pum-agent 0.2.4-beta.1 → 0.2.6-beta.1

package/README.md

@@ -40,7 +40,7 @@ The following screens are real OpenTUI renders captured through `tmux`. A local
 
 ## Why PUM
 
-- **Compact terminal UI:** Streaming Markdown, syntax highlighting, thinking traces, tool rows, usage, cost, and Git status.
+- **Compact terminal UI:** Streaming Markdown, syntax highlighting, thinking traces, tool rows, usage, cost, launch directory, and Git status.
 - **Full coding loop:** Built-in `read`, `write`, `edit`, `bash`, and atomic `apply_patch` tools.
 - **Parallel subagents:** Persistent agents work in isolated Git worktrees, communicate durably, and report lifecycle transitions to their direct spawners.
 - **Prompt control:** Steer active work, answer model questionnaires, use an ownership-aware message cache, attach clipboard images, and resume sessions with metadata-rich history.
@@ -91,6 +91,8 @@ bun run start
 
 PUM opens the login panel automatically when no provider is available. Use `/login` later to add or update a provider. During browser-based login, PUM opens credential-free HTTP(S) authentication URLs with the platform browser. The URL remains selectable when automatic launch is unavailable.
 
+Custom OpenAI-compatible provider fields accept terminal bracketed paste and local `Ctrl+V` clipboard paste for endpoint URLs and API keys. PUM routes pasted API keys directly to the login controller and renders only a length mask. Remote sessions do not invoke a local host clipboard command.
+
 Resume the latest session for the current directory:
 
 ```bash
@@ -221,10 +223,10 @@ Trigger events target one exact main or retained child session. A missing sessio
 Select a Check mode profile in `Ctrl+P`. It applies to `bash`, `edit`, `apply_patch`, and external-trigger process execution:
 
 - **Strict:** Run deterministic hard rules, then require a clear verifier approval.
-- **Balanced:** Block deterministic hard-rule or suspicious findings. Allow ordinary complete project-local calls and explicit non-sensitive external reads. Verifier review is non-blocking unless the verifier returns explicit `UNSAFE`.
+- **Balanced:** Block deterministic hard-rule or suspicious findings. Allow ordinary complete project-local calls, explicit non-sensitive external reads, and narrowly validated lifecycle-disabled `npm pack` operations whose cache and output stay in approved roots. Verifier review is non-blocking unless the verifier returns explicit `UNSAFE`.
 - **Ask:** Show the approval popup for every checked call that passes hard rules, unless an exact session or project approval already matches. A verifier `SAFE`, unclear, error, or unavailable result still requires approval.
 
-Every active profile hard-blocks external writes, location changes, execution operands, ambiguous path access, escaping links, credential access, privilege escalation, persistence, remote-script execution, destructive Git operations, and broad deletion. Balanced permits only explicit, deterministically classified, non-sensitive external reads. These hard blocks cannot be overridden and do not open the popup. An explicit verifier `UNSAFE` verdict also blocks without a popup. The only exception is a deterministic match for direct main-agent `npm publish` or `npm dist-tag add`. The verifier category does not control this exception. The exception still requires explicit popup approval. Managed subagents cannot use the exception.
+Every active profile hard-blocks external writes, location changes, execution operands, ambiguous path access, escaping links, credential access, privilege escalation, persistence, remote-script execution, destructive Git operations, and broad deletion. Balanced permits explicit, deterministically classified, non-sensitive external reads. It also accepts one direct `npm pack` only when lifecycle scripts are disabled, an explicit cache stays in an approved root, output stays in an approved root, and any package operand is one exact registry version; file, Git, URL, tag, range, composed, and global-install forms remain blocked. These hard blocks cannot be overridden and do not open the popup. An explicit verifier `UNSAFE` verdict also blocks without a popup. The only publication exception is a deterministic match for direct main-agent `npm publish` or `npm dist-tag add`. The verifier category does not control this exception. The exception still requires explicit popup approval. Managed subagents cannot use it.
 
 Use `/check-path list`, `/check-path add <directory>`, `/check-path remove <directory>`, or `/check-path clear` to manage up to 16 additional directory roots for the current launch project. Bash, edit, and external-trigger checks can use these roots; `apply_patch` remains project-local. Added roots are canonicalized and remain subject to credential, traversal, symlink or junction, broad-deletion, and other hard blocks.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pum-agent",
-  "version": "0.2.4-beta.1",
+  "version": "0.2.6-beta.1",
   "description": "A compact terminal coding agent powered by pi and OpenTUI.",
   "license": "MIT",
   "type": "module",

package/src/app.tsx

@@ -1,6 +1,6 @@
-import type { ScrollBoxRenderable, TextareaRenderable } from "@opentui/core";
+import { decodePasteBytes, type ScrollBoxRenderable, type TextareaRenderable } from "@opentui/core";
 import { randomUUID } from "node:crypto";
-import { useKeyboard, useTerminalDimensions } from "@opentui/react";
+import { useKeyboard, usePaste, useTerminalDimensions } from "@opentui/react";
 import type { Model } from "@earendil-works/pi-ai";
 import type { AgentSession, ModelRuntime } from "@earendil-works/pi-coding-agent";
 import { Fragment, useEffect, useMemo, useRef, useState } from "react";
@@ -121,6 +121,7 @@ import {
   type TriggerManagerLike,
 } from "./triggers/popup";
 import type { TerminalTitleController } from "./terminal-title";
+import { readClipboardText } from "./text-paste";
 
 type Stream = { kind: "assistant" | "thinking"; text: string } | null;
 type Transcript = { lines: Line[]; stream: Stream; pending: PendingLine[] };
@@ -341,6 +342,7 @@ export function App({
   promptHistoryStore = DEFAULT_PROMPT_HISTORY_STORE,
   promptStashStore = DEFAULT_PROMPT_STASH_STORE,
   captureImage = captureClipboardImage,
+  readPastedText = readClipboardText,
   onExit = () => process.exit(0),
   checkApprovalCoordinator,
   checkApprovalStore,
@@ -366,6 +368,7 @@ export function App({
   promptHistoryStore?: PromptHistoryStore;
   promptStashStore?: PromptStashStore;
   captureImage?: typeof captureClipboardImage;
+  readPastedText?: typeof readClipboardText;
   onExit?: () => void | Promise<void>;
   checkApprovalCoordinator?: CheckApprovalCoordinator;
   checkApprovalStore?: CheckApprovalStore;
@@ -507,6 +510,7 @@ export function App({
   const nextImageId = useRef(1);
   const lastInputValue = useRef("");
   const imagePasteBusy = useRef(false);
+  const loginTextPasteBusy = useRef(false);
   const viewDrafts = useRef(new Map<string, string>());
   const viewEditingStashIndices = useRef(new Map<string, number | null>());
   const spawnPreviewRestoreView = useRef<{ active: boolean; agentId: string | null }>({
@@ -787,6 +791,19 @@ export function App({
     }
   };
 
+  const pasteLoginClipboardText = async () => {
+    if (loginTextPasteBusy.current) return;
+    loginTextPasteBusy.current = true;
+    try {
+      const text = await readPastedText();
+      loginControllerRef.current?.pasteText(text);
+    } catch {
+      append({ kind: "text", role: "error", text: "text paste failed" });
+    } finally {
+      loginTextPasteBusy.current = false;
+    }
+  };
+
   const append = (line: Line) =>
     setTx((t) => {
       const f = flushed(t);
@@ -1698,6 +1715,13 @@ export function App({
     selectAgentView(ids[next] ?? null);
   };
 
+  usePaste((event) => {
+    const controller = loginControllerRef.current;
+    if (!loginOpen || !controller?.acceptsTextPaste()) return;
+    event.stopPropagation();
+    controller.pasteText(decodePasteBytes(event.bytes));
+  });
+
   useKeyboard((key) => {
     if (checkApproval) {
       key.stopPropagation();
@@ -1814,6 +1838,11 @@ export function App({
     }
 
     if (loginOpen) {
+      if (key.ctrl && key.name === "v" && loginControllerRef.current?.acceptsTextPaste()) {
+        key.stopPropagation();
+        void pasteLoginClipboardText();
+        return;
+      }
       if (loginControllerRef.current?.handleKey(key)) key.stopPropagation();
       return;
     }
@@ -2280,6 +2309,7 @@ export function App({
           theme={theme}
           modelId={visibleModelId}
           thinkingLevel={visibleThinkingLevel}
+          cwd={cwd}
           branch={visibleBranch}
           outgoingTokens={visibleUsage.outgoing}
           incomingTokens={visibleUsage.incoming}

package/src/check-policy.ts

@@ -17,6 +17,7 @@ export type CheckPolicyFindingCode =
   | "external-read-exfiltration"
   | "destructive-git"
   | "broad-deletion"
+  | "unsafe-npm-pack"
   | "suspicious-execution"
   | "shell-complexity"
   | "mutation"
@@ -209,6 +210,84 @@ const EXPLICIT_READ_COMMANDS = new Set([
   "cat", "head", "tail", "less", "more", "stat", "file", "ls", "tree", "du", "wc", "realpath", "readlink",
 ]);
 const DATA_OPERAND_COMMANDS = new Set(["printf", "echo"]);
+
+type NpmPackCommand = {
+  valid: boolean;
+  reason?: string;
+  packageSpec?: string;
+  cache?: string;
+  packDestination: string;
+};
+
+function isExactRegistryPackageVersion(value: string): boolean {
+  const packageName = String.raw`(?:@[a-z0-9][a-z0-9._-]*\/[a-z0-9][a-z0-9._-]*|[a-z0-9][a-z0-9._-]*)`;
+  const numericIdentifier = String.raw`(?:0|[1-9]\d*)`;
+  const prereleaseIdentifier = String.raw`(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)`;
+  const buildIdentifier = String.raw`[0-9a-zA-Z-]+`;
+  const version = String.raw`${numericIdentifier}\.${numericIdentifier}\.${numericIdentifier}(?:-${prereleaseIdentifier}(?:\.${prereleaseIdentifier})*)?(?:\+${buildIdentifier}(?:\.${buildIdentifier})*)?`;
+  return new RegExp(`^${packageName}@${version}$`).test(value);
+}
+
+function npmPackCommand(argv: string[]): NpmPackCommand | undefined {
+  if (commandName(argv[0]) !== "npm" || argv[1] !== "pack") return undefined;
+  const positionals: string[] = [];
+  let cache: string | undefined;
+  let packDestination = ".";
+  let packDestinationSet = false;
+  let ignoreScripts = false;
+  const booleanOptions = new Set(["--dry-run", "--json", "--ignore-scripts"]);
+  const pathOptions = new Map([["--cache", "cache"], ["--pack-destination", "packDestination"]] as const);
+
+  for (let index = 2; index < argv.length; index++) {
+    const value = argv[index]!;
+    if (booleanOptions.has(value)) {
+      if (value === "--ignore-scripts") ignoreScripts = true;
+      continue;
+    }
+    const separate = pathOptions.get(value as "--cache" | "--pack-destination");
+    if (separate) {
+      const path = argv[++index];
+      if (!path || path.startsWith("-")) return { valid: false, reason: `${value} requires one explicit path`, packDestination };
+      if (separate === "cache") {
+        if (cache !== undefined) return { valid: false, reason: "npm pack --cache must occur exactly once", packDestination };
+        cache = path;
+      } else {
+        if (packDestinationSet) return { valid: false, reason: "npm pack --pack-destination must occur at most once", packDestination };
+        packDestination = path;
+        packDestinationSet = true;
+      }
+      continue;
+    }
+    const attached = /^(--cache|--pack-destination)=(.*)$/.exec(value);
+    if (attached) {
+      if (!attached[2]) return { valid: false, reason: `${attached[1]} requires one explicit path`, packDestination };
+      if (attached[1] === "--cache") {
+        if (cache !== undefined) return { valid: false, reason: "npm pack --cache must occur exactly once", packDestination };
+        cache = attached[2];
+      } else {
+        if (packDestinationSet) return { valid: false, reason: "npm pack --pack-destination must occur at most once", packDestination };
+        packDestination = attached[2];
+        packDestinationSet = true;
+      }
+      continue;
+    }
+    if (value === "--") {
+      positionals.push(...argv.slice(index + 1));
+      break;
+    }
+    if (value.startsWith("-")) return { valid: false, reason: `npm pack option ${value} is not in the deterministic allowlist`, packDestination };
+    positionals.push(value);
+  }
+
+  if (!ignoreScripts) return { valid: false, reason: "npm pack must disable lifecycle scripts with --ignore-scripts", packDestination };
+  if (!cache) return { valid: false, reason: "npm pack must set an explicit project-local --cache path", packDestination };
+  if (positionals.length > 1) return { valid: false, reason: "npm pack accepts at most one deterministic package spec", cache, packDestination };
+  if (positionals[0] && !isExactRegistryPackageVersion(positionals[0])) {
+    return { valid: false, reason: "npm pack package spec must be an exact registry package version", cache, packDestination };
+  }
+  return { valid: true, packageSpec: positionals[0], cache, packDestination };
+}
+
 function commandName(argv0: string | undefined): string {
   if (!argv0) return "";
   const basename = argv0.replaceAll("\\", "/").split("/").at(-1) ?? argv0;
@@ -352,6 +431,7 @@ function mutationIndicators(argv: string[], redirections: BashRedirection[]): st
   if (name === "git" && argv[1] && !new Set(["status", "diff", "log", "show", "rev-parse", "ls-files", "branch"]).has(argv[1])) {
     indicators.push("Git state change");
   }
+  if (npmPackCommand(argv)?.valid) indicators.push("package archive or cache output");
   return [...new Set(indicators)];
 }
 
@@ -742,6 +822,12 @@ function classifyStageAccesses(stage: BashStage): ClassifiedAccess[] {
   }
 
   if (DATA_OPERAND_COMMANDS.has(name)) return accesses;
+  const npmPack = npmPackCommand(argv);
+  if (npmPack?.valid) {
+    accesses.push({ path: npmPack.cache!, mode: "write", source: "operand" });
+    accesses.push({ path: npmPack.packDestination, mode: "write", source: "operand" });
+    return accesses;
+  }
   if (["cd", "chdir", "set-location"].includes(name)) {
     return [...accesses, ...positionalOperands(argv).map((path) => ({ path, mode: "location" as const, source: "operand" as const }))];
   }
@@ -930,6 +1016,34 @@ function inspectHardBlocks(
     const argv = effectiveArgv(stage.argv);
     const name = commandName(argv[0]);
     const lowerArgs = argv.map((arg) => arg.toLowerCase());
+    const npmPack = npmPackCommand(argv);
+    if (npmPack) {
+      const direct = commandName(stage.argv[0]) === "npm"
+        && analysis.stages.length === 1
+        && analysis.operators.length === 0
+        && stage.substitutions.length === 0
+        && stage.redirections.length === 0
+        && Object.keys(stage.envAssignments).length === 0;
+      if (!direct || !npmPack.valid) {
+        addFinding(findings, {
+          code: "unsafe-npm-pack",
+          severity: "hard-block",
+          message: !direct ? "npm pack must be one direct command without shell composition" : npmPack.reason!,
+          stage: stage.index,
+        });
+      }
+    }
+    const globalPackageWrite = (name === "npm" || name === "bun")
+      && lowerArgs.some((arg) => new Set(["install", "add", "i", "update", "upgrade", "remove", "uninstall", "link"]).has(arg))
+      && lowerArgs.some((arg) => arg === "-g" || arg === "--global");
+    if (globalPackageWrite) {
+      addFinding(findings, {
+        code: "outside-project",
+        severity: "hard-block",
+        message: "global package installation writes outside the project and approved roots",
+        stage: stage.index,
+      });
+    }
     if (PRIVILEGE_COMMANDS.has(name)
       || ((name === "powershell" || name === "start-process") && lowerArgs.includes("runas"))) {
       addFinding(findings, { code: "privilege-escalation", severity: "hard-block", message: `${name} can escalate privileges`, stage: stage.index });
@@ -1191,6 +1305,9 @@ function stageNetworkCommand(stage: BashStage): string | undefined {
   if (NETWORK_COMMANDS.has(name)) return name;
   const subcommand = (argv[1] ?? "").toLowerCase();
   if (name === "git" && new Set(["clone", "fetch", "pull", "push", "ls-remote"]).has(subcommand)) return `git ${subcommand}`;
+  if (name === "npm" && subcommand === "pack") {
+    return npmPackCommand(argv)?.packageSpec ? "npm pack" : undefined;
+  }
   if (["npm", "pnpm", "yarn"].includes(name)
     && new Set(["add", "audit", "install", "publish", "search", "update", "upgrade", "view", "info"]).has(subcommand)) {
     return `${name} ${subcommand}`;

package/src/login-controller.ts

@@ -20,6 +20,10 @@ export type LoginKey = {
   option?: boolean;
 };
 
+function pastedSingleLine(text: string): string {
+  return text.replace(/[\u0000-\u001f\u007f]/g, "");
+}
+
 export function filterLoginMethods(methods: readonly LoginMethod[], query: string): LoginMethod[] {
   const terms = query.trim().toLocaleLowerCase().split(/\s+/).filter(Boolean);
   if (terms.length === 0) return [...methods];
@@ -254,6 +258,41 @@ export class LoginController {
     return false;
   }
 
+  acceptsTextPaste(): boolean {
+    return this.page.kind === "custom-endpoint" ||
+      this.page.kind === "custom-key" ||
+      (this.page.kind === "prompt" && this.page.prompt.type !== "select");
+  }
+
+  pasteText(text: string): boolean {
+    if (!this.acceptsTextPaste()) return false;
+    const pasted = pastedSingleLine(text);
+    if (!pasted) return true;
+
+    if (this.page.kind === "prompt") {
+      const current = this.page;
+      if (current.prompt.type === "secret") {
+        this.secret += pasted;
+        this.setPage({ ...current, secretLength: this.secret.length });
+      } else {
+        this.setPage({ ...current, value: current.value + pasted });
+      }
+      return true;
+    }
+    if (this.page.kind === "custom-endpoint") {
+      this.endpoint = this.page.endpoint + pasted;
+      this.setPage({ kind: "custom-endpoint", endpoint: this.endpoint });
+      return true;
+    }
+    if (this.page.kind === "custom-key") {
+      const current = this.page;
+      this.customKey += pasted;
+      this.setPage({ ...current, secretLength: this.customKey.length });
+      return true;
+    }
+    return false;
+  }
+
   handleKey(key: LoginKey): boolean {
     const enter = key.name === "return" || key.name === "enter" || key.name === "kpenter" || key.name === "linefeed";
     if (key.name === "escape") {

package/src/status-bar.tsx

@@ -15,6 +15,7 @@ export type StatusProps = {
   theme: Theme;
   modelId: string;
   thinkingLevel: string;
+  cwd: string;
   branch: string | null;
   outgoingTokens: number;
   incomingTokens: number;
@@ -65,6 +66,7 @@ type StatusBarLayoutInput = Pick<
   StatusProps,
   | "modelId"
   | "thinkingLevel"
+  | "cwd"
   | "branch"
   | "outgoingTokens"
   | "incomingTokens"
@@ -183,6 +185,10 @@ export function statusBarLayout(input: StatusBarLayoutInput): StatusBarLayout {
     layout.trailingSpace = false;
     measureLayout(input, layout);
   }
+  if (layout.totalWidth > input.width) {
+    layout.metadata = layout.metadata.filter((item) => item.key !== "cwd");
+    measureLayout(input, layout);
+  }
   if (layout.totalWidth > input.width) {
     layout.showIdleAgents = false;
     measureLayout(input, layout);

package/src/status-metadata.ts

@@ -2,6 +2,7 @@ import { fg, type TextChunk } from "@opentui/core";
 import type { Theme } from "./theme";
 
 export type StatusMetadataValues = {
+  cwd?: string;
   branch: string | null;
   outgoingTokens: number;
   incomingTokens: number;
@@ -11,9 +12,9 @@ export type StatusMetadataValues = {
 };
 
 export type StatusMetadataItem = {
-  key: "branch" | "outgoing" | "incoming" | "cacheRead" | "cost" | "context";
+  key: "cwd" | "branch" | "outgoing" | "incoming" | "cacheRead" | "cost" | "context";
   text: string;
-  tone: "branch" | "dim" | "warn";
+  tone: "cwd" | "branch" | "dim" | "warn";
   priority: number;
 };
 
@@ -28,8 +29,20 @@ export const formatCost = (value: number): string =>
 
 export const statusTextWidth = (text: string): number => Bun.stringWidth(text);
 
+/** Show the launch directory without the long parent path. */
+export function formatWorkingDirectory(cwd: string): string {
+  const withoutTrailingSeparators = cwd.replace(/[\\/]+$/, "");
+  if (!withoutTrailingSeparators) return "cwd /";
+  if (/^[A-Za-z]:$/.test(withoutTrailingSeparators)) return `cwd ${withoutTrailingSeparators}\\`;
+  const name = withoutTrailingSeparators.split(/[\\/]/).at(-1) || withoutTrailingSeparators;
+  return `cwd ${name}`;
+}
+
 export function statusMetadataItems(values: StatusMetadataValues): StatusMetadataItem[] {
   const items: StatusMetadataItem[] = [];
+  if (values.cwd) {
+    items.push({ key: "cwd", text: formatWorkingDirectory(values.cwd), tone: "cwd", priority: 85 });
+  }
   if (values.branch) {
     items.push({ key: "branch", text: values.branch, tone: "branch", priority: 90 });
   }
@@ -101,8 +114,10 @@ export function statusMetadataChunks(
   const chunks: TextChunk[] = [];
   for (const item of items) {
     if (chunks.length) chunks.push(fg(theme.dim)(" · "));
-    const color = item.tone === "branch"
-      ? theme.toolArg
+    const color = item.tone === "cwd"
+      ? theme.statusCwd
+      : item.tone === "branch"
+        ? theme.toolArg
       : item.tone === "warn"
         ? theme.warn
         : theme.dim;

package/src/text-paste.ts

@@ -0,0 +1,109 @@
+import { spawn } from "node:child_process";
+
+const MAX_CLIPBOARD_TEXT_BYTES = 64 * 1024;
+const WINDOWS_CLIPBOARD_TEXT_SCRIPT = [
+  "[Console]::OutputEncoding = [System.Text.UTF8Encoding]::new($false)",
+  "[Console]::Out.Write((Get-Clipboard -Raw))",
+].join("; ");
+
+type Environment = Record<string, string | undefined>;
+type NativeClipboard = { getText(): Promise<string> };
+type CommandRunner = (command: string, args: string[]) => Promise<string>;
+
+export type ClipboardTextOptions = {
+  platform?: NodeJS.Platform;
+  env?: Environment;
+  nativeClipboard?: NativeClipboard | null;
+  runner?: CommandRunner;
+};
+
+function isRemoteSession(env: Environment): boolean {
+  return Boolean(env.SSH_CONNECTION || env.SSH_CLIENT || env.MOSH_CONNECTION);
+}
+
+async function loadNativeClipboard(): Promise<NativeClipboard | null> {
+  try {
+    return await import("@mariozechner/clipboard");
+  } catch {
+    return null;
+  }
+}
+
+function runClipboardCommand(command: string, args: string[]): Promise<string> {
+  return new Promise((resolve, reject) => {
+    const child = spawn(command, args, {
+      stdio: ["ignore", "pipe", "ignore"],
+      windowsHide: true,
+    });
+    const chunks: Buffer[] = [];
+    let size = 0;
+    let settled = false;
+    const finish = (error?: Error) => {
+      if (settled) return;
+      settled = true;
+      clearTimeout(timer);
+      if (error) reject(error);
+      else resolve(Buffer.concat(chunks).toString("utf8"));
+    };
+    const timer = setTimeout(() => {
+      child.kill();
+      finish(new Error("Clipboard read timed out"));
+    }, 5000);
+    child.stdout.on("data", (chunk: Buffer) => {
+      size += chunk.length;
+      if (size > MAX_CLIPBOARD_TEXT_BYTES) {
+        child.kill();
+        finish(new Error("Clipboard text is too large"));
+        return;
+      }
+      chunks.push(chunk);
+    });
+    child.on("error", () => finish(new Error("Clipboard command failed")));
+    child.on("close", (code) => finish(code === 0 ? undefined : new Error("Clipboard command failed")));
+  });
+}
+
+function checkedText(text: string): string {
+  if (Buffer.byteLength(text, "utf8") > MAX_CLIPBOARD_TEXT_BYTES) {
+    throw new Error("Clipboard text is too large");
+  }
+  return text;
+}
+
+/** Read local graphical clipboard text without a shell or visible clipboard output. */
+export async function readClipboardText(options: ClipboardTextOptions = {}): Promise<string> {
+  const platform = options.platform ?? process.platform;
+  const env = options.env ?? process.env;
+  if (isRemoteSession(env)) throw new Error("Clipboard text paste is unavailable in a remote session");
+
+  const clipboard = options.nativeClipboard === undefined
+    ? await loadNativeClipboard()
+    : options.nativeClipboard;
+  if (clipboard) {
+    try {
+      return checkedText(await clipboard.getText());
+    } catch {
+      // Use a direct platform command when native clipboard access fails.
+    }
+  }
+
+  const runner = options.runner ?? runClipboardCommand;
+  if (platform === "win32") {
+    return checkedText(await runner("powershell.exe", [
+      "-NoLogo",
+      "-NoProfile",
+      "-NonInteractive",
+      "-STA",
+      "-Command",
+      WINDOWS_CLIPBOARD_TEXT_SCRIPT,
+    ]));
+  }
+  if (platform === "darwin") return checkedText(await runner("pbpaste", []));
+  if (platform === "linux" && env.WAYLAND_DISPLAY) {
+    return checkedText(await runner("wl-paste", ["--no-newline", "--type", "text"]));
+  }
+  if (platform === "linux" && env.DISPLAY) {
+    return checkedText(await runner("xclip", ["-selection", "clipboard", "-o"]));
+  }
+  throw new Error("No supported graphical clipboard is available");
+}

package/src/theme.ts

@@ -9,6 +9,8 @@ export type Theme = {
   fg: string;
   dim: string;
   accent: string;
+  /** Foreground for the current working directory in the status bar. */
+  statusCwd: string;
   border: string;
   /** Foreground and background of a user turn's full-width bar. */
   user: string;
@@ -47,6 +49,7 @@ const tokyonight: Theme = {
   fg: "#c0caf5",
   dim: "#565f89",
   accent: "#7aa2f7",
+  statusCwd: "#2ac3de",
   border: "#292e42",
   user: "#c0caf5",
   userBg: "#283457",
@@ -79,6 +82,7 @@ const gruvbox: Theme = {
   fg: "#ebdbb2",
   dim: "#928374",
   accent: "#83a598",
+  statusCwd: "#8ec07c",
   border: "#3c3836",
   user: "#ebdbb2",
   userBg: "#3c3836",
@@ -111,6 +115,7 @@ const catppuccin: Theme = {
   fg: "#cdd6f4",
   dim: "#6c7086",
   accent: "#89b4fa",
+  statusCwd: "#94e2d5",
   border: "#313244",
   user: "#cdd6f4",
   userBg: "#313244",
@@ -143,6 +148,7 @@ const nord: Theme = {
   fg: "#d8dee9",
   dim: "#7b88a1",
   accent: "#88c0d0",
+  statusCwd: "#8fbcbb",
   border: "#3b4252",
   user: "#eceff4",
   userBg: "#434c5e",
@@ -175,6 +181,7 @@ const dracula: Theme = {
   fg: "#f8f8f2",
   dim: "#6272a4",
   accent: "#bd93f9",
+  statusCwd: "#8be9fd",
   border: "#44475a",
   user: "#f8f8f2",
   userBg: "#44475a",
@@ -207,6 +214,7 @@ const rosepine: Theme = {
   fg: "#e0def4",
   dim: "#6e6a86",
   accent: "#c4a7e7",
+  statusCwd: "#9ccfd8",
   border: "#26233a",
   user: "#e0def4",
   userBg: "#26233a",
@@ -239,6 +247,7 @@ const solarized: Theme = {
   fg: "#839496",
   dim: "#586e75",
   accent: "#268bd2",
+  statusCwd: "#2aa198",
   border: "#073642",
   user: "#93a1a1",
   userBg: "#073642",
@@ -271,6 +280,7 @@ const kanagawa: Theme = {
   fg: "#dcd7ba",
   dim: "#727169",
   accent: "#7e9cd8",
+  statusCwd: "#7fb4ca",
   border: "#2a2a37",
   user: "#dcd7ba",
   userBg: "#2d4f67",
@@ -303,6 +313,7 @@ const githubLight: Theme = {
   fg: "#24292f",
   dim: "#6e7781",
   accent: "#0969da",
+  statusCwd: "#0a3069",
   border: "#d0d7de",
   user: "#24292f",
   userBg: "#ddf4ff",

package/src/transcript.tsx

@@ -1,4 +1,10 @@
-import { StyledText, bold, fg, type MarkdownRenderable, type SyntaxStyle } from "@opentui/core";
+import {
+  StyledText,
+  TextAttributes,
+  fg,
+  type MarkdownRenderable,
+  type SyntaxStyle,
+} from "@opentui/core";
 import type { MarkdownProps } from "@opentui/react";
 import {
   useBlinkingText,
@@ -360,7 +366,10 @@ function rejectedDetail(theme: Theme, detail: string): StyledText {
     return new StyledText([fg(theme.rejection)(detail)]);
   }
   return new StyledText([
-    bold(fg(theme.rejection)(CHECK_MODE_HARD_BLOCK_PREFIX)),
+    {
+      ...fg(theme.rejection)(CHECK_MODE_HARD_BLOCK_PREFIX),
+      attributes: TextAttributes.BOLD,
+    },
     fg(theme.rejection)(detail.slice(CHECK_MODE_HARD_BLOCK_PREFIX.length)),
   ]);
 }
@@ -398,11 +407,7 @@ export function ToolLine({
 
   return (
     <box style={{ flexDirection: "column", width: "100%" }}>
-      <Row
-        glyph={GUTTER}
-        glyphColor={toolColor}
-        background={rejected ? theme.rejectionBg : undefined}
-      >
+      <Row glyph={GUTTER} glyphColor={toolColor}>
         <box style={{ flexDirection: "row", flexGrow: 1, flexShrink: 1, minWidth: 0 }}>
           {prefix ? <text content={prefix} selectable style={{ flexShrink: 0 }} /> : null}
           <text
@@ -430,7 +435,7 @@ export function ToolLine({
         </box>
       </Row>
       {rejected && call.detail ? (
-        <Row glyph={GUTTER} glyphColor={theme.rejection} background={theme.rejectionBg}>
+        <Row glyph={GUTTER} glyphColor={theme.rejection}>
           <text
             content={rejectedDetail(theme, call.detail)}
             selectable