@compilr-dev/cli 0.7.6 → 0.8.1

package/dist/auth/api-client.d.ts

@@ -1,124 +1,11 @@
 /**
- * API Client for CLI Authentication
+ * Auth API client — now a thin re-export of the SDK's shared implementation
+ * (`@compilr-dev/sdk` host layer). CLI and Desktop talk to the same compilr.dev
+ * Netlify Functions; the client lives in one place.
  *
- * All backend communication goes through Netlify Functions.
- * No direct Supabase SDK dependency — the server handles Supabase calls.
- *
- * Note: This is for USER authentication only — users still bring their own LLM API keys.
- */
-export interface RefreshTokenResponse {
-    success: boolean;
-    access_token?: string;
-    refresh_token?: string;
-    expires_in?: number;
-    user?: {
-        id: string;
-        email: string;
-    };
-    error?: string;
-}
-export interface ProfileData {
-    user_id: string;
-    email: string;
-    account_type: 'free' | 'pro' | 'team' | 'enterprise';
-    telemetry_enabled: boolean;
-    default_provider: string;
-    default_model: string;
-    default_tier: string;
-    theme: string;
-    total_sessions: number;
-    total_messages: number;
-    first_session_at: string | null;
-    last_session_at: string | null;
-    created_at: string;
-}
-export interface HeartbeatData {
-    session_id: string;
-    cli_version: string;
-    os: string;
-    node_version: string;
-    project_id?: number;
-    total_messages?: number;
-    total_tokens_in?: number;
-    total_tokens_out?: number;
-    commands_used?: Record<string, number>;
-    agents_used?: string[];
-    tools_used?: string[];
-    llm_provider?: string;
-    llm_model?: string;
-}
-export interface DeviceCodeResponse {
-    device_code: string;
-    user_code: string;
-    verification_uri: string;
-    verification_uri_complete: string;
-    expires_in: number;
-    interval: number;
-}
-export interface DeviceTokenResponse {
-    access_token: string;
-    refresh_token: string;
-    token_type: string;
-    expires_in: number;
-    api_token?: string;
-    user: {
-        id: string;
-        email: string;
-    };
-}
-export interface DeviceTokenError {
-    error: 'authorization_pending' | 'slow_down' | 'expired_token' | 'access_denied' | 'invalid_grant' | 'server_error';
-    error_description: string;
-}
-/**
- * Refresh an access token using a refresh token.
- * Calls the server-side Netlify function which handles Supabase internally.
- */
-export declare function refreshToken(refreshTokenValue: string): Promise<RefreshTokenResponse>;
-/**
- * Send heartbeat to record session.
- */
-export declare function sendHeartbeat(accessToken: string, data: HeartbeatData): Promise<{
-    success: boolean;
-    telemetry_enabled?: boolean;
-    error?: string;
-}>;
-/**
- * Get user profile from CLI API.
- */
-export declare function getProfile(accessToken: string): Promise<{
-    success: boolean;
-    profile?: ProfileData;
-    error?: string;
-}>;
-/**
- * Update user profile via CLI API.
- */
-export declare function updateProfile(accessToken: string, updates: Partial<Pick<ProfileData, 'telemetry_enabled' | 'default_provider' | 'default_model' | 'default_tier' | 'theme'>>): Promise<{
-    success: boolean;
-    profile?: ProfileData;
-    error?: string;
-}>;
-/**
- * Request a device code for CLI authentication.
- * Returns codes and URLs for the user to authorize.
- */
-export declare function requestDeviceCode(): Promise<{
-    success: boolean;
-    data?: DeviceCodeResponse;
-    error?: string;
-}>;
-/**
- * Poll for device token after user authorizes.
- * Returns tokens on success, or error status if still pending.
- */
-export declare function pollDeviceToken(deviceCode: string): Promise<{
-    success: boolean;
-    data?: DeviceTokenResponse;
-    error?: DeviceTokenError;
-    networkError?: string;
-}>;
-/**
- * Get the authorization URL for the device flow.
+ * The SDK functions read `COMPILR_API_URL` / `COMPILR_WEB_URL` (same defaults as
+ * before) and accept an optional endpoints override the CLI doesn't pass, so
+ * behavior is unchanged.
  */
-export declare function getAuthorizationUrl(userCode?: string): string;
+export { refreshToken, sendHeartbeat, getProfile, updateProfile, requestDeviceCode, pollDeviceToken, getAuthorizationUrl, } from '@compilr-dev/sdk';
+export type { RefreshTokenResponse, ProfileData, HeartbeatData, DeviceCodeResponse, DeviceTokenResponse, DeviceTokenError, } from '@compilr-dev/sdk';

package/dist/auth/api-client.js

@@ -1,261 +1,10 @@
 /**
- * API Client for CLI Authentication
+ * Auth API client — now a thin re-export of the SDK's shared implementation
+ * (`@compilr-dev/sdk` host layer). CLI and Desktop talk to the same compilr.dev
+ * Netlify Functions; the client lives in one place.
  *
- * All backend communication goes through Netlify Functions.
- * No direct Supabase SDK dependency — the server handles Supabase calls.
- *
- * Note: This is for USER authentication only — users still bring their own LLM API keys.
- */
-import * as os from 'os';
-// =============================================================================
-// Configuration
-// =============================================================================
-// API endpoint for CLI-specific operations
-// Use COMPILR_API_URL env var for testing against branch previews
-const API_BASE_URL = process.env.COMPILR_API_URL || 'https://compilr.dev/.netlify/functions';
-// Device flow authorization URL
-// Use COMPILR_WEB_URL env var for testing against branch previews
-const WEB_BASE_URL = process.env.COMPILR_WEB_URL || 'https://compilr.dev';
-const AUTHORIZATION_URL = `${WEB_BASE_URL}/cli/authorize`;
-// =============================================================================
-// Token Refresh (via Netlify Function)
-// =============================================================================
-/**
- * Refresh an access token using a refresh token.
- * Calls the server-side Netlify function which handles Supabase internally.
- */
-export async function refreshToken(refreshTokenValue) {
-    try {
-        const response = await fetch(`${API_BASE_URL}/cli-refresh-token`, {
-            method: 'POST',
-            headers: {
-                'Content-Type': 'application/json',
-            },
-            body: JSON.stringify({ refresh_token: refreshTokenValue }),
-        });
-        const contentType = response.headers.get('content-type') ?? '';
-        if (!contentType.includes('application/json')) {
-            return { success: false, error: `Server returned non-JSON response (${String(response.status)})` };
-        }
-        const result = await response.json();
-        if (!response.ok) {
-            return {
-                success: false,
-                error: result.error ?? `HTTP ${String(response.status)}`,
-            };
-        }
-        return {
-            success: true,
-            access_token: result.access_token,
-            refresh_token: result.refresh_token,
-            expires_in: result.expires_in,
-            user: result.user,
-        };
-    }
-    catch (error) {
-        return {
-            success: false,
-            error: error instanceof Error ? error.message : 'Network error',
-        };
-    }
-}
-// =============================================================================
-// CLI API Operations (against our Netlify Functions)
-// =============================================================================
-/**
- * Send heartbeat to record session.
- */
-export async function sendHeartbeat(accessToken, data) {
-    try {
-        const response = await fetch(`${API_BASE_URL}/cli-heartbeat`, {
-            method: 'POST',
-            headers: {
-                'Authorization': `Bearer ${accessToken}`,
-                'Content-Type': 'application/json',
-            },
-            body: JSON.stringify(data),
-        });
-        const contentType = response.headers.get('content-type') ?? '';
-        if (!contentType.includes('application/json')) {
-            return { success: false, error: `Server returned non-JSON response (${String(response.status)})` };
-        }
-        const result = await response.json();
-        if (!response.ok) {
-            return {
-                success: false,
-                error: result.error ?? `HTTP ${String(response.status)}`,
-            };
-        }
-        return {
-            success: result.success ?? true,
-            telemetry_enabled: result.telemetry_enabled,
-        };
-    }
-    catch (error) {
-        return {
-            success: false,
-            error: error instanceof Error ? error.message : 'Network error',
-        };
-    }
-}
-/**
- * Get user profile from CLI API.
- */
-export async function getProfile(accessToken) {
-    try {
-        const response = await fetch(`${API_BASE_URL}/cli-profile`, {
-            method: 'GET',
-            headers: {
-                'Authorization': `Bearer ${accessToken}`,
-            },
-        });
-        const contentType = response.headers.get('content-type') ?? '';
-        if (!contentType.includes('application/json')) {
-            return { success: false, error: `Server returned non-JSON response (${String(response.status)})` };
-        }
-        const result = await response.json();
-        if (!response.ok) {
-            return {
-                success: false,
-                error: result.error ?? `HTTP ${String(response.status)}`,
-            };
-        }
-        return {
-            success: true,
-            profile: result,
-        };
-    }
-    catch (error) {
-        return {
-            success: false,
-            error: error instanceof Error ? error.message : 'Network error',
-        };
-    }
-}
-/**
- * Update user profile via CLI API.
- */
-export async function updateProfile(accessToken, updates) {
-    try {
-        const response = await fetch(`${API_BASE_URL}/cli-profile`, {
-            method: 'PATCH',
-            headers: {
-                'Authorization': `Bearer ${accessToken}`,
-                'Content-Type': 'application/json',
-            },
-            body: JSON.stringify(updates),
-        });
-        const contentType = response.headers.get('content-type') ?? '';
-        if (!contentType.includes('application/json')) {
-            return { success: false, error: `Server returned non-JSON response (${String(response.status)})` };
-        }
-        const result = await response.json();
-        if (!response.ok) {
-            return {
-                success: false,
-                error: result.error ?? `HTTP ${String(response.status)}`,
-            };
-        }
-        return {
-            success: result.success ?? true,
-            profile: result.profile,
-        };
-    }
-    catch (error) {
-        return {
-            success: false,
-            error: error instanceof Error ? error.message : 'Network error',
-        };
-    }
-}
-// =============================================================================
-// Device Flow Authentication
-// =============================================================================
-/**
- * Request a device code for CLI authentication.
- * Returns codes and URLs for the user to authorize.
- */
-export async function requestDeviceCode() {
-    try {
-        const url = `${API_BASE_URL}/cli-device-code`;
-        const response = await fetch(url, {
-            method: 'POST',
-            headers: {
-                'Content-Type': 'application/json',
-            },
-        });
-        const contentType = response.headers.get('content-type') ?? '';
-        if (!contentType.includes('application/json')) {
-            return {
-                success: false,
-                error: `Non-JSON response (${String(response.status)}) from: ${url}`,
-            };
-        }
-        if (!response.ok) {
-            const result = await response.json();
-            return {
-                success: false,
-                error: result.error ?? `HTTP ${String(response.status)}`,
-            };
-        }
-        const data = await response.json();
-        return { success: true, data };
-    }
-    catch (error) {
-        return {
-            success: false,
-            error: error instanceof Error ? error.message : 'Network error',
-        };
-    }
-}
-/**
- * Poll for device token after user authorizes.
- * Returns tokens on success, or error status if still pending.
- */
-export async function pollDeviceToken(deviceCode) {
-    try {
-        const response = await fetch(`${API_BASE_URL}/cli-device-token`, {
-            method: 'POST',
-            headers: {
-                'Content-Type': 'application/json',
-            },
-            body: JSON.stringify({
-                device_code: deviceCode,
-                hostname: os.hostname(),
-            }),
-        });
-        const contentType = response.headers.get('content-type') ?? '';
-        if (!contentType.includes('application/json')) {
-            return {
-                success: false,
-                networkError: `Server returned non-JSON response (${String(response.status)})`,
-            };
-        }
-        const result = await response.json();
-        if (!response.ok) {
-            return {
-                success: false,
-                error: result,
-            };
-        }
-        return {
-            success: true,
-            data: result,
-        };
-    }
-    catch (error) {
-        return {
-            success: false,
-            networkError: error instanceof Error ? error.message : 'Network error',
-        };
-    }
-}
-/**
- * Get the authorization URL for the device flow.
+ * The SDK functions read `COMPILR_API_URL` / `COMPILR_WEB_URL` (same defaults as
+ * before) and accept an optional endpoints override the CLI doesn't pass, so
+ * behavior is unchanged.
  */
-export function getAuthorizationUrl(userCode) {
-    if (userCode) {
-        return `${AUTHORIZATION_URL}?code=${userCode}`;
-    }
-    return AUTHORIZATION_URL;
-}
+export { refreshToken, sendHeartbeat, getProfile, updateProfile, requestDeviceCode, pollDeviceToken, getAuthorizationUrl, } from '@compilr-dev/sdk';

package/dist/auth/storage.d.ts

@@ -1,52 +1,10 @@
 /**
- * Auth Storage Module
+ * Auth storage — now a thin re-export of the SDK's shared implementation
+ * (`@compilr-dev/sdk` host layer). CLI and Desktop persist the same
+ * `~/.compilr-dev/auth.json`; the logic lives in one place.
  *
- * Manages persistent storage of authentication credentials.
- * File: ~/.compilr-dev/auth.json
- *
- * Security:
- * - File permissions set to 0600 (owner read/write only)
- * - Tokens are JWTs from Supabase Auth
- */
-export interface AuthUser {
-    id: string;
-    email: string;
-    createdAt: string;
-}
-export interface AuthSession {
-    accessToken: string;
-    refreshToken: string;
-    expiresAt: string;
-    apiToken?: string;
-}
-export interface AuthData {
-    version: number;
-    user: AuthUser;
-    session: AuthSession;
-}
-/**
- * Load auth data from disk.
- * Returns null if file doesn't exist or is invalid.
- */
-export declare function loadAuthData(): AuthData | null;
-/**
- * Save auth data to disk with secure permissions.
- */
-export declare function saveAuthData(data: AuthData): void;
-/**
- * Clear auth data (logout).
- */
-export declare function clearAuthData(): void;
-/**
- * Update just the session tokens (after refresh).
- */
-export declare function updateSession(session: AuthSession): boolean;
-/**
- * Check if auth data exists (quick check without loading).
- */
-export declare function hasAuthData(): boolean;
-/**
- * Check if stored auth file has insecure permissions.
- * Returns warning message if insecure, null if OK.
+ * The SDK functions default to `~/.compilr-dev` (== this module's historical
+ * CONFIG_DIR), so behavior is identical — no `dir` argument is passed.
  */
-export declare function checkAuthFilePermissions(): string | null;
+export { loadAuthData, saveAuthData, clearAuthData, updateSession, hasAuthData, checkAuthFilePermissions, } from '@compilr-dev/sdk';
+export type { AuthUser, AuthSession, AuthData } from '@compilr-dev/sdk';

package/dist/auth/storage.js

@@ -1,118 +1,9 @@
 /**
- * Auth Storage Module
+ * Auth storage — now a thin re-export of the SDK's shared implementation
+ * (`@compilr-dev/sdk` host layer). CLI and Desktop persist the same
+ * `~/.compilr-dev/auth.json`; the logic lives in one place.
  *
- * Manages persistent storage of authentication credentials.
- * File: ~/.compilr-dev/auth.json
- *
- * Security:
- * - File permissions set to 0600 (owner read/write only)
- * - Tokens are JWTs from Supabase Auth
- */
-import * as fs from 'fs';
-import * as path from 'path';
-import * as os from 'os';
-// =============================================================================
-// Constants
-// =============================================================================
-const CONFIG_DIR = path.join(os.homedir(), '.compilr-dev');
-const AUTH_FILE = path.join(CONFIG_DIR, 'auth.json');
-// =============================================================================
-// Storage Operations
-// =============================================================================
-/**
- * Load auth data from disk.
- * Returns null if file doesn't exist or is invalid.
- */
-export function loadAuthData() {
-    try {
-        if (!fs.existsSync(AUTH_FILE)) {
-            return null;
-        }
-        const data = fs.readFileSync(AUTH_FILE, 'utf-8');
-        const parsed = JSON.parse(data);
-        // Validate required fields
-        if (typeof parsed.version !== 'number' ||
-            typeof parsed.user !== 'object' ||
-            !parsed.user ||
-            typeof parsed.session !== 'object' ||
-            !parsed.session) {
-            return null;
-        }
-        return parsed;
-    }
-    catch {
-        // File doesn't exist or is corrupted
-        return null;
-    }
-}
-/**
- * Save auth data to disk with secure permissions.
- */
-export function saveAuthData(data) {
-    // Ensure config directory exists
-    fs.mkdirSync(CONFIG_DIR, { recursive: true });
-    // Write with restrictive permissions
-    fs.writeFileSync(AUTH_FILE, JSON.stringify(data, null, 2), {
-        encoding: 'utf-8',
-        mode: 0o600, // Owner read/write only
-    });
-    // Verify permissions (fix if system ignored mode)
-    try {
-        fs.chmodSync(AUTH_FILE, 0o600);
-    }
-    catch {
-        // Ignore chmod errors (e.g., on Windows)
-    }
-}
-/**
- * Clear auth data (logout).
- */
-export function clearAuthData() {
-    try {
-        if (fs.existsSync(AUTH_FILE)) {
-            fs.unlinkSync(AUTH_FILE);
-        }
-    }
-    catch {
-        // Ignore errors during cleanup
-    }
-}
-/**
- * Update just the session tokens (after refresh).
- */
-export function updateSession(session) {
-    const data = loadAuthData();
-    if (!data) {
-        return false;
-    }
-    data.session = session;
-    saveAuthData(data);
-    return true;
-}
-/**
- * Check if auth data exists (quick check without loading).
- */
-export function hasAuthData() {
-    return fs.existsSync(AUTH_FILE);
-}
-/**
- * Check if stored auth file has insecure permissions.
- * Returns warning message if insecure, null if OK.
+ * The SDK functions default to `~/.compilr-dev` (== this module's historical
+ * CONFIG_DIR), so behavior is identical — no `dir` argument is passed.
  */
-export function checkAuthFilePermissions() {
-    try {
-        if (!fs.existsSync(AUTH_FILE)) {
-            return null;
-        }
-        const stats = fs.statSync(AUTH_FILE);
-        const mode = stats.mode & 0o777; // Get permission bits
-        // Check if group or others have any access
-        if (mode & 0o077) {
-            return `Warning: Auth file has insecure permissions (${mode.toString(8)}). Consider running: chmod 600 ${AUTH_FILE}`;
-        }
-        return null;
-    }
-    catch {
-        return null;
-    }
-}
+export { loadAuthData, saveAuthData, clearAuthData, updateSession, hasAuthData, checkAuthFilePermissions, } from '@compilr-dev/sdk';

package/dist/commands-v2/handlers/settings.js

@@ -25,7 +25,13 @@ export const themeCommand = {
     ],
     async execute(_args, ctx) {
         const themeOverlay = new ThemeOverlayV2();
-        await ctx.ui.showOverlay(themeOverlay);
+        const result = await ctx.ui.showOverlay(themeOverlay);
+        // The overlay updates the theme registry, but the input prompt prefix (the
+        // accent-colored "compilr>") is cached and must be rebuilt to pick up the new
+        // accent color — otherwise it stays stale until the next restart.
+        if (result?.themeChanged) {
+            ctx.ui.refreshPrompt();
+        }
         return true;
     },
 };
@@ -78,6 +84,10 @@ export const configCommand = {
             messageCount,
         });
         const result = await ctx.ui.showOverlay(configOverlay);
+        // The config overlay can change the theme via its sub-overlay without
+        // surfacing it in the result, so rebuild the cached prompt prefix
+        // unconditionally on close — refreshPrompt() reads colors live and is cheap.
+        ctx.ui.refreshPrompt();
         if (result?.settingsChanged) {
             // Sync TerminalUI config with persisted settings
             const updated = getSettings();

package/dist/entitlements/index.js

@@ -6,7 +6,7 @@
  * - Uses encrypted file for offline backup
  * - Warms cache on startup
  */
-import { EntitlementCache } from '@compilr-dev/sdk';
+import { EntitlementCache, fetchEntitlements, } from '@compilr-dev/sdk';
 import { existsSync, readFileSync, writeFileSync, mkdirSync } from 'node:fs';
 import { join } from 'node:path';
 import { createCipheriv, createDecipheriv, randomBytes, createHash } from 'node:crypto';
@@ -60,23 +60,9 @@ const cliStore = {
         }
     },
 };
-// ─── Fetch Function ─────────────────────────────────────────────────────────
-async function fetchEntitlements(getToken) {
-    const token = await getToken();
-    const apiUrl = process.env['COMPILR_API_URL'] ?? 'https://compilr.dev/.netlify/functions';
-    const resp = await fetch(`${apiUrl}/cli-entitlements`, {
-        method: 'GET',
-        headers: {
-            'Authorization': `Bearer ${token}`,
-            'Content-Type': 'application/json',
-        },
-    });
-    if (!resp.ok) {
-        throw new Error(`Entitlements fetch failed: ${String(resp.status)}`);
-    }
-    return await resp.json();
-}
 // ─── Singleton ──────────────────────────────────────────────────────────────
+// Fetch lives in the SDK (shared with Desktop). `getToken` returns Promise<string>
+// here, which satisfies the SDK's Promise<string | null> contract.
 import { DailyCounter } from '@compilr-dev/sdk';
 let cacheInstance = null;
 /** Daily message counter — tracks agent LLM calls per day */

package/dist/index.js

@@ -885,6 +885,14 @@ async function main() {
         // Show login overlay if not authenticated
         showLogin,
     });
+    // Always restore the hardware cursor on exit. Overlays/menus hide it while
+    // showing nav-only screens; without this, quitting (incl. Ctrl+C, which
+    // routes through process.exit → 'exit') from such a screen would leave the
+    // user's terminal cursor invisible.
+    process.on('exit', () => {
+        if (process.stdout.isTTY)
+            process.stdout.write('\x1b[?25h');
+    });
     // Handle Ctrl+C gracefully
     process.on('SIGINT', () => {
         // Flush episode recorder before exit

package/dist/repl-v2.js

@@ -3719,6 +3719,12 @@ export class ReplV2 {
 // Only run main() when executed directly (not when imported)
 if (import.meta.url === `file://${process.argv[1]}`) {
     const repl = new ReplV2();
+    // Restore the hardware cursor on exit (overlays/menus hide it for nav-only
+    // screens; don't leave the user's terminal cursor invisible after quit).
+    process.on('exit', () => {
+        if (process.stdout.isTTY)
+            process.stdout.write('\x1b[?25h');
+    });
     // Handle SIGINT — restore raw mode before exit so the parent shell
     // doesn't inherit a broken terminal state.
     process.on('SIGINT', () => {

package/dist/settings/index.js

@@ -8,7 +8,7 @@ import { log } from '../foundation/logger.js';
 import * as fs from 'fs';
 import * as path from 'path';
 import * as os from 'os';
-import { DEFAULT_PERMISSION_RULES, findMatchingRule as sdkFindMatchingRule, } from '@compilr-dev/sdk';
+import { DEFAULT_PERMISSION_RULES, findMatchingRule as sdkFindMatchingRule, migrateRawSettings, } from '@compilr-dev/sdk';
 // =============================================================================
 // Constants
 // =============================================================================
@@ -103,32 +103,14 @@ export function getSettings() {
     if (settingsCache) {
         return settingsCache;
     }
+    // Value migrations live in the SDK (migrateRawSettings) so CLI and Desktop
+    // normalize the shared settings.json identically. It's pure, idempotent, and
+    // preserves unknown keys (incl. Desktop-only fields). We run it on the raw
+    // file, then merge over CLI defaults.
     const stored = loadFromDisk();
-    let needsSave = false;
-    // Migration: convert verbose boolean to verbosity string (before merge with defaults)
-    if (!('verbosity' in stored) && stored.verbose === true) {
-        stored.verbosity = 'verbose';
-        needsSave = true;
-    }
-    settingsCache = { ...DEFAULT_SETTINGS, ...stored };
-    if (needsSave) {
-        saveToDisk(settingsCache);
-    }
-    // Migration: convert deprecated 'cwd' to 'off'
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
-    if (settingsCache.projectStartup === 'cwd') {
-        settingsCache.projectStartup = 'off';
-        saveToDisk(settingsCache);
-    }
-    // Migration: convert old permission mode values
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
-    const oldPermMode = settingsCache.permissionMode;
-    if (oldPermMode === 'default' || oldPermMode === 'accept-edits') {
-        settingsCache.permissionMode = 'normal';
-        saveToDisk(settingsCache);
-    }
-    else if (oldPermMode === 'dont-ask') {
-        settingsCache.permissionMode = 'auto-accept';
+    const { settings: migrated, changed } = migrateRawSettings(stored);
+    settingsCache = { ...DEFAULT_SETTINGS, ...migrated };
+    if (changed) {
         saveToDisk(settingsCache);
     }
     return settingsCache;

package/dist/tools/platform-adapter.js

@@ -5,7 +5,7 @@
  * wires CLI-specific hooks and services (anchors, artifacts, episodes),
  * and delegates all 32 platform tool definitions to the SDK.
  */
-import { createPlatformTools, createSQLiteRepositories, ProjectAnchorStore, } from '@compilr-dev/sdk';
+import { createPlatformTools, createSQLiteRepositories, ProjectAnchorStore, FileArtifactService, } from '@compilr-dev/sdk';
 import { createAllFactoryTools } from '@compilr-dev/factory';
 import { getDb } from '../db/index.js';
 import { getDataPath, getSessionsPath } from '../settings/paths.js';
@@ -16,7 +16,7 @@ import { getCurrentProject, setCurrentProject } from './project-db.js';
 import { awardFirstProject, awardWorkItemCompletion } from '../games/coins.js';
 import { getActiveSharedContext } from '@compilr-dev/sdk';
 import { setAnchorStore } from '../anchors/index.js';
-import { getTeamCheckpointer, recordTeamActivity } from '../multi-agent/index.js';
+import { recordTeamActivity, getSessionsPath as getCheckpointerSessionsPath } from '../multi-agent/index.js';
 import { getGlobalEpisodeStore } from '../episodes/index.js';
 // =============================================================================
 // Repositories — SDK's SQLite implementations, backed by CLI's existing DB
@@ -63,123 +63,24 @@ const anchorService = anchorStore.toService();
 // =============================================================================
 // Artifact Service — wraps ArtifactStore from TeamCheckpointer
 // =============================================================================
+// Artifacts — file-backed service shared with Desktop via the SDK
+// (FileArtifactService), pointed at the same sessions dir the checkpointer uses
+// so artifact_* tools and team hydration read/write the same artifacts.json.
+// We wrap save() to record team activity attributed to the ACTING agent
+// (input.agent), which differs from the artifact's original creator on updates.
+const baseArtifactService = new FileArtifactService({
+    sessionsDir: getCheckpointerSessionsPath(),
+    getProjectId: () => getCurrentProject()?.id ?? null,
+});
 const artifactService = {
-    save: (input) => {
-        const currentProject = getCurrentProject();
-        const projectId = currentProject?.id ?? null;
-        const store = getTeamCheckpointer().getArtifactStore(projectId);
-        const agentId = input.agent ?? 'default';
-        const existing = store.getByName(input.name);
-        if (existing) {
-            const updated = store.update(existing.id, {
-                content: input.content,
-                summary: input.summary,
-                type: input.type,
-            });
-            if (!updated)
-                throw new Error(`Failed to update artifact "${input.name}"`);
-            getTeamCheckpointer().saveArtifactStore(currentProject?.id ?? null, store);
-            recordTeamActivity(agentId, 'artifact_updated', `updated artifact "${updated.name}"`);
-            const artifact = {
-                id: updated.id,
-                name: updated.name,
-                agent: updated.agent,
-                type: updated.type,
-                content: updated.content,
-                summary: updated.summary,
-                version: updated.version,
-                createdAt: updated.createdAt,
-                updatedAt: updated.updatedAt,
-            };
-            return Promise.resolve({ artifact, isUpdate: true });
-        }
-        else {
-            const created = store.create({
-                name: input.name,
-                agent: agentId,
-                type: input.type,
-                content: input.content,
-                summary: input.summary,
-            });
-            getTeamCheckpointer().saveArtifactStore(currentProject?.id ?? null, store);
-            recordTeamActivity(agentId, 'artifact_created', `created artifact "${created.name}"`);
-            const artifact = {
-                id: created.id,
-                name: created.name,
-                agent: created.agent,
-                type: created.type,
-                content: created.content,
-                summary: created.summary,
-                version: created.version,
-                createdAt: created.createdAt,
-                updatedAt: created.updatedAt,
-            };
-            return Promise.resolve({ artifact, isUpdate: false });
-        }
-    },
-    getByName: (name) => {
-        const currentProject = getCurrentProject();
-        const store = getTeamCheckpointer().getArtifactStore(currentProject?.id ?? null);
-        const artifact = store.getByName(name);
-        if (!artifact)
-            return Promise.resolve(null);
-        const result = {
-            id: artifact.id,
-            name: artifact.name,
-            agent: artifact.agent,
-            type: artifact.type,
-            content: artifact.content,
-            summary: artifact.summary,
-            version: artifact.version,
-            createdAt: artifact.createdAt,
-            updatedAt: artifact.updatedAt,
-        };
-        return Promise.resolve(result);
-    },
-    list: (options) => {
-        const currentProject = getCurrentProject();
-        const store = getTeamCheckpointer().getArtifactStore(currentProject?.id ?? null);
-        let items = options?.search ? store.search(options.search) : store.list();
-        if (options?.type) {
-            items = items.filter(a => a.type === options.type);
-        }
-        if (options?.agent) {
-            items = items.filter(a => a.agent === options.agent);
-        }
-        const summaries = items.map(a => ({
-            id: a.id,
-            name: a.name,
-            agent: a.agent,
-            type: a.type,
-            summary: a.summary,
-            version: a.version,
-            updatedAt: a.updatedAt,
-        }));
-        return Promise.resolve(summaries);
-    },
-    delete: (name) => {
-        const currentProject = getCurrentProject();
-        const store = getTeamCheckpointer().getArtifactStore(currentProject?.id ?? null);
-        const artifact = store.getByName(name);
-        if (!artifact)
-            return Promise.resolve(null);
-        const deleted = store.delete(artifact.id);
-        if (!deleted)
-            return Promise.resolve(null);
-        getTeamCheckpointer().saveArtifactStore(currentProject?.id ?? null, store);
-        const result = {
-            id: artifact.id,
-            name: artifact.name,
-            agent: artifact.agent,
-            type: artifact.type,
-            content: artifact.content,
-            summary: artifact.summary,
-            version: artifact.version,
-            createdAt: artifact.createdAt,
-            updatedAt: artifact.updatedAt,
-        };
-        return Promise.resolve(result);
+    save: async (input) => {
+        const result = await baseArtifactService.save(input);
+        recordTeamActivity(input.agent ?? 'default', result.isUpdate ? 'artifact_updated' : 'artifact_created', `${result.isUpdate ? 'updated' : 'created'} artifact "${result.artifact.name}"`);
+        return result;
     },
+    getByName: (name) => baseArtifactService.getByName(name),
+    list: (options) => baseArtifactService.list(options),
+    delete: (name) => baseArtifactService.delete(name),
 };
 // =============================================================================
 // Episode Service — wraps FileEpisodeStore

package/dist/ui/overlay-manager.js

@@ -176,6 +176,9 @@ export class OverlayManager {
                 process.stdout.write('\n');
             }
         }
+        // Only show the hardware cursor for overlays that actually take text input
+        // (they provide a cursorPosition). Nav-only overlays (menus, dashboards,
+        // selection lists) hide it so it doesn't blink, parked, below the screen.
         if (content.cursorPosition) {
             const { line, column } = content.cursorPosition;
             const linesFromEnd = paddedLines.length - 1 - line;
@@ -183,8 +186,11 @@ export class OverlayManager {
                 ttyWrite(`\x1b[${String(linesFromEnd)}A`);
             }
             ttyWrite(`\x1b[${String(column)}G`);
+            terminal.showCursor();
+        }
+        else {
+            terminal.hideCursor();
         }
-        terminal.showCursor();
     }
     renderInlineOverlay(content, termWidth) {
         this.clearOverlayRender();
@@ -206,7 +212,21 @@ export class OverlayManager {
         for (const line of paddedLines) {
             process.stdout.write(line + '\n');
         }
-        terminal.showCursor();
+        // Same rule as fullscreen: cursor only for text-input overlays. Inline
+        // writes a trailing newline after every line, so the cursor sits one row
+        // below the last content line (hence no -1 in linesFromEnd).
+        if (content.cursorPosition) {
+            const { line, column } = content.cursorPosition;
+            const linesFromEnd = paddedLines.length - line;
+            if (linesFromEnd > 0) {
+                ttyWrite(`\x1b[${String(linesFromEnd)}A`);
+            }
+            ttyWrite(`\x1b[${String(column)}G`);
+            terminal.showCursor();
+        }
+        else {
+            terminal.hideCursor();
+        }
     }
     // ===========================================================================
     // Action processing

package/dist/utils/project-memory.d.ts

@@ -1,47 +1,12 @@
 /**
- * Project Memory Loader
+ * Project Memory Loader (CLI)
  *
- * Loads project-level instructions from COMPILR.md or CLAUDE.md files.
- * Provides size guards and warnings for large files.
- */
-export interface ProjectMemoryResult {
-    /** Whether a memory file was found */
-    found: boolean;
-    /** The loaded content (may be truncated) */
-    content: string;
-    /** Path to the file that was loaded */
-    filePath: string | null;
-    /** Original file size in bytes */
-    originalSize: number;
-    /** Whether the content was truncated */
-    truncated: boolean;
-    /** Estimated token count (chars / 4) */
-    estimatedTokens: number;
-}
-export interface ProjectMemoryOptions {
-    /** Maximum content size in bytes before truncation (default: 100KB) */
-    maxSize?: number;
-    /** Size threshold for warning (default: 30KB) */
-    warnSize?: number;
-    /** Custom search directory (default: process.cwd()) */
-    cwd?: string;
-}
-/**
- * Load project memory from COMPILR.md or CLAUDE.md
+ * Now a thin re-export of the SDK's shared loader (loadProjectContextFiles):
+ * priority search over COMPILR.md / .compilr/instructions.md / CLAUDE.md /
+ * .claude/instructions.md with size-guard truncation. Shared with Desktop.
  *
- * @param options - Configuration options
- * @returns Result with content and metadata
- */
-export declare function loadProjectMemory(options?: ProjectMemoryOptions): ProjectMemoryResult;
-/**
- * Check if a project memory file exists without loading it
- */
-export declare function hasProjectMemory(cwd?: string): boolean;
-/**
- * Get the size category for display purposes
- */
-export declare function getSizeCategory(bytes: number): 'small' | 'medium' | 'large';
-/**
- * Format bytes as human-readable string
+ * The previous CLI-only display helpers (hasProjectMemory / getSizeCategory /
+ * formatBytes) had no callers and were removed.
  */
-export declare function formatBytes(bytes: number): string;
+export { loadProjectContextFiles as loadProjectMemory } from '@compilr-dev/sdk';
+export type { ProjectContextResult as ProjectMemoryResult, LoadProjectContextOptions as ProjectMemoryOptions, } from '@compilr-dev/sdk';

package/dist/utils/project-memory.js

@@ -1,118 +1,11 @@
 /**
- * Project Memory Loader
+ * Project Memory Loader (CLI)
  *
- * Loads project-level instructions from COMPILR.md or CLAUDE.md files.
- * Provides size guards and warnings for large files.
- */
-import * as fs from 'fs';
-import * as path from 'path';
-import { estimateTokens } from './token-tracker.js';
-// =============================================================================
-// Constants
-// =============================================================================
-/** Files to search for, in priority order */
-const MEMORY_FILES = [
-    'COMPILR.md',
-    '.compilr/instructions.md',
-    'CLAUDE.md',
-    '.claude/instructions.md',
-];
-/** Default max size: 100KB */
-const DEFAULT_MAX_SIZE = 100 * 1024;
-/** Default warn size: 30KB */
-const DEFAULT_WARN_SIZE = 30 * 1024;
-// =============================================================================
-// Main Function
-// =============================================================================
-/**
- * Load project memory from COMPILR.md or CLAUDE.md
+ * Now a thin re-export of the SDK's shared loader (loadProjectContextFiles):
+ * priority search over COMPILR.md / .compilr/instructions.md / CLAUDE.md /
+ * .claude/instructions.md with size-guard truncation. Shared with Desktop.
  *
- * @param options - Configuration options
- * @returns Result with content and metadata
- */
-export function loadProjectMemory(options = {}) {
-    const cwd = options.cwd ?? process.cwd();
-    const maxSize = options.maxSize ?? DEFAULT_MAX_SIZE;
-    // Search for memory file
-    for (const filename of MEMORY_FILES) {
-        const filePath = path.join(cwd, filename);
-        if (fs.existsSync(filePath)) {
-            try {
-                const stat = fs.statSync(filePath);
-                const originalSize = stat.size;
-                // Read file content
-                let content = fs.readFileSync(filePath, 'utf-8');
-                let truncated = false;
-                // Truncate if too large
-                if (content.length > maxSize) {
-                    content = content.slice(0, maxSize);
-                    // Try to truncate at a line boundary
-                    const lastNewline = content.lastIndexOf('\n');
-                    if (lastNewline > maxSize * 0.8) {
-                        content = content.slice(0, lastNewline);
-                    }
-                    content += '\n\n[... truncated due to size ...]';
-                    truncated = true;
-                }
-                return {
-                    found: true,
-                    content,
-                    filePath,
-                    originalSize,
-                    truncated,
-                    estimatedTokens: estimateTokens(content),
-                };
-            }
-            catch {
-                // File exists but couldn't be read, continue to next
-                continue;
-            }
-        }
-    }
-    // No memory file found
-    return {
-        found: false,
-        content: '',
-        filePath: null,
-        originalSize: 0,
-        truncated: false,
-        estimatedTokens: 0,
-    };
-}
-/**
- * Check if a project memory file exists without loading it
- */
-export function hasProjectMemory(cwd) {
-    const dir = cwd ?? process.cwd();
-    for (const filename of MEMORY_FILES) {
-        const filePath = path.join(dir, filename);
-        if (fs.existsSync(filePath)) {
-            return true;
-        }
-    }
-    return false;
-}
-/**
- * Get the size category for display purposes
- */
-export function getSizeCategory(bytes) {
-    if (bytes < DEFAULT_WARN_SIZE) {
-        return 'small';
-    }
-    else if (bytes < DEFAULT_MAX_SIZE) {
-        return 'medium';
-    }
-    return 'large';
-}
-/**
- * Format bytes as human-readable string
+ * The previous CLI-only display helpers (hasProjectMemory / getSizeCategory /
+ * formatBytes) had no callers and were removed.
  */
-export function formatBytes(bytes) {
-    if (bytes < 1024) {
-        return `${String(bytes)} B`;
-    }
-    else if (bytes < 1024 * 1024) {
-        return `${(bytes / 1024).toFixed(1)} KB`;
-    }
-    return `${(bytes / (1024 * 1024)).toFixed(1)} MB`;
-}
+export { loadProjectContextFiles as loadProjectMemory } from '@compilr-dev/sdk';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@compilr-dev/cli",
-  "version": "0.7.6",
+  "version": "0.8.1",
   "description": "AI-powered coding assistant CLI using @compilr-dev/agents",
   "type": "module",
   "main": "dist/index.js",
@@ -55,12 +55,12 @@
   },
   "dependencies": {
     "@anthropic-ai/sdk": "^0.74.0",
-    "@compilr-dev/agents": "^0.5.9",
+    "@compilr-dev/agents": "^0.6.0",
     "@compilr-dev/agents-coding": "^1.0.4",
     "@compilr-dev/editor-core": "^0.0.2",
-    "@compilr-dev/factory": "^0.1.30",
+    "@compilr-dev/factory": "^0.1.35",
     "@compilr-dev/logger": "^0.1.0",
-    "@compilr-dev/sdk": "^0.10.41",
+    "@compilr-dev/sdk": "^0.14.0",
     "@compilr-dev/ui-core": "^0.0.1",
     "@modelcontextprotocol/sdk": "^1.23.0",
     "ansi-escapes": "^7.3.0",