subconscious-cli 0.1.1 → 0.2.0

package/README.md

@@ -1,16 +1,60 @@
-# @subconscious/cli
+# subconscious-cli
 
-Authenticate with Subconscious from your terminal. One command opens your browser, signs you in (or up), and saves your API key locally.
+Log in to Subconscious from your terminal, then launch your favorite coding
+agent against your hosted Subconscious model — no per-agent config required.
 
 ## Quick start
 
 ```bash
-npx @subconscious/cli login
+npx subconscious-cli login          # sign in, saves your API key
+npx subconscious-cli claude-code    # launch Claude Code on Subconscious
 ```
 
-That's it. Your API key is saved to `~/.subcon/config.json` and ready to use.
+Installed globally it's just `subconscious <command>`:
 
-## How it works
+```bash
+npm install -g subconscious-cli
+subconscious login
+subconscious open-code
+```
+
+## Launching coding agents
+
+`subconscious <agent>` resolves your saved API key, injects the env vars that
+point the agent at Subconscious, and exec's the real CLI. Nothing is written to
+the agent's own config — the provider is passed in-memory for that run only.
+
+| Command                    | Launches    | Requires (install)                                     |
+| -------------------------- | ----------- | ------------------------------------------------------ |
+| `subconscious claude-code` | Claude Code | `npm i -g @anthropic-ai/claude-code`                   |
+| `subconscious open-code`   | OpenCode    | `npm i -g opencode-ai`                                 |
+| `subconscious aider`       | Aider       | `python -m pip install aider-install && aider-install` |
+| `subconscious codex`       | Codex CLI   | `npm i -g @openai/codex`                               |
+
+If the underlying agent isn't installed, the CLI tells you the exact install
+command. Anything after the agent name is forwarded straight to it:
+
+```bash
+subconscious claude-code --resume
+subconscious codex exec "write a test"
+```
+
+### Choosing a model
+
+Defaults to `subconscious/tim-qwen3.6-27b`. Override per run with `--model`, or
+set `SUBCONSCIOUS_MODEL` in your environment:
+
+```bash
+subconscious open-code --model subconscious/tim-qwen3.6-27b
+export SUBCONSCIOUS_MODEL=subconscious/tim-qwen3.6-27b
+```
+
+## Auth commands
+
+### `login`
+
+Opens your browser to sign in (or create an account). After authentication, your
+API key is automatically generated and saved.
 
 ```
 Terminal                          Browser
@@ -19,41 +63,24 @@ Terminal                          Browser
   │  2. Open browser ───────────────►│
   │                                  │  3. Sign in / sign up via Clerk
   │                                  │  4. API key auto-created
-  │  5. Receive key ◄────────────────│  
+  │  5. Receive key ◄────────────────│
   │  6. Save to ~/.subcon/config.json│
   │                                  │  "You can close this tab"
   ✓ Logged in!                       │
 ```
 
-## Commands
-
-### `login`
-
-Opens your browser to sign in (or create an account). After authentication, your API key is automatically generated and saved.
-
-```bash
-npx @subconscious/cli login
-```
-
 ### `logout`
 
 Removes your saved API key.
 
-```bash
-npx @subconscious/cli logout
-```
-
 ### `whoami`
 
 Shows your current authentication status and which key is active.
 
-```bash
-npx @subconscious/cli whoami
-```
-
 ## Where keys are stored
 
-Keys are saved to `~/.subcon/config.json` with `600` permissions (owner-read-only). The file looks like:
+Keys are saved to `~/.subcon/config.json` with `600` permissions
+(owner-read-only). The file looks like:
 
 ```json
 {
@@ -61,13 +88,5 @@ Keys are saved to `~/.subcon/config.json` with `600` permissions (owner-read-onl
 }
 ```
 
-Environment variable `SUBCONSCIOUS_API_KEY` takes precedence over the config file.
-
-## Global install
-
-If you prefer a persistent command:
-
-```bash
-npm install -g @subconscious/cli
-subconscious login
-```
+Environment variable `SUBCONSCIOUS_API_KEY` takes precedence over the config
+file — handy for CI or temporary overrides.

package/bin/agents.js

@@ -0,0 +1,215 @@
+/**
+ * Coding-agent launcher.
+ *
+ * `subconscious <agent>` resolves your saved API key, injects the env vars that
+ * point the agent at your hosted Subconscious model, and exec's the real CLI —
+ * nothing is written to the agent's own config. Each entry here mirrors the
+ * matching example under `examples/<agent>` (its `subconscious.agent` block),
+ * which stays the source of truth.
+ */
+
+import { spawn } from 'node:child_process';
+import fs from 'node:fs/promises';
+import { constants as fsConstants } from 'node:fs';
+import path from 'node:path';
+import { c } from './colors.js';
+import { getApiKey } from './auth.js';
+
+// Subconscious endpoints. The Anthropic-style base has no `/v1`; the
+// OpenAI-compatible base does.
+const API_BASE = 'https://api.subconscious.dev';
+const API_BASE_V1 = 'https://api.subconscious.dev/v1';
+const DEFAULT_MODEL = 'subconscious/tim-qwen3.6-27b';
+
+/**
+ * Agent registry. Each entry:
+ *   name    — display name
+ *   aliases — accepted subcommands (first is canonical)
+ *   install — how to install the underlying CLI (shown when it's missing)
+ *   bin     — executable we exec and probe on PATH
+ *   env     — (key, model) => extra env vars merged over process.env
+ *   args    — (model) => array of args passed to `bin`
+ */
+const AGENTS = [
+  {
+    name: 'Claude Code',
+    aliases: ['claude-code', 'claude', 'claudecode'],
+    install: 'npm i -g @anthropic-ai/claude-code',
+    bin: 'claude',
+    env: (key, model) => ({
+      ANTHROPIC_BASE_URL: API_BASE,
+      ANTHROPIC_AUTH_TOKEN: key,
+      ANTHROPIC_MODEL: model,
+      ANTHROPIC_SMALL_FAST_MODEL: model,
+      // Let Subconscious manage context instead of client-side compaction.
+      DISABLE_AUTO_COMPACT: 'true',
+    }),
+    args: () => [],
+  },
+  {
+    name: 'OpenCode',
+    aliases: ['open-code', 'opencode'],
+    install: 'npm i -g opencode-ai',
+    bin: 'opencode',
+    env: (key, model) => ({
+      SUBCONSCIOUS_API_KEY: key,
+      // OpenCode deep-merges this at startup; nothing touches ~/.config/opencode.
+      OPENCODE_CONFIG_CONTENT: JSON.stringify({
+        $schema: 'https://opencode.ai/config.json',
+        provider: {
+          subconscious: {
+            npm: '@ai-sdk/openai-compatible',
+            name: 'Subconscious',
+            options: { baseURL: API_BASE_V1, apiKey: '{env:SUBCONSCIOUS_API_KEY}' },
+            models: { [model]: { name: 'Subconscious', tools: true } },
+          },
+        },
+        model: `subconscious/${model}`,
+      }),
+    }),
+    args: () => [],
+  },
+  {
+    name: 'Aider',
+    aliases: ['aider'],
+    install: 'python -m pip install aider-install && aider-install',
+    bin: 'aider',
+    env: (key) => ({
+      OPENAI_API_BASE: API_BASE_V1,
+      OPENAI_API_KEY: key,
+    }),
+    args: (model) => ['--model', `openai/${model}`],
+  },
+  {
+    name: 'Codex CLI',
+    aliases: ['codex'],
+    install: 'npm i -g @openai/codex',
+    bin: 'codex',
+    env: (key) => ({ SUBCONSCIOUS_API_KEY: key }),
+    // `-c model=…` (not `--model`, which is codex's Ollama shortcut).
+    args: (model) => [
+      '-c', 'model_providers.subconscious.name=Subconscious',
+      '-c', `model_providers.subconscious.base_url=${API_BASE_V1}`,
+      '-c', 'model_providers.subconscious.env_key=SUBCONSCIOUS_API_KEY',
+      '-c', 'model_provider=subconscious',
+      '-c', `model=${model}`,
+    ],
+  },
+];
+
+const BY_ALIAS = new Map();
+for (const agent of AGENTS) {
+  for (const alias of agent.aliases) BY_ALIAS.set(alias, agent);
+}
+
+export function resolveAgent(name) {
+  return BY_ALIAS.get(name) ?? null;
+}
+
+export function agentList() {
+  return AGENTS.map((a) => ({ name: a.name, alias: a.aliases[0] }));
+}
+
+/**
+ * Pull a `--model <value>` / `--model=<value>` flag out of the passthrough
+ * args (so it sets the Subconscious model rather than reaching the agent).
+ * Falls back to SUBCONSCIOUS_MODEL, then the default.
+ */
+function extractModel(argv) {
+  let model = process.env.SUBCONSCIOUS_MODEL?.trim() || DEFAULT_MODEL;
+  const rest = [];
+  for (let i = 0; i < argv.length; i++) {
+    const a = argv[i];
+    if (a === '--model') {
+      const v = argv[i + 1];
+      if (v && !v.startsWith('-')) {
+        model = v;
+        i++;
+      }
+      continue;
+    }
+    if (a.startsWith('--model=')) {
+      model = a.slice('--model='.length);
+      continue;
+    }
+    rest.push(a);
+  }
+  return { model, rest };
+}
+
+/** Is `bin` an executable resolvable on PATH? */
+async function isOnPath(bin) {
+  const dirs = (process.env.PATH || '').split(path.delimiter).filter(Boolean);
+  const exts =
+    process.platform === 'win32'
+      ? (process.env.PATHEXT || '.EXE;.CMD;.BAT;.COM').split(';')
+      : [''];
+  for (const dir of dirs) {
+    for (const ext of exts) {
+      const candidate = path.join(dir, bin + ext);
+      try {
+        await fs.access(candidate, fsConstants.F_OK);
+        return true;
+      } catch {
+        // keep scanning
+      }
+    }
+  }
+  return false;
+}
+
+/**
+ * Launch a coding agent against Subconscious. `argv` is everything after the
+ * agent name; unknown flags pass straight through to the underlying CLI.
+ */
+export async function runAgent(agent, argv) {
+  const { model, rest } = extractModel(argv);
+
+  const auth = await getApiKey();
+  if (!auth) {
+    console.error(`\n  ${c.red}Not logged in.${c.reset}`);
+    console.error(
+      `  Run ${c.cyan}subconscious login${c.reset} (or set ${c.dim}SUBCONSCIOUS_API_KEY${c.reset}) first.\n`,
+    );
+    process.exit(1);
+  }
+
+  if (!(await isOnPath(agent.bin))) {
+    console.error(
+      `\n  ${c.red}${agent.name} isn't installed${c.reset} ${c.dim}(\`${agent.bin}\` not found on PATH).${c.reset}`,
+    );
+    console.error(`  Install it with:\n`);
+    console.error(`    ${c.cyan}${agent.install}${c.reset}\n`);
+    process.exit(127);
+  }
+
+  const env = { ...process.env, ...agent.env(auth.key, model) };
+  const args = [...agent.args(model), ...rest];
+
+  console.log(
+    `  ${c.dim}Launching ${c.reset}${c.bold}${agent.name}${c.reset} ${c.dim}on Subconscious ${c.reset}${c.dim}(${model})${c.reset}\n`,
+  );
+
+  const child = spawn(agent.bin, args, { stdio: 'inherit', env });
+
+  child.on('error', (err) => {
+    if (err.code === 'ENOENT') {
+      console.error(
+        `\n  ${c.red}Could not launch \`${agent.bin}\`.${c.reset} Install it with:\n`,
+      );
+      console.error(`    ${c.cyan}${agent.install}${c.reset}\n`);
+      process.exit(127);
+    }
+    console.error(`\n  ${c.red}${err.message}${c.reset}\n`);
+    process.exit(1);
+  });
+
+  // Mirror the child's exit status so callers/scripts see the real result.
+  child.on('exit', (code, signal) => {
+    if (signal) {
+      process.kill(process.pid, signal);
+      return;
+    }
+    process.exit(code ?? 0);
+  });
+}

package/bin/auth.js

@@ -0,0 +1,366 @@
+/**
+ * Authentication + credential storage for the Subconscious CLI.
+ *
+ * Login flow (localhost callback pattern, similar to Vercel/Supabase CLIs):
+ *  1. CLI generates a random `state` token (CSRF protection) and starts
+ *     an ephemeral HTTP server on a random port bound to 127.0.0.1.
+ *  2. Opens the browser to {PLATFORM_URL}/cli/auth?port=...&state=...
+ *  3. The web app authenticates the user, generates an API key, and
+ *     delivers it back to the CLI via a cross-origin fetch to
+ *     localhost:{port}/callback?token=...&state=...
+ *  4. CLI verifies the `state` matches, saves the key to ~/.subcon/config.json.
+ *
+ * Override SUBCONSCIOUS_URL env var for local development.
+ */
+
+import http from 'node:http';
+import crypto from 'node:crypto';
+import { exec } from 'node:child_process';
+import fs from 'node:fs/promises';
+import os from 'node:os';
+import path from 'node:path';
+import { c } from './colors.js';
+
+const CONFIG_DIR = path.join(os.homedir(), '.subcon');
+const CONFIG_FILE = path.join(CONFIG_DIR, 'config.json');
+// Defaults to production. Developers set SUBCONSCIOUS_URL=http://localhost:3000 for local dev.
+const PLATFORM_URL = process.env.SUBCONSCIOUS_URL || 'https://www.subconscious.dev';
+
+// ── Config helpers ──────────────────────────────────────────────────────
+
+async function loadConfig() {
+  try {
+    const content = await fs.readFile(CONFIG_FILE, 'utf-8');
+    return JSON.parse(content);
+  } catch {
+    return {};
+  }
+}
+
+async function saveConfig(config) {
+  await fs.mkdir(CONFIG_DIR, { recursive: true });
+  await fs.writeFile(CONFIG_FILE, JSON.stringify(config, null, 2), 'utf-8');
+  // 0o600 = owner read/write only — the file contains an API key
+  await fs.chmod(CONFIG_FILE, 0o600);
+}
+
+/**
+ * Resolve the active API key. The env var takes precedence over the saved
+ * config so CI and per-shell overrides win. Returns null when unauthenticated.
+ */
+export async function getApiKey() {
+  const envKey = process.env.SUBCONSCIOUS_API_KEY?.trim();
+  if (envKey) return { key: envKey, source: 'SUBCONSCIOUS_API_KEY env var' };
+
+  const config = await loadConfig();
+  if (config.subconscious_api_key) {
+    return { key: config.subconscious_api_key, source: '~/.subcon/config.json' };
+  }
+  return null;
+}
+
+// ── Browser opener ──────────────────────────────────────────────────────
+
+function openBrowser(url) {
+  const cmd =
+    process.platform === 'darwin'
+      ? `open "${url}"`
+      : process.platform === 'win32'
+        ? `start "" "${url}"`
+        : `xdg-open "${url}"`;
+  exec(cmd, (err) => {
+    if (err) {
+      console.log(
+        `\n${c.yellow}Could not open browser automatically.${c.reset}`,
+      );
+      console.log(`Please open this URL manually:\n`);
+      console.log(`  ${c.underline}${c.cyan}${url}${c.reset}\n`);
+    }
+  });
+}
+
+// ── Localhost callback server ───────────────────────────────────────────
+
+function startCallbackServer(expectedState) {
+  return new Promise((resolveSetup) => {
+    let resolveToken, rejectToken;
+    const tokenPromise = new Promise((resolve, reject) => {
+      resolveToken = resolve;
+      rejectToken = reject;
+    });
+
+    const server = http.createServer((req, res) => {
+      // CORS: only allow the web app's origin (production or localhost dev).
+      // This prevents arbitrary websites from hitting this callback.
+      const origin = req.headers.origin || '';
+      const allowed =
+        origin === PLATFORM_URL ||
+        origin.startsWith('http://localhost:');
+      res.setHeader(
+        'Access-Control-Allow-Origin',
+        allowed ? origin : PLATFORM_URL,
+      );
+      res.setHeader('Access-Control-Allow-Methods', 'GET, OPTIONS');
+      res.setHeader('Access-Control-Allow-Headers', 'Content-Type');
+      res.setHeader('Connection', 'close');
+
+      if (req.method === 'OPTIONS') {
+        res.writeHead(204);
+        res.end();
+        return;
+      }
+
+      const url = new URL(req.url, 'http://localhost');
+
+      if (url.pathname !== '/callback') {
+        res.writeHead(404);
+        res.end();
+        return;
+      }
+
+      const token = url.searchParams.get('token');
+      const state = url.searchParams.get('state');
+      const error = url.searchParams.get('error');
+
+      // The web app sends `Accept: application/json` via fetch(); direct
+      // browser visits get the HTML fallback page.
+      const wantsJson = (req.headers.accept || '').includes('application/json');
+      const respond = (ok, msg) => {
+        if (wantsJson) {
+          res.writeHead(ok ? 200 : 400, { 'Content-Type': 'application/json' });
+          res.end(JSON.stringify({ ok, error: msg || undefined }));
+        } else {
+          res.writeHead(200, { 'Content-Type': 'text/html' });
+          res.end(resultPage(ok, msg));
+        }
+      };
+
+      if (error) {
+        respond(false, error);
+        server.close();
+        rejectToken(new Error(error));
+        return;
+      }
+
+      // CSRF check: state token must match what the CLI generated
+      if (state !== expectedState) {
+        respond(false, 'State mismatch — possible CSRF attack. Please try again.');
+        server.close();
+        rejectToken(new Error('State mismatch'));
+        return;
+      }
+
+      if (!token) {
+        respond(false, 'No API key received.');
+        server.close();
+        rejectToken(new Error('No API key received'));
+        return;
+      }
+
+      respond(true);
+      server.close();
+      resolveToken({ token });
+    });
+
+    // Port 0 = OS assigns a random available port. Bound to 127.0.0.1 only.
+    server.listen(0, '127.0.0.1', () => {
+      const port = server.address().port;
+
+      const timeout = setTimeout(() => {
+        server.close();
+        rejectToken(new Error('Authentication timed out (5 min). Please try again.'));
+      }, 5 * 60 * 1000);
+
+      tokenPromise.finally(() => clearTimeout(timeout));
+
+      resolveSetup({ port, promise: tokenPromise });
+    });
+  });
+}
+
+function resultPage(success, message) {
+  const title = success ? 'Authenticated' : 'Authentication failed';
+  const subtitle = success
+    ? 'You can close this tab and return to your terminal.'
+    : message || 'Something went wrong.';
+
+  const logoSvg = `<svg viewBox="0 0 205 199" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M-4.33e-06 99.93C-4.96e-06 85.57 11.64 73.93 26 73.93c7.88 0 14.94 3.51 19.71 9.04 5.25 6.09 11.36 12.6 19.37 13.33l3.92.36v-.01c.03.01.06.01.09.01L72 96.93c12.69 0 23.98-10.28 24-22.96-.01-7.36-3.48-13.91-8.87-18.11l-1.08-.76c-6.52-4.6-15.3-3.65-23.19-2.46-7.28 1.1-14.97-.88-20.96-6.08C31.06 37.13 29.91 20.71 39.33 9.87 48.75-.96 65.18-2.11 76.01 7.31c5.99 5.21 9.02 12.55 8.94 19.91-.09 7.97.2 16.8 5.66 22.62l.94 1 .11.1.14.12c.22.19.45.37.68.55l.17.13c.25.18.5.36.75.53.64.42 1.31.8 2.01 1.14.48.23.98.44 1.49.62.21.07.42.14.63.21.32.1.64.19.97.27.4.1.8.18 1.2.25.34.06.69.11 1.03.14.58.06 1.17.09 1.77.09 4.2 0 8.03-1.57 10.95-4.16l.94-1c5.46-5.81 5.75-14.65 5.66-22.62-.08-7.36 2.95-14.71 8.94-19.91C139.82-2.11 156.25-.96 165.67 9.87c9.42 10.84 8.27 27.26-2.56 36.68-5.99 5.21-13.69 7.18-20.96 6.08-7.88-1.19-16.67-2.14-23.19 2.46l-1.08.76c-5.39 4.2-8.86 10.75-8.87 18.11.02 12.69 11.31 22.96 24 22.96l2.91-.26.09-.02v.01l3.93-.36c8.01-.73 14.12-7.23 19.37-13.33 4.77-5.54 11.83-9.04 19.71-9.04C193.36 73.93 205 85.57 205 99.93v.07c0 .01 0 .02 0 .03 0 14.36-11.64 26-26 26-7.88 0-14.94-3.51-19.71-9.04-5.25-6.09-11.36-12.6-19.37-13.33l-3.93-.36v.01c-.03-.01-.06-.01-.09-.01L133 103c-12.69 0-23.98 10.28-24 22.97.01 7.36 3.48 13.91 8.87 18.11l1.08.76c6.52 4.6 15.3 3.65 23.19 2.46 7.28-1.1 14.97.88 20.96 6.08 10.84 9.42 11.98 25.84 2.56 36.68-9.42 10.84-25.84 11.98-36.68 2.56-5.99-5.21-9.02-12.55-8.94-19.91.09-7.97-.2-16.8-5.66-22.62l-.94-1c-2.91-2.59-6.75-4.16-10.95-4.16-.6 0-1.19.03-1.77.09-.35.04-.69.09-1.03.14-.34.07-.69.15-1.03.25-.33.08-.65.17-.97.28-.21.07-.42.14-.62.21-.51.18-1.01.39-1.49.62-.7.33-1.37.71-2.01 1.14-.26.17-.5.35-.75.53l-.17.13a11 11 0 0 0-.68.55l-.14.12-.11.1-.94 1.01c-5.46 5.81-5.75 14.65-5.66 22.62.08 7.36-2.95 14.71-8.94 19.91-10.84 9.42-27.26 8.27-36.68-2.56-9.42-10.84-8.27-27.26 2.56-36.68 5.99-5.21 13.69-7.18 20.96-6.08 7.88 1.19 16.67 2.14 23.19-2.46l1.08-.76c5.39-4.2 8.86-10.75 8.87-18.11-.02-12.69-11.31-22.97-24-22.97l-2.91.27c-.03 0-.06.01-.09.01v-.01l-3.93.36c-8.01.73-14.12 7.23-19.37 13.33C40.94 122.49 33.88 126 26 126 11.64 126 0 114.36 0 100l-4.33e-06-.07Z" fill="#FF5C28"/></svg>`;
+
+  const statusIcon = success
+    ? `<div class="icon success"><svg width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="#16a34a" stroke-width="2.5" stroke-linecap="round" stroke-linejoin="round"><polyline points="20 6 9 17 4 12"/></svg></div>`
+    : `<div class="icon error"><svg width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="#ef4444" stroke-width="2.5" stroke-linecap="round" stroke-linejoin="round"><circle cx="12" cy="12" r="10"/><line x1="15" y1="9" x2="9" y2="15"/><line x1="9" y1="9" x2="15" y2="15"/></svg></div>`;
+
+  return `<!DOCTYPE html><html lang="en"><head>
+<meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1">
+<title>Subconscious CLI</title>
+<link rel="preconnect" href="https://fonts.googleapis.com">
+<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
+<link href="https://fonts.googleapis.com/css2?family=Manrope:wght@400;500;600&display=swap" rel="stylesheet">
+<style>
+*{margin:0;padding:0;box-sizing:border-box}
+body{font-family:'Manrope',system-ui,sans-serif;min-height:100vh;background:#F6F3EF;color:#111}
+header{display:flex;align-items:center;gap:10px;padding:20px 24px}
+header svg{width:24px;height:24px}
+header span{font-size:15px;font-weight:600;letter-spacing:-.01em}
+main{display:flex;align-items:center;justify-content:center;min-height:calc(100vh - 160px)}
+.wrap{width:100%;max-width:400px;padding:0 24px}
+.label{text-align:center;font-size:11px;font-weight:500;text-transform:uppercase;
+  letter-spacing:.1em;color:#9ca3af;margin-bottom:16px}
+.card{background:#fff;border:1px solid rgba(0,0,0,.08);border-radius:12px;
+  padding:32px;text-align:center}
+.icon{width:40px;height:40px;border-radius:50%;display:flex;align-items:center;
+  justify-content:center;margin:0 auto 16px}
+.icon.success{background:#f0fdf4}
+.icon.error{background:#fef2f2}
+h1{font-size:15px;font-weight:600;margin-bottom:4px;letter-spacing:-.01em}
+.sub{color:#6b7280;font-size:13px;line-height:1.6;max-width:280px;margin:0 auto}
+.footer{text-align:center;margin-top:16px;font-size:11px;color:#9ca3af}
+</style></head><body>
+<header>${logoSvg}<span>Subconscious</span></header>
+<main><div class="wrap">
+  <div class="label">CLI Authentication</div>
+  <div class="card">
+    ${statusIcon}
+    <h1>${title}</h1>
+    <p class="sub">${subtitle}</p>
+  </div>
+  <div class="footer">subconscious.dev</div>
+</div></main>
+</body></html>`;
+}
+
+// ── Commands ────────────────────────────────────────────────────────────
+
+export async function loginCommand() {
+  const existing = await getApiKey();
+
+  if (existing) {
+    const masked = existing.key.slice(0, 8) + '...' + existing.key.slice(-4);
+    console.log(`\n${c.yellow}Already logged in.${c.reset}`);
+    console.log(`  Key: ${c.dim}${masked}${c.reset}`);
+    console.log(
+      `\n  Run ${c.cyan}subconscious logout${c.reset} first to switch accounts.\n`,
+    );
+    return;
+  }
+
+  console.log();
+  console.log(
+    `  ${c.magenta}${c.bold}Subconscious${c.reset} ${c.dim}— CLI Login${c.reset}`,
+  );
+  console.log();
+
+  const state = crypto.randomBytes(16).toString('hex');
+  const { port, promise } = await startCallbackServer(state);
+
+  const authUrl = `${PLATFORM_URL}/cli/auth?port=${port}&state=${state}`;
+
+  console.log(`  ${c.dim}Opening browser to sign in...${c.reset}`);
+  console.log();
+  console.log(`  ${c.dim}If it doesn't open, visit:${c.reset}`);
+  console.log(`  ${c.underline}${c.cyan}${authUrl}${c.reset}`);
+  console.log();
+
+  openBrowser(authUrl);
+
+  // Spinner while waiting
+  const frames = ['⠋', '⠙', '⠹', '⠸', '⠼', '⠴', '⠦', '⠧', '⠇', '⠏'];
+  let i = 0;
+  const spinner = setInterval(() => {
+    process.stdout.write(
+      `\r  ${c.cyan}${frames[i++ % frames.length]}${c.reset} Waiting for authentication...`,
+    );
+  }, 80);
+
+  process.on('SIGINT', () => {
+    clearInterval(spinner);
+    process.stdout.write('\r' + ' '.repeat(50) + '\r');
+    console.log(`\n  ${c.dim}Login cancelled.${c.reset}\n`);
+    process.exit(0);
+  });
+  try {
+    const result = await promise;
+    clearInterval(spinner);
+    process.stdout.write('\r' + ' '.repeat(50) + '\r');
+
+    const config = await loadConfig();
+    config.subconscious_api_key = result.token;
+    await saveConfig(config);
+
+    const masked = result.token.slice(0, 8) + '...' + result.token.slice(-4);
+    console.log(`  ${c.green}${c.bold}✓ Logged in successfully!${c.reset}`);
+    console.log(`  ${c.dim}Key: ${masked}${c.reset}`);
+    console.log(`  ${c.dim}Saved to ~/.subcon/config.json${c.reset}`);
+    console.log();
+  } catch (error) {
+    clearInterval(spinner);
+    process.stdout.write('\r' + ' '.repeat(50) + '\r');
+    console.error(`  ${c.red}✗ ${error.message}${c.reset}\n`);
+    process.exit(1);
+  }
+}
+
+export async function logoutCommand() {
+  const config = await loadConfig();
+
+  if (!config.subconscious_api_key) {
+    console.log(`\n  ${c.dim}Not logged in.${c.reset}\n`);
+    return;
+  }
+
+  delete config.subconscious_api_key;
+  await saveConfig(config);
+
+  console.log(
+    `\n  ${c.green}✓${c.reset} Logged out. API key removed from ${c.dim}~/.subcon/config.json${c.reset}\n`,
+  );
+}
+
+export async function whoamiCommand() {
+  const auth = await getApiKey();
+
+  if (!auth) {
+    console.log(`\n  ${c.dim}Not logged in.${c.reset}`);
+    console.log(
+      `  Run ${c.cyan}subconscious login${c.reset} to get started.\n`,
+    );
+    return;
+  }
+
+  const { key, source } = auth;
+  const masked = key.slice(0, 8) + '...' + key.slice(-4);
+
+  console.log();
+
+  // Validate the key against the server; falls back to offline display if unreachable
+  try {
+    const res = await fetch(`${PLATFORM_URL}/api/cli/whoami`, {
+      headers: { Authorization: `Bearer ${key}` },
+      signal: AbortSignal.timeout(5000),
+    });
+
+    if (res.ok) {
+      const data = await res.json();
+      console.log(`  ${c.green}✓ Authenticated${c.reset}`);
+      if (data.organization) {
+        console.log(`  ${c.dim}Org:    ${c.reset}${data.organization}`);
+      }
+      console.log(`  ${c.dim}Key:    ${masked}${c.reset}`);
+      console.log(`  ${c.dim}Source: ${source}${c.reset}`);
+    } else {
+      console.log(`  ${c.red}✗ Key is invalid or revoked${c.reset}`);
+      console.log(`  ${c.dim}Key:    ${masked}${c.reset}`);
+      console.log(`  ${c.dim}Source: ${source}${c.reset}`);
+      console.log();
+      console.log(
+        `  Run ${c.cyan}subconscious logout${c.reset} then ${c.cyan}subconscious login${c.reset} to re-authenticate.`,
+      );
+    }
+  } catch {
+    console.log(`  ${c.green}✓ Authenticated${c.reset} ${c.dim}(offline — key not verified)${c.reset}`);
+    console.log(`  ${c.dim}Key:    ${masked}${c.reset}`);
+    console.log(`  ${c.dim}Source: ${source}${c.reset}`);
+  }
+
+  console.log();
+}

package/bin/cli.js

@@ -1,400 +1,53 @@
 #!/usr/bin/env node
 
 /**
- * Subconscious CLI — `login`, `logout`, and `whoami` commands.
+ * Subconscious CLI — log in, then launch coding agents on your hosted models.
  *
- * Login flow (localhost callback pattern, similar to Vercel/Supabase CLIs):
- *  1. CLI generates a random `state` token (CSRF protection) and starts
- *     an ephemeral HTTP server on a random port bound to 127.0.0.1.
- *  2. Opens the browser to {PLATFORM_URL}/cli/auth?port=...&state=...
- *  3. The web app authenticates the user, generates an API key, and
- *     delivers it back to the CLI via a cross-origin fetch to
- *     localhost:{port}/callback?token=...&state=...
- *  4. CLI verifies the `state` matches, saves the key to ~/.subcon/config.json.
+ *   subconscious login | logout | whoami     — manage your API key
+ *   subconscious <agent> [...args]            — launch a coding agent
  *
- * Override SUBCONSCIOUS_URL env var for local development.
+ * Auth lives in ./auth.js, the agent launcher + registry in ./agents.js.
  */
 
-import http from 'node:http';
-import crypto from 'node:crypto';
-import { exec } from 'node:child_process';
 import fs from 'node:fs/promises';
-import os from 'node:os';
-import path from 'node:path';
-
-const CONFIG_DIR = path.join(os.homedir(), '.subcon');
-const CONFIG_FILE = path.join(CONFIG_DIR, 'config.json');
-// Defaults to production. Developers set SUBCONSCIOUS_URL=http://localhost:3000 for local dev.
-const PLATFORM_URL = process.env.SUBCONSCIOUS_URL || 'https://www.subconscious.dev';
-
-const c = {
-  reset: '\x1b[0m',
-  bold: '\x1b[1m',
-  dim: '\x1b[2m',
-  cyan: '\x1b[36m',
-  green: '\x1b[32m',
-  red: '\x1b[31m',
-  yellow: '\x1b[33m',
-  magenta: '\x1b[35m',
-  underline: '\x1b[4m',
-};
-
-// ── Config helpers ──────────────────────────────────────────────────────
-
-async function loadConfig() {
-  try {
-    const content = await fs.readFile(CONFIG_FILE, 'utf-8');
-    return JSON.parse(content);
-  } catch {
-    return {};
-  }
-}
-
-async function saveConfig(config) {
-  await fs.mkdir(CONFIG_DIR, { recursive: true });
-  await fs.writeFile(CONFIG_FILE, JSON.stringify(config, null, 2), 'utf-8');
-  // 0o600 = owner read/write only — the file contains an API key
-  await fs.chmod(CONFIG_FILE, 0o600);
-}
-
-// ── Browser opener ──────────────────────────────────────────────────────
-
-function openBrowser(url) {
-  const cmd =
-    process.platform === 'darwin'
-      ? `open "${url}"`
-      : process.platform === 'win32'
-        ? `start "" "${url}"`
-        : `xdg-open "${url}"`;
-  exec(cmd, (err) => {
-    if (err) {
-      console.log(
-        `\n${c.yellow}Could not open browser automatically.${c.reset}`,
-      );
-      console.log(`Please open this URL manually:\n`);
-      console.log(`  ${c.underline}${c.cyan}${url}${c.reset}\n`);
-    }
-  });
-}
-
-// ── Localhost callback server ───────────────────────────────────────────
-
-function startCallbackServer(expectedState) {
-  return new Promise((resolveSetup) => {
-    let resolveToken, rejectToken;
-    const tokenPromise = new Promise((resolve, reject) => {
-      resolveToken = resolve;
-      rejectToken = reject;
-    });
-
-    const server = http.createServer((req, res) => {
-      // CORS: only allow the web app's origin (production or localhost dev).
-      // This prevents arbitrary websites from hitting this callback.
-      const origin = req.headers.origin || '';
-      const allowed =
-        origin === PLATFORM_URL ||
-        origin.startsWith('http://localhost:');
-      res.setHeader(
-        'Access-Control-Allow-Origin',
-        allowed ? origin : PLATFORM_URL,
-      );
-      res.setHeader('Access-Control-Allow-Methods', 'GET, OPTIONS');
-      res.setHeader('Access-Control-Allow-Headers', 'Content-Type');
-      res.setHeader('Connection', 'close');
-
-      if (req.method === 'OPTIONS') {
-        res.writeHead(204);
-        res.end();
-        return;
-      }
-
-      const url = new URL(req.url, 'http://localhost');
-
-      if (url.pathname !== '/callback') {
-        res.writeHead(404);
-        res.end();
-        return;
-      }
-
-      const token = url.searchParams.get('token');
-      const state = url.searchParams.get('state');
-      const error = url.searchParams.get('error');
-
-      // The web app sends `Accept: application/json` via fetch(); direct
-      // browser visits get the HTML fallback page.
-      const wantsJson = (req.headers.accept || '').includes('application/json');
-      const respond = (ok, msg) => {
-        if (wantsJson) {
-          res.writeHead(ok ? 200 : 400, { 'Content-Type': 'application/json' });
-          res.end(JSON.stringify({ ok, error: msg || undefined }));
-        } else {
-          res.writeHead(200, { 'Content-Type': 'text/html' });
-          res.end(resultPage(ok, msg));
-        }
-      };
-
-      if (error) {
-        respond(false, error);
-        server.close();
-        rejectToken(new Error(error));
-        return;
-      }
-
-      // CSRF check: state token must match what the CLI generated
-      if (state !== expectedState) {
-        respond(false, 'State mismatch — possible CSRF attack. Please try again.');
-        server.close();
-        rejectToken(new Error('State mismatch'));
-        return;
-      }
-
-      if (!token) {
-        respond(false, 'No API key received.');
-        server.close();
-        rejectToken(new Error('No API key received'));
-        return;
-      }
-
-      respond(true);
-      server.close();
-      resolveToken({ token });
-    });
-
-    // Port 0 = OS assigns a random available port. Bound to 127.0.0.1 only.
-    server.listen(0, '127.0.0.1', () => {
-      const port = server.address().port;
-
-      const timeout = setTimeout(() => {
-        server.close();
-        rejectToken(new Error('Authentication timed out (5 min). Please try again.'));
-      }, 5 * 60 * 1000);
-
-      tokenPromise.finally(() => clearTimeout(timeout));
-
-      resolveSetup({ port, promise: tokenPromise });
-    });
-  });
-}
-
-function resultPage(success, message) {
-  const title = success ? 'Authenticated' : 'Authentication failed';
-  const subtitle = success
-    ? 'You can close this tab and return to your terminal.'
-    : message || 'Something went wrong.';
-
-  const logoSvg = `<svg viewBox="0 0 205 199" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M-4.33e-06 99.93C-4.96e-06 85.57 11.64 73.93 26 73.93c7.88 0 14.94 3.51 19.71 9.04 5.25 6.09 11.36 12.6 19.37 13.33l3.92.36v-.01c.03.01.06.01.09.01L72 96.93c12.69 0 23.98-10.28 24-22.96-.01-7.36-3.48-13.91-8.87-18.11l-1.08-.76c-6.52-4.6-15.3-3.65-23.19-2.46-7.28 1.1-14.97-.88-20.96-6.08C31.06 37.13 29.91 20.71 39.33 9.87 48.75-.96 65.18-2.11 76.01 7.31c5.99 5.21 9.02 12.55 8.94 19.91-.09 7.97.2 16.8 5.66 22.62l.94 1 .11.1.14.12c.22.19.45.37.68.55l.17.13c.25.18.5.36.75.53.64.42 1.31.8 2.01 1.14.48.23.98.44 1.49.62.21.07.42.14.63.21.32.1.64.19.97.27.4.1.8.18 1.2.25.34.06.69.11 1.03.14.58.06 1.17.09 1.77.09 4.2 0 8.03-1.57 10.95-4.16l.94-1c5.46-5.81 5.75-14.65 5.66-22.62-.08-7.36 2.95-14.71 8.94-19.91C139.82-2.11 156.25-.96 165.67 9.87c9.42 10.84 8.27 27.26-2.56 36.68-5.99 5.21-13.69 7.18-20.96 6.08-7.88-1.19-16.67-2.14-23.19 2.46l-1.08.76c-5.39 4.2-8.86 10.75-8.87 18.11.02 12.69 11.31 22.96 24 22.96l2.91-.26.09-.02v.01l3.93-.36c8.01-.73 14.12-7.23 19.37-13.33 4.77-5.54 11.83-9.04 19.71-9.04C193.36 73.93 205 85.57 205 99.93v.07c0 .01 0 .02 0 .03 0 14.36-11.64 26-26 26-7.88 0-14.94-3.51-19.71-9.04-5.25-6.09-11.36-12.6-19.37-13.33l-3.93-.36v.01c-.03-.01-.06-.01-.09-.01L133 103c-12.69 0-23.98 10.28-24 22.97.01 7.36 3.48 13.91 8.87 18.11l1.08.76c6.52 4.6 15.3 3.65 23.19 2.46 7.28-1.1 14.97.88 20.96 6.08 10.84 9.42 11.98 25.84 2.56 36.68-9.42 10.84-25.84 11.98-36.68 2.56-5.99-5.21-9.02-12.55-8.94-19.91.09-7.97-.2-16.8-5.66-22.62l-.94-1c-2.91-2.59-6.75-4.16-10.95-4.16-.6 0-1.19.03-1.77.09-.35.04-.69.09-1.03.14-.34.07-.69.15-1.03.25-.33.08-.65.17-.97.28-.21.07-.42.14-.62.21-.51.18-1.01.39-1.49.62-.7.33-1.37.71-2.01 1.14-.26.17-.5.35-.75.53l-.17.13a11 11 0 0 0-.68.55l-.14.12-.11.1-.94 1.01c-5.46 5.81-5.75 14.65-5.66 22.62.08 7.36-2.95 14.71-8.94 19.91-10.84 9.42-27.26 8.27-36.68-2.56-9.42-10.84-8.27-27.26 2.56-36.68 5.99-5.21 13.69-7.18 20.96-6.08 7.88 1.19 16.67 2.14 23.19-2.46l1.08-.76c5.39-4.2 8.86-10.75 8.87-18.11-.02-12.69-11.31-22.97-24-22.97l-2.91.27c-.03 0-.06.01-.09.01v-.01l-3.93.36c-8.01.73-14.12 7.23-19.37 13.33C40.94 122.49 33.88 126 26 126 11.64 126 0 114.36 0 100l-4.33e-06-.07Z" fill="#FF5C28"/></svg>`;
-
-  const statusIcon = success
-    ? `<div class="icon success"><svg width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="#16a34a" stroke-width="2.5" stroke-linecap="round" stroke-linejoin="round"><polyline points="20 6 9 17 4 12"/></svg></div>`
-    : `<div class="icon error"><svg width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="#ef4444" stroke-width="2.5" stroke-linecap="round" stroke-linejoin="round"><circle cx="12" cy="12" r="10"/><line x1="15" y1="9" x2="9" y2="15"/><line x1="9" y1="9" x2="15" y2="15"/></svg></div>`;
-
-  return `<!DOCTYPE html><html lang="en"><head>
-<meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1">
-<title>Subconscious CLI</title>
-<link rel="preconnect" href="https://fonts.googleapis.com">
-<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
-<link href="https://fonts.googleapis.com/css2?family=Manrope:wght@400;500;600&display=swap" rel="stylesheet">
-<style>
-*{margin:0;padding:0;box-sizing:border-box}
-body{font-family:'Manrope',system-ui,sans-serif;min-height:100vh;background:#F6F3EF;color:#111}
-header{display:flex;align-items:center;gap:10px;padding:20px 24px}
-header svg{width:24px;height:24px}
-header span{font-size:15px;font-weight:600;letter-spacing:-.01em}
-main{display:flex;align-items:center;justify-content:center;min-height:calc(100vh - 160px)}
-.wrap{width:100%;max-width:400px;padding:0 24px}
-.label{text-align:center;font-size:11px;font-weight:500;text-transform:uppercase;
-  letter-spacing:.1em;color:#9ca3af;margin-bottom:16px}
-.card{background:#fff;border:1px solid rgba(0,0,0,.08);border-radius:12px;
-  padding:32px;text-align:center}
-.icon{width:40px;height:40px;border-radius:50%;display:flex;align-items:center;
-  justify-content:center;margin:0 auto 16px}
-.icon.success{background:#f0fdf4}
-.icon.error{background:#fef2f2}
-h1{font-size:15px;font-weight:600;margin-bottom:4px;letter-spacing:-.01em}
-.sub{color:#6b7280;font-size:13px;line-height:1.6;max-width:280px;margin:0 auto}
-.footer{text-align:center;margin-top:16px;font-size:11px;color:#9ca3af}
-</style></head><body>
-<header>${logoSvg}<span>Subconscious</span></header>
-<main><div class="wrap">
-  <div class="label">CLI Authentication</div>
-  <div class="card">
-    ${statusIcon}
-    <h1>${title}</h1>
-    <p class="sub">${subtitle}</p>
-  </div>
-  <div class="footer">subconscious.dev</div>
-</div></main>
-</body></html>`;
-}
-
-// ── Commands ────────────────────────────────────────────────────────────
-
-async function loginCommand() {
-  // Environment variable takes precedence over config file
-  const existingConfig = await loadConfig();
-  const existingKey =
-    process.env.SUBCONSCIOUS_API_KEY || existingConfig.subconscious_api_key;
-
-  if (existingKey) {
-    const masked = existingKey.slice(0, 8) + '...' + existingKey.slice(-4);
-    console.log(`\n${c.yellow}Already logged in.${c.reset}`);
-    console.log(`  Key: ${c.dim}${masked}${c.reset}`);
-    console.log(
-      `\n  Run ${c.cyan}subconscious-cli logout${c.reset} first to switch accounts.\n`,
-    );
-    return;
-  }
-
-  console.log();
-  console.log(
-    `  ${c.magenta}${c.bold}Subconscious${c.reset} ${c.dim}— CLI Login${c.reset}`,
-  );
-  console.log();
-
-  const state = crypto.randomBytes(16).toString('hex');
-  const { port, promise } = await startCallbackServer(state);
-
-  const authUrl = `${PLATFORM_URL}/cli/auth?port=${port}&state=${state}`;
-
-  console.log(`  ${c.dim}Opening browser to sign in...${c.reset}`);
-  console.log();
-  console.log(`  ${c.dim}If it doesn't open, visit:${c.reset}`);
-  console.log(`  ${c.underline}${c.cyan}${authUrl}${c.reset}`);
-  console.log();
-
-  openBrowser(authUrl);
-
-  // Spinner while waiting
-  const frames = ['⠋', '⠙', '⠹', '⠸', '⠼', '⠴', '⠦', '⠧', '⠇', '⠏'];
-  let i = 0;
-  const spinner = setInterval(() => {
-    process.stdout.write(
-      `\r  ${c.cyan}${frames[i++ % frames.length]}${c.reset} Waiting for authentication...`,
-    );
-  }, 80);
-
-  process.on('SIGINT', () => {
-    clearInterval(spinner);
-    process.stdout.write('\r' + ' '.repeat(50) + '\r');
-    console.log(`\n  ${c.dim}Login cancelled.${c.reset}\n`);
-    process.exit(0);
-  });
-  try {
-    const result = await promise;
-    clearInterval(spinner);
-    process.stdout.write('\r' + ' '.repeat(50) + '\r');
-
-    const config = await loadConfig();
-    config.subconscious_api_key = result.token;
-    await saveConfig(config);
-
-    const masked = result.token.slice(0, 8) + '...' + result.token.slice(-4);
-    console.log(`  ${c.green}${c.bold}✓ Logged in successfully!${c.reset}`);
-    console.log(`  ${c.dim}Key: ${masked}${c.reset}`);
-    console.log(`  ${c.dim}Saved to ~/.subcon/config.json${c.reset}`);
-    console.log();
-  } catch (error) {
-    clearInterval(spinner);
-    process.stdout.write('\r' + ' '.repeat(50) + '\r');
-    console.error(`  ${c.red}✗ ${error.message}${c.reset}\n`);
-    process.exit(1);
-  }
-}
-
-async function logoutCommand() {
-  const config = await loadConfig();
-
-  if (!config.subconscious_api_key) {
-    console.log(`\n  ${c.dim}Not logged in.${c.reset}\n`);
-    return;
-  }
-
-  delete config.subconscious_api_key;
-  await saveConfig(config);
-
-  console.log(
-    `\n  ${c.green}✓${c.reset} Logged out. API key removed from ${c.dim}~/.subcon/config.json${c.reset}\n`,
-  );
-}
-
-async function whoamiCommand() {
-  const config = await loadConfig();
-  const envKey = process.env.SUBCONSCIOUS_API_KEY;
-  const savedKey = config.subconscious_api_key;
-  const key = envKey || savedKey;
-
-  if (!key) {
-    console.log(`\n  ${c.dim}Not logged in.${c.reset}`);
-    console.log(
-      `  Run ${c.cyan}subconscious-cli login${c.reset} to get started.\n`,
-    );
-    return;
-  }
-
-  const masked = key.slice(0, 8) + '...' + key.slice(-4);
-  const source = envKey
-    ? 'SUBCONSCIOUS_API_KEY env var'
-    : '~/.subcon/config.json';
-
-  console.log();
-
-  // Validate the key against the server; falls back to offline display if unreachable
-  try {
-    const res = await fetch(`${PLATFORM_URL}/api/cli/whoami`, {
-      headers: { Authorization: `Bearer ${key}` },
-      signal: AbortSignal.timeout(5000),
-    });
-
-    if (res.ok) {
-      const data = await res.json();
-      console.log(`  ${c.green}✓ Authenticated${c.reset}`);
-      if (data.organization) {
-        console.log(`  ${c.dim}Org:    ${c.reset}${data.organization}`);
-      }
-      console.log(`  ${c.dim}Key:    ${masked}${c.reset}`);
-      console.log(`  ${c.dim}Source: ${source}${c.reset}`);
-    } else {
-      console.log(`  ${c.red}✗ Key is invalid or revoked${c.reset}`);
-      console.log(`  ${c.dim}Key:    ${masked}${c.reset}`);
-      console.log(`  ${c.dim}Source: ${source}${c.reset}`);
-      console.log();
-      console.log(
-        `  Run ${c.cyan}subconscious-cli logout${c.reset} then ${c.cyan}subconscious-cli login${c.reset} to re-authenticate.`,
-      );
-    }
-  } catch {
-    console.log(`  ${c.green}✓ Authenticated${c.reset} ${c.dim}(offline — key not verified)${c.reset}`);
-    console.log(`  ${c.dim}Key:    ${masked}${c.reset}`);
-    console.log(`  ${c.dim}Source: ${source}${c.reset}`);
-  }
-
-  console.log();
-}
-
-// ── Help & entry ────────────────────────────────────────────────────────
+import { c } from './colors.js';
+import { loginCommand, logoutCommand, whoamiCommand } from './auth.js';
+import { resolveAgent, runAgent, agentList } from './agents.js';
 
 function printHelp() {
+  const agents = agentList()
+    .map(({ name, alias }) => `    ${c.cyan}${alias.padEnd(13)}${c.reset}${c.dim}Launch ${name}${c.reset}`)
+    .join('\n');
+
   console.log(`
   ${c.magenta}${c.bold}Subconscious CLI${c.reset}
 
   ${c.bold}Usage${c.reset}
-    ${c.cyan}subconscious-cli${c.reset} <command>
+    ${c.cyan}subconscious${c.reset} <command> [...args]
+
+  ${c.bold}Auth${c.reset}
+    ${c.cyan}login${c.reset}        Authenticate and save your API key
+    ${c.cyan}logout${c.reset}       Remove saved credentials
+    ${c.cyan}whoami${c.reset}       Show current authentication status
 
-  ${c.bold}Commands${c.reset}
-    ${c.cyan}login${c.reset}     Authenticate and save your API key
-    ${c.cyan}logout${c.reset}    Remove saved credentials
-    ${c.cyan}whoami${c.reset}    Show current authentication status
+  ${c.bold}Coding agents${c.reset}
+${agents}
 
   ${c.bold}Options${c.reset}
+    ${c.dim}--model <id>${c.reset}   Model to use (default subconscious/tim-qwen3.6-27b)
     ${c.dim}-h, --help${c.reset}     Show this help
     ${c.dim}-v, --version${c.reset}  Show version
 
-  ${c.bold}Quick start${c.reset}
-    ${c.dim}$${c.reset} npx subconscious-cli login
+  ${c.bold}Examples${c.reset}
+    ${c.dim}$${c.reset} subconscious login
+    ${c.dim}$${c.reset} subconscious claude-code
+    ${c.dim}$${c.reset} subconscious open-code --model subconscious/tim-qwen3.6-27b
+
+  ${c.dim}Anything after the agent name is forwarded to the underlying CLI.${c.reset}
 `);
 }
 
-const commands = { login: loginCommand, logout: logoutCommand, whoami: whoamiCommand };
+const authCommands = { login: loginCommand, logout: logoutCommand, whoami: whoamiCommand };
 
 async function main() {
   const args = process.argv.slice(2);
@@ -412,14 +65,21 @@ async function main() {
     return;
   }
 
-  const handler = commands[command];
-  if (!handler) {
-    console.error(`\n  ${c.red}Unknown command: ${command}${c.reset}`);
-    printHelp();
-    process.exit(1);
+  const authHandler = authCommands[command];
+  if (authHandler) {
+    await authHandler(args.slice(1));
+    return;
   }
 
-  await handler(args.slice(1));
+  const agent = resolveAgent(command);
+  if (agent) {
+    await runAgent(agent, args.slice(1));
+    return;
+  }
+
+  console.error(`\n  ${c.red}Unknown command: ${command}${c.reset}`);
+  printHelp();
+  process.exit(1);
 }
 
 main().catch((error) => {

package/bin/colors.js

@@ -0,0 +1,12 @@
+// ANSI color helpers shared across the CLI.
+export const c = {
+  reset: '\x1b[0m',
+  bold: '\x1b[1m',
+  dim: '\x1b[2m',
+  cyan: '\x1b[36m',
+  green: '\x1b[32m',
+  red: '\x1b[31m',
+  yellow: '\x1b[33m',
+  magenta: '\x1b[35m',
+  underline: '\x1b[4m',
+};

package/package.json

@@ -1,8 +1,9 @@
 {
   "name": "subconscious-cli",
-  "version": "0.1.1",
-  "description": "CLI for Subconscious — authenticate and manage your API keys",
+  "version": "0.2.0",
+  "description": "CLI for Subconscious — log in and launch coding agents (Claude Code, OpenCode, Aider, Codex) on your hosted models",
   "bin": {
+    "subconscious": "./bin/cli.js",
     "subconscious-cli": "./bin/cli.js"
   },
   "files": [
@@ -22,7 +23,13 @@
     "ai",
     "cli",
     "api-key",
-    "authentication"
+    "authentication",
+    "coding-agent",
+    "claude-code",
+    "opencode",
+    "aider",
+    "codex",
+    "launcher"
   ],
   "author": "Subconscious Systems",
   "license": "MIT"