@tiens.nguyen/gu-cli 1.0.710 → 1.0.712

package/gu-repl.mjs

@@ -2070,6 +2070,7 @@ const identityLineText = () =>
       ),
       folder: folderLabel(),
       keyUnchosen: keyChoicePending,
+      apiKeyTail: sessionApiKeyTail,
     },
     { orange, cyan: accent, dim, red },
   );
@@ -5883,6 +5884,7 @@ async function addCodingProvider(roleName = "coding") {
   sessionCodingLabel = model;
   sessionCodingUrl = url;
   sessionCodingKeyId = keyId;
+  sessionApiKeyTail = secret.slice(-4); // store the tail for the bottom bar
   keyChoicePending = false; // the provider's own key was just bound to this folder
   await saveSessionCoding(cwd);
   await saveSessionCodingKeyId(cwd);
@@ -6045,6 +6047,12 @@ async function chooseModel() {
   // what made a rejected key confusing. The masked tail answers it; ctrl+k replaces it without
   // a trip to the web app, which was previously the only way to change a key already saved.
   const ks = await coderKeyState(sessionCodingModel);
+  // BOTTOM BAR TRUTH (follow-up to task #223): the tail beside the model name must name the
+  // key THIS coder will actually be handed, not whichever key was last added or ctrl+k-chosen.
+  // Nothing updated it on /model, so the bar kept the OLD provider's tail while the key line
+  // above — and the request itself — used the new one. coderKeyState already asked the API for
+  // exactly this key (provider-scoped), so mirror it here; a keyless coder shows no tail.
+  sessionApiKeyTail = ks.needsKey && !ks.missing && ks.stored ? ks.stored.slice(-4) : "";
   if (!ks.needsKey) keyChoicePending = false; // Ollama or local MLX — nothing to choose
   if (ks.needsKey && ks.missing) await promptForCodingKey(sessionCodingModel);
   else if (ks.needsKey) {
@@ -7675,6 +7683,9 @@ async function manageCodingKeys(ks, keys) {
   await saveSessionCodingKeyId(resolve(process.cwd()));
   keyChoicePending = false; // chosen — the bar's mark comes off
   codingKeyMissingKnown = false;
+  // Fetch the key to get its tail for the bottom bar
+  const keyData = await fetchCodingKey(keys[idx].backendId || "");
+  sessionApiKeyTail = keyData.key ? keyData.key.slice(-4) : "";
   console.log(
     accent(`  ✓ ${folderLabel()} → ${keys[idx].name}`) + dim(`  ····${keys[idx].tail}\n`)
   );
@@ -8306,6 +8317,8 @@ let sessionCodingModel = "";
  * a folder keeps meaning until someone picks.
  */
 let sessionCodingKeyId = "";
+// Last 4 characters of the current API key, for display in the bottom bar
+let sessionApiKeyTail = "";
 // The friendly model name behind sessionCodingModel, for display only: the token footer
 // must never show a raw "<kind>::<model>" wire id. Empty = running the account default.
 let sessionCodingLabel = "";
@@ -9973,6 +9986,13 @@ async function main() {
     }
   }
   sessionCodingKeyId = await loadSessionCodingKeyId(resolve(process.cwd())); // task #222
+  // Fetch the API key tail after loading the session, if a key is configured
+  if (sessionCodingKeyId) {
+    try {
+      const keyData = await fetchCodingKey("");
+      sessionApiKeyTail = keyData.key ? keyData.key.slice(-4) : "";
+    } catch { /* ignore — the bar works without the tail */ }
+  }
   sessionShowThought = await loadSessionShowThought(resolve(process.cwd())); // task #148
   sessionUnfinishedTask = await loadSessionUnfinishedTask(resolve(process.cwd()));
   // Task #104: seed the ↓ global OUTPUT-token total (user + coding-URL) from the API.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tiens.nguyen/gu-cli",
-  "version": "1.0.710",
+  "version": "1.0.712",
   "description": "Gu CLI — the gu terminal plus the local worker that runs agent / OCR / PDF / embedding jobs on your Mac (Ollama / MLX / OpenAI-compatible).",
   "type": "module",
   "license": "MIT",

package/terminal-layout.mjs

@@ -2078,7 +2078,7 @@ export function activeCoderName({
 const passthrough = (v) => v;
 
 export function identityRow(
-  { coder = "", folder = "", keyUnchosen = false } = {},
+  { coder = "", folder = "", keyUnchosen = false, apiKeyTail = "" } = {},
   { orange = passthrough, cyan = passthrough, dim = passthrough, red = passthrough } = {},
 ) {
   const name = String(coder ?? "").trim();
@@ -2086,7 +2086,9 @@ export function identityRow(
   // The mark only means anything beside a named coder: with none shown there is nothing for it
   // to be about, and it would read as a fault in the folder.
   const mark = name && keyUnchosen ? red(" ⚠ key not chosen") : "";
-  return (name ? orange(name) + mark + dim(" | ") : "") + cyan(where);
+  // API key tail: show the last 4 characters of the API key when available (e.g., "| abcd")
+  const keyIndicator = apiKeyTail ? dim(" | ") + dim(apiKeyTail) : "";
+  return (name ? orange(name) + mark + keyIndicator + dim(" | ") : "") + cyan(where);
 }
 
 /**