@nguyenhuumanh/vyen 0.0.0-stage → 0.2.23

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 vyen contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/NOTICE.md

@@ -0,0 +1,25 @@
+# Project identity and references
+
+Vyen CLI is an independent implementation. It is not an official Z.ai,
+DeepSeek, Anthropic or OpenAI product. No ZCode or DeepSeek Harness runtime
+source is copied into this distribution or used as a dependency.
+
+Design references inspected for version 0.1.0:
+
+- [ZCode](https://github.com/zai-org/ZCode), commit
+  `aac4755666d09fdcd70272fcf063c077a639015f` (Apache-2.0): separation of
+  model/provider, runtime, permission, tool and persistence boundaries;
+  explicit ownership of session history and configuration.
+- [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness), commit
+  `86a402200d95fecef4529d969836f1fe13c6cb0d` (MIT): replaceable capability
+  interfaces, bounded parallel-safe tool scheduling, exclusive mutation
+  barriers, ordered results and conservative recovery after interruption.
+
+Vyen uses the Vercel AI SDK and its provider adapters for protocol handling.
+Dependencies retain their own licenses in their installed package directories.
+The implementation and build process use no official Claude Code binary.
+
+A deeper stream/subagent review for 0.2.1 rechecked ZCode at the same commit
+and DeepSeek Harness at `1517a4dbca0a2789ff1d41ba439600f8547d23fa`.
+See [docs/REFERENCE_REVIEW.md](docs/REFERENCE_REVIEW.md) for exact source links,
+contracts adopted, independent compatibility choices and remaining scope.

package/README.md

@@ -1,3 +1,86 @@
-# Temporary Holding Version
-
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+# vyen
+
+An independent terminal coding agent. It talks to OpenAI-compatible, OpenAI
+Responses and Anthropic endpoints, reads and edits files in your workspace,
+runs shell commands with your approval, speaks MCP, and can delegate work to
+subagents.
+
+## Install
+
+```bash
+npm install -g vyen
+```
+
+Requires Node.js >= 22.16.0. Verified on Linux; the primary target is Termux on
+Android.
+
+A release tarball with the same contents is also attached to every GitHub
+release, for machines that cannot reach the npm registry.
+
+## Configure
+
+```bash
+vyen setup
+```
+
+`vyen setup` writes `~/.config/vyen/config.json`. The API key is never written
+to the config file — it is read from the environment variable named by
+`keyEnv` (default `VYEN_API_KEY`) or from `~/.config/vyen/credentials.json`.
+
+## Run
+
+```bash
+vyen                          # interactive
+vyen "fix the failing test"   # one shot
+vyen --read-only              # no writes, no shell
+vyen --plan                   # plan first, then implement
+```
+
+## Configuration
+
+| Variable | Meaning | Default |
+|---|---|---|
+| `VYEN_API_KEY` | API key | — |
+| `VYEN_BASE_URL` | Gateway base URL | `https://api.yuristore.xyz/v1` |
+| `VYEN_MODEL` | Model id | — |
+| `VYEN_PROVIDER` | `openai-compatible`, `openai-responses`, `anthropic` | `openai-compatible` |
+| `VYEN_EFFORT` | `low`, `medium`, `high`, `xhigh`, `max` | provider default |
+| `VYEN_CONTEXT_WINDOW` | Context window in tokens | `128000` |
+| `VYEN_MAX_OUTPUT_TOKENS` | Output cap per response | `16384` |
+| `VYEN_TIMEOUT_MS` | Per-request timeout | `300000` |
+| `VYEN_RUN_TOKEN_BUDGET` | Token cap for one run, `0` disables | `0` |
+| `VYEN_INLINE_REASONING` | `leading-think` or `off` | `leading-think` |
+| `VYEN_BASH` | Path to bash on Windows | auto-detected |
+
+The older `GOON_*` names still work, so existing shell profiles keep running.
+A `goon` installation's `~/.config/goon` and `~/.local/share/goon` are copied
+into their `vyen` counterparts on the first launch; the old directories are left
+in place.
+
+## Permissions
+
+Mutating tools and shell commands need approval. `--yes` approves everything
+for that run; `--read-only` removes them entirely; `--plan` allows exploration
+first. A denied tool ends the run with exit code 2.
+
+## MCP
+
+Servers live in `~/.config/vyen/mcp.json`, separate from the main config. See
+[docs/MCP.md](docs/MCP.md).
+
+## Sessions
+
+Sessions are stored as JSON under `~/.local/share/vyen/sessions/`. `vyen
+sessions` lists them and `vyen resume` reopens one.
+
+## Documentation
+
+- [docs/SPEC.md](docs/SPEC.md) — boundaries and contracts
+- [docs/MCP.md](docs/MCP.md) — MCP configuration and limits
+- [docs/VALIDATION.md](docs/VALIDATION.md) — what the test suite covers
+- [docs/REFERENCE_REVIEW.md](docs/REFERENCE_REVIEW.md) — design references and
+  the reasoning behind the stream and subagent contracts
+
+## License
+
+MIT

package/bin/vyen.mjs

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+import { main } from '../dist/cli.js';
+await main();

package/dist/cli.d.ts

@@ -0,0 +1,13 @@
+import { type EffortLevel } from './config.js';
+import type { PermissionMode } from './tools.js';
+export declare function welcomeBanner(model: string, provider: string, baseUrl: string, effort: EffortLevel | undefined, cwd: string, sessionId: string, mode: PermissionMode): string;
+/** Reads the current git branch (or short detached SHA) without spawning git; undefined outside a repo. */
+export declare function readGitBranch(cwd: string): string | undefined;
+export declare function extractCopyableFromMessages(messages: Array<{
+    role: string;
+    content: unknown;
+}>, selector?: string): {
+    text: string;
+    label: string;
+} | undefined;
+export declare function main(argv?: string[]): Promise<void>;