omnius 1.0.264 → 1.0.266

package/dist/index.js

@@ -595366,26 +595366,29 @@ function truncateAnsiToWidth(text2, width) {
 }
 function wrapToolTextLine(text2, width, prefix = "") {
   text2 = sanitizeToolBoxContent(text2);
-  if (width <= 0) return prefix ? [prefix] : [text2];
-  if (text2.length === 0) return prefix ? [prefix] : [""];
+  if (width <= 0) return [text2];
+  if (text2.length === 0) return [""];
   const out = [];
-  const continuationIndent = hangingIndentForPlainLine(text2, width);
   const prefixLen = visibleLen(prefix);
-  const avail = Math.max(4, width - prefixLen);
   let remaining = text2;
-  while (visibleLen(remaining) > avail) {
+  let first2 = true;
+  while (true) {
+    const avail = Math.max(4, first2 ? width : width - prefixLen);
+    if (visibleLen(remaining) <= avail) {
+      out.push(first2 ? remaining : prefix + remaining);
+      break;
+    }
     const breakOffset = findVisibleBreak(remaining, avail);
     let breakAt = breakOffset;
-    let bestBreak = remaining.lastIndexOf(" ", breakOffset);
+    const bestBreak = remaining.lastIndexOf(" ", breakOffset);
     if (bestBreak > 0) {
       breakAt = bestBreak;
     }
     const line = remaining.slice(0, breakAt).trimEnd();
-    out.push(prefix ? prefix + line : line);
+    out.push(first2 ? line : prefix + line);
     remaining = remaining.slice(breakAt).trimStart();
+    first2 = false;
   }
-  const lastLine = prefix ? prefix + remaining : remaining;
-  out.push(lastLine);
   return out;
 }
 function wrapLinesWithPrefix(content, prefix, maxWidth) {
@@ -595552,7 +595555,7 @@ function wrapFooterItems(items, width) {
     }
     if (current) lines.push(current);
     if (clean5.length > width) {
-      const pipe3 = "│ ";
+      const pipe3 = "  ";
       const chunks = wrapToolTextLine(clean5, width, pipe3);
       lines.push(...chunks.slice(0, -1));
       current = chunks[chunks.length - 1] ?? "";
@@ -595624,7 +595627,7 @@ function buildCombinedToolBoxLines(toolName, callArgs, success, output, opts, wi
   ];
   const triggerTexts = formatToolArgsForBox(toolName, callArgs, opts.verbose);
   for (const text2 of triggerTexts) {
-    const pipe3 = "│ ";
+    const pipe3 = "  ";
     const chunks = wrapToolTextLine(text2, innerWidth, pipe3);
     for (const chunk of chunks) {
       lines.push(
@@ -595636,7 +595639,7 @@ function buildCombinedToolBoxLines(toolName, callArgs, success, output, opts, wi
   if (resultBody.length > 0) {
     for (const bodyLine of resultBody) {
       const text2 = sanitizeToolBoxContent(bodyLine.text);
-      const pipe3 = "│ ";
+      const pipe3 = "  ";
       const chunks = bodyLine.mode === "truncate" ? [truncateAnsiToWidth(text2, innerWidth)] : wrapToolTextLine(text2, innerWidth, pipe3);
       for (const chunk of chunks) {
         lines.push(
@@ -595678,7 +595681,7 @@ function buildToolBoxLines(data, width) {
   ];
   for (const bodyLine of data.body.length > 0 ? data.body : [{ text: "Done", mode: "wrap", kind: "dim" }]) {
     const text2 = sanitizeToolBoxContent(bodyLine.text);
-    const pipe3 = "│ ";
+    const pipe3 = "  ";
     const chunks = bodyLine.mode === "truncate" ? [truncateAnsiToWidth(text2, innerWidth)] : wrapToolTextLine(text2, innerWidth, pipe3);
     for (const chunk of chunks) {
       lines.push(
@@ -606077,6 +606080,7 @@ var init_status_bar = __esm({
       _autoScroll = true;
       /** Cached click region for the spacer button */
       _scrollBtnRegion = null;
+      _copyBtnRegion = null;
       stdinHooked = false;
       /** COHERE distributed cognitive commons active flag */
       _cohereActive = false;
@@ -607776,6 +607780,12 @@ var init_status_bar = __esm({
             return;
           }
         }
+        if (type === "press" && this._copyBtnRegion && row === this._copyBtnRegion.row) {
+          if (col >= this._copyBtnRegion.start && col <= this._copyBtnRegion.end) {
+            this.copySessionToClipboard();
+            return;
+          }
+        }
         const pos = this.rowPositions(termRows());
         if (type === "press" && pos.tabBarRow > 0 && row === pos.tabBarRow) {
           const viewId = this.hitTestTabBar(col);
@@ -608627,6 +608637,60 @@ ${CONTENT_BG_SEQ}`);
         this._syncPagerScope();
         this.repaintContent();
       }
+      /** Copy the visible session content to the system clipboard */
+      copySessionToClipboard() {
+        const lines = this._contentLines;
+        if (!lines || lines.length === 0) return;
+        const offset = this._contentScrollOffset;
+        const visible = this.contentHeight;
+        const startIdx = Math.max(0, offset);
+        const endIdx = Math.min(lines.length, startIdx + visible);
+        const visibleLines = lines.slice(startIdx, endIdx);
+        const stripped = visibleLines.map(
+          (line) => line.replace(/\x1B\[[0-9;]*[a-zA-Z]/g, "").replace(/\x1B\]?[^\x07]*\x07/g, "")
+        );
+        const text2 = stripped.join("\n");
+        const clipboardCmds = [
+          ["wl-copy", text2],
+          ["xclip", ["-selection", "clipboard"], "-i"],
+          ["xsel", "--clipboard", "--input"]
+        ];
+        let success = false;
+        for (const [cmd, ...args] of clipboardCmds) {
+          try {
+            const { execSync: execSync63 } = __require("child_process");
+            const child = __require("child_process").spawn(cmd, args, {
+              stdio: ["pipe", "pipe", "pipe"]
+            });
+            if (child.stdin) {
+              child.stdin.write(text2);
+              child.stdin.end();
+            }
+            child.on("close", (code8) => {
+              if (code8 === 0) success = true;
+            });
+            setTimeout(() => {
+              if (!success) {
+                try {
+                  child.kill();
+                } catch {
+                }
+              }
+            }, 500);
+            break;
+          } catch {
+            continue;
+          }
+        }
+        if (!success) {
+          const fs11 = __require("fs");
+          const os9 = __require("os");
+          const tmpPath = __require("path").join(os9.tmpdir(), "omnius-session-copy.txt");
+          fs11.writeFileSync(tmpPath, text2, "utf-8");
+          process.stderr.write(`\x1B[38;5;208mClipboard unavailable — session saved to ${tmpPath}\x1B[0m
+`);
+        }
+      }
       /**
        * WO-TASK-02 — sync the tasks panel "pager" scope flag with the current
        * scroll-back state. While the user is scrolled back through content
@@ -608692,8 +608756,19 @@ ${CONTENT_BG_SEQ}`);
               start: startCol,
               end: startCol + label.length - 1
             };
+            const copyLabel = " ⎘ copy session ";
+            const copyCol = Math.max(startCol + label.length + 2, w - copyLabel.length);
+            if (copyCol + copyLabel.length <= w) {
+              buf += `\x1B[${spacerRow};${copyCol}H\x1B[38;5;141m${copyLabel}\x1B[0m${CONTENT_BG_SEQ}`;
+              this._copyBtnRegion = {
+                row: spacerRow,
+                start: copyCol,
+                end: copyCol + copyLabel.length - 1
+              };
+            }
           } else {
             this._scrollBtnRegion = null;
+            this._copyBtnRegion = null;
           }
         }
         if (this._contentScrollOffset > 0) {
@@ -673007,7 +673082,7 @@ function buildShellLiveBlockLines(state, width) {
   const elapsed = Math.max(0, Date.now() - state.startedAt);
   const status = state.status === "running" ? `live ${formatElapsed2(elapsed)}` : state.status;
   const title = ` Shell ${status} `;
-  const top = `╭${fitWithFill(`─${title}`, w - 2, "─")}╮`;
+  const top = `╭─┤${title}├${"─".repeat(Math.max(0, w - 5 - title.length))}╮`;
   const bottom = `╰${"─".repeat(w - 2)}╯`;
   const visibleLines = [...state.lines];
   if (state.currentLine) visibleLines.push(state.currentLine);
@@ -673018,7 +673093,10 @@ function buildShellLiveBlockLines(state, width) {
     contentRow(`$ ${state.command}`, inner),
     contentRow("", inner)
   ];
-  if (hidden > 0) rows.push(contentRow(`... ${hidden} earlier line${hidden === 1 ? "" : "s"}`, inner));
+  if (hidden > 0)
+    rows.push(
+      contentRow(`... ${hidden} earlier line${hidden === 1 ? "" : "s"}`, inner)
+    );
   if (body.length === 0) {
     rows.push(contentRow("(waiting for output)", inner));
   } else {
@@ -673045,11 +673123,6 @@ function fit2(value2, width) {
   }
   return plain + " ".repeat(width - chars.length);
 }
-function fitWithFill(value2, width, fill) {
-  const chars = Array.from(value2);
-  if (chars.length > width) return chars.slice(0, width).join("");
-  return value2 + fill.repeat(width - chars.length);
-}
 function formatElapsed2(ms) {
   const seconds = Math.floor(ms / 1e3);
   if (seconds < 60) return `${seconds}s`;
@@ -690936,7 +691009,7 @@ import {
   readSync as readSync2,
   closeSync as closeSync6
 } from "node:fs";
-import { randomBytes as randomBytes28, randomUUID as randomUUID21 } from "node:crypto";
+import { randomBytes as randomBytes28, randomUUID as randomUUID21, timingSafeEqual as timingSafeEqual2 } from "node:crypto";
 import { createHash as createHash42 } from "node:crypto";
 function memoryDbPaths3(baseDir = process.cwd()) {
   const dir = join164(baseDir, ".omnius");
@@ -692499,16 +692572,69 @@ function runtimeKeysExist() {
     return false;
   }
 }
+function tokensMatch(a2, b) {
+  if (typeof a2 !== "string" || typeof b !== "string") return false;
+  if (a2.length === 0 || b.length === 0) return false;
+  const ab = Buffer.from(a2, "utf8");
+  const bb = Buffer.from(b, "utf8");
+  if (ab.length !== bb.length) return false;
+  try {
+    return timingSafeEqual2(ab, bb);
+  } catch {
+    return false;
+  }
+}
+function scopedEnvKeySources() {
+  const pick = (...names) => {
+    for (const n2 of names) {
+      const v = process.env[n2];
+      if (v && v.trim()) return v.trim();
+    }
+    return void 0;
+  };
+  return [
+    {
+      value: pick("OMNIUS_REST_READ_API_KEY", "OMNIUS_READ_API_KEY"),
+      scope: "read",
+      user: "rest-read"
+    },
+    {
+      value: pick("OMNIUS_REST_RUN_API_KEY", "OMNIUS_RUN_API_KEY"),
+      scope: "run",
+      user: "rest-run"
+    },
+    {
+      value: pick("OMNIUS_REST_AUDITOR_API_KEY", "OMNIUS_AUDITOR_API_KEY"),
+      scope: "read",
+      user: "rest-auditor"
+    },
+    {
+      value: pick("OMNIUS_REST_ADMIN_API_KEY", "OMNIUS_ADMIN_API_KEY"),
+      scope: "admin",
+      user: "rest-admin"
+    },
+    { value: pick("OMNIUS_REST_API_KEY"), scope: "admin", user: "rest-admin" }
+  ];
+}
+function anyEnvAuthKeyConfigured() {
+  if (process.env["OMNIUS_REST_API_KEYS"] || process.env["OMNIUS_API_KEYS"]) {
+    return true;
+  }
+  if (process.env["OMNIUS_API_KEY"]) return true;
+  return scopedEnvKeySources().some((s2) => Boolean(s2.value));
+}
+function anyAuthKeyConfigured() {
+  return anyEnvAuthKeyConfigured() || runtimeKeysExist();
+}
 function resolveAuth(req3) {
   const authHeader = req3.headers["authorization"];
-  const token = authHeader?.startsWith("Bearer ") ? authHeader.slice(7) : null;
+  const token = typeof authHeader === "string" && authHeader.startsWith("Bearer ") ? authHeader.slice(7).trim() : null;
   const multiKeys = process.env["OMNIUS_REST_API_KEYS"] || process.env["OMNIUS_API_KEYS"];
-  if (multiKeys) {
-    if (!token) return { authenticated: false, scope: "read" };
+  if (token && multiKeys) {
     for (const entry of multiKeys.split(",")) {
       const parts = entry.trim().split(":");
       const [key, scope, user, rpmStr, tpdStr, maxJobsStr] = parts;
-      if (key === token) {
+      if (key && tokensMatch(key, token)) {
         return {
           authenticated: true,
           scope: scope || "admin",
@@ -692519,26 +692645,25 @@ function resolveAuth(req3) {
         };
       }
     }
-    return { authenticated: false, scope: "read" };
   }
-  const scopedRestKeys = [
-    [process.env["OMNIUS_REST_READ_API_KEY"], "read", "rest-read"],
-    [process.env["OMNIUS_REST_RUN_API_KEY"], "run", "rest-run"],
-    [process.env["OMNIUS_REST_AUDITOR_API_KEY"], "read", "rest-auditor"],
-    [process.env["OMNIUS_REST_ADMIN_API_KEY"], "admin", "rest-admin"],
-    [process.env["OMNIUS_REST_API_KEY"], "admin", "rest-admin"]
-  ];
-  for (const [key, scope, user] of scopedRestKeys) {
-    if (key && token === key) return { authenticated: true, scope, user };
+  if (token) {
+    for (const source of scopedEnvKeySources()) {
+      if (source.value && tokensMatch(source.value, token)) {
+        return {
+          authenticated: true,
+          scope: source.scope,
+          user: source.user
+        };
+      }
+    }
   }
   const singleKey = process.env["OMNIUS_API_KEY"];
-  if (singleKey) {
-    if (token === singleKey)
-      return {
-        authenticated: true,
-        scope: "admin",
-        user: "legacy-omnius-api-key"
-      };
+  if (token && singleKey && tokensMatch(singleKey, token)) {
+    return {
+      authenticated: true,
+      scope: "admin",
+      user: "legacy-omnius-api-key"
+    };
   }
   if (token) {
     try {
@@ -692558,13 +692683,12 @@ function resolveAuth(req3) {
     } catch {
     }
   }
-  if (!singleKey) {
+  if (!anyEnvAuthKeyConfigured()) {
     const insecureLoopbackAdmin = process.env["OMNIUS_INSECURE_LOOPBACK_ADMIN"] === "1";
     const remoteIp = (req3.socket?.remoteAddress || "").replace(/^::ffff:/, "");
     if (insecureLoopbackAdmin && isLoopbackIP(remoteIp)) {
       return { authenticated: true, scope: "admin", user: "insecure-loopback" };
     }
-    return { authenticated: false, scope: "read" };
   }
   return { authenticated: false, scope: "read" };
 }
@@ -692572,9 +692696,22 @@ function checkAuth(req3, res, requiredScope = "read") {
   const scopeLevel = { read: 1, run: 2, admin: 3 };
   const auth = resolveAuth(req3);
   if (!auth.authenticated) {
+    if (process.env["OMNIUS_AUTH_DEBUG"] === "1") {
+      const hasBearer = typeof req3.headers["authorization"] === "string" && req3.headers["authorization"].startsWith("Bearer ");
+      const remoteIp = (req3.socket?.remoteAddress || "").replace(
+        /^::ffff:/,
+        ""
+      );
+      const reason = !hasBearer ? "no_bearer_token" : anyAuthKeyConfigured() ? "token_not_recognized" : "no_server_keys_configured";
+      process.stderr.write(
+        `[auth] 401 ${reason} ip=${remoteIp} requiredScope=${requiredScope}
+`
+      );
+    }
     jsonResponse(res, 401, {
       error: "Unauthorized",
-      message: "Invalid or missing Bearer token"
+      message: "Invalid or missing Bearer token",
+      hint: "Send 'Authorization: Bearer <token>'. The token must match OMNIUS_API_KEYS, a scoped OMNIUS_[REST_]<SCOPE>_API_KEY, OMNIUS_API_KEY, or a runtime/dashboard-minted key."
     });
     return false;
   }
@@ -699711,9 +699848,7 @@ function startApiServer(options2 = {}) {
     res.setHeader("X-API-Version", API_VERSION);
     const rawIp = req3.socket?.remoteAddress ?? "";
     const hasBearer = typeof req3.headers["authorization"] === "string" && req3.headers["authorization"].startsWith("Bearer ");
-    const anyKeyConfigured = hasBearer && Boolean(
-      process.env["OMNIUS_API_KEY"] || process.env["OMNIUS_API_KEYS"] || process.env["OMNIUS_REST_API_KEY"] || process.env["OMNIUS_REST_API_KEYS"] || process.env["OMNIUS_REST_READ_API_KEY"] || process.env["OMNIUS_REST_RUN_API_KEY"] || process.env["OMNIUS_REST_ADMIN_API_KEY"] || runtimeKeysExist()
-    );
+    const anyKeyConfigured = hasBearer && anyAuthKeyConfigured();
     if (!isAllowedIP(rawIp, runtimeAccessMode) && !(hasBearer && anyKeyConfigured)) {
       _accessRejected++;
       metrics.totalErrors++;
@@ -700278,19 +700413,27 @@ function startApiServer(options2 = {}) {
         }
       }, 36e5).unref();
     }
-    const configuredRestKeys = process.env["OMNIUS_REST_API_KEYS"] || process.env["OMNIUS_API_KEYS"];
-    if (configuredRestKeys) {
-      const keyCount = configuredRestKeys.split(",").length;
-      log22(`  Auth: ${keyCount} scoped key(s) (read/run/admin)
-`);
-    } else if (process.env["OMNIUS_REST_API_KEY"] || process.env["OMNIUS_REST_ADMIN_API_KEY"] || process.env["OMNIUS_API_KEY"]) {
-      log22(`  Auth: single Bearer token (admin scope)
+    {
+      const sources = [];
+      const multiMap = process.env["OMNIUS_REST_API_KEYS"] || process.env["OMNIUS_API_KEYS"];
+      if (multiMap) {
+        sources.push(`${multiMap.split(",").length} multi-key map entry(ies)`);
+      }
+      const scopedCount = scopedEnvKeySources().filter(
+        (s2) => Boolean(s2.value)
+      ).length;
+      if (scopedCount > 0) sources.push(`${scopedCount} scoped env key(s)`);
+      if (process.env["OMNIUS_API_KEY"]) sources.push("legacy single key");
+      if (runtimeKeysExist()) sources.push("runtime/dashboard keys");
+      if (sources.length > 0) {
+        log22(`  Auth: enabled — ${sources.join(", ")}
 `);
-    } else {
-      log22(
-        `  Auth: disabled (set OMNIUS_REST_API_KEY or OMNIUS_REST_API_KEYS to enable)
+      } else {
+        log22(
+          `  Auth: disabled (set OMNIUS_RUN_API_KEY / OMNIUS_REST_API_KEY / OMNIUS_API_KEYS, or mint a runtime key, to enable)
 `
-      );
+        );
+      }
     }
     log22(`  Discovering sponsors in background...
 
@@ -704160,20 +704303,32 @@ ${entry.fullContent}`
       case "debug_adversary":
         if (event.adversaryAction) {
           const lm = event.adversaryAction;
-          if (lm.intervention) {
-            const simple = `⚠ ${lm.intervention}`;
-            contentWrite(() => renderInfo(simple));
-          }
           if (lm.details) {
             adversaryBuffer.push(lm.details);
             if (adversaryBuffer.length > 50)
               adversaryBuffer.splice(0, adversaryBuffer.length - 50);
-            if (showAdversary) {
-              const det = String(lm.details);
-              contentWrite(() => {
-                process.stdout.write(c3.dim(det) + "\n");
+          }
+          if (lm.intervention) {
+            contentWrite(() => {
+              const lines = [`⚠ ${lm.intervention}`];
+              if (lm.details && showAdversary) {
+                const det = String(lm.details);
+                lines.push(...det.split("\n").filter(Boolean));
+              }
+              renderBoxedBlock({
+                title: "Adversary",
+                lines,
+                kind: "plain"
               });
-            }
+            });
+          } else if (lm.details && showAdversary) {
+            contentWrite(() => {
+              renderBoxedBlock({
+                title: "Adversary",
+                lines: String(lm.details).split("\n").filter(Boolean),
+                kind: "dim"
+              });
+            });
           }
         }
         break;
@@ -705143,8 +705298,14 @@ Review its full output via sub_agent(action='output', id='${id}')`
             subToolInstances.push(new TodoReadTool());
           subRunner.registerTools(subToolInstances.map(adaptTool6));
           const subAgentId = opts.id || `sub-${Date.now()}`;
-          statusBar.registerAgentView(subAgentId, `Sub-agent ${subAgentId}`, "sub");
-          subRunner.registerTool(createTaskCompleteTool(subTier, repoRoot, true));
+          statusBar.registerAgentView(
+            subAgentId,
+            `Sub-agent ${subAgentId}`,
+            "sub"
+          );
+          subRunner.registerTool(
+            createTaskCompleteTool(subTier, repoRoot, true)
+          );
           const systemCtx = opts.systemPromptAddition ? `Working directory: ${repoRoot}
 
 ${opts.systemPromptAddition}` : `Working directory: ${repoRoot}`;

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "omnius",
-  "version": "1.0.264",
+  "version": "1.0.266",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "omnius",
-      "version": "1.0.264",
+      "version": "1.0.266",
       "bundleDependencies": [
         "image-to-ascii"
       ],
@@ -6337,9 +6337,9 @@
       "license": "MIT"
     },
     "node_modules/semver": {
-      "version": "7.8.3",
-      "resolved": "https://registry.npmjs.org/semver/-/semver-7.8.3.tgz",
-      "integrity": "sha512-wnilbGyMxzbY7dNOl7jpKbLSjcfeweJWU5j4+u5qW+6/wuGD9KzIGOyZnQVSBM9E7DtWaaH3CyHkppYrKYoxwg==",
+      "version": "7.8.4",
+      "resolved": "https://registry.npmjs.org/semver/-/semver-7.8.4.tgz",
+      "integrity": "sha512-rUCObTnP32Q08R2uuIrt7r9PlEonuTmtuXYcW6s5kjdlj3xbnwe+21yXptAUYcMAABLkYYTtnmzb3w3EDZfueA==",
       "license": "ISC",
       "bin": {
         "semver": "bin/semver.js"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "omnius",
-  "version": "1.0.264",
+  "version": "1.0.266",
   "description": "AI coding agent powered by open-source models (Ollama/vLLM) — interactive TUI with agentic tool-calling loop",
   "type": "module",
   "main": "./dist/index.js",