You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This commit was created on GitHub.com and signed with GitHub’s verified signature.
Release Notes
Added
A status line during each turn: a spinner, what airlok is doing (thinking, reading src/main.rs, running cargo test), the seconds so far, and the tokens used this turn, redrawn in place below the output and cleared before anything else prints. It is off when stdout is not a terminal, with NO_COLOR, and with -v.
Esc cancels a running turn as Ctrl-C does: the partial reply is kept and marked interrupted. The terminal is in cbreak mode only while a turn runs, and is restored when the turn ends, before each confirmation, on a panic, and on SIGTERM. Keys typed during a turn start the next prompt.
Plan mode, with /plan or --plan. The model gets only read_file, glob, grep, and list_dir, the system prompt says the rest are unavailable, and it ends its reply with a plan. /go runs the plan as the task in normal mode; /plan again leaves without running it. Per-model settings are sent unchanged in both modes.
!command runs a command in the working directory and adds the command and its output to the conversation. #note appends a list item to ./AIRLOK.md, creating it, and rebuilds the context block.
@ completes paths from the working directory, fuzzy and gitignore-aware; Tab inserts the path as plain text. Typing / shows the matching commands with their descriptions. A prefix runs the first match, and an unknown command suggests the closest.
Alt+Enter inserts a newline, and so does Shift+Enter in terminals that send Esc then Enter for it.
Write confirmations show line numbers, syntax highlighting, and +/- gutters, and page at 40 lines; v shows the rest.
A dim footer after each turn: model, context %, session id.
[models."<id>"] config sections with reasoning_effort, sent by the openai provider only for that model id. Azure's gpt-6-astra needs reasoning_effort = "none" to use tools on Chat Completions; when a provider rejects its reasoning effort, airlok names the setting to add. /model shows the configured effort.
Changed
The REPL starts with one line: version, model, directory, notes such as a resumed session or confirmations being off, and /help for commands.
Ctrl-C at an empty prompt does nothing; it used to print a hint.
Runs of read-only tool calls show on the status line and end with one read N files line, in place of the updating reading N files... line.
Slash commands are listed harmless and frequent first, since a prefix now runs the first match.
Install airlok 0.5.0
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/airlok-dev/airlok/releases/download/v0.5.0/airlok-installer.sh | sh
This commit was created on GitHub.com and signed with GitHub’s verified signature.
Release Notes
Added
/model [<id>] shows the model or switches it for the rest of the session, without validating the id. /provider [anthropic|openai] switches provider when a key is available for it and otherwise names the missing key. Both are recorded in the session file, and --resume continues on the session's last model when it used the configured provider and no --model is given.
Fixed
Markdown lines slightly wider than the terminal no longer leave a bullet, a bold label, or a styled first word such as airlok alone on a line. termimad's wrap cut between style runs; airlok now wraps word by word. Paragraphs and list items are rendered per block (when a blank line or the next block marker arrives, or the reply ends), so a paragraph split across source lines reflows as one. A paragraph now appears when it completes, not line by line.
The REPL prompt always starts on its own line: rustyline checks the cursor column before each prompt.
Install airlok 0.4.1
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/airlok-dev/airlok/releases/download/v0.4.1/airlok-installer.sh | sh
This commit was created on GitHub.com and signed with GitHub’s verified signature.
Release Notes
Added
Interactive sessions: airlok with no task opens a REPL with a <model> <dir>> prompt, /help, /clear, /compact, /cost, /redactions, /config, and /exit. Ctrl-C cancels the turn in progress and keeps the partial reply marked as interrupted; Ctrl-D saves and quits.
Sessions are saved after every turn under $XDG_DATA_HOME/airlok/sessions/<dir hash>/ (~/.local/share/airlok by default), mode 0600 in a 0700 directory, with the config snapshot, provider and model, plaintext history, redaction map, token counts, and timestamps. The provider API key is stored blank. --resume continues the latest session for the directory (--resume=<id> a particular one), rebuilding the context block and adding a system note with the resume time. airlok sessions lists them, sessions rm <id> deletes one, sessions clean --older-than 30d prunes every directory.
Compaction: once the last request used more than [agent] compact_at (0.75) of [provider] context_window (200k), the next turn replaces everything but the last [agent] keep_recent_turns (4) turns with a model-written summary, requested through the redactor with no tools. Shown as a dim compacted: X -> Y tokens line and recorded in the session.
Token usage from both providers: Anthropic message_start/message_delta counts, OpenAI stream_options.include_usage. Where a provider reports none, requests are estimated at chars/4 and /cost says so.
Changed
A turn that fails or is aborted no longer leaves its prompt in the history.
Install airlok 0.4.0
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/airlok-dev/airlok/releases/download/v0.4.0/airlok-installer.sh | sh
This commit was created on GitHub.com and signed with GitHub’s verified signature.
Release Notes
Security
The provider API key could be shown in the terminal: it was an ordinary redaction entry, so when the model echoed its placeholder the display path rehydrated it. Redaction entries now have a class. rehydrate entries (secrets found in files and tool output) are restored into files and commands and shown masked in the terminal, with [redact] show_secrets_in_output = true to opt into full display. redact-only entries, the provider API key, are never restored anywhere: the terminal shows [redacted: the provider API key] and a tool call carrying the placeholder is refused. airlok redactions lists kinds and classes; --show-redactions now shows the class.
Install airlok 0.3.1
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/airlok-dev/airlok/releases/download/v0.3.1/airlok-installer.sh | sh
Context injection (#5). The system prompt carries a block with the working directory, OS, shell, git branch, status and last five commits, a gitignore-aware file tree, and project instructions from AIRLOK.md (or CLAUDE.md / AGENTS.md) plus ~/.config/airlok/AIRLOK.md. [context] max_bytes caps it; airlok context prints it after redaction.
Tools glob, grep, and list_dir, read-only and never prompting; read_file paging with offset and limit and binary refusal; tool results over 50 KiB are cut with a paging hint (#5).
Markdown rendering in the terminal with highlighted code, buffered per block; plain output when stdout is not a terminal or NO_COLOR is set; dimmed, collapsing tool-call lines (#5).
Confirmation prompt [y]es / [n]o / [a]ll / [q]uit with a one-time hint; q aborts the run with a non-zero exit (#5).
Changed
edit_file takes old and new and reports the match count when it cannot apply (#5).
The system prompt tells the model to search with grep and glob before reading files and to prefer edit_file over write_file for existing files (#5).
Install airlok 0.3.0
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/airlok-dev/airlok/releases/download/v0.3.0/airlok-installer.sh | sh
The v0.2.1 release workflow was rejected by GitHub at startup because the npm publish job requested more permissions than its caller grants. No 0.2.1 release or npm package was produced. No change to the binary.
Install airlok 0.2.2
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/airlok-dev/airlok/releases/download/v0.2.2/airlok-installer.sh | sh
Layered configuration (#3). ~/.config/airlok/config.toml ($XDG_CONFIG_HOME honoured), overridden by ./airlok.toml, overridden by flags. Sections [provider], [agent], [safety], every key optional. airlok config init writes a commented template; airlok config show prints the merged config with each layer's path and the key source, never the key. The key can come from a named env var (api_key_env) or a shell command run once per process (api_key_cmd).
Confirmation gates (#3). write_file and the new edit_file (exact search, must match once) show a unified diff and ask Apply? [y/N/a]. bash is checked against a deny list, then an allow list on leading tokens, and asks Run? [y/N/a] otherwise; chained commands never bypass the prompt. Deny entries are matched on parsed flags, so rm -rf also catches rm -fr, rm -r -f, rm -Rf, and rm --recursive --force. A rejection is returned to the model as an error result. --yes or confirm_* = false turns prompting off with a warning; prompts read /dev/tty, and without a terminal the run fails fast.
OpenAI provider (#1). Chat Completions with streaming tool calls behind --provider openai. The SSE reader is shared between providers.
Azure OpenAI (#2). OPENAI_BASE_URL and AZURE_OPENAI_API_KEY (sent as an api-key header, chosen from the host), tolerant of Azure's empty-choices prompt_filter_results chunk and per-choice content_filter_results. A test proves no secret reaches logs at TRACE level.
Changed
The provider key in use joins the redactor's known secrets, so it cannot leave the machine inside a file or command output (#3).
--show-redactions lists each entry as a kind and a length only, never any part of the value (#3).
Install airlok 0.2.0
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/airlok-dev/airlok/releases/download/v0.2.0/airlok-installer.sh | sh
