }) });
+      return /* @__PURE__ */ jsx10(Box10, { flexDirection: "column", marginLeft: 2, children: (block.text ?? "").split("\n").map((line, i) => /* @__PURE__ */ jsxs10(Box10, { children: [
+        /* @__PURE__ */ jsx10(Text10, { dimColor: true, children: "\u2502 " }),
+        /* @__PURE__ */ jsx10(Text10, { dimColor: true, children: line })
+      ] }, i)) });
     case "ul":
       return /* @__PURE__ */ jsx10(Box10, { flexDirection: "column", children: (block.items ?? []).map((item, i) => /* @__PURE__ */ jsxs10(Box10, { children: [
         /* @__PURE__ */ jsx10(Text10, { dimColor: true, children: "\u2022 " }),
-        /* @__PURE__ */ jsx10(Text10, { children: inline(item) })
+        /* @__PURE__ */ jsx10(Box10, { marginLeft: 2, children: /* @__PURE__ */ jsx10(BlockView, { block: item }) })
       ] }, i)) });
     case "ol":
       return /* @__PURE__ */ jsx10(Box10, { flexDirection: "column", children: (block.items ?? []).map((item, i) => /* @__PURE__ */ jsxs10(Box10, { children: [
         /* @__PURE__ */ jsx10(Text10, { dimColor: true, children: `${i + 1}. ` }),
-        /* @__PURE__ */ jsx10(Text10, { children: inline(item) })
+        /* @__PURE__ */ jsx10(Box10, { marginLeft: 2, children: /* @__PURE__ */ jsx10(BlockView, { block: item }) })
       ] }, i)) });
     case "paragraph":
     default:
       return /* @__PURE__ */ jsx10(Text10, { children: inline(block.text ?? "") });
+    case "table":
+      return /* @__PURE__ */ jsx10(TableView, { block });
+    case "code":
+      return /* @__PURE__ */ jsx10(CodeBlock, { lang: block.lang, code: block.text ?? "" });
+    case "hr":
+      return /* @__PURE__ */ jsx10(Box10, { marginTop: 1, marginBottom: 1, children: /* @__PURE__ */ jsx10(Text10, { dimColor: true, children: "\u2500".repeat(60) }) });
+  }
+}
+function CodeBlock({ lang, code }) {
+  const theme = useTheme();
+  const lines = code.split("\n");
+  return /* @__PURE__ */ jsxs10(Box10, { flexDirection: "column", marginTop: 1, children: [
+    lang && /* @__PURE__ */ jsx10(Text10, { dimColor: true, color: theme.accent, children: lang }),
+    /* @__PURE__ */ jsx10(Box10, { borderColor: "gray", borderStyle: "round", paddingX: 1, children: /* @__PURE__ */ jsx10(Box10, { flexDirection: "column", children: lines.map((line, i) => /* @__PURE__ */ jsx10(Text10, { color: "cyan", children: line }, i)) }) })
+  ] });
+}
+function TableView({ block }) {
+  const headers = block.headers ?? [];
+  const rows = block.rows ?? [];
+  if (headers.length === 0 && rows.length === 0) {
+    return /* @__PURE__ */ jsx10(Text10, { dimColor: true, children: "(empty table)" });
   }
+  const colCount = Math.max(headers.length, ...rows.map((r) => r?.length ?? 0));
+  if (colCount === 0) {
+    return /* @__PURE__ */ jsx10(Text10, { dimColor: true, children: "(empty table)" });
+  }
+  const colWidths = new Array(colCount).fill(0);
+  const allRows = [headers, ...rows];
+  for (const row of allRows) {
+    for (let i = 0; i < colCount; i++) {
+      const cell = row[i] ?? "";
+      colWidths[i] = Math.max(colWidths[i], [...cell].length);
+    }
+  }
+  const separator = colWidths.map((w) => "\u2500".repeat(w)).join("\u253C");
+  const lines = [];
+  allRows.forEach((row, rowIdx) => {
+    const cells = [];
+    for (let i = 0; i < colCount; i++) {
+      const cell = row[i] ?? "";
+      const align = block.colAligns?.[i] ?? "left";
+      const visualWidth = [...cell].length;
+      const padWidth = colWidths[i] + (cell.length - visualWidth);
+      let padded;
+      if (align === "right") {
+        padded = cell.padStart(padWidth);
+      } else if (align === "center") {
+        const totalPad = padWidth - visualWidth;
+        const left = Math.floor(totalPad / 2);
+        padded = " ".repeat(left) + cell + " ".repeat(totalPad - left);
+      } else {
+        padded = cell.padEnd(padWidth);
+      }
+      cells.push(padded);
+    }
+    lines.push(
+      /* @__PURE__ */ jsx10(Text10, { bold: rowIdx === 0, children: cells.join(" \u2502 ") }, `row-${rowIdx}`)
+    );
+    if (rowIdx === 0) {
+      lines.push(/* @__PURE__ */ jsx10(Text10, { dimColor: true, children: separator }, `sep-${rowIdx}`));
+    }
+  });
+  return /* @__PURE__ */ jsx10(Box10, { flexDirection: "column", children: lines });
 }
+var CHARS_PER_FONT_LEVEL = 3;
 function truncateBySize(text, size) {
-  return text.length > size * 3 ? text.slice(0, size * 3) + "\u2026" : text;
+  const maxLen = size * CHARS_PER_FONT_LEVEL;
+  return text.length > maxLen ? text.slice(0, maxLen) + "\u2026" : text;
 }
 var HEADING_RE = /^(#{1,6})\s+(.*)$/;
 var UL_RE = /^([-*+])\s+(.*)$/;
 var OL_RE = /^(\d+)\.\s+(.*)$/;
 var QUOTE_RE = /^>\s?(.*)$/;
+var TASK_RE = /^[-*+]\s+\[([ xX])\]\s+(.*)$/;
+var INDENT_RE = /^(\s*)(.*)$/;
+var HR_RE = /^([-*_])\1{2,}$/;
+var FENCE_RE = /^(`{3,}|~{3,})(\w*)\s*$/;
 function extractBlocks(src) {
   const lines = src.replace(/\r\n/g, "\n").split("\n");
   const blocks = [];
   let paragraph = [];
   let list = null;
   let quote = [];
+  let code = null;
+  let table = null;
   const flushParagraph = () => {
     if (paragraph.length) {
       blocks.push({ type: "paragraph", text: paragraph.join(" ").trim() });
@@ -7527,7 +7738,7 @@ function extractBlocks(src) {
     }
   };
   const flushList = () => {
-    if (list) {
+    if (list && list.items.length) {
       blocks.push({ type: list.ordered ? "ol" : "ul", items: list.items });
       list = null;
     }
@@ -7538,100 +7749,271 @@ function extractBlocks(src) {
       quote = [];
     }
   };
+  const flushCode = () => {
+    if (code) {
+      blocks.push({ type: "code", lang: code.lang, text: code.lines.join("\n") });
+      code = null;
+    }
+  };
   const flushAll = () => {
     flushParagraph();
     flushList();
     flushQuote();
+    flushCode();
+  };
+  const flushTable = () => {
+    if (table && table.headers.length > 0) {
+      blocks.push({
+        type: "table",
+        headers: table.headers,
+        rows: table.rows,
+        colAligns: table.colAligns
+      });
+    }
+    table = null;
+  };
+  const parseListItem = (text, indent) => {
+    const task = text.match(TASK_RE);
+    if (task) {
+      const done = task[1].toLowerCase() === "x";
+      return {
+        type: "paragraph",
+        text: `${done ? "\u2611" : "\u2610"} ${task[2]}`
+      };
+    }
+    return { type: "paragraph", text };
   };
-  for (const line of lines) {
+  for (let i = 0; i < lines.length; i++) {
+    const line = lines[i];
     const trimmed = line.trim();
+    if (code) {
+      const endMatch = trimmed.match(FENCE_RE);
+      if (endMatch && endMatch[1][0] === code.fence[0] && endMatch[1].length >= code.fence.length) {
+        flushCode();
+        continue;
+      }
+      code.lines.push(line);
+      continue;
+    }
+    const fenceMatch = trimmed.match(FENCE_RE);
+    if (fenceMatch) {
+      flushAll();
+      flushTable();
+      code = { fence: fenceMatch[1], lang: fenceMatch[2], lines: [] };
+      continue;
+    }
     if (trimmed === "") {
+      flushTable();
+      flushAll();
+      continue;
+    }
+    const hrMatch = trimmed.match(HR_RE);
+    if (hrMatch) {
+      flushTable();
       flushAll();
+      blocks.push({ type: "hr" });
       continue;
     }
     const heading = trimmed.match(HEADING_RE);
     if (heading) {
+      flushTable();
       flushAll();
       blocks.push({ type: "heading", level: heading[1].length, text: heading[2].trim() });
       continue;
     }
     const quoteMatch = trimmed.match(QUOTE_RE);
     if (quoteMatch) {
+      flushTable();
       flushParagraph();
       flushList();
+      flushCode();
       quote.push(quoteMatch[1]);
       continue;
     }
+    const indentMatch = line.match(INDENT_RE);
+    const indent = indentMatch?.[1].length ?? 0;
+    const taskMatch = trimmed.match(TASK_RE);
+    if (taskMatch) {
+      flushTable();
+      flushParagraph();
+      flushQuote();
+      flushCode();
+      if (!list || list.ordered || indent !== list.indent) {
+        flushList();
+        list = { ordered: false, items: [], indent };
+      }
+      list.items.push(parseListItem(trimmed, indent));
+      continue;
+    }
     const ulMatch = trimmed.match(UL_RE);
     if (ulMatch) {
+      flushTable();
       flushParagraph();
       flushQuote();
-      if (!list || list.ordered) {
+      flushCode();
+      if (!list || list.ordered || indent !== list.indent) {
         flushList();
-        list = { ordered: false, items: [] };
+        list = { ordered: false, items: [], indent };
       }
-      list.items.push(ulMatch[2].trim());
+      list.items.push(parseListItem(ulMatch[2], indent));
       continue;
     }
     const olMatch = trimmed.match(OL_RE);
     if (olMatch) {
+      flushTable();
       flushParagraph();
       flushQuote();
-      if (!list || !list.ordered) {
+      flushCode();
+      if (!list || !list.ordered || indent !== list.indent) {
         flushList();
-        list = { ordered: true, items: [] };
+        list = { ordered: true, items: [], indent };
       }
-      list.items.push(olMatch[2].trim());
+      list.items.push(parseListItem(olMatch[2], indent));
       continue;
     }
+    const sepMatch = trimmed.match(/^\|?\s*(\s*:?-+:?\s*\|)+\s*:?-+:?\s*\|?$/);
+    if (sepMatch) {
+      const cells = trimmed.split("|").map((c) => c.trim()).filter((c) => c.length > 0);
+      if (cells.length >= 2 && cells.every((c) => /^:?-+:?$/.test(c))) {
+        if (table) {
+          table.colAligns = cells.map((c) => {
+            if (c.startsWith(":") && c.endsWith(":")) return "center";
+            if (c.endsWith(":")) return "right";
+            return "left";
+          });
+          continue;
+        }
+      }
+    }
+    const rowMatch = trimmed.match(/^\|?.+\|.+\|?$/);
+    if (rowMatch) {
+      const cells = trimmed.split("|").map((c) => c.trim()).filter((c, idx, arr) => {
+        if (idx === 0 && c === "") return false;
+        if (idx === arr.length - 1 && c === "") return false;
+        return true;
+      });
+      const isWindowsPath = cells.length === 2 && (/^[A-Za-z]:\\/.test(cells[0]) || /^\\\\/.test(cells[0]));
+      if (cells.length >= 2 && cells.every((c) => c.length > 0) && !isWindowsPath) {
+        if (table) {
+          table.rows.push(cells);
+        } else {
+          flushAll();
+          table = { headers: cells, rows: [], colAligns: [] };
+        }
+        continue;
+      }
+    }
+    const asciiSepMatch = trimmed.match(/^[\s\-─┄┈━┅]{3,}$/);
+    if (asciiSepMatch) {
+      if (table && table.headers.length > 0 && table.colAligns.length === 0) {
+        table.colAligns = table.headers.map(() => "left");
+        continue;
+      }
+      if (paragraph.length === 1) {
+        const prevLine = paragraph[0].trim();
+        const tokens3 = prevLine.split(/\s{2,}/).map((c) => c.trim()).filter((c) => c.length > 0);
+        if (tokens3.length >= 2 && tokens3.length <= 10) {
+          paragraph = [];
+          flushList();
+          flushQuote();
+          flushCode();
+          table = { headers: tokens3, rows: [], colAligns: tokens3.map(() => "left") };
+          continue;
+        }
+      }
+    }
+    if (table && table.headers.length > 0 && !trimmed.includes("|")) {
+      const tokens3 = trimmed.split(/\s{2,}/).map((c) => c.trim()).filter((c) => c.length > 0);
+      if (tokens3.length >= 2 && tokens3.length <= table.headers.length + 2) {
+        const looksLikeCode = tokens3.some((t) => t.startsWith("//") || t.startsWith("#") || t.startsWith("/*"));
+        const looksLikePath = tokens3.length === 2 && (/^[A-Za-z]:\\/.test(tokens3[0]) || /^\\\\/.test(tokens3[0]));
+        if (!looksLikeCode && !looksLikePath) {
+          table.rows.push(tokens3);
+          continue;
+        }
+      }
+    }
+    flushTable();
     flushList();
     flushQuote();
+    flushCode();
     paragraph.push(trimmed);
   }
+  flushTable();
   flushAll();
   return blocks;
 }
-function inline(text) {
+var MAX_INLINE_DEPTH = 10;
+function inline(text, depth = 0) {
+  if (depth > MAX_INLINE_DEPTH) {
+    return text;
+  }
   const nodes = [];
   let rest = text;
   let key = 0;
-  const RE = /(`+)([^`]+?)\1|(\*\*)(.+?)\2|(~~)(.+?)\4|(\*)(.+?)\6|(__)(.+?)\8/;
+  const matchers = [
+    {
+      re: /(!\[)([^\]]*)\]\(([^)]+)\)/,
+      handler: (m) => /* @__PURE__ */ jsxs10(Text10, { color: "cyan", bold: true, children: [
+        "[img: ",
+        m[2],
+        "]"
+      ] }, key++)
+    },
+    {
+      re: /(\[)([^\]]*)\]\(([^)]+)\)/,
+      handler: (m) => /* @__PURE__ */ jsxs10(Fragment4, { children: [
+        /* @__PURE__ */ jsx10(Text10, { color: "cyan", underline: true, children: inline(m[2], depth + 1) }, key++),
+        /* @__PURE__ */ jsxs10(Text10, { dimColor: true, color: "gray", children: [
+          "(",
+          m[3],
+          ")"
+        ] }, key++)
+      ] })
+    },
+    {
+      re: /(`+)([^`]+?)\1/,
+      handler: (m) => /* @__PURE__ */ jsx10(Text10, { bold: true, color: "cyan", children: m[2] }, key++)
+    },
+    {
+      re: /(\*\*)(.+?)\1/,
+      handler: (m) => /* @__PURE__ */ jsx10(Text10, { bold: true, children: inline(m[2], depth + 1) }, key++)
+    },
+    {
+      re: /(__)(.+?)\1/,
+      handler: (m) => /* @__PURE__ */ jsx10(Text10, { bold: true, children: inline(m[2], depth + 1) }, key++)
+    },
+    {
+      re: /(~~)(.+?)\1/,
+      handler: (m) => /* @__PURE__ */ jsx10(Text10, { strikethrough: true, children: m[2] }, key++)
+    },
+    {
+      re: /(\*)(.+?)\1/,
+      handler: (m) => /* @__PURE__ */ jsx10(Text10, { italic: true, children: inline(m[2], depth + 1) }, key++)
+    }
+  ];
   while (rest.length > 0) {
-    const m = rest.match(RE);
-    if (!m) {
+    let best = null;
+    for (const { re, handler } of matchers) {
+      const m = rest.match(re);
+      if (m && (best === null || (m.index ?? 0) < (best.match.index ?? 0))) {
+        best = { match: m, handler };
+      }
+    }
+    if (!best) {
       nodes.push(rest);
       break;
     }
-    const idx = m.index ?? 0;
+    const idx = best.match.index ?? 0;
     if (idx > 0) nodes.push(rest.slice(0, idx));
-    if (m[1]) {
-      nodes.push(
-        /* @__PURE__ */ jsx10(Text10, { bold: true, color: "cyan", children: m[2] }, key++)
-      );
-    } else if (m[3]) {
-      nodes.push(
-        /* @__PURE__ */ jsx10(Text10, { bold: true, children: inline(m[4]) }, key++)
-      );
-    } else if (m[5]) {
-      nodes.push(
-        /* @__PURE__ */ jsx10(Text10, { strikethrough: true, children: m[6] }, key++)
-      );
-    } else if (m[7]) {
-      nodes.push(
-        /* @__PURE__ */ jsx10(Text10, { italic: true, children: inline(m[8]) }, key++)
-      );
-    } else if (m[9]) {
-      nodes.push(
-        /* @__PURE__ */ jsx10(Text10, { bold: true, children: inline(m[10]) }, key++)
-      );
-    }
-    rest = rest.slice(idx + m[0].length);
+    nodes.push(best.handler(best.match));
+    rest = rest.slice(idx + best.match[0].length);
   }
   return nodes.length === 1 ? nodes[0] : nodes;
 }
 
 // src/ui/components/Transcript.tsx
-import { Fragment as Fragment4, jsx as jsx11, jsxs as jsxs11 } from "react/jsx-runtime";
+import { Fragment as Fragment5, jsx as jsx11, jsxs as jsxs11 } from "react/jsx-runtime";
 var HEADER = { kind: "header" };
 var Transcript = memo2(function Transcript2({ bubbles, workspace }) {
   const liveAt = bubbles.findLastIndex(
@@ -7698,7 +8080,7 @@ function ToolView({ bubble }) {
       mark,
       " ",
       bubble.summary,
-      hasChanges && /* @__PURE__ */ jsxs11(Fragment4, { children: [
+      hasChanges && /* @__PURE__ */ jsxs11(Fragment5, { children: [
         diff.added > 0 && /* @__PURE__ */ jsx11(Text11, { color: theme.ok, bold: true, children: ` +${diff.added}` }),
         diff.removed > 0 && /* @__PURE__ */ jsx11(Text11, { color: theme.error, bold: true, children: ` -${diff.removed}` })
       ] })
@@ -7823,7 +8205,7 @@ function applyEvent(state, event) {
       };
     case "subagent_event": {
       const idx = state.bubbles.findLastIndex(
-        (b) => b.kind === "subagent" && b.id === event.id && b.state === "running"
+        (b) => b.kind === "subagent" && b.id === event.id
       );
       if (idx === -1) return state;
       const sub = state.bubbles[idx];
@@ -8077,7 +8459,7 @@ function App({
     return () => clearInterval(timer);
   }, [turnStart]);
   useEffect2(() => {
-    if (process.platform === "darwin") return;
+    if (process.platform === "darwin" || process.platform === "win32") return;
     let last = "";
     let cancelling = false;
     let giveUp = false;
@@ -8151,6 +8533,12 @@ function App({
     }),
     []
   );
+  const promptInput = useCallback(
+    (title, mask) => new Promise((resolve3) => {
+      setOverlay({ kind: "textinput", title, mask, resolve: resolve3, cancel: () => resolve3(null) });
+    }),
+    []
+  );
   const runAgent = useCallback(async () => {
     const controller = new AbortController();
     abort.current = controller;
@@ -8468,6 +8856,35 @@ ${strings.modelSet(result.nextModel)}` : ""}`;
           forceRender((n) => n + 1);
           return;
         }
+        case "key": {
+          const providers = runtime.listProviderItems();
+          if (providers.length === 0) {
+            notice("warn", strings.logoutNothing);
+            return;
+          }
+          let providerId = rest[0];
+          if (!providerId) {
+            providerId = providers.length === 1 ? providers[0]?.key : await pick(strings.titleKeyChange, providers) ?? void 0;
+          }
+          if (!providerId) return;
+          if (!providers.some((provider) => provider.key === providerId)) {
+            notice("warn", `Provider "${providerId}" is not configured.`);
+            return;
+          }
+          if (!await ask2(strings.keyChangeAsk(providerId), strings.keyChangeAskBody, true)) return;
+          const newKey = await promptInput(strings.apiKey, true);
+          if (!newKey || newKey.trim() === "") {
+            notice("warn", "Empty key \u2014 nothing changed.");
+            return;
+          }
+          try {
+            await runtime.changeProviderKey(providerId, newKey.trim());
+            notice("info", strings.keyChanged(providerId));
+          } catch (error) {
+            notice("error", error instanceof Error ? error.message : String(error));
+          }
+          return;
+        }
         case "lang": {
           const choice = await pick(
             strings.titleLang,
@@ -9201,6 +9618,21 @@ ${strings.configAt(runtime.configPath())}`);
           }
         }
       ),
+      overlay.kind === "textinput" && /* @__PURE__ */ jsx12(
+        TextInputOverlay,
+        {
+          title: overlay.title,
+          mask: overlay.mask,
+          onAnswer: (value) => {
+            overlay.resolve(value);
+            setOverlay({ kind: "none" });
+          },
+          onCancel: () => {
+            overlay.cancel?.();
+            setOverlay({ kind: "none" });
+          }
+        }
+      ),
       overlay.kind === "none" && /* @__PURE__ */ jsx12(
         PromptInput,
         {
@@ -9241,6 +9673,34 @@ ${strings.configAt(runtime.configPath())}`);
     ] })
   );
 }
+function TextInputOverlay({
+  title,
+  mask,
+  onAnswer,
+  onCancel
+}) {
+  const [value, setValue] = useState5("");
+  const theme = useTheme();
+  const submit = useCallback(() => {
+    onAnswer(value || null);
+  }, [value, onAnswer]);
+  useInput2((_input, key) => {
+    if (key.escape) onCancel();
+  });
+  return /* @__PURE__ */ jsxs12(Box12, { flexDirection: "column", children: [
+    /* @__PURE__ */ jsx12(Text12, { dimColor: true, children: title }),
+    /* @__PURE__ */ jsx12(
+      TextInput2,
+      {
+        value,
+        onChange: setValue,
+        onSubmit: submit,
+        mask: mask ? "\u2022" : void 0
+      }
+    ),
+    /* @__PURE__ */ jsx12(Box12, { marginTop: 1, children: /* @__PURE__ */ jsx12(Text12, { dimColor: true, color: theme.accent, children: "enter submit \xB7 esc cancel" }) })
+  ] });
+}
 function slashNeedsIdle(line) {
   const [command = "", subcommand = ""] = line.slice(1).trim().toLowerCase().split(/\s+/);
   return NEEDS_IDLE.has(command) || command === "mcp" && (subcommand === "add" || subcommand === "delete" || subcommand === "enable" || subcommand === "disable");
@@ -9322,6 +9782,13 @@ function copyToClipboard(text) {
     }
     return;
   }
+  if (process.platform === "win32") {
+    try {
+      run("clip", []);
+    } catch {
+    }
+    return;
+  }
   const candidates = [
     ["wl-copy", []],
     ["xclip", ["-selection", "clipboard"]],