krnl-code 1.0.4__tar.gz

krnl_code-1.0.4/LICENSE

@@ -0,0 +1,147 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or Derivative
+          Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or agreed
+      to in writing, Licensor provides the Work (and each Contributor
+      provides its Contributions) on an "AS IS" BASIS, WITHOUT WARRANTIES
+      OR CONDITIONS OF ANY KIND, either express or implied.
+
+   8. Limitation of Liability. In no event and under no legal theory shall
+      any Contributor be liable to You for damages, including any direct,
+      indirect, special, incidental, or consequential damages of any
+      character arising as a result of this License or out of the use or
+      inability to use the Work.
+
+   9. Accepting Warranty or Additional Liability. While redistributing the
+      Work or Derivative Works thereof, You may choose to offer, and charge
+      a fee for, acceptance of support, warranty, indemnity, or other
+      liability obligations and/or rights consistent with this License.
+
+   END OF TERMS AND CONDITIONS
+
+   Copyright 2026 Krnl Engage Sphere Technology Private Limited
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

krnl_code-1.0.4/NOTICE

@@ -0,0 +1,4 @@
+Krnl Coding Agent
+Copyright 2026 Krnl Engage Sphere Technology Private Limited
+
+This product is licensed under the Apache License, Version 2.0 (see LICENSE).

krnl_code-1.0.4/PKG-INFO

@@ -0,0 +1,214 @@
+Metadata-Version: 2.4
+Name: krnl-code
+Version: 1.0.4
+Summary: Lightweight provider-agnostic agentic coding backend (CLI + server) for the Krnl VS Code extension.
+Author: Krnl Agent contributors
+License: Apache-2.0
+Project-URL: Homepage, https://github.com/Saurabh7Goku/Krnl-Coding-Agent
+Project-URL: Issues, https://github.com/Saurabh7Goku/Krnl-Coding-Agent/issues
+Keywords: ai,agent,coding,llm,cli,vscode
+Classifier: Programming Language :: Python :: 3
+Classifier: License :: OSI Approved :: Apache Software License
+Classifier: Operating System :: OS Independent
+Classifier: Environment :: Console
+Requires-Python: >=3.9
+Description-Content-Type: text/markdown
+License-File: LICENSE
+License-File: NOTICE
+Requires-Dist: fastapi>=0.110
+Requires-Dist: uvicorn[standard]>=0.29
+Requires-Dist: pydantic>=2.6
+Requires-Dist: python-dotenv>=1.0
+Requires-Dist: pyyaml>=6.0
+Requires-Dist: openai>=1.30
+Requires-Dist: httpx>=0.27
+Requires-Dist: rich>=13.7
+Requires-Dist: prompt_toolkit>=3.0
+Requires-Dist: networkx>=3.0
+Provides-Extra: anthropic
+Requires-Dist: anthropic>=0.34; extra == "anthropic"
+Provides-Extra: mcp
+Requires-Dist: mcp>=1.0; extra == "mcp"
+Provides-Extra: dev
+Requires-Dist: pytest>=8.0; extra == "dev"
+Provides-Extra: graph
+Requires-Dist: tree-sitter>=0.21; extra == "graph"
+Requires-Dist: tree-sitter-python>=0.21; extra == "graph"
+Provides-Extra: all
+Requires-Dist: krnl-code[anthropic,graph,mcp]; extra == "all"
+Dynamic: license-file
+
+# krnl-coding-agent
+
+The Python agent backend and standalone CLI behind the Krnl Coding Agent VS Code
+extension. An open-source, model-agnostic agentic coding assistant that plans,
+edits code, runs commands, searches the web, reviews diffs, coordinates teams of
+sub-agents, and runs on cron schedules - with your approval at every step.
+
+Provider-agnostic: works with Anthropic, OpenAI, Google Gemini, OpenRouter, Groq,
+Cerebras, DeepSeek, Together, Mistral, xAI, Vercel AI Gateway, Krnl,
+Ollama, LM Studio, or any OpenAI-compatible / self-hosted endpoint.
+
+## Install
+
+    pip install krnl-coding-agent
+    krnl-agent update                            # update to the latest anytime
+    # optional extras:
+    pip install "krnl-coding-agent[anthropic]"   # native Anthropic client
+    pip install "krnl-coding-agent[mcp]"         # Model Context Protocol servers
+
+Tip: install into a virtual environment for isolation. The client auto-adapts to
+each provider's API (e.g. models needing max_completion_tokens instead of
+max_tokens, or rejecting a custom temperature) - no model-specific config needed.
+
+## Quick start (CLI)
+
+    krnl-agent                                    # interactive chat in the current folder
+    krnl-agent run "add a /health route to app.py"
+    krnl-agent run "summarize the repo" --json     # headless JSON output for CI/scripts
+    krnl-agent serve --host 0.0.0.0 --port 8000    # self-host with bearer-token auth
+
+Set a provider and key right inside the chat (no files needed):
+
+    you: /provider openai      # or gemini, anthropic, groq, ollama, ...
+    you: /key                  # paste your API key (stored in ~/.krnl-agent)
+    you: create a FastAPI hello-world app with a test
+
+Or use environment variables (OPENAI_API_KEY, ANTHROPIC_API_KEY, GEMINI_API_KEY,
+KRL_API_KEY, ...) or a config.yaml. Built-in provider profiles mean no config
+file is required - just pick a provider and supply a key.
+
+## CLI commands
+
+    krnl-agent                     interactive chat (remembers provider/key)
+    krnl-agent run "<task>"        one-shot task ( --yes to auto-approve, --json headless )
+    krnl-agent providers           list configured providers
+    krnl-agent models              show the multi-model routing table (per-phase model + price)
+    krnl-agent init                scaffold config.yaml + .env
+    krnl-agent serve               run the API / WebSocket server ( --port 0 = auto )
+    krnl-agent --team-name <name> "<task>"   multi-agent team (coordinator + specialists)
+    krnl-agent team                list multi-agent teams
+    krnl-agent schedule create "<name>" --cron "0 9 * * MON-FRI" --prompt "<task>"
+    krnl-agent schedule list | run <id> | remove <id> | daemon
+    krnl-agent plugin add <dir|zip-url> | list | remove <name>
+    krnl-agent security            run a security audit of the codebase
+    krnl-agent scan                fast secret + dependency vulnerability scan
+    krnl-agent secfix              autonomous security remediation (audit→fix→verify)
+    krnl-agent test [--all]        write + run tests (--all = whole-project suite)
+    krnl-agent ship "<what>"       plan→build→test→scan→deploy→monitor, end to end
+    krnl-agent deploy [--check]    deploy to a live URL (or list target readiness)
+    krnl-agent monitor             monitoring status (errors/uptime/providers)
+    krnl-agent heal [<url>]        self-heal: health-check, auto-rollback, error→PR
+    krnl-agent doctor              environment self-check
+    krnl-agent audit [--lines N]   show & verify the tamper-evident action log
+    krnl-agent init-ci             scaffold a GitHub Actions workflow
+    krnl-agent sessions            list saved sessions (dashboard)
+    krnl-agent chat --session <id> | --resume   resume a past session
+
+In-chat commands: /provider /key /model /effort /plan /execute /review /security
+/scan /secfix /test /testall /audit /doctor /compact /init /skills /search /usage
+/undo /reset /yes /help /exit, plus any custom command in .krnl/commands/.
+
+## What's new (1.4.0)
+
+- **The full loop — one sentence to a live, monitored, self-healing app.**
+  `krnl-agent ship "build a FastAPI todo API with a Neon DB and put it live"` runs
+  plan → build → test → security-scan → **deploy** → **monitor**.
+- **Auto-deploy** headless to Cloud Run, Cloudflare/Pages, Vercel, Netlify, Render,
+  Fly, Railway, Docker, Kubernetes/Helm, AWS (SAM/App Runner), Azure Container Apps,
+  plus Neon/Supabase databases — each via its CLI + a credential env var.
+- **Spend gate:** free-tier targets deploy directly; billable ones are blocked unless
+  you set `deploy.allow_billable`. Secrets are read from env, never printed, and every
+  deploy/rollback is recorded in the audit log.
+- **Monitoring** (`krnl-agent monitor`): wires Sentry / OpenTelemetry / uptime and
+  reports current errors + uptime.
+- **Self-healing** (`krnl-agent heal`): auto-rollback to the last known-good release
+  on a failed health check; production errors become a fix + regression test in a PR
+  (never auto-merged). See docs/DEPLOY.md.
+
+## What's new (1.3.0)
+
+- **Multi-model routing**: assign a different model (from any provider) to each
+  phase — `planner`, `executor`, `cheap` (sub-agents), `verifier` — via `models:` +
+  `routing:` in config.yaml. Cost-aware `strategy: auto` runs cheap models where safe
+  and **auto-escalates** to a stronger model when the cheaper one keeps failing, so
+  you spend the least that still gets the job done. No provider lock-in.
+- `krnl-agent models` / `/models`: see which model + price runs each phase.
+- Cost is now tracked per model actually used. See docs/MULTI_MODEL.md.
+
+## What's new (1.2.0)
+
+- **repo_map** tool: a compact symbol/outline map of the codebase so the agent
+  reads outlines first and full file bodies only on demand (token-saving).
+- **secret_scan** + **dependency_audit** tools, and **/scan** / **/secfix**
+  commands — find hard-coded credentials and vulnerable deps, then remediate in an
+  autonomous audit → fix → verify loop.
+- **Tamper-evident audit log** (`.krnl/audit/`) — SHA-256 hash-chained record of
+  every action; `krnl-agent audit` / `/audit` verifies the chain.
+- **Sandbox / egress policy** (`sandbox:`): deny-by-default command rules, allowlist,
+  and `block_network`, enforced before every shell command (even in dangerous mode).
+- **Agent-of-agent budgets** (`subagent_max_calls`, `subagent_token_budget`),
+  **model routing** (`router: {cheap, heavy}`), an opt-in **verifier** sub-agent
+  (`verify_edits`), and **self-heal** (`self_heal: N`).
+- **krnl-agent doctor** (environment self-check), **init-ci** (GitHub Actions),
+  and **Anthropic prompt caching** of the static system prompt.
+
+## What's new (1.1.0)
+
+- Drag-and-drop context: reference or drop a **file, folder, or image** path into
+  chat and it is read and used automatically. Files of any reasonable length
+  (smart head+tail truncation), folders read recursively, and images sent as
+  multimodal blocks so vision models can actually see them. No special syntax -
+  quoted paths, absolute/relative paths, bare filenames, and `@mentions` all work.
+- Built-in **security audit** (`/security`, `krnl-agent security`): vulnerability
+  review with severity-ranked findings and concrete fixes.
+- **Autonomous testing**: `/test [target]` writes and runs tests for a file/module;
+  `/testall` (or `krnl-agent test --all`) builds and runs a comprehensive test
+  suite for the whole project and reports coverage gaps.
+- **Plan mode and execute mode**, switchable mid-session with `/plan` and
+  `/execute` (execute is the default).
+- Earlier: auto-onboarding (`.krnl/` memory + skill + project doc), live status
+  line + completion summary, dangerous (YOLO) mode, `/` command autocomplete,
+  accurate per-model cost, and memory/context optimization.
+
+## Features
+
+- Auto-onboarding (.krnl/ memory + skill + project doc, created automatically).
+- Agentic tool-calling loop: plan, read, search, edit, run, verify.
+- 28 sandboxed tools: read/write/edit/multi_edit/create/delete files, glob,
+  search, run_command (streaming), background processes, git status/diff/commit/
+  branch/push, open_pr, git worktrees, web_search, web_fetch.
+- Plan mode and execute mode, sub-agents, and multi-agent teams with persistent state.
+- Drag-and-drop context: read files (any length), whole folders, and images.
+- Full loop: one sentence → build → test → scan → deploy to a live URL → monitor → self-heal.
+- Auto-deploy to 13+ targets (Cloud Run/Cloudflare/Vercel/Netlify/Fly/Railway/Render/Docker/K8s/AWS/Azure + Neon/Supabase) with a free-tier-first spend gate.
+- Multi-model routing: a different model per phase across providers, cost-aware with auto-escalation.
+- Token-friendly code intelligence: `repo_map` outline tool, model routing, prompt caching.
+- Security suite: `/security`, `/scan`, `/secfix`, secret_scan + dependency_audit tools.
+- Tamper-evident audit log + sandbox/egress policy; sub-agent budgets, verifier, self-heal.
+- Autonomous test writing/running (`/test`, `/testall`); `doctor` + `init-ci` helpers.
+- Scheduled agents on cron schedules (independent of any terminal).
+- MCP servers, plugins, skills, project memory (AGENTS.md), and custom commands.
+- Permissions (allow/ask/deny), hooks, approvals with diffs, checkpoints, undo.
+- Web search/fetch, multimodal image input, token and cost tracking, extended
+  thinking, model fallback chains.
+- Messaging notifications: Slack, Discord, Telegram, Google Chat, WhatsApp, Linear.
+- Headless JSON mode and a self-hostable server with bearer-token auth.
+
+## Server
+
+- GET  /health      liveness.
+- GET  /providers   configured providers.
+- POST /agent/run   one-shot, non-interactive (set "auto_approve": true).
+- WS   /ws          streaming agent with per-action approval (used by the extension).
+
+The WebSocket init message accepts provider, model, api_key, and base_url so
+secrets never need to live on disk. Set KRNL_AGENT_TOKEN (or serve --token) to
+require bearer auth.
+
+See the project README at https://github.com/krnl-tech/Krnl-coding-agent for the
+full architecture and the VS Code extension.
+
+## License
+
+Apache License 2.0. Copyright 2026 Krnl Engage Sphere Technology Private Limited.

krnl_code-1.0.4/README.md

@@ -0,0 +1,174 @@
+# krnl-coding-agent
+
+The Python agent backend and standalone CLI behind the Krnl Coding Agent VS Code
+extension. An open-source, model-agnostic agentic coding assistant that plans,
+edits code, runs commands, searches the web, reviews diffs, coordinates teams of
+sub-agents, and runs on cron schedules - with your approval at every step.
+
+Provider-agnostic: works with Anthropic, OpenAI, Google Gemini, OpenRouter, Groq,
+Cerebras, DeepSeek, Together, Mistral, xAI, Vercel AI Gateway, Krnl,
+Ollama, LM Studio, or any OpenAI-compatible / self-hosted endpoint.
+
+## Install
+
+    pip install krnl-coding-agent
+    krnl-agent update                            # update to the latest anytime
+    # optional extras:
+    pip install "krnl-coding-agent[anthropic]"   # native Anthropic client
+    pip install "krnl-coding-agent[mcp]"         # Model Context Protocol servers
+
+Tip: install into a virtual environment for isolation. The client auto-adapts to
+each provider's API (e.g. models needing max_completion_tokens instead of
+max_tokens, or rejecting a custom temperature) - no model-specific config needed.
+
+## Quick start (CLI)
+
+    krnl-agent                                    # interactive chat in the current folder
+    krnl-agent run "add a /health route to app.py"
+    krnl-agent run "summarize the repo" --json     # headless JSON output for CI/scripts
+    krnl-agent serve --host 0.0.0.0 --port 8000    # self-host with bearer-token auth
+
+Set a provider and key right inside the chat (no files needed):
+
+    you: /provider openai      # or gemini, anthropic, groq, ollama, ...
+    you: /key                  # paste your API key (stored in ~/.krnl-agent)
+    you: create a FastAPI hello-world app with a test
+
+Or use environment variables (OPENAI_API_KEY, ANTHROPIC_API_KEY, GEMINI_API_KEY,
+KRL_API_KEY, ...) or a config.yaml. Built-in provider profiles mean no config
+file is required - just pick a provider and supply a key.
+
+## CLI commands
+
+    krnl-agent                     interactive chat (remembers provider/key)
+    krnl-agent run "<task>"        one-shot task ( --yes to auto-approve, --json headless )
+    krnl-agent providers           list configured providers
+    krnl-agent models              show the multi-model routing table (per-phase model + price)
+    krnl-agent init                scaffold config.yaml + .env
+    krnl-agent serve               run the API / WebSocket server ( --port 0 = auto )
+    krnl-agent --team-name <name> "<task>"   multi-agent team (coordinator + specialists)
+    krnl-agent team                list multi-agent teams
+    krnl-agent schedule create "<name>" --cron "0 9 * * MON-FRI" --prompt "<task>"
+    krnl-agent schedule list | run <id> | remove <id> | daemon
+    krnl-agent plugin add <dir|zip-url> | list | remove <name>
+    krnl-agent security            run a security audit of the codebase
+    krnl-agent scan                fast secret + dependency vulnerability scan
+    krnl-agent secfix              autonomous security remediation (audit→fix→verify)
+    krnl-agent test [--all]        write + run tests (--all = whole-project suite)
+    krnl-agent ship "<what>"       plan→build→test→scan→deploy→monitor, end to end
+    krnl-agent deploy [--check]    deploy to a live URL (or list target readiness)
+    krnl-agent monitor             monitoring status (errors/uptime/providers)
+    krnl-agent heal [<url>]        self-heal: health-check, auto-rollback, error→PR
+    krnl-agent doctor              environment self-check
+    krnl-agent audit [--lines N]   show & verify the tamper-evident action log
+    krnl-agent init-ci             scaffold a GitHub Actions workflow
+    krnl-agent sessions            list saved sessions (dashboard)
+    krnl-agent chat --session <id> | --resume   resume a past session
+
+In-chat commands: /provider /key /model /effort /plan /execute /review /security
+/scan /secfix /test /testall /audit /doctor /compact /init /skills /search /usage
+/undo /reset /yes /help /exit, plus any custom command in .krnl/commands/.
+
+## What's new (1.4.0)
+
+- **The full loop — one sentence to a live, monitored, self-healing app.**
+  `krnl-agent ship "build a FastAPI todo API with a Neon DB and put it live"` runs
+  plan → build → test → security-scan → **deploy** → **monitor**.
+- **Auto-deploy** headless to Cloud Run, Cloudflare/Pages, Vercel, Netlify, Render,
+  Fly, Railway, Docker, Kubernetes/Helm, AWS (SAM/App Runner), Azure Container Apps,
+  plus Neon/Supabase databases — each via its CLI + a credential env var.
+- **Spend gate:** free-tier targets deploy directly; billable ones are blocked unless
+  you set `deploy.allow_billable`. Secrets are read from env, never printed, and every
+  deploy/rollback is recorded in the audit log.
+- **Monitoring** (`krnl-agent monitor`): wires Sentry / OpenTelemetry / uptime and
+  reports current errors + uptime.
+- **Self-healing** (`krnl-agent heal`): auto-rollback to the last known-good release
+  on a failed health check; production errors become a fix + regression test in a PR
+  (never auto-merged). See docs/DEPLOY.md.
+
+## What's new (1.3.0)
+
+- **Multi-model routing**: assign a different model (from any provider) to each
+  phase — `planner`, `executor`, `cheap` (sub-agents), `verifier` — via `models:` +
+  `routing:` in config.yaml. Cost-aware `strategy: auto` runs cheap models where safe
+  and **auto-escalates** to a stronger model when the cheaper one keeps failing, so
+  you spend the least that still gets the job done. No provider lock-in.
+- `krnl-agent models` / `/models`: see which model + price runs each phase.
+- Cost is now tracked per model actually used. See docs/MULTI_MODEL.md.
+
+## What's new (1.2.0)
+
+- **repo_map** tool: a compact symbol/outline map of the codebase so the agent
+  reads outlines first and full file bodies only on demand (token-saving).
+- **secret_scan** + **dependency_audit** tools, and **/scan** / **/secfix**
+  commands — find hard-coded credentials and vulnerable deps, then remediate in an
+  autonomous audit → fix → verify loop.
+- **Tamper-evident audit log** (`.krnl/audit/`) — SHA-256 hash-chained record of
+  every action; `krnl-agent audit` / `/audit` verifies the chain.
+- **Sandbox / egress policy** (`sandbox:`): deny-by-default command rules, allowlist,
+  and `block_network`, enforced before every shell command (even in dangerous mode).
+- **Agent-of-agent budgets** (`subagent_max_calls`, `subagent_token_budget`),
+  **model routing** (`router: {cheap, heavy}`), an opt-in **verifier** sub-agent
+  (`verify_edits`), and **self-heal** (`self_heal: N`).
+- **krnl-agent doctor** (environment self-check), **init-ci** (GitHub Actions),
+  and **Anthropic prompt caching** of the static system prompt.
+
+## What's new (1.1.0)
+
+- Drag-and-drop context: reference or drop a **file, folder, or image** path into
+  chat and it is read and used automatically. Files of any reasonable length
+  (smart head+tail truncation), folders read recursively, and images sent as
+  multimodal blocks so vision models can actually see them. No special syntax -
+  quoted paths, absolute/relative paths, bare filenames, and `@mentions` all work.
+- Built-in **security audit** (`/security`, `krnl-agent security`): vulnerability
+  review with severity-ranked findings and concrete fixes.
+- **Autonomous testing**: `/test [target]` writes and runs tests for a file/module;
+  `/testall` (or `krnl-agent test --all`) builds and runs a comprehensive test
+  suite for the whole project and reports coverage gaps.
+- **Plan mode and execute mode**, switchable mid-session with `/plan` and
+  `/execute` (execute is the default).
+- Earlier: auto-onboarding (`.krnl/` memory + skill + project doc), live status
+  line + completion summary, dangerous (YOLO) mode, `/` command autocomplete,
+  accurate per-model cost, and memory/context optimization.
+
+## Features
+
+- Auto-onboarding (.krnl/ memory + skill + project doc, created automatically).
+- Agentic tool-calling loop: plan, read, search, edit, run, verify.
+- 28 sandboxed tools: read/write/edit/multi_edit/create/delete files, glob,
+  search, run_command (streaming), background processes, git status/diff/commit/
+  branch/push, open_pr, git worktrees, web_search, web_fetch.
+- Plan mode and execute mode, sub-agents, and multi-agent teams with persistent state.
+- Drag-and-drop context: read files (any length), whole folders, and images.
+- Full loop: one sentence → build → test → scan → deploy to a live URL → monitor → self-heal.
+- Auto-deploy to 13+ targets (Cloud Run/Cloudflare/Vercel/Netlify/Fly/Railway/Render/Docker/K8s/AWS/Azure + Neon/Supabase) with a free-tier-first spend gate.
+- Multi-model routing: a different model per phase across providers, cost-aware with auto-escalation.
+- Token-friendly code intelligence: `repo_map` outline tool, model routing, prompt caching.
+- Security suite: `/security`, `/scan`, `/secfix`, secret_scan + dependency_audit tools.
+- Tamper-evident audit log + sandbox/egress policy; sub-agent budgets, verifier, self-heal.
+- Autonomous test writing/running (`/test`, `/testall`); `doctor` + `init-ci` helpers.
+- Scheduled agents on cron schedules (independent of any terminal).
+- MCP servers, plugins, skills, project memory (AGENTS.md), and custom commands.
+- Permissions (allow/ask/deny), hooks, approvals with diffs, checkpoints, undo.
+- Web search/fetch, multimodal image input, token and cost tracking, extended
+  thinking, model fallback chains.
+- Messaging notifications: Slack, Discord, Telegram, Google Chat, WhatsApp, Linear.
+- Headless JSON mode and a self-hostable server with bearer-token auth.
+
+## Server
+
+- GET  /health      liveness.
+- GET  /providers   configured providers.
+- POST /agent/run   one-shot, non-interactive (set "auto_approve": true).
+- WS   /ws          streaming agent with per-action approval (used by the extension).
+
+The WebSocket init message accepts provider, model, api_key, and base_url so
+secrets never need to live on disk. Set KRNL_AGENT_TOKEN (or serve --token) to
+require bearer auth.
+
+See the project README at https://github.com/krnl-tech/Krnl-coding-agent for the
+full architecture and the VS Code extension.
+
+## License
+
+Apache License 2.0. Copyright 2026 Krnl Engage Sphere Technology Private Limited.

krnl_code-1.0.4/krnl_agent/__init__.py

@@ -0,0 +1,9 @@
+"""Krnl Agent — a lightweight, provider-agnostic agentic coding backend.
+
+Public surface:
+    from krnl_agent.config import load_config
+    from krnl_agent.llm import build_client
+    from krnl_agent.loop import AgentSession
+"""
+
+__version__ = "1.4.0"

krnl_code-1.0.4/krnl_agent/__main__.py

@@ -0,0 +1,7 @@
+"""Enable `python -m krnl_agent ...` (used by the VS Code auto-start)."""
+import sys
+
+from .cli import main
+
+if __name__ == "__main__":
+    sys.exit(main())

krnl_code-1.0.4/krnl_agent/agent_registry.py

@@ -0,0 +1,95 @@
+"""Agent Registry for Phase 4: Agent Specialization.
+
+Defines specialized agents for different tasks (frontend, backend, testing, docs)
+with routing criteria based on keywords and file patterns.
+"""
+from __future__ import annotations
+
+from dataclasses import dataclass, field
+from typing import Optional
+
+
+@dataclass
+class AgentDefinition:
+    """Definition of a specialized agent."""
+    name: str
+    keywords: list[str] = field(default_factory=list)
+    file_patterns: list[str] = field(default_factory=list)
+    description: str = ""
+
+
+# Default agent registry
+DEFAULT_AGENTS = [
+    AgentDefinition(
+        name="frontend",
+        keywords=["css", "html", "react", "vue", "frontend", "ui", "component"],
+        file_patterns=["*.css", "*.html", "*.jsx", "*.tsx", "*.vue"],
+        description="Specializes in frontend development, UI components, and styling.",
+    ),
+    AgentDefinition(
+        name="backend",
+        keywords=["api", "server", "backend", "endpoint", "service"],
+        file_patterns=["*.py", "*.js", "*.go", "*.rs", "*.java"],
+        description="Specializes in backend development, APIs, and server-side logic.",
+    ),
+    AgentDefinition(
+        name="testing",
+        keywords=["test", "spec", "pytest", "jest", "unit", "integration"],
+        file_patterns=["*test*.py", "test_*.py", "*.spec.js", "*.test.js"],
+        description="Specializes in writing and debugging tests.",
+    ),
+    AgentDefinition(
+        name="docs",
+        keywords=["doc", "readme", "markdown", "documentation"],
+        file_patterns=["*.md", "*.rst", "*.txt"],
+        description="Specializes in documentation and README files.",
+    ),
+    AgentDefinition(
+        name="database",
+        keywords=["sql", "schema", "migrate", "postgres", "db", "table", "query", "database"],
+        file_patterns=["*.sql", "*migrate*.py", "*schema*.py"],
+        description="Specializes in database schema design, migrations, and query performance.",
+    ),
+    AgentDefinition(
+        name="devops",
+        keywords=["docker", "kubernetes", "k8s", "ci", "cd", "workflow", "actions", "deployment", "terraform"],
+        file_patterns=["Dockerfile", "docker-compose.yml", "*.yaml", "*.yml", "*.tf"],
+        description="Specializes in CI/CD pipelines, containerization, deployment, and infrastructure.",
+    ),
+    AgentDefinition(
+        name="security",
+        keywords=["security", "auth", "login", "encrypt", "decrypt", "scan", "audit", "secrets"],
+        file_patterns=["*auth*.py", "*security*.py", "jwt*.py"],
+        description="Specializes in secure authentication, authorization, vulnerability scanning, and credentials handling.",
+    ),
+]
+
+
+class AgentRegistry:
+    """Registry of specialized agents."""
+
+    def __init__(self, agents: Optional[list[AgentDefinition]] = None):
+        self.agents = agents or [AgentDefinition(**a.__dict__) for a in DEFAULT_AGENTS]
+
+    def get_agent(self, name: str) -> Optional[AgentDefinition]:
+        """Get an agent definition by name."""
+        for agent in self.agents:
+            if agent.name == name:
+                return agent
+        return None
+
+    def list_agents(self) -> list[AgentDefinition]:
+        """List all registered agents."""
+        return self.agents.copy()
+
+    def add_agent(self, agent: AgentDefinition) -> None:
+        """Add a new agent to the registry."""
+        self.agents.append(agent)
+
+    def remove_agent(self, name: str) -> bool:
+        """Remove an agent from the registry. Returns True if removed."""
+        for i, agent in enumerate(self.agents):
+            if agent.name == name:
+                self.agents.pop(i)
+                return True
+        return False