arqzero 0.0.1 → 2.1.0-beta.0

package/CHANGELOG.md

@@ -0,0 +1,78 @@
+# Changelog
+
+All notable changes to ArqZero are documented in this file.
+
+The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [Unreleased]
+
+## [2.1.0] — 2026-04-29
+
+### Added
+- Multi-provider expansion: Anthropic, OpenRouter, OpenAI-compatible adapters
+- Provider factory + registry layer (`src/api/factory.ts`, `src/api/registry.ts`)
+- OpenRouter multi-key fallback chain — auto-rotates on `401/402/403/429/5xx`
+- `/provider` slash command for live provider switching
+- Hook system: 11 lifecycle events fired through the runtime (PR-01)
+- Plugin runtime wiring: PluginManager + named-agent registration (PR-02)
+- Skill registry: `.md` skills register as live slash commands (PR-03)
+- Persistent cross-session memory injected into the system prompt (PR-04)
+- Checkpoint auto-capture on Write/Edit/MultiEdit and prompt-tagged rewind (PR-05)
+- Background `Bash` process tracking with `BashOutput` and `KillShell` tools (PR-06)
+- `PermissionManager` enforcement in headless mode — alwaysDeny, locked, and dangerous-level escalation now active without a TTY (PR-07)
+- `TodoStore` persistence per session at `~/.arqzero/todos/<sessionId>.json`, restored on resume (PR-08)
+- `ARQZERO_HOME` env override and unified state-dir resolution (`getArqzeroHome`) across config, sessions, memory, agents, skills, auth, plugins, and todos (PR-09)
+- `ARQZERO_PROVIDER` and `ARQZERO_THEME` env overrides honored at startup
+- `/plugin` and `/reload-plugins` slash commands wired through the slash context — list, enable, disable, rescan (PR-10)
+
+### Changed
+- Tier gates now enforced at runtime for `worktrees`, `session-resume`, `mcp`, `memory`, `custom-commands`, and `checkpoints`. Free tier no longer silently receives Pro features (PR-11)
+- Auth tier resolved once at startup (`earlyAuth`) and reused for all gate checks
+- README: license badge corrected (Apache 2.0), photo path fixed
+
+### Removed
+- Stale launch-priorities HTML artifact (`docs/research/arqzero-launch-priorities.html`)
+
+## [2.0.0] — 2026-03-22
+
+### Added
+- Commercial layer — backend (Hono + Supabase + Drizzle), website (Next.js, GitHub Pages), CLI auth
+- Email-based device auth (Resend) with brute-force protection + 5-attempt rate limit
+- JWT access tokens (1h) + refresh tokens (90d) with 7-day offline grace
+- Distributed feature gating across tools, commands, and capabilities
+- Path-guard with sensitive directory blocklist (`.ssh`, `.gnupg`, `.aws`, `.env`)
+- Worktree isolation flag (`--worktree`)
+- Cross-session memory at `~/.arqzero/memory/`
+- 11 hook event types (PreToolUse, PostToolUse, SessionStart, SessionEnd, etc.)
+- Plugin manifest + loader + manager
+- Dispatch tool — up to 7 parallel subagents with auto model routing
+- 18 built-in tools, 42 structured capabilities
+- 25 slash commands incl. `/compress`, `/check`, `/setup`, `/think`, `/undo`, `/save-session`
+- Verification gates (build, type, lint, test, security, diff) before completion claims
+- Custom slash commands via `.arqzero/commands/*.md`
+- Strategic context compaction at token limits
+- Comprehensive test suite — 747 CLI tests, 24 backend tests
+
+### Changed
+- Default provider: Fireworks AI with GLM-4.7 (Enso) and GLM-5 (PRIMUS)
+- TUI rebrand to "The Grid" — amber/gold (#FFB800), shimmer spinner, command center
+- Config dir moved to `~/.arqzero/`
+- npm package renamed to `arqzero`, bin command `arqzero`
+- License switched to Apache 2.0
+
+### Security
+- Hard startup error if `JWT_SECRET` missing or < 32 chars
+- `crypto.randomInt` for verification codes (replaced `Math.random`)
+- Rate limiting on all auth endpoints (login, verify, refresh)
+- CORS conditional on `NODE_ENV` (no localhost in production)
+- Old token cleanup on login + verify
+- Team-memory value cap at 64 KB
+- Old `/auth/verify` endpoint invalidates all unused tokens after 5 wrong attempts
+
+## [1.x] — Pre-history
+
+Pre-2.0 was the original Claude Code clone phase. v2.0 was a rewrite with the labs-native architecture, commercial layer, and Fireworks default.
+
+[Unreleased]: https://github.com/LuciferDono/ArqZero/compare/v2.0.0...HEAD
+[2.0.0]: https://github.com/LuciferDono/ArqZero/releases/tag/v2.0.0

package/LICENSE

@@ -1,190 +1,175 @@
-                                 Apache License
-                           Version 2.0, January 2004
-                        http://www.apache.org/licenses/
-
-   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
-
-   1. Definitions.
-
-      "License" shall mean the terms and conditions for use, reproduction,
-      and distribution as defined by Sections 1 through 9 of this document.
-
-      "Licensor" shall mean the copyright owner or entity authorized by
-      the copyright owner that is granting the License.
-
-      "Legal Entity" shall mean the union of the acting entity and all
-      other entities that control, are controlled by, or are under common
-      control with that entity. For the purposes of this definition,
-      "control" means (i) the power, direct or indirect, to cause the
-      direction or management of such entity, whether by contract or
-      otherwise, or (ii) ownership of fifty percent (50%) or more of the
-      outstanding shares, or (iii) beneficial ownership of such entity.
-
-      "You" (or "Your") shall mean an individual or Legal Entity
-      exercising permissions granted by this License.
-
-      "Source" form shall mean the preferred form for making modifications,
-      including but not limited to software source code, documentation
-      source, and configuration files.
-
-      "Object" form shall mean any form resulting from mechanical
-      transformation or translation of a Source form, including but
-      not limited to compiled object code, generated documentation,
-      and conversions to other media types.
-
-      "Work" shall mean the work of authorship, whether in Source or
-      Object form, made available under the License, as indicated by a
-      copyright notice that is included in or attached to the work
-      (an example is provided in the Appendix below).
-
-      "Derivative Works" shall mean any work, whether in Source or Object
-      form, that is based on (or derived from) the Work and for which the
-      editorial revisions, annotations, elaborations, or other modifications
-      represent, as a whole, an original work of authorship. For the purposes
-      of this License, Derivative Works shall not include works that remain
-      separable from, or merely link (or bind by name) to the interfaces of,
-      the Work and Derivative Works thereof.
-
-      "Contribution" shall mean any work of authorship, including
-      the original version of the Work and any modifications or additions
-      to that Work or Derivative Works thereof, that is intentionally
-      submitted to the Licensor for inclusion in the Work by the copyright owner
-      or by an individual or Legal Entity authorized to submit on behalf of
-      the copyright owner. For the purposes of this definition, "submitted"
-      means any form of electronic, verbal, or written communication sent
-      to the Licensor or its representatives, including but not limited to
-      communication on electronic mailing lists, source code control systems,
-      and issue tracking systems that are managed by, or on behalf of, the
-      Licensor for the purpose of discussing and improving the Work, but
-      excluding communication that is conspicuously marked or otherwise
-      designated in writing by the copyright owner as "Not a Contribution."
-
-      "Contributor" shall mean Licensor and any individual or Legal Entity
-      on behalf of whom a Contribution has been received by the Licensor and
-      subsequently incorporated within the Work.
-
-   2. Grant of Copyright License. Subject to the terms and conditions of
-      this License, each Contributor hereby grants to You a perpetual,
-      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
-      copyright license to reproduce, prepare Derivative Works of,
-      publicly display, publicly perform, sublicense, and distribute the
-      Work and such Derivative Works in Source or Object form.
-
-   3. Grant of Patent License. Subject to the terms and conditions of
-      this License, each Contributor hereby grants to You a perpetual,
-      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
-      (except as stated in this section) patent license to make, have made,
-      use, offer to sell, sell, import, and otherwise transfer the Work,
-      where such license applies only to those patent claims licensable
-      by such Contributor that are necessarily infringed by their
-      Contribution(s) alone or by combination of their Contribution(s)
-      with the Work to which such Contribution(s) was submitted. If You
-      institute patent litigation against any entity (including a
-      cross-claim or counterclaim in a lawsuit) alleging that the Work
-      or a Contribution incorporated within the Work constitutes direct
-      or contributory patent infringement, then any patent licenses
-      granted to You under this License for that Work shall terminate
-      as of the date such litigation is filed.
-
-   4. Redistribution. You may reproduce and distribute copies of the
-      Work or Derivative Works thereof in any medium, with or without
-      modifications, and in Source or Object form, provided that You
-      meet the following conditions:
-
-      (a) You must give any other recipients of the Work or
-          Derivative Works a copy of this License; and
-
-      (b) You must cause any modified files to carry prominent notices
-          stating that You changed the files; and
-
-      (c) You must retain, in the Source form of any Derivative Works
-          that You distribute, all copyright, patent, trademark, and
-          attribution notices from the Source form of the Work,
-          excluding those notices that do not pertain to any part of
-          the Derivative Works; and
-
-      (d) If the Work includes a "NOTICE" text file as part of its
-          distribution, then any Derivative Works that You distribute must
-          include a readable copy of the attribution notices contained
-          within such NOTICE file, excluding any notices that do not
-          pertain to any part of the Derivative Works, in at least one
-          of the following places: within a NOTICE text file distributed
-          as part of the Derivative Works; within the Source form or
-          documentation, if provided along with the Derivative Works; or,
-          within a display generated by the Derivative Works, if and
-          wherever such third-party notices normally appear. The contents
-          of the NOTICE file are for informational purposes only and
-          do not modify the License. You may add Your own attribution
-          notices within Derivative Works that You distribute, alongside
-          or as an addendum to the NOTICE text from the Work, provided
-          that such additional attribution notices cannot be construed
-          as modifying the License.
-
-      You may add Your own copyright statement to Your modifications and
-      may provide additional or different license terms and conditions
-      for use, reproduction, or distribution of Your modifications, or
-      for any such Derivative Works as a whole, provided Your use,
-      reproduction, and distribution of the Work otherwise complies with
-      the conditions stated in this License.
-
-   5. Submission of Contributions. Unless You explicitly state otherwise,
-      any Contribution intentionally submitted for inclusion in the Work
-      by You to the Licensor shall be under the terms and conditions of
-      this License, without any additional terms or conditions.
-      Notwithstanding the above, nothing herein shall supersede or modify
-      the terms of any separate license agreement you may have executed
-      with Licensor regarding such Contributions.
-
-   6. Trademarks. This License does not grant permission to use the trade
-      names, trademarks, service marks, or product names of the Licensor,
-      except as required for reasonable and customary use in describing the
-      origin of the Work and reproducing the content of the NOTICE file.
-
-   7. Disclaimer of Warranty. Unless required by applicable law or
-      agreed to in writing, Licensor provides the Work (and each
-      Contributor provides its Contributions) on an "AS IS" BASIS,
-      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
-      implied, including, without limitation, any warranties or conditions
-      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
-      PARTICULAR PURPOSE. You are solely responsible for determining the
-      appropriateness of using or redistributing the Work and assume any
-      risks associated with Your exercise of permissions under this License.
-
-   8. Limitation of Liability. In no event and under no legal theory,
-      whether in tort (including negligence), contract, or otherwise,
-      unless required by applicable law (such as deliberate and grossly
-      negligent acts) or agreed to in writing, shall any Contributor be
-      liable to You for damages, including any direct, indirect, special,
-      incidental, or consequential damages of any character arising as a
-      result of this License or out of the use or inability to use the
-      Work (including but not limited to damages for loss of goodwill,
-      work stoppage, computer failure or malfunction, or any and all
-      other commercial damages or losses), even if such Contributor
-      has been advised of the possibility of such damages.
-
-   9. Accepting Warranty or Additional Liability. While redistributing
-      the Work or Derivative Works thereof, You may choose to offer,
-      and charge a fee for, acceptance of support, warranty, indemnity,
-      or other liability obligations and/or rights consistent with this
-      License. However, in accepting such obligations, You may act only
-      on Your own behalf and on Your sole responsibility, not on behalf
-      of any other Contributor, and only if You agree to indemnify,
-      defend, and hold each Contributor harmless for any liability
-      incurred by, or claims asserted against, such Contributor by reason
-      of your accepting any such warranty or additional liability.
-
-   END OF TERMS AND CONDITIONS
-
-   Copyright 2026 ArqZero Contributors
-
-   Licensed under the Apache License, Version 2.0 (the "License");
-   you may not use this file except in compliance with the License.
-   You may obtain a copy of the License at
-
-       http://www.apache.org/licenses/LICENSE-2.0
-
-   Unless required by applicable law or agreed to in writing, software
-   distributed under the License is distributed on an "AS IS" BASIS,
-   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-   See the License for the specific language governing permissions and
-   limitations under the License.
+ArqZero End User License Agreement (EULA)
+==========================================
+
+Effective date: see CHANGELOG.md for the version distributed with this binary.
+Licensor: Pranav Jadhav ("Licensor"), arqzerohq@gmail.com.
+Product: the ArqZero command-line tool and all accompanying files
+distributed via the npm package "arqzero" ("the Software").
+
+By installing, copying, or using the Software, you ("Licensee") agree to be
+bound by this Agreement. If you do not agree, do not install, copy, or use
+the Software.
+
+1. GRANT OF LICENSE
+
+   Subject to the terms of this Agreement and the Licensee's compliance
+   herewith, the Licensor grants the Licensee a personal, non-exclusive,
+   non-transferable, non-sublicensable, revocable license to install and
+   use the Software solely for the Licensee's own internal use, on as many
+   devices as the Licensee personally controls.
+
+   This is a license, not a sale. The Licensor retains all right, title,
+   and interest in and to the Software, including all intellectual property
+   rights therein. No rights are granted to the Licensee other than as
+   expressly set forth in this Agreement.
+
+2. RESTRICTIONS
+
+   The Licensee shall NOT, and shall not permit any third party to:
+
+   (a) copy, modify, adapt, translate, or create derivative works of the
+       Software in whole or in part;
+
+   (b) reverse-engineer, decompile, disassemble, or otherwise attempt to
+       derive the source code or underlying ideas, algorithms, structure,
+       or organization of the Software, except to the limited extent
+       expressly permitted by applicable law notwithstanding this
+       limitation;
+
+   (c) rent, lease, lend, sell, sublicense, assign, distribute, publish,
+       transfer, or otherwise make available the Software, or any features
+       or functionality of the Software, to any third party;
+
+   (d) remove, alter, or obscure any proprietary notice (including any
+       notice of copyright or trademark) included in or with the Software;
+
+   (e) use the Software to build a competing product, train a machine
+       learning model that replicates the Software's functionality, or
+       benchmark the Software against a competing product without the
+       Licensor's prior written consent;
+
+   (f) circumvent, disable, or otherwise interfere with any
+       license-enforcement, authentication, or rate-limiting mechanism in
+       the Software, including but not limited to feature gates tied to
+       paid subscription tiers;
+
+   (g) use the Software in any manner that violates applicable law or any
+       third party's rights.
+
+3. THIRD-PARTY COMPONENTS
+
+   The Software incorporates open-source software components, each of which
+   is licensed under its own terms. A list of such components and their
+   respective licenses is available on request to arqzerohq@gmail.com. The
+   open-source licenses governing those components apply to those
+   components in accordance with their terms; this Agreement applies to the
+   ArqZero-original portions of the Software.
+
+4. BRING-YOUR-OWN-KEY ARCHITECTURE
+
+   The Software is designed to be used with third-party large language
+   model ("LLM") services configured by the Licensee using the Licensee's
+   own API credentials. The Licensor is not responsible for, and makes no
+   warranty regarding, those third-party services. The Licensee is solely
+   responsible for compliance with the terms of service of those LLM
+   providers and for all charges incurred from such use.
+
+5. PAID TIERS AND FEATURE GATES
+
+   Certain features of the Software ("Pro Tier", "Team Tier", and any
+   future tier the Licensor designates) require an active paid
+   subscription. Use of those features outside an active subscription is
+   not permitted under this license. The Licensee shall not modify the
+   Software to enable such features without an active subscription, and
+   doing so is a material breach of this Agreement.
+
+6. TELEMETRY
+
+   The Software does not transmit telemetry to the Licensor by default.
+   If the Licensee opts in to telemetry (e.g. by setting an environment
+   variable documented in the Software), the Software may transmit
+   anonymized crash signatures, software version, and operating system
+   string to a third-party error-tracking service designated by the
+   Licensor. No prompt content, file paths, command arguments, or
+   personally identifying information are transmitted.
+
+7. UPDATES
+
+   The Licensor may, but is not obligated to, provide updates, bug fixes,
+   or new versions of the Software. Any such updates are subject to this
+   Agreement unless accompanied by a separate license.
+
+8. TERM AND TERMINATION
+
+   This Agreement remains in effect until terminated. The Licensor may
+   terminate this Agreement immediately upon the Licensee's material
+   breach. Upon termination, the Licensee shall cease all use of the
+   Software and delete all copies in the Licensee's possession or control.
+   Sections 2 (Restrictions), 9 (Disclaimer), 10 (Limitation of
+   Liability), 11 (Indemnification), 12 (Governing Law), 13 (Severability)
+   survive termination.
+
+9. DISCLAIMER OF WARRANTIES
+
+   THE SOFTWARE IS PROVIDED "AS IS" AND "AS AVAILABLE", WITHOUT WARRANTY
+   OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION ANY
+   WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE,
+   NON-INFRINGEMENT, OR THAT THE SOFTWARE WILL BE UNINTERRUPTED OR
+   ERROR-FREE. AI-GENERATED OUTPUT MAY CONTAIN ERRORS; THE LICENSEE IS
+   SOLELY RESPONSIBLE FOR VALIDATING AND TESTING ANY OUTPUT BEFORE USING
+   IT IN PRODUCTION OR SECURITY-SENSITIVE CONTEXTS.
+
+10. LIMITATION OF LIABILITY
+
+    TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL
+    THE LICENSOR BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL,
+    CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR FOR LOST PROFITS,
+    REVENUE, DATA, USE, OR GOODWILL, EVEN IF ADVISED OF THE POSSIBILITY OF
+    SUCH DAMAGES. THE LICENSOR'S AGGREGATE LIABILITY FOR ALL CLAIMS
+    ARISING UNDER OR RELATED TO THIS AGREEMENT SHALL NOT EXCEED THE
+    GREATER OF (A) THE FEES THE LICENSEE PAID TO THE LICENSOR IN THE
+    TWELVE (12) MONTHS PRECEDING THE EVENT GIVING RISE TO THE CLAIM, OR
+    (B) FIVE HUNDRED UNITED STATES DOLLARS (USD 500). THIS LIMITATION IS
+    ESSENTIAL TO THE BARGAIN REFLECTED IN THIS AGREEMENT AND APPLIES
+    REGARDLESS OF THE LEGAL THEORY ON WHICH ANY CLAIM IS BASED.
+
+11. INDEMNIFICATION
+
+    The Licensee shall indemnify, defend, and hold harmless the Licensor
+    from any claim, demand, loss, liability, or expense (including
+    reasonable attorneys' fees) arising from the Licensee's breach of this
+    Agreement, misuse of the Software, or violation of any law or
+    third-party right.
+
+12. GOVERNING LAW
+
+    This Agreement shall be governed by, and construed in accordance with,
+    the laws of the jurisdiction in which the Licensor is domiciled (as
+    stated on https://arqzero.pages.dev/legal/terms at the time of
+    installation), without regard to its conflict-of-laws provisions.
+
+13. SEVERABILITY
+
+    If any provision of this Agreement is held to be unenforceable, that
+    provision shall be modified to the minimum extent necessary to make it
+    enforceable, or if it cannot be so modified, severed; the remainder of
+    this Agreement shall remain in full effect.
+
+14. ENTIRE AGREEMENT
+
+    This Agreement, together with any Privacy Policy or DPA referenced at
+    https://arqzero.pages.dev/legal, constitutes the entire agreement
+    between the Licensee and the Licensor regarding the Software and
+    supersedes all prior or contemporaneous communications.
+
+15. NO WAIVER
+
+    No failure or delay by the Licensor in enforcing any provision of this
+    Agreement is a waiver of that or any other provision.
+
+16. CONTACT
+
+    Questions about this Agreement: legal@arqzero.dev (when the domain is
+    live) or arqzerohq@gmail.com.
+
+Copyright (c) 2026 Pranav Jadhav. All rights reserved.