sigit-code 1.3.0__tar.gz → 1.3.2__tar.gz

{sigit_code-1.3.0 → sigit_code-1.3.2}/CHANGELOG.md

@@ -1,5 +1,42 @@
 # Changelog
 
+## 1.3.2
+
+Adds a tool permission system with plan mode, durable sessions with context
+compaction, background command execution, a subagent research tool, and commit
+co-author attribution.
+
+### What changed
+
+- Every tool call now passes a permission policy before executing. Read-only tools always run; mutating tools (and all MCP or unknown tools) are governed by, in order: plan mode, session grants, per-tool overrides, and a default mode from `[permissions]` in `settings.toml` (`allow`/`ask`/`deny`, default `ask`). On `ask`, editors get a native ACP permission dialog (allow once / allow for this session / deny) and the TUI pauses on a y/a/n prompt showing the tool and its arguments. `SIGIT_PERMISSIONS` overrides the default mode for headless runs and clients without permission support
+- New `/plan [on|off]` command: plan mode blocks mutating tools and asks the model to present a plan while research tools keep working. `/permissions` prints the effective policy
+- Sessions are durable: conversation history is saved per session under `~/.config/sigit/sessions/` after every turn. ACP `session/load` actually restores it, the TUI gets `/resume`, and `/clear` deletes the saved file
+- Context compaction: `/compact` compresses the conversation on demand, and the agent compacts automatically once the history approaches a 24k-token budget, summarizing older turns and keeping the recent ones. The tool-round cap rises from 10 to 24 now that long sessions have a defense other than the cap
+- `run_command` can run work in the background: pass `run_in_background` and the tool returns a task id immediately, so builds, test suites, and dev servers are no longer killed by the 120 second foreground timeout. Poll with the new `command_output` tool (read-only, never prompts) and stop with `kill_command`
+- New `task` tool: delegate research to a fresh subagent conversation that only gets the read-only tools and returns its final answer, keeping the main context small. Available on OpenAI-compatible backends; on-device returns a clear fallback until onde supports a second context
+- Commits created by the agent are co-authored: commit messages end with `Co-Authored-By: siGit Code <sigit@sigit.si>` (the [sigitc](https://github.com/sigitc) account), which GitHub renders next to the human author. If the model forgets the trailer, siGit amends it in, never rewriting commits that already exist on a remote
+- ACP mode now honors the `OPENAI_BASE_URL`/`OPENAI_API_KEY` provider override at startup, matching the interactive client
+
+## 1.3.1
+
+Adds [Model Context Protocol](https://modelcontextprotocol.io) (MCP) client
+support with the official siGit Code MCP server baked in, a set of agent tools
+that close parity gaps in the tool layer, and refreshed branding and licensing.
+
+### What changed
+
+- siGit Code is now an MCP client: it connects to MCP servers over the Streamable HTTP transport (a single JSON-RPC endpoint), discovers the tools they expose, and offers them to the model alongside the built-in tools. When the model calls one, the call is forwarded to the owning server and the result fed back into the agent loop
+- Bakes in the official siGit Code MCP server at `https://sigit.si/api/v1/mcp` (follows `SIGIT_CLOUD_URL`). When you are signed in (`sigit login`), the cloud session token is sent as the bearer credential
+- Configure additional servers in `mcp.toml` — global (`~/.config/sigit/mcp.toml`) or project-local (`.sigit/mcp.toml`). Each `[[server]]` has a `name`, `url`, optional `enabled`, and optional `[server.headers]`; set `official = false` to opt out of the baked-in server
+- MCP tools are namespaced `mcp__<server>__<tool>` so they never collide with built-in tools or across servers; tool output is capped to protect the model's context
+- Discovery is best-effort at startup and bounded by a per-server timeout, so an unreachable server never blocks startup — it just contributes no tools
+- Added a `/mcp` slash command (TUI and ACP) that lists configured servers, their connection status, and the tools each exposes
+- Disable MCP entirely with `SIGIT_MCP=off`, or just the official server with `SIGIT_MCP_OFFICIAL=off`
+- New agent tools that close parity gaps in the tool layer: `multi_edit` (apply a batch of exact-substring edits to one file atomically — written only if every edit matches), `glob` (locate files by name pattern with `**`/`*`/`?`/`{a,b}`, most-recently-modified first), `write_todos` (render a live task checklist through the tool result for multi-step work), and `remember` (append durable notes to the nearest `AGENTS.md`/`CLAUDE.md`)
+- `edit_file` now supports `replace_all` and returns actionable failure context — naming the line whose trimmed text matches when only whitespace differs — so the model self-corrects in one round
+- `search_files` gained a `file_glob` filter and a `max_results` cap (default 50, hard-capped at 1000) that also bounds the directory walk
+- Refreshed branding and legal: updated `LICENSE`, `README`, and the npm/PyPI package descriptions
+
 ## 1.3.0
 
 Adds a Local Inference on/off toggle, the open [Agent Skills](https://agentskills.io)
@@ -212,4 +249,4 @@ ACP and editor mode work on Windows. The part that is still missing is the inter
 
 ---
 
-*© 2026 [smbCloud](https://smbcloud.xyz/) (Splitfire AB).*
+*© 2026 [Splitfire AB](https://5mb.app) ([siGit Code & Deploy](https://sigit.si)).*

{sigit_code-1.3.0 → sigit_code-1.3.2}/CLAUDE.md

@@ -1,6 +1,6 @@
 # CLAUDE.md
 
-This file provides guidance to Claude Code (claude.ai/code) when working with code in this repository.
+This file provides guidance to AI coding agents when working with code in this repository.
 
 ## What this is
 
@@ -17,6 +17,33 @@ is a TTY:
 Before the TTY/ACP split, `main` also dispatches the account subcommands `sigit login`,
 `sigit logout`, `sigit whoami` (see `src/main.rs` `main()`).
 
+## Working in this repo
+
+**IMPORTANT — branch naming:** Prefix every working branch with `feature/` (new functionality)
+or `fix/` (bug fixes) — never a tool- or agent-name prefix like `claude/`. Name the branch after
+the *changes it contains*, as a short, descriptive, kebab-case slug that is self-explanatory
+from the name alone (e.g. `feature/tool-permission-system`, `fix/glob-mtime-sort`), never after
+a task, ticket, or session id (not `feature/task-q003hm`).
+
+**IMPORTANT — pull request target:** Always open pull requests against the `development` branch,
+never `main`. `main` is release-only; `development` is where day-to-day work integrates.
+
+**IMPORTANT — branch off `development`:** Start every working branch from the latest
+`origin/development`. Exception: when new work *depends on* a feature branch that has not merged
+yet (e.g. it builds on tools or APIs that branch introduces), it may be stacked on top of that
+branch instead. When stacking: merge the base PR into `development` first, then rebase the
+stacked branch onto `development` before opening its pull request, so each PR shows only its own
+commits.
+
+**IMPORTANT — run CI before pushing:** Run the full CI gate locally and confirm it is green
+*before* pushing a branch or opening a pull request — never push work that fails these:
+
+```sh
+cargo fmt -- --check                  # formatting
+cargo clippy --tests -- -D warnings   # lint (warnings are errors)
+cargo test --locked                   # tests
+```
+
 ## Build / test / lint
 
 ```sh
@@ -36,10 +63,10 @@ Run a single test: `cargo test <test_name>`.
 
 ## Critical platform constraint: `#[cfg(unix)]` dead code
 
-The interactive client, the `InferenceBackend` seam (`backend.rs`), and provider resolution
-(`provider.rs`) are wired up **only** through `#[cfg(unix)]` code paths. On Windows the binary
-runs ACP-only and drives `onde` directly, so much of `backend.rs` and `provider.rs` is
-legitimately unused there and the dead-code lint is suppressed *on non-Unix targets only*.
+The interactive client is `#[cfg(unix)]`-only. The `InferenceBackend` seam (`backend.rs`) and
+provider resolution (`provider.rs`) are consumed by both the interactive client and the ACP
+server, but several of their items are reached only through the Unix-only interactive paths, so
+the dead-code lint is suppressed *on non-Unix targets only*.
 
 Consequence: code can pass clippy on macOS/Linux but fail on the Windows target (or vice versa).
 When touching `backend.rs`, `provider.rs`, or the interactive path, keep the `cfg` gates intact —
@@ -62,8 +89,12 @@ feeds results back. Neither the loop nor ACP/TUI surfaces depend on a concrete b
   wins: (1) override via `OPENAI_BASE_URL`+`OPENAI_API_KEY` or active profile in
   `~/.config/sigit/providers.toml`; (2) siGit Code Cloud when logged in; (3) on-device.
 - **`src/tools.rs`** — agent tool schemas + execution: `read_file`, `create_directory`,
-  `list_directory`, `search_files`, `read_website`, `create_file`, `edit_file`, `delete_file`,
-  `run_command`. Add a tool in both the spec list and the execute `match`.
+  `list_directory`, `search_files`, `glob`, `read_website`, `create_file`, `edit_file`,
+  `multi_edit`, `delete_file`, `run_command`, `write_todos`, `remember`. Add a tool in both the
+  spec list (`all_tools`) and the execute `match` (`execute_tool`). `run_command` also enforces
+  commit attribution: when a command creates a new commit that lacks the
+  `Co-Authored-By: siGit Code` trailer (`COMMIT_CO_AUTHOR_TRAILER`), it amends the trailer in —
+  unless the commit already exists on a remote, which is never rewritten.
 - **`src/skills.rs`** — [Agent Skills](https://agentskills.io) support. Discovers skill
   folders (each with a `SKILL.md`: YAML frontmatter `name` + `description`, then Markdown
   instructions) from `.sigit/skills/` and `.claude/skills/` in the cwd, `$SIGIT_CONFIG_DIR/skills/`,
@@ -72,6 +103,27 @@ feeds results back. Neither the loop nor ACP/TUI surfaces depend on a concrete b
   calls `skill` with a name) loads the full `SKILL.md` body. The `skill` tool is appended in the
   `*_as_specs`/`build_tool_specs` layer (not in `all_tools()`) so its description can be dynamic,
   and only when at least one skill exists.
+- **`src/mcp.rs`** — [Model Context Protocol](https://modelcontextprotocol.io) *client*. Connects to
+  MCP servers over the **Streamable HTTP** transport (one JSON-RPC POST endpoint; replies are
+  `application/json` or SSE), runs the `initialize`/`tools/list` handshake, and forwards `tools/call`.
+  Discovery is best-effort at startup (`mcp::init`, called from both branches of `main()`) and cached
+  in a process-global so the synchronous spec builders (`mcp::tool_specs`) and the async dispatch
+  (`mcp::call_tool`) can both read it. Tools are namespaced `mcp__<server>__<tool>`, appended in the
+  `*_as_specs`/`build_tool_specs` layer and routed in `tools::execute_tool` via `mcp::is_mcp_tool`. The
+  official server (`<cloud>/mcp`, default `https://sigit.si/api/v1/mcp`) is baked in and authed with the
+  cloud session token; extra servers live in `mcp.toml` (global `$SIGIT_CONFIG_DIR/mcp.toml` and
+  project-local `.sigit/mcp.toml`). stdio transport is not supported.
+- **`src/permissions.rs`** — tool permission policy. Every tool call passes through
+  `decision_for` before executing: read-only tools always run; mutating tools (and all
+  `mcp__*`/unknown tools) are governed by, in order: per-session plan mode (`/plan` — deny all
+  mutating tools with a present-a-plan message), session "always allow" grants, per-tool
+  overrides and the default mode from `[permissions]` in `settings.toml` (`allow`/`ask`/`deny`,
+  default `ask`; `SIGIT_PERMISSIONS` env overrides the default). On `ask`, the ACP path sends
+  `session/request_permission` (allow once / allow for session / deny) and the TUI pauses the
+  inference task on a y/a/n prompt. Note: ACP turn-affecting handlers run in `cx.spawn`ed tasks
+  serialized by `SiGitAgent::turn_lock` so the dispatch loop can route the client's permission
+  answer mid-turn — don't move them back inline, and don't await client requests from inline
+  handlers (deadlock).
 - **`src/instructions.rs`** — project instruction files, the always-on counterpart to skills.
   Reads `AGENTS.md` (the cross-tool [agents.md](https://agents.md) standard) and `CLAUDE.md`,
   walking from the session cwd up to the repo root (nearest ancestor with `.git`, never above it),
@@ -89,9 +141,9 @@ feeds results back. Neither the loop nor ACP/TUI surfaces depend on a concrete b
 - **`src/credentials.rs`** — local session-token store (TOML, `0600` on Unix).
 - **`src/models.rs`** — model-picker types shared across platforms.
 
-Slash commands (`/help`, `/models`, `/skills`, `/login`, `/logout`, `/whoami`, `/reload`,
-`/clear`, `/status`) are advertised via `advertise_commands` in `main.rs` and handled in both the
-TUI and ACP sessions.
+Slash commands (`/help`, `/models`, `/skills`, `/mcp`, `/login`, `/logout`, `/whoami`, `/reload`,
+`/plan`, `/permissions`, `/clear`, `/status`) are advertised via `advertise_commands` in `main.rs`
+and handled in both the TUI and ACP sessions.
 
 ## Model cache (macOS)
 
@@ -111,7 +163,10 @@ verbosity with `RUST_LOG`.
 
 `OPENAI_BASE_URL` / `OPENAI_API_KEY` (provider override), `SIGIT_API_URL` (account API base,
 default `https://sigit.si`), `SIGIT_CLOUD_URL`, `SIGIT_CONFIG_DIR` (default `~/.config/sigit`),
-`SIGIT_MODEL`, `HF_HOME` / `HF_HUB_CACHE`, `RUST_LOG`.
+`SIGIT_MODEL`, `SIGIT_MCP` (`off` disables MCP), `SIGIT_MCP_OFFICIAL` (`off` drops the baked-in
+server), `SIGIT_PERMISSIONS` (`allow`/`ask`/`deny` — overrides the default permission mode for
+mutating tools; the escape hatch for clients without permission-request support),
+`HF_HOME` / `HF_HUB_CACHE`, `RUST_LOG`.
 
 ## Releasing
 

{sigit_code-1.3.0 → sigit_code-1.3.2}/Cargo.lock

@@ -5200,7 +5200,7 @@ checksum = "f8fadd59c855ef2080decdef8ff161eb6661b86933c9d82e5ba29dc602a55aba"
 
 [[package]]
 name = "sigit"
-version = "1.3.0"
+version = "1.3.2"
 dependencies = [
  "agent-client-protocol",
  "anyhow",

{sigit_code-1.3.0 → sigit_code-1.3.2}/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "sigit"
-version = "1.3.0"
+version = "1.3.2"
 edition = "2024"
 description = "siGit Code — ACP-compatible AI coding agent. Sí, git."
 documentation = "https://github.com/getsigit/sigit"

{sigit_code-1.3.0 → sigit_code-1.3.2}/LICENSE

@@ -175,7 +175,7 @@
       that a file or directory name be given on the same line as the
       copyright notice for easier identification within third-party archives.
 
-   Copyright 2026 smbCloud (Splitfire AB)
+   Copyright 2026 Splitfire AB (siGit Code & Deploy)
 
    Licensed under the Apache License, Version 2.0 (the "License");
    you may not use this file except in compliance with the License.

{sigit_code-1.3.0 → sigit_code-1.3.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: sigit-code
-Version: 1.3.0
+Version: 1.3.2
 Classifier: Development Status :: 4 - Beta
 Classifier: Environment :: Console
 Classifier: Intended Audience :: Developers
@@ -111,5 +111,5 @@ This package ships a prebuilt binary. The source code lives at [github.com/getsi
 
 ## Copyright
 
-© 2026 [smbCloud](https://smbcloud.xyz/) (Splitfire AB).
+© 2026 [Splitfire AB](https://5mb.app) ([siGit Code & Deploy](https://sigit.si)).
 

{sigit_code-1.3.0 → sigit_code-1.3.2}/README.md

@@ -117,4 +117,4 @@ Terminal mode currently needs Unix terminal behavior, so it works on macOS and L
 
 ## Copyright
 
-© 2026 [smbCloud Platform](https://smbcloud.xyz/) (Splitfire AB).
+© 2026 [Splitfire AB](https://5mb.app) ([siGit Code & Deploy](https://sigit.si)).

{sigit_code-1.3.0 → sigit_code-1.3.2}/npm/sigit/README.md

@@ -101,4 +101,4 @@ Install [ACP Client](https://marketplace.visualstudio.com/items?itemName=formula
 
 ## Copyright
 
-© 2026 [smbCloud](https://smbcloud.xyz/) (Splitfire AB).
+© 2026 [Splitfire AB](https://5mb.app) ([siGit Code & Deploy](https://sigit.si)).

{sigit_code-1.3.0 → sigit_code-1.3.2}/pypi/README.md

@@ -84,4 +84,4 @@ This package ships a prebuilt binary. The source code lives at [github.com/getsi
 
 ## Copyright
 
-© 2026 [smbCloud](https://smbcloud.xyz/) (Splitfire AB).
+© 2026 [Splitfire AB](https://5mb.app) ([siGit Code & Deploy](https://sigit.si)).