@mafdet/cli 0.4.1 → 0.4.3

package/dist/agent/tools/run-command.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"run-command.d.ts","sourceRoot":"","sources":["../../../src/agent/tools/run-command.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAA+B,cAAc,EAAE,MAAM,YAAY,CAAC;AAE9E,0DAA0D;AAC1D,eAAO,MAAM,kBAAkB,SAAU,CAAC;AAG1C,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED;;;;;;GAMG;AACH,wBAAsB,cAAc,CAClC,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,GAAG,EAAE,MAAM,EACX,SAAS,GAAE,MAA2B,GACrC,OAAO,CAAC,aAAa,CAAC,CAkDxB;AAwBD,eAAO,MAAM,cAAc,EAAE,cAmC5B,CAAC;AAEF,eAAO,MAAM,aAAa,EAAE,cAAc,EAAqB,CAAC"}
+{"version":3,"file":"run-command.d.ts","sourceRoot":"","sources":["../../../src/agent/tools/run-command.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAA+B,cAAc,EAAE,MAAM,YAAY,CAAC;AAE9E,0DAA0D;AAC1D,eAAO,MAAM,kBAAkB,SAAU,CAAC;AAG1C,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED;;;;;;GAMG;AACH,wBAAsB,cAAc,CAClC,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,GAAG,EAAE,MAAM,EACX,SAAS,GAAE,MAA2B,GACrC,OAAO,CAAC,aAAa,CAAC,CAkDxB;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,MAAM,QAAQ,GAChB;IACE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC;CACjC,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;CAClC,CAAC;AAEN,wBAAgB,QAAQ,CACtB,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,OAAO,EACd,QAAQ,GAAE,MAAyB,GAClC,QAAQ,CAaV;AA8BD,eAAO,MAAM,cAAc,EAAE,cAmC5B,CAAC;AAEF,eAAO,MAAM,aAAa,EAAE,cAAc,EAAqB,CAAC"}

package/dist/agent/tools/run-command.js

@@ -48,8 +48,8 @@ export async function executeCommand(argv, cwd, timeoutMs = COMMAND_TIMEOUT_MS)
         const timer = setTimeout(() => {
             timedOut = true;
             killTree(child.pid);
-            // A process ignoring SIGTERM still has to go.
-            setTimeout(() => killTree(child.pid, "SIGKILL"), 2000).unref();
+            // A process ignoring the polite request still has to go.
+            setTimeout(() => killTree(child.pid, true), 2000).unref();
         }, timeoutMs);
         const finish = (code, signal) => {
             clearTimeout(timer);
@@ -59,23 +59,44 @@ export async function executeCommand(argv, cwd, timeoutMs = COMMAND_TIMEOUT_MS)
         child.on("close", (code, signal) => finish(code, signal));
     });
 }
+export function killPlan(pid, force, platform = process.platform) {
+    if (platform === "win32") {
+        return {
+            kind: "spawn",
+            command: "taskkill",
+            args: ["/PID", String(pid), "/T", ...(force ? ["/F"] : [])],
+        };
+    }
+    return {
+        kind: "signal",
+        target: -pid,
+        signal: force ? "SIGKILL" : "SIGTERM",
+    };
+}
 /**
- * Kill the whole process group, not just the child.
+ * Kill the whole tree.
  *
- * Killing the parent alone leaves grandchildren running - the familiar case
- * where a "timed out" test runner keeps holding a port. The negative pid is
- * POSIX; Windows has no process groups in this sense, so there the direct
- * child is killed and the limitation is stated rather than papered over
- * (no Windows machine here to verify a taskkill /T path).
+ * ⚠️ The Windows branch is UNVERIFIED on a real machine. Its shape is tested;
+ * whether `taskkill /T` actually reaches every grandchild of a Node-spawned
+ * process is not something this project has been able to check.
  */
-function killTree(pid, signal = "SIGTERM") {
+function killTree(pid, force = false) {
     if (pid === undefined)
         return;
+    const plan = killPlan(pid, force);
     try {
-        if (process.platform === "win32")
-            process.kill(pid, signal);
-        else
-            process.kill(-pid, signal);
+        if (plan.kind === "signal") {
+            process.kill(plan.target, plan.signal);
+            return;
+        }
+        // Detached and ignored: this is fire-and-forget cleanup, and a taskkill
+        // that fails must not become an unhandled error on the way out.
+        const killer = spawn(plan.command, [...plan.args], {
+            stdio: "ignore",
+            windowsHide: true,
+        });
+        killer.on("error", () => { });
+        killer.unref();
     }
     catch {
         // Already exited, or never became a group leader.

package/dist/api/account.d.ts

@@ -36,4 +36,47 @@ export interface Subscription {
 export declare function fetchWallet(client: HttpClient): Promise<Wallet>;
 export declare function fetchUsage(client: HttpClient, days?: number): Promise<UsageSummary>;
 export declare function fetchSubscription(client: HttpClient): Promise<Subscription>;
+/**
+ * CLI-027 · One settled request as the ledger holds it.
+ *
+ * The whole whitelist the server returns (CLI-026): no prompt, no response, no
+ * tool arguments, no file content, and no session id - the CLI matches on
+ * `request_id` alone, which is why none of that has to leave the machine.
+ */
+export interface LedgerUsageEvent {
+    request_id: string;
+    model_id: string;
+    input_tokens: number;
+    output_tokens: number;
+    platform_charge_micro_usd: string;
+    status: string;
+    created_at: string;
+}
+export interface UsageEventsResult {
+    readonly events: readonly LedgerUsageEvent[];
+    readonly pages: number;
+    /**
+     * True when the walk reached the end of the window.
+     *
+     * When it is false the caller stopped early, and "not found" then means "not
+     * found yet" - reporting it as "the ledger has no such request" would be a
+     * claim the walk did not earn.
+     */
+    readonly exhausted: boolean;
+}
+/** Hard stop on paging, so a busy key cannot turn one command into hundreds. */
+export declare const MAX_USAGE_EVENT_PAGES = 20;
+/**
+ * Walk this key's settled requests, newest first.
+ *
+ * Stops as soon as every id in `wanted` has been seen: a session of three
+ * requests should cost one page, not a full sweep of the window. Passing no
+ * `wanted` set walks until the pages run out.
+ */
+export declare function fetchUsageEvents(client: HttpClient, options?: {
+    days?: number;
+    wanted?: ReadonlySet<string>;
+    maxPages?: number;
+    signal?: AbortSignal;
+}): Promise<UsageEventsResult>;
 //# sourceMappingURL=account.d.ts.map

package/dist/api/account.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"account.d.ts","sourceRoot":"","sources":["../../src/api/account.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAE5C;;;GAGG;AAEH,MAAM,WAAW,MAAM;IACrB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,EAAE,MAAM,CAAC;IACzB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,UAAU,CAAC,EAAE;QACX,mBAAmB,EAAE,MAAM,CAAC;QAC5B,cAAc,EAAE,MAAM,CAAC;QACvB,mBAAmB,EAAE,MAAM,CAAC;QAC5B,aAAa,EAAE,MAAM,CAAC;QACtB,KAAK,EAAE,MAAM,CAAC;KACf,CAAC;CACH;AAyBD,wBAAsB,WAAW,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAKrE;AAED,wBAAsB,UAAU,CAC9B,MAAM,EAAE,UAAU,EAClB,IAAI,CAAC,EAAE,MAAM,GACZ,OAAO,CAAC,YAAY,CAAC,CAMvB;AAED,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC,YAAY,CAAC,CAKvB"}
+{"version":3,"file":"account.d.ts","sourceRoot":"","sources":["../../src/api/account.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAE5C;;;GAGG;AAEH,MAAM,WAAW,MAAM;IACrB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,EAAE,MAAM,CAAC;IACzB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,UAAU,CAAC,EAAE;QACX,mBAAmB,EAAE,MAAM,CAAC;QAC5B,cAAc,EAAE,MAAM,CAAC;QACvB,mBAAmB,EAAE,MAAM,CAAC;QAC5B,aAAa,EAAE,MAAM,CAAC;QACtB,KAAK,EAAE,MAAM,CAAC;KACf,CAAC;CACH;AAyBD,wBAAsB,WAAW,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAKrE;AAED,wBAAsB,UAAU,CAC9B,MAAM,EAAE,UAAU,EAClB,IAAI,CAAC,EAAE,MAAM,GACZ,OAAO,CAAC,YAAY,CAAC,CAMvB;AAED,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC,YAAY,CAAC,CAKvB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,yBAAyB,EAAE,MAAM,CAAC;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACpB;AAOD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAC7C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB;;;;;;OAMG;IACH,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;CAC7B;AAED,gFAAgF;AAChF,eAAO,MAAM,qBAAqB,KAAK,CAAC;AAExC;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,UAAU,EAClB,OAAO,GAAE;IACP,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,WAAW,CAAC;CACjB,GACL,OAAO,CAAC,iBAAiB,CAAC,CAgC5B"}

package/dist/api/account.js

@@ -37,3 +37,43 @@ export async function fetchSubscription(client) {
         .catch(explainScope);
     return data;
 }
+/** Hard stop on paging, so a busy key cannot turn one command into hundreds. */
+export const MAX_USAGE_EVENT_PAGES = 20;
+/**
+ * Walk this key's settled requests, newest first.
+ *
+ * Stops as soon as every id in `wanted` has been seen: a session of three
+ * requests should cost one page, not a full sweep of the window. Passing no
+ * `wanted` set walks until the pages run out.
+ */
+export async function fetchUsageEvents(client, options = {}) {
+    const maxPages = options.maxPages ?? MAX_USAGE_EVENT_PAGES;
+    const remaining = options.wanted ? new Set(options.wanted) : undefined;
+    const events = [];
+    let cursor = null;
+    let pages = 0;
+    while (pages < maxPages) {
+        const query = new URLSearchParams();
+        if (options.days !== undefined)
+            query.set("days", String(options.days));
+        if (cursor !== null)
+            query.set("cursor", cursor);
+        const { data } = await client
+            .getJson(`/keyinfo/usage-events?${query.toString()}`, {
+            signal: options.signal,
+        })
+            .catch(explainScope);
+        pages += 1;
+        for (const event of data.data ?? []) {
+            events.push(event);
+            remaining?.delete(event.request_id);
+        }
+        if (remaining !== undefined && remaining.size === 0) {
+            return { events, pages, exhausted: true };
+        }
+        cursor = data.next_cursor ?? null;
+        if (cursor === null)
+            return { events, pages, exhausted: true };
+    }
+    return { events, pages, exhausted: false };
+}

package/dist/commands/chat.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"chat.d.ts","sourceRoot":"","sources":["../../src/commands/chat.ts"],"names":[],"mappings":"AAEA,OAAO,EAAgB,KAAK,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACnE,OAAO,EAAkB,KAAK,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAExE,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAEnD,OAAO,EAIL,KAAK,SAAS,EACf,MAAM,cAAc,CAAC;AAUtB,MAAM,WAAW,MAAO,SAAQ,SAAS;IACvC,qDAAqD;IACrD,SAAS,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IAClC,gDAAgD;IAChD,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAWD,wBAAsB,WAAW,CAC/B,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,QAAQ,CAAC,CA8BnB;AAwLD,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,YAAY,GAAG,SAAS,EAC/B,KAAK,EAAE,WAAW,GACjB,MAAM,GAAG,SAAS,CASpB"}
+{"version":3,"file":"chat.d.ts","sourceRoot":"","sources":["../../src/commands/chat.ts"],"names":[],"mappings":"AAEA,OAAO,EAAgB,KAAK,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACnE,OAAO,EAAkB,KAAK,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAOxE,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAEnD,OAAO,EAIL,KAAK,SAAS,EACf,MAAM,cAAc,CAAC;AAatB,MAAM,WAAW,MAAO,SAAQ,SAAS;IACvC,qDAAqD;IACrD,SAAS,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IAClC,gDAAgD;IAChD,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAcD,wBAAsB,WAAW,CAC/B,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,QAAQ,CAAC,CA8BnB;AAoSD,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,YAAY,GAAG,SAAS,EAC/B,KAAK,EAAE,WAAW,GACjB,MAAM,GAAG,SAAS,CASpB"}

package/dist/commands/chat.js

@@ -2,15 +2,23 @@ import { readFileSync } from "node:fs";
 import { fetchCatalog } from "../api/models.js";
 import { readChatStream } from "../api/sse-parser.js";
 import { ApiError } from "../api/errors.js";
+import { sessionsDir } from "../config/paths.js";
+import { keyDigest } from "../security/redact.js";
+import { upsertIndexEntry } from "../sessions/index-file.js";
+import { decideRecording } from "../sessions/policy.js";
+import { SessionWriter } from "../sessions/store.js";
 import { ExitCode } from "../output/exit-codes.js";
 import { formatUsd } from "../output/money.js";
 import { buildRuntime, reportError, requireApiKey, } from "./runtime.js";
 const USAGE = `Usage:
   mafdet chat [prompt] [--model <id>] [--system <file>] [--input <file>]
-              [--no-stream] [--max-tokens <n>] [--quiet]
+              [--no-stream] [--max-tokens <n>] [--quiet] [--save]
 
 The prompt comes from an argument, from --input <file>, or from stdin when
 neither is given. Use "--input -" to force reading stdin.
+
+A single chat is not saved unless --save is given. Saved conversations stay
+on this computer; see 'mafdet sessions'.
 `;
 export async function chatCommand(argv, io) {
     try {
@@ -51,6 +59,8 @@ async function parseArgs(argv, configuredModel, io) {
     let inputFile;
     let stream = true;
     let quiet = false;
+    let save = false;
+    let noHistory = false;
     let maxTokens;
     for (let i = 0; i < argv.length; i += 1) {
         const arg = argv[i];
@@ -65,6 +75,10 @@ async function parseArgs(argv, configuredModel, io) {
             stream = false;
         else if (arg === "--quiet")
             quiet = true;
+        else if (arg === "--save")
+            save = true;
+        else if (arg === "--no-history")
+            noHistory = true;
         else if (arg === "--max-tokens") {
             const raw = next();
             maxTokens = Number(raw);
@@ -123,6 +137,8 @@ async function parseArgs(argv, configuredModel, io) {
         stream,
         maxTokens,
         quiet,
+        save,
+        noHistory,
     };
 }
 function readTextFile(path, flag) {
@@ -137,26 +153,117 @@ function readTextFile(path, flag) {
         });
     }
 }
+/**
+ * CLI-024/§20.4 · Save a one-shot chat, when asked.
+ *
+ * A single `mafdet chat` is not a conversation anyone resumes, so it is not
+ * recorded by default; `--save` opts in and `--no-history` still wins over it.
+ * Everything written goes through the same store as an interactive session, so
+ * the same redaction, the same 0600 files and the same `mafdet sessions
+ * delete` apply - there is no second, weaker path to disk.
+ *
+ * Failures here are swallowed: losing the record of a chat is bad, losing the
+ * answer the user is waiting for is worse.
+ */
+function saveChat(args, io, answer, usage, requestId, model) {
+    const decision = decideRecording({
+        surface: "one-shot",
+        noHistory: args.noHistory,
+        save: args.save,
+    });
+    if (!decision.record)
+        return;
+    const env = io.env ?? process.env;
+    try {
+        const root = sessionsDir(env);
+        const writer = SessionWriter.create({
+            root,
+            title: chatTitle(args.prompt),
+            modelId: args.model,
+            workspace: io.cwd ?? process.cwd(),
+            mode: "chat",
+        });
+        if (args.system !== undefined) {
+            writer.append({ type: "user_message", content: args.system });
+        }
+        writer.append({ type: "user_message", content: args.prompt });
+        writer.append({ type: "assistant_message", content: answer });
+        if (usage) {
+            const micros = estimateChargeMicroUsd(model, usage);
+            writer.append({
+                type: "usage",
+                ...(requestId === undefined ? {} : { request_id: requestId }),
+                model_id: args.model,
+                prompt_tokens: usage.prompt_tokens,
+                completion_tokens: usage.completion_tokens,
+                estimated_charge_micro_usd: (micros ?? 0n).toString(),
+                settlement_status: "pending",
+                api_key_ref: keyDigest(readKey(io)),
+            });
+        }
+        writer.close();
+        upsertIndexEntry(root, writer.metadata);
+        if (!args.quiet) {
+            io.stderr(`saved as ${writer.sessionId} (local only)\n`);
+        }
+    }
+    catch (error) {
+        io.stderr(`mafdet chat: not saved: ${error instanceof Error ? error.message : String(error)}\n`);
+    }
+}
+/** The first line, trimmed to something that fits a listing. */
+function chatTitle(prompt) {
+    const line = prompt.split("\n").find((l) => l.trim().length > 0) ?? "Chat";
+    const trimmed = line.trim();
+    return trimmed.length > 60 ? `${trimmed.slice(0, 57)}...` : trimmed;
+}
+function readKey(io) {
+    return (io.env ?? process.env).MAFDET_API_KEY ?? "";
+}
+/**
+ * The catalogue entry for pricing, fetched once and shared.
+ *
+ * A pricing lookup must never fail the call that already succeeded, so a
+ * failure here is an absent price rather than an error - the tokens are still
+ * reported, and `sessions usage --refresh` can still get the settled figure.
+ */
+async function priceModel(runtime, modelId, needed) {
+    if (!needed)
+        return undefined;
+    try {
+        return (await fetchCatalog(runtime.accountPlane)).find((m) => m.modelId === modelId);
+    }
+    catch {
+        return undefined;
+    }
+}
 async function streamChat(runtime, body, args, io) {
-    const { response } = await runtime.dataPlane.postStream("/chat/completions", body, {
+    const { response, requestId } = await runtime.dataPlane.postStream("/chat/completions", body, {
         signal: io.signal,
     });
     // Text goes to stdout as it arrives; everything else is stderr, so
     // `mafdet chat ... > answer.txt` captures only the answer.
     const result = await readChatStream(response, { onText: io.stdout }, io.signal);
     io.stdout("\n");
+    const model = await priceModel(runtime, args.model, !args.quiet || args.save);
     if (io.signal?.aborted) {
         io.stderr("mafdet: cancelled - the connection was closed mid-generation\n");
-        await summarise(runtime, args, result.usage, io, { partial: true });
+        summarise(args, result.usage, io, model, { partial: true });
+        // A cancelled chat is not saved: the answer is incomplete, and an archive
+        // of half a reply is a worse record than none.
         return ExitCode.Cancelled;
     }
-    await summarise(runtime, args, result.usage, io);
+    summarise(args, result.usage, io, model);
+    saveChat(args, io, result.text, result.usage, requestId, model);
     return ExitCode.Ok;
 }
 async function completeChat(runtime, body, args, io) {
-    const { data } = await runtime.dataPlane.postJson("/chat/completions", body, { signal: io.signal });
-    io.stdout(`${data.choices?.[0]?.message?.content ?? ""}\n`);
-    await summarise(runtime, args, data.usage, io);
+    const { data, requestId } = await runtime.dataPlane.postJson("/chat/completions", body, { signal: io.signal });
+    const answer = data.choices?.[0]?.message?.content ?? "";
+    io.stdout(`${answer}\n`);
+    const model = await priceModel(runtime, args.model, !args.quiet || args.save);
+    summarise(args, data.usage, io, model);
+    saveChat(args, io, answer, data.usage, requestId, model);
     return ExitCode.Ok;
 }
 /**
@@ -165,20 +272,13 @@ async function completeChat(runtime, body, args, io) {
  * verified against the ledger to the micro-dollar. It is still labelled as an
  * estimate: the wallet, not the client, is the authority.
  */
-async function summarise(runtime, args, usage, io, options = {}) {
+function summarise(args, usage, io, model, options = {}) {
     if (args.quiet || !usage)
         return;
     let cost = "";
-    try {
-        const catalog = await fetchCatalog(runtime.accountPlane);
-        const model = catalog.find((m) => m.modelId === args.model);
-        const micros = estimateChargeMicroUsd(model, usage);
-        if (micros !== undefined)
-            cost = `, ~${formatUsd(micros)}`;
-    }
-    catch {
-        // A pricing lookup must never fail the call that already succeeded.
-    }
+    const micros = estimateChargeMicroUsd(model, usage);
+    if (micros !== undefined)
+        cost = `, ~${formatUsd(micros)}`;
     const prefix = options.partial ? "partial: " : "";
     io.stderr(`${prefix}${usage.prompt_tokens} in / ${usage.completion_tokens} out tokens${cost}\n`);
 }

package/dist/commands/sessions.d.ts

@@ -0,0 +1,5 @@
+import { ExitCode } from "../output/exit-codes.js";
+import { type CommandIo } from "./runtime.js";
+export declare function sessionsCommand(argv: readonly string[], io: CommandIo): Promise<ExitCode>;
+export declare const DELETION_NOTICE: (id: string) => string;
+//# sourceMappingURL=sessions.d.ts.map

package/dist/commands/sessions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessions.d.ts","sourceRoot":"","sources":["../../src/commands/sessions.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAuBnD,OAAO,EAIL,KAAK,SAAS,EACf,MAAM,cAAc,CAAC;AAgBtB,wBAAsB,eAAe,CACnC,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,EAAE,EAAE,SAAS,GACZ,OAAO,CAAC,QAAQ,CAAC,CAenB;AAqID,eAAO,MAAM,eAAe,GAAI,IAAI,MAAM,KAAG,MAUX,CAAC"}