jaitus 0.3.0

package/LICENSE

@@ -0,0 +1,32 @@
+Jaitus CLI — Proprietary Software Licence
+
+Copyright (c) 2026 Jaitus. All rights reserved.
+
+This software and its source code (the "Software") are the property of Jaitus and
+are licensed, not sold.
+
+You may install and run the Software, unmodified, only to access the Jaitus service
+with your own Jaitus account, subject to the Jaitus Terms of Service at
+https://www.jaitus.com/terms.
+
+You may not, except where applicable law expressly permits it despite this
+restriction: copy, modify, merge, publish, distribute, sublicense, sell or rent the
+Software or any part of it; create derivative works from it; use it, or any part of
+it, to build or provide a competing product or service; use it to access the Jaitus
+service other than through your own account; or remove or alter any notice in it.
+
+No other right or licence is granted, by implication or otherwise. This licence ends
+automatically if you breach it or if your Jaitus account is closed, and you must then
+stop using and delete the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED,
+INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A
+PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL JAITUS BE LIABLE FOR ANY
+CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR
+OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR ITS USE, TO THE
+EXTENT PERMITTED BY LAW.
+
+Third-party open-source components included with or installed alongside the
+Software (such as Ink and React) remain under their own licences.
+
+Contact: support@jaitus.com

package/README.md

@@ -0,0 +1,248 @@
+# jaitus
+
+A coding agent in your terminal. Sign in once in the browser and start working —
+there is no API key to create, copy or keep safe.
+
+```
+             ██╗ █████╗ ██╗████████╗██╗   ██╗███████╗
+  /\_/\      ██║██╔══██╗██║╚══██╔══╝██║   ██║██╔════╝
+ ( o.o )     ██║███████║██║   ██║   ██║   ██║███████╗
+  > ^ < ██   ██║██╔══██║██║   ██║   ██║   ██║╚════██║
+        ╚█████╔╝██║  ██║██║   ██║   ╚██████╔╝███████║
+         ╚════╝ ╚═╝  ╚═╝╚═╝   ╚═╝    ╚═════╝ ╚══════╝
+
+         a coding agent in your terminal
+```
+
+## Install
+
+```bash
+npm install -g jaitus     # then just `jaitus`
+npx jaitus                # or don't install anything
+```
+
+Node 20 or newer is enough for one-shot, piped, and interactive usage. The
+interactive terminal surface is built with Ink and ships as ordinary npm
+dependencies — no Bun, Rust, native runtime, or extra installer is required.
+
+Set `JAITUS_RENDERER=classic` if you need the legacy renderer temporarily.
+
+## Start
+
+Create an account at [jaitus.com](https://www.jaitus.com) — every new account gets free
+prompts to try it — then:
+
+```bash
+jaitus login              # opens your browser, nothing to copy
+cd your-project
+jaitus                    # start the interactive session surface
+```
+
+Or give it one task and let it finish:
+
+```bash
+jaitus "add a test for the date parser and run the suite"
+cat error.log | jaitus "why is this failing?"
+```
+
+## What it can do
+
+It reads your code, searches it, edits files and runs commands — tests, builds, git — and
+works from what it actually finds rather than from what it assumes. It asks before
+changing a file or running a command, showing you exactly what it is about to do.
+
+```
+  ● Edit src/parse.js
+    - return JSON.parse(x)
+    + try { return JSON.parse(x) } catch { return null }
+
+  [y] once   [a] always this session   [n] no ›
+```
+
+## Commands
+
+| | |
+|---|---|
+| `jaitus` | start a session in this directory |
+| `jaitus "<task>"` | run one task and exit |
+| `jaitus login` / `logout` | sign in through the browser / sign this computer out |
+| `jaitus whoami` | which account, which plan, this period's usage |
+| `jaitus usage` | plan allowance, requests and tokens used |
+| `jaitus sessions` | list saved sessions |
+| `jaitus mcp list` | list configured MCP servers |
+| `jaitus config` | show or change CLI settings |
+| `jaitus init` | create `JAITUS.md` and `.jaitusignore` here |
+| `jaitus doctor` | check everything that can stop this working |
+| `jaitus update` | is a newer version published |
+| `jaitus completion <shell>` | bash, zsh, fish or PowerShell completion |
+| `jaitus help <command>` | detail on one command |
+
+## In a session
+
+| | |
+|---|---|
+| `/help` | these commands |
+| `/model [id]` | show or change the model for this session |
+| `/cost` | tokens used so far this session |
+| `/status` | current model, mode, session, and context |
+| `/context` | inspect the current context |
+| `/compact [focus]` | summarize and free context |
+| `/skills` | list project workflows |
+| `/sessions` | list saved sessions |
+| `/resume <id>` | load a saved session |
+| `/rename <title>` | name this session |
+| `/hooks` | show lifecycle hooks |
+| `/tui [fullscreen\|default]` | switch renderer, relaunching with the conversation intact |
+| `/fork` | copy this conversation into a brand-new session |
+| `/theme [name]` | color theme: dark, light, daltonized, plain, auto |
+| `/scroll-speed [n]` | mouse-wheel speed, 0.25–10 |
+| `/agent <task>` | run an isolated read-only side task |
+| `/cwd` | which directory the agent is working in |
+| `/clear` | start the conversation over |
+| `/undo` | drop the last exchange |
+| `/exit` | leave |
+
+Arrow keys, word-delete and history all work — history is kept in `~/.jaitus/history`
+and survives across sessions. Ctrl-C clears the line (or copies the selection,
+or interrupts a running turn) but never exits — only `/exit` leaves.
+
+Enter sends in one press — Tab completes a `/` command or `@` file without
+sending, Esc dismisses the suggestion first. `Ctrl+J`, `Shift+Enter` and
+`\+Enter` insert a newline. Up/Down (or `Ctrl+P`/`Ctrl+N`) moves inside a
+multiline prompt first, then through history. `Ctrl+R` searches history,
+`Shift+Tab` cycles permission modes, `Ctrl+T` shows session activity, `Ctrl+G`
+edits the draft in `$VISUAL`/`$EDITOR`, `Ctrl+S` stashes/recalls the draft,
+`Ctrl+_` undoes, `Ctrl+Y` pastes the last deletion, `Alt+B`/`F`/`D` do word
+jumps/edits, `?` on an empty prompt lists shortcuts. Large pastes collapse to
+`[Pasted text #N]` chips (full text still sends), `Ctrl+V` attaches a clipboard
+image, `:name:` inserts emoji, `! cmd &` or `Ctrl+B` backgrounds a command.
+
+Scrolling stays inside the app (alternate screen): `PgUp` /
+`PgDn` half a screen, `Ctrl+Home` / `Ctrl+End` top / bottom, mouse wheel a few
+lines. Scrolling up pauses auto-follow and shows new-message count — `Ctrl+End`
+or scroll to the bottom resumes. `JAITUS_SCROLL_SPEED` (1–20)
+multiplies wheel distance.
+`Ctrl+O` opens the transcript viewer: `/` searches, `n` / `N` next / previous,
+`j` / `k` lines, `Ctrl+u` / `Ctrl+d` half page, `Ctrl+b` / `Ctrl+f` / `Space`
+full page, `{` / `}` previous / next prompt, `g` / `G` ends, `[` dumps the full
+conversation to native scrollback for `Cmd+F` / tmux copy mode, `v` opens it in
+`$VISUAL` / `$EDITOR`, `q` / `Esc` returns.
+
+Drag selects inside the session and auto-copies on release (double-click word,
+triple-click line, `Shift+arrows` extends, `Ctrl+C` copies when a selection is
+active, `Ctrl+Shift+C` copies manually when auto-copy is off). Clipboard order:
+tmux buffer, `pbcopy` / `wl-copy` / `xclip` / `xsel` / `clip` / PowerShell
+`Set-Clipboard`, then OSC 52 over SSH. `jaitus config copyOnSelect on|off`
+toggles auto-copy. `JAITUS_DISABLE_MOUSE=1`
+keeps flicker-free rendering with native selection; `JAITUS_DISABLE_MOUSE_CLICKS=1`
+keeps wheel scrolling only. Hold `Shift` (`Option` in iTerm2, `Fn` in
+Terminal.app) for one-off native selection.
+
+## Options
+
+| | |
+|---|---|
+| `--model <id>` | override the model for this run |
+| `--print, -p` | headless one-prompt mode |
+| `--continue, -c` | continue the latest session in this directory |
+| `--resume, -r <id>` | resume a saved session |
+| `--output-format text\|json\|stream-json` | structured output for automation |
+| `--max-turns <n>` | cap agentic turns |
+| `--permission-mode <mode>` | default, acceptEdits, plan or bypassPermissions |
+| `--system-prompt <text>` | replace the system prompt in print mode |
+| `--append-system-prompt <text>` | add controlled instructions |
+| `--yes` | do not ask before writing files or running commands |
+| `--cwd <dir>` | work somewhere other than here |
+| `--json` | machine-readable output, wherever a command reports something |
+| `--no-color` | plain text, no escape codes |
+| `--no-banner` | skip the logo |
+
+`--json` is on every command that reports rather than does, so `jaitus doctor --json`,
+`jaitus whoami --json` and `jaitus usage --json` can be read by a script instead of a
+person.
+
+## Telling it about your project
+
+`jaitus init` writes two files. Both are meant to be committed, so everyone working on
+the project gets the same behaviour rather than configuring their own copy.
+
+**`JAITUS.md`** — notes handed to the agent with every request: how to run the tests, the
+conventions, the things that are not obvious from reading the code. Keep it short and keep
+it true; a stale instruction here is worse than no instruction.
+
+**`.jaitusignore`** — paths the agent must not list, search, read or write. One pattern per
+line. A leading `/` anchors to the project root, a trailing `/` means a directory, `*`
+matches within a path segment and `**` across them.
+
+```
+.env
+.env.*
+*.pem
+secrets/
+```
+
+An ignored path is *refused*, not merely hidden — otherwise the agent cannot find
+`secrets/` by browsing but will happily open it the moment a filename turns up in a stack
+trace, which is the case the file was written for.
+
+## Where it keeps things
+
+`~/.jaitus/credentials.json` (0600), `~/.jaitus/settings.json`, `~/.jaitus/history`, and
+`~/.jaitus/sessions/`.
+
+It does **not** write to your shell profile or your machine environment, so nothing it does
+can change how another tool on your computer behaves.
+
+Environment variables it reads: `NO_COLOR`, `FORCE_COLOR`, `JAITUS_ASCII` (plain-ASCII logo),
+`JAITUS_NO_BANNER`, `JAITUS_DEBUG` (stack traces).
+Renderer: fullscreen on capable terminals, classic scrollback on legacy consoles
+or pipes. Force either way with `JAITUS_FULLSCREEN=1` / `JAITUS_NO_FULLSCREEN=1`
+(`/tui` switches mid-session), `JAITUS_16COLOR=1` for sixteen colors,
+`JAITUS_NO_ANIMATION=1` for reduced motion.
+
+## Extending it
+
+- `.jaitus/skills/<name>/SKILL.md` adds a workflow available as `/<name>`, in the open
+  Agent Skills format. Skills already in `.claude/skills` are picked up too.
+- `.jaitus/hooks.json` adds lifecycle commands. A non-zero `beforePrompt` hook blocks the
+  request; hook output is not echoed into the transcript.
+- `.mcp.json` configures local stdio MCP servers. Use `jaitus mcp list`, `jaitus mcp add`
+  and `jaitus mcp remove`; discovered tools are permission-gated.
+- `~/.jaitus/sessions` stores resumable conversations. Use `jaitus sessions`, `--continue`,
+  `--resume <id>`, or the matching slash commands.
+
+## Safety
+
+- Every path is resolved and checked to be inside the working directory, symlinks
+  included. The agent cannot read or write outside the project you started it in.
+- Writes and commands need permission. `--yes` skips the prompts and is deliberately not
+  the default; without a terminal to ask in, an action that needs permission is refused
+  rather than assumed.
+- Commands run with no TTY, so anything interactive exits instead of hanging forever.
+- The agent stops after 40 steps rather than looping on your bill.
+- `jaitus doctor` never prints your sign-in token — only whether you are signed in.
+
+## Signing in
+
+`jaitus login` is the loopback-redirect flow from RFC 8252 with PKCE, the same shape
+`gh auth login` uses. The CLI opens a random port on `127.0.0.1`, you approve in the
+browser, the browser carries back a single-use code, and the CLI exchanges that code over
+HTTPS for a short-lived sign-in token that renews itself. No token ever travels in a URL.
+
+Each computer you sign in on appears under **Devices** on the website, where you can sign
+it out. `jaitus logout` signs out this computer only.
+
+## Plans
+
+Jaitus is a subscription. Plans are listed at [jaitus.com](https://www.jaitus.com); each
+includes a monthly token allowance. `jaitus whoami` and `jaitus usage` show where you
+are in the current period.
+
+## Requirements
+
+Node 20 or newer.
+
+## Licence
+
+Proprietary. © 2026 Jaitus. All rights reserved. Use is governed by the Jaitus Terms of
+Service at [jaitus.com/terms](https://www.jaitus.com/terms). See `LICENSE`.

package/bin/jaitus.js

@@ -0,0 +1,60 @@
+#!/usr/bin/env node
+import main from '../src/index.js';
+
+// Node 20 is the floor: the CLI uses global fetch, and on 18 it exists but streaming
+// bodies behave differently enough to matter. Better a clear message than a confusing
+// failure halfway through a task.
+const major = Number(process.versions.node.split('.')[0]);
+if (major < 20) {
+  process.stderr.write(`jaitus needs Node 20 or newer (you have ${process.versions.node}).\n`);
+  process.exit(1);
+}
+
+// Ctrl-C should leave the terminal usable rather than mid-escape-sequence. Mouse
+// reporting has to be turned off here too: the terminal keeps sending reports after the
+// process is gone, and every click in the shell afterwards prints escape codes.
+const restoreTerminal = () => {
+  // Only to a real terminal. Written unconditionally, these codes end up in the output
+  // of every piped invocation — `jaitus models --json | jq` would be handed a JSON
+  // document with escape sequences glued to the end of it.
+  if (!process.stdout.isTTY) return;
+  try { process.stdout.write('\x1b[?1006l\x1b[?1002l\x1b[?1000l\x1b[?25h'); } catch { /* going away anyway */ }
+};
+process.on('SIGINT', () => {
+  restoreTerminal();
+  process.stdout.write('\n');
+  process.exit(130);
+});
+process.on('exit', restoreTerminal);
+
+/**
+ * Finish WITHOUT process.exit().
+ *
+ * Calling process.exit() after two fetches have shared a keep-alive connection crashes
+ * Node on Windows with `Assertion failed: !(handle->flags & UV_HANDLE_CLOSING)` — a
+ * libuv teardown race, not something this code does wrong, but it would print a crash
+ * after every successful run. Closing undici's dispatcher first does not help; only not
+ * calling exit() does.
+ *
+ * Setting exitCode and letting the loop drain is also measurably faster (295ms vs 406ms
+ * on the same work), because exit() was racing teardown rather than waiting for it. The
+ * dispatcher is still closed first so idle sockets are released immediately instead of
+ * holding the process open for their keep-alive timeout.
+ */
+async function finish(code) {
+  process.exitCode = code ?? 0;
+  try {
+    const dispatcher = globalThis[Symbol.for('undici.globalDispatcher.1')];
+    if (dispatcher?.close) await dispatcher.close();
+  } catch {
+    // Internal and version-dependent; if it is gone, natural drain still gets there.
+  }
+}
+
+main(process.argv.slice(2))
+  .then(finish)
+  .catch(async (err) => {
+    process.stderr.write(`\x1b[31m✗\x1b[39m ${err?.message || err}\n`);
+    if (process.env.JAITUS_DEBUG) process.stderr.write(`${err?.stack}\n`);
+    await finish(1);
+  });

package/package.json

@@ -0,0 +1,46 @@
+{
+  "name": "jaitus",
+  "version": "0.3.0",
+  "description": "Jaitus — a coding agent in your terminal.",
+  "type": "module",
+  "bin": {
+    "jaitus": "bin/jaitus.js"
+  },
+  "files": [
+    "bin",
+    "src",
+    "README.md",
+    "LICENSE"
+  ],
+  "engines": {
+    "node": ">=20"
+  },
+  "scripts": {
+    "test": "node tests/source-sanity.js && node tests/rules.js && node tests/run.js && node tests/commands.js && node tests/login.js && node tests/session.js && node tests/openUrl.js && node tests/ink-tui.js && node tests/tui-render.js",
+    "preview": "node scripts/tui-preview.js",
+    "prepublishOnly": "npm test"
+  },
+  "keywords": [
+    "jaitus",
+    "coding-agent",
+    "cli",
+    "terminal",
+    "ai"
+  ],
+  "homepage": "https://www.jaitus.com",
+  "bugs": {
+    "url": "https://www.jaitus.com",
+    "email": "support@jaitus.com"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "ink": "^7.1.1",
+    "react": "^19.3.0"
+  },
+  "license": "SEE LICENSE IN LICENSE",
+  "devDependencies": {
+    "acorn": "^8.18.0"
+  }
+}