@corenel/cli 0.4.1 → 0.4.3

package/dist/cli.js

@@ -18832,7 +18832,7 @@ var NodeFileService = class {
           out.push({ name: e.name, path, kind: "directory", children: await walk(absChild) });
         } else {
           const st = await fs.stat(absChild).catch(() => null);
-          out.push({ name: e.name, path, kind: "file", size: st?.size, ext: extOf(e.name) });
+          out.push({ name: e.name, path, kind: "file", size: st?.size, mtime: st?.mtimeMs, ext: extOf(e.name) });
         }
       }
       return out;
@@ -18845,7 +18845,7 @@ var NodeFileService = class {
   async stat(path) {
     try {
       const st = await fs.stat(this.abs(path));
-      return { path: normalizeFilePath(path), kind: st.isDirectory() ? "directory" : "file", size: st.size, ext: extOf(path) };
+      return { path: normalizeFilePath(path), kind: st.isDirectory() ? "directory" : "file", size: st.size, mtime: st.mtimeMs, ext: extOf(path) };
     } catch {
       return null;
     }
@@ -18910,7 +18910,7 @@ var NodeFileService = class {
 import { promises as fs2 } from "node:fs";
 import { homedir } from "node:os";
 import { join as join2 } from "node:path";
-import { stateDirName } from "@corenel/protocol";
+import { stateDirName, DEFAULT_API_BASE } from "@corenel/protocol";
 function corenelDir(base = homedir()) {
   return join2(base, stateDirName());
 }
@@ -18920,34 +18920,170 @@ function sidecarDir(base = homedir()) {
 function authTokenPath(base = homedir()) {
   return join2(corenelDir(base), "token");
 }
-async function writeAuthToken(token) {
-  await fs2.mkdir(corenelDir(), { recursive: true, mode: 448 });
-  await fs2.writeFile(authTokenPath(), token.trim() + "\n", { mode: 384 });
+function credentialDir(stateDir) {
+  return stateDir ?? corenelDir();
+}
+function tokenFilePath(stateDir) {
+  return join2(credentialDir(stateDir), "token");
+}
+function credentialFilePath(stateDir) {
+  return join2(credentialDir(stateDir), "auth.json");
+}
+var TOKEN_ENV = "CORENEL_TOKEN";
+var API_BASE_ENV = "CORENEL_API_BASE";
+async function writeLoginCredential(token, opts = {}) {
+  const cred = {
+    accessToken: token.trim(),
+    ...opts.account ? { account: opts.account } : {},
+    ...opts.apiBase ? { apiBase: opts.apiBase } : {}
+  };
+  const dir = credentialDir(opts.stateDir);
+  const credPath = credentialFilePath(opts.stateDir);
+  const tokPath = tokenFilePath(opts.stateDir);
+  await fs2.mkdir(dir, { recursive: true, mode: 448 });
+  const credTmp = `${credPath}.tmp-${process.pid.toString(36)}-${Math.random().toString(36).slice(2, 10)}`;
+  const tokTmp = `${tokPath}.tmp-${process.pid.toString(36)}-${Math.random().toString(36).slice(2, 10)}`;
+  await fs2.writeFile(credTmp, `${JSON.stringify(cred, null, 2)}
+`, { mode: 384 });
+  await fs2.writeFile(tokTmp, `${cred.accessToken}
+`, { mode: 384 });
   try {
-    await fs2.chmod(authTokenPath(), 384);
+    await fs2.chmod(credTmp, 384);
   } catch {
   }
   try {
-    await fs2.chmod(corenelDir(), 448);
+    await fs2.chmod(tokTmp, 384);
   } catch {
   }
+  try {
+    await fs2.rename(credTmp, credPath);
+    await fs2.rename(tokTmp, tokPath);
+  } catch (e) {
+    try {
+      await fs2.rm(credTmp, { force: true });
+    } catch {
+    }
+    try {
+      await fs2.rm(tokTmp, { force: true });
+    } catch {
+    }
+    throw e;
+  }
+  try {
+    await fs2.chmod(dir, 448);
+  } catch {
+  }
+}
+function isMissing(err) {
+  return typeof err === "object" && err !== null && err.code === "ENOENT";
+}
+async function readAuthTokenRead(stateDir) {
+  try {
+    const t = (await fs2.readFile(tokenFilePath(stateDir), "utf8")).trim();
+    return { value: t || null, unreadable: false };
+  } catch (err) {
+    return { value: null, unreadable: !isMissing(err) };
+  }
 }
-async function readAuthToken() {
+async function clearAuthToken(stateDir) {
   try {
-    const t = (await fs2.readFile(authTokenPath(), "utf8")).trim();
-    return t || null;
+    await fs2.rm(tokenFilePath(stateDir), { force: true });
   } catch {
-    return null;
   }
 }
-async function clearAuthToken() {
+async function readCredentialFileRead(stateDir) {
+  let raw;
+  try {
+    raw = await fs2.readFile(credentialFilePath(stateDir), "utf8");
+  } catch (err) {
+    return { value: null, unreadable: !isMissing(err) };
+  }
+  try {
+    const parsed = JSON.parse(raw);
+    if (typeof parsed !== "object" || parsed === null) return { value: null, unreadable: false };
+    const c = parsed;
+    if (typeof c.accessToken !== "string" || !c.accessToken) return { value: null, unreadable: false };
+    return {
+      value: {
+        accessToken: c.accessToken,
+        ...typeof c.refreshToken === "string" ? { refreshToken: c.refreshToken } : {},
+        ...typeof c.expiresAt === "number" ? { expiresAt: c.expiresAt } : {},
+        ...typeof c.account === "string" ? { account: c.account } : {},
+        ...typeof c.apiBase === "string" && c.apiBase ? { apiBase: c.apiBase } : {}
+      },
+      unreadable: false
+    };
+  } catch {
+    return { value: null, unreadable: false };
+  }
+}
+async function clearAllCredentials(stateDir) {
+  await clearAuthToken(stateDir);
   try {
-    await fs2.rm(authTokenPath(), { force: true });
+    await fs2.rm(credentialFilePath(stateDir), { force: true });
   } catch {
   }
 }
-function nodeAuthToken() {
-  return { getToken: async () => await readAuthToken() ?? process.env.CORENEL_TOKEN ?? null };
+async function resolveNodeCredential(opts = {}) {
+  const env = opts.env ?? process.env;
+  const now = opts.now ?? Date.now;
+  const stateDir = opts.stateDir;
+  const fromEnv = env[TOKEN_ENV]?.trim();
+  if (fromEnv) return { token: fromEnv, source: "env" };
+  const credRead = await readCredentialFileRead(stateDir);
+  const tokenRead = await readAuthTokenRead(stateDir);
+  const cred = credRead.value;
+  const fileToken = tokenRead.value;
+  const unreadable = credRead.unreadable || tokenRead.unreadable ? { unreadable: true } : {};
+  if (fileToken) {
+    const same = cred && cred.accessToken === fileToken ? cred : null;
+    return {
+      ...withExpiry({ token: fileToken, source: "token-file", path: tokenFilePath(stateDir) }, same, now),
+      ...unreadable
+    };
+  }
+  if (cred) {
+    return {
+      ...withExpiry(
+        { token: cred.accessToken, source: "credential-file", path: credentialFilePath(stateDir) },
+        cred,
+        now
+      ),
+      ...unreadable
+    };
+  }
+  return { token: null, source: "none", ...unreadable };
+}
+function withExpiry(base, cred, now) {
+  if (!cred) return base;
+  const expired = typeof cred.expiresAt === "number" && cred.expiresAt <= now();
+  return {
+    ...base,
+    ...typeof cred.expiresAt === "number" ? { expiresAt: cred.expiresAt } : {},
+    ...expired ? { expired: true } : {},
+    ...cred.account ? { account: cred.account } : {},
+    ...cred.apiBase ? { apiBase: cred.apiBase } : {}
+  };
+}
+async function resolveApiBase(opts = {}) {
+  const explicit = opts.explicit?.trim();
+  if (explicit) return { base: explicit, source: "explicit" };
+  const fromEnv = (opts.env ?? process.env)[API_BASE_ENV]?.trim();
+  if (fromEnv) return { base: fromEnv, source: "env" };
+  const cred = await resolveNodeCredential({
+    env: {},
+    ...opts.stateDir ? { stateDir: opts.stateDir } : {}
+  });
+  if (cred.apiBase) return { base: cred.apiBase, source: "credential" };
+  return { base: DEFAULT_API_BASE, source: "default" };
+}
+function maskToken(token) {
+  const t = token.trim();
+  if (t.length <= 8) return "****";
+  return `${t.slice(0, 4)}\u2026${t.slice(-2)} (${t.length} chars)`;
+}
+function nodeAuthToken(stateDir) {
+  return { getToken: async () => (await resolveNodeCredential(stateDir ? { stateDir } : {})).token };
 }
 
 // ../../node_modules/.pnpm/@prompd+core@0.5.0-beta.10/node_modules/@prompd/core/dist/index.js
@@ -22048,30 +22184,41 @@ function configWorkspaceRoot(base) {
 // src/cli.ts
 import { FileRecallStore, UNATTACHED_SESSION } from "@corenel/harness/sessions/fileRecallStore";
 import { stateDirName as stateDirName6 } from "@corenel/protocol";
-import { PermissionService as PermissionService3 } from "@corenel/harness/guardrail/permission-service";
+import { PermissionService as PermissionService4 } from "@corenel/harness/guardrail/permission-service";
 
 // src/nodeContext.ts
 import { ROOT_NODE_ID } from "@corenel/protocol";
 import { makeSpawn } from "@corenel/harness/core/spawn";
 function inMemoryMemory() {
-  const items = [];
-  let n = 0;
+  const items = /* @__PURE__ */ new Map();
   return {
-    async save(text, tags = []) {
-      const it = { id: `m${++n}`, text, tags, createdAt: n };
-      items.push(it);
+    async save(input) {
+      const it = {
+        id: input.name,
+        name: input.name,
+        type: input.type,
+        description: input.description,
+        text: input.body,
+        tags: [],
+        createdAt: Date.now()
+      };
+      items.set(input.name, it);
       return it;
     },
+    async read(name) {
+      return items.get(name) ?? null;
+    },
     async recall(q) {
-      return items.filter((i) => i.text.includes(q));
+      return [...items.values()].filter((i) => i.text.includes(q) || i.description.includes(q));
     },
     async list() {
-      return [...items];
+      return [...items.values()];
     },
-    async forget(id) {
-      const i = items.findIndex((x) => x.id === id);
-      if (i >= 0) items.splice(i, 1);
+    async forget(name) {
+      items.delete(name);
     }
+    // No core(): this stub has no tiers, and Task 9 injects nothing rather than
+    // pretending it has a memory block.
   };
 }
 function inMemoryKv() {
@@ -22144,6 +22291,42 @@ function tokenGuard(getToken) {
 var sleep = (ms) => new Promise((r) => setTimeout(r, ms));
 var MIN_POLL_MS = 1e3;
 var DEFAULT_LIFETIME_S = 900;
+var ACCOUNT_LOOKUP_MS = 5e3;
+function deadlineSignal(ms, outer) {
+  const ac = new AbortController();
+  const onOuter = () => ac.abort();
+  const timer = setTimeout(() => ac.abort(), ms);
+  if (outer) {
+    if (outer.aborted) ac.abort();
+    else outer.addEventListener("abort", onOuter, { once: true });
+  }
+  return {
+    signal: ac.signal,
+    dispose: () => {
+      clearTimeout(timer);
+      outer?.removeEventListener("abort", onOuter);
+    }
+  };
+}
+async function whoIsThis(base, token, f, outer, deadlineMs = ACCOUNT_LOOKUP_MS) {
+  const { signal, dispose } = deadlineSignal(deadlineMs, outer);
+  try {
+    const res = await f(`${base}/auth/me`, {
+      headers: { Authorization: `Bearer ${token}` },
+      signal
+    });
+    if (!res.ok) return void 0;
+    const body = JSON.parse(await res.text());
+    const email = body?.user?.email;
+    if (typeof email !== "string") return void 0;
+    const trimmed = email.trim();
+    return trimmed ? trimmed : void 0;
+  } catch {
+    return void 0;
+  } finally {
+    dispose();
+  }
+}
 function defaultOpen(uri, code2) {
   process.stdout.write(`
   To authorize, open:  ${uri}
@@ -22192,7 +22375,9 @@ async function deviceLogin(opts) {
       client_id: "corenel-cli"
     });
     if (tok.access_token) {
-      await opts.store(tok.access_token);
+      const claimed = typeof tok.account === "string" ? tok.account.trim() : "";
+      const account = claimed || await whoIsThis(base, tok.access_token, f, opts.signal, opts.accountLookupMs);
+      await opts.store(tok.access_token, account || void 0);
       return tok.access_token;
     }
     if (tok.error === "authorization_pending") continue;
@@ -22209,7 +22394,7 @@ import { runAgent } from "@corenel/harness/core/loop";
 import { createChatClient, setGatewayBase } from "@corenel/harness/providers/gateway";
 
 // src/apiBase.ts
-var DEFAULT_API_BASE = "https://api.corenel.ai/api";
+import { DEFAULT_API_BASE as DEFAULT_API_BASE2 } from "@corenel/protocol";
 var InvalidApiBaseError = class extends Error {
   constructor(value, why) {
     super(`invalid API base ${JSON.stringify(value)} -- ${why}`);
@@ -22223,8 +22408,13 @@ function isLoopback(hostname) {
   return h === "localhost" || h === "127.0.0.1" || h === "::1" || h.endsWith(".localhost");
 }
 var warnedCleartext = false;
-function apiBase(explicit) {
-  const value = explicit || process.env.CORENEL_API_BASE || DEFAULT_API_BASE;
+async function apiBase(explicit, opts = {}) {
+  const resolved = await resolveApiBase({
+    explicit,
+    env: opts.env ?? process.env,
+    ...opts.stateDir ? { stateDir: opts.stateDir } : {}
+  });
+  const value = resolved.base;
   let url;
   try {
     url = new URL(value);
@@ -22453,8 +22643,11 @@ async function loadCrewAgentAtIfExists(files, root, name, scope = "workspace") {
 // ../crew/runtime.ts
 import { saveCustomPolicy } from "@corenel/harness/guardrail";
 import { allTools } from "@corenel/harness/tools/builtins";
+import { registerSyncConfig, readConfigSyncRendered } from "@corenel/harness/prompts/syncConfig";
 import { makeCallAgentTool } from "@corenel/harness/tools/callAgent";
-function buildSystemExtra(def) {
+var MEMORY_BLOCK = registerSyncConfig("crew/memory.md");
+var SELF_DIRECTION_BLOCK = registerSyncConfig("crew/self-direction.md");
+function buildSystemExtra(def, memoryLocation) {
   const parts = [];
   if (def.jobTitle?.trim()) parts.push(`--- Role ---
 ${def.jobTitle.trim()}`);
@@ -22464,12 +22657,51 @@ ${def.soul.trim()}`);
 ${def.persona.trim()}`);
   if (def.instructions.trim()) parts.push(`--- Instructions ---
 ${def.instructions.trim()}`);
+  const location = memoryLocation ?? "memory/";
+  const dir = location.replace(/\/+$/, "");
+  const index = `${dir}/MEMORY.md`;
+  parts.push(readConfigSyncRendered(MEMORY_BLOCK, { dir, index }));
+  const selfDirection = selfDirectionBlock(def);
+  if (selfDirection) parts.push(selfDirection);
   return parts.join("\n\n");
 }
+function selfDirectionBlock(def) {
+  const trigger = def.triggers?.find((t) => t.type === "self-directed");
+  if (!trigger) return null;
+  const raw = trigger.config?.fallbackMs;
+  const fallbackMs = typeof raw === "number" && Number.isFinite(raw) && raw > 0 ? raw : null;
+  const consequence = fallbackMs == null ? "If this run ends without that call, nothing will wake it again and your work stops here until someone starts you by hand." : `If this run ends without that call you will be woken anyway, about ${Math.round(fallbackMs / 6e4)} minutes from now -- but that is a backstop for a run that could not schedule itself, not a substitute for choosing when you should next run.`;
+  return readConfigSyncRendered(SELF_DIRECTION_BLOCK, { consequence });
+}
+
+// ../crew/memory.ts
+import { makeFactStore } from "@corenel/harness/memory/store";
+
+// ../crew/room/store.ts
+import { flattenFiles as flattenFiles4 } from "@corenel/protocol";
+import { encodeLine, foldSession } from "@corenel/harness/sessions/jsonl";
+import { FINDINGS_FILE, encodeFindingLine, foldFindings } from "@corenel/harness/rooms/findings";
+
+// ../crew/room/prompt.ts
+import { registerSyncConfig as registerSyncConfig2, readConfigSyncRendered as readConfigSyncRendered2 } from "@corenel/harness/prompts/syncConfig";
+import { MAX_ROOM_FINDINGS, renderFindings } from "@corenel/harness/rooms/findings";
+var ROOM_BLOCK = registerSyncConfig2("crew/room.md");
+
+// ../crew/room/turn.ts
+import { readRoomOutcome } from "@corenel/harness/tools/roomTools";
+
+// ../crew/room/turnRuntime.ts
+import { PermissionService } from "@corenel/harness/guardrail";
+import { BudgetMeter, mergeSignals } from "@corenel/harness/core/budget";
+import { makeRoomTools, ROOM_TOOL_NAMES } from "@corenel/harness/tools/roomTools";
+
+// ../crew/room/engine.ts
+import { describeParticipants, resolveAddressee } from "@corenel/harness/tools/roomTools";
+import { planFindingEdit, planFindingEdits } from "@corenel/harness/rooms/findings";
 
 // src/runAgent.ts
 import { stateDirName as stateDirName3 } from "@corenel/protocol";
-import { PermissionService } from "@corenel/harness/guardrail/permission-service";
+import { PermissionService as PermissionService2 } from "@corenel/harness/guardrail/permission-service";
 import { STANDARD_POLICY } from "@corenel/harness/guardrail/builtins";
 import { toolAddress } from "@corenel/harness/tools/namespaces";
 
@@ -22508,7 +22740,7 @@ async function runCrewAgentCli(opts) {
     opts.warn(`agent "${opts.agent}" is disabled; enable it before running`);
     return 2;
   }
-  setGatewayBase(apiBase(opts.base));
+  setGatewayBase(await apiBase(opts.base));
   const token = await nodeAuthToken().getToken();
   if (!token) {
     opts.warn("not signed in: set CORENEL_TOKEN, or run `corenel login` on this machine");
@@ -22543,7 +22775,7 @@ ${extra}` : base;
   if (operatorUnattended === "park" && !unattendedAllow) {
     opts.warn(`corenel: policy "${effectivePolicy.name}" asks to park an unattended action, but run-agent cannot wait -- refusing.`);
   }
-  const permission = new PermissionService({
+  const permission = new PermissionService2({
     policy: effectivePolicy,
     ceiling: mutatingCeiling(tools, "ask"),
     ...unattendedAllow ? { prompt: { ask: async () => "allow" } } : {}
@@ -22819,16 +23051,13 @@ function version(read = (p) => readFileSync2(p, "utf8")) {
 
 // src/auth.ts
 function hintOf(token) {
-  const t = token.trim();
-  if (t.length <= 8) return "****";
-  return `${t.slice(0, 4)}\u2026${t.slice(-2)} (${t.length} chars)`;
+  return maskToken(token);
 }
-async function authState(read = readAuthToken, env = process.env) {
-  const path = authTokenPath();
-  const stored = await read();
-  if (stored) return { source: "file", path, hint: hintOf(stored) };
-  if (env.CORENEL_TOKEN) return { source: "env", path, hint: hintOf(env.CORENEL_TOKEN) };
-  return { source: "none", path };
+async function authState(resolve2 = (env2) => resolveNodeCredential({ env: env2 }), env = process.env) {
+  const r = await resolve2(env);
+  if (!r.token) return { source: "none", path: authTokenPath() };
+  const source = r.source === "env" ? "env" : "file";
+  return { source, path: r.path ?? authTokenPath(), hint: hintOf(r.token) };
 }
 function describeAuth(s, base) {
   if (s.source === "none") {
@@ -22846,12 +23075,12 @@ function describeAuth(s, base) {
   ].filter(Boolean).join("\n");
 }
 async function runAuth(out = (s) => process.stdout.write(s)) {
-  out(`${describeAuth(await authState(), apiBase())}
+  out(`${describeAuth(await authState(), await apiBase())}
 `);
 }
 async function runLogout(out = (s) => process.stdout.write(s)) {
   const before = await authState();
-  await clearAuthToken();
+  await clearAllCredentials();
   if (before.source === "file") out(`Signed out. Removed ${before.path}
 `);
   else out("Nothing to forget \u2014 no stored token.\n");
@@ -22892,7 +23121,7 @@ async function checkToken(base, token, f = fetch) {
   return { name: "token", status: "ok", detail: `accepted by ${base} (${res.status})` };
 }
 async function collectChecks(f = fetch, modelId = DEFAULT_MODEL) {
-  const base = apiBase();
+  const base = await apiBase();
   const checks = [
     { name: "binary", status: "ok", detail: selfPath() },
     { name: "version", status: "ok", detail: `@corenel/cli ${version()}` },
@@ -22900,7 +23129,7 @@ async function collectChecks(f = fetch, modelId = DEFAULT_MODEL) {
     {
       name: "api",
       status: "ok",
-      detail: base === DEFAULT_API_BASE ? base : `${base}  (overridden; default is ${DEFAULT_API_BASE})`
+      detail: base === DEFAULT_API_BASE2 ? base : `${base}  (overridden; default is ${DEFAULT_API_BASE2})`
     }
   ];
   try {
@@ -22917,7 +23146,7 @@ async function collectChecks(f = fetch, modelId = DEFAULT_MODEL) {
     status: auth.source === "none" ? "warn" : "ok",
     detail: auth.source === "none" ? "no" : `yes, from ${auth.source === "env" ? "CORENEL_TOKEN" : auth.path} (${auth.hint})`
   });
-  checks.push(await checkToken(base, await readAuthToken() ?? process.env.CORENEL_TOKEN ?? null, f));
+  checks.push(await checkToken(base, (await resolveNodeCredential()).token, f));
   const sidecar = findSidecarEntry();
   checks.push({
     name: "sidecar",
@@ -22948,7 +23177,7 @@ ${failed.length} problem${failed.length > 1 ? "s" : ""} above.
 
 // src/repl.ts
 import { createInterface } from "node:readline";
-import { PermissionService as PermissionService2 } from "@corenel/harness/guardrail/permission-service";
+import { PermissionService as PermissionService3 } from "@corenel/harness/guardrail/permission-service";
 import { STANDARD_POLICY as STANDARD_POLICY2 } from "@corenel/harness/guardrail/builtins";
 import { TermSession } from "@corenel/term/session";
 import { describeToolCall, formatOrd } from "@corenel/term/describe";
@@ -23126,7 +23355,7 @@ async function runRepl(deps) {
     }
   };
   rl.on("SIGINT", onSigint);
-  const permission = new PermissionService2({
+  const permission = new PermissionService3({
     policy: deps.policy ?? STANDARD_POLICY2,
     prompt: {
       ask: async (req) => {
@@ -23804,7 +24033,7 @@ async function resolvePolicy(opts) {
 // src/cli.ts
 var EXIT_POLICY_PARK_REFUSED = 3;
 async function agentSetup(argv) {
-  setGatewayBase2(apiBase(flag(argv, "base", "")));
+  setGatewayBase2(await apiBase(flag(argv, "base", "")));
   const token = await nodeAuthToken().getToken();
   if (!token) {
     process.stderr.write("corenel: not signed in.\n  Run `corenel login`, or set CORENEL_TOKEN=<token> (a gateway bearer token), then try again.\n");
@@ -23890,7 +24119,7 @@ async function run(argv) {
       process.exitCode = EXIT_POLICY_PARK_REFUSED;
       return;
     }
-    const permission = new PermissionService3({
+    const permission = new PermissionService4({
       policy,
       ceiling: mutatingCeiling(tools, "ask"),
       ...unattendedAllow ? { prompt: { ask: async () => "allow" } } : {}
@@ -24089,11 +24318,15 @@ async function main() {
         break;
       }
       case "login": {
-        const base = apiBase(flag(rest, "base", ""));
-        await deviceLogin({ base, store: writeAuthToken });
+        const base = await apiBase(flag(rest, "base", ""));
+        await deviceLogin({
+          base,
+          store: (token, account) => writeLoginCredential(token, { apiBase: base, ...account ? { account } : {} })
+        });
         process.stdout.write(`
 Logged in. Token saved to ${authTokenPath()}
 `);
+        process.stdout.write("If a sidecar daemon is already running, restart it to sign it in as well.\n");
         break;
       }
       case "auth":

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@corenel/cli",
-  "version": "0.4.1",
+  "version": "0.4.3",
   "type": "module",
   "description": "Corenel CLI — runs the harness in node, in-proc, no transport. The headless proof the kernel is host-agnostic. (corenel run/ask/chat/login + start --sidecar to follow.)",
   "bin": {
@@ -9,9 +9,9 @@
   "dependencies": {
     "openai": "^4.77.0",
     "ws": "^8.18.0",
-    "@corenel/harness": "0.4.1",
-    "@corenel/protocol": "0.4.1",
-    "@corenel/term": "0.2.1"
+    "@corenel/harness": "0.6.1",
+    "@corenel/term": "0.2.3",
+    "@corenel/protocol": "0.6.1"
   },
   "devDependencies": {
     "esbuild": "^0.21.5",
@@ -20,7 +20,7 @@
     "tsx": "^4.19.2",
     "typescript": "^5.9.3",
     "@corenel/crew": "0.0.0",
-    "@corenel/tools-node": "0.2.2"
+    "@corenel/tools-node": "0.3.1"
   },
   "publishConfig": {
     "access": "public"
@@ -33,6 +33,11 @@
   "engines": {
     "node": ">=18"
   },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Prompd/prompd-web.git",
+    "directory": "packages/cli"
+  },
   "scripts": {
     "typecheck": "tsc --noEmit",
     "prestart": "pnpm --filter @corenel/protocol build && pnpm --filter @corenel/harness build && pnpm --filter @corenel/term build",