@causyne/agent 1.10.1 → 1.10.6

package/README.md

@@ -12,6 +12,12 @@ documentation is intentionally concise while the project is evolving.
 
 Learn more at [causyne.com](https://causyne.com/).
 
+## Contact
+
+- General inquiries and business communication: [contact@causyne.com](mailto:contact@causyne.com)
+- Product support and troubleshooting: [help@causyne.com](mailto:help@causyne.com)
+- Partnerships and direct founder communication: [ikbal@causyne.com](mailto:ikbal@causyne.com)
+
 ## Development
 
 Node.js 24 or newer is required.

package/docs/THIRD_PARTY_NOTICES.md

@@ -9,23 +9,17 @@ license identifiers:
 
 | License expression | Lockfile package entries |
 | --- | ---: |
-| MIT | 87 |
-| Apache-2.0 | 22 |
-| BSD-2-Clause | 8 |
-| ISC | 5 |
-| BSD-3-Clause | 1 |
-| BlueOak-1.0.0 | 1 |
-| 0BSD | 1 |
-| MIT OR CC0-1.0 | 1 |
-
-The lockfile contained 126 dependency entries in total. npm's audit metadata
-reported 106 production dependencies; platform-specific optional entries and
-development dependencies account for the differing views of the graph.
-
-The direct runtime dependencies are `@babel/parser`, `acorn-walk`, `commander`,
-`duck-duck-scrape`, `googlethis`, and `inquirer`. Direct
-development dependencies are `@types/node`, `acorn`, and `typescript`. Exact
-versions and integrity hashes are recorded in `package-lock.json`.
+| Apache-2.0 | 21 |
+| MIT | 9 |
+
+The lockfile contained 30 dependency entries in total. Three are production
+entries; development and platform-specific optional entries account for the
+rest. npm's audit metadata reported 12 installed packages.
+
+The direct runtime dependencies are `acorn-walk` and `commander`. Direct
+development dependencies are `@babel/parser`, `@types/node`, `acorn`, and
+`typescript`. Exact versions and integrity hashes are recorded in
+`package-lock.json`.
 
 No dependency in the reviewed main lockfile was marked with an install script.
 Optional capability dependencies are installed only after approval into a

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@causyne/agent",
-  "version": "1.10.1",
+  "version": "1.10.6",
   "description": "Agentic AI for software, tools, and computer workflows",
   "main": "bin/causyne.js",
   "type": "module",
@@ -49,19 +49,12 @@
   "bugs": {
     "url": "https://github.com/ikbal-causyne/causyne-agent/issues"
   },
-  "overrides": {
-    "form-data": "^4.0.0",
-    "axios": "^1.20.0"
-  },
   "dependencies": {
-    "@babel/parser": "^8.0.4",
     "acorn-walk": "^8.3.5",
-    "commander": "^11.1.0",
-    "duck-duck-scrape": "^2.2.7",
-    "googlethis": "^1.8.0",
-    "inquirer": "^9.2.12"
+    "commander": "^11.1.0"
   },
   "devDependencies": {
+    "@babel/parser": "^8.0.7",
     "@types/node": "^22.20.2",
     "acorn": "^8.18.0",
     "typescript": "^7.0.2"

package/src/cliMode.js

@@ -1,6 +1,5 @@
 import { AgentLoop } from './agentLoop.js';
 import { loadConfig, saveConfig } from './config.js';
-import inquirer from './utils/inquirer.js';
 import readline from 'readline';
 import { ChatPrompt, isInteractive } from './tui/prompt.js';
 import { handleInput, listCommands, isCommandInput } from './commands.js';
@@ -12,6 +11,7 @@ import { wrapBlock } from './tui/text.js';
 import { getPackageVersion } from './version.js';
 import { resolveCharPool } from './contextManager.js';
 import { PRIMARY_ACTIONS, homeStatusLine, homeHint, moreLayer, configureInPrompt, mcpPicker, PROVIDERS } from './tui/home.js';
+import { SelectLayer } from './tui/dialogs.js';
 import { askSelect, askText, askConfirm } from './tui/ask.js';
 import { renderReport } from './reporting.js';
 import { grantAlways } from './approvalGrants.js';
@@ -78,7 +78,7 @@ function makeApprovalHandler(conn, dialogs = null) {
     conn.stopSpinner();
 
     // An interactive session asks in a panel that shows the risk, the arguments
-    // and a scrollable diff in one frame. The inquirer path below asks the same
+    // and a scrollable diff in one frame. The plain fallback asks the same
     // question in the scrollback, which is all a non-TTY session can do.
     if (dialogs && detail) {
       // Loops only for "Allow always" → Cancel: backing out of the standing
@@ -100,7 +100,11 @@ function makeApprovalHandler(conn, dialogs = null) {
         // The text says exactly what is being given up and for how long.
         const confirmed = await dialogs.confirm(
           `Allow ${bold(detail.tool)} to run WITHOUT asking, for the rest of this session?\n`
-          + `  This lasts until Causyne restarts. Undo it any time with /approvals clear.`
+          + `  This lasts until Causyne restarts. Undo it any time with /approvals clear.`,
+          // Reaching this question already required moving onto Allow always
+          // and pressing Enter. A second Enter is therefore an explicit second
+          // confirmation, rather than a reflex approval on the first dialog.
+          { defaultAnswer: true }
         );
         if (confirmed) break;
         // Cancelled: ask again rather than denying something they never rejected.
@@ -139,7 +143,7 @@ function makeApprovalHandler(conn, dialogs = null) {
 
     // No live region to draw a panel into (a piped session, or raw mode
     // refused). askConfirm degrades to readline on its own, so this path keeps
-    // the same wording as the panel instead of inquirer's.
+    // the same wording as the panel instead of a second prompt framework's.
     const approved = await askConfirm(message);
 
     if (conn.pendingApprovals) conn.pendingApprovals.delete(toolCallId);
@@ -322,7 +326,7 @@ export async function chatMode({ home = false } = {}) {
   // The prompt owns the keyboard so the chat can offer history, completion and
   // typing while a turn runs. It is skipped when stdin is not a terminal (piped
   // input, CI) or when CAUSYNE_SIMPLE_INPUT=1, and any failure to take raw mode
-  // falls back to the inquirer path below — a better editor must never be the
+  // falls back to the plain readline path below — a better editor must never be the
   // reason chat refuses to start.
   let prompt = null;
   if (isInteractive()) {
@@ -349,8 +353,8 @@ export async function chatMode({ home = false } = {}) {
         root: process.cwd(),
         commands: listCommands('terminal'),
         // The rule for "is this a command" lives in commands.js and is handed
-        // down rather than reimplemented, so the prompt draws a `/usage` as an
-        // invocation instead of as a sentence the user supposedly said.
+        // down rather than reimplemented, so the prompt keeps `/usage` out of
+        // the conversation instead of drawing it as something the user said.
         isCommand: isCommandInput,
         surface,
         onInterrupt: () => loop.abort(),
@@ -367,9 +371,9 @@ export async function chatMode({ home = false } = {}) {
       // one that was asked for.
       if (surface) prompt.draw();
 
-      // Ask for approval in the prompt's own panel, not inquirer's.
+      // Ask for approval in the prompt's own panel, not a competing reader.
       //
-      // inquirer.prompt() takes stdin while this prompt is already holding it in
+      // A second prompt reader would take stdin while this prompt already holds it in
       // raw mode: the two contend, and the question can land on a half-drawn
       // prompt. The panel shows the risk, the arguments and a scrollable diff in
       // one frame, and dismissing it denies.
@@ -394,12 +398,11 @@ export async function chatMode({ home = false } = {}) {
 
   const readTask = async () => {
     if (prompt) return prompt.read();
-    const { task } = await inquirer.prompt([{
-      type: 'input',
-      name: 'task',
-      message: '\x1b[36mYou:\x1b[0m'
-    }]);
-    return task;
+    // The shared question helper already provides the same plain-readline
+    // fallback when a terminal cannot host the live TUI. Keeping a second
+    // prompt framework here pulled a large, unused transitive graph into every
+    // installation and made the fallback look different from the main CLI.
+    return askText({ title: 'You' });
   };
 
   const finish = () => { if (prompt) prompt.stop(); };
@@ -456,6 +459,38 @@ export async function chatMode({ home = false } = {}) {
         continue;
       }
 
+      if (commandResult.effect === 'pick-session' && prompt) {
+        const active = commandResult.active;
+        prompt.openLayer(new SelectLayer({
+          title: 'Sessions',
+          emptyText: 'No sessions yet',
+          items: (commandResult.items || []).map((session) => ({
+            id: session.id,
+            label: `${session.id === active ? `${GLYPHS.bullet} ` : ''}${session.title}`,
+            description: `${session.messageCount} messages ${GLYPHS.dot} ${session.workspace || 'no workspace'}`,
+            value: session
+          })),
+          onPick: (item) => {
+            if (item) prompt.deliver(`/sessions switch ${item.value.id}`);
+          }
+        }));
+        continue;
+      }
+
+      if (commandResult.effect === 'pick-mcp' && prompt) {
+        const { empty } = await mcpPicker(prompt, (server) => {
+          const verb = server.granted ? 'revoke' : 'grant';
+          prompt.deliver(`/mcp ${verb} ${server.name}`);
+        });
+        if (empty) prompt.showText('MCP servers', commandResult.output);
+        continue;
+      }
+
+      if (commandResult.effect === 'dialog' && prompt) {
+        prompt.showText(commandResult.title, commandResult.output, { danger: !commandResult.ok });
+        continue;
+      }
+
       // A skill was invoked: it becomes part of the REQUEST, not terminal output.
       //
       // This is the whole point. `/skills <id>` used to print the file and call
@@ -568,7 +603,7 @@ export async function interactiveConfig(options) {
     return;
   }
 
-  // Asked in the product's own panels rather than inquirer's.
+  // Asked in the product's own panels rather than a second prompt framework.
   //
   // These were the last two surfaces on a second design system — different
   // colours, different glyphs, no NO_COLOR handling, and a list widget nothing

package/src/commands.js

@@ -47,6 +47,7 @@ export const COMMANDS = [
     scope: 'local',
     usage: '/help [command]',
     description: 'List the available commands',
+    dialogTitle: 'Commands',
     run: (argv, ctx) => {
       const [wanted] = argv;
       if (wanted) {
@@ -335,6 +336,7 @@ export const COMMANDS = [
     scope: 'local',
     usage: '/checkpoints [count]',
     description: 'List recent undo checkpoints',
+    dialogTitle: 'Checkpoints',
     run: (argv) => ok(buildCheckpointsText(parseInt(argv[0], 10) || 15))
   },
 
@@ -344,6 +346,7 @@ export const COMMANDS = [
     scope: 'local',
     usage: '/context',
     description: 'Show what fills the context window',
+    dialogTitle: 'Context',
     run: () => ok(buildContextText())
   },
 
@@ -353,6 +356,7 @@ export const COMMANDS = [
     scope: 'local',
     usage: '/usage',
     description: 'Show token usage and estimated cost',
+    dialogTitle: 'Usage',
     run: async () => ok(await buildUsageText())
   },
 
@@ -362,6 +366,7 @@ export const COMMANDS = [
     scope: 'local',
     usage: '/cortex [list | forget <id> | forget-here]',
     description: 'Inspect what the agent has learned, and forget any of it',
+    dialogTitle: 'Cortex',
     // A memory store you cannot read is not a memory, it is a black box that
     // occasionally changes the agent's behaviour. Section 4 asks for intelligent
     // safety rather than opacity, and section 10 layer 5 asks for a trail a
@@ -426,6 +431,7 @@ export const COMMANDS = [
     scope: 'local',
     usage: '/sessions [switch <id> | delete <id>]',
     description: 'List chat sessions, or switch to one',
+    dialogTitle: 'Sessions',
     // Sessions replaced ONE global chat_history.json that every directory read.
     // A session you cannot list or switch to is not a session, so this ships
     // with the store rather than after it.
@@ -462,7 +468,8 @@ export const COMMANDS = [
       return ok(
         `${rows.length} session${rows.length === 1 ? '' : 's'} (* = active):\n`
         + lines.join('\n')
-        + '\n\nSwitch with /sessions switch <id>. A new directory always starts a new session.'
+        + '\n\nSwitch with /sessions switch <id>. A new directory always starts a new session.',
+        { effect: 'pick-session', items: rows, active }
       );
     }
   },
@@ -472,6 +479,7 @@ export const COMMANDS = [
     scope: 'local',
     usage: '/approvals [clear]',
     description: 'List tools granted "Allow always", or revoke them',
+    dialogTitle: 'Approvals',
     // A standing grant with no way to see or revoke it is a trap, not a
     // convenience. This is the way out, and the confirm dialog that grants one
     // names this command so the user is told about it at the moment it matters.
@@ -541,6 +549,7 @@ export const COMMANDS = [
     scope: 'local',
     usage: '/model [provider/model | model]',
     description: 'Show or change the model in use',
+    dialogTitle: 'Model',
     run: (argv) => {
       const config = loadConfig();
       if (argv.length === 0) {
@@ -567,6 +576,7 @@ export const COMMANDS = [
     scope: 'local',
     usage: '/mcp [add <name> <cmd…> | add <name> --url <url> | remove|grant|revoke <name>]',
     description: 'Manage MCP servers: list, add, remove, grant, revoke',
+    dialogTitle: 'MCP servers',
     run: (argv) => {
       const [action, serverName, ...rest] = argv;
 
@@ -622,7 +632,7 @@ export const COMMANDS = [
 
       const servers = serverStatus();
       if (servers.length === 0) {
-        return ok('No MCP servers are configured.\n\nAdd one with:\n  mcp add <name> <command> [args…]\n  mcp add <name> --url <https://…>\n\n(prefix with / in chat, or `causyne-agent mcp …` in a terminal)');
+        return ok('No MCP servers are configured.\n\nAdd one with:\n  mcp add <name> <command> [args…]\n  mcp add <name> --url <https://…>\n\n(prefix with / in chat, or `causyne-agent mcp …` in a terminal)', { effect: 'pick-mcp' });
       }
       const lines = ['MCP servers', ''];
       for (const server of servers) {
@@ -632,7 +642,7 @@ export const COMMANDS = [
       }
       lines.push('');
       lines.push('  mcp grant <name> to enable, mcp remove <name> to delete.');
-      return ok(lines.join('\n'));
+      return ok(lines.join('\n'), { effect: 'pick-mcp' });
     }
   },
 
@@ -703,6 +713,7 @@ export const COMMANDS = [
     scope: 'local',
     usage: '/status',
     description: 'Show the current provider, autonomy mode and workspace scope',
+    dialogTitle: 'Status',
     // One builder, shared with `causyne status`, so status output cannot drift.
     run: (argv, ctx) => ok(buildStatusText({ loop: ctx.loop || null }))
   },
@@ -791,7 +802,11 @@ export async function runCommand(name, argv = [], ctx = {}) {
   }
 
   try {
-    return await command.run(argv, { ...ctx, surface });
+    const result = await command.run(argv, { ...ctx, surface });
+    if (command.dialogTitle && result && !result.effect) {
+      return { ...result, effect: 'dialog', title: command.dialogTitle };
+    }
+    return result;
   } catch (e) {
     return fail(`/${command.name} failed: ${e.message}`);
   }

package/src/entrypoint.js

@@ -5,6 +5,29 @@ import { runSelfUpdate } from './autoUpdate.js';
 import { printContextReport, printUsageReport, printCheckpoints, printUndo, buildStatusText, printReport } from './reporting.js';
 import { runCommand } from './commands.js';
 import { resolveInvocation } from './tui/invocation.js';
+import { resolveUserPath } from './utils/paths.js';
+
+function requestedWorkingDirectory(argv = []) {
+  const tokens = Array.isArray(argv) ? argv.slice(2) : [];
+  for (let index = 0; index < tokens.length; index++) {
+    const token = String(tokens[index]);
+    if (token === '--') break;
+    if (token === '-C' || token === '--cwd') return tokens[index + 1] || '';
+    if (token.startsWith('--cwd=')) return token.slice('--cwd='.length);
+    if (!token.startsWith('-')) break;
+  }
+  return null;
+}
+
+function applyRequestedWorkingDirectory(argv) {
+  const requested = requestedWorkingDirectory(argv);
+  if (requested === null) return;
+  if (!requested) throw new Error('The --cwd option requires a directory.');
+  const resolved = resolveUserPath(requested);
+  process.chdir(resolved);
+}
+
+applyRequestedWorkingDirectory(process.argv);
 
 // The old flag remains parseable only to explain its retirement.
 function announceDevEmulator(requested) {
@@ -42,6 +65,7 @@ program
   // "Usage: causyne-agent" reasonably concludes they ran the wrong thing.
   .name('causyne')
   .description('Causyne — Local desktop AI harness (alias: causyne-agent)')
+  .option('-C, --cwd <directory>', 'Use this directory as the workspace')
   .version(pkgVersion);
 
 program

package/src/sandbox.js

@@ -96,13 +96,10 @@ const INTERPRETER_INVOCATION = /(^|\s)(sh|bash|zsh|ksh|dash|fish|eval|xargs|ssh|
 /**
  * Credential stores and key material.
  *
- * L4 (local-path audit): the DEFAULT workspace scope ends with the home
- * directory itself as a fallback, which silently puts ~/.ssh, ~/.aws and
- * ~/.causyne (the encrypted API key AND the .vault_key that decrypts it) inside
- * the agent's reach with no prompt. Vision section 4 asks for freedom WITH a
- * human in the loop rather than a wall, so these are not blocked — touching one
- * is classified 'extreme', which always requires explicit approval in every
- * autonomy mode, including Mode C.
+ * A user may deliberately select a workspace that contains credential material.
+ * These paths are not silently trusted just because they sit below that root:
+ * touching one is classified 'extreme', which always requires explicit approval
+ * in every autonomy mode, including Mode C.
  */
 const CREDENTIAL_PATHS = [
   /(^|\/)\.ssh(\/|$)/,
@@ -168,22 +165,17 @@ function redirectsIntoSensitiveTarget(maskedCommand) {
 }
 
 export class Sandbox {
-  constructor() {
+  constructor({ workspaceRoot = process.cwd() } = {}) {
     this.config = loadConfig();
-    
-    // V5 Upgrade: Expanded default workspace paths
-    // Instead of only os.homedir() (which was too restrictive and caused path errors),
-    // we now default to common user directories while still blocking system dirs.
-    const home = os.homedir();
-    this.workspacePaths = this.config.workspacePaths || [
-      path.join(home, 'Desktop'),
-      path.join(home, 'Documents'),
-      path.join(home, 'Downloads'),
-      path.join(home, 'Projects'),
-      path.join(home, 'CausyneWorkspace'),
-      path.join(home, 'Causyne'),
-      home  // Fallback: allow home dir itself (covers edge cases like ~/scripts, ~/.config)
-    ];
+
+    // The launch directory is the workspace. A previous default advertised
+    // Desktop, Documents, Downloads, ~/Causyne and the whole home directory as
+    // equally valid roots. That made the model drift into the agent's own source
+    // even when the user launched it from another project, while also making the
+    // sandbox effectively home-wide. Explicit runtime grants can still use
+    // updateWorkspacePaths(), but stale config never overrides the folder the
+    // user selected for this invocation.
+    this.workspacePaths = [path.resolve(workspaceRoot)];
     
     // Developer emulator mode (hardened, secret-gated — see devMode.js) grants
     // full local access for agent development on a Fast-tier emulator. It cannot
@@ -243,9 +235,9 @@ export class Sandbox {
       }
     }
 
-    // L4: a credential store is in reach by default (the home fallback), so it
-    // gets a human in the loop rather than a wall. 'extreme' is the one risk
-    // level Mode C cannot auto-approve.
+    // L4: when an explicitly selected workspace contains credential material,
+    // it gets a human in the loop rather than silent access. 'extreme' is the
+    // one risk level Mode C cannot auto-approve.
     for (const p of pathsToCheck) {
       if (typeof p === 'string' && isCredentialPath(p)) {
         return { allowed: true, risk: 'extreme', reason: `Touches credential material: ${p}` };
@@ -352,20 +344,6 @@ export class Sandbox {
       return false;
     }
     
-    // V7 Ultimate Self-Preservation: Block access to the agent's own source code
-    // The AGI cannot read, modify, or delete causyne-agent itself.
-    const agentBinOrScript = process.argv[1] || '';
-    let agentRoot = '';
-    if (agentBinOrScript && agentBinOrScript.includes('causyne-agent')) {
-      const idx = agentBinOrScript.lastIndexOf('causyne-agent');
-      agentRoot = path.resolve(agentBinOrScript.slice(0, idx + 'causyne-agent'.length));
-    } else if (typeof __dirname !== 'undefined') {
-      agentRoot = path.resolve(__dirname, '..');
-    }
-    if (agentRoot && resolved.startsWith(agentRoot) && resolved !== path.resolve(os.homedir())) {
-      return false;
-    }
-    
     // V6: Override workspace limits if grantAllAccess is active
     if (this.grantAllAccess) {
       return true;

package/src/tui/ask.js

@@ -2,8 +2,8 @@
 //
 // `causyne config` and `causyne pair` run with no chat session behind them, so
 // there is no live region for a dialog to draw into. That is why they were the
-// last two surfaces still on inquirer — and inquirer is a different design
-// system: its own colours, its own glyphs, no NO_COLOR handling, and a list
+// last two surfaces still on a second prompt framework, with its own colours,
+// glyphs, NO_COLOR handling, and list
 // widget that looks nothing like the picker the same user sees inside `causyne`.
 //
 // The fix is NOT a second app shell. That was tried once: screen.js, layout.js,

package/src/tui/banner.js

@@ -23,9 +23,44 @@ const WORDMARK = [
   ' ████  █   █  ███  ████    █   █   █ █████'
 ];
 
-// A terminal without box-drawing support would render the art as mojibake, so
-// it gets the wordmark spelled out instead of a field of question marks.
-const WORDMARK_PLAIN = ['C A U S Y N E'];
+// A compact terminal rendering of the six-part Causyne aperture. The shape is
+// sampled from the canonical SVG rather than invented as a second logo. Its
+// upper-right blade carries the signal green; the other blades use the neutral
+// brand ink. Each row remains ordinary terminal text and degrades to #/+ ASCII.
+const LOGO_SEGMENTS = [
+  [['ink', '   ███▓']],
+  [['ink', ' ▓███'], ['accent', '███'], ['ink', '▓']],
+  [['ink', '▓███ ▓▓'], ['accent', '██'], ['ink', '▓']],
+  [['ink', '▓██   ▓██▓']],
+  [['ink', '▓███▓ ███▓']],
+  [['ink', ' ███████▓']],
+  [['ink', '   ▓███']]
+];
+
+function logoRows(unicode) {
+  return LOGO_SEGMENTS.map((segments) => segments.map(([role, text]) => {
+    const rendered = unicode
+      ? text
+      : text.replace(/[█▓]/g, role === 'accent' ? '+' : '#');
+    return paint(role, rendered);
+  }).join(''));
+}
+
+function brandArt(width, unicode) {
+  if (!unicode || width < 64) {
+    const logo = logoRows(false);
+    logo[2] = `${padEnd(logo[2], 12)}${bold(paint('ink', 'CAUSYNE AGENT'))}`;
+    return logo;
+  }
+
+  const logo = logoRows(true);
+  return logo.map((line, index) => {
+    const word = WORDMARK[index - 1];
+    return word === undefined
+      ? line
+      : `${padEnd(line, 10)}   ${paint('ink', word)}`;
+  });
+}
 
 /**
  * The banner rows.
@@ -35,10 +70,9 @@ const WORDMARK_PLAIN = ['C A U S Y N E'];
  * never be exercised at all.
  */
 export function wordmark(width = 80, { unicode = HAS_UNICODE } = {}) {
-  const art = (unicode && width >= 54) ? WORDMARK : WORDMARK_PLAIN;
-  const rows = art.map((line) => paint('accent', line));
+  const rows = brandArt(width, unicode);
   rows.push('');
-  rows.push(dim('Causyne AI Agent'));
+  rows.push(dim('Causyne Agent'));
   return rows;
 }
 
@@ -60,8 +94,8 @@ export function wordmark(width = 80, { unicode = HAS_UNICODE } = {}) {
  * header that wraps is worse than a header that is tall.
  */
 export function sessionBanner(info = {}, width = 80, { unicode = HAS_UNICODE } = {}) {
-  const art = (unicode && width >= 54) ? WORDMARK : WORDMARK_PLAIN;
-  const artWidth = Math.max(...art.map(visibleWidth));
+  let art = brandArt(width, unicode);
+  let artWidth = Math.max(...art.map(visibleWidth));
 
   const facts = [];
   if (info.version) facts.push([bold(paint('accent', 'Causyne')), dim(info.version)]);
@@ -78,11 +112,22 @@ export function sessionBanner(info = {}, width = 80, { unicode = HAS_UNICODE } =
   // deferred-wrap state: the cursor sits past the last column, and the next
   // write decides whether that becomes a wrap. Measured on an 80-column pty,
   // the workspace row came back at exactly 80 while every other row was 79.
-  const room = width - artWidth - GAP - 1;
+  let room = width - artWidth - GAP - 1;
+
+  // A coloured 80-column terminal can render the full block wordmark, but it
+  // leaves too little room for the session facts beside it. Stacking those
+  // facts made startup 16 rows tall and overflowed short terminals. Prefer the
+  // compact ASCII aperture in that case: identity and facts remain one object,
+  // and the first prompt still fits without scrolling the banner away.
+  if (room < 24 && unicode && width >= 64) {
+    art = brandArt(width, false);
+    artWidth = Math.max(...art.map(visibleWidth));
+    room = width - artWidth - GAP - 1;
+  }
 
   // Not enough width for two columns: stack, rather than wrap either one.
   if (room < 24) {
-    return art.map((line) => paint('accent', line))
+    return art
       .concat([''], facts.map(([left, right]) =>
         truncate(right ? `${left}  ${right}` : left, width - 1, GLYPHS.ellipsis)));
   }
@@ -90,7 +135,7 @@ export function sessionBanner(info = {}, width = 80, { unicode = HAS_UNICODE } =
   const rows = [];
   const height = Math.max(art.length, facts.length);
   for (let index = 0; index < height; index++) {
-    const artLine = art[index] === undefined ? '' : paint('accent', art[index]);
+    const artLine = art[index] === undefined ? '' : art[index];
     const fact = facts[index];
     const left = padEnd(artLine, artWidth) + ' '.repeat(GAP);
     if (!fact) { rows.push(artLine); continue; }

package/src/tui/dialogs.js

@@ -299,9 +299,9 @@ export class TextLayer extends Layer {
  * how dangerous is this, what exactly will it do, and what will change on disk.
  * The diff scrolls, so a 400-line rewrite is inspectable rather than truncated.
  *
- * Deliberately has NO default. `y` and `n` are explicit, enter is not bound, and
- * escape denies. A dialog where the safe answer is one keypress away from the
- * dangerous one is how a person approves something they meant to read.
+ * The highlighted default is Reject. `y` and `n` remain explicit shortcuts;
+ * arrows choose a visible option and Enter commits it. A reflex Enter therefore
+ * denies, while an intentional move to either Allow option works consistently.
  */
 export class ApprovalLayer extends Layer {
   constructor(options = {}) {
@@ -495,7 +495,10 @@ export class ConfirmLayer extends Layer {
     super({ width: options.width || 60, height: options.height || 8, ...options });
     this.message = options.message || 'Are you sure?';
     this.onAnswer = options.onAnswer || null;
-    this.footer = `y yes  ${GLYPHS.dot}  n no  ${GLYPHS.dot}  esc cancel`;
+    this.defaultAnswer = options.defaultAnswer === true;
+    this.footer = this.defaultAnswer
+      ? `enter confirm  ${GLYPHS.dot}  y yes  ${GLYPHS.dot}  n no  ${GLYPHS.dot}  esc cancel`
+      : `enter cancel  ${GLYPHS.dot}  y yes  ${GLYPHS.dot}  n no  ${GLYPHS.dot}  esc cancel`;
     this.settled = false;
   }
 
@@ -523,10 +526,15 @@ export class ConfirmLayer extends Layer {
 
   key(event) {
     if (!event) return null;
-    // Only an explicit `y` approves. Every other key either says no or is
-    // ignored — a mistyped keypress must never approve.
+    // `y` is always an explicit approval. Enter follows the default selected by
+    // the caller: false for ordinary destructive confirmations, true only for
+    // the second step after the user has already selected Allow always.
     if (isChar(event, 'y')) { this.answer(true); return 'close'; }
     if (isChar(event, 'n') || event.name === 'escape') { this.answer(false); return 'close'; }
+    if (event.name === 'enter' || event.name === 'return') {
+      this.answer(this.defaultAnswer);
+      return 'close';
+    }
     return 'handled';
   }
 }

package/src/tui/home.js

@@ -207,7 +207,7 @@ export async function mcpPicker(prompt, onAction) {
     items: rows.map((server) => ({
       id: server.name,
       label: server.name,
-      description: `${server.granted ? 'granted' : 'not granted'}${server.command ? ` ${GLYPHS.dot} ${server.command}` : ''}`,
+      description: `${server.granted ? 'granted' : 'not granted'}${server.target ? ` ${GLYPHS.dot} ${server.target}` : ''}`,
       category: server.granted ? 'granted' : 'available',
       value: server
     })),

package/src/tui/invocation.js

@@ -34,6 +34,8 @@ export const ROOT_OPTIONS = new Map([
   ['--help', 0],
   ['-V', 0],
   ['--version', 0],
+  ['-C', 1],
+  ['--cwd', 1],
   ['--dev-emulator', 0]
 ]);
 

package/src/tui/keys.js

@@ -273,6 +273,17 @@ export class KeyDecoder {
     } else if (final === 'u') {
       // Kitty keyboard protocol: ESC [ codepoint ; modifiers u
       const codepoint = numbers[0];
+      const controlName = {
+        9: 'tab',
+        10: 'enter',
+        13: 'enter',
+        27: 'escape',
+        127: 'backspace'
+      }[codepoint];
+      if (controlName) {
+        events.push(applyModifier(makeKey(controlName, { sequence }), numbers[1]));
+        return sequence.length;
+      }
       if (Number.isFinite(codepoint) && codepoint >= 32) {
         const character = String.fromCodePoint(codepoint);
         const key = applyModifier(

package/src/tui/prompt.js

@@ -12,7 +12,7 @@
 //  * ESC INTERRUPTS — wired to the AgentLoop.abort() that already existed and
 //    was only reachable by typing /stop after the turn had finished.
 //  * FAIL OPEN — if raw mode is unavailable (piped stdin, a CI runner, an
-//    unusual terminal) the caller falls back to inquirer. A fancy editor must
+//    unusual terminal) the caller falls back to plain readline. A fancy editor must
 //    never be the reason chat does not start.
 //
 // Pure Node. No dependency, no shell.
@@ -23,10 +23,10 @@ import { PromptHistory } from './history.js';
 import { FileIndex, suggest, applyCompletion, renderPicker, MAX_VISIBLE } from './completion.js';
 import { paint, dim, bold, GLYPHS, terminalWidth, HAS_COLOR } from './theme.js';
 import { barBlock, GUTTER } from './block.js';
-import { visibleWidth, truncate, wrapBlock, shortenHome } from './text.js';
+import { visibleWidth, truncate, wrapBlock, shortenHome, safeDisplay } from './text.js';
 import { pickExample, fitHints } from './banner.js';
 import { panelRows } from './overlay.js';
-import { commandPalette, skillPicker, ApprovalLayer, ConfirmLayer, HomeLayer } from './dialogs.js';
+import { commandPalette, skillPicker, ApprovalLayer, ConfirmLayer, HomeLayer, TextLayer } from './dialogs.js';
 import { describeTool } from './toolDisplay.js';
 
 const CTRL_C_WINDOW_MS = 2000;
@@ -419,6 +419,19 @@ export class ChatPrompt {
     }));
   }
 
+  /** Show local command output inside the live region, never in chat scrollback. */
+  showText(title, text, options = {}) {
+    const panelWidth = Math.max(28, Math.min(this.width() - 2, options.width || 76));
+    const contentWidth = Math.max(12, panelWidth - 4);
+    const lines = wrapBlock(safeDisplay(String(text == null ? '' : text)), contentWidth);
+    return this.openLayer(new TextLayer({
+      title: String(title || 'Details'),
+      lines: options.danger ? lines.map((line) => paint('danger', line)) : lines,
+      width: panelWidth,
+      height: options.height || 20
+    }));
+  }
+
   /**
    * Ask for approval of a tool call: risk, arguments and a scrollable diff.
    *
@@ -444,12 +457,15 @@ export class ChatPrompt {
   }
 
   /** A plain yes/no, for the questions that are not tool approvals. */
-  confirm(message) {
+  confirm(message, options = {}) {
     return new Promise((resolve) => {
       let settled = false;
       const settle = (answer) => { if (!settled) { settled = true; resolve(Boolean(answer)); } };
-      const layer = new ConfirmLayer({ message, onAnswer: settle });
-      layer.answer = () => settle(false);
+      const layer = new ConfirmLayer({
+        message,
+        defaultAnswer: options.defaultAnswer === true,
+        onAnswer: settle
+      });
       this.openLayer(layer);
     });
   }
@@ -546,19 +562,11 @@ export class ChatPrompt {
       return;
     }
 
-    // A COMMAND IS NOT A MESSAGE, so it must not be drawn as one.
-    //
-    // This echoed every submitted line as a filled user block BEFORE the caller
-    // had any chance to decide what the line was. Typing `/usage` therefore
-    // rendered exactly like a sentence you had sent to the model — the command
-    // did run, and its output appeared underneath, but the transcript showed a
-    // conversation turn that never happened. opencode draws an invocation here,
-    // not a message, and the difference is the whole reason a command line
-    // exists.
+    // A command is control input, not conversation. Its handler decides whether
+    // to open a picker, show a text dialog, or perform an action. Keeping the
+    // invocation out of the transcript preserves the boundary between local UI
+    // and messages that were actually sent to the model.
     if (this.isCommand(text)) {
-      this.commit('command', (width) => [
-        `${paint('accent', GLYPHS.arrow)} ${bold(truncate(text, Math.max(8, width - 3), GLYPHS.ellipsis))}`
-      ]);
       const settle = this.waiter;
       this.waiter = null;
       if (settle) settle(text);

package/src/tui/theme.js

@@ -90,52 +90,54 @@ export const HAS_UNICODE = HAS_COLOR
 // Roles, not colours. A caller asking for `danger` should never care whether
 // that is truecolor crimson or plain ANSI red.
 const DARK_PALETTE = {
-  accent:  [ 96, 205, 255],
-  agent:   [138, 180, 248],
-  user:    [ 90, 200, 160],
-  success: [126, 199, 108],
+  // Causyne brand palette from the canonical site/logo reference:
+  // signal #b6e06f, text #e9edf2, muted #8d96a4, line #272c35,
+  // panel #161920 and background #0f1115.
+  accent:  [182, 224, 111],
+  agent:   [182, 224, 111],
+  user:    [154, 199,  86],
+  success: [182, 224, 111],
   warn:    [230, 190,  90],
   danger:  [235, 110, 110],
-  muted:   [130, 138, 150],
-  ink:     [225, 228, 234],
-  rule:    [ 62,  68,  80],
-  // The scroll rail. A deliberately DARK blue, not the accent.
+  muted:   [141, 150, 164],
+  ink:     [233, 237, 242],
+  rule:    [ 39,  44,  53],
+  // The scroll rail uses a deliberately darker brand green than the accent.
   //
   // The rail is orientation, not information you act on — it says where you are
   // while you read something else, so it must be legible without competing with
-  // the transcript for attention. In `accent` cyan it was the brightest thing on
-  // a screen full of prose. Dark enough to recede, blue enough to read as one
-  // continuous object beside the markers, which keep their own roles.
-  scroll:  [ 58, 110, 170],
+  // the transcript for attention. Dark enough to recede, while remaining part
+  // of the same graphite-and-signal-green visual system as the rest of the CLI.
+  scroll:  [ 99, 125,  63],
   // Background roles. opencode fills its input surface with theme
   // backgroundElement and marks it with a left border in the agent's colour
   // (component/prompt/index.tsx: border={["left"]} + backgroundColor). These are
   // that fill: one step off the terminal's own background, never a block of
   // colour that fights the text sitting on it.
-  surface:  [ 28,  31,  38],
-  surfaceHi:[ 38,  42,  51]
+  surface:  [ 22,  25,  32],
+  surfaceHi:[ 27,  31,  39]
 };
 
 const LIGHT_PALETTE = {
-  accent:  [  0, 110, 170],
-  agent:   [ 40,  80, 170],
-  user:    [ 20, 120,  90],
-  success: [ 30, 120,  40],
+  accent:  [ 91, 130,  29],
+  agent:   [ 91, 130,  29],
+  user:    [ 74, 112,  26],
+  success: [ 74, 112,  26],
   warn:    [155, 110,   0],
   danger:  [185,  40,  40],
-  muted:   [ 95, 102, 112],
-  ink:     [ 25,  28,  34],
-  rule:    [200, 204, 212],
-  scroll:  [ 60, 100, 160],
+  muted:   [105, 112, 123],
+  ink:     [ 58,  63,  71],
+  rule:    [198, 203, 211],
+  scroll:  [ 91, 130,  29],
   surface:  [242, 244, 247],
   surfaceHi:[232, 235, 240]
 };
 
 // Fallback for 16-colour terminals: the closest base ANSI code per role.
 const BASIC_CODES = {
-  accent: 36, agent: 34, user: 32, success: 32,
+  accent: 92, agent: 92, user: 32, success: 92,
   warn: 33, danger: 31, muted: 90, ink: 39, rule: 90,
-  scroll: 34,
+  scroll: 32,
   surface: 39, surfaceHi: 39
 };
 

package/src/utils/inquirer.js

@@ -1,12 +0,0 @@
-import rawInquirer from 'inquirer';
-
-
-const inquirer = rawInquirer?.prompt
-  ? rawInquirer
-  : (rawInquirer?.default?.prompt
-    ? rawInquirer.default
-    : (rawInquirer?.default?.default?.prompt
-      ? rawInquirer.default.default
-      : rawInquirer));
-
-export default inquirer;