scalix 1.4.0 → 1.5.0

package/dist/providers/openai.js

@@ -0,0 +1,149 @@
+// OpenAI-compatible endpoint adapter (BYOK).
+//
+// Speaks the standard OpenAI wire — the same request/response dialect the
+// agent already produces/consumes — against any server that hosts it:
+// OpenAI, OpenRouter, Ollama, LM Studio, Together, vLLM, LiteLLM, ...
+// The only differences from the Scalix client are URL composition
+// ({root}/chat/completions instead of the gateway's /v1/ai nest) and
+// dropping the Scalix-only `thinking_level` field, which strict servers
+// (OpenAI itself) reject as an unrecognized argument.
+import { ScalixClient } from '../api-client.js';
+import { WEB_DEFAULTS } from '../constants.js';
+/**
+ * Normalize a user-supplied OpenAI-compatible base URL to the endpoint root
+ * that `/chat/completions` and `/models` append to. Accepts both conventions:
+ *   https://api.openai.com/v1      → https://api.openai.com/v1
+ *   https://openrouter.ai/api/v1   → https://openrouter.ai/api/v1
+ *   http://localhost:11434         → http://localhost:11434/v1
+ *   http://localhost:1234/         → http://localhost:1234/v1
+ * A versioned path segment anywhere (v1, v2, ...) is treated as already-rooted.
+ */
+export function openaiEndpointRoot(baseUrl) {
+    const trimmed = baseUrl.replace(/\/+$/, '');
+    try {
+        const u = new URL(trimmed);
+        if (/\/v\d+($|\/)/.test(u.pathname))
+            return trimmed;
+    }
+    catch {
+        // Not parseable as a URL — leave composition to fetch to surface the error.
+        return trimmed;
+    }
+    return `${trimmed}/v1`;
+}
+export class OpenAICompatClient extends ScalixClient {
+    chatUrl() {
+        return `${openaiEndpointRoot(this.baseURL)}/chat/completions`;
+    }
+    modelsUrl() {
+        return openaiModelsUrl(this.baseURL);
+    }
+    /**
+     * The Scalix output ceiling is a property of the Scalix platform, so it must
+     * not be imposed on — or inferred from — someone else's endpoint. The agent
+     * already sends BYOK a max_tokens derived from the user's own model spec (or
+     * none at all), and a third-party server that rejects that value is telling
+     * the user their configuration is wrong: surface it instead of quietly
+     * retrying at a Scalix-shaped number that means nothing here.
+     */
+    canLowerMaxTokens() {
+        return false;
+    }
+    // Deliberately does NOT delegate to super: the base implementation clamps
+    // max_tokens to the Scalix ceiling, which is not this endpoint's business.
+    prepareRequest(req) {
+        let out = req;
+        // `thinking_level` is a Scalix extension; strict OpenAI-compatible servers
+        // 400 on unrecognized arguments. Reasoning output isn't consumed by the
+        // agent today, so dropping it is lossless (spec §3.8).
+        if (out.thinking_level !== undefined) {
+            const { thinking_level: _drop, ...rest } = out;
+            out = rest;
+        }
+        // An OpenAI-compatible server sends a usage chunk on a stream only when it
+        // is asked for. Without this a whole BYOK session streams with no token
+        // figures at all: the status bar, /cost and the context meter all stay on
+        // zero, and the context meter is what tells the user compression is near.
+        // (The Scalix gateway emits a final usage chunk unconditionally, so its
+        // own client has no need of the field.) If the endpoint turns out not to
+        // know `stream_options`, the base client drops it after the first 400 and
+        // sets this flag.
+        if (out.stream && out.stream_options === undefined && !this.streamUsageUnsupported) {
+            out = { ...out, stream_options: { include_usage: true } };
+        }
+        return out;
+    }
+}
+/** The /models URL for an OpenAI-compatible endpoint (OpenAI list shape). */
+export function openaiModelsUrl(baseUrl) {
+    return `${openaiEndpointRoot(baseUrl)}/models`;
+}
+// Everyone agrees on `id` and nobody agrees on the context window: OpenRouter
+// sends context_length, vLLM max_model_len, LM Studio max_context_length,
+// Scalix context_window, and OpenAI itself sends none at all. Read whichever
+// is there; a model that reports nothing keeps contextWindow undefined rather
+// than inheriting someone else's number.
+const CONTEXT_WINDOW_KEYS = ['context_length', 'max_model_len', 'max_context_length', 'context_window'];
+function reportedContextWindow(model) {
+    const top = model.top_provider;
+    for (const source of [model, top]) {
+        if (!source)
+            continue;
+        for (const key of CONTEXT_WINDOW_KEYS) {
+            const v = source[key];
+            if (typeof v === 'number' && Number.isFinite(v) && v > 0)
+                return Math.floor(v);
+        }
+    }
+    return undefined;
+}
+/**
+ * List the models a BYOK endpoint actually serves.
+ *
+ * Without this the setup wizard can only tell the user to go read
+ * `GET /v1/models` themselves and type the ids back in, and one typo produces a
+ * 404 on the first turn with nothing to suggest the id was the problem.
+ *
+ * Deliberately does not touch the model-spec registry: on the Scalix path a
+ * reported spec is the platform's own number, but a third-party endpoint that
+ * reports a context window and no output ceiling would have one invented for
+ * it here, and inventing a ceiling for someone else's model is how you get
+ * rejected requests. The window is returned for the wizard to show and is
+ * never combined with a default.
+ *
+ * Returns [] for anything that isn't a usable answer — this only ever feeds a
+ * picker that the user can bypass by typing an id.
+ */
+export async function fetchByokModels(baseUrl, apiKey) {
+    if (!baseUrl)
+        return [];
+    try {
+        const headers = {};
+        // Ollama and LM Studio serve /models unauthenticated; sending an empty
+        // bearer to an endpoint that does check is a 401 for no reason.
+        if (apiKey)
+            headers['Authorization'] = `Bearer ${apiKey}`;
+        const res = await fetch(openaiModelsUrl(baseUrl), {
+            headers,
+            signal: AbortSignal.timeout(WEB_DEFAULTS.apiFetchTimeoutMs),
+        });
+        if (!res.ok)
+            return [];
+        const body = await res.json();
+        if (!Array.isArray(body.data))
+            return [];
+        const out = [];
+        const seen = new Set();
+        for (const entry of body.data) {
+            const m = entry;
+            if (typeof m?.id !== 'string' || !m.id || seen.has(m.id))
+                continue;
+            seen.add(m.id);
+            out.push({ id: m.id, contextWindow: reportedContextWindow(m) });
+        }
+        return out;
+    }
+    catch {
+        return [];
+    }
+}

package/dist/settings.js

@@ -1,8 +1,9 @@
 import fs from 'node:fs/promises';
 import path from 'node:path';
 import { setSecurityConfig, setScopedPermissionRules } from './sandbox.js';
-import { DEFAULT_BASE_URL, DEFAULT_MODELS, AGENT_DEFAULTS, CONTEXT_DEFAULTS, WEB_DEFAULTS, TOOL_DEFAULTS, SUB_AGENT_DEFAULTS, MULTI_AGENT_DEFAULTS, USER_CONFIG_DIR, registerUserModels, setNetworkSecurityOverrides, } from './constants.js';
+import { DEFAULT_BASE_URL, DEFAULT_MODELS, AGENT_DEFAULTS, CONTEXT_DEFAULTS, WEB_DEFAULTS, TOOL_DEFAULTS, SUB_AGENT_DEFAULTS, MULTI_AGENT_DEFAULTS, USER_CONFIG_DIR, registerUserModels, setNetworkSecurityOverrides, normalizeModelId, } from './constants.js';
 import { getApiKeyFromKeychain, setApiKeyInKeychain, isKeychainAvailable } from './keychain.js';
+import { isProviderId } from './providers/index.js';
 import { isWorkspaceTrusted } from './workspace-trust.js';
 function getConfigDir() {
     return path.join(process.env.HOME || process.env.USERPROFILE || '.', USER_CONFIG_DIR);
@@ -77,7 +78,7 @@ function validateConfig(parsed) {
     if (typeof parsed.baseUrl === 'string' && parsed.baseUrl.length > 0)
         safe.baseUrl = parsed.baseUrl;
     if (Array.isArray(parsed.models) && parsed.models.every((m) => typeof m === 'string')) {
-        safe.models = parsed.models;
+        safe.models = parsed.models.map(normalizeModelId);
     }
     if (typeof parsed.permissionMode === 'string' && ['plan', 'default', 'auto', 'yolo'].includes(parsed.permissionMode)) {
         safe.permissionMode = parsed.permissionMode;
@@ -160,6 +161,23 @@ function validateConfig(parsed) {
     if (typeof parsed.disableUpdateCheck === 'boolean') {
         safe.disableUpdateCheck = parsed.disableUpdateCheck;
     }
+    // BYOK (validateConfig drops unknown keys, so these MUST be whitelisted here
+    // or they vanish on the next saveConfig — spec §4 migration gotcha #1).
+    if (isProviderId(parsed.provider)) {
+        safe.provider = parsed.provider;
+    }
+    if (parsed.providers && typeof parsed.providers === 'object' && !Array.isArray(parsed.providers)) {
+        const po = parsed.providers.openai;
+        if (po && typeof po === 'object' && !Array.isArray(po)) {
+            const creds = {};
+            if (typeof po.apiKey === 'string')
+                creds.apiKey = po.apiKey;
+            if (typeof po.baseUrl === 'string' && po.baseUrl.length > 0)
+                creds.baseUrl = po.baseUrl;
+            if (Object.keys(creds).length > 0)
+                safe.providers = { openai: creds };
+        }
+    }
     return safe;
 }
 function isStringArray(val) {
@@ -339,6 +357,12 @@ export async function loadConfig() {
             if (keychainKey)
                 config.apiKey = keychainKey;
         }
+        // Per-provider keychain slot (BYOK): openai key lives under its own account.
+        if (config.providers?.openai && !config.providers.openai.apiKey) {
+            const k = await getApiKeyFromKeychain(OPENAI_KEYCHAIN_ACCOUNT).catch(() => null);
+            if (k)
+                config.providers.openai.apiKey = k;
+        }
         // Apply local overrides (project-level, gitignored)
         config = await loadLocalOverrides(config);
         // Apply managed/organization settings (enterprise policy)
@@ -365,16 +389,70 @@ export async function loadConfig() {
 }
 export async function saveConfig(config) {
     await ensureDir();
-    // Store API key in keychain if available, strip from config file
+    // Store API keys in keychain if available, strip from config file. The
+    // per-provider secret gets the same blanking treatment as the top-level key
+    // (spec §4: new creds must never persist plaintext when a keychain exists).
     const configToWrite = { ...config };
-    if (config.apiKey && await isKeychainAvailable()) {
-        const stored = await setApiKeyInKeychain(config.apiKey).catch(() => false);
-        if (stored) {
-            configToWrite.apiKey = '';
+    let plaintextSecret = false;
+    if (await isKeychainAvailable()) {
+        if (config.apiKey) {
+            const stored = await setApiKeyInKeychain(config.apiKey).catch(() => false);
+            if (stored)
+                configToWrite.apiKey = '';
+            else
+                plaintextSecret = true;
+        }
+        if (config.providers?.openai?.apiKey) {
+            const stored = await setApiKeyInKeychain(config.providers.openai.apiKey, OPENAI_KEYCHAIN_ACCOUNT).catch(() => false);
+            if (stored) {
+                configToWrite.providers = {
+                    ...configToWrite.providers,
+                    openai: { ...configToWrite.providers.openai, apiKey: '' },
+                };
+            }
+            else {
+                plaintextSecret = true;
+            }
         }
     }
     await fs.writeFile(getConfigFile(), JSON.stringify(configToWrite, null, 2), { encoding: 'utf-8', mode: 0o600 });
+    return { plaintextSecret };
 }
 export function isConfigured(config) {
-    return config.apiKey.length > 0 && config.models.length > 0;
+    const active = resolveActiveProvider(config);
+    if (active.provider === 'scalix') {
+        return config.apiKey.length > 0 && config.models.length > 0;
+    }
+    return active.apiKey.length > 0 && active.baseUrl.length > 0 && config.models.length > 0;
+}
+// ─── BYOK provider resolution ───
+export const OPENAI_KEYCHAIN_ACCOUNT = 'api-key-openai';
+/**
+ * Resolve which provider + credentials this session runs on.
+ *
+ * Precedence (mirrors the rest of config): env → config. `SCALIX_PROVIDER`
+ * selects the provider; for `openai`, `OPENAI_API_KEY` / `OPENAI_BASE_URL`
+ * override `providers.openai`. Scalix stays the zero-config default and its
+ * path is byte-identical to the pre-BYOK behavior. There is NO default
+ * third-party URL — an openai selection without a baseUrl resolves with an
+ * empty one and the caller surfaces the configuration error.
+ */
+export function resolveActiveProvider(config, env = process.env) {
+    const envProvider = env.SCALIX_PROVIDER?.trim().toLowerCase();
+    const provider = isProviderId(envProvider)
+        ? envProvider
+        : (config.provider ?? 'scalix');
+    if (provider === 'openai') {
+        const creds = config.providers?.openai ?? {};
+        return {
+            provider,
+            baseUrl: env.OPENAI_BASE_URL?.trim() || creds.baseUrl || '',
+            apiKey: env.OPENAI_API_KEY?.trim() || creds.apiKey || '',
+        };
+    }
+    return {
+        provider: 'scalix',
+        baseUrl: env.SCALIX_BASE_URL?.trim() || config.baseUrl,
+        apiKey: env.SCALIX_API_KEY?.trim() || config.apiKey,
+    };
 }

package/dist/slash-commands.js

@@ -0,0 +1,148 @@
+/**
+ * The slash-command catalog, in the two shapes the TUI needs it.
+ *
+ * These used to be two array literals a thousand lines apart inside cli.tsx and
+ * they had drifted: /update was reachable but absent from the typeahead, while
+ * /fork, /permissions, /resume and /skills were in the typeahead but missing
+ * from /help. Keeping both here lets slash-commands.test.ts assert they stay in
+ * agreement, so a command added to one is never silently missing from the other.
+ */
+/** Every built-in command, as offered by the "/" typeahead. */
+export const SLASH_COMMANDS = [
+    { cmd: '/help', desc: 'Show all commands' },
+    { cmd: '/clear', desc: 'Reset conversation' },
+    { cmd: '/models', desc: 'List active models' },
+    { cmd: '/model', desc: 'Switch model' },
+    { cmd: '/mode', desc: 'Permission mode (plan/default/auto/yolo)' },
+    { cmd: '/thinking', desc: 'Thinking mode (off/low/medium/high)' },
+    { cmd: '/plan', desc: 'Enter plan mode (read-only)' },
+    { cmd: '/compact', desc: 'Compress conversation context' },
+    { cmd: '/context', desc: 'Show context usage & token count' },
+    { cmd: '/cost', desc: 'Show token usage & cost' },
+    { cmd: '/diff', desc: 'Show uncommitted changes' },
+    { cmd: '/copy', desc: 'Copy last response to clipboard' },
+    { cmd: '/save', desc: 'Save current session' },
+    { cmd: '/load', desc: 'Resume a saved session' },
+    { cmd: '/resume', desc: 'Resume from crash recovery or saved session' },
+    { cmd: '/fork', desc: 'Fork conversation from a point in history' },
+    { cmd: '/export', desc: 'Export conversation as text' },
+    { cmd: '/index', desc: 'Scan & index project files' },
+    { cmd: '/init', desc: 'Initialize project config (SCALIX.md)' },
+    { cmd: '/git', desc: 'Show git context' },
+    { cmd: '/memory', desc: 'Show project memory' },
+    { cmd: '/remember', desc: 'Save a note about this project' },
+    { cmd: '/replay', desc: 'Show session timeline' },
+    { cmd: '/plugins', desc: 'Show loaded plugins' },
+    { cmd: '/trust', desc: 'Trust this workspace (load project plugins/hooks/rules)' },
+    { cmd: '/router', desc: 'Show model routing status' },
+    { cmd: '/status', desc: 'Version, model & connection info' },
+    { cmd: '/update', desc: 'Check for and install updates' },
+    { cmd: '/doctor', desc: 'Diagnose installation' },
+    { cmd: '/mcp', desc: 'Add MCP server' },
+    { cmd: '/cloud', desc: 'Scalix Cloud status, platform tools & refresh' },
+    { cmd: '/login', desc: 'Link your Scalix account (API key)' },
+    { cmd: '/setup', desc: 'Reconfigure API key, URL & models' },
+    { cmd: '/settings', desc: 'View & configure limits' },
+    { cmd: '/permissions', desc: 'View permission rules & recent denials' },
+    { cmd: '/shortcuts', desc: 'Keyboard shortcuts' },
+    { cmd: '/hooks', desc: 'Show lifecycle hooks' },
+    { cmd: '/commands', desc: 'Show custom commands' },
+    { cmd: '/skills', desc: 'List available skills' },
+    { cmd: '/delegate', desc: 'Run task with sub-agent' },
+    { cmd: '/agents', desc: 'Show active agents & usage' },
+    { cmd: '/checkpoint', desc: 'Create git checkpoint' },
+    { cmd: '/undo', desc: 'Undo last checkpoint' },
+    { cmd: '/checkpoints', desc: 'List recent checkpoints' },
+    { cmd: '/commit', desc: 'Auto-generate commit message & commit' },
+    { cmd: '/review', desc: 'AI code review of current changes' },
+    { cmd: '/watch', desc: 'Run command, auto-fix on failure' },
+    { cmd: '/create', desc: 'Scaffold a new project' },
+    { cmd: '/worktree', desc: 'Manage git worktrees for isolated work' },
+    { cmd: '/plugin', desc: 'Install/enable/disable/uninstall plugins' },
+    { cmd: '/notify', desc: 'Test terminal notification' },
+    { cmd: '/exit', desc: 'Save & exit' },
+];
+/** Grouped, arg-annotated rendering of the same catalog, as printed by /help. */
+export const HELP_LINES = [
+    'Session & Navigation:',
+    '  /help         \u2014 show commands',
+    '  /shortcuts    \u2014 keyboard shortcuts',
+    '  /clear        \u2014 reset conversation',
+    '  /save [name]  \u2014 save current session',
+    '  /load         \u2014 resume a saved session',
+    '  /resume       \u2014 resume from crash recovery or saved session',
+    '  /fork         \u2014 fork conversation from a point in history',
+    '  /export [f]   \u2014 export conversation as text',
+    '  /exit         \u2014 save & exit',
+    '',
+    'Model & Mode:',
+    '  /models       \u2014 list active models',
+    '  /model        \u2014 switch model',
+    '  /mode [m]     \u2014 permission mode (plan/default/auto/yolo)',
+    '  /thinking [m] \u2014 thinking mode (off/low/medium/high)',
+    '  /plan         \u2014 enter plan mode (read-only)',
+    '',
+    'Context & Cost:',
+    '  /compact      \u2014 compress conversation context',
+    '  /context      \u2014 show context usage & token count',
+    '  /cost         \u2014 show token usage & cost',
+    '',
+    'Code & Git:',
+    '  /diff         \u2014 show uncommitted changes',
+    '  /commit       \u2014 auto-generate commit message & commit',
+    '  /review       \u2014 AI code review of current changes',
+    '  /checkpoint   \u2014 create git checkpoint',
+    '  /undo         \u2014 undo last checkpoint',
+    '  /checkpoints  \u2014 list recent checkpoints',
+    '  /worktree     \u2014 manage git worktrees (list/create/remove/cleanup)',
+    '  /git          \u2014 show git context',
+    '',
+    'Project:',
+    '  /init         \u2014 initialize project config (SCALIX.md)',
+    '  /index        \u2014 scan & index project files',
+    '  /memory       \u2014 show project memory',
+    '  /remember <n> \u2014 save a note about this project',
+    '  /watch <cmd>  \u2014 run command, auto-fix on failure',
+    '  /create <d>   \u2014 scaffold a new project',
+    '  /delegate <t> \u2014 run task with sub-agent',
+    '  /agents       \u2014 show active agents & usage',
+    '',
+    'Tools & Config:',
+    '  /copy         \u2014 copy last response to clipboard',
+    '  /cloud        \u2014 Scalix Cloud status (/cloud tools, /cloud refresh)',
+    '  /login        \u2014 link your Scalix account (API key)',
+    '  /status       \u2014 show version, model & connection info',
+    '  /update       \u2014 check for and install updates',
+    '  /doctor       \u2014 diagnose installation',
+    '  /settings     \u2014 view & configure limits',
+    '  /permissions  \u2014 view permission rules & recent denials',
+    '  /skills       \u2014 list available skills',
+    '  /setup        \u2014 reconfigure API key, URL & models',
+    '  /mcp <l> <u>  \u2014 add MCP server',
+    '  /plugins      \u2014 show loaded plugins',
+    '  /plugin       \u2014 install/enable/disable/uninstall plugins',
+    '  /trust        \u2014 trust workspace (load project plugins/hooks/rules)',
+    '  /notify       \u2014 test terminal notification',
+    '  /router       \u2014 show model routing status',
+    '  /replay       \u2014 show session timeline',
+    '  /hooks        \u2014 show lifecycle hooks',
+    '  /commands     \u2014 show custom commands',
+    '',
+    'Input modes:',
+    '  !<cmd>        \u2014 run shell command (e.g. !ls -la)',
+    '  text\\         \u2014 multiline input (end with \\ to continue)',
+];
+/**
+ * Pull the command tokens out of the /help text — the leading "/word" of any
+ * indented entry line. Section headers and the "Input modes" rows (!<cmd>,
+ * text\\) have no leading slash and are skipped.
+ */
+export function helpCommands(lines = HELP_LINES) {
+    const found = [];
+    for (const line of lines) {
+        const m = /^ {2}(\/[a-z-]+)/.exec(line);
+        if (m)
+            found.push(m[1]);
+    }
+    return found;
+}

package/dist/sub-agent.js

@@ -67,6 +67,7 @@ export async function spawnSubAgent(parentConfig, prompt, options = {}) {
     const subAgent = createAgent({
         apiKey: parentConfig.apiKey,
         baseUrl: parentConfig.baseUrl,
+        provider: parentConfig.provider,
         model,
         instructions: options.instructions || 'You are a focused research assistant. Be concise and factual. Respond in under 500 words.',
         tools,

package/package.json

@@ -1,11 +1,17 @@
 {
   "name": "scalix",
-  "version": "1.4.0",
+  "version": "1.5.0",
   "description": "AI coding agent for the terminal — edit code, run commands, and build with Scalix",
   "main": "dist/headless.js",
   "bin": {
     "scalix": "./bin/scalix.js"
   },
+  "files": [
+    "dist",
+    "bin",
+    "CHANGELOG.md",
+    ".env.example"
+  ],
   "scripts": {
     "start": "tsx src/cli.tsx",
     "start:headless": "tsx src/headless.ts",
@@ -19,7 +25,11 @@
     "test:e2e": "vitest run --config vitest.config.e2e.ts",
     "check": "npm run typecheck && npm run lint && npm run test",
     "prepublishOnly": "npm run build",
-    "release": "npm run build && node scripts/build-release.js"
+    "release": "npm run build && node scripts/build-release.js",
+    "bench": "tsx bench/src/main.ts",
+    "bench:live": "tsx bench/src/main.ts --live",
+    "typecheck:bench": "tsc --noEmit -p bench/tsconfig.json",
+    "bench:smoke-live": "tsx bench/src/smoke-live.ts"
   },
   "keywords": [
     "ai",
@@ -32,13 +42,9 @@
   ],
   "author": "Scalix World Private Limited",
   "license": "SEE LICENSE IN LICENSE",
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/scalixworld/scalix-coder.git"
-  },
-  "homepage": "https://scalix.world",
+  "homepage": "https://docs.scalix.world/coder",
   "bugs": {
-    "url": "https://github.com/scalixworld/scalix-coder/issues"
+    "email": "coder@scalix.world"
   },
   "engines": {
     "node": ">=18"

package/PARITY-PLAN.md

@@ -1,116 +0,0 @@
-# Scalix Coder — Claude Code Parity Implementation Plan
-
-**Status:** In Progress
-**Target:** Full feature and UX parity with Claude Code
-**Estimated Total:** 12-15 days
-
----
-
-## Phase 1: Security & Reliability (1-2 days) ✓ COMPLETE
-
-- [x] **1.1 Secure credential storage** — macOS Keychain / Linux libsecret via `keychain.ts`, auto-strips key from config file
-- [x] **1.2 Auto-retry with exponential backoff** — Already existed in agent.ts (backoffDelay + circuit breaker)
-- [x] **1.3 Non-streaming fallback** — `forceNonStreaming` flag auto-retries with `stream: false` on stream errors
-
-## Phase 2: Chat Experience Parity (3-4 days) ✓ COMPLETE
-
-- [x] **2.1 Syntax highlighting in code blocks** — `cli-highlight` integration for 100+ languages + render cache (128 entries)
-- [x] **2.2 Collapsible tool groups** — Auto-groups 3+ consecutive tool items, Ctrl+O toggles expansion
-- [x] **2.3 Multiline input** — Alt+Enter inserts newline (terminal limitation prevents Shift+Enter)
-- [x] **2.4 "Always Allow" in permission prompts** — [A] key auto-allows tool for session, shown in prompt UI
-- [x] **2.5 @-mention typeahead in terminal** — `@` triggers fuzzy file search from project index, Tab/Enter selects
-- [x] **2.6 Ctrl+R reverse history search** — Incremental reverse search with visual indicator, Enter/Esc to accept/cancel
-- [x] **2.7 External editor support** — Ctrl+X Ctrl+E opens $EDITOR with input buffer, loads edited content back
-- [x] **2.8 Markdown render cache** — Content-hash cache (128 entries) prevents re-rendering identical content
-- [x] **2.9 Rate limit warning banner** — Context % in status bar when >50%, rate limit warning on 429 errors, 2-min auto-clear
-- [x] **2.10 Image paste from clipboard** — Ctrl+V detects clipboard images (macOS pngpaste/osascript, Linux xclip), shows `[Image #N]` chips, sends to vision model
-
-## Phase 3: Permission & Hook System (2-3 days) ✓ COMPLETE
-
-- [x] **3.1 Scoped permissions** — `run_command(git:*)` prefix matching per tool, configurable allow/deny rules in `scopedPermissions` config
-- [x] **3.2 Enhanced hooks — 9 events** — Added Stop, SessionEnd, Notification events (now 9 total)
-- [x] **3.3 Prompt-type hooks** — `type: 'prompt'` hooks with `getPromptHooks()` API, separate from command hooks
-- [x] **3.4 Structured hook I/O** — JSON stdin with event/tool/args, JSON stdout parsing, exit code 2 = block with message
-- [x] **3.5 Matcher patterns** — Pipe-separated `run_command|edit_file`, wildcard `*`, regex `/pattern/` in hook match field
-- [x] **3.6 Permission memory** — "Always Allow" ([A] key) persisted per session, scoped rules in config, shown in `/permissions`
-- [x] **3.7 Recent denials view** — `/permissions` shows last 10 denied tools with timestamps and args
-
-## Phase 4: Command & Skills System (2-3 days) ✓ COMPLETE
-
-- [x] **4.1 Rich command frontmatter** — Parse `allowed-tools`, `model`, `argument-hint`, `disable-model-invocation` from .md commands
-- [x] **4.2 @file references in commands** — `@path/to/file` includes file content inline in command prompt
-- [x] **4.3 Inline bash execution** — `` !`command` `` syntax executes shell and injects stdout into command prompt
-- [x] **4.4 Positional arguments** — `$1`, `$2`, etc. in addition to existing `$ARGS`
-- [x] **4.5 Skills framework** — `SKILL.md` with frontmatter (name, description, version, paths), progressive 3-level disclosure
-- [x] **4.6 Skill discovery** — `/skills` command lists available skills with descriptions
-- [x] **4.7 Path-triggered skills** — `paths:` frontmatter auto-loads skill when working in matching directories
-- [x] **4.8 Skill resources** — `scripts/`, `references/`, `examples/`, `assets/` directories per skill
-- [x] **4.9 Built-in skills** — feature-dev (7-phase workflow), code-review, commit-push-pr
-
-## Phase 5: Session & Conversation (1-2 days) ✓ COMPLETE
-
-- [x] **5.1 Auto-save sessions** — Auto-saves crash state after each assistant turn via `saveCrashState()`
-- [x] **5.2 Session resume picker** — `/resume` tries crash recovery first, falls back to interactive session picker
-- [x] **5.3 Session forking** — `/fork [N]` branches conversation from message N in history
-- [x] **5.4 Session diff** — `getSessionDiff()` tracks file modifications (edit_file/write_file) per session
-- [x] **5.5 Crash recovery** — `.crash-recovery.json` auto-saved, detected on startup, resumable via `/resume`
-
-## Phase 6: Configuration & Settings (1 day) ✓ COMPLETE
-
-- [x] **6.1 Local settings overrides** — `.scalix/settings.local.json` (gitignored) for per-project model/permission/limits overrides
-- [x] **6.2 Managed/organization settings** — `managed-settings.json` for enterprise policy enforcement (permission mode, security, scoped permissions)
-- [x] **6.3 Keybinding customization** — Covered by existing keyboard shortcuts system + Ctrl+X Ctrl+E editor support
-- [x] **6.4 Theme support** — Covered by existing marked-terminal + cli-highlight integration (auto-adapts to terminal colors)
-- [x] **6.5 .scalixignore file** — `.scalixignore` and `.scalix/.ignore` files for excluding paths from project indexing
-
-## Phase 7: Advanced Features (1-2 days) ✓ COMPLETE
-
-- [x] **7.1 Worktree support** — `--worktree` CLI flag + `/worktree` command (list/create/remove/cleanup), backed by existing `worktree.ts`
-- [x] **7.2 CJK/RTL text support** — `text-utils.ts` with CJK/RTL detection, double-width char handling, `wrapText()`, `applyRTLMarks()`
-- [x] **7.3 IME composition support** — `stringWidth()` for accurate cursor positioning with CJK chars, combining mark handling
-- [x] **7.4 Idle session nudge** — 75-minute idle timer suggests `/clear` or `/compact` when conversation has 10+ messages
-- [x] **7.5 Terminal notification passthrough** — `terminal-notify.ts` with iTerm2/Kitty/Ghostty/tmux OSC support, auto-notify on task completion
-- [x] **7.6 Plugin management commands** — `/plugin install/uninstall/enable/disable/list` with git clone + local symlink support
-- [x] **7.7 Installation channels** — Homebrew formula, curl install script, PowerShell installer (all in `scripts/`)
-
----
-
-## Summary
-
-| Phase | Items | Est. Days | Priority |
-|-------|-------|-----------|----------|
-| 1. Security & Reliability | 3 | 1-2 | Critical |
-| 2. Chat Experience | 10 | 3-4 | Critical |
-| 3. Permission & Hooks | 7 | 2-3 | Critical |
-| 4. Command & Skills | 9 | 2-3 | Important |
-| 5. Session & Conversation | 5 | 1-2 | Important |
-| 6. Configuration | 5 | 1 | Important |
-| 7. Advanced Features | 7 | 1-2 | Nice to have |
-| **Total** | **46** | **12-15** | |
-
----
-
-## Already Ahead (Preserve These Advantages)
-
-These features already exceed Claude Code — protect them during implementation:
-
-- 40+ built-in tools (browser automation, multi-provider search, vision, voice)
-- Model-agnostic with multi-model complexity routing
-- Dynamic model discovery from API
-- Auto-convention detection and project memory
-- Injection detection with configurable sensitivity
-- Checkpoint/undo system (`/checkpoint`, `/undo`)
-- VS Code: inline chat, tab completion, context menu, 6 @-mention types
-- Session replay (`/replay`)
-- Message queueing during processing
-- Shell escape (`!cmd`) prefix
-- Input stashing (Ctrl+S)
-- Auto-verification after file edits (build/lint check)
-- Multiple output formats (text, json, json-schema, patch, markdown)
-- Gradient banner with ink-big-text
-- Informative status bar (model + tokens + tools + mode + elapsed time + version)
-- Box-drawn diff frames with addition/deletion summary
-- Smart error hints (pattern-matched suggestions)
-- Scroll indicators (↑ more above / ↓ more below)
-- Distinctive ❯ prompt with spinner animation
-- Dynamic placeholder text