100 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Dark-Alex-17	b9474ce6ef	feat: Used improved theme selections for tool call highlighting colors	2026-07-23 18:51:57 -06:00
Dark-Alex-17	d328310880	feat: Improved theme-derived syntax highlighting for LLM tool call logging	2026-07-23 18:45:23 -06:00
Dark-Alex-17	5eb77ab467	feat: Improved coloring of LLM tool invocation outputs to make LLM output more readable and cohesive	2026-07-23 18:27:54 -06:00
Dark-Alex-17	a2c4f05c8c	feat: renamed the user__ask to user__select and improved descriptions to improve model usage	2026-07-23 18:22:18 -06:00
Dark-Alex-17	89fadcca15	feat: Improved coloring/highlighting of tool calls to make LLM invocation logs easier to read	2026-07-23 18:12:18 -06:00
Dark-Alex-17	ab3a818507	docs: Added the new compression control fields to the config example file	2026-07-23 12:40:38 -06:00
Dark-Alex-17	63f73f22c3	style: applied formatting to new long run features	2026-07-23 12:30:30 -06:00
Dark-Alex-17	54c5079cb7	feat: long-running session improvements ... - Hang fix: 120s timeout on compression LLM call + raw_stream channel-close handling (None => break instead of spinning) - Supervisor effective active count: stop counting finished JoinHandles as occupying capacity slots - Universal tool result size cap: truncate_if_needed() on ToolResult, applied in eval_tool_calls() after escalation block; configurable via max_tool_result_chars in AppConfig/AgentConfig - Windowed compression: compression_keep_last config param keeps the N most recent messages visible after compression - Fix pre-existing flaky test: add #[serial] to handle_list_available_unrestricted_when_no_whitelist so it does not race with TestConfigDirGuard-based tests that temporarily populate the agents data dir	2026-07-23 12:25:54 -06:00
Dark-Alex-17	d51bdd3086	feat: Made sisyphus suite of agents all auto-approved for tool usage	2026-07-22 22:28:20 -06:00
Dark-Alex-17	56ec58a748	fix: removed accidental duplicate ast_grep tool in explore agent	2026-07-22 17:42:14 -06:00
Dark-Alex-17	93f9c5425e	fix: npm and npx need the /usr/local/share/npm-global/lib directory to exist to run properly so I've added it to the dockerfile	2026-07-22 17:11:57 -06:00
Dark-Alex-17	77dfd08103	fix: added executable bit to adversary agent tools script	2026-07-22 16:38:42 -06:00
Dark-Alex-17	46dcef0dec	Merge branch 'main' of github.com:Dark-Alex-17/coyote	2026-07-22 16:37:34 -06:00
Dark-Alex-17	72c6bb74c2	feat: created the adversay agent and adversarial-review skill	2026-07-22 16:35:00 -06:00
Dark-Alex-17	6bf80dcce9	feat: added ast_grep tool to Sisyphus suite agents	2026-07-22 15:41:09 -06:00
Dark-Alex-17	df948c69bf	feat: new spawnable_agents field in agents to let users restrict what agents can be spawned by a parent agent	2026-07-22 14:29:55 -06:00
Dark-Alex-17	e5d0fcc764	test: fixed linter issues on markdown tests	2026-07-22 13:32:37 -06:00
Dark-Alex-17	c60d3e7cda	style: updated some stylistic things across the new markdown rendering implementation	2026-07-22 13:20:56 -06:00
Dark-Alex-17	c21fd47b42	feat: replay pre-compressed messages as well when resuming sessions for users to see	2026-07-22 13:05:06 -06:00
Dark-Alex-17	ab0b89dd67	fix: fetch descriptions from graph agent configs as well when listing agents	2026-07-22 12:59:30 -06:00
Dark-Alex-17	420db4bb88	feat: created a new builtin function for agents who can spawn other agents to list available agents via agent__list_available	2026-07-22 12:50:41 -06:00
Dark-Alex-17	dfacf31f6a	fix(render): suppress blank lines above rendered table	2026-07-22 12:37:30 -06:00
Dark-Alex-17	8cfd5ee2c4	docs(render): update phase 2.7 SHA after amend	2026-07-22 12:30:34 -06:00
Dark-Alex-17	e82e5ab8e4	test(render): comprehensive table rendering coverage	2026-07-22 12:30:10 -06:00
Dark-Alex-17	d790782ace	feat(render): hanging-indent line wrapping for lists and blockquotes	2026-07-22 12:27:13 -06:00
Dark-Alex-17	bf06d5e8f3	feat(render): wire table state machine and finalize hook	2026-07-22 12:23:44 -06:00
Dark-Alex-17	cdfaa0f111	feat(render): render markdown tables with comfy-table	2026-07-22 12:20:02 -06:00
Dark-Alex-17	c062f34852	feat(render): parse table cells and column alignments	2026-07-22 12:16:05 -06:00
Dark-Alex-17	7671d28d6e	feat(render): detect markdown table rows and separators	2026-07-22 12:14:45 -06:00
Dark-Alex-17	fcc4a1d2b5	feat(render): add comfy-table dependency and table border style	2026-07-22 12:11:04 -06:00
Dark-Alex-17	b0eeba110d	test(render): comprehensive coverage for rich markdown renderer	2026-07-22 11:48:43 -06:00
Dark-Alex-17	d65d63ee50	feat(render): activate rich markdown renderer as default	2026-07-22 11:47:39 -06:00
Dark-Alex-17	9890cf0ddc	feat(render): rich block-level markdown rendering (headings, quotes, lists, hr)	2026-07-22 11:45:03 -06:00
Dark-Alex-17	89db5b3887	feat(render): rich inline markdown rendering (bold, italic, code, links)	2026-07-22 11:41:35 -06:00
Dark-Alex-17	f40ba4ccbe	feat(render): detect markdown block-level line types	2026-07-22 11:37:11 -06:00
Dark-Alex-17	d2940a8d32	feat(render): precompute markdown scope styles for rich rendering	2026-07-22 11:31:23 -06:00
Dark-Alex-17	ed7ad36475	feat: Created the raw_markdown configuration flag	2026-07-22 11:03:27 -06:00
Dark-Alex-17	393ed16963	fix: chown the full sandbox cache dir, not just the coyote subdir	2026-07-22 10:08:00 -06:00
Dark-Alex-17	3f94d2003a	fix: chown the whole coyote cache dir not just the oauth dir in the sandbox	2026-07-22 09:48:11 -06:00
Dark-Alex-17	50ff9008fe	chore: updated deepseek models	2026-07-22 09:31:17 -06:00
Dark-Alex-17	9606d7f8aa	feat: added a .fork command to fork a new session from a running conversation	2026-07-21 14:54:55 -06:00
Dark-Alex-17	d8ae9e25d9	docs: reworded explore agent instructions to empower agent to spawn as many sub agents as it deems necessary	2026-07-21 14:14:00 -06:00
Dark-Alex-17	006f64bfa0	docs: Improved sisyphus wording to empower agent to spawn as many subagents as necessary	2026-07-21 14:12:51 -06:00
Dark-Alex-17	000559bc9d	style: Applied formatting	2026-07-21 11:24:18 -06:00
Dark-Alex-17	3aede58a11	feat(oauth): enable browser-paste PKCE flow for OpenAI-compatible providers ... Two coordinated changes that make openai-compatible OAuth providers usable with a non-localhost redirect_uri (browser shows the callback URL, user copies it back into the terminal — the same UX Claude uses). Fix: OpenAICompatibleOAuthProvider::fixed_redirect_uri() previously returned Some(uri) for any redirect_uri including public HTTPS URLs, which trapped run_pkce_flow into trying to bind a TCP listener on a public URL. It now returns Some only for loopback URIs (127.0.0.1, localhost, ::1). Non-loopback URIs return None, routing run_pkce_flow to the paste branch. New tri-format paste parser (parse_paste_input): - Full callback URL (starts with http:// or https://): parse code + state from the query string. This is what most modern OAuth providers redirect to and what a naive user copies from the browser bar. - Anthropic-style code#state fragment: preserved for Claude compatibility. - Bare code: accepted with a warning that CSRF state validation is skipped. For providers whose callback page shows only the code with no state. State validation moved from mandatory to conditional — if a paste didn't carry state (bare-code path), we warn and skip the check instead of hard- failing. The listener path (localhost + LAN redirects) still requires state because the server sends it in the query. Adds 9 unit tests covering both changes.	2026-07-21 11:14:55 -06:00
Dark-Alex-17	cab1e72b97	fix: fix typo in Gemini's generation_config property to use camelCase exclusively	2026-07-21 11:11:00 -06:00
Dark-Alex-17	cd4bf245e9	chore: updated models.yaml	2026-07-21 11:09:51 -06:00
Dark-Alex-17	82bf6176f8	fix(oauth): treat missing expires_in as non-expiring device_code token ... GitHub OAuth Apps issue tokens that never expire and omit expires_in from the response (they only send access_token, token_type, scope). RFC 6749 §5.1 allows this — expires_in is only REQUIRED for tokens that actually expire. When expires_in is missing, save the token with expires_at = i64::MAX so prepare_oauth_access_token never tries to refresh. If the token is ever revoked server-side, the eventual 401 on the API call is the user's cue to re-authenticate. No effect on providers that include expires_in (Moonshot etc. — unchanged).	2026-07-21 10:32:47 -06:00
Dark-Alex-17	d407eb5a6a	fix(oauth): send Accept: application/json in device flow requests ... GitHub's device flow endpoints (and likely other RFC 8628 servers) default to responding in application/x-www-form-urlencoded unless the client asks for JSON via the Accept header. Our device auth and polling paths both call .json() on the response and were failing to decode form-urlencoded bodies with 'expected value at line 1 column 1'. Adds Accept: application/json to: - The device authorization POST in run_device_code_flow - The device_code polling POST (on the RequestBuilder returned by build_token_request) RFC 6749 §5.1 already specifies JSON as the token response format, so this is spec-compliant across providers. Servers that already default to JSON (Moonshot, etc.) ignore the redundant header.	2026-07-21 10:30:36 -06:00
Dark-Alex-17	6f2594712f	refactor: Standardized paths module function names to not use 'path' in the name and to just always be either 'dir' or 'file'	2026-07-21 10:15:42 -06:00
Dark-Alex-17	79d43c8791	docs: config.example.yaml example for Device Authorization Grant ... Adds a commented example under the openai-compatible client section showing how to configure flow: device_code for RFC 8628 device flow. Uses Moonshot's kimi-code endpoints as the illustrative reference (users supply their own client_id — no bundled defaults per §5.8 of the design plan).	2026-07-20 15:27:20 -06:00
Dark-Alex-17	5a5da90734	test: unit tests for OAuthFlow::DeviceCode and merge behavior ... Adds 9 unit tests covering: - yaml deserialization of flow: device_code - merge preserves base device_authorization_url when user omits - merge lets user device_authorization_url win - merge lets user use_pkce_in_device_flow win - OpenAICompatibleOAuthProvider exposes / defaults both new trait methods - Full serde roundtrip of a realistic device_code yaml block No network or polling — pure config/serde logic tests. Brings the test count from 1134 to 1143.	2026-07-20 15:25:24 -06:00
Dark-Alex-17	f2a0e7453e	feat: copy host OAuth tokens into sandbox at launch ... Projects ~/.cache/coyote/oauth/ from the host into /home/agent/.cache/coyote/oauth/ inside the sandbox so agents can call OAuth-authenticated providers without re-authenticating. Same trust model as the existing config-dir and vault-password copies. One-way copy (not bind-mount) — matches Docker's universal support surface. Refreshed tokens die with the sandbox instance; run coyote --authenticate inside if a fresh token is needed (Device Flow works via the QR code render).	2026-07-20 15:23:52 -06:00
Dark-Alex-17	0fe430102a	feat: implement OAuth 2.0 Device Authorization Grant (RFC 8628) ... Adds a third OAuthFlow variant (device_code) alongside the existing pkce and client_credentials flows. Device flow enables OAuth for headless environments where a browser-based callback listener isn't available — the user visits a verification URL on any device and enters a short user_code. - OAuthFlow::DeviceCode variant + serde 'device_code' string - OAuthConfig fields: device_authorization_url, use_pkce_in_device_flow - OAuthProvider trait: device_authorization_url() / use_pkce_in_device_flow() - OpenAICompatibleOAuthProvider passes both through from config - run_device_code_flow() polls the token endpoint per RFC 8628 §3.4–§3.5: handles authorization_pending, slow_down (+5s backoff), expired_token, access_denied, and unknown errors distinctly - Sandbox-gated QR code display (via qrcode crate) — scanning with a phone is dramatically faster than copy-pasting the URL from a container - Optional PKCE per draft-ietf-oauth-device-flow §5.4 (default off) - run_oauth_flow and prepare_oauth_access_token dispatchers wire DeviceCode in; refresh path shared with PKCE since both flows produce refresh_tokens	2026-07-20 15:21:32 -06:00
Dark-Alex-17	d13bd32fdf	chore: add qrcode dependency	2026-07-20 15:13:40 -06:00
Dark-Alex-17	1f1729ba00	chore: added new kimi models	2026-07-20 14:35:26 -06:00
Dark-Alex-17	107419966d	style: Cleaned up some comments and imports	2026-07-20 13:46:41 -06:00
Dark-Alex-17	344ef7526f	feat: hint that browser 'paste code' pages can be ignored during callback capture	2026-07-20 13:29:37 -06:00
Dark-Alex-17	13d31f850c	fix: OAuth callback listener skips speculative/malformed browser connections	2026-07-20 13:21:44 -06:00
Dark-Alex-17	f6bd02dc73	feat: openai-compatible wizard offers OAuth when provider has bundled oauth defaults	2026-07-20 13:17:26 -06:00
Dark-Alex-17	31df1a720d	test: unit tests for OAuthConfig merge + get_oauth_provider_for_client	2026-07-20 13:12:38 -06:00
Dark-Alex-17	4e0e65fc8a	docs: config.example.yaml OAuth examples for openai-compatible	2026-07-20 13:09:50 -06:00
Dark-Alex-17	ab85a4f534	feat: validate unique client names at config load	2026-07-20 13:07:41 -06:00
Dark-Alex-17	420447275c	refactor: main.rs resolve_oauth_client uses new dispatcher	2026-07-20 13:05:57 -06:00
Dark-Alex-17	cdc40f7302	feat: bundle xAI OAuth defaults in models.yaml	2026-07-20 13:03:15 -06:00
Dark-Alex-17	c611685033	feat: OAuth branch in openai_compatible prepare_* fns	2026-07-20 13:01:28 -06:00
Dark-Alex-17	cac2a3eba0	feat: get_oauth_provider_for_client dispatcher + client_config_info update	2026-07-20 12:57:10 -06:00
Dark-Alex-17	66bbb34d7f	feat: OpenAICompatibleOAuthProvider (config-driven OAuthProvider impl)	2026-07-20 12:55:30 -06:00
Dark-Alex-17	68177fdb6a	feat: add auth + oauth fields to OpenAICompatibleConfig	2026-07-20 12:51:09 -06:00
Dark-Alex-17	1acaad223f	feat: add oauth field to ProviderModels	2026-07-20 12:46:18 -06:00
Dark-Alex-17	aa0270602d	feat: add client_credentials support to prepare_oauth_access_token	2026-07-20 12:44:53 -06:00
Dark-Alex-17	4669958bdd	refactor: split run_oauth_flow into pkce + client_credentials dispatchers	2026-07-20 12:43:53 -06:00
Dark-Alex-17	559107073d	feat: add OAuthConfig + OAuthFlow types to oauth.rs	2026-07-20 12:41:24 -06:00
Dark-Alex-17	d0a38747e0	chore: updated models.yaml	2026-07-20 11:55:00 -06:00
Dark-Alex-17	677bd71b93	docs: added brew trust command to install example for iwe	2026-07-19 15:24:13 -06:00
Dark-Alex-17	ad6d0a2e0e	fix: resolve reasoning effort for the prompt for global defaults as well	2026-07-17 17:52:38 -06:00
Dark-Alex-17	50911b99ef	fix: Account for default model reasoning_effort when supplying that value for the REPL prompts	2026-07-17 17:42:10 -06:00
Dark-Alex-17	44783c5573	feat: Added reasoning effort to the right prompt	2026-07-17 17:34:10 -06:00
Dark-Alex-17	8629c1ca15	feat: Improved support for Anthropic's extended thinking	2026-07-17 17:26:41 -06:00
Dark-Alex-17	078e6e3744	fix: model narration included in history and between tool calls to prevent repetition	2026-07-17 16:57:51 -06:00
Dark-Alex-17	b908fc20ba	docs: Added a docker pulls tracker badge	2026-07-17 16:24:07 -06:00
Dark-Alex-17	058810137c	fix: Don't terminate agent loops early for null tool output	2026-07-17 16:17:29 -06:00
Dark-Alex-17	c979041161	fix: reduce code duplication by reusing the new concrete_tool_names function in .list tools	2026-07-17 15:51:01 -06:00
Dark-Alex-17	a606ea552d	fix: Agent tools can only be modified via .tool enable/disable using tools in the allowed whitelist in the agent	2026-07-17 15:42:57 -06:00
Dark-Alex-17	39a654a79e	fix: re-render agent sessions when entering agents with either pre-configured agent_session or when entering an agent directly into a session	2026-07-17 15:08:19 -06:00
Dark-Alex-17	17d1decce6	feat: Also support GEMINI.md workspace instructions	2026-07-17 15:05:16 -06:00
Dark-Alex-17	a45e66c634	feat: Improved workspace instructions support	2026-07-17 14:52:35 -06:00
Dark-Alex-17	8c885d9a77	feat: also detect .mcp.json configurations at workspace roots	2026-07-17 14:03:08 -06:00
Dark-Alex-17	6dd1e59815	fix: Per RFC 9728, enable dynamic discovery of OAuth endpoints in MCP using path-aware discovery	2026-07-17 13:28:55 -06:00
Dark-Alex-17	f5085a773a	fix: hot-attach to MCP servers that require auth after running .mcp auth <name>	2026-07-17 13:16:25 -06:00
Dark-Alex-17	09afdeaf7c	feat: Created new .tool enable/disable and .mcp enable/disable aliases to make REPL usage more egonomic	2026-07-17 12:53:59 -06:00
Dark-Alex-17	0216d84eee	feat: Created a new .list <kind> REPL command to make discoveribility easier in the REPL	2026-07-17 11:49:49 -06:00
Dark-Alex-17	320dbf2479	fix: Correctly inherit graph-global model for extractor model if none is defined	2026-07-17 11:42:28 -06:00
Dark-Alex-17	6958e9cba8	feat: Support claude-style hidden workspace MCP configuration files via .mcp.json	2026-07-17 10:46:26 -06:00
Dark-Alex-17	825f9f6bf5	feat: Allow users to customize the workspace-specific configuration directory name so they can use Coyote with other CLI clients like .claude	2026-07-17 10:38:35 -06:00
Dark-Alex-17	863740f916	fix: no cursor timeout when user scrolls away from ongoing streaming output	2026-07-16 16:01:19 -06:00
Dark-Alex-17	304088bf5c	tests: Added tests for graph-based RAG	2026-07-16 14:33:52 -06:00
Dark-Alex-17	b7599b8acf	build: Added just recipe for building the multi-platform image	2026-07-16 13:33:47 -06:00
Dark-Alex-17	9b3ae761f3	feat: Add reasoning_effort validation for the main configuration file	2026-07-16 13:18:28 -06:00
Dark-Alex-17	0f7877aafc	feat: Add validation for reasoning_effort settings to prevent users from specifying erroneous values	2026-07-16 13:12:11 -06:00