codeden 0.6.3 → 0.7.1

package/README.md

@@ -2,7 +2,7 @@
 
 # CodeDen
 
-**A local-first harness for coding agents.** Run Claude Code, Codex and OpenCode side by side in a calm, focused workspace, and when you're ready, let a small software factory work through your backlog while every step stays visible in GitHub.
+**A local-first harness for coding agents.** Run Claude Code, Codex, OpenCode, Cursor and Gemini CLI side by side in a calm, focused workspace, and when you're ready, let a small software factory work through your backlog while every step stays visible in GitHub.
 
 [![Website](https://img.shields.io/badge/website-codeden.app-e8a33d)](https://www.codeden.app)
 [![npm](https://img.shields.io/npm/v/codeden?color=e8a33d&label=npm)](https://www.npmjs.com/package/codeden)
@@ -18,7 +18,7 @@
 npx codeden
 ```
 
-That's the whole install. CodeDen starts a local server, opens your browser on an already signed-in URL, and reuses the Claude Code, Codex, OpenCode, GitHub and git setup you already have. No accounts, no license keys, no hosted backend, no telemetry.
+That's the whole install. CodeDen starts a local server, opens your browser on an already signed-in URL, and reuses the Claude Code, Codex, OpenCode, Cursor, Gemini CLI, GitHub and git setup you already have. No accounts, no license keys, no hosted backend, no telemetry.
 
 Prefer an app? **[Download the desktop app](https://github.com/leonvanzyl/codeden/releases/latest)** for Windows, macOS or Linux: the same CodeDen in its own window, with a tray icon, notifications and automatic updates, and no Node.js needed. See [The desktop app](https://github.com/leonvanzyl/codeden/blob/main/docs/desktop.md).
 
@@ -45,7 +45,7 @@ Prefer an app? **[Download the desktop app](https://github.com/leonvanzyl/codede
 |---|---|
 | **Node.js 24+** | `node --version` |
 | **git** | with `user.name` and `user.email` set |
-| **An agent CLI, signed in** | [Claude Code](https://docs.claude.com/en/docs/claude-code) (`claude`), [Codex CLI](https://developers.openai.com/codex/cli) (`codex`) and/or [OpenCode](https://opencode.ai) 2.2+ (`opencode`). At least one is required |
+| **An agent CLI, signed in** | [Claude Code](https://docs.claude.com/en/docs/claude-code) (`claude`), [Codex CLI](https://developers.openai.com/codex/cli) (`codex`), [OpenCode](https://opencode.ai) 2.2+ (`opencode`), the [Cursor CLI](https://cursor.com/docs/cli/overview) (`agent`) and/or [Gemini CLI](https://geminicli.com) 0.68+ (`gemini`). At least one is required |
 | **GitHub CLI** *(optional)* | `gh auth login` unlocks issues, pull requests, evidence and the factory. Local-only folders work without it |
 | **Edge or Chrome** *(optional)* | for the browser panel and the agents' browser tools |
 
@@ -57,7 +57,7 @@ npx codeden            # or: npm i -g codeden && codeden
 
 Or install the **desktop app** from the [latest release](https://github.com/leonvanzyl/codeden/releases/latest) (`CodeDen-Setup-<version>.exe` on Windows, a `.dmg` on macOS, an AppImage or `.deb` on Linux). It needs no Node.js, uses the same data as `npx codeden` (`~/.codeden`), lives in the tray and updates itself. Builds without a publisher signature show a warning the first time you open them: on Windows choose **More info › Run anyway**; on macOS open CodeDen once, then choose **Open Anyway** under **System Settings › Privacy & Security**. If macOS says the app is "damaged", see [Unsigned builds](https://github.com/leonvanzyl/codeden/blob/main/docs/desktop.md#unsigned-builds).
 
-1. The **setup checklist** detects Claude Code, Codex, OpenCode, GitHub, your git identity and a browser, and only asks about what's missing. Each failed check has one fix: an install command, or a **Sign in** button that runs the tool's own login in an embedded terminal.
+1. The **setup checklist** detects Claude Code, Codex, OpenCode, Cursor, Gemini CLI, GitHub, your git identity and a browser, and only asks about what's missing. Each failed check has one fix: an install command, or a **Sign in** button that runs the tool's own login in an embedded terminal.
 2. **Add a project:** pick a local folder (a server-side folder picker) or paste a GitHub URL to clone.
 3. **Start a session.** The agent works in its own git worktree and branch, so your checkout is never touched.
 
@@ -106,18 +106,26 @@ Each project climbs a ladder: **Manual** → **Assisted** (the default) → **So
 Everything an agent touches, next to the chat:
 
 - **Diffs and checkpoints.** Every turn is snapshotted into a hidden git ref, so you get exact per-turn and whole-session diffs and can restore files to any earlier turn. Commit and push from the git bar.
+- **Diff comments.** Comment on the agent's changes line by line, then send them all back as one message. [Comment on lines](https://github.com/leonvanzyl/codeden/blob/main/docs/workbench.md#comment-on-lines).
+- **Fork a session**, or fork from an earlier turn, to try another approach with the same conversation and code while the original carries on. [Fork a session](https://github.com/leonvanzyl/codeden/blob/main/docs/workbench.md#fork-a-session).
+- **Hand a session off** to another provider (or a fresh conversation) when one hits its limit or you want a second opinion: the new session gets the same code and a brief of the work so far. [Hand a session off](https://github.com/leonvanzyl/codeden/blob/main/docs/workbench.md#hand-a-session-off).
+- **Plan mode** (Claude Code). The agent explores and proposes a plan, and only starts changing code once you approve it. [Plan mode](https://github.com/leonvanzyl/codeden/blob/main/docs/security.md#plan-mode).
 - **Files.** A file tree and a syntax-highlighted viewer for the session's worktree.
 - **Terminal.** Real PTY terminals owned by the runner, so they survive server restarts.
-- **Browser.** A Chromium the agents drive (navigate, snapshot, click, type, screenshot, console and network logs), streamed edge to edge into the panel at the panel's own size. Click, type and scroll in it at any time.
+- **Browser.** A Chromium the agents drive (navigate, snapshot, click, type, screenshot, console and network logs, plus click, hover, drag and scroll at screenshot coordinates for canvases, maps and other things without an element to pick), streamed edge to edge into the panel at the panel's own size. Click, type and scroll in it at any time.
 - **Subagents** open as child threads, and the composer queues or steers while a turn runs.
 
 ![The browser panel filling the right side, with the page laid out at the panel's size](https://raw.githubusercontent.com/leonvanzyl/codeden/main/docs/images/browser-panel.png)
 
 [Workbench guide](https://github.com/leonvanzyl/codeden/blob/main/docs/workbench.md).
 
-### Agent memory, skills, subagents and MCP servers
+### Agent memory, skills, subagents, MCP servers and hooks
 
-First-class editors for each provider's **own files**: `CLAUDE.md`, `AGENTS.md`, `.claude/rules/`, Claude's auto-memory, skills, subagents, `.mcp.json`, `~/.claude.json` and `~/.codex/config.toml`. Edits are written in place with a diff preview and a backup, so they show up in the terminal CLI too, and a **What's loaded** view shows which files a session actually has in context. [Agent configuration](https://github.com/leonvanzyl/codeden/blob/main/docs/agent-config.md).
+First-class editors for each provider's **own files**: `CLAUDE.md`, `AGENTS.md`, `.claude/rules/`, Claude's auto-memory, skills, subagents, `.mcp.json`, `~/.claude.json`, `~/.codex/config.toml` and Claude's settings files. Edits are written in place with a diff preview and a backup, so they show up in the terminal CLI too, and a **What's loaded** view shows which files a session actually has in context. [Agent configuration](https://github.com/leonvanzyl/codeden/blob/main/docs/agent-config.md).
+
+- **Skill switches.** Turn a skill off or back on without deleting it, through Claude Code's and Codex's own settings. [Switch skills on and off](https://github.com/leonvanzyl/codeden/blob/main/docs/agent-config.md#switch-skills-on-and-off).
+- **MCP connection tests.** Check that an MCP server starts, connects and lists its tools before an agent needs it. [Test a server](https://github.com/leonvanzyl/codeden/blob/main/docs/agent-config.md#test-a-server).
+- **Hooks.** Add, edit, disable and delete Claude Code's hooks, the commands it runs before or after tool calls and on other events. [Hooks](https://github.com/leonvanzyl/codeden/blob/main/docs/agent-config.md#hooks).
 
 ### Image generation for every agent
 
@@ -158,7 +166,7 @@ When an agent finishes, CodeDen suggests two to four next prompts as one-click c
 ```
 
 - **Two processes.** The **server** owns the database, orchestration, the inbox, automations and GitHub sync, and serves the UI. The **runner** hosts the agent processes, terminals, the browser and git. If the server restarts (an update, a crash), running agents keep going; the runner journals their events until the server is back.
-- **Real SDKs and protocols.** Claude Code runs through the Claude Agent SDK using your installed `claude` binary; Codex runs through `codex app-server` over JSON-RPC; OpenCode runs as a private `opencode serve` per session, over its HTTP API and event stream. No scraped terminal output.
+- **Real SDKs and protocols.** Claude Code runs through the Claude Agent SDK using your installed `claude` binary; Codex runs through `codex app-server` over JSON-RPC; OpenCode runs as a private `opencode serve` per session, over its HTTP API and event stream; Cursor and Gemini CLI run through their Agent Client Protocol servers (`agent acp`, `gemini --acp`). No scraped terminal output.
 - **Everything is an event.** Agent activity is an append-only event log in SQLite, so every action can be seen, replayed and traced to an issue, branch or PR.
 - **Agents reach CodeDen through MCP.** Each session gets a role-scoped token for CodeDen's internal MCP server (`report_progress`, `ask_user`, `create_pull_request`, `attach_evidence`, the browser tools, `generate_image`, ...). Tools outside a role are never listed.
 
@@ -261,7 +269,7 @@ CodeDen checks npm for a new version when it starts and every 6 hours (only the
 ## FAQ
 
 **Do I need API keys?**
-No. CodeDen runs your installed `claude`, `codex` and `opencode` CLIs, which use their own logins, including claude.ai and ChatGPT subscriptions. CodeDen never implements a login of its own and never asks for a credential it can already use. API keys are an optional extra for Gemini or OpenAI image generation and cloud voice. Check your provider's terms for how your plan may be used.
+No. CodeDen runs your installed `claude`, `codex`, `opencode`, `agent` (Cursor) and `gemini` CLIs, which use their own logins, including claude.ai, ChatGPT, Cursor and Google subscriptions. CodeDen never implements a login of its own and never asks for a credential it can already use. API keys are an optional extra for Gemini or OpenAI image generation and cloud voice. Check your provider's terms for how your plan may be used.
 
 **Where does my data go?**
 It stays on your machine, in `~/.codeden/`. CodeDen has no account system and no hosted backend. The only network traffic is what you set up: your agents talking to their providers, GitHub (through your `gh` login), and the optional image and voice engines you enable.
@@ -297,8 +305,8 @@ It's experimental. Read [The software factory and the dark factory](https://gith
 | [GitHub](https://github.com/leonvanzyl/codeden/blob/main/docs/github.md) | Issues, PRs, checks, reviews and the evidence branch |
 | [Automations](https://github.com/leonvanzyl/codeden/blob/main/docs/automations.md) | Triggers, guards, templates and writing your own |
 | [The software factory and the dark factory](https://github.com/leonvanzyl/codeden/blob/main/docs/software-factory.md) | Modes, pipelines, trusted authors, the scout, the vision file, merge checks, limits and the kill switch |
-| [Workbench](https://github.com/leonvanzyl/codeden/blob/main/docs/workbench.md) | Diffs, checkpoints, files, terminal, browser, composer, shortcuts |
-| [Agent configuration](https://github.com/leonvanzyl/codeden/blob/main/docs/agent-config.md) | Memory, skills, subagents and MCP servers |
+| [Workbench](https://github.com/leonvanzyl/codeden/blob/main/docs/workbench.md) | Diffs, diff comments, checkpoints, forks, files, terminal, browser, composer, shortcuts |
+| [Agent configuration](https://github.com/leonvanzyl/codeden/blob/main/docs/agent-config.md) | Memory, skills and skill switches, subagents, MCP servers and hooks |
 | [Voice and images](https://github.com/leonvanzyl/codeden/blob/main/docs/voice-and-images.md) | Dictation, read-aloud and image generation |
 | [Usage and costs](https://github.com/leonvanzyl/codeden/blob/main/docs/usage-and-costs.md) | The ledger, reports, budgets and rate limits |
 | [Phones, tablets and network access](https://github.com/leonvanzyl/codeden/blob/main/docs/remote-access.md) | Opening CodeDen from your phone, the QR code, Add to Home Screen and VPNs |

package/dist/cli.js

@@ -242,7 +242,7 @@ async function run() {
 		console.log(selfVersion);
 		process.exit(0);
 	}
-	await import("./main-Bx58CdV4.js");
+	await import("./main-CQ8GZN1a.js");
 }
 /** Settles once this copy's CLI has loaded (an older launcher that switched here awaits it). */
 const started = run();

package/dist/drizzle/20261113075317_transcript_search/migration.sql

@@ -0,0 +1,29 @@
+CREATE TABLE `item_search` (
+	`id` integer PRIMARY KEY AUTOINCREMENT,
+	`session_id` text NOT NULL,
+	`item_id` text NOT NULL,
+	`thread_id` text NOT NULL,
+	`kind` text NOT NULL,
+	`tool_kind` text,
+	`text` text NOT NULL,
+	`created_at` text NOT NULL
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX `item_search_item` ON `item_search` (`session_id`,`item_id`);
+--> statement-breakpoint
+-- The full-text index over `item_search.text` (external content: the text is stored once, in `item_search`). Trigram tokens match substrings inside identifiers and paths, case- and accent-insensitively.
+CREATE VIRTUAL TABLE `item_search_fts` USING fts5(`text`, content='item_search', content_rowid='id', tokenize='trigram remove_diacritics 1');
+--> statement-breakpoint
+-- Triggers keep the index in step with every write to `item_search`, in the same transaction.
+CREATE TRIGGER `item_search_ai` AFTER INSERT ON `item_search` BEGIN
+	INSERT INTO `item_search_fts` (rowid, `text`) VALUES (new.`id`, new.`text`);
+END;
+--> statement-breakpoint
+CREATE TRIGGER `item_search_ad` AFTER DELETE ON `item_search` BEGIN
+	INSERT INTO `item_search_fts` (`item_search_fts`, rowid, `text`) VALUES ('delete', old.`id`, old.`text`);
+END;
+--> statement-breakpoint
+CREATE TRIGGER `item_search_au` AFTER UPDATE OF `text` ON `item_search` WHEN old.`text` IS NOT new.`text` BEGIN
+	INSERT INTO `item_search_fts` (`item_search_fts`, rowid, `text`) VALUES ('delete', old.`id`, old.`text`);
+	INSERT INTO `item_search_fts` (rowid, `text`) VALUES (new.`id`, new.`text`);
+END;