pi-keyrouter 0.2.1 → 0.2.2

package/README.md

@@ -110,7 +110,15 @@ Every key switch notifies the user with a Box widget:
 
 ## 🔧 Config
 
-`~/.pi/keyrouter.json` (or `<cwd>/.soly/keyrouter.json`, `<cwd>/.pi/keyrouter.json`).
+**`~/.pi/keyrouter.json` only** (user-level, never project-scoped).
+
+- Windows: `%USERPROFILE%\.pi\keyrouter.json`
+- macOS/Linux: `~/.pi/keyrouter.json`
+
+Config is global because API keys are personal credentials — they do not
+belong inside a project directory. Project-local `keyrouter.json` files are
+**deliberately ignored** (security: prevents a malicious repo from overriding
+your real keys).
 
 ```json5
 {

package/config.ts

@@ -2,10 +2,13 @@
 // config.ts — load key router config from disk
 // =============================================================================
 //
-// Looks in this order (first hit wins):
-// 1. <cwd>/.pi/keyrouter.json      — project override
-// 2. <cwd>/.soly/keyrouter.json    — soly convention
-// 3. ~/.pi/keyrouter.json          — user-level default
+// Config is GLOBAL (user-level), never project-scoped. API keys are personal
+// credentials that do not belong inside a project directory (risk of leaking
+// via git, shared repos, etc.).
+//
+// Single location: ~/.pi/keyrouter.json
+//   - Windows: %USERPROFILE%\.pi\keyrouter.json
+//   - macOS/Linux: ~/.pi/keyrouter.json
 //
 // Schema:
 // {
@@ -28,8 +31,6 @@ import * as os from "node:os";
 import * as path from "node:path";
 import type { KeyRouterConfig } from "./types.ts";
 
-const CONFIG_FILENAMES = ["keyrouter.json"];
-
 export function defaultConfig(): KeyRouterConfig {
 	return {
 		providers: [],
@@ -38,33 +39,38 @@ export function defaultConfig(): KeyRouterConfig {
 	};
 }
 
-export function loadConfig(cwd: string, home?: string): KeyRouterConfig {
+/**
+ * Resolve the config path. Always under the user profile (~/.pi/), never
+ * project-scoped. The `cwd` argument is accepted for API symmetry but
+ * ignored — keys are global.
+ *
+ * @param _cwd ignored — config is always user-level
+ * @param home override home dir (for testing)
+ */
+export function configPath(_cwd?: string, home?: string): string {
 	const homeDir = home ?? os.homedir();
-	const candidates: string[] = [];
-	for (const dir of [
-		path.join(cwd, ".soly"),
-		path.join(cwd, ".pi"),
-		cwd,
-		path.join(homeDir, ".soly"),
-		path.join(homeDir, ".pi"),
-		homeDir,
-	]) {
-		for (const name of CONFIG_FILENAMES) {
-			candidates.push(path.join(dir, name));
-		}
-	}
-	for (const file of candidates) {
-		if (fs.existsSync(file)) {
-			try {
-				const raw = fs.readFileSync(file, "utf-8");
-				const parsed = JSON.parse(raw) as Partial<KeyRouterConfig>;
-				return normalize(parsed);
-			} catch {
-				// bad config — fall through to default
-			}
-		}
+	return path.join(homeDir, ".pi", "keyrouter.json");
+}
+
+/**
+ * Path displayed in error messages / /keyrouter status so the user can see
+ * exactly where we're looking.
+ */
+export function configSearchPaths(): string[] {
+	return [configPath()];
+}
+
+export function loadConfig(_cwd?: string, home?: string): KeyRouterConfig {
+	const file = configPath(undefined, home);
+	if (!fs.existsSync(file)) return defaultConfig();
+	try {
+		const raw = fs.readFileSync(file, "utf-8");
+		const parsed = JSON.parse(raw) as Partial<KeyRouterConfig>;
+		return normalize(parsed);
+	} catch {
+		// bad config — fall through to default
+		return defaultConfig();
 	}
-	return defaultConfig();
 }
 
 function normalize(input: Partial<KeyRouterConfig>): KeyRouterConfig {

package/index.ts

@@ -28,7 +28,7 @@
 //   /reload
 
 import type { ExtensionAPI } from "@earendil-works/pi-coding-agent";
-import { loadConfig } from "./config.ts";
+import { loadConfig, configPath } from "./config.ts";
 import {
 	initKeyStates,
 	isAvailable,
@@ -237,8 +237,8 @@ export default function keyRouterExtension(pi: ExtensionAPI): void {
 				}
 				if (!config || runtimes.size === 0) {
 					ctx.ui.notify(
-						"🔑 keyrouter: not active — no providers in ~/.pi/keyrouter.json " +
-							"(checked cwd/.soly, cwd/.pi, cwd, ~/.soly, ~/.pi, ~)",
+						`🔑 keyrouter: not active — no ~/.pi/keyrouter.json found ` +
+							`(expected at ${configPath()}). Config is user-level only, never project-scoped.`,
 						"warning",
 					);
 					return;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pi-keyrouter",
-  "version": "0.2.1",
+  "version": "0.2.2",
   "description": "API key rotation for pi-coding-agent. Multiple keys per provider, automatic 429/401 fallback, max-retries guard.",
   "type": "module",
   "main": "index.ts",