aether-code 0.17.0 → 0.19.0

package/bin/aether-code.js

@@ -24,9 +24,9 @@ import {
   suggestSimilar,
 } from "../src/mcp-registry.js";
 import readline from "node:readline";
-import { c, errorLine, divider } from "../src/render.js";
+import { c, errorLine, divider, setTerminalTitle } from "../src/render.js";
 
-const VERSION = "0.17.0";
+const VERSION = "0.19.0";
 
 /**
  * Try to start MCP servers from ~/.aether/mcp.json. Returns a started
@@ -84,10 +84,11 @@ ${c.bold("EXAMPLES")}
   aether --cwd ./my-project "fix the failing tests"
 
 ${c.bold("FLAGS")}
-  --yes              Auto-approve all writes and shell commands. Use with care.
+  --review           Confirm (y/N) before each write + shell command.
+                     Default is auto-approve (skip-permissions).
+  --sandbox          Restrict file access to --cwd. Default is full access.
   --cwd <path>       Working directory for the agent (default: current dir).
   --max-turns <n>    Maximum turns before stopping (default: 25).
-  --unsafe-paths     Allow the agent to read/write outside cwd.
   --help, -h         Show this help.
   --version, -v      Print version.
 
@@ -96,9 +97,10 @@ ${c.bold("CONFIG")}
   Get a key at ${c.blue("https://trynoguard.com/account")}.
 
 ${c.bold("SAFETY")}
-  - File writes show a unified diff and require y/N confirmation by default.
-  - Shell commands show what's about to run and require y/N confirmation.
-  - Paths are clamped to ${c.cyan("--cwd")} (override with ${c.cyan("--unsafe-paths")}).
+  - By DEFAULT aether runs in skip-permissions mode (like Claude's
+    --dangerously-skip-permissions): it auto-approves file writes + shell
+    commands and can access your whole filesystem, so it just builds.
+  - Use ${c.cyan("--review")} to approve each action, ${c.cyan("--sandbox")} to clamp paths to --cwd.
   - Each shell command has a 2-minute hard timeout.
 
 ${c.gray(`v${VERSION}`)}
@@ -132,6 +134,7 @@ function die(msg, code = 1) {
 
 async function main() {
   const args = parseArgs(process.argv.slice(2));
+  setTerminalTitle("Aether");
 
   if (args.flags.help) {
     process.stdout.write(HELP);
@@ -143,8 +146,12 @@ async function main() {
   }
 
   const cwd = args.flags.cwd ? path.resolve(args.flags.cwd) : process.cwd();
-  const autoYes = !!args.flags.yes;
-  const unsafePaths = !!args.flags.unsafePaths;
+  // Skip-permissions by DEFAULT (like `claude --dangerously-skip-permissions`):
+  // auto-approve writes/shell and don't sandbox file paths, so the agent can
+  // just build. Opt back in with --review (y/N before each action) and
+  // --sandbox (clamp file access to --cwd).
+  const autoYes = !args.flags.review;
+  const unsafePaths = !args.flags.sandbox;
   const maxTurns = Number.isInteger(args.flags.maxTurns) ? args.flags.maxTurns : 25;
 
   // Subcommand routing — these shadow the "task as positional arg" mode
@@ -177,7 +184,7 @@ async function main() {
   if (!prompt) {
     if (cwd !== process.cwd()) process.chdir(cwd);
     const mcpManager = await bootMcp();
-    await runRepl({ cwd, autoYes, maxTurns, mcpManager });
+    await runRepl({ cwd, autoYes, unsafePaths, maxTurns, mcpManager });
     return;
   }
 
@@ -189,7 +196,8 @@ async function main() {
   }
 
   console.log(divider());
-  console.log(c.magenta(c.bold("aether-code")) + c.gray(` · cwd ${cwd}${autoYes ? " · auto-yes" : ""}${unsafePaths ? " · unsafe-paths" : ""}`));
+  const modeLabel = autoYes && unsafePaths ? " · skip-permissions" : `${autoYes ? " · auto-yes" : " · review"}${unsafePaths ? "" : " · sandboxed"}`;
+  console.log(c.magenta(c.bold("aether-code")) + c.gray(` · cwd ${cwd}${modeLabel}`));
   console.log(c.gray(`task: `) + prompt);
   console.log(divider());
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aether-code",
-  "version": "0.17.0",
+  "version": "0.19.0",
   "description": "Uncensored AI coding agent for your terminal — Claude Code alternative with MCP support. Reads code, writes files, runs commands. Drives IDA Pro, Roblox Studio, Wireshark, Blender, and any MCP server. No refusal layer.",
   "homepage": "https://trynoguard.com",
   "repository": {

package/src/agent.js

@@ -2,6 +2,8 @@
 // in real-time, executes any tool calls, loops until the model returns no
 // tool calls (task done) or max-turns is reached.
 
+import os from "node:os";
+import path from "node:path";
 import { agentTurnStream, AetherError } from "./api.js";
 import { TOOL_DEFINITIONS, executeTool } from "./tools.js";
 import { unnamespaceToolName } from "./mcp.js";
@@ -10,6 +12,26 @@ import { c, divider, turn, toolLabel, toolSummary, makeTokenStripper, errorLine
 
 const DEFAULT_MAX_TURNS = 25;
 
+// Environment block prepended to the first user message so the model can
+// resolve named locations to real absolute paths.
+function envContext(cwd) {
+  const home = os.homedir();
+  const desktop = path.join(home, "Desktop");
+  const documents = path.join(home, "Documents");
+  return (
+    `[environment]\n` +
+    `os: ${process.platform}\n` +
+    `cwd: ${cwd}\n` +
+    `home: ${home}\n` +
+    `desktop: ${desktop}\n` +
+    `documents: ${documents}\n` +
+    `When the user names a location ("my desktop", "home", "documents"), write to ` +
+    `the matching ABSOLUTE path above (e.g. desktop -> ${desktop}). Otherwise ` +
+    `work under the cwd. Use absolute paths when a specific location is named.\n` +
+    `[/environment]\n\n`
+  );
+}
+
 export async function runAgent({
   initialPrompt,
   priorMessages,
@@ -43,16 +65,22 @@ export async function runAgent({
   const referencedPaths = [];
   // Two callers: one-shot (initialPrompt only, fresh conversation) and REPL
   // (priorMessages + initialPrompt to continue an ongoing chat).
+  // On the FIRST message of a session, prepend an environment block so the
+  // model knows real absolute paths (cwd / home / desktop). Without it, "build
+  // X on my desktop" became `mkdir X` in whatever dir aether was launched from
+  // (e.g. C:\WINDOWS\system32). Only prepended once — later turns carry it in
+  // history.
   const messages = priorMessages
     ? [...priorMessages, { role: "user", content: initialPrompt }]
-    : [{ role: "user", content: initialPrompt }];
+    : [{ role: "user", content: envContext(cwd) + initialPrompt }];
   let totalCredits = 0;
   let totalIn = 0;
   let totalOut = 0;
   let lastBalance = null;
 
   for (let i = 0; i < maxTurns; i++) {
-    process.stdout.write("\n" + turn(i + 1) + "\n");
+    // A blank line separates steps (no noisy "turn N" headers).
+    process.stdout.write("\n");
 
     // Stream the assistant's response. Print text deltas as they arrive,
     // along with tool-call announcements as soon as the model commits to
@@ -79,7 +107,7 @@ export async function runAgent({
           const clean = stripper.push(text);
           if (!clean) return;
           if (!lastWasText) {
-            process.stdout.write("  ");
+            process.stdout.write(c.cyan("● "));
             lastWasText = true;
           }
           process.stdout.write(clean);
@@ -105,7 +133,7 @@ export async function runAgent({
     // Flush any held-back partial token, then close the line.
     const tail = stripper.flush();
     if (tail) {
-      if (!lastWasText) { process.stdout.write("  "); lastWasText = true; }
+      if (!lastWasText) { process.stdout.write(c.cyan("● ")); lastWasText = true; }
       process.stdout.write(tail);
     }
     if (lastWasText) process.stdout.write("\n");
@@ -114,9 +142,8 @@ export async function runAgent({
     totalOut += res.usage?.completion_tokens ?? 0;
     if (typeof res.balanceAfter === "number") lastBalance = res.balanceAfter;
     onTokens({ totalCredits, totalIn, totalOut, balance: lastBalance });
-    process.stdout.write(
-      c.dim(`  ${res.creditsCharged ?? 0} cr · ${res.usage?.prompt_tokens ?? 0}→${res.usage?.completion_tokens ?? 0} tokens · finish: ${res.finish_reason}\n`),
-    );
+    // Per-turn cost line removed for a cleaner look — the session summary at the
+    // end carries the totals.
 
     // Push assistant message into history
     messages.push({
@@ -135,8 +162,9 @@ export async function runAgent({
     for (const call of toolCalls) {
       let args = {};
       try { args = JSON.parse(call.function.arguments || "{}"); } catch { /* leave empty */ }
-      console.log("");
-      console.log(toolLabel(call.function.name, args));
+      // todo_write renders its own Plan box, so it returns an empty label.
+      const label = toolLabel(call.function.name, args);
+      if (label) console.log("\n" + c.cyan("●") + " " + label);
 
       // Route to MCP if the tool name is namespaced (mcp__server__tool);
       // otherwise execute the built-in tool. unnamespaceToolName returns
@@ -154,7 +182,8 @@ export async function runAgent({
       if (call.function.name === "read_file" || call.function.name === "edit_file" || call.function.name === "write_file") {
         if (typeof args.path === "string") referencedPaths.push(args.path);
       }
-      console.log(toolSummary(call.function.name, result));
+      const summary = toolSummary(call.function.name, result);
+      if (summary) console.log(summary);
 
       messages.push({
         role: "tool",

package/src/render.js

@@ -53,11 +53,17 @@ export function toolLabel(name, args) {
     case "run_shell":    return `${verb("run")}    ${arg(a.command)}`;
     case "web_search":   return `${verb("search web")} ${arg(JSON.stringify(a.query ?? ""))}`;
     case "web_fetch":    return `${verb("fetch")}  ${arg(a.url)}`;
-    case "todo_write":   return verb("plan");
+    case "todo_write":   return ""; // its Plan box is the label
     default:             return `${verb(name)} ${arg(JSON.stringify(a))}`;
   }
 }
 
+// Set the terminal window/tab title (so cmd.exe shows "Aether", not the node
+// path). OSC 0 — supported by cmd.exe, Windows Terminal, and POSIX terminals.
+export function setTerminalTitle(title) {
+  if (process.stdout.isTTY) process.stdout.write(`\x1b]0;${title}\x07`);
+}
+
 // Terse one-line result summary instead of dumping raw JSON / file contents.
 // Tools whose handlers already render rich output (diffs, the shell stream, the
 // plan) just get a check — the detail was already printed.
@@ -72,8 +78,9 @@ export function toolSummary(name, result) {
     try { code = JSON.parse(out).exit_code; } catch { /* ignore */ }
     return `  ${mark} ${c.gray(code === null ? (ok ? "done" : "failed") : `exit ${code}`)}`;
   }
-  if (name === "write_file" || name === "edit_file" || name === "todo_write") {
-    // Handler already printed the diff / plan; echo its short status line.
+  if (name === "todo_write") return ""; // the Plan box is its own feedback
+  if (name === "write_file" || name === "edit_file") {
+    // Handler already printed the diff; echo its short status line.
     return `  ${mark} ${c.gray(ellip(firstLine, 100))}`;
   }
   let summary = "";

package/src/repl.js

@@ -17,7 +17,7 @@ import { c, errorLine } from "./render.js";
 import { checkForUpdate } from "./update-check.js";
 import { promptBoxed, EXIT_SIGNAL } from "./ink-input.js";
 
-const VERSION = "0.17.0";
+const VERSION = "0.19.0";
 const MODEL_NAME = "Aether Core";
 
 const SHORTCUTS = `
@@ -34,10 +34,11 @@ ${c.gray("Anything else is sent to the agent as your next message.")}
 ${c.gray("Conversation history is kept across messages until you /clear.")}
 `;
 
-export async function runRepl({ cwd: initialCwd, autoYes: initialAutoYes, maxTurns: initialMaxTurns, mcpManager = null }) {
+export async function runRepl({ cwd: initialCwd, autoYes: initialAutoYes, unsafePaths: initialUnsafePaths, maxTurns: initialMaxTurns, mcpManager = null }) {
   const state = {
     cwd: initialCwd,
     autoYes: !!initialAutoYes,
+    unsafePaths: !!initialUnsafePaths,
     maxTurns: initialMaxTurns ?? 25,
     messages: [], // accumulates across turns
     balance: null,
@@ -170,6 +171,7 @@ export async function runRepl({ cwd: initialCwd, autoYes: initialAutoYes, maxTur
       priorMessages: state.messages.length > 0 ? state.messages : undefined,
       cwd: state.cwd,
       autoYes: state.autoYes,
+      unsafePaths: state.unsafePaths,
       maxTurns: state.maxTurns,
       mcpManager,
     });
@@ -275,7 +277,7 @@ function printBanner(state) {
   // Brand-coloured rules top + bottom; content is indented with no right
   // border, so nothing can misalign regardless of terminal font/width.
   const rule = c.magenta("─".repeat(W));
-  const mode = state.autoYes ? "auto-yes" : "review mode";
+  const mode = state.autoYes ? (state.unsafePaths ? "skip-permissions" : "auto-yes") : "review mode";
 
   console.log("");
   console.log(rule);

package/src/tools.js

@@ -789,8 +789,8 @@ function renderTodos(todos) {
       t.status === "completed"
         ? c.green("✓")
         : t.status === "in_progress"
-          ? c.yellow("▶")
-          : c.dim("○");
+          ? c.yellow("→")
+          : c.dim("·");
     const text =
       t.status === "completed"
         ? c.dim(t.content)