@m14i/sith 1.19.0 → 1.21.0

package/README.md

@@ -97,7 +97,39 @@ cosign verify \
 
 ## Authentication
 
-Sith uses **Claude Sonnet 4.6 via GitHub Copilot** by default. Authentication requires a GitHub token with Copilot access.
+Sith supports two AI providers: **Claude Code** (via Anthropic) and **OpenCode** (via GitHub Copilot).
+
+### Claude Code (claude CLI)
+
+Sith ships with the `claude` CLI. Authenticate it with your Anthropic account using a long-lived OAuth token — no API key required.
+
+**Step 1 — Generate the token (once, on your local machine):**
+```bash
+claude setup-token
+```
+Follow the browser prompt, then copy the printed token. It is valid for one year and scoped to inference only.
+
+**Step 2 — Export it:**
+```bash
+export CLAUDE_CODE_OAUTH_TOKEN=your_token_here
+```
+
+**Make it persistent (add to ~/.zshrc or ~/.bashrc):**
+```bash
+export CLAUDE_CODE_OAUTH_TOKEN=your_token_here
+```
+
+**Verify:**
+```bash
+claude auth status
+# Should show: "loggedIn": true, "authMethod": "claude.ai"
+```
+
+**Requirements:** Claude Pro, Max, Team, or Enterprise subscription.
+
+### GitHub Copilot (opencode CLI)
+
+Sith uses **Claude Sonnet 4.6 via GitHub Copilot** by default for OpenCode. Requires a GitHub token with Copilot access.
 
 **Automatic (recommended):**
 If you have GitHub CLI (`gh`) installed and authenticated, Sith automatically fetches your token:
@@ -129,6 +161,24 @@ opencode providers login
 # Follow prompts to authenticate with GitHub
 ```
 
+### CI / GitHub Actions
+
+Add both tokens as repository secrets, then pass them to the container:
+
+```yaml
+- name: Run sith
+  env:
+    CLAUDE_CODE_OAUTH_TOKEN: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
+    GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+  run: |
+    docker run --rm \
+      -e CLAUDE_CODE_OAUTH_TOKEN=$CLAUDE_CODE_OAUTH_TOKEN \
+      -e GITHUB_TOKEN=$GITHUB_TOKEN \
+      ghcr.io/merzoukemanouri/sith:latest "claude auth status"
+```
+
+Generate `CLAUDE_CODE_OAUTH_TOKEN` once with `claude setup-token` and store it in **Settings → Secrets → Actions** as `CLAUDE_CODE_OAUTH_TOKEN`.
+
 ## Features
 
 - **Claude Code-style UI**: Interactive terminal interface with prompt input and slash commands

package/dist/components/TerminalUI.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"TerminalUI.d.ts","sourceRoot":"","sources":["file:///home/runner/work/sith/sith/src/components/TerminalUI.tsx"],"names":[],"mappings":"AAGA,OAAO,KAAgC,MAAM,OAAO,CAAC;AA0JrD,wBAAgB,UAAU,IAAI,KAAK,CAAC,YAAY,CAmR/C;AAED,wBAAgB,gBAAgB,IAAI,IAAI,CAEvC"}
+{"version":3,"file":"TerminalUI.d.ts","sourceRoot":"","sources":["file:///home/runner/work/sith/sith/src/components/TerminalUI.tsx"],"names":[],"mappings":"AAGA,OAAO,KAAgC,MAAM,OAAO,CAAC;AA0JrD,wBAAgB,UAAU,IAAI,KAAK,CAAC,YAAY,CA8R/C;AAED,wBAAgB,gBAAgB,IAAI,IAAI,CAEvC"}

package/dist/index.js

@@ -43309,6 +43309,7 @@ async function runShell() {
             // Ignore if gh CLI not available or not authenticated
         }
     }
+    const claudeOauthToken = process.env.CLAUDE_CODE_OAUTH_TOKEN || "";
     const dockerArgs = [
         "run",
         "--rm",
@@ -43321,6 +43322,9 @@ async function runShell() {
         `${opencodeConfigPath}:${_config_js__WEBPACK_IMPORTED_MODULE_5__/* .DOCKER_CONFIG */ .e6.opencodeConfigMount}`,
         "-e",
         `GITHUB_TOKEN=${githubToken}`,
+        ...(claudeOauthToken
+            ? ["-e", `CLAUDE_CODE_OAUTH_TOKEN=${claudeOauthToken}`]
+            : []),
         "--entrypoint",
         "nix-shell",
         _config_js__WEBPACK_IMPORTED_MODULE_5__/* .DOCKER_CONFIG */ .e6.imageName,
@@ -43907,7 +43911,8 @@ function TerminalUI() {
         console.log('Press Ctrl+D or type "exit" to leave');
         console.log();
         const githubToken = await (0,_utils_githubToken_js__WEBPACK_IMPORTED_MODULE_8__/* .getGitHubToken */ .l)();
-        const dockerArgs = (0,_utils_dockerArgs_js__WEBPACK_IMPORTED_MODULE_5__/* .buildDockerShellCommand */ .ac)(githubToken);
+        const claudeOauthToken = process.env.CLAUDE_CODE_OAUTH_TOKEN || "";
+        const dockerArgs = (0,_utils_dockerArgs_js__WEBPACK_IMPORTED_MODULE_5__/* .buildDockerShellCommand */ .ac)(githubToken, claudeOauthToken);
         await (0,execa__WEBPACK_IMPORTED_MODULE_9__/* .execa */ .Ho)("docker", dockerArgs, { stdio: "inherit", reject: false });
         console.log();
         console.log("✅ Exited shell");
@@ -43921,7 +43926,8 @@ function TerminalUI() {
         }
         console.log();
         const githubToken = await (0,_utils_githubToken_js__WEBPACK_IMPORTED_MODULE_8__/* .getGitHubToken */ .l)();
-        const dockerArgs = (0,_utils_dockerArgs_js__WEBPACK_IMPORTED_MODULE_5__/* .buildDockerOpencodeCommand */ .Xs)(githubToken, prompt);
+        const claudeOauthToken = process.env.CLAUDE_CODE_OAUTH_TOKEN || "";
+        const dockerArgs = (0,_utils_dockerArgs_js__WEBPACK_IMPORTED_MODULE_5__/* .buildDockerOpencodeCommand */ .Xs)(githubToken, prompt, claudeOauthToken);
         try {
             await (0,execa__WEBPACK_IMPORTED_MODULE_9__/* .execa */ .Ho)("docker", dockerArgs, { stdio: "inherit" });
             console.log();
@@ -43942,7 +43948,8 @@ function TerminalUI() {
         }
         console.log();
         const githubToken = await (0,_utils_githubToken_js__WEBPACK_IMPORTED_MODULE_8__/* .getGitHubToken */ .l)();
-        const dockerArgs = (0,_utils_dockerArgs_js__WEBPACK_IMPORTED_MODULE_5__/* .buildDockerClaudeCodeCommand */ .fn)(githubToken, prompt);
+        const claudeOauthToken = process.env.CLAUDE_CODE_OAUTH_TOKEN || "";
+        const dockerArgs = (0,_utils_dockerArgs_js__WEBPACK_IMPORTED_MODULE_5__/* .buildDockerClaudeCodeCommand */ .fn)(githubToken, prompt, claudeOauthToken);
         try {
             await (0,execa__WEBPACK_IMPORTED_MODULE_9__/* .execa */ .Ho)("docker", dockerArgs, { stdio: "inherit" });
             console.log();
@@ -44311,7 +44318,8 @@ function createProgram() {
         .option("-p, --prompt <prompt>", "Prompt to pass to OpenCode")
         .action(async (options) => {
         const token = await (0,_utils_githubToken_js__WEBPACK_IMPORTED_MODULE_12__/* .getGitHubToken */ .l)();
-        const args = (0,_utils_dockerArgs_js__WEBPACK_IMPORTED_MODULE_9__/* .buildDockerOpencodeCommand */ .Xs)(token, options.prompt);
+        const claudeOauthToken = process.env.CLAUDE_CODE_OAUTH_TOKEN || "";
+        const args = (0,_utils_dockerArgs_js__WEBPACK_IMPORTED_MODULE_9__/* .buildDockerOpencodeCommand */ .Xs)(token, options.prompt, claudeOauthToken);
         (0,node_child_process__WEBPACK_IMPORTED_MODULE_0__.spawnSync)("docker", args, { stdio: "inherit" });
     });
     // Claude command - launch Claude Code in Docker
@@ -44321,7 +44329,8 @@ function createProgram() {
         .option("-p, --prompt <prompt>", "Prompt to pass to Claude Code")
         .action(async (options) => {
         const token = await (0,_utils_githubToken_js__WEBPACK_IMPORTED_MODULE_12__/* .getGitHubToken */ .l)();
-        const args = (0,_utils_dockerArgs_js__WEBPACK_IMPORTED_MODULE_9__/* .buildDockerClaudeCodeCommand */ .fn)(token, options.prompt);
+        const claudeOauthToken = process.env.CLAUDE_CODE_OAUTH_TOKEN || "";
+        const args = (0,_utils_dockerArgs_js__WEBPACK_IMPORTED_MODULE_9__/* .buildDockerClaudeCodeCommand */ .fn)(token, options.prompt, claudeOauthToken);
         (0,node_child_process__WEBPACK_IMPORTED_MODULE_0__.spawnSync)("docker", args, { stdio: "inherit" });
     });
     return program;
@@ -44350,8 +44359,8 @@ __webpack_async_result__();
 
 
 
-function buildDockerShellCommand(githubToken) {
-    return [
+function buildDockerShellCommand(githubToken, claudeOauthToken) {
+    const args = [
         "run",
         "--rm",
         "-it",
@@ -44363,13 +44372,14 @@ function buildDockerShellCommand(githubToken) {
         `${(0,_skills_js__WEBPACK_IMPORTED_MODULE_2__/* .getOpenCodeConfigPath */ .Jn)()}:${_config_js__WEBPACK_IMPORTED_MODULE_1__/* .DOCKER_CONFIG */ .e6.opencodeConfigMount}`,
         "-e",
         `GITHUB_TOKEN=${githubToken}`,
-        "--entrypoint",
-        "nix-shell",
-        _config_js__WEBPACK_IMPORTED_MODULE_1__/* .DOCKER_CONFIG */ .e6.imageName,
-        _config_js__WEBPACK_IMPORTED_MODULE_1__/* .DOCKER_CONFIG */ .e6.shellEntrypoint,
     ];
+    if (claudeOauthToken) {
+        args.push("-e", `CLAUDE_CODE_OAUTH_TOKEN=${claudeOauthToken}`);
+    }
+    args.push("--entrypoint", "nix-shell", _config_js__WEBPACK_IMPORTED_MODULE_1__/* .DOCKER_CONFIG */ .e6.imageName, _config_js__WEBPACK_IMPORTED_MODULE_1__/* .DOCKER_CONFIG */ .e6.shellEntrypoint);
+    return args;
 }
-function buildDockerOpencodeCommand(githubToken, prompt) {
+function buildDockerOpencodeCommand(githubToken, prompt, claudeOauthToken) {
     const args = [
         "run",
         "--rm",
@@ -44382,11 +44392,11 @@ function buildDockerOpencodeCommand(githubToken, prompt) {
         `${(0,_skills_js__WEBPACK_IMPORTED_MODULE_2__/* .getOpenCodeConfigPath */ .Jn)()}:${_config_js__WEBPACK_IMPORTED_MODULE_1__/* .DOCKER_CONFIG */ .e6.opencodeConfigMount}`,
         "-e",
         `GITHUB_TOKEN=${githubToken}`,
-        "--entrypoint",
-        "bash",
-        _config_js__WEBPACK_IMPORTED_MODULE_1__/* .DOCKER_CONFIG */ .e6.imageName,
-        "-c",
     ];
+    if (claudeOauthToken) {
+        args.push("-e", `CLAUDE_CODE_OAUTH_TOKEN=${claudeOauthToken}`);
+    }
+    args.push("--entrypoint", "bash", _config_js__WEBPACK_IMPORTED_MODULE_1__/* .DOCKER_CONFIG */ .e6.imageName, "-c");
     let opencodeCommand = "source /opt/sith/nix/nix-scripts/setup.sh && cd /workspace && opencode -m github-copilot/claude-sonnet-4.6";
     if (prompt) {
         const escapedPrompt = prompt.replace(/'/g, "'\\''");
@@ -44395,7 +44405,7 @@ function buildDockerOpencodeCommand(githubToken, prompt) {
     args.push(opencodeCommand);
     return args;
 }
-function buildDockerClaudeCodeCommand(githubToken, prompt) {
+function buildDockerClaudeCodeCommand(githubToken, prompt, claudeOauthToken) {
     const claudeConfigDir = (0,_skills_js__WEBPACK_IMPORTED_MODULE_2__/* .getClaudeConfigDir */ .K1)();
     const claudeMdPath = (0,_skills_js__WEBPACK_IMPORTED_MODULE_2__/* .getClaudeMdPath */ .pF)();
     const args = [
@@ -44407,6 +44417,9 @@ function buildDockerClaudeCodeCommand(githubToken, prompt) {
         "-e",
         `GITHUB_TOKEN=${githubToken}`,
     ];
+    if (claudeOauthToken) {
+        args.push("-e", `CLAUDE_CODE_OAUTH_TOKEN=${claudeOauthToken}`);
+    }
     // Mount ~/.claude first so subsequent mounts can shadow entries within it
     if (node_fs__WEBPACK_IMPORTED_MODULE_0___default().existsSync(claudeConfigDir)) {
         args.push("-v", `${claudeConfigDir}:${_config_js__WEBPACK_IMPORTED_MODULE_1__/* .DOCKER_CONFIG */ .e6.claudeConfigMount}`);
@@ -44419,7 +44432,7 @@ function buildDockerClaudeCodeCommand(githubToken, prompt) {
     let claudeCommand = "source /opt/sith/nix/nix-scripts/setup.sh && cd /workspace && /root/.npm-global/bin/claude";
     if (prompt) {
         const escapedPrompt = prompt.replace(/'/g, "'\\''");
-        claudeCommand += ` -p '${escapedPrompt}'`;
+        claudeCommand += ` '${escapedPrompt}'`;
     }
     args.push(claudeCommand);
     return args;

package/dist/utils/dockerArgs.d.ts

@@ -1,4 +1,4 @@
-export declare function buildDockerShellCommand(githubToken: string): string[];
-export declare function buildDockerOpencodeCommand(githubToken: string, prompt?: string): string[];
-export declare function buildDockerClaudeCodeCommand(githubToken: string, prompt?: string): string[];
+export declare function buildDockerShellCommand(githubToken: string, claudeOauthToken?: string): string[];
+export declare function buildDockerOpencodeCommand(githubToken: string, prompt?: string, claudeOauthToken?: string): string[];
+export declare function buildDockerClaudeCodeCommand(githubToken: string, prompt?: string, claudeOauthToken?: string): string[];
 //# sourceMappingURL=dockerArgs.d.ts.map

package/dist/utils/dockerArgs.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dockerArgs.d.ts","sourceRoot":"","sources":["file:///home/runner/work/sith/sith/src/utils/dockerArgs.ts"],"names":[],"mappings":"AASA,wBAAgB,uBAAuB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,EAAE,CAkBrE;AAED,wBAAgB,0BAA0B,CACzC,WAAW,EAAE,MAAM,EACnB,MAAM,CAAC,EAAE,MAAM,GACb,MAAM,EAAE,CA6BV;AAED,wBAAgB,4BAA4B,CAC3C,WAAW,EAAE,MAAM,EACnB,MAAM,CAAC,EAAE,MAAM,GACb,MAAM,EAAE,CAuCV"}
+{"version":3,"file":"dockerArgs.d.ts","sourceRoot":"","sources":["file:///home/runner/work/sith/sith/src/utils/dockerArgs.ts"],"names":[],"mappings":"AASA,wBAAgB,uBAAuB,CACtC,WAAW,EAAE,MAAM,EACnB,gBAAgB,CAAC,EAAE,MAAM,GACvB,MAAM,EAAE,CAwBV;AAED,wBAAgB,0BAA0B,CACzC,WAAW,EAAE,MAAM,EACnB,MAAM,CAAC,EAAE,MAAM,EACf,gBAAgB,CAAC,EAAE,MAAM,GACvB,MAAM,EAAE,CA6BV;AAED,wBAAgB,4BAA4B,CAC3C,WAAW,EAAE,MAAM,EACnB,MAAM,CAAC,EAAE,MAAM,EACf,gBAAgB,CAAC,EAAE,MAAM,GACvB,MAAM,EAAE,CA0CV"}

package/docker/Dockerfile

@@ -67,6 +67,13 @@ COPY --from=builder /root/.opencode /root/.opencode
 COPY --from=builder /root/.npm-global /root/.npm-global
 COPY --from=builder /root/.npmrc /root/.npmrc
 
+# Bake default Claude Code config (theme, permissions, caveman mode)
+COPY docker/claude-defaults/ /root/.claude/
+
+# Entrypoint script: generates .credentials.json from CLAUDE_CODE_OAUTH_TOKEN before nix-shell
+COPY docker/entrypoint.sh /opt/sith/entrypoint.sh
+RUN chmod +x /opt/sith/entrypoint.sh
+
 # Créer un utilisateur non-root pour l'exécution
 RUN mkdir -p /home/sith && \
     echo "sith:x:1000:1000:Sith User:/home/sith:/bin/sh" >> /etc/passwd && \
@@ -86,6 +93,8 @@ ENV OPENCODE_MODEL=github-copilot/claude-sonnet-4.5
 ENV OPENCODE_LOG_LEVEL=INFO
 ENV NODE_ENV=production
 ENV CLAUDE_CODE_OAUTH_TOKEN=""
+ENV IS_DEMO=1
+ENV CLAUDE_CONFIG_DIR=/root/.claude
 ENV PATH="/root/.opencode/bin:/root/.local/bin:/root/.npm-global/bin:${PATH}"
 ENV NPM_CONFIG_PREFIX=/root/.npm-global
 ENV HOME=/root
@@ -106,8 +115,8 @@ HEALTHCHECK --interval=30s --timeout=10s --start-period=5s --retries=3 \
 # Répertoire de travail pour les projets
 WORKDIR /workspace
 
-# Point d'entrée via nix-shell
-ENTRYPOINT ["nix-shell", "/opt/sith/nix/shell.nix", "--run"]
+# Point d'entrée: génère .credentials.json puis lance nix-shell
+ENTRYPOINT ["/opt/sith/entrypoint.sh"]
 
 # Commande par défaut
 CMD ["opencode --help"]

package/docker/claude-defaults/.claude.json

@@ -0,0 +1,10 @@
+{
+  "firstStartTime": "2025-01-01T00:00:00.000Z",
+  "opusProMigrationComplete": true,
+  "sonnet1m45MigrationComplete": true,
+  "seenNotifications": {},
+  "migrationVersion": 13,
+  "hasCompletedOnboarding": true,
+  "theme": "dark",
+  "userID": "069fb867041624d227d787be4b08e8c6c165f945083ffdcc91a933153e9bc18e"
+}

package/docker/claude-defaults/CLAUDE.md

@@ -0,0 +1,25 @@
+CAVEMAN MODE ACTIVE — level: ultra
+
+Respond terse like smart caveman. All technical substance stay. Only fluff die.
+
+## Persistence
+
+ACTIVE EVERY RESPONSE. No revert after many turns. No filler drift. Still active if unsure. Off only: "stop caveman" / "normal mode".
+
+## Rules
+
+Drop: articles (a/an/the), filler (just/really/basically/actually/simply), pleasantries (sure/certainly/of course/happy to), hedging. Fragments OK. Short synonyms (big not extensive, fix not "implement a solution for"). Technical terms exact. Code blocks unchanged. Errors quoted exact.
+
+Pattern: `[thing] [action] [reason]. [next step].`
+
+## Ultra level
+
+Abbreviate (DB/auth/config/req/res/fn/impl), strip conjunctions, arrows for causality (X → Y), one word when one word enough.
+
+## Auto-Clarity
+
+Drop caveman for: security warnings, irreversible action confirmations, multi-step sequences where fragment order risks misread. Resume caveman after clear part done.
+
+## Boundaries
+
+Code/commits/PRs: write normal. "stop caveman" or "normal mode": revert.

package/docker/claude-defaults/settings.json

@@ -0,0 +1,10 @@
+{
+  "theme": "dark",
+  "verbose": true,
+  "dangerouslySkipPermissions": true,
+  "skipDangerousModePermissionPrompt": true,
+  "hasCompletedOnboarding": true,
+  "permissions": {
+    "allow": ["Bash(*)", "Read(*)", "Write(*)", "Edit(*)", "WebFetch(*)", "WebSearch(*)", "Agent(*)"]
+  }
+}

package/docker/entrypoint.sh

@@ -0,0 +1,10 @@
+#!/bin/sh
+# Generate .credentials.json from CLAUDE_CODE_OAUTH_TOKEN if present and not already authenticated
+if [ -n "$CLAUDE_CODE_OAUTH_TOKEN" ] && [ ! -f /root/.claude/.credentials.json ]; then
+    mkdir -p /root/.claude
+    printf '{"claudeAiOauth":{"accessToken":"%s","expiresAt":4102444800000}}\n' "$CLAUDE_CODE_OAUTH_TOKEN" \
+        > /root/.claude/.credentials.json
+    chmod 600 /root/.claude/.credentials.json
+fi
+
+exec nix-shell /opt/sith/nix/shell.nix --run "$@"

package/docker/nix/nix-scripts/02-env-vars.sh

@@ -5,6 +5,15 @@ export OPENCODE_MODEL="${OPENCODE_MODEL:-github-copilot/claude-sonnet-4.5}"
 export OPENCODE_LOG_LEVEL="${OPENCODE_LOG_LEVEL:-INFO}"
 export NODE_ENV="${NODE_ENV:-production}"
 export CLAUDE_CODE_OAUTH_TOKEN="${CLAUDE_CODE_OAUTH_TOKEN:-}"
+export IS_DEMO="${IS_DEMO:-1}"
+
+# Generate .credentials.json from token so interactive claude skips login wizard
+if [ -n "$CLAUDE_CODE_OAUTH_TOKEN" ] && [ ! -f /root/.claude/.credentials.json ]; then
+    mkdir -p /root/.claude
+    printf '{"claudeAiOauth":{"accessToken":"%s","expiresAt":4102444800000}}\n' "$CLAUDE_CODE_OAUTH_TOKEN" \
+        > /root/.claude/.credentials.json
+    chmod 600 /root/.claude/.credentials.json
+fi
 
 # Chemins personnalisés
 export PATH="/root/.opencode/bin:$PATH"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@m14i/sith",
-  "version": "1.19.0",
+  "version": "1.21.0",
   "description": "Turn your context to the dark side. Standardize and share your OpenCode setup with a fully dockerized environment, designed for seamless collaboration and CI integration.",
   "type": "module",
   "repository": {