@thegitai/cli 1.0.0-preview.5 → 1.0.0-preview.50

package/dist/src/edit-journal.js

@@ -1,6 +1,6 @@
 import { execFileSync } from 'node:child_process';
 import { createHash } from 'node:crypto';
-import { existsSync, lstatSync, readFileSync } from 'node:fs';
+import { closeSync, existsSync, lstatSync, openSync, readFileSync, readSync, } from 'node:fs';
 import path from 'node:path';
 import { BINARY_ARTIFACT_EXTENSIONS } from './artifact-policy.js';
 import { resolveProjectPath } from './patcher.js';
@@ -30,13 +30,33 @@ function snapshotEncoding(filePath, content) {
         return 'base64';
     return 'utf8';
 }
+const MAX_SNAPSHOT_READ_BYTES = MAX_STORED_CONTENT_CHARS;
+const SNAPSHOT_HASH_CHUNK_BYTES = 1024 * 1024;
+function hashFileInChunks(absPath) {
+    const hash = createHash('sha256');
+    const chunk = Buffer.allocUnsafe(SNAPSHOT_HASH_CHUNK_BYTES);
+    const fd = openSync(absPath, 'r');
+    try {
+        for (;;) {
+            const read = readSync(fd, chunk, 0, chunk.length, null);
+            if (read <= 0)
+                break;
+            hash.update(chunk.subarray(0, read));
+        }
+    }
+    finally {
+        closeSync(fd);
+    }
+    return `sha256:${hash.digest('hex')}`;
+}
 export function readFileEditSnapshot(rootDir, filePath) {
     try {
         const absPath = resolveProjectPath(rootDir, filePath);
         if (!existsSync(absPath)) {
             return { exists: false, content: null, contentEncoding: 'utf8', hash: null };
         }
-        if (lstatSync(absPath).isSymbolicLink()) {
+        const stat = lstatSync(absPath);
+        if (stat.isSymbolicLink()) {
             return {
                 exists: true,
                 content: null,
@@ -45,6 +65,17 @@ export function readFileEditSnapshot(rootDir, filePath) {
                 error: `Refusing to snapshot symbolic link: ${filePath}`,
             };
         }
+        if (stat.isFile() && stat.size > MAX_SNAPSHOT_READ_BYTES) {
+            return {
+                exists: true,
+                content: null,
+                contentEncoding: BINARY_ARTIFACT_EXTENSIONS.has(path.extname(filePath).toLowerCase())
+                    ? 'base64'
+                    : 'utf8',
+                hash: hashFileInChunks(absPath),
+                error: `File is too large to snapshot (${stat.size} bytes).`,
+            };
+        }
         const content = readFileSync(absPath);
         const encoding = snapshotEncoding(filePath, content);
         return {

package/dist/src/executor.js

@@ -1,6 +1,6 @@
 import chalk from './colors.js';
 import { execFileSync, spawn } from 'child_process';
-import { existsSync, statSync } from 'fs';
+import { accessSync, constants as fsConstants, existsSync, statSync } from 'fs';
 import { createRequire } from 'node:module';
 import os from 'os';
 import path from 'path';
@@ -596,7 +596,7 @@ export function commandUsesSudo(command) {
 }
 export function sudoPromptFromTail(text) {
     const tail = text.slice(-1000).replace(/\x1b\[[0-9;?]*[A-Za-z]/g, '');
-    const match = tail.match(/(?:\[sudo\][^\r\n]*password[^\r\n]*: ?|sudo[^\r\n]*password[^\r\n]*: ?|password[^\r\n]*: ?)$/i);
+    const match = tail.match(/(?:\[sudo\][^\r\n]*password[^\r\n]*: ?|\[?sudo[^\r\n]*password[^\r\n]*: ?|password[^\r\n]*: ?)$/i);
     return match?.[0] ?? null;
 }
 function isSudoPromptLine(text) {
@@ -637,6 +637,28 @@ export function buildCommandEnv(cwd) {
         THEGITAI_SCRATCH_DIR: ensureSessionScratchDir(),
     };
 }
+let cachedCommandShell;
+function findBashPath() {
+    const fromPath = (process.env.PATH ?? '')
+        .split(path.delimiter)
+        .filter(Boolean)
+        .map((dir) => path.join(dir, 'bash'));
+    for (const candidate of [...fromPath, '/bin/bash', '/usr/bin/bash']) {
+        try {
+            accessSync(candidate, fsConstants.X_OK);
+            return candidate;
+        }
+        catch { }
+    }
+    return null;
+}
+export function resolveCommandShell() {
+    if (cachedCommandShell !== undefined)
+        return cachedCommandShell;
+    cachedCommandShell =
+        process.platform === 'win32' ? true : (findBashPath() ?? true);
+    return cachedCommandShell;
+}
 function sanitizePtyOutput(command, output, cwd, secrets) {
     return sanitizeCommandText(command, stripSudoPromptText(redactSecrets(output, secrets)), cwd);
 }
@@ -822,7 +844,7 @@ export async function runCommand(command, cwd, { requestSudoPassword, timeout, }
         let killTimer = null;
         const child = spawn(command, {
             cwd,
-            shell: true,
+            shell: resolveCommandShell(),
             detached: process.platform !== 'win32',
             stdio: ['pipe', 'pipe', 'pipe'],
             env: buildCommandEnv(cwd),

package/dist/src/help-text.js

@@ -14,7 +14,7 @@ const PASTE_SHORTCUT = pasteShortcutForPlatform();
 const HELP_MARKDOWN = [
     '# TheGitAI',
     '',
-    'Interactive terminal coding agent. Local repo indexing, file edits, and',
+    'Interactive terminal coding agent. Local repo search, file edits, and',
     'shell commands run on your machine. Model inference and server-executed',
     'tools run on the server.',
     '',
@@ -26,8 +26,12 @@ const HELP_MARKDOWN = [
     '',
     '## Auth',
     '',
-    '- `ai login` — sign in to TheGitAI (opens your browser to the website)',
-    '- `ai login --no-browser` — print a URL and paste the code (for SSH/headless)',
+    '- `ai` — signs you in if you are not already, then starts a session',
+    '- `ai login` — the same thing; kept for muscle memory',
+    '- Signing in opens your browser. When it cannot open one — over SSH, in a',
+    '  container, or when the browser you want is on another device — the same',
+    '  screen prints a URL you can open anywhere and takes the code that page',
+    '  gives you back. There is no mode to pick and no flag to remember.',
     '- `ai whoami` — show the signed-in account',
     '- `ai --usage` — show account usage percentage and reset times',
     '- `ai logout` — sign out',
@@ -39,25 +43,60 @@ const HELP_MARKDOWN = [
     '- Sessions are stored locally and can be listed or resumed in the same repo.',
     '  Continuing one requires the TheGitAI account used for that session.',
     '',
+    '## Updates',
+    '',
+    '- On start, `ai` says when a newer release is published and offers to install',
+    '  it. TheGitAI works best on the latest version, and an older CLI may not',
+    '  work optimally.',
+    '- **Update now** is selected when the offer appears, so **Enter** takes the',
+    '  update; **↑/↓** moves to **Skip**, and the number keys still jump straight',
+    '  to a row. The CLI installs the update and asks you to start `ai` again, so',
+    '  the whole session runs one version.',
+    '- Skipping starts the session on the version you have and asks again next',
+    '  time. A release cannot be silenced for good — that is what keeps a broken',
+    '  combination from lasting.',
+    '- **Ctrl+C** at the prompt quits without installing anything and without',
+    '  starting the session.',
+    '',
     '## Options',
     '',
-    '- `-y, --yes` — start in Auto-Accept mode',
+    '- `-y, --yes` — start in Bypass all permissions mode',
     '- `-h, --help` — show this help',
     '- `-v, --version` — print the version and exit',
     '',
     '## Modes',
     '',
-    '- Default — asks before shell commands and file edits.',
-    '- Auto-Accept — approves shell commands and file edits for the session.',
+    '- Default · Ask for Approval — asks before creating, editing or deleting',
+    '  files, before running commands, and before touching a website. Each answer',
+    '  can be remembered for the rest of the session, and once it is, Default',
+    '  stops asking for that action; see Safety & approvals.',
+    '- Bypass all permissions — approves every command, file edit, deletion and',
+    '  browser action for the rest of the session, without asking. Shown in red',
+    '  in the footer. Blocked commands stay blocked.',
     '- Plan — read-only; the agent can inspect, ask typed questions, and plan,',
     '  with file-reading shell commands only. It will not edit files or run tests,',
     '  builds, diagnostics, package managers, project code, or network probes.',
-    '- In the TUI, Shift+Tab cycles modes, mouse drag copies transcript/footer text, left-click opens rendered links, right-click copies rendered links or pastes in the sticky composer/footer when no selection is active, double-click copies a word, and triple-click copies a row.',
+    '- In the TUI, press **?** on an empty composer for the keyboard-and-mouse panel. Shift+Tab cycles Default → Bypass → Plan (refused while the agent is working), mouse drag copies transcript/footer text, left-click opens rendered links, right-click copies rendered links or pastes in the sticky composer/footer when no selection is active, double-click copies a word, and triple-click copies a row.',
     '',
     '## Keys & clipboard',
     '',
-    '- **Enter** sends • **Shift+Tab** cycles modes • **Esc** cancels the turn •',
-    '  **Ctrl+C** quits. These are the same on macOS, Linux, and Windows.',
+    '- **?** on an empty composer opens the keyboard-and-mouse panel.',
+    '- **Enter** sends • **Shift+Tab** cycles Default → Bypass → Plan (only',
+    '  between turns) • **Esc** cancels the turn •',
+    '  **Ctrl+C** clears the composer or the queued message, and quits once there',
+    '  is nothing left to clear. These are the same on macOS, Linux, and Windows.',
+    '- **While the agent is working**, Enter queues your message and locks the',
+    '  composer. Press **Enter** again to send it into the running turn: the agent',
+    '  picks it up at its next step instead of waiting for the turn to finish, and',
+    '  the Your messages panel tracks it from queued to delivered. **↑** brings it',
+    '  back for editing and **Esc**/**Ctrl+C** discards it; both unlock the',
+    '  composer for the next message. **Ctrl+V** pastes a screenshot onto the',
+    '  queued message, and it is delivered into the running turn with the text.',
+    '- **Ctrl+G** turns desktop notifications on or off. One is raised when a turn',
+    '  ends and when a permission prompt or a question is waiting for you, but',
+    '  only while the terminal is in the background — if you are looking at the',
+    '  session you are told nothing. Coming back clears it. The choice is',
+    '  remembered between sessions.',
     `- **Paste** into the composer with your terminal's paste shortcut (\`${PASTE_SHORTCUT}\``,
     '  on this system) or by right-clicking the composer.',
     '- **Copy** from the transcript by dragging to select; double-click copies a',
@@ -66,26 +105,68 @@ const HELP_MARKDOWN = [
         ? ['- On Mac laptops without dedicated keys, **Home/End** are `Fn+←` / `Fn+→`.']
         : []),
     '',
+    '## Questions',
+    '',
+    '- The agent can pause a turn to ask up to four questions in one form.',
+    '  **↑/↓** moves, the option number or **Enter** chooses, **←/→** moves',
+    '  between questions, and the last question has a **Submit answers** row.',
+    '- Only the option you are on shows its description, so the whole form fits',
+    '  on screen. Move to an option to read what it means.',
+    '- **Something else / add details** is the numbered final option: focus it',
+    '  and type. **Enter** commits the note and moves to the next question, or to',
+    '  Submit on the last one — it never submits the form for you.',
+    '- **Esc** closes an open note first, and otherwise cancels the form.',
+    '',
     '## Chat commands',
     '',
+    '- Type `/` to open the command picker. It ranks what you type, so a typo or',
+    '  a stray plural (`/moddel`, `/models`) still finds the command, and a word',
+    '  from the description does too (`/bug` finds `/report`). It shows the five',
+    '  best matches and counts the rest; **↑/↓** chooses, **Tab** or **Enter**',
+    '  accepts, **Esc** closes it.',
     '- `/help` — show this help',
     '- `/about` — show version and platform info',
+    '- `/report` — file a bug privately through the TheGitAI website in your',
+    '  browser (sign in with your existing account)',
     '- `/usage` — show account usage percentage and reset times',
     '- `/model` — list supported models and pick one',
     '- `/model <id>` — switch the active model without clearing history',
     '- `/resume` — resume a saved session for this repo',
     '- `/jobs` — manage long-running commands like dev servers and watchers:',
     '  browse them, press Enter to expand one and read its output, k to stop it',
+    '- Ctrl+B — open the same jobs picker, and the only way in while the agent',
+    '  is working; press it again or Esc to close without touching the turn',
     '- `/jobs output <id>` — print one job\'s full captured output',
     '- `/jobs kill <id>` — stop one background job',
-    '- `/clear` — clear the current conversation history',
+    '- `/notify` — turn desktop notifications on or off (same as Ctrl+G)',
+    '- `/new` — start a new conversation; this session remains saved',
+    '- `/logout` — sign out and quit',
     '- `/exit` — quit the session',
     '',
     '## Safety & approvals',
     '',
-    '- TheGitAI asks before running shell commands or applying file edits.',
-    '- At each prompt: **y** approves once, **a** approves the rest of the',
-    '  session, **n** denies.',
+    '- In Default mode TheGitAI asks before it creates a file, edits an existing',
+    '  file, deletes a file, or runs a command. These are four separate',
+    '  permissions: allowing edits does not allow deletions, and allowing file',
+    '  changes does not allow commands.',
+    '- At each prompt: **↑/↓** moves between choices, **Enter** confirms the',
+    '  highlighted one, and **Esc** denies. Deny is selected by default.',
+    '  Single-letter shortcuts were removed on purpose: a prompt can appear',
+    '  while you are typing, and a stray letter must never approve anything.',
+    '- Every prompt offers Approve once, an "Always allow" for that kind of',
+    '  action, and Deny. A command also offers to remember just its prefix — for',
+    '  example approving `npm test -- --watch=false` can allow `npm test`.',
+    '- A prefix is only offered when the command shows a plain verb, as in',
+    '  `npm test` or `git status`. Commands with no verb (`ls -la`), interpreters',
+    '  and wrappers (`bash -c`, `python -c`, `env`, `timeout`, `make`), and',
+    '  destructive or network binaries (`rm`, `sudo`, `curl`) are never offered',
+    '  one — a bare binary grant would mean "anything this program can do".',
+    '  `npm run` must name its script, so the grant is `npm run build`.',
+    '- A remembered prefix never covers a command that chains, pipes, redirects,',
+    '  or substitutes, so allowing `npm test` can never green-light',
+    '  `npm test && rm -rf build`.',
+    '- Everything you allow lasts for the current session only and is forgotten',
+    '  when it ends. `/new` clears it immediately.',
     '- If an approved `sudo` command needs a password, the TUI shows the exact',
     '  command and keeps the password masked and local.',
     '- `-y` / `--yes` at startup auto-approves every shell command and file',
@@ -94,24 +175,34 @@ const HELP_MARKDOWN = [
     '  jobs after the same approval as any other command. Background output',
     '  stays quiet once the model has responded; the footer shows only a compact',
     '  shell-running indicator, `/jobs` lists, inspects, and kills jobs, and',
-    '  killed jobs disappear immediately. Every job is killed when the session',
-    '  ends.',
+    '  killed jobs disappear immediately. While a turn is running the indicator',
+    '  points at Ctrl+B instead, which opens the same picker without cancelling',
+    '  or interrupting the turn. Every job is killed when the session ends.',
     '- File and shell operations are confined to the target repo root.',
     '- Sensitive directories (`.git`, `node_modules`, build output) are',
-    '  never indexed.',
+    '  excluded from search and listing.',
     '',
     '## Troubleshooting',
     '',
-    '- "Not logged in" → run `ai login`.',
     '- Auth or permission errors → run `ai whoami` to confirm the signed-in',
     '  account.',
     '- Usage or quota errors → run `ai --usage`.',
-    '- Signed in with the wrong credentials → `ai logout`, then `ai login` with',
-    '  the account you intended to use.',
+    '- Signed in with the wrong account → `/logout` (or `ai logout`), then run',
+    '  `ai` and sign in as the account you intended to use.',
+    '- The browser did not open, or opened on the wrong machine → open the URL',
+    '  printed on the sign-in screen anywhere you like, choose "On another',
+    '  computer" on that page, and paste the code back into the terminal.',
     '- A local session was used with a different sign-in → sign in with the',
     '  account you used for that session or start a new session.',
-    '- For anything else, re-run the command and report the printed error',
-    '  message — there is no client-side debug mode by design.',
+    '- The connection drops mid-turn → nothing to do: the CLI reconnects to the',
+    '  same turn up to three times, ten seconds apart, without running anything',
+    '  twice. Esc stops it. If it cannot reconnect it says so; some actions may',
+    '  already have completed, and a queued message waits in the composer.',
+    '  If the service restarted mid-turn, the turn continues from the steps that',
+    '  had finished. Starting `ai` while the service is briefly unavailable waits',
+    '  the same way.',
+    '- For anything else, re-run the command and file the printed error',
+    '  message with `/report` — there is no client-side debug mode by design.',
 ].join('\n');
 export function formatAboutCard() {
     return [

package/dist/src/patcher.js

@@ -1,5 +1,5 @@
 import chalk from './colors.js';
-import { chmodSync, closeSync, constants, existsSync, fchmodSync, fstatSync, ftruncateSync, lstatSync, mkdirSync, openSync, readFileSync, realpathSync, unlinkSync, writeFileSync, } from 'fs';
+import { chmodSync, closeSync, constants, existsSync, fchmodSync, fstatSync, ftruncateSync, lstatSync, mkdirSync, openSync, readFileSync, readSync, realpathSync, unlinkSync, writeFileSync, } from 'fs';
 import path from 'path';
 import { createInterface } from 'readline';
 import { runCommand } from './executor.js';
@@ -271,22 +271,61 @@ export function writeProjectFileBuffer(rootDir, filePath, content) {
     }
     return { absPath, changed: true };
 }
+const MAX_DELETED_CONTENT_BYTES = 64 * 1024;
+const DELETED_BINARY_SNIFF_BYTES = 4096;
+function headHasNulByte(absPath) {
+    const chunk = Buffer.allocUnsafe(DELETED_BINARY_SNIFF_BYTES);
+    let fd = null;
+    try {
+        fd = openSync(absPath, 'r');
+        const read = readSync(fd, chunk, 0, chunk.length, 0);
+        return read > 0 && chunk.subarray(0, read).includes(0);
+    }
+    catch {
+        return false;
+    }
+    finally {
+        if (fd !== null)
+            closeSync(fd);
+    }
+}
 export function deleteProjectFile(rootDir, filePath) {
     const absPath = resolveProjectPath(rootDir, filePath);
     if (!existsSync(absPath)) {
         return { deleted: false, absPath };
     }
+    let bytes;
     let content;
+    let contentOmitted;
     try {
-        if (!lstatSync(absPath).isSymbolicLink()) {
-            content = readFileSync(absPath, 'utf-8');
+        const stat = lstatSync(absPath);
+        if (!stat.isSymbolicLink()) {
+            bytes = stat.size;
+            if (stat.size > MAX_DELETED_CONTENT_BYTES) {
+                contentOmitted = headHasNulByte(absPath) ? 'binary' : 'too_large';
+            }
+            else {
+                const buffer = readFileSync(absPath);
+                if (buffer.includes(0))
+                    contentOmitted = 'binary';
+                else
+                    content = buffer.toString('utf-8');
+            }
         }
     }
     catch {
+        bytes = undefined;
         content = undefined;
+        contentOmitted = undefined;
     }
     unlinkSync(absPath);
-    return { deleted: true, absPath, content };
+    return {
+        deleted: true,
+        absPath,
+        ...(bytes === undefined ? {} : { bytes }),
+        ...(content === undefined ? {} : { content }),
+        ...(contentOmitted === undefined ? {} : { contentOmitted }),
+    };
 }
 export function readProjectFile(rootDir, filePath) {
     const absPath = resolveProjectPath(rootDir, filePath);