
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
agentic-coder
Advanced tools
AI-powered development assistant that internalizes and works with your project files using Google Gemini
🤖 AI-powered development assistant that internalizes and works with your project files using Google Gemini
Agentic Coder is a powerful CLI tool that can be installed globally via npm and work seamlessly with any external project by internalizing the project files and providing an AI-powered development assistant.
npm install -g agentic-coder
git clone <repo-url>
cd agentic-coder
npm install
npm start
Before using agentic-coder, you need to configure your Gemini API key:
Set these environment variables or add them to your shell profile:
export GEMINI_API_KEY="your-gemini-api-key-here"
export MODEL_NAME="gemini-1.5-flash" # optional, defaults to gemini-1.5-flash
export PORT="3001" # optional, defaults to 3001
The first time you run agentic-coder, it will create a global configuration file at ~/.agentic-coder/config.json.
agentic-coder# Start agentic-coder in current directory
agentic-coder
# Initialize agentic-coder in a project (optional)
agentic-coder --init
# Show current configuration
agentic-coder --config
# Show help
agentic-coder --help
:suggest @cli to find client.js, cli/, and related filesclient.js when clients.js exists@*.js, @src/*, @* for advanced file discovery@ references in messages.gitignore patterns and common ignore rulesInteractive commands within the CLI:
:suggest @partial - NEW: Find files/folders matching partial name:auto @utils - NEW: Quick file suggestions (short form):autocomplete @src/ - NEW: List directory contentshelp - NEW: Show autocomplete commands:sessions - Enhanced session selector with search:model - Configure AI model settings per sessionexit - Close the applicationpackage.json)requirements.txt)Cargo.toml)go.mod)pom.xml).git folder)When you run agentic-coder in a project directory, it:
# Navigate to your project
cd /path/to/my-awesome-project
# Start agentic-coder
agentic-coder
# Output: 🔍 Detected project types: nodejs, git
# Output: Internalizing project from: /path/to/my-awesome-project
# Output: ✅ Project internalized successfully
# Output: 🚀 Session: morning-dev-session
# Start coding with AI - now with smart file suggestions!
[morning-dev-session]> :suggest @client
# 📋 File Suggestions:
# 1. @clients.js (95%)
# 2. @clientService.js (88%)
# 3. @api/client.js (75%)
[morning-dev-session]> create a new React component in @components/
:sessions command)The following patterns are automatically ignored during internalization:
node_modules/.git/dist/, build/, target/.env files*.log).idea/, .vscode/).gitignoreRun agentic-coder --init in a project to create a .agentic-coder.json configuration file:
{
"projectRoot": "/path/to/project",
"projectTypes": ["nodejs", "git"],
"createdAt": "2024-01-01T00:00:00.000Z",
"settings": {
"autoInternalize": true,
"syncOnStart": true
}
}
~/.agentic-coder/config.json~/.agentic-coder/sessions/~/.agentic-coder/logs/git clone <repo-url>
cd agentic-coder
npm install
# Set environment variables
export GEMINI_API_KEY="your-api-key"
# Run in development mode
npm run dev
npm test
npm version patch|minor|major
npm publish
# Start agentic-coder
agentic-coder
# Try the new autocomplete features:
:suggest @cli # Find files matching "cli"
:auto @utils # Find utils files
:suggest @package # Find package.json, package-lock.json
:suggest @*.js # Find all JavaScript files
help # Show all commands
# Test interactively:
node demo-autocomplete.js
# Run test suite:
node test-autocomplete.js
📚 Documentation:
MIT License - see LICENSE file for details.
Please report issues on the GitHub issues page.
Made with ❤️ for developers who want AI assistance without losing control of their code.
FAQs
AI-powered development assistant that internalizes and works with your project files using Google Gemini
We found that agentic-coder demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.