@datename/fastcode-termux 0.0.0-stage → 0.1.6

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 SimpleLittleDev
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,401 @@
-# Temporary Holding Version
+# ⚡ FastCode
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+<p align="center">
+  <strong>A colorful, fast, terminal-first AI coding assistant.</strong>
+</p>
+
+<p align="center">
+  Multi-LLM chat • Agent Skills • Slash commands • Themes • Termux-ready
+</p>
+
+<p align="center">
+  <img alt="Node" src="https://img.shields.io/badge/node-%3E%3D18.17-3c873a?style=for-the-badge&logo=node.js&logoColor=white">
+  <img alt="npm" src="https://img.shields.io/badge/npm-@datename%2Ffastcode--termux-cb3837?style=for-the-badge&logo=npm&logoColor=white">
+  <img alt="License" src="https://img.shields.io/badge/license-MIT-f59e0b?style=for-the-badge">
+  <img alt="Termux" src="https://img.shields.io/badge/Termux-ready-7c3aed?style=for-the-badge&logo=android&logoColor=white">
+</p>
+
+```bash
+npm install -g @datename/fastcode-termux
+fastcode
+```
+
+Short alias included:
+
+```bash
+fc
+```
+
+---
+
+## 🌈 What Is FastCode?
+
+FastCode is a beautiful TUI coding assistant that runs inside your terminal.
+It connects to your favorite AI provider, keeps the workflow command-driven,
+and supports Anthropic-style **Agent Skills** for specialized abilities.
+
+It is built for developers who want an AI assistant that feels quick, direct,
+and usable from anywhere: Linux, macOS, Windows, and Android through Termux.
+
+---
+
+## ✨ Highlights
+
+| Feature | What You Get |
+| --- | --- |
+| 🎨 Colorful TUI | Big FastCode banner, themes, transcript bubbles, status bar |
+| 🤖 Multi-provider | Anthropic, OpenAI, Gemini, OpenRouter, Groq, DeepSeek, Mistral, Ollama |
+| 🧠 Agent Skills | Install and enable `SKILL.md` powered workflows |
+| 🧩 Plugins | Import always-active plugin packs with bundled skills |
+| 🛠️ Coding Agent | Shell, file editing, grep, patching, and sandboxed local tools |
+| ⚡ Slash commands | Switch models, manage keys, enable skills, inspect config |
+| 📱 Termux-ready | Stable UI mode helps avoid flicker on Android terminals |
+| 🔐 Local config | Keys and preferences stay under `~/.fastcode` |
+
+---
+
+## 🚀 Install
+
+### Install from the source repo (recommended)
+
+The repo ships a self-contained bundle at `package/dist/cli.js`, so a plain
+`git clone` runs without `npm install`:
+
+```bash
+git clone https://github.com/dateName/fastcode-termux.git
+cd fastcode-termux
+bash scripts/install.sh
+fastcode
+```
+
+Manual equivalent:
+
+```bash
+git clone https://github.com/dateName/fastcode-termux.git
+cd fastcode-termux/package
+npm install          # ⚠️ do not skip
+npm link
+```
+
+### Global install
+
+```bash
+npm install -g @datename/fastcode-termux
+fastcode
+```
+
+### Run without installing globally
+
+```bash
+npx @datename/fastcode-termux
+```
+
+### Start with a prompt
+
+```bash
+fastcode "explain this repository"
+```
+
+---
+
+## 🔑 Add Your API Key
+
+Use environment variables:
+
+```bash
+export ANTHROPIC_API_KEY="sk-ant-..."
+export OPENAI_API_KEY="sk-..."
+export OPENROUTER_API_KEY="sk-or-..."
+```
+
+Or bind a key from inside FastCode — scoped to a specific provider + model (input is masked):
+
+```text
+/login                                        # guided: provider → model → key
+/login openai gpt-4o-mini sk-...
+/login anthropic claude-3-5-sonnet-latest sk-ant-...
+```
+
+Then start chatting:
+
+```bash
+fastcode
+```
+
+---
+
+## 🧩 Providers
+
+| Provider | Default Model | Auth |
+| --- | --- | --- |
+| `anthropic` | `claude-3-5-sonnet-latest` | `ANTHROPIC_API_KEY` or `CLAUDE_API_KEY` |
+| `openai` | `gpt-4o-mini` | `OPENAI_API_KEY` |
+| `google` | `gemini-1.5-flash` | `GEMINI_API_KEY` or `GOOGLE_API_KEY` |
+| `openrouter` | `anthropic/claude-3.5-sonnet` | `OPENROUTER_API_KEY` |
+| `groq` | `llama-3.3-70b-versatile` | `GROQ_API_KEY` |
+| `deepseek` | `deepseek-chat` | `DEEPSEEK_API_KEY` |
+| `mistral` | `mistral-small-latest` | `MISTRAL_API_KEY` |
+| `ollama` | `llama3.2` | Local, no API key required |
+
+Switch anytime:
+
+```text
+/provider openai
+/model gpt-4o-mini
+```
+
+---
+
+## 🪄 Agent Skills
+
+FastCode can install and inject Anthropic-style skills into the system prompt.
+
+```text
+/skills search pdf
+/skills install pdf
+/skills install anthropics/skills/pdf
+/skills install https://example.com/my-skill/SKILL.md
+/skills enable pdf
+/skills list
+/skills info pdf
+```
+
+Installed skills live here:
+
+```text
+~/.fastcode/skills/<name>/SKILL.md
+```
+
+---
+
+## 🛠️ Coding Agent
+
+FastCode can act as a local coding agent. Agent mode is enabled by default and
+works with any provider, including local Ollama models.
+
+```text
+/agent status
+/agent on
+/agent off
+/tools
+/cwd
+```
+
+Available tools include:
+
+```text
+shell, pwd, read_file, read_many, write_file, append_file, apply_patch,
+replace_in_file, list_files, grep, stat_path, make_dir, copy_file,
+move_path, delete_file
+```
+
+Tools run inside a sandbox rooted at the directory where you start FastCode.
+File tools cannot access paths outside that root. Shell commands run with:
+
+```text
+FASTCODE_SANDBOX=1
+FASTCODE_SANDBOX_ROOT=<current-working-directory>
+```
+
+Example:
+
+```bash
+cd ~/my-project
+fastcode "run the tests, find the failing file, patch it, and verify the fix"
+```
+
+---
+
+## 🧩 Plugins
+
+Plugins are always-active behavior packs. A plugin folder can contain:
+
+```text
+my-plugin/
+├── PLUGIN.md
+└── skills/
+    └── reviewer/
+        └── SKILL.md
+```
+
+Import and enable a plugin:
+
+```text
+/plugin import ./my-plugin reviewer
+/plugin list
+/plugin info reviewer
+/plugin disable reviewer
+/plugin enable reviewer
+/plugin remove reviewer
+```
+
+Installed plugins live under:
+
+```text
+~/.fastcode/plugins/
+```
+
+---
+
+## 🎮 Slash Commands
+
+| Command | Action |
+| --- | --- |
+| `/help` | Show command list |
+| `/agent [on/off/status]` | Toggle local coding-agent tools |
+| `/tools` | Show available coding tools |
+| `/cwd` | Show agent sandbox root |
+| `/plugin ...` | Import and manage always-active plugin packs |
+| `/provider [id]` | List or switch provider |
+| `/model [id]` | List or switch model |
+| `/login [provider] [model] [key]` | Bind an API key to a provider + model (guided when omitted) |
+| `/logout <provider> [model]` | Remove a scoped key (`--all` for the whole provider) |
+| `/skills ...` | Search, install, enable, disable, list skills |
+| `/theme [id]` | Switch theme |
+| `/cost` | Show token and cost usage |
+| `/system [text]` | Show or update system prompt |
+| `/whoami` | Show configured provider keys |
+| `/config` | Print config and paths |
+| `/clear` | Clear conversation |
+| `/reset` | Reset config |
+| `/about` | Show version and platform |
+| `/exit` | Quit |
+
+Keyboard controls:
+
+```text
+Esc       cancel streaming
+Ctrl+C    press twice to quit
+```
+
+---
+
+## 🎨 Themes
+
+```text
+/theme fastcode
+/theme neon
+/theme sunset
+/theme matrix
+/theme mono
+```
+
+Want the calmest terminal experience?
+
+```bash
+FASTCODE_STABLE_UI=1 fastcode
+```
+
+Termux enables stable UI automatically.
+
+---
+
+## 📱 Termux
+
+Install Node.js first:
+
+```bash
+pkg install nodejs
+npm install -g @datename/fastcode-termux
+fastcode
+```
+
+If the command is not found, check your npm global binary path:
+
+```bash
+npm bin -g
+echo "$PATH"
+```
+
+FastCode stores config inside your home directory:
+
+```text
+~/.fastcode/
+├── config.json
+├── auth.json
+├── skills/
+├── plugins/
+├── cache/
+├── sessions/
+└── logs/
+```
+
+You can move that root with:
+
+```bash
+FASTCODE_HOME=/path/to/fastcode fastcode
+```
+
+---
+
+## 🛠️ Development
+
+```bash
+git clone https://github.com/dateName/fastcode-termux
+cd FastCode
+npm install
+npm run dev
+```
+
+Quality checks:
+
+```bash
+npm run check
+```
+
+Or run each step:
+
+```bash
+npm test
+npm run typecheck
+npm run lint
+npm run build
+```
+
+Run the built CLI:
+
+```bash
+node ./bin/fastcode.mjs
+```
+
+---
+
+## 📦 Publish Notes
+
+The package exposes two global commands:
+
+```json
+{
+  "bin": {
+    "fastcode": "./bin/fastcode.mjs",
+    "fc": "./bin/fastcode.mjs"
+  }
+}
+```
+
+Publish public scoped releases with:
+
+```bash
+npm publish --access public
+```
+
+---
+
+## Safety, sessions and limits (0.1.6)
+
+| Feature | Behaviour | Override |
+| --- | --- | --- |
+| Project trust | First run in a folder asks before agent tools load; the list lives in ~/.fastcode/trusted.json | fastcode trust / untrust / trusted, FASTCODE_TRUST_ALL=1 |
+| Dangerous-command guard | rm -rf, del /f, rmdir /s, format / mkfs / diskpart, dd if=, writes to /dev/sd, shutdown / reboot / poweroff and fork bombs are refused before execution | FASTCODE_ALLOW_DANGEROUS=1, FASTCODE_SHELL_ALLOWLIST, FASTCODE_SHELL_DENY_EXTRA |
+| Unified tool-output cap | Output is truncated while it is produced, not sliced afterwards (default 30000 characters) | FASTCODE_TOOL_OUTPUT_LIMIT |
+| Session log | Append-only JSONL in ~/.fastcode/sessions, resumable after a crash (cache cap 256MB by default) | fastcode sessions, fastcode resume, FASTCODE_SESSION_LOG=0, FASTCODE_SESSION_CACHE_MB |
+
+## 🙏 Credits
+
+- **SimpleLittleDev** — author of the original FastCode TUI; the npm package
+  `@simplelittledev/fastcode` and its credit belong to them.
+- All upstream dependency authors (Ink, React, meow, cfonts, marked, chalk, ...).
+
+## 📜 License
+
+MIT © SimpleLittleDev

package/bin/fastcode.mjs

@@ -0,0 +1,59 @@
+#!/usr/bin/env node
+// FastCode CLI shim.
+//
+// Resolution order:
+//   1. dist/cli.js   — self-contained esbuild bundle (committed to git: works
+//                      after a plain `git clone`, no `npm install` required)
+//   2. dist/index.js — tsc output (needs node_modules)
+//   3. src/index.ts  — dev fallback via tsx
+import { fileURLToPath, pathToFileURL } from "node:url";
+import { dirname, join } from "node:path";
+import { existsSync } from "node:fs";
+
+const here = dirname(fileURLToPath(import.meta.url));
+const bundleEntry = join(here, "..", "dist", "cli.js");
+const distEntry = join(here, "..", "dist", "index.js");
+const srcEntry = [join(here, "..", "src", "index.ts"), join(here, "..", "src", "index.tsx")].find((p) => existsSync(p));
+
+const MISSING_DEPS_HELP = `
+╭─────────────────────────────────────────────╮
+│  ⚠️  FastCode 缺少依赖包                      │
+╰─────────────────────────────────────────────╯
+
+请选择以下任一方式修复：
+
+  【方式一】一键安装（推荐）
+    bash scripts/install.sh
+
+  【方式二】手动安装依赖
+    cd package && npm install
+
+  【方式三】下载便携版
+    https://github.com/dateName/fastcode-termux/releases
+`;
+
+async function run() {
+  try {
+    if (existsSync(bundleEntry)) {
+      await import(pathToFileURL(bundleEntry).href);
+    } else if (existsSync(distEntry)) {
+      await import(pathToFileURL(distEntry).href);
+    } else if (srcEntry) {
+      // Local dev fallback — let users `node ./bin/fastcode.mjs` from the repo
+      const { register } = await import("node:module");
+      register("tsx/esm", import.meta.url);
+      await import(pathToFileURL(srcEntry).href);
+    } else {
+      console.error("FastCode build artifacts not found. Did you run `npm run build`?");
+      process.exit(1);
+    }
+  } catch (err) {
+    if (err && err.code === "ERR_MODULE_NOT_FOUND") {
+      console.error(MISSING_DEPS_HELP);
+      process.exit(1);
+    }
+    throw err;
+  }
+}
+
+run();

package/dist/agent/guards.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Dangerous-command guard.
+ *
+ * Blocks destructive shell patterns before execution. Word-boundary escapes
+ * are written as character classes so the intent is identical without
+ * boundary syntax.
+ *
+ * Overrides:
+ *   FASTCODE_ALLOW_DANGEROUS=1        bypass the deny list (reported in output)
+ *   FASTCODE_SHELL_ALLOWLIST=a;b      only commands matching these regexes run
+ *   FASTCODE_SHELL_DENY_EXTRA=x;y     extra regexes to deny
+ *   FASTCODE_RESTRICT_TO_WORKSPACE=1  also reject ../ and .. escapes
+ */
+export declare const DEFAULT_DENY_PATTERNS: string[];
+export declare const FORK_BOMB_MARKERS: string[];
+/**
+ * Decide whether a shell command may run.
+ * Returns { allow: true } or { allow: false, output: explanation }.
+ */
+export declare function evaluateShellCommand(command: any): {
+    allow: boolean;
+    output: any;
+    bypassed: boolean;
+    pattern?: undefined;
+} | {
+    allow: boolean;
+    pattern: string;
+    output: string;
+    bypassed?: undefined;
+} | {
+    allow: boolean;
+    output: string;
+    bypassed?: undefined;
+    pattern?: undefined;
+};

package/dist/agent/guards.js

@@ -0,0 +1,74 @@
+/**
+ * Dangerous-command guard.
+ *
+ * Blocks destructive shell patterns before execution. Word-boundary escapes
+ * are written as character classes so the intent is identical without
+ * boundary syntax.
+ *
+ * Overrides:
+ *   FASTCODE_ALLOW_DANGEROUS=1        bypass the deny list (reported in output)
+ *   FASTCODE_SHELL_ALLOWLIST=a;b      only commands matching these regexes run
+ *   FASTCODE_SHELL_DENY_EXTRA=x;y     extra regexes to deny
+ *   FASTCODE_RESTRICT_TO_WORKSPACE=1  also reject ../ and .. escapes
+ */
+export const DEFAULT_DENY_PATTERNS = [
+    "(^|[^a-z])rm +-[rf]{1,2}([^a-z]|$)",
+    "(^|[^a-z])del +/[fq]([^a-z]|$)",
+    "(^|[^a-z])rmdir +/s([^a-z]|$)",
+    "(^|[^a-z-])(format|mkfs|diskpart)([^a-z]|$)",
+    "(^|[^a-z])dd +if=",
+    "> */dev/sd",
+    "(^|[^a-z])(shutdown|reboot|poweroff)([^a-z]|$)",
+];
+export const FORK_BOMB_MARKERS = [":(){", ":|:&"];
+function enabled(name) {
+    const value = process.env[name];
+    if (value === undefined)
+        return false;
+    return ["1", "true", "yes", "on"].includes(value.trim().toLowerCase());
+}
+function splitList(value) {
+    return (value ?? "").split(/[;,]/).map((entry) => entry.trim()).filter(Boolean);
+}
+function matches(lower, pattern) {
+    try {
+        return new RegExp(pattern).test(lower);
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Decide whether a shell command may run.
+ * Returns { allow: true } or { allow: false, output: explanation }.
+ */
+export function evaluateShellCommand(command) {
+    const cmd = String(command ?? "").trim();
+    const lower = cmd.toLowerCase();
+    if (enabled("FASTCODE_ALLOW_DANGEROUS"))
+        return { allow: true, output: undefined, bypassed: true };
+    const deny = DEFAULT_DENY_PATTERNS.concat(splitList(process.env["FASTCODE_SHELL_DENY_EXTRA"]));
+    for (const pattern of deny) {
+        if (matches(lower, pattern)) {
+            return {
+                allow: false,
+                pattern,
+                output: "Error: blocked by the safety guard (dangerous pattern: " + pattern + "). " +
+                    "Set FASTCODE_ALLOW_DANGEROUS=1 to override.",
+            };
+        }
+    }
+    for (const marker of FORK_BOMB_MARKERS) {
+        if (lower.includes(marker))
+            return { allow: false, output: "Error: blocked by the safety guard (fork bomb pattern)." };
+    }
+    const allowlist = splitList(process.env["FASTCODE_SHELL_ALLOWLIST"]);
+    if (allowlist.length > 0 && !allowlist.some((pattern) => matches(lower, pattern)))
+        return { allow: false, output: "Error: blocked by the safety guard (not in FASTCODE_SHELL_ALLOWLIST)." };
+    if (enabled("FASTCODE_RESTRICT_TO_WORKSPACE")) {
+        const backslash = String.fromCharCode(92);
+        if (cmd.includes("../") || cmd.includes(".." + backslash))
+            return { allow: false, output: "Error: blocked by the safety guard (path traversal)." };
+    }
+    return { allow: true, output: undefined };
+}

package/dist/agent/limits.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Single source of truth for how much tool output reaches the model.
+ *
+ * Output is bounded while it is produced, not by slicing a finished string
+ * afterwards, so a runaway command or a huge directory listing cannot grow
+ * without limit. Override the cap with FASTCODE_TOOL_OUTPUT_LIMIT (characters).
+ */
+export declare const DEFAULT_TOOL_OUTPUT_LIMIT = 30000;
+export declare function toolOutputLimit(): number;
+/**
+ * Bounded text accumulator.
+ *
+ * mode "head" keeps the first N characters (listings, search hits);
+ * mode "tail" keeps the last N (command logs, where the error is last).
+ * trimEnd()/toString() mimic a plain string so callers stay simple.
+ */
+export declare function createOutputBuffer(limit?: number, mode?: string): {
+    readonly full: boolean;
+    push(chunk: any): void;
+    line(value: any): void;
+    value(): string;
+    trimEnd(): string;
+    toString(): string;
+};

package/dist/agent/limits.js

@@ -0,0 +1,71 @@
+/**
+ * Single source of truth for how much tool output reaches the model.
+ *
+ * Output is bounded while it is produced, not by slicing a finished string
+ * afterwards, so a runaway command or a huge directory listing cannot grow
+ * without limit. Override the cap with FASTCODE_TOOL_OUTPUT_LIMIT (characters).
+ */
+export const DEFAULT_TOOL_OUTPUT_LIMIT = 30000;
+export function toolOutputLimit() {
+    const raw = Number(process.env["FASTCODE_TOOL_OUTPUT_LIMIT"]);
+    return Number.isFinite(raw) && raw > 0 ? Math.floor(raw) : DEFAULT_TOOL_OUTPUT_LIMIT;
+}
+/**
+ * Bounded text accumulator.
+ *
+ * mode "head" keeps the first N characters (listings, search hits);
+ * mode "tail" keeps the last N (command logs, where the error is last).
+ * trimEnd()/toString() mimic a plain string so callers stay simple.
+ */
+export function createOutputBuffer(limit = toolOutputLimit(), mode = "head") {
+    const NL = String.fromCharCode(10);
+    let text = "";
+    let dropped = 0;
+    const buffer = {
+        get full() {
+            return text.length >= limit;
+        },
+        push(chunk) {
+            const value = String(chunk);
+            if (mode === "tail") {
+                text += value;
+                if (text.length > limit) {
+                    const over = text.length - limit;
+                    dropped += over;
+                    text = text.slice(over);
+                }
+                return;
+            }
+            if (text.length >= limit) {
+                dropped += value.length;
+                return;
+            }
+            const room = limit - text.length;
+            if (value.length <= room) {
+                text += value;
+            }
+            else {
+                text += value.slice(0, room);
+                dropped += value.length - room;
+            }
+        },
+        line(value) {
+            if (text.length > 0)
+                buffer.push(NL);
+            buffer.push(value);
+        },
+        value() {
+            if (dropped <= 0)
+                return text;
+            const note = "[" + dropped + " more characters omitted]";
+            return mode === "tail" ? note + NL + text : text + NL + note;
+        },
+        trimEnd() {
+            return buffer.value().trimEnd();
+        },
+        toString() {
+            return buffer.value();
+        },
+    };
+    return buffer;
+}

package/dist/agent/protocol.d.ts

@@ -0,0 +1,4 @@
+export declare function parseToolCalls(text: any): any[];
+export declare function stripToolCalls(text: any): any;
+export declare function formatToolResults(results: any): string;
+export declare const AGENT_SYSTEM_PROMPT: string;