vigthoria-cli 1.9.20 → 1.9.22

package/dist/commands/cancel.js

@@ -32,7 +32,7 @@ export class CancelCommand {
     }
     getBaseUrl() {
         const configuredApiUrl = String(this.config.get('apiUrl') || 'https://coder.vigthoria.io').replace(/\/$/, '');
-        const allowLocal = isServerRuntime() && process.env.VIGTHORIA_ALLOW_LOCAL_V3_AGENT === '1';
+        const allowLocal = !isServerRuntime() || process.env.VIGTHORIA_ALLOW_LOCAL_V3_AGENT === '1';
         return (process.env.VIGTHORIA_V3_AGENT_URL ||
             process.env.V3_AGENT_URL ||
             (allowLocal ? 'http://127.0.0.1:8030' : null) ||

package/dist/commands/chat.js

@@ -2801,6 +2801,9 @@ export class ChatCommand {
         return [
             'Vigthoria CLI agent operating contract.',
             `You are operating inside the project root: ${this.currentProjectPath}`,
+            `You are operating on the user's LOCAL machine. This CLI is not a server-only runtime.`,
+            `All file reads/writes and command execution must target the local project/workspace path unless the user explicitly requests remote/server execution.`,
+            'For command execution: ask for confirmation before risky commands; never redirect normal local work to server paths.',
             'CRITICAL: Begin working on the user\'s task IMMEDIATELY. Your very first response MUST contain <tool_call> blocks to gather evidence. Do NOT acknowledge instructions, restate the task, describe your plan, or discuss tool policies. Act, do not talk.',
             'FILE CREATION RULE: When the user asks you to build, create, or generate files, you MUST use the write_file tool to actually create each file on disk. NEVER output code snippets as markdown text — always write them to files using write_file. If the task requires a new project, create a new directory first, then write all files into it.',
             'Stay inside that project unless the user explicitly asks otherwise.',

package/dist/commands/fork.js

@@ -29,7 +29,7 @@ export class ForkCommand {
     }
     getBaseUrl() {
         const configuredApiUrl = String(this.config.get('apiUrl') || 'https://coder.vigthoria.io').replace(/\/$/, '');
-        const allowLocal = isServerRuntime() && process.env.VIGTHORIA_ALLOW_LOCAL_V3_AGENT === '1';
+        const allowLocal = !isServerRuntime() || process.env.VIGTHORIA_ALLOW_LOCAL_V3_AGENT === '1';
         return (process.env.VIGTHORIA_V3_AGENT_URL ||
             process.env.V3_AGENT_URL ||
             (allowLocal ? 'http://127.0.0.1:8030' : null) ||

package/dist/commands/history.js

@@ -29,7 +29,7 @@ export class HistoryCommand {
     }
     getBaseUrl() {
         const configuredApiUrl = String(this.config.get('apiUrl') || 'https://coder.vigthoria.io').replace(/\/$/, '');
-        const allowLocal = isServerRuntime() && process.env.VIGTHORIA_ALLOW_LOCAL_V3_AGENT === '1';
+        const allowLocal = !isServerRuntime() || process.env.VIGTHORIA_ALLOW_LOCAL_V3_AGENT === '1';
         return (process.env.VIGTHORIA_V3_AGENT_URL ||
             process.env.V3_AGENT_URL ||
             (allowLocal ? 'http://127.0.0.1:8030' : null) ||

package/dist/commands/replay.js

@@ -29,7 +29,7 @@ export class ReplayCommand {
     }
     getBaseUrl() {
         const configuredApiUrl = String(this.config.get('apiUrl') || 'https://coder.vigthoria.io').replace(/\/$/, '');
-        const allowLocal = isServerRuntime() && process.env.VIGTHORIA_ALLOW_LOCAL_V3_AGENT === '1';
+        const allowLocal = !isServerRuntime() || process.env.VIGTHORIA_ALLOW_LOCAL_V3_AGENT === '1';
         return (process.env.VIGTHORIA_V3_AGENT_URL ||
             process.env.V3_AGENT_URL ||
             (allowLocal ? 'http://127.0.0.1:8030' : null) ||

package/dist/utils/api.js

@@ -136,6 +136,8 @@ export function sanitizeUserFacingPathText(input) {
         .replace(/\bBound server workspace:\s*\S+/gi, 'Bound workspace: workspace/')
         .replace(/\bserver filesystem\b/gi, 'workspace sandbox')
         .replace(/\bon the server\b/gi, 'in the workspace')
+        .replace(/Blocked: shell operator '\\|' is not supported; run commands directly without shell piping or redirection/gi, 'Blocked command syntax from remote runner. Re-run locally using a single command, or ask for approval to run an equivalent local command.')
+        .replace(/command references a path outside the workspace\. Use paths relative to the workspace root[^.]*\./gi, 'The command path must resolve inside your local project workspace. Use local workspace-relative paths.')
         .replace(/\[(?:\s*)\]/g, '[workspace]')
         .replace(/(^|\s)\.\//g, '$1')
         .replace(/([^:])\/\/+/g, '$1/')
@@ -579,7 +581,9 @@ export class APIClient {
     }
     getV3AgentBaseUrls(preferLocal = false) {
         const configuredApiUrl = String(this.config.get('apiUrl') || 'https://coder.vigthoria.io').replace(/\/$/, '');
-        const allowLocalV3Agent = process.env.VIGTHORIA_ALLOW_LOCAL_V3_AGENT === '1' || preferLocal;
+        const allowLocalV3Agent = preferLocal
+            || process.env.VIGTHORIA_ALLOW_LOCAL_V3_AGENT === '1'
+            || !isServerRuntime();
         const urls = [
             process.env.VIGTHORIA_V3_AGENT_URL,
             process.env.V3_AGENT_URL,
@@ -1971,7 +1975,7 @@ menu {
     }
     resolveServerBindableWorkspacePath(context = {}) {
         const candidate = this.resolveAgentTargetPath(context);
-        if (!candidate || this.isLikelyWindowsPath(candidate) || !path.isAbsolute(candidate) || !fs.existsSync(candidate)) {
+        if (!candidate || !path.isAbsolute(candidate) || !fs.existsSync(candidate)) {
             return '';
         }
         const configuredRoots = (process.env.VIGTHORIA_SERVER_WORKSPACE_ROOTS || '/var/www/vigthoria-user-workspaces,/var/lib/vigthoria-workspaces')

package/dist/utils/tools.js

@@ -835,8 +835,19 @@ export class AgenticTools {
         }
         // Check permission for dangerous/modifying actions
         if (tool.requiresPermission && !this.autoApprove) {
-            // Check persistent permissions first (project-scoped), then session
-            if (this.hasPersistentPermission(normalizedCall.tool)) {
+            const requiresPerCommandApproval = normalizedCall.tool === 'bash';
+            if (requiresPerCommandApproval) {
+                const approved = await this.permissionCallback(this.formatPermissionRequest(normalizedCall, tool), { batchApproval: false });
+                if (approved === false) {
+                    return {
+                        success: false,
+                        error: 'Permission denied by user',
+                        canRetry: true,
+                    };
+                }
+            }
+            else if (this.hasPersistentPermission(normalizedCall.tool)) {
+                // Check persistent permissions first (project-scoped), then session
                 this.logger.info(`${call.tool}: Auto-approved (persistent)`);
             }
             else if (this.sessionApprovedTools.has(normalizedCall.tool)) {
@@ -1542,18 +1553,7 @@ export class AgenticTools {
             for (const part of cmdParts) {
                 const firstWord = part.trim().split(/\s+/)[0].toLowerCase();
                 if (unixOnlyCommands.includes(firstWord)) {
-                    return this.createErrorResult(ToolErrorType.EXECUTION_FAILED, `Command '${firstWord}' is not available on Windows`, `Use the 'ssh_exec' tool to run Unix commands on the server, ` +
-                        `or use 'fetch_url' for web requests. ` +
-                        `PowerShell alternatives: dir (ls), type (cat), findstr (grep), select-string (grep)`);
-                }
-            }
-            // Check for pipe to Unix command
-            if (args.command.includes('|')) {
-                const pipedCommands = args.command.split('|').map(c => c.trim().split(/\s+/)[0].toLowerCase());
-                for (const cmd of pipedCommands) {
-                    if (unixOnlyCommands.includes(cmd)) {
-                        return this.createErrorResult(ToolErrorType.EXECUTION_FAILED, `Piped command '${cmd}' is not available on Windows`, `Windows doesn't have '${cmd}'. Use 'ssh_exec' tool to run this command on the Vigthoria server instead.`);
-                    }
+                    return this.createErrorResult(ToolErrorType.EXECUTION_FAILED, `Command '${firstWord}' is not available on Windows`, `Use a local PowerShell equivalent instead: dir (ls), type (cat), findstr (grep), select-string (grep), or rerun with a Windows-safe command.`);
                 }
             }
         }

package/install.ps1

@@ -5,7 +5,7 @@
 $ErrorActionPreference = "Stop"
 
 # Configuration
-$CLI_VERSION = "1.9.20"
+$CLI_VERSION = "1.9.22"
 $INSTALL_DIR = "$env:USERPROFILE\.vigthoria"
 $NPM_PACKAGE = "vigthoria-cli"
 $GIT_PACKAGE_URL = "git+https://market.vigthoria.io/vigthoria/vigthoria-cli.git"

package/install.sh

@@ -26,7 +26,7 @@ else
 fi
 
 # Configuration
-CLI_VERSION="1.9.20"
+CLI_VERSION="1.9.22"
 INSTALL_DIR="$HOME/.vigthoria"
 REPO_URL="https://market.vigthoria.io/vigthoria/vigthoria-cli"
 GIT_PACKAGE_URL="git+https://market.vigthoria.io/vigthoria/vigthoria-cli.git"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vigthoria-cli",
-  "version": "1.9.20",
+  "version": "1.9.22",
   "description": "Vigthoria Coder CLI - AI-powered terminal coding assistant",
   "type": "module",
   "main": "dist/index.js",