subconscious-cli 6.1.0 → 6.2.1

package/bin/runbook/README.md

@@ -8,7 +8,6 @@ the default gateway, model capabilities, and the settings every agent uses
 
 | Agent | Launch | Setup |
 | --- | --- | --- |
-| `subconscious-code` (Marathon) | binary | `install.sh` (binary installer) |
 | `claude-code` | binary | `install.sh` (leftover status/uninstall) |
 | `codex` | `run.sh` | `install.sh` (hooks) |
 | `opencode` | binary | `install.sh` (leftover status/uninstall) |
@@ -22,7 +21,7 @@ the default gateway, model capabilities, and the settings every agent uses
 | Field | Read by |
 | --- | --- |
 | `id`, `command`, `aliases`, `name`, `description` | routing, `subc help`, the TUI menu |
-| `install` | the installer prompt, `--version` warning (`minimum_version`), Windows installs; `{package}` fills in the commands |
+| `install` | the missing-agent message, agent help, and the upgrade warning (`minimum_version`); `{package}` fills in `commands` |
 | `runbook` | which script launches the agent (none means the binary is run directly) and which setup actions exist |
 | `help` | `subc <agent> help`; flags with a `help` text are added from `inputs` |
 | `sessions`, `launch.resume`, `launch.handoff` | `subc sessions resume` |
@@ -32,6 +31,18 @@ the default gateway, model capabilities, and the settings every agent uses
 | `config` | `cli-config` entries become `config_flag NAME=VALUE` (Codex `-c`) when `when` holds; other entries describe files the runbooks write |
 | `capabilities`, `prerequisites` | the harness manifest only |
 
+## Install data is display-only
+
+subc never installs an agent. When an agent's binary is missing, subc prints
+`install.commands` for the current OS and `install.url`, then exits with
+status 127. Windows never shows the Linux command. Rules for `install`, checked
+by `bin/agent-data.js` and `test/agent-install-policy.test.js`:
+
+- `url` is required: an `https://` link to the vendor's official install page.
+- `commands` is `null`, or an object keyed by `darwin`, `linux`, and `win32`.
+- A command is one the user can paste, such as `npm i -g {package}`. It never
+  pipes a downloaded script into a shell.
+
 Values may use `{baseUrl}`, `{baseUrlV1}`, `{apiKey}`, `{model}`, `{prompt}`,
 `{args}`, `{config}`, and `${NAME}` for another input or env entry.
 `subc harness-manifest --json` prints every agent file with `${NAME}` replaced

package/bin/runbook/claude-code/agent.json

@@ -8,15 +8,15 @@
   "homepage": "https://docs.anthropic.com/en/docs/claude-code",
   "install": {
     "commands": {
-      "darwin": "curl -fsSL https://claude.ai/install.sh | bash",
-      "linux": "curl -fsSL https://claude.ai/install.sh | bash",
-      "win32": "powershell -ExecutionPolicy Bypass -Command \"irm https://claude.ai/install.ps1 | iex\"",
-      "fallback": "npm i -g {package}"
+      "darwin": "npm i -g {package}",
+      "linux": "npm i -g {package}",
+      "win32": "npm i -g {package}"
     },
-    "method": "script",
+    "url": "https://code.claude.com/docs/en/setup",
+    "method": "npm",
     "package": "@anthropic-ai/claude-code",
     "version": null,
-    "channel": "installer default (unpinned)",
+    "channel": "latest (unpinned)",
     "minimum_version": "2.1.242",
     "verified": true,
     "note": "subc warns, and does not block, below minimum_version."

package/bin/runbook/codex/agent.json

@@ -12,6 +12,7 @@
       "linux": "npm i -g {package}",
       "win32": "npm i -g {package}"
     },
+    "url": "https://developers.openai.com/codex/cli",
     "method": "npm",
     "package": "@openai/codex",
     "version": null,

package/bin/runbook/copilot/agent.json

@@ -8,6 +8,7 @@
   "homepage": "https://code.visualstudio.com/docs/copilot/overview",
   "install": {
     "commands": null,
+    "url": "https://code.visualstudio.com/docs/setup/copilot",
     "method": "user",
     "package": null,
     "version": null,

package/bin/runbook/cursor/agent.json

@@ -3,11 +3,12 @@
   "command": "cursor",
   "aliases": [],
   "name": "Cursor",
-  "description": "Install Cursor conversation and compaction hooks, then finish model setup in Cursor Settings.",
+  "description": "Install Cursor conversation and compaction hooks in the Cursor desktop app and IDE, then finish model setup in Cursor Settings. The Cursor CLI is not supported.",
   "protocol": "openai",
   "homepage": "https://cursor.com",
   "install": {
     "commands": null,
+    "url": "https://cursor.com/download",
     "method": "user",
     "package": null,
     "version": null,
@@ -22,7 +23,7 @@
   },
   "help": {
     "usage": "subc [-p NAME] cursor [help|install|status|uninstall]",
-    "behavior": "Manages Cursor correlation hooks; model endpoint setup is completed in Cursor Settings.",
+    "behavior": "Manages Cursor correlation hooks in the Cursor desktop app and IDE; model endpoint setup is completed in Cursor Settings. The Cursor CLI is not supported.",
     "options": [
       ["help", "Show this help"],
       ["install", "Install or update the Cursor hooks (default action)"],

package/bin/runbook/deepseek-harness/agent.json

@@ -12,6 +12,7 @@
       "linux": "npm i -g {package}",
       "win32": "npm i -g {package}"
     },
+    "url": "https://www.deepseek.com/harness/en/",
     "method": "npm",
     "package": "@deepseek-ai/dsh",
     "version": null,

package/bin/runbook/opencode/agent.json

@@ -12,6 +12,7 @@
       "linux": "npm i -g {package}",
       "win32": "npm i -g {package}"
     },
+    "url": "https://opencode.ai/docs",
     "method": "npm",
     "package": "opencode-ai",
     "version": null,

package/bin/runbook/pi/agent.json

@@ -8,6 +8,7 @@
   "homepage": "https://pi.dev",
   "install": {
     "commands": null,
+    "url": "https://pi.dev",
     "method": null,
     "package": null,
     "version": null,

package/bin/runbook/shared.json

@@ -1,9 +1,8 @@
 {
   "agents": [
-    "subconscious-code",
+    "opencode",
     "claude-code",
     "codex",
-    "opencode",
     "cursor",
     "copilot",
     "pi",

package/bin/sessions.js

@@ -1,4 +1,3 @@
-import { spawnSync } from 'node:child_process';
 import fs from 'node:fs/promises';
 import os from 'node:os';
 import path from 'node:path';
@@ -6,7 +5,7 @@ import { AGENTS, agentById, agentCommandName } from './agent-data.js';
 import { resolveAgent, runAgent } from './agents.js';
 
 import { c } from './colors.js';
-import { spawnWindowsSync } from './windows/process.js';
+import { runCommand } from './command-output.js';
 
 const MAX_CANDIDATE_FILES = 160;
 const MAX_READ_BYTES = 2 * 1024 * 1024;
@@ -231,14 +230,6 @@ function piMessages(records) {
   });
 }
 
-function scMessages(records) {
-  return records.flatMap((record) => {
-    if (!['user', 'assistant'].includes(record.type)) return [];
-    const text = cleanText(record.text ?? record.content);
-    return text ? [{ role: record.type, text }] : [];
-  });
-}
-
 async function parseFileSession(entry, harness) {
   const records = parseLines(await readBounded(entry.file, MAX_METADATA_BYTES));
   if (!records.length) return null;
@@ -304,19 +295,6 @@ async function parseFileSession(entry, harness) {
     });
   }
 
-  if (harness === 'sc') {
-    const meta = records[0] || {};
-    const messages = scMessages(records);
-    const id = String(meta.id || filename).replace(/^session-/, '');
-    return sessionRecord(harness, id, {
-      title: messages.find((message) => message.role === 'user')?.text,
-      cwd: meta.cwd,
-      model: meta.model,
-      updated: entry.updated,
-      sourcePath: entry.file,
-    });
-  }
-
   return null;
 }
 
@@ -420,12 +398,11 @@ async function discoverCodexIndex(root, indexFile, max) {
   );
 }
 
-function commandResult(execute, command, args, options = {}) {
-  const result = execute(command, args, {
-    encoding: 'utf8',
-    timeout: options.timeout ?? 5_000,
+async function commandResult(execute, command, args, options = {}) {
+  const result = await execute(command, args, {
+    timeout: options.timeout,
+    signal: options.signal,
     env: { ...process.env, NO_COLOR: '1' },
-    maxBuffer: 4 * 1024 * 1024,
   });
   if (result.error || result.status !== 0) return '';
   return String(result.stdout || '').trim();
@@ -443,18 +420,18 @@ function sqlString(value) {
   return `'${String(value).replaceAll("'", "''")}'`;
 }
 
-function discoverOpenCodeSessions(execute, max) {
+async function discoverOpenCodeSessions(execute, max, options = {}) {
   const query = [
     'select id, title, directory, time_created, time_updated, model',
     'from session where time_archived is null',
     `order by time_updated desc limit ${Math.max(1, Math.min(500, max))}`,
   ].join(' ');
-  const output = commandResult(execute, 'opencode', [
-    'db',
-    '--format',
-    'json',
-    query,
-  ]);
+  const output = await commandResult(
+    execute,
+    'opencode',
+    ['db', '--format', 'json', query],
+    options,
+  );
   if (!output) return [];
   try {
     return JSON.parse(output).map((record) =>
@@ -473,14 +450,11 @@ function discoverOpenCodeSessions(execute, max) {
 export async function discoverSessions(options = {}) {
   const home = options.home || os.homedir();
   const max = options.max || 500;
-  const execute =
-    options.execute ||
-    (process.platform === 'win32' ? spawnWindowsSync : spawnSync);
+  const execute = options.execute || runCommand;
   const roots = options.roots || {
     claude: path.join(home, '.claude', 'projects'),
     codex: path.join(home, '.codex', 'sessions'),
     pi: path.join(home, '.pi', 'agent', 'sessions'),
-    sc: path.join(home, '.sc', 'sessions'),
   };
   const indexes =
     options.indexes ||
@@ -498,9 +472,11 @@ export async function discoverSessions(options = {}) {
   const groups = await Promise.all([
     claude || discoverFileSessions(roots.claude, 'claude', max),
     codex || discoverFileSessions(roots.codex, 'codex', max),
-    Promise.resolve(discoverOpenCodeSessions(execute, max)),
+    discoverOpenCodeSessions(execute, max, {
+      timeout: options.commandTimeoutMs,
+      signal: options.signal,
+    }),
     discoverFileSessions(roots.pi, 'pi', max),
-    discoverFileSessions(roots.sc, 'sc', max),
   ]);
   const seen = new Set();
   return groups
@@ -523,7 +499,7 @@ async function openCodeMessages(session, execute) {
     "and json_extract(part.data, '$.type') = 'text'",
     'order by message.time_created asc, part.time_created asc',
   ].join(' ');
-  const output = commandResult(execute, 'opencode', [
+  const output = await commandResult(execute, 'opencode', [
     'db',
     '--format',
     'json',
@@ -544,18 +520,13 @@ async function openCodeMessages(session, execute) {
 
 export async function readSessionMessages(session, options = {}) {
   if (session.harness === 'opencode') {
-    return openCodeMessages(
-      session,
-      options.execute ||
-        (process.platform === 'win32' ? spawnWindowsSync : spawnSync),
-    );
+    return openCodeMessages(session, options.execute || runCommand);
   }
   if (!session.sourcePath) return [];
   const records = parseLines(await readBounded(session.sourcePath));
   if (session.harness === 'claude') return claudeMessages(records);
   if (session.harness === 'codex') return codexMessages(records);
   if (session.harness === 'pi') return piMessages(records);
-  if (session.harness === 'sc') return scMessages(records);
   return [];
 }
 
@@ -695,8 +666,7 @@ export async function sessionsCommand(argv, options = {}) {
   const harnessIndex = argv.indexOf('--harness');
   const requestedHarness =
     harnessIndex >= 0 ? argv[harnessIndex + 1] : session.harness;
-  const targetHarness =
-    requestedHarness === 'marathon' ? 'sc' : requestedHarness;
+  const targetHarness = requestedHarness;
   const target = SESSION_HARNESSES[targetHarness];
   if (!target) throw new Error(`Unknown destination harness: ${targetHarness}`);
 

package/bin/tui.js

@@ -411,6 +411,7 @@ function spawnAndWait(command, args, options = {}) {
       stdio: options.stdio ?? 'inherit',
     });
     child.once('error', reject);
+    options.onSpawn?.();
     child.once('exit', (code, signal) => {
       if (signal) {
         reject(new Error(`Subconscious TUI exited with signal ${signal}`));
@@ -458,13 +459,17 @@ async function runTuiOnce(options) {
     }
   };
 
-  const remote = providedState
-    ? Promise.resolve()
-    : loadRemoteTuiUpdates(state, {
-        ...options,
-        signal: controller.signal,
-        writePatch,
-      });
+  // Remote work starts only once the TUI process exists, so nothing it does
+  // (a slow gateway, a stuck session probe) can delay the first frame.
+  let remote = Promise.resolve();
+  const startRemote = () => {
+    if (providedState) return;
+    remote = loadRemoteTuiUpdates(state, {
+      ...options,
+      signal: controller.signal,
+      writePatch,
+    });
+  };
 
   try {
     // This state intentionally contains only display data. API keys are used
@@ -483,7 +488,12 @@ async function runTuiOnce(options) {
         '--updates',
         updatesPath,
       ],
-      { cwd: executable.cwd, spawn: options.spawn, stdio: options.stdio },
+      {
+        cwd: executable.cwd,
+        spawn: options.spawn,
+        stdio: options.stdio,
+        onSpawn: startRemote,
+      },
     );
     controller.abort();
     await remote.catch(() => {});

package/bin/update-check.js

@@ -1,5 +1,7 @@
 import { spawn } from 'node:child_process';
+import { readFileSync } from 'node:fs';
 import fs from 'node:fs/promises';
+import path from 'node:path';
 import readline from 'node:readline';
 import { fileURLToPath } from 'node:url';
 import { LOGO_ART_SMALL_LINES } from './branding.js';
@@ -8,6 +10,9 @@ import { spawnWindows } from './windows/process.js';
 
 export const PACKAGE_NAME = 'subconscious-cli';
 export const UPDATE_CHECK_TIMEOUT_MS = 1500;
+export const INSTALL_SCRIPT_URL =
+  'https://raw.githubusercontent.com/subconscious-systems/subconscious/main/scripts/install.sh';
+
 const UPDATE_ACTIONS = ['Update now', 'Skip for now'];
 const UPDATE_LOGO = LOGO_ART_SMALL_LINES;
 
@@ -18,10 +23,35 @@ function shellQuote(value) {
     : `'${text.replaceAll("'", `'"'"'`)}'`;
 }
 
+/** The record scripts/install.sh leaves in the package it installed. */
+function readCurlInstall(packageDir) {
+  try {
+    const record = JSON.parse(
+      readFileSync(path.join(packageDir, '.subc-install.json'), 'utf-8'),
+    );
+    return record?.method === 'curl' && typeof record.bin_dir === 'string'
+      ? record
+      : null;
+  } catch {
+    return null;
+  }
+}
+
 export function detectInstallTarget(
   here = fileURLToPath(import.meta.url),
   platform = process.platform,
 ) {
+  const packageDir = path.resolve(path.dirname(here), '..');
+  const curl = platform !== 'win32' && readCurlInstall(packageDir);
+  if (curl) {
+    // Rerun the installer into the same directories it used before.
+    const display = `curl -fsSL ${INSTALL_SCRIPT_URL} | SUBC_INSTALL_DIR=${shellQuote(packageDir)} SUBC_BIN_DIR=${shellQuote(curl.bin_dir)} bash`;
+    return {
+      command: 'bash',
+      args: ['-c', `set -o pipefail; ${display}`],
+      display,
+    };
+  }
   const normalized = here.replace(/\\/g, '/');
   if (normalized.includes('/.pnpm/') || normalized.includes('/pnpm/global/')) {
     return {

package/bin/upgrade.js

@@ -85,16 +85,16 @@ function askYesNo(question) {
   });
 }
 
-function runInstall(command) {
+function runInstall() {
+  const target = detectInstallTarget();
   if (process.platform === 'win32') {
-    const target = detectInstallTarget();
     return runWindows(target.command, target.args).then(
       (code) => code === 0,
       () => false,
     );
   }
   return new Promise((resolve) => {
-    const child = spawn(command, { shell: true, stdio: 'inherit' });
+    const child = spawn(target.command, target.args, { stdio: 'inherit' });
     child.on('error', () => resolve(false));
     child.on('exit', (code) => resolve(code === 0));
   });

package/bin/windows/agents.js

@@ -1,10 +1,13 @@
 import os from 'node:os';
 import path from 'node:path';
-import readline from 'node:readline';
-import { agentBinary, agentInstallDirs } from '../agent-data.js';
+import {
+  agentBinary,
+  agentCommandName,
+  agentInstallDirs,
+  installAdvice,
+} from '../agent-data.js';
 import { separatorIndex } from '../headless-args.js';
 import { parseOptions } from './common.js';
-import { installWindowsAgent, windowsInstallSpec } from './install.js';
 import { executeWindowsLaunch, windowsLaunch } from './launch.js';
 import {
   readWindowsVersion,
@@ -16,21 +19,6 @@ import {
 } from './process.js';
 import { windowsSetup } from './setup.js';
 
-const askInstall = (name) =>
-  new Promise((resolve) => {
-    const rl = readline.createInterface({
-      input: process.stdin,
-      output: process.stdout,
-    });
-    rl.question(
-      `  ${name} isn't installed. Install it now? [Y/n] `,
-      (answer) => {
-        rl.close();
-        resolve(['', 'y', 'yes'].includes(answer.trim().toLowerCase()));
-      },
-    );
-  });
-
 export async function runWindowsAgent(agent, argv, dependencies) {
   const {
     profile,
@@ -54,10 +42,6 @@ export async function runWindowsAgent(agent, argv, dependencies) {
     ...(environment.PATH || '').split(';'),
     ...windowsBinDirs(environment),
   ]);
-  if (agent.id === 'subconscious-code' && parsed.action === 'install') {
-    if (args.length) throw new Error('Usage: subc marathon install');
-    return finish(await installWindowsAgent(agent.id, environment));
-  }
   if (['status', 'uninstall'].includes(parsed.action)) {
     return finish(
       await windowsSetup(agent.id, parsed.action, args, environment),
@@ -110,31 +94,14 @@ export async function runWindowsAgent(agent, argv, dependencies) {
       preferredDirs,
     });
     if (!executable) {
-      const installer = windowsInstallSpec(agent.id, environment);
-      if (
-        !installer ||
-        headless ||
-        !process.stdin.isTTY ||
-        !process.stdout.isTTY ||
-        !(await askInstall(agent.name))
-      ) {
-        console.error(
-          `${agent.name} isn't installed. ${installer ? `Install it with: ${installer.display}` : 'Install it separately, then rerun subc.'}`,
-        );
-        return finish(127);
-      }
-      const installed = await installWindowsAgent(agent.id, environment);
-      if (installed) return finish(installed);
-      executable = resolveWindowsExecutable(bin, {
-        env: environment,
-        preferredDirs,
-      });
-      if (!executable) {
-        console.error(
-          `Installed ${agent.name}, but ${bin} was not found. Add its installation directory to PATH or restart your terminal.`,
-        );
-        return finish(127);
-      }
+      // subc never installs a third-party agent; it only says how.
+      const { command, url } = installAdvice(agent, 'win32');
+      console.error(
+        `${agent.name} isn't installed. subc doesn't install it. Install it yourself, then rerun subc ${agentCommandName(agent)}.`,
+      );
+      if (command) console.error(`  Install it with: ${command}`);
+      console.error(`  Official install page: ${url}`);
+      return finish(127);
     }
     if (agent.id === 'claude-code') {
       const version = dependencies.parseClaudeVersion(

package/bin/windows/launch.js

@@ -14,7 +14,7 @@ import { modelIds, positiveInteger } from '../launch-values.js';
 import { modelSupportsVision } from '../model-capabilities.js';
 import { defaults, origin, value, writeJson } from './common.js';
 
-const PLANNED = new Set(['claude-code', 'subconscious-code', 'pi', 'opencode']);
+const PLANNED = new Set(['claude-code', 'pi', 'opencode']);
 
 // Windows trims a configured gateway to its origin and gives every agent but
 // Claude the gateway and key as SUBCONSCIOUS_*. Claude has always been given

package/bin/windows/process.js

@@ -1,6 +1,6 @@
 // Windows process handling. Unix callers keep using their existing launch paths.
 
-import { execFileSync, spawn, spawnSync } from 'node:child_process';
+import { execFileSync, spawn } from 'node:child_process';
 import fs from 'node:fs';
 import os from 'node:os';
 import path from 'node:path';
@@ -189,23 +189,6 @@ export function spawnWindows(command, args, options = {}) {
   });
 }
 
-export function spawnWindowsSync(command, args, options = {}) {
-  try {
-    const invocation = windowsInvocation(
-      command,
-      args,
-      options.env || process.env,
-    );
-    return spawnSync(invocation.command, invocation.args, {
-      ...options,
-      env: invocation.env,
-      shell: false,
-    });
-  } catch (error) {
-    return { error, status: null, stdout: '', stderr: '' };
-  }
-}
-
 export function runWindows(command, args, options = {}) {
   const { input, ...spawnOptions } = options;
   return new Promise((resolve, reject) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "subconscious-cli",
-  "version": "6.1.0",
+  "version": "6.2.1",
   "description": "CLI for Subconscious — run Subconscious Code, Claude Code, Codex, OpenCode, DeepSeek Harness, Cursor, Copilot, and Pi",
   "bin": {
     "subc": "bin/cli.js"
@@ -9,7 +9,7 @@
     "build:tui": "node scripts/build-tui.js",
     "build:tui:host": "node scripts/build-tui.js --host",
     "test": "node --test",
-    "test:windows": "node --test test/windows.test.js test/models.test.js test/model-capabilities.test.js test/auth.test.js test/tui.test.js test/update-check.test.js test/sessions.test.js test/branding.test.js test/claude-version.test.js test/usage.test.js test/feedback.test.js test/release.test.js test/github-govuln-issue.test.js test/harness-manifest.test.js test/agent-files.test.js test/agent-launch.test.js",
+    "test:windows": "node --test test/windows.test.js test/models.test.js test/model-capabilities.test.js test/auth.test.js test/tui.test.js test/update-check.test.js test/sessions.test.js test/command-output.test.js test/branding.test.js test/claude-version.test.js test/usage.test.js test/feedback.test.js test/release.test.js test/github-govuln-issue.test.js test/harness-manifest.test.js test/agent-files.test.js test/agent-launch.test.js test/agent-install-policy.test.js",
     "test:tui": "go -C tui test ./...",
     "lint": "biome ci .",
     "format": "biome check --write .",
@@ -37,7 +37,6 @@
     "authentication",
     "profiles",
     "coding-agent",
-    "subconscious-code",
     "claude-code",
     "opencode",
     "codex",