zcode-cli 3.8.1-24

Show the workspace directory beside the turn timer in the TUI status footer

• Show the workspace directory beside the turn timer in the TUI status footer (tell concurrently open sessions apart) (packages/zcode-tui/src/turn-status.ts, packages/zcode-tui/src/index.ts, packages/zcode-tui/src/welcome-banner.ts, test/turn-status.test.ts).

  • Why: the current directory was previously shown only in the welcome banner; once a long session scrolls the banner off screen, several concurrently open zcode TUI instances can no longer be told apart. The directory now lives on the turn status line (the line that carries the turn timer), always visible right next to the timer and refreshing along with it.
  • What changed: (1) welcome-banner.ts exports the home-prefix-abbreviating displayWorkspace() logic as abbreviateWorkspaceDirectory() (banner and timer line now share one abbreviation rule); (2) turn-status.ts adds turnStatusDirectoryText() -- the workspace directory abbreviated to ~ form, and when it exceeds the 24-column budget (TURN_STATUS_DIRECTORY_MAX_COLUMNS) it is truncated from the head while keeping the tail (the distinguishing part of concurrently open sessions is mostly the project name at the end of the path); the 24-column budget leaves room for the right-side Goal status on 80-column terminals (measured: timer + directory + compact Goal coexist at 80 columns; narrower terminals prioritize timer + directory); (3) index.ts updateTurnStatus() appends the directory text (muted style, ─ separator) to the right of the timer text, and the directory shows alone when there is no timer content; the directory text is sanitized via sanitizeTerminalText and cached (cwd does not change within a process lifetime, ??= computes it once); (4) 3 new test cases (same abbreviation as the banner, head-truncation keeping the tail over budget, wide-character directory truncated without breaking characters).
  • Verification: full bun test 639 pass / 0 fail (78 files); tsc --noEmit passes; multi-width rendering measured at 100 / 80 / 60 columns confirms the expected layout; after the build:tui rebuild, the @zcode/tui copy inside vendor is refreshed in sync (matches the build output).

• Fix the TUI showing the previous account's username after switching accounts: the identity display now refreshes unconditionally after login, and logins whose identity cannot be attributed clear stale snapshots when the API key changes (src/identity.ts, packages/zcode-tui/src/index.ts, test/identity.test.ts, test/login-flow.test.ts, README.md, README_zh_hans.md, README_zh_hant.md).

  • Why: users reported that after switching accounts and logging in again, the TUI banner and status bar still showed the old account's username. Investigation confirmed two root causes -- (1) session layer: setLoginRequired refreshed the identity display only when loginRequired flipped from true to false; when switching accounts while already logged in, that state stays false, so refreshLoginIdentity never fired and the old name persisted until the TUI was restarted; (2) data layer: the display name is read from the vault's oauth:<provider>:user_info snapshot; the Z.AI OAuth login flow rewrites that snapshot with the new account's user object on every login (runtime saveZaiLoginCredentials, confirmed by reverse engineering), but BigModel OAuth and the two API-key login variants only write the new API key into config.json and never touch the snapshot (reverse engineering confirmed the runtime has zero references to oauth:bigmodel:* keys; that entry in the local vault is a leftover from the uninstalled ZCode Desktop) -- after switching to another BigModel account, the name in the snapshot belongs to the old account and a restart does not fix it, and the CLI has no way to obtain the new account's username (the token exchange happens entirely inside the runtime process, and the live fetch endpoint is blocked by a WAF, see the previous entry).
  • What changed: (1) src/identity.ts adds readProviderApiKeySnapshot() (snapshots the zai / bigmodel providers' config API keys before login) and clearIdentitiesWithChangedKeys(before) (after login, a provider whose key changed has its user_info snapshot deleted because it can no longer be attributed to the current account; returns the cleared list); (2) the TUI's setLoginRequired now calls refreshLoginIdentity() on every invocation (no longer only on state flips -- switching accounts while logged in also refreshes), and refreshLoginIdentity compares values (early-returns when kind + label are unchanged, avoiding a redraw on every result); (3) new isLoginWithoutIdentityRefresh() detecting the three non-attributable login commands (/login bigmodel-coding-plan and the two -api-key variants; Z.AI OAuth excluded because it rewrites the snapshot itself); submit() snapshots the keys before submitPrompt for such commands and calls the new clearStaleIdentityAfterLogin() after handleResult: key changed -> clear the snapshot, refresh the display, and hint that zcode identity set <name> can pin the new name; key unchanged (re-login to the same account) -> keep the current name; (4) 7 new test cases (5 in identity: snapshot only includes vault-backed providers, a key change clears the snapshot while preserving neighboring entries, an unchanged key keeps it, a zai key change also clears, no snapshot is a no-op; 2 in login-flow: positive and negative cases of the predicate); full bun test 636 pass / 0 fail (78 files), typecheck passes; rebuilt with build:launcher + build:tui, and the @zcode/tui copy inside vendor is refreshed in sync.
  • Scope note: this fix guarantees "the old account's name no longer shows after a switch" (a Z.AI switch shows the new name directly; a BigModel / API key switch falls back to the masked API key with a hint to pin the new name manually) -- obtaining the new BigModel username during login is a structural limitation of the upstream runtime (the token never touches disk); showing it automatically requires upstream support and is out of scope for this fix.

• New zcode identity subcommand: view / manually sync the signed-in identity display name (fixes the TUI showing a stale username after a rename) (new src/identity.ts, src/usage.ts, src/launcher.ts, new test/identity.test.ts).

  • Why: the user renamed their account on bigmodel.cn, but the TUI banner and status bar kept the old name. Investigation confirmed the root cause -- the display name is read from the encrypted oauth:bigmodel:user_info snapshot (containing username / displayName) in the machine-wide shared credential vault ~/.zcode/v2/credentials.json; that snapshot was written when ZCode Desktop (which shares the vault with the CLI) logged in via OAuth, and nothing has refreshed it since: Desktop is uninstalled, and the official runtime's bigmodel login flow (reverse engineered from vendor/zcode.cjs) only writes the exchanged API key into ~/.zcode/cli/config.json and never the vault's user_info -- so even re-running zcode login cannot clear the old name. Fetching the latest username from the server in real time is not dependable: the primary endpoint GET bigmodel.cn/api/biz/customer/getCustomerInfo (the same one used by the web profile page and the runtime login chain Ghr->Uhr) is currently blocked by an Aliyun WAF challenge from this machine both directly and via proxy (200 + empty body + acw_tc cookie), and the monitor domain has no user-info endpoint. Hence a manual sync command as the only reliable refresh path.
  • What changed: (1) src/usage.ts adds encryptCredential() -- the dual of decryptCredential() (enc:v1: AES-256-GCM, random 12-byte IV, 16-byte tag, three base64url segments, key derivation identical to the runtime), letting the CLI write back credentials the runtime can read; (2) new src/identity.ts -- zcode identity shows the active provider's identity (OAuth account name or masked API key, with the same read priority as the TUI's login-identity.ts mirror; the package dependency direction forbids importing it the other way, hence the standalone implementation); zcode identity set <name> rewrites the active provider's user_info snapshot username + displayName (the oauth:active_provider marker first, falling back to the config.model.main prefix, default bigmodel), preserving other fields such as id / avatarUrl and neighboring vault entries (login_attribution etc.), and creating the entry when no snapshot exists; zcode identity clear deletes the snapshot and falls back to the API-key display; the name is capped at 64 characters, set is rejected for non-OAuth providers, and the vault is written back with 0600 permissions; (3) launcher.ts wires the identity route after the stats route; (4) new test/identity.test.ts with 13 cases (encrypt/decrypt round trip + random IV, command argument dispatch, the three snapshot read priorities, set preserving fields / creating an entry / two rejection classes, show / clear / no-op / missing state). Rebuilt with bun run build:launcher; full bun test 630 pass / 0 fail (78 files). Live check: zcode identity outputs Provider: bigmodel / Identity: signed in as <old name> (reproducing the issue); the vault is shared globally, and after set a new TUI session picks it up immediately.
  • Scope note: identity set is a local display-name sync and does not change the server-side account; if the WAF ever allows the live endpoint, automatic refresh could be filed separately (not filed now -- live fetching is unusable in production today, and automatic refresh would silently fail and fall back to the stale snapshot, adding complexity for nothing).
  • Version note: these changes were originally recorded under the 3.8.1-23 entry, but v3.8.1-23 had already been published as a GitHub Release (2026-09-04, whose notes do not include these two items); after committing, the version was bumped 3.8.1-23 -> 3.8.1-24 and both items were relocated into this entry (the 3.8.1-23 entry was restored to its published form); VERSION, package.json, the test/update.test.ts assertion, and the three READMEs' badges and install-URL asset names were updated in sync.

Install

npm install -g https://github.com/xhqing/zcode-cli/releases/download/v3.8.1-24/zcode-cli-3.8.1-24.tgz