byterover-cli 3.8.2 → 3.9.0

package/README.md

@@ -30,6 +30,7 @@ Or download our self-hosted PDF version of the paper [here](https://byterover.de
 
 **Key Features:**
 
+- 🌐 Web dashboard for curating and querying context (`brv webui`)
 - 🖥️ Interactive TUI with REPL interface (React/Ink)
 - 🧠 Context tree and knowledge storage management
 - 🔀 Git-like version control for the context tree (branch, commit, merge, push/pull)
@@ -101,35 +102,6 @@ The REPL auto-configures on first run - no setup needed. Type `/` to discover al
 /query How is authentication implemented?
 ```
 
-## Web UI Development
-
-The web UI supports a local-first development flow for the shared component library.
-
-`npm run dev:ui` uses the git submodule at `packages/byterover-packages/ui` so edits to shared UI components hot-reload immediately in Vite.
-
-```bash
-# Clone with submodules, or initialize them after clone
-git clone --recurse-submodules <repo-url>
-# or
-git submodule update --init --recursive
-
-# Install dependencies
-npm ci
-
-# Start or restart the daemon
-./bin/dev.js restart
-
-# Start the web UI in local development mode
-npm run dev:ui
-```
-
-Notes:
-
-- Edit shared components in `packages/byterover-packages/ui/src`.
-- `npm run dev:ui` uses the submodule source.
-- `npm run build:ui` uses the installed package path.
-- If `/api/ui/config` or transport bootstrap fails, restart the Vite dev server after restarting the daemon.
-
 ## ByteRover Cloud
 
 ByteRover Cloud is a hosted platform for teams to sync, share, and manage context knowledge across projects and machines.
@@ -139,12 +111,12 @@ Everything works locally by default - Cloud adds collaboration and persistence w
 <a href="https://app.byterover.dev"><img src="https://img.shields.io/badge/Try%20ByteRover%20Cloud-Free-blue?style=for-the-badge" alt="Try ByteRover Cloud" /></a>
 </p>
 
-Sign in with your ByteRover account via `/login` (TUI) or
-an [API key](https://app.byterover.dev/settings/keys) (`brv login`) to get started.
+Sign in from the dashboard, or run `brv login` with an [API key](https://app.byterover.dev/settings/keys).
 
 - 🔄 **Team context sync** — push and pull shared knowledge across teammates
 - 📂 **Shared spaces** — organize context across multiple projects and teams
 - 💻 **Multi-machine access** — sync your context tree across devices with cloud backup
+- 💻 **Multi-machine access** — sync your context tree across devices
 - 🧠 **Built-in hosted LLM** — start immediately with limited free usage
 - 👥 **Team management** — manage members, spaces, and permissions via the web app
 - 📊 **Usage analytics** — track seat allocation and monthly credit consumption
@@ -153,10 +125,13 @@ an [API key](https://app.byterover.dev/settings/keys) (`brv login`) to get start
 <details>
 <summary><h2>CLI Usage</h2></summary>
 
+Most users only need `brv webui`. The commands below are for advanced users and automation. Run `brv --help` for the full, up-to-date reference.
+
 ### Core Workflow
 
 ```bash
 brv                  # Start interactive REPL
+brv webui            # Open the ByteRover dashboard (primary UI)
 brv status           # Show project and daemon status
 brv curate           # Add context to knowledge storage
 brv curate view      # View curate history
@@ -245,7 +220,7 @@ Run `brv --help` for the full command reference.
 <details>
 <summary><h2>Supported LLM Providers</h2></summary>
 
-ByteRover CLI supports 18 LLM providers out of the box. Use `brv providers connect` to set up a provider and `brv providers switch` to change the active one.
+ByteRover CLI supports 18 LLM providers out of the box. Connect and switch providers from the dashboard, or use `brv providers connect` / `brv providers switch`.
 
 | Provider | Description |
 |----------|-------------|
@@ -310,13 +285,12 @@ We welcome contributions! See our [Contributing Guide](CONTRIBUTING.md) for deve
 ByteRover CLI is built and maintained by the [ByteRover team](https://byterover.dev/).
 
 - Join our [Discord](https://discord.com/invite/UMRrpNjh5W) to share projects, ask questions, or just say hi
-- [Report issues](https://github.com/campfirein/byterover-cli/issues) <!-- TODO: ENG-1575 --> on GitHub
+- [Report issues](https://github.com/campfirein/byterover-cli/issues) on GitHub
 - If you enjoy ByteRover CLI, please give us a star on GitHub — it helps a lot!
 - Follow [@kevinnguyendn](https://x.com/kevinnguyendn) on X
 
 ## Contributors
 
-<!-- TODO: ENG-1575 -->
 [![Contributors](https://contrib.rocks/image?repo=campfirein/byterover-cli&max=40&columns=10)](https://github.com/campfirein/byterover-cli/graphs/contributors)
 
 ## Star History

package/dist/agent/infra/llm/providers/google.js

@@ -15,7 +15,7 @@ export const googleProvider = {
             model: provider(config.model),
         });
     },
-    defaultModel: 'gemini-2.5-flash',
+    defaultModel: 'gemini-3-flash-preview',
     description: 'Gemini models by Google',
     envVars: ['GOOGLE_API_KEY', 'GEMINI_API_KEY'],
     id: 'google',

package/dist/oclif/commands/login.d.ts

@@ -1,13 +1,26 @@
 import { Command } from '@oclif/core';
-import { type AuthLoginWithApiKeyResponse } from '../../shared/transport/events/auth-events.js';
+import { type AuthLoginCompletedEvent, type AuthLoginWithApiKeyResponse } from '../../shared/transport/events/auth-events.js';
 import { type DaemonClientOptions } from '../lib/daemon-client.js';
+export interface LoginOAuthOptions extends DaemonClientOptions {
+    /** Max time to wait for LOGIN_COMPLETED after the browser opens. */
+    oauthTimeoutMs?: number;
+    /** Invoked with the auth URL once the daemon has started the flow. */
+    onAuthUrl?: (authUrl: string) => void;
+}
 export default class Login extends Command {
     static description: string;
     static examples: string[];
     static flags: {
-        'api-key': import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        'api-key': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
         format: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
     };
+    /** Gates the OAuth flow. DISPLAY/WAYLAND_DISPLAY deliberately not checked — unset on macOS/Windows, would false-positive. */
+    protected canOpenBrowser(): boolean;
     protected loginWithApiKey(apiKey: string, options?: DaemonClientOptions): Promise<AuthLoginWithApiKeyResponse>;
+    protected loginWithOAuth(options?: LoginOAuthOptions): Promise<AuthLoginCompletedEvent>;
     run(): Promise<void>;
+    private emitError;
+    private emitSuccess;
+    private runApiKey;
+    private runOAuth;
 }

package/dist/oclif/commands/login.js

@@ -1,20 +1,24 @@
 import { Command, Flags } from '@oclif/core';
-import { AuthEvents } from '../../shared/transport/events/auth-events.js';
+import { AuthEvents, } from '../../shared/transport/events/auth-events.js';
 import { formatConnectionError, withDaemonRetry } from '../lib/daemon-client.js';
 import { writeJsonResponse } from '../lib/json-response.js';
+const DEFAULT_OAUTH_TIMEOUT_MS = 5 * 60 * 1000;
 export default class Login extends Command {
     static description = 'Authenticate with ByteRover for cloud sync features (optional for local usage)';
     static examples = [
+        '# Browser OAuth (default)',
+        '<%= config.bin %> <%= command.id %>',
+        '',
+        '# API key (for CI / headless environments)',
         '<%= config.bin %> <%= command.id %> --api-key <key>',
         '',
         '# JSON output (for automation)',
-        '<%= config.bin %> <%= command.id %> --api-key <key> --format json',
+        '<%= config.bin %> <%= command.id %> --format json',
     ];
     static flags = {
         'api-key': Flags.string({
             char: 'k',
-            description: 'API key for authentication (get yours at https://app.byterover.dev/settings/keys)',
-            required: true,
+            description: 'API key for headless/CI login (get yours at https://app.byterover.dev/settings/keys). Omit to use the browser OAuth flow.',
         }),
         format: Flags.string({
             default: 'text',
@@ -22,44 +26,117 @@ export default class Login extends Command {
             options: ['text', 'json'],
         }),
     };
+    /** Gates the OAuth flow. DISPLAY/WAYLAND_DISPLAY deliberately not checked — unset on macOS/Windows, would false-positive. */
+    canOpenBrowser() {
+        // Either stream not a TTY means piped/scripted/CI — no interactive user to complete OAuth.
+        if (process.stdout.isTTY !== true || process.stdin.isTTY !== true)
+            return false;
+        // SSH has a TTY but can't reach the user's local browser.
+        if (process.env.SSH_CONNECTION || process.env.SSH_CLIENT || process.env.SSH_TTY)
+            return false;
+        return true;
+    }
     async loginWithApiKey(apiKey, options) {
         return withDaemonRetry(async (client) => client.requestWithAck(AuthEvents.LOGIN_WITH_API_KEY, { apiKey }), options);
     }
+    async loginWithOAuth(options) {
+        const timeoutMs = options?.oauthTimeoutMs ?? DEFAULT_OAUTH_TIMEOUT_MS;
+        return withDaemonRetry(async (client) => {
+            // Subscribe *before* initiating, so a fast callback cannot race past us.
+            let unsubscribe;
+            let timer;
+            const completion = new Promise((resolve, reject) => {
+                timer = setTimeout(() => {
+                    unsubscribe?.();
+                    timer = undefined;
+                    reject(new Error(`Login timed out after ${Math.round(timeoutMs / 1000)}s`));
+                }, timeoutMs);
+                unsubscribe = client.on(AuthEvents.LOGIN_COMPLETED, (data) => {
+                    if (timer) {
+                        clearTimeout(timer);
+                        timer = undefined;
+                    }
+                    unsubscribe?.();
+                    resolve(data);
+                });
+            });
+            try {
+                const startResponse = await client.requestWithAck(AuthEvents.START_LOGIN);
+                options?.onAuthUrl?.(startResponse.authUrl);
+                return await completion;
+            }
+            catch (error) {
+                if (timer) {
+                    clearTimeout(timer);
+                    timer = undefined;
+                }
+                unsubscribe?.();
+                throw error;
+            }
+        }, options);
+    }
     async run() {
         const { flags } = await this.parse(Login);
         const apiKey = flags['api-key'];
-        const format = (flags.format ?? 'text');
+        const format = flags.format === 'json' ? 'json' : 'text';
+        if (!apiKey && !this.canOpenBrowser()) {
+            this.emitError(format, 'Cannot open a local browser here (non-interactive shell or SSH session). Use --api-key for headless login (get yours at https://app.byterover.dev/settings/keys).');
+            return;
+        }
         try {
-            if (format === 'text') {
-                this.log('Logging in...');
-            }
-            const response = await this.loginWithApiKey(apiKey);
-            if (response.success) {
-                if (format === 'json') {
-                    writeJsonResponse({ command: 'login', data: { userEmail: response.userEmail }, success: true });
-                }
-                else {
-                    this.log(`Logged in as ${response.userEmail}`);
-                }
-            }
-            else {
-                const errorMessage = response.error ?? 'Authentication failed';
-                if (format === 'json') {
-                    writeJsonResponse({ command: 'login', data: { error: errorMessage }, success: false });
-                }
-                else {
-                    this.log(errorMessage);
-                }
-            }
+            await (apiKey ? this.runApiKey(apiKey, format) : this.runOAuth(format));
         }
         catch (error) {
-            const errorMessage = error instanceof Error ? error.message : 'Login failed';
+            const message = formatConnectionError(error);
             if (format === 'json') {
-                writeJsonResponse({ command: 'login', data: { error: errorMessage }, success: false });
+                this.emitError(format, message);
             }
             else {
-                this.log(formatConnectionError(error));
+                this.log(message);
             }
         }
     }
+    emitError(format, message) {
+        if (format === 'json') {
+            writeJsonResponse({ command: 'login', data: { error: message }, success: false });
+        }
+        else {
+            this.log(message);
+        }
+    }
+    emitSuccess(format, userEmail) {
+        if (format === 'json') {
+            writeJsonResponse({ command: 'login', data: { userEmail }, success: true });
+        }
+        else {
+            this.log(userEmail ? `Logged in as ${userEmail}` : 'Logged in successfully');
+        }
+    }
+    async runApiKey(apiKey, format) {
+        if (format === 'text') {
+            this.log('Logging in...');
+        }
+        const response = await this.loginWithApiKey(apiKey);
+        if (response.success) {
+            this.emitSuccess(format, response.userEmail);
+        }
+        else {
+            this.emitError(format, response.error ?? 'Authentication failed');
+        }
+    }
+    async runOAuth(format) {
+        const onAuthUrl = (authUrl) => {
+            if (format === 'text') {
+                this.log('Opening browser for authentication...');
+                this.log(`If the browser did not open, visit: ${authUrl}`);
+            }
+        };
+        const result = await this.loginWithOAuth({ onAuthUrl });
+        if (result.success) {
+            this.emitSuccess(format, result.user?.email);
+        }
+        else {
+            this.emitError(format, result.error ?? 'Authentication failed');
+        }
+    }
 }

package/dist/oclif/commands/providers/list.js

@@ -29,6 +29,9 @@ export default class ProviderList extends Command {
                 const status = p.isCurrent ? chalk.green('(current)') : p.isConnected ? chalk.yellow('(connected)') : '';
                 const authBadge = p.authMethod === 'oauth' ? chalk.cyan('[OAuth]') : p.authMethod === 'api-key' ? chalk.dim('[API Key]') : '';
                 this.log(`  ${p.name} [${p.id}] ${status} ${authBadge}`.trimEnd());
+                if (p.description) {
+                    this.log(`    ${chalk.dim(p.description)}`);
+                }
             }
         }
         catch (error) {

package/dist/oclif/commands/vc/diff.d.ts

@@ -0,0 +1,12 @@
+import { Command } from '@oclif/core';
+export default class VcDiff extends Command {
+    static args: {
+        ref: import("@oclif/core/interfaces").Arg<string | undefined, Record<string, unknown>>;
+    };
+    static description: string;
+    static examples: string[];
+    static flags: {
+        staged: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}

package/dist/oclif/commands/vc/diff.js

@@ -0,0 +1,40 @@
+import { Args, Command, Flags } from '@oclif/core';
+import { VcEvents, } from '../../../shared/transport/events/vc-events.js';
+import { formatDiff } from '../../../tui/features/vc/diff/utils/format-diff.js';
+import { parseMode } from '../../../tui/features/vc/diff/utils/parse-mode.js';
+import { formatConnectionError, withDaemonRetry } from '../../lib/daemon-client.js';
+export default class VcDiff extends Command {
+    static args = {
+        ref: Args.string({ description: 'commit, branch, or <ref1>..<ref2> range' }),
+    };
+    static description = 'Show changes between commits, the index, or the working tree';
+    static examples = [
+        '<%= config.bin %> <%= command.id %>',
+        '<%= config.bin %> <%= command.id %> --staged',
+        '<%= config.bin %> <%= command.id %> HEAD~1',
+        '<%= config.bin %> <%= command.id %> main..feature/x',
+        '<%= config.bin %> <%= command.id %> main',
+    ];
+    static flags = {
+        staged: Flags.boolean({ description: 'Show staged changes (HEAD vs index)' }),
+    };
+    async run() {
+        const { args, flags } = await this.parse(VcDiff);
+        let request;
+        try {
+            request = { mode: parseMode(args.ref, flags.staged) };
+        }
+        catch (error) {
+            this.error(error instanceof Error ? error.message : String(error));
+        }
+        try {
+            const response = await withDaemonRetry((client) => client.requestWithAck(VcEvents.DIFFS, request));
+            const text = formatDiff(response);
+            if (text.length > 0)
+                process.stdout.write(text);
+        }
+        catch (error) {
+            this.error(formatConnectionError(error));
+        }
+    }
+}

package/dist/oclif/commands/vc/remote/remove.d.ts

@@ -0,0 +1,9 @@
+import { Command } from '@oclif/core';
+export default class VcRemoteRemove extends Command {
+    static args: {
+        name: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static description: string;
+    static examples: string[];
+    run(): Promise<void>;
+}

package/dist/oclif/commands/vc/remote/remove.js

@@ -0,0 +1,23 @@
+import { Args, Command } from '@oclif/core';
+import { VcEvents } from '../../../../shared/transport/events/vc-events.js';
+import { formatConnectionError, withDaemonRetry } from '../../../lib/daemon-client.js';
+export default class VcRemoteRemove extends Command {
+    static args = {
+        name: Args.string({ description: 'Remote name', required: true }),
+    };
+    static description = 'Remove a named remote';
+    static examples = [`<%= config.bin %> <%= command.id %> origin`];
+    async run() {
+        const { args } = await this.parse(VcRemoteRemove);
+        if (args.name !== 'origin') {
+            this.error(`Only 'origin' remote is currently supported.`);
+        }
+        try {
+            await withDaemonRetry(async (client) => client.requestWithAck(VcEvents.REMOTE, { subcommand: 'remove' }));
+            this.log(`Remote 'origin' removed.`);
+        }
+        catch (error) {
+            this.error(formatConnectionError(error));
+        }
+    }
+}

package/dist/server/core/domain/entities/brv-config.d.ts

@@ -85,6 +85,10 @@ export declare class BrvConfig {
      * Serializes the config to JSON format
      */
     toJson(): Record<string, unknown>;
+    /**
+     * Creates a new BrvConfig with space fields cleared, preserving all other fields.
+     */
+    withoutSpace(): BrvConfig;
     /**
      * Creates a new BrvConfig with space fields replaced, preserving all other fields.
      */

package/dist/server/core/domain/entities/brv-config.js

@@ -170,6 +170,18 @@ export class BrvConfig {
             version: this.version,
         };
     }
+    /**
+     * Creates a new BrvConfig with space fields cleared, preserving all other fields.
+     */
+    withoutSpace() {
+        return new BrvConfig({
+            ...this,
+            spaceId: undefined,
+            spaceName: undefined,
+            teamId: undefined,
+            teamName: undefined,
+        });
+    }
     /**
      * Creates a new BrvConfig with space fields replaced, preserving all other fields.
      */

package/dist/server/core/domain/entities/provider-registry.js

@@ -26,7 +26,7 @@ export const PROVIDER_REGISTRY = {
     byterover: {
         baseUrl: '',
         category: 'popular',
-        description: 'Built-in LLM, logged-in ByteRover account required. Limited free usage.',
+        description: 'Built-in LLM, ByteRover account required. Limited free usage.',
         headers: {},
         id: 'byterover',
         modelsEndpoint: '',
@@ -89,7 +89,7 @@ export const PROVIDER_REGISTRY = {
         apiKeyUrl: 'https://aistudio.google.com/apikey',
         baseUrl: '',
         category: 'popular',
-        defaultModel: 'gemini-2.5-flash',
+        defaultModel: 'gemini-3-flash-preview',
         description: 'Gemini models by Google',
         envVars: ['GOOGLE_API_KEY', 'GEMINI_API_KEY'],
         headers: {},
@@ -187,7 +187,7 @@ export const PROVIDER_REGISTRY = {
         baseUrl: '',
         category: 'other',
         defaultModel: 'llama3',
-        description: 'Connect any OpenAI-compatible endpoint (Ollama, LM Studio, etc.)',
+        description: 'OpenAI-compatible endpoint (Ollama, LM Studio, etc.)',
         envVars: ['OPENAI_COMPATIBLE_API_KEY'],
         headers: {},
         id: 'openai-compatible',

package/dist/server/core/interfaces/services/i-git-service.d.ts

@@ -166,10 +166,12 @@ export type CloneGitParams = BaseGitParams & {
 };
 /**
  * Source of the blob content.
- * - `'HEAD'` → blob at the HEAD commit
  * - `'STAGE'` → blob in the git index (staging area)
+ * - `{commitish: string}` → blob at the resolved commit (branch name, tag, SHA, or `'HEAD'`)
  */
-export type GitBlobRef = 'HEAD' | 'STAGE';
+export type GitBlobRef = 'STAGE' | {
+    commitish: string;
+};
 export type GetBlobContentParams = BaseGitParams & {
     path: string;
     ref: GitBlobRef;
@@ -180,6 +182,30 @@ export type GetBlobContentsParams = BaseGitParams & {
 };
 /** Map of path → blob content (utf8). Missing entries indicate the blob is absent at that ref. */
 export type BlobContents = Record<string, string | undefined>;
+/**
+ * Source of the side being diffed. Beyond `GitBlobRef`, also supports `'WORKDIR'`
+ * (the working tree, used for unstaged and ref-vs-worktree comparisons).
+ */
+export type GitDiffSide = 'STAGE' | 'WORKDIR' | {
+    commitish: string;
+};
+export type ListChangedFilesParams = BaseGitParams & {
+    from: GitDiffSide;
+    to: GitDiffSide;
+};
+export type ChangedFile = {
+    path: string;
+    status: 'added' | 'deleted' | 'modified';
+};
+/** Content + short oid pair returned by {@link IGitService.getTextBlob}. */
+export type TextBlob = {
+    /** True when the blob contains a NUL byte; `content` is then empty. */
+    binary?: boolean;
+    /** UTF-8 decoded blob content (empty string when binary). */
+    content: string;
+    /** 7-char short oid. */
+    oid: string;
+};
 export interface IGitService {
     abortMerge(params: AbortMergeGitParams): Promise<void>;
     add(params: AddGitParams): Promise<void>;
@@ -194,11 +220,11 @@ export interface IGitService {
     getAheadBehind(params: GetAheadBehindParams): Promise<AheadBehind>;
     /**
      * Reads the content of a file blob at a given git ref.
-     * - `ref: 'HEAD'` → resolves HEAD commit, then reads the blob at `path`
      * - `ref: 'STAGE'` → reads the blob staged in the index at `path`
+     * - `ref: {commitish}` → resolves the commit-ish ref (branch name, tag, SHA, or `'HEAD'`), then reads the blob at `path`
      *
      * Returns `undefined` when no blob exists at that ref (e.g. file not yet committed,
-     * or file not yet staged), or when HEAD has no commits.
+     * or file not yet staged), or when the ref has no commits.
      */
     getBlobContent(params: GetBlobContentParams): Promise<string | undefined>;
     /**
@@ -227,8 +253,21 @@ export interface IGitService {
      */
     getFilesWithConflictMarkers(params: BaseGitParams): Promise<string[]>;
     getRemoteUrl(params: GetRemoteUrlGitParams): Promise<string | undefined>;
+    /**
+     * Reads a UTF-8 text blob together with its short oid in a single pass.
+     * Returns `undefined` when the blob is absent or detected as binary (contains a NUL byte).
+     * Used by diff producers to avoid the double-read pattern of calling `getBlobContent`
+     * and `git.hashBlob` separately.
+     */
+    getTextBlob(params: GetBlobContentParams): Promise<TextBlob | undefined>;
     /** Returns the upstream tracking branch config, or `undefined` if not configured. */
     getTrackingBranch(params: GetTrackingBranchParams): Promise<TrackingBranch | undefined>;
+    /**
+     * Returns the 7-character short oid that git would assign to the given content,
+     * computed via `git.hashBlob`. Used to render the working-tree side of a
+     * `git diff`-style `index <oid>..<oid>` header (the working tree has no stored oid).
+     */
+    hashBlob(content: Buffer): Promise<string>;
     init(params: InitGitParams): Promise<void>;
     /** Returns true if `ancestor` commit is reachable from `commit`. */
     isAncestor(params: BaseGitParams & {
@@ -241,6 +280,18 @@ export interface IGitService {
     isInitialized(params: BaseGitParams): Promise<boolean>;
     /** Lists local branches. When `remote` is specified, also includes remote-tracking branches. */
     listBranches(params: ListBranchesGitParams): Promise<GitBranch[]>;
+    /**
+     * Returns the set of files that differ between two diff sides, with their change status.
+     *
+     * Status mirrors `git diff` semantics:
+     * - `'added'`   → present on `to` side, absent on `from` side
+     * - `'deleted'` → present on `from` side, absent on `to` side
+     * - `'modified'` → present on both, differs
+     *
+     * Untracked files (absent from both HEAD and STAGE) are excluded from the
+     * unstaged case (`from='STAGE', to='WORKDIR'`) to match `git diff` no-args behavior.
+     */
+    listChangedFiles(params: ListChangedFilesParams): Promise<ChangedFile[]>;
     listRemotes(params: BaseGitParams): Promise<GitRemote[]>;
     log(params: LogGitParams): Promise<GitCommit[]>;
     merge(params: MergeGitParams): Promise<MergeResult>;

package/dist/server/infra/context-tree/summary-frontmatter.js

@@ -44,7 +44,7 @@ export function generateSummaryContent(frontmatter, body) {
         token_count: frontmatter.token_count,
         type: 'summary',
     };
-    const yamlContent = yamlDump(fm, { flowLevel: 1, lineWidth: -1, sortKeys: true }).trimEnd();
+    const yamlContent = yamlDump(fm, { flowLevel: 1, lineWidth: -1, sortKeys: false }).trimEnd();
     return `---\n${yamlContent}\n---\n${body}`;
 }
 // ---------------------------------------------------------------------------
@@ -79,7 +79,7 @@ export function generateArchiveStubContent(frontmatter, ghostCue) {
         points_to: frontmatter.points_to,
         type: 'archive_stub',
     };
-    const yamlContent = yamlDump(fm, { flowLevel: 1, lineWidth: -1, sortKeys: true }).trimEnd();
+    const yamlContent = yamlDump(fm, { flowLevel: 1, lineWidth: -1, sortKeys: false }).trimEnd();
     return `---\n${yamlContent}\n---\n${ghostCue}`;
 }
 // ---------------------------------------------------------------------------

package/dist/server/infra/dream/operations/consolidate.js

@@ -224,8 +224,9 @@ function addFrontmatterFields(content, fields) {
             try {
                 const parsed = yamlLoad(yamlBlock);
                 if (parsed && typeof parsed === 'object') {
+                    // Spread preserves existing key order; new fields are appended at end.
                     const merged = { ...parsed, ...fields };
-                    const newYaml = yamlDump(merged, { flowLevel: 2, lineWidth: -1, sortKeys: true }).trimEnd();
+                    const newYaml = yamlDump(merged, { flowLevel: 2, lineWidth: -1, sortKeys: false }).trimEnd();
                     return `---\n${newYaml}\n---\n${body}`;
                 }
             }
@@ -235,7 +236,7 @@ function addFrontmatterFields(content, fields) {
         }
     }
     // No valid frontmatter — prepend
-    const yaml = yamlDump(fields, { flowLevel: 2, lineWidth: -1, sortKeys: true }).trimEnd();
+    const yaml = yamlDump(fields, { flowLevel: 2, lineWidth: -1, sortKeys: false }).trimEnd();
     return `---\n${yaml}\n---\n${content}`;
 }
 // ── Helpers ──────────────────────────────────────────────────────────────────
@@ -492,7 +493,7 @@ async function addRelatedLinks(filePath, relatedPaths) {
                 if (parsed && typeof parsed === 'object') {
                     const existing = Array.isArray(parsed.related) ? parsed.related : [];
                     parsed.related = [...new Set([...existing, ...relatedPaths])];
-                    const newYaml = yamlDump(parsed, { flowLevel: 1, lineWidth: -1, sortKeys: true }).trimEnd();
+                    const newYaml = yamlDump(parsed, { flowLevel: 1, lineWidth: -1, sortKeys: false }).trimEnd();
                     await atomicWrite(filePath, `---\n${newYaml}\n---\n${body}`);
                     return;
                 }
@@ -503,7 +504,7 @@ async function addRelatedLinks(filePath, relatedPaths) {
         }
     }
     // No existing frontmatter — add one with related field
-    const yaml = yamlDump({ related: relatedPaths }, { flowLevel: 1, lineWidth: -1, sortKeys: true }).trimEnd();
+    const yaml = yamlDump({ related: relatedPaths }, { flowLevel: 1, lineWidth: -1, sortKeys: false }).trimEnd();
     await atomicWrite(filePath, `---\n${yaml}\n---\n${content}`);
 }
 async function determineNeedsReview(actionType, files, opts) {

package/dist/server/infra/dream/operations/synthesize.js

@@ -208,7 +208,7 @@ async function writeSynthesisFile(candidate, contextTreeDir, runtimeSignalStore,
         type: 'synthesis',
     };
     /* eslint-enable camelcase */
-    const yaml = yamlDump(frontmatter, { lineWidth: -1, sortKeys: true }).trimEnd();
+    const yaml = yamlDump(frontmatter, { lineWidth: -1, sortKeys: false }).trimEnd();
     const body = [
         `# ${candidate.title}`,
         '',