
Security News
OpenCode User Hit with Hostile Backlash After Reporting Free AI Loophole
An OpenCode user faced harassment after reporting a free AI usage loophole, drawing a bitter backlash in a GitHub thread that has since been deleted.
@cjhyy/code-shell-capability-coding
Advanced tools
Coding capability pack for the generic code-shell agent core.
Optional coding capability pack for @cjhyy/code-shell-core. It owns
CodeShell's coding policy and implementations: the terminal-coding preset,
coding prompt, Git/worktree behavior, LSP, ApplyPatch, NotebookEdit, Brief,
review/quota helpers, and external coding-agent adapters.
The package is deliberately separate from core. A service building a customer support, data, or media agent can install core without pulling a coding preset into its default runtime. The TUI and Desktop applications install this pack at their composition roots.
import { Engine } from "@cjhyy/code-shell-core";
import { CODING_CAPABILITY } from "@cjhyy/code-shell-capability-coding/capability";
const engine = new Engine({
llm: {
provider: "anthropic",
model: "claude-sonnet-4-6",
apiKey: process.env.ANTHROPIC_API_KEY!,
},
capabilities: [CODING_CAPABILITY],
});
// No preset is required: this capability contributes terminal-coding as its
// product default. Passing preset: "general" remains supported.
const result = await engine.run("Inspect this repository and fix the failing test.");
console.log(result.text);
For a process composition root, registerCapability(CODING_CAPABILITY) installs
the same pack for subsequently created Engines and RunManagers. Prefer the
per-Engine capabilities field in reusable libraries and tests.
The package root remains compatible with existing consumers. New hosts should prefer the smallest stable entry that matches their responsibility:
| Entry | Responsibility |
|---|---|
/capability | CODING_CAPABILITY, contributed tools, and coding presets |
/git | Git, worktree, project-root, and review-prompt helpers |
/orchestration | Claude Code/Codex discovery, transcripts, drivers, quota, and external-agent config |
import { createWorktree, resolveProjectRoot } from "@cjhyy/code-shell-capability-coding/git";
import { probeClaudeCli } from "@cjhyy/code-shell-capability-coding/orchestration";
These are subpaths of the same npm package, not independently versioned packages. LSP, ApplyPatch, Brief, NotebookEdit, and other compatibility exports remain available from the root.
MIT. ApplyPatch carries its upstream Apache-2.0 notice in
src/tools/apply-patch/NOTICE.md and LICENSE-codex.
FAQs
Coding capability pack for the generic code-shell agent core.
The npm package @cjhyy/code-shell-capability-coding receives a total of 625 weekly downloads. As such, @cjhyy/code-shell-capability-coding popularity was classified as not popular.
We found that @cjhyy/code-shell-capability-coding demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
An OpenCode user faced harassment after reporting a free AI usage loophole, drawing a bitter backlash in a GitHub thread that has since been deleted.

Threat Research
/Security News
319 browser extensions installed by 13.4 million users hijack searches, capture queries, and collect referral payments from Yahoo and Bing.

Threat Research
Malicious Firefox extensions mimic Phantom, Jupiter, and Bitget wallets to steal recovery phrases and private keys, with one fetching its payload remotely.