subconscious-cli 4.0.14 → 4.0.16

package/README.md

@@ -7,6 +7,7 @@ Log in to Subconscious, then run coding agents against the Subconscious gateway.
 ```bash
 npm install -g subconscious-cli
 subc login
+subc sc
 subc claude
 ```
 
@@ -21,7 +22,7 @@ never block the requested command. Set `SUBC_DISABLE_UPDATE_CHECK=1` to suppress
 the check in offline automation.
 
 Login creates both the saved credential and a ready-to-use `default` profile,
-so Claude Code, Codex, OpenCode, and DeepSeek Harness can launch immediately.
+so Subconscious Code, Claude Code, Codex, OpenCode, and DeepSeek Harness can launch immediately.
 Persistent editor and Pi integrations are installed per agent:
 
 ```bash
@@ -52,6 +53,7 @@ profile; they do not authenticate, install, configure, or launch anything:
 
 ```bash
 subc claude help
+subc sc help
 subc codex help
 subc cursor help
 subc config help
@@ -66,6 +68,7 @@ gateway environment applied for that process. Arguments pass through as usual:
 
 ```bash
 subc claude --continue
+subc sc -- -p "fix the tests"
 subc codex exec "write a test"
 subc opencode
 subc pi
@@ -78,6 +81,7 @@ The packaged integrations live in `cli/bin/runbook`.
 
 | Command | Behavior |
 | --- | --- |
+| `subc sc` | Launch Subconscious Code with the active gateway, key, model, and DLR transport |
 | `subc claude` | Launch Claude Code with the runbook environment, context limits, subagent limits, and OTEL usage reporting |
 | `subc codex` | Launch Codex with the runbook provider, temporary model catalog, and surgically merged compaction hooks |
 | `subc opencode` | Launch OpenCode with the runbook provider, client header, and context/output limits |
@@ -86,11 +90,16 @@ The packaged integrations live in `cli/bin/runbook`.
 | `subc pi` | Refresh the Pi provider from the live catalog, then launch |
 | `subc dsh` | Launch the DeepSeek Harness Web UI with a temporary provider populated from the live catalog |
 
-If Claude Code, Codex, OpenCode, or DeepSeek Harness is missing, an interactive terminal offers
+If Subconscious Code, Claude Code, Codex, OpenCode, or DeepSeek Harness is missing, an interactive terminal offers
 to install it before launching. Pi refreshes its Subconscious provider on every
 `subc pi` launch while preserving all other providers in `models.json`; its
 executable must already be installed.
 
+`subc sc install` detects the operating system and architecture, then downloads
+and checksum-verifies the matching precompiled release from
+`subconscious-systems/subconscious-code`. Apple Silicon and Intel macOS plus
+x86_64 and ARM64 Linux are supported; Cargo is not required.
+
 `subc codex` disables Codex apps and plugin tools for that launch by default so
 requests remain below the gateway's 128-tool limit. Core coding tools remain
 available. Use `subc codex --external-tools` to opt back in when targeting a
@@ -145,7 +154,7 @@ rewritten. Run a one-shot task with `subc dsh headless "PROMPT"`.
 ```
 
 The file is mode `600` and contains the shared gateway URL, API key, model,
-optional per-agent key overrides, and all Claude/Codex/OpenCode/Pi/Copilot/
+optional per-agent key overrides, and all Subconscious Code/Claude/Codex/OpenCode/Pi/Copilot/
 DeepSeek Harness context and output settings used by the packaged runbook scripts.
 
 ```bash

package/bin/agents.js

@@ -164,6 +164,17 @@ export function parseAgentAction(agent, argv = []) {
 }
 
 const AGENT_HELP = {
+  'subconscious-code': {
+    usage: 'subc [-p NAME] sc [help|install] [Subconscious Code arguments...]',
+    behavior:
+      'Launches the native Subconscious coding agent with the selected profile gateway, credential, and model.',
+    options: [
+      ['help', 'Show this help'],
+      ['install', 'Install the latest precompiled Linux or macOS release'],
+      ['--model MODEL', 'Override the profile model for this launch'],
+      ['ARGS...', 'Pass arguments directly to Subconscious Code'],
+    ],
+  },
   'claude-code': {
     usage: 'subc [-p NAME] claude [help|status|uninstall] [Claude arguments...]',
     behavior:
@@ -309,9 +320,10 @@ export function printAgentHelp(agent, profile) {
   );
   const actions = agentSetupActions(agent);
   if (actions.includes('install')) {
-    console.log(
-      `  Install the persistent integration with ${c.cyan}subc ${command} install${c.reset}.`,
-    );
+    const installDescription = agent.runbook?.binaryInstallScript
+      ? 'Install the agent binary with'
+      : 'Install the persistent integration with';
+    console.log(`  ${installDescription} ${c.cyan}subc ${command} install${c.reset}.`);
   }
   if (actions.includes('uninstall')) {
     console.log(
@@ -397,6 +409,7 @@ function candidateBinDirs() {
     if (home) dirs.push(path.join(home, '.local', 'bin'));
   } else {
     dirs.push(path.join(home, '.local', 'bin'));
+    dirs.push(path.join(home, '.cargo', 'bin'));
     dirs.push('/opt/homebrew/bin');
     dirs.push('/usr/local/bin');
   }
@@ -418,6 +431,20 @@ function candidateBinDirs() {
   return [...new Set(dirs.filter(Boolean))];
 }
 
+/** Resolve an agent-managed binary directory declared by the registry. */
+export function preferredBinDirsForAgent(
+  agent,
+  environment = process.env,
+  home = os.homedir(),
+) {
+  const envName = agent.runbook?.installDirEnv;
+  const configured = envName ? environment[envName]?.trim() : '';
+  if (configured) return [path.resolve(configured)];
+
+  const installDir = agent.runbook?.installDir?.trim();
+  return installDir ? [path.resolve(home, installDir)] : [];
+}
+
 /** Executable extensions to probe (Windows uses PATHEXT). */
 function binExts() {
   return process.platform === 'win32'
@@ -430,9 +457,9 @@ function binExts() {
  * containing the executable if found, otherwise null. Searching the candidate
  * dirs lets us find binaries installed this session that aren't on PATH yet.
  */
-async function resolveBinPath(bin) {
+async function resolveBinPath(bin, preferredDirs = []) {
   const pathDirs = (process.env.PATH || '').split(path.delimiter).filter(Boolean);
-  const dirs = [...pathDirs, ...candidateBinDirs()];
+  const dirs = [...new Set([...preferredDirs, ...pathDirs, ...candidateBinDirs()])];
   const exts = binExts();
   for (const dir of dirs) {
     for (const ext of exts) {
@@ -452,11 +479,24 @@ async function resolveBinPath(bin) {
  * Build a PATH string with `extraDirs` prepended (deduped against PATH).
  * Returns the augmented PATH value for use in a child env.
  */
-function augmentPath(extraDirs) {
-  const current = (process.env.PATH || '').split(path.delimiter).filter(Boolean);
+export function augmentPath(
+  extraDirs,
+  preferredDir,
+  currentPath = process.env.PATH || '',
+) {
+  const current = currentPath.split(path.delimiter).filter(Boolean);
   const seen = new Set(current);
-  const prepend = extraDirs.filter((d) => d && !seen.has(d));
-  return [...prepend, ...current].join(path.delimiter);
+  const prepend = extraDirs.filter(
+    (dir, index) =>
+      dir &&
+      dir !== preferredDir &&
+      !seen.has(dir) &&
+      extraDirs.indexOf(dir) === index,
+  );
+  const remaining = current.filter((dir) => dir !== preferredDir);
+  return [...(preferredDir ? [preferredDir] : []), ...prepend, ...remaining].join(
+    path.delimiter,
+  );
 }
 
 /** Ask a yes/no question on the TTY. Empty answer counts as yes. */
@@ -481,10 +521,15 @@ function waitForEnter(prompt) {
   });
 }
 
-/** Run the agent's install command (may contain `&&`, so shell:true). */
-function runInstaller(install) {
+/** Run the agent's packaged binary installer, or its shell install command. */
+function runInstaller(agent, install = agent.install, usePackagedScript = true) {
   return new Promise((resolve) => {
-    const child = spawn(install, { shell: true, stdio: 'inherit' });
+    const installScript = usePackagedScript && agent.runbook?.binaryInstallScript;
+    const child = installScript
+      ? spawn('bash', [runbookScriptPath(agent, installScript), 'install'], {
+          stdio: 'inherit',
+        })
+      : spawn(install, { shell: true, stdio: 'inherit' });
     child.on('error', () => resolve(false));
     child.on('exit', (code) => resolve(code === 0));
   });
@@ -511,7 +556,8 @@ function printInstallCommands(agent) {
  * success. May exit the process on failure or when manual action is needed.
  */
 async function ensureInstalled(agent) {
-  const existing = await resolveBinPath(agent.bin);
+  const preferredDirs = preferredBinDirsForAgent(agent);
+  const existing = await resolveBinPath(agent.bin, preferredDirs);
   if (existing) return existing;
 
   // Agents without an installer are launch-only. Their setup integration may
@@ -544,14 +590,14 @@ async function ensureInstalled(agent) {
   }
 
   console.error(`\n  ${c.dim}Running ${c.reset}${c.cyan}${agent.install}${c.reset}\n`);
-  let installed = await runInstaller(agent.install);
+  let installed = await runInstaller(agent);
 
   // Primary failed and a fallback exists — try it once.
   if (!installed && agent.installFallback) {
     console.error(
       `\n  ${c.dim}That didn't work. Trying the fallback: ${c.reset}${c.cyan}${agent.installFallback}${c.reset}\n`,
     );
-    installed = await runInstaller(agent.installFallback);
+    installed = await runInstaller(agent, agent.installFallback, false);
   }
 
   if (!installed) {
@@ -562,7 +608,7 @@ async function ensureInstalled(agent) {
 
   // PATH hardening: the freshly-installed binary is often not on the current
   // process's PATH. Re-resolve against PATH + candidate dirs.
-  const found = await resolveBinPath(agent.bin);
+  const found = await resolveBinPath(agent.bin, preferredDirs);
   if (found) return found;
 
   console.error(
@@ -587,7 +633,13 @@ export function readClaudeVersion(bin, binDir, options = {}) {
     const stdout = execFile(bin, ['--version'], {
       encoding: 'utf-8',
       stdio: ['ignore', 'pipe', 'pipe'],
-      env: { ...process.env, PATH: augmentPath([binDir, ...candidateBinDirs()].filter(Boolean)) },
+      env: {
+        ...process.env,
+        PATH: augmentPath(
+          [binDir, ...candidateBinDirs()].filter(Boolean),
+          binDir,
+        ),
+      },
       timeout: options.timeoutMs ?? 3000,
     });
     return parseClaudeVersion(typeof stdout === 'string' ? stdout : stdout?.toString?.());
@@ -834,7 +886,7 @@ export function runbookEnv(
           }
         : {}),
       SUBC_ENV_FILE: os.devNull,
-      PATH: augmentPath(extraDirs),
+      PATH: augmentPath(extraDirs, binDir),
     },
     picker,
     models,
@@ -874,7 +926,7 @@ export function selectLaunchModel(requestedModel, modelSource, catalog) {
 }
 
 async function runRunbookSetup(agent, argv, profile, relativeScript = agent.runbook.script) {
-  if (isSetupWithoutAuth(argv)) {
+  if (isSetupWithoutAuth(argv) || agent.runbook?.setupNeedsAuth === false) {
     return spawnRunbook(agent, argv, {
       ...(profile?.values || {}),
       ...process.env,
@@ -987,7 +1039,7 @@ export async function runAgent(agent, argv, options = {}) {
     ...envMap,
     ...(profile?.values || {}),
     ...process.env,
-    PATH: augmentPath(extraDirs),
+    PATH: augmentPath(extraDirs, binDir),
   };
   const args = [...launchArgs, ...rest];
 

package/bin/profiles.js

@@ -38,6 +38,7 @@ export const RUNBOOK_DEFAULTS = {
   GATEWAY_URL: registry.defaults.baseUrl,
   API_KEY: '',
   MODEL: registry.defaults.model,
+  SC_API_KEY: '',
   CLAUDE_CODE_SUBAGENT_MODEL: '',
   CLAUDE_GATEWAY_URL: '',
   CLAUDE_CODE_API_KEY: '',
@@ -89,6 +90,12 @@ const SETTINGS = {
     type: 'choice',
     choices: SUPPORTED_MODELS,
   },
+  SC_API_KEY: {
+    key: 'SC_API_KEY',
+    label: 'Subconscious Code API key',
+    description: 'Subconscious Code credential override; blank uses API_KEY.',
+    type: 'secret',
+  },
   CLAUDE_CODE_SUBAGENT_MODEL: {
     key: 'CLAUDE_CODE_SUBAGENT_MODEL',
     label: 'Subagent model',
@@ -274,6 +281,7 @@ const SETTINGS = {
 };
 
 const AGENT_SETTING_KEYS = {
+  'subconscious-code': ['SC_API_KEY'],
   'claude-code': [
     'CLAUDE_GATEWAY_URL',
     'CLAUDE_CODE_API_KEY',
@@ -346,6 +354,7 @@ ${modelComments}
 MODEL={MODEL}
 
 # Optional per-agent keys. Leave blank to use API_KEY above.
+SC_API_KEY={SC_API_KEY}
 CLAUDE_CODE_API_KEY={CLAUDE_CODE_API_KEY}
 CODEX_API_KEY={CODEX_API_KEY}
 OPENCODE_API_KEY={OPENCODE_API_KEY}

package/bin/registry.generated.json

@@ -13,6 +13,50 @@
     "platformUrl": "https://subconscious.dev/platform"
   },
   "agents": [
+    {
+      "id": "subconscious-code",
+      "command": "sc",
+      "name": "Subconscious Code",
+      "aliases": [
+        "subconscious-code"
+      ],
+      "description": "Launch the native Subconscious coding agent with the active profile, gateway, and model.",
+      "framework": "Subconscious Code",
+      "language": "rust",
+      "category": "coding-agent",
+      "tags": [
+        "local",
+        "cli",
+        "agents"
+      ],
+      "protocol": "openai",
+      "homepage": "https://github.com/subconscious-systems/subconscious-code",
+      "bin": "sc",
+      "install": {
+        "darwin": "subc sc install",
+        "linux": "subc sc install"
+      },
+      "runbook": {
+        "mode": "launch",
+        "script": "subconscious-code/run.sh",
+        "setupScript": "subconscious-code/install.sh",
+        "binaryInstallScript": "subconscious-code/install.sh",
+        "installDirEnv": "SC_INSTALL_DIR",
+        "installDir": ".local/bin",
+        "setupActions": [
+          "install"
+        ],
+        "setupNeedsAuth": false
+      },
+      "launch": "sc",
+      "env": {
+        "SC_BASE_URL": "{baseUrlV1}",
+        "SC_DLR_URL": "{baseUrl}",
+        "SC_DLR_ENABLED": "true",
+        "SC_API_KEY": "{apiKey}",
+        "SC_MODEL": "{model}"
+      }
+    },
     {
       "id": "claude-code",
       "command": "claude",

package/bin/runbook/README.md

@@ -1,7 +1,7 @@
 # Coding-agent integrations
 
 These scripts are part of `subc`. They launch or surgically install Claude Code,
-Codex, OpenCode, DeepSeek Harness, Cursor, Copilot, and Pi against the
+Subconscious Code, Codex, OpenCode, DeepSeek Harness, Cursor, Copilot, and Pi against the
 Subconscious gateway.
 
 `subc` reads `~/.subconscious/profiles/<name>.env` and injects those values into
@@ -10,6 +10,7 @@ directly, `SUBC_ENV_FILE` (or `cli/bin/runbook/.env`) can supply the same keys.
 
 Included integrations:
 
+- `subconscious-code/install.sh` and `run.sh`
 - `claude-code/install.sh` and `run.sh`
 - `codex/install.sh`, `run.sh`, `hook.sh`, `hooks.json`, and `hooks-lib.sh`
 - `opencode/install.sh`, `run.sh`, and `subconscious-compaction.ts`

package/bin/runbook/subconscious-code/install.sh

@@ -0,0 +1,120 @@
+#!/usr/bin/env bash
+# Install a precompiled Subconscious Code release for the current platform.
+
+set -euo pipefail
+
+REPOSITORY="subconscious-systems/subconscious-code"
+REPOSITORY_URL="https://github.com/${REPOSITORY}"
+INSTALL_DIR="${SC_INSTALL_DIR:-${HOME}/.local/bin}"
+
+usage() {
+  cat <<'EOF'
+Usage: subc sc install
+
+Install the latest Subconscious Code release. Linux downloads and verifies the
+published static binary. macOS downloads and verifies the matching native binary.
+EOF
+}
+
+case "${1:-install}" in
+  install) ;;
+  help|-h|--help)
+    usage
+    exit 0
+    ;;
+  *)
+    echo "error: unsupported Subconscious Code setup action: $1" >&2
+    usage >&2
+    exit 2
+    ;;
+esac
+
+release_tag() {
+  if [[ -n "${SC_CODE_VERSION:-}" ]]; then
+    printf '%s\n' "${SC_CODE_VERSION#v}"
+    return
+  fi
+  if command -v gh >/dev/null 2>&1; then
+    local tag
+    tag="$(gh release view --repo "$REPOSITORY" --json tagName --jq '.tagName' 2>/dev/null || true)"
+    if [[ -n "$tag" ]]; then
+      printf '%s\n' "${tag#v}"
+      return
+    fi
+  fi
+  if command -v curl >/dev/null 2>&1; then
+    local tag
+    tag="$(curl -fsSL "https://api.github.com/repos/${REPOSITORY}/releases/latest" 2>/dev/null \
+      | sed -n 's/.*"tag_name"[[:space:]]*:[[:space:]]*"\([^"]*\)".*/\1/p' \
+      | head -n 1 || true)"
+    if [[ -n "$tag" ]]; then
+      printf '%s\n' "${tag#v}"
+      return
+    fi
+  fi
+  return 1
+}
+
+platform="$(uname -s)"
+architecture="$(uname -m)"
+version="$(release_tag || true)"
+
+if [[ -z "$version" ]]; then
+  echo "error: no published Subconscious Code release is available yet" >&2
+  echo "The release may still be building. Retry subc sc install after it finishes." >&2
+  exit 1
+fi
+
+case "${platform}:${architecture}" in
+  Darwin:arm64) target="aarch64-apple-darwin" ;;
+  Darwin:x86_64) target="x86_64-apple-darwin" ;;
+  Linux:aarch64|Linux:arm64) target="aarch64-unknown-linux-musl" ;;
+  Linux:x86_64|Linux:amd64) target="x86_64-unknown-linux-musl" ;;
+  *)
+    echo "error: unsupported platform or architecture: ${platform} ${architecture}" >&2
+    exit 1
+    ;;
+esac
+
+asset="sc-${target}.tar.gz"
+checksum="${asset}.sha256"
+work_dir="$(mktemp -d "${TMPDIR:-/tmp}/subc-sc-install.XXXXXX")"
+cleanup() {
+  rm -f "$work_dir/$asset" "$work_dir/$checksum" "$work_dir/sc"
+  rmdir "$work_dir" 2>/dev/null || true
+}
+trap cleanup EXIT HUP INT TERM
+
+echo "Downloading Subconscious Code v${version} for ${target}..."
+if command -v gh >/dev/null 2>&1 \
+  && gh release view "v${version}" --repo "$REPOSITORY" >/dev/null 2>&1; then
+  gh release download "v${version}" --repo "$REPOSITORY" \
+    --pattern "$asset" --pattern "$checksum" --dir "$work_dir"
+else
+  command -v curl >/dev/null 2>&1 || {
+    echo "error: curl is required to download Subconscious Code" >&2
+    exit 1
+  }
+  release_url="${REPOSITORY_URL}/releases/download/v${version}"
+  curl -fL "${release_url}/${asset}" -o "$work_dir/$asset"
+  curl -fL "${release_url}/${checksum}" -o "$work_dir/$checksum"
+fi
+
+if command -v sha256sum >/dev/null 2>&1; then
+  (cd "$work_dir" && sha256sum --check "$checksum")
+elif command -v shasum >/dev/null 2>&1; then
+  expected="$(awk '{print $1}' "$work_dir/$checksum")"
+  actual="$(shasum -a 256 "$work_dir/$asset" | awk '{print $1}')"
+  [[ "$actual" == "$expected" ]] || {
+    echo "error: Subconscious Code checksum verification failed" >&2
+    exit 1
+  }
+else
+  echo "error: sha256sum or shasum is required to verify the download" >&2
+  exit 1
+fi
+
+tar -xzf "$work_dir/$asset" -C "$work_dir" sc
+mkdir -p "$INSTALL_DIR"
+install -m 0755 "$work_dir/sc" "$INSTALL_DIR/sc"
+echo "Installed Subconscious Code v${version} to $INSTALL_DIR/sc"

package/bin/runbook/subconscious-code/run.sh

@@ -0,0 +1,21 @@
+#!/usr/bin/env bash
+# Launch Subconscious Code without changing ~/.sc or project settings.
+
+set -euo pipefail
+
+GATEWAY_URL="${GATEWAY_URL:-}"
+API_KEY="${SC_API_KEY:-${API_KEY:-}}"
+MODEL="${MODEL:-subconscious/glm-5.2}"
+
+if [[ -z "$GATEWAY_URL" || -z "$API_KEY" ]]; then
+  echo "error: GATEWAY_URL and API_KEY are required to launch Subconscious Code" >&2
+  exit 1
+fi
+
+export SC_API_KEY="$API_KEY"
+export SC_BASE_URL="${GATEWAY_URL%/}/v1"
+export SC_DLR_URL="${GATEWAY_URL%/}"
+export SC_DLR_ENABLED=true
+export SC_MODEL="$MODEL"
+
+exec sc "$@"

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "subconscious-cli",
-  "version": "4.0.14",
-  "description": "CLI for Subconscious — run Claude Code, Codex, OpenCode, DeepSeek Harness, Cursor, Copilot, and Pi",
+  "version": "4.0.16",
+  "description": "CLI for Subconscious — run Subconscious Code, Claude Code, Codex, OpenCode, DeepSeek Harness, Cursor, Copilot, and Pi",
   "bin": {
     "subc": "bin/cli.js"
   },
@@ -33,6 +33,7 @@
     "authentication",
     "profiles",
     "coding-agent",
+    "subconscious-code",
     "claude-code",
     "opencode",
     "codex",