loom-agent 1.2.36 → 1.3.2

package/CHANGELOG.md

@@ -4,6 +4,134 @@ All notable changes to **Loom Code** are documented here.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [Unreleased] — completion harness, specialist agents, headless browser, TUI refresh
+
+### Security
+- **All dependency advisories cleared — `npm audit` reports 0
+  vulnerabilities** (was 7: 4 critical, 1 high, 2 low):
+  - `@opentui/solid` / `@opentui/core` (+ all platform binaries)
+    0.5.3 → **0.5.17** — fixes the `@babel/core` arbitrary-file-read
+    advisory and the `solid-js`/`seroval` critical chain.
+  - `seroval` + `seroval-plugins` forced to **1.6.9** via npm `overrides`
+    (solid-js is peer-pinned to 1.9.12 by @opentui/solid; 1.6.9 is exactly
+    the seroval line solid 1.9.17 itself moved to — fixes the critical
+    `fromJSON()` thenable-assimilation + memory-exhaustion advisories).
+  - `shell-quote` **removed** — it was an unused direct dependency carrying
+    a critical `quote()` command-injection advisory.
+  - `diff` ^7 → **^9.0.0** (we only use `diffLines`, unchanged; 9.x ships
+    CJS exports) — fixes the parsePatch/applyPatch DoS advisory.
+  - `brace-expansion` re-resolved to **5.0.12** (transitive, via
+    `npm audit fix`) — fixes the DoS/recursion advisories.
+
+### Added
+- **Docker sandbox with a guided `/sandbox` wizard (`src/core/sandbox.js`,
+  `SandboxModal`).** `/sandbox` (or `/sandbox setup`) opens a three-step
+  modal: (1) Docker check — if missing, shows the platform install link with
+  an "open download page" action and remembers the pending install; (2) OS
+  pick — Alpine (~250 MB, apk), Debian Slim (~600 MB, apt) or Ubuntu
+  (~900 MB, apt); (3) live build with streamed logs. Setup pulls the chosen
+  `node:20-*` image, creates the single shared `loom-sandbox` container with
+  the project mounted at `/workspace`, installs essentials (git, bash, curl,
+  ripgrep, coreutils) plus a headless Chromium where offered (best-effort).
+  The container is global — every session and every agent routes commands
+  through it — and `ensureProjectMount()` re-creates it cheaply when the
+  active project changes. Isolation: project dir only, no host network, no
+  `--privileged`. The bash tool routes through `docker exec` when enabled;
+  `LOOM_SANDBOX=0` is a hard kill-switch. Saying "docker is ready" after
+  installing reopens the wizard at the OS step.
+- **Drive-to-completion harness (`src/core/session.js`).** When the model ends
+  a turn with todos still pending/in_progress (the "stops between tasks"
+  failure), the loop injects a continuation listing the unfinished items — up
+  to 5 nudges per turn, build mode only, only when the turn actually wrote
+  todos. Cancelled/completed items via todowrite stop the nudging cleanly.
+  Child subagent sessions inherit the same guard.
+- **Transient provider-error retry.** Network blips / 5xx / stream resets now
+  retry the model call twice (side-effect free) instead of killing the turn
+  mid-task.
+- **Specialist subagents (`src/core/agents.js`)**: `research` (multi-source
+  investigation, sourced report), `coder` (isolated implementation),
+  `reviewer` (severity-ranked code review), `tester` (reproduce → test →
+  green), `web` (headless-browser work). All non-delegating (`no task tool`).
+- **Main orchestrator prompt.** The `build` primary agent now carries an
+  orchestrator role prompt (todo-first, delegate-to-specialists, verify,
+  finish). Primary-agent prompts are actually wired into the system prompt now
+  (`Session._primaryBlock()`) — previously `build`/`plan`/`chat` prompts were
+  registry-only and never reached the model.
+- **`browser` tool (`src/tools/browser.js`).** Headless Chromium control via
+  Playwright: goto/click/fill/press/text/eval/links/screenshot/close. Engine:
+  bundled `playwright` if installed, else `playwright-core` + system
+  Chrome/Edge. The page singleton persists across calls. Permissions: passive
+  reads allow, interactive click/fill/press ask.
+
+### Fixed
+- **Agent loop no longer stops in the middle of work** (`src/core/session.js`
+  continuation guards — opencode/Claude-Code parity):
+  - **Truncation auto-continue.** `finish_reason=length` (output budget
+    exhausted — the #1 cause of mid-task stops with reasoning models, where
+    thinking eats max_tokens and the answer never streams) now continues
+    the turn with a "continue exactly from where it stopped" nudge instead
+    of dead-ending with a placeholder — up to 5 continuations per turn.
+    Empty truncated replies also drop the empty assistant row from history
+    (Anthropic 400s on empty assistant messages, which silently killed
+    subsequent calls).
+  - **Empty-reply nudges raised 1 → 3 per turn** (provider hiccups repeat).
+  - **Premature-wrap-up detection broadened.** The drive guard now also
+    fires when tools ran, todos exist, and the reply LOOKS unfinished
+    (short, or ends on a promise like "Now I will…") — catching models that
+    never call todowrite. Drive nudges raised 5 → 8 per turn. Leftover
+    todos are surfaced to the UI whenever the guard engaged.
+
+### Changed
+- **Slash popup decluttered.** The autocomplete popup and command palette
+  now show a short one-line description per command — argument syntax is no
+  longer appended (it lives in `/help` and the README table). Duplicate
+  entries were removed from the picker while their handlers stay callable:
+  `/model` → `/models`, `/thinking` + `/details` → `/settings`, `/rewind`
+  → `/restore` (40 → 36 entries). Every desc was shortened to ~2–35 chars
+  so rows fit on one clean line. README table regenerated from the real
+  list (it previously advertised commands that no longer exist).
+- **TUI design overhaul.** The splash leads with the full LOOM CODE wordmark
+  in solid terracotta over a separator rule and a pill-style status
+  row; the default "Loom Dark" (and Light) palettes got deeper surface
+  stepping so panels read without borders. Every selection surface — command
+  palette, slash/file popups, select modals, permission popup — now uses a
+  tinted active row with a `▸` marker; the command palette finally renders
+  each command's description; modals gained a title divider; toasts carry a
+  kind-colored status dot (● ok / ✖ error / ◆ info) and clip long text so
+  they never cover the chat. System notices sit on a tinted surface, the
+  assistant footer is brand-colored, markdown headings get an h1/h2/h3 color
+  hierarchy, the input placeholder color-codes /commands @file !shell, and
+  hard-coded reds now follow the theme's error color. Still grid-line-free in
+  the main view — color and spacing do the work, no box frames.
+- **Sidebar version now tracks `package.json`** (it was stuck at a hardcoded
+  v1.2.0 while the package moved on); splash and sidebar share one source.
+- **`task` tool description now lists every built-in subagent with its specialty.**
+- **Stop messages show the real state, not canned text.** Continuation nudges
+  now quote the model's ACTUAL last message plus the open todo list (instead
+  of one identical line every time); the empty-reply nudge reports the real
+  tool-call count; a build turn that ends with open todos returns them
+  (`resp.openTodos`) and the TUI appends "Stopped with N todo(s) still open: …"
+  with the actual items; the interrupt line reports kept chars + the
+  in-progress todo; the plan-complete line includes the planned step count;
+  "(no response)"/"(interrupted)" placeholders describe what happened.
+- **Sessions now live in per-session folders inside the project**
+  (claude-code/opencode style): `<project>/.loom/sessions/<id>/session.json`
+  (metadata) + `messages.jsonl` (one message per line, append/rewrite-safe).
+  Old flat `~/.loom/sessions/<id>.json` files stay readable and are migrated
+  into the project folder on the next save; the /sessions picker merges both.
+
+### Fixed
+- **Resuming a session 400'd the next turn** (`NVIDIA error 400: missing
+  field tool_call_id`). The resume path rebuilt the in-memory message list
+  from `{role, content, toolCalls}` only — dropping `toolCallId` — so the
+  provider payload carried a tool row with no id. Resume now preserves
+  `toolCallId` (and aliases legacy snake_case `tool_calls`/`tool_call_id`
+  on load); both providers also skip orphaned tool rows defensively instead
+  of failing the turn.
+- **"The model ended the turn without any text" now says why when it knows.**
+  `finish_reason` is captured from the stream; a truncated reply (reasoning
+  ate the output budget) reports that instead of a mystery placeholder.
+
 ## [1.2.36] — fix `loom web` / `loom acp` / `loom attach`
 
 ### Fixed

package/README.md

@@ -10,6 +10,7 @@
 [![npm version](https://img.shields.io/npm/v/loom-agent?style=flat&color=blue)](https://www.npmjs.com/package/loom-agent)
 [![License: MIT](https://img.shields.io/npm/l/loom-agent?style=flat&color=green)](LICENSE)
 [![Platform: Win/Mac/Linux](https://img.shields.io/badge/platform-Win--Mac--Linux-orange)](#)
+[![Website: loomcluster.in](https://img.shields.io/badge/website-loomcluster.in-success)](https://loomcluster.in/)
 
 ![Loom Code splash — connected to NVIDIA](docs/screenshot.png)
 
@@ -29,7 +30,8 @@ An AI-powered coding agent for the terminal with multi-provider support and a fu
 - Session memory, /undo, /redo, /compact, /reset, /fork
 - One-shot print mode: `loom -p "query"`
 - Editor integration via the Agent Client Protocol (ACP): `loom acp` (JSON-RPC over stdio) so Zed, JetBrains, and Neovim plugins can drive Loom as their coding agent
-- Browser interface via `loom web` — a zero-dependency Node HTTP server (chat in the browser, password auth, CORS) plus `loom attach` to share the same server from the terminal; optional mDNS advertising as `loom.local` via [bonjour-service](https://www.npmjs.com/package/bonjour-service)
+- OpenCode-style agent harness: main orchestrator agent delegates to specialist subagents (`research`, `coder`, `reviewer`, `tester`, `web`, `explore`, `scout`) via the `task` tool, and a drive-to-completion loop keeps working while todos are still open
+- Headless browser tool (`browser`) — navigate, click, fill, read the DOM, and screenshot real pages from the `web` agent
 - Usage & billing tracking per session + lifetime
 
 ## Prerequisites
@@ -49,7 +51,7 @@ An AI-powered coding agent for the terminal with multi-provider support and a fu
 
 Install from npm (global — installs the `loom` command):
 ```bash
-npm install -g loom-code
+npm install -g loom-agent
 ```
 
 Or run from source:
@@ -102,35 +104,8 @@ loom --version
 loom --help
 loom --basic                      # skip TUI, use line-mode REPL
 loom acp                          # ACP subprocess mode for editor integrations
-loom web                          # browser interface (HTTP server, opens browser)
-loom attach http://localhost:4096 # attach the terminal to a running loom web
 ```
 
-## Web
-
-Loom runs in your browser with `loom web` — a zero-dependency HTTP server that
-serves a single-page UI and drives the same core session loop as the TUI. Same
-providers/models, tools, MCP servers, and saved sessions; chat streams live in
-the browser, and a shared terminal client can attach to the same server.
-
-```bash
-loom web                           # 127.0.0.1, random port, opens the browser
-loom web --port 4096               # fixed port
-loom web --hostname 0.0.0.0        # reachable on the LAN
-loom web --mdns                    # advertise as loom.local (implies 0.0.0.0)
-loom web --mdns-domain proj.local  # custom mDNS domain
-loom web --cors https://example.com
-LOOM_SERVER_PASSWORD=secret loom web   # password-protect (user: LOOM_SERVER_USERNAME, default "loom")
-
-# Attach the terminal (shares the server's sessions/state):
-loom attach http://localhost:4096
-```
-
-Config-file equivalent (`~/.loom/config.json`): `{ "server": { "port": 4096,
-"hostname": "0.0.0.0", "mdns": true, "cors": ["https://example.com"] } }` — CLI
-flags take precedence. Full flags, the JSON API, and `loom attach` options are
-documented in **[docs/web.md](docs/web.md)**.
-
 ## Editor integration (ACP)
 
 Loom implements the [Agent Client Protocol (ACP)](https://agentclientprotocol.com)
@@ -153,44 +128,51 @@ Zed (add to `~/.config/zed/settings.json`, then Command Palette → `agent: new
 Full transport spec, JetBrains/Neovim configs, the protocol walkthrough, and a
 self-test client (`node scripts/acp-smoke.js`) live in **[docs/acp.md](docs/acp.md)**.
 
-## Slash Commands (35 total)
+## Slash Commands (36 total)
 
 | Command | Args | Description |
 |---------|------|-------------|
-| `/help` | — | Show all commands |
-| `/build` | — | Build mode — all tools |
-| `/plan` | — | Plan mode — read-only analysis |
+| `/help` | — | Show help |
+| `/agents` | — | List agents |
+| `/build` | — | Build mode — full tools |
+| `/plan` | — | Plan mode — read only |
 | `/chat` | — | Chat mode — no tools |
-| `/agents` | — | List primary agents and subagents |
-| `/connect` | `[provider]` | Add/connect a provider |
-| `/key` | — | Edit API key for current provider |
+| `/connect` | `[provider]` | Connect a provider |
+| `/key` | — | Edit API key |
 | `/baseurl` | `[provider] [url]` | Set provider base URL |
-| `/model` | `[model-id]` | Pick active model |
-| `/models` | — | List available models |
-| `/providers` | — | List supported providers |
-| `/status` | — | Show connection status |
-| `/usage` | — | Show token usage and billing |
-| `/new` | — | Start a new session |
+| `/models` | — | Model picker |
+| `/providers` | — | List providers |
+| `/status` | — | Connection status |
+| `/usage` | — | Token usage & billing |
+| `/budget` | `free\|cheap\|best\|auto` | Budget level |
+| `/new` | — | New session |
 | `/clear` | — | Clear the chat |
-| `/compact` | — | Compact conversation |
-| `/undo` | — | Undo last exchange |
-| `/redo` | — | Redo last undone exchange |
-| `/reset` | — | Reset the session |
-| `/settings` | — | Toggle details/sidebar/etc. |
+| `/restore` | — | Restore earlier state |
+| `/settings` | — | Settings — details, thinking, sidebar |
 | `/sessions` | — | Browse saved sessions |
-| `/share` | — | Export current session to JSON |
-| `/export` | — | Export to markdown |
-| `/thinking` | — | Toggle thinking visibility |
-| `/details` | — | Toggle tool detail visibility |
-| `/init` | — | Create LOOM.md |
-| `/memory` | — | Show memory files |
-| `/doctor` | — | Run diagnostics |
+| `/theme` | — | Switch UI theme |
+| `/graph` | — | Memory graph |
 | `/skills` | `install\|remove` | Manage skills |
 | `/mcp` | `add\|remove\|toggle` | Manage MCP servers |
-| `/debug` | — | Show debug info |
-| `/fork` | — | Fork conversation |
+| `/connectors` | `add\|remove\|toggle` | Manage connectors |
+| `/permissions` | `reset\|auto` | Permission rules |
+| `/subagents` | — | Subagent runs |
+| `/context` | — | Context window usage |
+| `/think` | `off\|low\|medium\|high` | Thinking budget |
+| `/approve` | — | Approve plan → Build |
+| `/tasks` | — | Background tasks |
+| `/share` | — | Export chat as HTML |
+| `/worktree` | `<name>` | New git worktree |
+| `/sandbox` | `setup\|status\|on\|off\|rm` | Docker sandbox |
+| `/style` | `[preset\|text]` | Output style preset |
+| `/vim` | — | Toggle vim editing |
+| `/remember` | `<fact>` | Save a fact to LOOM.md |
 | `/exit` | — | Quit Loom Code |
 
+Aliases still work when typed but are hidden from the picker to keep it
+clean: `/model` → `/models`, `/thinking` + `/details` → `/settings`,
+`/rewind` → `/restore`.
+
 ## Keybindings
 
 Every key is configurable from `~/.loom/tui.json` (`keybinds`, `leader`,

package/bin/loom-bun.js

@@ -74,7 +74,7 @@ process.title = "loom-code";
     const args = process.argv.slice(2);
     const coreMode = args.includes("--basic") || args.includes("-p") || args.includes("--print")
       || args.includes("--help") || args.includes("-h") || args.includes("--version") || args.includes("-v")
-      || ["acp", "web", "attach", "graph"].includes(args[0]);
+      || ["acp", "graph"].includes(args[0]);
     if (!coreMode) {
       await import("@opentui/solid/preload");
       await import("../src/tui-open.tsx");
@@ -82,19 +82,11 @@ process.title = "loom-code";
     }
     // Subcommands that must never reach the interactive CLI/TUI: cli.main()
     // has no handler for them and would fall through to launching the full
-    // screen app (`loom web` painted the splash instead of serving HTTP).
-    if (args[0] === "web") {
-      require("../src/web/web-server.js").main();
-      return;
-    }
+    // screen app instead of running the requested command.
     if (args[0] === "acp") {
       require("../src/acp/acp-server.js").main();
       return;
     }
-    if (args[0] === "attach") {
-      require("../src/web/attach.js").main();
-      return;
-    }
     const { main } = require("../src/core/cli.js");
     await main();
   } catch (err) {

package/bin/loom.js

@@ -24,16 +24,6 @@ process.on('unhandledRejection', (reason) => {
     require('../src/acp/acp-server').main();
     return;
   }
-  if (sub === 'web') {
-    // Browser interface: HTTP server on 127.0.0.1, opens the browser.
-    require('../src/web/web-server').main();
-    return;
-  }
-  if (sub === 'attach') {
-    // Terminal client for a running `loom web` server.
-    require('../src/web/attach').main();
-    return;
-  }
   try {
     await updateCheck();
     await main();

package/package.json

@@ -1,126 +1,126 @@
-{
-  "name": "loom-agent",
-  "version": "1.2.36",
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/toshalkumbhar8979-design/loomcode.git"
-  },
-  "homepage": "https://github.com/toshalkumbhar8979-design/loomcode#readme",
-  "bugs": {
-    "url": "https://github.com/toshalkumbhar8979-design/loomcode/issues"
-  },
-  "description": "Loom Code — AI-powered coding agent for the terminal. Multi-provider support including NVIDIA. OpenTUI interface.",
-  "main": "src/index.js",
-  "publishConfig": {
-    "access": "public",
-    "tag": "latest"
-  },
-  "bin": {
-    "loom": "bin/loom-bun.js",
-    "loom-tui": "bin/loom-tui.js"
-  },
-  "scripts": {
-    "start": "node src/index.js",
-    "dev": "node --watch src/index.js",
-    "setup": "node src/setup.js",
-    "test": "bun run src/tui/test-interactive.tsx && bun run test:unit && bun run lint:core",
-    "test:unit": "bun test src/core/agents.test.js src/core/hooks.test.js src/core/custom-commands.test.js src/core/background-tasks.test.js src/core/memory.test.js src/core/subagent-log.test.js src/core/session.test.js src/tools/index.test.js src/tools/security.test.js src/providers/providers.test.js src/providers/caching.test.js src/providers/caching-thinking.test.js src/providers/registry.test.js src/mcp/mcp-client.test.js src/mcp/mcp-manager.test.js src/core/session-store.test.js src/skills/skills-manager.test.js src/core/usage.test.js src/core/permissions.test.js src/core/format.test.js src/acp/acp-server.test.js src/web/web-server.test.js src/tui/keybinds.test.ts",
-    "lint:core": "node node_modules/typescript/bin/tsc -p tsconfig.core.json",
-    "smoke:acp": "node scripts/acp-smoke.js",
-    "tui": "bun bin/loom-tui.js",
-    "tui:win": "\"%USERPROFILE%\\..\\bun\\bin\\bun.exe\" run src/tui-open.tsx",
-    "prepublishOnly": "npm test",
-    "postinstall": "node scripts/postinstall.js",
-    "lint": "tsc --noEmit"
-  },
-  "dependencies": {
-    "@anthropic-ai/sdk": "^0.120.0",
-    "@opentui/core": "0.5.3",
-    "@opentui/solid": "0.5.3",
-    "@shikijs/themes": "4.4.3",
-    "bonjour-service": "^1.4.4",
-    "boxen": "^8.0.0",
-    "chalk": "^5.3.0",
-    "cli-spinners": "^3.2.0",
-    "commander": "^12.1.0",
-    "dayjs": "^1.11.0",
-    "diff": "^7.0.0",
-    "dotenv": "^16.4.0",
-    "glob": "^13.0.6",
-    "inquirer": "^12.1.0",
-    "openai": "^5.23.2",
-    "ora": "^8.0.0",
-    "shell-quote": "^1.8.1",
-    "solid-js": "1.9.12",
-    "strip-ansi": "^7.1.0",
-    "tiktoken": "^1.0.22",
-    "uuid": "^11.0.0",
-    "wrap-ansi": "^9.0.0"
-  },
-  "optionalDependencies": {
-    "@opentui/core-darwin-arm64": "0.5.3",
-    "@opentui/core-darwin-x64": "0.5.3",
-    "@opentui/core-linux-arm64": "0.5.3",
-    "@opentui/core-linux-x64": "0.5.3",
-    "@opentui/core-win32-x64": "0.5.3",
-    "@oven/bun-darwin-aarch64": "1.3.14",
-    "@oven/bun-darwin-x64": "1.3.14",
-    "@oven/bun-linux-aarch64": "1.3.14",
-    "@oven/bun-linux-x64": "1.3.14",
-    "@oven/bun-windows-aarch64": "1.3.14",
-    "@oven/bun-windows-x64": "1.3.14"
-  },
-  "overrides": {
-    "glob": "^13.0.6"
-  },
-  "devDependencies": {
-    "@types/bun": "^1.2.0",
-    "typescript": "^5.7.3"
-  },
-  "files": [
-    "bunfig.toml",
-    "tsconfig.json",
-    "bin/loom-bun.js",
-    "bin/loom.js",
-    "bin/loom-tui.js",
-    "src/**/*.js",
-    "src/**/*.tsx",
-    "src/**/*.ts",
-    "!src/**/test-*",
-    "!src/**/*.test.*",
-    "!src/test-loop.js",
-    "!src/test-tools.js",
-    "README.md",
-    "CHANGELOG.md",
-    "LICENSE",
-    ".env.example",
-    "LOOM.md",
-    "docs/acp.md",
-    "scripts/acp-smoke.js",
-    "scripts/postinstall.js",
-    "docs/web.md",
-    "src/web/index.html",
-    "src/web/graph-view.html"
-  ],
-  "keywords": [
-    "ai",
-    "cli",
-    "coding-agent",
-    "loom-code",
-    "anthropic",
-    "openai",
-    "nvidia",
-    "terminal",
-    "opentui"
-  ],
-  "engines": {
-    "node": ">=18.0.0",
-    "bun": ">=1.0.0"
-  },
-  "directories": {
-    "doc": "docs"
-  },
-  "author": "",
-  "license": "MIT",
-  "type": "commonjs"
-}
+{
+  "name": "loom-agent",
+  "version": "1.3.2",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/toshalkumbhar8979-design/loomcode.git"
+  },
+  "homepage": "https://github.com/toshalkumbhar8979-design/loomcode#readme",
+  "bugs": {
+    "url": "https://github.com/toshalkumbhar8979-design/loomcode/issues"
+  },
+  "description": "Loom Code — AI-powered coding agent for the terminal. Multi-provider support including NVIDIA. OpenTUI interface.",
+  "main": "src/index.js",
+  "publishConfig": {
+    "access": "public",
+    "tag": "latest"
+  },
+  "bin": {
+    "loom": "bin/loom-bun.js",
+    "loom-tui": "bin/loom-tui.js"
+  },
+  "scripts": {
+    "start": "node src/index.js",
+    "dev": "node --watch src/index.js",
+    "setup": "node src/setup.js",
+    "test": "bun run src/tui/test-interactive.tsx && bun run test:unit && bun run lint:core",
+    "test:unit": "bun test src/core/agents.test.js src/core/hooks.test.js src/core/custom-commands.test.js src/core/background-tasks.test.js src/core/memory.test.js src/core/subagent-log.test.js src/core/session.test.js src/core/sandbox.test.js src/tools/index.test.js src/tools/security.test.js src/providers/providers.test.js src/providers/caching.test.js src/providers/caching-thinking.test.js src/providers/registry.test.js src/mcp/mcp-client.test.js src/mcp/mcp-manager.test.js src/core/session-store.test.js src/skills/skills-manager.test.js src/core/usage.test.js src/core/permissions.test.js src/core/format.test.js src/acp/acp-server.test.js src/tui/keybinds.test.ts",
+    "lint:core": "node node_modules/typescript/bin/tsc -p tsconfig.core.json",
+    "smoke:acp": "node scripts/acp-smoke.js",
+    "tui": "bun bin/loom-tui.js",
+    "tui:win": "\"%USERPROFILE%\\..\\bun\\bin\\bun.exe\" run src/tui-open.tsx",
+    "prepublishOnly": "npm test",
+    "postinstall": "node scripts/postinstall.js",
+    "lint": "tsc --noEmit"
+  },
+  "dependencies": {
+    "@anthropic-ai/sdk": "^0.120.0",
+    "@opentui/core": "0.5.17",
+    "@opentui/solid": "0.5.17",
+    "@shikijs/themes": "4.4.3",
+    "@supabase/supabase-js": "^2.45.0",
+    "boxen": "^8.0.0",
+    "chalk": "^5.3.0",
+    "cli-spinners": "^3.2.0",
+    "commander": "^12.1.0",
+    "convex": "^1.14.0",
+    "dayjs": "^1.11.0",
+    "diff": "^9.0.0",
+    "dotenv": "^16.4.0",
+    "glob": "^13.0.6",
+    "inquirer": "^12.1.0",
+    "openai": "^5.23.2",
+    "ora": "^8.0.0",
+    "playwright-core": "^1.64.1",
+    "solid-js": "1.9.12",
+    "strip-ansi": "^7.1.0",
+    "tiktoken": "^1.0.22",
+    "uuid": "^11.0.0",
+    "wrap-ansi": "^9.0.0"
+  },
+  "optionalDependencies": {
+    "@opentui/core-darwin-arm64": "0.5.17",
+    "@opentui/core-darwin-x64": "0.5.17",
+    "@opentui/core-linux-arm64": "0.5.17",
+    "@opentui/core-linux-x64": "0.5.17",
+    "@opentui/core-win32-x64": "0.5.17",
+    "@oven/bun-darwin-aarch64": "1.3.14",
+    "@oven/bun-darwin-x64": "1.3.14",
+    "@oven/bun-linux-aarch64": "1.3.14",
+    "@oven/bun-linux-x64": "1.3.14",
+    "@oven/bun-windows-aarch64": "1.3.14",
+    "@oven/bun-windows-x64": "1.3.14"
+  },
+  "overrides": {
+    "glob": "^13.0.6",
+    "seroval": "1.6.9",
+    "seroval-plugins": "1.6.9"
+  },
+  "devDependencies": {
+    "@types/bun": "^1.2.0",
+    "typescript": "^5.7.3"
+  },
+  "files": [
+    "bunfig.toml",
+    "tsconfig.json",
+    "bin/loom-bun.js",
+    "bin/loom.js",
+    "bin/loom-tui.js",
+    "src/**/*.js",
+    "src/**/*.tsx",
+    "src/**/*.ts",
+    "!src/**/test-*",
+    "!src/**/*.test.*",
+    "!src/test-loop.js",
+    "!src/test-tools.js",
+    "README.md",
+    "CHANGELOG.md",
+    "LICENSE",
+    ".env.example",
+    "LOOM.md",
+    "docs/acp.md",
+    "scripts/acp-smoke.js",
+    "scripts/postinstall.js"
+  ],
+  "keywords": [
+    "ai",
+    "cli",
+    "coding-agent",
+    "loom-code",
+    "anthropic",
+    "openai",
+    "nvidia",
+    "terminal",
+    "opentui"
+  ],
+  "engines": {
+    "node": ">=18.0.0",
+    "bun": ">=1.0.0"
+  },
+  "directories": {
+    "doc": "docs"
+  },
+  "author": "",
+  "license": "MIT",
+  "type": "commonjs"
+}