@cruxy/cli 0.11.0 → 0.13.0

package/dist/approval/prompt.js

@@ -1,7 +1,7 @@
 import path from "node:path";
-import pc from "picocolors";
 import { readSingleKey } from "../components/input.js";
 import { renderActionPreview } from "../render/diff.js";
+import { themeForColor } from "../theme/index.js";
 /**
  * Render the action, read one key, and map it to a {@link PromptChoice}. `n`/`t`
  * read a follow-up line (reason / instruction). Anything else — including EOF —
@@ -35,33 +35,35 @@ export async function promptForApproval(request, io) {
 }
 /** Render the full prompt block: header, detail (diff or command+cwd), choices. */
 export function render(request, color) {
-    const c = pc.createColors(color);
+    const t = themeForColor(color);
     const destructive = request.tier === "destructive";
-    const mark = destructive ? c.red(c.bold("!")) : c.yellow("?");
-    const label = destructive ? c.red(c.bold(" (destructive)")) : "";
+    // The risk mark carries meaning by shape (`!` vs `?`), not by color alone —
+    // so it survives NO_COLOR (U.1 accessibility groundwork).
+    const mark = destructive ? t.danger(t.strong("!")) : t.warning("?");
+    const label = destructive ? t.danger(t.strong(" (destructive)")) : "";
     const lines = [];
-    lines.push(`${mark} cruxy wants to ${c.bold(request.summary)}${label}`);
-    lines.push(detail(request, c));
-    lines.push(choices(request.scope, c));
+    lines.push(`${mark} cruxy wants to ${t.strong(request.summary)}${label}`);
+    lines.push(detail(request, t));
+    lines.push(choices(request.scope, t));
     return lines.filter((l) => l !== "").join("\n") + " ";
 }
 /** The action detail: a diff for file actions, the command + cwd for shell/test. */
-function detail(request, c) {
+function detail(request, t) {
     if (request.action.kind === "shell" || request.action.kind === "test") {
         return [
-            `  ${c.dim("$")} ${request.action.command ?? ""}`,
-            `  ${c.dim(`in ${request.cwd}`)}`,
+            `  ${t.muted("$")} ${request.action.command ?? ""}`,
+            `  ${t.muted(`in ${request.cwd}`)}`,
         ].join("\n");
     }
-    return renderActionPreview(request.action.preview, c);
+    return renderActionPreview(request.action.preview, t);
 }
 /** The choices line, including a short label of what an `a` grant would cover. */
-function choices(scope, c) {
+function choices(scope, t) {
     const grant = scopeLabel(scope);
     const a = grant === null
-        ? `${c.dim("[a] allow this kind (n/a here)")}`
-        : `[a] allow ${c.bold(grant)} this session`;
-    return `  ${c.dim("[y] approve once ·")} ${a} ${c.dim("· [n] reject · [t] reject & instruct:")}`;
+        ? `${t.muted("[a] allow this kind (n/a here)")}`
+        : `[a] allow ${t.strong(grant)} this session`;
+    return `  ${t.muted(`[y] approve once ${t.glyph.sep}`)} ${a} ${t.muted(`${t.glyph.sep} [n] reject ${t.glyph.sep} [t] reject & instruct:`)}`;
 }
 /** Short human label for what a session grant would allow, or null if none. */
 function scopeLabel(scope) {

package/dist/cli/commands/checkpoint.js

@@ -1,7 +1,8 @@
 import { Command } from "commander";
-import pc from "picocolors";
 import { loadConfig } from "../../config/index.js";
 import { CheckpointService } from "../../checkpoint/index.js";
+import { shouldUseColor } from "../../errors/index.js";
+import { themeForColor } from "../../theme/index.js";
 import { logger } from "../../utils/logger.js";
 /**
  * `cruxy checkpoint` (C.32) — inspect the working-tree snapshots that back
@@ -14,18 +15,19 @@ export function checkpointCommand() {
         .command("list")
         .description("list saved checkpoints, newest first")
         .action(async () => {
+        const t = themeForColor(shouldUseColor(process.stdout));
         const { config } = loadConfig();
         const service = new CheckpointService({ root: process.cwd(), config });
         const checkpoints = await service.list();
         if (checkpoints.length === 0) {
-            logger.print(pc.dim("no checkpoints yet — one is created automatically before an agent run's first file change"));
+            logger.print(t.muted("no checkpoints yet — one is created automatically before an agent run's first file change"));
             return;
         }
         for (const c of checkpoints) {
             const files = `${c.files.length} file${c.files.length === 1 ? "" : "s"}`;
-            logger.print(`${pc.cyan(c.id)}  ${pc.dim(c.createdAt)}  ${pc.dim(`[${c.store}]`)}  ${files}  ${c.runSummary}`);
+            logger.print(`${t.accent(c.id)}  ${t.muted(c.createdAt)}  ${t.muted(`[${c.store}]`)}  ${files}  ${c.runSummary}`);
         }
-        logger.print(pc.dim(`\nrestore one with \`cruxy rollback <id>\` (or \`cruxy rollback\` for the newest)`));
+        logger.print(t.muted(`\nrestore one with \`cruxy rollback <id>\` (or \`cruxy rollback\` for the newest)`));
     });
     return cmd;
 }

package/dist/cli/commands/config.js

@@ -1,6 +1,6 @@
 import { Command } from "commander";
-import pc from "picocolors";
-import { configKeyUnknown } from "../../errors/index.js";
+import { configKeyUnknown, shouldUseColor } from "../../errors/index.js";
+import { themeForColor } from "../../theme/index.js";
 import { logger } from "../../utils/logger.js";
 import { loadConfig, getPath, setValue, initConfig, globalConfigPath, findProjectConfig, } from "../../config/index.js";
 export function configCommand() {
@@ -35,24 +35,27 @@ export function configCommand() {
             ? (findProjectConfig() ?? "cruxy.config.json")
             : globalConfigPath();
         const written = setValue(key, value, file);
-        logger.print(`${pc.green("set")} ${pc.bold(key)} = ${value}  ${pc.dim(`(${written})`)}`);
+        const t = themeForColor(shouldUseColor(process.stdout));
+        logger.print(`${t.success("set")} ${t.strong(key)} = ${value}  ${t.muted(`(${written})`)}`);
     });
     cmd
         .command("path")
         .description("show config file locations")
         .action(() => {
+        const t = themeForColor(shouldUseColor(process.stdout));
         const project = findProjectConfig();
-        logger.print(`${pc.bold("global:")}  ${globalConfigPath()}`);
-        logger.print(`${pc.bold("project:")} ${project ?? pc.dim("(none found)")}`);
+        logger.print(`${t.strong("global:")}  ${globalConfigPath()}`);
+        logger.print(`${t.strong("project:")} ${project ?? t.muted("(none found)")}`);
     });
     cmd
         .command("init")
         .description("write a default global config file")
         .action(() => {
+        const t = themeForColor(shouldUseColor(process.stdout));
         const { path, created } = initConfig(globalConfigPath());
         logger.print(created
-            ? `${pc.green("created")} ${path}`
-            : `${pc.yellow("exists")}  ${path} ${pc.dim("(left unchanged)")}`);
+            ? `${t.success("created")} ${path}`
+            : `${t.warning("exists")}  ${path} ${t.muted("(left unchanged)")}`);
     });
     return cmd;
 }

package/dist/cli/commands/index.js

@@ -1,8 +1,8 @@
 import { existsSync } from "node:fs";
 import { Command } from "commander";
-import pc from "picocolors";
 import { loadConfig } from "../../config/index.js";
-import { CruxyError, indexFailed } from "../../errors/index.js";
+import { CruxyError, indexFailed, shouldUseColor } from "../../errors/index.js";
+import { themeForColor } from "../../theme/index.js";
 import { getIndexService, indexDbPath, resetIndexServices, } from "../../indexing/index.js";
 import { logger } from "../../utils/logger.js";
 /**
@@ -16,6 +16,7 @@ export function indexCommand() {
         .option("--status", "show index status without building")
         .option("--force", "re-embed every file, ignoring content hashes")
         .action(async (opts) => {
+        const t = themeForColor(shouldUseColor(process.stdout));
         const { config } = loadConfig();
         if (!config.index.enabled) {
             logger.warn("codebase indexing is disabled (index.enabled = false)");
@@ -25,21 +26,21 @@ export function indexCommand() {
         if (opts.status) {
             // Don't create an empty DB just to report "no index built yet".
             if (config.index.store !== "memory" && !existsSync(indexDbPath(cwd))) {
-                logger.print(`${pc.bold("index:")} ${pc.dim("not built yet")} — run ${pc.bold("cruxy index")}`);
+                logger.print(`${t.strong("index:")} ${t.muted("not built yet")} — run ${t.strong("cruxy index")}`);
                 return;
             }
             const service = await getIndexService(cwd, config, logger);
-            printStatus(service.status());
+            printStatus(service.status(), t);
             await resetIndexServices();
             return;
         }
-        logger.info(pc.dim(`indexing ${cwd} …`));
-        logger.info(pc.dim("(first run may download the local embedding model)"));
+        logger.info(t.muted(`indexing ${cwd} ${t.glyph.ellipsis}`));
+        logger.info(t.muted("(first run may download the local embedding model)"));
         const service = await getIndexService(cwd, config, logger);
         try {
             const stats = await service.index({ force: opts.force });
-            logger.print(`${pc.green("indexed")} ${stats.filesIndexed} file(s), ${stats.chunksIndexed} chunk(s) ` +
-                pc.dim(`(${stats.filesSkipped} unchanged, ${stats.filesPurged} purged, ${stats.durationMs}ms)`));
+            logger.print(`${t.success("indexed")} ${stats.filesIndexed} file(s), ${stats.chunksIndexed} chunk(s) ` +
+                t.muted(`(${stats.filesSkipped} unchanged, ${stats.filesPurged} purged, ${stats.durationMs}ms)`));
         }
         catch (err) {
             // Typed index failures (embedder/store unavailable) already carry a
@@ -52,11 +53,11 @@ export function indexCommand() {
         }
     });
 }
-function printStatus(status) {
-    logger.print(`${pc.bold("index:")}    ${status.exists ? pc.green("built") : pc.yellow("empty")}`);
-    logger.print(`${pc.bold("store:")}    ${status.storePath ?? "(in-memory)"}`);
-    logger.print(`${pc.bold("embedder:")} ${status.embedderId ?? pc.dim("(none)")}` +
-        (status.dim ? pc.dim(` · ${status.dim}d`) : ""));
-    logger.print(`${pc.bold("files:")}    ${status.files}`);
-    logger.print(`${pc.bold("chunks:")}   ${status.chunks}`);
+function printStatus(status, t) {
+    logger.print(`${t.strong("index:")}    ${status.exists ? t.success("built") : t.warning("empty")}`);
+    logger.print(`${t.strong("store:")}    ${status.storePath ?? "(in-memory)"}`);
+    logger.print(`${t.strong("embedder:")} ${status.embedderId ?? t.muted("(none)")}` +
+        (status.dim ? t.muted(`${t.sep}${status.dim}d`) : ""));
+    logger.print(`${t.strong("files:")}    ${status.files}`);
+    logger.print(`${t.strong("chunks:")}   ${status.chunks}`);
 }

package/dist/cli/commands/init.js

@@ -1,5 +1,6 @@
 import { Command } from "commander";
-import pc from "picocolors";
+import { shouldUseColor } from "../../errors/index.js";
+import { themeForColor } from "../../theme/index.js";
 import { logger } from "../../utils/logger.js";
 import { loadConfig } from "../../config/index.js";
 import { createDefaultDeps, defaultOnboardingIO, runOnboarding, } from "../../onboarding/index.js";
@@ -13,8 +14,9 @@ export function initCommand() {
     return new Command("init")
         .description("set up cruxy in this project (key + CRUXY.md + a first run)")
         .action(async () => {
+        const t = themeForColor(shouldUseColor(process.stdout));
         if (!process.stdin.isTTY) {
-            logger.print(pc.dim("cruxy init is interactive — run it in a terminal, or export your key as an environment variable."));
+            logger.print(t.muted("cruxy init is interactive — run it in a terminal, or export your key as an environment variable."));
             process.exitCode = 1;
             return;
         }
@@ -33,7 +35,7 @@ export function initCommand() {
             }),
         });
         if (!result.completed) {
-            logger.print(pc.dim("setup not completed — run `cruxy init` again to resume."));
+            logger.print(t.muted("setup not completed — run `cruxy init` again to resume."));
             process.exitCode = 1;
         }
     });

package/dist/cli/commands/login.js

@@ -1,5 +1,6 @@
 import { Command } from "commander";
-import pc from "picocolors";
+import { shouldUseColor } from "../../errors/index.js";
+import { themeForColor } from "../../theme/index.js";
 import { logger } from "../../utils/logger.js";
 import { loadConfig } from "../../config/index.js";
 import { createDefaultDeps, defaultOnboardingIO, runOnboarding, } from "../../onboarding/index.js";
@@ -13,8 +14,9 @@ export function loginCommand() {
     return new Command("login")
         .description("set or replace your API key (validated, saved to ~/.cruxy)")
         .action(async () => {
+        const t = themeForColor(shouldUseColor(process.stdout));
         if (!process.stdin.isTTY) {
-            logger.print(pc.dim("cruxy login is interactive — run it in a terminal, or export your key as an environment variable."));
+            logger.print(t.muted("cruxy login is interactive — run it in a terminal, or export your key as an environment variable."));
             process.exitCode = 1;
             return;
         }
@@ -29,7 +31,7 @@ export function loginCommand() {
             deps: createDefaultDeps({ config, cwd: process.cwd() }),
         });
         if (!result.completed) {
-            logger.print(pc.dim("login not completed."));
+            logger.print(t.muted("login not completed."));
             process.exitCode = 1;
         }
     });

package/dist/cli/commands/pr.js

@@ -1,9 +1,9 @@
 import { Command } from "commander";
-import pc from "picocolors";
 import { createProvider } from "@cruxy/sdk";
 import { logger } from "../../utils/logger.js";
 import { loadConfig, resolveApiKey } from "../../config/index.js";
-import { authMissingKey } from "../../errors/index.js";
+import { authMissingKey, shouldUseColor } from "../../errors/index.js";
+import { themeForColor } from "../../theme/index.js";
 import { ApprovalService } from "../../approval/index.js";
 import { createForgeProvider, createPrService, generateWithLlm, loadCommitGuidance, resolveForgeToken, } from "../../vcs/index.js";
 /**
@@ -20,6 +20,7 @@ export function prCommand() {
         .option("--body <body>", "PR body")
         .option("--draft", "open the pull request as a draft")
         .action(async (opts) => {
+        const t = themeForColor(shouldUseColor(process.stdout));
         const cwd = process.cwd();
         const { config } = loadConfig();
         // The model writes the PR content, so we need a provider key just like
@@ -54,7 +55,7 @@ export function prCommand() {
                 skillBody: guidance.skillBody,
             }),
         });
-        logger.info(pc.dim("generating pull request content…"));
+        logger.info(t.muted("generating pull request content…"));
         const outcome = await service.openPullRequest({
             base: opts.base,
             title: opts.title,
@@ -62,16 +63,16 @@ export function prCommand() {
             draft: opts.draft,
         });
         if (!outcome.approved) {
-            logger.print(pc.yellow("pull request not opened — approval declined."));
+            logger.print(t.warning("pull request not opened — approval declined."));
             if (outcome.feedback)
-                logger.print(pc.dim(outcome.feedback));
+                logger.print(t.muted(outcome.feedback));
             return;
         }
         const label = outcome.alreadyExists
             ? "a pull request already exists"
             : "opened pull request";
-        logger.print(`${pc.green("✓")} ${label} (${outcome.branch} → ${outcome.base})`);
-        logger.print(pc.cyan(outcome.url));
+        logger.print(`${t.success(t.glyph.success)} ${label} (${outcome.branch} ${t.glyph.arrow} ${outcome.base})`);
+        logger.print(t.accent(outcome.url));
     });
 }
 /** Environment variable that holds the API key for a provider. */

package/dist/cli/commands/rollback.js

@@ -1,5 +1,5 @@
 import { Command } from "commander";
-import pc from "picocolors";
+import { themeForColor } from "../../theme/index.js";
 import { loadConfig } from "../../config/index.js";
 import { CheckpointService } from "../../checkpoint/index.js";
 import { ApprovalService, defaultPromptIO } from "../../approval/index.js";
@@ -58,6 +58,7 @@ export function rollbackCommand() {
         // act. There is no flag to bypass this, by design.
         if (!interactive)
             throw rollbackApprovalRequired();
+        const t = themeForColor(shouldUseColor(process.stdout));
         const { config } = loadConfig();
         const root = process.cwd();
         const service = new CheckpointService({ root, config });
@@ -71,7 +72,7 @@ export function rollbackCommand() {
         if (id === undefined) {
             const picked = await pickCheckpoint(service);
             if (picked === null) {
-                logger.print(pc.dim("rollback cancelled — nothing was changed"));
+                logger.print(t.muted("rollback cancelled — nothing was changed"));
                 return;
             }
             id = picked?.id;
@@ -81,16 +82,16 @@ export function rollbackCommand() {
             interactive,
         });
         if (result.kind === "noop") {
-            logger.print(pc.dim(`working tree already matches checkpoint ${result.checkpoint.id} — nothing to roll back`));
+            logger.print(t.muted(`working tree already matches checkpoint ${result.checkpoint.id} — nothing to roll back`));
             return;
         }
         if (result.kind === "rejected") {
-            logger.print(pc.dim("rollback declined — nothing was changed"));
+            logger.print(t.muted("rollback declined — nothing was changed"));
             return;
         }
         const { recreated, reverted, deleted } = result.applied;
-        logger.print(`${pc.green("✓")} restored checkpoint ${pc.cyan(result.checkpoint.id)} — ` +
+        logger.print(`${t.success(t.glyph.success)} restored checkpoint ${t.accent(result.checkpoint.id)} — ` +
             `${reverted} reverted, ${recreated} recreated, ${deleted} deleted`);
-        logger.print(pc.dim("note: commits, pushes, and PRs made during the run are not undone"));
+        logger.print(t.muted("note: commits, pushes, and PRs made during the run are not undone"));
     });
 }

package/dist/cli/commands/run.js

@@ -1,10 +1,11 @@
 import { Command } from "commander";
-import pc from "picocolors";
 import { logger } from "../../utils/logger.js";
 import { loadConfig, resolveApiKey } from "../../config/index.js";
-import { authMissingKey, usageError } from "../../errors/index.js";
+import { authMissingKey, shouldUseColor, usageError, } from "../../errors/index.js";
 import { createRenderer } from "../../render/index.js";
+import { themeForColor } from "../../theme/index.js";
 import { CheckpointService } from "../../checkpoint/index.js";
+import { SandboxService } from "../../sandbox/index.js";
 import { runInteractive } from "../repl.js";
 import { buildAgentSession } from "../session-factory.js";
 import { apiKeyEnvVar, maybeRunOnboarding } from "../onboard.js";
@@ -13,8 +14,10 @@ export function runCommand() {
         .description("run cruxy on a prompt (one-shot), or with no prompt for an interactive session")
         .argument("[prompt...]", "the task for cruxy to perform (omit for interactive)")
         .option("--plan", "plan mode: propose a step-by-step plan for approval before executing")
+        .option("--sandbox", "run shell + test commands inside an isolated container (fails loud if no runtime)")
         .action(async (promptParts, opts) => {
         const prompt = promptParts.join(" ").trim();
+        const t = themeForColor(shouldUseColor(process.stdout));
         const interactive = prompt === "";
         // No prompt and stdin isn't a terminal: there's no way to read input and
         // nothing to do — fail fast instead of hanging on a line that never comes.
@@ -23,8 +26,8 @@ export function runCommand() {
         }
         const { config, sources } = loadConfig();
         let apiKey = resolveApiKey(config.model.provider);
-        logger.info(pc.dim(`model:   ${config.model.provider}/${config.model.model}`));
-        logger.info(pc.dim(`config:  ${sources.project ?? sources.global ?? "defaults"}`));
+        logger.info(t.muted(`model:   ${config.model.provider}/${config.model.model}`));
+        logger.info(t.muted(`config:  ${sources.project ?? sources.global ?? "defaults"}`));
         // First-run with no key (and a TTY) → guided onboarding instead of the
         // dead-end auth error. The first-win demo is offered only in the no-prompt
         // (REPL) path; with a real prompt, that prompt IS the first win.
@@ -41,7 +44,7 @@ export function runCommand() {
             const result = await onboarding;
             if (!result.completed) {
                 // Aborted/failed mid-setup — guidance already shown; exit cleanly.
-                logger.print(pc.dim("run `cruxy login` to finish setup."));
+                logger.print(t.muted("run `cruxy login` to finish setup."));
                 return;
             }
             apiKey = result.apiKey ?? resolveApiKey(config.model.provider);
@@ -60,7 +63,23 @@ export function runCommand() {
         const checkpoints = config.checkpoint.enabled
             ? new CheckpointService({ root: process.cwd(), config })
             : undefined;
-        const session = buildAgentSession(config, apiKey, process.cwd(), Boolean(process.stdin.isTTY), planMode, renderer, checkpoints);
+        // Sandbox (C.16): opt-in via --sandbox or sandbox.enabled. Resolving the
+        // service probes the runtime and THROWS CRUXY_E_SANDBOX_UNAVAILABLE if it
+        // is missing — fail loud here, before the agent starts, rather than
+        // silently running un-sandboxed. When off, ctx.sandbox stays undefined and
+        // execution runs on the host, unchanged.
+        const sandboxEnabled = opts.sandbox ?? config.sandbox.enabled;
+        const sandbox = sandboxEnabled
+            ? await SandboxService.create({
+                config,
+                cwd: process.cwd(),
+                reporter: renderer,
+            })
+            : undefined;
+        if (sandbox) {
+            logger.info(t.muted(`sandbox: ${sandbox.runtimeName} (network ${config.sandbox.network})`));
+        }
+        const session = buildAgentSession(config, apiKey, process.cwd(), Boolean(process.stdin.isTTY), planMode, renderer, checkpoints, sandbox);
         if (interactive) {
             await runInteractive(session, undefined, renderer, checkpoints);
             return;
@@ -69,7 +88,7 @@ export function runCommand() {
         // One-shot: a single turn, then exit. Preserves scripting/pipe use.
         // Assistant text streams to stdout delta by delta (same as the REPL);
         // piped output degrades to the plain renderer (no ANSI, chrome on stderr).
-        logger.print(`${pc.cyan("cruxy")} ${pc.dim("›")} ${prompt}\n`);
+        logger.print(`${t.accent("cruxy")} ${t.muted(t.glyph.caret)} ${prompt}\n`);
         // Provider/network/auth failures propagate to the top-level boundary,
         // which classifies them (e.g. CRUXY_E_GATEWAY_UNREACHABLE) and exits with
         // the matching code — a one-shot run must fail non-zero on error.

package/dist/cli/commands/skills.js

@@ -1,6 +1,7 @@
 import { Command } from "commander";
-import pc from "picocolors";
 import { getSkillService, resetSkillServices } from "../../skills/index.js";
+import { shouldUseColor } from "../../errors/index.js";
+import { themeForColor } from "../../theme/index.js";
 import { logger } from "../../utils/logger.js";
 /**
  * `cruxy skills` — list the skills available to the agent (the same catalog the
@@ -13,37 +14,38 @@ export function skillsCommand() {
         .description("list the skills available to the agent")
         .option("--status", "show source directories and validation errors")
         .action(async (opts) => {
+        const t = themeForColor(shouldUseColor(process.stdout));
         const service = getSkillService(process.cwd(), logger);
         const status = await service.status();
         if (status.entries.length === 0) {
-            logger.print(pc.dim("no skills found"));
+            logger.print(t.muted("no skills found"));
         }
         else {
             for (const entry of status.entries) {
-                logger.print(`${pc.bold(entry.name)}  ${pc.dim(`[${entry.source}]`)}`);
+                logger.print(`${t.strong(entry.name)}  ${t.muted(`[${entry.source}]`)}`);
                 logger.print(`  ${entry.description}`);
             }
         }
         if (!opts.status) {
             if (status.errors.length > 0) {
-                logger.print(pc.yellow(`\n${status.errors.length} skill(s) failed validation — run ${pc.bold("cruxy skills --status")} for details`));
+                logger.print(t.warning(`\n${status.errors.length} skill(s) failed validation — run ${t.strong("cruxy skills --status")} for details`));
             }
             resetSkillServices();
             return;
         }
-        logger.print(`\n${pc.bold("sources")} ${pc.dim("(precedence high → low):")}`);
+        logger.print(`\n${t.strong("sources")} ${t.muted("(precedence high → low):")}`);
         for (const { source, dir } of status.sources) {
-            logger.print(`  ${source.padEnd(8)} ${pc.dim(dir)}`);
+            logger.print(`  ${source.padEnd(8)} ${t.muted(dir)}`);
         }
         logger.print("");
         if (status.errors.length === 0) {
-            logger.print(pc.green("no validation errors"));
+            logger.print(t.success("no validation errors"));
         }
         else {
-            logger.print(pc.yellow(`validation errors (${status.errors.length}):`));
+            logger.print(t.warning(`validation errors (${status.errors.length}):`));
             for (const err of status.errors) {
-                logger.print(`  ${pc.red("✗")} ${pc.bold(err.name)} ${pc.dim(`[${err.source}]`)}: ${err.message}`);
-                logger.print(`    ${pc.dim(err.dir)}`);
+                logger.print(`  ${t.danger(t.glyph.failure)} ${t.strong(err.name)} ${t.muted(`[${err.source}]`)}: ${err.message}`);
+                logger.print(`    ${t.muted(err.dir)}`);
             }
         }
         resetSkillServices();

package/dist/cli/program.js

@@ -1,8 +1,8 @@
 import { Command } from "commander";
-import pc from "picocolors";
 import { APP_NAME, APP_VERSION, APP_DESCRIPTION } from "../constants.js";
 import { logger } from "../utils/logger.js";
-import { usageError } from "../errors/index.js";
+import { shouldUseColor, usageError } from "../errors/index.js";
+import { themeForColor } from "../theme/index.js";
 import { runCommand } from "./commands/run.js";
 import { configCommand } from "./commands/config.js";
 import { indexCommand } from "./commands/index.js";
@@ -63,11 +63,12 @@ export function buildProgram() {
             await onboarding;
             return;
         }
-        logger.print(pc.cyan(`${APP_NAME} v${APP_VERSION}`));
-        logger.print(pc.dim("an agentic coding CLI\n"));
+        const t = themeForColor(shouldUseColor(process.stdout));
+        logger.print(t.accent(`${APP_NAME} v${APP_VERSION}`));
+        logger.print(t.muted("an agentic coding CLI\n"));
         logger.print("The interactive REPL lands in C.3 (terminal UI).");
-        logger.print(`For now try:  ${pc.bold('cruxy run "<task>"')}  or  ${pc.bold("cruxy config path")}`);
-        logger.print(`See all commands:  ${pc.bold("cruxy --help")}`);
+        logger.print(`For now try:  ${t.strong('cruxy run "<task>"')}  or  ${t.strong("cruxy config path")}`);
+        logger.print(`See all commands:  ${t.strong("cruxy --help")}`);
     });
     // Throw CommanderError instead of calling process.exit, and suppress
     // Commander's own "error:" line — so parse errors (unknown command/option,

package/dist/cli/repl.js

@@ -1,10 +1,12 @@
 import readline from "node:readline";
-import pc from "picocolors";
 import { makeReplCompleter } from "../components/index.js";
+import { themeForColor } from "../theme/index.js";
 import { formatError, fromUnknown, isVerbose, shouldUseColor, } from "../errors/index.js";
 import { createRenderer } from "../render/index.js";
 import { logger } from "../utils/logger.js";
-const PROMPT = `${pc.cyan("cruxy")} ${pc.dim("›")} `;
+/** The REPL prompts on stdout; its chrome resolves against stdout's color. */
+const theme = themeForColor(shouldUseColor(process.stdout));
+const PROMPT = `${theme.accent("cruxy")} ${theme.muted(theme.glyph.caret)} `;
 /**
  * The REPL's slash commands — the autocomplete candidate set (U.7). Keep in
  * sync with the dispatch below and the HELP text.
@@ -92,7 +94,7 @@ function printReplError(err) {
  * passes its own so the approval prompt's status-suspend hook shares it.
  */
 export async function runInteractive(session, io = defaultIO(), renderer = createRenderer(io.output, process.stderr), checkpoints) {
-    logger.print(pc.dim("interactive session — /help for commands, /exit or Ctrl+D to quit"));
+    logger.print(theme.muted("interactive session — /help for commands, /exit or Ctrl+D to quit"));
     try {
         await replLoop(session, io, renderer, checkpoints);
     }
@@ -105,25 +107,25 @@ async function replLoop(session, io, renderer, checkpoints) {
         const line = await readLine(io, PROMPT);
         // EOF / Ctrl+D.
         if (line === null) {
-            logger.print(pc.dim("\nbye"));
+            logger.print(theme.muted("\nbye"));
             return;
         }
         const trimmed = line.trim();
         if (trimmed === "")
             continue; // empty line → reprompt, no model call
         if (trimmed === "/exit" || trimmed === "/quit") {
-            logger.print(pc.dim("bye"));
+            logger.print(theme.muted("bye"));
             return;
         }
         if (trimmed === "/clear") {
             session.clear();
-            logger.print(pc.dim("history cleared"));
+            logger.print(theme.muted("history cleared"));
             continue;
         }
         if (trimmed === "/compact") {
             try {
                 const n = await session.compact();
-                logger.print(pc.dim(n ? `compacted ${n} older messages` : "nothing to compact yet"));
+                logger.print(theme.muted(n ? `compacted ${n} older messages` : "nothing to compact yet"));
             }
             catch (err) {
                 printReplError(err);
@@ -132,7 +134,7 @@ async function replLoop(session, io, renderer, checkpoints) {
         }
         if (trimmed === "/reload") {
             const loaded = session.reloadProjectInstructions();
-            logger.print(pc.dim(loaded
+            logger.print(theme.muted(loaded
                 ? "reloaded project instructions (CRUXY.md)"
                 : "no project instructions found"));
             continue;
@@ -140,7 +142,7 @@ async function replLoop(session, io, renderer, checkpoints) {
         if (trimmed === "/plan") {
             session.setPlanMode(!session.getPlanMode());
             const on = session.getPlanMode();
-            logger.print(pc.dim(on
+            logger.print(theme.muted(on
                 ? "plan mode on — the next prompt proposes a plan for approval"
                 : "plan mode off"));
             continue;

package/dist/cli/session-factory.d.ts

@@ -1,6 +1,7 @@
 import type { CruxyConfig } from "../config/index.js";
 import type { ApprovalDecision } from "../approval/index.js";
 import type { CheckpointService } from "../checkpoint/index.js";
+import type { SandboxService } from "../sandbox/index.js";
 import type { StreamRenderer } from "../render/index.js";
 import { type ApproveAction } from "../tools/index.js";
 import { Session } from "../agent/index.js";
@@ -23,4 +24,4 @@ export declare function withCheckpointGate(requestApproval: (action: ApproveActi
  * over the shared U.3 allowlist and a `planRunner` so `session.send` proposes →
  * approves → executes. Plan mode is fully opt-in; the default path is unchanged.
  */
-export declare function buildAgentSession(config: CruxyConfig, apiKey: string, cwd: string, ttyInteractive: boolean, planMode?: boolean, renderer?: StreamRenderer, checkpoints?: CheckpointService): Session;
+export declare function buildAgentSession(config: CruxyConfig, apiKey: string, cwd: string, ttyInteractive: boolean, planMode?: boolean, renderer?: StreamRenderer, checkpoints?: CheckpointService, sandbox?: SandboxService): Session;