beecork 2.5.0 → 2.5.2

package/README.md

@@ -77,11 +77,12 @@ The agent can delegate an open-ended investigation to a **read-only sub-agent**
 (reading, searching, browsing the web) in a separate context and returns just a summary — keeping the
 main conversation clean. It cannot modify anything, run commands, or recurse.
 
-### Status line
+### Pinned UI + status line
 
-An optional bar on the terminal's bottom row shows `model · effort · git branch · ~tokens · background
-tasks`. It's **off by default** while a proper pinned-input version is built; opt into the interim one
-with `STATUSLINE=1`.
+On an interactive terminal, beecork pins a persistent input box and a rich status line
+(`mode · model · effort · git branch · ~tokens · background tasks`) to the bottom, with the
+conversation scrolling above (Claude-Code style). Shift+Tab rotates the mode. This is **on by default**;
+opt out with `STATUSLINE=0` to use the classic inline editor. Piped/non-TTY input is unaffected either way.
 
 ### Skipping permissions (danger)
 
@@ -125,7 +126,7 @@ All variables are read from the real shell environment only (never a project fil
 | `VERIFY_COMMAND` | Command auto-run after edits (e.g. `npm run typecheck`) | — |
 | `AUTO_APPROVE` | Headless: skip approval prompts (out-of-root/risky shell are still hard-denied) | off |
 | `BEECORK_DANGEROUSLY_SKIP_PERMISSIONS` | Sandbox-only: skip the whole gate (also `--dangerously-skip-permissions`) | off |
-| `STATUSLINE` / `STATUSLINE_REFRESH_MS` | Bottom status bar on/off · refresh interval | on · `2000` |
+| `STATUSLINE` / `STATUSLINE_REFRESH_MS` | Pinned UI + status bar (set `0` to opt out) · refresh interval | on · `2000` |
 | `NO_UPDATE_NOTIFIER` / `CI` | Disable the "update available" check | off |
 | `MAX_STEPS` | Max tool steps per turn | `50` |
 | `EXEC_TIMEOUT_MS` | `run_bash` timeout | `30000` |

package/dist/index.js

@@ -114,10 +114,11 @@ var config = {
   // Sub-agent (explore tool)
   subAgentMaxSteps: num("SUBAGENT_MAX_STEPS", 15),
   // child explorer's step budget (bounds cost/latency)
-  // Live status line (bottom row: model · effort · git branch · ~tokens · bg tasks). DEFAULT OFF —
-  // the interim scroll-region version clashes with the inline input (banner loss / flicker); it's
-  // being replaced by a proper pinned-input UI. Opt in with STATUSLINE=1.
-  statuslineEnabled: ["1", "true", "on", "yes"].includes((process.env.STATUSLINE ?? "").trim().toLowerCase()),
+  // Pinned bottom UI: a persistent input box + a rich statusline (mode · model · effort · branch ·
+  // ~tokens · bg tasks), the conversation scrolling above. DEFAULT ON for interactive TTYs; opt out
+  // with STATUSLINE=0 (falls back to the classic inline editor). Non-TTY (piped/CI) is unaffected
+  // either way — chromeEnabled() also requires a TTY.
+  statuslineEnabled: !["0", "false", "off", "no"].includes((process.env.STATUSLINE ?? "").trim().toLowerCase()),
   statuslineRefreshMs: num("STATUSLINE_REFRESH_MS", 2e3),
   // bar refresh interval
   // Integrations / modes
@@ -135,9 +136,10 @@ var config = {
 };
 
 // src/update.ts
-import { readFile, writeFile, mkdir } from "node:fs/promises";
+import { readFile, writeFile, mkdir, realpath } from "node:fs/promises";
 import { homedir as homedir2 } from "node:os";
-import { join, dirname } from "node:path";
+import { join, dirname, basename, delimiter } from "node:path";
+import { fileURLToPath } from "node:url";
 import { spawn } from "node:child_process";
 var CHECK_INTERVAL_MS = 24 * 60 * 60 * 1e3;
 var cacheFile = () => join(homedir2(), ".beecork", "update-check.json");
@@ -149,6 +151,48 @@ async function currentVersion() {
     return "0.0.0";
   }
 }
+function runningPkgRoot() {
+  return fileURLToPath(new URL("..", import.meta.url));
+}
+function prefixFromPkgRoot(pkgRoot) {
+  const nm = dirname(pkgRoot);
+  if (basename(nm) !== "node_modules") return null;
+  const up = dirname(nm);
+  return basename(up) === "lib" ? dirname(up) : up;
+}
+function installPrefix() {
+  return prefixFromPkgRoot(runningPkgRoot());
+}
+async function findShadowingInstalls() {
+  let running;
+  try {
+    running = await realpath(runningPkgRoot());
+  } catch {
+    running = runningPkgRoot();
+  }
+  const names = process.platform === "win32" ? ["beecork.cmd", "beecork"] : ["beecork"];
+  const seenRoots = /* @__PURE__ */ new Set([running]);
+  const others = [];
+  for (const dir of (process.env.PATH ?? "").split(delimiter).filter(Boolean)) {
+    for (const name of names) {
+      try {
+        const bin = join(dir, name);
+        const root = dirname(dirname(await realpath(bin)));
+        if (seenRoots.has(root)) continue;
+        seenRoots.add(root);
+        const pkg = JSON.parse(await readFile(join(root, "package.json"), "utf8"));
+        if (String(pkg.name) === "beecork") others.push({ bin, version: String(pkg.version ?? "?").replace(/[^\w.+-]/g, "") });
+      } catch {
+      }
+    }
+  }
+  return others;
+}
+async function shadowWarning() {
+  const others = await findShadowingInstalls();
+  if (!others.length) return null;
+  return "\u26A0 Another beecork is on your PATH and may shadow the version you just installed:\n" + others.map((o) => `    ${o.bin}  (v${o.version})`).join("\n") + "\n  Remove the stale one(s) so `beecork` always runs the newest install (may need sudo):\n" + others.map((o) => `    rm ${o.bin}`).join("\n");
+}
 function isNewer(a, b) {
   const pa = a.split(".").map((n) => parseInt(n, 10) || 0);
   const pb = b.split(".").map((n) => parseInt(n, 10) || 0);
@@ -195,7 +239,9 @@ async function checkForUpdate(current) {
 function selfUpdate(timeoutMs = 12e4) {
   return new Promise((resolve2) => {
     const npm = process.platform === "win32" ? "npm.cmd" : "npm";
-    const child = spawn(npm, ["install", "-g", "beecork@latest"], { stdio: ["ignore", "pipe", "pipe"] });
+    const prefix = installPrefix();
+    const args = ["install", "-g", "beecork@latest", ...prefix ? ["--prefix", prefix] : []];
+    const child = spawn(npm, args, { stdio: ["ignore", "pipe", "pipe"] });
     let out3 = "", done = false;
     const finish = (r) => {
       if (done) return;
@@ -494,8 +540,9 @@ function markLines(width) {
   }
   return lines.filter((l) => l.length > 0);
 }
-function printBanner(model, sources) {
+function printBanner(model, version, sources) {
   const safeModel = stripControl(model);
+  const safeVersion = stripControl(version);
   const word = [
     "  _                              _    ",
     " | |__   ___  ___  ___ ___  _ __| | __",
@@ -527,7 +574,7 @@ function printBanner(model, sources) {
   const mem = sources.filter((s) => s.endsWith("memory.md"));
   const cwd = tildify(process.cwd());
   const rows2 = [
-    ["", "\u{1F41D}  a tiny CLI coding agent"],
+    ["", `\u{1F41D}  a tiny CLI coding agent  \xB7  v${safeVersion}`],
     ["dir", cwd],
     ["model", safeModel],
     ["cork.md", cork.length ? cork.join(", ") : "none"],
@@ -1307,7 +1354,7 @@ async function runExplorer(task, focus, signal) {
 
 // src/safety.ts
 import { homedir as homedir3 } from "node:os";
-import { basename } from "node:path";
+import { basename as basename2 } from "node:path";
 function pathGuard(args) {
   const { abs, inRoot } = resolveInRoot(String(args.path ?? "."));
   return inRoot ? {} : { needsApproval: true, reason: `path is outside the project root: ${abs}`, cacheKey: `path:${abs}` };
@@ -1315,7 +1362,7 @@ function pathGuard(args) {
 var SECRET_FILE = /(^|\/)(\.env(\.[\w.-]+)?|[\w.-]*\.(env|pem|key|secret|pfx|p12|jks|keystore)|id_(rsa|ed25519|ecdsa|dsa)|credentials|\.git-credentials|\.pgpass|\.npmrc|\.netrc)$/i;
 function isSecretPath(userPath) {
   const { abs } = resolveInRoot(userPath);
-  return SECRET_FILE.test(abs) || SECRET_FILE.test(basename(abs));
+  return SECRET_FILE.test(abs) || SECRET_FILE.test(basename2(abs));
 }
 function secretGuard(args) {
   const p = pathGuard(args);
@@ -3664,8 +3711,11 @@ async function handleCommand(input, messages) {
   } else if (cmd === "/update") {
     console.log(color.dim("updating beecork\u2026 (npm install -g beecork@latest)"));
     const { ok, output } = await selfUpdate();
-    if (ok) console.log(color.green("\u2713 updated \u2014 restart beecork to use the new version.") + "\n");
-    else {
+    if (ok) {
+      console.log(color.green("\u2713 updated \u2014 restart beecork to use the new version.") + "\n");
+      const w = await shadowWarning();
+      if (w) console.log(color.yellow(w) + "\n");
+    } else {
       console.log(color.red("update failed: ") + output.split("\n").filter(Boolean).slice(-1)[0]);
       console.log(color.dim("  run manually: npm install -g beecork  (may need sudo / your version manager)") + "\n");
     }
@@ -3835,8 +3885,11 @@ async function main() {
   if (process.argv[2] === "update") {
     console.log("Updating beecork\u2026");
     const { ok, output } = await selfUpdate();
-    if (ok) console.log(color.green("\u2713 beecork updated. Run `beecork` to use the new version."));
-    else {
+    if (ok) {
+      console.log(color.green("\u2713 beecork updated. Run `beecork` to use the new version."));
+      const w = await shadowWarning();
+      if (w) console.log("\n" + color.yellow(w));
+    } else {
       console.error(color.red("Update failed:") + "\n" + output);
       console.error(color.dim("\nTry manually: npm install -g beecork  (you may need sudo, or your Node version manager)."));
       process.exitCode = 1;
@@ -3917,12 +3970,12 @@ ${instr.trusted}`;
   }
   const rl = tty ? null : createInterface({ input: process.stdin, output: process.stdout, completer });
   if (chromeEnabled()) process.stdout.write(ansi.clearScreen + ansi.clearScrollback + ansi.home);
-  printBanner(state.model, instr.sources.map(tildify));
+  const version = await currentVersion();
+  printBanner(state.model, version, instr.sources.map(tildify));
   if (config.dangerouslySkipPermissions) {
     console.log(color.red("\u26A0  --dangerously-skip-permissions is ON: the approval gate is OFF. Out-of-root paths and risky") + "\n" + color.red("   shell commands will RUN unprompted. Use only in a disposable sandbox. (read-only mode + catastrophic-") + "\n" + color.red("   command refusal still apply.)") + "\n");
   }
   if (tty) {
-    const version = await currentVersion();
     const newer = await checkForUpdate(version);
     if (newer) console.log(color.dim(`\u25B8 beecork ${stripControl(newer)} is available (you have ${version}) \u2014 update: npm install -g beecork`) + "\n");
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "beecork",
-  "version": "2.5.0",
+  "version": "2.5.2",
   "description": "beecork — a from-scratch CLI coding agent: multi-model (OpenRouter), BYOK, path-confined tools, built part by part.",
   "type": "module",
   "bin": {