novaprime 1.4.2 → 1.5.1

package/bin/novaprime.js

@@ -58,7 +58,11 @@ function printHelp() {
     ${c.indigo('/clear')}   clear the screen
     ${c.indigo('/exit')}    quit  ${c.dim('(Ctrl+C also quits)')}
 
-  ${c.muted('Type a task and press Enter. NovaPrime asks before writing files or running commands.')}
+  ${c.white.bold('Permissions')}
+    ${c.indigo('Shift+Tab')}  toggle ${c.green('auto-accept')} ${c.dim('(no more permission prompts this session)')}
+    ${c.indigo('a')}          at any prompt = "always" ${c.dim('(approve this and everything after)')}
+
+  ${c.muted('Type a task and press Enter. By default NovaPrime asks before writing files or running commands.')}
 `);
 }
 
@@ -80,6 +84,8 @@ async function repl() {
   ui.banner(meToBanner(cfg, me));
   process.on('SIGINT', () => { console.log(c.muted('\n  bye')); process.exit(0); });
 
+  ui.hint('  Tip: press ' + c.indigo('Shift+Tab') + c.dim(' for auto-accept (no permission prompts), or answer ') + c.indigo('a') + c.dim(' at any prompt.'));
+
   // push the first input box toward the lower part of the screen, leaving a bottom margin
   const rows = process.stdout.rows || 24;
   process.stdout.write('\n'.repeat(Math.max(0, rows - 26)));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "novaprime",
-  "version": "1.4.2",
+  "version": "1.5.1",
   "description": "NovaPrime — an AI coding assistant in your terminal, powered by GLM.",
   "bin": {
     "novaprime": "bin/novaprime.js"

package/src/agent.js

@@ -17,6 +17,9 @@ const SYSTEM_PROMPT =
   `Use clear markdown: short paragraphs, bullet lists, and fenced code blocks with a language tag. ` +
   `When asked to create or change files, call the tool RIGHT AWAY with at most a one-line intro — ` +
   `do NOT write long explanations or feature lists before creating the file. Keep any summary to 1-2 short lines after. ` +
+  `NEVER start dev servers or long-running/blocking processes (e.g. "npm run dev", "npm start", "vite", "next dev", ` +
+  `"nodemon", watchers) — they block the session forever. After creating the files, finish, then tell the user the ` +
+  `commands to run it themselves (e.g. cd into the folder and run "npm run dev", then open the localhost URL). ` +
   `Be concise and warm. Current OS: ${os.platform()}. Working directory: ${process.cwd()}.`;
 
 // Fetch read-only account info for the header (name, plan, usage). Never throws.

package/src/mode.js

@@ -0,0 +1,12 @@
+'use strict';
+
+// Session-wide permission mode. When auto-accept is ON, NovaPrime runs commands
+// and writes/edits files without asking each time. Toggle with Shift+Tab, or by
+// answering "a" (always) at any permission prompt.
+let auto = false;
+
+module.exports = {
+  isAuto: () => auto,
+  setAuto: (v) => { auto = !!v; },
+  toggle: () => { auto = !auto; return auto; },
+};

package/src/prompt.js

@@ -1,5 +1,7 @@
 'use strict';
 const readline = require('readline');
+const { c } = require('./ui');
+const mode = require('./mode');
 
 // Use Node's readline for single-line prompts (login key, y/N) — it handles
 // editing and history. The multi-line chat box uses a paste-aware reader below.
@@ -60,8 +62,9 @@ function handlePlain(state, s, sink) {
       }
       continue;
     }
-    if (ch === '\x1b') {                                                  // skip CSI/SS3 escape (arrows, fn keys)
-      if (s[i + 1] === '[' || s[i + 1] === 'O') {
+    if (ch === '\x1b') {
+      if (s.slice(i, i + 3) === '\x1b[Z') { if (sink.toggleMode) sink.toggleMode(); i += 2; continue; } // Shift+Tab
+      if (s[i + 1] === '[' || s[i + 1] === 'O') {                         // skip other CSI/SS3 escapes (arrows, fn keys)
         i += 2;
         while (i < s.length && !/[A-Za-z~]/.test(s[i])) i++;
       }
@@ -138,6 +141,14 @@ function boxInput(top, bottom, prompt) {
       out: (str) => process.stdout.write(str),
       submit: (val) => { state.finished = true; cleanup(); process.stdout.write('\n' + bottom + '\n'); resolve(val); },
       cancel: () => { state.finished = true; cleanup(); process.stdout.write('\n' + bottom + '\n'); resolve(null); },
+      toggleMode: () => {
+        const on = mode.toggle();
+        process.stdout.write('\r\x1b[2K'); // clear current input line
+        process.stdout.write((on
+          ? c.green('  ⚡ auto-accept: ON') + c.dim('  — running everything without asking (Shift+Tab to undo)')
+          : c.dim('  ⚡ auto-accept: OFF — will ask before changes')) + '\n');
+        process.stdout.write(prompt + state.buf); // redraw input line with whatever was typed
+      },
     };
 
     process.stdout.write(top + '\n');

package/src/tools.js

@@ -2,11 +2,26 @@
 const fs = require('fs');
 const path = require('path');
 const { spawnSync } = require('child_process');
-const { confirm } = require('./prompt');
+const { ask } = require('./prompt');
 const { c, tool } = require('./ui');
+const mode = require('./mode');
 
 const MAX_OUTPUT = 20000; // cap tool output sent back to the model
 
+// Permission gate. Returns true if allowed. In auto-accept mode it never asks.
+// Answering "a" (always) flips auto-accept ON for the rest of the session.
+async function allow(label) {
+  if (mode.isAuto()) { console.log(c.dim('  · auto-accepted')); return true; }
+  const raw = (await ask(label + c.dim(' (y/N, a=always) '))) || '';
+  const a = raw.trim().toLowerCase();
+  if (a === 'a' || a === 'always') {
+    mode.setAuto(true);
+    console.log(c.green('  ✓ auto-accept ON for this session') + c.dim('  (Shift+Tab to turn off)'));
+    return true;
+  }
+  return a === 'y' || a === 'yes';
+}
+
 // ---- Tool definitions (Anthropic tool-use format) ----
 const definitions = [
   {
@@ -87,7 +102,7 @@ async function execute(name, input) {
         console.log('');
         console.log(c.amber('  ╭─ permission ') + c.dim('─────────────────────────────'));
         console.log(c.amber('  │ ') + c.bold('Write file') + '   ' + c.white(input.path) + c.muted(`  (${(input.content || '').length} chars)`));
-        if (!(await confirm(c.amber('  ╰─ allow?')))) { console.log(c.dim('  · skipped')); return 'DENIED: user did not allow writing the file.'; }
+        if (!(await allow(c.amber('  ╰─ allow?')))) { console.log(c.dim('  · skipped')); return 'DENIED: user did not allow writing the file.'; }
         fs.mkdirSync(path.dirname(path.resolve(input.path)), { recursive: true });
         fs.writeFileSync(input.path, input.content);
         console.log(c.green('  ✓ wrote ') + c.white(input.path));
@@ -103,16 +118,24 @@ async function execute(name, input) {
         console.log(c.amber('  │ ') + c.bold('Edit file') + '   ' + c.white(input.path));
         console.log(c.red('  │ - ' + input.old_string.split('\n').join('\n  │ - ')));
         console.log(c.green('  │ + ' + input.new_string.split('\n').join('\n  │ + ')));
-        if (!(await confirm(c.amber('  ╰─ allow?')))) { console.log(c.dim('  · skipped')); return 'DENIED: user did not allow the edit.'; }
+        if (!(await allow(c.amber('  ╰─ allow?')))) { console.log(c.dim('  · skipped')); return 'DENIED: user did not allow the edit.'; }
         fs.writeFileSync(input.path, before.replace(input.old_string, input.new_string));
         console.log(c.green('  ✓ edited ') + c.white(input.path));
         return 'OK: edited ' + input.path;
       }
       case 'run_command': {
+        const cmd = String(input.command || '');
+        // Refuse blocking dev servers / watchers — they never exit and freeze the session.
+        if (/\b(npm|pnpm|yarn|bun)\s+(run\s+)?(dev|start|serve|watch)\b|\bvite\b(?!\s+build)|\bnext\s+dev\b|\bnodemon\b|webpack-dev-server|webpack\s+serve|\bnpx\s+serve\b|\bhttp-server\b|\blive-server\b|php\s+-S|python\s+-m\s+http\.server|flask\s+run|rails\s+s(erver)?\b|\bng\s+serve\b/i.test(cmd)) {
+          console.log('');
+          console.log(c.amber('  ! ') + c.amber('skipped dev server: ') + c.white(cmd));
+          console.log(c.dim('    (long-running — start it yourself in another terminal when ready)'));
+          return 'SKIPPED: "' + cmd + '" is a long-running dev/watch server and was NOT run (it would block the session forever). Do NOT start dev servers. Finish the work, then tell the user how to run it themselves in a separate terminal, e.g. `cd <project>` then `npm run dev`, and to open the localhost URL it prints.';
+        }
         console.log('');
         console.log(c.red('  ╭─ permission · run command ') + c.dim('───────────────────'));
         console.log(c.red('  │ ') + c.bold(input.command));
-        if (!(await confirm(c.red('  ╰─ run this command?')))) { console.log(c.dim('  · skipped')); return 'DENIED: user did not allow running the command.'; }
+        if (!(await allow(c.red('  ╰─ run this command?')))) { console.log(c.dim('  · skipped')); return 'DENIED: user did not allow running the command.'; }
         const r = spawnSync(input.command, { shell: true, encoding: 'utf8', timeout: 1000 * 120 });
         const out = (r.stdout || '') + (r.stderr || '');
         return clip(`exit_code=${r.status}\n${out}`.trim());