indusagi-coding-agent 0.2.13 → 0.2.14

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (56) hide show
  1. package/README.md +19 -0
  2. package/dist/entry.js +1762 -958
  3. package/dist/guardrails.js +145 -35
  4. package/dist/index.js +1810 -1006
  5. package/dist/review-agent.js +344 -60
  6. package/dist/review-server.js +346 -62
  7. package/package.json +12 -3
  8. package/src/boot/auth-vault.ts +4 -5
  9. package/src/boot/runners/addon-wiring.ts +111 -3
  10. package/src/boot/runners/benchmark-integrity.ts +107 -0
  11. package/src/boot/runners/repl-runner.ts +2 -1
  12. package/src/boot/runners/session.ts +18 -8
  13. package/src/boot/server-token.ts +20 -11
  14. package/src/briefing/context-docs.ts +144 -12
  15. package/src/channels/oneshot.ts +6 -0
  16. package/src/conductor/conductor.ts +67 -12
  17. package/src/conductor/contract.ts +4 -3
  18. package/src/conductor/transcript-store/store.ts +4 -8
  19. package/src/console/auth-status.ts +9 -4
  20. package/src/console/components/AgentsView.ts +2 -2
  21. package/src/console/components/BackgroundAgents.ts +15 -2
  22. package/src/console/components/Banner.ts +20 -9
  23. package/src/console/components/Composer.ts +57 -82
  24. package/src/console/components/ScrollViewport.ts +46 -0
  25. package/src/console/components/TerminalConsole.ts +165 -162
  26. package/src/console/components/WorkingIndicator.ts +6 -5
  27. package/src/console/components/banner-sweep.ts +5 -1
  28. package/src/console/components/welcome.ts +3 -3
  29. package/src/console/contract.ts +10 -5
  30. package/src/console/index.ts +7 -7
  31. package/src/console/input/complete.ts +2 -2
  32. package/src/console/input/dir-reader.ts +3 -1
  33. package/src/console/input/graphemes.ts +22 -0
  34. package/src/console/input/keymap.ts +6 -4
  35. package/src/console/mount.ts +45 -3
  36. package/src/console/overlays/auth.ts +28 -8
  37. package/src/console/overlays/boards.ts +13 -40
  38. package/src/console/overlays/host.ts +10 -0
  39. package/src/console/overlays/pickers.ts +35 -30
  40. package/src/console/reducer.ts +12 -5
  41. package/src/console/slash/builtins.ts +4 -3
  42. package/src/console/slash/commands/integrations.ts +13 -14
  43. package/src/console/slash/commands/transcript.ts +3 -8
  44. package/src/console/slash/commands/workbench.ts +2 -2
  45. package/src/console/test-support.ts +48 -0
  46. package/src/integrations/sarvam/config.ts +15 -13
  47. package/src/kit/external-editor.ts +17 -1
  48. package/src/kit/run-shell.ts +31 -0
  49. package/src/launch/invocation/flags.ts +12 -0
  50. package/src/launch/login.ts +23 -10
  51. package/src/launch/oauth.ts +3 -0
  52. package/src/models.ts +78 -2
  53. package/src/security/private-state.ts +122 -0
  54. package/src/window-budget/summarize/condense.ts +4 -1
  55. package/src/workspace/brand.ts +1 -1
  56. package/src/workspace/locator.ts +2 -2
package/README.md CHANGED
@@ -44,6 +44,25 @@ Requires **Node >= 20**. Authenticate with an API key — set `ANTHROPIC_API_KEY
44
44
  `indus --help` prints the full flag grammar (generated from one flag table);
45
45
  `indus --version` prints the version.
46
46
 
47
+ ## Project trust and private state
48
+
49
+ - Executable files under `<repo>/.indus/addons` are disabled by default. Review
50
+ them, then pass `--trust-project-addons` to approve the canonical workspace and
51
+ the current addon-tree SHA-256 digest. The owner-only trust record is reused
52
+ while that digest is unchanged; any addon edit invalidates it.
53
+ - Context files are discovered only inside the canonical `--cwd` workspace.
54
+ Imports that resolve outside it are ignored unless the exact file is listed by
55
+ `--allow-context-import <path>`. Symlinks and likely secret files such as
56
+ `.env`, private-key files, and credential files are never auto-imported.
57
+ - On POSIX, agent state/session directories are enforced as `0700` and
58
+ credentials, trust records, integration keys, and transcripts as `0600`.
59
+ Existing owned paths are tightened; symlink destinations and paths owned by a
60
+ different user are rejected. Sensitive replacements use same-directory atomic
61
+ writes. Sarvam API keys are no longer read from or written to project config.
62
+ - Windows does not implement POSIX mode bits. The same symlink/regular-file and
63
+ atomic-replacement checks apply, but this release does not install Windows
64
+ ACLs; use a private user profile with appropriately restricted ACLs.
65
+
47
66
  ## Architecture
48
67
 
49
68
  The binary is `src/entry.ts`. Boot resolves the invocation, prepares the