@metaphi-ai/hum 0.1.7 → 0.1.8

package/bin/hum.js

@@ -2,7 +2,8 @@
 // `hum` from npm: the Ink front-end, which starts Hum's engine (Python, installed by postinstall
 // via uv) and talks to it over localhost. Everything the person sees is here; everything the
 // session records is in the engine.
-import { fileURLToPath } from 'node:url';
+import { fileURLToPath, pathToFileURL } from 'node:url';
 import path from 'node:path';
 const here = path.dirname(fileURLToPath(import.meta.url));
-await import(path.join(here, '..', 'dist', 'cli.mjs'));
+// a URL, not a path: on Windows `C:\…` is not something the ESM loader will import
+await import(pathToFileURL(path.join(here, '..', 'dist', 'cli.mjs')).href);

package/dist/cli.mjs

@@ -83738,7 +83738,7 @@ var COMMANDS = [
   { name: "/compact", desc: "summarise and restart the context now" },
   { name: "/model", desc: "switch the model for this session (/model <name>)" },
   { name: "/cost", desc: "tokens and cost so far" },
-  { name: "/approve", desc: "approvals on|off \u2014 whether changes and commands wait for you first" },
+  { name: "/approve", desc: "approvals on|off \u2014 whether every change and command waits for you first (leaving the sandbox always asks)" },
   { name: "/continue", desc: "after a pause: let the agent carry on" },
   { name: "/image", desc: "attach an image file to your next message (/image <path>); ctrl+v pastes a screenshot" },
   { name: "/tools", desc: "what is mounted" },
@@ -83747,7 +83747,7 @@ var COMMANDS = [
   { name: "/quit", desc: "leave; the session keeps running (hum brings you back)" },
   { name: "/stop", desc: "end this session's engine (the record is saved)" }
 ];
-var HELP = "!cmd runs a command as you \xB7 esc interrupts the model (what it had is kept) \xB7 type while it works to steer \xB7 edit files in your editor any time (recorded as your turn) \xB7 ctrl+o shows the full output of the last tool result \xB7 ctrl+v pastes a screenshot from the clipboard \xB7 @path.png or /image <path> attaches an image file \xB7 /approve makes changes and commands wait for you (enter approves, a typed reason rejects) \xB7 /resume picks a past session (a running one attaches) \xB7 /compact restarts the context from a summary \xB7 ctrl+c twice leaves and the session keeps running (`hum` brings you back) \xB7 /stop ends it";
+var HELP = "!cmd runs a command as you \xB7 esc interrupts the model (what it had is kept) \xB7 type while it works to steer \xB7 edit files in your editor any time (recorded as your turn) \xB7 ctrl+o shows the full output of the last tool result \xB7 ctrl+v pastes a screenshot from the clipboard \xB7 @path.png or /image <path> attaches an image file \xB7 commands run in a sandbox (writes in the working directory, no network); leaving it asks you first (enter approves, a typed reason rejects) \xB7 /approve makes every change and command wait for you \xB7 /resume picks a past session (a running one attaches) \xB7 /compact restarts the context from a summary \xB7 ctrl+c twice leaves and the session keeps running (`hum` brings you back) \xB7 /stop ends it";
 var DIFF_TAIL_LINES = 20;
 var OUTPUT_MAX_LINES = 200;
 var ERR_TAIL_LINES = 5;
@@ -83860,7 +83860,7 @@ function App2({ engine: engine2, task, resume, images = [] }) {
         const state = ev.state && ev.state !== "new" && ev.state !== "idle" ? ` \xB7 ${ev.state}` : "";
         append({
           kind: "banner",
-          text: `${ev.model}${ev.user ? ` \xB7 ${ev.user}` : ""} \xB7 ${homeRel(ev.cwd)} \xB7 tools: ${ev.tools.join(", ")}${state}`,
+          text: `${ev.model}${ev.user ? ` \xB7 ${ev.user}` : ""} \xB7 ${homeRel(ev.cwd)} \xB7 tools: ${ev.tools.join(", ")}${ev.sandbox ? ` \xB7 sandbox: ${ev.sandbox}` : ""}${state}`,
           instruction: ev.session ? ev.instruction : null
         });
         preHello.current.forEach((it) => append(it));
@@ -84429,7 +84429,9 @@ function App2({ engine: engine2, task, resume, images = [] }) {
     proposal && /* @__PURE__ */ (0, import_jsx_runtime2.jsxs)(Box_default, { flexDirection: "column", borderStyle: "round", borderColor: ACCENT, paddingX: 1, marginTop: 1, children: [
       /* @__PURE__ */ (0, import_jsx_runtime2.jsxs)(Text, { children: [
         /* @__PURE__ */ (0, import_jsx_runtime2.jsx)(Text, { color: ACCENT, bold: true, children: "? " }),
-        "hum wants to ",
+        "hum wants to",
+        proposal.calls.some((c) => c.escape) ? /* @__PURE__ */ (0, import_jsx_runtime2.jsx)(Text, { color: "yellow", children: " leave the sandbox" }) : null,
+        " ",
         /* @__PURE__ */ (0, import_jsx_runtime2.jsx)(Text, { dimColor: true, children: "\xB7 enter approves \xB7 type a reason to reject \xB7 esc stops" })
       ] }),
       proposal.content ? /* @__PURE__ */ (0, import_jsx_runtime2.jsxs)(Text, { dimColor: true, children: [
@@ -84442,10 +84444,14 @@ function App2({ engine: engine2, task, resume, images = [] }) {
           c.desc,
           c.lines != null ? /* @__PURE__ */ (0, import_jsx_runtime2.jsx)(Text, { dimColor: true, children: `  (${c.lines} lines)` }) : null
         ] }),
-        c.name === "bash" || c.name === "powershell" ? /* @__PURE__ */ (0, import_jsx_runtime2.jsxs)(Text, { color: "cyan", children: [
+        (c.name === "bash" || c.name === "powershell") && c.desc !== `$ ${String(c.args?.command || "")}` ? /* @__PURE__ */ (0, import_jsx_runtime2.jsxs)(Text, { color: "cyan", children: [
           "    $ ",
           String(c.args?.command || "").split("\n").join(" \u23CE ").slice(0, 300)
         ] }) : null,
+        c.escape ? /* @__PURE__ */ (0, import_jsx_runtime2.jsxs)(Text, { color: "yellow", children: [
+          "    outside the sandbox \u2014 ",
+          String(c.reason || "").slice(0, Math.max(20, width - 32))
+        ] }) : null,
         c.diff ? c.diff.split("\n").slice(0, DIFF_TAIL_LINES).map((l, i) => /* @__PURE__ */ (0, import_jsx_runtime2.jsxs)(
           Text,
           {
@@ -84531,10 +84537,11 @@ var EngineError = class extends Error {
 };
 var ENGINE_CANDIDATES = [
   process.env.HUM_ENGINE,
-  // explicit: a command to run
+  // explicit: a command to run (e.g. `python -m hum.cli engine`)
   "hum-engine",
   // uv tool install hum-cli
-  `${process.env.HOME || ""}/.local/bin/hum-engine`
+  path2.join(os4.homedir(), ".local", "bin", process.platform === "win32" ? "hum-engine.exe" : "hum-engine")
+  // uv's bin dir, off PATH
 ];
 function spawnEngine(cwd2, { task = null, images = [], resume = null } = {}) {
   return new Promise((resolve, reject) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@metaphi-ai/hum",
-  "version": "0.1.7",
+  "version": "0.1.8",
   "description": "Hum (हम): a self-improving coding agent for your terminal.",
   "license": "UNLICENSED",
   "type": "module",