aether-code 0.29.0 → 0.31.0

package/bin/aether-code.js

@@ -28,7 +28,7 @@ import {
 import readline from "node:readline";
 import { c, errorLine, divider, setTerminalTitle } from "../src/render.js";
 
-const VERSION = "0.29.0";
+const VERSION = "0.31.0";
 
 /**
  * Try to start MCP servers from ~/.aether/mcp.json. Returns a started
@@ -90,6 +90,8 @@ ${c.bold("FLAGS")}
                      Default is auto-approve (skip-permissions).
   --sandbox          Restrict file access to --cwd. Default is full access.
   --cwd <path>       Working directory for the agent (default: current dir).
+  --model <name>     core (default) | ultra (Opus) | max (Grok). Premium models
+                     need purchased credits, else they fall back to Core.
   --max-turns <n>    Maximum turns before stopping (default: 25).
   --help, -h         Show this help.
   --version, -v      Print version.
@@ -117,6 +119,7 @@ function parseArgs(argv) {
     else if (a === "--help" || a === "-h") { args.flags.help = true; }
     else if (a === "--version" || a === "-v") { args.flags.version = true; }
     else if (a === "--cwd") { args.flags.cwd = argv[++i]; }
+    else if (a === "--model") { args.flags.model = argv[++i]; }
     else if (a === "--max-turns") { args.flags.maxTurns = parseInt(argv[++i], 10); }
     else if (a.startsWith("--")) {
       const eq = a.indexOf("=");
@@ -190,6 +193,12 @@ async function main() {
   const unsafePaths = !args.flags.sandbox;
   const maxTurns = Number.isInteger(args.flags.maxTurns) ? args.flags.maxTurns : 25;
 
+  // --model: core (default), ultra (Opus), max (Grok). Premium models are gated
+  // server-side — without purchased credits the server uses Core regardless.
+  const MODEL_IDS = { core: null, gemma: null, ultra: "claude-opus-4-6", opus: "claude-opus-4-6", max: "grok-4-3", grok: "grok-4-3" };
+  const modelKey = args.flags.model ? String(args.flags.model).toLowerCase() : null;
+  const model = modelKey && modelKey in MODEL_IDS ? MODEL_IDS[modelKey] : (args.flags.model || null);
+
   // Subcommand routing — these shadow the "task as positional arg" mode
   const sub = args._[0]?.toLowerCase();
   if (sub === "login" || sub === "auth") {
@@ -224,7 +233,7 @@ async function main() {
       console.log(c.gray(`Note: launched from a system folder (${redirectedFrom}).`));
       console.log(c.gray(`Your files will be saved to ${c.cyan(cwd)} so you can find them. Use ${c.cyan("--cwd <path>")} or ${c.cyan("/cwd")} to change.`));
     }
-    await runRepl({ cwd, autoYes, unsafePaths, maxTurns, mcpManager });
+    await runRepl({ cwd, autoYes, unsafePaths, maxTurns, model, mcpManager });
     return;
   }
 
@@ -249,6 +258,7 @@ async function main() {
     autoYes,
     unsafePaths,
     maxTurns,
+    model,
     mcpManager,
   });
   if (mcpManager) await mcpManager.shutdown().catch(() => {});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aether-code",
-  "version": "0.29.0",
+  "version": "0.31.0",
   "description": "Uncensored AI coding agent for your terminal — Claude Code alternative with MCP support. Reads code, writes files, runs commands. Drives IDA Pro, Roblox Studio, Wireshark, Blender, and any MCP server. No refusal layer.",
   "homepage": "https://trynoguard.com",
   "repository": {

package/src/agent.js

@@ -51,6 +51,7 @@ export async function runAgent({
   autoYes = false,
   unsafePaths = false,
   maxTurns = DEFAULT_MAX_TURNS,
+  model = null, // null = server default (gemma). Premium models gated server-side.
   onTokens = () => {},
   // Optional MCPManager. When provided, its tools are merged into the agent's
   // toolset and tool calls prefixed `mcp__` are routed to it instead of the
@@ -135,6 +136,7 @@ export async function runAgent({
       res = await agentTurnStream({
         messages: turnMessages,
         tools,
+        model,
         onDelta: (text) => {
           // Buffered strip of leaked model channel/control tokens (which can
           // be split across stream chunks) before display.

package/src/api.js

@@ -122,6 +122,7 @@ export async function agentTurnStream({
   tools,
   maxTokens,
   temperature,
+  model,
   onDelta,
   onToolCallDelta,
   onFinish,
@@ -150,6 +151,7 @@ export async function agentTurnStream({
         tools,
         max_tokens: maxTokens,
         temperature,
+        ...(model ? { model } : {}),
       }),
     }, { onRetry: defaultOnRetry });
   } catch (e) {
@@ -274,7 +276,7 @@ export async function agentTurnStream({
  * problematic (corporate proxies, weird client setups). The CLI defaults to
  * streaming.
  */
-export async function agentTurn({ messages, tools, maxTokens, temperature }) {
+export async function agentTurn({ messages, tools, maxTokens, temperature, model }) {
   const { apiKey, baseUrl } = getConfig();
   if (!apiKey) {
     throw new AetherError(
@@ -298,6 +300,7 @@ export async function agentTurn({ messages, tools, maxTokens, temperature }) {
         tools,
         max_tokens: maxTokens,
         temperature,
+        ...(model ? { model } : {}),
       }),
     }, { onRetry: defaultOnRetry });
   } catch (e) {

package/src/repl.js

@@ -16,9 +16,21 @@ import { c, errorLine, boxLines, sideBySide } from "./render.js";
 import { checkForUpdate } from "./update-check.js";
 import { promptBox, EXIT_SIGNAL } from "./box-input.js";
 
-const VERSION = "0.29.0";
+const VERSION = "0.31.0";
 const MODEL_NAME = "Aether Core";
 
+// /model aliases → { id, name }. id=null = server default (gemma / Aether Core).
+// Premium models are gated SERVER-SIDE: if you haven't purchased credits, the
+// server transparently uses Core instead — selecting one here can't bypass that.
+const MODEL_ALIASES = {
+  core: { id: null, name: "Aether Core" },
+  gemma: { id: null, name: "Aether Core" },
+  ultra: { id: "claude-opus-4-6", name: "Aether Ultra" },
+  opus: { id: "claude-opus-4-6", name: "Aether Ultra" },
+  max: { id: "grok-4-3", name: "Aether Max" },
+  grok: { id: "grok-4-3", name: "Aether Max" },
+};
+
 const SHORTCUTS = `
   ${c.cyan("/help")}      Show this help
   ${c.cyan("/exit")}      Exit (or Ctrl+C twice)
@@ -27,18 +39,21 @@ const SHORTCUTS = `
   ${c.cyan("/cwd")} ${c.gray("[path]")}    Show or change working directory
   ${c.cyan("/yes")}       Toggle auto-approve mode (skip y/N prompts)
   ${c.cyan("/turns")} ${c.gray("<n>")}     Set max turns per prompt (default 25)
-  ${c.cyan("/model")}     Show current model
+  ${c.cyan("/model")} ${c.gray("[core|ultra|max]")}  Show or switch model (ultra=Opus, max=Grok — premium)
 
 ${c.gray("Anything else is sent to the agent as your next message.")}
 ${c.gray("Conversation history is kept across messages until you /clear.")}
 `;
 
-export async function runRepl({ cwd: initialCwd, autoYes: initialAutoYes, unsafePaths: initialUnsafePaths, maxTurns: initialMaxTurns, mcpManager = null }) {
+export async function runRepl({ cwd: initialCwd, autoYes: initialAutoYes, unsafePaths: initialUnsafePaths, maxTurns: initialMaxTurns, model: initialModel = null, mcpManager = null }) {
+  const initialAlias = Object.values(MODEL_ALIASES).find((a) => a.id === initialModel);
   const state = {
     cwd: initialCwd,
     autoYes: !!initialAutoYes,
     unsafePaths: !!initialUnsafePaths,
     maxTurns: initialMaxTurns ?? 25,
+    model: initialModel ?? null,
+    modelName: initialAlias?.name ?? MODEL_NAME,
     messages: [], // accumulates across turns
     balance: null,
     sessionCredits: 0,
@@ -114,6 +129,7 @@ export async function runRepl({ cwd: initialCwd, autoYes: initialAutoYes, unsafe
       cwd: state.cwd,
       autoYes: state.autoYes,
       unsafePaths: state.unsafePaths,
+      model: state.model,
       maxTurns: state.maxTurns,
       mcpManager,
     });
@@ -199,9 +215,24 @@ async function handleSlash(line, state) {
       }
       break;
     }
-    case "model":
-      console.log(c.gray(`model: ${MODEL_NAME} · 1M context · uncensored`));
+    case "model": {
+      const key = (arg || "").trim().toLowerCase();
+      if (!key) {
+        console.log(c.gray(`model: ${state.modelName}`));
+        console.log(c.gray("switch with /model core | ultra | max   (ultra=Opus, max=Grok — premium, need credits)"));
+      } else if (MODEL_ALIASES[key]) {
+        state.model = MODEL_ALIASES[key].id;
+        state.modelName = MODEL_ALIASES[key].name;
+        const premium = state.model !== null;
+        console.log(
+          c.gray(`model → ${c.cyan(state.modelName)}`) +
+            (premium ? c.gray("  (premium — needs purchased credits, else falls back to Core)") : ""),
+        );
+      } else {
+        console.log(errorLine(`Unknown model "${key}". Try: core, ultra, max`));
+      }
       break;
+    }
     default:
       console.log(errorLine(`Unknown command: /${cmd}. Type ${c.cyan("/help")} for shortcuts.`));
   }
@@ -226,7 +257,7 @@ function printBanner(state) {
   const credits = state.balance != null ? `${state.balance.toLocaleString()} credits` : "";
   const left = boxLines(
     [
-      c.bold(c.magenta("aether")) + c.gray("  ·  ") + c.bold(MODEL_NAME) + c.gray("   v" + VERSION),
+      c.bold(c.magenta("aether")) + c.gray("  ·  ") + c.bold(state.modelName) + c.gray("   v" + VERSION),
       c.gray("uncensored AI coding agent"),
       c.gray((credits ? credits + " · " : "") + mode),
       c.gray(shortenPath(state.cwd, 52)),

package/src/skills.js

@@ -134,6 +134,12 @@ export function loadSkillsFromDir(dir) {
     if (!name.endsWith(".md")) continue;
     const filePath = path.join(dir, name);
     const raw = fs.readFileSync(filePath, "utf8");
+    // Cap skill size: the body is injected into the prompt every turn it
+    // triggers, so a huge file would blow the context window / inflate cost.
+    if (raw.length > 50_000) {
+      process.stderr.write(`  (skipping oversized skill ${name}: ${raw.length} bytes > 50KB)\n`);
+      continue;
+    }
     skills.push(parseSkill(raw, filePath));
   }
   return skills;

package/src/tools.js

@@ -279,6 +279,7 @@ const MAX_GLOB_RESULTS = 300;
 // relative path. ** spans directory separators; * does not.
 export function globToRegExp(glob) {
   let re = "";
+  let braceDepth = 0;
   for (let i = 0; i < glob.length; i++) {
     const ch = glob[i];
     if (ch === "*") {
@@ -291,6 +292,16 @@ export function globToRegExp(glob) {
       }
     } else if (ch === "?") {
       re += "[^/]";
+    } else if (ch === "{") {
+      // Brace expansion: {js,ts} -> (js|ts). Common in .gitignore (*.{js,ts});
+      // treating it literally silently failed to ignore those files.
+      re += "(";
+      braceDepth++;
+    } else if (ch === "}" && braceDepth > 0) {
+      re += ")";
+      braceDepth--;
+    } else if (ch === "," && braceDepth > 0) {
+      re += "|";
     } else if ("\\^$+.()|{}[]".includes(ch)) {
       re += "\\" + ch;
     } else {
@@ -430,13 +441,22 @@ async function askUser(args, _opts) {
 function readFile(args, opts) {
   if (typeof args.path !== "string") return { ok: false, output: "path is required" };
   const abs = resolveSafe(args.path, opts);
-  const stat = fs.statSync(abs);
+  let stat;
+  try { stat = fs.statSync(abs); } catch (e) {
+    return { ok: false, output: `Cannot access ${args.path}: ${e.code || e.message}` };
+  }
   if (stat.isDirectory()) return { ok: false, output: `${args.path} is a directory, not a file` };
+  // Block non-regular files (named pipes, sockets, devices) — reading them can
+  // hang forever (no timeout on readFileSync).
+  if (!stat.isFile()) return { ok: false, output: `${args.path} is not a regular file.` };
   if (stat.size > 1_000_000) {
     return { ok: false, output: `File too large (${stat.size} bytes). Aether refuses to read >1MB at once.` };
   }
-  const text = fs.readFileSync(abs, "utf8");
-  return { ok: true, output: text };
+  try {
+    return { ok: true, output: fs.readFileSync(abs, "utf8") };
+  } catch (e) {
+    return { ok: false, output: `Cannot read ${args.path}: ${e.code || e.message}` };
+  }
 }
 
 function listDir(args, opts) {
@@ -497,6 +517,10 @@ function searchFiles(args, opts) {
         } catch { continue; }
         const lines = content.split("\n");
         for (let i = 0; i < lines.length; i++) {
+          // Skip very long lines: the pattern is model-supplied and a
+          // pathological regex on a long line can backtrack catastrophically
+          // (ReDoS) and freeze the single-threaded process.
+          if (lines[i].length > 2000) continue;
           if (regex.test(lines[i])) {
             matches.push({ file: rel, line: i + 1, text: lines[i].slice(0, 300) });
             if (matches.length >= MAX_SEARCH_MATCHES) { truncated = true; return; }
@@ -648,12 +672,33 @@ async function webSearch(args, opts) {
 // Bounded fetch with a fixed timeout + size cap. Strips scripts/styles, removes
 // tags, decodes common HTML entities. Not a full HTML parser; good enough for
 // reading docs pages, GitHub READMEs, MDN, Stack Overflow answers, etc.
+// SSRF guard: refuse loopback / link-local / private hosts so web_fetch can't
+// be steered (directly or via a redirect) at localhost or cloud-metadata
+// (169.254.169.254) or an internal service.
+function isBlockedHost(hostname) {
+  const h = (hostname || "").toLowerCase().replace(/^\[|\]$/g, "");
+  if (!h || h === "localhost" || h === "0.0.0.0" || h === "::1" || h === "::") return true;
+  if (h.endsWith(".localhost") || h.endsWith(".internal") || h.endsWith(".local")) return true;
+  if (/^127\./.test(h)) return true;                       // loopback
+  if (/^10\./.test(h)) return true;                        // private A
+  if (/^192\.168\./.test(h)) return true;                  // private C
+  if (/^172\.(1[6-9]|2\d|3[01])\./.test(h)) return true;   // private B
+  if (/^169\.254\./.test(h)) return true;                  // link-local incl. cloud metadata
+  if (/^(fe80:|fc|fd|::ffff:)/.test(h)) return true;       // IPv6 link-local / ULA / mapped
+  return false;
+}
+
 async function webFetch(args, opts) {
   void opts;
   if (typeof args.url !== "string") return { ok: false, output: "url is required" };
   if (!/^https?:\/\//i.test(args.url)) {
     return { ok: false, output: "Only http:// and https:// URLs are allowed." };
   }
+  let initialHost;
+  try { initialHost = new URL(args.url).hostname; } catch { return { ok: false, output: "Invalid URL." }; }
+  if (isBlockedHost(initialHost)) {
+    return { ok: false, output: "web_fetch blocked: refusing to fetch a private/internal/loopback address." };
+  }
   const controller = new AbortController();
   const timeout = setTimeout(() => controller.abort(), 15_000);
   let res;
@@ -674,6 +719,14 @@ async function webFetch(args, opts) {
     return { ok: false, output: `web_fetch error: ${e.name === "AbortError" ? "timed out after 15s" : e.message}` };
   }
   clearTimeout(timeout);
+  // Re-check the FINAL url after any redirects — a public URL can 302 to an
+  // internal target, which the initial-URL check wouldn't catch.
+  try {
+    if (isBlockedHost(new URL(res.url).hostname)) {
+      res.body?.cancel().catch(() => {});
+      return { ok: false, output: "web_fetch blocked: redirect to a private/internal address." };
+    }
+  } catch { /* res.url unparseable — fall through */ }
   if (!res.ok) {
     return { ok: false, output: `web_fetch HTTP ${res.status} ${res.statusText}` };
   }