@tiens.nguyen/gu-cli 1.0.741 → 1.0.742

package/coding-key-prompt.mjs

@@ -24,6 +24,8 @@ const identity = (s) => s;
  * and on Ctrl+K to replace one — and they were two hand-written copies of the same idea. A hint
  * added to one of them would have left the other exactly as confusing.
  */
+import { keyInUse } from "./server-keys.mjs";
+
 export const SECRET_KEY_HINT = "type or paste the key, then press Enter — it stays masked";
 
 /**
@@ -217,13 +219,26 @@ export function codingKeyFallbackLine(kj, jobId = "") {
  * when a choice HAS been made, and when only one key exists — with one there is nothing to
  * choose, and a warning on a correct setup is how warnings stop being read.
  */
-export function unchosenKeyWarning({ codingKind = "", codingUrl = "", selectedKeyId = "", keys = null } = {}) {
+export function unchosenKeyWarning({ codingKind = "", codingUrl = "", selectedKeyId = "", keys = null, backendId = "" } = {}) {
   const quiet = { warn: false, using: null, why: "" };
   // Local Ollama and MLX need no credential; the Ollama cloud does.
   if (!codingNeedsKey(codingKind, codingUrl)) return quiet;
-  if (!Array.isArray(keys) || keys.length < 2) return quiet;
+  if (!Array.isArray(keys)) return quiet;
   if (String(selectedKeyId ?? "").trim()) return quiet;
-  return { warn: true, using: keys[0], why: "none-chosen" };
+  // KEYS BELONG TO A SERVER (#245). Reported: the bar said "key not chosen" beside ollama.com while
+  // the key picker showed its one key, hsbc_ollama, "(in use)" — because this counted all seven keys
+  // on the ACCOUNT (Anthropic, OpenAI, …) where the API only ever chooses among THIS server's keys.
+  // With the server known: its keys, else the keys tied to no server; and a server default IS a
+  // choice. Without it (an older caller) the old account-wide count stands.
+  if (backendId) {
+    const own = keys.filter((k) => k && k.backendId === backendId);
+    const pool = own.length ? own : keys.filter((k) => k && !k.backendId);
+    if (own.some((k) => k.default)) return quiet;
+    if (pool.length < 2) return quiet;
+    return { warn: true, using: keyInUse(keys, backendId) ?? pool[0], why: "none-chosen", count: pool.length };
+  }
+  if (keys.length < 2) return quiet;
+  return { warn: true, using: keys[0], why: "none-chosen", count: keys.length };
 }
 
 /**
@@ -245,14 +260,14 @@ export function unchosenKeyWarning({ codingKind = "", codingUrl = "", selectedKe
  * qualified ("<kind>::<model>", task #123) stores the bare form and is still a valid pick.
  */
 /** The folder's coder — its kind AND its URL, which together decide whether it needs a key. */
-export function effectiveCoder({ sessionCodingModel = "", choices = null, defaultKind = "", defaultUrl = "" } = {}) {
+export function effectiveCoder({ sessionCodingModel = "", choices = null, defaultKind = "", defaultUrl = "", defaultBackendId = "" } = {}) {
   const want = String(sessionCodingModel ?? "").trim();
   const list = Array.isArray(choices) ? choices : [];
   if (want) {
     const hit = list.find((c) => c?.id === want || c?.model === want);
-    if (hit) return { kind: String(hit.kind ?? ""), url: String(hit.url ?? "") };
+    if (hit) return { kind: String(hit.kind ?? ""), url: String(hit.url ?? ""), backendId: String(hit.backendId ?? "") };
   }
-  return { kind: String(defaultKind ?? ""), url: String(defaultUrl ?? "") };
+  return { kind: String(defaultKind ?? ""), url: String(defaultUrl ?? ""), backendId: String(defaultBackendId ?? "") };
 }
 
 export function effectiveCoderKind({

package/gu-repl.mjs

@@ -6251,6 +6251,8 @@ async function chooseModel() {
       codingKind: "openai",
       selectedKeyId: sessionCodingKeyId,
       keys: keysNow,
+      // Only THIS server's keys are a choice to make (#245) — not every key on the account.
+      backendId: ks.backendId,
     }).warn;
     const line = codingKeyLine({
       keys: keysNow,
@@ -10976,11 +10978,12 @@ async function main() {
           // machine an Ollama coder, which needs no key — while the folder was on gpt-5. Reading
           // it directly made this check answer about a coder nobody was using, and the mark only
           // appeared after /model, which re-probes WITH the override.
-          const { kind, url } = effectiveCoder({
+          const { kind, url, backendId } = effectiveCoder({
             sessionCodingModel,
             choices: probe?.codingChoices,
             defaultKind: p?.codingKind,
             defaultUrl: probe?.codingChoices?.find?.((c) => c?.isDefault)?.url ?? "",
+            defaultBackendId: probe?.codingChoices?.find?.((c) => c?.isDefault)?.backendId ?? "",
           });
           const allKeys =
             codingNeedsKey(kind, url) && !sessionCodingKeyId ? await fetchCodingKeys() : null;
@@ -10989,6 +10992,7 @@ async function main() {
             codingUrl: url,
             selectedKeyId: sessionCodingKeyId,
             keys: allKeys,
+            backendId,
           });
           // THE BAR CARRIES IT TOO, from the same decision — a line printed at startup scrolls
           // away within a few turns, and the report was precisely that the warning has to be
@@ -10996,7 +11000,7 @@ async function main() {
           keyChoicePending = w.warn;
           if (w.warn) {
             console.log(
-              GUTTER + orange(`  ${allKeys.length} API keys stored and this folder has not chosen one`) +
+              GUTTER + orange(`  ${w.count} API keys for this server and this folder has not chosen one`) +
                 dim(` — using ${w.using.name} ····${w.using.tail}.`)
             );
             console.log(GUTTER + dim("  ctrl+k picks the right one; a wrong key fails mid-task.\n"));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tiens.nguyen/gu-cli",
-  "version": "1.0.741",
+  "version": "1.0.742",
   "description": "Gu CLI — the gu terminal plus the local worker that runs agent / OCR / PDF / embedding jobs on your Mac (Ollama / MLX / OpenAI-compatible).",
   "type": "module",
   "license": "MIT",