@causyne/agent 1.10.0 → 1.10.5

package/LICENSE

@@ -9,7 +9,7 @@ Parameters
 
 Licensor:             Ikbal Fadilah
 
-Licensed Work:        Causyne Agent 1.10.0
+Licensed Work:        Causyne Agent 1.10.1
                       The Licensed Work is (c) 2026 Ikbal Fadilah.
 
 Additional Use Grant: You may make use of the Licensed Work, provided that

package/README.md

@@ -12,6 +12,12 @@ documentation is intentionally concise while the project is evolving.
 
 Learn more at [causyne.com](https://causyne.com/).
 
+## Contact
+
+- General inquiries and business communication: [contact@causyne.com](mailto:contact@causyne.com)
+- Product support and troubleshooting: [help@causyne.com](mailto:help@causyne.com)
+- Partnerships and direct founder communication: [ikbal@causyne.com](mailto:ikbal@causyne.com)
+
 ## Development
 
 Node.js 24 or newer is required.

package/docs/PROVENANCE.md

@@ -2,8 +2,8 @@
 
 Causyne Agent is the renamed continuation of **Vanexa Agent**. It is not
 presented as an unrelated project or as a way to bypass
-security classification. Version 1.10.0 is the local source migration successor
-to the 1.9.20 working tree. This does not assert a published release.
+security classification. Version 1.10.0 was the first published local-source
+migration successor to the 1.9.20 working tree.
 
 The previous npm identities were `@ikbal_fadilah_vanexa01/vanexa-agent` and
 `@vanexalabs-ai/vanexa-agent`. The dispute at

package/docs/THIRD_PARTY_NOTICES.md

@@ -9,23 +9,17 @@ license identifiers:
 
 | License expression | Lockfile package entries |
 | --- | ---: |
-| MIT | 87 |
-| Apache-2.0 | 22 |
-| BSD-2-Clause | 8 |
-| ISC | 5 |
-| BSD-3-Clause | 1 |
-| BlueOak-1.0.0 | 1 |
-| 0BSD | 1 |
-| MIT OR CC0-1.0 | 1 |
-
-The lockfile contained 126 dependency entries in total. npm's audit metadata
-reported 106 production dependencies; platform-specific optional entries and
-development dependencies account for the differing views of the graph.
-
-The direct runtime dependencies are `@babel/parser`, `acorn-walk`, `commander`,
-`duck-duck-scrape`, `googlethis`, and `inquirer`. Direct
-development dependencies are `@types/node`, `acorn`, and `typescript`. Exact
-versions and integrity hashes are recorded in `package-lock.json`.
+| Apache-2.0 | 21 |
+| MIT | 9 |
+
+The lockfile contained 30 dependency entries in total. Three are production
+entries; development and platform-specific optional entries account for the
+rest. npm's audit metadata reported 12 installed packages.
+
+The direct runtime dependencies are `acorn-walk` and `commander`. Direct
+development dependencies are `@babel/parser`, `@types/node`, `acorn`, and
+`typescript`. Exact versions and integrity hashes are recorded in
+`package-lock.json`.
 
 No dependency in the reviewed main lockfile was marked with an install script.
 Optional capability dependencies are installed only after approval into a
@@ -42,7 +36,7 @@ the licenses of third-party dependencies.
 
 The terms section of `LICENSE` was normalized and compared with the SPDX
 BUSL-1.1 canonical text during this review; it matched. The project-specific
-parameter block selects the named licensor, Causyne Agent 1.10.0 as the licensed
+parameter block selects the named licensor, Causyne Agent 1.10.1 as the licensed
 work, 2030-08-09 as the change date, and Apache-2.0 as the change
 license. The Additional Use Grant permits production use except a paid
 competing commercial offering as defined in that block. These business terms

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@causyne/agent",
-  "version": "1.10.0",
+  "version": "1.10.5",
   "description": "Agentic AI for software, tools, and computer workflows",
   "main": "bin/causyne.js",
   "type": "module",
@@ -49,19 +49,12 @@
   "bugs": {
     "url": "https://github.com/ikbal-causyne/causyne-agent/issues"
   },
-  "overrides": {
-    "form-data": "^4.0.0",
-    "axios": "^1.20.0"
-  },
   "dependencies": {
-    "@babel/parser": "^8.0.4",
     "acorn-walk": "^8.3.5",
-    "commander": "^11.1.0",
-    "duck-duck-scrape": "^2.2.7",
-    "googlethis": "^1.8.0",
-    "inquirer": "^9.2.12"
+    "commander": "^11.1.0"
   },
   "devDependencies": {
+    "@babel/parser": "^8.0.7",
     "@types/node": "^22.20.2",
     "acorn": "^8.18.0",
     "typescript": "^7.0.2"

package/src/cliMode.js

@@ -1,6 +1,5 @@
 import { AgentLoop } from './agentLoop.js';
 import { loadConfig, saveConfig } from './config.js';
-import inquirer from './utils/inquirer.js';
 import readline from 'readline';
 import { ChatPrompt, isInteractive } from './tui/prompt.js';
 import { handleInput, listCommands, isCommandInput } from './commands.js';
@@ -78,7 +77,7 @@ function makeApprovalHandler(conn, dialogs = null) {
     conn.stopSpinner();
 
     // An interactive session asks in a panel that shows the risk, the arguments
-    // and a scrollable diff in one frame. The inquirer path below asks the same
+    // and a scrollable diff in one frame. The plain fallback asks the same
     // question in the scrollback, which is all a non-TTY session can do.
     if (dialogs && detail) {
       // Loops only for "Allow always" → Cancel: backing out of the standing
@@ -100,7 +99,11 @@ function makeApprovalHandler(conn, dialogs = null) {
         // The text says exactly what is being given up and for how long.
         const confirmed = await dialogs.confirm(
           `Allow ${bold(detail.tool)} to run WITHOUT asking, for the rest of this session?\n`
-          + `  This lasts until Causyne restarts. Undo it any time with /approvals clear.`
+          + `  This lasts until Causyne restarts. Undo it any time with /approvals clear.`,
+          // Reaching this question already required moving onto Allow always
+          // and pressing Enter. A second Enter is therefore an explicit second
+          // confirmation, rather than a reflex approval on the first dialog.
+          { defaultAnswer: true }
         );
         if (confirmed) break;
         // Cancelled: ask again rather than denying something they never rejected.
@@ -139,7 +142,7 @@ function makeApprovalHandler(conn, dialogs = null) {
 
     // No live region to draw a panel into (a piped session, or raw mode
     // refused). askConfirm degrades to readline on its own, so this path keeps
-    // the same wording as the panel instead of inquirer's.
+    // the same wording as the panel instead of a second prompt framework's.
     const approved = await askConfirm(message);
 
     if (conn.pendingApprovals) conn.pendingApprovals.delete(toolCallId);
@@ -322,7 +325,7 @@ export async function chatMode({ home = false } = {}) {
   // The prompt owns the keyboard so the chat can offer history, completion and
   // typing while a turn runs. It is skipped when stdin is not a terminal (piped
   // input, CI) or when CAUSYNE_SIMPLE_INPUT=1, and any failure to take raw mode
-  // falls back to the inquirer path below — a better editor must never be the
+  // falls back to the plain readline path below — a better editor must never be the
   // reason chat refuses to start.
   let prompt = null;
   if (isInteractive()) {
@@ -367,9 +370,9 @@ export async function chatMode({ home = false } = {}) {
       // one that was asked for.
       if (surface) prompt.draw();
 
-      // Ask for approval in the prompt's own panel, not inquirer's.
+      // Ask for approval in the prompt's own panel, not a competing reader.
       //
-      // inquirer.prompt() takes stdin while this prompt is already holding it in
+      // A second prompt reader would take stdin while this prompt already holds it in
       // raw mode: the two contend, and the question can land on a half-drawn
       // prompt. The panel shows the risk, the arguments and a scrollable diff in
       // one frame, and dismissing it denies.
@@ -394,12 +397,11 @@ export async function chatMode({ home = false } = {}) {
 
   const readTask = async () => {
     if (prompt) return prompt.read();
-    const { task } = await inquirer.prompt([{
-      type: 'input',
-      name: 'task',
-      message: '\x1b[36mYou:\x1b[0m'
-    }]);
-    return task;
+    // The shared question helper already provides the same plain-readline
+    // fallback when a terminal cannot host the live TUI. Keeping a second
+    // prompt framework here pulled a large, unused transitive graph into every
+    // installation and made the fallback look different from the main CLI.
+    return askText({ title: 'You' });
   };
 
   const finish = () => { if (prompt) prompt.stop(); };
@@ -568,7 +570,7 @@ export async function interactiveConfig(options) {
     return;
   }
 
-  // Asked in the product's own panels rather than inquirer's.
+  // Asked in the product's own panels rather than a second prompt framework.
   //
   // These were the last two surfaces on a second design system — different
   // colours, different glyphs, no NO_COLOR handling, and a list widget nothing

package/src/entrypoint.js

@@ -5,6 +5,29 @@ import { runSelfUpdate } from './autoUpdate.js';
 import { printContextReport, printUsageReport, printCheckpoints, printUndo, buildStatusText, printReport } from './reporting.js';
 import { runCommand } from './commands.js';
 import { resolveInvocation } from './tui/invocation.js';
+import { resolveUserPath } from './utils/paths.js';
+
+function requestedWorkingDirectory(argv = []) {
+  const tokens = Array.isArray(argv) ? argv.slice(2) : [];
+  for (let index = 0; index < tokens.length; index++) {
+    const token = String(tokens[index]);
+    if (token === '--') break;
+    if (token === '-C' || token === '--cwd') return tokens[index + 1] || '';
+    if (token.startsWith('--cwd=')) return token.slice('--cwd='.length);
+    if (!token.startsWith('-')) break;
+  }
+  return null;
+}
+
+function applyRequestedWorkingDirectory(argv) {
+  const requested = requestedWorkingDirectory(argv);
+  if (requested === null) return;
+  if (!requested) throw new Error('The --cwd option requires a directory.');
+  const resolved = resolveUserPath(requested);
+  process.chdir(resolved);
+}
+
+applyRequestedWorkingDirectory(process.argv);
 
 // The old flag remains parseable only to explain its retirement.
 function announceDevEmulator(requested) {
@@ -42,6 +65,7 @@ program
   // "Usage: causyne-agent" reasonably concludes they ran the wrong thing.
   .name('causyne')
   .description('Causyne — Local desktop AI harness (alias: causyne-agent)')
+  .option('-C, --cwd <directory>', 'Use this directory as the workspace')
   .version(pkgVersion);
 
 program

package/src/sandbox.js

@@ -96,13 +96,10 @@ const INTERPRETER_INVOCATION = /(^|\s)(sh|bash|zsh|ksh|dash|fish|eval|xargs|ssh|
 /**
  * Credential stores and key material.
  *
- * L4 (local-path audit): the DEFAULT workspace scope ends with the home
- * directory itself as a fallback, which silently puts ~/.ssh, ~/.aws and
- * ~/.causyne (the encrypted API key AND the .vault_key that decrypts it) inside
- * the agent's reach with no prompt. Vision section 4 asks for freedom WITH a
- * human in the loop rather than a wall, so these are not blocked — touching one
- * is classified 'extreme', which always requires explicit approval in every
- * autonomy mode, including Mode C.
+ * A user may deliberately select a workspace that contains credential material.
+ * These paths are not silently trusted just because they sit below that root:
+ * touching one is classified 'extreme', which always requires explicit approval
+ * in every autonomy mode, including Mode C.
  */
 const CREDENTIAL_PATHS = [
   /(^|\/)\.ssh(\/|$)/,
@@ -168,22 +165,17 @@ function redirectsIntoSensitiveTarget(maskedCommand) {
 }
 
 export class Sandbox {
-  constructor() {
+  constructor({ workspaceRoot = process.cwd() } = {}) {
     this.config = loadConfig();
-    
-    // V5 Upgrade: Expanded default workspace paths
-    // Instead of only os.homedir() (which was too restrictive and caused path errors),
-    // we now default to common user directories while still blocking system dirs.
-    const home = os.homedir();
-    this.workspacePaths = this.config.workspacePaths || [
-      path.join(home, 'Desktop'),
-      path.join(home, 'Documents'),
-      path.join(home, 'Downloads'),
-      path.join(home, 'Projects'),
-      path.join(home, 'CausyneWorkspace'),
-      path.join(home, 'Causyne'),
-      home  // Fallback: allow home dir itself (covers edge cases like ~/scripts, ~/.config)
-    ];
+
+    // The launch directory is the workspace. A previous default advertised
+    // Desktop, Documents, Downloads, ~/Causyne and the whole home directory as
+    // equally valid roots. That made the model drift into the agent's own source
+    // even when the user launched it from another project, while also making the
+    // sandbox effectively home-wide. Explicit runtime grants can still use
+    // updateWorkspacePaths(), but stale config never overrides the folder the
+    // user selected for this invocation.
+    this.workspacePaths = [path.resolve(workspaceRoot)];
     
     // Developer emulator mode (hardened, secret-gated — see devMode.js) grants
     // full local access for agent development on a Fast-tier emulator. It cannot
@@ -243,9 +235,9 @@ export class Sandbox {
       }
     }
 
-    // L4: a credential store is in reach by default (the home fallback), so it
-    // gets a human in the loop rather than a wall. 'extreme' is the one risk
-    // level Mode C cannot auto-approve.
+    // L4: when an explicitly selected workspace contains credential material,
+    // it gets a human in the loop rather than silent access. 'extreme' is the
+    // one risk level Mode C cannot auto-approve.
     for (const p of pathsToCheck) {
       if (typeof p === 'string' && isCredentialPath(p)) {
         return { allowed: true, risk: 'extreme', reason: `Touches credential material: ${p}` };
@@ -352,20 +344,6 @@ export class Sandbox {
       return false;
     }
     
-    // V7 Ultimate Self-Preservation: Block access to the agent's own source code
-    // The AGI cannot read, modify, or delete causyne-agent itself.
-    const agentBinOrScript = process.argv[1] || '';
-    let agentRoot = '';
-    if (agentBinOrScript && agentBinOrScript.includes('causyne-agent')) {
-      const idx = agentBinOrScript.lastIndexOf('causyne-agent');
-      agentRoot = path.resolve(agentBinOrScript.slice(0, idx + 'causyne-agent'.length));
-    } else if (typeof __dirname !== 'undefined') {
-      agentRoot = path.resolve(__dirname, '..');
-    }
-    if (agentRoot && resolved.startsWith(agentRoot) && resolved !== path.resolve(os.homedir())) {
-      return false;
-    }
-    
     // V6: Override workspace limits if grantAllAccess is active
     if (this.grantAllAccess) {
       return true;

package/src/tui/ask.js

@@ -2,8 +2,8 @@
 //
 // `causyne config` and `causyne pair` run with no chat session behind them, so
 // there is no live region for a dialog to draw into. That is why they were the
-// last two surfaces still on inquirer — and inquirer is a different design
-// system: its own colours, its own glyphs, no NO_COLOR handling, and a list
+// last two surfaces still on a second prompt framework, with its own colours,
+// glyphs, NO_COLOR handling, and list
 // widget that looks nothing like the picker the same user sees inside `causyne`.
 //
 // The fix is NOT a second app shell. That was tried once: screen.js, layout.js,

package/src/tui/banner.js

@@ -23,9 +23,44 @@ const WORDMARK = [
   ' ████  █   █  ███  ████    █   █   █ █████'
 ];
 
-// A terminal without box-drawing support would render the art as mojibake, so
-// it gets the wordmark spelled out instead of a field of question marks.
-const WORDMARK_PLAIN = ['C A U S Y N E'];
+// A compact terminal rendering of the six-part Causyne aperture. The shape is
+// sampled from the canonical SVG rather than invented as a second logo. Its
+// upper-right blade carries the signal green; the other blades use the neutral
+// brand ink. Each row remains ordinary terminal text and degrades to #/+ ASCII.
+const LOGO_SEGMENTS = [
+  [['ink', '   ███▓']],
+  [['ink', ' ▓███'], ['accent', '███'], ['ink', '▓']],
+  [['ink', '▓███ ▓▓'], ['accent', '██'], ['ink', '▓']],
+  [['ink', '▓██   ▓██▓']],
+  [['ink', '▓███▓ ███▓']],
+  [['ink', ' ███████▓']],
+  [['ink', '   ▓███']]
+];
+
+function logoRows(unicode) {
+  return LOGO_SEGMENTS.map((segments) => segments.map(([role, text]) => {
+    const rendered = unicode
+      ? text
+      : text.replace(/[█▓]/g, role === 'accent' ? '+' : '#');
+    return paint(role, rendered);
+  }).join(''));
+}
+
+function brandArt(width, unicode) {
+  if (!unicode || width < 64) {
+    const logo = logoRows(false);
+    logo[2] = `${padEnd(logo[2], 12)}${bold(paint('ink', 'CAUSYNE AGENT'))}`;
+    return logo;
+  }
+
+  const logo = logoRows(true);
+  return logo.map((line, index) => {
+    const word = WORDMARK[index - 1];
+    return word === undefined
+      ? line
+      : `${padEnd(line, 10)}   ${paint('ink', word)}`;
+  });
+}
 
 /**
  * The banner rows.
@@ -35,10 +70,9 @@ const WORDMARK_PLAIN = ['C A U S Y N E'];
  * never be exercised at all.
  */
 export function wordmark(width = 80, { unicode = HAS_UNICODE } = {}) {
-  const art = (unicode && width >= 54) ? WORDMARK : WORDMARK_PLAIN;
-  const rows = art.map((line) => paint('accent', line));
+  const rows = brandArt(width, unicode);
   rows.push('');
-  rows.push(dim('Causyne AI Agent'));
+  rows.push(dim('Causyne Agent'));
   return rows;
 }
 
@@ -60,8 +94,8 @@ export function wordmark(width = 80, { unicode = HAS_UNICODE } = {}) {
  * header that wraps is worse than a header that is tall.
  */
 export function sessionBanner(info = {}, width = 80, { unicode = HAS_UNICODE } = {}) {
-  const art = (unicode && width >= 54) ? WORDMARK : WORDMARK_PLAIN;
-  const artWidth = Math.max(...art.map(visibleWidth));
+  let art = brandArt(width, unicode);
+  let artWidth = Math.max(...art.map(visibleWidth));
 
   const facts = [];
   if (info.version) facts.push([bold(paint('accent', 'Causyne')), dim(info.version)]);
@@ -78,11 +112,22 @@ export function sessionBanner(info = {}, width = 80, { unicode = HAS_UNICODE } =
   // deferred-wrap state: the cursor sits past the last column, and the next
   // write decides whether that becomes a wrap. Measured on an 80-column pty,
   // the workspace row came back at exactly 80 while every other row was 79.
-  const room = width - artWidth - GAP - 1;
+  let room = width - artWidth - GAP - 1;
+
+  // A coloured 80-column terminal can render the full block wordmark, but it
+  // leaves too little room for the session facts beside it. Stacking those
+  // facts made startup 16 rows tall and overflowed short terminals. Prefer the
+  // compact ASCII aperture in that case: identity and facts remain one object,
+  // and the first prompt still fits without scrolling the banner away.
+  if (room < 24 && unicode && width >= 64) {
+    art = brandArt(width, false);
+    artWidth = Math.max(...art.map(visibleWidth));
+    room = width - artWidth - GAP - 1;
+  }
 
   // Not enough width for two columns: stack, rather than wrap either one.
   if (room < 24) {
-    return art.map((line) => paint('accent', line))
+    return art
       .concat([''], facts.map(([left, right]) =>
         truncate(right ? `${left}  ${right}` : left, width - 1, GLYPHS.ellipsis)));
   }
@@ -90,7 +135,7 @@ export function sessionBanner(info = {}, width = 80, { unicode = HAS_UNICODE } =
   const rows = [];
   const height = Math.max(art.length, facts.length);
   for (let index = 0; index < height; index++) {
-    const artLine = art[index] === undefined ? '' : paint('accent', art[index]);
+    const artLine = art[index] === undefined ? '' : art[index];
     const fact = facts[index];
     const left = padEnd(artLine, artWidth) + ' '.repeat(GAP);
     if (!fact) { rows.push(artLine); continue; }

package/src/tui/dialogs.js

@@ -299,9 +299,9 @@ export class TextLayer extends Layer {
  * how dangerous is this, what exactly will it do, and what will change on disk.
  * The diff scrolls, so a 400-line rewrite is inspectable rather than truncated.
  *
- * Deliberately has NO default. `y` and `n` are explicit, enter is not bound, and
- * escape denies. A dialog where the safe answer is one keypress away from the
- * dangerous one is how a person approves something they meant to read.
+ * The highlighted default is Reject. `y` and `n` remain explicit shortcuts;
+ * arrows choose a visible option and Enter commits it. A reflex Enter therefore
+ * denies, while an intentional move to either Allow option works consistently.
  */
 export class ApprovalLayer extends Layer {
   constructor(options = {}) {
@@ -495,7 +495,10 @@ export class ConfirmLayer extends Layer {
     super({ width: options.width || 60, height: options.height || 8, ...options });
     this.message = options.message || 'Are you sure?';
     this.onAnswer = options.onAnswer || null;
-    this.footer = `y yes  ${GLYPHS.dot}  n no  ${GLYPHS.dot}  esc cancel`;
+    this.defaultAnswer = options.defaultAnswer === true;
+    this.footer = this.defaultAnswer
+      ? `enter confirm  ${GLYPHS.dot}  y yes  ${GLYPHS.dot}  n no  ${GLYPHS.dot}  esc cancel`
+      : `enter cancel  ${GLYPHS.dot}  y yes  ${GLYPHS.dot}  n no  ${GLYPHS.dot}  esc cancel`;
     this.settled = false;
   }
 
@@ -523,10 +526,15 @@ export class ConfirmLayer extends Layer {
 
   key(event) {
     if (!event) return null;
-    // Only an explicit `y` approves. Every other key either says no or is
-    // ignored — a mistyped keypress must never approve.
+    // `y` is always an explicit approval. Enter follows the default selected by
+    // the caller: false for ordinary destructive confirmations, true only for
+    // the second step after the user has already selected Allow always.
     if (isChar(event, 'y')) { this.answer(true); return 'close'; }
     if (isChar(event, 'n') || event.name === 'escape') { this.answer(false); return 'close'; }
+    if (event.name === 'enter' || event.name === 'return') {
+      this.answer(this.defaultAnswer);
+      return 'close';
+    }
     return 'handled';
   }
 }

package/src/tui/invocation.js

@@ -34,6 +34,8 @@ export const ROOT_OPTIONS = new Map([
   ['--help', 0],
   ['-V', 0],
   ['--version', 0],
+  ['-C', 1],
+  ['--cwd', 1],
   ['--dev-emulator', 0]
 ]);
 

package/src/tui/keys.js

@@ -273,6 +273,17 @@ export class KeyDecoder {
     } else if (final === 'u') {
       // Kitty keyboard protocol: ESC [ codepoint ; modifiers u
       const codepoint = numbers[0];
+      const controlName = {
+        9: 'tab',
+        10: 'enter',
+        13: 'enter',
+        27: 'escape',
+        127: 'backspace'
+      }[codepoint];
+      if (controlName) {
+        events.push(applyModifier(makeKey(controlName, { sequence }), numbers[1]));
+        return sequence.length;
+      }
       if (Number.isFinite(codepoint) && codepoint >= 32) {
         const character = String.fromCodePoint(codepoint);
         const key = applyModifier(

package/src/tui/prompt.js

@@ -12,7 +12,7 @@
 //  * ESC INTERRUPTS — wired to the AgentLoop.abort() that already existed and
 //    was only reachable by typing /stop after the turn had finished.
 //  * FAIL OPEN — if raw mode is unavailable (piped stdin, a CI runner, an
-//    unusual terminal) the caller falls back to inquirer. A fancy editor must
+//    unusual terminal) the caller falls back to plain readline. A fancy editor must
 //    never be the reason chat does not start.
 //
 // Pure Node. No dependency, no shell.
@@ -444,12 +444,15 @@ export class ChatPrompt {
   }
 
   /** A plain yes/no, for the questions that are not tool approvals. */
-  confirm(message) {
+  confirm(message, options = {}) {
     return new Promise((resolve) => {
       let settled = false;
       const settle = (answer) => { if (!settled) { settled = true; resolve(Boolean(answer)); } };
-      const layer = new ConfirmLayer({ message, onAnswer: settle });
-      layer.answer = () => settle(false);
+      const layer = new ConfirmLayer({
+        message,
+        defaultAnswer: options.defaultAnswer === true,
+        onAnswer: settle
+      });
       this.openLayer(layer);
     });
   }

package/src/tui/theme.js

@@ -90,52 +90,54 @@ export const HAS_UNICODE = HAS_COLOR
 // Roles, not colours. A caller asking for `danger` should never care whether
 // that is truecolor crimson or plain ANSI red.
 const DARK_PALETTE = {
-  accent:  [ 96, 205, 255],
-  agent:   [138, 180, 248],
-  user:    [ 90, 200, 160],
-  success: [126, 199, 108],
+  // Causyne brand palette from the canonical site/logo reference:
+  // signal #b6e06f, text #e9edf2, muted #8d96a4, line #272c35,
+  // panel #161920 and background #0f1115.
+  accent:  [182, 224, 111],
+  agent:   [182, 224, 111],
+  user:    [154, 199,  86],
+  success: [182, 224, 111],
   warn:    [230, 190,  90],
   danger:  [235, 110, 110],
-  muted:   [130, 138, 150],
-  ink:     [225, 228, 234],
-  rule:    [ 62,  68,  80],
-  // The scroll rail. A deliberately DARK blue, not the accent.
+  muted:   [141, 150, 164],
+  ink:     [233, 237, 242],
+  rule:    [ 39,  44,  53],
+  // The scroll rail uses a deliberately darker brand green than the accent.
   //
   // The rail is orientation, not information you act on — it says where you are
   // while you read something else, so it must be legible without competing with
-  // the transcript for attention. In `accent` cyan it was the brightest thing on
-  // a screen full of prose. Dark enough to recede, blue enough to read as one
-  // continuous object beside the markers, which keep their own roles.
-  scroll:  [ 58, 110, 170],
+  // the transcript for attention. Dark enough to recede, while remaining part
+  // of the same graphite-and-signal-green visual system as the rest of the CLI.
+  scroll:  [ 99, 125,  63],
   // Background roles. opencode fills its input surface with theme
   // backgroundElement and marks it with a left border in the agent's colour
   // (component/prompt/index.tsx: border={["left"]} + backgroundColor). These are
   // that fill: one step off the terminal's own background, never a block of
   // colour that fights the text sitting on it.
-  surface:  [ 28,  31,  38],
-  surfaceHi:[ 38,  42,  51]
+  surface:  [ 22,  25,  32],
+  surfaceHi:[ 27,  31,  39]
 };
 
 const LIGHT_PALETTE = {
-  accent:  [  0, 110, 170],
-  agent:   [ 40,  80, 170],
-  user:    [ 20, 120,  90],
-  success: [ 30, 120,  40],
+  accent:  [ 91, 130,  29],
+  agent:   [ 91, 130,  29],
+  user:    [ 74, 112,  26],
+  success: [ 74, 112,  26],
   warn:    [155, 110,   0],
   danger:  [185,  40,  40],
-  muted:   [ 95, 102, 112],
-  ink:     [ 25,  28,  34],
-  rule:    [200, 204, 212],
-  scroll:  [ 60, 100, 160],
+  muted:   [105, 112, 123],
+  ink:     [ 58,  63,  71],
+  rule:    [198, 203, 211],
+  scroll:  [ 91, 130,  29],
   surface:  [242, 244, 247],
   surfaceHi:[232, 235, 240]
 };
 
 // Fallback for 16-colour terminals: the closest base ANSI code per role.
 const BASIC_CODES = {
-  accent: 36, agent: 34, user: 32, success: 32,
+  accent: 92, agent: 92, user: 32, success: 92,
   warn: 33, danger: 31, muted: 90, ink: 39, rule: 90,
-  scroll: 34,
+  scroll: 32,
   surface: 39, surfaceHi: 39
 };
 

package/src/utils/inquirer.js

@@ -1,12 +0,0 @@
-import rawInquirer from 'inquirer';
-
-
-const inquirer = rawInquirer?.prompt
-  ? rawInquirer
-  : (rawInquirer?.default?.prompt
-    ? rawInquirer.default
-    : (rawInquirer?.default?.default?.prompt
-      ? rawInquirer.default.default
-      : rawInquirer));
-
-export default inquirer;