@corenel/cli 0.5.0 → 0.6.0

package/dist/main.js

@@ -18404,6 +18404,25 @@ ${firstUserMsg.content}`;
   }
 });
 
+// ../tools-node/toolGuidance.ts
+function nodeToolGuidance(toolNames) {
+  const has = new Set(toolNames);
+  const parts = [];
+  if (has.has(SHELL_TOOL)) parts.push(SHELL);
+  if (PROC_TOOLS.some((t) => has.has(t))) parts.push(PROCS);
+  return parts.join("\n\n");
+}
+var SHELL_TOOL, PROC_TOOLS, SHELL, PROCS;
+var init_toolGuidance = __esm({
+  "../tools-node/toolGuidance.ts"() {
+    "use strict";
+    SHELL_TOOL = "shell";
+    PROC_TOOLS = ["proc_start", "proc_stop", "proc_list"];
+    SHELL = `Running a command is often the shortest correct answer: use \`${SHELL_TOOL}\` for anything a command already does well -- listing, searching, git, package managers, build and test runners -- instead of reconstructing it from file reads. It waits for the command to finish and returns its output, so it is the wrong tool for anything that does not exit on its own.`;
+    PROCS = `A command that keeps running (a dev server, a watcher, a queue worker) belongs to \`${PROC_TOOLS[0]}\`, not \`${SHELL_TOOL}\` -- starting one with \`${SHELL_TOOL}\` hangs the turn until it is killed. Use \`${PROC_TOOLS[2]}\` to see what is already running before starting anything, and \`${PROC_TOOLS[1]}\` to stop what you started. Do not stop a process you did not start.`;
+  }
+});
+
 // ../tools-node/promptHost.ts
 import { normalizeFilePath as normalizeFilePath2, flattenFiles as flattenFiles2 } from "@corenel/protocol";
 function backend(svc) {
@@ -18462,8 +18481,22 @@ function nodePromptHost(workspace, project) {
       sources[p] = liveSrc;
       return compile("", values, new HybridFileSystem(sources, backend(workspace)), "/" + p);
     },
-    siteIndex: () => ""
+    siteIndex: () => "",
     // no site index in node (the help chat is browser-only)
+    /* Who the agent says it IS. Without this, `composeAgentSystem` falls back
+     * to its `'Prompd'` default and the `corenel` binary's agent introduced
+     * itself as "the Prompd assistant" -- the same leak already fixed for the
+     * browser help chat (composeHelpSystem) and missed here, because the node
+     * host is the one PromptHost that never implemented the hook.
+     *
+     * Constant, not a parameter: every node consumer of this host (the CLI and
+     * the sidecar) IS Corenel. A host that is not should implement its own. */
+    appName: () => "Corenel",
+    /* The product's guidance for the tools this run actually has -- the shell,
+     * long-running processes, and deferred MCP tools. Gated per tool inside
+     * nodeToolGuidance, because this same host serves the sidecar, whose shell
+     * is behind --allow-shell. */
+    toolGuidance: (names) => nodeToolGuidance(names)
   };
 }
 var parser, compiler;
@@ -18471,6 +18504,7 @@ var init_promptHost = __esm({
   "../tools-node/promptHost.ts"() {
     "use strict";
     init_dist();
+    init_toolGuidance();
     parser = new PrompdParser();
     compiler = new PrompdCompiler();
   }
@@ -22305,7 +22339,7 @@ var require_websocket_server = __commonJS({
 init_tools_node();
 import { runAgent as runAgent2 } from "@corenel/harness/core/loop";
 import { createChatClient as createChatClient2, setGatewayBase as setGatewayBase2 } from "@corenel/harness/providers/gateway";
-import { resolveContextWindow as resolveContextWindow2 } from "@corenel/harness/providers/contextWindow";
+import { resolveContextWindow as resolveContextWindow2, resolveContextWindowWithHydration } from "@corenel/harness/providers/contextWindow";
 import { allTools as allTools3 } from "@corenel/harness/tools/builtins";
 import { registerGuard as registerGuard2 } from "@corenel/harness/guards";
 import { setPromptHost } from "@corenel/harness/prompts/host";
@@ -22355,8 +22389,8 @@ function inMemoryMemory() {
     async forget(name) {
       items.delete(name);
     }
-    // No core(): this stub has no tiers, and Task 9 injects nothing rather than
-    // pretending it has a memory block.
+    // No core(): this stub has no tiers, and compose injects nothing rather
+    // than pretending it has a memory block.
   };
 }
 function inMemoryKv() {
@@ -22416,168 +22450,6 @@ function nodeToolCtx(signal, opts = {}) {
   return { signal, ...base, ...spawn4 ? { spawn: spawn4 } : {} };
 }
 
-// src/tokenGuard.ts
-function tokenGuard(getToken) {
-  return {
-    id: "token",
-    appliesTo: (f) => f === "llm-execution",
-    check: () => getToken() ? { allowed: true } : { allowed: false, guardId: "token", reason: "no CORENEL_TOKEN \u2014 run `corenel login`", action: { kind: "sign-in" } }
-  };
-}
-
-// src/login.ts
-var sleep = (ms) => new Promise((r) => setTimeout(r, ms));
-var MIN_POLL_MS = 1e3;
-var DEFAULT_LIFETIME_S = 900;
-var ACCOUNT_LOOKUP_MS = 5e3;
-function deadlineSignal(ms, outer) {
-  const ac = new AbortController();
-  const onOuter = () => ac.abort();
-  const timer = setTimeout(() => ac.abort(), ms);
-  if (outer) {
-    if (outer.aborted) ac.abort();
-    else outer.addEventListener("abort", onOuter, { once: true });
-  }
-  return {
-    signal: ac.signal,
-    dispose: () => {
-      clearTimeout(timer);
-      outer?.removeEventListener("abort", onOuter);
-    }
-  };
-}
-async function whoIsThis(base, token, f, outer, deadlineMs = ACCOUNT_LOOKUP_MS) {
-  const { signal, dispose } = deadlineSignal(deadlineMs, outer);
-  try {
-    const res = await f(`${base}/auth/me`, {
-      headers: { Authorization: `Bearer ${token}` },
-      signal
-    });
-    if (!res.ok) return void 0;
-    const body = JSON.parse(await res.text());
-    const email = body?.user?.email;
-    if (typeof email !== "string") return void 0;
-    const trimmed = email.trim();
-    return trimmed ? trimmed : void 0;
-  } catch {
-    return void 0;
-  } finally {
-    dispose();
-  }
-}
-function defaultOpen(uri, code2) {
-  process.stdout.write(`
-  To authorize, open:  ${uri}
-  and enter the code:  ${code2}
-
-  Waiting for authorization\u2026
-`);
-}
-async function deviceLogin(opts) {
-  const f = opts.fetchImpl ?? fetch;
-  const base = opts.base.replace(/\/$/, "");
-  const post = async (path, body) => {
-    const url = `${base}${path}`;
-    const res = await f(url, {
-      method: "POST",
-      headers: { "Content-Type": "application/json" },
-      body: JSON.stringify(body),
-      signal: opts.signal
-    });
-    const text = await res.text();
-    try {
-      return JSON.parse(text);
-    } catch {
-      const looksLikeHtml = /^\s*</.test(text);
-      throw new Error(
-        `${url} answered ${res.status} with ${looksLikeHtml ? "an HTML page" : "a non-JSON body"}, not JSON.` + (res.status === 404 ? `
-  That usually means --base is wrong. The device endpoints live under /api \u2014 try --base ${base.replace(/\/api$/, "")}/api` : "")
-      );
-    }
-  };
-  const dc = await post("/oauth/device/code", { client_id: "corenel-cli", scope: "agent" });
-  if (!dc.device_code) throw new Error("device authorization failed");
-  (opts.open ?? defaultOpen)(dc.verification_uri, dc.user_code);
-  let interval = opts.pollMs ?? Math.max(MIN_POLL_MS, (dc.interval ?? 5) * 1e3);
-  const lifetimeMs = (typeof dc.expires_in === "number" && dc.expires_in > 0 ? dc.expires_in : DEFAULT_LIFETIME_S) * 1e3;
-  const deadline = Date.now() + lifetimeMs;
-  for (; ; ) {
-    if (opts.signal?.aborted) throw new Error("login cancelled");
-    if (Date.now() >= deadline) {
-      throw new Error(`the code ${dc.user_code} expired before it was authorized -- run \`corenel login\` again`);
-    }
-    await sleep(interval);
-    const tok = await post("/oauth/token", {
-      grant_type: "urn:ietf:params:oauth:grant-type:device_code",
-      device_code: dc.device_code,
-      client_id: "corenel-cli"
-    });
-    if (tok.access_token) {
-      const claimed = typeof tok.account === "string" ? tok.account.trim() : "";
-      const account = claimed || await whoIsThis(base, tok.access_token, f, opts.signal, opts.accountLookupMs);
-      await opts.store(tok.access_token, account || void 0);
-      return tok.access_token;
-    }
-    if (tok.error === "authorization_pending") continue;
-    if (tok.error === "slow_down") {
-      interval += 5e3;
-      continue;
-    }
-    throw new Error(tok.error_description || tok.error || "login failed");
-  }
-}
-
-// src/runAgent.ts
-import { runAgent } from "@corenel/harness/core/loop";
-import { createChatClient, setGatewayBase } from "@corenel/harness/providers/gateway";
-
-// src/apiBase.ts
-init_tools_node();
-import { DEFAULT_API_BASE as DEFAULT_API_BASE2 } from "@corenel/protocol";
-var InvalidApiBaseError = class extends Error {
-  constructor(value, why) {
-    super(`invalid API base ${JSON.stringify(value)} -- ${why}`);
-    this.value = value;
-    this.why = why;
-    this.name = "InvalidApiBaseError";
-  }
-};
-function isLoopback(hostname) {
-  const h = hostname.replace(/^\[|\]$/g, "").toLowerCase();
-  return h === "localhost" || h === "127.0.0.1" || h === "::1" || h.endsWith(".localhost");
-}
-var warnedCleartext = false;
-async function apiBase(explicit, opts = {}) {
-  const resolved = await resolveApiBase({
-    explicit,
-    env: opts.env ?? process.env,
-    ...opts.stateDir ? { stateDir: opts.stateDir } : {}
-  });
-  const value = resolved.base;
-  let url;
-  try {
-    url = new URL(value);
-  } catch {
-    throw new InvalidApiBaseError(value, "it is not a URL (a base needs a scheme, e.g. https://api.corenel.ai/api)");
-  }
-  if (url.protocol !== "https:" && url.protocol !== "http:") {
-    throw new InvalidApiBaseError(value, `the scheme must be https or http, not ${url.protocol.replace(/:$/, "")}`);
-  }
-  if (url.protocol === "http:" && !isLoopback(url.hostname) && !warnedCleartext) {
-    warnedCleartext = true;
-    process.stderr.write(
-      `corenel: warning: ${url.host} is plain http, so your access token is sent in cleartext. Use https unless this host is on a private network you trust.
-`
-    );
-  }
-  return value;
-}
-
-// src/runAgent.ts
-import { allTools as allTools2 } from "@corenel/harness/tools/builtins";
-import { registerGuard } from "@corenel/harness/guards";
-import { composeAgentSystem } from "@corenel/harness/prompts";
-
 // ../crew/frontmatter.ts
 var import_yaml = __toESM(require_dist(), 1);
 var FRONTMATTER = /^---\r?\n([\s\S]*?)\r?\n---\r?\n?([\s\S]*)$/;
@@ -22944,7 +22816,181 @@ import { makeRoomTools, ROOM_TOOL_NAMES } from "@corenel/harness/tools/roomTools
 import { describeParticipants, resolveAddressee } from "@corenel/harness/tools/roomTools";
 import { planFindingEdit, planFindingEdits } from "@corenel/harness/rooms/findings";
 
+// src/operatorMemory.ts
+init_tools_node();
+var OPERATOR_MEMORY_DIR = "memory";
+function operatorMemory() {
+  const files = new NodeFileService(configWorkspaceRoot());
+  return makeAgentMemoryProvider(() => files, OPERATOR_MEMORY_DIR);
+}
+function operatorMemoryIndex(memory) {
+  return async () => {
+    const items = await memory.list().catch(() => []);
+    return items.map((i) => `- **${i.name}** \u2014 ${i.description || "(no description)"}`).join("\n");
+  };
+}
+
+// src/tokenGuard.ts
+function tokenGuard(getToken) {
+  return {
+    id: "token",
+    appliesTo: (f) => f === "llm-execution",
+    check: () => getToken() ? { allowed: true } : { allowed: false, guardId: "token", reason: "no CORENEL_TOKEN \u2014 run `corenel login`", action: { kind: "sign-in" } }
+  };
+}
+
+// src/login.ts
+var sleep = (ms) => new Promise((r) => setTimeout(r, ms));
+var MIN_POLL_MS = 1e3;
+var DEFAULT_LIFETIME_S = 900;
+var ACCOUNT_LOOKUP_MS = 5e3;
+function deadlineSignal(ms, outer) {
+  const ac = new AbortController();
+  const onOuter = () => ac.abort();
+  const timer = setTimeout(() => ac.abort(), ms);
+  if (outer) {
+    if (outer.aborted) ac.abort();
+    else outer.addEventListener("abort", onOuter, { once: true });
+  }
+  return {
+    signal: ac.signal,
+    dispose: () => {
+      clearTimeout(timer);
+      outer?.removeEventListener("abort", onOuter);
+    }
+  };
+}
+async function whoIsThis(base, token, f, outer, deadlineMs = ACCOUNT_LOOKUP_MS) {
+  const { signal, dispose } = deadlineSignal(deadlineMs, outer);
+  try {
+    const res = await f(`${base}/auth/me`, {
+      headers: { Authorization: `Bearer ${token}` },
+      signal
+    });
+    if (!res.ok) return void 0;
+    const body = JSON.parse(await res.text());
+    const email = body?.user?.email;
+    if (typeof email !== "string") return void 0;
+    const trimmed = email.trim();
+    return trimmed ? trimmed : void 0;
+  } catch {
+    return void 0;
+  } finally {
+    dispose();
+  }
+}
+function defaultOpen(uri, code2) {
+  process.stdout.write(`
+  To authorize, open:  ${uri}
+  and enter the code:  ${code2}
+
+  Waiting for authorization\u2026
+`);
+}
+async function deviceLogin(opts) {
+  const f = opts.fetchImpl ?? fetch;
+  const base = opts.base.replace(/\/$/, "");
+  const post = async (path, body) => {
+    const url = `${base}${path}`;
+    const res = await f(url, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify(body),
+      signal: opts.signal
+    });
+    const text = await res.text();
+    try {
+      return JSON.parse(text);
+    } catch {
+      const looksLikeHtml = /^\s*</.test(text);
+      throw new Error(
+        `${url} answered ${res.status} with ${looksLikeHtml ? "an HTML page" : "a non-JSON body"}, not JSON.` + (res.status === 404 ? `
+  That usually means --base is wrong. The device endpoints live under /api \u2014 try --base ${base.replace(/\/api$/, "")}/api` : "")
+      );
+    }
+  };
+  const dc = await post("/oauth/device/code", { client_id: "corenel-cli", scope: "agent" });
+  if (!dc.device_code) throw new Error("device authorization failed");
+  (opts.open ?? defaultOpen)(dc.verification_uri, dc.user_code);
+  let interval = opts.pollMs ?? Math.max(MIN_POLL_MS, (dc.interval ?? 5) * 1e3);
+  const lifetimeMs = (typeof dc.expires_in === "number" && dc.expires_in > 0 ? dc.expires_in : DEFAULT_LIFETIME_S) * 1e3;
+  const deadline = Date.now() + lifetimeMs;
+  for (; ; ) {
+    if (opts.signal?.aborted) throw new Error("login cancelled");
+    if (Date.now() >= deadline) {
+      throw new Error(`the code ${dc.user_code} expired before it was authorized -- run \`corenel login\` again`);
+    }
+    await sleep(interval);
+    const tok = await post("/oauth/token", {
+      grant_type: "urn:ietf:params:oauth:grant-type:device_code",
+      device_code: dc.device_code,
+      client_id: "corenel-cli"
+    });
+    if (tok.access_token) {
+      const claimed = typeof tok.account === "string" ? tok.account.trim() : "";
+      const account = claimed || await whoIsThis(base, tok.access_token, f, opts.signal, opts.accountLookupMs);
+      await opts.store(tok.access_token, account || void 0);
+      return tok.access_token;
+    }
+    if (tok.error === "authorization_pending") continue;
+    if (tok.error === "slow_down") {
+      interval += 5e3;
+      continue;
+    }
+    throw new Error(tok.error_description || tok.error || "login failed");
+  }
+}
+
+// src/runAgent.ts
+import { runAgent } from "@corenel/harness/core/loop";
+import { createChatClient, setGatewayBase } from "@corenel/harness/providers/gateway";
+
+// src/apiBase.ts
+init_tools_node();
+import { DEFAULT_API_BASE as DEFAULT_API_BASE2 } from "@corenel/protocol";
+var InvalidApiBaseError = class extends Error {
+  constructor(value, why) {
+    super(`invalid API base ${JSON.stringify(value)} -- ${why}`);
+    this.value = value;
+    this.why = why;
+    this.name = "InvalidApiBaseError";
+  }
+};
+function isLoopback(hostname) {
+  const h = hostname.replace(/^\[|\]$/g, "").toLowerCase();
+  return h === "localhost" || h === "127.0.0.1" || h === "::1" || h.endsWith(".localhost");
+}
+var warnedCleartext = false;
+async function apiBase(explicit, opts = {}) {
+  const resolved = await resolveApiBase({
+    explicit,
+    env: opts.env ?? process.env,
+    ...opts.stateDir ? { stateDir: opts.stateDir } : {}
+  });
+  const value = resolved.base;
+  let url;
+  try {
+    url = new URL(value);
+  } catch {
+    throw new InvalidApiBaseError(value, "it is not a URL (a base needs a scheme, e.g. https://api.corenel.ai/api)");
+  }
+  if (url.protocol !== "https:" && url.protocol !== "http:") {
+    throw new InvalidApiBaseError(value, `the scheme must be https or http, not ${url.protocol.replace(/:$/, "")}`);
+  }
+  if (url.protocol === "http:" && !isLoopback(url.hostname) && !warnedCleartext) {
+    warnedCleartext = true;
+    process.stderr.write(
+      `corenel: warning: ${url.host} is plain http, so your access token is sent in cleartext. Use https unless this host is on a private network you trust.
+`
+    );
+  }
+  return value;
+}
+
 // src/runAgent.ts
+import { allTools as allTools2 } from "@corenel/harness/tools/builtins";
+import { registerGuard } from "@corenel/harness/guards";
+import { composeAgentSystem } from "@corenel/harness/prompts";
 init_tools_node();
 import { stateDirName as stateDirName3 } from "@corenel/protocol";
 import { PermissionService as PermissionService2 } from "@corenel/harness/guardrail/permission-service";
@@ -24275,7 +24321,7 @@ function trim(v) {
 }
 
 // src/cli.ts
-import { hydratePrices } from "@corenel/harness/core/pricing";
+import { hydratePrices, hydrateCatalog } from "@corenel/harness/core/pricing";
 
 // src/modelCatalog.ts
 function modelCatalogEntries(table) {
@@ -25796,9 +25842,22 @@ async function agentSetup(argv) {
   }
   setPromptHost(nodePromptHost(new NodeFileService(configWorkspaceRoot()), new NodeFileService(process.cwd())));
   const identity = createIdentityState();
+  const memory = operatorMemory();
   let system = "You are corenel, a concise CLI assistant.";
   try {
-    system = await composeAgentSystem3({ mode: identity.mode, tools: tools.map((t) => ({ name: t.name, description: t.description })) });
+    system = await composeAgentSystem3({
+      mode: identity.mode,
+      tools: tools.map((t) => ({ name: t.name, description: t.description })),
+      // What this face knows that the model cannot infer. `process.cwd()` and
+      // not the `--root` union: this is where the shell tool runs and where a
+      // relative path resolves, which is the question the facts answer.
+      runFacts: [
+        "Surface: terminal",
+        `Working directory: ${process.cwd()}`,
+        `Platform: ${process.platform}`
+      ],
+      memoryIndex: operatorMemoryIndex(memory)
+    });
   } catch {
   }
   let policy;
@@ -25822,6 +25881,7 @@ async function agentSetup(argv) {
     identity,
     policy,
     policySource,
+    memory,
     mcp,
     disconnect: () => sidecarProcs?.disconnect()
   };
@@ -25842,7 +25902,7 @@ async function run(argv) {
     process.exitCode = ext ? await runExtension(ext, ["run", session, prompt]) : 2;
     return;
   }
-  const { client, model, system, tools, policy, disconnect } = await agentSetup(argv);
+  const { client, model, system, tools, policy, memory, disconnect } = await agentSetup(argv);
   try {
     await runOnce();
   } finally {
@@ -25915,7 +25975,8 @@ async function run(argv) {
       // looser, so it can't be used to route around the default-deny above.
       toolCtx: nodeToolCtx(ac.signal, {
         files: new NodeFileService(process.cwd()),
-        spawn: { tools, client, defaultModel: model, permission }
+        spawn: { tools, client, defaultModel: model, permission },
+        memory
       }),
       signal: ac.signal,
       // The meter is fed from the SAME event stream, one `usage` per model call.
@@ -25943,7 +26004,7 @@ async function run(argv) {
   }
 }
 async function interactive(argv) {
-  const { client, model, tools, identity, policy, policySource, mcp, disconnect } = await agentSetup(argv);
+  const { client, model, tools, identity, policy, policySource, memory, mcp, disconnect } = await agentSetup(argv);
   try {
     await runInteractive();
   } finally {
@@ -25954,10 +26015,18 @@ async function interactive(argv) {
     const cwd = process.cwd();
     let modelRates = null;
     let priceTable = /* @__PURE__ */ new Map();
+    const resolvedWindow = resolveContextWindow2(model);
+    alog("context window", model, resolvedWindow.window, `(${resolvedWindow.source})`);
+    const compression = { mode: "balanced", contextWindow: resolvedWindow.window, strategy: "deferred" };
     const priceBase = await apiBase(flag(argv, "base", ""));
-    void hydratePrices(priceBase, nodeAuthToken().getToken).then((table) => {
-      priceTable = table;
-      modelRates = table.get(model) ?? null;
+    void hydrateCatalog(priceBase, nodeAuthToken().getToken).then(({ prices, windows }) => {
+      priceTable = prices;
+      modelRates = prices.get(model) ?? null;
+      const rehydrated = resolveContextWindowWithHydration(model, windows);
+      if (rehydrated.window !== compression.contextWindow) {
+        compression.contextWindow = rehydrated.window;
+        alog("context window", model, rehydrated.window, `(${rehydrated.source})`);
+      }
     }).catch(() => {
     });
     const files = new NodeFileService(cwd);
@@ -26014,9 +26083,6 @@ async function interactive(argv) {
     const onSessionId = (id) => {
       currentSessionId = id;
     };
-    const resolvedWindow = resolveContextWindow2(model);
-    alog("context window", model, resolvedWindow.window, `(${resolvedWindow.source})`);
-    const compression = { mode: "balanced", contextWindow: resolvedWindow.window, strategy: "deferred" };
     const compaction = {
       summarize: makeSummarizer(client, model),
       onCheckpoint: (body) => makeCheckpointStore(() => files, sessionsRoot()).append(currentSessionId, body)
@@ -26030,13 +26096,14 @@ async function interactive(argv) {
           model,
           rates: () => modelRates,
           // `/context`'s fill fraction. A getter for the reason
-          // TermSessionDeps.contextWindow's field doc gives -- the model is
-          // fixed for a session, so this returns the same number every call
-          // today, but pulling it from `resolvedWindow` (computed once, right
-          // above, from the SAME resolveContextWindow(model) call compaction
-          // itself is sized from) rather than a captured literal keeps it that
-          // way as a consequence of the wiring, not an assumption baked in here.
-          contextWindow: () => resolvedWindow.window,
+          // TermSessionDeps.contextWindow's field doc gives -- and, unlike a
+          // captured literal, it reads `compression.contextWindow` LIVE: that
+          // is the same object the price/window hydration above mutates in
+          // place once the backend answers, so `/context` reports the
+          // hydrated window from the very next turn on, not just what was
+          // known synchronously at launch. Same object compaction itself is
+          // sized from (`compression`, above), so the two can never disagree.
+          contextWindow: () => compression.contextWindow ?? resolvedWindow.window,
           system: systemSource,
           client,
           tools,
@@ -26052,7 +26119,8 @@ async function interactive(argv) {
             files,
             ask,
             spawn: { tools, client, defaultModel: model, permission },
-            recall
+            recall,
+            memory
           }),
           ...approveAll ? { approveAll: true } : {},
           policy,
@@ -26078,8 +26146,8 @@ async function interactive(argv) {
       client,
       model,
       rates: () => modelRates,
-      // See the TUI branch above -- same getter, same `resolvedWindow`.
-      contextWindow: () => resolvedWindow.window,
+      // See the TUI branch above -- same getter, same `compression` object.
+      contextWindow: () => compression.contextWindow ?? resolvedWindow.window,
       system: systemSource,
       tools,
       // The readline face attaches its own PermissionService too (repl.ts) and
@@ -26090,7 +26158,8 @@ async function interactive(argv) {
         files,
         ...ask ? { ask } : {},
         spawn: { tools, client, defaultModel: model, permission },
-        recall
+        recall,
+        memory
       }),
       cwd,
       // --allow-mutations (or its --allow-shell alias) skips the per-command

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@corenel/cli",
-  "version": "0.5.0",
+  "version": "0.6.0",
   "type": "module",
   "description": "Corenel CLI — runs the harness in node, in-proc, no transport. The headless proof the kernel is host-agnostic. (corenel run/ask/chat/login + start --sidecar to follow.)",
   "bin": {
@@ -9,11 +9,11 @@
   "dependencies": {
     "openai": "^4.77.0",
     "ws": "^8.18.0",
-    "@corenel/config": "0.1.0",
-    "@corenel/harness": "0.8.0",
-    "@corenel/mcp": "0.1.0",
-    "@corenel/term": "0.3.0",
-    "@corenel/protocol": "0.7.3"
+    "@corenel/config": "0.2.0",
+    "@corenel/harness": "0.9.0",
+    "@corenel/protocol": "0.8.0",
+    "@corenel/mcp": "0.2.0",
+    "@corenel/term": "0.4.0"
   },
   "devDependencies": {
     "esbuild": "^0.21.5",
@@ -22,7 +22,7 @@
     "tsx": "^4.19.2",
     "typescript": "^5.9.3",
     "@corenel/crew": "0.0.0",
-    "@corenel/tools-node": "0.4.0"
+    "@corenel/tools-node": "0.5.0"
   },
   "publishConfig": {
     "access": "public"