@corenel/cli 0.7.0 → 0.8.0

package/dist/main.js

@@ -390,6 +390,19 @@ var init_fileService = __esm({
         await this.assertReal(a);
         await writeFileAtomic(a, bytes, { shownPath: path });
       }
+      /** O_APPEND, NOT atomic-rename: the point is that another process appending
+       * to the same file at the same moment lands too, and a rename would replace
+       * whatever it wrote. Same confinement as write. */
+      async append(path, content) {
+        const a = await this.writeTarget(path);
+        await fs2.mkdir(dirname2(a), { recursive: true });
+        await this.assertReal(a);
+        try {
+          await fs2.appendFile(a, content, "utf8");
+        } catch (e) {
+          throw diskFullError(path, e) ?? e;
+        }
+      }
       async create(path, content = "") {
         const a = await this.writeTarget(path);
         await fs2.mkdir(dirname2(a), { recursive: true });
@@ -7878,7 +7891,7 @@ var require_public_api = __commonJS({
       }
       return doc;
     }
-    function parse2(src, reviver, options) {
+    function parse3(src, reviver, options) {
       let _reviver = void 0;
       if (typeof reviver === "function") {
         _reviver = reviver;
@@ -7919,7 +7932,7 @@ var require_public_api = __commonJS({
         return value.toString(options);
       return new Document.Document(value, _replacer, options).toString(options);
     }
-    exports.parse = parse2;
+    exports.parse = parse3;
     exports.parseAllDocuments = parseAllDocuments;
     exports.parseDocument = parseDocument;
     exports.stringify = stringify2;
@@ -8445,7 +8458,7 @@ var require_parse = __commonJS({
   "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/parse.js"(exports, module) {
     "use strict";
     var SemVer = require_semver();
-    var parse2 = (version2, options, throwErrors = false) => {
+    var parse3 = (version2, options, throwErrors = false) => {
       if (version2 instanceof SemVer) {
         return version2;
       }
@@ -8458,7 +8471,7 @@ var require_parse = __commonJS({
         throw er;
       }
     };
-    module.exports = parse2;
+    module.exports = parse3;
   }
 });
 
@@ -8466,9 +8479,9 @@ var require_parse = __commonJS({
 var require_valid = __commonJS({
   "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/valid.js"(exports, module) {
     "use strict";
-    var parse2 = require_parse();
+    var parse3 = require_parse();
     var valid = (version2, options) => {
-      const v = parse2(version2, options);
+      const v = parse3(version2, options);
       return v ? v.version : null;
     };
     module.exports = valid;
@@ -8479,9 +8492,9 @@ var require_valid = __commonJS({
 var require_clean = __commonJS({
   "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/clean.js"(exports, module) {
     "use strict";
-    var parse2 = require_parse();
+    var parse3 = require_parse();
     var clean = (version2, options) => {
-      const s = parse2(version2.trim().replace(/^[=v]+/, ""), options);
+      const s = parse3(version2.trim().replace(/^[=v]+/, ""), options);
       return s ? s.version : null;
     };
     module.exports = clean;
@@ -8516,10 +8529,10 @@ var require_inc = __commonJS({
 var require_diff = __commonJS({
   "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/diff.js"(exports, module) {
     "use strict";
-    var parse2 = require_parse();
+    var parse3 = require_parse();
     var diff = (version1, version2) => {
-      const v1 = parse2(version1, null, true);
-      const v2 = parse2(version2, null, true);
+      const v1 = parse3(version1, null, true);
+      const v2 = parse3(version2, null, true);
       const comparison = v1.compare(v2);
       if (comparison === 0) {
         return null;
@@ -8590,9 +8603,9 @@ var require_patch = __commonJS({
 var require_prerelease = __commonJS({
   "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/prerelease.js"(exports, module) {
     "use strict";
-    var parse2 = require_parse();
+    var parse3 = require_parse();
     var prerelease = (version2, options) => {
-      const parsed = parse2(version2, options);
+      const parsed = parse3(version2, options);
       return parsed && parsed.prerelease.length ? parsed.prerelease : null;
     };
     module.exports = prerelease;
@@ -8778,7 +8791,7 @@ var require_coerce = __commonJS({
   "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/coerce.js"(exports, module) {
     "use strict";
     var SemVer = require_semver();
-    var parse2 = require_parse();
+    var parse3 = require_parse();
     var { safeRe: re, t } = require_re();
     var coerce = (version2, options) => {
       if (version2 instanceof SemVer) {
@@ -8813,7 +8826,7 @@ var require_coerce = __commonJS({
       const patch = match[4] || "0";
       const prerelease = options.includePrerelease && match[5] ? `-${match[5]}` : "";
       const build = options.includePrerelease && match[6] ? `+${match[6]}` : "";
-      return parse2(`${major}.${minor}.${patch}${prerelease}${build}`, options);
+      return parse3(`${major}.${minor}.${patch}${prerelease}${build}`, options);
     };
     module.exports = coerce;
   }
@@ -8823,7 +8836,7 @@ var require_coerce = __commonJS({
 var require_truncate = __commonJS({
   "../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/truncate.js"(exports, module) {
     "use strict";
-    var parse2 = require_parse();
+    var parse3 = require_parse();
     var constants2 = require_constants();
     var SemVer = require_semver();
     var truncate2 = (version2, truncation, options) => {
@@ -8835,7 +8848,7 @@ var require_truncate = __commonJS({
     };
     var cloneInputVersion = (version2, options) => {
       const versionStringToParse = version2 instanceof SemVer ? version2.version : version2;
-      return parse2(versionStringToParse, options);
+      return parse3(versionStringToParse, options);
     };
     var doTruncation = (version2, truncation) => {
       if (isPrerelease(truncation)) {
@@ -9877,7 +9890,7 @@ var require_semver2 = __commonJS({
     var constants2 = require_constants();
     var SemVer = require_semver();
     var identifiers = require_identifiers();
-    var parse2 = require_parse();
+    var parse3 = require_parse();
     var valid = require_valid();
     var clean = require_clean();
     var inc = require_inc();
@@ -9916,7 +9929,7 @@ var require_semver2 = __commonJS({
     var simplifyRange = require_simplify();
     var subset = require_subset();
     module.exports = {
-      parse: parse2,
+      parse: parse3,
       valid,
       clean,
       inc,
@@ -12303,7 +12316,7 @@ var require_parser2 = __commonJS({
         }
         return buf;
       };
-      _proto.parse = function parse2() {
+      _proto.parse = function parse3() {
         return new nodes.NodeList(0, 0, this.parseNodes());
       };
       _proto.parseAsRoot = function parseAsRoot() {
@@ -12312,7 +12325,7 @@ var require_parser2 = __commonJS({
       return Parser2;
     }(Obj);
     module.exports = {
-      parse: function parse2(src, extensions, opts) {
+      parse: function parse3(src, extensions, opts) {
         var p = new Parser(lexer.lex(src, opts));
         if (extensions !== void 0) {
           p.extensions = extensions;
@@ -13894,7 +13907,7 @@ var require_filters = __commonJS({
       return r.copySafeness(str, res);
     }
     _exports.indent = indent;
-    function join13(arr, del, attr) {
+    function join14(arr, del, attr) {
       del = del || "";
       if (attr) {
         arr = lib.map(arr, function(v) {
@@ -13903,7 +13916,7 @@ var require_filters = __commonJS({
       }
       return arr.join(del);
     }
-    _exports.join = join13;
+    _exports.join = join14;
     function last(arr) {
       return arr[arr.length - 1];
     }
@@ -21103,7 +21116,7 @@ var require_extension = __commonJS({
       if (dest[name] === void 0) dest[name] = [elem];
       else dest[name].push(elem);
     }
-    function parse2(header) {
+    function parse3(header) {
       const offers = /* @__PURE__ */ Object.create(null);
       let params = /* @__PURE__ */ Object.create(null);
       let mustUnescape = false;
@@ -21243,7 +21256,7 @@ var require_extension = __commonJS({
         }).join(", ");
       }).join(", ");
     }
-    module.exports = { format, parse: parse2 };
+    module.exports = { format, parse: parse3 };
   }
 });
 
@@ -21277,7 +21290,7 @@ var require_websocket = __commonJS({
     var {
       EventTarget: { addEventListener, removeEventListener }
     } = require_event_target();
-    var { format, parse: parse2 } = require_extension();
+    var { format, parse: parse3 } = require_extension();
     var { toBuffer } = require_buffer_util();
     var kAborted = Symbol("kAborted");
     var protocolVersions = [8, 13];
@@ -21954,7 +21967,7 @@ var require_websocket = __commonJS({
           }
           let extensions;
           try {
-            extensions = parse2(secWebSocketExtensions);
+            extensions = parse3(secWebSocketExtensions);
           } catch (err) {
             const message = "Invalid Sec-WebSocket-Extensions header";
             abortHandshake(websocket, socket, message);
@@ -22246,7 +22259,7 @@ var require_subprotocol = __commonJS({
   "../../node_modules/.pnpm/ws@8.21.0/node_modules/ws/lib/subprotocol.js"(exports, module) {
     "use strict";
     var { tokenChars } = require_validation();
-    function parse2(header) {
+    function parse3(header) {
       const protocols = /* @__PURE__ */ new Set();
       let start = -1;
       let end = -1;
@@ -22282,7 +22295,7 @@ var require_subprotocol = __commonJS({
       protocols.add(protocol);
       return protocols;
     }
-    module.exports = { parse: parse2 };
+    module.exports = { parse: parse3 };
   }
 });
 
@@ -24865,7 +24878,7 @@ async function deviceLogin(opts) {
       );
     }
   };
-  const dc = await post("/oauth/device/code", { client_id: "corenel-cli", scope: "agent" });
+  const dc = await post("/oauth/device/code", { client_id: "corenel-cli", scope: "agent pair" });
   if (!dc.device_code) throw new Error("device authorization failed");
   (opts.open ?? defaultOpen)(dc.verification_uri, dc.user_code);
   let interval = opts.pollMs ?? Math.max(MIN_POLL_MS, (dc.interval ?? 5) * 1e3);
@@ -24913,8 +24926,8 @@ var InvalidApiBaseError = class extends Error {
     this.name = "InvalidApiBaseError";
   }
 };
-function isLoopback(hostname) {
-  const h = hostname.replace(/^\[|\]$/g, "").toLowerCase();
+function isLoopback(hostname2) {
+  const h = hostname2.replace(/^\[|\]$/g, "").toLowerCase();
   return h === "localhost" || h === "127.0.0.1" || h === "::1" || h.endsWith(".localhost");
 }
 var warnedCleartext = false;
@@ -25417,6 +25430,7 @@ var KNOWN_KEYS = [
   "addUnder",
   "cloneUnder",
   "allowLan",
+  "behindTlsProxy",
   "allowOrigins",
   "tlsCert",
   "tlsKey",
@@ -25438,7 +25452,7 @@ var KNOWN_KEYS = [
   "mcpServers",
   "mcpAllow",
   "identityIssuer",
-  "identity",
+  "org",
   "push",
   "audit",
   "sendTelemetry",
@@ -26323,7 +26337,7 @@ import { procTools } from "@corenel/harness/tools/procs";
 
 // src/sidecarConnect.ts
 import { stateDirName as stateDirName5 } from "@corenel/protocol";
-import { SidecarHost } from "@corenel/harness/sidecar/host";
+import { SidecarHost, isSidecarKeyMismatch, isSidecarAccountRefusal } from "@corenel/harness/sidecar/host";
 
 // ../../node_modules/.pnpm/ws@8.21.0/node_modules/ws/wrapper.mjs
 var import_stream = __toESM(require_stream(), 1);
@@ -26486,12 +26500,209 @@ function hostBackedProcs(host, seed = []) {
   };
 }
 
+// src/sidecarDevice.ts
+init_tools_node();
+import { join as join10 } from "node:path";
+import { asEcPublicJwk, generatePrivateJwk, signerFromPrivateJwk } from "@corenel/harness/sidecar/deviceKeys";
+function cliDevicesPath(base) {
+  return join10(corenelDir(base), "cli", "sidecar-devices.json");
+}
+var B64 = /^[A-Za-z0-9_-]{1,64}$/;
+var B43 = /^[A-Za-z0-9_-]{43}$/;
+function isCliDevice(v) {
+  if (typeof v !== "object" || v === null) return false;
+  const r = v;
+  const k = r.privateJwk;
+  return typeof r.id === "string" && B64.test(r.id) && typeof r.sidecarJkt === "string" && B43.test(r.sidecarJkt) && typeof k === "object" && k !== null && !!asEcPublicJwk({ kty: k.kty, crv: k.crv, x: k.x, y: k.y }) && typeof k.d === "string" && B43.test(k.d);
+}
+function parse2(text) {
+  let raw;
+  try {
+    raw = JSON.parse(text);
+  } catch {
+    return null;
+  }
+  const r = raw;
+  if (typeof r !== "object" || r === null || r.version !== 1) return null;
+  if (typeof r.devices !== "object" || r.devices === null || Array.isArray(r.devices)) return null;
+  const devices = /* @__PURE__ */ Object.create(null);
+  for (const [url, d] of Object.entries(r.devices)) {
+    if (!isCliDevice(d)) return null;
+    const k = d.privateJwk;
+    devices[url] = { id: d.id, sidecarJkt: d.sidecarJkt, privateJwk: { kty: k.kty, crv: k.crv, x: k.x, y: k.y, d: k.d } };
+  }
+  return { version: 1, devices };
+}
+function cliDeviceStore(path = cliDevicesPath()) {
+  const file = fileTextStore(path);
+  const dir = join10(path, "..");
+  const load = async () => {
+    const text = await file.read();
+    return text === null ? { version: 1, devices: /* @__PURE__ */ Object.create(null) } : parse2(text);
+  };
+  const change = async (edit) => {
+    const f = await load();
+    if (!f) throw new Error(`${path} is not a file this CLI understands. Remove it to pair again.`);
+    edit(f);
+    await ensurePrivateDir(dir);
+    await file.write(`${JSON.stringify(f, null, 2)}
+`);
+  };
+  return {
+    async get(url) {
+      try {
+        const f = await load();
+        return f && Object.prototype.hasOwnProperty.call(f.devices, url) ? f.devices[url] : void 0;
+      } catch {
+        return void 0;
+      }
+    },
+    set: (url, device) => change((f) => {
+      f.devices[url] = device;
+    }),
+    forget: (url) => change((f) => {
+      delete f.devices[url];
+    })
+  };
+}
+async function sidecarCredential(url, env, store) {
+  const kept = await store.get(url);
+  const enroll = env.CORENEL_SIDECAR_CODE || void 0;
+  if (!kept && !enroll) return null;
+  const privateJwk = kept?.privateJwk ?? await generatePrivateJwk();
+  return {
+    ...enroll ? { enroll } : {},
+    ...kept ? { device: { id: kept.id, sidecarJkt: kept.sidecarJkt } } : {},
+    deviceKey: await signerFromPrivateJwk(privateJwk),
+    privateJwk
+  };
+}
+
+// src/sidecarIdentity.ts
+function cliIdentity(o) {
+  const fetchImpl = o.fetchImpl ?? fetch;
+  const timeoutMs = o.timeoutMs ?? 8e3;
+  let last = null;
+  return {
+    problem: () => last,
+    answer: async ({ nonce, sidecarId, jkt, orgId }) => {
+      last = null;
+      let token;
+      try {
+        token = await o.token();
+      } catch {
+        token = null;
+      }
+      if (!token) {
+        last = "this CLI is not signed in, and the sidecar only admits a verified account. Run `corenel login` (or set CORENEL_TOKEN), then try again.";
+        return null;
+      }
+      try {
+        const base = (await o.base()).replace(/\/+$/, "");
+        const res = await fetchImpl(`${base}/v1/pairing-assertions`, {
+          method: "POST",
+          headers: { "Content-Type": "application/json", Authorization: `Bearer ${token}` },
+          body: JSON.stringify({ aud: sidecarId, nonce, jkt, ...orgId ? { org_id: orgId } : {} }),
+          signal: AbortSignal.timeout(timeoutMs)
+        });
+        if (res.status === 403) {
+          let code3;
+          try {
+            code3 = (await res.json())?.code;
+          } catch {
+            code3 = void 0;
+          }
+          if (code3 === "CLI_SCOPE") {
+            last = "this CLI sign-in is not allowed to connect to sidecars. Run `corenel login` again and allow sidecar access when you approve it.";
+            return null;
+          }
+          if (orgId) {
+            last = `your account is not a member of the organization this sidecar admits (${orgId}).`;
+            return null;
+          }
+        }
+        if (res.status === 401) {
+          last = "the API refused this CLI sign-in. Run `corenel login` again, then try again.";
+          return null;
+        }
+        if (!res.ok) {
+          last = `could not get a pairing assertion from ${base} (HTTP ${res.status}).`;
+          return null;
+        }
+        const body = await res.json();
+        const assertion = body?.assertion;
+        if (typeof assertion !== "string" || !assertion) {
+          last = `${base} answered without a pairing assertion.`;
+          return null;
+        }
+        return assertion;
+      } catch (e) {
+        last = `could not reach the API for a pairing assertion (${e instanceof Error ? e.message : String(e)}).`;
+        return null;
+      }
+    }
+  };
+}
+
 // src/sidecarConnect.ts
+init_tools_node();
+import { hostname } from "node:os";
 var CONNECT_TIMEOUT_MS = 3e3;
-async function connectSidecarProcs(env = process.env) {
+var HANDSHAKE_TIMEOUT_MS = 15e3;
+function cliDeviceName(host = hostname) {
+  let h = "";
+  try {
+    h = host().trim();
+  } catch {
+    h = "";
+  }
+  return h ? `CLI on ${h}` : "CLI";
+}
+function defaultCliIdentity(env) {
+  return cliIdentity({ base: () => apiBase(void 0, { env }), token: () => nodeAuthToken().getToken() });
+}
+async function reportHandshakeFailure(e, url, usedDevice, store, identity2, fallback) {
+  const msg = e instanceof Error ? e.message : String(e);
+  if (isSidecarKeyMismatch(e)) {
+    process.stderr.write(`corenel: sidecar connection at ${url} failed to complete: ${msg} -- ${fallback}
+`);
+    process.stderr.write(mismatchNote(url));
+    return;
+  }
+  if (isSidecarAccountRefusal(e)) {
+    const problem = identity2.problem() ?? "the sidecar verified this account and did not admit it (not its owner, or not a member of its organization, or a device another member paired).";
+    process.stderr.write(`corenel: the sidecar at ${url} did not accept this CLI: ${problem} -- ${fallback}
+`);
+    return;
+  }
+  process.stderr.write(`corenel: sidecar connection at ${url} failed to complete: ${msg} -- ${fallback}
+`);
+  if (usedDevice && /denied/.test(msg)) await store.forget(url).catch(() => void 0);
+}
+async function credentialOptions(url, env, store) {
+  const cred = await sidecarCredential(url, env, store);
+  if (!cred) return null;
+  const { privateJwk, ...host } = cred;
+  return {
+    ...host,
+    usedDevice: !!cred.device,
+    onDeviceIssued: (device) => {
+      store.set(url, { ...device, privateJwk }).catch((e) => {
+        process.stderr.write(`corenel: paired, but could not keep the device key: ${e instanceof Error ? e.message : String(e)}
+`);
+      });
+    }
+  };
+}
+function mismatchNote(url) {
+  return `corenel: the sidecar at ${url} is not the sidecar this CLI paired with (its key does not match the pinned fingerprint). Check the address. If that sidecar was reinstalled, pair again with a fresh code (CORENEL_SIDECAR_CODE from \`corenel-sidecar pair\`).
+`;
+}
+async function connectSidecarProcs(env = process.env, store = cliDeviceStore(), identity2 = defaultCliIdentity(env)) {
   const url = env.CORENEL_SIDECAR_URL;
-  const token = env.CORENEL_SIDECAR_TOKEN;
-  if (!url || !token) return null;
+  if (!url) return null;
+  const cred = await credentialOptions(url, env, store);
+  if (!cred) return null;
   const ac = new AbortController();
   const timer = setTimeout(() => ac.abort(), CONNECT_TIMEOUT_MS);
   let channel;
@@ -26506,24 +26717,23 @@ async function connectSidecarProcs(env = process.env) {
   } finally {
     clearTimeout(timer);
   }
+  const { usedDevice, ...credential } = cred;
   const host = new SidecarHost({
     channel,
-    token,
+    ...credential,
     stateDir: stateDirName5(),
     clientId: `corenel-cli-${process.pid}`,
-    clientName: "corenel-cli",
+    clientName: cliDeviceName(),
+    onIdentityChallenge: identity2.answer,
     providers: {},
     registerTool: () => {
     }
   });
   try {
-    await host.connect(CONNECT_TIMEOUT_MS);
+    await host.connect(HANDSHAKE_TIMEOUT_MS);
   } catch (e) {
-    process.stderr.write(
-      `corenel: sidecar connection at ${url} failed to complete: ${e instanceof Error ? e.message : String(e)} -- continuing without proc_start/proc_stop/proc_list.
-`
-    );
     host.disconnect("handshake failed");
+    await reportHandshakeFailure(e, url, usedDevice, store, identity2, "continuing without proc_start/proc_stop/proc_list.");
     return null;
   }
   if (!host.supportsProcs()) {
@@ -26533,10 +26743,11 @@ async function connectSidecarProcs(env = process.env) {
   const seed = await host.procList().catch(() => []);
   return { procs: hostBackedProcs(host, seed), disconnect: () => host.disconnect() };
 }
-async function connectMcpAdmin(env = process.env) {
+async function connectMcpAdmin(env = process.env, store = cliDeviceStore(), identity2 = defaultCliIdentity(env)) {
   const url = env.CORENEL_SIDECAR_URL;
-  const token = env.CORENEL_SIDECAR_TOKEN;
-  if (!url || !token) return null;
+  if (!url) return null;
+  const cred = await credentialOptions(url, env, store);
+  if (!cred) return null;
   const ac = new AbortController();
   const timer = setTimeout(() => ac.abort(), CONNECT_TIMEOUT_MS);
   let channel;
@@ -26551,24 +26762,23 @@ async function connectMcpAdmin(env = process.env) {
   } finally {
     clearTimeout(timer);
   }
+  const { usedDevice, ...credential } = cred;
   const host = new SidecarHost({
     channel,
-    token,
+    ...credential,
     stateDir: stateDirName5(),
     clientId: `corenel-cli-${process.pid}`,
-    clientName: "corenel-cli",
+    clientName: cliDeviceName(),
+    onIdentityChallenge: identity2.answer,
     providers: {},
     registerTool: () => {
     }
   });
   try {
-    await host.connect(CONNECT_TIMEOUT_MS);
+    await host.connect(HANDSHAKE_TIMEOUT_MS);
   } catch (e) {
-    process.stderr.write(
-      `corenel: sidecar connection at ${url} failed to complete: ${e instanceof Error ? e.message : String(e)} -- writing MCP config locally instead.
-`
-    );
     host.disconnect("handshake failed");
+    await reportHandshakeFailure(e, url, usedDevice, store, identity2, "writing MCP config locally instead.");
     return null;
   }
   if (!host.supportsMcpAdmin()) {
@@ -26823,7 +27033,7 @@ async function resolveStrategyPrompt(files, id) {
 // src/policyResolve.ts
 import { readFile as readFile2 } from "node:fs/promises";
 import { homedir as homedir3 } from "node:os";
-import { join as join10 } from "node:path";
+import { join as join11 } from "node:path";
 import { stateDirName as stateDirName6 } from "@corenel/protocol";
 import { BUILTIN_POLICIES, STANDARD_POLICY as STANDARD_POLICY3, policyFromYaml } from "@corenel/harness/guardrail";
 var PolicyResolutionError = class extends Error {
@@ -26883,10 +27093,10 @@ async function resolvePolicy(opts) {
     );
     return { policy, source: { kind: "file", path: flag2 } };
   }
-  const projectPath = join10(cwd, stateDirName6(), "policy.yaml");
+  const projectPath = join11(cwd, stateDirName6(), "policy.yaml");
   const project = await loadDiscoveredPolicyFile(projectPath);
   if (project) return { policy: project, source: { kind: "project", path: projectPath } };
-  const userPath = join10(homedir3(), stateDirName6(), "policy.yaml");
+  const userPath = join11(homedir3(), stateDirName6(), "policy.yaml");
   const user = await loadDiscoveredPolicyFile(userPath);
   if (user) return { policy: user, source: { kind: "user", path: userPath } };
   return { policy: STANDARD_POLICY3, source: { kind: "default" } };
@@ -27747,9 +27957,9 @@ function gatedAgentTools(registry, policy) {
 // ../mcp/src/cache.ts
 import { createHash as createHash2 } from "node:crypto";
 import { readFile as readFile4, writeFile as writeFile3, mkdir as mkdir3, rename as rename2 } from "node:fs/promises";
-import { dirname as dirname8, join as join11 } from "node:path";
+import { dirname as dirname8, join as join12 } from "node:path";
 function toolCachePath(stateDir) {
-  return join11(stateDir, "mcp-tools.json");
+  return join12(stateDir, "mcp-tools.json");
 }
 function credentialFingerprint(cred) {
   if (!cred) return "none";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@corenel/cli",
-  "version": "0.7.0",
+  "version": "0.8.0",
   "type": "module",
   "description": "Corenel CLI — runs the harness in node, in-proc, no transport. The headless proof the kernel is host-agnostic. (corenel run/ask/chat/login + start --sidecar to follow.)",
   "bin": {
@@ -9,11 +9,11 @@
   "dependencies": {
     "openai": "^4.77.0",
     "ws": "^8.18.0",
-    "@corenel/config": "0.4.0",
-    "@corenel/harness": "0.11.0",
-    "@corenel/mcp": "0.3.0",
-    "@corenel/protocol": "0.10.0",
-    "@corenel/term": "0.5.0"
+    "@corenel/config": "0.6.0",
+    "@corenel/mcp": "0.4.0",
+    "@corenel/protocol": "0.12.0",
+    "@corenel/harness": "0.13.0",
+    "@corenel/term": "0.7.0"
   },
   "devDependencies": {
     "esbuild": "^0.21.5",
@@ -22,7 +22,7 @@
     "tsx": "^4.19.2",
     "typescript": "^5.9.3",
     "@corenel/crew": "0.0.0",
-    "@corenel/tools-node": "0.5.1"
+    "@corenel/tools-node": "0.7.0"
   },
   "publishConfig": {
     "access": "public"