@visual-z/xeno 0.7.0 → 0.7.1

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # xeno changelog
 
+## 0.7.1 — 2026-10-09
+
+- Keep a dialog form editable after a validation error. A rejected provider id no longer destroys the input field (`EditBuffer is destroyed`), and the error suggests a valid id.
+- Send the Grok proxy's version-gate header so Grok account inference no longer fails with HTTP 426. A future 426 explains how a xeno user recovers.
+- Show progress, elapsed time and a 3-second limit for a manual `/update` check, with failures styled as errors.
+
 ## 0.7.0 — 2026-10-09
 
 - Keep fullscreen exit output bounded to the execution state and resume command. Preserve full transcript export as an explicit choice.

package/README.md

@@ -17,7 +17,7 @@ is ever summarized by a model, and nothing is ever rewritten in place.
 messages[]                             frozen system prefix + handoff + this node's events
 ```
 
-Version **0.7.0**. The on-disk session format will still change; `0.x` is that
+Version **0.7.1**. The on-disk session format will still change; `0.x` is that
 statement. Published as `@visual-z/xeno`; the license is `UNLICENSED` (readable and installable, no reuse granted).
 
 ## Install

package/docs/providers.md

@@ -25,7 +25,7 @@ xeno 内置 Pi 0.99.1 和 OpenCode 所用 Models.dev 的固定源并集，另加
 
 账户存为 `auth.json` 的 `xai-grok`（0600），模型身份为 `xai-grok/grok-build`，请求走 `https://cli-chat-proxy.grok.com/v1`。`xai` 仍表示 `XAI_API_KEY` 与 `https://api.x.ai/v1`；两个身份不共享凭据或计费账户。也可显式提供 `GROK_ACCESS_TOKEN`，但环境 token 没有 refresh token，不能自动刷新。账户代理地址不能覆盖到其它服务。
 
-采用官方 RFC 8628 设备授权（`https://auth.x.ai/oauth2/device/code` 与 `/oauth2/token`）；只申请推理及刷新所需 scopes，`referrer` 与 User-Agent 标识 xeno。协议所需 `X-XAI-Token-Auth` 与模型路由头遵循官方代理合同。依据：[Grok Build 企业认证](https://docs.x.ai/build/enterprise)、[官方授权源码](https://github.com/xai-org/grok-build/tree/main/crates/codegen/xai-grok-login/src)、[官方代理调用示例](https://github.com/xai-org/grok-build/blob/main/crates/codegen/xai-grok-shell/README.md)。
+采用官方 RFC 8628 设备授权（`https://auth.x.ai/oauth2/device/code` 与 `/oauth2/token`）；只申请推理及刷新所需 scopes，`referrer` 与 User-Agent 标识 xeno。协议所需 `X-XAI-Token-Auth`、模型路由头与版本闸门头 `x-grok-client-version`（固定为 1.0.46，`x-grok-client-identifier: xeno`）遵循官方代理合同；代理最低版本越过它时返回 426，xeno 会提示更新 xeno 或暂用 `xai` + `XAI_API_KEY`。依据：[Grok Build 企业认证](https://docs.x.ai/build/enterprise)、[官方授权源码](https://github.com/xai-org/grok-build/tree/main/crates/codegen/xai-grok-login/src)、[官方代理调用示例](https://github.com/xai-org/grok-build/blob/main/crates/codegen/xai-grok-shell/README.md)。
 
 `grok-build` 是官方代理别名，不能把 API 模型的价格、上下文长度或可选 effort 套给它。当前保守暴露文本/工具调用，价格未知、effort 选择关闭；实际账户权限由官方服务决定。设备授权启动已实测返回 200，授权后的推理/刷新有受控 HTTP 验证；没有替用户完成真实账户批准或调用付费模型。
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@visual-z/xeno",
-  "version": "0.7.0",
+  "version": "0.7.1",
   "license": "UNLICENSED",
   "type": "module",
   "description": "Segmented append-only agent log with pure context and handoff projections",

package/src/apps/provider-connect.ts

@@ -19,7 +19,7 @@ import type { ModelSpec } from "../runtime/model.ts";
 import { discoverModels, discoveryFamily, likelyChatModel, normalizeBaseUrl, type DiscoveredModel } from "../runtime/model-discovery.ts";
 import { SOURCE_PROVIDERS } from "../runtime/model-data.ts";
 import { applyConnect, applyDisconnect, catalogTwin } from "../runtime/provider-connect.ts";
-import { CUSTOM_PRESETS, presetById, suggestProviderId, validProviderId, type ProviderPreset } from "../runtime/provider-presets.ts";
+import { CUSTOM_PRESETS, presetById, slugProviderId, suggestProviderId, validProviderId, type ProviderPreset } from "../runtime/provider-presets.ts";
 import { providerAccess } from "../runtime/provider-access.ts";
 import { writeAuthFile } from "../store/auth-store.ts";
 import { authPath } from "../store/config.ts";
@@ -154,8 +154,8 @@ function beginPreset(host: ConnectHost, preset: ProviderPreset): void {
         title: `${preset.label} · name`,
         label: "Provider ID",
         value: suggested,
-        hint: "shown in /model as <id>/<model>; lowercase letters, digits, - and _",
-        validate: id => !validProviderId(id) ? "Use lowercase letters, digits, - and _ (start with a letter or digit)"
+        hint: "shown in /model as <id>/<model>; lowercase a-z, digits, - and _",
+        validate: id => !validProviderId(id) ? `Use lowercase a-z, digits, - and _ (no spaces, capitals or non-Latin letters); try "${slugProviderId(id) || suggested}"`
           : SOURCE_PROVIDERS[id] !== undefined ? `"${id}" is a built-in provider; pick another id or choose it from the list` : undefined,
         onSubmit: id => {
           draft.id = id;

package/src/apps/ui/app.ts

@@ -361,9 +361,19 @@ export class InteractiveApp implements Ui {
   checkForUpdate(): void {
     // The explicit action owns its result even when it joins a startup request.
     this.manualUpdateRequested = true;
-    void this.updateChecks.manual({ offline: this.app.args.offline === true }, text => {
-      if (!this.disposed) this.notice(text);
-    }).catch(() => { if (!this.disposed) this.notice("Could not check for xeno updates. Try /update again.", "error"); });
+    void this.updateChecks.manual({ offline: this.app.args.offline === true }, (text, tone) => {
+      if (!this.disposed) this.notice(text, tone);
+    }, activity => {
+      if (this.disposed) return;
+      this.screen.setTransientActivity(activity.state === "checking" ? {
+        label: `Checking for xeno updates (current ${activity.current})`, timeoutMs: activity.timeoutMs,
+      } : undefined);
+    }).catch(() => {
+      if (!this.disposed) {
+        this.screen.setTransientActivity(undefined);
+        this.notice("Could not check for xeno updates. Try /update again.", "error");
+      }
+    });
   }
 
   private emptySession(): boolean {

package/src/apps/update-check.ts

@@ -1,7 +1,7 @@
 /** Shared lifecycle for automatic hints and explicit checks; policy remains in core (D16). */
 import { installKind, manualUpdateResult, updateDisabled, updatePlan, type UpdateInput } from "../core/update-check.ts";
 import { packageLocation, readUpdateCache, writeUpdateCache } from "../store/update-cache.ts";
-import { fetchLatestVersion } from "../runtime/update-check.ts";
+import { fetchLatestVersion, UPDATE_TIMEOUT_MS } from "../runtime/update-check.ts";
 import { XENO_VERSION } from "../runtime/oauth.ts";
 
 export interface UpdateOptions {
@@ -9,6 +9,12 @@ export interface UpdateOptions {
   readonly enabled?: boolean | undefined;
 }
 
+export type ManualUpdateActivity =
+  | { readonly state: "checking"; readonly current: string; readonly timeoutMs: number }
+  | { readonly state: "idle" };
+
+type ManualUpdateReporter = (text: string, tone?: "info" | "error") => void;
+
 export class UpdateChecks {
   private readonly controller = new AbortController();
   private pending: Promise<string | null> | undefined;
@@ -36,14 +42,14 @@ export class UpdateChecks {
     return pending;
   }
 
-  manual(options: UpdateOptions, say: (text: string) => void): Promise<number> {
+  manual(options: UpdateOptions, say: ManualUpdateReporter, onActivity?: (activity: ManualUpdateActivity) => void): Promise<number> {
     if (this.manualTask) return this.manualTask;
-    const task = this.runManual(options, say).finally(() => { if (this.manualTask === task) this.manualTask = undefined; });
+    const task = this.runManual(options, say, onActivity).finally(() => { if (this.manualTask === task) this.manualTask = undefined; });
     this.manualTask = task;
     return task;
   }
 
-  private async runManual(options: UpdateOptions, say: (text: string) => void): Promise<number> {
+  private async runManual(options: UpdateOptions, say: ManualUpdateReporter, onActivity?: (activity: ManualUpdateActivity) => void): Promise<number> {
     const { input, plan, disabled } = await this.prepare(options, true);
     if (this.controller.signal.aborted) return 130;
     if (!plan.check) {
@@ -51,12 +57,17 @@ export class UpdateChecks {
         : `Update check skipped: ${disabled ?? "check unavailable"} (xeno ${input.current}).`);
       return input.install === "checkout" ? 0 : 1;
     }
-    say(`Checking for xeno updates (current ${input.current})...`);
-    const latest = await this.refresh(input);
-    if (this.controller.signal.aborted) return 130;
-    const result = manualUpdateResult(latest, input.current, input.install);
-    say(result.text);
-    return result.status === "failed" ? 1 : 0;
+    if (onActivity) onActivity({ state: "checking", current: input.current, timeoutMs: UPDATE_TIMEOUT_MS });
+    else say(`Checking for xeno updates (current ${input.current})...`);
+    try {
+      const latest = await this.refresh(input);
+      if (this.controller.signal.aborted) return 130;
+      const result = manualUpdateResult(latest, input.current, input.install);
+      say(result.text, result.status === "failed" ? "error" : "info");
+      return result.status === "failed" ? 1 : 0;
+    } finally {
+      if (onActivity) onActivity({ state: "idle" });
+    }
   }
 
   cancel(): void { this.controller.abort(); }

package/src/runtime/oauth.ts

@@ -18,7 +18,7 @@ import { pollDeviceCode } from "./oauth-device.ts";
 import { parseDeviceAuthorization, parseOAuthTokens } from "../core/oauth-fields.ts";
 
 /** Matches package.json. Sent as User-Agent so the server can see who we are (D18). */
-export const XENO_VERSION = "0.7.0";
+export const XENO_VERSION = "0.7.1";
 
 /**
  * Minutes subtracted from server expiry so a request issued at the edge
@@ -114,6 +114,24 @@ export const GROK_PROVIDER = "xai-grok";
 export const GROK_BASE_URL = "https://cli-chat-proxy.grok.com/v1";
 /** Official HTTP timeout: issuer requests cannot keep a cancelled or expired grant hanging indefinitely. */
 const GROK_REQUEST_TIMEOUT_MS = 15_000;
+/**
+ * The proxy's version gate reads only `x-grok-client-version`
+ * (grok-build xai-grok-sampler/src/client.rs; agent/proxy_headers.rs: "required
+ * by the proxy's version-gate check"); without it every inference is HTTP 426
+ * "version (none) is outdated". It names the protocol revision xeno speaks,
+ * not xeno's own version -- the User-Agent and client identifier still say
+ * xeno (D18). Pinned, not fetched: a registry lookup would put a network
+ * call in front of every session. 1.0.46 is what CLIProxyAPI and Cherry
+ * Studio send (minimum 1.0.13 as of 2026-10-09; stable 1.0.50). When the
+ * minimum passes it, 426 comes back and grokVersionHint() says so.
+ */
+export const GROK_PROTOCOL_VERSION = "1.0.46";
+/** Shown when the proxy's version gate refuses a request. */
+export function grokVersionHint(status: number | undefined, provider: string): string | undefined {
+  return status === 426 && provider === GROK_PROVIDER
+    ? `the Grok proxy now requires a newer client protocol than xeno sends (${GROK_PROTOCOL_VERSION}); update xeno, or use the xai provider with XAI_API_KEY meanwhile`
+    : undefined;
+}
 
 async function grokPost(url: string, fields: Record<string, string>, effects: Pick<RefreshEffects, "fetch" | "signal">): Promise<{ status: number; json: unknown }> {
   const timeout = AbortSignal.timeout(GROK_REQUEST_TIMEOUT_MS);

package/src/runtime/pi-provider.ts

@@ -17,6 +17,7 @@ import type { AssistantBlock } from "../core/events.ts";
 import { toolCallIdentityViolations, type FrozenPrefix, type Message } from "../core/project.ts";
 import type { Api, ModelSpec } from "./model.ts";
 import { providerRequest } from "./provider-request.ts";
+import { grokVersionHint } from "./oauth.ts";
 import type { ResolveEffects } from "./auth.ts";
 import { imageData } from "./images.ts";
 import { FailedResponseError, type OnDelta, type Provider, type ProviderConfig, type ToolSchema, type Turn } from "./provider.ts";
@@ -373,7 +374,11 @@ export class PiProvider implements Provider {
         case "error":
           if (event.reason === "aborted" || signal?.aborted) throw new DOMException("Request aborted", "AbortError");
           status ??= nativeStatus(event.error.errorMessage ?? "");
-          if (status && status >= 400) throw new HttpError(status, responseHeaders, event.error.errorMessage ?? "Provider request failed");
+          if (status && status >= 400) {
+            // The proxy's own text says "run `grok update`", which a xeno user cannot act on.
+            const hint = grokVersionHint(status, this.config.spec.provider);
+            throw new HttpError(status, responseHeaders, (event.error.errorMessage ?? "Provider request failed") + (hint ? `\n  ${hint}` : ""));
+          }
           throw new StreamError(event.error.errorMessage ?? "Provider stream failed");
         case "start": case "text_start": case "text_end": case "thinking_start": case "thinking_end": break;
         default: assertNever(event, "pi stream event");

package/src/runtime/provider-presets.ts

@@ -74,6 +74,17 @@ export function validProviderId(id: string): boolean {
   return /^[a-z0-9][a-z0-9_-]{0,63}$/.test(id);
 }
 
+/**
+ * The valid id a rejected one most likely meant ("My Gateway" → "my-gateway"),
+ * or "" when nothing Latin survives ("网关"). Only offered in the error, never
+ * applied silently: the id becomes a config and auth.json key the user will
+ * type in /model, so they should see it before it is saved.
+ */
+export function slugProviderId(raw: string): string {
+  if (validProviderId(raw)) return raw;
+  return raw.toLowerCase().replace(/[^a-z0-9_-]+/g, "-").replace(/^[^a-z0-9]+/, "").slice(0, 64).replace(/-+$/, "");
+}
+
 /** A readable default id from a URL host: api.example.com → example. */
 export function suggestProviderId(baseUrl: string, taken: ReadonlySet<string>): string {
   let host = "custom";

package/src/runtime/provider-request.ts

@@ -1,7 +1,7 @@
 import { providerEnvironment, resolveKeyValue, type ResolveEffects } from "./auth.ts";
 import { providerAccess } from "./provider-access.ts";
 import type { ModelSpec } from "./model.ts";
-import { XENO_VERSION, GROK_PROVIDER, GROK_BASE_URL } from "./oauth.ts";
+import { XENO_VERSION, GROK_PROVIDER, GROK_BASE_URL, GROK_PROTOCOL_VERSION } from "./oauth.ts";
 
 const SDK_IDENTITY_HEADERS = ["x-app", "editor-version", "editor-plugin-version", "copilot-integration-id", "http-referer", "x-title"];
 
@@ -45,6 +45,8 @@ export function providerRequest(spec: ModelSpec, key: string, effects: ResolveEf
     // These select the auth protocol and backend; the User-Agent still identifies xeno (D18).
     headers["X-XAI-Token-Auth"] = "xai-grok-cli";
     headers["x-grok-model-override"] = spec.wireId ?? spec.id;
+    headers["x-grok-client-version"] = GROK_PROTOCOL_VERSION;
+    headers["x-grok-client-identifier"] = "xeno";
   }
   const anthropicOAuth = spec.api === "anthropic-messages" && spec.provider !== "github-copilot" && (oauth || key.includes("sk-ant-oat"));
   const noAutomaticAuth = access.auth === false || access.authHeader === false || typeof access.authHeader === "string" || anthropicOAuth;

package/src/tui/ui/dialog.ts

@@ -40,9 +40,20 @@ export type DialogSpec =
   | { kind: "busy"; title: string; message: string; onCancel?(): void }
   | { kind: "lines"; title: string; render(width: number): string[]; handleKey?(key: KeyPress): boolean | Promise<boolean>; hint?: string; onCancel?(): void };
 
+/**
+ * One stacked dialog. `list` and `row` (a plain form's label + Input) are
+ * persistent: built once, they carry typed text and cursor across repaints,
+ * and `show()` only detaches them. Everything else a repaint builds is
+ * ephemeral and destroyed recursively on the next one, so a persistent node
+ * must never sit inside an ephemeral parent -- that destroyed the form's
+ * Input on the first validation error and every later key threw
+ * (docs/tasks/fix-dialog-form-and-grok-version.md).
+ */
 interface Open {
   spec: DialogSpec;
   list?: ListView;
+  row?: BoxRenderable;
+  label?: TextRenderable;
   input?: InputRenderable;
   secret?: string;
   error?: string | undefined;
@@ -112,6 +123,7 @@ export class DialogHost {
     for (const open of this.stack) {
       open.list?.setColors(colors);
       if (open.input) { open.input.textColor = colors.text; open.input.focusedTextColor = colors.text; open.input.placeholderColor = colors.muted; }
+      if (open.label && open.spec.kind === "form") open.label.content = this.formLabel(open.spec.label);
     }
     if (this.open) this.show();
   }
@@ -180,6 +192,10 @@ export class DialogHost {
         focusedTextColor: this.colors.text, backgroundColor: "transparent", focusedBackgroundColor: "transparent", flexGrow: 1 });
       // Prefilled values are edited from their end (a URL gets a path appended).
       open.input.gotoBufferEnd();
+      open.row = new BoxRenderable(this.renderer, { id: `form-row-${serial++}`, flexDirection: "row", height: 1 });
+      open.label = new TextRenderable(this.renderer, { id: `form-label-${serial++}`, content: this.formLabel(spec.label), flexShrink: 0 });
+      open.row.add(open.label);
+      open.row.add(open.input);
     }
     if (spec.kind === "form" && spec.secret) open.secret = "";
     if (spec.kind === "confirm") open.yes = true;
@@ -228,17 +244,18 @@ export class DialogHost {
       }
       case "form": {
         if (spec.intro?.length) this.add(text(ansiText(spec.intro), { marginBottom: 1 }));
-        const row = new BoxRenderable(this.renderer, { id: `form-row-${serial++}`, flexDirection: "row", height: 1 });
-        row.add(new TextRenderable(this.renderer, { id: `form-label-${serial++}`, content: parts({ text: `${spec.label} › `, fg: c.muted }), flexShrink: 0 }));
-        if (top.input) { row.add(top.input); top.input.focus(); }
+        if (top.row) { this.slot.add(top.row); top.input!.focus(); }
         else {
-          // The secret never reaches a renderable: only its length does.
+          // The secret never reaches a renderable: only its length does. The
+          // whole row is rebuilt per repaint, so it holds nothing persistent.
+          const row = new BoxRenderable(this.renderer, { id: `form-row-${serial++}`, flexDirection: "row", height: 1 });
+          row.add(new TextRenderable(this.renderer, { id: `form-label-${serial++}`, content: this.formLabel(spec.label), flexShrink: 0 }));
           const mask = canvas([[{ text: "•".repeat(Math.min(top.secret!.length, 48)), role: "text" }, { text: "▏", role: "accent" }]]);
           mask.flexGrow = 1;
           row.add(mask);
+          this.add(row);
           this.renderer.currentFocusedRenderable?.blur();
         }
-        this.add(row);
         if (top.error) this.add(text(parts({ text: top.error, fg: c.error })));
         break;
       }
@@ -272,6 +289,8 @@ export class DialogHost {
     this.renderer.requestRender();
   }
 
+  private formLabel(label: string): ReturnType<typeof parts> { return parts({ text: `${label} › `, fg: this.colors.muted }); }
+
   private paintChrome(): void {
     const top = this.stack.at(-1);
     const spec = top?.spec;

package/src/tui/ui/screen.ts

@@ -96,6 +96,7 @@ export class Screen {
   private sidebarWanted = true;
   private status: StatusModel | undefined;
   private dockState: DockState = { model: "", thinking: "", busy: false, activity: "" };
+  private transientActivity: { readonly label: string; readonly startedAt: number; readonly timeoutMs: number } | undefined;
   private home: Greeting | undefined;
   private greetingPlayed = false;
   private greetingFrame = MASCOT_FRAMES;
@@ -348,6 +349,12 @@ export class Screen {
     this.paintEdges();
   }
 
+  setTransientActivity(activity: { readonly label: string; readonly timeoutMs: number } | undefined): void {
+    this.transientActivity = activity ? { ...activity, startedAt: Date.now() } : undefined;
+    this.syncActivity();
+    this.paintEdges();
+  }
+
   private paintEdges(): void {
     const width = Math.max(2, this.renderer.width - (this.shape.tier === "sidebar" ? this.shape.sidebarWidth : 0) - 2);
     const d = this.dockState, dialog = this.dialogs.open;
@@ -371,8 +378,11 @@ export class Screen {
       const seconds = Math.max(0, Math.floor((Date.now() - this.busySince) / 1000));
       const activity = this.status?.activity;
       const label = activity ? `${activity.label}${activity.label === "Running tool" || activity.label === "Retrying" ? ` · ${activity.detail}` : ""}${activity.queued ? ` · ${activity.queued} queued` : ""}` : d.activity;
-      left = [{ segs: [{ text: "●", role: "accent", spin: activity?.state !== "blocked" }, { text: ` ${label}`, role: activity?.state === "blocked" ? "warning" : "muted" }, { text: ` ${seconds}s`, role: "muted" }], priority: 0, min: 1, shrink: 1 }];
+      const transient = this.transientActivity ? ` · ${this.transientActivityText()}` : "";
+      left = [{ segs: [{ text: "●", role: "accent", spin: activity?.state !== "blocked" }, { text: ` ${label}${transient}`, role: activity?.state === "blocked" ? "warning" : "muted" }, { text: ` ${seconds}s`, role: "muted" }], priority: 0, min: 1, shrink: 1 }];
       right.push({ segs: [{ text: "esc interrupt", role: "muted" }], priority: 4 });
+    } else if (this.transientActivity) {
+      left = [{ segs: [{ text: "●", role: "accent", spin: true }, { text: ` ${this.transientActivityText()}`, role: "muted" }], priority: 0, min: 1, shrink: 1 }];
     } else {
       // A draft taller than the box says what scrolled out of view (fix-tui-composer-growth DoD 4).
       const { above, below } = this.composer.overflow;
@@ -397,7 +407,7 @@ export class Screen {
 
   /** The clock runs only while something on screen shows the activity glyph. */
   private syncActivity(): void {
-    const wanted = this.animations && (this.dockState.busy || this.dialogs.animated);
+    const wanted = this.animations && (this.dockState.busy || this.transientActivity !== undefined || this.dialogs.animated);
     if (wanted && !this.activity.running) { this.lastEvent = Date.now(); this.startClock(ACTIVITY_MS); }
     else if (!wanted && this.activity.running) { this.activity.stop(); this.paintEdges(); }
   }
@@ -413,6 +423,13 @@ export class Screen {
     }, undefined, intervalMs);
   }
 
+  private transientActivityText(): string {
+    const activity = this.transientActivity!;
+    const elapsed = Math.max(0, Math.floor((Date.now() - activity.startedAt) / 1000));
+    const deadline = Math.max(1, Math.ceil(activity.timeoutMs / 1000));
+    return `${activity.label} · ${elapsed}s / ${deadline}s max`;
+  }
+
   /** The spinner's current interval (tests). */
   get activityInterval(): number { return this.activity.running ? this.activityMs : 0; }