@aexol/spectral 0.9.6 → 0.9.8

package/dist/commands/serve.d.ts

@@ -1,7 +1,7 @@
 /**
  * `spectral serve` — relay orchestration entry point.
  *
- * Architecture (post-Batch 2 cutover):
+ * Architecture:
  *  1. Pre-flight: `requireLogin()` — same UX as the main spawn path.
  *  2. Pre-flight: `preflightSqlite()` — fail fast on a broken native module.
  *  3. Open the SQLite store and construct a `SessionStreamManager`.
@@ -9,18 +9,14 @@
  *     which either reuses a fresh `machine.json` or POSTs to
  *     `/api/machines/register` and persists the issued JWT.
  *  5. Open a single long-lived `RelayClient` to `/agent-connection` carrying
- *     the machine JWT. Reconnects forever with backoff.
- *  6. Until Batch 3 ships, every inbound non-pong frame is acked back as
- *     `{kind:"ack", echo:<frame>}`. This proves the WS is bidirectional
- *     end-to-end and gives operators a smoke check before envelope routing.
- *  7. SIGINT/SIGTERM trigger graceful shutdown: dispose the relay (close 1000),
+ *     the machine JWT. Reconnects forever with backoff. When the JWT is
+ *     rejected (HTTP 401/403 on WS upgrade), the relay emits `auth-failed`
+ *     and `serve.ts` triggers a re-registration attempt. If re-registration
+ *     succeeds, a fresh relay is spawned with the new JWT. If it fails (e.g.
+ *     team API key rotated), the process exits with a clear message.
+ *  6. SIGINT/SIGTERM trigger graceful shutdown: dispose the relay (close 1000),
  *     dispose the manager (tear down agent streams), close the store.
  *
- * What this module is NOT (yet):
- *  - It does NOT translate relay envelopes into REST handler calls or WS
- *    event broadcasts. That dispatcher is Batch 3.
- *  - It does NOT bind any local port. The local HTTP server is gone.
- *
  * Flag surface:
  *  - `--machine-name <name>` — display name used at registration time.
  *  - `--port <n>` / `-p <n>` / `SPECTRAL_PORT` — accepted but warned-and-ignored

package/dist/commands/serve.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"serve.d.ts","sourceRoot":"","sources":["../../src/commands/serve.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAsBH,OAAO,EAAE,WAAW,EAAmB,MAAM,oBAAoB,CAAC;AASlE,OAAO,KAAK,EAAE,aAAa,EAAc,MAAM,6BAA6B,CAAC;AAC7E,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAGnE,OAAO,EAAmB,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAerE;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAazD;AAED,MAAM,WAAW,eAAe;IAC9B,8CAA8C;IAC9C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,cAAc,EAAE,OAAO,CAAC;CACzB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,eAAe,CA6B9D;AAED,MAAM,WAAW,eAAe;IAC9B,iEAAiE;IACjE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,4CAA4C;IAC5C,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,uCAAuC;IACvC,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,wCAAwC;IACxC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,yDAAyD;IACzD,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,6EAA6E;IAC7E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;;OAGG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,4CAA4C;IAC5C,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,+DAA+D;IAC/D,aAAa,CAAC,EAAE,qBAAqB,CAAC,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;CAC/E;AAED,MAAM,WAAW,cAAc;IAC7B,qCAAqC;IACrC,KAAK,EAAE,YAAY,CAAC;IACpB,wDAAwD;IACxD,OAAO,EAAE,oBAAoB,CAAC;IAC9B,4CAA4C;IAC5C,KAAK,EAAE,WAAW,CAAC;IACnB,+CAA+C;IAC/C,SAAS,EAAE,MAAM,CAAC;IAClB,4CAA4C;IAC5C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED,wBAAsB,QAAQ,CAAC,IAAI,GAAE,eAAoB,GAAG,OAAO,CAAC,cAAc,CAAC,CA0SlF;AAiED;;;GAGG;AACH,wBAAsB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,cAAc,CAAC,CAa5E"}
+{"version":3,"file":"serve.d.ts","sourceRoot":"","sources":["../../src/commands/serve.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAsBH,OAAO,EAAE,WAAW,EAAmB,MAAM,oBAAoB,CAAC;AASlE,OAAO,KAAK,EAAE,aAAa,EAAc,MAAM,6BAA6B,CAAC;AAC7E,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAGnE,OAAO,EAAmB,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAerE;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAazD;AAED,MAAM,WAAW,eAAe;IAC9B,8CAA8C;IAC9C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,cAAc,EAAE,OAAO,CAAC;CACzB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,eAAe,CA6B9D;AAED,MAAM,WAAW,eAAe;IAC9B,iEAAiE;IACjE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,4CAA4C;IAC5C,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,uCAAuC;IACvC,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,wCAAwC;IACxC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,yDAAyD;IACzD,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,6EAA6E;IAC7E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;;OAGG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,4CAA4C;IAC5C,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,+DAA+D;IAC/D,aAAa,CAAC,EAAE,qBAAqB,CAAC,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;CAC/E;AAED,MAAM,WAAW,cAAc;IAC7B,qCAAqC;IACrC,KAAK,EAAE,YAAY,CAAC;IACpB,wDAAwD;IACxD,OAAO,EAAE,oBAAoB,CAAC;IAC9B,4CAA4C;IAC5C,KAAK,EAAE,WAAW,CAAC;IACnB,+CAA+C;IAC/C,SAAS,EAAE,MAAM,CAAC;IAClB,4CAA4C;IAC5C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED,wBAAsB,QAAQ,CAAC,IAAI,GAAE,eAAoB,GAAG,OAAO,CAAC,cAAc,CAAC,CAqWlF;AAiED;;;GAGG;AACH,wBAAsB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,cAAc,CAAC,CAa5E"}

package/dist/commands/serve.js

@@ -1,7 +1,7 @@
 /**
  * `spectral serve` — relay orchestration entry point.
  *
- * Architecture (post-Batch 2 cutover):
+ * Architecture:
  *  1. Pre-flight: `requireLogin()` — same UX as the main spawn path.
  *  2. Pre-flight: `preflightSqlite()` — fail fast on a broken native module.
  *  3. Open the SQLite store and construct a `SessionStreamManager`.
@@ -9,18 +9,14 @@
  *     which either reuses a fresh `machine.json` or POSTs to
  *     `/api/machines/register` and persists the issued JWT.
  *  5. Open a single long-lived `RelayClient` to `/agent-connection` carrying
- *     the machine JWT. Reconnects forever with backoff.
- *  6. Until Batch 3 ships, every inbound non-pong frame is acked back as
- *     `{kind:"ack", echo:<frame>}`. This proves the WS is bidirectional
- *     end-to-end and gives operators a smoke check before envelope routing.
- *  7. SIGINT/SIGTERM trigger graceful shutdown: dispose the relay (close 1000),
+ *     the machine JWT. Reconnects forever with backoff. When the JWT is
+ *     rejected (HTTP 401/403 on WS upgrade), the relay emits `auth-failed`
+ *     and `serve.ts` triggers a re-registration attempt. If re-registration
+ *     succeeds, a fresh relay is spawned with the new JWT. If it fails (e.g.
+ *     team API key rotated), the process exits with a clear message.
+ *  6. SIGINT/SIGTERM trigger graceful shutdown: dispose the relay (close 1000),
  *     dispose the manager (tear down agent streams), close the store.
  *
- * What this module is NOT (yet):
- *  - It does NOT translate relay envelopes into REST handler calls or WS
- *    event broadcasts. That dispatcher is Batch 3.
- *  - It does NOT bind any local port. The local HTTP server is gone.
- *
  * Flag surface:
  *  - `--machine-name <name>` — display name used at registration time.
  *  - `--port <n>` / `-p <n>` / `SPECTRAL_PORT` — accepted but warned-and-ignored
@@ -191,26 +187,6 @@ export async function runServe(opts = {}) {
         process.stdout.write(`${action} machine "${registration.record.machineName}" (${registration.record.machineId})\n`);
         process.stdout.write(`Connecting to relay: ${relayUrl} (cwd: ${cwd}, host: ${hostname()})\n`);
     }
-    const relay = new RelayClient({
-        relayUrl,
-        machineJwt: registration.record.machineJwt,
-        backendUrl,
-        webSocketImpl: opts.webSocketImpl,
-        fetchImpl: opts.fetchImpl,
-        logger: silent ? { log: () => { }, warn: () => { }, error: () => { } } : console,
-    });
-    // Wire the meta publisher now that we have both the relay socket and
-    // the canonical machineId. The backend ignores the body's machineId
-    // field on `meta_event` (it stamps it from the connection identity),
-    // but we still send the right value for local debuggability and to
-    // avoid relying on backend behaviour that may evolve.
-    publishMetaEventRef = (event) => {
-        relay.send({
-            kind: "meta_event",
-            machineId: registration.record.machineId,
-            event,
-        });
-    };
     // Per-session subscriber registry. The dispatcher attaches at most
     // one subscriber per (sessionId) on the first `client_message`; we
     // hand the same map back to it for every subsequent frame so attach
@@ -219,98 +195,169 @@ export async function runServe(opts = {}) {
     // KEEP the underlying streams alive — a browser reconnect should
     // resume mid-turn.
     const subscribers = new Map();
-    // Envelope dispatcher. We only act on `rest_request` and
-    // `client_message`; everything else (welcome, pong, error, etc.) is
-    // either handled by RelayClient itself or is informational.
-    //
-    // Frames arrive typed loosely from `RelayClient` (which is protocol-
-    // agnostic — it just forwards JSON). We re-narrow via the `kind`
-    // discriminator and cast to the strict envelope types from
-    // `@aexol/relay-protocol`. The protocol package's own `parseFrame()`
-    // already validated `kind` membership in RelayClient itself; here we
-    // additionally trust that the inner shape matches its discriminator
-    // (the backend is the only producer and is exercised by tests).
-    relay.on("frame", (frame) => {
-        if (frame.kind === "rest_request") {
-            void handleRestRequest(frame, {
-                store,
-                manager,
-                cwd,
-                publishMetaEvent: deferredPublishMetaEvent,
-                mcpState: getLiveMcpState() ?? undefined,
-            }).then((response) => {
-                relay.send(response);
-            });
-            return;
-        }
-        if (frame.kind === "client_message") {
-            handleClientMessage(frame, {
-                manager,
-                relay,
-                subscribers,
+    let relay;
+    /** Wire event handlers on a (possibly new) RelayClient instance. */
+    function wireRelay(r) {
+        // Wire the meta publisher now that we have both the relay socket and
+        // the canonical machineId. The backend ignores the body's machineId
+        // field on `meta_event` (it stamps it from the connection identity),
+        // but we still send the right value for local debuggability and to
+        // avoid relying on backend behaviour that may evolve.
+        publishMetaEventRef = (event) => {
+            r.send({
+                kind: "meta_event",
+                machineId: registration.record.machineId,
+                event,
             });
-            return;
-        }
-        if (frame.kind === "subscribe") {
-            handleSubscribe(frame, {
-                manager,
-                relay,
-                subscribers,
+        };
+        // Envelope dispatcher. We only act on `rest_request` and
+        // `client_message`; everything else (welcome, pong, error, etc.) is
+        // either handled by RelayClient itself or is informational.
+        //
+        // Frames arrive typed loosely from `RelayClient` (which is protocol-
+        // agnostic — it just forwards JSON). We re-narrow via the `kind`
+        // discriminator and cast to the strict envelope types from
+        // `@aexol/relay-protocol`. The protocol package's own `parseFrame()`
+        // already validated `kind` membership in RelayClient itself; here we
+        // additionally trust that the inner shape matches its discriminator
+        // (the backend is the only producer and is exercised by tests).
+        r.on("frame", (frame) => {
+            if (frame.kind === "rest_request") {
+                void handleRestRequest(frame, {
+                    store,
+                    manager,
+                    cwd,
+                    publishMetaEvent: deferredPublishMetaEvent,
+                    mcpState: getLiveMcpState() ?? undefined,
+                }).then((response) => {
+                    r.send(response);
+                });
+                return;
+            }
+            if (frame.kind === "client_message") {
+                handleClientMessage(frame, {
+                    manager,
+                    relay: r,
+                    subscribers,
+                });
+                return;
+            }
+            if (frame.kind === "subscribe") {
+                handleSubscribe(frame, {
+                    manager,
+                    relay: r,
+                    subscribers,
+                });
+                return;
+            }
+            if (frame.kind === "cancel_turn") {
+                handleCancelTurn(frame, { manager });
+                return;
+            }
+            if (frame.kind === "auto_research") {
+                handleAutoResearchFrame(frame, {
+                    store,
+                    manager,
+                    relay: r,
+                    subscribers,
+                    cwd,
+                });
+                return;
+            }
+            if (frame.kind === "config_patch") {
+                handleConfigPatch(frame, {
+                    cwd,
+                    agentDir: getAgentDir(),
+                    relay: r,
+                    machineId: registration.record.machineId,
+                });
+                return;
+            }
+            // Other frames (error, machine_disconnected addressed to us, etc.)
+            // are ignored at this layer. Future batches may surface them in
+            // structured logs.
+        });
+        // On every relay close, drop the subscriber registry. The manager
+        // keeps streams alive (so `dispose` is the only place that tears
+        // them down), but the previous subscribers are pointing at a stale
+        // socket — let the next `client_message` attach a fresh one.
+        r.on("close", () => {
+            detachAllSubscribers(manager, subscribers);
+        });
+        // Send native extensions info when the relay connects
+        r.on("welcome", () => {
+            if (!silent)
+                process.stdout.write("✓ Relay connected\n");
+            broadcastNativeExtensionsInfo(cwd, r, registration.record.machineId);
+        });
+        if (!silent) {
+            r.on("close", ({ code, reason }) => {
+                process.stdout.write(`Relay closed (${code}${reason ? `: ${reason}` : ""}); will reconnect…\n`);
             });
-            return;
-        }
-        if (frame.kind === "cancel_turn") {
-            handleCancelTurn(frame, { manager });
-            return;
-        }
-        if (frame.kind === "auto_research") {
-            handleAutoResearchFrame(frame, {
-                store,
-                manager,
-                relay,
-                subscribers,
-                cwd,
+            r.on("reconnect-scheduled", ({ delayMs, attempt }) => {
+                process.stdout.write(`Reconnect attempt ${attempt} in ${delayMs}ms\n`);
             });
-            return;
-        }
-        if (frame.kind === "config_patch") {
-            handleConfigPatch(frame, {
-                cwd,
-                agentDir: getAgentDir(),
-                relay,
-                machineId: registration.record.machineId,
+            r.on("error", (err) => {
+                const msg = err instanceof Error ? err.message : String(err);
+                process.stderr.write(`Relay error: ${msg}\n`);
             });
-            return;
         }
-        // Other frames (error, machine_disconnected addressed to us, etc.)
-        // are ignored at this layer. Future batches may surface them in
-        // structured logs.
-    });
-    // On every relay close, drop the subscriber registry. The manager
-    // keeps streams alive (so `dispose` is the only place that tears
-    // them down), but the previous subscribers are pointing at a stale
-    // socket — let the next `client_message` attach a fresh one.
-    relay.on("close", () => {
-        detachAllSubscribers(manager, subscribers);
-    });
-    // Send native extensions info when the relay connects
-    relay.on("welcome", () => {
-        if (!silent)
-            process.stdout.write("✓ Relay connected\n");
-        broadcastNativeExtensionsInfo(cwd, relay, registration.record.machineId);
-    });
-    if (!silent) {
-        relay.on("close", ({ code, reason }) => {
-            process.stdout.write(`Relay closed (${code}${reason ? `: ${reason}` : ""}); will reconnect…\n`);
-        });
-        relay.on("reconnect-scheduled", ({ delayMs, attempt }) => {
-            process.stdout.write(`Reconnect attempt ${attempt} in ${delayMs}ms\n`);
-        });
-        relay.on("error", (err) => {
-            const msg = err instanceof Error ? err.message : String(err);
-            process.stderr.write(`Relay error: ${msg}\n`);
+        // When the relay reports an auth failure (HTTP 401/403 on WS upgrade),
+        // the machine JWT is invalid. Attempt re-registration with the original
+        // credentials to obtain a fresh JWT, then restart the relay. If
+        // re-registration also fails (e.g. the team API key was rotated), exit
+        // with a clear message — the user needs to re-run `spectral login`.
+        r.on("auth-failed", () => {
+            if (!silent) {
+                process.stderr.write("Relay auth failed — machine JWT rejected. Re-registering…\n");
+            }
+            void (async () => {
+                try {
+                    const newReg = await ensureMachineRegistered({
+                        backendUrl,
+                        apiKey: cfg.teamApiKey,
+                        userJwt: cfg.userJwt,
+                        machineNameOverride: opts.machineName,
+                        version,
+                        fetchImpl: opts.fetchImpl,
+                    });
+                    registration = newReg;
+                    // Dispose the old relay and create a fresh one with the new JWT.
+                    r.dispose();
+                    relay = new RelayClient({
+                        relayUrl,
+                        machineJwt: newReg.record.machineJwt,
+                        backendUrl,
+                        webSocketImpl: opts.webSocketImpl,
+                        fetchImpl: opts.fetchImpl,
+                        logger: silent
+                            ? { log: () => { }, warn: () => { }, error: () => { } }
+                            : console,
+                    });
+                    wireRelay(relay);
+                    relay.connect();
+                    if (!silent) {
+                        process.stdout.write(`Re-registered machine "${newReg.record.machineName}" (${newReg.record.machineId}); reconnecting…\n`);
+                    }
+                }
+                catch (err) {
+                    const msg = err instanceof Error ? err.message : String(err);
+                    process.stderr.write(`✗ Re-registration failed: ${msg}\n`);
+                    process.stderr.write("  Run `spectral login` if your team API key has been rotated.\n");
+                    process.exit(1);
+                }
+            })();
         });
     }
+    relay = new RelayClient({
+        relayUrl,
+        machineJwt: registration.record.machineJwt,
+        backendUrl,
+        webSocketImpl: opts.webSocketImpl,
+        fetchImpl: opts.fetchImpl,
+        logger: silent ? { log: () => { }, warn: () => { }, error: () => { } } : console,
+    });
+    wireRelay(relay);
     relay.connect();
     let closed = false;
     const close = async () => {

package/dist/relay/auto-research.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auto-research.d.ts","sourceRoot":"","sources":["../../src/relay/auto-research.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAKH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,KAAK,EAAE,oBAAoB,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAEpF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAM/C,oDAAoD;AACpD,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,+CAA+C;AAC/C,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,YAAY,CAAC;IACpB,OAAO,EAAE,oBAAoB,CAAC;IAC9B,KAAK,EAAE,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IACjC;0DACsD;IACtD,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACrC,6EAA6E;IAC7E,GAAG,EAAE,MAAM,CAAC;IACZ,kDAAkD;IAClD,MAAM,CAAC,EAAE;QAAE,KAAK,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,CAAA;KAAE,CAAC;CAClD;AAED;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAksBD;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,iBAAiB,EACxB,IAAI,EAAE,gBAAgB,GACrB,IAAI,CAmLN"}
+{"version":3,"file":"auto-research.d.ts","sourceRoot":"","sources":["../../src/relay/auto-research.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAKH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,KAAK,EAAE,oBAAoB,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAEpF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAM/C,oDAAoD;AACpD,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,+CAA+C;AAC/C,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,YAAY,CAAC;IACpB,OAAO,EAAE,oBAAoB,CAAC;IAC9B,KAAK,EAAE,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IACjC;0DACsD;IACtD,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACrC,6EAA6E;IAC7E,GAAG,EAAE,MAAM,CAAC;IACZ,kDAAkD;IAClD,MAAM,CAAC,EAAE;QAAE,KAAK,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,CAAA;KAAE,CAAC;CAClD;AAED;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAksBD;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,iBAAiB,EACxB,IAAI,EAAE,gBAAgB,GACrB,IAAI,CAsLN"}

package/dist/relay/auto-research.js

@@ -840,7 +840,10 @@ export function handleAutoResearch(input, deps) {
     // gated by watcherFired, so it's a no-op. The only issue is we don't
     // clearTimeout on watcher fire — but that's fine, the timer is harmless.
     // --- Send the prompt through the existing AgentBridge (backend proxy) ---
-    manager.prompt(sessionId, taskContent, storedModelId).catch((err) => {
+    // skipPersistence: true — the auto-research task is an internal system
+    // instruction, not a user message. It should NOT appear in SQLite or
+    // be broadcast as a user_message_appended event.
+    manager.prompt(sessionId, taskContent, storedModelId, undefined, undefined, { skipPersistence: true }).catch((err) => {
         if (watcherFired)
             return; // already handled by watcher
         const msg = err instanceof Error ? err.message : String(err);

package/dist/relay/client.d.ts

@@ -34,6 +34,7 @@
  *  - `close`           - socket closed (we may reconnect after)
  *  - `error`           - non-fatal error (parse failure, send failure)
  *  - `reconnect-scheduled` - emitted with the delay in ms before each retry
+ *  - `auth-failed`     - WS upgrade rejected with 401/403 (caller should re-register)
  *
  * Threading model: `node:events` is single-threaded; all callbacks fire on
  * the same event loop turn. Listeners must be cheap.
@@ -91,6 +92,8 @@ export declare class RelayClient extends EventEmitter {
     private reconnectAttempt;
     private reconnectTimer;
     private sendQueue;
+    /** Set true when the WS error handler sees an HTTP 401/403 upgrade rejection. */
+    private authFailed;
     /** Timestamp of last received frame / ping — drives the watchdog. */
     private lastActivityMs;
     private watchdogTimer;

package/dist/relay/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/relay/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,SAAS,MAAM,IAAI,CAAC;AAqB3B,MAAM,WAAW,kBAAkB;IACjC,4DAA4D;IAC5D,QAAQ,EAAE,MAAM,CAAC;IACjB,uCAAuC;IACvC,UAAU,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,aAAa,CAAC,EAAE,OAAO,SAAS,CAAC;IACjC;;;OAGG;IACH,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB;;OAEG;IACH,MAAM,CAAC,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC;IACjD;;;;OAIG;IACH,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,KAAK,CAAC;CAChC;AAED,6EAA6E;AAC7E,MAAM,WAAW,UAAU;IACzB,uDAAuD;IACvD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,qBAAa,WAAY,SAAQ,YAAY;IAC3C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAqB;IAChD,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAmB;IACtC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;IACzC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0C;IACjE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA0B;IAE/C,OAAO,CAAC,EAAE,CAA0B;IACpC,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,gBAAgB,CAAK;IAC7B,OAAO,CAAC,cAAc,CAA+B;IACrD,OAAO,CAAC,SAAS,CAAgB;IAEjC,qEAAqE;IACrE,OAAO,CAAC,cAAc,CAAa;IACnC,OAAO,CAAC,aAAa,CAA+B;gBAExC,IAAI,EAAE,kBAAkB;IAWpC,kEAAkE;IAClE,OAAO,IAAI,IAAI;IAMf;;;;;;;OAOG;IACH,IAAI,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,GAAG,OAAO;IAqBzC;;;OAGG;IACH,OAAO,IAAI,IAAI;IA2Bf,OAAO,CAAC,UAAU;IAgHlB,OAAO,CAAC,aAAa;IAsBrB,OAAO,CAAC,YAAY;IAOpB;;;;;OAKG;YACW,WAAW;YA8BX,iBAAiB;CAmDhC"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/relay/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,SAAS,MAAM,IAAI,CAAC;AAqB3B,MAAM,WAAW,kBAAkB;IACjC,4DAA4D;IAC5D,QAAQ,EAAE,MAAM,CAAC;IACjB,uCAAuC;IACvC,UAAU,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,aAAa,CAAC,EAAE,OAAO,SAAS,CAAC;IACjC;;;OAGG;IACH,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB;;OAEG;IACH,MAAM,CAAC,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC;IACjD;;;;OAIG;IACH,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,KAAK,CAAC;CAChC;AAED,6EAA6E;AAC7E,MAAM,WAAW,UAAU;IACzB,uDAAuD;IACvD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,qBAAa,WAAY,SAAQ,YAAY;IAC3C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAqB;IAChD,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAmB;IACtC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;IACzC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0C;IACjE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA0B;IAE/C,OAAO,CAAC,EAAE,CAA0B;IACpC,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,gBAAgB,CAAK;IAC7B,OAAO,CAAC,cAAc,CAA+B;IACrD,OAAO,CAAC,SAAS,CAAgB;IACjC,iFAAiF;IACjF,OAAO,CAAC,UAAU,CAAS;IAE3B,qEAAqE;IACrE,OAAO,CAAC,cAAc,CAAa;IACnC,OAAO,CAAC,aAAa,CAA+B;gBAExC,IAAI,EAAE,kBAAkB;IAWpC,kEAAkE;IAClE,OAAO,IAAI,IAAI;IAMf;;;;;;;OAOG;IACH,IAAI,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,GAAG,OAAO;IAqBzC;;;OAGG;IACH,OAAO,IAAI,IAAI;IA2Bf,OAAO,CAAC,UAAU;IAsIlB,OAAO,CAAC,aAAa;IAsBrB,OAAO,CAAC,YAAY;IAOpB;;;;;OAKG;YACW,WAAW;YA8BX,iBAAiB;CAmDhC"}

package/dist/relay/client.js

@@ -34,6 +34,7 @@
  *  - `close`           - socket closed (we may reconnect after)
  *  - `error`           - non-fatal error (parse failure, send failure)
  *  - `reconnect-scheduled` - emitted with the delay in ms before each retry
+ *  - `auth-failed`     - WS upgrade rejected with 401/403 (caller should re-register)
  *
  * Threading model: `node:events` is single-threaded; all callbacks fire on
  * the same event loop turn. Listeners must be cheap.
@@ -71,6 +72,8 @@ export class RelayClient extends EventEmitter {
     reconnectAttempt = 0;
     reconnectTimer = null;
     sendQueue = [];
+    /** Set true when the WS error handler sees an HTTP 401/403 upgrade rejection. */
+    authFailed = false;
     /** Timestamp of last received frame / ping — drives the watchdog. */
     lastActivityMs = 0;
     watchdogTimer = null;
@@ -154,6 +157,7 @@ export class RelayClient extends EventEmitter {
     // Internals
     // -------------------------------------------------------------------------
     openSocket() {
+        this.authFailed = false;
         const ws = new this.WS(this.relayUrl, {
             headers: { Authorization: `Bearer ${this.machineJwt}` },
         });
@@ -209,6 +213,15 @@ export class RelayClient extends EventEmitter {
             this.emit("frame", parsed);
         });
         ws.on("error", (err) => {
+            // Detect HTTP auth failures during the WS upgrade handshake.
+            // The `ws` library surfaces these as `Error: Unexpected server
+            // response: 401` (or 403). Mark `authFailed` so the close handler
+            // signals `auth-failed` instead of entering the reconnect loop.
+            const msg = err instanceof Error ? err.message : String(err);
+            if (msg.includes("Unexpected server response: 401") ||
+                msg.includes("Unexpected server response: 403")) {
+                this.authFailed = true;
+            }
             // `ws` emits 'error' before 'close'; we don't reconnect here — the
             // 'close' handler is the single reconnect entry point so we don't
             // double-schedule.
@@ -245,6 +258,15 @@ export class RelayClient extends EventEmitter {
                 this.exit(1);
                 return;
             }
+            // Auth failure at the transport layer (HTTP 401/403 on WS upgrade).
+            // The machine JWT is invalid (expired, malformed, or revoked by key
+            // rotation) but the backend didn't send a structured close reason.
+            // Signal the caller so it can attempt re-registration instead of
+            // entering an infinite reconnect loop with a dead token.
+            if (this.authFailed) {
+                this.emit("auth-failed");
+                return;
+            }
             this.scheduleReconnect();
         });
     }

package/dist/relay/dispatcher.d.ts

@@ -48,7 +48,7 @@ import type { RelayClient } from "./client.js";
  * `id` is populated when the route had an `:id` placeholder.
  */
 interface RouteMatch {
-    route: "list_projects" | "create_project" | "update_project" | "delete_project" | "bind_studio" | "list_project_sessions" | "create_session" | "get_session" | "update_session" | "delete_session" | "get_session_memory" | "get_session_memory_details" | "compact_session" | "remember_and_delete_session" | "fork_session" | "list_path_autocomplete" | "enqueue_prompt" | "get_prompt_queue" | "remove_prompt" | "clear_prompt_queue" | "list_mcp_status" | "get_settings" | "put_settings";
+    route: "list_projects" | "create_project" | "update_project" | "delete_project" | "bind_studio" | "list_project_sessions" | "create_session" | "get_session" | "update_session" | "delete_session" | "get_session_memory" | "get_session_memory_details" | "compact_session" | "remember_and_delete_session" | "fork_session" | "list_path_autocomplete" | "pick_directory" | "enqueue_prompt" | "get_prompt_queue" | "remove_prompt" | "clear_prompt_queue" | "list_mcp_status" | "get_settings" | "put_settings";
     id?: string;
     /** Parsed query params, if the path carried a `?...` suffix. */
     query?: URLSearchParams;

package/dist/relay/dispatcher.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dispatcher.d.ts","sourceRoot":"","sources":["../../src/relay/dispatcher.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAIH,OAAO,KAAK,EACV,iBAAiB,EACjB,eAAe,EACf,kBAAkB,EAClB,SAAS,EACT,gBAAgB,EAChB,iBAAiB,EACjB,cAAc,EACf,MAAM,uBAAuB,CAAC;AAI/B,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AA+BzD,OAAO,KAAK,EACV,oBAAoB,EACpB,UAAU,EACX,MAAM,6BAA6B,CAAC;AAErC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEzD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAO/C;;;GAGG;AACH,UAAU,UAAU;IAClB,KAAK,EACD,eAAe,GACf,gBAAgB,GAChB,gBAAgB,GAChB,gBAAgB,GAChB,aAAa,GACb,uBAAuB,GACvB,gBAAgB,GAChB,aAAa,GACb,gBAAgB,GAChB,gBAAgB,GAChB,oBAAoB,GACpB,4BAA4B,GAC5B,iBAAiB,GACjB,6BAA6B,GAC7B,cAAc,GACd,wBAAwB,GACxB,gBAAgB,GAChB,kBAAkB,GAClB,eAAe,GACf,oBAAoB,GACpB,iBAAiB,GACjB,cAAc,GACd,cAAc,CAAC;IACnB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,gEAAgE;IAChE,KAAK,CAAC,EAAE,eAAe,CAAC;IACxB,sEAAsE;IACtE,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CACxB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,GACX,UAAU,GAAG,IAAI,CAiHnB;AAMD;;;;;;;;;GASG;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,KAAK,EAAE,SAAS,KAAK,IAAI,CAAC;AAE1D,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,YAAY,CAAC;IACpB,OAAO,EAAE,oBAAoB,CAAC;IAC9B,6FAA6F;IAC7F,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,wEAAwE;IACxE,MAAM,CAAC,EAAE;QAAE,KAAK,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,CAAA;KAAE,CAAC;IACjD;;;;OAIG;IACH,QAAQ,CAAC,EAAE,iBAAiB,CAAC;IAC7B;;;;;;;;;OASG;IACH,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;CACrC;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,iBAAiB,CACrC,KAAK,EAAE,gBAAgB,EACvB,IAAI,EAAE,eAAe,GACpB,OAAO,CAAC,iBAAiB,CAAC,CAiD5B;AAqSD,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,oBAAoB,CAAC;IAC9B,2DAA2D;IAC3D,KAAK,EAAE,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IACjC;;;;;;;;;OASG;IACH,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACrC,yEAAyE;IACzE,MAAM,CAAC,EAAE;QAAE,KAAK,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,CAAA;KAAE,CAAC;CAClD;AA8BD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,kBAAkB,EACzB,IAAI,EAAE,iBAAiB,GACtB,IAAI,CAqIN;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAC7B,KAAK,EAAE,cAAc,EACrB,IAAI,EAAE,iBAAiB,GACtB,IAAI,CAsDN;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,eAAe,EACtB,IAAI,EAAE;IAAE,OAAO,EAAE,oBAAoB,CAAC;IAAC,MAAM,CAAC,EAAE;QAAE,KAAK,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,CAAA;KAAE,CAAA;CAAE,GACxF,IAAI,CAEN;AAED;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,oBAAoB,EAC7B,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,GACnC,IAAI,CASN;AAMD,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,YAAY,CAAC;IACpB,OAAO,EAAE,oBAAoB,CAAC;IAC9B,KAAK,EAAE,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IACjC,sDAAsD;IACtD,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACrC,iCAAiC;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,kDAAkD;IAClD,MAAM,CAAC,EAAE;QAAE,KAAK,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,CAAA;KAAE,CAAC;CAClD;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,iBAAiB,EACxB,IAAI,EAAE,gBAAgB,GACrB,IAAI,CAQN"}
+{"version":3,"file":"dispatcher.d.ts","sourceRoot":"","sources":["../../src/relay/dispatcher.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAIH,OAAO,KAAK,EACV,iBAAiB,EACjB,eAAe,EACf,kBAAkB,EAClB,SAAS,EACT,gBAAgB,EAChB,iBAAiB,EACjB,cAAc,EACf,MAAM,uBAAuB,CAAC;AAI/B,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAgCzD,OAAO,KAAK,EACV,oBAAoB,EACpB,UAAU,EACX,MAAM,6BAA6B,CAAC;AAErC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEzD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAO/C;;;GAGG;AACH,UAAU,UAAU;IAClB,KAAK,EACD,eAAe,GACf,gBAAgB,GAChB,gBAAgB,GAChB,gBAAgB,GAChB,aAAa,GACb,uBAAuB,GACvB,gBAAgB,GAChB,aAAa,GACb,gBAAgB,GAChB,gBAAgB,GAChB,oBAAoB,GACpB,4BAA4B,GAC5B,iBAAiB,GACjB,6BAA6B,GAC7B,cAAc,GACd,wBAAwB,GACxB,gBAAgB,GAChB,gBAAgB,GAChB,kBAAkB,GAClB,eAAe,GACf,oBAAoB,GACpB,iBAAiB,GACjB,cAAc,GACd,cAAc,CAAC;IACnB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,gEAAgE;IAChE,KAAK,CAAC,EAAE,eAAe,CAAC;IACxB,sEAAsE;IACtE,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CACxB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,GACX,UAAU,GAAG,IAAI,CAuHnB;AAMD;;;;;;;;;GASG;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,KAAK,EAAE,SAAS,KAAK,IAAI,CAAC;AAE1D,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,YAAY,CAAC;IACpB,OAAO,EAAE,oBAAoB,CAAC;IAC9B,6FAA6F;IAC7F,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,wEAAwE;IACxE,MAAM,CAAC,EAAE;QAAE,KAAK,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,CAAA;KAAE,CAAC;IACjD;;;;OAIG;IACH,QAAQ,CAAC,EAAE,iBAAiB,CAAC;IAC7B;;;;;;;;;OASG;IACH,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;CACrC;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,iBAAiB,CACrC,KAAK,EAAE,gBAAgB,EACvB,IAAI,EAAE,eAAe,GACpB,OAAO,CAAC,iBAAiB,CAAC,CAiD5B;AAwSD,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,oBAAoB,CAAC;IAC9B,2DAA2D;IAC3D,KAAK,EAAE,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IACjC;;;;;;;;;OASG;IACH,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACrC,yEAAyE;IACzE,MAAM,CAAC,EAAE;QAAE,KAAK,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,CAAA;KAAE,CAAC;CAClD;AA8BD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,kBAAkB,EACzB,IAAI,EAAE,iBAAiB,GACtB,IAAI,CAqIN;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAC7B,KAAK,EAAE,cAAc,EACrB,IAAI,EAAE,iBAAiB,GACtB,IAAI,CAsDN;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,eAAe,EACtB,IAAI,EAAE;IAAE,OAAO,EAAE,oBAAoB,CAAC;IAAC,MAAM,CAAC,EAAE;QAAE,KAAK,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,CAAA;KAAE,CAAA;CAAE,GACxF,IAAI,CAEN;AAED;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,oBAAoB,EAC7B,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,GACnC,IAAI,CASN;AAMD,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,YAAY,CAAC;IACpB,OAAO,EAAE,oBAAoB,CAAC;IAC9B,KAAK,EAAE,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IACjC,sDAAsD;IACtD,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACrC,iCAAiC;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,kDAAkD;IAClD,MAAM,CAAC,EAAE;QAAE,KAAK,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,CAAA;KAAE,CAAC;CAClD;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,iBAAiB,EACxB,IAAI,EAAE,gBAAgB,GACrB,IAAI,CAQN"}

package/dist/relay/dispatcher.js

@@ -42,6 +42,7 @@ import { homedir } from "node:os";
 import { BadRequestError, NotFoundError } from "../server/handlers/errors.js";
 import { handleListMcpStatus } from "../server/handlers/mcp-status.js";
 import { handlePathAutocomplete } from "../server/handlers/paths-autocomplete.js";
+import { handlePickDirectory } from "../server/handlers/paths-pick-directory.js";
 import { handleBindStudioProject, handleCreateProject, handleDeleteProject, handleListProjects, handleListSessionsByProject, handleUpdateProject, } from "../server/handlers/projects.js";
 import { handleCompactSession, handleCreateSession, handleDeleteSession, handleForkSession, handleRememberAndDeleteSession, handleGetSessionDetail, handleGetSessionMemoryDetails, handleGetSessionMemoryStatus, handleUpdateSession, } from "../server/handlers/sessions.js";
 import { handleClearPromptQueue, handleEnqueuePrompt, handleGetPromptQueue, handleRemovePrompt, } from "../server/handlers/queue.js";
@@ -80,6 +81,12 @@ export function matchRoute(method, path) {
             return { route: "list_path_autocomplete", query };
         return null;
     }
+    // /api/paths/pick-directory
+    if (cleanPath === "/api/paths/pick-directory") {
+        if (method === "POST")
+            return { route: "pick_directory" };
+        return null;
+    }
     // /api/projects
     if (cleanPath === "/api/projects") {
         if (method === "GET")
@@ -397,6 +404,8 @@ async function dispatchRoute(match, body, deps) {
             const prefix = match.query?.get("prefix") ?? "";
             return handlePathAutocomplete(prefix);
         }
+        case "pick_directory":
+            return handlePickDirectory();
         case "enqueue_prompt":
             return handleEnqueuePrompt(store, manager, id, asObject(body));
         case "get_prompt_queue":

package/dist/server/handlers/paths-pick-directory.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Native OS folder picker dialog for project path selection.
+ *
+ * The "New Project" form in the browser has a "Browse..." button next to
+ * the typed-path autocomplete. When clicked, it sends
+ * `POST /api/paths/pick-directory` to this handler, which launches a
+ * native OS folder picker dialog on the user's machine and returns the
+ * absolute path of the selected directory (or `null` when cancelled).
+ *
+ * Platform strategy (tried in order):
+ *   1. macOS  — osascript (built-in, zero deps, native look)
+ *   2. Linux  — zenity (GTK), kdialog (KDE), then Python tkinter
+ *   3. Windows — PowerShell (COM object)
+ *   4. Fallback — Python tkinter (bundled with most Python installs)
+ *
+ * The first available tool wins; if none work, we return an error.
+ * All child processes are synchronous — the browser is waiting anyway.
+ */
+/** Result shape returned to the frontend. */
+export interface PickDirectoryResult {
+    /** Absolute path of the selected directory, or null if cancelled. */
+    path: string | null;
+    /** Human-readable error when the picker couldn't be launched. */
+    error?: string;
+}
+/**
+ * Attempt to open a native folder picker dialog and return the selected path.
+ *
+ * Synchronous and blocking by design — the browser form is waiting for a
+ * response and the user is interacting with the dialog.
+ */
+export declare function handlePickDirectory(): PickDirectoryResult;
+//# sourceMappingURL=paths-pick-directory.d.ts.map

package/dist/server/handlers/paths-pick-directory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths-pick-directory.d.ts","sourceRoot":"","sources":["../../../src/server/handlers/paths-pick-directory.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAKH,6CAA6C;AAC7C,MAAM,WAAW,mBAAmB;IAClC,qEAAqE;IACrE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,iEAAiE;IACjE,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAqID;;;;;GAKG;AACH,wBAAgB,mBAAmB,IAAI,mBAAmB,CAgCzD"}

package/dist/server/handlers/paths-pick-directory.js

@@ -0,0 +1,180 @@
+/**
+ * Native OS folder picker dialog for project path selection.
+ *
+ * The "New Project" form in the browser has a "Browse..." button next to
+ * the typed-path autocomplete. When clicked, it sends
+ * `POST /api/paths/pick-directory` to this handler, which launches a
+ * native OS folder picker dialog on the user's machine and returns the
+ * absolute path of the selected directory (or `null` when cancelled).
+ *
+ * Platform strategy (tried in order):
+ *   1. macOS  — osascript (built-in, zero deps, native look)
+ *   2. Linux  — zenity (GTK), kdialog (KDE), then Python tkinter
+ *   3. Windows — PowerShell (COM object)
+ *   4. Fallback — Python tkinter (bundled with most Python installs)
+ *
+ * The first available tool wins; if none work, we return an error.
+ * All child processes are synchronous — the browser is waiting anyway.
+ */
+import { execSync } from "node:child_process";
+import { platform } from "node:os";
+// ---------------------------------------------------------------------------
+// Platform pickers
+// ---------------------------------------------------------------------------
+/**
+ * macOS: Use `osascript` with AppleScript to show a native folder chooser.
+ * Returns the POSIX path or empty string on cancel.
+ */
+function pickMacOS() {
+    const script = `
+    set folderPath to POSIX path of (choose folder with prompt "Select project directory")
+    return folderPath
+  `.trim();
+    try {
+        const result = execSync(`osascript -e '${script.replace(/'/g, "'\\''")}'`, {
+            encoding: "utf-8",
+            timeout: 180_000, // 3 min — user might take time to browse
+        });
+        const trimmed = result.trim();
+        return trimmed || null;
+    }
+    catch {
+        // osascript exits non-zero on user cancel (error -128) — treat as silent cancel
+        return null;
+    }
+}
+/**
+ * Run a command that shows a folder picker dialog. Returns `null` on user
+ * cancellation, and falls through (re-throws) if the tool is not installed.
+ */
+function tryDialog(cmd) {
+    try {
+        const result = execSync(cmd, { encoding: "utf-8", timeout: 180_000 });
+        return result.trim() || null;
+    }
+    catch (err) {
+        // exit code 1 = user cancelled the dialog → stop here, return null
+        // exit code 127 = command not found → re-throw so the next picker tries
+        const status = err && typeof err === "object" && "status" in err
+            ? err.status
+            : undefined;
+        if (status === 1)
+            return null;
+        throw err;
+    }
+}
+/**
+ * Linux: Try zenity (GTK), then kdialog (KDE), then Python tkinter.
+ */
+function pickLinux() {
+    try {
+        return tryDialog(`zenity --file-selection --directory --title="Select project directory"`);
+    }
+    catch {
+        // zenity not available
+    }
+    try {
+        return tryDialog(`kdialog --getexistingdirectory "${process.env.HOME ?? "/"}" --title "Select project directory"`);
+    }
+    catch {
+        // kdialog not available
+    }
+    // Try Python tkinter
+    return pickTkinter();
+}
+/**
+ * Windows: Use PowerShell to invoke the COM Shell.Application folder picker.
+ */
+function pickWindows() {
+    const script = `
+    Add-Type -AssemblyName System.Windows.Forms
+    $f = New-Object System.Windows.Forms.FolderBrowserDialog
+    $f.Description = "Select project directory"
+    $f.ShowNewFolderButton = $true
+    if ($f.ShowDialog() -eq "OK") { $f.SelectedPath } else { "" }
+  `.trim();
+    try {
+        const result = execSync(`powershell -NoProfile -Command "${script.replace(/"/g, '\\"')}"`, { encoding: "utf-8", timeout: 180_000 });
+        return result.trim() || null;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Python tkinter fallback — works on any OS with Python + tkinter installed.
+ * tkinter is bundled with macOS Python from python.org and most Linux distros.
+ */
+function pickTkinter() {
+    const script = `import tkinter as tk
+from tkinter import filedialog
+root = tk.Tk()
+root.withdraw()
+root.attributes('-topmost', True)
+d = filedialog.askdirectory(title="Select project directory")
+root.destroy()
+print(d if d else "")
+`.replace(/\n/g, ";").replace(/"/g, '\\"');
+    try {
+        const result = execSync(`python3 -c "${script}"`, {
+            encoding: "utf-8",
+            timeout: 180_000,
+        });
+        return result.trim() || null;
+    }
+    catch {
+        // python3 not found — try 'python' (Windows)
+        try {
+            const result = execSync(`python -c "${script}"`, {
+                encoding: "utf-8",
+                timeout: 180_000,
+            });
+            return result.trim() || null;
+        }
+        catch {
+            return null;
+        }
+    }
+}
+// ---------------------------------------------------------------------------
+// Public handler
+// ---------------------------------------------------------------------------
+/**
+ * Attempt to open a native folder picker dialog and return the selected path.
+ *
+ * Synchronous and blocking by design — the browser form is waiting for a
+ * response and the user is interacting with the dialog.
+ */
+export function handlePickDirectory() {
+    const os = platform();
+    try {
+        let path = null;
+        if (os === "darwin") {
+            path = pickMacOS();
+        }
+        else if (os === "linux") {
+            path = pickLinux();
+        }
+        else if (os === "win32") {
+            path = pickWindows();
+        }
+        else {
+            // Unknown platform — try Python tkinter as universal fallback
+            path = pickTkinter();
+        }
+        if (path === null) {
+            // User cancelled or no picker available. Distinguish:
+            // When no path AND no error in the platform pickers, it's a cancel.
+            return { path: null };
+        }
+        return { path };
+    }
+    catch (err) {
+        // The platform picker failed entirely (not cancelled — process error).
+        const msg = err instanceof Error ? err.message : String(err);
+        return {
+            path: null,
+            error: `Could not open folder picker: ${msg}`,
+        };
+    }
+}

package/dist/server/session-stream.d.ts

@@ -252,7 +252,9 @@ export declare class SessionStreamManager {
      *   - When neither envelope nor SQLite have a value, we leave model
      *     selection to spectral's own settings file (pre-Phase-3 behaviour).
      */
-    prompt(sessionId: string, content: string, modelId?: string, images?: ImageAttachment[], reasoningEffort?: string): Promise<void>;
+    prompt(sessionId: string, content: string, modelId?: string, images?: ImageAttachment[], reasoningEffort?: string, opts?: {
+        skipPersistence?: boolean;
+    }): Promise<void>;
     /**
      * Tear down everything. Best-effort: disposes every bridge, drops all
      * subscribers. After this the manager is unusable.

package/dist/server/session-stream.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session-stream.d.ts","sourceRoot":"","sources":["../../src/server/session-stream.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAMH,OAAO,EAAe,KAAK,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACzE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAajD,OAAO,KAAK,EACV,eAAe,EACf,sBAAsB,EAEtB,WAAW,EACX,WAAW,EACX,wBAAwB,EAGzB,MAAM,WAAW,CAAC;AAEnB;;;GAGG;AACH,MAAM,WAAW,UAAU;IACzB,2EAA2E;IAC3E,IAAI,CAAC,KAAK,EAAE,WAAW,GAAG,IAAI,CAAC;IAC/B,wEAAwE;IACxE,MAAM,IAAI,OAAO,CAAC;CACnB;AAED;;;;GAIG;AACH,MAAM,WAAW,UAAU;IACzB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,eAAe,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChE,OAAO,IAAI,IAAI,CAAC;IAChB;;;;;OAKG;IACH,OAAO,CAAC,CAAC,kBAAkB,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrD;;;OAGG;IACH,kBAAkB,CAAC,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAAC;IACtD;;;;;;OAMG;IACH,QAAQ,CAAC,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAChE;;;;;OAKG;IACH,wBAAwB,CAAC,IAAI,MAAM,GAAG,SAAS,CAAC;IAChD;;;;OAIG;IACH,eAAe,CAAC,IAAI;QAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,aAAa,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,SAAS,CAAC;IACzG,gBAAgB,CAAC,IAAI,KAAK,CAAC;QACzB,IAAI,EAAE,MAAM,CAAC;QACb,EAAE,EAAE,MAAM,CAAC;QACX,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,IAAI,CAAC,EAAE,OAAO,CAAC;QACf,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,gBAAgB,CAAC,EAAE,MAAM,CAAC;KAC3B,CAAC,CAAC;IACH,iBAAiB,CAAC,IAAI;QACpB,KAAK,EAAE,MAAM,GAAG,WAAW,GAAG,YAAY,GAAG,YAAY,GAAG,SAAS,CAAC;QACtE,QAAQ,EAAE;YACR,QAAQ,EAAE,OAAO,CAAC;YAClB,UAAU,EAAE,OAAO,CAAC;YACpB,UAAU,EAAE,OAAO,CAAC;YACpB,MAAM,EAAE,OAAO,CAAC;SACjB,CAAC;KACH,CAAC;CACH;AAED,iDAAiD;AACjD,MAAM,MAAM,aAAa,GAAG,CAAC,IAAI,EAAE,kBAAkB,KAAK,UAAU,CAAC;AA4PrE,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,QAAQ,GAAG,SAAS,CAAC;IAC3B,KAAK,EAAE,MAAM,GAAG,WAAW,GAAG,YAAY,GAAG,YAAY,GAAG,SAAS,CAAC;IACtE,QAAQ,EAAE;QACR,QAAQ,EAAE,OAAO,CAAC;QAClB,UAAU,EAAE,OAAO,CAAC;QACpB,UAAU,EAAE,OAAO,CAAC;QACpB,MAAM,EAAE,OAAO,CAAC;KACjB,CAAC;IACF,WAAW,EAAE;QACX,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,YAAY,EAAE;QACZ,cAAc,EAAE,MAAM,CAAC;QACvB,eAAe,EAAE,MAAM,CAAC;QACxB,YAAY,EAAE,MAAM,CAAC;QACrB,aAAa,EAAE,MAAM,CAAC;KACvB,CAAC;IACF,UAAU,EAAE;QACV,WAAW,EAAE,MAAM,CAAC;QACpB,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,MAAM,CAAC;KACpB,CAAC;IACF,QAAQ,EAAE;QACR,2BAA2B,EAAE,MAAM,CAAC;QACpC,yBAAyB,EAAE,MAAM,CAAC;QAClC,qBAAqB,EAAE,MAAM,CAAC;KAC/B,CAAC;CACH;AAiCD,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,WAAW,EAAE,sBAAsB,GAAG,IAAI,CAAC;IAC3C,4FAA4F;IAC5F,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACrB;;qEAEiE;IACjE,kBAAkB,EAAE,OAAO,CAAC;IAC5B,wGAAwG;IACxG,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,yFAAyF;IACzF,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AAED,MAAM,WAAW,2BAA2B;IAC1C,KAAK,EAAE,YAAY,CAAC;IACpB;;;;OAIG;IACH,GAAG,EAAE,MAAM,CAAC;IACZ;;;;;OAKG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAe;IACrC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAC7B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAgB;IAC9C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAqB;IAC9C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoC;IAC5D,OAAO,CAAC,QAAQ,CAAS;gBAEb,IAAI,EAAE,2BAA2B;IAmB7C;;;;;;;;OAQG;IACH,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,GAAG,YAAY;IAwB/D;;;;OAIG;IACH,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,GAAG,IAAI;IAOvD,6EAA6E;IAC7E,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO;IAIzC;;;;;OAKG;IACH,uBAAuB,IAAI,GAAG,CAAC,MAAM,CAAC;IAQtC,sBAAsB,CAAC,SAAS,EAAE,MAAM,GAAG,mBAAmB;IAiE9D,uBAAuB,CAAC,SAAS,EAAE,MAAM,GAAG,wBAAwB;IA8D9D,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAoCtD;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACG,MAAM,CACV,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,MAAM,EAChB,MAAM,CAAC,EAAE,eAAe,EAAE,EAC1B,eAAe,CAAC,EAAE,MAAM,GACvB,OAAO,CAAC,IAAI,CAAC;IAqMhB;;;OAGG;IACH,OAAO,IAAI,IAAI;IAef,sEAAsE;IACtE,WAAW,IAAI,MAAM;IAIrB;;;;;;;;;OASG;IACH,eAAe,IAAI,MAAM;IAQzB;;;;;;;;OAQG;IACH,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAsDnC;;;;;;;OAOG;IACH,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IA4B7C;;;;;OAKG;IACH,qBAAqB,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI;IAM1D;;;;;;;;OAQG;IACH,aAAa,CACX,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,OAAO,EACf,cAAc,CAAC,EAAE,MAAM,EACvB,aAAa,CAAC,EAAE,MAAM,EACtB,IAAI,CAAC,EAAE,MAAM,GACZ,IAAI;IAkBP;;;;;;;;OAQG;IACH,OAAO,CAAC,kBAAkB;IAwD1B;;;;;;;;;;;;;;OAcG;IACH;;;;;;;;;;;;;;;OAeG;IACH,OAAO,CAAC,eAAe;YA6BT,qBAAqB;IA+BnC,OAAO,CAAC,YAAY;IAiIpB,OAAO,CAAC,iBAAiB;IA8PzB;;;;;;;;OAQG;IACH,OAAO,CAAC,iBAAiB;IA8BzB,OAAO,CAAC,SAAS;IAqBjB;;;;OAIG;IACH,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAevC;;;;OAIG;IACH,OAAO,CAAC,gBAAgB;CA2BzB"}
+{"version":3,"file":"session-stream.d.ts","sourceRoot":"","sources":["../../src/server/session-stream.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAMH,OAAO,EAAe,KAAK,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACzE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAajD,OAAO,KAAK,EACV,eAAe,EACf,sBAAsB,EAEtB,WAAW,EACX,WAAW,EACX,wBAAwB,EAGzB,MAAM,WAAW,CAAC;AAEnB;;;GAGG;AACH,MAAM,WAAW,UAAU;IACzB,2EAA2E;IAC3E,IAAI,CAAC,KAAK,EAAE,WAAW,GAAG,IAAI,CAAC;IAC/B,wEAAwE;IACxE,MAAM,IAAI,OAAO,CAAC;CACnB;AAED;;;;GAIG;AACH,MAAM,WAAW,UAAU;IACzB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,eAAe,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChE,OAAO,IAAI,IAAI,CAAC;IAChB;;;;;OAKG;IACH,OAAO,CAAC,CAAC,kBAAkB,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrD;;;OAGG;IACH,kBAAkB,CAAC,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAAC;IACtD;;;;;;OAMG;IACH,QAAQ,CAAC,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAChE;;;;;OAKG;IACH,wBAAwB,CAAC,IAAI,MAAM,GAAG,SAAS,CAAC;IAChD;;;;OAIG;IACH,eAAe,CAAC,IAAI;QAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,aAAa,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,SAAS,CAAC;IACzG,gBAAgB,CAAC,IAAI,KAAK,CAAC;QACzB,IAAI,EAAE,MAAM,CAAC;QACb,EAAE,EAAE,MAAM,CAAC;QACX,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,IAAI,CAAC,EAAE,OAAO,CAAC;QACf,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,gBAAgB,CAAC,EAAE,MAAM,CAAC;KAC3B,CAAC,CAAC;IACH,iBAAiB,CAAC,IAAI;QACpB,KAAK,EAAE,MAAM,GAAG,WAAW,GAAG,YAAY,GAAG,YAAY,GAAG,SAAS,CAAC;QACtE,QAAQ,EAAE;YACR,QAAQ,EAAE,OAAO,CAAC;YAClB,UAAU,EAAE,OAAO,CAAC;YACpB,UAAU,EAAE,OAAO,CAAC;YACpB,MAAM,EAAE,OAAO,CAAC;SACjB,CAAC;KACH,CAAC;CACH;AAED,iDAAiD;AACjD,MAAM,MAAM,aAAa,GAAG,CAAC,IAAI,EAAE,kBAAkB,KAAK,UAAU,CAAC;AA4PrE,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,QAAQ,GAAG,SAAS,CAAC;IAC3B,KAAK,EAAE,MAAM,GAAG,WAAW,GAAG,YAAY,GAAG,YAAY,GAAG,SAAS,CAAC;IACtE,QAAQ,EAAE;QACR,QAAQ,EAAE,OAAO,CAAC;QAClB,UAAU,EAAE,OAAO,CAAC;QACpB,UAAU,EAAE,OAAO,CAAC;QACpB,MAAM,EAAE,OAAO,CAAC;KACjB,CAAC;IACF,WAAW,EAAE;QACX,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,YAAY,EAAE;QACZ,cAAc,EAAE,MAAM,CAAC;QACvB,eAAe,EAAE,MAAM,CAAC;QACxB,YAAY,EAAE,MAAM,CAAC;QACrB,aAAa,EAAE,MAAM,CAAC;KACvB,CAAC;IACF,UAAU,EAAE;QACV,WAAW,EAAE,MAAM,CAAC;QACpB,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,MAAM,CAAC;KACpB,CAAC;IACF,QAAQ,EAAE;QACR,2BAA2B,EAAE,MAAM,CAAC;QACpC,yBAAyB,EAAE,MAAM,CAAC;QAClC,qBAAqB,EAAE,MAAM,CAAC;KAC/B,CAAC;CACH;AAiCD,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,WAAW,EAAE,sBAAsB,GAAG,IAAI,CAAC;IAC3C,4FAA4F;IAC5F,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACrB;;qEAEiE;IACjE,kBAAkB,EAAE,OAAO,CAAC;IAC5B,wGAAwG;IACxG,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,yFAAyF;IACzF,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AAED,MAAM,WAAW,2BAA2B;IAC1C,KAAK,EAAE,YAAY,CAAC;IACpB;;;;OAIG;IACH,GAAG,EAAE,MAAM,CAAC;IACZ;;;;;OAKG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAe;IACrC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAC7B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAgB;IAC9C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAqB;IAC9C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoC;IAC5D,OAAO,CAAC,QAAQ,CAAS;gBAEb,IAAI,EAAE,2BAA2B;IAmB7C;;;;;;;;OAQG;IACH,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,GAAG,YAAY;IAwB/D;;;;OAIG;IACH,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,GAAG,IAAI;IAOvD,6EAA6E;IAC7E,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO;IAIzC;;;;;OAKG;IACH,uBAAuB,IAAI,GAAG,CAAC,MAAM,CAAC;IAQtC,sBAAsB,CAAC,SAAS,EAAE,MAAM,GAAG,mBAAmB;IAiE9D,uBAAuB,CAAC,SAAS,EAAE,MAAM,GAAG,wBAAwB;IA8D9D,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAoCtD;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACG,MAAM,CACV,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,MAAM,EAChB,MAAM,CAAC,EAAE,eAAe,EAAE,EAC1B,eAAe,CAAC,EAAE,MAAM,EACxB,IAAI,CAAC,EAAE;QAAE,eAAe,CAAC,EAAE,OAAO,CAAA;KAAE,GACnC,OAAO,CAAC,IAAI,CAAC;IA0MhB;;;OAGG;IACH,OAAO,IAAI,IAAI;IAef,sEAAsE;IACtE,WAAW,IAAI,MAAM;IAIrB;;;;;;;;;OASG;IACH,eAAe,IAAI,MAAM;IAQzB;;;;;;;;OAQG;IACH,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAsDnC;;;;;;;OAOG;IACH,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IA4B7C;;;;;OAKG;IACH,qBAAqB,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI;IAM1D;;;;;;;;OAQG;IACH,aAAa,CACX,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,OAAO,EACf,cAAc,CAAC,EAAE,MAAM,EACvB,aAAa,CAAC,EAAE,MAAM,EACtB,IAAI,CAAC,EAAE,MAAM,GACZ,IAAI;IAkBP;;;;;;;;OAQG;IACH,OAAO,CAAC,kBAAkB;IAwD1B;;;;;;;;;;;;;;OAcG;IACH;;;;;;;;;;;;;;;OAeG;IACH,OAAO,CAAC,eAAe;YA6BT,qBAAqB;IA+BnC,OAAO,CAAC,YAAY;IAiIpB,OAAO,CAAC,iBAAiB;IA8PzB;;;;;;;;OAQG;IACH,OAAO,CAAC,iBAAiB;IA8BzB,OAAO,CAAC,SAAS;IAqBjB;;;;OAIG;IACH,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAevC;;;;OAIG;IACH,OAAO,CAAC,gBAAgB;CA2BzB"}

package/dist/server/session-stream.js

@@ -484,7 +484,7 @@ export class SessionStreamManager {
      *   - When neither envelope nor SQLite have a value, we leave model
      *     selection to spectral's own settings file (pre-Phase-3 behaviour).
      */
-    async prompt(sessionId, content, modelId, images, reasoningEffort) {
+    async prompt(sessionId, content, modelId, images, reasoningEffort, opts) {
         if (this.disposed)
             throw new Error("SessionStreamManager disposed");
         let stream = this.streams.get(sessionId);
@@ -619,25 +619,30 @@ export class SessionStreamManager {
             }
         }
         // 1. Persist user message first (survives mid-prompt failures).
-        let stored;
-        try {
-            stored = this.store.appendMessage(sessionId, {
-                role: "user",
-                content,
-                images,
-            });
-        }
-        catch (err) {
-            const e = err instanceof Error ? err : new Error(String(err));
-            this.broadcast(stream, {
-                type: "error",
-                message: `Failed to persist user message: ${e.message}`,
-            });
-            return;
+        // When skipPersistence is true (e.g. auto-research), the prompt is
+        // an internal system instruction — do NOT write it to SQLite or
+        // broadcast it as a user message.
+        if (!opts?.skipPersistence) {
+            let stored;
+            try {
+                stored = this.store.appendMessage(sessionId, {
+                    role: "user",
+                    content,
+                    images,
+                });
+            }
+            catch (err) {
+                const e = err instanceof Error ? err : new Error(String(err));
+                this.broadcast(stream, {
+                    type: "error",
+                    message: `Failed to persist user message: ${e.message}`,
+                });
+                return;
+            }
+            // 2. Broadcast the persisted message so every tab — including the one
+            //    that sent the prompt — appends an authoritative user turn.
+            this.broadcast(stream, { type: "user_message_appended", message: stored });
         }
-        // 2. Broadcast the persisted message so every tab — including the one
-        //    that sent the prompt — appends an authoritative user turn.
-        this.broadcast(stream, { type: "user_message_appended", message: stored });
         // 3. Open a new in-flight turn. Allocated even before spectral emits anything
         //    so a re-attach immediately after `prompt` sees the turn.
         stream.currentTurn = {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aexol/spectral",
-  "version": "0.9.6",
+  "version": "0.9.8",
   "description": "AI coding agent for Aexol with relay-based browser access.",
   "type": "module",
   "private": false,