hx-cli 0.2.11__tar.gz → 0.2.14__tar.gz

{hx_cli-0.2.11 → hx_cli-0.2.14}/CHANGELOG.md

@@ -28,6 +28,109 @@ the project follows [semantic versioning](https://semver.org/).
 
 ---
 
+## [0.2.14] - 2026-10-04
+
+### Added
+
+- When the installed Claude Code is behind its current release - and so lists older Claude
+  models than your subscription can run - `/model` says so under the list, with the command
+  that updates it (`brew upgrade --cask claude-code` for a Homebrew install, otherwise
+  `claude update`). After updating, the next `/model` lists the new models; no
+  refresh needed.
+
+### Changed
+
+- The model catalogue is refreshed from inside the `/model` picker: press `ctrl+r`. The
+  list updates in place and keeps your filter and selection; the outcome, or why the refresh
+  failed, shows under the list. With no models at all, `/model` now opens anyway and says
+  so, so `ctrl+r` is there to fill it.
+
+### Removed
+
+- `/models refresh`. It sat one letter away from `/model` and did nothing without its one
+  argument; use `ctrl+r` in the `/model` picker.
+
+### Fixed
+
+- On the `claude-code` route, the context window is the one Claude Code reports, not a
+  200k guess: Opus 5.5 runs with 1M. Claude Code lists its models without their sizes, and
+  what it serves depends on the plan, so a model starts at the window it was measured
+  serving on every plan - 1M for Opus 5.5, Sonnet 5.5, Sonnet 5 and Opus 4.7, 200k
+  otherwise - until its first turn reports the real window and maximum output for your
+  account. From then on the context gauge, the compaction threshold, the `/model` picker
+  and later sessions all use it, and a catalogue refresh keeps it.
+- A model Claude Code lists at its long context - Fable 5.1 as `claude-fable-5-1[1m]` -
+  runs at it: `/model` offers `claude-code/claude-fable-5-1[1m]` at 1M, where HX used to
+  drop the `[1m]` and run the model at its standard context.
+- A turn refused because the model, or its 1M context, needs usage credits your Claude plan
+  has off no longer reads "usage limit is reached. It resets at ...": HX says what needs the
+  credits, where to turn them on, and which model runs without them. Once they are on, the
+  next turn runs.
+- After a catalogue refresh (`ctrl+r` in `/model`, or signing in), the session in progress
+  measures its context against the refreshed window, not the one it started with.
+- `/model anthropic` (or typing `anthropic` in the picker) lists the Claude models your Claude
+  Code subscription runs, first, ahead of the per-token OpenRouter ones; `openai` does the same
+  for Codex. Several words match in any order: `/model anthropic sonnet`.
+
+---
+
+## [0.2.13] - 2026-10-04
+
+### Added
+
+- Claude Pro/Max route: `hx auth login claude-code`, then
+  `hx --model claude-code/claude-sonnet-5`. Runs Claude models on your Claude
+  subscription through the official Claude Code CLI, with HX's own tools,
+  approvals and transcript. `/model` lists the account's models and `/effort`
+  their levels.
+- Behind a TLS-inspecting proxy the `claude-code` route takes the same
+  settings as every other route: `HX_CA_BUNDLE` reaches Claude Code as
+  `NODE_EXTRA_CA_CERTS` and `HX_SSL_NO_VERIFY` as
+  `NODE_TLS_REJECT_UNAUTHORIZED=0`, Claude Code's own `CLAUDE_CODE_CERT_STORE`
+  and `CLAUDE_CODE_CLIENT_CERT` / `_KEY` / `_KEY_PASSPHRASE` (for a network
+  that requires a client certificate) pass through, and a certificate failure
+  it reports names the fix.
+- On the `claude-code` route, a turn Anthropic bills as Extra Usage while
+  your plan still has room says so, and names HX's part of the system prompt,
+  instead of claiming the plan's usage limit is reached. A turn whose prompt
+  carries HX's own system prompt text (a copied `system-prompt.md`, an
+  AGENTS.md, an agent definition) is refused before it is sent, naming where
+  the text is; `hx prompt` shows the sources.
+
+### Fixed
+
+- A subagent that fails - a provider error, a refused prompt, the turn limit -
+  reports why to the parent model, instead of "(the subagent returned no
+  text)".
+- `Glob` with a pattern of `.` or `./` returns an error saying to use `*` or
+  `**/*`, and an absolute pattern one naming the `path` and relative pattern
+  to send instead, on every Python version, instead of a Python exception.
+- With `tui.enterWhileBusy` set to `"steer"`, `alt+enter` queues a message
+  behind the running turn, as the prompt says. It used to steer like `enter`,
+  leaving no way to queue in that mode.
+- The status bar's `⧗N queued` count stays visible in a project with a long
+  path or branch name; the path is shortened instead of the count being cut off.
+
+---
+
+## [0.2.12] - 2026-10-01
+
+### Fixed
+
+- `/exit` and `ctrl+d` return the shell at once. They used to wait up to 10
+  seconds on a model call renaming the session; sessions are no longer renamed
+  on the way out, in the TUI or with `hx -p`.
+- A name set with `/title` is no longer replaced by a generated one, including
+  one that was still being generated when you set it.
+- The session name is generated from the opening and the latest stretch of the
+  conversation, not only its first 2000 characters.
+- A session left before its first name came back is named from your first
+  message, instead of being listed by `/resume` with no name.
+- A session left with `/resume` into another directory is renamed for what it
+  became, by the HX that starts there, in the background.
+
+---
+
 ## [0.2.11] - 2026-10-01
 
 ### Fixed
@@ -776,7 +879,10 @@ First release, published to PyPI as [`hx-cli`](https://pypi.org/project/hx-cli/)
 - `/configure` and `hx auth` for the OpenRouter key, `hx upgrade` for
   self-update, and `install.sh` bootstrapping uv with a pinned Python.
 
-[Unreleased]: https://github.com/aletisunil/hx/compare/v0.2.11...HEAD
+[Unreleased]: https://github.com/aletisunil/hx/compare/v0.2.14...HEAD
+[0.2.14]: https://github.com/aletisunil/hx/compare/v0.2.13...v0.2.14
+[0.2.13]: https://github.com/aletisunil/hx/compare/v0.2.12...v0.2.13
+[0.2.12]: https://github.com/aletisunil/hx/compare/v0.2.11...v0.2.12
 [0.2.11]: https://github.com/aletisunil/hx/compare/v0.2.10...v0.2.11
 [0.2.10]: https://github.com/aletisunil/hx/compare/v0.2.9...v0.2.10
 [0.2.9]: https://github.com/aletisunil/hx/compare/v0.2.8...v0.2.9

{hx_cli-0.2.11 → hx_cli-0.2.14}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: hx-cli
-Version: 0.2.11
+Version: 0.2.14
 Summary: HX - an agent harness for the terminal
 Project-URL: Homepage, https://hx.sunilaleti.dev
 Project-URL: Documentation, https://hx.sunilaleti.dev
@@ -31,6 +31,7 @@ Requires-Dist: pytest-asyncio>=0.23; extra == 'dev'
 Requires-Dist: pytest-cov>=5.0; extra == 'dev'
 Requires-Dist: pytest>=8.2; extra == 'dev'
 Requires-Dist: ruff>=0.6; extra == 'dev'
+Requires-Dist: trustme>=1.2; extra == 'dev'
 Requires-Dist: types-pygments; extra == 'dev'
 Requires-Dist: types-pyyaml; extra == 'dev'
 Provides-Extra: symbols
@@ -90,7 +91,7 @@ Requires Python 3.11+. macOS and Linux. Update with `hx upgrade`.
 
 ### Credentials
 
-HX reaches models over three routes. Which one serves a turn is decided by the
+HX reaches models over four routes. Which one serves a turn is decided by the
 model id alone, so "what paid for that" is always answerable by reading it:
 
 | Model id | Route | Billing |
@@ -98,8 +99,10 @@ model id alone, so "what paid for that" is always answerable by reading it:
 | `anthropic/claude-sonnet-4.5`, `openai/gpt-5`, … | OpenRouter | per token, API key |
 | `openai-codex/gpt-5.6-terra` | ChatGPT Plus/Pro | your subscription |
 | `devin/swe-1-6`, `devin/claude-opus-5`, … | Devin | your subscription |
+| `claude-code/claude-sonnet-5`, `claude-code/claude-opus-4-8`, … | Claude Pro/Max, via Claude Code | your subscription |
 
-Credentials live in `~/.hx/auth.json`, mode 0600, one entry per route.
+Credentials live in `~/.hx/auth.json`, mode 0600, one entry per route - except
+Claude Code's, which stays with Claude Code.
 
 **OpenRouter.** On first run HX asks for a key. Get one at
 <https://openrouter.ai/keys>. Change it later with `/configure` in the TUI, or:
@@ -153,7 +156,7 @@ reach it at all.
 
 **Which Codex models you get** is decided by your ChatGPT account, not by HX.
 Signing in fetches the account's own list from the Codex backend, and `/model`
-offers exactly that; `/models refresh` asks again. Entitlement is per model —
+offers exactly that; ctrl+r in `/model` asks again. Entitlement is per model -
 the same `plus` account can run `gpt-5.6-sol` and be refused `gpt-5.3-codex` —
 so a model the picker does not list is one the subscription does not cover.
 
@@ -215,7 +218,7 @@ you to sign in again. On a machine with no browser at all, a session token in
 `HX_DEVIN_API_KEY` or `DEVIN_API_KEY` is used when nothing is saved.
 
 Signing in fetches the account's own model list, and `/model` offers exactly
-that; `/models refresh` asks again. Devin publishes each reasoning depth as a
+that; ctrl+r in `/model` asks again. Devin publishes each reasoning depth as a
 model of its own - Claude Opus 5 High, Claude Opus 5 Max - and HX folds each
 family into one model, so `/effort` picks the depth on Devin exactly as it does
 on Codex. A fast lane or a 1M-context lane stays a separate model, since it
@@ -223,6 +226,54 @@ changes what a turn costs or how much fits. Router models such as
 `devin/adaptive` are resolved to a concrete model on every turn by Devin itself.
 If the list cannot be fetched, `devin/swe-1-6` and `devin/swe-1-6-fast` stand in.
 
+**Claude Pro/Max.** HX runs Claude models on your Claude subscription through
+the official [Claude Code](https://claude.com/claude-code) CLI, the way the
+Claude Agent SDK does. Install Claude Code, then:
+
+```sh
+hx auth login claude-code       # Claude Code's own sign-in; or /login inside HX
+hx --model claude-code/claude-sonnet-5
+```
+
+HX holds no Claude token. The login is Claude Code's, kept and refreshed where
+Claude Code keeps it, so `hx auth logout claude-code` only tells you to run
+`claude auth logout` - which signs out every Claude Code on the machine. A
+headless machine can use a token from `claude setup-token` in
+`CLAUDE_CODE_OAUTH_TOKEN`. A Console login (`claude auth login --console`) bills
+per token and is refused: this route is the subscription.
+
+How a turn works: HX starts `claude -p` with every one of Claude Code's own
+tools switched off and serves HX's tools to it as an MCP server. The model's
+tool calls are run, permission-checked and drawn by HX exactly as on every
+other route; Claude Code holds each call open until HX answers it, however long
+an approval takes. The system prompt is Claude Code's, with your AGENTS.md
+files, skills index and `--append-system-prompt` text added. One Claude Code
+process serves a conversation for as long as it can, so the prompt cache
+carries from turn to turn; after an interrupt, a steer while a tool runs, a
+compaction, `/model`, `/effort` or a resumed session, HX starts a new one on a
+session rebuilt from its own transcript. That costs a second or so and a
+partly cold cache, not the conversation.
+
+Claude Code is started isolated from your Claude Code setup: no CLAUDE.md, no
+hooks, no plugins or MCP servers from `~/.claude`, no auto-memory, no
+auto-compaction (HX compacts its own transcript), and nothing saved to Claude
+Code's session list. Variables that would move it off the subscription -
+`ANTHROPIC_API_KEY`, `ANTHROPIC_BASE_URL`, `CLAUDE_CODE_USE_BEDROCK` and the
+rest - are removed from its environment; its TLS settings are kept (see
+*Behind a TLS-inspecting proxy* below). `HX_CLAUDE_CODE_PATH` points HX at a
+`claude` other than the one on `PATH`.
+
+`/model` offers the models Claude Code lists for the account, each with the
+efforts it accepts for `/effort`; ctrl+r in `/model` asks again. A model Claude
+Code runs at its long context keeps `[1m]` in its id
+(`claude-code/claude-fable-5-1[1m]`), exactly as Claude Code's own `/model` runs
+it. Claude Code lists no context sizes, so a model starts at the window it was
+measured serving on every plan - 1M for Opus 5.5, Sonnet 5.5, Sonnet 5 and Opus
+4.7, otherwise 200k - and from its first turn uses the window Claude Code
+reports for your account. When a usage limit is reached, HX says which one and
+when it resets; when a model or its 1M context needs usage credits your plan
+has off, HX says that instead, and what to pick without them.
+
 **Web search.** Optional, and the one credential that is not a model route.
 It powers two tools:
 
@@ -232,7 +283,7 @@ It powers two tools:
 | `WebFetch` | read up to 5 URLs, returned as markdown |
 
 [Tavily](https://app.tavily.com) bills per search rather than per token, so it
-works identically on both routes — including the ChatGPT subscription one,
+works identically on every route - including the subscription ones,
 where a provider-native search tool is not on offer.
 
 Get a key at <https://app.tavily.com> — the free tier is 1000 searches a month
@@ -286,9 +337,18 @@ startup every session, because it is not a fix. A TLS failure is reported in
 one line - `/model` and the startup notice both name the certificate problem
 rather than reporting an empty catalogue with no cause.
 
-There is no Claude Pro/Max route. Anthropic rejects OAuth tokens unless the
-request impersonates Claude Code, which HX will not do. Claude models stay
-available through OpenRouter.
+The same settings cover the `claude-code` route, whose requests Claude Code
+makes with its own TLS stack: HX passes `HX_CA_BUNDLE` on to it as
+`NODE_EXTRA_CA_CERTS` (unless you already set that yourself), and
+`HX_SSL_NO_VERIFY` as `NODE_TLS_REJECT_UNAUTHORIZED=0`. Claude Code reads the
+OS trust store on its own, and its own TLS settings reach it untouched:
+`CLAUDE_CODE_CERT_STORE`, and `CLAUDE_CODE_CLIENT_CERT`,
+`CLAUDE_CODE_CLIENT_KEY` and `CLAUDE_CODE_CLIENT_KEY_PASSPHRASE` for a network
+that requires a client certificate.
+
+HX never sends a Claude subscription token to the API itself - Anthropic
+accepts those only from Claude Code, and HX will not impersonate it. The
+`claude-code` route runs the real Claude Code instead.
 
 ---
 
@@ -314,7 +374,7 @@ hx mcp list|add|remove      # manage MCP servers
 hx mcp login <server>       # sign in to a remote MCP server in the browser
 hx mcp logout <server>      # forget a remote MCP server's sign-in
 hx auth [set|clear]         # manage the OpenRouter key
-hx auth login [provider]    # sign in (openrouter, openai-codex, devin)
+hx auth login [provider]    # sign in (openrouter, openai-codex, devin, claude-code)
 hx auth logout <provider>   # forget a stored credential
 hx docs [section]           # the manual; no argument lists its sections
 hx changelog [version]      # what shipped in each version
@@ -368,7 +428,7 @@ be rebound (see [Keybindings](#keybindings)).
 | `ctrl+d` | exit, when the prompt is empty |
 | `shift+tab` | cycle permission mode |
 | `ctrl+p` | command palette |
-| `ctrl+l` | model picker |
+| `ctrl+l` | model picker; inside it, `ctrl+r` fetches the catalogue again |
 | `ctrl+o` | expand tool output (also `ctrl+r`) |
 | `ctrl+t` | show the current plan |
 | `ctrl+x` | copy the selected message to the clipboard |
@@ -474,8 +534,7 @@ silently resolved.
 
 | Command | Does |
 |---|---|
-| `/model [query]` | pick a model; shows context window, price per Mtok, cache support |
-| `/models refresh` | re-fetch the catalogue |
+| `/model [query]` | pick a model; shows context window, price per Mtok, cache support. `ctrl+r` in the picker re-fetches the catalogue |
 | `/effort [level]` | how hard a reasoning model thinks, from the levels it offers |
 | `/configure` | session settings and the API key |
 | `/login [provider]` | sign in to a model route |
@@ -709,8 +768,14 @@ After the first exchange, HX asks the model for a short name for the session and
 writes it to `~/.hx/sessions/<id>/meta.json`, so `/resume` lists work rather
 than timestamps. It is one small call — cap 32 output tokens, `models.title_model`
 if you want a cheaper model for it — and it is counted in `/cost` like any other.
-If the call fails the session is still named, from your first message. `/title
-<text>` renames it.
+If the call fails, or you leave before it is back, the session is still named,
+from your first message.
+
+The live session is never renamed while it runs, and nothing is renamed on
+`/exit`, which returns your shell at once. A session you leave with `/clear` or
+`/resume` - including a `/resume` into another directory - is renamed in the
+background for what it became. `/title <text>` renames it yourself, and a name
+you chose is never replaced.
 
 `/resume` lists every session except the one you are in: this directory's
 first, then other directories', each row naming where it lives. A session from

{hx_cli-0.2.11 → hx_cli-0.2.14}/README.md

@@ -50,7 +50,7 @@ Requires Python 3.11+. macOS and Linux. Update with `hx upgrade`.
 
 ### Credentials
 
-HX reaches models over three routes. Which one serves a turn is decided by the
+HX reaches models over four routes. Which one serves a turn is decided by the
 model id alone, so "what paid for that" is always answerable by reading it:
 
 | Model id | Route | Billing |
@@ -58,8 +58,10 @@ model id alone, so "what paid for that" is always answerable by reading it:
 | `anthropic/claude-sonnet-4.5`, `openai/gpt-5`, … | OpenRouter | per token, API key |
 | `openai-codex/gpt-5.6-terra` | ChatGPT Plus/Pro | your subscription |
 | `devin/swe-1-6`, `devin/claude-opus-5`, … | Devin | your subscription |
+| `claude-code/claude-sonnet-5`, `claude-code/claude-opus-4-8`, … | Claude Pro/Max, via Claude Code | your subscription |
 
-Credentials live in `~/.hx/auth.json`, mode 0600, one entry per route.
+Credentials live in `~/.hx/auth.json`, mode 0600, one entry per route - except
+Claude Code's, which stays with Claude Code.
 
 **OpenRouter.** On first run HX asks for a key. Get one at
 <https://openrouter.ai/keys>. Change it later with `/configure` in the TUI, or:
@@ -113,7 +115,7 @@ reach it at all.
 
 **Which Codex models you get** is decided by your ChatGPT account, not by HX.
 Signing in fetches the account's own list from the Codex backend, and `/model`
-offers exactly that; `/models refresh` asks again. Entitlement is per model —
+offers exactly that; ctrl+r in `/model` asks again. Entitlement is per model -
 the same `plus` account can run `gpt-5.6-sol` and be refused `gpt-5.3-codex` —
 so a model the picker does not list is one the subscription does not cover.
 
@@ -175,7 +177,7 @@ you to sign in again. On a machine with no browser at all, a session token in
 `HX_DEVIN_API_KEY` or `DEVIN_API_KEY` is used when nothing is saved.
 
 Signing in fetches the account's own model list, and `/model` offers exactly
-that; `/models refresh` asks again. Devin publishes each reasoning depth as a
+that; ctrl+r in `/model` asks again. Devin publishes each reasoning depth as a
 model of its own - Claude Opus 5 High, Claude Opus 5 Max - and HX folds each
 family into one model, so `/effort` picks the depth on Devin exactly as it does
 on Codex. A fast lane or a 1M-context lane stays a separate model, since it
@@ -183,6 +185,54 @@ changes what a turn costs or how much fits. Router models such as
 `devin/adaptive` are resolved to a concrete model on every turn by Devin itself.
 If the list cannot be fetched, `devin/swe-1-6` and `devin/swe-1-6-fast` stand in.
 
+**Claude Pro/Max.** HX runs Claude models on your Claude subscription through
+the official [Claude Code](https://claude.com/claude-code) CLI, the way the
+Claude Agent SDK does. Install Claude Code, then:
+
+```sh
+hx auth login claude-code       # Claude Code's own sign-in; or /login inside HX
+hx --model claude-code/claude-sonnet-5
+```
+
+HX holds no Claude token. The login is Claude Code's, kept and refreshed where
+Claude Code keeps it, so `hx auth logout claude-code` only tells you to run
+`claude auth logout` - which signs out every Claude Code on the machine. A
+headless machine can use a token from `claude setup-token` in
+`CLAUDE_CODE_OAUTH_TOKEN`. A Console login (`claude auth login --console`) bills
+per token and is refused: this route is the subscription.
+
+How a turn works: HX starts `claude -p` with every one of Claude Code's own
+tools switched off and serves HX's tools to it as an MCP server. The model's
+tool calls are run, permission-checked and drawn by HX exactly as on every
+other route; Claude Code holds each call open until HX answers it, however long
+an approval takes. The system prompt is Claude Code's, with your AGENTS.md
+files, skills index and `--append-system-prompt` text added. One Claude Code
+process serves a conversation for as long as it can, so the prompt cache
+carries from turn to turn; after an interrupt, a steer while a tool runs, a
+compaction, `/model`, `/effort` or a resumed session, HX starts a new one on a
+session rebuilt from its own transcript. That costs a second or so and a
+partly cold cache, not the conversation.
+
+Claude Code is started isolated from your Claude Code setup: no CLAUDE.md, no
+hooks, no plugins or MCP servers from `~/.claude`, no auto-memory, no
+auto-compaction (HX compacts its own transcript), and nothing saved to Claude
+Code's session list. Variables that would move it off the subscription -
+`ANTHROPIC_API_KEY`, `ANTHROPIC_BASE_URL`, `CLAUDE_CODE_USE_BEDROCK` and the
+rest - are removed from its environment; its TLS settings are kept (see
+*Behind a TLS-inspecting proxy* below). `HX_CLAUDE_CODE_PATH` points HX at a
+`claude` other than the one on `PATH`.
+
+`/model` offers the models Claude Code lists for the account, each with the
+efforts it accepts for `/effort`; ctrl+r in `/model` asks again. A model Claude
+Code runs at its long context keeps `[1m]` in its id
+(`claude-code/claude-fable-5-1[1m]`), exactly as Claude Code's own `/model` runs
+it. Claude Code lists no context sizes, so a model starts at the window it was
+measured serving on every plan - 1M for Opus 5.5, Sonnet 5.5, Sonnet 5 and Opus
+4.7, otherwise 200k - and from its first turn uses the window Claude Code
+reports for your account. When a usage limit is reached, HX says which one and
+when it resets; when a model or its 1M context needs usage credits your plan
+has off, HX says that instead, and what to pick without them.
+
 **Web search.** Optional, and the one credential that is not a model route.
 It powers two tools:
 
@@ -192,7 +242,7 @@ It powers two tools:
 | `WebFetch` | read up to 5 URLs, returned as markdown |
 
 [Tavily](https://app.tavily.com) bills per search rather than per token, so it
-works identically on both routes — including the ChatGPT subscription one,
+works identically on every route - including the subscription ones,
 where a provider-native search tool is not on offer.
 
 Get a key at <https://app.tavily.com> — the free tier is 1000 searches a month
@@ -246,9 +296,18 @@ startup every session, because it is not a fix. A TLS failure is reported in
 one line - `/model` and the startup notice both name the certificate problem
 rather than reporting an empty catalogue with no cause.
 
-There is no Claude Pro/Max route. Anthropic rejects OAuth tokens unless the
-request impersonates Claude Code, which HX will not do. Claude models stay
-available through OpenRouter.
+The same settings cover the `claude-code` route, whose requests Claude Code
+makes with its own TLS stack: HX passes `HX_CA_BUNDLE` on to it as
+`NODE_EXTRA_CA_CERTS` (unless you already set that yourself), and
+`HX_SSL_NO_VERIFY` as `NODE_TLS_REJECT_UNAUTHORIZED=0`. Claude Code reads the
+OS trust store on its own, and its own TLS settings reach it untouched:
+`CLAUDE_CODE_CERT_STORE`, and `CLAUDE_CODE_CLIENT_CERT`,
+`CLAUDE_CODE_CLIENT_KEY` and `CLAUDE_CODE_CLIENT_KEY_PASSPHRASE` for a network
+that requires a client certificate.
+
+HX never sends a Claude subscription token to the API itself - Anthropic
+accepts those only from Claude Code, and HX will not impersonate it. The
+`claude-code` route runs the real Claude Code instead.
 
 ---
 
@@ -274,7 +333,7 @@ hx mcp list|add|remove      # manage MCP servers
 hx mcp login <server>       # sign in to a remote MCP server in the browser
 hx mcp logout <server>      # forget a remote MCP server's sign-in
 hx auth [set|clear]         # manage the OpenRouter key
-hx auth login [provider]    # sign in (openrouter, openai-codex, devin)
+hx auth login [provider]    # sign in (openrouter, openai-codex, devin, claude-code)
 hx auth logout <provider>   # forget a stored credential
 hx docs [section]           # the manual; no argument lists its sections
 hx changelog [version]      # what shipped in each version
@@ -328,7 +387,7 @@ be rebound (see [Keybindings](#keybindings)).
 | `ctrl+d` | exit, when the prompt is empty |
 | `shift+tab` | cycle permission mode |
 | `ctrl+p` | command palette |
-| `ctrl+l` | model picker |
+| `ctrl+l` | model picker; inside it, `ctrl+r` fetches the catalogue again |
 | `ctrl+o` | expand tool output (also `ctrl+r`) |
 | `ctrl+t` | show the current plan |
 | `ctrl+x` | copy the selected message to the clipboard |
@@ -434,8 +493,7 @@ silently resolved.
 
 | Command | Does |
 |---|---|
-| `/model [query]` | pick a model; shows context window, price per Mtok, cache support |
-| `/models refresh` | re-fetch the catalogue |
+| `/model [query]` | pick a model; shows context window, price per Mtok, cache support. `ctrl+r` in the picker re-fetches the catalogue |
 | `/effort [level]` | how hard a reasoning model thinks, from the levels it offers |
 | `/configure` | session settings and the API key |
 | `/login [provider]` | sign in to a model route |
@@ -669,8 +727,14 @@ After the first exchange, HX asks the model for a short name for the session and
 writes it to `~/.hx/sessions/<id>/meta.json`, so `/resume` lists work rather
 than timestamps. It is one small call — cap 32 output tokens, `models.title_model`
 if you want a cheaper model for it — and it is counted in `/cost` like any other.
-If the call fails the session is still named, from your first message. `/title
-<text>` renames it.
+If the call fails, or you leave before it is back, the session is still named,
+from your first message.
+
+The live session is never renamed while it runs, and nothing is renamed on
+`/exit`, which returns your shell at once. A session you leave with `/clear` or
+`/resume` - including a `/resume` into another directory - is renamed in the
+background for what it became. `/title <text>` renames it yourself, and a name
+you chose is never replaced.
 
 `/resume` lists every session except the one you are in: this directory's
 first, then other directories', each row naming where it lives. A session from

{hx_cli-0.2.11 → hx_cli-0.2.14}/pyproject.toml

@@ -55,6 +55,9 @@ dev = [
   # A VT emulator, so tests can assert what the differ actually paints rather
   # than what it claims to have written.
   "pyte>=0.8",
+  # A throwaway CA, so the TLS tests can stand up the intercepting proxy a
+  # corporate network puts between HX and the API.
+  "trustme>=1.2",
 ]
 
 [project.scripts]

{hx_cli-0.2.11 → hx_cli-0.2.14}/src/hx/__init__.py

@@ -1,5 +1,5 @@
 """HX - an agent harness for the terminal."""
 
-__version__ = "0.2.11"
+__version__ = "0.2.14"
 
 __all__ = ["__version__"]

{hx_cli-0.2.11 → hx_cli-0.2.14}/src/hx/agents/subagent.py

@@ -107,7 +107,13 @@ class SubagentRunner:
         try:
             loop = self._build_loop(definition, subagent_id)
             result = await loop.run(prompt)
-            report = _final_text(result) or "(the subagent returned no text)"
+            report = _final_text(result)
+            if result.error is not None:
+                # The parent model only sees the report: without the reason it
+                # cannot tell a refused or broken run from one with nothing to say.
+                failure = f"The subagent failed: {result.error}"
+                report = f"{report}\n\n{failure}" if report else failure
+            report = report or "(the subagent returned no text)"
             cost = loop.session.usage.total_cost_usd
             self._roll_up_cost(loop)
             return SubagentResult(
@@ -167,6 +173,7 @@ class SubagentRunner:
             model_info=self.models.get_or_default(model) if self.models else None,
             project_context=self.project_context,
             hooks=self.hooks,
+            models=self.models,
         )
         loop.origin = f"{definition.name} subagent"
         return loop