blyuecode 0.1.10 → 0.1.12

package/dist/core/localCheck.js

@@ -0,0 +1,14 @@
+export async function detectOllama(url = 'http://localhost:11434') {
+    try {
+        const res = await fetch(`${url}/api/tags`, {
+            signal: AbortSignal.timeout(1500),
+        });
+        if (!res.ok)
+            return [];
+        const json = await res.json();
+        return (json.models || []).map((m) => m.name);
+    }
+    catch {
+        return [];
+    }
+}

package/dist/core/provider.js

@@ -1,4 +1,10 @@
 import OpenAI from 'openai';
+import fs from 'fs';
+import path from 'path';
+import os from 'os';
+import { redact } from './redact.js';
+const DEBUG_DIR = path.join(os.homedir(), '.blyue');
+const LAST_REQUEST = path.join(DEBUG_DIR, 'last-request.json');
 export class Provider {
     client;
     model;
@@ -12,14 +18,46 @@ export class Provider {
             baseURL: process.env.OPENAI_BASE_URL,
         });
     }
+    sanitize(messages) {
+        let redactedCount = 0;
+        const out = messages.map((m) => {
+            if (typeof m.content !== 'string')
+                return m;
+            const { text, count } = redact(m.content);
+            redactedCount += count;
+            return { ...m, content: text };
+        });
+        return { messages: out, redactedCount };
+    }
+    writeDebug(payload) {
+        try {
+            if (!fs.existsSync(DEBUG_DIR))
+                fs.mkdirSync(DEBUG_DIR, { recursive: true });
+            fs.writeFileSync(LAST_REQUEST, JSON.stringify(payload, null, 2));
+        }
+        catch { }
+    }
     async chat(messages, tools) {
+        const { messages: safeMessages, redactedCount } = this.sanitize(messages);
         try {
             const res = await this.client.chat.completions.create({
                 model: this.model,
-                messages: messages,
+                messages: safeMessages,
                 tools,
                 tool_choice: 'auto',
             });
+            // Log debug info after successful call
+            const totalBytes = JSON.stringify(safeMessages).length;
+            this.writeDebug({
+                model: this.model,
+                baseUrl: process.env.OPENAI_BASE_URL || 'https://api.openai.com/v1',
+                messages: safeMessages,
+                approxTokens: Math.round(totalBytes / 4),
+                approxBytes: totalBytes,
+                messageCount: safeMessages.length,
+                redactedCount,
+                timestamp: new Date().toISOString(),
+            });
             const msg = res.choices[0].message;
             return {
                 content: msg.content,

package/dist/core/redact.js

@@ -0,0 +1,42 @@
+const PATTERNS = [
+    // OpenAI / OpenRouter
+    [/sk-or-v1-[a-zA-Z0-9]{32,}/g, 'sk-or-v1-***REDACTED***'],
+    [/sk-[a-zA-Z0-9]{20,}/g, 'sk-***REDACTED***'],
+    // Anthropic
+    [/sk-ant-[a-zA-Z0-9\-_]{20,}/g, 'sk-ant-***REDACTED***'],
+    // GitHub
+    [/ghp_[a-zA-Z0-9]{36,}/g, 'ghp_***REDACTED***'],
+    [/gho_[a-zA-Z0-9]{36,}/g, 'gho_***REDACTED***'],
+    [/ghs_[a-zA-Z0-9]{36,}/g, 'ghs_***REDACTED***'],
+    [/github_pat_[a-zA-Z0-9_]{60,}/g, 'github_pat_***REDACTED***'],
+    // AWS
+    [/AKIA[0-9A-Z]{16}/g, 'AKIA***REDACTED***'],
+    [/aws_secret_access_key\s*=\s*[A-Za-z0-9/+=]{40}/gi, 'aws_secret_access_key=***REDACTED***'],
+    // Google
+    [/AIza[0-9A-Za-z_\-]{35}/g, 'AIza***REDACTED***'],
+    // Slack
+    [/xox[baprs]-[a-zA-Z0-9-]{10,}/g, 'xox***REDACTED***'],
+    // Stripe
+    [/sk_live_[a-zA-Z0-9]{24,}/g, 'sk_live_***REDACTED***'],
+    [/pk_live_[a-zA-Z0-9]{24,}/g, 'pk_live_***REDACTED***'],
+    // JWT
+    [/eyJ[a-zA-Z0-9_\-]{10,}\.eyJ[a-zA-Z0-9_\-]{10,}\.[a-zA-Z0-9_\-]{10,}/g, '***REDACTED JWT***'],
+    // Bearer tokens
+    [/Bearer\s+[a-zA-Z0-9_\-\.]{20,}/g, 'Bearer ***REDACTED***'],
+    // PEM keys
+    [/-----BEGIN [A-Z ]+-----[\s\S]*?-----END [A-Z ]+-----/g, '-----***REDACTED KEY***-----'],
+    // Generic env-style secrets (password=, token=, secret=)
+    [/(password|passwd|pwd|secret|token|api_key|apikey)\s*[:=]\s*["']?([A-Za-z0-9_\-\.]{16,})["']?/gi,
+        '$1=***REDACTED***'],
+];
+export function redact(text) {
+    let out = text;
+    let count = 0;
+    for (const [re, replacement] of PATTERNS) {
+        const before = out;
+        out = out.replace(re, replacement);
+        if (out !== before)
+            count++;
+    }
+    return { text: out, count };
+}

package/dist/core/sandbox.js

@@ -0,0 +1,35 @@
+import path from 'path';
+import os from 'os';
+const BLOCKED_NAMES = [
+    '.env', '.env.local', '.env.production', '.env.staging',
+    'id_rsa', 'id_ed25519', 'id_dsa', 'id_ecdsa',
+    'credentials', 'secrets.json', 'secrets.yml', 'secrets.yaml',
+    '.git-credentials', '.npmrc', '.pypirc', '.netrc', '.htpasswd',
+    'known_hosts', 'authorized_keys',
+];
+const BLOCKED_EXTENSIONS = [
+    '.pem', '.key', '.p12', '.pfx', '.keystore', '.jks',
+];
+const BLOCKED_DIRS = [
+    '.ssh', '.aws', '.gnupg', '.gpg', '.kube',
+    '.docker', '.config/gcloud', '.password-store',
+];
+export function isBlocked(p) {
+    const abs = path.resolve(p);
+    const base = path.basename(abs).toLowerCase();
+    if (BLOCKED_NAMES.some((n) => base === n.toLowerCase())) {
+        return `"${path.basename(abs)}" is a sensitive file (blocked)`;
+    }
+    const ext = path.extname(abs).toLowerCase();
+    if (BLOCKED_EXTENSIONS.includes(ext)) {
+        return `"${path.basename(abs)}" has a sensitive extension (blocked)`;
+    }
+    const home = os.homedir();
+    for (const d of BLOCKED_DIRS) {
+        const target = path.join(home, d);
+        if (abs === target || abs.startsWith(target + path.sep)) {
+            return `Path is inside ~/${d} (blocked)`;
+        }
+    }
+    return null;
+}

package/dist/core/tools.js

@@ -5,6 +5,7 @@ import { promisify } from 'util';
 import { hasN8n } from './config.js';
 import { permissions } from './permission.js';
 import { lineDiff, compactDiff } from './diff.js';
+import { isBlocked } from './sandbox.js';
 import { n8nListWorkflows, n8nTriggerWorkflow, n8nListExecutions, n8nGetWorkflow, n8nActivateWorkflow, n8nDeactivateWorkflow, } from './n8n.js';
 const execAsync = promisify(exec);
 const BASE_TOOLS = [
@@ -12,7 +13,7 @@ const BASE_TOOLS = [
         type: 'function',
         function: {
             name: 'read_file',
-            description: 'Read a file from disk',
+            description: 'Read a file from disk. Sensitive files (.env, .ssh, keys) are blocked.',
             parameters: {
                 type: 'object',
                 properties: { path: { type: 'string' } },
@@ -71,13 +72,12 @@ export function getToolDefs() {
     return hasN8n() ? [...BASE_TOOLS, ...N8N_TOOLS] : [...BASE_TOOLS];
 }
 export const toolDefs = BASE_TOOLS;
-// Dangerous command patterns
 const DANGER_PATTERNS = [
     { re: /\brm\s+(-[a-z]*[rf][a-z]*\s+)?/, level: 'high' },
     { re: /\bsudo\b/, level: 'high' },
     { re: /\bmkfs\b|\bdd\s+if=/, level: 'high' },
     { re: />\s*\/dev\//, level: 'high' },
-    { re: /:\(\)\s*\{/, level: 'high' }, // fork bomb
+    { re: /:\(\)\s*\{/, level: 'high' },
     { re: /\bchmod\s+(-R\s+)?777\b/, level: 'medium' },
     { re: /\bgit\s+push\b/, level: 'medium' },
     { re: /\bnpm\s+(publish|unpublish)\b/, level: 'medium' },
@@ -93,11 +93,18 @@ function classify(cmd) {
 export async function executeTool(name, args) {
     try {
         switch (name) {
-            case 'read_file':
+            case 'read_file': {
+                const blocked = isBlocked(args.path);
+                if (blocked)
+                    return `Blocked by sandbox: ${blocked}`;
                 return await fs.readFile(args.path, 'utf8');
+            }
             case 'write_file': {
                 const path = args.path;
                 const content = args.content;
+                const blockedWrite = isBlocked(path);
+                if (blockedWrite)
+                    return `Blocked by sandbox: ${blockedWrite}`;
                 const existed = existsSync(path);
                 let oldText = '';
                 if (existed) {

package/dist/index.js

@@ -5,12 +5,16 @@ import { render, Box, Static } from 'ink';
 import { Setup } from './ui/Setup.js';
 import { Chat } from './ui/Chat.js';
 import { Banner } from './ui/Banner.js';
+import { Consent, hasConsented } from './ui/Consent.js';
 import { loadConfig, applyConfig } from './core/config.js';
 import { loadSession } from './core/session.js';
 const App = () => {
     const [ready, setReady] = useState(false);
     const [resumedCount, setResumedCount] = useState(0);
+    const [consented, setConsented] = useState(hasConsented());
     useEffect(() => {
+        if (!consented)
+            return;
         const existing = loadConfig();
         if (existing) {
             applyConfig(existing);
@@ -18,8 +22,8 @@ const App = () => {
             setResumedCount(hist ? hist.length : 0);
             setReady(true);
         }
-    }, []);
-    return (_jsxs(Box, { flexDirection: "column", marginTop: 1, children: [_jsx(Static, { items: ['banner'], children: () => _jsx(Banner, {}) }), ready ? (_jsx(Chat, { resumedCount: resumedCount })) : (_jsx(Setup, { onDone: () => setReady(true) }))] }));
+    }, [consented]);
+    return (_jsxs(Box, { flexDirection: "column", marginTop: 1, children: [_jsx(Static, { items: ['banner'], children: () => _jsx(Banner, {}) }), !consented ? (_jsx(Consent, { onAccept: () => setConsented(true) })) : ready ? (_jsx(Chat, { resumedCount: resumedCount })) : (_jsx(Setup, { onDone: () => setReady(true) }))] }));
 };
 render(_jsx(App, {}), {
     patchConsole: false,

package/dist/ui/Chat.js

@@ -1,6 +1,9 @@
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { useState, useEffect } from 'react';
 import { Box, Text, useInput, useStdout, Static } from 'ink';
+import fs from 'fs';
+import path from 'path';
+import os from 'os';
 import { Agent } from '../core/agent.js';
 import { permissions } from '../core/permission.js';
 import { InputBar } from './InputBar.js';
@@ -22,6 +25,28 @@ const HistoryLine = ({ item }) => {
     }
     return (_jsx(Box, { marginTop: 1, children: _jsx(Text, { color: theme.text, children: item.text }) }));
 };
+const DEBUG_FILE = path.join(os.homedir(), '.blyue', 'last-request.json');
+function readDebug() {
+    if (!fs.existsSync(DEBUG_FILE)) {
+        return ['No request sent yet in this session.'];
+    }
+    try {
+        const d = JSON.parse(fs.readFileSync(DEBUG_FILE, 'utf8'));
+        const kb = (d.approxBytes / 1024).toFixed(1);
+        return [
+            `Model:        ${d.model}`,
+            `Provider:     ${d.baseUrl}`,
+            `Messages:     ${d.messageCount}`,
+            `Approx size:  ~${d.approxTokens} tokens · ${kb} KB`,
+            `Redactions:   ${d.redactedCount || 0} secrets scrubbed`,
+            `Timestamp:    ${d.timestamp}`,
+            `Full payload: ${DEBUG_FILE}`,
+        ];
+    }
+    catch (e) {
+        return ['Debug file unreadable: ' + e.message];
+    }
+}
 export const Chat = ({ resumedCount = 0 }) => {
     const { stdout } = useStdout();
     const width = stdout?.columns ?? 80;
@@ -37,14 +62,13 @@ export const Chat = ({ resumedCount = 0 }) => {
     const [permReq, setPermReq] = useState(null);
     const [currentModel, setCurrentModel] = useState(process.env.MODEL || '');
     const [agent, setAgent] = useState(() => new Agent());
-    // Subscribe to permission requests
     useEffect(() => {
         const unsub = permissions.subscribe((req) => setPermReq(req));
         return unsub;
     }, []);
     useInput((inputChar, key) => {
         if (permReq)
-            return; // permission prompt handles its own input
+            return;
         if (key.ctrl && inputChar === 'p')
             setOverlay('model');
         if (key.ctrl && inputChar === 's')
@@ -64,6 +88,16 @@ export const Chat = ({ resumedCount = 0 }) => {
             setOverlay('settings');
             return;
         }
+        if (trimmed === '/debug') {
+            setInput('');
+            const lines = readDebug();
+            setHistory((h) => [
+                ...h,
+                mkItem('tool', 'Last request to provider:'),
+                ...lines.map((l) => mkItem('tool', '  ' + l)),
+            ]);
+            return;
+        }
         if (trimmed === '/clear') {
             setInput('');
             agent.clear();
@@ -76,8 +110,9 @@ export const Chat = ({ resumedCount = 0 }) => {
             setHistory((h) => [
                 ...h,
                 mkItem('tool', 'Commands:'),
-                mkItem('tool', '  /model     switch model          (Ctrl+P)'),
-                mkItem('tool', '  /settings  open settings         (Ctrl+S)'),
+                mkItem('tool', '  /model     switch model            (Ctrl+P)'),
+                mkItem('tool', '  /settings  open settings           (Ctrl+S)'),
+                mkItem('tool', '  /debug     show last request to provider'),
                 mkItem('tool', '  /clear     clear session and permissions'),
                 mkItem('tool', '  /help      show this list'),
             ]);
@@ -104,7 +139,6 @@ export const Chat = ({ resumedCount = 0 }) => {
         setAgent(new Agent());
         setHistory((h) => [...h, mkItem('tool', `model → ${id}`)]);
     };
-    // Permission prompt takes priority over everything
     if (permReq) {
         return (_jsxs(Box, { flexDirection: "column", children: [_jsx(Static, { items: history, children: (item) => _jsx(HistoryLine, { item: item }, item.id) }), _jsx(Box, { marginTop: 1, children: _jsx(PermissionPrompt, { req: permReq }) })] }));
     }
@@ -121,5 +155,5 @@ export const Chat = ({ resumedCount = 0 }) => {
     const shortModel = currentModel.length > maxModelLen
         ? '…' + currentModel.slice(-(maxModelLen - 1))
         : currentModel || 'unset';
-    return (_jsxs(Box, { flexDirection: "column", children: [_jsx(Static, { items: history, children: (item) => _jsx(HistoryLine, { item: item }, item.id) }), _jsxs(Box, { marginTop: 1, flexDirection: "column", children: [_jsx(InputBar, { value: input, onChange: setInput, onSubmit: handleSubmit, loading: loading }), _jsxs(Text, { children: [_jsx(Text, { color: theme.accent, children: "  /model" }), _jsx(Text, { color: theme.muted, children: "  \u00B7  " }), _jsx(Text, { color: theme.accent, children: "/settings" }), _jsx(Text, { color: theme.muted, children: "  \u00B7  " }), _jsx(Text, { color: theme.text, children: shortModel })] })] })] }));
+    return (_jsxs(Box, { flexDirection: "column", children: [_jsx(Static, { items: history, children: (item) => _jsx(HistoryLine, { item: item }, item.id) }), _jsxs(Box, { marginTop: 1, flexDirection: "column", children: [_jsx(InputBar, { value: input, onChange: setInput, onSubmit: handleSubmit, loading: loading }), _jsxs(Text, { children: [_jsx(Text, { color: theme.accent, children: "  /model" }), _jsx(Text, { color: theme.muted, children: "  \u00B7  " }), _jsx(Text, { color: theme.accent, children: "/settings" }), _jsx(Text, { color: theme.muted, children: "  \u00B7  " }), _jsx(Text, { color: theme.accent, children: "/debug" }), _jsx(Text, { color: theme.muted, children: "  \u00B7  " }), _jsx(Text, { color: theme.text, children: shortModel })] })] })] }));
 };

package/dist/ui/Consent.js

@@ -0,0 +1,26 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { Box, Text, useInput } from 'ink';
+import fs from 'fs';
+import path from 'path';
+import os from 'os';
+import { theme } from './theme.js';
+const FLAG = path.join(os.homedir(), '.blyue', '.consent');
+export function hasConsented() {
+    return fs.existsSync(FLAG);
+}
+export function markConsented() {
+    fs.mkdirSync(path.dirname(FLAG), { recursive: true });
+    fs.writeFileSync(FLAG, new Date().toISOString());
+}
+export const Consent = ({ onAccept }) => {
+    useInput((input) => {
+        if (input === 'y' || input === 'Y') {
+            markConsented();
+            onAccept();
+        }
+        else if (input === 'n' || input === 'N') {
+            process.exit(0);
+        }
+    });
+    return (_jsxs(Box, { flexDirection: "column", paddingX: 1, children: [_jsx(Text, { color: theme.warning, bold: true, children: "\u26A0  Privacy notice" }), _jsx(Text, { children: " " }), _jsx(Text, { color: theme.text, children: "BLYUE sends your prompts, file contents, and command output to your configured LLM provider so it can help you." }), _jsx(Text, { children: " " }), _jsx(Text, { color: theme.muted, children: "Do NOT run this on directories containing secrets, keys, or private data unless you trust the provider." }), _jsx(Text, { children: " " }), _jsx(Text, { color: theme.muted, children: "Built-in protections:" }), _jsx(Text, { color: theme.muted, children: '  · .env, .ssh, .aws, *.pem, *.key are blocked from reading' }), _jsx(Text, { color: theme.muted, children: '  · API keys and tokens are redacted before sending' }), _jsx(Text, { children: " " }), _jsxs(Text, { children: [_jsx(Text, { color: theme.success, bold: true, children: "  [y]" }), _jsx(Text, { color: theme.text, children: " I understand, continue" })] }), _jsxs(Text, { children: [_jsx(Text, { color: theme.error, bold: true, children: "  [n]" }), _jsx(Text, { color: theme.text, children: " Exit" })] })] }));
+};

package/dist/ui/Settings.js

@@ -1,8 +1,9 @@
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
-import { useState } from 'react';
+import { useState, useEffect } from 'react';
 import { Box, Text, useInput, useStdout } from 'ink';
 import { KeyInput } from './KeyInput.js';
 import { getConfig, saveConfig, applyConfig } from '../core/config.js';
+import { detectOllama } from '../core/localCheck.js';
 import { theme } from './theme.js';
 export const Settings = ({ onClose, onModelChange }) => {
     const { stdout } = useStdout();
@@ -12,6 +13,15 @@ export const Settings = ({ onClose, onModelChange }) => {
     const [cfg, setCfg] = useState(() => getConfig());
     const [draft, setDraft] = useState('');
     const [testResult, setTestResult] = useState(null);
+    const [ollamaModels, setOllamaModels] = useState([]);
+    const [ollamaChecked, setOllamaChecked] = useState(false);
+    useEffect(() => {
+        (async () => {
+            const models = await detectOllama();
+            setOllamaModels(models);
+            setOllamaChecked(true);
+        })();
+    }, []);
     const persist = (next) => {
         saveConfig(next);
         applyConfig(next);
@@ -28,7 +38,6 @@ export const Settings = ({ onClose, onModelChange }) => {
                 : 'not configured',
             action: () => setScreen('n8n'),
         },
-        { label: 'Reset all config', hint: 'delete ~/.blyue/.env', action: () => setScreen('reset') },
         { label: 'Close', hint: 'esc', action: onClose },
     ];
     // ---- Main menu navigation ----
@@ -42,7 +51,7 @@ export const Settings = ({ onClose, onModelChange }) => {
         if (key.return)
             mainItems[cursor].action();
     }, { isActive: screen === 'main' });
-    // ---- n8n submenu navigation ----
+    // ---- n8n submenu ----
     const n8nItems = [
         { label: 'URL', hint: cfg.n8nUrl || 'not set', action: () => { setDraft(cfg.n8nUrl || ''); setScreen('n8n-url'); } },
         { label: 'API key', hint: cfg.n8nApiKey ? '•••' + cfg.n8nApiKey.slice(-4) : 'not set', action: () => { setDraft(cfg.n8nApiKey || ''); setScreen('n8n-key'); } },
@@ -77,18 +86,23 @@ export const Settings = ({ onClose, onModelChange }) => {
         if (key.return)
             n8nItems[n8nCursor].action();
     }, { isActive: screen === 'n8n' });
+    // ---- n8n test ----
+    useInput(() => setScreen('n8n'), { isActive: screen === 'n8n-test' });
     // ---- Frame helpers ----
     const inner = width - 4;
     const top = (label) => (_jsxs(Text, { children: [_jsx(Text, { color: theme.muted, children: '╭─ ' }), _jsx(Text, { color: theme.accent, bold: true, children: label }), _jsx(Text, { color: theme.muted, children: ' ' + '─'.repeat(Math.max(1, inner - label.length - 3)) + '╮' })] }));
     const bot = (_jsx(Text, { color: theme.muted, children: '╰' + '─'.repeat(inner) + '╯' }));
     const row = (content) => (_jsxs(Text, { children: [_jsx(Text, { color: theme.muted, children: '│ ' }), content] }));
-    // ---- Screens ----
+    // ---- Main screen ----
     if (screen === 'main') {
-        return (_jsxs(Box, { flexDirection: "column", children: [top('settings'), mainItems.map((it, i) => {
+        const baseUrlIsLocal = (cfg.baseUrl || '').includes('localhost') ||
+            (cfg.baseUrl || '').includes('127.0.0.1');
+        return (_jsxs(Box, { flexDirection: "column", children: [top('settings'), ollamaChecked && ollamaModels.length > 0 && (row(_jsxs(Text, { children: [_jsx(Text, { color: theme.success, children: "\u25CF " }), _jsx(Text, { color: theme.muted, children: "Ollama detected \u00B7 " }), _jsxs(Text, { color: theme.text, children: [ollamaModels.length, " model(s)"] })] }))), ollamaChecked && ollamaModels.length === 0 && baseUrlIsLocal && (row(_jsxs(Text, { children: [_jsx(Text, { color: theme.error, children: "\u25CF " }), _jsx(Text, { color: theme.muted, children: "Ollama not running at localhost:11434" })] }))), mainItems.map((it, i) => {
                     const active = i === cursor;
                     return (_jsxs(Text, { children: [_jsx(Text, { color: theme.muted, children: '│ ' }), _jsx(Text, { color: active ? theme.accent : theme.muted, bold: active, children: active ? '❯ ' : '  ' }), _jsx(Text, { color: active ? theme.text : theme.muted, bold: active, children: it.label.padEnd(20) }), _jsx(Text, { color: theme.muted, children: it.hint })] }, it.label));
                 }), bot, _jsx(Text, { color: theme.muted, children: "\u2191\u2193 move \u00B7 \u21B5 select \u00B7 esc close" })] }));
     }
+    // ---- API key / Base URL editors ----
     if (screen === 'apikey' || screen === 'baseurl') {
         const isKey = screen === 'apikey';
         const title = isKey ? 'api key' : 'base url';
@@ -97,21 +111,26 @@ export const Settings = ({ onClose, onModelChange }) => {
             const next = { ...cfg, [isKey ? 'apiKey' : 'baseUrl']: v };
             persist(next);
         };
-        return (_jsxs(Box, { flexDirection: "column", children: [top(title), row(_jsx(Text, { color: theme.muted, children: isKey ? 'Paste your new API key' : 'e.g. https://openrouter.ai/api/v1' })), row(_jsxs(Box, { children: [_jsx(Text, { color: theme.accent, bold: true, children: '❯ ' }), _jsx(KeyInput, { value: value, onChange: setValue, placeholder: isKey ? 'sk-...' : 'https://...', masked: isKey, onSubmit: () => setScreen('main') })] })), bot, _jsx(Text, { color: theme.muted, children: "type \u00B7 backspace \u00B7 \u21B5 save \u00B7 esc back" })] }));
+        return (_jsxs(Box, { flexDirection: "column", children: [top(title), row(_jsx(Text, { color: theme.muted, children: isKey ? 'Paste your new API key' : 'e.g. http://localhost:11434/v1' })), row(_jsxs(Box, { children: [_jsx(Text, { color: theme.accent, bold: true, children: '❯ ' }), _jsx(KeyInput, { value: value, onChange: setValue, placeholder: isKey ? 'sk-...' : 'https://...', masked: isKey, onSubmit: () => setScreen('main') })] })), bot, _jsx(Text, { color: theme.muted, children: "type \u00B7 backspace \u00B7 \u21B5 save \u00B7 esc back" })] }));
     }
+    // ---- Model editor ----
     if (screen === 'model') {
-        // Simple inline editor for now — full ModelPicker opens separately if user wants
-        return (_jsxs(Box, { flexDirection: "column", children: [top('model'), row(_jsx(Text, { color: theme.muted, children: "Type model name (or use /model for picker)" })), row(_jsxs(Box, { children: [_jsx(Text, { color: theme.accent, bold: true, children: '❯ ' }), _jsx(KeyInput, { value: cfg.model, onChange: (v) => persist({ ...cfg, model: v }), placeholder: "gpt-4o-mini", onSubmit: () => {
+        const isLocal = (cfg.baseUrl || '').includes('localhost');
+        return (_jsxs(Box, { flexDirection: "column", children: [top('model'), row(_jsx(Text, { color: theme.muted, children: isLocal && ollamaModels.length > 0
+                        ? 'Available: ' + ollamaModels.slice(0, 3).join(', ')
+                        : 'Type model name' })), row(_jsxs(Box, { children: [_jsx(Text, { color: theme.accent, bold: true, children: '❯ ' }), _jsx(KeyInput, { value: cfg.model, onChange: (v) => persist({ ...cfg, model: v }), placeholder: "qwen2.5-coder:1.5b", onSubmit: () => {
                                 onModelChange?.(cfg.model);
                                 setScreen('main');
                             } })] })), bot, _jsx(Text, { color: theme.muted, children: "type \u00B7 \u21B5 save \u00B7 esc back" })] }));
     }
+    // ---- n8n submenu ----
     if (screen === 'n8n') {
         return (_jsxs(Box, { flexDirection: "column", children: [top('n8n integration'), n8nItems.map((it, i) => {
                     const active = i === n8nCursor;
                     return (_jsxs(Text, { children: [_jsx(Text, { color: theme.muted, children: '│ ' }), _jsx(Text, { color: active ? theme.accent : theme.muted, bold: active, children: active ? '❯ ' : '  ' }), _jsx(Text, { color: active ? theme.text : theme.muted, bold: active, children: it.label.padEnd(20) }), _jsx(Text, { color: theme.muted, children: it.hint })] }, it.label));
                 }), bot, _jsx(Text, { color: theme.muted, children: "\u2191\u2193 move \u00B7 \u21B5 select \u00B7 esc back" })] }));
     }
+    // ---- n8n URL / key editors ----
     if (screen === 'n8n-url' || screen === 'n8n-key') {
         const isKey = screen === 'n8n-key';
         const title = isKey ? 'n8n api key' : 'n8n url';
@@ -122,22 +141,9 @@ export const Settings = ({ onClose, onModelChange }) => {
         };
         return (_jsxs(Box, { flexDirection: "column", children: [top(title), row(_jsx(Text, { color: theme.muted, children: isKey ? 'Settings → n8n API → create key' : 'e.g. http://localhost:5678' })), row(_jsxs(Box, { children: [_jsx(Text, { color: theme.accent, bold: true, children: '❯ ' }), _jsx(KeyInput, { value: value, onChange: setValue, placeholder: isKey ? 'n8n_api_...' : 'http://localhost:5678', masked: isKey, onSubmit: () => setScreen('n8n') })] })), bot, _jsx(Text, { color: theme.muted, children: "type \u00B7 backspace \u00B7 \u21B5 save \u00B7 esc back" })] }));
     }
+    // ---- n8n test result ----
     if (screen === 'n8n-test') {
-        useInput(() => setScreen('n8n'), { isActive: screen === 'n8n-test' });
         return (_jsxs(Box, { flexDirection: "column", children: [top('n8n test'), row(_jsx(Text, { color: testResult?.startsWith('✓') ? theme.success : theme.muted, children: testResult || 'testing…' })), bot, _jsx(Text, { color: theme.muted, children: "press any key to go back" })] }));
     }
-    if (screen === 'reset') {
-        return (_jsxs(Box, { flexDirection: "column", children: [top('reset config'), row(_jsx(Text, { color: theme.error, children: "Delete ~/.blyue/.env and reconfigure?" })), row(_jsx(Text, { color: theme.muted, children: "Press Y to confirm, N to cancel." })), bot] }));
-    }
-    return null;
-};
-// Handle Y/N for reset outside component main body
-export const SettingsResetHandler = ({ onConfirm, onCancel, }) => {
-    useInput((input) => {
-        if (input === 'y' || input === 'Y')
-            onConfirm();
-        if (input === 'n' || input === 'N')
-            onCancel();
-    });
     return null;
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "blyuecode",
-  "version": "0.1.10",
+  "version": "0.1.12",
   "description": "BLYUE Code — a coding agent by Lumen",
   "type": "module",
   "license": "MIT",