open-agents-ai 0.34.3 → 0.34.5

package/dist/index.js

@@ -90,7 +90,7 @@ function setConfigValue(key, value) {
   const configPath = join(dir, "config.json");
   const existing = loadConfigFile();
   existing[key] = coerceConfigValue(key, value);
-  writeFileSync(configPath, JSON.stringify(existing, null, 2) + "\n", "utf8");
+  writeFileSync(configPath, JSON.stringify(existing, null, 2) + "\n", { encoding: "utf8", mode: 384 });
 }
 function coerceConfigValue(key, value) {
   const intKeys = /* @__PURE__ */ new Set(["maxRetries", "timeoutMs"]);
@@ -12855,9 +12855,13 @@ ${tail}`;
         const combinedSummary = previousSummary ? this.progressiveSummarize(previousSummary, newSummary) : newSummary;
         const strategyLabel = strategy !== "default" ? ` (${strategy})` : "";
         const forceLabel = force ? " [manual]" : "";
+        const preTokens = Math.ceil(totalChars / 4);
+        const postChars = combinedSummary.length + recent.reduce((s, m) => s + (typeof m.content === "string" ? m.content.length : 100), 0) + head.reduce((s, m) => s + (typeof m.content === "string" ? m.content.length : 100), 0);
+        const postTokens = Math.ceil(postChars / 4);
+        const savedTokens = preTokens - postTokens;
         this.emit({
           type: "compaction",
-          content: `Compacted ${middle.length} messages${strategyLabel}${forceLabel}${previousSummary ? " (progressive)" : ""}`,
+          content: `Compacted ${middle.length} messages${strategyLabel}${forceLabel}${previousSummary ? " (progressive)" : ""} | ~${preTokens.toLocaleString()} \u2192 ~${postTokens.toLocaleString()} tokens (saved ~${savedTokens.toLocaleString()})`,
           timestamp: (/* @__PURE__ */ new Date()).toISOString()
         });
         const enrichments = [combinedSummary];
@@ -15505,6 +15509,12 @@ function renderWarning(message) {
 `);
   _contentWriteHook?.end();
 }
+function renderVerbose(message) {
+  _contentWriteHook?.begin();
+  process.stdout.write(`${c2.dim(`  > ${message}`)}
+`);
+  _contentWriteHook?.end();
+}
 function renderRichHeader(opts) {
   const w = getTermWidth();
   const divider = c2.dim("\u2500".repeat(Math.min(w - 4, 72)));
@@ -16181,6 +16191,17 @@ function initOaDirectory(repoRoot) {
   for (const sub of SUBDIRS) {
     mkdirSync6(join25(oaPath, sub), { recursive: true });
   }
+  try {
+    const gitignorePath = join25(repoRoot, ".gitignore");
+    const settingsPattern = ".oa/settings.json";
+    if (existsSync19(gitignorePath)) {
+      const content = readFileSync13(gitignorePath, "utf-8");
+      if (!content.includes(settingsPattern)) {
+        writeFileSync6(gitignorePath, content.trimEnd() + "\n" + settingsPattern + "\n", "utf-8");
+      }
+    }
+  } catch {
+  }
   return oaPath;
 }
 function hasOaDirectory(repoRoot) {
@@ -16201,7 +16222,7 @@ function saveProjectSettings(repoRoot, settings) {
   mkdirSync6(oaPath, { recursive: true });
   const existing = loadProjectSettings(repoRoot);
   const merged = { ...existing, ...settings };
-  writeFileSync6(join25(oaPath, "settings.json"), JSON.stringify(merged, null, 2) + "\n", "utf-8");
+  writeFileSync6(join25(oaPath, "settings.json"), JSON.stringify(merged, null, 2) + "\n", { encoding: "utf-8", mode: 384 });
 }
 function loadGlobalSettings() {
   const settingsPath = join25(homedir9(), ".open-agents", "settings.json");
@@ -16218,7 +16239,7 @@ function saveGlobalSettings(settings) {
   mkdirSync6(dir, { recursive: true });
   const existing = loadGlobalSettings();
   const merged = { ...existing, ...settings };
-  writeFileSync6(join25(dir, "settings.json"), JSON.stringify(merged, null, 2) + "\n", "utf-8");
+  writeFileSync6(join25(dir, "settings.json"), JSON.stringify(merged, null, 2) + "\n", { encoding: "utf-8", mode: 384 });
 }
 function resolveSettings(repoRoot) {
   const global = loadGlobalSettings();
@@ -16670,6 +16691,49 @@ function ask(rl, question) {
     rl.question(question, (answer) => resolve23(answer.trim()));
   });
 }
+function askSecret(rl, question) {
+  return new Promise((resolve23) => {
+    process.stdout.write(question);
+    let secret = "";
+    const stdin = process.stdin;
+    const hadRawMode = stdin.isRaw;
+    if (typeof stdin.setRawMode === "function") {
+      stdin.setRawMode(true);
+    }
+    stdin.resume();
+    const onData = (chunk) => {
+      const ch = chunk.toString("utf8");
+      for (const c3 of ch) {
+        if (c3 === "\r" || c3 === "\n") {
+          stdin.removeListener("data", onData);
+          if (typeof stdin.setRawMode === "function") {
+            stdin.setRawMode(hadRawMode ?? false);
+          }
+          process.stdout.write("\n");
+          resolve23(secret.trim());
+          return;
+        } else if (c3 === "") {
+          stdin.removeListener("data", onData);
+          if (typeof stdin.setRawMode === "function") {
+            stdin.setRawMode(hadRawMode ?? false);
+          }
+          process.stdout.write("\n");
+          resolve23("");
+          return;
+        } else if (c3 === "\x7F" || c3 === "\b") {
+          if (secret.length > 0) {
+            secret = secret.slice(0, -1);
+            process.stdout.write("\b \b");
+          }
+        } else if (c3.charCodeAt(0) >= 32) {
+          secret += c3;
+          process.stdout.write("*");
+        }
+      }
+    };
+    stdin.on("data", onData);
+  });
+}
 async function autoInstallOllama(rl) {
   const plat = platform();
   if (plat === "linux") {
@@ -16899,7 +16963,7 @@ async function promptForCustomEndpoint(config, rl) {
   ${c2.bold("Does this endpoint require an API key?")} (y/n) `);
   let apiKey = "";
   if (needsKey.toLowerCase() === "y" || needsKey.toLowerCase() === "yes") {
-    apiKey = await ask(rl, `  ${c2.bold("API key:")} `);
+    apiKey = await askSecret(rl, `  ${c2.bold("API key:")} `);
   }
   process.stdout.write(`
   ${c2.cyan("\u25CF")} Enter the model name for this endpoint.
@@ -18353,7 +18417,7 @@ async function handleEndpoint(arg, ctx, local = false) {
   process.stdout.write(`    ${c2.cyan("Type".padEnd(12))} ${backendType}
 `);
   if (apiKey) {
-    process.stdout.write(`    ${c2.cyan("Auth".padEnd(12))} Bearer ${apiKey.slice(0, 8)}...
+    process.stdout.write(`    ${c2.cyan("Auth".padEnd(12))} Bearer ${apiKey.slice(0, 4)}...
 `);
   } else {
     process.stdout.write(`    ${c2.cyan("Auth".padEnd(12))} ${provider.authRequired ? c2.yellow("none (may be required)") : "none"}
@@ -21970,7 +22034,7 @@ var init_braille_spinner = __esm({
 });
 
 // packages/cli/dist/tui/status-bar.js
-var EXPERT_TOOL_BASELINES, CONTEXT_SWITCH_OVERHEAD, TURN_PLANNING_OVERHEAD, DEFAULT_TOOL_BASELINE, HumanSpeedTracker, StatusBar;
+var EXPERT_TOOL_BASELINES, CONTEXT_SWITCH_OVERHEAD, TURN_PLANNING_OVERHEAD, DEFAULT_TOOL_BASELINE, CODE_READ_CHARS_PER_SEC, PROSE_READ_CHARS_PER_SEC, MIN_CONTENT_FOR_READING, CODE_CONTENT_TOOLS, PROSE_CONTENT_TOOLS, HumanSpeedTracker, StatusBar;
 var init_status_bar = __esm({
   "packages/cli/dist/tui/status-bar.js"() {
     "use strict";
@@ -22026,6 +22090,40 @@ var init_status_bar = __esm({
     CONTEXT_SWITCH_OVERHEAD = 5;
     TURN_PLANNING_OVERHEAD = 15;
     DEFAULT_TOOL_BASELINE = 20;
+    CODE_READ_CHARS_PER_SEC = 12.5;
+    PROSE_READ_CHARS_PER_SEC = 20.8;
+    MIN_CONTENT_FOR_READING = 100;
+    CODE_CONTENT_TOOLS = /* @__PURE__ */ new Set([
+      "file_read",
+      "structured_read",
+      "grep_search",
+      "glob_find",
+      "list_directory",
+      "shell",
+      "codebase_map",
+      "git_info",
+      "diagnostic",
+      "task_output",
+      "file_edit",
+      "file_patch",
+      "batch_edit",
+      "file_write",
+      "structured_file",
+      "explore_tools"
+    ]);
+    PROSE_CONTENT_TOOLS = /* @__PURE__ */ new Set([
+      "web_fetch",
+      "web_search",
+      "web_crawl",
+      "memory_read",
+      "memory_search",
+      "pdf_to_text",
+      "ocr",
+      "ocr_pdf",
+      "ocr_image_advanced",
+      "transcribe_file",
+      "transcribe_url"
+    ]);
     HumanSpeedTracker = class {
       /** Accumulated estimated human-expert time in seconds */
       humanTimeS = 0;
@@ -22037,12 +22135,34 @@ var init_status_bar = __esm({
       toolCalls = 0;
       /** Number of turns in current session */
       turns = 0;
+      /** Accumulated reading time in seconds (subset of humanTimeS) */
+      readingTimeS = 0;
       /** Record a tool call — adds the expert baseline time */
       recordToolCall(toolName) {
         const baseline = EXPERT_TOOL_BASELINES[toolName] ?? DEFAULT_TOOL_BASELINE;
         this.humanTimeS += baseline + CONTEXT_SWITCH_OVERHEAD;
         this.toolCalls++;
       }
+      /**
+       * Record a tool result — adds human reading time based on content volume.
+       * A human expert must read and comprehend tool output (file contents,
+       * web pages, search results, etc.) before acting on it.
+       */
+      recordToolResult(toolName, contentLength) {
+        if (contentLength < MIN_CONTENT_FOR_READING)
+          return;
+        let charsPerSec;
+        if (CODE_CONTENT_TOOLS.has(toolName)) {
+          charsPerSec = CODE_READ_CHARS_PER_SEC;
+        } else if (PROSE_CONTENT_TOOLS.has(toolName)) {
+          charsPerSec = PROSE_READ_CHARS_PER_SEC;
+        } else {
+          return;
+        }
+        const readSec = contentLength / charsPerSec;
+        this.humanTimeS += readSec;
+        this.readingTimeS += readSec;
+      }
       /** Record a turn (assistant reasoning cycle) */
       recordTurn() {
         this.humanTimeS += TURN_PLANNING_OVERHEAD;
@@ -22221,6 +22341,10 @@ var init_status_bar = __esm({
       recordSpeedToolCall(toolName) {
         this._speedTracker.recordToolCall(toolName);
       }
+      /** Record a tool result — adds human reading time based on content volume */
+      recordSpeedToolResult(toolName, contentLength) {
+        this._speedTracker.recordToolResult(toolName, contentLength);
+      }
       /** Record a turn for speed ratio tracking */
       recordSpeedTurn() {
         this._speedTracker.recordTurn();
@@ -23044,6 +23168,8 @@ ${entry.fullContent}`
   const editSessionId = `task-${Date.now()}`;
   const editHistory = createEditHistoryLogger(repoRoot, editSessionId);
   let lastToolCall = null;
+  let toolCallStartMs = 0;
+  let streamStartMs = 0;
   const contentWrite = (fn) => {
     if (statusBar?.isActive) {
       statusBar.beginContentWrite();
@@ -23068,6 +23194,7 @@ ${entry.fullContent}`
         }
         lastToolCall = { name: event.toolName ?? "unknown", args: event.toolArgs ?? {} };
         statusBar?.recordSpeedToolCall(event.toolName ?? "unknown");
+        toolCallStartMs = Date.now();
         statusBar?.setActiveTool(event.toolName ?? null);
         contentWrite(() => {
           if (voice?.enabled) {
@@ -23078,14 +23205,25 @@ ${entry.fullContent}`
           renderToolCallStart(event.toolName ?? "unknown", event.toolArgs ?? {});
         });
         break;
-      case "tool_result":
+      case "tool_result": {
         if (lastToolCall) {
           editHistory.logToolCall(lastToolCall.name, lastToolCall.args, event.success ?? false);
           lastToolCall = null;
         }
+        const resultLen = event.content?.length ?? 0;
+        if (resultLen > 0) {
+          statusBar?.recordSpeedToolResult(event.toolName ?? "unknown", resultLen);
+        }
         statusBar?.setActiveTool(null);
+        const toolDurationMs = toolCallStartMs > 0 ? Date.now() - toolCallStartMs : 0;
+        toolCallStartMs = 0;
         contentWrite(() => {
           renderToolResult(event.toolName ?? "unknown", event.success ?? false, event.content ?? "");
+          if (config.verbose && toolDurationMs > 0) {
+            const durStr = toolDurationMs < 1e3 ? `${toolDurationMs}ms` : `${(toolDurationMs / 1e3).toFixed(1)}s`;
+            const sizeStr = resultLen > 0 ? ` | ${resultLen.toLocaleString()} chars (~${Math.ceil(resultLen / 4).toLocaleString()} tokens)` : "";
+            renderVerbose(`${event.toolName ?? "unknown"}: ${durStr}${sizeStr}`);
+          }
           if (voice?.enabled && !(event.success ?? true)) {
             const desc = describeToolResult(event.toolName ?? "unknown", false);
             if (desc) {
@@ -23095,6 +23233,7 @@ ${entry.fullContent}`
           }
         });
         break;
+      }
       case "model_response":
         statusBar?.recordSpeedTurn();
         if (config.verbose && !stream?.enabled && event.content) {
@@ -23102,11 +23241,15 @@ ${entry.fullContent}`
         }
         break;
       case "stream_start":
+        streamStartMs = Date.now();
         if (stream?.enabled) {
           if (statusBar?.isActive)
             statusBar.beginContentWrite();
           stream.renderer.onStreamStart();
         }
+        if (config.verbose) {
+          contentWrite(() => renderVerbose(`Stream started (turn ${event.turn ?? "?"})`));
+        }
         break;
       case "stream_token":
         if (stream?.enabled) {
@@ -23117,13 +23260,22 @@ ${entry.fullContent}`
           statusBar.incrementStreamingTokens(estimatedNewTokens);
         }
         break;
-      case "stream_end":
+      case "stream_end": {
+        const streamDurationMs = streamStartMs > 0 ? Date.now() - streamStartMs : 0;
+        streamStartMs = 0;
         if (stream?.enabled) {
           stream.renderer.onStreamEnd();
           if (statusBar?.isActive)
             statusBar.endContentWrite();
         }
+        if (config.verbose && streamDurationMs > 0) {
+          const streamChars = event.content?.length ?? 0;
+          const estTokens = Math.ceil(streamChars / 4);
+          const tokPerSec = streamDurationMs > 0 ? (estTokens / (streamDurationMs / 1e3)).toFixed(1) : "?";
+          contentWrite(() => renderVerbose(`Stream ended: ~${estTokens.toLocaleString()} tokens in ${(streamDurationMs / 1e3).toFixed(1)}s (${tokPerSec} tok/s)`));
+        }
         break;
+      }
       case "user_interrupt":
         break;
       case "compaction":
@@ -23145,6 +23297,11 @@ ${entry.fullContent}`
             estimatedCost: costTracker?.currentCost,
             hasPricing: costTracker?.hasPricing
           });
+          if (config.verbose) {
+            const tu = event.tokenUsage;
+            const ctxPct = tu.estimatedContextTokens > 0 && statusBar ? ` (ctx: ~${tu.estimatedContextTokens.toLocaleString()} tokens)` : "";
+            contentWrite(() => renderVerbose(`Tokens \u2014 prompt: ${tu.promptTokens.toLocaleString()} | completion: ${tu.completionTokens.toLocaleString()} | total: ${tu.totalTokens.toLocaleString()}${ctxPct}`));
+          }
         }
         break;
       case "sudo_request":
@@ -24654,12 +24811,18 @@ async function statusCommand(opts, config) {
       "OPEN_AGENTS_TIMEOUT_MS",
       "OPEN_AGENTS_DRY_RUN",
       "OPEN_AGENTS_VERBOSE",
-      "VLLM_BASE_URL"
+      "VLLM_BASE_URL",
+      "VLLM_API_KEY"
     ];
+    const sensitiveEnvVars = /* @__PURE__ */ new Set([
+      "OPEN_AGENTS_API_KEY",
+      "VLLM_API_KEY"
+    ]);
     for (const key of envVars) {
       const val = process.env[key];
       if (val !== void 0) {
-        printKeyValue(key, val.includes("key") || val.includes("KEY") ? "[redacted]" : val, 2);
+        const display = sensitiveEnvVars.has(key) ? val.length > 4 ? `[set \u2014 ${val.slice(0, 4)}...]` : val.length > 0 ? "[set]" : "[empty]" : val;
+        printKeyValue(key, display, 2);
       }
     }
   }
@@ -24777,6 +24940,12 @@ __export(config_exports, {
 import { join as join34, resolve as resolve22 } from "node:path";
 import { homedir as homedir13 } from "node:os";
 import { cwd as cwd3 } from "node:process";
+function redactIfSensitive(key, value) {
+  if (SENSITIVE_KEYS.has(key) && typeof value === "string" && value.length > 0) {
+    return value.length > 4 ? `[set \u2014 ${value.slice(0, 4)}...]` : "[set]";
+  }
+  return String(value);
+}
 function coerceForSettings(key, value) {
   if (INT_KEYS.has(key))
     return parseInt(value, 10);
@@ -24812,7 +24981,7 @@ function handleShow(opts, config) {
   if (projectKeys.length > 0) {
     printSection(`Project Overrides (.oa/settings.json)`);
     for (const [k, v] of projectKeys) {
-      printKeyValue(k, String(v), 2);
+      printKeyValue(k, redactIfSensitive(k, v), 2);
     }
   } else {
     printSection("Project Overrides");
@@ -24823,7 +24992,7 @@ function handleShow(opts, config) {
   if (globalKeys.length > 0) {
     printSection("Global Settings (~/.open-agents/settings.json)");
     for (const [k, v] of globalKeys) {
-      printKeyValue(k, String(v), 2);
+      printKeyValue(k, redactIfSensitive(k, v), 2);
     }
   }
   printSection("Config File");
@@ -24865,7 +25034,7 @@ function handleSet(opts, _config) {
       initOaDirectory(repoRoot);
       const coerced = coerceForSettings(key, value);
       saveProjectSettings(repoRoot, { [key]: coerced });
-      printSuccess(`Project override set: ${key} = ${value}`);
+      printSuccess(`Project override set: ${key} = ${redactIfSensitive(key, value)}`);
       printInfo(`Saved to ${join34(repoRoot, ".oa", "settings.json")}`);
       printInfo("This override applies only when running in this workspace.");
     } catch (err) {
@@ -24875,7 +25044,7 @@ function handleSet(opts, _config) {
   } else {
     try {
       setConfigValue(key, value);
-      printSuccess(`Config updated: ${key} = ${value}`);
+      printSuccess(`Config updated: ${key} = ${redactIfSensitive(key, value)}`);
       printInfo(`Saved to ~/.open-agents/config.json`);
       printInfo("Tip: Use --local to set project-specific overrides.");
     } catch (err) {
@@ -24894,7 +25063,7 @@ function handleKeys() {
   printInfo("  oa config set model qwen3.5:122b          # global default");
   printInfo("  oa config set model qwen3.5:122b --local  # this project only");
 }
-var CONFIG_KEYS, INT_KEYS, BOOL_KEYS;
+var CONFIG_KEYS, SENSITIVE_KEYS, INT_KEYS, BOOL_KEYS;
 var init_config3 = __esm({
   "packages/cli/dist/commands/config.js"() {
     "use strict";
@@ -24916,6 +25085,7 @@ var init_config3 = __esm({
       stream: "Enable real-time token streaming with pastel syntax highlighting (true/false)",
       bruteforce: "Brute-force mode: auto re-engage agent when turn limit hit (true/false)"
     };
+    SENSITIVE_KEYS = /* @__PURE__ */ new Set(["apiKey", "api_key", "secret", "password", "token"]);
     INT_KEYS = /* @__PURE__ */ new Set(["maxRetries", "timeoutMs"]);
     BOOL_KEYS = /* @__PURE__ */ new Set(["dryRun", "verbose", "voice", "stream", "bruteforce"]);
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "open-agents-ai",
-  "version": "0.34.3",
+  "version": "0.34.5",
   "description": "AI coding agent powered by open-source models (Ollama/vLLM) — interactive TUI with agentic tool-calling loop",
   "type": "module",
   "main": "./dist/index.js",