indusagi 0.13.11 → 0.13.12

package/dist/mcp.js

@@ -1881,8 +1881,96 @@ function platformOpenCommand(url) {
 }
 
 // src/facade/mcp-core/oauth/token-store.ts
-import { chmodSync, existsSync as existsSync2, mkdirSync as mkdirSync2, readFileSync as readFileSync2, renameSync, writeFileSync as writeFileSync2 } from "node:fs";
-import { dirname as dirname2, join as join2 } from "node:path";
+import { join as join2 } from "node:path";
+
+// src/security/private-state.ts
+import {
+  chmodSync,
+  closeSync,
+  constants,
+  fchmodSync,
+  fstatSync,
+  lstatSync,
+  mkdirSync as mkdirSync2,
+  openSync,
+  readFileSync as readFileSync2,
+  renameSync,
+  rmSync,
+  writeFileSync as writeFileSync2
+} from "node:fs";
+import { randomUUID } from "node:crypto";
+import { dirname as dirname2 } from "node:path";
+var NO_FOLLOW = constants.O_NOFOLLOW ?? 0;
+var isPosix = () => process.platform !== "win32";
+function assertOwned(uid, path) {
+  if (!isPosix() || process.getuid === void 0) return;
+  if (uid !== process.getuid()) throw new Error(`Refusing sensitive path not owned by the current user: ${path}`);
+}
+function ensurePrivateDirectorySync(path) {
+  try {
+    const current = lstatSync(path);
+    if (current.isSymbolicLink() || !current.isDirectory()) throw new Error(`Refusing non-directory sensitive state path: ${path}`);
+    assertOwned(current.uid, path);
+  } catch (error) {
+    if (error.code !== "ENOENT") throw error;
+    mkdirSync2(path, { recursive: true, mode: 448 });
+  }
+  if (isPosix()) chmodSync(path, 448);
+}
+function validateExistingFile(path) {
+  try {
+    const current = lstatSync(path);
+    if (current.isSymbolicLink() || !current.isFile()) throw new Error(`Refusing non-regular sensitive file: ${path}`);
+    assertOwned(current.uid, path);
+  } catch (error) {
+    if (error.code === "ENOENT") return;
+    throw error;
+  }
+}
+function readPrivateFileSync(path) {
+  ensurePrivateDirectorySync(dirname2(path));
+  validateExistingFile(path);
+  let fd;
+  try {
+    fd = openSync(path, constants.O_RDONLY | NO_FOLLOW);
+  } catch (error) {
+    if (error.code === "ENOENT") return null;
+    throw error;
+  }
+  try {
+    const current = fstatSync(fd);
+    if (!current.isFile()) throw new Error(`Refusing non-regular sensitive file: ${path}`);
+    assertOwned(current.uid, path);
+    if (isPosix()) fchmodSync(fd, 384);
+    return readFileSync2(fd, "utf8");
+  } finally {
+    closeSync(fd);
+  }
+}
+function atomicWritePrivateFileSync(path, content) {
+  ensurePrivateDirectorySync(dirname2(path));
+  validateExistingFile(path);
+  const temporary = `${path}.tmp-${process.pid}-${randomUUID()}`;
+  let fd;
+  try {
+    fd = openSync(temporary, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | NO_FOLLOW, 384);
+    writeFileSync2(fd, content, "utf8");
+    if (isPosix()) fchmodSync(fd, 384);
+    closeSync(fd);
+    fd = void 0;
+    renameSync(temporary, path);
+    if (isPosix()) chmodSync(path, 384);
+  } catch (error) {
+    if (fd !== void 0) closeSync(fd);
+    try {
+      rmSync(temporary, { force: true });
+    } catch {
+    }
+    throw error;
+  }
+}
+
+// src/facade/mcp-core/oauth/token-store.ts
 function defaultCredentialsDir() {
   const xdg = process.env.XDG_CONFIG_HOME;
   const home = process.env.HOME ?? process.env.USERPROFILE ?? "";
@@ -1899,10 +1987,11 @@ function credentialsPath(credentialsDir, id) {
 }
 function readMcpOAuthState(credentialsDir, id) {
   const path = credentialsPath(credentialsDir, id);
-  if (!existsSync2(path)) return void 0;
   let raw;
   try {
-    raw = readFileSync2(path, "utf8");
+    const stored = readPrivateFileSync(path);
+    if (stored === null) return void 0;
+    raw = stored;
   } catch (e) {
     return void 0;
   }
@@ -1917,15 +2006,8 @@ function readMcpOAuthState(credentialsDir, id) {
 }
 function writeMcpOAuthState(credentialsDir, state) {
   const path = credentialsPath(credentialsDir, state.id);
-  mkdirSync2(dirname2(path), { recursive: true });
-  const tmp = `${path}.tmp-${process.pid}-${Date.now()}`;
   const json = JSON.stringify({ ...state, updatedAt: Date.now() }, null, 2);
-  writeFileSync2(tmp, json, { mode: 384 });
-  renameSync(tmp, path);
-  try {
-    chmodSync(path, 384);
-  } catch {
-  }
+  atomicWritePrivateFileSync(path, json);
 }
 function clearMcpOAuthState(credentialsDir, id) {
   const path = credentialsPath(credentialsDir, id);

package/dist/react-host/jsx-dev-runtime.js

@@ -0,0 +1,93 @@
+// src/react-host/loader.ts
+import { createRequire } from "node:module";
+import fs from "node:fs";
+import path from "node:path";
+import { fileURLToPath, pathToFileURL } from "node:url";
+function findPackageRoot(start) {
+  let current = path.resolve(start);
+  while (true) {
+    const packageJson = path.join(current, "package.json");
+    if (fs.existsSync(packageJson)) {
+      return current;
+    }
+    const parent = path.dirname(current);
+    if (parent === current) {
+      return null;
+    }
+    current = parent;
+  }
+}
+function createPackageRequire(packageRoot) {
+  return createRequire(path.join(packageRoot, "package.json"));
+}
+function candidatePackageRoots() {
+  const roots = /* @__PURE__ */ new Set();
+  const addCandidate = (candidate) => {
+    if (!candidate) {
+      return;
+    }
+    const root = findPackageRoot(candidate);
+    if (root) {
+      roots.add(root);
+    }
+  };
+  const argv1 = process.argv[1];
+  let argv1Real;
+  if (argv1) {
+    try {
+      argv1Real = fs.realpathSync(argv1);
+    } catch {
+      argv1Real = argv1;
+    }
+  }
+  const packageRoot = fileURLToPath(new URL("../../..", import.meta.url));
+  addCandidate(process.env.INDUSAGI_REACT_HOST_ROOT);
+  addCandidate(argv1Real ? path.dirname(argv1Real) : void 0);
+  addCandidate(argv1 ? path.dirname(argv1) : void 0);
+  addCandidate(process.env.INIT_CWD);
+  addCandidate(process.cwd());
+  addCandidate(packageRoot);
+  return [...roots];
+}
+function resolveHostModule(specifier) {
+  const failures = [];
+  for (const packageRoot of candidatePackageRoots()) {
+    try {
+      return createPackageRequire(packageRoot).resolve(specifier);
+    } catch (error) {
+      failures.push(`${packageRoot}: ${String(error.message ?? error)}`);
+    }
+  }
+  throw new Error(
+    `Unable to resolve host module "${specifier}" from any detected package root.
+${failures.join("\n")}`
+  );
+}
+function normalizeModuleNamespace(moduleNamespace) {
+  const defaultExport = moduleNamespace.default;
+  if (defaultExport && typeof defaultExport === "object") {
+    return { ...defaultExport, ...moduleNamespace };
+  }
+  return moduleNamespace;
+}
+async function importHostModule(specifier) {
+  const resolved = resolveHostModule(specifier);
+  const moduleNamespace = await import(pathToFileURL(resolved).href);
+  return normalizeModuleNamespace(moduleNamespace);
+}
+var jsxDevRuntimeInstance = null;
+function loadHostJsxDevRuntime() {
+  if (!jsxDevRuntimeInstance) {
+    jsxDevRuntimeInstance = importHostModule("react/jsx-dev-runtime");
+  }
+  return jsxDevRuntimeInstance;
+}
+
+// src/react-host/jsx-dev-runtime.ts
+var jsxDevRuntime = await loadHostJsxDevRuntime();
+var Fragment = jsxDevRuntime.Fragment;
+var jsxDEV = jsxDevRuntime.jsxDEV;
+export {
+  Fragment,
+  jsxDEV
+};

package/dist/react-ink.js

@@ -1209,9 +1209,9 @@ function formatToken(token, theme, highlight = null, listDepth = 0, orderedListN
       const inner = (headingToken.tokens ?? []).map((child) => formatToken(child, theme, highlight)).join("");
       const colored = theme.role("heading", inner);
       if (headingToken.depth === 1) {
-        return chalk2.bold.italic.underline(colored) + EOL + EOL;
+        return chalk2.bold.underline(`${theme.role("heading", "\u25B0")} ${colored}`) + EOL;
       }
-      return chalk2.bold(colored) + EOL + EOL;
+      return chalk2.bold(`${theme.role("heading", "\u25C6")} ${colored}`) + EOL;
     }
     case "hr":
       return "---";
@@ -1245,8 +1245,14 @@ function formatToken(token, theme, highlight = null, listDepth = 0, orderedListN
       return (token.tokens ?? []).map(
         (child) => `${"  ".repeat(listDepth)}${formatToken(child, theme, highlight, listDepth + 1, orderedListNumber, token)}`
       ).join("");
-    case "paragraph":
-      return (token.tokens ?? []).map((child) => formatToken(child, theme, highlight)).join("") + EOL;
+    case "paragraph": {
+      const children = token.tokens ?? [];
+      const body = children.map((child) => formatToken(child, theme, highlight)).join("");
+      if (children.length === 1 && children[0]?.type === "strong") {
+        return `${theme.role("heading", "\u25C6")} ${body}${EOL}`;
+      }
+      return body + EOL;
+    }
     case "space":
     case "br":
       return EOL;
@@ -1256,7 +1262,7 @@ function formatToken(token, theme, highlight = null, listDepth = 0, orderedListN
         return textToken.text;
       }
       if (parent?.type === "list_item") {
-        const marker = orderedListNumber === null ? "-" : `${getListNumber(listDepth, orderedListNumber)}.`;
+        const marker = orderedListNumber === null ? "\u2022" : `${getListNumber(listDepth, orderedListNumber)}.`;
         const body = textToken.tokens ? textToken.tokens.map((child) => formatToken(child, theme, highlight, listDepth, orderedListNumber, token)).join("") : textToken.text;
         return `${marker} ${body}${EOL}`;
       }

package/dist/runtime.js

@@ -191,6 +191,50 @@ var MODEL_CARDS = [
       cacheWritePerMTok: 12.5
     }
   },
+  {
+    id: "gpt-6-luna",
+    provider: "openai",
+    api: "openai-responses",
+    displayName: "GPT-6 Luna",
+    baseUrl: "https://api.openai.com/v1",
+    contextWindow: 105e4,
+    maxOutputTokens: 128e3,
+    modalities: ["text", "image"],
+    reasoning: true,
+    reasoningEfforts: ["low", "medium", "high", "xhigh", "max"],
+    longContextPricing: {
+      threshold: 272e3,
+      multipliers: { input: 2, output: 1.5, cacheRead: 2, cacheWrite: 2 }
+    },
+    cost: {
+      inputPerMTok: 0.1,
+      outputPerMTok: 0.5,
+      cacheReadPerMTok: 0.01,
+      cacheWritePerMTok: 0.125
+    }
+  },
+  {
+    id: "gpt-6-sol",
+    provider: "openai",
+    api: "openai-responses",
+    displayName: "GPT-6 Sol",
+    baseUrl: "https://api.openai.com/v1",
+    contextWindow: 105e4,
+    maxOutputTokens: 128e3,
+    modalities: ["text", "image"],
+    reasoning: true,
+    reasoningEfforts: ["high"],
+    longContextPricing: {
+      threshold: 272e3,
+      multipliers: { input: 2, output: 1.5, cacheRead: 2, cacheWrite: 2 }
+    },
+    cost: {
+      inputPerMTok: 10,
+      outputPerMTok: 50,
+      cacheReadPerMTok: 1,
+      cacheWritePerMTok: 12.5
+    }
+  },
   // ── Google (Gemini) ─────────────────────────────────────────────────────
   {
     id: "gemini-2.5-pro",
@@ -1734,10 +1778,11 @@ function buildBody2(model, c, opts) {
   if (ceiling > 0) {
     body.max_output_tokens = ceiling;
   }
-  if (model.id !== "gpt-6-astra" && opts.temperature !== void 0) {
+  const usesFixedGpt6Sampling = ["gpt-6-astra", "gpt-6-sol", "gpt-6-luna"].includes(model.id);
+  if (!usesFixedGpt6Sampling && opts.temperature !== void 0) {
     body.temperature = opts.temperature;
   }
-  if (model.id !== "gpt-6-astra" && opts.topP !== void 0) {
+  if (!usesFixedGpt6Sampling && opts.topP !== void 0) {
     body.top_p = opts.topP;
   }
   if (model.reasoning && opts.thinking !== void 0 && opts.thinking !== "off") {

package/dist/shell-app.js

@@ -430,6 +430,50 @@ var MODEL_CARDS = [
       cacheWritePerMTok: 12.5
     }
   },
+  {
+    id: "gpt-6-luna",
+    provider: "openai",
+    api: "openai-responses",
+    displayName: "GPT-6 Luna",
+    baseUrl: "https://api.openai.com/v1",
+    contextWindow: 105e4,
+    maxOutputTokens: 128e3,
+    modalities: ["text", "image"],
+    reasoning: true,
+    reasoningEfforts: ["low", "medium", "high", "xhigh", "max"],
+    longContextPricing: {
+      threshold: 272e3,
+      multipliers: { input: 2, output: 1.5, cacheRead: 2, cacheWrite: 2 }
+    },
+    cost: {
+      inputPerMTok: 0.1,
+      outputPerMTok: 0.5,
+      cacheReadPerMTok: 0.01,
+      cacheWritePerMTok: 0.125
+    }
+  },
+  {
+    id: "gpt-6-sol",
+    provider: "openai",
+    api: "openai-responses",
+    displayName: "GPT-6 Sol",
+    baseUrl: "https://api.openai.com/v1",
+    contextWindow: 105e4,
+    maxOutputTokens: 128e3,
+    modalities: ["text", "image"],
+    reasoning: true,
+    reasoningEfforts: ["high"],
+    longContextPricing: {
+      threshold: 272e3,
+      multipliers: { input: 2, output: 1.5, cacheRead: 2, cacheWrite: 2 }
+    },
+    cost: {
+      inputPerMTok: 10,
+      outputPerMTok: 50,
+      cacheReadPerMTok: 1,
+      cacheWritePerMTok: 12.5
+    }
+  },
   // ── Google (Gemini) ─────────────────────────────────────────────────────
   {
     id: "gemini-2.5-pro",
@@ -1989,10 +2033,11 @@ function buildBody2(model, c, opts) {
   if (ceiling > 0) {
     body.max_output_tokens = ceiling;
   }
-  if (model.id !== "gpt-6-astra" && opts.temperature !== void 0) {
+  const usesFixedGpt6Sampling = ["gpt-6-astra", "gpt-6-sol", "gpt-6-luna"].includes(model.id);
+  if (!usesFixedGpt6Sampling && opts.temperature !== void 0) {
     body.temperature = opts.temperature;
   }
-  if (model.id !== "gpt-6-astra" && opts.topP !== void 0) {
+  if (!usesFixedGpt6Sampling && opts.topP !== void 0) {
     body.top_p = opts.topP;
   }
   if (model.reasoning && opts.thinking !== void 0 && opts.thinking !== "off") {
@@ -9803,9 +9848,9 @@ function formatToken(token, theme, highlight = null, listDepth = 0, orderedListN
       const inner = (headingToken.tokens ?? []).map((child) => formatToken(child, theme, highlight)).join("");
       const colored = theme.role("heading", inner);
       if (headingToken.depth === 1) {
-        return chalk2.bold.italic.underline(colored) + EOL + EOL;
+        return chalk2.bold.underline(`${theme.role("heading", "\u25B0")} ${colored}`) + EOL;
       }
-      return chalk2.bold(colored) + EOL + EOL;
+      return chalk2.bold(`${theme.role("heading", "\u25C6")} ${colored}`) + EOL;
     }
     case "hr":
       return "---";
@@ -9839,8 +9884,14 @@ function formatToken(token, theme, highlight = null, listDepth = 0, orderedListN
       return (token.tokens ?? []).map(
         (child) => `${"  ".repeat(listDepth)}${formatToken(child, theme, highlight, listDepth + 1, orderedListNumber, token)}`
       ).join("");
-    case "paragraph":
-      return (token.tokens ?? []).map((child) => formatToken(child, theme, highlight)).join("") + EOL;
+    case "paragraph": {
+      const children = token.tokens ?? [];
+      const body = children.map((child) => formatToken(child, theme, highlight)).join("");
+      if (children.length === 1 && children[0]?.type === "strong") {
+        return `${theme.role("heading", "\u25C6")} ${body}${EOL}`;
+      }
+      return body + EOL;
+    }
     case "space":
     case "br":
       return EOL;
@@ -9850,7 +9901,7 @@ function formatToken(token, theme, highlight = null, listDepth = 0, orderedListN
         return textToken.text;
       }
       if (parent?.type === "list_item") {
-        const marker = orderedListNumber === null ? "-" : `${getListNumber(listDepth, orderedListNumber)}.`;
+        const marker = orderedListNumber === null ? "\u2022" : `${getListNumber(listDepth, orderedListNumber)}.`;
         const body = textToken.tokens ? textToken.tokens.map((child) => formatToken(child, theme, highlight, listDepth, orderedListNumber, token)).join("") : textToken.text;
         return `${marker} ${body}${EOL}`;
       }

package/dist/smithy.js

@@ -3671,6 +3671,50 @@ var MODEL_CARDS = [
       cacheWritePerMTok: 12.5
     }
   },
+  {
+    id: "gpt-6-luna",
+    provider: "openai",
+    api: "openai-responses",
+    displayName: "GPT-6 Luna",
+    baseUrl: "https://api.openai.com/v1",
+    contextWindow: 105e4,
+    maxOutputTokens: 128e3,
+    modalities: ["text", "image"],
+    reasoning: true,
+    reasoningEfforts: ["low", "medium", "high", "xhigh", "max"],
+    longContextPricing: {
+      threshold: 272e3,
+      multipliers: { input: 2, output: 1.5, cacheRead: 2, cacheWrite: 2 }
+    },
+    cost: {
+      inputPerMTok: 0.1,
+      outputPerMTok: 0.5,
+      cacheReadPerMTok: 0.01,
+      cacheWritePerMTok: 0.125
+    }
+  },
+  {
+    id: "gpt-6-sol",
+    provider: "openai",
+    api: "openai-responses",
+    displayName: "GPT-6 Sol",
+    baseUrl: "https://api.openai.com/v1",
+    contextWindow: 105e4,
+    maxOutputTokens: 128e3,
+    modalities: ["text", "image"],
+    reasoning: true,
+    reasoningEfforts: ["high"],
+    longContextPricing: {
+      threshold: 272e3,
+      multipliers: { input: 2, output: 1.5, cacheRead: 2, cacheWrite: 2 }
+    },
+    cost: {
+      inputPerMTok: 10,
+      outputPerMTok: 50,
+      cacheReadPerMTok: 1,
+      cacheWritePerMTok: 12.5
+    }
+  },
   // ── Google (Gemini) ─────────────────────────────────────────────────────
   {
     id: "gemini-2.5-pro",
@@ -5214,10 +5258,11 @@ function buildBody2(model, c, opts) {
   if (ceiling > 0) {
     body.max_output_tokens = ceiling;
   }
-  if (model.id !== "gpt-6-astra" && opts.temperature !== void 0) {
+  const usesFixedGpt6Sampling = ["gpt-6-astra", "gpt-6-sol", "gpt-6-luna"].includes(model.id);
+  if (!usesFixedGpt6Sampling && opts.temperature !== void 0) {
     body.temperature = opts.temperature;
   }
-  if (model.id !== "gpt-6-astra" && opts.topP !== void 0) {
+  if (!usesFixedGpt6Sampling && opts.topP !== void 0) {
     body.top_p = opts.topP;
   }
   if (model.reasoning && opts.thinking !== void 0 && opts.thinking !== "off") {

package/dist/swarm.js

@@ -194,6 +194,50 @@ var MODEL_CARDS = [
       cacheWritePerMTok: 12.5
     }
   },
+  {
+    id: "gpt-6-luna",
+    provider: "openai",
+    api: "openai-responses",
+    displayName: "GPT-6 Luna",
+    baseUrl: "https://api.openai.com/v1",
+    contextWindow: 105e4,
+    maxOutputTokens: 128e3,
+    modalities: ["text", "image"],
+    reasoning: true,
+    reasoningEfforts: ["low", "medium", "high", "xhigh", "max"],
+    longContextPricing: {
+      threshold: 272e3,
+      multipliers: { input: 2, output: 1.5, cacheRead: 2, cacheWrite: 2 }
+    },
+    cost: {
+      inputPerMTok: 0.1,
+      outputPerMTok: 0.5,
+      cacheReadPerMTok: 0.01,
+      cacheWritePerMTok: 0.125
+    }
+  },
+  {
+    id: "gpt-6-sol",
+    provider: "openai",
+    api: "openai-responses",
+    displayName: "GPT-6 Sol",
+    baseUrl: "https://api.openai.com/v1",
+    contextWindow: 105e4,
+    maxOutputTokens: 128e3,
+    modalities: ["text", "image"],
+    reasoning: true,
+    reasoningEfforts: ["high"],
+    longContextPricing: {
+      threshold: 272e3,
+      multipliers: { input: 2, output: 1.5, cacheRead: 2, cacheWrite: 2 }
+    },
+    cost: {
+      inputPerMTok: 10,
+      outputPerMTok: 50,
+      cacheReadPerMTok: 1,
+      cacheWritePerMTok: 12.5
+    }
+  },
   // ── Google (Gemini) ─────────────────────────────────────────────────────
   {
     id: "gemini-2.5-pro",
@@ -1737,10 +1781,11 @@ function buildBody2(model, c, opts) {
   if (ceiling > 0) {
     body.max_output_tokens = ceiling;
   }
-  if (model.id !== "gpt-6-astra" && opts.temperature !== void 0) {
+  const usesFixedGpt6Sampling = ["gpt-6-astra", "gpt-6-sol", "gpt-6-luna"].includes(model.id);
+  if (!usesFixedGpt6Sampling && opts.temperature !== void 0) {
     body.temperature = opts.temperature;
   }
-  if (model.id !== "gpt-6-astra" && opts.topP !== void 0) {
+  if (!usesFixedGpt6Sampling && opts.topP !== void 0) {
     body.top_p = opts.topP;
   }
   if (model.reasoning && opts.thinking !== void 0 && opts.thinking !== "off") {

package/dist/types/facade/ml/auth-store.d.ts

@@ -0,0 +1,7 @@
+import type { OAuthCredentials } from "./kit/auth/types.js";
+export type AuthStore = Record<string, {
+    type: "oauth";
+} & OAuthCredentials>;
+export declare function resolveAuthFile(home?: string): string;
+export declare function loadAuthStore(path?: string): AuthStore;
+export declare function saveAuthStore(auth: AuthStore, path?: string): void;

package/dist/types/facade/ml/auth-store.test.d.ts

@@ -0,0 +1 @@
+export {};