aether-code 0.17.0 → 0.18.0

package/bin/aether-code.js

@@ -26,7 +26,7 @@ import {
 import readline from "node:readline";
 import { c, errorLine, divider } from "../src/render.js";
 
-const VERSION = "0.17.0";
+const VERSION = "0.18.0";
 
 /**
  * Try to start MCP servers from ~/.aether/mcp.json. Returns a started
@@ -84,10 +84,11 @@ ${c.bold("EXAMPLES")}
   aether --cwd ./my-project "fix the failing tests"
 
 ${c.bold("FLAGS")}
-  --yes              Auto-approve all writes and shell commands. Use with care.
+  --review           Confirm (y/N) before each write + shell command.
+                     Default is auto-approve (skip-permissions).
+  --sandbox          Restrict file access to --cwd. Default is full access.
   --cwd <path>       Working directory for the agent (default: current dir).
   --max-turns <n>    Maximum turns before stopping (default: 25).
-  --unsafe-paths     Allow the agent to read/write outside cwd.
   --help, -h         Show this help.
   --version, -v      Print version.
 
@@ -96,9 +97,10 @@ ${c.bold("CONFIG")}
   Get a key at ${c.blue("https://trynoguard.com/account")}.
 
 ${c.bold("SAFETY")}
-  - File writes show a unified diff and require y/N confirmation by default.
-  - Shell commands show what's about to run and require y/N confirmation.
-  - Paths are clamped to ${c.cyan("--cwd")} (override with ${c.cyan("--unsafe-paths")}).
+  - By DEFAULT aether runs in skip-permissions mode (like Claude's
+    --dangerously-skip-permissions): it auto-approves file writes + shell
+    commands and can access your whole filesystem, so it just builds.
+  - Use ${c.cyan("--review")} to approve each action, ${c.cyan("--sandbox")} to clamp paths to --cwd.
   - Each shell command has a 2-minute hard timeout.
 
 ${c.gray(`v${VERSION}`)}
@@ -143,8 +145,12 @@ async function main() {
   }
 
   const cwd = args.flags.cwd ? path.resolve(args.flags.cwd) : process.cwd();
-  const autoYes = !!args.flags.yes;
-  const unsafePaths = !!args.flags.unsafePaths;
+  // Skip-permissions by DEFAULT (like `claude --dangerously-skip-permissions`):
+  // auto-approve writes/shell and don't sandbox file paths, so the agent can
+  // just build. Opt back in with --review (y/N before each action) and
+  // --sandbox (clamp file access to --cwd).
+  const autoYes = !args.flags.review;
+  const unsafePaths = !args.flags.sandbox;
   const maxTurns = Number.isInteger(args.flags.maxTurns) ? args.flags.maxTurns : 25;
 
   // Subcommand routing — these shadow the "task as positional arg" mode
@@ -177,7 +183,7 @@ async function main() {
   if (!prompt) {
     if (cwd !== process.cwd()) process.chdir(cwd);
     const mcpManager = await bootMcp();
-    await runRepl({ cwd, autoYes, maxTurns, mcpManager });
+    await runRepl({ cwd, autoYes, unsafePaths, maxTurns, mcpManager });
     return;
   }
 
@@ -189,7 +195,8 @@ async function main() {
   }
 
   console.log(divider());
-  console.log(c.magenta(c.bold("aether-code")) + c.gray(` · cwd ${cwd}${autoYes ? " · auto-yes" : ""}${unsafePaths ? " · unsafe-paths" : ""}`));
+  const modeLabel = autoYes && unsafePaths ? " · skip-permissions" : `${autoYes ? " · auto-yes" : " · review"}${unsafePaths ? "" : " · sandboxed"}`;
+  console.log(c.magenta(c.bold("aether-code")) + c.gray(` · cwd ${cwd}${modeLabel}`));
   console.log(c.gray(`task: `) + prompt);
   console.log(divider());
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aether-code",
-  "version": "0.17.0",
+  "version": "0.18.0",
   "description": "Uncensored AI coding agent for your terminal — Claude Code alternative with MCP support. Reads code, writes files, runs commands. Drives IDA Pro, Roblox Studio, Wireshark, Blender, and any MCP server. No refusal layer.",
   "homepage": "https://trynoguard.com",
   "repository": {

package/src/agent.js

@@ -2,6 +2,8 @@
 // in real-time, executes any tool calls, loops until the model returns no
 // tool calls (task done) or max-turns is reached.
 
+import os from "node:os";
+import path from "node:path";
 import { agentTurnStream, AetherError } from "./api.js";
 import { TOOL_DEFINITIONS, executeTool } from "./tools.js";
 import { unnamespaceToolName } from "./mcp.js";
@@ -10,6 +12,26 @@ import { c, divider, turn, toolLabel, toolSummary, makeTokenStripper, errorLine
 
 const DEFAULT_MAX_TURNS = 25;
 
+// Environment block prepended to the first user message so the model can
+// resolve named locations to real absolute paths.
+function envContext(cwd) {
+  const home = os.homedir();
+  const desktop = path.join(home, "Desktop");
+  const documents = path.join(home, "Documents");
+  return (
+    `[environment]\n` +
+    `os: ${process.platform}\n` +
+    `cwd: ${cwd}\n` +
+    `home: ${home}\n` +
+    `desktop: ${desktop}\n` +
+    `documents: ${documents}\n` +
+    `When the user names a location ("my desktop", "home", "documents"), write to ` +
+    `the matching ABSOLUTE path above (e.g. desktop -> ${desktop}). Otherwise ` +
+    `work under the cwd. Use absolute paths when a specific location is named.\n` +
+    `[/environment]\n\n`
+  );
+}
+
 export async function runAgent({
   initialPrompt,
   priorMessages,
@@ -43,9 +65,14 @@ export async function runAgent({
   const referencedPaths = [];
   // Two callers: one-shot (initialPrompt only, fresh conversation) and REPL
   // (priorMessages + initialPrompt to continue an ongoing chat).
+  // On the FIRST message of a session, prepend an environment block so the
+  // model knows real absolute paths (cwd / home / desktop). Without it, "build
+  // X on my desktop" became `mkdir X` in whatever dir aether was launched from
+  // (e.g. C:\WINDOWS\system32). Only prepended once — later turns carry it in
+  // history.
   const messages = priorMessages
     ? [...priorMessages, { role: "user", content: initialPrompt }]
-    : [{ role: "user", content: initialPrompt }];
+    : [{ role: "user", content: envContext(cwd) + initialPrompt }];
   let totalCredits = 0;
   let totalIn = 0;
   let totalOut = 0;

package/src/repl.js

@@ -17,7 +17,7 @@ import { c, errorLine } from "./render.js";
 import { checkForUpdate } from "./update-check.js";
 import { promptBoxed, EXIT_SIGNAL } from "./ink-input.js";
 
-const VERSION = "0.17.0";
+const VERSION = "0.18.0";
 const MODEL_NAME = "Aether Core";
 
 const SHORTCUTS = `
@@ -34,10 +34,11 @@ ${c.gray("Anything else is sent to the agent as your next message.")}
 ${c.gray("Conversation history is kept across messages until you /clear.")}
 `;
 
-export async function runRepl({ cwd: initialCwd, autoYes: initialAutoYes, maxTurns: initialMaxTurns, mcpManager = null }) {
+export async function runRepl({ cwd: initialCwd, autoYes: initialAutoYes, unsafePaths: initialUnsafePaths, maxTurns: initialMaxTurns, mcpManager = null }) {
   const state = {
     cwd: initialCwd,
     autoYes: !!initialAutoYes,
+    unsafePaths: !!initialUnsafePaths,
     maxTurns: initialMaxTurns ?? 25,
     messages: [], // accumulates across turns
     balance: null,
@@ -170,6 +171,7 @@ export async function runRepl({ cwd: initialCwd, autoYes: initialAutoYes, maxTur
       priorMessages: state.messages.length > 0 ? state.messages : undefined,
       cwd: state.cwd,
       autoYes: state.autoYes,
+      unsafePaths: state.unsafePaths,
       maxTurns: state.maxTurns,
       mcpManager,
     });
@@ -275,7 +277,7 @@ function printBanner(state) {
   // Brand-coloured rules top + bottom; content is indented with no right
   // border, so nothing can misalign regardless of terminal font/width.
   const rule = c.magenta("─".repeat(W));
-  const mode = state.autoYes ? "auto-yes" : "review mode";
+  const mode = state.autoYes ? (state.unsafePaths ? "skip-permissions" : "auto-yes") : "review mode";
 
   console.log("");
   console.log(rule);

package/src/tools.js

@@ -789,8 +789,8 @@ function renderTodos(todos) {
       t.status === "completed"
         ? c.green("✓")
         : t.status === "in_progress"
-          ? c.yellow("▶")
-          : c.dim("○");
+          ? c.yellow("→")
+          : c.dim("·");
     const text =
       t.status === "completed"
         ? c.dim(t.content)