buildwithnexus 0.10.6 → 0.11.0

package/README.md

@@ -5,8 +5,8 @@
 
 A hilariously fast, **agentic AI CLI harness** — written in Rust. Remote models
 via API key, or local models on your machine. It plans, edits files, and runs
-commands, asking before each change. One static binary, four dependencies, no
-runtime to babysit.
+commands, asking before each change. One static binary, five direct
+dependencies, no runtime to babysit.
 
 ```bash
 npm install -g buildwithnexus
@@ -128,8 +128,9 @@ also carry build-provenance attestations (`gh attestation verify`).
 
 - Default permission is **ask** — every file write, edit, and command is
   confirmed. `auto` ("yolo") and `readonly` are opt-in.
-- File tools are confined to the working directory; reads outside it, and of
-  sensitive paths (the key store, `~/.ssh`, `.env`, `*.pem`), require
+- Mutating file tools (write/edit/patch) are confined to the working directory —
+  writes outside it require explicit confirmation. Reads are unconfined, but
+  sensitive paths (the key store, `~/.ssh`, `.env`, `*.pem`) require
   confirmation even in `auto`. Catastrophic commands (`rm -rf /`, `mkfs`, …) too.
 - API keys are never sent to a non-HTTPS endpoint, and key-like tokens are
   redacted from surfaced errors.

package/SECURITY.md

@@ -7,8 +7,8 @@ released minor line receives security fixes.
 
 | Version    | Supported          |
 |------------|--------------------|
-| 0.8.x      | :white_check_mark: |
-| < 0.8      | :x:                |
+| 0.10.x     | :white_check_mark: |
+| < 0.10     | :x:                |
 
 ## Reporting a Vulnerability
 
@@ -28,11 +28,10 @@ will credit reporters in the advisory unless they ask to remain anonymous.
 
 In scope:
 
-- The `buildwithnexus` npm package (CLI, bundled NEXUS source tarball,
-  installer scripts).
-- The publish pipeline in `.github/workflows/publish.yml`.
-- The bundled NEXUS Python source (`dist/nexus-release.tar.gz`).
-- Any release artifacts attached to GitHub Releases (SBOM, checksums).
+- The `buildwithnexus` npm package: the Node wrapper (`bin/`, `scripts/`) and
+  the Rust harness source (`harness/`) it builds or downloads.
+- The CI, release, and publish pipelines in `.github/workflows/`.
+- The prebuilt binaries and checksums attached to GitHub Releases.
 
 Out of scope:
 
@@ -44,42 +43,55 @@ Out of scope:
 
 ## Verifying a Release
 
-Every release on npm from `v0.9.0` onward ships with **npm provenance** — a
-SLSA-Build-L3-style attestation cryptographically tying the tarball back to the
-specific GitHub Actions workflow run that built it.
-
-To verify:
+Every release on npm from `v0.9.0` onward ships with **npm provenance** — an
+attestation cryptographically tying the tarball back to the specific GitHub
+Actions workflow run that built it:
 
 ```sh
 npm view buildwithnexus@<version> --json | jq .dist.attestations
 ```
 
-Or interactively in the terminal:
+Each per-platform binary on a GitHub Release carries a `.sha256` checksum file
+and a build-provenance attestation:
 
 ```sh
-npx -y npm-audit-resolver buildwithnexus
+gh attestation verify buildwithnexus-<target> --repo Garretts-Apps/buildwithnexus
 ```
 
-The publish workflow also attaches a CycloneDX SBOM (`sbom.cdx.json`) and a
-`SHA256SUMS.txt` to each GitHub Release. You can reproduce the tarball locally
-by checking out the corresponding tag and running:
+You can also skip the prebuilt binaries entirely and build from the tagged
+source:
 
 ```sh
 git clone --branch v<version> https://github.com/Garretts-Apps/buildwithnexus
-cd buildwithnexus
-NEXUS_SRC=/path/to/nexus npm run build && npm run bundle
-sha256sum dist/nexus-release.tar.gz
+cd buildwithnexus/harness
+cargo build --release --locked
 ```
 
+## How `npm install` Behaves
+
+The npm package is a thin wrapper with **zero runtime npm dependencies**. It
+declares one lifecycle script, `postinstall`, which:
+
+1. Downloads the prebuilt binary for your platform from the matching GitHub
+   Release over HTTPS.
+2. **Verifies its SHA-256** against the checksum published with the release
+   before marking it executable.
+3. Falls back to a local `cargo build` from the bundled Rust sources if no
+   binary matches your platform (or the download fails verification).
+
+It executes nothing else and installs no transitive npm packages.
+
 ## Hardening Inside the Package
 
-- `prepublishOnly` refuses to publish unless `NEXUS_SRC` is explicitly set to a
-  valid nexus checkout. No silent fall-through to a stale `/tmp/` copy.
-- `postinstall` was removed. `npm install buildwithnexus` no longer executes
-  any project-defined lifecycle script on the user's machine.
-- All GitHub Actions in our workflows are pinned to specific minor versions
-  (Dependabot proposes SHA-pinned bumps weekly).
-- The publish workflow runs with the minimum permissions required, plus
-  `id-token: write` only for OIDC provenance signing.
-- `npm ci --ignore-scripts` is used in CI to neutralise transitive postinstall
-  scripts during builds and audits.
+- Publishing uses npm's **OIDC Trusted Publisher** flow — no long-lived npm
+  token exists to steal; `id-token: write` is granted only to the publish job.
+- npm publish is **gated on the release workflow succeeding**, so a package
+  version can never point at binaries that don't exist.
+- All GitHub Actions in our workflows are version-pinned (Dependabot proposes
+  bumps weekly).
+- Workflows run with least-privilege permissions (`permissions: {}` at the
+  workflow level, escalated per job only where needed).
+- Inside the harness itself: mutating file tools are gated by the permission
+  model, sensitive paths and catastrophic commands require confirmation even in
+  `auto`, API keys are refused over non-HTTPS endpoints, and key-like tokens are
+  redacted from surfaced errors.

package/harness/Cargo.lock

@@ -49,7 +49,7 @@ checksum = "b4388bee8683e3d04af747c73422af53102d2bd24d9eadb6cbc100baef4b43f8"
 
 [[package]]
 name = "buildwithnexus"
-version = "0.10.6"
+version = "0.11.0"
 dependencies = [
  "criterion",
  "crossterm",

package/harness/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "buildwithnexus"
-version = "0.10.6"
+version = "0.11.0"
 edition = "2021"
 description = "A hilariously fast agentic AI CLI harness — remote or local models, full TUI with modes, memory, skills, hooks, and image input"
 license = "MIT"