beecork 2.1.0 → 2.2.0

package/README.md

@@ -61,7 +61,7 @@ outside (or any shell command) goes through a permission gate.
 
 ### Slash commands
 
-`/model` · `/key` · `/context` · `/clear` · `/resume` · `/good` · `/bad` · `/help` · `Shift+Tab` (rotate mode) · `exit`
+`/model` · `/key` · `/update` · `/context` · `/clear` · `/resume` · `/good` · `/bad` · `/help` · `Shift+Tab` (rotate mode) · `exit`
 
 ### Memory
 

package/dist/index.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 // src/index.ts
-import { writeFile as writeFile4, chmod as chmod4 } from "node:fs/promises";
+import { writeFile as writeFile5, chmod as chmod4 } from "node:fs/promises";
 import { createInterface } from "node:readline/promises";
 
 // src/paths.ts
@@ -31,21 +31,6 @@ function canonical(p) {
 }
 
 // src/config.ts
-import { readFileSync } from "node:fs";
-import { parseEnv } from "node:util";
-var SAFE_ENV_KEYS = ["OPENROUTER_API_KEY", "OPENROUTER_MODEL", "BRAVE_API_KEY"];
-var keyFromProjectEnv = false;
-try {
-  const fromFile = parseEnv(readFileSync(".env", "utf8"));
-  for (const key of SAFE_ENV_KEYS) {
-    if (process.env[key] === void 0 && fromFile[key] !== void 0) {
-      process.env[key] = fromFile[key];
-      if (key === "OPENROUTER_API_KEY") keyFromProjectEnv = true;
-    }
-  }
-} catch {
-}
-var KEY_FROM_PROJECT_ENV = keyFromProjectEnv;
 var API_KEY = process.env.OPENROUTER_API_KEY ?? "";
 var RECOMMENDED_MODELS = [
   { slug: "deepseek/deepseek-v4-flash", price: "$0.09", note: "cheap + fast daily driver (default)" },
@@ -111,6 +96,75 @@ var config = {
   // headless: skip permission prompts (explicit truthy only)
 };
 
+// src/update.ts
+import { readFile, writeFile, mkdir } from "node:fs/promises";
+import { homedir as homedir2 } from "node:os";
+import { join, dirname } from "node:path";
+import { spawn } from "node:child_process";
+var CHECK_INTERVAL_MS = 24 * 60 * 60 * 1e3;
+var cacheFile = () => join(homedir2(), ".beecork", "update-check.json");
+async function currentVersion() {
+  try {
+    const pkg = JSON.parse(await readFile(new URL("../package.json", import.meta.url), "utf8"));
+    return String(pkg.version ?? "0.0.0");
+  } catch {
+    return "0.0.0";
+  }
+}
+function isNewer(a, b) {
+  const pa = a.split(".").map((n) => parseInt(n, 10) || 0);
+  const pb = b.split(".").map((n) => parseInt(n, 10) || 0);
+  for (let i = 0; i < 3; i++) {
+    if ((pa[i] || 0) > (pb[i] || 0)) return true;
+    if ((pa[i] || 0) < (pb[i] || 0)) return false;
+  }
+  return false;
+}
+async function fetchLatest() {
+  try {
+    const res = await fetch("https://registry.npmjs.org/beecork/latest", {
+      headers: { Accept: "application/vnd.npm.install-v1+json" },
+      // the slim metadata doc
+      signal: AbortSignal.timeout(3e3)
+    });
+    if (!res.ok) return null;
+    const v = (await res.json())?.version;
+    return typeof v === "string" ? v : null;
+  } catch {
+    return null;
+  }
+}
+async function checkForUpdate(current) {
+  if (process.env.NO_UPDATE_NOTIFIER || process.env.CI) return null;
+  let cache = {};
+  try {
+    cache = JSON.parse(await readFile(cacheFile(), "utf8"));
+  } catch {
+  }
+  if (!cache.checkedAt || Date.now() - cache.checkedAt > CHECK_INTERVAL_MS) {
+    void fetchLatest().then(async (latest) => {
+      if (!latest) return;
+      try {
+        const file = cacheFile();
+        await mkdir(dirname(file), { recursive: true });
+        await writeFile(file, JSON.stringify({ checkedAt: Date.now(), latest }), "utf8");
+      } catch {
+      }
+    });
+  }
+  return cache.latest && isNewer(cache.latest, current) ? cache.latest : null;
+}
+function selfUpdate() {
+  return new Promise((resolve2) => {
+    const child = spawn("npm", ["install", "-g", "beecork@latest"], { stdio: ["ignore", "pipe", "pipe"] });
+    let out2 = "";
+    child.stdout?.on("data", (d) => out2 += d);
+    child.stderr?.on("data", (d) => out2 += d);
+    child.on("error", (e) => resolve2({ ok: false, output: e.message }));
+    child.on("close", (code) => resolve2({ ok: code === 0, output: out2.trim() }));
+  });
+}
+
 // src/state.ts
 var MODES = ["normal", "auto", "readonly"];
 function nextMode(m) {
@@ -393,7 +447,7 @@ function printBanner(model, sources) {
 }
 
 // src/agent.ts
-import { readFile as readFile3 } from "node:fs/promises";
+import { readFile as readFile4 } from "node:fs/promises";
 
 // src/show.ts
 var BOX_W = () => Math.min(process.stdout.columns || 80, 100);
@@ -593,18 +647,18 @@ function createMarkdownStream(write) {
 }
 
 // src/tools.ts
-import { readFile, writeFile, appendFile, readdir, mkdir, stat, rename, chmod } from "node:fs/promises";
+import { readFile as readFile2, writeFile as writeFile2, appendFile, readdir, mkdir as mkdir2, stat, rename, chmod } from "node:fs/promises";
 import { createReadStream } from "node:fs";
 import { createInterface as createLineReader } from "node:readline";
-import { spawn } from "node:child_process";
-import { join } from "node:path";
+import { spawn as spawn2 } from "node:child_process";
+import { join as join2 } from "node:path";
 import { lookup as dnsLookup } from "node:dns";
 import { request as httpRequest } from "node:http";
 import { request as httpsRequest } from "node:https";
 import { isIP } from "node:net";
 
 // src/safety.ts
-import { homedir as homedir2 } from "node:os";
+import { homedir as homedir3 } from "node:os";
 function pathGuard(args) {
   const { abs, inRoot } = resolveInRoot(String(args.path ?? "."));
   return inRoot ? {} : { needsApproval: true, reason: `path is outside the project root: ${abs}` };
@@ -655,7 +709,7 @@ var RISKY_BASH = [
   // eval/source of a download
 ];
 function refsOutsideRoot(cmd) {
-  const norm = cmd.replace(/\$\{?IFS\}?/g, " ").replace(/\$\{?HOME\}?/g, homedir2()).replace(/\$\{?PWD\}?/g, process.cwd()).replace(/(^|[\s"'`=(])~(?=\/|$)/g, (_m, p) => p + homedir2());
+  const norm = cmd.replace(/\$\{?IFS\}?/g, " ").replace(/\$\{?HOME\}?/g, homedir3()).replace(/\$\{?PWD\}?/g, process.cwd()).replace(/(^|[\s"'`=(])~(?=\/|$)/g, (_m, p) => p + homedir3());
   if (/(^|[\s"'`=(])(\.\.\/|~(\/|$))/.test(norm)) return true;
   for (const m of norm.matchAll(/(?:^|[\s"'`=(])(\/[^\s"'`;|&()<>]*)/g)) {
     if (!resolveInRoot(m[1]).inRoot) return true;
@@ -730,7 +784,7 @@ function decodeEntities(s) {
 function runShell(command, opts) {
   return new Promise((resolve2, reject) => {
     const unix = process.platform !== "win32";
-    const child = spawn(command, { shell: true, detached: unix });
+    const child = spawn2(command, { shell: true, detached: unix });
     let stdout = "", stderr = "", outLen = 0, errLen = 0, timedOut = false, aborted = false;
     const kill = () => {
       try {
@@ -787,7 +841,7 @@ function runShell(command, opts) {
 var fail = (verb, err) => `Error ${verb}: ${err.message}`;
 async function atomicWrite(abs, content) {
   const tmp = `${abs}.beecork-${process.pid}.tmp`;
-  await writeFile(tmp, content, "utf8");
+  await writeFile2(tmp, content, "utf8");
   try {
     await chmod(tmp, (await stat(abs)).mode);
   } catch {
@@ -886,7 +940,7 @@ async function walkTree(abs, prefix, items, cap) {
     const e = kept[i];
     const last = i === kept.length - 1;
     items.push({ prefix: prefix + (last ? "\u2514\u2500 " : "\u251C\u2500 "), name: e.name + (e.isDirectory() ? "/" : ""), isDir: e.isDirectory() });
-    if (e.isDirectory()) await walkTree(join(abs, e.name), prefix + (last ? "   " : "\u2502  "), items, cap);
+    if (e.isDirectory()) await walkTree(join2(abs, e.name), prefix + (last ? "   " : "\u2502  "), items, cap);
   }
 }
 function parseRange(args, defLimit) {
@@ -1038,7 +1092,7 @@ var toolDefs = [
             if (info && info.size > config.searchMaxFileBytes) continue;
             let lines;
             try {
-              lines = (await readFile(full, "utf8")).split("\n");
+              lines = (await readFile2(full, "utf8")).split("\n");
             } catch {
               continue;
             }
@@ -1104,7 +1158,7 @@ var toolDefs = [
     run: async (args) => {
       try {
         const { abs } = resolveInRoot(String(args.path ?? "."));
-        const original = await readFile(abs, "utf8");
+        const original = await readFile2(abs, "utf8");
         const count = original.split(args.old_text).length - 1;
         if (count === 0) {
           return `Error: old_text not found in ${args.path}. Re-read the file and copy the exact text (including whitespace/indentation).`;
@@ -1143,14 +1197,19 @@ var toolDefs = [
   },
   {
     name: "run_bash",
-    description: "Run a shell command and return its output. Use for things like running tests or git.",
+    description: "Run a shell command and return its output (tests, git, builds, etc.). You MUST set `explanation` with what the command does and why you need it \u2014 the user sees it and approves every run.",
     needsApproval: true,
+    alwaysAsk: true,
+    // shell access is confirmed every time — never silently "always"-cached
     guard: bashGuard,
     // risky commands (rm/dd/sudo/pipe-to-interpreter…) get the per-call gate
     parameters: {
       type: "object",
-      properties: { command: { type: "string", description: "The shell command to run." } },
-      required: ["command"]
+      properties: {
+        command: { type: "string", description: "The shell command to run." },
+        explanation: { type: "string", description: "One sentence: WHAT this command does and WHY you need it now. Shown to the user before they approve." }
+      },
+      required: ["command", "explanation"]
     },
     run: async (args, signal) => {
       const danger = DANGEROUS_BASH.find((re) => re.test(String(args.command)));
@@ -1285,13 +1344,13 @@ ${body || "(no text content)"}`;
     },
     run: async (args) => {
       try {
-        const dir = join(process.cwd(), ".beecork");
-        await mkdir(dir, { recursive: true });
-        const file = join(dir, "memory.md");
+        const dir = join2(process.cwd(), ".beecork");
+        await mkdir2(dir, { recursive: true });
+        const file = join2(dir, "memory.md");
         try {
           await stat(file);
         } catch {
-          await writeFile(file, "# beecork memory\n\n", "utf8");
+          await writeFile2(file, "# beecork memory\n\n", "utf8");
         }
         await appendFile(file, `- ${String(args.fact).trim()}
 `, "utf8");
@@ -1559,29 +1618,29 @@ ${summary}` }, ...recent];
 }
 
 // src/memory.ts
-import { readFile as readFile2, writeFile as writeFile2, readdir as readdir2, mkdir as mkdir2, chmod as chmod2, rename as rename2 } from "node:fs/promises";
-import { homedir as homedir3 } from "node:os";
-import { join as join2, dirname } from "node:path";
+import { readFile as readFile3, writeFile as writeFile3, readdir as readdir2, mkdir as mkdir3, chmod as chmod2, rename as rename2 } from "node:fs/promises";
+import { homedir as homedir4 } from "node:os";
+import { join as join3, dirname as dirname2 } from "node:path";
 var BEECORK = ".beecork";
 function ancestorDirs() {
-  const home = homedir3();
+  const home = homedir4();
   const dirs = [];
   let dir = process.cwd();
-  while (dir !== home && dir !== dirname(dir)) {
+  while (dir !== home && dir !== dirname2(dir)) {
     dirs.push(dir);
-    dir = dirname(dir);
+    dir = dirname2(dir);
   }
   return dirs.reverse();
 }
 function corkPaths() {
-  return [join2(homedir3(), BEECORK, "cork.md"), ...ancestorDirs().map((d) => join2(d, "cork.md"))];
+  return [join3(homedir4(), BEECORK, "cork.md"), ...ancestorDirs().map((d) => join3(d, "cork.md"))];
 }
 function beecorkPaths(name) {
-  return [join2(homedir3(), BEECORK, name), ...ancestorDirs().map((d) => join2(d, BEECORK, name))];
+  return [join3(homedir4(), BEECORK, name), ...ancestorDirs().map((d) => join3(d, BEECORK, name))];
 }
 async function loadInstructions() {
-  const home = homedir3();
-  const homeBeecork = join2(home, ".beecork");
+  const home = homedir4();
+  const homeBeecork = join3(home, ".beecork");
   const trusted = [];
   const project = [];
   const sources = [];
@@ -1590,7 +1649,7 @@ async function loadInstructions() {
   let total = 0;
   for (const file of [...corkPaths(), ...beecorkPaths("memory.md")]) {
     try {
-      let content = (await readFile2(file, "utf8")).trim();
+      let content = (await readFile3(file, "utf8")).trim();
       if (!content) continue;
       if (content.length > MAX_FILE) content = content.slice(0, MAX_FILE) + "\n\u2026(truncated)";
       if (total + content.length > MAX_TOTAL) content = content.slice(0, Math.max(0, MAX_TOTAL - total)) + "\n\u2026(truncated)";
@@ -1607,7 +1666,7 @@ ${content}`;
 }
 async function readJsonFile(path) {
   try {
-    return JSON.parse(await readFile2(path, "utf8"));
+    return JSON.parse(await readFile3(path, "utf8"));
   } catch (err) {
     if (err.code !== "ENOENT") {
       console.error(color.yellow(`\u26A0 ignoring malformed ${tildify(path)}: ${err.message}`));
@@ -1632,29 +1691,29 @@ async function loadSettings() {
   return { model, alwaysAllow, projectAlwaysAllowIgnored };
 }
 function userConfigPath() {
-  return join2(homedir3(), BEECORK, "config.json");
+  return join3(homedir4(), BEECORK, "config.json");
 }
 async function loadUserConfig() {
   return await readJsonFile(userConfigPath()) ?? {};
 }
 async function saveUserConfig(patch) {
   const file = userConfigPath();
-  await mkdir2(dirname(file), { recursive: true });
+  await mkdir3(dirname2(file), { recursive: true });
   const merged = { ...await loadUserConfig(), ...patch };
-  await writeFile2(file, JSON.stringify(merged, null, 2), "utf8");
+  await writeFile3(file, JSON.stringify(merged, null, 2), "utf8");
   try {
     await chmod2(file, 384);
   } catch {
   }
 }
-var sessionsDir = () => join2(process.cwd(), BEECORK, "sessions");
+var sessionsDir = () => join3(process.cwd(), BEECORK, "sessions");
 async function saveSession(messages) {
   try {
     const dir = sessionsDir();
-    await mkdir2(dir, { recursive: true });
-    const file = join2(dir, `${Date.now()}.json`);
+    await mkdir3(dir, { recursive: true });
+    const file = join3(dir, `${Date.now()}.json`);
     const tmp = `${file}.tmp`;
-    await writeFile2(tmp, JSON.stringify(messages), "utf8");
+    await writeFile3(tmp, JSON.stringify(messages), "utf8");
     await chmod2(tmp, 384).catch(() => {
     });
     await rename2(tmp, file);
@@ -1682,7 +1741,7 @@ function sanitizeSession(raw) {
 }
 async function readSession(file) {
   try {
-    return sanitizeSession(JSON.parse(await readFile2(join2(sessionsDir(), file), "utf8")));
+    return sanitizeSession(JSON.parse(await readFile3(join3(sessionsDir(), file), "utf8")));
   } catch {
     return null;
   }
@@ -1719,7 +1778,7 @@ async function loadSession(file) {
   return await readSession(file) ?? [];
 }
 function projectApprovalsPath() {
-  return join2(homedir3(), BEECORK, "project-approvals.json");
+  return join3(homedir4(), BEECORK, "project-approvals.json");
 }
 async function loadProjectApprovals() {
   const all = await readJsonFile(projectApprovalsPath());
@@ -1729,12 +1788,12 @@ async function loadProjectApprovals() {
 async function addProjectApproval(tool) {
   try {
     const file = projectApprovalsPath();
-    await mkdir2(dirname(file), { recursive: true });
+    await mkdir3(dirname2(file), { recursive: true });
     const all = await readJsonFile(file) ?? {};
     const list = new Set(Array.isArray(all[projectRoot]) ? all[projectRoot] : []);
     list.add(tool);
     all[projectRoot] = [...list];
-    await writeFile2(file, JSON.stringify(all, null, 2), "utf8");
+    await writeFile3(file, JSON.stringify(all, null, 2), "utf8");
     await chmod2(file, 384).catch(() => {
     });
   } catch {
@@ -1778,12 +1837,13 @@ async function askApproval(ask, call, reason) {
 \u26A0\uFE0F  The agent wants to use: ${call.function.name}`));
   if (reason) console.log(color.red(`   \u26A0 ${reason}`));
   if (call.function.name === "run_bash") {
+    if (args.explanation) console.log("   " + color.cyan(stripControl(String(args.explanation))));
     console.log(color.yellow(`   $ ${stripControl(String(args.command ?? ""))}`));
   } else if (call.function.name === "edit_file") {
     console.log(color.yellow(`   edit ${stripControl(String(args.path ?? ""))}:`));
     console.log(diffPreview(lineDiff(stripControl(String(args.old_text ?? "")), stripControl(String(args.new_text ?? "")))));
   } else if (call.function.name === "write_file") {
-    const existing = (await readFile3(resolveInRoot(String(args.path ?? ".")).abs, "utf8").catch(() => "")).slice(0, 2e5);
+    const existing = (await readFile4(resolveInRoot(String(args.path ?? ".")).abs, "utf8").catch(() => "")).slice(0, 2e5);
     console.log(color.yellow(`   write ${stripControl(String(args.path ?? ""))} ${existing ? "(overwrite)" : "(new file)"}:`));
     console.log(diffPreview(lineDiff(stripControl(existing), stripControl(String(args.content ?? "")))));
   } else {
@@ -1803,8 +1863,9 @@ function decideApproval(tool, args, ctx) {
     if (ctx.autoApprove) return { action: "deny", kind: "headless", reason: guard.reason ?? "blocked" };
     return { action: "ask", cacheable: false, reason: guard.reason };
   }
-  if (tool?.needsApproval && !ctx.approvedTools.has(ctx.toolName) && !ctx.autoApprove && ctx.mode !== "auto") {
-    return { action: "ask", cacheable: true };
+  if (tool?.needsApproval && !ctx.autoApprove && ctx.mode !== "auto") {
+    if (tool.alwaysAsk) return { action: "ask", cacheable: false };
+    if (!ctx.approvedTools.has(ctx.toolName)) return { action: "ask", cacheable: true };
   }
   return { action: "run" };
 }
@@ -1951,12 +2012,12 @@ async function runTurn(messages, userInput, ask, approvedTools, signal) {
 }
 
 // src/commands.ts
-import { writeFile as writeFile3, mkdir as mkdir3, chmod as chmod3 } from "node:fs/promises";
+import { writeFile as writeFile4, mkdir as mkdir4, chmod as chmod3 } from "node:fs/promises";
 
 // src/skills.ts
-import { readdir as readdir3, readFile as readFile4 } from "node:fs/promises";
-import { join as join3 } from "node:path";
-import { homedir as homedir4 } from "node:os";
+import { readdir as readdir3, readFile as readFile5 } from "node:fs/promises";
+import { join as join4 } from "node:path";
+import { homedir as homedir5 } from "node:os";
 var registry = /* @__PURE__ */ new Map();
 function skillNames() {
   return [...registry.keys()];
@@ -1967,8 +2028,8 @@ function getSkill(name) {
 async function loadSkills() {
   registry.clear();
   const dirs = [
-    [join3(homedir4(), ".beecork", "skills"), "global"],
-    [join3(process.cwd(), ".beecork", "skills"), "project"]
+    [join4(homedir5(), ".beecork", "skills"), "global"],
+    [join4(process.cwd(), ".beecork", "skills"), "project"]
   ];
   for (const [dir, source] of dirs) {
     let entries;
@@ -1982,7 +2043,7 @@ async function loadSkills() {
       const name = e.name.slice(0, -3);
       if (!/^[a-z0-9][a-z0-9_-]*$/i.test(name)) continue;
       try {
-        const content = (await readFile4(join3(dir, e.name), "utf8")).trim();
+        const content = (await readFile5(join4(dir, e.name), "utf8")).trim();
         if (!content) continue;
         if (source === "project" && registry.has(name)) {
           console.error(color.yellow(`\u26A0 project skill /${name} ignored \u2014 a global skill of that name takes precedence`));
@@ -2328,6 +2389,7 @@ var SLASH_COMMANDS = [
   { name: "/context", desc: "conversation size in tokens" },
   { name: "/clear", desc: "clear the conversation" },
   { name: "/key", desc: "set + save your OpenRouter API key" },
+  { name: "/update", desc: "update beecork to the latest version" },
   { name: "/resume", desc: "resume a previous session (pick from a list)" },
   { name: "/good", desc: "rate this conversation good" },
   { name: "/bad", desc: "rate this conversation bad (\u2192 eval/failures)" },
@@ -2376,6 +2438,14 @@ async function handleCommand(input, messages) {
         `~${estimateTokens(messages)} tokens in ${messages.length} messages (auto-compacts above ${config.maxContextTokens})`
       ) + "\n"
     );
+  } else if (cmd === "/update") {
+    console.log(color.dim("updating beecork\u2026 (npm install -g beecork@latest)"));
+    const { ok, output } = await selfUpdate();
+    if (ok) console.log(color.green("\u2713 updated \u2014 restart beecork to use the new version.") + "\n");
+    else {
+      console.log(color.red("update failed: ") + output.split("\n").filter(Boolean).slice(-1)[0]);
+      console.log(color.dim("  run manually: npm install -g beecork  (may need sudo / your version manager)") + "\n");
+    }
   } else if (cmd === "/clear") {
     messages.splice(1);
     if (process.stdout.isTTY) process.stdout.write("\x1B[2J\x1B[3J\x1B[H");
@@ -2410,9 +2480,9 @@ async function handleCommand(input, messages) {
   } else if (cmd === "/good" || cmd === "/bad") {
     const dir = cmd === "/bad" ? "eval/failures" : "eval/good";
     try {
-      await mkdir3(dir, { recursive: true });
+      await mkdir4(dir, { recursive: true });
       const file = `${dir}/${Date.now()}.json`;
-      await writeFile3(file, JSON.stringify({ rating: cmd.slice(1), model: state.model, messages }, null, 2), "utf8");
+      await writeFile4(file, JSON.stringify({ rating: cmd.slice(1), model: state.model, messages }, null, 2), "utf8");
       await chmod3(file, 384).catch(() => {
       });
       console.log(
@@ -2517,6 +2587,17 @@ function completer(line) {
 
 // src/index.ts
 async function main() {
+  if (process.argv[2] === "update") {
+    console.log("Updating beecork\u2026");
+    const { ok, output } = await selfUpdate();
+    if (ok) console.log(color.green("\u2713 beecork updated. Run `beecork` to use the new version."));
+    else {
+      console.error(color.red("Update failed:") + "\n" + output);
+      console.error(color.dim("\nTry manually: npm install -g beecork  (you may need sudo, or your Node version manager)."));
+      process.exitCode = 1;
+    }
+    return;
+  }
   const [userCfg, instr, settings, skills, projectApprovals] = await Promise.all([
     loadUserConfig(),
     // ~/.beecork/config.json (API keys)
@@ -2530,7 +2611,7 @@ async function main() {
     // per-project "always" from past sessions
   ]);
   const savedKey = String(userCfg.OPENROUTER_API_KEY ?? "");
-  let apiKey = KEY_FROM_PROJECT_ENV ? savedKey || API_KEY : API_KEY || savedKey;
+  let apiKey = API_KEY || savedKey;
   state.braveKey = process.env.BRAVE_API_KEY || String(userCfg.BRAVE_API_KEY ?? "");
   if (settings.model && !process.env.OPENROUTER_MODEL) state.model = settings.model;
   let systemContent = SYSTEM_PROMPT;
@@ -2568,6 +2649,11 @@ ${instr.trusted}`;
   }
   const rl = tty ? null : createInterface({ input: process.stdin, output: process.stdout, completer });
   printBanner(state.model, instr.sources.map(tildify));
+  if (tty) {
+    const version = await currentVersion();
+    const newer = await checkForUpdate(version);
+    if (newer) console.log(color.dim(`\u25B8 beecork ${newer} is available (you have ${version}) \u2014 update: npm install -g beecork`) + "\n");
+  }
   if (approvedTools.size) {
     console.log(color.dim(`pre-approved tools (won't ask this session): ${[...approvedTools].join(", ")}`) + "\n");
   }
@@ -2589,15 +2675,12 @@ ${instr.trusted}`;
     }
   }
   if (!apiKey) {
-    console.error("No OpenRouter API key. Set OPENROUTER_API_KEY, add it to .env, or run interactively to paste one.");
+    console.error("No OpenRouter API key. Set the OPENROUTER_API_KEY env var, or run beecork interactively to paste one (saved to ~/.beecork).");
     teardownInput();
     rl?.close();
     process.exit(1);
   }
   state.apiKey = apiKey;
-  if (KEY_FROM_PROJECT_ENV && apiKey === API_KEY && apiKey) {
-    console.log(color.yellow("\u26A0 Using the OpenRouter API key from this project's .env \u2014 not your saved key. If this repo isn't yours, that key (and your prompts) may not be safe.") + "\n");
-  }
   const ask = tty ? (q) => readChoice(q) : (q) => rl.question(q);
   let activeTurn = null;
   if (!tty) {
@@ -2672,7 +2755,7 @@ ${instr.trusted}`;
   rl?.close();
   if (messages.length > 1 && !config.traceFile) await saveSession(messages.slice(1));
   if (config.traceFile) {
-    await writeFile4(config.traceFile, JSON.stringify(trace), "utf8");
+    await writeFile5(config.traceFile, JSON.stringify(trace), "utf8");
     await chmod4(config.traceFile, 384).catch(() => {
     });
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "beecork",
-  "version": "2.1.0",
+  "version": "2.2.0",
   "description": "beecork — a from-scratch CLI coding agent: multi-model (OpenRouter), BYOK, path-confined tools, built part by part.",
   "type": "module",
   "bin": {