koneck 2.71.2 → 2.73.0

package/dist/clipboard.d.ts

@@ -0,0 +1,46 @@
+/**
+ * Reading the system clipboard, for when the terminal's own paste will not do.
+ *
+ * Pasting into a terminal is not one mechanism, it is several: bracketed paste if the terminal
+ * offers it, a plain burst of characters if not, a middle-click that KONECK may have taken over for
+ * its own mouse handling, and on Windows a Ctrl+V that some hosts deliver as a control code rather
+ * than as text. Somebody trying to put an API key into a prompt does not care which of those their
+ * terminal does, and telling them to type a sixty-character secret by hand is not an answer.
+ *
+ * So the prompt can go and fetch it. Every desktop already has a command for this, and KONECK
+ * already shells out to their write-side counterparts for /copy; this is the same list read the
+ * other way round.
+ */
+export interface ClipboardRead {
+    ok: boolean;
+    text: string;
+    /** Which command answered, so it can be named. */
+    by?: string;
+    /** Why nothing came back, when nothing did. */
+    reason?: string;
+}
+/**
+ * What is on the clipboard, or why it could not be read.
+ *
+ * Each reader gets a short deadline: a clipboard tool that hangs — xclip waiting on an X server
+ * that is not there is the usual way — must not hold a keystroke open. Failure is ordinary and is
+ * reported rather than thrown: a machine reached over SSH has no clipboard, and that is a fact
+ * about the machine rather than an error in the program.
+ */
+export declare function readClipboard(readers?: ReadonlyArray<{
+    file: string;
+    args: string[];
+}>, timeoutMs?: number): Promise<ClipboardRead>;
+/**
+ * A pasted secret, made safe to use as one.
+ *
+ * Three things go, each for its own reason. Surrounding whitespace, because a key copied out of a
+ * file or a password manager carries a trailing newline that is not part of it. Bracketed paste
+ * markers, because a terminal that announces a paste mid-chunk can leave the literal text "[200~"
+ * in the field, and a key with that in front of it fails at the provider with an authentication
+ * error that says nothing about where it came from. And control characters, which are invalid in an
+ * HTTP header — a key carrying one is rejected by the transport before the provider ever sees it,
+ * which is the least informative way for this to go wrong.
+ */
+export declare function cleanPastedSecret(text: string): string;
+//# sourceMappingURL=clipboard.d.ts.map

package/dist/clipboard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"clipboard.d.ts","sourceRoot":"","sources":["../src/clipboard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAaH,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,OAAO,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,kDAAkD;IAClD,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,+CAA+C;IAC/C,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;GAOG;AACH,wBAAsB,aAAa,CACjC,OAAO,GAAE,aAAa,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,CAAW,EAClE,SAAS,SAAQ,GAChB,OAAO,CAAC,aAAa,CAAC,CAmBxB;AAeD;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAKtD"}

package/dist/clipboard.js

@@ -0,0 +1,81 @@
+/**
+ * Reading the system clipboard, for when the terminal's own paste will not do.
+ *
+ * Pasting into a terminal is not one mechanism, it is several: bracketed paste if the terminal
+ * offers it, a plain burst of characters if not, a middle-click that KONECK may have taken over for
+ * its own mouse handling, and on Windows a Ctrl+V that some hosts deliver as a control code rather
+ * than as text. Somebody trying to put an API key into a prompt does not care which of those their
+ * terminal does, and telling them to type a sixty-character secret by hand is not an answer.
+ *
+ * So the prompt can go and fetch it. Every desktop already has a command for this, and KONECK
+ * already shells out to their write-side counterparts for /copy; this is the same list read the
+ * other way round.
+ */
+/** The readers worth trying, in order. The first that exists and answers wins. */
+const READERS = [
+    // Wayland, then X11's two common tools, then macOS.
+    { file: 'wl-paste', args: ['--no-newline'] },
+    { file: 'xclip', args: ['-selection', 'clipboard', '-o'] },
+    { file: 'xsel', args: ['--clipboard', '--output'] },
+    { file: 'pbpaste', args: [] },
+    // Windows, and WSL — where the Windows clipboard is the one holding what was copied.
+    { file: 'powershell.exe', args: ['-NoProfile', '-Command', 'Get-Clipboard'] },
+];
+/**
+ * What is on the clipboard, or why it could not be read.
+ *
+ * Each reader gets a short deadline: a clipboard tool that hangs — xclip waiting on an X server
+ * that is not there is the usual way — must not hold a keystroke open. Failure is ordinary and is
+ * reported rather than thrown: a machine reached over SSH has no clipboard, and that is a fact
+ * about the machine rather than an error in the program.
+ */
+export async function readClipboard(readers = READERS, timeoutMs = 1_500) {
+    const { execa } = await import('execa');
+    for (const reader of readers) {
+        try {
+            const done = await execa(reader.file, [...reader.args], {
+                reject: false, timeout: timeoutMs, stripFinalNewline: true,
+            });
+            if (done.exitCode !== 0)
+                continue;
+            // An empty clipboard is a successful read of nothing, and worth reporting as its own thing:
+            // it means the copy did not happen, not that KONECK cannot see the clipboard.
+            return { ok: true, text: String(done.stdout ?? ''), by: reader.file };
+        }
+        catch {
+            // ENOENT for a tool that is not installed, which is the ordinary case for all but one of
+            // these on any given machine.
+        }
+    }
+    return { ok: false, text: '', reason: 'No clipboard tool answered. On Linux that is usually the wl-clipboard package (Wayland) or '
+            + 'xclip (X11); over SSH there is no clipboard to read at all.' };
+}
+/**
+ * Bracketed-paste markers, as a terminal writes them and as Ink sometimes forwards them.
+ *
+ * Built from escapes rather than written literally, so this file stays free of raw control
+ * characters — a source file carrying one reads as binary to some tools and is invisible to a
+ * reviewer in all of them. The escape is optional in the pattern because Ink strips it from the
+ * opening marker before handing input over, so the literal that reaches a field is "[200~".
+ */
+const PASTE_MARKERS = new RegExp('\\u001b?\\[2(?:00|01)~', 'g');
+/** Anything below space, plus DEL. No credential holds one, and an HTTP header cannot carry one. */
+const CONTROL_CHARS = new RegExp('[\\u0000-\\u001f\\u007f]', 'g');
+/**
+ * A pasted secret, made safe to use as one.
+ *
+ * Three things go, each for its own reason. Surrounding whitespace, because a key copied out of a
+ * file or a password manager carries a trailing newline that is not part of it. Bracketed paste
+ * markers, because a terminal that announces a paste mid-chunk can leave the literal text "[200~"
+ * in the field, and a key with that in front of it fails at the provider with an authentication
+ * error that says nothing about where it came from. And control characters, which are invalid in an
+ * HTTP header — a key carrying one is rejected by the transport before the provider ever sees it,
+ * which is the least informative way for this to go wrong.
+ */
+export function cleanPastedSecret(text) {
+    return String(text ?? '')
+        .replace(PASTE_MARKERS, '')
+        .replace(CONTROL_CHARS, '')
+        .trim();
+}
+//# sourceMappingURL=clipboard.js.map

package/dist/clipboard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"clipboard.js","sourceRoot":"","sources":["../src/clipboard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,kFAAkF;AAClF,MAAM,OAAO,GAAoD;IAC/D,oDAAoD;IACpD,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,cAAc,CAAC,EAAE;IAC5C,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,YAAY,EAAE,WAAW,EAAE,IAAI,CAAC,EAAE;IAC1D,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,aAAa,EAAE,UAAU,CAAC,EAAE;IACnD,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,EAAE;IAC7B,qFAAqF;IACrF,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,YAAY,EAAE,UAAU,EAAE,eAAe,CAAC,EAAE;CAC9E,CAAC;AAWF;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,UAA2D,OAAO,EAClE,SAAS,GAAG,KAAK;IAEjB,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC;IACxC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE;gBACtD,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,IAAI;aAC3D,CAAC,CAAC;YACH,IAAI,IAAI,CAAC,QAAQ,KAAK,CAAC;gBAAE,SAAS;YAClC,4FAA4F;YAC5F,8EAA8E;YAC9E,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;QACxE,CAAC;QAAC,MAAM,CAAC;YACP,yFAAyF;YACzF,8BAA8B;QAChC,CAAC;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAClC,6FAA6F;cAC3F,6DAA6D,EAAE,CAAC;AACtE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,aAAa,GAAG,IAAI,MAAM,CAAC,wBAAwB,EAAE,GAAG,CAAC,CAAC;AAEhE,oGAAoG;AACpG,MAAM,aAAa,GAAG,IAAI,MAAM,CAAC,0BAA0B,EAAE,GAAG,CAAC,CAAC;AAElE;;;;;;;;;;GAUG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,OAAO,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;SACtB,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC;SAC1B,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC;SAC1B,IAAI,EAAE,CAAC;AACZ,CAAC"}

package/dist/ink-chat.d.ts

@@ -19,6 +19,32 @@ export declare function pickerLabel(text: string, width: number): string;
  */
 export declare function wrapPreserving(text: string, width: number): string[];
 /** Beyond this a paste is summarised in the transcript; it is still sent in full. */
+/**
+ * The picker row that declares a provider rather than choosing one.
+ *
+ * A sentinel rather than a name, so it can never collide with a real provider — somebody is entitled
+ * to declare one called "add".
+ */
+export declare const ADD_PROVIDER = "\0add-provider";
+/** Declaring a provider, a field at a time. */
+export interface AddProviderPrompt {
+    step: 'name' | 'url' | 'model' | 'confirm';
+    name: string;
+    url: string;
+    model: string;
+    /** What is being typed into the current field. */
+    value: string;
+    /** Why the last entry was refused, shown above the field. */
+    error?: string;
+}
+/**
+ * Checks one field and says what is wrong with it, or nothing.
+ *
+ * Separate from the component so the rules can be tested without mounting an Ink app — and they are
+ * worth testing: the name rule is what keeps a provider addressable from a command line, and the key
+ * variable rule is the one that stops a pasted credential being written into a JSON file.
+ */
+export declare function addProviderProblem(step: AddProviderPrompt['step'], value: string): string | null;
 export declare const MAX_PASTE_ROWS = 80;
 /**
  * The pasted text as it should appear once submitted: what was copied, structure intact.

package/dist/ink-chat.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ink-chat.d.ts","sourceRoot":"","sources":["../src/ink-chat.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAsC,MAAM,OAAO,CAAC;AA6D3D,OAAO,KAAK,EAAY,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAY5D,OAAO,EAA6C,KAAK,YAAY,EAAE,MAAM,aAAa,CAAC;AAK3F,OAAO,KAAK,EAAE,WAAW,EAAiB,MAAM,YAAY,CAAC;AAgC7D,KAAK,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,KAAK,CAAC;AAGhD,mFAAmF;AACnF,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAI9D;AAsCD,6FAA6F;AAC7F,wBAAgB,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAM7C;AA0BD,gGAAgG;AAChG,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAE/D;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CA+BpE;AAED,qFAAqF;AACrF,eAAO,MAAM,cAAc,KAAK,CAAC;AAEjC;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,SAAiB,GAAG,MAAM,CAM9E;AA6CD;;;;;;;;;;;GAWG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAGnE;AAED,6FAA6F;AAC7F,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAE1D;AAyBD,OAAO,EACL,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EACzC,KAAK,QAAQ,EAAE,KAAK,UAAU,GAC/B,MAAM,iBAAiB,CAAC;AA8EzB,0FAA0F;AAC1F,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CASpD;AAYD,8CAA8C;AAC9C,KAAK,UAAU,GAAG,SAAS,GAAG,OAAO,GAAG,UAAU,GAAG,QAAQ,GAAG,QAAQ,GAAG,MAAM,CAAC;AAClF,UAAU,UAAU;IAAG,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE;AAEtG,qGAAqG;AACrG,wBAAgB,mBAAmB,CACjC,QAAQ,GAAE,SAAS;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,EAAa,GAC5D,UAAU,EAAE,CAId;AAUD,qDAAqD;AACrD,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAE/D;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAK7E;AAeD;;;;;;GAMG;AACH,wBAAgB,cAAc,CAC5B,IAAI,EAAE,UAAU,EAChB,SAAS,EAAE,MAAM,EACjB,YAAY,CAAC,EAAE,MAAM,EACrB,YAAY,CAAC,EAAE,MAAM,GACpB,MAAM,CAYR;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,cAAc,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,CAElF;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,MAAM,GAAG,UAAU,EAAE,CAWlF;AAyBD;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,WAAiC,GAAG,MAAM,GAAG,SAAS,CAgBhH;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,SAAS,UAAU,EAAE,EAAE,KAAK,EAAE,MAAM,GAAG,UAAU,EAAE,CAM/F;AAED,mGAAmG;AACnG,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAE7E;AAED,oFAAoF;AACpF,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,SAAM,GAAG,MAAM,EAAE,CAInG;AAGD,iGAAiG;AACjG,UAAU,SAAS;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,SAAS,GAAG,IAAI,CAAC;IACvB,KAAK,EAAE,OAAO,CAAC;CAChB;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,CAiBpE;AAQD;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAMjF;AAGD;;;;;;;GAOG;AACH,MAAM,MAAM,WAAW,GAAG,YAAY,GAAG,UAAU,GAAG,MAAM,CAAC;AAE7D,wBAAgB,WAAW,CAAC,IAAI,EAAE;IAChC,SAAS,CAAC,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAAC,GAAG,CAAC,EAAE,OAAO,CAAC;CACtD,GAAG,WAAW,CAMd;AAGD,2DAA2D;AAC3D,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAIhD;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAKvF;AAGD;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAKtF;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,SAAS,MAAM,EAAE,EACzB,KAAK,EAAE,SAAS,MAAM,EAAE,EACxB,KAAK,EAAE,MAAM,GACZ,MAAM,CAMR;AAiCD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,UAAQ,GAAG,MAAM,CAEvD;AAED,KAAK,eAAe,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,SAAS;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;CAAE,CAAC;AAElG,sFAAsF;AACtF,wBAAgB,aAAa,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,EAAE,SAAS,EAAE,SAAS,eAAe,EAAE,GAAG,MAAM,CAa1G;AAED,kGAAkG;AAClG,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,EAAE,GAAG,UAAQ,GAAG,MAAM,CAOzE;AAED,0FAA0F;AAC1F,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,cAAc,CAAC,EAAE,MAAM,GAAG,MAAM,CAEjF;AAED,iGAAiG;AACjG,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAE9D;AAID,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAa7C,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAQxE;AAED,kGAAkG;AAClG,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE1D;AAED,6EAA6E;AAC7E,wBAAgB,4BAA4B,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAO9E;AAED,8FAA8F;AAC9F,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,EAAE,KAAK,SAAI,GAAG,MAAM,CAGjF;AAED,oFAAoF;AACpF,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAE5D;AAED,2FAA2F;AAC3F,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,IAAI,CAsBpE;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,YAAY,GAAG,IAAI,GAAG,MAAM,GAAG,IAAI,CASrF;AAED,iGAAiG;AACjG,wBAAgB,uBAAuB,CAAC,MAAM,EAAE;IAC9C,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;CACrF,GAAG,OAAO,CAEV;AAED,8EAA8E;AAC9E,wBAAgB,mBAAmB,CACjC,eAAe,EAAE,OAAO,EACxB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,SAAS,SAAS,EAAE,EAC3B,sBAAsB,UAAQ,GAC7B,OAAO,GAAG,MAAM,GAAG,KAAK,CAc1B;AAED,MAAM,MAAM,iBAAiB,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAElE,sGAAsG;AACtG,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,MAAM,EACb,mBAAmB,EAAE,MAAM,EAC3B,eAAe,CAAC,EAAE,MAAM,EACxB,QAAQ,CAAC,EAAE,iBAAiB,GAAG,IAAI,GAClC,MAAM,CAcR;AAED,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,SAAK,GAAG,OAAO,CAMnE;AAED,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAEzD;AA0ED;;;;;GAKG;AACH;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAU3D;AAED,wBAAgB,gBAAgB,CAC9B,MAAM,GAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAmB,EAC7E,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAQT;AAED;;;;;;;GAOG;AACH,wBAAgB,GAAG,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,EAC5C;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,IAAI,CAAA;CAAE,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAg+IhF;AAED,wBAAsB,cAAc,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAiBvE"}
+{"version":3,"file":"ink-chat.d.ts","sourceRoot":"","sources":["../src/ink-chat.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAsC,MAAM,OAAO,CAAC;AA+D3D,OAAO,KAAK,EAAY,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAY5D,OAAO,EAA6C,KAAK,YAAY,EAAE,MAAM,aAAa,CAAC;AAK3F,OAAO,KAAK,EAAE,WAAW,EAAiB,MAAM,YAAY,CAAC;AAgC7D,KAAK,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,KAAK,CAAC;AAGhD,mFAAmF;AACnF,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAI9D;AAsCD,6FAA6F;AAC7F,wBAAgB,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAM7C;AA0BD,gGAAgG;AAChG,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAE/D;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CA+BpE;AAED,qFAAqF;AACrF;;;;;GAKG;AACH,eAAO,MAAM,YAAY,mBAAkB,CAAC;AAE5C,+CAA+C;AAC/C,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,SAAS,CAAC;IAC3C,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,kDAAkD;IAClD,KAAK,EAAE,MAAM,CAAC;IACd,6DAA6D;IAC7D,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,iBAAiB,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAchG;AAED,eAAO,MAAM,cAAc,KAAK,CAAC;AAEjC;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,SAAiB,GAAG,MAAM,CAM9E;AA6CD;;;;;;;;;;;GAWG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAGnE;AAED,6FAA6F;AAC7F,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAE1D;AAyBD,OAAO,EACL,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EACzC,KAAK,QAAQ,EAAE,KAAK,UAAU,GAC/B,MAAM,iBAAiB,CAAC;AA8EzB,0FAA0F;AAC1F,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CASpD;AAYD,8CAA8C;AAC9C,KAAK,UAAU,GAAG,SAAS,GAAG,OAAO,GAAG,UAAU,GAAG,QAAQ,GAAG,QAAQ,GAAG,MAAM,CAAC;AAClF,UAAU,UAAU;IAAG,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE;AAEtG,qGAAqG;AACrG,wBAAgB,mBAAmB,CACjC,QAAQ,GAAE,SAAS;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,EAAa,GAC5D,UAAU,EAAE,CAId;AAUD,qDAAqD;AACrD,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAE/D;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAK7E;AAeD;;;;;;GAMG;AACH,wBAAgB,cAAc,CAC5B,IAAI,EAAE,UAAU,EAChB,SAAS,EAAE,MAAM,EACjB,YAAY,CAAC,EAAE,MAAM,EACrB,YAAY,CAAC,EAAE,MAAM,GACpB,MAAM,CAYR;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,cAAc,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,CAElF;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,MAAM,GAAG,UAAU,EAAE,CAWlF;AAyBD;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,WAAiC,GAAG,MAAM,GAAG,SAAS,CAgBhH;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,SAAS,UAAU,EAAE,EAAE,KAAK,EAAE,MAAM,GAAG,UAAU,EAAE,CAM/F;AAED,mGAAmG;AACnG,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAE7E;AAED,oFAAoF;AACpF,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,SAAM,GAAG,MAAM,EAAE,CAInG;AAGD,iGAAiG;AACjG,UAAU,SAAS;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,SAAS,GAAG,IAAI,CAAC;IACvB,KAAK,EAAE,OAAO,CAAC;CAChB;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,CAiBpE;AAQD;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAMjF;AAGD;;;;;;;GAOG;AACH,MAAM,MAAM,WAAW,GAAG,YAAY,GAAG,UAAU,GAAG,MAAM,CAAC;AAE7D,wBAAgB,WAAW,CAAC,IAAI,EAAE;IAChC,SAAS,CAAC,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAAC,GAAG,CAAC,EAAE,OAAO,CAAC;CACtD,GAAG,WAAW,CAMd;AAGD,2DAA2D;AAC3D,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAIhD;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAKvF;AAGD;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAKtF;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,SAAS,MAAM,EAAE,EACzB,KAAK,EAAE,SAAS,MAAM,EAAE,EACxB,KAAK,EAAE,MAAM,GACZ,MAAM,CAMR;AAiCD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,UAAQ,GAAG,MAAM,CAEvD;AAED,KAAK,eAAe,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,SAAS;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;CAAE,CAAC;AAElG,sFAAsF;AACtF,wBAAgB,aAAa,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,EAAE,SAAS,EAAE,SAAS,eAAe,EAAE,GAAG,MAAM,CAa1G;AAED,kGAAkG;AAClG,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,EAAE,GAAG,UAAQ,GAAG,MAAM,CAOzE;AAED,0FAA0F;AAC1F,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,cAAc,CAAC,EAAE,MAAM,GAAG,MAAM,CAEjF;AAED,iGAAiG;AACjG,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAE9D;AAID,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAa7C,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAQxE;AAED,kGAAkG;AAClG,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE1D;AAED,6EAA6E;AAC7E,wBAAgB,4BAA4B,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAO9E;AAED,8FAA8F;AAC9F,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,EAAE,KAAK,SAAI,GAAG,MAAM,CAGjF;AAED,oFAAoF;AACpF,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAE5D;AAED,2FAA2F;AAC3F,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,IAAI,CAsBpE;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,YAAY,GAAG,IAAI,GAAG,MAAM,GAAG,IAAI,CASrF;AAED,iGAAiG;AACjG,wBAAgB,uBAAuB,CAAC,MAAM,EAAE;IAC9C,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;CACrF,GAAG,OAAO,CAEV;AAED,8EAA8E;AAC9E,wBAAgB,mBAAmB,CACjC,eAAe,EAAE,OAAO,EACxB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,SAAS,SAAS,EAAE,EAC3B,sBAAsB,UAAQ,GAC7B,OAAO,GAAG,MAAM,GAAG,KAAK,CAc1B;AAED,MAAM,MAAM,iBAAiB,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAElE,sGAAsG;AACtG,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,MAAM,EACb,mBAAmB,EAAE,MAAM,EAC3B,eAAe,CAAC,EAAE,MAAM,EACxB,QAAQ,CAAC,EAAE,iBAAiB,GAAG,IAAI,GAClC,MAAM,CAcR;AAED,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,SAAK,GAAG,OAAO,CAMnE;AAED,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAEzD;AA0ED;;;;;GAKG;AACH;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAU3D;AAED,wBAAgB,gBAAgB,CAC9B,MAAM,GAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAmB,EAC7E,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAQT;AAED;;;;;;;GAOG;AACH,wBAAgB,GAAG,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,EAC5C;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,IAAI,CAAA;CAAE,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAgwJhF;AAED,wBAAsB,cAAc,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAiBvE"}

package/dist/ink-chat.js

@@ -7,10 +7,11 @@ import { estimateCost, formatCost } from './pricing.js';
 import { generateSessionId, saveSession, listSessions, loadSession, relativeAge, renameSession, forkSession, archiveSession, findSession, } from './session.js';
 import { loadMemory } from './memory.js';
 import { loadKoneckConfig, saveKoneckConfig, setConfigKey, configKeyDescriptions, CONFIG_FILE, CONFIG_SCHEMA, stepValue, displayValue } from './config-store.js';
-import { PROVIDERS, resolveProvider, getApiKey, addUserProvider, userProvidersPath, servesLocally, servesOwnWeights, endpointForProvider } from './providers.js';
+import { PROVIDERS, resolveProvider, getApiKey, addUserProvider, removeUserProvider, userProvidersPath, keyEnvFor, BUILT_INS as BUILT_IN_PROVIDERS, servesLocally, servesOwnWeights, endpointForProvider } from './providers.js';
 import { normaliseEndpoint, withEndpoint, savedEndpoints, shortSource, resolveModelChoice, withModel } from './endpoints.js';
 import { loadProjectConfig, loadGlobalConfig, saveGlobalConfig, withoutStoredApiKey } from './config.js';
 import { rememberKey, forgetAllKeys } from './credentials.js';
+import { readClipboard, cleanPastedSecret } from './clipboard.js';
 import { paceFrom } from './pace.js';
 import { policyFrom, FAILOVER_OFF } from './failover.js';
 import { listCheckpoints, revertCheckpoint, previewCheckpoint, snapshotTree, filesTouchedBy, createWorkspaceCheckpoint, checkpointScope } from './checkpoint.js';
@@ -200,6 +201,37 @@ export function wrapPreserving(text, width) {
     return out;
 }
 /** Beyond this a paste is summarised in the transcript; it is still sent in full. */
+/**
+ * The picker row that declares a provider rather than choosing one.
+ *
+ * A sentinel rather than a name, so it can never collide with a real provider — somebody is entitled
+ * to declare one called "add".
+ */
+export const ADD_PROVIDER = 'add-provider';
+/**
+ * Checks one field and says what is wrong with it, or nothing.
+ *
+ * Separate from the component so the rules can be tested without mounting an Ink app — and they are
+ * worth testing: the name rule is what keeps a provider addressable from a command line, and the key
+ * variable rule is the one that stops a pasted credential being written into a JSON file.
+ */
+export function addProviderProblem(step, value) {
+    const said = value.trim();
+    if (step === 'name') {
+        if (said === '')
+            return 'A name is needed — it is how you refer to this provider afterwards.';
+        if (!/^[a-z0-9][a-z0-9._-]{0,40}$/.test(said.toLowerCase())) {
+            return 'Letters, digits, dot, dash and underscore only, starting with a letter or digit.';
+        }
+        return null;
+    }
+    if (step === 'url') {
+        if (!/^https?:\/\/.+/i.test(said))
+            return 'That is not an http or https URL.';
+        return null;
+    }
+    return null;
+}
 export const MAX_PASTE_ROWS = 80;
 /**
  * The pasted text as it should appear once submitted: what was copied, structure intact.
@@ -1776,6 +1808,16 @@ export function App({ config: initialConfig, clearFrame }) {
     // to the client as a runtime override — KONECK never writes it to disk, and it is never put
     // into a transcript row, so it cannot end up in a saved session file.
     const [keyPrompt, setKeyPrompt] = useState(null);
+    /**
+     * Declaring a provider, one field at a time.
+     *
+     * A step at a time rather than one long command, because the command form already existed and was
+     * the problem: `/connect openrouter https://openrouter.ai/api/v1 anthropic/claude-sonnet-4.5` is
+     * three things to know before you can type anything at all. Asked one at a time, each question
+     * carries its own example and its own refusal, and the endpoint is checked before it is written
+     * rather than failing on the first message afterwards.
+     */
+    const [addProv, setAddProv] = useState(null);
     const [picker, setPicker] = useState(null);
     const [pickIndex, setPickIndex] = useState(0);
     const [pickQuery, setPickQuery] = useState('');
@@ -2429,13 +2471,103 @@ export function App({ config: initialConfig, clearFrame }) {
             current: m.id === cfg.model,
         }));
     }
+    /**
+     * The providers to choose from, with declaring one as the first choice.
+     *
+     * Declaring has been possible from the terminal all along — `/connect <name> <url>` writes it to
+     * disk and makes it a first-class choice — but nothing said so. The picker listed what existed and
+     * stopped there, `/provider` with no argument printed the same list and a usage line about
+     * switching, and the browser meanwhile had a visible "+ add a provider" button. So the answer to
+     * "how do I add one here" was a command form you had to already know. It is an entry in the list
+     * now, where somebody looking for it is looking.
+     */
     function providerItems() {
-        return Object.values(PROVIDERS).map(p => ({
-            value: p.name,
-            label: p.name,
-            desc: `${p.displayName} - ${p.defaultModel}` + (p.userDefined ? '  (yours)' : ''),
-            current: p.name === cfg.provider,
-        }));
+        return [
+            { value: ADD_PROVIDER, label: '+ add a provider',
+                desc: 'an OpenAI-compatible endpoint KONECK does not ship with' },
+            ...Object.values(PROVIDERS).map(p => ({
+                value: p.name,
+                label: p.name,
+                desc: `${p.displayName} - ${p.defaultModel}` + (p.userDefined ? '  (yours)' : ''),
+                current: p.name === cfg.provider,
+            })),
+        ];
+    }
+    /** Opens the declare-a-provider prompt, optionally with fields already known. */
+    function startAddProvider(seed = {}) {
+        setAddProv({ step: 'name', name: '', url: '', model: '', value: '', ...seed });
+    }
+    /**
+     * Takes what was typed into the current field and moves on, or refuses it.
+     *
+     * The built-in check sits between the endpoint and the model rather than at the start, because it
+     * is not about the name being invalid: repointing a name KONECK ships with is a legitimate thing
+     * to want — a company proxy in front of a vendor is exactly this — and the only requirement is
+     * that it cannot happen by accident. Same reasoning as the browser, and the same wording.
+     */
+    async function advanceAddProvider() {
+        const at = addProv;
+        if (!at)
+            return;
+        const said = at.value.trim();
+        const problem = addProviderProblem(at.step, said);
+        if (problem) {
+            setAddProv({ ...at, error: problem });
+            return;
+        }
+        if (at.step === 'name') {
+            const name = said.toLowerCase();
+            setAddProv({ ...at, name, step: 'url', value: '', error: undefined });
+            return;
+        }
+        if (at.step === 'url') {
+            const url = said.replace(/\/+$/, '');
+            setAddProv({ ...at, url, step: 'model', value: '', error: undefined });
+            return;
+        }
+        if (at.step === 'model') {
+            const next = { ...at, model: said, value: '', error: undefined };
+            if (BUILT_IN_PROVIDERS[at.name]) {
+                setAddProv({ ...next, step: 'confirm' });
+                return;
+            }
+            await saveDeclaredProvider(next);
+            return;
+        }
+        // confirm
+        if (/^y(es)?$/i.test(said)) {
+            await saveDeclaredProvider(at);
+            return;
+        }
+        setAddProv(null);
+        addSystem(`Left ${at.name} pointing at ${BUILT_IN_PROVIDERS[at.name]?.baseURL}.`);
+    }
+    /** Writes the declaration and switches to it, which is what somebody adding one meant to do. */
+    async function saveDeclaredProvider(from) {
+        const shadowed = BUILT_IN_PROVIDERS[from.name];
+        let def;
+        try {
+            def = addUserProvider({
+                name: from.name,
+                displayName: from.name,
+                baseURL: from.url,
+                apiKeyEnv: keyEnvFor(from.name),
+                defaultModel: from.model.trim() || 'default',
+            });
+        }
+        catch (e) {
+            setAddProv({ ...from, error: e instanceof Error ? e.message : String(e) });
+            return;
+        }
+        setAddProv(null);
+        addSystem((shadowed
+            ? `⚠️  Repointed **${def.name}** → ${def.baseURL}  (was ${shadowed.baseURL})\n`
+                + 'Everything that uses this name now goes there, in the browser as well as here.\n'
+            : `Declared **${def.name}** → ${def.baseURL}\n`)
+            + `Saved to ${userProvidersPath()}. Its key is read from ${def.apiKeyEnv} `
+            + '(or KONECK_API_KEY).\n'
+            + `Remove it again with \`/provider remove ${def.name}\`.`);
+        await choosePick({ value: def.name, label: def.name, desc: '' }, 'provider');
     }
     /**
      * Offers workspace paths for an `@` reference.
@@ -2575,6 +2707,10 @@ export function App({ config: initialConfig, clearFrame }) {
             addSystem(`Model → ${item.value}  ·  remembered for ${cfg.provider}  (session reset)`);
             return;
         }
+        if (kind === 'provider' && item.value === ADD_PROVIDER) {
+            startAddProvider();
+            return;
+        }
         if (kind === 'provider') {
             const def = PROVIDERS[item.value];
             // The endpoint saved for the provider being switched to, not its built-in address. Passing
@@ -2617,6 +2753,45 @@ export function App({ config: initialConfig, clearFrame }) {
         }
     }
     /** Applies a key typed at the prompt. Takes effect immediately — no restart. */
+    /**
+     * Puts whatever is on the clipboard into the key field.
+     *
+     * The result is reported in the panel rather than as a system message, because the panel is where
+     * the person is looking and because the alternative — silence — is exactly what made pasting feel
+     * broken in the first place. Nothing about the key itself is shown, only how many characters
+     * arrived, which is enough to tell a successful paste from an empty clipboard.
+     */
+    async function pasteFromClipboard() {
+        setKeyPrompt(p => (p ? { ...p, note: 'reading the clipboard…' } : p));
+        const got = await readClipboard();
+        if (!got.ok) {
+            setKeyPrompt(p => (p ? { ...p, note: got.reason ?? 'the clipboard could not be read' } : p));
+            return;
+        }
+        const clean = cleanPastedSecret(got.text);
+        if (clean === '') {
+            setKeyPrompt(p => (p ? { ...p, note: 'the clipboard is empty — copy the key first' } : p));
+            return;
+        }
+        setKeyPrompt(p => (p ? {
+            ...p, value: p.value + clean,
+            note: `${clean.length} characters from the clipboard · enter to use them`,
+        } : p));
+    }
+    /** The same, for the field being filled in while declaring a provider. */
+    async function pasteIntoAddProvider() {
+        const got = await readClipboard();
+        if (!got.ok) {
+            setAddProv(p => (p ? { ...p, error: got.reason ?? 'the clipboard could not be read' } : p));
+            return;
+        }
+        const clean = cleanPastedSecret(got.text);
+        if (clean === '') {
+            setAddProv(p => (p ? { ...p, error: 'the clipboard is empty' } : p));
+            return;
+        }
+        setAddProv(p => (p ? { ...p, value: p.value + clean, error: undefined } : p));
+    }
     async function applyTypedKey() {
         if (!keyPrompt)
             return;
@@ -2975,8 +3150,64 @@ export function App({ config: initialConfig, clearFrame }) {
                 return;
             }
             case '/provider': {
+                const [verb, ...restArgs] = arg.trim().split(/\s+/).filter(Boolean);
+                /*
+                 * add and remove, named as what they are.
+                 *
+                 * Declaring was only ever reachable as `/connect <name> <url>`, which is a thing you have to
+                 * already know — and somebody looking for how to add a provider looks at `/provider`. The
+                 * old form still works; this is where it can be found.
+                 */
+                if (verb?.toLowerCase() === 'add') {
+                    const [name, url, ...model] = restArgs;
+                    // With arguments it is one step; without, it asks. Both end in the same place.
+                    startAddProvider({
+                        ...(name ? { name: name.toLowerCase(), step: 'url' } : {}),
+                        ...(name && url ? { url: url.replace(/\/+$/, ''), step: 'model' } : {}),
+                        ...(model.length ? { value: model.join(' ') } : {}),
+                    });
+                    return;
+                }
+                if (verb?.toLowerCase() === 'remove' || verb?.toLowerCase() === 'forget') {
+                    const target = (restArgs[0] ?? '').toLowerCase();
+                    if (!target) {
+                        const mine = Object.values(PROVIDERS).filter(p => p.userDefined).map(p => p.name);
+                        addSystem(mine.length
+                            ? `Usage: /provider remove <name>\nYours: ${mine.join(', ')}`
+                            : 'You have not declared any providers, so there is nothing to remove.');
+                        return;
+                    }
+                    const wasShadowing = BUILT_IN_PROVIDERS[target] !== undefined;
+                    if (!removeUserProvider(target)) {
+                        addSystem(PROVIDERS[target]
+                            ? `"${target}" ships with KONECK — it was not declared by you, so there is nothing to remove.`
+                            : `No declared provider called "${target}".`);
+                        return;
+                    }
+                    addSystem(wasShadowing
+                        ? `Removed your "${target}". The built-in one is back, pointing at ${BUILT_IN_PROVIDERS[target].baseURL}.`
+                        : `Removed "${target}".`);
+                    return;
+                }
                 if (!arg) {
-                    addSystem(`Current provider: ${cfg.provider}\nAvailable: ${Object.keys(PROVIDERS).join(', ')}\nUsage: /provider <name>`);
+                    /*
+                     * Says where things stand, then opens the picker.
+                     *
+                     * The list scrolls into the transcript where it can be read back; the picker is for doing
+                     * something about it, and carries "+ add a provider" as its first row. An earlier version
+                     * of this printed the summary and stopped, and the summary said the picker would open —
+                     * which it did not, because nothing opened it. A help line that describes behaviour the
+                     * program does not have is worse than no help line.
+                     */
+                    const mine = Object.values(PROVIDERS).filter(p => p.userDefined).map(p => p.name);
+                    addSystem(`Current provider: ${cfg.provider}\n`
+                        + `Available: ${Object.keys(PROVIDERS).join(', ')}\n`
+                        + (mine.length ? `Declared by you: ${mine.join(', ')}\n` : '')
+                        + '\nSwitch:  /provider <name>, or pick one below\n'
+                        + 'Add:     /provider add  — asks for a name, an endpoint and a default model\n'
+                        + '         /provider add <name> <url> [model]  if you have them to hand\n'
+                        + 'Remove:  /provider remove <name>');
+                    openPicker('provider', providerItems());
                     return;
                 }
                 const name = arg.trim().toLowerCase();
@@ -2985,7 +3216,7 @@ export function App({ config: initialConfig, clearFrame }) {
                     // Switching to a name that does not resolve used to reset the session anyway, leaving it
                     // pointed at nothing and failing on the next message instead of on the command.
                     addSystem(`Unknown provider "${arg}". Known: ${Object.keys(PROVIDERS).join(', ')}\n` +
-                        `Declare one:  /connect ${name} https://endpoint/v1`);
+                        `Declare it:  /provider add ${name} https://endpoint/v1`);
                     return;
                 }
                 // Keep the typed command and picker on one implementation path. The picker clears a
@@ -4084,6 +4315,35 @@ export function App({ config: initialConfig, clearFrame }) {
                 answer(typed);
             return;
         }
+        if (addProv) {
+            if (key.escape) {
+                setAddProv(null);
+                addSystem('Cancelled — nothing was declared.');
+                return;
+            }
+            if (key.return) {
+                void advanceAddProvider();
+                return;
+            }
+            if (key.backspace || key.delete) {
+                setAddProv(p => (p ? { ...p, value: p.value.slice(0, -1) } : p));
+                return;
+            }
+            // The same clipboard escape hatch the key prompt has. An endpoint is the other thing here
+            // nobody wants to retype, and it is the field most likely to arrive from a browser's address
+            // bar with a newline attached.
+            if (key.ctrl && input.toLowerCase() === 'v') {
+                void pasteIntoAddProvider();
+                return;
+            }
+            // A pasted endpoint arrives as one chunk, so it is taken whole rather than a letter at a time.
+            if (!key.meta && input) {
+                const clean = cleanPastedSecret(input);
+                if (clean !== '')
+                    setAddProv(p => (p ? { ...p, value: p.value + clean } : p));
+            }
+            return;
+        }
         if (keyPrompt) {
             if (key.escape) {
                 setKeyPrompt(null);
@@ -4098,9 +4358,27 @@ export function App({ config: initialConfig, clearFrame }) {
                 setKeyPrompt(p => (p ? { ...p, value: p.value.slice(0, -1) } : p));
                 return;
             }
-            // Paste arrives as one chunk; take it whole rather than character by character.
-            if (!key.ctrl && !key.meta && input) {
-                setKeyPrompt(p => (p ? { ...p, value: p.value + input } : p));
+            /*
+             * Ctrl+V fetches the clipboard itself, rather than waiting for the terminal to deliver it.
+             *
+             * Pasting into a terminal is several different mechanisms and not all of them arrive here:
+             * bracketed paste does, a plain burst does, a middle-click may have been taken over by
+             * KONECK's own mouse handling, and on Windows some hosts deliver Ctrl+V as a control code
+             * with no text attached. Somebody putting an API key into this box does not care which of
+             * those their terminal does, and typing a sixty-character secret by hand is not an answer. So
+             * this asks the operating system instead, which works the same way everywhere it works at all.
+             */
+            if (key.ctrl && input.toLowerCase() === 'v') {
+                void pasteFromClipboard();
+                return;
+            }
+            // A paste arrives as one chunk, so it is taken whole rather than a character at a time — and
+            // cleaned, because a key copied out of a file carries a newline and a terminal announcing a
+            // paste mid-chunk can leave its marker text behind.
+            if (!key.meta && input) {
+                const clean = cleanPastedSecret(input);
+                if (clean !== '')
+                    setKeyPrompt(p => (p ? { ...p, value: p.value + clean } : p));
             }
             return;
         }
@@ -5138,7 +5416,15 @@ export function App({ config: initialConfig, clearFrame }) {
                             return (_jsx(Box, { flexDirection: "column", children: _jsx(Text, { backgroundColor: selected ? CYAN : undefined, color: selected ? '#10222A' : INK, bold: selected, children: fitCells(`${selected ? G.caret + ' ' : '  '}${label}` +
                                         `${item.current ? '(current) ' : ''}${header ? `${header} · ` : ''}${item.desc}`, width) }) }, item.value + absolute));
                         }), list.length > pickerRows && (_jsxs(Text, { color: DIM, children: ["\u2191\u2193 navigate \u00B7 pgup/pgdn jump \u00B7 enter select \u00B7 showing ", Math.max(0, start) + 1, "\u2013", Math.max(0, start) + shown.length, " of ", list.length] }))] }));
-            })(), keyPrompt && (_jsxs(Box, { flexDirection: "column", borderStyle: "round", borderColor: AMBER, paddingX: 1, marginTop: 1, width: barWidth, children: [_jsxs(Text, { color: AMBER, bold: true, children: ["API key for ", keyPrompt.provider] }), _jsx(Text, { color: MUTED, children: "Paste it and press enter. Held in memory for this session only; esc to cancel." }), _jsxs(Box, { marginTop: 1, children: [_jsxs(Text, { color: MUTED, children: [keyPrompt.env, ": "] }), _jsx(Text, { color: INK, children: '*'.repeat(Math.min(keyPrompt.value.length, 48)) }), _jsx(Text, { color: CYAN, children: "\u2588" })] })] })), ask && (() => {
+            })(), addProv && (() => {
+                const shadowed = BUILT_IN_PROVIDERS[addProv.name];
+                const ask = addProv.step === 'name' ? { label: 'name', hint: 'short and lowercase, e.g. openrouter' }
+                    : addProv.step === 'url' ? { label: 'endpoint', hint: 'OpenAI-compatible, e.g. https://openrouter.ai/api/v1' }
+                        : addProv.step === 'model' ? { label: 'default model', hint: 'optional — enter to skip' }
+                            : { label: 'repoint ' + addProv.name + '? (y/n)',
+                                hint: `it ships with KONECK, pointing at ${shadowed?.baseURL}` };
+                return (_jsxs(Box, { flexDirection: "column", borderStyle: "round", borderColor: CYAN, paddingX: 1, marginTop: 1, width: barWidth, children: [_jsx(Text, { color: CYAN, bold: true, children: "Declare a provider" }), _jsxs(Text, { color: MUTED, children: [ask.hint, "  \u00B7  esc to cancel"] }), addProv.name !== '' && (_jsxs(Text, { color: DIM, children: [addProv.name, addProv.url ? '  ' + addProv.url : ''] })), addProv.error && _jsx(Text, { color: CRIMSON, children: addProv.error }), _jsxs(Box, { marginTop: 1, children: [_jsxs(Text, { color: MUTED, children: [ask.label, ": "] }), _jsx(Text, { color: INK, children: addProv.value }), _jsx(Text, { color: CYAN, children: "\u2588" })] })] }));
+            })(), keyPrompt && (_jsxs(Box, { flexDirection: "column", borderStyle: "round", borderColor: AMBER, paddingX: 1, marginTop: 1, width: barWidth, children: [_jsxs(Text, { color: AMBER, bold: true, children: ["API key for ", keyPrompt.provider] }), _jsx(Text, { color: MUTED, children: "Paste it and press enter, or ctrl+v to read the clipboard. Held in memory for this session only; esc to cancel." }), keyPrompt.note && _jsx(Text, { color: CYAN, children: keyPrompt.note }), _jsxs(Box, { marginTop: 1, children: [_jsxs(Text, { color: MUTED, children: [keyPrompt.env, ": "] }), _jsx(Text, { color: INK, children: '*'.repeat(Math.min(keyPrompt.value.length, 48)) }), _jsx(Text, { color: CYAN, children: "\u2588" }), keyPrompt.value.length > 0 && (_jsxs(Text, { color: DIM, children: ["  ", keyPrompt.value.length, " characters"] }))] })] })), ask && (() => {
                 let detail = '';
                 try {
                     const parsed = JSON.parse(ask.args);