Fix IME inputs for Wave AI, and update privacy wording to be more clear about OpenAI (#2466)

Fix for #2385 for Wave AI.

Also update privacy information to say we send the chats to OpenAI for
processing.

Also modify the system prompt to say that file editing + command execution is coming soon.

Author: sawka

docs/docs/waveai.mdx

@@ -63,7 +63,7 @@ File system operations require explicit approval. You control all file access.
 
 ## Privacy
 
-- Messages are proxied through the Wave Cloud AI service (powered by OpenAI)
+- Messages are proxied through the Wave Cloud AI service (powered by OpenAI's APIs). Please refer to OpenAI's privacy policy for details on how they handle your data.
 - Wave does not store your chats, attachments, or use them for training
 - Usage counters included in anonymous telemetry
 - File access requires explicit approval

frontend/app/aipanel/aipanelinput.tsx

@@ -52,7 +52,8 @@ export const AIPanelInput = memo(({ onSubmit, status, model }: AIPanelInputProps
     }, [model, resizeTextarea]);
 
     const handleKeyDown = (e: React.KeyboardEvent<HTMLTextAreaElement>) => {
-        if (e.key === "Enter" && !e.shiftKey) {
+        const isComposing = e.nativeEvent?.isComposing || e.keyCode == 229;
+        if (e.key === "Enter" && !e.shiftKey && !isComposing) {
             e.preventDefault();
             onSubmit(e as any);
         }

frontend/app/aipanel/telemetryrequired.tsx

@@ -57,7 +57,8 @@ const TelemetryRequiredMessage = ({ className }: TelemetryRequiredMessageProps)
                                     </p>
                                     <p>
                                         We never collect your files, prompts, keystrokes, hostnames, or personally
-                                        identifying information.
+                                        identifying information. Wave AI is powered by OpenAI's APIs, please refer to
+                                        OpenAI's privacy policy for details on how they handle your data.
                                     </p>
                                 </div>
                                 <button

package-lock.json

@@ -84,6 +84,10 @@ var SystemPromptText_OpenAI = strings.Join([]string{
 	`If a request would execute dangerous or destructive actions, warn briefly and provide a safer alternative.`,
 	`If output is very long, prefer a brief summary plus a copy-ready fenced block or offer a follow-up chunking strategy.`,
 
+	`You cannot yet execute shell commands, run code in the terminal, or directly edit files on disk. You also cannot read remote files.`,
+	`If the user asks you to do one of those things, say that these features aren’t available yet AND make sure to say that they are coming soon (stay tuned for updates).`,
+	`Instead, show them exactly what command or code they could copy-paste to perform it manually.`,
+
 	// Final reminder
 	`You have NO API access to widgets or Wave unless provided via an explicit tool.`,
 }, " ")