koneck 2.25.55 → 2.25.57

package/dist/ink-chat.d.ts

@@ -129,6 +129,33 @@ export declare function askOptions(tool: string, prefix: string): AskOption[];
  * characters of one enormous line, which is a fragment of a sentence and tells nobody anything.
  */
 export declare function thinkingTail(text: string, lines: number, width: number): string[];
+/**
+ * Where a paste belongs, given what is on screen.
+ *
+ * Pulled out as a decision of its own because it was wrong and invisible: the paste capture ran
+ * before every other branch and always routed to the composer, so pasting an API key into the
+ * prompt asking for one put the key in the message box — on screen, and one keystroke from being
+ * sent to a model.
+ */
+export type PasteTarget = 'key-prompt' | 'composer' | 'drop';
+export declare function pasteTarget(open: {
+    keyPrompt?: boolean;
+    picker?: boolean;
+    ask?: boolean;
+}): PasteTarget;
+/** Bytes as a person reads them, for a session listing. */
+export declare function humanBytes(bytes: number): string;
+/**
+ * What to call a session in a list.
+ *
+ * A name if one was given, otherwise the first thing asked of it — which is what people remember
+ * a piece of work by. The id is the last resort, because a timestamp identifies nothing.
+ */
+export declare function sessionTitle(meta: {
+    name?: string;
+    task?: string;
+    id: string;
+}): string;
 export declare function runInkChatMode(config: AgentConfig): Promise<void>;
 export {};
 //# sourceMappingURL=ink-chat.d.ts.map

package/dist/ink-chat.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ink-chat.d.ts","sourceRoot":"","sources":["../src/ink-chat.tsx"],"names":[],"mappings":"AAgDA,OAAO,KAAK,EAAY,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAQ5D,OAAO,KAAK,EAAE,WAAW,EAAiB,MAAM,YAAY,CAAC;AAoE7D,6FAA6F;AAC7F,wBAAgB,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAM7C;AA0BD;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CA+BpE;AAED,qFAAqF;AACrF,eAAO,MAAM,cAAc,KAAK,CAAC;AAEjC;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,SAAiB,GAAG,MAAM,CAM9E;AA6CD;;;;;;;;;;;GAWG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAGnE;AAuBD;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,QAAQ,GAAG,OAAO,GAAG,OAAO,GAAG,QAAQ,GAAG,OAAO,GAAG,UAAU,CAAC;AAE3E,eAAO,MAAM,UAAU,EAAE,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CA2GzE,CAAC;AAEF,0CAA0C;AAC1C,iFAAiF;AACjF,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,mEAAmE;IACnE,KAAK,EAAE,MAAM,CAAC;IACd,8BAA8B;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,oDAAoD;IACpD,SAAS,EAAE,OAAO,CAAC;CACpB;AAED;;;;;;;GAOG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAItD;AAED;;;;;;GAMG;AACH,wBAAgB,OAAO,CAAC,MAAM,EAAE,UAAU,GAAG,QAAQ,CAMpD;AAED;;;;;GAKG;AACH,wBAAgB,QAAQ,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAIpF;AAyDD,UAAU,UAAU;IAAG,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE;AAUtG,qDAAqD;AACrD,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAE/D;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAK7E;AAeD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,MAAM,GAAG,UAAU,EAAE,CAWlF;AAGD,iGAAiG;AACjG,UAAU,SAAS;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,SAAS,GAAG,IAAI,CAAC;IACvB,KAAK,EAAE,OAAO,CAAC;CAChB;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,CAepE;AAQD;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAMjF;AAsgGD,wBAAsB,cAAc,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAQvE"}
+{"version":3,"file":"ink-chat.d.ts","sourceRoot":"","sources":["../src/ink-chat.tsx"],"names":[],"mappings":"AAgDA,OAAO,KAAK,EAAY,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAS5D,OAAO,KAAK,EAAE,WAAW,EAAiB,MAAM,YAAY,CAAC;AAoE7D,6FAA6F;AAC7F,wBAAgB,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAM7C;AA0BD;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CA+BpE;AAED,qFAAqF;AACrF,eAAO,MAAM,cAAc,KAAK,CAAC;AAEjC;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,SAAiB,GAAG,MAAM,CAM9E;AA6CD;;;;;;;;;;;GAWG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAGnE;AAuBD;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,QAAQ,GAAG,OAAO,GAAG,OAAO,GAAG,QAAQ,GAAG,OAAO,GAAG,UAAU,CAAC;AAE3E,eAAO,MAAM,UAAU,EAAE,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CA2GzE,CAAC;AAEF,0CAA0C;AAC1C,iFAAiF;AACjF,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,mEAAmE;IACnE,KAAK,EAAE,MAAM,CAAC;IACd,8BAA8B;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,oDAAoD;IACpD,SAAS,EAAE,OAAO,CAAC;CACpB;AAED;;;;;;;GAOG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAItD;AAED;;;;;;GAMG;AACH,wBAAgB,OAAO,CAAC,MAAM,EAAE,UAAU,GAAG,QAAQ,CAMpD;AAED;;;;;GAKG;AACH,wBAAgB,QAAQ,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAIpF;AA0DD,UAAU,UAAU;IAAG,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE;AAUtG,qDAAqD;AACrD,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAE/D;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAK7E;AAeD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,MAAM,GAAG,UAAU,EAAE,CAWlF;AAGD,iGAAiG;AACjG,UAAU,SAAS;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,SAAS,GAAG,IAAI,CAAC;IACvB,KAAK,EAAE,OAAO,CAAC;CAChB;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,CAepE;AAQD;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAMjF;AAGD;;;;;;;GAOG;AACH,MAAM,MAAM,WAAW,GAAG,YAAY,GAAG,UAAU,GAAG,MAAM,CAAC;AAE7D,wBAAgB,WAAW,CAAC,IAAI,EAAE;IAChC,SAAS,CAAC,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAAC,GAAG,CAAC,EAAE,OAAO,CAAC;CACtD,GAAG,WAAW,CAMd;AAGD,2DAA2D;AAC3D,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAIhD;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAKvF;AAkjGD,wBAAsB,cAAc,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAQvE"}

package/dist/ink-chat.js

@@ -36,6 +36,7 @@ import { AskQueue } from './ask-queue.js';
 import { planSummary } from './plan.js';
 import { logoFor } from './logo.js';
 import { describeActivity } from './activity.js';
+import { redactSecrets, containsSecret } from './redact.js';
 import { renderTrajectory } from './trajectory.js';
 import { describeSandbox, resolveSandbox } from './sandbox.js';
 const CYAN = '#54D7E7';
@@ -448,6 +449,7 @@ const COMMANDS = [
     { cmd: '/thinking', desc: 'Show or hide the model\'s reasoning as it arrives' },
     { cmd: '/activity', desc: 'What the model has done this session, and what it is on now' },
     { cmd: '/trajectory', desc: 'Where the time went: per-request timings, tool durations, waits' },
+    { cmd: '/update', desc: 'Check for a new version and update' },
     { cmd: '/name', desc: 'Name this session, so /resume can find it by name' },
     { cmd: '/fork', desc: 'Copy this session and continue on the copy' },
     { cmd: '/archive', desc: 'Keep a session but hide it from /resume' },
@@ -561,13 +563,44 @@ export function thinkingTail(text, lines, width) {
         .filter(line => line.trim() !== '');
     return wrapped.slice(-lines);
 }
+export function pasteTarget(open) {
+    if (open.keyPrompt)
+        return 'key-prompt';
+    // A picker and a permission question both take single keys. A pasted blob is not an answer to
+    // either, and answering something nobody chose is worse than ignoring it.
+    if (open.picker || open.ask)
+        return 'drop';
+    return 'composer';
+}
+/** Bytes as a person reads them, for a session listing. */
+export function humanBytes(bytes) {
+    if (bytes < 1024)
+        return `${bytes}B`;
+    if (bytes < 1024 * 1024)
+        return `${(bytes / 1024).toFixed(1)}KB`;
+    return `${(bytes / 1024 / 1024).toFixed(1)}MB`;
+}
+/**
+ * What to call a session in a list.
+ *
+ * A name if one was given, otherwise the first thing asked of it — which is what people remember
+ * a piece of work by. The id is the last resort, because a timestamp identifies nothing.
+ */
+export function sessionTitle(meta) {
+    if (meta.name)
+        return meta.name;
+    const task = redactSecrets(meta.task ?? '').replace(/\s+/g, ' ').trim();
+    if (!task || task === '(chat session)')
+        return meta.id;
+    return task.length > 64 ? task.slice(0, 63) + '…' : task;
+}
 const MODES = MODE_SPECS.map(m => m.name);
 const HELP_TEXT = `
 Type / on an empty line to browse every command; keep typing to filter.
 
 Slash commands:
   /help                 Show this help
-  (shift+u)             Updates and a key guide, in a side panel
+  /update               Updates and a key guide, in a side panel
   /models [filter]      Browse models from the connected provider and switch
   /connect [provider]   Connect a provider (picker when no name given)
   /connect <name> <url> Declare a provider KONECK does not ship with, e.g.
@@ -1232,8 +1265,12 @@ function App({ config: initialConfig }) {
     async function doSave() {
         const s = await activeSession.p.catch(() => null);
         const firstUser = s?.messages.find((m) => m.role === 'user');
+        // Masked before it is written. A key pasted into the composer became the first user message,
+        // which is where this title comes from — so it was persisted to disk and then printed in the
+        // resume picker in full.
         const task = firstUser && typeof firstUser.content === 'string'
-            ? firstUser.content.slice(0, 120) : '(chat session)';
+            ? redactSecrets(firstUser.content).slice(0, 120)
+            : '(chat session)';
         // Both of these come from the live session rather than from React state: a save fired at the
         // end of a turn runs inside a closure that captured state as it was when the turn began, so
         // reading `stats` here recorded turn counts one behind and, after a resume, the wrong id.
@@ -1243,8 +1280,14 @@ function App({ config: initialConfig }) {
         // runs every turn would otherwise wipe a name the moment the agent replied.
         const existing = await loadSession(cfg.cwd, id).then(r => r.meta).catch(() => null);
         const livePlan = s?.plan?.steps.length ? { steps: s.plan.steps } : undefined;
+        // Captured when saving, because a branch cannot be recovered from the file later — by then the
+        // checkout has moved on.
+        const branch = await execa('git', ['rev-parse', '--abbrev-ref', 'HEAD'], { cwd: cfg.cwd, reject: false })
+            .then(r => r.stdout.trim())
+            .catch(() => '');
         return saveSession(cfg.cwd, id, {
             ...(livePlan ? { plan: livePlan } : {}),
+            ...(branch && branch !== 'HEAD' ? { branch } : {}),
             ...(existing?.name ? { name: existing.name } : {}),
             ...(existing?.archived ? { archived: existing.archived } : {}),
             ...(existing?.forkedFrom ? { forkedFrom: existing.forkedFrom } : {}),
@@ -1782,6 +1825,10 @@ function App({ config: initialConfig }) {
                     : 'Hiding the reasoning. The token count stays on the working line.');
                 return;
             }
+            case '/update': {
+                void openUpdatePane();
+                return;
+            }
             case '/trajectory': {
                 // The timings the transcript cannot answer for: where the time went, which tool was slow,
                 // how much of a long turn was spent waiting for a first token rather than generating.
@@ -1936,13 +1983,21 @@ function App({ config: initialConfig }) {
                     return;
                 }
                 if (pick === '') {
+                    // The title comes first because that is what tells two sessions apart; the id is a
+                    // timestamp and says only when. Everything under it is context: how long ago, which
+                    // branch, how much work. Masked on display as well as on write, since the files already
+                    // on disk were written before that existed and one of them holds a key.
                     openPicker('resume', saved.slice(0, 20).map((x, i) => ({
                         value: x.id,
-                        label: x.name ?? x.id,
-                        // Ordered by last write, so the first entry is the one you were last in — said out
-                        // loud rather than left to be inferred from a timestamp buried in the id.
-                        desc: `${i === 0 ? 'latest · ' : ''}${relativeAge(x.updatedAt)}  ` +
-                            `${x.turns} turns  ${x.totalTokens.toLocaleString()} tok  ${x.task.slice(0, 36)}`,
+                        label: sessionTitle(x),
+                        desc: [
+                            i === 0 ? 'latest' : relativeAge(x.updatedAt),
+                            ...(i === 0 ? [relativeAge(x.updatedAt)] : []),
+                            ...(x.branch ? [x.branch] : []),
+                            `${x.turns} turn${x.turns === 1 ? '' : 's'}`,
+                            ...(x.totalTokens > 0 ? [`${humanTokens(x.totalTokens)} tok`] : []),
+                            ...(x.sizeBytes ? [humanBytes(x.sizeBytes)] : []),
+                        ].join(' · '),
                     })));
                     return;
                 }
@@ -2253,6 +2308,15 @@ function App({ config: initialConfig }) {
     function filePaste(text) {
         const clean = text.replace(/\r\n?/g, '\n');
         const lines = clean.split('\n').length;
+        // Whatever owns the keyboard gets the paste.
+        const target = pasteTarget({ keyPrompt: Boolean(keyPrompt), picker: Boolean(picker), ask: Boolean(ask) });
+        if (target === 'drop')
+            return;
+        if (target === 'key-prompt') {
+            // A key pasted from a manager often carries a trailing newline; it is not part of the key.
+            setKeyPrompt(p => (p ? { ...p, value: p.value + clean.replace(/\s+$/, '') } : p));
+            return;
+        }
         if (!clean.includes('\n') && clean.length <= 200) {
             setDraft(d => d.slice(0, caret) + clean + d.slice(caret));
             setCaret(c => c + clean.length);
@@ -2576,15 +2640,11 @@ function App({ config: initialConfig }) {
             }
         }
         // Shift+U → the update and guide panel.
-        if (key.shift && (input === 'U' || input === 'u')) {
-            if (updatePane) {
-                setUpdatePane(null);
-                setUpdating('idle');
-            }
-            else
-                void openUpdatePane();
-            return;
-        }
+        // There is deliberately no shortcut to open this any more. It was shift+u, which is exactly
+        // how a capital U is typed: the pane opened instead of the letter appearing, and there was no
+        // way to write one at all. /update opens it, which is discoverable from /help and the palette
+        // rather than from a habit, and cannot collide with anything anyone types.
+        //
         // Inside the panel: u applies the update, esc closes it.
         if (updatePane) {
             if (key.escape) {
@@ -2764,6 +2824,13 @@ function App({ config: initialConfig }) {
             setPasteCount(0);
             // Paths that really exist are shortened to their name for the transcript only. The model
             // still receives the full path, which it needs in order to open the file.
+            // Said out loud rather than quietly sent. A key in a prompt reaches the provider, the
+            // session file and the scrollback, and the only useful moment to mention it is now.
+            if (containsSecret(task)) {
+                addSystem('That looks like an API key or token. It has been sent as typed — treat it as exposed ' +
+                    'and rotate it. Keys belong in /key or an environment variable, where they are not ' +
+                    'written into the session log.');
+            }
             const mentions = findMentions(task, pathKind);
             const forDisplay = pasteForDisplay(mentions.length ? shortenMentions(task, mentions) : task);
             addRow({ role: 'user', text: forDisplay });
@@ -3231,7 +3298,7 @@ function App({ config: initialConfig }) {
                 }
                 lines.push('');
                 lines.push('---');
-                lines.push('**Keys**  shift+u update · tab analytics · shift+tab mode · ctrl+c exit');
+                lines.push('**Keys**  tab analytics · shift+tab mode · ctrl+c exit   ·   /update for this panel');
                 lines.push('**Editing**  arrows move · ctrl+a/e ends · ctrl+w word · ctrl+u/k cut');
                 lines.push('**Sessions**  /sessions · /send <repo> <task> · /ask <repo> <q> · /resume');
                 lines.push('**Changelog**  github.com/Gubevu/konech/commits/main');