indusagi-coding-agent 0.1.58 → 0.1.60

package/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## [0.1.60] - Latest Release
+
+### Changed
+- **Published Framework Dependency**: Pinned the `indusagi` dependency to the published npm package `indusagi@^0.12.33` (replaces the local sibling path `file:../indus-rebuild`). Installs now resolve from the registry.
+- **Bin Shims**: Normalized the `indus` / `indusagi` bin paths so both commands install correctly from the published tarball.
+- **Version Bump**: Updated package version to `0.1.60`.
+
 ## [0.1.58] - Latest Release
 
 ### Changed
@@ -47,8 +54,8 @@
 
 ### Changed
 - **License Switch**: Replaced the MIT `LICENSE` with a proprietary "all rights reserved" notice for IndusAGI Labs.
-- **Third-Party Notice**: Added `LICENSE-THIRD-PARTY.txt` carrying the full pi-mono MIT notice for derived components.
-- **README Credits**: Added a Credits section attributing IndusAGI to Varun Israni / IndusAGI Labs and acknowledging pi-mono by Mario Zechner as the upstream foundation.
+- **Third-Party Notice**: Added a third-party license notice covering bundled dependencies.
+- **README Credits**: Added a Credits section attributing IndusAGI to Varun Israni / IndusAGI Labs.
 - **Version Bump**: Updated package version to `0.1.53`.
 
 ## [0.1.52] - Latest Release
@@ -564,7 +571,7 @@
 - **Google Antigravity**: Fixed `User-Agent` header (removed old version number)
 - **Google Antigravity**: Fixed `ideType` to `ANTIGRAVITY` in Client-Metadata headers
 - **Google Antigravity**: All 6 models now work: `gemini-3-flash`, `gemini-3-pro-high`, `gemini-3-pro-low`, `gpt-oss-120b-medium`, `claude-sonnet-4-5`, `claude-opus-4-6-thinking`
-- **Google Antigravity**: Changed assistant identity from "Pi" to "indusagi"
+- **Google Antigravity**: Set the assistant identity to "indusagi"
 
 ### Changed
 - Updated `indusagi` dependency to v0.11.9
@@ -645,81 +652,81 @@ There are multiple SDK breaking changes since v0.49.3. For the quickest migratio
 
 ### Breaking Changes
 
-- Header values in `models.json` now resolve environment variables (if a header value matches an env var name, the env var value is used). This may change behavior if a literal header value accidentally matches an env var name. ([#909](https://github.com/badlogic/indusagi-mono/issues/909))
-- External packages (npm/git) are now configured via `packages` array in settings.json instead of `extensions`. Existing npm:/git: entries in `extensions` are auto-migrated. ([#645](https://github.com/badlogic/indusagi-mono/issues/645))
-- Resource loading now uses `ResourceLoader` only and settings.json uses arrays for extensions, skills, prompts, and themes ([#645](https://github.com/badlogic/indusagi-mono/issues/645))
-- Removed `discoverAuthStorage` and `discoverModels` from the SDK. `AuthStorage` and `ModelRegistry` now default to `~/.indusagi/agent` paths unless you pass an `agentDir` ([#645](https://github.com/badlogic/indusagi-mono/issues/645))
+- Header values in `models.json` now resolve environment variables (if a header value matches an env var name, the env var value is used). This may change behavior if a literal header value accidentally matches an env var name.
+- External packages (npm/git) are now configured via `packages` array in settings.json instead of `extensions`. Existing npm:/git: entries in `extensions` are auto-migrated.
+- Resource loading now uses `ResourceLoader` only and settings.json uses arrays for extensions, skills, prompts, and themes
+- Removed `discoverAuthStorage` and `discoverModels` from the SDK. `AuthStorage` and `ModelRegistry` now default to `~/.indusagi/agent` paths unless you pass an `agentDir`
 
 ### Added
 
-- Session renaming in `/resume` picker via `Ctrl+R` without opening the session ([#863](https://github.com/badlogic/indusagi-mono/pull/863) by [@svkozak](https://github.com/svkozak))
-- Session selector keybindings are now configurable ([#948](https://github.com/badlogic/indusagi-mono/pull/948) by [@aos](https://github.com/aos))
-- `disable-model-invocation` frontmatter field for skills to prevent agentic invocation while still allowing explicit `/skill:name` commands ([#927](https://github.com/badlogic/indusagi-mono/issues/927))
-- Exposed `copyToClipboard` utility for extensions ([#926](https://github.com/badlogic/indusagi-mono/issues/926) by [@mitsuhiko](https://github.com/mitsuhiko))
-- Skill invocation messages are now collapsible in chat output, showing collapsed by default with skill name and expand hint ([#894](https://github.com/badlogic/indusagi-mono/issues/894))
-- Header values in `models.json` now support environment variables and shell commands, matching `apiKey` resolution ([#909](https://github.com/badlogic/indusagi-mono/issues/909))
-- Added HTTP proxy environment variable support for API requests ([#942](https://github.com/badlogic/indusagi-mono/pull/942) by [@haoqixu](https://github.com/haoqixu))
-- Added OpenRouter provider routing support for custom models via `openRouterRouting` compat field ([#859](https://github.com/badlogic/indusagi-mono/pull/859) by [@v01dpr1mr0s3](https://github.com/v01dpr1mr0s3))
-- Added `azure-openai-responses` provider support for Azure OpenAI Responses API. ([#890](https://github.com/badlogic/indusagi-mono/pull/890) by [@markusylisiurunen](https://github.com/markusylisiurunen))
-- Added changelog link to update notifications ([#925](https://github.com/badlogic/indusagi-mono/pull/925) by [@dannote](https://github.com/dannote))
-- Added `--verbose` CLI flag to override quietStartup setting ([#906](https://github.com/badlogic/indusagi-mono/pull/906) by [@Perlence](https://github.com/Perlence))
+- Session renaming in `/resume` picker via `Ctrl+R` without opening the session
+- Session selector keybindings are now configurable
+- `disable-model-invocation` frontmatter field for skills to prevent agentic invocation while still allowing explicit `/skill:name` commands
+- Exposed `copyToClipboard` utility for extensions
+- Skill invocation messages are now collapsible in chat output, showing collapsed by default with skill name and expand hint
+- Header values in `models.json` now support environment variables and shell commands, matching `apiKey` resolution
+- Added HTTP proxy environment variable support for API requests
+- Added OpenRouter provider routing support for custom models via `openRouterRouting` compat field
+- Added `azure-openai-responses` provider support for Azure OpenAI Responses API.
+- Added changelog link to update notifications
+- Added `--verbose` CLI flag to override quietStartup setting
 - `markdown.codeBlockIndent` setting to customize code block indentation in rendered output
-- Extension package management with `indusagi install`, `indusagi remove`, `indusagi update`, and `indusagi list` commands ([#645](https://github.com/badlogic/indusagi-mono/issues/645))
-- Package filtering: selectively load resources from packages using object form in `packages` array ([#645](https://github.com/badlogic/indusagi-mono/issues/645))
-- Glob pattern support with minimatch in package filters, top-level settings arrays, and indusagi manifest (e.g., `"!funky.json"`, `"*.ts"`) ([#645](https://github.com/badlogic/indusagi-mono/issues/645))
-- `/reload` command to reload extensions, skills, prompts, and themes ([#645](https://github.com/badlogic/indusagi-mono/issues/645))
-- `indusagi config` command with TUI to enable/disable package and top-level resources via patterns ([#938](https://github.com/badlogic/indusagi-mono/issues/938))
-- CLI flags for `--skill`, `--prompt-template`, `--theme`, `--no-prompt-templates`, and `--no-themes` ([#645](https://github.com/badlogic/indusagi-mono/issues/645))
-- Package deduplication: if same package appears in global and project settings, project wins ([#645](https://github.com/badlogic/indusagi-mono/issues/645))
-- Unified collision reporting with `ResourceDiagnostic` type for all resource types ([#645](https://github.com/badlogic/indusagi-mono/issues/645))
+- Extension package management with `indusagi install`, `indusagi remove`, `indusagi update`, and `indusagi list` commands
+- Package filtering: selectively load resources from packages using object form in `packages` array
+- Glob pattern support with minimatch in package filters, top-level settings arrays, and indusagi manifest (e.g., `"!funky.json"`, `"*.ts"`)
+- `/reload` command to reload extensions, skills, prompts, and themes
+- `indusagi config` command with TUI to enable/disable package and top-level resources via patterns
+- CLI flags for `--skill`, `--prompt-template`, `--theme`, `--no-prompt-templates`, and `--no-themes`
+- Package deduplication: if same package appears in global and project settings, project wins
+- Unified collision reporting with `ResourceDiagnostic` type for all resource types
 - Show provider alongside the model in the footer if multiple providers are available
 - Custom provider support via `indusagi.registerProvider()` with `streamSimple` for custom API implementations
 - Added `custom-provider.ts` example extension demonstrating custom Anthropic provider with OAuth
 
 ### Changed
 
-- `/resume` picker sort toggle moved to `Ctrl+S` to free `Ctrl+R` for rename ([#863](https://github.com/badlogic/indusagi-mono/pull/863) by [@svkozak](https://github.com/svkozak))
-- HTML export: clicking a sidebar message now navigates to its newest leaf and scrolls to it, instead of truncating the branch ([#853](https://github.com/badlogic/indusagi-mono/pull/853) by [@mitsuhiko](https://github.com/mitsuhiko))
-- HTML export: active path is now visually highlighted with dimmed off-path nodes ([#929](https://github.com/badlogic/indusagi-mono/pull/929) by [@hewliyang](https://github.com/hewliyang))
+- `/resume` picker sort toggle moved to `Ctrl+S` to free `Ctrl+R` for rename
+- HTML export: clicking a sidebar message now navigates to its newest leaf and scrolls to it, instead of truncating the branch
+- HTML export: active path is now visually highlighted with dimmed off-path nodes
 - Azure OpenAI Responses provider now uses base URL configuration with deployment-aware model mapping and no longer includes service tier handling
-- `/reload` now re-renders the entire scrollback so updated extension components are visible immediately ([#928](https://github.com/badlogic/indusagi-mono/pull/928) by [@ferologics](https://github.com/ferologics))
-- Skill, prompt template, and theme discovery now use settings and CLI path arrays instead of legacy filters ([#645](https://github.com/badlogic/indusagi-mono/issues/645))
+- `/reload` now re-renders the entire scrollback so updated extension components are visible immediately
+- Skill, prompt template, and theme discovery now use settings and CLI path arrays instead of legacy filters
 
 ### Fixed
 
-- Extension `setWorkingMessage()` calls in `agent_start` handlers now work correctly; previously the message was silently ignored because the loading animation didn't exist yet ([#935](https://github.com/badlogic/indusagi-mono/issues/935))
+- Extension `setWorkingMessage()` calls in `agent_start` handlers now work correctly; previously the message was silently ignored because the loading animation didn't exist yet
 - Fixed package auto-discovery to respect loader rules, config overrides, and force-exclude patterns
-- Fixed /reload restoring the correct editor after reload ([#949](https://github.com/badlogic/indusagi-mono/pull/949) by [@Perlence](https://github.com/Perlence))
-- Fixed distributed themes breaking `/export` ([#946](https://github.com/badlogic/indusagi-mono/pull/946) by [@mitsuhiko](https://github.com/mitsuhiko))
+- Fixed /reload restoring the correct editor after reload
+- Fixed distributed themes breaking `/export`
 - Fixed startup hints to clarify thinking level selection and expanded thinking guidance
 - Fixed SDK initial model resolution to use `findInitialModel` and default to Claude Opus 4.5 for Anthropic models
 - Fixed no-models warning to include the `/model` instruction
 - Fixed authentication error messages to point to the authentication documentation
 - Fixed bash output hint lines to truncate to terminal width
-- Fixed custom editors to honor the `paddingX` setting ([#936](https://github.com/badlogic/indusagi-mono/pull/936) by [@Perlence](https://github.com/Perlence))
+- Fixed custom editors to honor the `paddingX` setting
 - Fixed system prompt tool list to show only built-in tools
 - Fixed package manager to check npm package versions before using cached copies
 - Fixed package manager to run `npm install` after cloning git repositories with a package.json
 - Fixed extension provider registrations to apply before model resolution
-- Fixed editor multi-line insertion handling and lastAction tracking ([#945](https://github.com/badlogic/indusagi-mono/pull/945) by [@Perlence](https://github.com/Perlence))
-- Fixed editor word wrapping to reserve a cursor column ([#934](https://github.com/badlogic/indusagi-mono/pull/934) by [@Perlence](https://github.com/Perlence))
-- Fixed editor word wrapping to use single-pass backtracking for whitespace handling ([#924](https://github.com/badlogic/indusagi-mono/pull/924) by [@Perlence](https://github.com/Perlence))
+- Fixed editor multi-line insertion handling and lastAction tracking
+- Fixed editor word wrapping to reserve a cursor column
+- Fixed editor word wrapping to use single-pass backtracking for whitespace handling
 - Fixed Kitty image ID allocation and cleanup to prevent image ID collisions
-- Fixed overlays staying centered after terminal resizes ([#950](https://github.com/badlogic/indusagi-mono/pull/950) by [@nicobailon](https://github.com/nicobailon))
+- Fixed overlays staying centered after terminal resizes
 - Fixed streaming dispatch to use the model api type instead of hardcoded API defaults
 - Fixed Google providers to default tool call arguments to an empty object when omitted
-- Fixed OpenAI Responses streaming to handle `arguments.done` events on OpenAI-compatible endpoints ([#917](https://github.com/badlogic/indusagi-mono/pull/917) by [@williballenthin](https://github.com/williballenthin))
+- Fixed OpenAI Responses streaming to handle `arguments.done` events on OpenAI-compatible endpoints
 - Fixed OpenAI Codex Responses tool strictness handling after the shared responses refactor
 - Fixed Azure OpenAI Responses streaming to guard deltas before content parts and correct metadata and handoff gating
-- Fixed OpenAI completions tool-result image batching after consecutive tool results ([#902](https://github.com/badlogic/indusagi-mono/pull/902) by [@terrorobe](https://github.com/terrorobe))
-- Off-by-one error in bash output "earlier lines" count caused by counting spacing newline as hidden content ([#921](https://github.com/badlogic/indusagi-mono/issues/921))
-- User package filters now layer on top of manifest filters instead of replacing them ([#645](https://github.com/badlogic/indusagi-mono/issues/645))
+- Fixed OpenAI completions tool-result image batching after consecutive tool results
+- Off-by-one error in bash output "earlier lines" count caused by counting spacing newline as hidden content
+- User package filters now layer on top of manifest filters instead of replacing them
 - Auto-retry now handles "terminated" errors from Codex API mid-stream failures
-- Follow-up queue (Alt+Enter) now sends full paste content instead of `[paste #N ...]` markers ([#912](https://github.com/badlogic/indusagi-mono/issues/912))
-- Fixed Alt-Up not restoring messages queued during compaction ([#923](https://github.com/badlogic/indusagi-mono/pull/923) by [@aliou](https://github.com/aliou))
-- Fixed session corruption when loading empty or invalid session files via `--session` flag ([#932](https://github.com/badlogic/indusagi-mono/issues/932) by [@armanddp](https://github.com/armanddp))
-- Fixed extension shortcuts not firing when extension also uses `setEditorComponent()` ([#947](https://github.com/badlogic/indusagi-mono/pull/947) by [@Perlence](https://github.com/Perlence))
-- Session "modified" time now uses last message timestamp instead of file mtime, so renaming doesn't reorder the recent list ([#863](https://github.com/badlogic/indusagi-mono/pull/863) by [@svkozak](https://github.com/svkozak))
+- Follow-up queue (Alt+Enter) now sends full paste content instead of `[paste #N ...]` markers
+- Fixed Alt-Up not restoring messages queued during compaction
+- Fixed session corruption when loading empty or invalid session files via `--session` flag
+- Fixed extension shortcuts not firing when extension also uses `setEditorComponent()`
+- Session "modified" time now uses last message timestamp instead of file mtime, so renaming doesn't reorder the recent list
 
 ## [0.1.13]
 

package/CREDITS.md

@@ -0,0 +1,19 @@
+# Credits
+
+The **indusagi coding agent** is an independent implementation, designed and written from scratch
+against a behavioral specification and the public API of the `indusagi` framework — not by copying
+source from any prior codebase. It reuses no third-party application source code.
+
+## indusagi framework
+
+The agent runs entirely on the **indusagi** framework (`file:../indus-rebuild`), which provides the
+LLM API abstraction, agent core, terminal-UI primitives, MCP client, and observability. The
+framework is itself an independent implementation and ships its own `CREDITS` / `NOTICE`.
+
+## Third-party runtime dependencies
+
+Standard open-source libraries used at runtime, each under its own license:
+`react`, `ink`, `chalk`, `strip-ansi`, `@sinclair/typebox`, `zod`, `marked`,
+`highlight.js`, `jiti`, `ulid`. Build/dev: `esbuild`, `typescript`, `vitest`.
+
+See `NOTICE` for the notice that must travel with redistributions.

package/NOTICE

@@ -0,0 +1,7 @@
+indusagi coding agent
+Copyright (c) 2026 indusagi
+
+This product is an independent implementation, designed and written from scratch.
+It reuses no third-party application source code.
+
+This agent runs on the indusagi framework, which ships its own NOTICE.

package/README.md

@@ -1,77 +1,79 @@
-# indusagi-coding-agent
+# indusagi coding agent
 
-A terminal-first coding agent with a small core and strong extensibility. Use it interactively, in scripts (print/JSON), over RPC, or as an SDK in your own apps.
+A terminal-first AI coding agent. Talk to it in your terminal, point it at a
+repo, and it reads, writes, runs, and reasons about your code. It runs entirely
+on the [`indusagi`](../indus-rebuild) framework — one dependency for the LLM API,
+agent loop, terminal UI, MCP client, and tracing.
 
-This package is inspired by the Pi Coding Agent approach to fast, terminal-native developer workflows.
+It is **built from scratch**: every module was written from a behavioral spec and the
+framework's public API, never by copying third-party application source. See
+[`CREDITS.md`](./CREDITS.md) and [`NOTICE`](./NOTICE).
 
-- CLI commands: `indusagi` and `indus`
-- Node.js >= 20
-- Extensible via extensions, skills, prompt templates, and themes
-
-If you want the all-in-one bundle (ai + agent + tui + webui + coding agent), use:
-
-- https://www.npmjs.com/package/indusagi
-
-Docs: https://www.indusagi.com
-
-## Install
-
-```bash
-npm install -g indusagi-coding-agent
 ```
-
-## Quick Start
-
-```bash
-indusagi
+indus                      # start an interactive session in the current repo
+indus "fix the failing test in src/auth"
+indus -p "summarise what changed on this branch"   # headless, prints result, exits
+indus --json               # line protocol for a driving parent process
 ```
 
-Authenticate using `/login` or set provider API keys. See `docs/providers.md` for details.
+(The bin is installed as both `indus` and `indusagi`.)
 
-Example (file-aware prompt):
+## Install & build
 
 ```bash
-indusagi @src/index.ts "Summarize this file"
+npm install
+npm run build          # esbuild bundle -> dist/entry.js  +  tsc d.ts -> dist/types
+npm test               # vitest
+npm run typecheck      # tsc --noEmit
+npm run lineage-scan   # fails if any external-source marker appears in non-test source
 ```
 
-## Modes
-
-- Interactive mode (default)
-- Print/JSON modes for scripting (`docs/json.md`)
-- RPC mode for process integration (`docs/rpc.md`)
-- SDK usage (`docs/sdk.md`)
-- Local Observe smoke testing against sibling `indusvx-screth` (`guides/OBSERVE_LOCAL_TESTING.md`)
-- Deep Observe validation harness/results (`guides/OBSERVE_DEEP_VALIDATION.md`)
-- Package-based local `indusvx-screth` Observe integration plan (`guides/INDUSVX_OBSERVE_FULL_INTEGRATION_REPORT.md`)
-
-## Customization
-
-- Extensions: `docs/extensions.md`
-- Hooks: `docs/hooks.md`
-- Skills: `docs/skills.md`
-- Subagents: `docs/subagents.md`
-- Prompt templates: `docs/prompt-templates.md`
-- Themes: `docs/themes.md`
-- Packages: `docs/packages.md`
-
-## Session Management
-
-- Session format: `docs/session.md`
-- Tree navigation: `docs/tree.md`
-- Compaction: `docs/compaction.md`
-
-## Configuration
-
-Settings can be global or project-specific. See `docs/settings.md`.
-
-- Keybindings: `docs/keybindings.md`
-- Custom models: `docs/models.md`
-- Custom providers: `docs/custom-provider.md`
+Requires **Node >= 20**. Authenticate with an API key — set `ANTHROPIC_API_KEY`
+(or another supported provider key) in the environment, or run `indus signin`.
+**API-key auth only; there is no OAuth path.**
+
+## Run modes
+
+| Invocation | Mode | What it does |
+|------------|------|--------------|
+| `indus` | interactive | Ink/React REPL — streaming replies, a live tool deck, slash-commands |
+| `indus -p "…"` / `--print` | print | One request, prints the final result, exits |
+| `indus --json` / `--rpc` | line protocol | Newline-delimited JSON for a parent process to drive |
+| `indus signin` / `signout` | credentials | Store / clear the API key in the local auth vault |
+
+`indus --help` prints the full flag grammar (generated from one flag table);
+`indus --version` prints the version.
+
+## Architecture
+
+The binary is `src/entry.ts`. Boot resolves the invocation, prepares the
+workspace, and selects a runner. Each subsystem is a self-contained module and is
+also exported as a namespace from `src/index.ts` for embedding and testing.
+
+| Module | Responsibility |
+|--------|----------------|
+| `boot` | argv → invocation, workspace prep, runner selection, upgrades |
+| `workspace` | per-project + global dirs, settings, session paths |
+| `launch` | flag grammar (`readInvocation` / `renderUsage`), `@file` attachments, credentials, model catalog & pickers |
+| `conductor` | the conversation loop — turns, tool invocation, fault/retry, branch/resume, compaction |
+| `window-budget` | token accounting + context-window compaction policy |
+| `capability-deck` | the tool registry (read/write/bash/glob/grep/fetch/search …) |
+| `runtime-bridge` | framework wiring — models, MCP, providers |
+| `addons` | loadable extensions: skills & subagents |
+| `console` | the interactive Ink/React surface |
+| `channels` | print + line-protocol headless surfaces |
+| `briefing` | system prompt / context assembly |
+| `transcript-export` | session persistence + HTML/markdown export |
+| `insight` | tracing (Trail / Probe / Signal), sinks, replay, secret redaction |
+| `kit` | leaf helpers (image sniff, managed-binary fetch, shell quoting) |
+
+## Clean-room posture
+
+`npm run lineage-scan` runs `scripts/lineage-scan.mjs`, which walks `src/` and
+exits non-zero if any non-test file carries an external-source marker. Test files are
+excluded by design — several of them assert the *absence* of those markers. The
+scan is part of every release check.
 
 ## License
 
-See `LICENSE` and `LICENSE-THIRD-PARTY.txt`.
-
-## Credits
-
-IndusAGI is built and maintained by **Varun Israni / IndusAGI Labs**, with modifications and Indian-context extensions on top of [pi-mono](https://github.com/badlogic/pi-mono) by Mario Zechner (MIT License).
+See [`NOTICE`](./NOTICE) and [`CREDITS.md`](./CREDITS.md).