@tuttiai/cli 0.7.0 → 0.9.0

package/dist/index.js

@@ -2,7 +2,7 @@
 
 // src/index.ts
 import { config } from "dotenv";
-import { createLogger as createLogger8 } from "@tuttiai/core";
+import { createLogger as createLogger10 } from "@tuttiai/core";
 import { Command } from "commander";
 
 // src/commands/init.ts
@@ -11,9 +11,209 @@ import { join } from "path";
 import chalk from "chalk";
 import Enquirer from "enquirer";
 import { createLogger } from "@tuttiai/core";
+
+// src/templates/index.ts
+var minimal = {
+  id: "minimal",
+  name: "Minimal",
+  description: "One agent, no voices \u2014 the simplest starting point",
+  deps: {},
+  envVars: [],
+  score: `import { defineScore, AnthropicProvider } from "@tuttiai/core"
+
+export default defineScore({
+  provider: new AnthropicProvider(),
+  default_model: "claude-sonnet-4-20250514",
+  agents: {
+    assistant: {
+      name: "Assistant",
+      system_prompt: "You are a helpful assistant.",
+      voices: [],
+    }
+  }
+})
+`
+};
+var codingAgent = {
+  id: "coding-agent",
+  name: "Coding Agent",
+  description: "TypeScript developer with filesystem + GitHub access",
+  deps: { "@tuttiai/filesystem": "*", "@tuttiai/github": "*" },
+  envVars: ["GITHUB_TOKEN=ghp_your_token_here"],
+  score: `import { defineScore, AnthropicProvider } from "@tuttiai/core"
+import { FilesystemVoice } from "@tuttiai/filesystem"
+import { GitHubVoice } from "@tuttiai/github"
+
+export default defineScore({
+  provider: new AnthropicProvider(),
+  default_model: "claude-sonnet-4-20250514",
+  agents: {
+    coder: {
+      name: "Coder",
+      system_prompt:
+        "You are an expert TypeScript developer. " +
+        "You read and write code using the filesystem voice, " +
+        "and manage issues and PRs via the GitHub voice. " +
+        "Write clean, tested, well-documented code.",
+      voices: [new FilesystemVoice(), new GitHubVoice()],
+      permissions: ["filesystem", "network"],
+      streaming: true,
+    }
+  }
+})
+`
+};
+var researchAgent = {
+  id: "research-agent",
+  name: "Research Agent",
+  description: "Researcher that saves structured notes to files",
+  deps: { "@tuttiai/filesystem": "*" },
+  envVars: [],
+  score: `import { defineScore, AnthropicProvider } from "@tuttiai/core"
+import { FilesystemVoice } from "@tuttiai/filesystem"
+
+export default defineScore({
+  provider: new AnthropicProvider(),
+  default_model: "claude-sonnet-4-20250514",
+  agents: {
+    researcher: {
+      name: "Researcher",
+      system_prompt:
+        "You are an expert researcher. " +
+        "Analyze topics thoroughly, cite sources, and save " +
+        "structured notes as markdown files using the filesystem voice. " +
+        "Organize findings with clear headings and bullet points.",
+      voices: [new FilesystemVoice()],
+      permissions: ["filesystem"],
+      streaming: true,
+    }
+  }
+})
+`
+};
+var qaPipeline = {
+  id: "qa-pipeline",
+  name: "QA Pipeline",
+  description: "Orchestrator + QA specialist with browser testing and HITL",
+  deps: { "@tuttiai/playwright": "*" },
+  envVars: [],
+  score: `import { defineScore, AnthropicProvider } from "@tuttiai/core"
+import { PlaywrightVoice } from "@tuttiai/playwright"
+
+export default defineScore({
+  provider: new AnthropicProvider(),
+  default_model: "claude-sonnet-4-20250514",
+  entry: "orchestrator",
+  agents: {
+    orchestrator: {
+      name: "QA Lead",
+      system_prompt:
+        "You are a QA lead. Triage incoming bugs by delegating " +
+        "browser testing to the QA specialist. Use human-in-the-loop " +
+        "to ask for approval before marking bugs as verified.",
+      voices: [],
+      role: "orchestrator",
+      delegates: ["qa"],
+      allow_human_input: true,
+      streaming: true,
+    },
+    qa: {
+      name: "QA Specialist",
+      system_prompt:
+        "You are a QA engineer. Navigate to URLs, check elements, " +
+        "take screenshots, and verify bug reports using the browser.",
+      voices: [new PlaywrightVoice()],
+      permissions: ["network", "browser"],
+      role: "specialist",
+      budget: { max_cost_usd: 0.50, warn_at_percent: 80 },
+      streaming: true,
+    }
+  }
+})
+`
+};
+var devTeam = {
+  id: "dev-team",
+  name: "Dev Team",
+  description: "Full team: orchestrator + coder + PM + QA with all voices",
+  deps: {
+    "@tuttiai/filesystem": "*",
+    "@tuttiai/github": "*",
+    "@tuttiai/playwright": "*"
+  },
+  envVars: ["GITHUB_TOKEN=ghp_your_token_here"],
+  score: `import { defineScore, AnthropicProvider, createLoggingHook, createBlocklistHook, createLogger } from "@tuttiai/core"
+import { FilesystemVoice } from "@tuttiai/filesystem"
+import { GitHubVoice } from "@tuttiai/github"
+import { PlaywrightVoice } from "@tuttiai/playwright"
+
+const logger = createLogger("dev-team")
+
+export default defineScore({
+  provider: new AnthropicProvider(),
+  default_model: "claude-sonnet-4-20250514",
+  entry: "orchestrator",
+  hooks: {
+    ...createLoggingHook(logger),
+    ...createBlocklistHook(["delete_file"]),
+  },
+  agents: {
+    orchestrator: {
+      name: "Tech Lead",
+      system_prompt:
+        "You are the tech lead. Break tasks into subtasks and delegate: " +
+        "code tasks to Coder, documentation to PM, testing to QA. " +
+        "Review outputs before presenting to the user.",
+      voices: [],
+      role: "orchestrator",
+      delegates: ["coder", "pm", "qa"],
+      allow_human_input: true,
+      streaming: true,
+    },
+    coder: {
+      name: "Coder",
+      system_prompt:
+        "You are a senior TypeScript developer. Write clean, tested code. " +
+        "Use the filesystem voice to read/write files and GitHub to manage PRs.",
+      voices: [new FilesystemVoice(), new GitHubVoice()],
+      permissions: ["filesystem", "network"],
+      role: "specialist",
+      streaming: true,
+    },
+    pm: {
+      name: "PM",
+      system_prompt:
+        "You are a product manager. Write specs, update documentation, " +
+        "and create GitHub issues for tracking. Focus on clarity and completeness.",
+      voices: [new FilesystemVoice(), new GitHubVoice()],
+      permissions: ["filesystem", "network"],
+      role: "specialist",
+      streaming: true,
+    },
+    qa: {
+      name: "QA",
+      system_prompt:
+        "You are a QA engineer. Test features in the browser, verify bugs, " +
+        "and write test reports. Screenshot evidence for every finding.",
+      voices: [new PlaywrightVoice()],
+      permissions: ["network", "browser"],
+      role: "specialist",
+      budget: { max_cost_usd: 1.00 },
+      streaming: true,
+    }
+  }
+})
+`
+};
+var TEMPLATES = [minimal, codingAgent, researchAgent, qaPipeline, devTeam];
+function getTemplate(id) {
+  return TEMPLATES.find((t) => t.id === id);
+}
+
+// src/commands/init.ts
 var logger = createLogger("tutti-cli");
 var { prompt } = Enquirer;
-async function initCommand(projectName) {
+async function initCommand(projectName, templateId) {
   if (!projectName) {
     const response = await prompt({
       type: "input",
@@ -31,7 +231,44 @@ async function initCommand(projectName) {
     logger.error({ dir: `${projectName}/` }, "Directory already exists");
     process.exit(1);
   }
+  let template;
+  if (templateId) {
+    template = getTemplate(templateId);
+    if (!template) {
+      logger.error({ template: templateId }, "Unknown template");
+      console.error(chalk.dim("  Available: " + TEMPLATES.map((t) => t.id).join(", ")));
+      process.exit(1);
+    }
+  } else {
+    const response = await prompt({
+      type: "select",
+      name: "templateId",
+      message: "Which template?",
+      choices: TEMPLATES.map((t) => ({
+        name: t.id,
+        message: t.name + chalk.dim(" \u2014 " + t.description)
+      }))
+    });
+    template = getTemplate(response.templateId);
+    if (!template) template = TEMPLATES[0];
+  }
   mkdirSync(dir, { recursive: true });
+  const deps = {
+    "@tuttiai/core": "*",
+    "@tuttiai/types": "*",
+    ...template.deps
+  };
+  const envLines = [
+    "ANTHROPIC_API_KEY=your_key_here",
+    ...template.envVars,
+    "",
+    "# Log level: debug | info | warn | error (default: info)",
+    "TUTTI_LOG_LEVEL=info",
+    "",
+    "# OpenTelemetry (optional)",
+    "# OTEL_EXPORTER_OTLP_ENDPOINT=http://localhost:4318",
+    "# OTEL_SERVICE_NAME=tutti"
+  ];
   const files = {
     "package.json": JSON.stringify(
       {
@@ -42,10 +279,7 @@ async function initCommand(projectName) {
           dev: "tsx watch tutti.score.ts",
           start: "tsx tutti.score.ts"
         },
-        dependencies: {
-          "@tuttiai/core": "*",
-          "@tuttiai/types": "*"
-        },
+        dependencies: deps,
         devDependencies: {
           tsx: "^4.0.0",
           typescript: "^5.7.0"
@@ -54,7 +288,7 @@ async function initCommand(projectName) {
       null,
       2
     ),
-    ".env.example": "ANTHROPIC_API_KEY=your_key_here\n\n# Log level: debug | info | warn | error (default: info)\nTUTTI_LOG_LEVEL=info\n\n# OpenTelemetry (optional)\n# OTEL_EXPORTER_OTLP_ENDPOINT=http://localhost:4318\n# OTEL_SERVICE_NAME=tutti\n",
+    ".env.example": envLines.join("\n") + "\n",
     ".gitignore": "node_modules\ndist\n.env\n",
     "tsconfig.json": JSON.stringify(
       {
@@ -73,29 +307,18 @@ async function initCommand(projectName) {
       null,
       2
     ),
-    "tutti.score.ts": `import { defineScore, AnthropicProvider } from "@tuttiai/core"
-
-export default defineScore({
-  provider: new AnthropicProvider(),
-  default_model: "claude-sonnet-4-20250514",
-  agents: {
-    assistant: {
-      name: "Assistant",
-      system_prompt: "You are a helpful assistant.",
-      voices: [],
-    }
-  }
-})
-`,
+    "tutti.score.ts": template.score,
     "README.md": `# ${projectName}
 
 A Tutti agent project. All agents. All together.
 
+**Template:** ${template.name} \u2014 ${template.description}
+
 ## Setup
 
 \`\`\`bash
 cp .env.example .env
-# Add your ANTHROPIC_API_KEY to .env
+# Add your API keys to .env
 npm install
 \`\`\`
 
@@ -110,7 +333,7 @@ npm run dev
     writeFileSync(join(dir, filename), content);
   }
   console.log();
-  console.log(chalk.green(`  \u2714 Created ${projectName}/`));
+  console.log(chalk.green(`  \u2714 Created ${projectName}/`) + chalk.dim(` (${template.name})`));
   console.log();
   console.log("  Next steps:");
   console.log(chalk.cyan(`    cd ${projectName}`));
@@ -119,6 +342,17 @@ npm run dev
   console.log(chalk.cyan("    npm run dev"));
   console.log();
 }
+function templatesCommand() {
+  console.log();
+  console.log(chalk.bold("  Available Templates"));
+  console.log();
+  for (const t of TEMPLATES) {
+    console.log("  " + chalk.cyan(t.id.padEnd(18)) + t.description);
+  }
+  console.log();
+  console.log(chalk.dim("  Use: tutti-ai init my-project --template " + TEMPLATES[0].id));
+  console.log();
+}
 
 // src/commands/run.ts
 import { existsSync as existsSync2 } from "fs";
@@ -223,6 +457,23 @@ async function runCommand(scorePath) {
     input: process.stdin,
     output: process.stdout
   });
+  runtime.events.on("hitl:requested", (e) => {
+    spinner.stop();
+    if (streaming) {
+      process.stdout.write("\n");
+      streaming = false;
+    }
+    console.log();
+    console.log(chalk2.yellow("  " + chalk2.bold("[Agent needs input]") + " " + e.question));
+    if (e.options) {
+      e.options.forEach((opt, i) => {
+        console.log(chalk2.yellow("    " + (i + 1) + ". " + opt));
+      });
+    }
+    void rl.question(chalk2.yellow("  > ")).then((answer) => {
+      runtime.answer(e.session_id, answer.trim());
+    });
+  });
   console.log(chalk2.dim('Tutti REPL \u2014 type "exit" to quit\n'));
   let sessionId;
   process.on("SIGINT", () => {
@@ -263,52 +514,312 @@ async function runCommand(scorePath) {
   process.exit(0);
 }
 
-// src/commands/add.ts
-import { existsSync as existsSync3, readFileSync } from "fs";
+// src/commands/resume.ts
+import { existsSync as existsSync3 } from "fs";
 import { resolve as resolve2 } from "path";
-import { execSync } from "child_process";
+import { createInterface as createInterface2 } from "readline/promises";
 import chalk3 from "chalk";
 import ora2 from "ora";
-import { createLogger as createLogger3 } from "@tuttiai/core";
+import {
+  AnthropicProvider as AnthropicProvider2,
+  GeminiProvider as GeminiProvider2,
+  OpenAIProvider as OpenAIProvider2,
+  ScoreLoader as ScoreLoader2,
+  SecretsManager as SecretsManager2,
+  TuttiRuntime as TuttiRuntime2,
+  createCheckpointStore,
+  createLogger as createLogger3
+} from "@tuttiai/core";
 var logger3 = createLogger3("tutti-cli");
+async function resumeCommand(sessionId, opts) {
+  const scoreFile = resolve2(opts.score ?? "./tutti.score.ts");
+  if (!existsSync3(scoreFile)) {
+    logger3.error({ file: scoreFile }, "Score file not found");
+    console.error(chalk3.dim('Run "tutti-ai init" to create a new project.'));
+    process.exit(1);
+  }
+  let score;
+  try {
+    score = await ScoreLoader2.load(scoreFile);
+  } catch (err) {
+    logger3.error(
+      { error: err instanceof Error ? err.message : String(err) },
+      "Failed to load score"
+    );
+    process.exit(1);
+  }
+  const providerKeyMap = [
+    [AnthropicProvider2, "ANTHROPIC_API_KEY"],
+    [OpenAIProvider2, "OPENAI_API_KEY"],
+    [GeminiProvider2, "GEMINI_API_KEY"]
+  ];
+  for (const [ProviderClass, envVar] of providerKeyMap) {
+    if (score.provider instanceof ProviderClass) {
+      if (!SecretsManager2.optional(envVar)) {
+        logger3.error({ envVar }, "Missing API key");
+        process.exit(1);
+      }
+    }
+  }
+  const agentName = resolveAgentName(score, opts.agent);
+  const agent = score.agents[agentName];
+  if (!agent) {
+    logger3.error(
+      { agent: agentName, available: Object.keys(score.agents) },
+      "Agent not found in score"
+    );
+    process.exit(1);
+  }
+  if (!agent.durable) {
+    console.error(
+      chalk3.yellow(
+        "Agent '" + agentName + "' does not have `durable: true` set \u2014 resume has nothing to restore."
+      )
+    );
+    console.error(
+      chalk3.dim(
+        "Enable durable checkpointing on the agent before the run that created this session."
+      )
+    );
+    process.exit(1);
+  }
+  const spinner = ora2({ color: "cyan" }).start("Loading checkpoint...");
+  let checkpointStore;
+  let checkpoint;
+  try {
+    checkpointStore = createCheckpointStore({ store: opts.store });
+    checkpoint = await checkpointStore.loadLatest(sessionId);
+  } catch (err) {
+    spinner.fail("Failed to load checkpoint");
+    logger3.error(
+      { error: err instanceof Error ? err.message : String(err), store: opts.store },
+      "Checkpoint store error"
+    );
+    process.exit(1);
+  }
+  spinner.stop();
+  if (!checkpoint) {
+    console.error(
+      chalk3.red("No checkpoint found for session " + sessionId + ".")
+    );
+    console.error(
+      chalk3.dim(
+        "Verify TUTTI_" + (opts.store === "redis" ? "REDIS" : "PG") + "_URL points to the same " + opts.store + " the original run used."
+      )
+    );
+    process.exit(1);
+  }
+  printSummary(checkpoint);
+  if (!opts.yes && !await confirmResume(checkpoint.turn)) {
+    console.log(chalk3.dim("Cancelled."));
+    process.exit(0);
+  }
+  const runtime = new TuttiRuntime2(score, { checkpointStore });
+  const sessions = runtime.sessions;
+  if ("save" in sessions && typeof sessions.save === "function") {
+    sessions.save({
+      id: sessionId,
+      agent_name: agentName,
+      messages: [...checkpoint.messages],
+      created_at: checkpoint.saved_at,
+      updated_at: /* @__PURE__ */ new Date()
+    });
+  } else {
+    console.error(
+      chalk3.red(
+        "Session store does not support resume seeding. Use the default InMemorySessionStore or PostgresSessionStore."
+      )
+    );
+    process.exit(1);
+  }
+  wireProgress(runtime);
+  try {
+    const result = await runtime.run(agentName, "[resume]", sessionId);
+    console.log();
+    console.log(chalk3.green("\u2713 Resumed run complete."));
+    console.log(chalk3.dim("  Final turn:    " + result.turns));
+    console.log(chalk3.dim("  Session ID:    " + result.session_id));
+    console.log(
+      chalk3.dim(
+        "  Token usage:   " + result.usage.input_tokens + " in / " + result.usage.output_tokens + " out"
+      )
+    );
+    console.log();
+    console.log(result.output);
+  } catch (err) {
+    logger3.error(
+      { error: err instanceof Error ? err.message : String(err) },
+      "Resume failed"
+    );
+    process.exit(1);
+  }
+}
+function resolveAgentName(score, override) {
+  if (override) return override;
+  if (typeof score.entry === "string") return score.entry;
+  const first = Object.keys(score.agents)[0];
+  if (!first) {
+    console.error(chalk3.red("Score has no agents defined."));
+    process.exit(1);
+  }
+  return first;
+}
+function printSummary(checkpoint) {
+  console.log();
+  console.log(chalk3.cyan.bold("Checkpoint summary"));
+  console.log(
+    chalk3.dim("  Session ID:    ") + checkpoint.session_id
+  );
+  console.log(
+    chalk3.dim("  Last turn:     ") + String(checkpoint.turn)
+  );
+  console.log(
+    chalk3.dim("  Saved at:      ") + checkpoint.saved_at.toISOString()
+  );
+  console.log(
+    chalk3.dim("  Messages:      ") + String(checkpoint.messages.length) + " total"
+  );
+  console.log();
+  console.log(chalk3.cyan("First messages"));
+  const preview = checkpoint.messages.slice(0, 3);
+  for (const msg of preview) {
+    const text = excerpt(messageToText(msg), 200);
+    console.log(chalk3.dim("  [" + msg.role + "] ") + text);
+  }
+  if (checkpoint.messages.length > preview.length) {
+    console.log(
+      chalk3.dim(
+        "  \u2026 " + String(checkpoint.messages.length - preview.length) + " more"
+      )
+    );
+  }
+  console.log();
+}
+function messageToText(msg) {
+  if (typeof msg.content === "string") return msg.content;
+  const parts = [];
+  for (const block of msg.content) {
+    if (block.type === "text") {
+      parts.push(block.text);
+    } else if (block.type === "tool_use") {
+      parts.push("[tool_use " + block.name + "]");
+    } else if (block.type === "tool_result") {
+      parts.push("[tool_result " + excerpt(block.content, 80) + "]");
+    }
+  }
+  return parts.join(" ");
+}
+function excerpt(text, max) {
+  const oneLine = text.replace(/\s+/g, " ").trim();
+  return oneLine.length > max ? oneLine.slice(0, max - 1) + "\u2026" : oneLine;
+}
+async function confirmResume(turn) {
+  const rl = createInterface2({
+    input: process.stdin,
+    output: process.stdout
+  });
+  try {
+    const answer = (await rl.question(
+      chalk3.cyan("Resume from turn " + turn + "? ") + chalk3.dim("(y/n) ")
+    )).trim().toLowerCase();
+    return answer === "y" || answer === "yes";
+  } finally {
+    rl.close();
+  }
+}
+function wireProgress(runtime) {
+  const spinner = ora2({ color: "cyan" });
+  let streaming = false;
+  runtime.events.on("checkpoint:restored", (e) => {
+    console.log(
+      chalk3.dim("\u21BB Restored from turn " + e.turn) + chalk3.dim(" (session " + e.session_id.slice(0, 8) + "\u2026)")
+    );
+  });
+  runtime.events.on("checkpoint:saved", (e) => {
+    console.log(chalk3.dim("\xB7 Checkpoint saved at turn " + e.turn));
+  });
+  runtime.events.on("llm:request", () => {
+    spinner.start("Thinking...");
+  });
+  runtime.events.on("token:stream", (e) => {
+    if (!streaming) {
+      spinner.stop();
+      streaming = true;
+    }
+    process.stdout.write(e.text);
+  });
+  runtime.events.on("llm:response", () => {
+    if (streaming) {
+      process.stdout.write("\n");
+    } else {
+      spinner.stop();
+    }
+  });
+  runtime.events.on("tool:start", (e) => {
+    if (streaming) {
+      process.stdout.write(chalk3.dim("\n  [using: " + e.tool_name + "]"));
+    } else {
+      spinner.stop();
+      console.log(chalk3.dim("  [using: " + e.tool_name + "]"));
+    }
+  });
+  runtime.events.on("tool:end", (e) => {
+    if (streaming) {
+      process.stdout.write(chalk3.dim("  [done: " + e.tool_name + "]\n"));
+    }
+  });
+  runtime.events.on("tool:error", (e) => {
+    spinner.stop();
+    logger3.error({ tool: e.tool_name }, "Tool error");
+  });
+}
+
+// src/commands/add.ts
+import { existsSync as existsSync4, readFileSync } from "fs";
+import { resolve as resolve3 } from "path";
+import { execSync } from "child_process";
+import chalk4 from "chalk";
+import ora3 from "ora";
+import { createLogger as createLogger4 } from "@tuttiai/core";
+var logger4 = createLogger4("tutti-cli");
 var OFFICIAL_VOICES = {
   filesystem: {
     package: "@tuttiai/filesystem",
     setup: `  Add to your score:
-    ${chalk3.cyan('import { FilesystemVoice } from "@tuttiai/filesystem"')}
-    ${chalk3.cyan("voices: [new FilesystemVoice()]")}`
+    ${chalk4.cyan('import { FilesystemVoice } from "@tuttiai/filesystem"')}
+    ${chalk4.cyan("voices: [new FilesystemVoice()]")}`
   },
   github: {
     package: "@tuttiai/github",
-    setup: `  Add ${chalk3.bold("GITHUB_TOKEN")} to your .env file:
-    ${chalk3.cyan("GITHUB_TOKEN=ghp_your_token_here")}
+    setup: `  Add ${chalk4.bold("GITHUB_TOKEN")} to your .env file:
+    ${chalk4.cyan("GITHUB_TOKEN=ghp_your_token_here")}
 
   Add to your score:
-    ${chalk3.cyan('import { GitHubVoice } from "@tuttiai/github"')}
-    ${chalk3.cyan("voices: [new GitHubVoice()]")}`
+    ${chalk4.cyan('import { GitHubVoice } from "@tuttiai/github"')}
+    ${chalk4.cyan("voices: [new GitHubVoice()]")}`
   },
   playwright: {
     package: "@tuttiai/playwright",
     setup: `  Install the browser:
-    ${chalk3.cyan("npx playwright install chromium")}
+    ${chalk4.cyan("npx playwright install chromium")}
 
   Add to your score:
-    ${chalk3.cyan('import { PlaywrightVoice } from "@tuttiai/playwright"')}
-    ${chalk3.cyan("voices: [new PlaywrightVoice()]")}`
+    ${chalk4.cyan('import { PlaywrightVoice } from "@tuttiai/playwright"')}
+    ${chalk4.cyan("voices: [new PlaywrightVoice()]")}`
   },
   postgres: {
     package: "pg",
-    setup: `  Add ${chalk3.bold("DATABASE_URL")} to your .env file:
-    ${chalk3.cyan("DATABASE_URL=postgres://user:pass@localhost:5432/tutti")}
+    setup: `  Add ${chalk4.bold("DATABASE_URL")} to your .env file:
+    ${chalk4.cyan("DATABASE_URL=postgres://user:pass@localhost:5432/tutti")}
 
   Add to your score:
-    ${chalk3.cyan("memory: { provider: 'postgres' }")}
+    ${chalk4.cyan("memory: { provider: 'postgres' }")}
 
   Or with an explicit URL:
-    ${chalk3.cyan("memory: { provider: 'postgres', url: process.env.DATABASE_URL }")}
+    ${chalk4.cyan("memory: { provider: 'postgres', url: process.env.DATABASE_URL }")}
 
   Use the async factory for initialization:
-    ${chalk3.cyan("const tutti = await TuttiRuntime.create(score)")}`
+    ${chalk4.cyan("const tutti = await TuttiRuntime.create(score)")}`
   }
 };
 function resolvePackageName(input) {
@@ -321,8 +832,8 @@ function resolvePackageName(input) {
   return `@tuttiai/${input}`;
 }
 function isAlreadyInstalled(packageName) {
-  const pkgPath = resolve2(process.cwd(), "package.json");
-  if (!existsSync3(pkgPath)) return false;
+  const pkgPath = resolve3(process.cwd(), "package.json");
+  if (!existsSync4(pkgPath)) return false;
   try {
     const pkg = JSON.parse(readFileSync(pkgPath, "utf-8"));
     const deps = { ...pkg.dependencies, ...pkg.devDependencies };
@@ -331,19 +842,19 @@ function isAlreadyInstalled(packageName) {
     return false;
   }
 }
-async function addCommand(voiceName) {
+function addCommand(voiceName) {
   const packageName = resolvePackageName(voiceName);
-  const pkgPath = resolve2(process.cwd(), "package.json");
-  if (!existsSync3(pkgPath)) {
-    logger3.error("No package.json found in the current directory");
-    console.error(chalk3.dim('Run "tutti-ai init" to create a new project first.'));
+  const pkgPath = resolve3(process.cwd(), "package.json");
+  if (!existsSync4(pkgPath)) {
+    logger4.error("No package.json found in the current directory");
+    console.error(chalk4.dim('Run "tutti-ai init" to create a new project first.'));
     process.exit(1);
   }
   if (isAlreadyInstalled(packageName)) {
-    console.log(chalk3.green(`  \u2714 ${packageName} is already installed`));
+    console.log(chalk4.green(`  \u2714 ${packageName} is already installed`));
     return;
   }
-  const spinner = ora2(`Installing ${packageName}...`).start();
+  const spinner = ora3(`Installing ${packageName}...`).start();
   try {
     execSync(`npm install ${packageName}`, {
       cwd: process.cwd(),
@@ -353,7 +864,7 @@ async function addCommand(voiceName) {
   } catch (error) {
     spinner.fail(`Failed to install ${packageName}`);
     const message = error instanceof Error ? error.message : String(error);
-    logger3.error({ error: message, package: packageName }, "Installation failed");
+    logger4.error({ error: message, package: packageName }, "Installation failed");
     process.exit(1);
   }
   const official = OFFICIAL_VOICES[voiceName];
@@ -365,43 +876,43 @@ async function addCommand(voiceName) {
   } else {
     console.log();
     console.log(
-      chalk3.dim("  Check the package README for setup instructions.")
+      chalk4.dim("  Check the package README for setup instructions.")
     );
     console.log();
   }
 }
 
 // src/commands/check.ts
-import { existsSync as existsSync4 } from "fs";
-import { resolve as resolve3 } from "path";
-import chalk4 from "chalk";
+import { existsSync as existsSync5 } from "fs";
+import { resolve as resolve4 } from "path";
+import chalk5 from "chalk";
 import {
-  ScoreLoader as ScoreLoader2,
-  AnthropicProvider as AnthropicProvider2,
-  OpenAIProvider as OpenAIProvider2,
-  GeminiProvider as GeminiProvider2,
-  SecretsManager as SecretsManager2,
-  createLogger as createLogger4
+  ScoreLoader as ScoreLoader3,
+  AnthropicProvider as AnthropicProvider3,
+  OpenAIProvider as OpenAIProvider3,
+  GeminiProvider as GeminiProvider3,
+  SecretsManager as SecretsManager3,
+  createLogger as createLogger5
 } from "@tuttiai/core";
-var logger4 = createLogger4("tutti-cli");
-var ok = (msg) => console.log(chalk4.green("  \u2714 " + msg));
-var fail = (msg) => console.log(chalk4.red("  \u2718 " + msg));
+var logger5 = createLogger5("tutti-cli");
+var ok = (msg) => console.log(chalk5.green("  \u2714 " + msg));
+var fail = (msg) => console.log(chalk5.red("  \u2718 " + msg));
 async function checkCommand(scorePath) {
-  const file = resolve3(scorePath ?? "./tutti.score.ts");
-  console.log(chalk4.cyan(`
+  const file = resolve4(scorePath ?? "./tutti.score.ts");
+  console.log(chalk5.cyan(`
 Checking ${file}...
 `));
-  if (!existsSync4(file)) {
+  if (!existsSync5(file)) {
     fail("Score file not found: " + file);
     process.exit(1);
   }
   let score;
   try {
-    score = await ScoreLoader2.load(file);
+    score = await ScoreLoader3.load(file);
     ok("Score file is valid");
   } catch (err) {
     fail("Score validation failed");
-    logger4.error(
+    logger5.error(
       { error: err instanceof Error ? err.message : String(err) },
       "Score validation failed"
     );
@@ -409,15 +920,15 @@ Checking ${file}...
   }
   let hasErrors = false;
   const providerChecks = [
-    [AnthropicProvider2, "AnthropicProvider", "ANTHROPIC_API_KEY"],
-    [OpenAIProvider2, "OpenAIProvider", "OPENAI_API_KEY"],
-    [GeminiProvider2, "GeminiProvider", "GEMINI_API_KEY"]
+    [AnthropicProvider3, "AnthropicProvider", "ANTHROPIC_API_KEY"],
+    [OpenAIProvider3, "OpenAIProvider", "OPENAI_API_KEY"],
+    [GeminiProvider3, "GeminiProvider", "GEMINI_API_KEY"]
   ];
   let providerDetected = false;
   for (const [ProviderClass, name, envVar] of providerChecks) {
     if (score.provider instanceof ProviderClass) {
       providerDetected = true;
-      const key = SecretsManager2.optional(envVar);
+      const key = SecretsManager3.optional(envVar);
       if (key) {
         ok("Provider: " + name + " (" + envVar + " is set)");
       } else {
@@ -439,7 +950,7 @@ Checking ${file}...
       };
       const envVar = voiceEnvMap[voiceName];
       if (envVar) {
-        const key = SecretsManager2.optional(envVar);
+        const key = SecretsManager3.optional(envVar);
         if (key) {
           ok(
             "Voice: " + voiceName + " on " + agentKey + " (" + envVar + " is set)"
@@ -458,29 +969,30 @@ Checking ${file}...
   console.log("");
   if (hasErrors) {
     console.log(
-      chalk4.yellow("Some checks failed. Fix the issues above and re-run.")
+      chalk5.yellow("Some checks failed. Fix the issues above and re-run.")
     );
     process.exit(1);
   } else {
     console.log(
-      chalk4.green("All checks passed.") + chalk4.dim(" Run tutti-ai run to start.")
+      chalk5.green("All checks passed.") + chalk5.dim(" Run tutti-ai run to start.")
     );
   }
 }
 
 // src/commands/studio.ts
-import { existsSync as existsSync5 } from "fs";
-import { resolve as resolve4 } from "path";
-import { exec } from "child_process";
+import { existsSync as existsSync6 } from "fs";
+import { resolve as resolve5 } from "path";
+import { execFile } from "child_process";
 import express from "express";
-import chalk5 from "chalk";
+import chalk6 from "chalk";
 import {
-  TuttiRuntime as TuttiRuntime2,
-  ScoreLoader as ScoreLoader3,
-  createLogger as createLogger5
+  TuttiRuntime as TuttiRuntime3,
+  ScoreLoader as ScoreLoader4,
+  createLogger as createLogger6
 } from "@tuttiai/core";
-var logger5 = createLogger5("tutti-studio");
-var PORT = 4747;
+var logger6 = createLogger6("tutti-studio");
+var envPort = Number.parseInt(process.env.PORT ?? "", 10);
+var PORT = Number.isInteger(envPort) && envPort > 0 && envPort <= 65535 ? envPort : 4747;
 function safeStringify(obj) {
   return JSON.stringify(obj, (_key, value) => {
     if (value instanceof Error) return { message: value.message, name: value.name };
@@ -489,24 +1001,28 @@ function safeStringify(obj) {
   });
 }
 function openBrowser(url) {
-  const cmd = process.platform === "darwin" ? "open" : process.platform === "win32" ? "start" : "xdg-open";
-  exec(cmd + " " + url);
+  if (process.platform === "win32") {
+    execFile("cmd.exe", ["/c", "start", "", url]);
+    return;
+  }
+  const cmd = process.platform === "darwin" ? "open" : "xdg-open";
+  execFile(cmd, [url]);
 }
 async function studioCommand(scorePath) {
-  const file = resolve4(scorePath ?? "./tutti.score.ts");
-  if (!existsSync5(file)) {
-    logger5.error({ file }, "Score file not found");
-    console.error(chalk5.dim('Run "tutti-ai init" to create a new project.'));
+  const file = resolve5(scorePath ?? "./tutti.score.ts");
+  if (!existsSync6(file)) {
+    logger6.error({ file }, "Score file not found");
+    console.error(chalk6.dim('Run "tutti-ai init" to create a new project.'));
     process.exit(1);
   }
   let score;
   try {
-    score = await ScoreLoader3.load(file);
+    score = await ScoreLoader4.load(file);
   } catch (err) {
-    logger5.error({ error: err instanceof Error ? err.message : String(err) }, "Failed to load score");
+    logger6.error({ error: err instanceof Error ? err.message : String(err) }, "Failed to load score");
     process.exit(1);
   }
-  const runtime = new TuttiRuntime2(score);
+  const runtime = new TuttiRuntime3(score);
   const sessionRegistry = /* @__PURE__ */ new Map();
   runtime.events.on("agent:start", (e) => {
     if (!sessionRegistry.has(e.session_id)) {
@@ -576,9 +1092,24 @@ async function studioCommand(scorePath) {
     res.json(session);
   });
   app.post("/api/run", async (req, res) => {
-    const { agent, input, session_id } = req.body;
-    if (!agent || !input) {
-      res.status(400).json({ error: "agent and input are required" });
+    const body = req.body;
+    if (typeof body !== "object" || body === null) {
+      res.status(400).json({ error: "Invalid request body" });
+      return;
+    }
+    const agent = body.agent;
+    const input = body.input;
+    const session_id = body.session_id;
+    if (typeof agent !== "string" || agent.trim().length === 0) {
+      res.status(400).json({ error: "agent must be a non-empty string" });
+      return;
+    }
+    if (typeof input !== "string" || input.trim().length === 0) {
+      res.status(400).json({ error: "input must be a non-empty string" });
+      return;
+    }
+    if (session_id !== void 0 && (typeof session_id !== "string" || session_id.trim().length === 0)) {
+      res.status(400).json({ error: "session_id must be a non-empty string when provided" });
       return;
     }
     try {
@@ -594,30 +1125,30 @@ async function studioCommand(scorePath) {
   app.listen(PORT, () => {
     const url = "http://localhost:" + PORT;
     console.log();
-    console.log(chalk5.bold("  Tutti Studio"));
-    console.log(chalk5.dim("  " + url));
+    console.log(chalk6.bold("  Tutti Studio"));
+    console.log(chalk6.dim("  " + url));
     console.log();
-    console.log(chalk5.dim("  Score: ") + (runtime.score.name ?? file));
-    console.log(chalk5.dim("  Agents: ") + Object.keys(runtime.score.agents).join(", "));
+    console.log(chalk6.dim("  Score: ") + (runtime.score.name ?? file));
+    console.log(chalk6.dim("  Agents: ") + Object.keys(runtime.score.agents).join(", "));
     console.log();
     openBrowser(url);
   });
   process.on("SIGINT", () => {
-    console.log(chalk5.dim("\nShutting down Tutti Studio..."));
+    console.log(chalk6.dim("\nShutting down Tutti Studio..."));
     process.exit(0);
   });
 }
 function getStudioHtml() {
-  return `<!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>Tutti Studio</title><style>*{margin:0;padding:0;box-sizing:border-box}:root{--bg:#0a0a0f;--panel:#12121a;--card:#1a1a26;--input:#0f0f17;--border:#2a2a3a;--text:#e2e8f0;--muted:#64748b;--purple:#8b5cf6;--teal:#14b8a6;--blue:#3b82f6;--green:#10b981;--red:#ef4444;--orange:#f97316;--amber:#f59e0b;--indigo:#6366f1;}html,body{height:100%;font-family:system-ui,-apple-system,sans-serif;background:var(--bg);color:var(--text);font-size:13px}#app{display:flex;flex-direction:column;height:100vh}header{display:flex;align-items:center;justify-content:space-between;padding:10px 20px;border-bottom:1px solid var(--border);background:var(--panel)}header .logo{font-weight:700;font-size:15px;letter-spacing:.5px}header .logo span{color:var(--purple)}header .meta{color:var(--muted);font-size:12px}header .status{display:flex;align-items:center;gap:6px;font-size:11px;color:var(--muted)}header .dot{width:7px;height:7px;border-radius:50%;background:var(--green)}header .dot.off{background:var(--red)}main{display:grid;grid-template-columns:260px 1fr 280px;flex:1;overflow:hidden;border-bottom:1px solid var(--border)}.panel{display:flex;flex-direction:column;border-right:1px solid var(--border);overflow:hidden}.panel:last-child{border-right:none}.panel-title{padding:10px 14px;font-size:11px;font-weight:600;text-transform:uppercase;letter-spacing:.8px;color:var(--muted);border-bottom:1px solid var(--border);background:var(--panel);flex-shrink:0}.panel-body{flex:1;overflow-y:auto;padding:10px}.panel-body::-webkit-scrollbar{width:5px}.panel-body::-webkit-scrollbar-track{background:transparent}.panel-body::-webkit-scrollbar-thumb{background:var(--border);border-radius:3px}#graph-panel .panel-body{padding:0;display:flex;align-items:center;justify-content:center}#graph-panel svg text{font-family:system-ui,-apple-system,sans-serif}#events-panel{display:flex;flex-direction:column}#event-stream{flex:1;overflow-y:auto;padding:10px}#event-stream::-webkit-scrollbar{width:5px}#event-stream::-webkit-scrollbar-track{background:transparent}#event-stream::-webkit-scrollbar-thumb{background:var(--border);border-radius:3px}.ev{padding:7px 10px;margin-bottom:6px;border-radius:6px;background:var(--card);border-left:3px solid var(--muted);font-size:12px;line-height:1.5}.ev .ev-head{display:flex;justify-content:space-between;align-items:center}.ev .ev-type{font-weight:600;font-family:"SF Mono",Menlo,monospace;font-size:11px}.ev .ev-time{color:var(--muted);font-size:10px;font-family:"SF Mono",Menlo,monospace}.ev .ev-detail{color:var(--muted);margin-top:3px;font-size:11px;word-break:break-all}.ev.agent{border-left-color:var(--purple)}.ev.agent .ev-type{color:var(--purple)}.ev.turn{border-left-color:var(--blue)}.ev.turn .ev-type{color:var(--blue)}.ev.llm{border-left-color:var(--green)}.ev.llm .ev-type{color:var(--green)}.ev.tool{border-left-color:var(--teal)}.ev.tool .ev-type{color:var(--teal)}.ev.tool-error{border-left-color:var(--red)}.ev.tool-error .ev-type{color:var(--red)}.ev.security{border-left-color:var(--orange)}.ev.security .ev-type{color:var(--orange)}.ev.budget-warn{border-left-color:var(--amber)}.ev.budget-warn .ev-type{color:var(--amber)}.ev.budget-exceed{border-left-color:var(--red)}.ev.budget-exceed .ev-type{color:var(--red)}.ev.delegate{border-left-color:var(--indigo)}.ev.delegate .ev-type{color:var(--indigo)}#input-bar{display:flex;gap:8px;padding:10px 12px;border-top:1px solid var(--border);background:var(--panel);flex-shrink:0}#agent-select{background:var(--input);color:var(--text);border:1px solid var(--border);border-radius:6px;padding:6px 10px;font-size:12px;outline:none;cursor:pointer;min-width:110px}#user-input{flex:1;background:var(--input);color:var(--text);border:1px solid var(--border);border-radius:6px;padding:6px 12px;font-size:13px;outline:none}#user-input:focus{border-color:var(--purple)}#send-btn{background:var(--purple);color:#fff;border:none;border-radius:6px;padding:6px 16px;font-size:12px;font-weight:600;cursor:pointer;white-space:nowrap}#send-btn:hover{opacity:.9}#send-btn:disabled{opacity:.4;cursor:default}.session-item{padding:8px 10px;margin-bottom:4px;border-radius:6px;background:var(--card);cursor:pointer;transition:background .15s}.session-item:hover{background:#22223a}.session-item.active{background:#22223a;border:1px solid var(--purple)}.session-id{font-family:"SF Mono",Menlo,monospace;font-size:11px;color:var(--purple)}.session-meta{font-size:11px;color:var(--muted);margin-top:2px}#session-detail{margin-top:10px;border-top:1px solid var(--border);padding-top:10px}.msg{padding:6px 8px;margin-bottom:4px;border-radius:5px;font-size:12px;line-height:1.5;word-break:break-word}.msg.user{background:#1c1c3a;border-left:2px solid var(--blue)}.msg.assistant{background:#1a2a1a;border-left:2px solid var(--green)}.msg .msg-role{font-size:10px;font-weight:600;text-transform:uppercase;letter-spacing:.5px;margin-bottom:2px}.msg.user .msg-role{color:var(--blue)}.msg.assistant .msg-role{color:var(--green)}footer{display:flex;align-items:center;gap:32px;padding:8px 20px;background:var(--panel);font-size:12px}.token-item{display:flex;align-items:center;gap:6px}.token-label{color:var(--muted)}.token-val{font-family:"SF Mono",Menlo,monospace;font-weight:600}.token-val.input{color:var(--blue)}.token-val.output{color:var(--green)}.token-val.cost{color:var(--amber)}.empty{color:var(--muted);text-align:center;padding:30px 10px;font-size:12px}</style></head><body><div id="app"><header>  <div class="logo"><span>&#9835;</span> Tutti Studio</div>  <div class="meta" id="score-name"></div>  <div class="status"><div class="dot" id="sse-dot"></div><span id="sse-label">connecting</span></div></header><main>  <div class="panel" id="graph-panel">    <div class="panel-title">Agent Graph</div>    <div class="panel-body" id="graph-body"></div>  </div>  <div class="panel" id="events-panel">    <div class="panel-title">Live Event Stream</div>    <div id="event-stream"><div class="empty">Waiting for events&hellip;<br>Send a message below to start an agent run.</div></div>    <div id="input-bar">      <select id="agent-select"></select>      <input id="user-input" placeholder="Type a message&hellip;" autocomplete="off">      <button id="send-btn">Send</button>    </div>  </div>  <div class="panel" id="sessions-panel">    <div class="panel-title">Sessions</div>    <div class="panel-body" id="sessions-body"><div class="empty">No sessions yet</div></div>  </div></main><footer>  <div class="token-item"><span class="token-label">&#x2193; Input</span><span class="token-val input" id="tok-in">0</span></div>  <div class="token-item"><span class="token-label">&#x2191; Output</span><span class="token-val output" id="tok-out">0</span></div>  <div class="token-item"><span class="token-label">$ Est. cost</span><span class="token-val cost" id="tok-cost">0.0000</span></div></footer></div><script>(function(){var tokIn=0,tokOut=0;var sessionMap={};var activeSession=null;/* ---- helpers ---- */function esc(s){var d=document.createElement("div");d.textContent=s;return d.innerHTML}function fmt(n){return n.toLocaleString()}function timeStr(){var d=new Date();return ("0"+d.getHours()).slice(-2)+":"+("0"+d.getMinutes()).slice(-2)+":"+("0"+d.getSeconds()).slice(-2)}function truncId(id){return id.slice(0,8)}/* ---- score + graph ---- */function loadScore(){  fetch("/api/score").then(function(r){return r.json()}).then(function(s){    document.getElementById("score-name").textContent=s.name||"tutti.score.ts";    var sel=document.getElementById("agent-select");    sel.innerHTML="";    Object.keys(s.agents).forEach(function(id){      var o=document.createElement("option");o.value=id;o.textContent=s.agents[id].name;sel.appendChild(o);    });    renderGraph(s);  });}function renderGraph(score){  var body=document.getElementById("graph-body");  var W=260,ids=Object.keys(score.agents),N=ids.length;  if(N===0){body.innerHTML="<div class=\\"empty\\">No agents</div>";return}  var hasDelegate=false;  ids.forEach(function(id){if(score.agents[id].delegates&&score.agents[id].delegates.length)hasDelegate=true});  var nodeR=26,padY=90,padTop=50;  var leftIds=[],rightIds=[];  if(hasDelegate){    ids.forEach(function(id){var a=score.agents[id];if(a.delegates&&a.delegates.length)leftIds.push(id);else rightIds.push(id)});  }else{leftIds=ids}  var cols=hasDelegate?2:1;  var cx1=cols===1?W/2:72,cx2=W-72;  var H=Math.max(leftIds.length,rightIds.length)*padY+padTop*2;  if(H<200)H=200;  var pos={};  var svg='<svg xmlns="http://www.w3.org/2000/svg" width="'+W+'" height="'+H+'" viewBox="0 0 '+W+" "+H+'">';  svg+='<defs><marker id="ah" viewBox="0 0 10 10" refX="10" refY="5" markerWidth="5" markerHeight="5" orient="auto"><path d="M0 0L10 5L0 10z" fill="#64748b"/></marker></defs>';  function drawNode(id,cx,cy){    var a=score.agents[id];    var col=a.role==="orchestrator"?"#8b5cf6":"#14b8a6";    pos[id]={x:cx,y:cy};    svg+='<circle cx="'+cx+'" cy="'+cy+'" r="'+nodeR+'" fill="'+col+'" fill-opacity="0.15" stroke="'+col+'" stroke-width="2"/>';    svg+='<text x="'+cx+'" y="'+(cy+4)+'" text-anchor="middle" fill="#e2e8f0" font-size="10" font-weight="600">'+esc(a.name)+'</text>';    var model=a.model||score.default_model||"";    if(model){var sh=model.replace(/-\\d{8}$/,"");if(sh.length>18)sh=sh.slice(0,18)+"\\u2026";svg+='<text x="'+cx+'" y="'+(cy+nodeR+14)+'" text-anchor="middle" fill="#64748b" font-size="9">'+esc(sh)+'</text>'}    svg+='<text x="'+cx+'" y="'+(cy+nodeR+26)+'" text-anchor="middle" fill="#64748b" font-size="9">'+a.voice_count+" voice"+(a.voice_count!==1?"s":"")+'</text>';  }  leftIds.forEach(function(id,i){drawNode(id,cx1,padTop+i*padY)});  rightIds.forEach(function(id,i){drawNode(id,cx2,padTop+i*padY)});  ids.forEach(function(id){    var a=score.agents[id];    if(a.delegates)a.delegates.forEach(function(did){      if(pos[id]&&pos[did]){        var x1=pos[id].x+nodeR,y1=pos[id].y,x2=pos[did].x-nodeR,y2=pos[did].y;        var mx=(x1+x2)/2;        svg+='<path d="M'+x1+" "+y1+" C"+mx+" "+y1+" "+mx+" "+y2+" "+x2+" "+y2+'" fill="none" stroke="#64748b" stroke-width="1.5" stroke-dasharray="4 3" marker-end="url(#ah)"/>';      }    });  });  svg+="</svg>";  body.innerHTML=svg;}/* ---- SSE ---- */function connectSSE(){  var es=new EventSource("/events");  es.addEventListener("tutti",function(e){    var ev=JSON.parse(e.data);    addEvent(ev);    if(ev.type==="llm:response"&&ev.response&&ev.response.usage){      tokIn+=ev.response.usage.input_tokens||0;      tokOut+=ev.response.usage.output_tokens||0;      document.getElementById("tok-in").textContent=fmt(tokIn);      document.getElementById("tok-out").textContent=fmt(tokOut);      document.getElementById("tok-cost").textContent=estimateCost(tokIn,tokOut);    }    if(ev.type==="agent:start"||ev.type==="agent:end")refreshSessions();  });  es.onopen=function(){document.getElementById("sse-dot").className="dot";document.getElementById("sse-label").textContent="connected"};  es.onerror=function(){document.getElementById("sse-dot").className="dot off";document.getElementById("sse-label").textContent="disconnected"};}function estimateCost(inp,out){  var c=(inp/1e6)*3+(out/1e6)*15;  return c.toFixed(4);}function evClass(t){  if(t.indexOf("agent")===0)return "agent";  if(t.indexOf("turn")===0)return "turn";  if(t==="llm:request"||t==="llm:response")return "llm";  if(t==="tool:error")return "tool-error";  if(t.indexOf("tool")===0)return "tool";  if(t.indexOf("security")===0)return "security";  if(t==="budget:warning")return "budget-warn";  if(t==="budget:exceeded")return "budget-exceed";  if(t.indexOf("delegate")===0)return "delegate";  return "";}function evDetail(ev){  var parts=[];  if(ev.agent_name)parts.push("agent: "+ev.agent_name);  if(ev.session_id)parts.push("session: "+truncId(ev.session_id));  if(ev.turn!==undefined)parts.push("turn: "+ev.turn);  if(ev.tool_name)parts.push("tool: "+ev.tool_name);  if(ev.from)parts.push("from: "+ev.from);  if(ev.to)parts.push("to: "+ev.to);  if(ev.tokens!==undefined)parts.push("tokens: "+fmt(ev.tokens));  if(ev.cost_usd!==undefined)parts.push("cost: $"+ev.cost_usd.toFixed(4));  if(ev.response&&ev.response.usage)parts.push("tokens: "+fmt(ev.response.usage.input_tokens)+" in / "+fmt(ev.response.usage.output_tokens)+" out");  if(ev.error){var em=typeof ev.error==="object"?ev.error.message||"":ev.error;if(em)parts.push("error: "+em)}  if(ev.patterns)parts.push("patterns: "+ev.patterns.join(", "));  return parts.join(" &middot; ");}var firstEvent=true;function addEvent(ev){  var stream=document.getElementById("event-stream");  if(firstEvent){stream.innerHTML="";firstEvent=false}  var div=document.createElement("div");  div.className="ev "+evClass(ev.type);  div.innerHTML='<div class="ev-head"><span class="ev-type">'+esc(ev.type)+'</span><span class="ev-time">'+timeStr()+'</span></div>';  var det=evDetail(ev);  if(det)div.innerHTML+='<div class="ev-detail">'+det+"</div>";  stream.appendChild(div);  stream.scrollTop=stream.scrollHeight;}/* ---- sessions ---- */function refreshSessions(){  fetch("/api/sessions").then(function(r){return r.json()}).then(function(list){    var body=document.getElementById("sessions-body");    if(!list.length){body.innerHTML='<div class="empty">No sessions yet</div>';return}    var html="";    list.forEach(function(s){      var cls="session-item"+(activeSession===s.id?" active":"");      html+='<div class="'+cls+'" data-id="'+s.id+'">';      html+='<div class="session-id">'+truncId(s.id)+"</div>";      html+='<div class="session-meta">'+esc(s.agent_name)+" &middot; "+s.message_count+" msgs</div>";      html+="</div>";    });    if(activeSession)html+='<div id="session-detail"></div>';    body.innerHTML=html;    body.querySelectorAll(".session-item").forEach(function(el){      el.addEventListener("click",function(){selectSession(el.getAttribute("data-id"))});    });    if(activeSession)loadSessionDetail(activeSession);  });}function selectSession(id){  activeSession=activeSession===id?null:id;  refreshSessions();}function loadSessionDetail(id){  var det=document.getElementById("session-detail");  if(!det)return;  fetch("/api/sessions/"+id).then(function(r){return r.json()}).then(function(session){    if(!session||session.error){det.innerHTML='<div class="empty">Session not found</div>';return}    var html="";    (session.messages||[]).forEach(function(m){      var role=m.role;      var text="";      if(typeof m.content==="string")text=m.content;      else if(Array.isArray(m.content)){        m.content.forEach(function(b){          if(b.type==="text")text+=b.text+"\\n";          else if(b.type==="tool_use")text+="[tool_use: "+b.name+"]\\n";          else if(b.type==="tool_result")text+="[tool_result]\\n";        });      }      html+='<div class="msg '+role+'"><div class="msg-role">'+role+"</div>"+esc(text.trim())+"</div>";    });    det.innerHTML=html;  });}/* ---- send ---- */function sendMessage(){  var agentSel=document.getElementById("agent-select");  var inputEl=document.getElementById("user-input");  var btn=document.getElementById("send-btn");  var agent=agentSel.value;  var input=inputEl.value.trim();  if(!input)return;  btn.disabled=true;btn.textContent="Running\\u2026";  inputEl.value="";  var sid=sessionMap[agent]||undefined;  fetch("/api/run",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({agent:agent,input:input,session_id:sid})})    .then(function(r){return r.json()})    .then(function(result){      if(result.session_id)sessionMap[agent]=result.session_id;      if(result.output){        addEvent({type:"__output",agent_name:agent,output:result.output});      }      refreshSessions();    })    .catch(function(err){addEvent({type:"__error",error:err.message||String(err)})})    .finally(function(){btn.disabled=false;btn.textContent="Send"});}document.getElementById("send-btn").addEventListener("click",sendMessage);document.getElementById("user-input").addEventListener("keydown",function(e){if(e.key==="Enter"&&!e.shiftKey){e.preventDefault();sendMessage()}});/* ---- init ---- */loadScore();connectSSE();})();</script></body></html>`;
+  return `<!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>Tutti Studio</title><style>*{margin:0;padding:0;box-sizing:border-box}:root{--bg:#0a0a0f;--panel:#12121a;--card:#1a1a26;--input:#0f0f17;--border:#2a2a3a;--text:#e2e8f0;--muted:#64748b;--purple:#8b5cf6;--teal:#14b8a6;--blue:#3b82f6;--green:#10b981;--red:#ef4444;--orange:#f97316;--amber:#f59e0b;--indigo:#6366f1;}html,body{height:100%;font-family:system-ui,-apple-system,sans-serif;background:var(--bg);color:var(--text);font-size:13px}#app{display:flex;flex-direction:column;height:100vh}header{display:flex;align-items:center;justify-content:space-between;padding:10px 20px;border-bottom:1px solid var(--border);background:var(--panel)}header .logo{font-weight:700;font-size:15px;letter-spacing:.5px}header .logo span{color:var(--purple)}header .meta{color:var(--muted);font-size:12px}header .status{display:flex;align-items:center;gap:6px;font-size:11px;color:var(--muted)}header .dot{width:7px;height:7px;border-radius:50%;background:var(--green)}header .dot.off{background:var(--red)}main{display:grid;grid-template-columns:260px 1fr 280px;flex:1;overflow:hidden;border-bottom:1px solid var(--border)}.panel{display:flex;flex-direction:column;border-right:1px solid var(--border);overflow:hidden}.panel:last-child{border-right:none}.panel-title{padding:10px 14px;font-size:11px;font-weight:600;text-transform:uppercase;letter-spacing:.8px;color:var(--muted);border-bottom:1px solid var(--border);background:var(--panel);flex-shrink:0}.panel-body{flex:1;overflow-y:auto;padding:10px}.panel-body::-webkit-scrollbar{width:5px}.panel-body::-webkit-scrollbar-track{background:transparent}.panel-body::-webkit-scrollbar-thumb{background:var(--border);border-radius:3px}#graph-panel .panel-body{padding:0;display:flex;align-items:center;justify-content:center}#graph-panel svg text{font-family:system-ui,-apple-system,sans-serif}#events-panel{display:flex;flex-direction:column}#event-stream{flex:1;overflow-y:auto;padding:10px}#event-stream::-webkit-scrollbar{width:5px}#event-stream::-webkit-scrollbar-track{background:transparent}#event-stream::-webkit-scrollbar-thumb{background:var(--border);border-radius:3px}.ev{padding:7px 10px;margin-bottom:6px;border-radius:6px;background:var(--card);border-left:3px solid var(--muted);font-size:12px;line-height:1.5}.ev .ev-head{display:flex;justify-content:space-between;align-items:center}.ev .ev-type{font-weight:600;font-family:"SF Mono",Menlo,monospace;font-size:11px}.ev .ev-time{color:var(--muted);font-size:10px;font-family:"SF Mono",Menlo,monospace}.ev .ev-detail{color:var(--muted);margin-top:3px;font-size:11px;word-break:break-all}.ev.agent{border-left-color:var(--purple)}.ev.agent .ev-type{color:var(--purple)}.ev.turn{border-left-color:var(--blue)}.ev.turn .ev-type{color:var(--blue)}.ev.llm{border-left-color:var(--green)}.ev.llm .ev-type{color:var(--green)}.ev.tool{border-left-color:var(--teal)}.ev.tool .ev-type{color:var(--teal)}.ev.tool-error{border-left-color:var(--red)}.ev.tool-error .ev-type{color:var(--red)}.ev.security{border-left-color:var(--orange)}.ev.security .ev-type{color:var(--orange)}.ev.budget-warn{border-left-color:var(--amber)}.ev.budget-warn .ev-type{color:var(--amber)}.ev.budget-exceed{border-left-color:var(--red)}.ev.budget-exceed .ev-type{color:var(--red)}.ev.delegate{border-left-color:var(--indigo)}.ev.delegate .ev-type{color:var(--indigo)}#input-bar{display:flex;gap:8px;padding:10px 12px;border-top:1px solid var(--border);background:var(--panel);flex-shrink:0}#agent-select{background:var(--input);color:var(--text);border:1px solid var(--border);border-radius:6px;padding:6px 10px;font-size:12px;outline:none;cursor:pointer;min-width:110px}#user-input{flex:1;background:var(--input);color:var(--text);border:1px solid var(--border);border-radius:6px;padding:6px 12px;font-size:13px;outline:none}#user-input:focus{border-color:var(--purple)}#send-btn{background:var(--purple);color:#fff;border:none;border-radius:6px;padding:6px 16px;font-size:12px;font-weight:600;cursor:pointer;white-space:nowrap}#send-btn:hover{opacity:.9}#send-btn:disabled{opacity:.4;cursor:default}.session-item{padding:8px 10px;margin-bottom:4px;border-radius:6px;background:var(--card);cursor:pointer;transition:background .15s}.session-item:hover{background:#22223a}.session-item.active{background:#22223a;border:1px solid var(--purple)}.session-id{font-family:"SF Mono",Menlo,monospace;font-size:11px;color:var(--purple)}.session-meta{font-size:11px;color:var(--muted);margin-top:2px}#session-detail{margin-top:10px;border-top:1px solid var(--border);padding-top:10px}.msg{padding:6px 8px;margin-bottom:4px;border-radius:5px;font-size:12px;line-height:1.5;word-break:break-word}.msg.user{background:#1c1c3a;border-left:2px solid var(--blue)}.msg.assistant{background:#1a2a1a;border-left:2px solid var(--green)}.msg .msg-role{font-size:10px;font-weight:600;text-transform:uppercase;letter-spacing:.5px;margin-bottom:2px}.msg.user .msg-role{color:var(--blue)}.msg.assistant .msg-role{color:var(--green)}footer{display:flex;align-items:center;gap:32px;padding:8px 20px;background:var(--panel);font-size:12px}.token-item{display:flex;align-items:center;gap:6px}.token-label{color:var(--muted)}.token-val{font-family:"SF Mono",Menlo,monospace;font-weight:600}.token-val.input{color:var(--blue)}.token-val.output{color:var(--green)}.token-val.cost{color:var(--amber)}.empty{color:var(--muted);text-align:center;padding:30px 10px;font-size:12px}</style></head><body><div id="app"><header>  <div class="logo"><span>&#9835;</span> Tutti Studio</div>  <div class="meta" id="score-name"></div>  <div class="status"><div class="dot" id="sse-dot"></div><span id="sse-label">connecting</span></div></header><main>  <div class="panel" id="graph-panel">    <div class="panel-title">Agent Graph</div>    <div class="panel-body" id="graph-body"></div>  </div>  <div class="panel" id="events-panel">    <div class="panel-title">Live Event Stream</div>    <div id="event-stream"><div class="empty">Waiting for events&hellip;<br>Send a message below to start an agent run.</div></div>    <div id="input-bar">      <select id="agent-select"></select>      <input id="user-input" placeholder="Type a message&hellip;" autocomplete="off">      <button id="send-btn">Send</button>    </div>  </div>  <div class="panel" id="sessions-panel">    <div class="panel-title">Sessions</div>    <div class="panel-body" id="sessions-body"><div class="empty">No sessions yet</div></div>  </div></main><footer>  <div class="token-item"><span class="token-label">&#x2193; Input</span><span class="token-val input" id="tok-in">0</span></div>  <div class="token-item"><span class="token-label">&#x2191; Output</span><span class="token-val output" id="tok-out">0</span></div>  <div class="token-item"><span class="token-label">$ Est. cost</span><span class="token-val cost" id="tok-cost">0.0000</span></div></footer></div><script>(function(){var tokIn=0,tokOut=0;var sessionMap={};var activeSession=null;/* ---- helpers ---- */function esc(s){var d=document.createElement("div");d.textContent=s;return d.innerHTML}function fmt(n){return n.toLocaleString()}function timeStr(){var d=new Date();return ("0"+d.getHours()).slice(-2)+":"+("0"+d.getMinutes()).slice(-2)+":"+("0"+d.getSeconds()).slice(-2)}function truncId(id){return id.slice(0,8)}/* ---- score + graph ---- */function loadScore(){  fetch("/api/score").then(function(r){return r.json()}).then(function(s){    document.getElementById("score-name").textContent=s.name||"tutti.score.ts";    var sel=document.getElementById("agent-select");    sel.innerHTML="";    Object.keys(s.agents).forEach(function(id){      var o=document.createElement("option");o.value=id;o.textContent=s.agents[id].name;sel.appendChild(o);    });    renderGraph(s);  });}function renderGraph(score){  var body=document.getElementById("graph-body");  var W=260,ids=Object.keys(score.agents),N=ids.length;  if(N===0){body.innerHTML="<div class=\\"empty\\">No agents</div>";return}  var hasDelegate=false;  ids.forEach(function(id){if(score.agents[id].delegates&&score.agents[id].delegates.length)hasDelegate=true});  var nodeR=26,padY=90,padTop=50;  var leftIds=[],rightIds=[];  if(hasDelegate){    ids.forEach(function(id){var a=score.agents[id];if(a.delegates&&a.delegates.length)leftIds.push(id);else rightIds.push(id)});  }else{leftIds=ids}  var cols=hasDelegate?2:1;  var cx1=cols===1?W/2:72,cx2=W-72;  var H=Math.max(leftIds.length,rightIds.length)*padY+padTop*2;  if(H<200)H=200;  var pos={};  var svg='<svg xmlns="http://www.w3.org/2000/svg" width="'+W+'" height="'+H+'" viewBox="0 0 '+W+" "+H+'">';  svg+='<defs><marker id="ah" viewBox="0 0 10 10" refX="10" refY="5" markerWidth="5" markerHeight="5" orient="auto"><path d="M0 0L10 5L0 10z" fill="#64748b"/></marker></defs>';  function drawNode(id,cx,cy){    var a=score.agents[id];    var col=a.role==="orchestrator"?"#8b5cf6":"#14b8a6";    pos[id]={x:cx,y:cy};    svg+='<circle cx="'+cx+'" cy="'+cy+'" r="'+nodeR+'" fill="'+col+'" fill-opacity="0.15" stroke="'+col+'" stroke-width="2"/>';    svg+='<text x="'+cx+'" y="'+(cy+4)+'" text-anchor="middle" fill="#e2e8f0" font-size="10" font-weight="600">'+esc(a.name)+'</text>';    var model=a.model||score.default_model||"";    if(model){var sh=model.replace(/-\\d{8}$/,"");if(sh.length>18)sh=sh.slice(0,18)+"\\u2026";svg+='<text x="'+cx+'" y="'+(cy+nodeR+14)+'" text-anchor="middle" fill="#64748b" font-size="9">'+esc(sh)+'</text>'}    svg+='<text x="'+cx+'" y="'+(cy+nodeR+26)+'" text-anchor="middle" fill="#64748b" font-size="9">'+a.voice_count+" voice"+(a.voice_count!==1?"s":"")+'</text>';  }  leftIds.forEach(function(id,i){drawNode(id,cx1,padTop+i*padY)});  rightIds.forEach(function(id,i){drawNode(id,cx2,padTop+i*padY)});  ids.forEach(function(id){    var a=score.agents[id];    if(a.delegates)a.delegates.forEach(function(did){      if(pos[id]&&pos[did]){        var x1=pos[id].x+nodeR,y1=pos[id].y,x2=pos[did].x-nodeR,y2=pos[did].y;        var mx=(x1+x2)/2;        svg+='<path d="M'+x1+" "+y1+" C"+mx+" "+y1+" "+mx+" "+y2+" "+x2+" "+y2+'" fill="none" stroke="#64748b" stroke-width="1.5" stroke-dasharray="4 3" marker-end="url(#ah)"/>';      }    });  });  svg+="</svg>";  body.innerHTML=svg;}/* ---- SSE ---- */function connectSSE(){  var es=new EventSource("/events");  es.addEventListener("tutti",function(e){    var ev=JSON.parse(e.data);    addEvent(ev);    if(ev.type==="llm:response"&&ev.response&&ev.response.usage){      tokIn+=ev.response.usage.input_tokens||0;      tokOut+=ev.response.usage.output_tokens||0;      document.getElementById("tok-in").textContent=fmt(tokIn);      document.getElementById("tok-out").textContent=fmt(tokOut);      document.getElementById("tok-cost").textContent=estimateCost(tokIn,tokOut);    }    if(ev.type==="agent:start"||ev.type==="agent:end")refreshSessions();  });  es.onopen=function(){document.getElementById("sse-dot").className="dot";document.getElementById("sse-label").textContent="connected"};  es.onerror=function(){document.getElementById("sse-dot").className="dot off";document.getElementById("sse-label").textContent="disconnected"};}/* Pricing: USD per 1M tokens (Sonnet-class default) */var INPUT_PRICE_PER_MILLION=3;var OUTPUT_PRICE_PER_MILLION=15;function estimateCost(inp,out){  var c=(inp/1e6)*INPUT_PRICE_PER_MILLION+(out/1e6)*OUTPUT_PRICE_PER_MILLION;  return c.toFixed(4);}function evClass(t){  if(t.indexOf("agent")===0)return "agent";  if(t.indexOf("turn")===0)return "turn";  if(t==="llm:request"||t==="llm:response")return "llm";  if(t==="tool:error")return "tool-error";  if(t.indexOf("tool")===0)return "tool";  if(t.indexOf("security")===0)return "security";  if(t==="budget:warning")return "budget-warn";  if(t==="budget:exceeded")return "budget-exceed";  if(t.indexOf("delegate")===0)return "delegate";  return "";}function evDetail(ev){  var parts=[];  if(ev.agent_name)parts.push("agent: "+ev.agent_name);  if(ev.session_id)parts.push("session: "+truncId(ev.session_id));  if(ev.turn!==undefined)parts.push("turn: "+ev.turn);  if(ev.tool_name)parts.push("tool: "+ev.tool_name);  if(ev.from)parts.push("from: "+ev.from);  if(ev.to)parts.push("to: "+ev.to);  if(ev.tokens!==undefined)parts.push("tokens: "+fmt(ev.tokens));  if(ev.cost_usd!==undefined)parts.push("cost: $"+ev.cost_usd.toFixed(4));  if(ev.response&&ev.response.usage)parts.push("tokens: "+fmt(ev.response.usage.input_tokens)+" in / "+fmt(ev.response.usage.output_tokens)+" out");  if(ev.error){var em=typeof ev.error==="object"?ev.error.message||"":ev.error;if(em)parts.push("error: "+em)}  if(ev.patterns)parts.push("patterns: "+ev.patterns.join(", "));  return parts.join(" &middot; ");}var firstEvent=true;function addEvent(ev){  var stream=document.getElementById("event-stream");  if(firstEvent){stream.innerHTML="";firstEvent=false}  var div=document.createElement("div");  div.className="ev "+evClass(ev.type);  div.innerHTML='<div class="ev-head"><span class="ev-type">'+esc(ev.type)+'</span><span class="ev-time">'+timeStr()+'</span></div>';  var det=evDetail(ev);  if(det)div.innerHTML+='<div class="ev-detail">'+det+"</div>";  stream.appendChild(div);  stream.scrollTop=stream.scrollHeight;}/* ---- sessions ---- */function refreshSessions(){  fetch("/api/sessions").then(function(r){return r.json()}).then(function(list){    var body=document.getElementById("sessions-body");    if(!list.length){body.innerHTML='<div class="empty">No sessions yet</div>';return}    var html="";    list.forEach(function(s){      var cls="session-item"+(activeSession===s.id?" active":"");      html+='<div class="'+cls+'" data-id="'+s.id+'">';      html+='<div class="session-id">'+truncId(s.id)+"</div>";      html+='<div class="session-meta">'+esc(s.agent_name)+" &middot; "+s.message_count+" msgs</div>";      html+="</div>";    });    if(activeSession)html+='<div id="session-detail"></div>';    body.innerHTML=html;    body.querySelectorAll(".session-item").forEach(function(el){      el.addEventListener("click",function(){selectSession(el.getAttribute("data-id"))});    });    if(activeSession)loadSessionDetail(activeSession);  });}function selectSession(id){  activeSession=activeSession===id?null:id;  refreshSessions();}function loadSessionDetail(id){  var det=document.getElementById("session-detail");  if(!det)return;  fetch("/api/sessions/"+id).then(function(r){return r.json()}).then(function(session){    if(!session||session.error){det.innerHTML='<div class="empty">Session not found</div>';return}    var html="";    (session.messages||[]).forEach(function(m){      var role=m.role;      var text="";      if(typeof m.content==="string")text=m.content;      else if(Array.isArray(m.content)){        m.content.forEach(function(b){          if(b.type==="text")text+=b.text+"\\n";          else if(b.type==="tool_use")text+="[tool_use: "+b.name+"]\\n";          else if(b.type==="tool_result")text+="[tool_result]\\n";        });      }      html+='<div class="msg '+role+'"><div class="msg-role">'+role+"</div>"+esc(text.trim())+"</div>";    });    det.innerHTML=html;  });}/* ---- send ---- */function sendMessage(){  var agentSel=document.getElementById("agent-select");  var inputEl=document.getElementById("user-input");  var btn=document.getElementById("send-btn");  var agent=agentSel.value;  var input=inputEl.value.trim();  if(!input)return;  btn.disabled=true;btn.textContent="Running\\u2026";  inputEl.value="";  var sid=sessionMap[agent]||undefined;  fetch("/api/run",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({agent:agent,input:input,session_id:sid})})    .then(function(r){return r.json()})    .then(function(result){      if(result.session_id)sessionMap[agent]=result.session_id;      if(result.output){        addEvent({type:"__output",agent_name:agent,output:result.output});      }      refreshSessions();    })    .catch(function(err){addEvent({type:"__error",error:err.message||String(err)})})    .finally(function(){btn.disabled=false;btn.textContent="Send"});}document.getElementById("send-btn").addEventListener("click",sendMessage);document.getElementById("user-input").addEventListener("keydown",function(e){if(e.key==="Enter"&&!e.shiftKey){e.preventDefault();sendMessage()}});/* ---- init ---- */loadScore();connectSSE();})();</script></body></html>`;
 }
 
 // src/commands/search.ts
-import { existsSync as existsSync6, readFileSync as readFileSync2 } from "fs";
-import { resolve as resolve5 } from "path";
-import chalk6 from "chalk";
-import ora3 from "ora";
-import { createLogger as createLogger6 } from "@tuttiai/core";
-var logger6 = createLogger6("tutti-cli");
+import { existsSync as existsSync7, readFileSync as readFileSync2 } from "fs";
+import { resolve as resolve6 } from "path";
+import chalk7 from "chalk";
+import ora4 from "ora";
+import { createLogger as createLogger7 } from "@tuttiai/core";
+var logger7 = createLogger7("tutti-cli");
 var REGISTRY_URL = "https://raw.githubusercontent.com/tuttiai/voices/main/voices.json";
 var BUILTIN_VOICES = [
   {
@@ -668,7 +1199,7 @@ async function fetchRegistry() {
     if (voices.length === 0) throw new Error("Empty registry");
     return voices;
   } catch {
-    logger6.debug("Registry unreachable, using built-in voice list");
+    logger7.debug("Registry unreachable, using built-in voice list");
     return BUILTIN_VOICES;
   }
 }
@@ -684,8 +1215,8 @@ function matchesQuery(voice, query) {
   return false;
 }
 function isInstalled(packageName) {
-  const pkgPath = resolve5(process.cwd(), "package.json");
-  if (!existsSync6(pkgPath)) return false;
+  const pkgPath = resolve6(process.cwd(), "package.json");
+  if (!existsSync7(pkgPath)) return false;
   try {
     const pkg = JSON.parse(readFileSync2(pkgPath, "utf-8"));
     const deps = { ...pkg.dependencies, ...pkg.devDependencies };
@@ -695,35 +1226,35 @@ function isInstalled(packageName) {
   }
 }
 function printVoice(voice, showInstallStatus) {
-  const badge = voice.official ? chalk6.green(" [official]") : chalk6.blue(" [community]");
+  const badge = voice.official ? chalk7.green(" [official]") : chalk7.blue(" [community]");
   const installed = showInstallStatus && isInstalled(voice.package);
-  const status = showInstallStatus ? installed ? chalk6.green(" \u2714 installed") : chalk6.dim(" not installed") : "";
+  const status = showInstallStatus ? installed ? chalk7.green(" \u2714 installed") : chalk7.dim(" not installed") : "";
   console.log();
-  console.log("  " + chalk6.bold(voice.package) + badge + status);
+  console.log("  " + chalk7.bold(voice.package) + badge + status);
   console.log("  " + voice.description);
   const installCmd = voice.official && voice.name !== "postgres" ? "tutti-ai add " + voice.name : "npm install " + voice.package;
-  console.log("  " + chalk6.dim("Install: ") + chalk6.cyan(installCmd));
+  console.log("  " + chalk7.dim("Install: ") + chalk7.cyan(installCmd));
   if (voice.tags.length > 0) {
-    console.log("  " + chalk6.dim("Tags: ") + voice.tags.join(", "));
+    console.log("  " + chalk7.dim("Tags: ") + voice.tags.join(", "));
   }
 }
 async function searchCommand(query) {
-  const spinner = ora3("Searching the Repertoire...").start();
+  const spinner = ora4("Searching the Repertoire...").start();
   const voices = await fetchRegistry();
   const results = voices.filter((v) => matchesQuery(v, query));
   spinner.stop();
   if (results.length === 0) {
     console.log();
-    console.log(chalk6.yellow('  No voices found for "' + query + '"'));
+    console.log(chalk7.yellow('  No voices found for "' + query + '"'));
     console.log();
-    console.log(chalk6.dim("  Browse all: https://tutti-ai.com/voices"));
-    console.log(chalk6.dim("  Build your own: tutti-ai create voice <name>"));
+    console.log(chalk7.dim("  Browse all: https://tutti-ai.com/voices"));
+    console.log(chalk7.dim("  Build your own: tutti-ai create voice <name>"));
     console.log();
     return;
   }
   console.log();
   console.log(
-    "  Found " + chalk6.bold(String(results.length)) + " voice" + (results.length !== 1 ? "s" : "") + " matching " + chalk6.cyan("'" + query + "'") + ":"
+    "  Found " + chalk7.bold(String(results.length)) + " voice" + (results.length !== 1 ? "s" : "") + " matching " + chalk7.cyan("'" + query + "'") + ":"
   );
   for (const voice of results) {
     printVoice(voice, false);
@@ -731,12 +1262,12 @@ async function searchCommand(query) {
   console.log();
 }
 async function voicesCommand() {
-  const spinner = ora3("Loading voices...").start();
+  const spinner = ora4("Loading voices...").start();
   const voices = await fetchRegistry();
   const official = voices.filter((v) => v.official);
   spinner.stop();
   console.log();
-  console.log("  " + chalk6.bold("Official Tutti Voices"));
+  console.log("  " + chalk7.bold("Official Tutti Voices"));
   console.log();
   for (const voice of official) {
     printVoice(voice, true);
@@ -744,49 +1275,49 @@ async function voicesCommand() {
   const community = voices.filter((v) => !v.official);
   if (community.length > 0) {
     console.log();
-    console.log("  " + chalk6.bold("Community Voices"));
+    console.log("  " + chalk7.bold("Community Voices"));
     for (const voice of community) {
       printVoice(voice, true);
     }
   }
   console.log();
-  console.log(chalk6.dim("  Search: tutti-ai search <query>"));
-  console.log(chalk6.dim("  Browse: https://tutti-ai.com/voices"));
+  console.log(chalk7.dim("  Search: tutti-ai search <query>"));
+  console.log(chalk7.dim("  Browse: https://tutti-ai.com/voices"));
   console.log();
 }
 
 // src/commands/publish.ts
-import { existsSync as existsSync7, readFileSync as readFileSync3 } from "fs";
-import { resolve as resolve6 } from "path";
+import { existsSync as existsSync8, readFileSync as readFileSync3 } from "fs";
+import { resolve as resolve7 } from "path";
 import { execSync as execSync2 } from "child_process";
-import chalk7 from "chalk";
-import ora4 from "ora";
+import chalk8 from "chalk";
+import ora5 from "ora";
 import Enquirer2 from "enquirer";
-import { createLogger as createLogger7, SecretsManager as SecretsManager3 } from "@tuttiai/core";
+import { createLogger as createLogger8, SecretsManager as SecretsManager4 } from "@tuttiai/core";
 var { prompt: prompt2 } = Enquirer2;
-var logger7 = createLogger7("tutti-cli");
+var logger8 = createLogger8("tutti-cli");
 function readPkg(dir) {
-  const p = resolve6(dir, "package.json");
-  if (!existsSync7(p)) return void 0;
+  const p = resolve7(dir, "package.json");
+  if (!existsSync8(p)) return void 0;
   return JSON.parse(readFileSync3(p, "utf-8"));
 }
 function run(cmd, cwd) {
   return execSync2(cmd, { cwd, stdio: "pipe", encoding: "utf-8" });
 }
 function fail2(msg) {
-  console.error(chalk7.red("  " + msg));
+  console.error(chalk8.red("  " + msg));
   process.exit(1);
 }
-var ok2 = (msg) => console.log(chalk7.green("  \u2714 " + msg));
+var ok2 = (msg) => console.log(chalk8.green("  \u2714 " + msg));
 async function publishCommand(opts) {
   const cwd = process.cwd();
   const pkg = readPkg(cwd);
   console.log();
-  console.log(chalk7.bold("  Tutti Voice Publisher"));
+  console.log(chalk8.bold("  Tutti Voice Publisher"));
   console.log();
-  const spinner = ora4("Running pre-flight checks...").start();
+  const spinner = ora5("Running pre-flight checks...").start();
   if (!pkg) fail2("No package.json found in the current directory.");
-  if (!existsSync7(resolve6(cwd, "src/index.ts"))) fail2("No src/index.ts found \u2014 are you inside a voice directory?");
+  if (!existsSync8(resolve7(cwd, "src/index.ts"))) fail2("No src/index.ts found \u2014 are you inside a voice directory?");
   const missing = [];
   if (!pkg.name) missing.push("name");
   if (!pkg.version) missing.push("version");
@@ -798,22 +1329,22 @@ async function publishCommand(opts) {
   const version = pkg.version;
   const validName = name.startsWith("@tuttiai/") || name.startsWith("tutti");
   if (!validName) fail2("Package name must start with @tuttiai/ or tutti \u2014 got: " + name);
-  const src = readFileSync3(resolve6(cwd, "src/index.ts"), "utf-8");
+  const src = readFileSync3(resolve7(cwd, "src/index.ts"), "utf-8");
   if (!src.includes("required_permissions")) {
     fail2("Voice class must declare required_permissions in src/index.ts");
   }
   spinner.succeed("Pre-flight checks passed");
-  const buildSpinner = ora4("Building...").start();
+  const buildSpinner = ora5("Building...").start();
   try {
     run("npm run build", cwd);
     buildSpinner.succeed("Build succeeded");
   } catch (err) {
     buildSpinner.fail("Build failed");
     const msg = err instanceof Error ? err.message : String(err);
-    console.error(chalk7.dim("  " + msg.split("\n").slice(0, 5).join("\n  ")));
+    console.error(chalk8.dim("  " + msg.split("\n").slice(0, 5).join("\n  ")));
     process.exit(1);
   }
-  const testSpinner = ora4("Running tests...").start();
+  const testSpinner = ora5("Running tests...").start();
   try {
     run("npx vitest run", cwd);
     testSpinner.succeed("Tests passed");
@@ -821,15 +1352,15 @@ async function publishCommand(opts) {
     testSpinner.fail("Tests failed");
     process.exit(1);
   }
-  const auditSpinner = ora4("Checking vulnerabilities...").start();
+  const auditSpinner = ora5("Checking vulnerabilities...").start();
   try {
     run("npm audit --audit-level=high", cwd);
     auditSpinner.succeed("No high/critical vulnerabilities");
   } catch {
-    auditSpinner.stopAndPersist({ symbol: chalk7.yellow("\u26A0"), text: "Vulnerabilities found (npm audit)" });
+    auditSpinner.stopAndPersist({ symbol: chalk8.yellow("\u26A0"), text: "Vulnerabilities found (npm audit)" });
   }
   console.log();
-  const drySpinner = ora4("Packing (dry run)...").start();
+  const drySpinner = ora5("Packing (dry run)...").start();
   let packOutput;
   try {
     packOutput = run("npm pack --dry-run 2>&1", cwd);
@@ -837,24 +1368,24 @@ async function publishCommand(opts) {
   } catch (err) {
     drySpinner.fail("Pack dry-run failed");
     const msg = err instanceof Error ? err.message : String(err);
-    console.error(chalk7.dim("  " + msg));
+    console.error(chalk8.dim("  " + msg));
     process.exit(1);
   }
   const fileLines = packOutput.split("\n").filter((l) => l.includes("npm notice") && /\d+(\.\d+)?\s*[kM]?B\s/.test(l)).map((l) => l.replace(/npm notice\s*/, ""));
   if (fileLines.length > 0) {
-    console.log(chalk7.dim("  Files:"));
+    console.log(chalk8.dim("  Files:"));
     for (const line of fileLines) {
-      console.log(chalk7.dim("    " + line.trim()));
+      console.log(chalk8.dim("    " + line.trim()));
     }
   }
   const sizeLine = packOutput.split("\n").find((l) => l.includes("package size"));
   const totalLine = packOutput.split("\n").find((l) => l.includes("total files"));
-  if (sizeLine) console.log(chalk7.dim("  " + sizeLine.replace(/npm notice\s*/, "").trim()));
-  if (totalLine) console.log(chalk7.dim("  " + totalLine.replace(/npm notice\s*/, "").trim()));
+  if (sizeLine) console.log(chalk8.dim("  " + sizeLine.replace(/npm notice\s*/, "").trim()));
+  if (totalLine) console.log(chalk8.dim("  " + totalLine.replace(/npm notice\s*/, "").trim()));
   if (opts.dryRun) {
     console.log();
     ok2("Dry run complete \u2014 no packages were published");
-    console.log(chalk7.dim("  Run without --dry-run to publish for real."));
+    console.log(chalk8.dim("  Run without --dry-run to publish for real."));
     console.log();
     return;
   }
@@ -862,38 +1393,38 @@ async function publishCommand(opts) {
   const { confirm } = await prompt2({
     type: "confirm",
     name: "confirm",
-    message: "Publish " + chalk7.cyan(name + "@" + version) + "?"
+    message: "Publish " + chalk8.cyan(name + "@" + version) + "?"
   });
   if (!confirm) {
-    console.log(chalk7.dim("  Cancelled."));
+    console.log(chalk8.dim("  Cancelled."));
     return;
   }
-  const pubSpinner = ora4("Publishing to npm...").start();
+  const pubSpinner = ora5("Publishing to npm...").start();
   try {
     run("npm publish --access public", cwd);
-    pubSpinner.succeed("Published " + chalk7.cyan(name + "@" + version));
+    pubSpinner.succeed("Published " + chalk8.cyan(name + "@" + version));
   } catch (err) {
     pubSpinner.fail("Publish failed");
     const msg = err instanceof Error ? err.message : String(err);
-    logger7.error({ error: msg }, "npm publish failed");
+    logger8.error({ error: msg }, "npm publish failed");
     process.exit(1);
   }
-  const ghToken = SecretsManager3.optional("GITHUB_TOKEN");
+  const ghToken = SecretsManager4.optional("GITHUB_TOKEN");
   let prUrl;
   if (ghToken) {
-    const prSpinner = ora4("Opening PR to voice registry...").start();
+    const prSpinner = ora5("Opening PR to voice registry...").start();
     try {
       prUrl = await openRegistryPR(name, version, pkg.description ?? "", ghToken);
       prSpinner.succeed("PR opened: " + prUrl);
     } catch (err) {
       prSpinner.fail("Failed to open PR");
       const msg = err instanceof Error ? err.message : String(err);
-      logger7.error({ error: msg }, "Registry PR failed");
+      logger8.error({ error: msg }, "Registry PR failed");
     }
   } else {
     console.log();
-    console.log(chalk7.dim("  To list in the Repertoire, set GITHUB_TOKEN and re-run"));
-    console.log(chalk7.dim("  Or open a PR manually: github.com/tuttiai/voices"));
+    console.log(chalk8.dim("  To list in the Repertoire, set GITHUB_TOKEN and re-run"));
+    console.log(chalk8.dim("  Or open a PR manually: github.com/tuttiai/voices"));
   }
   console.log();
   ok2(name + "@" + version + " published to npm");
@@ -977,27 +1508,100 @@ async function openRegistryPR(packageName, version, description, token) {
   return prData.html_url;
 }
 
+// src/commands/eval.ts
+import { existsSync as existsSync9, readFileSync as readFileSync4 } from "fs";
+import { resolve as resolve8 } from "path";
+import chalk9 from "chalk";
+import ora6 from "ora";
+import {
+  ScoreLoader as ScoreLoader5,
+  EvalRunner,
+  printEvalTable,
+  createLogger as createLogger9
+} from "@tuttiai/core";
+var logger9 = createLogger9("tutti-cli");
+async function evalCommand(suitePath, opts) {
+  const suiteFile = resolve8(suitePath);
+  if (!existsSync9(suiteFile)) {
+    logger9.error({ file: suiteFile }, "Suite file not found");
+    process.exit(1);
+  }
+  let suite;
+  try {
+    suite = JSON.parse(readFileSync4(suiteFile, "utf-8"));
+  } catch (err) {
+    logger9.error({ error: err instanceof Error ? err.message : String(err) }, "Failed to parse suite file");
+    process.exit(1);
+  }
+  const scoreFile = resolve8(opts.score ?? "./tutti.score.ts");
+  if (!existsSync9(scoreFile)) {
+    logger9.error({ file: scoreFile }, "Score file not found");
+    process.exit(1);
+  }
+  const spinner = ora6("Loading score...").start();
+  let score;
+  try {
+    score = await ScoreLoader5.load(scoreFile);
+  } catch (err) {
+    spinner.fail("Failed to load score");
+    logger9.error({ error: err instanceof Error ? err.message : String(err) }, "Score load failed");
+    process.exit(1);
+  }
+  spinner.succeed("Score loaded");
+  const evalSpinner = ora6("Running " + suite.cases.length + " eval cases...").start();
+  const runner = new EvalRunner(score);
+  const report = await runner.run(suite);
+  evalSpinner.stop();
+  printEvalTable(report);
+  if (opts.ci && report.summary.failed > 0) {
+    console.error(chalk9.red("  CI mode: " + report.summary.failed + " case(s) failed"));
+    process.exit(1);
+  }
+}
+
 // src/index.ts
 config();
-var logger8 = createLogger8("tutti-cli");
+var logger10 = createLogger10("tutti-cli");
 process.on("unhandledRejection", (reason) => {
-  logger8.error({ error: reason instanceof Error ? reason.message : String(reason) }, "Unhandled rejection");
+  logger10.error({ error: reason instanceof Error ? reason.message : String(reason) }, "Unhandled rejection");
   process.exit(1);
 });
 process.on("uncaughtException", (err) => {
-  logger8.error({ error: err.message }, "Fatal error");
+  logger10.error({ error: err.message }, "Fatal error");
   process.exit(1);
 });
 var program = new Command();
-program.name("tutti-ai").description("Tutti \u2014 multi-agent orchestration. All agents. All together.").version("0.8.0");
-program.command("init [project-name]").description("Create a new Tutti project").action(async (projectName) => {
-  await initCommand(projectName);
+program.name("tutti-ai").description("Tutti \u2014 multi-agent orchestration. All agents. All together.").version("0.9.0");
+program.command("init [project-name]").description("Create a new Tutti project").option("-t, --template <id>", "Project template to use").action(async (projectName, opts) => {
+  await initCommand(projectName, opts.template);
+});
+program.command("templates").description("List all available project templates").action(() => {
+  templatesCommand();
 });
 program.command("run [score]").description("Run a Tutti score interactively").action(async (score) => {
   await runCommand(score);
 });
-program.command("add <voice>").description("Add a voice to your project").action(async (voice) => {
-  await addCommand(voice);
+program.command("resume <session-id>").description("Resume a crashed or interrupted run from its last checkpoint").option(
+  "--store <backend>",
+  "Durable store the checkpoint was written to (redis | postgres)",
+  "redis"
+).option("-s, --score <path>", "Path to score file (default: ./tutti.score.ts)").option("-a, --agent <name>", "Agent key to resume (default: score.entry or the first agent)").option("-y, --yes", "Skip the confirmation prompt").action(
+  async (sessionId, opts) => {
+    if (opts.store !== "redis" && opts.store !== "postgres") {
+      console.error("--store must be 'redis' or 'postgres'");
+      process.exit(1);
+    }
+    const resolved = {
+      store: opts.store,
+      ...opts.score !== void 0 ? { score: opts.score } : {},
+      ...opts.agent !== void 0 ? { agent: opts.agent } : {},
+      ...opts.yes !== void 0 ? { yes: opts.yes } : {}
+    };
+    await resumeCommand(sessionId, resolved);
+  }
+);
+program.command("add <voice>").description("Add a voice to your project").action((voice) => {
+  addCommand(voice);
 });
 program.command("check [score]").description("Validate a score file without running it").action(async (score) => {
   await checkCommand(score);
@@ -1017,5 +1621,8 @@ program.command("voices").description("List all available official voices and in
 program.command("publish").description("Publish the current voice to npm and the voice registry").option("--dry-run", "Run all checks without publishing").action(async (opts) => {
   await publishCommand(opts);
 });
+program.command("eval <suite-file>").description("Run an evaluation suite against a score").option("--ci", "Exit with code 1 if any case fails").option("-s, --score <path>", "Path to score file (default: ./tutti.score.ts)").action(async (suitePath, opts) => {
+  await evalCommand(suitePath, opts);
+});
 program.parse();
 //# sourceMappingURL=index.js.map