@vascend/talos 0.1.1 → 0.1.3

package/README.md

@@ -1,15 +1,13 @@
-<p align="center">
-  <img src="assets/branding/talos-hero.png" alt="Vascend Talos" width="880">
-</p>
-
 <h1 align="center">Vascend Talos</h1>
 
-<p align="center"><strong>Your models. Your tools. Your coding workflow.</strong><br>
-An extensible coding agent runtime for the terminal and the applications you build.</p>
+<p align="center"><strong>The model is only half the agent.<br>Take control of the harness.</strong></p>
+
+<p align="center">A coding agent built around your mission, your tools and your way of working.<br>
+Epoch-based context engineering. Extensible workflows. One engine from terminal to product.</p>
 
 <p align="center">
-  <a href="package.json"><img src="https://img.shields.io/badge/version-0.1.0-c5a55a?style=flat-square" alt="v0.1.0"></a>
-  <a href="https://bun.sh"><img src="https://img.shields.io/badge/runtime-Bun-171717?style=flat-square&amp;logo=bun&amp;logoColor=white" alt="Bun"></a>
+  <a href="https://www.npmjs.com/package/@vascend/talos"><img src="https://img.shields.io/npm/v/@vascend/talos?style=flat-square&amp;color=c5a55a" alt="Latest npm release"></a>
+  <a href="https://nodejs.org"><img src="https://img.shields.io/badge/Node.js-20%2B-171717?style=flat-square&amp;logo=nodedotjs&amp;logoColor=white" alt="Node.js 20+"></a>
   <a href="src/sdk.ts"><img src="https://img.shields.io/badge/TypeScript-CLI_%2B_SDK-3178c6?style=flat-square&amp;logo=typescript&amp;logoColor=white" alt="TypeScript CLI + SDK"></a>
   <img src="https://img.shields.io/badge/Windows_%7C_macOS_%7C_Linux-555555?style=flat-square" alt="Windows, macOS, Linux">
 </p>
@@ -17,18 +15,20 @@ An extensible coding agent runtime for the terminal and the applications you bui
 <p align="center"><strong>English</strong> · <a href="readme/README.it.md">Italiano</a> · <a href="readme/README.es.md">Español</a> · <a href="readme/README.de.md">Deutsch</a></p>
 
 <p align="center">
-  <a href="#quick-start">Quick start</a> · <a href="#why-talos">Features</a> · <a href="#cli--sdk">CLI &amp; SDK</a> · <a href="docs/README.md">Documentation</a> · <a href="https://github.com/VascendTechnologies/vascend-talos/issues">Issues</a>
+  <a href="#quick-start"><strong>Try Talos</strong></a> · <a href="#why-talos">Why switch?</a> · <a href="#epoch-based-context-engineering">Context Fabric</a> · <a href="#measured-context-control">Evidence</a> · <a href="#why-i-built-talos">The creator</a> · <a href="docs/README.md">Docs</a>
 </p>
 
 ---
 
-**Talos brings the agent loop, tools and session context into one runtime.** Work in your terminal, automate a task from a script, or embed the same engine in an application. Choose your provider, resume a conversation and extend the workflow with skills and MCP tools.
+**Give your coding agent a mission. Keep the controls.** Talos combines an extensible agent runtime with **Context Fabric**: a system that tracks the current objective, gives temporary focus an expiry and lets you inspect how context is assembled.
 
-Talos also powers **Vascend Horizon**. The standalone CLI runs independently of the desktop application.
+Choose the model. Shape the workflow. Pin what matters. Carry the same engine into your scripts and applications.
+
+Created by **Lorenzo Daniel Danilov** at **Vascend Technologies**, an Italian AI lab. Talos also powers **Vascend Horizon** and runs independently as a standalone CLI.
 
 ## Quick start
 
-Install [Node.js 20 or newer](https://nodejs.org), then run:
+**Put Talos to work on your next real task.** With [Node.js 20 or newer](https://nodejs.org), run:
 
 ```bash
 npm install -g @vascend/talos
@@ -57,12 +57,15 @@ Talos checks npm for new stable releases, downloads from Vascend with an officia
 
 The installers add `talos` to your user PATH. On Windows it is available in the current PowerShell window; on Bash/Zsh, open a new terminal or use the activation command printed by the installer. No administrator rights or changes to PowerShell execution policy are required.
 
-On first launch, follow the Vascend account sign-in flow. Use `/login` to configure provider access and `/models` to choose a model. Then give Talos a task:
+On first launch, follow the guided Vascend account sign-in. Use `/login` to connect your provider and `/models` to choose a model. Try a concrete task:
 
 ```text
-Explain this repository, identify its entry points, and suggest where to add tests.
+Find the cause of the failing tests in this repository, implement a fix,
+and verify it. Preserve the existing public API.
 ```
 
+Then open `/context explain` to inspect the mission, active focus and context budget. **See what your harness is doing while you work.**
+
 <details>
 <summary><strong>Run from source or update your installation</strong></summary>
 
@@ -95,14 +98,63 @@ Full configuration and API key examples: [CLI reference](docs/CLI-REFERENCE.it.m
 
 ## Why Talos
 
-| Capability | What it gives you |
+**Choose Talos when the way your agent works matters as much as the model it uses.**
+
+| What you want to improve | The Talos advantage |
+| --- | --- |
+| **Keep long tasks on mission** | Epochs preserve the active objective through follow-ups. A Goal Contract records corrections, constraints and success criteria. |
+| **Decide what stays in focus** | Expiring leases remove old focus terms; explicit pins keep the terms you choose. Inspect the current decisions with `/context explain`. |
+| **Make the agent fit your process** | Combine project instructions, skills, MCP tools, hooks and extensions. Select a working profile for debugging, research, security and more. |
+| **Use the model that fits the task** | Choose Anthropic, OpenAI-compatible providers or local Ollama models from the same runtime. |
+| **Turn your workflow into a product** | Use Talos interactively, automate it from the CLI, or embed the engine through the TypeScript SDK, JSONL RPC or Horizon Engine. |
+| **Keep working while the agent works** | Draft your next message while questions wait above the prompt. Open full tool output on demand and resume saved sessions. |
+
+### Comparing your next coding agent?
+
+Claude Code offers [skills, hooks, MCP and other extensions](https://code.claude.com/docs/en/features-overview), and OpenCode supports [custom tools](https://opencode.ai/docs/custom-tools/) and an [SDK](https://opencode.ai/docs/sdk/). The reason to try Talos is its particular combination: **explicit mission epochs, expiring focus, selectable context recipes and an inspectable receipt**, integrated into the engine you can also embed.
+
+**Put context control on your comparison checklist:** can you inspect the current mission, see why a working profile was selected, pin a focus term and deliberately start a fresh epoch? In Talos, those are built-in controls you can try immediately.
+
+## Epoch-based context engineering
+
+An **epoch** is a phase of work organized around a specific objective. Context Fabric tracks that objective across turns and builds the working context needed to pursue it.
+
+| Concept | How it works |
 | --- | --- |
-| **One engine, multiple interfaces** | Interactive CLI, one-shot tasks, JSONL RPC, a TypeScript SDK and Horizon Engine. |
-| **Provider choice** | Anthropic, OpenAI-compatible providers and local Ollama models, with a model picker inside the session. |
-| **Resumable work** | Saved conversations, session branches, context inspection and project memory. |
-| **Extensible tools** | File and shell tools, MCP connections, skills, hooks and project instructions. |
-| **A readable terminal** | Compact operation previews, full details on demand and questions that leave your draft intact. |
-| **Explicit control** | Configurable permissions, separate desktop consent and teams started on request. |
+| **Epoch — the objective** | A follow-up such as “continue” keeps the current mission. When Talos detects a new task, it opens a new epoch. A versioned **Goal Contract** tracks the objective, corrections, constraints and success criteria. |
+| **Lease — the lifetime of focus** | Focus terms have an explicit lifetime: mission terms last for the epoch, while details from a turn or working mode expire after a few turns unless renewed. Explicitly pinned terms persist across epochs in the same session. |
+| **Lens — the working profile** | Profiles such as `debug`, `research` and `security` set retrieval priorities, ranking weights, context budgets and evidence requirements. Choose one with `/vibe`, or let `auto` route the task. |
+
+On each turn, Talos combines the current request, mission, goal revisions and active focus terms into a retrieval query. The **Context Window Compiler** retrieves relevant project memory, decisions and evidence, ranks and filters them, and assembles a **Prompt Pack** within the selected context budget. Epochs organize this working context alongside the saved conversation history and persistent project memory.
+
+For example, “Fix the login bug” starts a mission. “Continue” keeps that mission; “Also handle login cancellation” refines it. “New task: review the deployment configuration” opens a new epoch, dropping the previous epoch's unpinned focus terms. Explicit pins remain, and stored information can be retrieved again when relevant.
+
+Use `/context` or `/context explain` to inspect the active epoch, focus terms, routing reasons and context budget. Use `/context pin <term or path>` to retain a focus term and `/context unpin <term or path>` to release it. `/context reset` starts a new epoch on the next turn while preserving explicit pins.
+
+See [Context Fabric](docs/CONTEXT-FABRIC.md) for the full lifecycle, persistence rules and implementation details.
+
+## Measured context control
+
+Our **five-scenario, deterministic offline context benchmark**, rerun on September 11, 2026, covers follow-ups, task changes, session resumption, repository isolation and profile selection. It exercises Talos's context compiler against a documented local retrieval baseline.
+
+| Metric in this fixture suite | Talos Context Fabric | Local retrieval proxy |
+| --- | ---: | ---: |
+| Precision of selected context | **100.0%** | 66.7% |
+| Continuity across follow-ups and resumption | **100.0%** | 50.0% |
+| Leakage of forbidden stale items — lower is better | **0.0%** | 52.8% |
+| Reported context token count — total | **377** | 512 |
+
+These are internal fixture results against the repository's `cursor-style-proxy`, **not measurements of the Cursor product or a live coding comparison with competing agents**. They measure context selection in this suite, not coding success, latency or your API bill. The value is reproducibility: inspect the [full report](docs/benchmark-results/context-gap-2026-09-11T08-44-47-116Z.md), [raw results](docs/benchmark-results/context-gap-2026-09-11T08-44-47-116Z.json) and [methodology](bench/README.md), or run `bun run bench:context` from a source checkout.
+
+## Why I built Talos
+
+I'm **Lorenzo Daniel Danilov**, and I lead [Vascend Technologies](https://vascend.it), an Italian AI lab.
+
+I created Talos because I found existing agent harnesses too restrictive for the way I wanted to work, especially when it came to customization. I wanted to shape the tools, workflows and context management around the task, with control over how the agent operates.
+
+After months of research, I introduced a new approach to context engineering in Talos: **epoch-based context engineering**, implemented through **Context Fabric** and **Epoch–Lease–Lens**. My aim is to give developers a harness they can understand, adapt and build on.
+
+**Bring your next bug, refactor or investigation to Talos.** [Install it](#quick-start), choose your model and put its context controls to the test on your own project.
 
 ## Keep your place in the conversation
 
@@ -199,7 +251,9 @@ Report bugs in [Issues](https://github.com/VascendTechnologies/vascend-talos/iss
 
 ## Project and license
 
-Built by [Vascend Technologies](https://vascend.it). Inspired by the extensible agent philosophy of [Pi](https://pi.dev).
+Created by **Lorenzo Daniel Danilov** at [Vascend Technologies](https://vascend.it), an Italian AI lab. Inspired by the extensible agent philosophy of [Pi](https://pi.dev).
+
+**Contact:** [LinkedIn](https://www.linkedin.com/in/lorenzo-danilov/) · [Instagram @LorenzoDanilov](https://www.instagram.com/LorenzoDanilov/) · [l.danilov@vascend.it](mailto:l.danilov@vascend.it)
 
 The package is marked **`UNLICENSED`**. This repository does not grant an open-source license; use and distribution require permission from Vascend Technologies.
 

package/dist/core/cli-cancelled.d.ts

@@ -0,0 +1,4 @@
+/** A user-requested stop, not a fault to send to crash diagnostics. */
+export declare class CliCancelled extends Error {
+    constructor(message: string);
+}

package/dist/core/cli-cancelled.js

@@ -0,0 +1,7 @@
+/** A user-requested stop, not a fault to send to crash diagnostics. */
+export class CliCancelled extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "CliCancelled";
+    }
+}

package/dist/core/signed-release.js

@@ -49,7 +49,9 @@ export async function fetchReleaseBytes(url, limit, options = {}) {
     const controller = new AbortController();
     const timer = setTimeout(() => controller.abort(), options.timeoutMs ?? 20_000);
     try {
-        const response = await (options.fetch ?? fetch)(url, { redirect: "error", signal: controller.signal, headers: { Accept: "application/octet-stream" } });
+        // npm version endpoints return JSON; forcing octet-stream can serialize them
+        // as "[object Object]". Accept each endpoint's native metadata/archive type.
+        const response = await (options.fetch ?? fetch)(url, { redirect: "error", signal: controller.signal, headers: { Accept: "*/*" } });
         if (!response.ok || !response.body) {
             await response.body?.cancel();
             throw new Error("Release download is unavailable.");

package/dist/index.js

@@ -1,6 +1,7 @@
 #!/usr/bin/env node
 import { readFileSync } from "node:fs";
 import { installCrashMonitor, writeCrashReport } from "./core/crash-report.js";
+import { CliCancelled } from "./core/cli-cancelled.js";
 import { TALOS_VERSION } from "./core/version.js";
 installCrashMonitor();
 import { bootstrap } from "./core/bootstrap.js";
@@ -225,6 +226,10 @@ async function main() {
         recoverQueue: !args.sessionId && !args.continueLast && !args.resumePicker && !args.name });
 }
 main().catch((err) => {
+    if (err instanceof CliCancelled) {
+        process.stdout.write(`\n  ${err.message}\n\n`, () => process.exit(130));
+        return;
+    }
     const report = writeCrashReport(err, "main");
     process.stderr.write(`fatale: ${err instanceof Error ? err.stack ?? err.message : String(err)}\n`);
     if (report)

package/dist/install.mjs

@@ -48,7 +48,7 @@ async function fetchReleaseBytes(url, limit, options = {}) {
   const controller = new AbortController;
   const timer = setTimeout(() => controller.abort(), options.timeoutMs ?? 20000);
   try {
-    const response = await (options.fetch ?? fetch)(url, { redirect: "error", signal: controller.signal, headers: { Accept: "application/octet-stream" } });
+    const response = await (options.fetch ?? fetch)(url, { redirect: "error", signal: controller.signal, headers: { Accept: "*/*" } });
     if (!response.ok || !response.body) {
       await response.body?.cancel();
       throw new Error("Release download is unavailable.");

package/dist/tui/account-entry.d.ts

@@ -1 +1,2 @@
-export declare function enterAccount(env: NodeJS.ProcessEnv): Promise<string>;
+import type { ThemeSpec } from "./theme.js";
+export declare function enterAccount(env: NodeJS.ProcessEnv, theme?: ThemeSpec): Promise<string>;

package/dist/tui/account-entry.js

@@ -1,12 +1,13 @@
 import * as readline from "node:readline";
 import { stdin, stdout } from "node:process";
-import { openUrl } from "../providers/open-browser.js";
 import { tr } from "./i18n.js";
 import { initializeLanguage, onboardingLanguage } from "./language-preference.js";
 import { leggiOnboarding, salvaOnboarding, serveTermini, TESTI, consensoAffermativo, TERMINI_VERSIONE, LINK_TERMINI, LINK_PRIVACY } from "./onboarding.js";
 import { decisioneCancello, tokenVascend, statoSessione, valutaLicenzaLocale, rimuoviTokenVascend, salvaTokenVascend, rinnovaProvaOffline } from "./vascend-login.js";
 import { startWebLogin, waitForWebLogin, WebLoginError } from "./web-login.js";
-export async function enterAccount(env) {
+import { showWebLoginScreen } from "./web-login-screen.js";
+import { CliCancelled } from "../core/cli-cancelled.js";
+export async function enterAccount(env, theme) {
     const language = initializeLanguage(env);
     const state = onboardingLanguage(leggiOnboarding(env), env);
     // Host/test flags only control this local UI. Server authorization always
@@ -29,30 +30,40 @@ export async function enterAccount(env) {
         return offline?.ok ? tr("Account offline · prova firmata valida", "Offline account · signed proof valid") : note();
     }
     const abort = new AbortController();
-    const rl = readline.createInterface({ input: stdin, output: stdout });
+    let rl;
     const cancel = () => abort.abort();
-    rl.on("SIGINT", cancel);
+    process.on("SIGINT", cancel);
+    if (process.platform === "win32")
+        process.on("SIGBREAK", cancel);
     const write = (text) => { stdout.write(`  ${text}\n`); };
     try {
         if (decision.azione === "login") {
             if (saved)
                 rimuoviTokenVascend(env);
-            write(tr("Accesso a Vascend Talos", "Sign in to Vascend Talos"));
-            write(tr("Accedi sul sito e conferma il collegamento a Talos.", "Sign in on the website and approve the connection to Talos."));
-            const grant = await startWebLogin(env, language, {}, abort.signal);
-            write(grant.url);
-            write(`${tr("Codice", "Code")}: ${grant.userCode.slice(0, 5)}-${grant.userCode.slice(5)}`);
-            write(tr("Confronta il codice sul sito. In attesa della conferma · Ctrl+C annulla", "Compare the code on the website. Waiting for approval · Ctrl+C cancel"));
-            await openUrl(grant.url, { print: () => { } });
-            const account = await waitForWebLogin(env, grant, {}, abort.signal);
-            if (!salvaTokenVascend(env, account.token))
-                throw new Error(TESTI[language].tokenNonSalvabile);
-            token = account.token;
-            tier = account.tier;
-            write(TESTI[language].benvenuto(account.email));
+            stdout.write(`\n  ${tr("Preparazione dell'accesso a Talos...", "Preparing Talos sign-in...")}`);
+            const grant = await startWebLogin(env, language, {}, abort.signal)
+                .finally(() => { stdout.write(env.TERM === "dumb" ? "\n" : "\r\x1b[2K"); });
+            const finish = showWebLoginScreen(grant, abort, { env, theme });
+            try {
+                const account = await waitForWebLogin(env, grant, {}, abort.signal);
+                if (!salvaTokenVascend(env, account.token))
+                    throw new Error(TESTI[language].tokenNonSalvabile);
+                token = account.token;
+                tier = account.tier;
+                finish(true);
+                write(TESTI[language].benvenuto(account.email));
+            }
+            finally {
+                finish();
+            }
             await rinnovaProvaOffline(env, token).catch(() => { });
         }
+        if (abort.signal.aborted)
+            throw new WebLoginError("cancelled");
         if (serveTermini(state)) {
+            rl = readline.createInterface({ input: stdin, output: stdout });
+            rl.on("SIGINT", cancel);
+            rl.on("close", cancel);
             const t = TESTI[language];
             write(t.terminiTitolo);
             write(t.terminiCorpo);
@@ -71,23 +82,28 @@ export async function enterAccount(env) {
                 });
             });
             if (!consensoAffermativo(answer, language))
-                throw new Error(t.terminiRifiutati);
+                throw new CliCancelled(t.terminiRifiutati);
             salvaOnboarding(env, { ...state, lingua: language, terminiVersione: TERMINI_VERSIONE, terminiQuando: new Date().toISOString() });
         }
         return note();
     }
     catch (e) {
         if (e instanceof WebLoginError) {
+            if (e.code === "cancelled")
+                throw new CliCancelled(tr("Accesso annullato.", "Sign-in cancelled."));
+            if (e.code === "access_denied")
+                throw new CliCancelled(tr("Collegamento annullato dal sito.", "Connection cancelled on the website."));
             const messages = {
-                cancelled: tr("Accesso annullato.", "Sign-in cancelled."),
                 expired_token: tr("Link scaduto. Riavvia Talos per riprovare.", "Link expired. Restart Talos to try again."),
-                access_denied: tr("Collegamento annullato dal sito.", "Connection cancelled on the website."),
             };
             throw new Error(messages[e.code] ?? tr("Accesso dal sito non disponibile. Riprova fra poco.", "Website sign-in is unavailable. Please try again shortly."));
         }
         throw e;
     }
     finally {
-        rl.close();
+        rl?.close();
+        process.removeListener("SIGINT", cancel);
+        if (process.platform === "win32")
+            process.removeListener("SIGBREAK", cancel);
     }
 }

package/dist/tui/i18n-catalog.js

@@ -1,6 +1,22 @@
 // English keys correspond to tr()'s stable fallback. User text, tool output,
 // command names and model identifiers never pass through this catalogue.
 export const TRANSLATION_ROWS = [
+    ["Connect your account and get started.", "Conecta tu cuenta y empieza.", "Konto verbinden und loslegen."],
+    ["1. Sign in in your browser", "1. Inicia sesión en el navegador", "1. Im Browser anmelden"],
+    ["vascend.it will open to continue.", "Se abrirá vascend.it para continuar.", "vascend.it wird zum Fortfahren geöffnet."],
+    ["2. Match the code and approve", "2. Compara el código y confirma", "2. Code vergleichen und bestätigen"],
+    ["Talos will continue automatically.", "Talos continuará automáticamente.", "Talos fährt automatisch fort."],
+    ["If the browser does not open, use this link:", "Si el navegador no se abre, usa este enlace:", "Falls der Browser nicht startet, diesen Link öffnen:"],
+    ["Enter open browser  /  C copy code", "Intro abrir navegador  /  C copiar código", "Enter Browser öffnen  /  C Code kopieren"],
+    ["L copy link  /  Esc or Ctrl+C cancel", "L copiar enlace  /  Esc o Ctrl+C cancelar", "L Link kopieren  /  Esc oder Ctrl+C abbrechen"],
+    ["Waiting for approval", "Esperando confirmación", "Warte auf Bestätigung"],
+    ["expires in {time}", "caduca en {time}", "läuft in {time} ab"],
+    ["Open the link above", "Abre el enlace de arriba", "Link oben öffnen"],
+    ["Link copied", "Enlace copiado", "Link kopiert"],
+    ["Code copied", "Código copiado", "Code kopiert"],
+    ["Select and copy the text above", "Selecciona y copia el texto de arriba", "Text oben markieren und kopieren"],
+    ["Account connected. You're ready!", "Cuenta conectada. ¡Todo listo!", "Konto verbunden. Alles bereit!"],
+    ["Preparing Talos sign-in...", "Preparando el acceso a Talos...", "Talos-Anmeldung wird vorbereitet..."],
     ["Talos update available", "Actualización de Talos disponible", "Talos-Update verfügbar"],
     ["Skip for now", "Omitir por ahora", "Vorerst überspringen"],
     ["Update now", "Actualizar ahora", "Jetzt aktualisieren"],

package/dist/tui/repl.js

@@ -433,7 +433,7 @@ export async function startRepl(deps) {
     // chiave pubblica compilata, orologio ancorato): una "sessione" scritta a
     // mano nel config non supera la firma.
     const ingressoPrimaDellaTui = async () => {
-        const note = await enterAccount(env);
+        const note = await enterAccount(env, activeSpec);
         accessoNota = note ? theme.muted("  " + note) : "";
     };
     // Registro degli allegati immagine della sessione TUI: incollare un path/data

package/dist/tui/web-login-screen.d.ts

@@ -0,0 +1,31 @@
+import type { Readable, Writable } from "node:stream";
+import { type ThemeSpec } from "./theme.js";
+import { type WebGrant } from "./web-login.js";
+interface Appearance {
+    readonly columns?: number;
+    readonly color?: boolean;
+    readonly unicode?: boolean;
+    readonly theme?: ThemeSpec;
+}
+export declare function renderWebLoginScreen(grant: Pick<WebGrant, "userCode" | "url">, options?: Appearance): string;
+export declare function renderWebLoginStatus(seconds: number, frame: number, options?: Appearance, message?: string): string;
+type LoginInput = Readable & {
+    isRaw?: boolean;
+    setRawMode?: (raw: boolean) => unknown;
+};
+type LoginOutput = Writable & {
+    columns?: number;
+    isTTY?: boolean;
+};
+interface ScreenOptions {
+    readonly input?: LoginInput;
+    readonly output?: LoginOutput;
+    readonly env?: NodeJS.ProcessEnv;
+    readonly theme?: ThemeSpec;
+    readonly open?: (url: string) => Promise<boolean>;
+    readonly copy?: (text: string) => Promise<boolean>;
+    readonly now?: () => number;
+}
+/** Only the public code/link reach this UI; credentials stay in the login flow. */
+export declare function showWebLoginScreen(grant: WebGrant, abort: AbortController, options?: ScreenOptions): (connected?: boolean) => void;
+export {};

package/dist/tui/web-login-screen.js

@@ -0,0 +1,165 @@
+import { stdin, stdout } from "node:process";
+import { openUrl } from "../providers/open-browser.js";
+import { copyText } from "./clipboard-text.js";
+import { tr } from "./i18n.js";
+import { fitLine, plainText, terminalWidth, wrapText } from "./terminal-text.js";
+import { painter, VASCEND_DARK } from "./theme.js";
+import { verificationUrl } from "./web-login.js";
+function presentation(options) {
+    const width = Math.max(16, Math.min(76, (options.columns || 80) - 4));
+    const colors = painter(options.theme ?? VASCEND_DARK);
+    const paint = (token, text) => options.color === false ? plainText(text) : colors(token, text);
+    const bold = (text) => options.color === false ? text : `\x1b[1m${text}\x1b[22m`;
+    return { width, paint, bold };
+}
+export function renderWebLoginScreen(grant, options = {}) {
+    const { width, paint, bold } = presentation(options);
+    const lines = ["", `  ${paint("accent", bold("TALOS"))}  ${paint("muted", "VASCEND")}`];
+    const add = (text, token = "text", indent = 2) => {
+        for (const line of wrapText(text, width - indent + 2, true))
+            lines.push(" ".repeat(indent) + paint(token, line));
+    };
+    add(tr("Collega il tuo account e inizia.", "Connect your account and get started."), "muted");
+    lines.push("");
+    add(tr("1. Accedi nel browser", "1. Sign in in your browser"));
+    add(tr("Si aprirà vascend.it per continuare.", "vascend.it will open to continue."), "muted", 5);
+    lines.push("");
+    add(tr("2. Confronta il codice e conferma", "2. Match the code and approve"));
+    const code = plainText(grant.userCode).replace(/^(.{5})(.+)$/, "$1-$2");
+    const edge = options.unicode === false ? ["+", "-", "+", "|", "+", "+"] : ["╭", "─", "╮", "│", "╰", "╯"];
+    const codeWidth = Math.min(25, width - 5);
+    const padding = Math.max(0, Math.floor((codeWidth - code.length) / 2));
+    const row = " ".repeat(padding) + code + " ".repeat(Math.max(0, codeWidth - code.length - padding));
+    lines.push(`     ${paint("borderAccent", edge[0] + edge[1].repeat(codeWidth) + edge[2])}`, `     ${paint("borderAccent", edge[3])}${paint("accent", bold(row))}${paint("borderAccent", edge[3])}`, `     ${paint("borderAccent", edge[4] + edge[1].repeat(codeWidth) + edge[5])}`);
+    add(tr("Talos continuerà automaticamente.", "Talos will continue automatically."), "muted", 5);
+    lines.push("");
+    add(tr("Se il browser non si apre, usa questo link:", "If the browser does not open, use this link:"), "muted");
+    for (const line of wrapText(grant.url, width))
+        lines.push("  " + paint("accent", line));
+    lines.push("");
+    add(tr("Invio apri browser  /  C copia codice", "Enter open browser  /  C copy code"), "muted");
+    add(tr("L copia link  /  Esc o Ctrl+C annulla", "L copy link  /  Esc or Ctrl+C cancel"), "muted");
+    lines.push("");
+    return lines.join("\n") + "\n";
+}
+export function renderWebLoginStatus(seconds, frame, options = {}, message) {
+    const { width, paint } = presentation(options);
+    const remaining = Math.max(0, Math.ceil(seconds));
+    const clock = `${Math.floor(remaining / 60)}:${String(remaining % 60).padStart(2, "0")}`;
+    const countdown = width >= 50 ? tr("scade tra {time}", "expires in {time}", { time: clock }) : clock;
+    const spinner = options.unicode === false ? ["-", "\\", "|", "/"] : ["⠋", "⠙", "⠹", "⠸", "⠼", "⠴", "⠦", "⠧", "⠇", "⠏"];
+    const label = plainText(fitLine(message ?? tr("In attesa di conferma", "Waiting for approval"), width - terminalWidth(countdown) - 7));
+    return `  ${paint("accent", spinner[frame % spinner.length])} ${paint("text", label)} ${paint("muted", ` / ${countdown}`)}`;
+}
+/** Only the public code/link reach this UI; credentials stay in the login flow. */
+export function showWebLoginScreen(grant, abort, options = {}) {
+    const input = options.input ?? stdin;
+    const output = options.output ?? stdout;
+    const env = options.env ?? process.env;
+    const now = options.now ?? Date.now;
+    const url = verificationUrl(grant.url, grant.userCode);
+    const animated = Boolean(output.isTTY) && env.TERM !== "dumb";
+    const appearance = () => ({ columns: output.columns, color: animated && env.NO_COLOR === undefined,
+        unicode: env.TERM !== "dumb", theme: options.theme });
+    const open = options.open ?? (async (value) => (await openUrl(value, { print: () => { } })).opened);
+    const copy = options.copy ?? ((value) => copyText(value, undefined, process.platform, env));
+    const wasRaw = Boolean(input.isRaw);
+    const wasPaused = input.isPaused();
+    let closed = false, opening = false, copying = false, frame = 0;
+    let feedback = "", feedbackUntil = 0;
+    const deadline = now() + grant.expiresIn * 1000;
+    let timer;
+    const draw = () => {
+        if (closed)
+            return;
+        const line = renderWebLoginStatus((deadline - now()) / 1000, frame++, appearance(), now() < feedbackUntil ? feedback : undefined);
+        output.write((animated ? "\r\x1b[2K" : "") + line + (animated ? "" : "\n"));
+    };
+    const notify = (message) => { feedback = message; feedbackUntil = now() + 4000; draw(); };
+    const launch = async () => {
+        if (closed || opening)
+            return;
+        opening = true;
+        try {
+            const opened = await open(url);
+            if (!closed && !opened)
+                notify(tr("Apri il link qui sopra", "Open the link above"));
+        }
+        catch {
+            if (!closed)
+                notify(tr("Apri il link qui sopra", "Open the link above"));
+        }
+        finally {
+            opening = false;
+        }
+    };
+    const copyValue = async (link) => {
+        if (closed || copying)
+            return;
+        copying = true;
+        try {
+            const ok = await copy(link ? url : grant.userCode);
+            if (!closed)
+                notify(ok ? (link ? tr("Link copiato", "Link copied") : tr("Codice copiato", "Code copied"))
+                    : tr("Seleziona e copia il testo qui sopra", "Select and copy the text above"));
+        }
+        catch {
+            if (!closed)
+                notify(tr("Seleziona e copia il testo qui sopra", "Select and copy the text above"));
+        }
+        finally {
+            copying = false;
+        }
+    };
+    const cancel = () => abort.abort();
+    const onData = (chunk) => {
+        const key = chunk.toString();
+        if (["\x03", "\x04", "\x1b"].includes(key))
+            cancel();
+        else if (key === "\r" || key === "\n")
+            void launch();
+        else if (key.toLowerCase() === "c")
+            void copyValue(false);
+        else if (key.toLowerCase() === "l")
+            void copyValue(true);
+    };
+    const finish = (connected = false) => {
+        if (closed)
+            return;
+        closed = true;
+        clearInterval(timer);
+        input.removeListener("data", onData);
+        input.removeListener("end", cancel);
+        abort.signal.removeEventListener("abort", onAbort);
+        input.setRawMode?.(wasRaw);
+        if (wasPaused)
+            input.pause();
+        if (animated)
+            output.write("\r\x1b[2K\x1b[?25h");
+        if (connected)
+            output.write("  " + presentation(appearance()).paint("success", tr("Account collegato. Ci siamo!", "Account connected. You're ready!")));
+        output.write("\n");
+    };
+    const onAbort = () => finish();
+    if (abort.signal.aborted)
+        return () => { };
+    output.write(renderWebLoginScreen(grant, appearance()));
+    if (animated)
+        output.write("\x1b[?25l");
+    try {
+        input.setRawMode?.(true);
+        input.on("data", onData);
+        input.on("end", cancel);
+        input.resume();
+        abort.signal.addEventListener("abort", onAbort, { once: true });
+        draw();
+        if (animated)
+            timer = setInterval(draw, 160);
+        void launch();
+    }
+    catch (error) {
+        finish();
+        throw error;
+    }
+    return finish;
+}

package/dist/tui/web-login.js

@@ -10,18 +10,21 @@ export class WebLoginError extends Error {
 }
 async function post(env, path, body, deps, signal) {
     let response;
+    let raw;
     try {
         response = await (deps.fetchImpl ?? fetch)(baseOf(deps, env) + "/auth/device/" + path, {
             method: "POST", headers: { "Content-Type": "application/json" }, body: JSON.stringify(body),
             redirect: "error", signal: signal ? AbortSignal.any([signal, AbortSignal.timeout(12_000)]) : AbortSignal.timeout(12_000),
         });
+        raw = await response.text();
+        if (signal?.aborted)
+            throw new WebLoginError("cancelled");
     }
     catch {
         if (signal?.aborted)
             throw new WebLoginError("cancelled");
         throw new WebLoginError("temporarily_unavailable");
     }
-    const raw = await response.text();
     if (raw.length > 16_384)
         throw new WebLoginError("invalid_response");
     let data;

package/install.ps1

@@ -144,7 +144,7 @@ async function fetchReleaseBytes(url, limit, options = {}) {
   const controller = new AbortController;
   const timer = setTimeout(() => controller.abort(), options.timeoutMs ?? 20000);
   try {
-    const response = await (options.fetch ?? fetch)(url, { redirect: "error", signal: controller.signal, headers: { Accept: "application/octet-stream" } });
+    const response = await (options.fetch ?? fetch)(url, { redirect: "error", signal: controller.signal, headers: { Accept: "*/*" } });
     if (!response.ok || !response.body) {
       await response.body?.cancel();
       throw new Error("Release download is unavailable.");

package/install.sh

@@ -137,7 +137,7 @@ async function fetchReleaseBytes(url, limit, options = {}) {
   const controller = new AbortController;
   const timer = setTimeout(() => controller.abort(), options.timeoutMs ?? 20000);
   try {
-    const response = await (options.fetch ?? fetch)(url, { redirect: "error", signal: controller.signal, headers: { Accept: "application/octet-stream" } });
+    const response = await (options.fetch ?? fetch)(url, { redirect: "error", signal: controller.signal, headers: { Accept: "*/*" } });
     if (!response.ok || !response.body) {
       await response.body?.cancel();
       throw new Error("Release download is unavailable.");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vascend/talos",
-  "version": "0.1.1",
+  "version": "0.1.3",
   "description": "Vascend Talos - extensible coding agent for your terminal",
   "repository": {
     "type": "git",