@alisio/alisio-code 0.1.0-alpha.5 → 0.1.0-alpha.7

package/dist/main.js

@@ -127,6 +127,8 @@ async function run(cmd, prompt, sessionId) {
                 process.stderr.write(`\n→ ${event.data.name}\n`);
         },
     });
+    for (const failure of app.mcpStartupFailures())
+        process.stderr.write(`[startup] ${failure}\n`);
     const controller = new AbortController();
     const interrupt = () => controller.abort(new Error("Interrupted"));
     process.on("SIGINT", interrupt);
@@ -253,7 +255,7 @@ program
     console.log('To generate AGENTS.md for this project, run /init inside alisio (or: alisio run "/init" --allow-write).');
 });
 program.command("doctor").action(async (_opts, cmd) => {
-    const { findWorkspace, loadConfigWithProvenance, overridesSavedProviderProfile, ProviderSettingsStore, which, } = await import("@alisio/core");
+    const { findWorkspace, loadConfigWithProvenance, overridesSavedProviderProfile, ProviderSettingsStore, RIPGREP_INSTALL_HINT, which, } = await import("@alisio/core");
     const o = options(cmd);
     const workspace = await findWorkspace(o.cwd ?? process.cwd());
     const { config, provenance } = await loadConfigWithProvenance(workspace, {
@@ -292,6 +294,8 @@ program.command("doctor").action(async (_opts, cmd) => {
         },
     };
     console.log(JSON.stringify(status, null, 2));
+    if (!status.ripgrep)
+        process.stderr.write(`\nWarning: ripgrep (rg) is not installed; search_text and list_files will not work. ${RIPGREP_INSTALL_HINT}\n`);
     if (!model || model === "YOUR_MODEL_ID")
         console.error("\nNo model configured yet: set provider.model in your config, --model, or ALISIO_MODEL " +
             "before starting a real conversation (it will otherwise fail on the first turn).");
@@ -389,11 +393,12 @@ for (const name of ["list", "validate"]) {
 }
 const plugins = program.command("plugins");
 plugins.command("list").action(async (_opts, cmd) => {
-    const { discoverPlugins } = await import("@alisio/core");
+    const { discoverPlugins, installedNpmPlugins } = await import("@alisio/core");
     const { configHome } = await import("@alisio/core");
     const { join, resolve } = await import("node:path");
+    const global = join(configHome(), "plugins");
     console.log(JSON.stringify({
-        global: await discoverPlugins(join(configHome(), "plugins")),
+        global: [...(await discoverPlugins(global)), ...(await installedNpmPlugins(global))],
         project: await discoverPlugins(join(resolve(options(cmd).cwd ?? process.cwd()), ".alisio", "plugins")),
         explicit: options(cmd).plugin ?? [],
     }, null, 2));
@@ -468,6 +473,26 @@ mcp
         await app.close();
     }
 });
+program
+    .command("install")
+    .description("Install an npm plugin package into the global plugins directory (~/.config/alisio/plugins)")
+    .argument("<spec>", 'npm package spec, e.g. "npm:plugin-openrouter" or "plugin-openrouter@1.2.3"')
+    .option("-y, --yes", "Skip the pre-install confirmation (npm may run lifecycle scripts)")
+    .option("--trust-plugin", "Explicit trust for this global install (same as --yes)")
+    .option("--update", "Refresh an already-installed plugin to the latest version, keeping its name")
+    .action(async (spec, _options, cmd) => {
+    const { cliInstall, configHome } = await import("@alisio/core");
+    const o = options(cmd);
+    await cliInstall({
+        spec,
+        configHome: configHome(),
+        yes: !!o.yes || !!o.trustPlugin,
+        update: !!o.update,
+        readOnly: !!o.readOnly,
+        json: !!o.json,
+        interactive: !!process.stdin.isTTY && !!process.stdout.isTTY && !o.json,
+    });
+});
 try {
     await program.parseAsync();
 }

package/dist/tui/app.js

@@ -102,6 +102,17 @@ export async function runTui(options) {
         modelList = undefined;
         throw e;
     }));
+    /**
+     * Reloads the active-provider catalog and repaints when it lands, so the context bar learns
+     * the ACTIVE model's real window (previously only the first /model picker or autocomplete
+     * call loaded it, leaving a fabricated 40k total on screen). Called at startup and after
+     * every provider/model switch; the bar honestly shows `?` until the catalog arrives.
+     */
+    const primeModels = () => {
+        void models()
+            .then(() => tui.requestRender())
+            .catch(() => { });
+    };
     const terminal = new ProcessTerminal();
     const copy = async (text) => copyText(text, {
         platform: process.platform,
@@ -184,7 +195,7 @@ export async function runTui(options) {
         const siblings = nodes.filter((n) => n.parentId === node.parentId);
         const child = viewedState();
         const budget = app.contextBudget(child?.model ?? view.model);
-        const pct = child?.context && budget
+        const pct = child?.context && budget?.total
             ? ` · ctx ${Math.round((child.context.used / budget.total) * 100)}%`
             : "";
         const tokens = child
@@ -239,6 +250,9 @@ export async function runTui(options) {
         },
         { component: bottom, basis: "auto", shrink: 1, minSize: 3 },
     ]));
+    // Prime the active provider's catalog so the context bar shows the model's real window
+    // (or an honest `?`) instead of a fabricated total; repaint when the catalog lands.
+    primeModels();
     const sync = () => {
         main.sync(view.items);
         tui.requestRender();
@@ -600,10 +614,34 @@ export async function runTui(options) {
                 placeholder: "provider-model-id",
                 hint: "The provider returned no model catalog",
                 step: inputFields.length + 1,
-                steps: inputFields.length + 1,
+                steps: inputFields.length + 2,
             });
         if (!model)
             return;
+        // Local servers like llama.cpp omit `context_window` from GET /models, so the bar would show
+        // an honest `?`. When the discovered catalog cannot name the window (or is empty), ask ONE
+        // optional numeric override and persist it in the profile values when provided.
+        const catalogEntry = discovered.find((candidate) => candidate.id === model);
+        if (!catalogEntry?.contextWindow) {
+            const windowStep = discovered.length ? inputFields.length + 1 : inputFields.length + 2;
+            const entered = await askInput({
+                provider: registration.name,
+                label: "Context window in tokens (optional)",
+                initial: profile.contextWindow === undefined ? "" : String(profile.contextWindow),
+                placeholder: "131072",
+                hint: "For local servers that omit context_window; leave empty to keep the saved value or stay unknown",
+                step: windowStep,
+                steps: windowStep,
+            });
+            if (entered === undefined)
+                return;
+            if (entered.trim()) {
+                const parsed = Number(entered.trim());
+                if (!Number.isInteger(parsed) || parsed <= 0)
+                    return error("Context window must be a positive number of tokens");
+                profile.contextWindow = parsed;
+            }
+        }
         await app.activateProvider(providerId, profile, credentials, model);
         activeProvider = app.providerInfo;
         modelList = undefined;
@@ -611,6 +649,7 @@ export async function runTui(options) {
         reset(initialViewState(model));
         notice(`Connected to ${registration.name} with model ${model}. Started a fresh session.`);
         refreshEstimate();
+        primeModels();
     };
     const chooseModel = async () => {
         const catalogs = await app.configuredProviderCatalogs(AbortSignal.timeout(20_000));
@@ -635,6 +674,7 @@ export async function runTui(options) {
                 reset(initialViewState(selected.model));
                 notice(`Provider changed to ${app.providers.get(selected.provider)?.name ?? selected.provider} with model ${selected.model}. Started a fresh session.`);
                 refreshEstimate();
+                primeModels();
             })
                 .catch(error);
         }, closePicker, true));
@@ -719,9 +759,45 @@ export async function runTui(options) {
     const manageMcp = () => {
         const openCatalog = () => {
             const entries = app.mcp.list();
-            if (!entries.length)
+            const serverItems = mcpServerItems(entries);
+            const items = [
+                ...serverItems,
+                ...(app.mcpAllowPersisted()
+                    ? [
+                        {
+                            value: "!revoke-global",
+                            label: "Revoke global MCP consent",
+                            description: "Clear mcp.allow from your user configuration and disconnect servers",
+                        },
+                    ]
+                    : []),
+            ];
+            if (!items.length)
                 return notice("No MCP servers are configured");
-            showPicker(new Picker(`MCP servers (${entries.length})`, mcpServerItems(entries), (item) => {
+            showPicker(new Picker(`MCP servers (${entries.length})`, items, (item) => {
+                if (item.value === "!revoke-global") {
+                    showPicker(new Picker("Revoke global MCP consent?", [
+                        {
+                            value: "revoke",
+                            label: "Revoke and disconnect",
+                            description: "Clears mcp.allow; future Alisio starts will not auto-grant or auto-connect MCP servers",
+                        },
+                        {
+                            value: "cancel",
+                            label: "Cancel",
+                            description: "Keep global MCP consent enabled",
+                        },
+                    ], (choice) => {
+                        if (choice.value !== "revoke")
+                            return openCatalog();
+                        void app
+                            .revokeGlobalMcpConsent()
+                            .then(() => notice("Global MCP consent revoked. Runtime permission dropped and configured servers disconnected."))
+                            .catch(error)
+                            .finally(openCatalog);
+                    }, openCatalog, false, "Removes mcp.allow from your user configuration (~/.config/alisio/config.json) atomically. This run's --allow-mcp flag, if given, keeps permission for this session."));
+                    return;
+                }
                 const selected = app.mcp.info(item.value);
                 const source = selected.source.kind === "global"
                     ? "User"
@@ -801,11 +877,16 @@ export async function runTui(options) {
             const run = () => void action().catch(error).finally(openCatalog);
             if (app.mcpRuntimePermission() === "granted")
                 return run();
-            showPicker(new Picker("Grant MCP access for this session?", [
+            showPicker(new Picker("Grant MCP access?", [
+                {
+                    value: "grant-session",
+                    label: "Grant for this session only",
+                    description: "May start the configured process or network connection; not saved",
+                },
                 {
-                    value: "grant",
-                    label: "Grant and continue",
-                    description: "May start the configured process or network connection",
+                    value: "grant-remember",
+                    label: "Grant and remember for this user (global)",
+                    description: "Persists mcp.allow in your user configuration for every session",
                 },
                 {
                     value: "cancel",
@@ -813,18 +894,31 @@ export async function runTui(options) {
                     description: "Make no permission or server changes",
                 },
             ], (choice) => {
-                if (choice.value !== "grant")
+                if (choice.value === "cancel")
                     return openCatalog();
-                try {
-                    app.grantMcpRuntimePermission({ source: "interactive-tui", confirmed: true });
-                    notice("MCP process/network access granted for this Alisio session only.");
-                    run();
+                if (choice.value === "grant-session") {
+                    try {
+                        app.grantMcpRuntimePermission({ source: "interactive-tui", confirmed: true });
+                        notice("MCP process/network access granted for this Alisio session only.");
+                        run();
+                    }
+                    catch (cause) {
+                        error(cause);
+                        openCatalog();
+                    }
+                    return;
                 }
-                catch (cause) {
+                void app
+                    .rememberGlobalMcpConsent()
+                    .then(() => {
+                    notice("MCP process/network access granted globally (mcp.allow) for this user. Enabled servers will auto-connect on every start.");
+                    run();
+                })
+                    .catch((cause) => {
                     error(cause);
                     openCatalog();
-                }
-            }, openCatalog, false, "This grant is not saved. Configured server enablement is persisted separately. MCP servers and their tools run with your user privileges."));
+                });
+            }, openCatalog, false, "Session-only lasts until Alisio exits. Remembering writes mcp.allow=true to your user configuration so every start grants MCP access and auto-connects enabled servers, including headless runs. MCP servers and their tools run with your user privileges."));
         };
         openCatalog();
     };
@@ -1296,6 +1390,8 @@ export async function runTui(options) {
             transcript.addChild(banner);
         }
         tui.start();
+        for (const failure of app.mcpStartupFailures())
+            notice(failure);
         sync();
         refreshEstimate();
         // Discover context windows in the background; failures only mean "unknown".

package/dist/tui/state.d.ts

@@ -38,6 +38,7 @@ export interface PluginCatalogView {
     diagnostic?: string;
 }
 /** Text markers remain meaningful without color: [x] active, [ ] inactive, [!] failed, [*] pending. */
+/** Group headings are derived from the primary category (or "General") of each plugin. */
 export declare function pluginCatalogItems(entries: PluginCatalogView[]): {
     value: string;
     label: string;
@@ -88,14 +89,14 @@ export declare function contextLevel(pct: number, compactionAt?: number): Level;
 export declare function contextPercent(used: number, total: number | undefined): number | undefined;
 /** The effective total the context bar measures against, and what it is derived from. */
 export interface ContextBudget {
-    /** Effective total in tokens (model window, or the char budget converted to tokens). */
-    total: number;
-    /** Basis of the total: the model's context window, or the char-budget fallback. */
-    basis: "window" | "chars";
+    /** Effective total in tokens: the model's context window, or absent when it is unknown. */
+    total?: number;
+    /** Basis of the total: the model's context window, or unknown (no fabricated total). */
+    basis: "window" | "unknown";
     /** Percentage of `total` at which the engine auto-compacts; the bar turns red there. */
     compactionAt: number;
 }
-export declare function formatContext(used: number, total: number | undefined, estimated: boolean, basis?: "window" | "chars"): string;
+export declare function formatContext(used: number, total: number | undefined, estimated: boolean, basis?: "window" | "unknown"): string;
 export declare function formatDuration(ms: number): string;
 export declare const textWidth: (text: string) => number;
 export declare function truncatePlain(text: string, width: number): string;

package/dist/tui/state.js

@@ -23,6 +23,7 @@ export function providerModelItems(provider, models, current) {
     }));
 }
 /** Text markers remain meaningful without color: [x] active, [ ] inactive, [!] failed, [*] pending. */
+/** Group headings are derived from the primary category (or "General") of each plugin. */
 export function pluginCatalogItems(entries) {
     const marker = (entry) => entry.status === "active"
         ? "[x]"
@@ -31,11 +32,16 @@ export function pluginCatalogItems(entries) {
             : entry.status === "failed"
                 ? "[!]"
                 : "[*]";
-    return entries.map((entry) => ({
+    const grouped = new Map();
+    for (const entry of entries) {
+        const primary = entry.categories[0] ?? "General";
+        grouped.set(primary, [...(grouped.get(primary) ?? []), entry]);
+    }
+    return [...grouped].flatMap(([title, group]) => group.map((entry, index) => ({
         value: entry.id,
-        label: `${marker(entry)} ${entry.name} · ${entry.builtin ? "built-in" : entry.source}`,
+        label: `${index === 0 ? `${title} · ` : ""}${marker(entry)} ${entry.name} · ${entry.builtin ? "built-in" : entry.source}`,
         description: `${entry.status}${entry.categories.length ? ` · ${entry.categories.join(", ")}` : ""} · ${entry.description}`,
-    }));
+    })));
 }
 export const pluginToggleNeedsConfirmation = (entry) => !entry.builtin;
 const mcpSourceTitle = (kind) => ({
@@ -127,13 +133,14 @@ export function contextPercent(used, total) {
 }
 export function formatContext(used, total, estimated, basis) {
     const prefix = `${estimated ? "~" : ""}${formatTokens(used)} / `;
+    // Honest unknown: the model window could not be known, so the bar shows `?` instead of a
+    // fabricated total or percentage.
+    if (basis === "unknown")
+        return `${prefix}?`;
     const pct = contextPercent(used, total);
     if (pct === undefined || !total)
         return `${prefix}unknown`;
-    // The `~` marks an estimate; the "char budget" suffix tells the user the bar is measured
-    // against the fallback (est. tokens from limits.maxContextChars), not a model window.
-    const basisSuffix = basis === "chars" ? " char budget" : "";
-    return `${prefix}${formatTokens(total)} (${Math.round(pct)}%)${basisSuffix}`;
+    return `${prefix}${formatTokens(total)} (${Math.round(pct)}%)`;
 }
 export function formatDuration(ms) {
     if (ms < 1000)

package/dist/version.d.ts

@@ -1,6 +1,8 @@
 /**
- * Reads the package version at runtime so --version, doctor and MCP client metadata
- * stay in sync with the published package without a build-time constant to update.
- * Standalone binaries inject the version at build time via ALISIO_PACKAGE_VERSION.
+ * Reads the package version at runtime so --version, doctor, plugin metadata and MCP client
+ * metadata stay in sync with the published package without a build-time constant to update.
+ * The manifest is resolved relative to the module (`src/version.ts` → `../package.json` in the
+ * source tree; `dist/version.js` → `../package.json` of the installed package). Standalone
+ * binaries inject the version at build time via ALISIO_PACKAGE_VERSION (scripts/binary-build.ts).
  */
 export declare function loadVersion(fromHere: string): string;

package/dist/version.js

@@ -1,12 +1,18 @@
 import { readFileSync } from "node:fs";
 import { dirname, join } from "node:path";
 import { fileURLToPath } from "node:url";
-/** Fallback used when package.json is not readable (e.g. standalone binaries). */
-const FALLBACK = "0.1.0-alpha.1";
 /**
- * Reads the package version at runtime so --version, doctor and MCP client metadata
- * stay in sync with the published package without a build-time constant to update.
- * Standalone binaries inject the version at build time via ALISIO_PACKAGE_VERSION.
+ * Fallback used when neither the build-time injection nor the package manifest is readable
+ * (e.g. an unpackaged embed). Keep it a development marker, never a publish literal, so it
+ * cannot silently desync from the published package.
+ */
+const FALLBACK = "dev";
+/**
+ * Reads the package version at runtime so --version, doctor, plugin metadata and MCP client
+ * metadata stay in sync with the published package without a build-time constant to update.
+ * The manifest is resolved relative to the module (`src/version.ts` → `../package.json` in the
+ * source tree; `dist/version.js` → `../package.json` of the installed package). Standalone
+ * binaries inject the version at build time via ALISIO_PACKAGE_VERSION (scripts/binary-build.ts).
  */
 export function loadVersion(fromHere) {
     if (process.env.ALISIO_PACKAGE_VERSION)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@alisio/alisio-code",
-  "version": "0.1.0-alpha.5",
+  "version": "0.1.0-alpha.7",
   "description": "Alisio: an extensible, provider-agnostic coding-agent harness for your terminal. TUI, OpenAI-compatible providers, permissioned local tools, context compaction, persistent memory and a typed plugin SDK.",
   "author": "Gustavo Gutiérrez",
   "license": "MIT",
@@ -45,13 +45,13 @@
     "alisio": "./dist/main.js"
   },
   "dependencies": {
-    "@alisio/core": "0.1.0-alpha.5",
-    "@alisio/plugin-deepseek": "0.1.0-alpha.5",
-    "@alisio/plugin-memory": "0.1.0-alpha.5",
-    "@alisio/plugin-openai-compatible": "0.1.0-alpha.5",
-    "@alisio/plugin-opencode": "0.1.0-alpha.5",
-    "@alisio/plugin-opencode-go": "0.1.0-alpha.5",
-    "@alisio/plugin-subagents": "0.1.0-alpha.5",
+    "@alisio/core": "0.1.0-alpha.6",
+    "@alisio/plugin-deepseek": "0.1.0-alpha.6",
+    "@alisio/plugin-memory": "0.1.0-alpha.6",
+    "@alisio/plugin-openai-compatible": "0.1.0-alpha.6",
+    "@alisio/plugin-opencode": "0.1.0-alpha.6",
+    "@alisio/plugin-opencode-go": "0.1.0-alpha.6",
+    "@alisio/plugin-subagents": "0.1.0-alpha.6",
     "@alisio/sdk": "0.1.0-alpha.5",
     "@earendil-works/pi-tui": "0.87.1",
     "commander": "15.0.0"