scalix 1.4.1 → 1.5.1

package/dist/slash-commands.js

@@ -0,0 +1,148 @@
+/**
+ * The slash-command catalog, in the two shapes the TUI needs it.
+ *
+ * These used to be two array literals a thousand lines apart inside cli.tsx and
+ * they had drifted: /update was reachable but absent from the typeahead, while
+ * /fork, /permissions, /resume and /skills were in the typeahead but missing
+ * from /help. Keeping both here lets slash-commands.test.ts assert they stay in
+ * agreement, so a command added to one is never silently missing from the other.
+ */
+/** Every built-in command, as offered by the "/" typeahead. */
+export const SLASH_COMMANDS = [
+    { cmd: '/help', desc: 'Show all commands' },
+    { cmd: '/clear', desc: 'Reset conversation' },
+    { cmd: '/models', desc: 'List active models' },
+    { cmd: '/model', desc: 'Switch model' },
+    { cmd: '/mode', desc: 'Permission mode (plan/default/auto/yolo)' },
+    { cmd: '/thinking', desc: 'Thinking mode (off/low/medium/high)' },
+    { cmd: '/plan', desc: 'Enter plan mode (read-only)' },
+    { cmd: '/compact', desc: 'Compress conversation context' },
+    { cmd: '/context', desc: 'Show context usage & token count' },
+    { cmd: '/cost', desc: 'Show token usage & cost' },
+    { cmd: '/diff', desc: 'Show uncommitted changes' },
+    { cmd: '/copy', desc: 'Copy last response to clipboard' },
+    { cmd: '/save', desc: 'Save current session' },
+    { cmd: '/load', desc: 'Resume a saved session' },
+    { cmd: '/resume', desc: 'Resume from crash recovery or saved session' },
+    { cmd: '/fork', desc: 'Fork conversation from a point in history' },
+    { cmd: '/export', desc: 'Export conversation as text' },
+    { cmd: '/index', desc: 'Scan & index project files' },
+    { cmd: '/init', desc: 'Initialize project config (SCALIX.md)' },
+    { cmd: '/git', desc: 'Show git context' },
+    { cmd: '/memory', desc: 'Show project memory' },
+    { cmd: '/remember', desc: 'Save a note about this project' },
+    { cmd: '/replay', desc: 'Show session timeline' },
+    { cmd: '/plugins', desc: 'Show loaded plugins' },
+    { cmd: '/trust', desc: 'Trust this workspace (load project plugins/hooks/rules)' },
+    { cmd: '/router', desc: 'Show model routing status' },
+    { cmd: '/status', desc: 'Version, model & connection info' },
+    { cmd: '/update', desc: 'Check for and install updates' },
+    { cmd: '/doctor', desc: 'Diagnose installation' },
+    { cmd: '/mcp', desc: 'Add MCP server' },
+    { cmd: '/cloud', desc: 'Scalix Cloud status, platform tools & refresh' },
+    { cmd: '/login', desc: 'Link your Scalix account (API key)' },
+    { cmd: '/setup', desc: 'Reconfigure API key, URL & models' },
+    { cmd: '/settings', desc: 'View & configure limits' },
+    { cmd: '/permissions', desc: 'View permission rules & recent denials' },
+    { cmd: '/shortcuts', desc: 'Keyboard shortcuts' },
+    { cmd: '/hooks', desc: 'Show lifecycle hooks' },
+    { cmd: '/commands', desc: 'Show custom commands' },
+    { cmd: '/skills', desc: 'List available skills' },
+    { cmd: '/delegate', desc: 'Run task with sub-agent' },
+    { cmd: '/agents', desc: 'Show active agents & usage' },
+    { cmd: '/checkpoint', desc: 'Create git checkpoint' },
+    { cmd: '/undo', desc: 'Undo last checkpoint' },
+    { cmd: '/checkpoints', desc: 'List recent checkpoints' },
+    { cmd: '/commit', desc: 'Auto-generate commit message & commit' },
+    { cmd: '/review', desc: 'AI code review of current changes' },
+    { cmd: '/watch', desc: 'Run command, auto-fix on failure' },
+    { cmd: '/create', desc: 'Scaffold a new project' },
+    { cmd: '/worktree', desc: 'Manage git worktrees for isolated work' },
+    { cmd: '/plugin', desc: 'Install/enable/disable/uninstall plugins' },
+    { cmd: '/notify', desc: 'Test terminal notification' },
+    { cmd: '/exit', desc: 'Save & exit' },
+];
+/** Grouped, arg-annotated rendering of the same catalog, as printed by /help. */
+export const HELP_LINES = [
+    'Session & Navigation:',
+    '  /help         \u2014 show commands',
+    '  /shortcuts    \u2014 keyboard shortcuts',
+    '  /clear        \u2014 reset conversation',
+    '  /save [name]  \u2014 save current session',
+    '  /load         \u2014 resume a saved session',
+    '  /resume       \u2014 resume from crash recovery or saved session',
+    '  /fork         \u2014 fork conversation from a point in history',
+    '  /export [f]   \u2014 export conversation as text',
+    '  /exit         \u2014 save & exit',
+    '',
+    'Model & Mode:',
+    '  /models       \u2014 list active models',
+    '  /model        \u2014 switch model',
+    '  /mode [m]     \u2014 permission mode (plan/default/auto/yolo)',
+    '  /thinking [m] \u2014 thinking mode (off/low/medium/high)',
+    '  /plan         \u2014 enter plan mode (read-only)',
+    '',
+    'Context & Cost:',
+    '  /compact      \u2014 compress conversation context',
+    '  /context      \u2014 show context usage & token count',
+    '  /cost         \u2014 show token usage & cost',
+    '',
+    'Code & Git:',
+    '  /diff         \u2014 show uncommitted changes',
+    '  /commit       \u2014 auto-generate commit message & commit',
+    '  /review       \u2014 AI code review of current changes',
+    '  /checkpoint   \u2014 create git checkpoint',
+    '  /undo         \u2014 undo last checkpoint',
+    '  /checkpoints  \u2014 list recent checkpoints',
+    '  /worktree     \u2014 manage git worktrees (list/create/remove/cleanup)',
+    '  /git          \u2014 show git context',
+    '',
+    'Project:',
+    '  /init         \u2014 initialize project config (SCALIX.md)',
+    '  /index        \u2014 scan & index project files',
+    '  /memory       \u2014 show project memory',
+    '  /remember <n> \u2014 save a note about this project',
+    '  /watch <cmd>  \u2014 run command, auto-fix on failure',
+    '  /create <d>   \u2014 scaffold a new project',
+    '  /delegate <t> \u2014 run task with sub-agent',
+    '  /agents       \u2014 show active agents & usage',
+    '',
+    'Tools & Config:',
+    '  /copy         \u2014 copy last response to clipboard',
+    '  /cloud        \u2014 Scalix Cloud status (/cloud tools, /cloud refresh)',
+    '  /login        \u2014 link your Scalix account (API key)',
+    '  /status       \u2014 show version, model & connection info',
+    '  /update       \u2014 check for and install updates',
+    '  /doctor       \u2014 diagnose installation',
+    '  /settings     \u2014 view & configure limits',
+    '  /permissions  \u2014 view permission rules & recent denials',
+    '  /skills       \u2014 list available skills',
+    '  /setup        \u2014 reconfigure API key, URL & models',
+    '  /mcp <l> <u>  \u2014 add MCP server',
+    '  /plugins      \u2014 show loaded plugins',
+    '  /plugin       \u2014 install/enable/disable/uninstall plugins',
+    '  /trust        \u2014 trust workspace (load project plugins/hooks/rules)',
+    '  /notify       \u2014 test terminal notification',
+    '  /router       \u2014 show model routing status',
+    '  /replay       \u2014 show session timeline',
+    '  /hooks        \u2014 show lifecycle hooks',
+    '  /commands     \u2014 show custom commands',
+    '',
+    'Input modes:',
+    '  !<cmd>        \u2014 run shell command (e.g. !ls -la)',
+    '  text\\         \u2014 multiline input (end with \\ to continue)',
+];
+/**
+ * Pull the command tokens out of the /help text — the leading "/word" of any
+ * indented entry line. Section headers and the "Input modes" rows (!<cmd>,
+ * text\\) have no leading slash and are skipped.
+ */
+export function helpCommands(lines = HELP_LINES) {
+    const found = [];
+    for (const line of lines) {
+        const m = /^ {2}(\/[a-z-]+)/.exec(line);
+        if (m)
+            found.push(m[1]);
+    }
+    return found;
+}

package/dist/sub-agent.js

@@ -67,6 +67,7 @@ export async function spawnSubAgent(parentConfig, prompt, options = {}) {
     const subAgent = createAgent({
         apiKey: parentConfig.apiKey,
         baseUrl: parentConfig.baseUrl,
+        provider: parentConfig.provider,
         model,
         instructions: options.instructions || 'You are a focused research assistant. Be concise and factual. Respond in under 500 words.',
         tools,

package/package.json

@@ -1,11 +1,17 @@
 {
   "name": "scalix",
-  "version": "1.4.1",
-  "description": "AI coding agent for the terminal \u2014 edit code, run commands, and build with Scalix",
+  "version": "1.5.1",
+  "description": "AI coding agent for the terminal — edit code, run commands, and build with Scalix",
   "main": "dist/headless.js",
   "bin": {
     "scalix": "./bin/scalix.js"
   },
+  "files": [
+    "dist",
+    "bin",
+    "CHANGELOG.md",
+    ".env.example"
+  ],
   "scripts": {
     "start": "tsx src/cli.tsx",
     "start:headless": "tsx src/headless.ts",
@@ -19,7 +25,11 @@
     "test:e2e": "vitest run --config vitest.config.e2e.ts",
     "check": "npm run typecheck && npm run lint && npm run test",
     "prepublishOnly": "npm run build",
-    "release": "npm run build && node scripts/build-release.js"
+    "release": "npm run build && node scripts/build-release.js",
+    "bench": "tsx bench/src/main.ts",
+    "bench:live": "tsx bench/src/main.ts --live",
+    "typecheck:bench": "tsc --noEmit -p bench/tsconfig.json",
+    "bench:smoke-live": "tsx bench/src/smoke-live.ts"
   },
   "keywords": [
     "ai",

package/PARITY-PLAN.md

@@ -1,116 +0,0 @@
-# Scalix Coder — Claude Code Parity Implementation Plan
-
-**Status:** In Progress
-**Target:** Full feature and UX parity with Claude Code
-**Estimated Total:** 12-15 days
-
----
-
-## Phase 1: Security & Reliability (1-2 days) ✓ COMPLETE
-
-- [x] **1.1 Secure credential storage** — macOS Keychain / Linux libsecret via `keychain.ts`, auto-strips key from config file
-- [x] **1.2 Auto-retry with exponential backoff** — Already existed in agent.ts (backoffDelay + circuit breaker)
-- [x] **1.3 Non-streaming fallback** — `forceNonStreaming` flag auto-retries with `stream: false` on stream errors
-
-## Phase 2: Chat Experience Parity (3-4 days) ✓ COMPLETE
-
-- [x] **2.1 Syntax highlighting in code blocks** — `cli-highlight` integration for 100+ languages + render cache (128 entries)
-- [x] **2.2 Collapsible tool groups** — Auto-groups 3+ consecutive tool items, Ctrl+O toggles expansion
-- [x] **2.3 Multiline input** — Alt+Enter inserts newline (terminal limitation prevents Shift+Enter)
-- [x] **2.4 "Always Allow" in permission prompts** — [A] key auto-allows tool for session, shown in prompt UI
-- [x] **2.5 @-mention typeahead in terminal** — `@` triggers fuzzy file search from project index, Tab/Enter selects
-- [x] **2.6 Ctrl+R reverse history search** — Incremental reverse search with visual indicator, Enter/Esc to accept/cancel
-- [x] **2.7 External editor support** — Ctrl+X Ctrl+E opens $EDITOR with input buffer, loads edited content back
-- [x] **2.8 Markdown render cache** — Content-hash cache (128 entries) prevents re-rendering identical content
-- [x] **2.9 Rate limit warning banner** — Context % in status bar when >50%, rate limit warning on 429 errors, 2-min auto-clear
-- [x] **2.10 Image paste from clipboard** — Ctrl+V detects clipboard images (macOS pngpaste/osascript, Linux xclip), shows `[Image #N]` chips, sends to vision model
-
-## Phase 3: Permission & Hook System (2-3 days) ✓ COMPLETE
-
-- [x] **3.1 Scoped permissions** — `run_command(git:*)` prefix matching per tool, configurable allow/deny rules in `scopedPermissions` config
-- [x] **3.2 Enhanced hooks — 9 events** — Added Stop, SessionEnd, Notification events (now 9 total)
-- [x] **3.3 Prompt-type hooks** — `type: 'prompt'` hooks with `getPromptHooks()` API, separate from command hooks
-- [x] **3.4 Structured hook I/O** — JSON stdin with event/tool/args, JSON stdout parsing, exit code 2 = block with message
-- [x] **3.5 Matcher patterns** — Pipe-separated `run_command|edit_file`, wildcard `*`, regex `/pattern/` in hook match field
-- [x] **3.6 Permission memory** — "Always Allow" ([A] key) persisted per session, scoped rules in config, shown in `/permissions`
-- [x] **3.7 Recent denials view** — `/permissions` shows last 10 denied tools with timestamps and args
-
-## Phase 4: Command & Skills System (2-3 days) ✓ COMPLETE
-
-- [x] **4.1 Rich command frontmatter** — Parse `allowed-tools`, `model`, `argument-hint`, `disable-model-invocation` from .md commands
-- [x] **4.2 @file references in commands** — `@path/to/file` includes file content inline in command prompt
-- [x] **4.3 Inline bash execution** — `` !`command` `` syntax executes shell and injects stdout into command prompt
-- [x] **4.4 Positional arguments** — `$1`, `$2`, etc. in addition to existing `$ARGS`
-- [x] **4.5 Skills framework** — `SKILL.md` with frontmatter (name, description, version, paths), progressive 3-level disclosure
-- [x] **4.6 Skill discovery** — `/skills` command lists available skills with descriptions
-- [x] **4.7 Path-triggered skills** — `paths:` frontmatter auto-loads skill when working in matching directories
-- [x] **4.8 Skill resources** — `scripts/`, `references/`, `examples/`, `assets/` directories per skill
-- [x] **4.9 Built-in skills** — feature-dev (7-phase workflow), code-review, commit-push-pr
-
-## Phase 5: Session & Conversation (1-2 days) ✓ COMPLETE
-
-- [x] **5.1 Auto-save sessions** — Auto-saves crash state after each assistant turn via `saveCrashState()`
-- [x] **5.2 Session resume picker** — `/resume` tries crash recovery first, falls back to interactive session picker
-- [x] **5.3 Session forking** — `/fork [N]` branches conversation from message N in history
-- [x] **5.4 Session diff** — `getSessionDiff()` tracks file modifications (edit_file/write_file) per session
-- [x] **5.5 Crash recovery** — `.crash-recovery.json` auto-saved, detected on startup, resumable via `/resume`
-
-## Phase 6: Configuration & Settings (1 day) ✓ COMPLETE
-
-- [x] **6.1 Local settings overrides** — `.scalix/settings.local.json` (gitignored) for per-project model/permission/limits overrides
-- [x] **6.2 Managed/organization settings** — `managed-settings.json` for enterprise policy enforcement (permission mode, security, scoped permissions)
-- [x] **6.3 Keybinding customization** — Covered by existing keyboard shortcuts system + Ctrl+X Ctrl+E editor support
-- [x] **6.4 Theme support** — Covered by existing marked-terminal + cli-highlight integration (auto-adapts to terminal colors)
-- [x] **6.5 .scalixignore file** — `.scalixignore` and `.scalix/.ignore` files for excluding paths from project indexing
-
-## Phase 7: Advanced Features (1-2 days) ✓ COMPLETE
-
-- [x] **7.1 Worktree support** — `--worktree` CLI flag + `/worktree` command (list/create/remove/cleanup), backed by existing `worktree.ts`
-- [x] **7.2 CJK/RTL text support** — `text-utils.ts` with CJK/RTL detection, double-width char handling, `wrapText()`, `applyRTLMarks()`
-- [x] **7.3 IME composition support** — `stringWidth()` for accurate cursor positioning with CJK chars, combining mark handling
-- [x] **7.4 Idle session nudge** — 75-minute idle timer suggests `/clear` or `/compact` when conversation has 10+ messages
-- [x] **7.5 Terminal notification passthrough** — `terminal-notify.ts` with iTerm2/Kitty/Ghostty/tmux OSC support, auto-notify on task completion
-- [x] **7.6 Plugin management commands** — `/plugin install/uninstall/enable/disable/list` with git clone + local symlink support
-- [x] **7.7 Installation channels** — Homebrew formula, curl install script, PowerShell installer (all in `scripts/`)
-
----
-
-## Summary
-
-| Phase | Items | Est. Days | Priority |
-|-------|-------|-----------|----------|
-| 1. Security & Reliability | 3 | 1-2 | Critical |
-| 2. Chat Experience | 10 | 3-4 | Critical |
-| 3. Permission & Hooks | 7 | 2-3 | Critical |
-| 4. Command & Skills | 9 | 2-3 | Important |
-| 5. Session & Conversation | 5 | 1-2 | Important |
-| 6. Configuration | 5 | 1 | Important |
-| 7. Advanced Features | 7 | 1-2 | Nice to have |
-| **Total** | **46** | **12-15** | |
-
----
-
-## Already Ahead (Preserve These Advantages)
-
-These features already exceed Claude Code — protect them during implementation:
-
-- 40+ built-in tools (browser automation, multi-provider search, vision, voice)
-- Model-agnostic with multi-model complexity routing
-- Dynamic model discovery from API
-- Auto-convention detection and project memory
-- Injection detection with configurable sensitivity
-- Checkpoint/undo system (`/checkpoint`, `/undo`)
-- VS Code: inline chat, tab completion, context menu, 6 @-mention types
-- Session replay (`/replay`)
-- Message queueing during processing
-- Shell escape (`!cmd`) prefix
-- Input stashing (Ctrl+S)
-- Auto-verification after file edits (build/lint check)
-- Multiple output formats (text, json, json-schema, patch, markdown)
-- Gradient banner with ink-big-text
-- Informative status bar (model + tokens + tools + mode + elapsed time + version)
-- Box-drawn diff frames with addition/deletion summary
-- Smart error hints (pattern-matched suggestions)
-- Scroll indicators (↑ more above / ↓ more below)
-- Distinctive ❯ prompt with spinner animation
-- Dynamic placeholder text

package/docs/DISTRIBUTION.md

@@ -1,301 +0,0 @@
-# Scalix Coder — Distribution Guide
-
-This document covers how to build, distribute, and install Scalix Coder for end users **without exposing source code**.
-
----
-
-## Table of Contents
-
-1. [Overview](#overview)
-2. [Building a Release](#building-a-release)
-3. [What's in the Release](#whats-in-the-release)
-4. [Hosting the Release](#hosting-the-release)
-5. [One-Line Installer Setup](#one-line-installer-setup)
-6. [Manual Installation](#manual-installation)
-7. [VS Code Extension](#vs-code-extension)
-8. [Updating Users](#updating-users)
-9. [Troubleshooting](#troubleshooting)
-
----
-
-## Overview
-
-Scalix Coder is distributed as **compiled JavaScript** — no TypeScript source code is included. Users receive:
-
-- Pre-compiled `.js` files (from `dist/`)
-- A CLI entry point (`bin/scalix.js`)
-- One-click install scripts for Windows and Mac/Linux
-- The VS Code extension (`.vsix` file)
-
-**What's included:**
-- 31 built-in tools (shell, file, git, web, browser, vision, voice, and more)
-- Security sandbox with path restriction, command blocklist, and injection detection
-- IPC server mode for VS Code extension integration
-
-**Requirements for end users:**
-- Node.js 18 or higher
-- npm (comes with Node.js)
-- Windows 10+, macOS 12+, or Linux
-
----
-
-## Building a Release
-
-From the project root, run:
-
-```bash
-npm run release
-```
-
-This will:
-1. Compile TypeScript to JavaScript (`tsc`)
-2. Package everything into `release/` directory
-3. Create both `.tar.gz` (Mac/Linux) and `.zip` (Windows) archives
-4. Include the VS Code extension `.vsix` if available
-5. Strip `devDependencies` and dev scripts from `package.json`
-
-**Output:**
-```
-release/
-├── scalix-coder-v3.0.0/          # Extracted release folder
-│   ├── dist/                      # Compiled JavaScript (NO source code)
-│   ├── bin/scalix.js              # CLI entry point
-│   ├── package.json               # Dependencies only
-│   ├── package-lock.json          # Lockfile
-│   ├── install.bat                # Windows installer
-│   ├── install.sh                 # Mac/Linux installer
-│   ├── scalix-coder-0.2.0.vsix   # VS Code extension
-│   ├── README.md
-│   ├── LICENSE
-│   └── CHANGELOG.md
-├── scalix-coder-v3.0.0.tar.gz    # Mac/Linux archive
-└── scalix-coder-v3.0.0.zip       # Windows archive
-```
-
----
-
-## What's in the Release
-
-### Included
-| Item | Description |
-|---|---|
-| `dist/*.js` | Compiled JavaScript (agent, tools, CLI, etc.) |
-| `bin/scalix.js` | CLI entry point — runs `dist/cli.js` |
-| `package.json` | Production dependencies only |
-| `install.bat` | One-click Windows installer |
-| `install.sh` | One-click Mac/Linux installer |
-| `*.vsix` | VS Code extension package |
-| `README.md` | User documentation |
-| `LICENSE` | License file |
-
-### NOT Included (Protected)
-| Item | Why excluded |
-|---|---|
-| `src/*.ts` / `src/*.tsx` | Source code — proprietary |
-| `tests/` | Internal test suite |
-| `tsconfig.json` | Build configuration |
-| `eslint.config.js` | Lint configuration |
-| `vitest.config.ts` | Test configuration |
-| `scripts/` | Build scripts |
-| `.claude/` | Claude Code settings |
-| `.scalix/` | Project memory |
-| `devDependencies` | Development tools |
-
----
-
-## Hosting the Release
-
-Upload the release archives to any file hosting. Options:
-
-### Option A: Your Own Website / Server
-```
-https://scalix.world/releases/scalix-coder-v3.0.0.tar.gz
-https://scalix.world/releases/scalix-coder-v3.0.0.zip
-https://scalix.world/install.sh
-https://scalix.world/install.ps1
-```
-
-### Option B: AWS S3 / Google Cloud Storage
-```bash
-# Upload to S3
-aws s3 cp release/scalix-coder-v3.0.0.tar.gz s3://your-bucket/releases/
-aws s3 cp release/scalix-coder-v3.0.0.zip s3://your-bucket/releases/
-aws s3 cp scripts/install-remote.sh s3://your-bucket/install.sh
-aws s3 cp scripts/install-remote.ps1 s3://your-bucket/install.ps1
-```
-
-### Option C: GitHub Releases (on a separate public repo)
-Create a public repo (e.g., `scalix-coder-releases`) and upload the archives as release assets.
-
-**After uploading, update the URLs in:**
-- `scripts/install-remote.sh` — change `your-domain.com` to your actual URL
-- `scripts/install-remote.ps1` — change `your-domain.com` to your actual URL
-
----
-
-## One-Line Installer Setup
-
-Once files are hosted, users install with a single command:
-
-### Mac / Linux
-```bash
-curl -fsSL https://scalix.world/install.sh | bash
-```
-
-### Windows (PowerShell)
-```powershell
-irm https://scalix.world/install.ps1 | iex
-```
-
-### What the installer does:
-1. Checks Node.js 18+ is installed
-2. Downloads the release archive
-3. Extracts to `~/.scalix-coder/`
-4. Runs `npm install --omit=dev`
-5. Runs `npm link` to register the `scalix` command globally
-6. Done — user types `scalix` in any terminal
-
-### Custom Download URL
-Users can override the download URL:
-```bash
-SCALIX_DOWNLOAD_URL=https://internal.company.com/scalix.tar.gz curl -fsSL https://scalix.world/install.sh | bash
-```
-
----
-
-## Manual Installation
-
-If users prefer manual installation:
-
-### Windows
-1. Download `scalix-coder-v3.0.0.zip`
-2. Extract the zip file
-3. Open the extracted folder
-4. Double-click `install.bat`
-5. Open any terminal and type `scalix`
-
-### Mac / Linux
-```bash
-tar -xzf scalix-coder-v3.0.0.tar.gz
-cd scalix-coder-v3.0.0
-./install.sh
-```
-
-### Manual (No Installer Script)
-```bash
-tar -xzf scalix-coder-v3.0.0.tar.gz
-cd scalix-coder-v3.0.0
-npm install --omit=dev --legacy-peer-deps
-sudo npm link    # or without sudo on Windows
-scalix
-```
-
----
-
-## VS Code Extension
-
-The VS Code extension (`.vsix` file) is bundled in the release.
-
-### Install
-1. Open VS Code
-2. Press `Ctrl+Shift+P` (or `Cmd+Shift+P` on Mac)
-3. Type **"Extensions: Install from VSIX"**
-4. Select `scalix-coder-0.2.0.vsix` from the extracted folder
-5. Reload VS Code
-
-### Features
-- Sidebar chat panel with AI assistant
-- Right-click: Explain / Fix / Refactor code selection
-- Model picker and mode selector via slash commands
-- Integrated terminal (`Ctrl+Shift+T`)
-- Open chat in editor area (`Ctrl+Shift+K`)
-
-### Configure
-1. Press `Ctrl+,` to open Settings
-2. Search for "Scalix"
-3. Enter your API key
-4. Or type `/setup` in the chat
-
----
-
-## Updating Users
-
-When releasing a new version:
-
-1. Update `version` in `package.json`
-2. Run `npm run release`
-3. Upload new archives to your hosting (overwrite or add new version)
-4. Update version number in `scripts/install-remote.sh` and `scripts/install-remote.ps1`
-5. Users re-run the one-liner to update:
-   ```bash
-   curl -fsSL https://scalix.world/install.sh | bash
-   ```
-
-### Versioning
-- CLI version: `package.json` → `version` (currently `3.1.0`)
-- Extension version: `vscode-extension/package.json` → `version` (currently `0.2.0`)
-- Both versions should be bumped together for coordinated releases
-
----
-
-## Troubleshooting
-
-### "scalix" command not found after install
-```bash
-# Check if npm global bin is in PATH
-npm bin -g
-
-# On Mac/Linux, add to ~/.bashrc or ~/.zshrc:
-export PATH="$(npm bin -g):$PATH"
-
-# On Windows, npm global bin is usually already in PATH.
-# If not, run install.bat as Administrator.
-```
-
-### Permission denied on Mac/Linux
-```bash
-sudo npm link
-# or
-sudo ./install.sh
-```
-
-### Node.js version too old
-```bash
-node -v   # Must be v18+
-```
-Download latest from https://nodejs.org/
-
-### API key not working
-- Run `/setup` in the chat to re-enter your key
-- Or set the environment variable: `export SCALIX_API_KEY=sk-...`
-- Check Settings in VS Code: `Ctrl+,` → search "Scalix"
-
-### Rate limited
-The agent retries automatically up to 5 times with backoff. If you still see rate limit errors, wait 60 seconds and try again.
-
----
-
-## Security Notes
-
-- **No source code** is distributed — only compiled JavaScript
-- API keys are stored locally at `~/.scalix-coder/config.json` (file permissions: 600)
-- Shell commands have a blocklist for destructive patterns
-- Path traversal is blocked — tools cannot access files outside the workspace
-- All buffers and collections are bounded to prevent memory exhaustion
-- Background processes auto-cleanup after 5 minutes
-- The VS Code extension uses VS Code's Content Security Policy for the webview
-- All webview user content is HTML-escaped before rendering
-
----
-
-## Quick Reference
-
-| Task | Command |
-|---|---|
-| Build release | `npm run release` |
-| Build TypeScript | `npm run build` |
-| Run tests | `npm run test` |
-| Type-check | `npm run typecheck` |
-| Lint | `npm run lint` |
-| All checks | `npm run check` |
-| Build VS Code ext | `cd vscode-extension && npm run build && npm run package` |