osagent 0.1.84 → 0.1.86

package/README.md

@@ -210,7 +210,7 @@ Episodes are stored locally in `~/.osagent/episodes/`.
 
 ### Configuration
 
-OS Agent stores its configuration in `~/.osagent/`:
+OS Agent stores its configuration in `~/.osagent/` (created automatically on first run):
 
 ```
 ~/.osagent/
@@ -219,8 +219,7 @@ OS Agent stores its configuration in `~/.osagent/`:
 ├── commands/          # Custom slash commands (.toml)
 ├── skills/            # Custom skill plugins (.yaml)
 ├── prompts/           # Custom prompts
-├── episodes/          # Episodic memory storage
-└── system.md          # Custom system prompt
+└── episodes/          # Episodic memory storage
 ```
 
 ### Custom Agents
@@ -322,6 +321,17 @@ packages/
 
 ## Recent Updates
 
+### v0.1.86 - Auto Project Context
+- Automatic project context injection on first prompt
+- When no OSAGENT.md exists, AI auto-explores project structure before responding
+- No manual `/init` required for casual usage
+
+### v0.1.85 - Security & Stability Fixes
+- Timer now only counts active work time (stops when idle)
+- Fixed command injection vulnerability in git co-author feature
+- Fixed symlink bypass in path validation
+- Fixed VimModeContext re-render loop
+
 ### v0.1.83 - Enhanced Doctor Command
 - Added enhanced installation diagnostics to `/doctor`
 - Shows installation method (npm-global, homebrew, native, source)

package/{dist/cli.js → cli.js}

@@ -146587,7 +146587,7 @@ function createContentGeneratorConfig(config2, authType, generationConfig) {
   };
 }
 async function createContentGenerator(config2, gcConfig, sessionId2, isInitialAuth) {
-  const version3 = "0.1.84";
+  const version3 = "0.1.86";
   const userAgent2 = `OSAgent/${version3} (${process.platform}; ${process.arch})`;
   const baseHeaders = {
     "User-Agent": userAgent2
@@ -161283,9 +161283,20 @@ ${result.output}`;
         if (!gitCommitPattern.test(command2.trim())) {
           return command2;
         }
+        const sanitizeName = /* @__PURE__ */ __name((name3) => {
+          return name3.replace(/[\n\r"'`$\\<>|;&]/g, "").trim().slice(0, 100);
+        }, "sanitizeName");
+        const sanitizeEmail = /* @__PURE__ */ __name((email2) => {
+          return email2.replace(/[\n\r"'`$\\<>|;&\s]/g, "").trim().slice(0, 254);
+        }, "sanitizeEmail");
+        const safeName = sanitizeName(gitCoAuthorSettings.name ?? "");
+        const safeEmail = sanitizeEmail(gitCoAuthorSettings.email ?? "");
+        if (!safeName || !safeEmail) {
+          return command2;
+        }
         const coAuthor = `
 
-Co-authored-by: ${gitCoAuthorSettings.name} <${gitCoAuthorSettings.email}>`;
+Co-authored-by: ${safeName} <${safeEmail}>`;
         const messagePattern = /(-m\s+)(['"])((?:\\.|[^\\])*?)(\2)/;
         const match2 = command2.match(messagePattern);
         if (match2) {
@@ -161360,10 +161371,20 @@ Co-authored-by: ${gitCoAuthorSettings.name} <${gitCoAuthorSettings.email}>`;
           if (!path18.isAbsolute(params.directory)) {
             return "Directory must be an absolute path.";
           }
-          const normalizedDir = path18.resolve(params.directory);
+          let normalizedDir;
+          try {
+            normalizedDir = fs21.realpathSync(params.directory);
+          } catch {
+            normalizedDir = path18.resolve(params.directory);
+          }
           const workspaceDirs = this.config.getWorkspaceContext().getDirectories();
           const isWithinWorkspace = workspaceDirs.some((wsDir) => {
-            const normalizedWsDir = path18.resolve(wsDir);
+            let normalizedWsDir;
+            try {
+              normalizedWsDir = fs21.realpathSync(wsDir);
+            } catch {
+              normalizedWsDir = path18.resolve(wsDir);
+            }
             return normalizedDir === normalizedWsDir || normalizedDir.startsWith(normalizedWsDir + path18.sep);
           });
           if (!isWithinWorkspace) {
@@ -265306,7 +265327,7 @@ var require_backend = __commonJS({
                     return [b, function() {
                     }];
                   }, "useReducer"),
-                  useRef: /* @__PURE__ */ __name(function useRef36(a) {
+                  useRef: /* @__PURE__ */ __name(function useRef37(a) {
                     var b = C();
                     a = null !== b ? b.memoizedState : {
                       current: a
@@ -335543,7 +335564,7 @@ __name(getPackageJson, "getPackageJson");
 // packages/cli/src/utils/version.ts
 async function getCliVersion() {
   const pkgJson = await getPackageJson();
-  return "0.1.84";
+  return "0.1.86";
 }
 __name(getCliVersion, "getCliVersion");
 
@@ -339745,8 +339766,8 @@ var formatDuration = /* @__PURE__ */ __name((milliseconds) => {
 
 // packages/cli/src/generated/git-commit.ts
 init_esbuild_shims();
-var GIT_COMMIT_INFO2 = "2866a59";
-var CLI_VERSION2 = "0.1.84";
+var GIT_COMMIT_INFO2 = "c5e8879";
+var CLI_VERSION2 = "0.1.86";
 
 // packages/cli/src/utils/systemInfo.ts
 async function getNpmVersion() {
@@ -376370,25 +376391,32 @@ var VimModeProvider = /* @__PURE__ */ __name(({
 }) => {
   const initialVimEnabled = settings.merged.general?.vimMode ?? false;
   const [vimEnabled, setVimEnabled] = (0, import_react81.useState)(initialVimEnabled);
-  const [vimMode, setVimMode] = (0, import_react81.useState)(
+  const [vimMode, setVimModeState] = (0, import_react81.useState)(
     initialVimEnabled ? "NORMAL" : "INSERT"
   );
+  const vimEnabledRef = (0, import_react81.useRef)(vimEnabled);
+  (0, import_react81.useEffect)(() => {
+    vimEnabledRef.current = vimEnabled;
+  }, [vimEnabled]);
   (0, import_react81.useEffect)(() => {
     const enabled = settings.merged.general?.vimMode ?? false;
     setVimEnabled(enabled);
     if (enabled) {
-      setVimMode("NORMAL");
+      setVimModeState("NORMAL");
     }
   }, [settings.merged.general?.vimMode]);
+  const setVimMode = (0, import_react81.useCallback)((mode) => {
+    setVimModeState(mode);
+  }, []);
   const toggleVimEnabled = (0, import_react81.useCallback)(async () => {
-    const newValue = !vimEnabled;
+    const newValue = !vimEnabledRef.current;
     setVimEnabled(newValue);
     if (newValue) {
-      setVimMode("NORMAL");
+      setVimModeState("NORMAL");
     }
     await settings.setValue("User" /* User */, "general.vimMode", newValue);
     return newValue;
-  }, [vimEnabled, settings]);
+  }, [settings]);
   const value = (0, import_react81.useMemo)(() => ({
     vimEnabled,
     vimMode,
@@ -391846,13 +391874,24 @@ var AppContainer = /* @__PURE__ */ __name((props) => {
     currentPrompt,
     tokenUsage
   });
+  const hasAutoContextInjected = (0, import_react154.useRef)(false);
   const handleFinalSubmit = (0, import_react154.useCallback)(
     (submittedValue) => {
       setCurrentPrompt(submittedValue);
       setPromptCount((prev) => prev + 1);
-      addMessage(submittedValue);
+      const isSlashCommand2 = submittedValue.trim().startsWith("/");
+      const needsAutoContext = !isSlashCommand2 && !hasAutoContextInjected.current && OSAMdFileCount === 0 && submittedValue.trim().length > 0;
+      if (needsAutoContext) {
+        hasAutoContextInjected.current = true;
+        const enhancedPrompt = `Before responding to my request, please quickly explore this project to understand its structure (check package.json, README, main source directories). This will help you give better answers.
+
+My request: ${submittedValue}`;
+        addMessage(enhancedPrompt);
+      } else {
+        addMessage(submittedValue);
+      }
     },
-    [addMessage]
+    [addMessage, OSAMdFileCount]
   );
   const {
     welcomeBackInfo,