zarz 0.3.5-alpha → 0.5.1-alpha

package/CHANGELOG.md

@@ -0,0 +1,25 @@
+# Changelog
+
+## 0.5.0-ALPHA
+
+### New Native tooling
+- Added native `read_file`, `list_dir`, `grep_files`, and `apply_patch` handlers; the AI no longer needs to shell out to `bash` for routine context gathering.
+- `apply_patch` now applies Zarz-style diffs directly (Add/Update/Delete blocks) with safe path resolution.
+- Tool invocations log like “• Explored…” summaries so the terminal stays concise while OpenAI still receives the full output.
+
+### Prompt and UX cleanup
+- Updated README.md to describe the new tool stack and exploration logs.
+
+### Codex authentication
+- Added full ChatGPT OAuth wizard, including PKCE, `originator=zarz_cli`, and first-party success page branded “Signed in to ZarzCLI”.
+- Stored access/refresh/id tokens plus `project_id`, `organization_id`, and `chatgpt_account_id` in `~/.zarz/config.toml` with automatic refresh before every run.
+- Exported Codex environment variables (`OPENAI_API_URL`, `OpenAI-Beta`, `originator`, etc.) so GPT‑5 presets transparently call the ChatGPT backend without requiring an API key.
+
+### Responses API compatibility
+- OpenAI provider now detects when Codex headers are required, converts system prompts into Codex “instructions”, filters unsupported roles, and parses SSE responses with encrypted reasoning content.
+- Removed legacy tool-call throttling and forced filler replies—models can keep invoking tools with clean, autonomous logs.
+
+### User-facing polish
+- login-success HTML (with ZarzCLI branding) for a consistent OAuth experience.
+- Documented the new flow, GPT‑5 presets, and References workspace inside `README.md`.
+- Ignored `References/` in git so upstream mirrors don’t pollute commits.

package/README.md

@@ -1,7 +1,7 @@
 # ZarzCLI
 
 [![npm version](https://img.shields.io/npm/v/zarz.svg)](https://www.npmjs.com/package/zarz)
-[![npm downloads](https://img.shields.io/npm/dd/zarz.svg)](https://www.npmjs.com/package/zarz)
+[![npm downloads](https://img.shields.io/npm/dw/zarz.svg)](https://www.npmjs.com/package/zarz)
 [![GitHub release](https://img.shields.io/github/v/release/zarzet/ZarzCLI.svg)](https://github.com/zarzet/ZarzCLI/releases)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
 
@@ -12,10 +12,11 @@
 ### Core Capabilities
 - **Interactive Chat** - Real-time streaming responses with multiple AI models
 - **Multi-Provider Support** - Claude (Anthropic), GPT (OpenAI), and GLM (Z.AI)
-- **Bash Tool Calling** - AI can autonomously execute bash commands to understand your codebase
+- **Built-In Tools** - `read_file`, `list_dir`, `grep_files`, and `apply_patch` run natively
 - **File Operations** - Direct file editing, creation, and management
 - **Smart Context** - Automatic symbol search and relevant file detection
 - **MCP Support** - Model Context Protocol integration for extended capabilities
+- **ChatGPT OAuth (Codex backend)** - `/login` signs into ChatGPT Plus/Pro, tokens auto-refresh, and GPT‑5 presets call the same Codex endpoint as OpenAI’s CLI
 - **Auto Update** - Automatic update checks and notifications for new versions
 - **Cross-Platform** - Works seamlessly on Windows, Linux, and macOS
 
@@ -28,14 +29,27 @@ ZarzCLI v0.3.4+ includes autonomous bash tool execution, allowing AI models to:
 - **Navigate structure**: `ls -la src/` or `tree -L 2`
 - **Check git**: `git log --oneline -10` or `git diff`
 
-The AI automatically decides when to execute commands for better context - no manual `/run` needed!
-
 ### User Experience
 - **Status Line** - Shows current mode and notifications
 - **Double Ctrl+C** - Confirmation before exit (prevents accidental exits)
 - **Colored Diff Display** - Beautiful file change visualization with context
+- **Exploration Logs** - File reads, directory listings, and searches are summarized concisely (no more full file dumps unless requested)
 - **Persistent Sessions** - Resume previous conversations anytime
 
+### Built-In Tools
+ZarzCLI now has tool set:
+
+| Tool | Description |
+|------|-------------|
+| `read_file` | Reads files with optional line slices; stdout just shows a summary |
+| `list_dir` | Returns file/dir counts with a short preview instead of dumping everything |
+| `grep_files` | Greps inside a file (simple substring match) |
+| `apply_patch` | Applies Zarz-style `*** Begin Patch` diffs directly on disk |
+
+These tools run natively in Rust, so the terminal output is clean and the model still receives full context in the background.
+
+> **No more artificial tool-call limits** – ZarzCLI lets the agent keep digging until it’s satisfied. The old “Stopping tool execution after 3 calls” guardrails have been removed.
+
 ## Installation
 
 ### Via NPM (Recommended)
@@ -99,8 +113,20 @@ zarz --model claude-sonnet-4-5-20250929
 # Manage configuration
 zarz config --show     # Show current config
 zarz config --reset    # Reconfigure API keys
+zarz config --login-chatgpt  # Sign in via ChatGPT OAuth to fetch an OpenAI key
 ```
 
+### ChatGPT OAuth (Codex-compatible)
+
+When you run `zarz config --login-chatgpt` or `/login` → “Sign in with ChatGPT”, ZarzCLI mirrors the official Codex CLI flow:
+
+1. OpenAI’s OAuth screen appears (PKCE + `originator=zarz_cli`).
+2. After you approve, ZarzCLI shows the **“Signed in to ZarzCLI”** success page.
+3. The CLI stores the returned `access_token`, `refresh_token`, `id_token`, plus `project_id`, `organization_id`, and `chatgpt_account_id` in `~/.zarz/config.toml`.
+4. Before every run, ZarzCLI automatically refreshes the token if it’s near expiry and exports
+
+All GPT‑5 presets then hit the ChatGPT Codex backend (`OpenAI-Beta: responses=experimental`, `originator: codex_cli_rs`) with the official Codex instructions so behavior matches OpenAI’s CLI exactly.
+
 ## Available Commands
 
 Once inside the interactive chat:
@@ -116,6 +142,7 @@ Once inside the interactive chat:
 | `/context <query>` | Find relevant files for a query |
 | `/files` | List currently loaded files |
 | `/model <name>` | Switch to a different AI model |
+| `/login` | Open auth wizard (API keys or ChatGPT OAuth) |
 | `/mcp` | Show MCP servers and available tools |
 | `/resume` | Resume a previous chat session |
 | `/clear` | Clear conversation history |
@@ -127,17 +154,26 @@ Once inside the interactive chat:
 Best for coding tasks and autonomous agents:
 - `claude-sonnet-4-5-20250929` (Latest, most capable)
 - `claude-haiku-4-5` (Fast, cost-effective)
-- `claude-opus-4-5` (Most powerful)
-
-### OpenAI GPT
-Multimodal capabilities with vision:
-- `gpt-5-codex` (Best for coding)
-- `gpt-4o` (Multimodal)
-- `gpt-4-turbo`
+- `claude-opus-4-1` (Most powerful)
+
+### OpenAI GPT (ChatGPT OAuth)
+Run `zarz config --login-chatgpt` to fetch an OpenAI key, then choose any of these GPT‑5 variants optimized for OAuth access:
+- `gpt-5-codex` – Default coding agent
+- `gpt-5-codex-low` – Lower reasoning effort
+- `gpt-5-codex-medium` – Balanced reasoning depth
+- `gpt-5-codex-high` – High reasoning effort with detailed summaries
+- `gpt-5-minimal` – Minimal reasoning, terse responses
+- `gpt-5-low` – Low-effort general GPT-5
+- `gpt-5-medium` – Balanced GPT-5 experience
+- `gpt-5-high` – High reasoning-effort GPT-5
+- `gpt-5-mini` – Lightweight GPT-5 for quick tasks
+- `gpt-5-nano` – Fastest GPT-5 tier with minimal reasoning
+
+When you run `/model gpt-5-*`, ZarzCLI now prompts you to pick a **reasoning effort** (Auto, Minimal, Low, Medium, High). The choice is saved to `~/.zarz/config.toml` and applied to every Responses API call along with `text.verbosity = "medium"` and `include = ["reasoning.encrypted_content"]`, matching the Codex OAuth defaults.
 
 ### GLM (Z.AI)
 Cost-effective coding with 200K context window:
-- `glm-coder-4-lite` ($3/month subscription)
+- `glm-4.6` ($3/month subscription)
 - 200,000 token context window
 - Specialized for coding tasks
 
@@ -185,6 +221,16 @@ ZarzCLI automatically checks for updates on startup and notifies you when a new
 
 > **Note**: Rust is **NOT required** for installation. Pre-built binaries are automatically downloaded for your platform (Windows, macOS, Linux).
 
+### References workspace
+
+Need to keep upstream repos (Codex, plugins, docs) handy? Drop them into `References/`:
+
+```bash
+git clone https://github.com/openai/codex References/codex-main
+```
+
+The folder is `.gitignore`d, so you can mirror large sources locally without polluting commits. ZarzCLI’s Codex instructions and login success page were generated from those references.
+
 ## Contributing
 
 Contributions are welcome! ZarzCLI is now open source under MIT license.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "zarz",
-  "version": "0.3.5-alpha",
+  "version": "0.5.1-alpha",
   "description": "Fast AI coding assistant for terminal built with Rust",
   "main": "bin/zarz.js",
   "bin": {
@@ -41,7 +41,8 @@
   "files": [
     "bin/",
     "scripts/",
-    "README.md"
+    "README.md",
+    "CHANGELOG.md"
   ],
   "dependencies": {},
   "devDependencies": {},