@charmland/crush 0.66.1 → 0.68.0

package/README.md

@@ -293,10 +293,36 @@ like you would. LSPs can be added manually like so:
 
 ### MCPs
 
-Crush also supports Model Context Protocol (MCP) servers through three
-transport types: `stdio` for command-line servers, `http` for HTTP endpoints,
-and `sse` for Server-Sent Events. Environment variable expansion is supported
-using `$(echo $VAR)` syntax.
+Crush also supports Model Context Protocol (MCP) servers through three transport
+types: `stdio` for command-line servers, `http` for HTTP endpoints, and `sse`
+for Server-Sent Events.
+
+Shell-style value expansion (`$VAR`, `${VAR:-default}`, `$(command)`, quoting,
+nesting) works in `command`, `args`, `env`, `headers`, and `url`, so
+file-based secrets work out of the box. You can use values like `"$TOKEN"`
+or `"$(cat /path/to/secret/token)"`. Expansion runs through Crush's embedded
+shell, so the same syntax works on every supported system, Windows included.
+
+Unset variables expand to the empty string by default, matching bash. For
+required credentials, use `${VAR:?message}` so an unset variable fails loudly
+at load time with `message` instead of silently resolving to empty:
+
+```json
+{ "api_key": "${CODEBERG_TOKEN:?set CODEBERG_TOKEN}" }
+```
+
+Headers (both MCP `headers` and provider `extra_headers`) whose value
+resolves to the empty string are dropped from the outgoing request rather
+than sent as `Header:`. That keeps optional env-gated headers like
+`"OpenAI-Organization": "$OPENAI_ORG_ID"` clean when the variable is unset.
+
+Provider `extra_body` is a non-expanding JSON passthrough; put env-driven
+values in `extra_headers` or the provider's `api_key` / `base_url`, all of
+which do expand.
+
+> **Security note:** `crush.json` is trusted code. Any `$(...)` in it runs at
+> load time with your shell's privileges, before the UI appears. Don't launch
+> Crush in a directory whose `crush.json` you haven't reviewed.
 
 ```json
 {
@@ -419,6 +445,8 @@ The global paths we looks for skills are:
 * `$CRUSH_SKILLS_DIR`
 * `$XDG_CONFIG_HOME/agents/skills` or `~/.config/agents/skills/`
 * `$XDG_CONFIG_HOME/crush/skills` or `~/.config/crush/skills/`
+* `~/.agents/skills/`
+* `~/.claude/skills/`
 * On Windows, we _also_ look at
   * `%LOCALAPPDATA%\agents\skills\` or `%USERPROFILE%\AppData\Local\agents\skills\`
   * `%LOCALAPPDATA%\crush\skills\` or `%USERPROFILE%\AppData\Local\crush\skills\`
@@ -522,8 +550,7 @@ it creates. You can customize this behavior with the `attribution` option:
 
 - `trailer_style`: Controls the attribution trailer added to commit messages
   (default: `assisted-by`)
-  - `assisted-by`: Adds `Assisted-by: [Model Name] via Crush <crush@charm.land>`
-    (includes the model name)
+  - `assisted-by`: Adds `Assisted-by: Crush:[ModelID]` as specified in [the convention](https://docs.kernel.org/process/coding-assistants.html#attribution)
   - `co-authored-by`: Adds `Co-Authored-By: Crush <crush@charm.land>`
   - `none`: No attribution trailer
 - `generated_with`: When true (default), adds `💘 Generated with Crush` line to

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@charmland/crush",
   "type": "module",
-  "version": "0.66.1",
+  "version": "0.68.0",
   "description": "A powerful terminal-based AI assistant for developers, providing intelligent coding assistance directly in your terminal.",
   "scripts": {
     "postinstall": "node install.js",
@@ -27,82 +27,82 @@
   },
   "archives": {
     "darwin-arm64": {
-      "name": "crush_0.66.1_Darwin_arm64.tar.gz",
-      "url": "https://github.com/charmbracelet/crush/releases/download/v0.66.1/crush_0.66.1_Darwin_arm64.tar.gz",
+      "name": "crush_0.68.0_Darwin_arm64.tar.gz",
+      "url": "https://github.com/charmbracelet/crush/releases/download/v0.68.0/crush_0.68.0_Darwin_arm64.tar.gz",
       "bins": [
         "crush"
       ],
       "format": "tar.gz",
       "checksum": {
         "algorithm": "sha256",
-        "digest": "de5c151eb1148ddb658192e05a1960eade12e560cb6050d7d93b798e059c3f3d"
+        "digest": "6faf033a60f7ab6a127ba58b4e7a050349c34b829fa77c762d767cfff4f68890"
       },
-      "wrappedIn": "crush_0.66.1_Darwin_arm64"
+      "wrappedIn": "crush_0.68.0_Darwin_arm64"
     },
     "darwin-x64": {
-      "name": "crush_0.66.1_Darwin_x86_64.tar.gz",
-      "url": "https://github.com/charmbracelet/crush/releases/download/v0.66.1/crush_0.66.1_Darwin_x86_64.tar.gz",
+      "name": "crush_0.68.0_Darwin_x86_64.tar.gz",
+      "url": "https://github.com/charmbracelet/crush/releases/download/v0.68.0/crush_0.68.0_Darwin_x86_64.tar.gz",
       "bins": [
         "crush"
       ],
       "format": "tar.gz",
       "checksum": {
         "algorithm": "sha256",
-        "digest": "b9c72653a6716ab4458f03260dac6527669c764c294927abb07203e11315ee1a"
+        "digest": "1816e08d6a7da1fa73575d5250ea8905c7386a841eab2645273b56a8bf21972f"
       },
-      "wrappedIn": "crush_0.66.1_Darwin_x86_64"
+      "wrappedIn": "crush_0.68.0_Darwin_x86_64"
     },
     "linux-arm64": {
-      "name": "crush_0.66.1_Linux_arm64.tar.gz",
-      "url": "https://github.com/charmbracelet/crush/releases/download/v0.66.1/crush_0.66.1_Linux_arm64.tar.gz",
+      "name": "crush_0.68.0_Linux_arm64.tar.gz",
+      "url": "https://github.com/charmbracelet/crush/releases/download/v0.68.0/crush_0.68.0_Linux_arm64.tar.gz",
       "bins": [
         "crush"
       ],
       "format": "tar.gz",
       "checksum": {
         "algorithm": "sha256",
-        "digest": "9c61a9158659b99195be356dc9263c97b298b5ea617f79336ffa78b59b2110ff"
+        "digest": "97c537ac167cf37bda7bdcec42cba74f3417e8aaca563890b34f74c678d61760"
       },
-      "wrappedIn": "crush_0.66.1_Linux_arm64"
+      "wrappedIn": "crush_0.68.0_Linux_arm64"
     },
     "linux-x64": {
-      "name": "crush_0.66.1_Linux_x86_64.tar.gz",
-      "url": "https://github.com/charmbracelet/crush/releases/download/v0.66.1/crush_0.66.1_Linux_x86_64.tar.gz",
+      "name": "crush_0.68.0_Linux_x86_64.tar.gz",
+      "url": "https://github.com/charmbracelet/crush/releases/download/v0.68.0/crush_0.68.0_Linux_x86_64.tar.gz",
       "bins": [
         "crush"
       ],
       "format": "tar.gz",
       "checksum": {
         "algorithm": "sha256",
-        "digest": "e04c0e9ff8eb3ae9ad0eb0afd13f58e37d70602235d678363a10617b8a5bc206"
+        "digest": "9a0260aef836ea7c17bb99c2afc505ccccf817db345d5ab8873274a9e15d3086"
       },
-      "wrappedIn": "crush_0.66.1_Linux_x86_64"
+      "wrappedIn": "crush_0.68.0_Linux_x86_64"
     },
     "win32-arm64": {
-      "name": "crush_0.66.1_Windows_arm64.zip",
-      "url": "https://github.com/charmbracelet/crush/releases/download/v0.66.1/crush_0.66.1_Windows_arm64.zip",
+      "name": "crush_0.68.0_Windows_arm64.zip",
+      "url": "https://github.com/charmbracelet/crush/releases/download/v0.68.0/crush_0.68.0_Windows_arm64.zip",
       "bins": [
         "crush.exe"
       ],
       "format": "zip",
       "checksum": {
         "algorithm": "sha256",
-        "digest": "9950a9e3300635891132a06f91276cae5fb4c2d1bc890823992000a127f32239"
+        "digest": "2cf23a3d316fdb9656192b20a258aa5db8ad6d1db1c2e8294e7c778461896790"
       },
-      "wrappedIn": "crush_0.66.1_Windows_arm64"
+      "wrappedIn": "crush_0.68.0_Windows_arm64"
     },
     "win32-x64": {
-      "name": "crush_0.66.1_Windows_x86_64.zip",
-      "url": "https://github.com/charmbracelet/crush/releases/download/v0.66.1/crush_0.66.1_Windows_x86_64.zip",
+      "name": "crush_0.68.0_Windows_x86_64.zip",
+      "url": "https://github.com/charmbracelet/crush/releases/download/v0.68.0/crush_0.68.0_Windows_x86_64.zip",
       "bins": [
         "crush.exe"
       ],
       "format": "zip",
       "checksum": {
         "algorithm": "sha256",
-        "digest": "2006a5a637e4a8ea4a3bd464a24c65e7c2ceb47df16795f96e0a848cc9fd23c3"
+        "digest": "fb54731ec69e9e35f89cd462416a965be81353185e2f7f00df7347449cf61a75"
       },
-      "wrappedIn": "crush_0.66.1_Windows_x86_64"
+      "wrappedIn": "crush_0.68.0_Windows_x86_64"
     }
   }
 }