@brainst0rm/cli 0.13.0 → 0.14.0

package/dist/brainstorm.js

@@ -5,12 +5,18 @@ import {
 import {
   ROLES
 } from "./chunk-OVGL3NJQ.js";
-import "./chunk-ZWE3DS7E.js";
+import "./chunk-SEGVTWSK.js";
 
 // src/bin/brainstorm.ts
 import { Command } from "commander";
+import { initSentry, captureError, flushSentry } from "@brainst0rm/shared";
 import { loadConfig } from "@brainst0rm/config";
-import { getDb, closeDb, CostRepository } from "@brainst0rm/db";
+import {
+  getDb,
+  closeDb,
+  CostRepository,
+  RoutingOutcomeRepository
+} from "@brainst0rm/db";
 import {
   createProviderRegistry,
   getBrainstormApiKey,
@@ -824,7 +830,11 @@ var PROVIDER_KEY_NAMES = [
   "GOOGLE_GENERATIVE_AI_API_KEY",
   "DEEPSEEK_API_KEY",
   "MOONSHOT_API_KEY",
-  "BRAINSTORM_ADMIN_KEY"
+  "BRAINSTORM_ADMIN_KEY",
+  // God Mode connector keys — resolved so connectors can authenticate
+  "BRAINSTORM_MSP_API_KEY",
+  "BRAINSTORM_EMAIL_API_KEY",
+  "BRAINSTORM_VM_API_KEY"
 ];
 async function resolveProviderKeys() {
   const vault = new BrainstormVault(VAULT_PATH);
@@ -835,7 +845,10 @@ async function resolveProviderKeys() {
   const resolved = /* @__PURE__ */ new Map();
   for (const name of PROVIDER_KEY_NAMES) {
     const value = await resolver.get(name);
-    if (value) resolved.set(name, value);
+    if (value) {
+      resolved.set(name, value);
+      process.env[name] = value;
+    }
   }
   return { get: (name) => resolved.get(name) ?? null };
 }
@@ -1704,13 +1717,24 @@ ${stdinText}`;
       config.shell.containerImage,
       config.shell.containerTimeout
     );
-    const { prompt: rawPrompt, frontmatter } = buildSystemPrompt(projectPath);
-    const systemPrompt = rawPrompt + buildToolAwarenessSection(tools.listTools());
+    const {
+      prompt: rawPrompt,
+      segments: rawSegments,
+      frontmatter
+    } = buildSystemPrompt(projectPath);
+    const toolSection = buildToolAwarenessSection(tools.listTools());
+    const systemPrompt = rawPrompt + toolSection;
+    const systemSegments = rawSegments.length > 0 ? [
+      { text: rawSegments[0].text + toolSection, cacheable: true },
+      ...rawSegments.slice(1)
+    ] : [{ text: systemPrompt, cacheable: true }];
+    const routingOutcomeRepo = new RoutingOutcomeRepository(db);
     const router = new BrainstormRouter(
       config,
       registry,
       costTracker,
-      frontmatter
+      frontmatter,
+      routingOutcomeRepo.loadAggregated()
     );
     const permissionManager = new PermissionManager(
       config.general.defaultPermissionMode,
@@ -1722,6 +1746,63 @@ ${stdinText}`;
     } else if (!isCommunityTier || hasDirectKeys) {
       router.setStrategy("quality-first");
     }
+    const runHasConnectorKey = !!(process.env.BRAINSTORM_MSP_API_KEY || process.env.BRAINSTORM_EMAIL_API_KEY || process.env.BRAINSTORM_VM_API_KEY || process.env._GM_MSP_KEY || process.env._GM_EMAIL_KEY || process.env._GM_VM_KEY);
+    if (runHasConnectorKey || config.godmode.enabled) {
+      try {
+        const {
+          connectGodMode: connectGM,
+          createProductConnectors: createPC,
+          setAuditPersister: setAP
+        } = await import("@brainst0rm/godmode");
+        const { ChangeSetLogRepository: CSLogRun } = await import("@brainst0rm/db");
+        const csLogRun = new CSLogRun(db);
+        setAP((entry) => {
+          csLogRun.log({
+            changesetId: entry.changesetId,
+            connector: entry.connector,
+            action: entry.action,
+            description: entry.description,
+            riskScore: entry.riskScore,
+            status: entry.status,
+            changesJson: entry.changesJson,
+            simulationJson: entry.simulationJson,
+            rollbackJson: entry.rollbackJson,
+            createdAt: entry.createdAt,
+            executedAt: entry.executedAt,
+            sessionId: null
+          });
+        });
+        const defaultConns = {
+          msp: {
+            enabled: true,
+            baseUrl: process.env.BRAINSTORM_MSP_URL ?? "https://brainstormmsp.ai",
+            apiKeyName: "BRAINSTORM_MSP_API_KEY"
+          }
+        };
+        const mergedConfig = {
+          ...config.godmode,
+          connectors: { ...defaultConns, ...config.godmode.connectors }
+        };
+        const activeConns = await createPC(mergedConfig);
+        const gmResult = await connectGM(tools, mergedConfig, activeConns);
+        if (gmResult.connectedSystems.length > 0) {
+          const gmToolSection = buildToolAwarenessSection(tools.listTools());
+          systemSegments[0] = {
+            text: rawSegments[0]?.text + gmToolSection + "\n" + (gmResult.promptSegment?.text ?? ""),
+            cacheable: true
+          };
+          process.stderr.write(
+            `[godmode] Connected: ${gmResult.connectedSystems.map((s) => s.displayName).join(", ")} (${gmResult.totalTools} tools)
+`
+          );
+        }
+      } catch (err) {
+        process.stderr.write(
+          `[godmode] ${err instanceof Error ? err.message : String(err)}
+`
+        );
+      }
+    }
     const session = sessionManager.start(projectPath);
     sessionManager.addUserMessage(finalPrompt);
     let fullResponse = "";
@@ -1740,12 +1821,14 @@ ${stdinText}`;
       sessionId: session.id,
       projectPath,
       systemPrompt,
+      systemSegments,
       disableTools: !opts.tools,
       preferredModelId: opts.model ?? (resolvedKeys.get("MOONSHOT_API_KEY") ? "moonshot/kimi-k2.5" : isCommunityTier && !resolvedKeys.get("DEEPSEEK_API_KEY") && !resolvedKeys.get("ANTHROPIC_API_KEY") && !resolvedKeys.get("OPENAI_API_KEY") && !resolvedKeys.get("GOOGLE_GENERATIVE_AI_API_KEY") ? "brainstormrouter/auto" : void 0),
       maxSteps: parseInt(opts.maxSteps ?? "1"),
       compaction: buildCompactionCallbacks(sessionManager),
       permissionCheck: (tool, args) => permissionManager.check(tool, args),
-      middleware
+      middleware,
+      routingOutcomeRepo
     })) {
       switch (event.type) {
         case "thinking":
@@ -1849,6 +1932,7 @@ Error: ${event.error.message}
     }
     if (fullResponse) {
       sessionManager.addAssistantMessage(fullResponse);
+      sessionManager.flush();
     }
   }
 );
@@ -2105,7 +2189,7 @@ vaultCmd.command("status").description("Show vault and backend status").action(a
 });
 var projectsCmd = program.command("projects").description("Manage registered projects");
 projectsCmd.command("list").description("List all registered projects").option("--all", "Include inactive projects").action(async (opts) => {
-  const { ProjectManager } = await import("./dist-YIGU37Q2.js");
+  const { ProjectManager } = await import("./dist-Y25MC2VO.js");
   const db = getDb();
   const pm = new ProjectManager(db);
   const projects = pm.projects.list(opts.all);
@@ -2130,7 +2214,7 @@ projectsCmd.command("list").description("List all registered projects").option("
 });
 projectsCmd.command("register").argument("<path>", "Path to project directory").option("-n, --name <name>", "Project name (default: directory name)").option("--budget-daily <amount>", "Daily budget limit in dollars").option("--budget-monthly <amount>", "Monthly budget limit in dollars").description("Register a project").action(
   async (path, opts) => {
-    const { ProjectManager } = await import("./dist-YIGU37Q2.js");
+    const { ProjectManager } = await import("./dist-Y25MC2VO.js");
     const db = getDb();
     const pm = new ProjectManager(db);
     try {
@@ -2151,7 +2235,7 @@ projectsCmd.command("register").argument("<path>", "Path to project directory").
   }
 );
 projectsCmd.command("switch").argument("<name>", "Project name to switch to").description("Set the active project for this session").action(async (name) => {
-  const { ProjectManager } = await import("./dist-YIGU37Q2.js");
+  const { ProjectManager } = await import("./dist-Y25MC2VO.js");
   const db = getDb();
   const pm = new ProjectManager(db);
   try {
@@ -2168,7 +2252,7 @@ projectsCmd.command("switch").argument("<name>", "Project name to switch to").de
   }
 });
 projectsCmd.command("show").argument("<name>", "Project name").description("Show project dashboard").action(async (name) => {
-  const { ProjectManager } = await import("./dist-YIGU37Q2.js");
+  const { ProjectManager } = await import("./dist-Y25MC2VO.js");
   const db = getDb();
   const pm = new ProjectManager(db);
   const project = pm.projects.getByName(name);
@@ -2205,7 +2289,7 @@ projectsCmd.command("show").argument("<name>", "Project name").description("Show
   console.log();
 });
 projectsCmd.command("import").argument("[dir]", "Parent directory to scan", join3(homedir(), "Projects")).description("Scan a directory and register all project subdirectories").action(async (dir) => {
-  const { ProjectManager } = await import("./dist-YIGU37Q2.js");
+  const { ProjectManager } = await import("./dist-Y25MC2VO.js");
   const db = getDb();
   const pm = new ProjectManager(db);
   const registered = pm.import(dir);
@@ -2224,8 +2308,8 @@ projectsCmd.command("import").argument("[dir]", "Parent directory to scan", join
 });
 var scheduleCmd = program.command("schedule").description("Manage scheduled tasks");
 scheduleCmd.command("list").option("-p, --project <name>", "Filter by project").description("List scheduled tasks").action(async (opts) => {
-  const { ScheduledTaskRepository } = await import("./dist-DUDO3RDM.js");
-  const { ProjectManager } = await import("./dist-YIGU37Q2.js");
+  const { ScheduledTaskRepository } = await import("./dist-GVK5Q4YK.js");
+  const { ProjectManager } = await import("./dist-Y25MC2VO.js");
   const db = getDb();
   const taskRepo = new ScheduledTaskRepository(db);
   let projectId;
@@ -2257,8 +2341,8 @@ scheduleCmd.command("list").option("-p, --project <name>", "Filter by project").
   console.log();
 });
 scheduleCmd.command("add").argument("<prompt>", "Task instruction").requiredOption("-p, --project <name>", "Project name").option("-n, --name <name>", "Task name (default: first 30 chars of prompt)").option("--cron <expression>", "Cron schedule (e.g. '0 9 * * *')").option("--budget <amount>", "Budget limit per run in dollars", "0.50").option("--max-turns <n>", "Maximum turns per run", "20").option("--allow-mutations", "Allow file writes and shell commands").option("--model <id>", "Model override for this task").description("Add a scheduled task").action(async (prompt, opts) => {
-  const { ScheduledTaskRepository, validateCron, validateTaskSafety } = await import("./dist-DUDO3RDM.js");
-  const { ProjectManager } = await import("./dist-YIGU37Q2.js");
+  const { ScheduledTaskRepository, validateCron, validateTaskSafety } = await import("./dist-GVK5Q4YK.js");
+  const { ProjectManager } = await import("./dist-Y25MC2VO.js");
   const db = getDb();
   const pm = new ProjectManager(db);
   const project = pm.projects.getByName(opts.project);
@@ -2288,7 +2372,7 @@ scheduleCmd.command("add").argument("<prompt>", "Task instruction").requiredOpti
   console.log(`
   \u2713 Created task "${task.name}" (${task.id.slice(0, 8)})`);
   if (task.cronExpression) {
-    const { describeCron } = await import("./dist-DUDO3RDM.js");
+    const { describeCron } = await import("./dist-GVK5Q4YK.js");
     console.log(`    Schedule: ${describeCron(task.cronExpression)}`);
   }
   if (warnings.length > 0) {
@@ -2298,7 +2382,7 @@ scheduleCmd.command("add").argument("<prompt>", "Task instruction").requiredOpti
   console.log();
 });
 scheduleCmd.command("run").option("--task-id <id>", "Run a specific task").option("--dry-run", "Show what would run without executing").description("Trigger due tasks").action(async (opts) => {
-  const { TriggerRunner } = await import("./dist-DUDO3RDM.js");
+  const { TriggerRunner } = await import("./dist-GVK5Q4YK.js");
   const db = getDb();
   const runner = new TriggerRunner(db);
   const result = await runner.runDueTasks(opts);
@@ -2317,7 +2401,7 @@ scheduleCmd.command("run").option("--task-id <id>", "Run a specific task").optio
   console.log();
 });
 scheduleCmd.command("history").option("--task-id <id>", "Filter by task").option("-n, --limit <count>", "Number of runs to show", "10").description("Show task run history").action(async (opts) => {
-  const { TaskRunRepository, ScheduledTaskRepository } = await import("./dist-DUDO3RDM.js");
+  const { TaskRunRepository, ScheduledTaskRepository } = await import("./dist-GVK5Q4YK.js");
   const db = getDb();
   const runRepo = new TaskRunRepository(db);
   const taskRepo = new ScheduledTaskRepository(db);
@@ -2338,7 +2422,7 @@ scheduleCmd.command("history").option("--task-id <id>", "Filter by task").option
   console.log();
 });
 scheduleCmd.command("pause").argument("<task-id>", "Task ID to pause").description("Pause a scheduled task").action(async (taskId) => {
-  const { ScheduledTaskRepository } = await import("./dist-DUDO3RDM.js");
+  const { ScheduledTaskRepository } = await import("./dist-GVK5Q4YK.js");
   const db = getDb();
   const repo = new ScheduledTaskRepository(db);
   repo.updateStatus(taskId, "paused");
@@ -2346,7 +2430,7 @@ scheduleCmd.command("pause").argument("<task-id>", "Task ID to pause").descripti
 `);
 });
 scheduleCmd.command("resume").argument("<task-id>", "Task ID to resume").description("Resume a paused task").action(async (taskId) => {
-  const { ScheduledTaskRepository } = await import("./dist-DUDO3RDM.js");
+  const { ScheduledTaskRepository } = await import("./dist-GVK5Q4YK.js");
   const db = getDb();
   const repo = new ScheduledTaskRepository(db);
   repo.updateStatus(taskId, "active");
@@ -2354,7 +2438,7 @@ scheduleCmd.command("resume").argument("<task-id>", "Task ID to resume").descrip
 `);
 });
 scheduleCmd.command("delete").argument("<task-id>", "Task ID to delete").description("Delete a scheduled task").action(async (taskId) => {
-  const { ScheduledTaskRepository } = await import("./dist-DUDO3RDM.js");
+  const { ScheduledTaskRepository } = await import("./dist-GVK5Q4YK.js");
   const db = getDb();
   const repo = new ScheduledTaskRepository(db);
   repo.delete(taskId);
@@ -2695,8 +2779,8 @@ orchestrateCmd.command("pipeline").argument("<request>", "What to build (natural
 });
 orchestrateCmd.command("run").argument("<description>", "What to do across projects").requiredOption("-p, --projects <names>", "Comma-separated project names").option("--budget <amount>", "Total budget limit in dollars").option("--type <type>", "Subagent type (explore, code, review)", "code").description("Run a cross-project orchestration").action(
   async (description, opts) => {
-    const { OrchestrationEngine, formatAggregatedResults, aggregateResults } = await import("./dist-JUDVPE7G.js");
-    const { ProjectManager } = await import("./dist-YIGU37Q2.js");
+    const { OrchestrationEngine, formatAggregatedResults, aggregateResults } = await import("./dist-ET6CSS7O.js");
+    const { ProjectManager } = await import("./dist-Y25MC2VO.js");
     const db = getDb();
     const engine = new OrchestrationEngine(db);
     const pm = new ProjectManager(db);
@@ -2762,7 +2846,7 @@ orchestrateCmd.command("run").argument("<description>", "What to do across proje
   }
 );
 orchestrateCmd.command("history").option("-n, --limit <count>", "Number of runs to show", "10").description("Show recent orchestration runs").action(async (opts) => {
-  const { OrchestrationEngine } = await import("./dist-JUDVPE7G.js");
+  const { OrchestrationEngine } = await import("./dist-ET6CSS7O.js");
   const db = getDb();
   const engine = new OrchestrationEngine(db);
   const runs = engine.listRecent(parseInt(opts.limit));
@@ -2781,8 +2865,8 @@ orchestrateCmd.command("history").option("-n, --limit <count>", "Number of runs
   console.log();
 });
 orchestrateCmd.command("status").argument("<run-id>", "Orchestration run ID").description("Show status of an orchestration run").action(async (runId) => {
-  const { OrchestrationEngine } = await import("./dist-JUDVPE7G.js");
-  const { ProjectManager } = await import("./dist-YIGU37Q2.js");
+  const { OrchestrationEngine } = await import("./dist-ET6CSS7O.js");
+  const { ProjectManager } = await import("./dist-Y25MC2VO.js");
   const db = getDb();
   const engine = new OrchestrationEngine(db);
   const pm = new ProjectManager(db);
@@ -3486,6 +3570,95 @@ program.command("setup-infra").description(
   );
   console.log();
 });
+program.command("onboard").description(
+  "LLM-driven project onboarding \u2014 discover conventions, generate specialized agents, wire routing"
+).argument("[path]", "Project path", ".").option(
+  "--budget <dollars>",
+  "Max spend in USD (default: auto from project size)"
+).option("--static-only", "Skip LLM phases (equivalent to setup-infra)").option("--dry-run", "Show plan without writing files or calling LLMs").option("--phases <phases>", "Comma-separated phases to run").action(
+  async (projectPath, opts) => {
+    const { resolve } = await import("path");
+    const { runOnboardPipeline, ALL_PHASES } = await import("./dist-42TQFHMB.js");
+    const absPath = resolve(projectPath);
+    const options = {
+      projectPath: absPath,
+      budget: opts.budget ? parseFloat(opts.budget) : void 0,
+      staticOnly: opts.staticOnly ?? false,
+      dryRun: opts.dryRun ?? false,
+      phases: opts.phases ? opts.phases.split(",").map((p) => p.trim()) : void 0
+    };
+    console.log(
+      `
+  storm onboard ${absPath === process.cwd() ? "." : absPath}${opts.staticOnly ? " --static-only" : ""}${opts.dryRun ? " --dry-run" : ""}`
+    );
+    console.log();
+    for await (const event of runOnboardPipeline(options)) {
+      switch (event.type) {
+        case "onboard-started":
+          if (event.estimatedBudget > 0) {
+            console.log(
+              `  Budget: $${options.budget?.toFixed(2) ?? "auto"} (estimated ~$${event.estimatedBudget.toFixed(2)})`
+            );
+            console.log();
+          }
+          break;
+        case "phase-started":
+          process.stdout.write(`  Phase: ${event.description} ...`);
+          break;
+        case "phase-completed": {
+          const cost = event.cost > 0 ? `, $${event.cost.toFixed(2)}` : "";
+          const dur = (event.durationMs / 1e3).toFixed(1);
+          console.log(` done (${dur}s${cost})`);
+          console.log(`    ${event.summary}`);
+          console.log();
+          break;
+        }
+        case "phase-skipped": {
+          const { PHASE_LABELS } = await import("./dist-42TQFHMB.js");
+          const label = PHASE_LABELS[event.phase] ?? event.phase;
+          console.log(`  Phase: ${label} ... skipped`);
+          console.log(`    ${event.reason}`);
+          console.log();
+          break;
+        }
+        case "phase-failed":
+          console.log(` FAILED`);
+          console.log(`    ${event.error}`);
+          console.log();
+          break;
+        case "file-written":
+          console.log(`    \u2192 ${event.path}`);
+          break;
+        case "budget-warning":
+          console.log(
+            `  \u26A0 Budget: $${event.spent.toFixed(2)} spent, $${event.remaining.toFixed(2)} remaining`
+          );
+          break;
+        case "onboard-completed": {
+          const r = event.result;
+          const dur = (r.totalDurationMs / 1e3).toFixed(1);
+          console.log("  \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550");
+          console.log(
+            `   Onboarding Complete \u2014 $${r.totalCost.toFixed(2)} total, ${dur}s`
+          );
+          console.log("  \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550");
+          if (r.filesWritten.length > 0) {
+            console.log();
+            for (const f of r.filesWritten) {
+              console.log(`  ${f}`);
+            }
+          }
+          console.log(
+            `
+  Next: Run \`storm chat\` to start working with agents that know your codebase.
+`
+          );
+          break;
+        }
+      }
+    }
+  }
+);
 program.command("route").description("Explain how Brainstorm classifies and routes a task").argument("[task]", "Task description to classify").option("--json", "Output as JSON").action(async (task, opts) => {
   const { classifyTask } = await import("@brainst0rm/router");
   const taskText = task ?? "write a function that validates email addresses";
@@ -4066,134 +4239,1194 @@ Project initialized by \`storm start\`.
   console.log(`    storm run "prompt"    Single-shot execution`);
   console.log();
 });
-program.command("chat", { isDefault: true }).description("Start an interactive chat session").option("--simple", "Use simple readline interface instead of TUI").option("--continue", "Resume the most recent session").option("--resume <id>", "Resume a specific session by ID").option("--fork <id>", "Fork a session (copy history, new session)").option("--lfg", "Full auto mode \u2014 skip all permission confirmations").option(
-  "--strategy <name>",
-  "Routing strategy: cost-first, quality-first, combined, capability"
-).option("--verbose-routing", "Print routing decisions to stderr").option(
-  "--fast",
-  "Fast startup \u2014 skip provider discovery, MCP connections, and eval probes"
-).action(
-  async (opts) => {
-    const config = loadConfig();
-    if (opts.lfg) {
-      config.general.defaultPermissionMode = "auto";
-    }
-    if (opts.fast) {
-      config.general.skipProviderDiscovery = true;
-      config.general.skipEvalProbes = true;
-    }
-    const db = getDb();
-    const resolvedKeys = await resolveProviderKeys();
-    const resolvedBRKey = resolvedKeys.get("BRAINSTORM_API_KEY") ?? getBrainstormApiKey();
-    const isCommunityTier = isCommunityKey(resolvedBRKey);
-    if (resolvedBRKey) process.env._BR_RESOLVED_KEY = resolvedBRKey;
-    const registry = await createProviderRegistry(config, resolvedKeys);
-    const costTracker = new CostTracker(db, config.budget);
-    const tools = createDefaultToolRegistry();
-    if (!opts.fast)
-      await connectMCPServers(
-        tools,
-        config,
-        resolvedKeys.get("BRAINSTORM_API_KEY")
-      );
-    const projectPath = process.cwd();
-    configureSandbox(
-      config.shell.sandbox,
-      projectPath,
-      config.shell.maxOutputBytes,
-      config.shell.containerImage,
-      config.shell.containerTimeout
+var platformCmd = program.command("platform").description("Platform contract tools \u2014 verify, init, manifest");
+platformCmd.command("verify").description("Verify a product implements the Brainstorm platform contract").argument("<url>", "Product API base URL (e.g., https://brainstormmsp.ai)").option("--token <jwt>", "Bearer token for authenticated endpoints").option("--timeout <ms>", "Request timeout in milliseconds", "10000").action(async (url, opts) => {
+  const { verifyProductContract } = await import("@brainst0rm/godmode");
+  console.log(`
+  Platform Contract Verification`);
+  console.log(`  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+`);
+  console.log(`  Target: ${url}`);
+  console.log();
+  const results = await verifyProductContract(url, {
+    timeout: parseInt(opts.timeout ?? "10000"),
+    token: opts.token
+  });
+  let passed = 0;
+  let failed = 0;
+  for (const r of results) {
+    const icon = r.status === "pass" ? "\u2713" : r.status === "fail" ? "\u2717" : "\u25CB";
+    const color = r.status === "pass" ? "\x1B[32m" : r.status === "fail" ? "\x1B[31m" : "\x1B[90m";
+    const latency = r.latencyMs ? ` (${r.latencyMs}ms)` : "";
+    console.log(
+      `  ${color}${icon}\x1B[0m ${r.endpoint} \u2014 ${r.message}${latency}`
     );
-    const permissionManager = new PermissionManager(
-      config.general.defaultPermissionMode,
-      config.permissions
+    if (r.status === "pass") passed++;
+    else if (r.status === "fail") failed++;
+  }
+  console.log();
+  console.log(
+    `  ${passed} passed, ${failed} failed, ${results.length} total`
+  );
+  if (failed > 0) {
+    console.log(`
+  Missing endpoints need to be implemented.`);
+    console.log(`  See: brainstorm platform init`);
+  } else {
+    console.log(`
+  Product implements the platform contract.`);
+  }
+  console.log();
+  process.exit(failed > 0 ? 1 : 0);
+});
+platformCmd.command("init").description("Generate a product-manifest.yaml template").option("--id <id>", "Product ID (lowercase, hyphens)", "my-product").option("--name <name>", "Display name", "My Product").option("--url <url>", "API base URL", "http://localhost:3000").action(async (opts) => {
+  const { generateManifestTemplate } = await import("@brainst0rm/godmode");
+  const { writeFileSync: writeFileSync2, existsSync: existsSync3 } = await import("fs");
+  const { resolve } = await import("path");
+  const template = generateManifestTemplate(opts.id, opts.name, opts.url);
+  const outPath = resolve("product-manifest.yaml");
+  if (existsSync3(outPath)) {
+    console.error(
+      `  product-manifest.yaml already exists. Delete it first to regenerate.`
     );
-    let currentOutputStyle = config.general.outputStyle ?? "concise";
-    let currentRole;
-    const sessionManager = new SessionManager(db);
-    const middleware = createDefaultMiddlewarePipeline(projectPath);
-    let { prompt: systemPrompt, frontmatter } = buildSystemPrompt(
-      projectPath,
-      currentOutputStyle
+    process.exit(1);
+  }
+  writeFileSync2(outPath, template, "utf-8");
+  console.log(`
+  \u2713 Generated product-manifest.yaml`);
+  console.log(
+    `  Edit the file, then run: brainstorm platform verify ${opts.url}
+`
+  );
+});
+platformCmd.command("validate").description("Validate a product-manifest.yaml file").argument("[path]", "Path to manifest file", "product-manifest.yaml").action(async (path) => {
+  const { readFileSync: readFileSync3, existsSync: existsSync3 } = await import("fs");
+  const { resolve } = await import("path");
+  const { validateManifestData } = await import("@brainst0rm/godmode");
+  const filePath = resolve(path);
+  if (!existsSync3(filePath)) {
+    console.error(`  File not found: ${filePath}`);
+    console.error(`  Run: brainstorm platform init`);
+    process.exit(1);
+  }
+  const content = readFileSync3(filePath, "utf-8");
+  let data;
+  try {
+    data = JSON.parse(content);
+  } catch {
+    console.error(
+      `  Cannot parse ${path}. Install 'yaml' package or use JSON format.`
     );
-    systemPrompt += buildToolAwarenessSection(tools.listTools());
-    const router = new BrainstormRouter(
-      config,
-      registry,
-      costTracker,
-      frontmatter
+    try {
+      const yaml = await import("./dist-BULARAL3.js");
+      data = yaml.parse(content);
+    } catch {
+      console.error(`  Tip: npm install yaml`);
+      process.exit(1);
+    }
+  }
+  const result = validateManifestData(data);
+  if (result.ok) {
+    const m = result.manifest;
+    console.log(
+      `
+  \u2713 Valid manifest: ${m.product.name} (${m.product.id}) v${m.product.version}`
     );
-    const hasOwnKeys = !!resolvedKeys.get("DEEPSEEK_API_KEY") || !!resolvedKeys.get("ANTHROPIC_API_KEY") || !!resolvedKeys.get("OPENAI_API_KEY") || !!resolvedKeys.get("MOONSHOT_API_KEY") || !!resolvedKeys.get("GOOGLE_GENERATIVE_AI_API_KEY");
-    if (opts.strategy) {
-      router.setStrategy(opts.strategy);
-    } else if ((!isCommunityTier || hasOwnKeys) && router.getActiveStrategy() !== "capability") {
-      router.setStrategy("quality-first");
+    console.log(`    API: ${m.security.api_base}`);
+    console.log(
+      `    Auth: human=${m.security.auth.human}, machine=${m.security.auth.machine}`
+    );
+    console.log(`    Capabilities: ${m.capabilities.length}`);
+    console.log(
+      `    Events: publishes=${m.events.publishes.length}, subscribes=${m.events.subscribes.length}`
+    );
+    console.log();
+  } else {
+    console.error(`
+  \u2717 Invalid manifest:`);
+    for (const err of result.errors ?? []) {
+      console.error(`    - ${err}`);
     }
-    const subagentTool = createSubagentTool({
-      config,
-      registry,
-      router,
-      costTracker,
-      tools,
-      projectPath,
-      permissionCheck: (name, perm) => permissionManager.check(name, perm),
-      containerIsolation: config.shell.sandbox === "container"
-    });
-    tools.register(subagentTool);
-    const hasDirectProviderKeys = !!resolvedKeys.get("DEEPSEEK_API_KEY") || !!resolvedKeys.get("ANTHROPIC_API_KEY") || !!resolvedKeys.get("OPENAI_API_KEY") || !!resolvedKeys.get("GOOGLE_GENERATIVE_AI_API_KEY") || !!resolvedKeys.get("MOONSHOT_API_KEY");
-    let preferredModelId = resolvedKeys.get(
-      "MOONSHOT_API_KEY"
-    ) ? "moonshot/kimi-k2.5" : isCommunityTier && !hasDirectProviderKeys ? "brainstormrouter/auto" : void 0;
-    let session;
-    if (opts.fork) {
-      session = sessionManager.fork(opts.fork);
-      if (!session) {
-        console.error(`  Session '${opts.fork}' not found.`);
-        process.exit(1);
-      }
-      console.log(
-        `  Forked session ${opts.fork.slice(0, 8)} -> ${session.id.slice(0, 8)}`
-      );
-    } else if (opts.resume) {
-      session = sessionManager.resume(opts.resume);
-      if (!session) {
-        console.error(`  Session '${opts.resume}' not found.`);
-        process.exit(1);
-      }
-      printResumeSummary(session, sessionManager);
-    } else if (opts.continue) {
-      session = sessionManager.resumeLatest(projectPath);
-      if (!session) {
-        session = sessionManager.start(projectPath);
+    console.error();
+    process.exit(1);
+  }
+});
+program.command("mcp").description(
+  "Start MCP server (stdio) \u2014 exposes God Mode tools to Claude Code/Desktop"
+).action(async () => {
+  const { startMCPServer } = await import("./mcp-server-CROPNYHI.js");
+  await startMCPServer();
+});
+program.command("setup").description(
+  "Bootstrap Brainstorm on this machine \u2014 auth, config, MCP, ecosystem context"
+).action(async () => {
+  const { existsSync: existsSync3, mkdirSync: mkdirSync2, writeFileSync: writeFileSync2, readFileSync: readFileSync3 } = await import("fs");
+  const { join: join4 } = await import("path");
+  const { homedir: homedir2 } = await import("os");
+  console.log(`
+  \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550`);
+  console.log(`   brainstorm setup`);
+  console.log(`  \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550
+`);
+  const brKey = process.env.BRAINSTORM_API_KEY;
+  if (brKey) {
+    console.log(`  \u2713 BrainstormRouter API key found`);
+  } else {
+    console.log(`  \u2717 BRAINSTORM_API_KEY not set`);
+    console.log(`    Get one at https://brainstormrouter.com/dashboard`);
+    console.log(`    Then: export BRAINSTORM_API_KEY=br_live_xxx
+`);
+  }
+  const opToken = process.env.OP_SERVICE_ACCOUNT_TOKEN;
+  if (opToken) {
+    console.log(`  \u2713 1Password service account connected`);
+  } else {
+    console.log(`  \u25CB 1Password not configured (optional)`);
+  }
+  console.log(`
+  Testing products...
+`);
+  const products = [
+    {
+      id: "msp",
+      url: process.env.BRAINSTORM_MSP_URL ?? "https://brainstormmsp.ai",
+      key: "BRAINSTORM_MSP_API_KEY"
+    },
+    {
+      id: "br",
+      url: process.env.BRAINSTORM_BR_URL ?? "https://api.brainstormrouter.com",
+      key: "BRAINSTORM_API_KEY"
+    },
+    {
+      id: "gtm",
+      url: process.env.BRAINSTORM_GTM_URL ?? "https://catsfeet.com",
+      key: "BRAINSTORM_GTM_API_KEY"
+    },
+    {
+      id: "vm",
+      url: process.env.BRAINSTORM_VM_URL ?? "https://vm.brainstorm.co",
+      key: "BRAINSTORM_VM_API_KEY"
+    },
+    {
+      id: "shield",
+      url: process.env.BRAINSTORM_SHIELD_URL ?? "https://shield.brainstorm.co",
+      key: "BRAINSTORM_SHIELD_API_KEY"
+    }
+  ];
+  let connectedCount = 0;
+  let totalTools = 0;
+  const connectedSystems = [];
+  for (const p of products) {
+    try {
+      const res = await fetch(`${p.url}/health`, {
+        signal: AbortSignal.timeout(5e3)
+      });
+      if (res.ok) {
+        const health = await res.json();
+        let toolCount = 0;
+        const apiKey = process.env[p.key];
+        if (apiKey) {
+          try {
+            const toolsRes = await fetch(`${p.url}/api/v1/god-mode/tools`, {
+              headers: { Authorization: `Bearer ${apiKey}` },
+              signal: AbortSignal.timeout(5e3)
+            });
+            if (toolsRes.ok) {
+              const data = await toolsRes.json();
+              toolCount = data.tool_count ?? data.tools?.length ?? 0;
+            }
+          } catch {
+          }
+        }
+        console.log(
+          `  \u25CF ${p.id.padEnd(8)} ${String(toolCount).padStart(2)} tools  ${health.version ?? ""}`
+        );
+        connectedCount++;
+        totalTools += toolCount;
+        connectedSystems.push(p.id);
       } else {
-        printResumeSummary(session, sessionManager);
+        console.log(`  \u25CB ${p.id.padEnd(8)} unreachable (${res.status})`);
       }
-    } else {
-      session = sessionManager.start(projectPath);
+    } catch {
+      console.log(`  \u25CB ${p.id.padEnd(8)} offline`);
     }
-    const localCount = registry.models.filter((m) => m.isLocal).length;
-    const cloudCount = registry.models.filter((m) => !m.isLocal).length;
-    if (opts.simple) {
-      const readline = await import("readline/promises");
-      const rl = readline.createInterface({
-        input: process.stdin,
-        output: process.stdout
-      });
-      console.log(`
-  \u{1F9E0} brainstorm v0.1.0`);
-      console.log(
-        `  Strategy: ${router.getActiveStrategy()} | Models: ${localCount} local, ${cloudCount} cloud`
-      );
-      console.log(`  Project: ${projectPath}`);
-      if (isCommunityTier)
+  }
+  const claudeDir = join4(homedir2(), ".claude");
+  const mcpPath = join4(claudeDir, "mcp.json");
+  if (existsSync3(mcpPath)) {
+    try {
+      const existing = JSON.parse(readFileSync3(mcpPath, "utf-8"));
+      if (!existing.mcpServers?.brainstorm) {
+        existing.mcpServers = existing.mcpServers ?? {};
+        existing.mcpServers.brainstorm = {
+          command: "brainstorm",
+          args: ["mcp"]
+        };
+        writeFileSync2(mcpPath, JSON.stringify(existing, null, 2));
         console.log(
-          `  Community tier (5 req/min, cheap models). Set BRAINSTORM_API_KEY for full access.`
+          `
+  \u2713 Added brainstorm MCP server to ~/.claude/mcp.json`
         );
-      console.log(
+      } else {
+        console.log(
+          `
+  \u2713 brainstorm MCP server already in ~/.claude/mcp.json`
+        );
+      }
+    } catch {
+      console.log(`
+  \u26A0 Could not update ~/.claude/mcp.json (parse error)`);
+    }
+  } else {
+    console.log(
+      `
+  \u25CB ~/.claude/mcp.json not found (Claude Code not detected)`
+    );
+  }
+  console.log(`
+  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500`);
+  console.log(
+    `  ${connectedCount} products connected, ${totalTools} tools available`
+  );
+  console.log(`  Run: brainstorm status (full diagnostic)`);
+  console.log(`  Run: brainstorm mcp (start MCP server for Claude)`);
+  console.log();
+});
+program.command("ecosystem").alias("status").description(
+  "Show full ecosystem status \u2014 all products, tools, auth, connectivity"
+).action(async () => {
+  console.log(`
+  Brainstorm Ecosystem Status`);
+  console.log(`  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+`);
+  const brKey = process.env.BRAINSTORM_API_KEY;
+  console.log(
+    `  Auth:     ${brKey ? "\u2713 BR key set" : "\u2717 BRAINSTORM_API_KEY not set"}`
+  );
+  console.log(
+    `  Vault:    ${process.env.OP_SERVICE_ACCOUNT_TOKEN ? "\u2713 1Password connected" : "\u25CB 1Password not configured"}`
+  );
+  console.log(`
+  Products:`);
+  const products = [
+    {
+      id: "msp",
+      name: "BrainstormMSP",
+      url: process.env.BRAINSTORM_MSP_URL ?? "https://brainstormmsp.ai",
+      key: "BRAINSTORM_MSP_API_KEY"
+    },
+    {
+      id: "br",
+      name: "BrainstormRouter",
+      url: process.env.BRAINSTORM_BR_URL ?? "https://api.brainstormrouter.com",
+      key: "BRAINSTORM_API_KEY"
+    },
+    {
+      id: "gtm",
+      name: "BrainstormGTM",
+      url: process.env.BRAINSTORM_GTM_URL ?? "https://catsfeet.com",
+      key: "BRAINSTORM_GTM_API_KEY"
+    },
+    {
+      id: "vm",
+      name: "BrainstormVM",
+      url: process.env.BRAINSTORM_VM_URL ?? "https://vm.brainstorm.co",
+      key: "BRAINSTORM_VM_API_KEY"
+    },
+    {
+      id: "shield",
+      name: "BrainstormShield",
+      url: process.env.BRAINSTORM_SHIELD_URL ?? "https://shield.brainstorm.co",
+      key: "BRAINSTORM_SHIELD_API_KEY"
+    }
+  ];
+  let totalTools = 0;
+  for (const p of products) {
+    try {
+      const start = Date.now();
+      const res = await fetch(`${p.url}/health`, {
+        signal: AbortSignal.timeout(5e3)
+      });
+      const latency = Date.now() - start;
+      if (res.ok) {
+        const health = await res.json();
+        let toolCount = 0;
+        const apiKey = process.env[p.key];
+        if (apiKey) {
+          try {
+            const toolsRes = await fetch(`${p.url}/api/v1/god-mode/tools`, {
+              headers: { Authorization: `Bearer ${apiKey}` },
+              signal: AbortSignal.timeout(5e3)
+            });
+            if (toolsRes.ok) {
+              const data = await toolsRes.json();
+              toolCount = data.tool_count ?? data.tools?.length ?? 0;
+              totalTools += toolCount;
+            }
+          } catch {
+          }
+        }
+        console.log(
+          `    \u25CF ${p.name.padEnd(20)} ${String(toolCount).padStart(2)} tools  ${p.url.padEnd(35)} ${latency}ms  ${health.status ?? "ok"}`
+        );
+      } else {
+        console.log(
+          `    \u25CB ${p.name.padEnd(20)}  \u2014 tools  ${p.url.padEnd(35)}  \u2014    ${res.status}`
+        );
+      }
+    } catch {
+      console.log(
+        `    \u25CB ${p.name.padEnd(20)}  \u2014 tools  ${p.url.padEnd(35)}  \u2014    offline`
+      );
+    }
+  }
+  const { existsSync: existsSync3 } = await import("fs");
+  const { join: join4 } = await import("path");
+  const { homedir: homedir2 } = await import("os");
+  const mcpPath = join4(homedir2(), ".claude", "mcp.json");
+  let mcpConfigured = false;
+  if (existsSync3(mcpPath)) {
+    try {
+      const mcp = JSON.parse(
+        (await import("fs")).readFileSync(mcpPath, "utf-8")
+      );
+      mcpConfigured = !!mcp.mcpServers?.brainstorm;
+    } catch {
+    }
+  }
+  console.log(
+    `
+  MCP:      ${mcpConfigured ? "\u2713 brainstorm MCP server configured" : "\u25CB not configured (run brainstorm setup)"}`
+  );
+  console.log(`
+  ${totalTools} tools available across ecosystem.`);
+  console.log();
+});
+program.command("serve").description(
+  "Start the Brainstorm control plane HTTP API server (God Mode over HTTP)"
+).option("--port <port>", "Port to listen on", "8000").option("--host <host>", "Host to bind to", "127.0.0.1").option("--cors", "Enable CORS for dashboard access").action(async (opts) => {
+  const { createServer } = await import("http");
+  const { randomUUID } = await import("crypto");
+  const {
+    connectGodMode,
+    createProductConnectors,
+    listChangeSets,
+    approveChangeSet,
+    rejectChangeSet,
+    verifyEvent,
+    verifyJWT,
+    extractBearerToken,
+    setAuditPersister
+  } = await import("@brainst0rm/godmode");
+  const { ChangeSetLogRepository } = await import("@brainst0rm/db");
+  const config = loadConfig();
+  const port = parseInt(opts.port);
+  const host = opts.host;
+  console.log(`
+  \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550`);
+  console.log(`   brainstorm serve \u2014 Control Plane API`);
+  console.log(`  \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550
+`);
+  const envKeys = /* @__PURE__ */ new Map();
+  for (const name of PROVIDER_KEY_NAMES) {
+    const val = process.env[name];
+    if (val) envKeys.set(name, val);
+  }
+  const resolvedKeys = {
+    get: (name) => envKeys.get(name) ?? null
+  };
+  const registry = await createProviderRegistry(config, resolvedKeys);
+  const db = getDb();
+  const csLogRepo = new ChangeSetLogRepository(db);
+  setAuditPersister((entry) => {
+    csLogRepo.log({
+      changesetId: entry.changesetId,
+      connector: entry.connector,
+      action: entry.action,
+      description: entry.description,
+      riskScore: entry.riskScore,
+      status: entry.status,
+      changesJson: entry.changesJson,
+      simulationJson: entry.simulationJson,
+      rollbackJson: entry.rollbackJson,
+      createdAt: entry.createdAt,
+      executedAt: entry.executedAt,
+      sessionId: null
+    });
+  });
+  const costTracker = new CostTracker(db, config.budget);
+  const tools = createDefaultToolRegistry();
+  const { frontmatter } = buildSystemPrompt(process.cwd());
+  const router = new BrainstormRouter(
+    config,
+    registry,
+    costTracker,
+    frontmatter
+  );
+  const defaultConnectors = {
+    msp: {
+      enabled: true,
+      baseUrl: process.env.BRAINSTORM_MSP_URL ?? "https://brainstormmsp.ai",
+      apiKeyName: "BRAINSTORM_MSP_API_KEY"
+    }
+  };
+  const mergedGmConfig = {
+    ...config.godmode,
+    connectors: { ...defaultConnectors, ...config.godmode.connectors }
+  };
+  const connectors = await createProductConnectors(mergedGmConfig);
+  const godmode = await connectGodMode(tools, mergedGmConfig, connectors);
+  console.log(
+    `  God Mode: ${godmode.connectedSystems.length} systems connected, ${godmode.totalTools} tools`
+  );
+  for (const sys of godmode.connectedSystems) {
+    console.log(
+      `    \u2713 ${sys.displayName} (${sys.toolCount} tools, ${sys.latencyMs}ms)`
+    );
+  }
+  for (const err of godmode.errors) {
+    console.log(`    \u2717 ${err.name}: ${err.error}`);
+  }
+  function json(res, status, body) {
+    const payload = JSON.stringify(body);
+    res.writeHead(status, {
+      "Content-Type": "application/json",
+      ...opts.cors ? {
+        "Access-Control-Allow-Origin": "*",
+        "Access-Control-Allow-Methods": "GET, POST, OPTIONS",
+        "Access-Control-Allow-Headers": "Content-Type, Authorization"
+      } : {}
+    });
+    res.end(payload);
+  }
+  function envelope(data) {
+    return {
+      ok: true,
+      data,
+      request_id: randomUUID(),
+      timestamp: (/* @__PURE__ */ new Date()).toISOString()
+    };
+  }
+  function errorResponse(res, status, message) {
+    json(res, status, {
+      ok: false,
+      error: message,
+      request_id: randomUUID(),
+      timestamp: (/* @__PURE__ */ new Date()).toISOString()
+    });
+  }
+  async function readBody(req) {
+    const chunks = [];
+    for await (const chunk of req) chunks.push(chunk);
+    return Buffer.concat(chunks).toString("utf-8");
+  }
+  const allTools = tools.listTools();
+  const server = createServer(async (req, res) => {
+    const url = new URL(req.url ?? "/", `http://${req.headers.host}`);
+    const path = url.pathname;
+    const method = req.method ?? "GET";
+    if (method === "OPTIONS" && opts.cors) {
+      res.writeHead(204, {
+        "Access-Control-Allow-Origin": "*",
+        "Access-Control-Allow-Methods": "GET, POST, OPTIONS",
+        "Access-Control-Allow-Headers": "Content-Type, Authorization",
+        "Access-Control-Max-Age": "86400"
+      });
+      res.end();
+      return;
+    }
+    try {
+      if (path === "/health" && method === "GET") {
+        json(res, 200, {
+          status: "healthy",
+          version: CLI_VERSION,
+          uptime_seconds: Math.floor(process.uptime()),
+          god_mode: {
+            connected: godmode.connectedSystems.length,
+            tools: godmode.totalTools
+          }
+        });
+        return;
+      }
+      const jwtSecret = process.env.SUPABASE_JWT_SECRET;
+      let tenantId;
+      if (path.startsWith("/api/")) {
+        if (!jwtSecret) {
+        } else {
+          const token = extractBearerToken(
+            req.headers.authorization
+          );
+          if (!token) {
+            errorResponse(res, 401, "Missing Authorization header");
+            return;
+          }
+          const auth = verifyJWT(token, jwtSecret);
+          if (!auth.authenticated) {
+            errorResponse(res, 401, auth.error ?? "Authentication failed");
+            return;
+          }
+          tenantId = auth.payload?.platform_tenant_id;
+        }
+      }
+      if (path === "/api/v1/products" && method === "GET") {
+        const products = godmode.connectedSystems.map((sys) => ({
+          product: sys.name,
+          display_name: sys.displayName,
+          status: "healthy",
+          latency_ms: sys.latencyMs,
+          tool_count: sys.toolCount,
+          capabilities: sys.capabilities,
+          last_checked: (/* @__PURE__ */ new Date()).toISOString()
+        }));
+        json(res, 200, envelope(products));
+        return;
+      }
+      if (path === "/api/v1/tools" && method === "GET") {
+        json(res, 200, envelope(allTools));
+        return;
+      }
+      if (path === "/api/v1/tools/execute" && method === "POST") {
+        const body = JSON.parse(await readBody(req));
+        const { tool: toolName, params } = body;
+        if (!toolName) {
+          errorResponse(res, 400, "Missing 'tool' field");
+          return;
+        }
+        const tool = tools.get(toolName);
+        if (!tool) {
+          errorResponse(res, 404, `Tool '${toolName}' not found`);
+          return;
+        }
+        try {
+          const result = await tool.execute(params ?? {});
+          json(
+            res,
+            200,
+            envelope({
+              tool: toolName,
+              result,
+              executed_at: (/* @__PURE__ */ new Date()).toISOString()
+            })
+          );
+        } catch (err) {
+          const msg = err instanceof Error ? err.message : String(err);
+          errorResponse(res, 500, `Tool execution failed: ${msg}`);
+        }
+        return;
+      }
+      if (path === "/api/v1/changesets" && method === "GET") {
+        json(res, 200, envelope(listChangeSets()));
+        return;
+      }
+      const approveMatch = path.match(
+        /^\/api\/v1\/changesets\/([^/]+)\/approve$/
+      );
+      if (approveMatch && method === "POST") {
+        const result = await approveChangeSet(approveMatch[1], "user");
+        json(res, result.success ? 200 : 400, envelope(result));
+        return;
+      }
+      const rejectMatch = path.match(
+        /^\/api\/v1\/changesets\/([^/]+)\/reject$/
+      );
+      if (rejectMatch && method === "POST") {
+        const result = rejectChangeSet(rejectMatch[1]);
+        json(res, result.success ? 200 : 400, envelope(result));
+        return;
+      }
+      if (path === "/api/v1/audit" && method === "GET") {
+        const limit = parseInt(url.searchParams.get("limit") ?? "50");
+        const offset = parseInt(url.searchParams.get("offset") ?? "0");
+        try {
+          const rows = db.prepare(
+            `SELECT * FROM audit_log ORDER BY created_at DESC LIMIT ? OFFSET ?`
+          ).all(limit, offset);
+          json(res, 200, envelope({ entries: rows, limit, offset }));
+        } catch {
+          json(res, 200, envelope({ entries: [], limit, offset }));
+        }
+        return;
+      }
+      if (path === "/api/v1/audit/changesets" && method === "GET") {
+        const { ChangeSetLogRepository: ChangeSetLogRepository2 } = await import("@brainst0rm/db");
+        const csLog = new ChangeSetLogRepository2(db);
+        const limit = parseInt(url.searchParams.get("limit") ?? "50");
+        const offset = parseInt(url.searchParams.get("offset") ?? "0");
+        const connector = url.searchParams.get("connector");
+        const entries = connector ? csLog.byConnector(connector, limit) : csLog.recent(limit, offset);
+        json(
+          res,
+          200,
+          envelope({
+            entries,
+            total: csLog.count(),
+            limit,
+            offset
+          })
+        );
+        return;
+      }
+      if (path === "/api/v1/platform/events" && method === "POST") {
+        const body = JSON.parse(await readBody(req));
+        const masterSecret = process.env.BRAINSTORM_PLATFORM_SECRET;
+        if (!masterSecret) {
+          errorResponse(res, 503, "Platform secret not configured");
+          return;
+        }
+        if (!verifyEvent(body, masterSecret)) {
+          errorResponse(res, 401, "Invalid event signature");
+          return;
+        }
+        console.log(
+          `  [event] ${body.type} from ${body.product} (tenant: ${body.tenant_id})`
+        );
+        json(res, 200, envelope({ received: true, event_id: body.id }));
+        return;
+      }
+      if (path === "/api/v1/chat" && method === "POST") {
+        const body = JSON.parse(await readBody(req));
+        const { message } = body;
+        if (!message) {
+          errorResponse(res, 400, "Missing 'message' field");
+          return;
+        }
+        const sessionManager = new SessionManager(db);
+        const session = sessionManager.start(process.cwd());
+        const { prompt: sysPrompt, segments: sysSegments } = buildSystemPrompt(process.cwd());
+        const gmPromptText = godmode.promptSegment?.text ?? "";
+        const fullSystemPrompt = sysPrompt + gmPromptText;
+        const messages = [{ role: "user", content: message }];
+        let finalText = "";
+        let totalCost = 0;
+        for await (const event of runAgentLoop(messages, {
+          config,
+          registry,
+          router,
+          costTracker,
+          tools,
+          sessionId: session.id,
+          projectPath: process.cwd(),
+          systemPrompt: fullSystemPrompt,
+          systemSegments: sysSegments,
+          permissionCheck: () => "allow",
+          middleware: createDefaultMiddlewarePipeline(process.cwd())
+        })) {
+          if (event.type === "text-delta") {
+            finalText += event.delta;
+          }
+          if (event.type === "done") {
+            totalCost = event.totalCost;
+          }
+        }
+        json(
+          res,
+          200,
+          envelope({
+            response: finalText,
+            session_id: session.id,
+            cost: totalCost
+          })
+        );
+        return;
+      }
+      if (path === "/api/v1/chat/stream" && method === "POST") {
+        const body = JSON.parse(await readBody(req));
+        const { message } = body;
+        if (!message) {
+          errorResponse(res, 400, "Missing 'message' field");
+          return;
+        }
+        res.writeHead(200, {
+          "Content-Type": "text/event-stream",
+          "Cache-Control": "no-cache",
+          Connection: "keep-alive",
+          ...opts.cors ? { "Access-Control-Allow-Origin": "*" } : {}
+        });
+        const sessionManager = new SessionManager(db);
+        const session = sessionManager.start(process.cwd());
+        const { prompt: sysPrompt, segments: sysSegments } = buildSystemPrompt(process.cwd());
+        const gmPromptText = godmode.promptSegment?.text ?? "";
+        const fullSystemPrompt = sysPrompt + gmPromptText;
+        const messages = [{ role: "user", content: message }];
+        for await (const event of runAgentLoop(messages, {
+          config,
+          registry,
+          router,
+          costTracker,
+          tools,
+          sessionId: session.id,
+          projectPath: process.cwd(),
+          systemPrompt: fullSystemPrompt,
+          systemSegments: sysSegments,
+          permissionCheck: () => "allow",
+          middleware: createDefaultMiddlewarePipeline(process.cwd())
+        })) {
+          res.write(`data: ${JSON.stringify(event)}
+
+`);
+          if (event.type === "done" || event.type === "error") break;
+        }
+        res.write("data: [DONE]\n\n");
+        res.end();
+        return;
+      }
+      errorResponse(res, 404, `Not found: ${method} ${path}`);
+    } catch (err) {
+      const msg = err instanceof Error ? err.message : String(err);
+      console.error(`  [serve] Error: ${msg}`);
+      errorResponse(res, 500, msg);
+    }
+  });
+  server.listen(port, host, () => {
+    console.log(`
+  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500`);
+    console.log(`  API server listening on http://${host}:${port}`);
+    console.log();
+    console.log(`  Endpoints:`);
+    console.log(`    GET  /health                           Health check`);
+    console.log(
+      `    GET  /api/v1/products                  Connected products`
+    );
+    console.log(
+      `    GET  /api/v1/tools                     All God Mode tools`
+    );
+    console.log(`    POST /api/v1/tools/execute             Execute a tool`);
+    console.log(
+      `    GET  /api/v1/changesets                Pending ChangeSets`
+    );
+    console.log(
+      `    POST /api/v1/changesets/:id/approve    Approve + execute`
+    );
+    console.log(
+      `    POST /api/v1/changesets/:id/reject     Reject a ChangeSet`
+    );
+    console.log(`    GET  /api/v1/audit                     Audit trail`);
+    console.log(
+      `    POST /api/v1/platform/events           Receive signed events`
+    );
+    console.log(
+      `    POST /api/v1/chat                      Natural language query`
+    );
+    console.log(
+      `    POST /api/v1/chat/stream               SSE streaming chat`
+    );
+    console.log();
+  });
+  await new Promise(() => {
+  });
+});
+program.command("chat", { isDefault: true }).description("Start an interactive chat session").option("--simple", "Use simple readline interface instead of TUI").option(
+  "--daemon",
+  "Daemon mode \u2014 model-driven tick loop (requires --simple for MVP)"
+).option("--continue", "Resume the most recent session").option("--resume <id>", "Resume a specific session by ID").option("--fork <id>", "Fork a session (copy history, new session)").option("--lfg", "Full auto mode \u2014 skip all permission confirmations").option(
+  "--strategy <name>",
+  "Routing strategy: cost-first, quality-first, combined, capability"
+).option("--verbose-routing", "Print routing decisions to stderr").option(
+  "--fast",
+  "Fast startup \u2014 skip provider discovery, MCP connections, and eval probes"
+).action(
+  async (opts) => {
+    const config = loadConfig();
+    if (opts.daemon && !opts.simple) {
+      console.error(
+        "  Daemon mode requires --simple for MVP. Run: brainstorm chat --simple --daemon"
+      );
+      process.exit(1);
+    }
+    if (opts.lfg) {
+      config.general.defaultPermissionMode = "auto";
+    }
+    if (opts.fast) {
+      config.general.skipProviderDiscovery = true;
+      config.general.skipEvalProbes = true;
+    }
+    const db = getDb();
+    const projectPath = process.cwd();
+    const tools = createDefaultToolRegistry({ daemon: opts.daemon });
+    configureSandbox(
+      config.shell.sandbox,
+      projectPath,
+      config.shell.maxOutputBytes,
+      config.shell.containerImage,
+      config.shell.containerTimeout
+    );
+    const permissionManager = new PermissionManager(
+      config.general.defaultPermissionMode,
+      config.permissions
+    );
+    let currentOutputStyle = config.general.outputStyle ?? "concise";
+    let currentRole;
+    const sessionManager = new SessionManager(db);
+    const middleware = createDefaultMiddlewarePipeline(projectPath);
+    const [resolvedKeys, promptResult] = await Promise.all([
+      resolveProviderKeys(),
+      Promise.resolve(buildSystemPrompt(projectPath, currentOutputStyle))
+    ]);
+    let {
+      prompt: systemPrompt,
+      segments: systemSegments,
+      frontmatter
+    } = promptResult;
+    const toolSection = buildToolAwarenessSection(tools.listTools());
+    systemPrompt += toolSection;
+    if (systemSegments.length > 0) {
+      systemSegments[0] = {
+        text: systemSegments[0].text + toolSection,
+        cacheable: true
+      };
+    }
+    const resolvedBRKey = resolvedKeys.get("BRAINSTORM_API_KEY") ?? getBrainstormApiKey();
+    const isCommunityTier = isCommunityKey(resolvedBRKey);
+    if (resolvedBRKey) process.env._BR_RESOLVED_KEY = resolvedBRKey;
+    const [registry] = await Promise.all([
+      createProviderRegistry(config, resolvedKeys),
+      opts.fast ? Promise.resolve() : connectMCPServers(
+        tools,
+        config,
+        resolvedKeys.get("BRAINSTORM_API_KEY")
+      )
+    ]);
+    const costTracker = new CostTracker(db, config.budget);
+    const routingOutcomeRepo = new RoutingOutcomeRepository(db);
+    const historicalStats = routingOutcomeRepo.loadAggregated();
+    const router = new BrainstormRouter(
+      config,
+      registry,
+      costTracker,
+      frontmatter,
+      historicalStats
+    );
+    const hasOwnKeys = !!resolvedKeys.get("DEEPSEEK_API_KEY") || !!resolvedKeys.get("ANTHROPIC_API_KEY") || !!resolvedKeys.get("OPENAI_API_KEY") || !!resolvedKeys.get("MOONSHOT_API_KEY") || !!resolvedKeys.get("GOOGLE_GENERATIVE_AI_API_KEY");
+    if (opts.strategy) {
+      router.setStrategy(opts.strategy);
+    } else if ((!isCommunityTier || hasOwnKeys) && router.getActiveStrategy() !== "capability") {
+      router.setStrategy("quality-first");
+    }
+    const subagentTool = createSubagentTool({
+      config,
+      registry,
+      router,
+      costTracker,
+      tools,
+      projectPath,
+      permissionCheck: (name, perm) => permissionManager.check(name, perm),
+      containerIsolation: config.shell.sandbox === "container",
+      parentSegments: systemSegments
+    });
+    tools.register(subagentTool);
+    let godModeResult = null;
+    const hasAnyConnectorKey = !!(process.env.BRAINSTORM_MSP_API_KEY || process.env.BRAINSTORM_EMAIL_API_KEY || process.env.BRAINSTORM_VM_API_KEY || process.env._GM_MSP_KEY || process.env._GM_EMAIL_KEY || process.env._GM_VM_KEY);
+    const godmodeEnabled = config.godmode.enabled || hasAnyConnectorKey;
+    if (godmodeEnabled && !opts.fast) {
+      try {
+        const {
+          connectGodMode,
+          createProductConnectors,
+          setAuditPersister: setAuditPersisterChat
+        } = await import("@brainst0rm/godmode");
+        const { ChangeSetLogRepository: CSLogChat } = await import("@brainst0rm/db");
+        const csLogChat = new CSLogChat(db);
+        setAuditPersisterChat((entry) => {
+          csLogChat.log({
+            changesetId: entry.changesetId,
+            connector: entry.connector,
+            action: entry.action,
+            description: entry.description,
+            riskScore: entry.riskScore,
+            status: entry.status,
+            changesJson: entry.changesJson,
+            simulationJson: entry.simulationJson,
+            rollbackJson: entry.rollbackJson,
+            createdAt: entry.createdAt,
+            executedAt: entry.executedAt,
+            sessionId: null
+          });
+        });
+        const defaultConnectors = {
+          msp: {
+            enabled: true,
+            baseUrl: process.env.BRAINSTORM_MSP_URL ?? "https://brainstormmsp.ai",
+            apiKeyName: "BRAINSTORM_MSP_API_KEY"
+          }
+        };
+        const mergedGmConfig = {
+          ...config.godmode,
+          connectors: { ...defaultConnectors, ...config.godmode.connectors }
+        };
+        const activeConnectors = await createProductConnectors(mergedGmConfig);
+        godModeResult = await connectGodMode(
+          tools,
+          mergedGmConfig,
+          activeConnectors
+        );
+        if (godModeResult.connectedSystems.length > 0) {
+          process.stderr.write(
+            `[godmode] Connected: ${godModeResult.connectedSystems.map((s) => s.displayName).join(", ")} (${godModeResult.totalTools} tools)
+`
+          );
+          if (godModeResult.promptSegment?.text) {
+            systemPrompt += "\n" + godModeResult.promptSegment.text;
+            if (systemSegments.length > 0) {
+              systemSegments.push(godModeResult.promptSegment);
+            }
+          }
+        }
+      } catch (err) {
+        process.stderr.write(
+          `[godmode] Init failed: ${err instanceof Error ? err.message : String(err)}
+`
+        );
+      }
+    }
+    const hasDirectProviderKeys = !!resolvedKeys.get("DEEPSEEK_API_KEY") || !!resolvedKeys.get("ANTHROPIC_API_KEY") || !!resolvedKeys.get("OPENAI_API_KEY") || !!resolvedKeys.get("GOOGLE_GENERATIVE_AI_API_KEY") || !!resolvedKeys.get("MOONSHOT_API_KEY");
+    let preferredModelId = resolvedKeys.get(
+      "MOONSHOT_API_KEY"
+    ) ? "moonshot/kimi-k2.5" : isCommunityTier && !hasDirectProviderKeys ? "brainstormrouter/auto" : void 0;
+    let session;
+    if (opts.fork) {
+      session = sessionManager.fork(opts.fork);
+      if (!session) {
+        console.error(`  Session '${opts.fork}' not found.`);
+        process.exit(1);
+      }
+      console.log(
+        `  Forked session ${opts.fork.slice(0, 8)} -> ${session.id.slice(0, 8)}`
+      );
+    } else if (opts.resume) {
+      session = sessionManager.resume(opts.resume);
+      if (!session) {
+        console.error(`  Session '${opts.resume}' not found.`);
+        process.exit(1);
+      }
+      printResumeSummary(session, sessionManager);
+    } else if (opts.continue) {
+      if (opts.daemon) {
+        const { SessionRepository: SessRepoResume } = await import("@brainst0rm/db");
+        const sessRepoResume = new SessRepoResume(db);
+        const lastDaemon = sessRepoResume.getLastDaemon(projectPath);
+        if (lastDaemon) {
+          session = sessionManager.resume(lastDaemon.id);
+          if (session) {
+            console.log(
+              `  Resuming daemon session ${lastDaemon.id.slice(0, 8)} (${lastDaemon.tickCount ?? 0} ticks, $${(lastDaemon.totalCost ?? 0).toFixed(4)})`
+            );
+          } else {
+            session = sessionManager.start(projectPath);
+          }
+        } else {
+          session = sessionManager.start(projectPath);
+        }
+      } else {
+        session = sessionManager.resumeLatest(projectPath);
+        if (!session) {
+          session = sessionManager.start(projectPath);
+        } else {
+          printResumeSummary(session, sessionManager);
+        }
+      }
+    } else {
+      session = sessionManager.start(projectPath);
+    }
+    const localCount = registry.models.filter((m) => m.isLocal).length;
+    const cloudCount = registry.models.filter((m) => !m.isLocal).length;
+    if (opts.simple) {
+      const readline = await import("readline/promises");
+      const rl = readline.createInterface({
+        input: process.stdin,
+        output: process.stdout
+      });
+      console.log(`
+  \u{1F9E0} brainstorm v0.1.0`);
+      console.log(
+        `  Strategy: ${router.getActiveStrategy()} | Models: ${localCount} local, ${cloudCount} cloud`
+      );
+      console.log(`  Project: ${projectPath}`);
+      if (isCommunityTier)
+        console.log(
+          `  Community tier (5 req/min, cheap models). Set BRAINSTORM_API_KEY for full access.`
+        );
+      console.log(
         `  Commands: /quit, /model <id>, /strategy <name>, /compact`
       );
+      if (opts.daemon)
+        console.log(
+          `  DAEMON MODE: tick every ${config.daemon.tickIntervalMs / 1e3}s, max ${config.daemon.maxTicksPerSession} ticks`
+        );
       console.log(`  Ctrl+C to interrupt, Ctrl+D to exit.
 `);
+      if (opts.daemon) {
+        const { DaemonController, DailyLog } = await import("@brainst0rm/core");
+        const { DailyLogRepository, SessionRepository: SessRepo } = await import("@brainst0rm/db");
+        const sessRepo = new SessRepo(db);
+        sessRepo.markDaemon(session.id, config.daemon.tickIntervalMs);
+        const dailyLogRepo = new DailyLogRepository(db);
+        const dailyLog = new DailyLog({
+          logDir: config.daemon.dailyLogDir,
+          repo: dailyLogRepo,
+          sessionId: session.id
+        });
+        dailyLog.append("Daemon session started", {
+          eventType: "start"
+        });
+        const { TriggerRunner } = await import("./dist-GVK5Q4YK.js");
+        const triggerRunner = new TriggerRunner(db);
+        const daemon = new DaemonController({
+          config: config.daemon,
+          sessionId: session.id,
+          projectPath,
+          runTick: (tickMessage) => {
+            sessionManager.addUserMessage(tickMessage);
+            return runAgentLoop(sessionManager.getHistory(), {
+              config,
+              registry,
+              router,
+              costTracker,
+              tools,
+              sessionId: session.id,
+              projectPath,
+              systemPrompt,
+              systemSegments,
+              compaction: buildCompactionCallbacks(sessionManager),
+              permissionCheck: (name, perm) => permissionManager.check(name, perm),
+              preferredModelId,
+              middleware,
+              routingOutcomeRepo,
+              onTurnComplete: (ctx) => {
+                ctx.turn = sessionManager.incrementTurn();
+                ctx.sessionMinutes = sessionManager.getSessionMinutes();
+                sessionManager.addTurnContext(ctx);
+              }
+            });
+          },
+          getDueTasks: () => triggerRunner.getDueTaskSummaries(),
+          getLogSummary: () => {
+            const recent = dailyLog.readRecent(10);
+            if (recent.length === 0) return "No recent activity.";
+            return recent.map((e) => `[${e.eventType}] ${e.content.slice(0, 100)}`).join("\n");
+          },
+          onTickComplete: async (result) => {
+            dailyLog.append(
+              `${result.toolCalls.length} tools, model=${result.modelUsed}`,
+              {
+                tickNumber: result.tickNumber,
+                eventType: "tick",
+                cost: result.cost,
+                modelId: result.modelUsed
+              }
+            );
+            sessRepo.updateDaemonState(session.id, {
+              tickCount: result.tickNumber,
+              lastTickAt: Math.floor(Date.now() / 1e3),
+              totalCost: costTracker.getSessionCost()
+            });
+          }
+        });
+        const readline2 = await import("readline/promises");
+        const rl2 = readline2.createInterface({
+          input: process.stdin,
+          output: process.stdout
+        });
+        const inputLoop = (async () => {
+          try {
+            while (true) {
+              const line = await rl2.question("");
+              if (!line.trim()) continue;
+              if (line.trim() === "/quit" || line.trim() === "/exit") {
+                daemon.stop();
+                break;
+              }
+              if (line.trim() === "/daemon pause") {
+                daemon.pause();
+                console.log("  [daemon paused]");
+                continue;
+              }
+              if (line.trim() === "/daemon resume") {
+                daemon.resume();
+                console.log("  [daemon resumed]");
+                continue;
+              }
+              if (line.trim() === "/daemon status") {
+                const s = daemon.getState();
+                console.log(
+                  `  [daemon: ${s.status} | ticks: ${s.tickCount} | cost: $${s.totalCost.toFixed(4)}]`
+                );
+                continue;
+              }
+              if (line.trim() === "/daemon log") {
+                const todayLog = dailyLog.readToday();
+                console.log(todayLog || "  [no daemon log entries today]");
+                continue;
+              }
+              daemon.injectUserMessage(line.trim());
+            }
+          } catch {
+            daemon.stop();
+          }
+        })();
+        process.on("SIGINT", () => {
+          daemon.stop();
+          rl2.close();
+        });
+        for await (const event of daemon.run()) {
+          switch (event.type) {
+            case "daemon-tick":
+              process.stderr.write(
+                `  [tick #${event.tickNumber} | $${event.cost.toFixed(4)}]
+`
+              );
+              break;
+            case "daemon-sleep":
+              process.stderr.write(
+                `  [sleeping ${Math.round(event.sleepMs / 1e3)}s: ${event.reason}]
+`
+              );
+              break;
+            case "daemon-wake":
+              process.stderr.write(`  [wake: ${event.trigger}]
+`);
+              break;
+            case "daemon-stopped":
+              process.stderr.write(
+                `
+  [daemon stopped: ${event.tickCount} ticks, $${event.totalCost.toFixed(4)} total]
+`
+              );
+              break;
+            case "text-delta":
+              process.stdout.write(event.delta);
+              break;
+            case "tool-call-start":
+              process.stdout.write(`
+  [tool: ${event.toolName}]
+`);
+              break;
+            case "routing":
+              process.stderr.write(`\r  [${event.decision.model.name}]
+`);
+              break;
+            case "done": {
+              const turnCost = event.totalCost - costTracker.getSessionCost();
+              process.stdout.write(
+                `
+  [$${event.totalCost.toFixed(4)} session]
+`
+              );
+              break;
+            }
+            case "error":
+              process.stderr.write(`
+  Error: ${event.error.message}
+`);
+              break;
+          }
+        }
+        dailyLog.append("Daemon session ended", {
+          eventType: "stop"
+        });
+        await inputLoop;
+        rl2.close();
+        return;
+      }
       let simpleAbortController = null;
       process.on("SIGINT", () => {
         if (simpleAbortController) {
@@ -4210,7 +5443,7 @@ program.command("chat", { isDefault: true }).description("Start an interactive c
         if (!input2.trim()) continue;
         if (input2.trim() === "/quit" || input2.trim() === "/exit") break;
         if (input2.startsWith("/")) {
-          const { isSlashCommand, executeSlashCommand } = await import("./slash-ZDC4DKL4.js");
+          const { isSlashCommand, executeSlashCommand } = await import("./slash-CVWH3LTR.js");
           if (isSlashCommand(input2)) {
             const result = await executeSlashCommand(input2, {
               getModel: () => preferredModelId,
@@ -4243,7 +5476,15 @@ program.command("chat", { isDefault: true }).description("Start an interactive c
                   projectPath,
                   currentOutputStyle
                 );
-                systemPrompt = rebuilt.prompt + buildToolAwarenessSection(tools.listTools());
+                const ts = buildToolAwarenessSection(tools.listTools());
+                systemPrompt = rebuilt.prompt + ts;
+                systemSegments = rebuilt.segments.length > 0 ? [
+                  {
+                    text: rebuilt.segments[0].text + ts,
+                    cacheable: true
+                  },
+                  ...rebuilt.segments.slice(1)
+                ] : [{ text: systemPrompt, cacheable: true }];
               },
               getOutputStyle: () => currentOutputStyle,
               getBudget: () => {
@@ -4286,12 +5527,14 @@ program.command("chat", { isDefault: true }).description("Start an interactive c
           sessionId: session.id,
           projectPath,
           systemPrompt,
+          systemSegments,
           compaction: buildCompactionCallbacks(sessionManager),
           signal: simpleAbortController.signal,
           permissionCheck: (name, perm) => permissionManager.check(name, perm),
           preferredModelId,
           middleware,
           roleToolFilter,
+          routingOutcomeRepo,
           onTurnComplete: (ctx) => {
             ctx.turn = sessionManager.incrementTurn();
             ctx.sessionMinutes = sessionManager.getSessionMinutes();
@@ -4390,14 +5633,17 @@ program.command("chat", { isDefault: true }).description("Start an interactive c
           }
         }
         simpleAbortController = null;
-        if (fullResponse) sessionManager.addAssistantMessage(fullResponse);
+        if (fullResponse) {
+          sessionManager.addAssistantMessage(fullResponse);
+          sessionManager.flush();
+        }
       }
       rl.close();
       return;
     }
     const { render } = await import("ink");
     const React = await import("react");
-    const { App } = await import("./App-SSKWB7CT.js");
+    const { App } = await import("./App-HGJSYIVS.js");
     let currentAbortController = null;
     function handleSendMessage(text) {
       sessionManager.addUserMessage(text);
@@ -4415,12 +5661,14 @@ program.command("chat", { isDefault: true }).description("Start an interactive c
         sessionId: session.id,
         projectPath,
         systemPrompt,
+        systemSegments,
         compaction: buildCompactionCallbacks(sessionManager),
         signal: currentAbortController.signal,
         permissionCheck: (name, perm) => permissionManager.check(name, perm),
         middleware,
         preferredModelId,
-        roleToolFilter: roleFilter
+        roleToolFilter: roleFilter,
+        routingOutcomeRepo
       });
       return (async function* () {
         let fullResponse = "";
@@ -4428,7 +5676,10 @@ program.command("chat", { isDefault: true }).description("Start an interactive c
           if (event.type === "text-delta") fullResponse += event.delta;
           yield event;
         }
-        if (fullResponse) sessionManager.addAssistantMessage(fullResponse);
+        if (fullResponse) {
+          sessionManager.addAssistantMessage(fullResponse);
+          sessionManager.flush();
+        }
         currentAbortController = null;
       })();
     }
@@ -4474,6 +5725,11 @@ program.command("chat", { isDefault: true }).description("Start an interactive c
           opAvailable: !!process.env.OP_SERVICE_ACCOUNT_TOKEN,
           resolvedKeys: PROVIDER_KEY_NAMES.filter((k) => resolvedKeys.get(k))
         },
+        godModeInfo: godModeResult ? {
+          connectedSystems: godModeResult.connectedSystems,
+          errors: godModeResult.errors,
+          totalTools: godModeResult.totalTools
+        } : void 0,
         memoryInfo: await (async () => {
           try {
             const { MemoryManager } = await import("@brainst0rm/core");
@@ -4506,7 +5762,12 @@ program.command("chat", { isDefault: true }).description("Start an interactive c
               projectPath,
               currentOutputStyle
             );
-            systemPrompt = rebuilt.prompt + buildToolAwarenessSection(tools.listTools());
+            const ts = buildToolAwarenessSection(tools.listTools());
+            systemPrompt = rebuilt.prompt + ts;
+            systemSegments = rebuilt.segments.length > 0 ? [
+              { text: rebuilt.segments[0].text + ts, cacheable: true },
+              ...rebuilt.segments.slice(1)
+            ] : [{ text: systemPrompt, cacheable: true }];
           },
           getOutputStyle: () => currentOutputStyle,
           rebuildSystemPrompt: (basePromptOverride) => {
@@ -4515,7 +5776,12 @@ program.command("chat", { isDefault: true }).description("Start an interactive c
               currentOutputStyle,
               basePromptOverride
             );
-            systemPrompt = rebuilt.prompt + buildToolAwarenessSection(tools.listTools());
+            const ts = buildToolAwarenessSection(tools.listTools());
+            systemPrompt = rebuilt.prompt + ts;
+            systemSegments = rebuilt.segments.length > 0 ? [
+              { text: rebuilt.segments[0].text + ts, cacheable: true },
+              ...rebuilt.segments.slice(1)
+            ] : [{ text: systemPrompt, cacheable: true }];
           },
           getActiveRole: () => currentRole,
           setActiveRole: (role) => {
@@ -4606,6 +5872,7 @@ Keys: ${vault.list().length}`;
   }
 );
 function run() {
+  initSentry({ release: process.env.npm_package_version });
   const cleanup = () => {
     try {
       stopDockerSandbox();
@@ -4615,7 +5882,18 @@ function run() {
       closeDb();
     } catch {
     }
+    flushSentry(1500).catch(() => {
+    });
   };
+  process.on("uncaughtException", (err) => {
+    captureError(err, { source: "uncaughtException" });
+    cleanup();
+    process.exit(1);
+  });
+  process.on("unhandledRejection", (reason) => {
+    const err = reason instanceof Error ? reason : new Error(String(reason));
+    captureError(err, { source: "unhandledRejection" });
+  });
   process.on("SIGTERM", () => {
     cleanup();
     process.exit(0);