codehere 0.6.1 → 0.6.2

package/dist/application/use-cases/generate-final-report.js

@@ -61,7 +61,9 @@ ${i.steps.length ? i.steps.map((s) => `- ${s.label} (${s.state})`).join('\n') :
 
 Files changed:
 ${i.artifacts?.files?.length
-    ? i.artifacts.files.map((f) => `- ${f.path} (+${f.added}/-${f.removed}${f.trust !== undefined ? `, trust: ${f.trust}` : ''})`).join('\n')
+    ? i.artifacts.files
+        .map((f) => `- ${f.path} (+${f.added}/-${f.removed}${f.trust !== undefined ? `, trust: ${f.trust}` : ''})`)
+        .join('\n')
     : '(no file artifacts captured)'}
 
 Token usage: ${i.artifacts?.usage?.inputTokens ?? 0} in / ${i.artifacts?.usage?.outputTokens ?? 0} out
@@ -75,16 +77,69 @@ function selectProviderBinary() {
         return [override];
     return ['claude-free', 'claude'];
 }
+/**
+ * UAT-003 — patterns that indicate the wrapped agent's session terminated
+ * because of a network / auth / quota failure rather than a real task.
+ * When we see these in the would-be summary text, we prepend a plain-English
+ * recovery hint instead of letting the raw provider error echo through.
+ *
+ * Pre-fix: bare `exit` in REPL → Conductor spawned claude-code → real API
+ * call failed with "All connection attempts failed Request ID: req_...";
+ * Final Report quoted that text verbatim. Per Core Values #4 + #6, this is
+ * unacceptable — the user sees a Request ID that means nothing.
+ */
+const NETWORK_FAILURE_PATTERNS = /(?:all connection attempts failed|ECONNREFUSED|ENOTFOUND|fetch failed|network error|request id:\s*req_|connection timed out|getaddrinfo)/i;
+function isLikelyNetworkFailureSummary(text) {
+    return NETWORK_FAILURE_PATTERNS.test(text);
+}
+function buildErrorRecoveryReport(input, durationMs) {
+    // Tailor the hint to the specific failure shape we can detect from input.
+    const agentName = input.agent === 'conductor' ? 'the agent codehere chose' : input.agent;
+    return {
+        summary: `The ${agentName} session ended without completing the task. ` +
+            `This usually means a network hiccup, an expired login, or a rate limit on the provider.\n\n` +
+            `What to try: check your internet, run \`codehere health\` to confirm reachability + auth, ` +
+            `or wait a minute and rerun the same prompt. If it keeps happening, try a different agent ` +
+            `from the dropdown — codehere is vendor-neutral on purpose.\n\n` +
+            `No files were changed in this attempt.`,
+        generatedAt: Date.now(),
+        durationMs,
+    };
+}
 /**
  * Generate a Final Report. Returns null if no provider is reachable.
  * Never throws — failure modes return null + log a debug line.
+ *
+ * UAT-003 — when the input.status is 'error', we skip the LLM call entirely
+ * and return a deterministic recovery hint. Saves tokens on a known-failed
+ * task AND gives the user a plain-English next step instead of waiting for
+ * a possibly-unhelpful LLM summary.
  */
 export async function generateFinalReport(input) {
+    // Short-circuit on errored sessions — don't waste tokens summarizing nothing.
+    if (input.status === 'error') {
+        return buildErrorRecoveryReport(input, 0);
+    }
     const prompt = PROMPT_TEMPLATE(input);
     for (const binary of selectProviderBinary()) {
         const result = await tryProvider(binary, prompt, input.sessionId);
-        if (result)
+        if (result) {
+            // Defense-in-depth: even on 'completed' status, if the generated
+            // summary leaks a provider network-failure string (e.g., the wrapped
+            // agent exited 0 but its assistant text was an error message), wrap
+            // the summary with a recovery preamble.
+            if (isLikelyNetworkFailureSummary(result.summary)) {
+                return {
+                    summary: `Couldn't reach the provider cleanly — the agent's session text looks like a network or auth failure.\n\n` +
+                        `What to try: check your internet, run \`codehere health\`, or rerun in a minute. ` +
+                        `If it persists, switch agents from the dropdown.\n\n` +
+                        `— Raw agent message —\n${result.summary}`,
+                    generatedAt: result.generatedAt,
+                    durationMs: result.durationMs,
+                };
+            }
             return result;
+        }
     }
     return null;
 }

package/dist/application/use-cases/generate-narration.js

@@ -75,11 +75,17 @@ function tryProvider(binary, prompt, sessionId, stepCount) {
             try {
                 child.kill();
             }
-            catch { /* ignore */ }
+            catch {
+                /* ignore */
+            }
             finish(null);
         }, 20_000);
-        child.stdout?.on('data', (chunk) => { stdout += chunk.toString('utf-8'); });
-        child.stderr?.on('data', (chunk) => { stderr += chunk.toString('utf-8'); });
+        child.stdout?.on('data', (chunk) => {
+            stdout += chunk.toString('utf-8');
+        });
+        child.stderr?.on('data', (chunk) => {
+            stderr += chunk.toString('utf-8');
+        });
         child.on('close', (code) => {
             clearTimeout(timeout);
             if (code !== 0) {

package/dist/index.js

@@ -77,7 +77,7 @@ program
     // typo guard miss the unknown-command shape. See typo-guard.ts.
     .argument('[query...]', 'Optional initial task to delegate (otherwise enter interactive REPL)')
     .action(async (queryParts) => {
-    const joined = (queryParts && queryParts.length > 0) ? queryParts.join(' ') : '';
+    const joined = queryParts && queryParts.length > 0 ? queryParts.join(' ') : '';
     // One-shot delegate: `codehere "review src/auth.ts"` runs that task and exits.
     // Useful for scripting or quick one-offs without entering the REPL.
     if (joined && joined.trim()) {
@@ -581,13 +581,17 @@ program
                 const { SessionManager } = require('./infrastructure/orchestration/session-manager.js');
                 SessionManager.getInstance().shutdown();
             }
-            catch { /* graceful degradation — daemon may not have started fully */ }
+            catch {
+                /* graceful degradation — daemon may not have started fully */
+            }
             if (cloud) {
                 try {
                     const { stopCloudSync } = require('./infrastructure/protocols/cloud-sync.js');
                     stopCloudSync();
                 }
-                catch { /* cloud sync may not be loaded */ }
+                catch {
+                    /* cloud sync may not be loaded */
+                }
             }
             server.close();
         };

package/dist/infrastructure/cost/budget-config.js

@@ -84,7 +84,7 @@ export function saveBudget(cfg) {
         mkdirSync(dir, { recursive: true });
     const lines = [
         '# codehere daily-spend budget. Edit by hand or via `codehere budget set <amount>`.',
-        '# daily_usd: hard ceiling for today\'s estimated spend. Set to a number to enable.',
+        "# daily_usd: hard ceiling for today's estimated spend. Set to a number to enable.",
         '# Leave commented out / omit to disable budget enforcement entirely.',
     ];
     if (cfg.dailyUsd !== null) {

package/dist/infrastructure/cost/spend-aggregator.js

@@ -36,11 +36,11 @@ function sessionsFile() {
  *  under-promise and miss a real bill. */
 const COST_PER_M_OUTPUT_TOKENS_USD = {
     'claude-code': 15.0, // Sonnet 4.6 baseline
-    'codex': 10.0, // GPT-5 / codex baseline
-    'aider': 15.0, // typically Sonnet
-    'gemini': 0, // free tier (Google AI Studio)
-    'opencode': 0, // typically free local / NIM-routed
-    'conductor': 15.0, // routes to Claude Code by default
+    codex: 10.0, // GPT-5 / codex baseline
+    aider: 15.0, // typically Sonnet
+    gemini: 0, // free tier (Google AI Studio)
+    opencode: 0, // typically free local / NIM-routed
+    conductor: 15.0, // routes to Claude Code by default
 };
 const INPUT_RATE_RATIO = 0.2; // input ≈ 1/5 of output
 const CACHE_READ_RATIO = 0.1; // cache reads ≈ 1/10 of input (so 1/50 output)

package/dist/infrastructure/hooks/claude-sdk-hook.js

@@ -517,7 +517,9 @@ export function appendAuditLog(entry) {
             catch {
                 // Lock held by another process — spin-wait ~10ms
                 const deadline = Date.now() + 10;
-                while (Date.now() < deadline) { /* busy-wait — sync context */ }
+                while (Date.now() < deadline) {
+                    /* busy-wait — sync context */
+                }
             }
         }
         return false;
@@ -526,7 +528,9 @@ export function appendAuditLog(entry) {
         try {
             unlinkSync(LOCK_FILE);
         }
-        catch { /* best effort */ }
+        catch {
+            /* best effort */
+        }
     };
     if (!lockAcquired()) {
         // Fall through unlocked rather than drop the entry. The entry still

package/dist/infrastructure/orchestration/codex-adapter.js

@@ -216,9 +216,7 @@ export function spawnCodex(prompt, options = {}) {
                 continue;
             try {
                 const data = JSON.parse(line);
-                if (codexThreadId === undefined &&
-                    data.type === 'thread.started' &&
-                    typeof data.thread_id === 'string') {
+                if (codexThreadId === undefined && data.type === 'thread.started' && typeof data.thread_id === 'string') {
                     codexThreadId = data.thread_id;
                 }
                 emit({ type: data.type ?? 'codex_event', timestamp: Date.now(), data });
@@ -325,8 +323,15 @@ export function spawnCodex(prompt, options = {}) {
                 let stdout = '';
                 let stderr = '';
                 // codex exec resume <SESSION_ID> -  → reads prompt from stdin
-                const followup = spawn('codex', ['exec', '--json', '--skip-git-repo-check', '--dangerously-bypass-approvals-and-sandbox',
-                    'resume', codexThreadId, '-'], {
+                const followup = spawn('codex', [
+                    'exec',
+                    '--json',
+                    '--skip-git-repo-check',
+                    '--dangerously-bypass-approvals-and-sandbox',
+                    'resume',
+                    codexThreadId,
+                    '-',
+                ], {
                     cwd,
                     env: spawnEnv,
                     stdio: ['pipe', 'pipe', 'pipe'],
@@ -371,7 +376,7 @@ export function spawnCodex(prompt, options = {}) {
 export const CodexAdapter = {
     id: 'codex',
     label: 'Codex',
-    description: 'OpenAI\'s coding agent. Good when the task needs reading a lot of code first, then changing several files together.',
+    description: "OpenAI's coding agent. Good when the task needs reading a lot of code first, then changing several files together.",
     processPattern: /(?:^|\/)codex(?:\s|$)/,
     isInstalled() {
         try {

package/dist/infrastructure/orchestration/context-handoff.js

@@ -58,7 +58,7 @@ export function loadHandoffContext(cwd, { fromSessionId, maxAgeMs = DEFAULT_MAX_
     // Filter by age
     const recent = packs.filter((p) => {
         const ts = p.timestamp;
-        return ts && (now - ts) < maxAgeMs;
+        return ts && now - ts < maxAgeMs;
     });
     // Prefer packs with enough graph structure to be useful
     const structured = recent.filter((p) => {

package/dist/infrastructure/orchestration/gemini-adapter.js

@@ -48,13 +48,7 @@ import { snapshotCwd, extractArtifacts } from './artifacts-extractor.js';
 //
 // `--skip-trust` — skip the per-workspace trust prompt that gemini shows on
 // first run in a new directory.
-const HEADLESS_FLAGS = [
-    '--approval-mode',
-    'yolo',
-    '--skip-trust',
-    '-o',
-    'stream-json',
-];
+const HEADLESS_FLAGS = ['--approval-mode', 'yolo', '--skip-trust', '-o', 'stream-json'];
 // Error patterns scoped to STDERR / result.error / error events only — NOT
 // every JSON-serialized event (which would false-positive on tool output).
 const ERROR_PATTERNS = [
@@ -340,13 +334,7 @@ export function spawnGemini(prompt, options = {}) {
             }
         }
         statusValue =
-            killRequested || signal !== null
-                ? 'killed'
-                : errorEmitted
-                    ? 'error'
-                    : code === 0
-                        ? 'completed'
-                        : 'error';
+            killRequested || signal !== null ? 'killed' : errorEmitted ? 'error' : code === 0 ? 'completed' : 'error';
         if (aggregator.finalize(statusValue === 'completed' ? 'completed' : statusValue === 'killed' ? 'killed' : 'error')) {
             stepsSnapshot = aggregator.steps.map((s) => ({ ...s }));
             emit({ type: 'codehere:steps', timestamp: Date.now(), data: { steps: stepsSnapshot } });
@@ -518,7 +506,7 @@ export function spawnGemini(prompt, options = {}) {
 export const GeminiAdapter = {
     id: 'gemini',
     label: 'Gemini',
-    description: 'Google\'s coding agent. Has a free tier and can read very large amounts of code or docs at once. Useful when the paid agents are out of credits.',
+    description: "Google's coding agent. Has a free tier and can read very large amounts of code or docs at once. Useful when the paid agents are out of credits.",
     // Match `gemini`, `node /path/.../gemini`, and `./gemini` invocations.
     processPattern: /(?:^|\/)gemini(?:\s|$)|node\s+\S*gemini/,
     isInstalled() {

package/dist/infrastructure/orchestration/graphify-context.js

@@ -74,7 +74,7 @@ export function buildGraphSync(cwd, { incremental = true } = {}) {
  * Compile a compact context pack for a prompt + workspace.
  * Synchronous — calls graphify-ts pack and returns the payload.
  */
-export function compileContextPackSync(prompt, cwd, { task = 'explain', budget = 3000, } = {}) {
+export function compileContextPackSync(prompt, cwd, { task = 'explain', budget = 3000 } = {}) {
     const startTime = Date.now();
     const graphPath = getGraphPath(cwd);
     // Build graph if it doesn't exist yet
@@ -86,12 +86,7 @@ export function compileContextPackSync(prompt, cwd, { task = 'explain', budget =
         return null;
     }
     try {
-        const output = execFileSync('npx', [
-            'graphify-ts', 'pack', prompt,
-            '--graph', graphPath,
-            '--task', task,
-            '--budget', String(budget),
-        ], {
+        const output = execFileSync('npx', ['graphify-ts', 'pack', prompt, '--graph', graphPath, '--task', task, '--budget', String(budget)], {
             cwd,
             encoding: 'utf-8',
             maxBuffer: 512 * 1024,
@@ -125,7 +120,9 @@ export function compileSessionPackSync(cwd, { prompt, artifacts, steps, agent })
         agent ? `Agent: ${agent}` : undefined,
         artifacts ? `Artifacts:\n${artifacts}` : undefined,
         steps ? `Steps taken:\n${steps}` : undefined,
-    ].filter(Boolean).join('\n\n');
+    ]
+        .filter(Boolean)
+        .join('\n\n');
     return compileContextPackSync(sessionContext, cwd, { task: 'impact', budget: 2500 });
 }
 // ── Context pack persistence ───────────────────────────────────────────────────
@@ -232,11 +229,7 @@ export function queryGraphSync(question, cwd, { maxTokens = 2000 } = {}) {
         return null;
     }
     try {
-        const output = execFileSync('npx', [
-            'graphify-ts', 'query', question,
-            '--graph', graphPath,
-            '--budget', String(maxTokens),
-        ], {
+        const output = execFileSync('npx', ['graphify-ts', 'query', question, '--graph', graphPath, '--budget', String(maxTokens)], {
             cwd,
             encoding: 'utf-8',
             maxBuffer: 256 * 1024,

package/dist/infrastructure/orchestration/memory-injector.js

@@ -65,17 +65,13 @@ function looksLikeInitSeed(content, kind) {
             /\[Tone for generated code\./,
             /\[Don't do X\. Always do Y\./,
         ];
-        const hits = markers.filter(re => re.test(content)).length;
+        const hits = markers.filter((re) => re.test(content)).length;
         return hits >= 2;
     }
     if (kind === 'session') {
         // The init session.md seed has this header + structure
-        const markers = [
-            /^# Working session/m,
-            /^> Per-machine, gitignored/m,
-            /^## In flight\s*\n+- \[ \]\s*$/m,
-        ];
-        const hits = markers.filter(re => re.test(content)).length;
+        const markers = [/^# Working session/m, /^> Per-machine, gitignored/m, /^## In flight\s*\n+- \[ \]\s*$/m];
+        const hits = markers.filter((re) => re.test(content)).length;
         return hits >= 2;
     }
     return false;
@@ -142,9 +138,9 @@ function readLessons(codehereDir, n) {
         const body = readFileSync(p, 'utf8');
         return body
             .split('\n')
-            .filter(line => line.trim().length > 0)
+            .filter((line) => line.trim().length > 0)
             .slice(0, n)
-            .map(line => {
+            .map((line) => {
             try {
                 const obj = JSON.parse(line);
                 return typeof obj.text === 'string' ? obj.text : line;
@@ -182,11 +178,11 @@ function formatSession(session) {
     return `# Current session scratch (.codehere/memory/working/session.md)\n\n${session}\n`;
 }
 function formatLessons(lessons) {
-    const items = lessons.map(l => `- ${l}`).join('\n');
+    const items = lessons.map((l) => `- ${l}`).join('\n');
     return `# Project lessons (.codehere/memory/semantic/lessons.jsonl)\n\n${items}\n`;
 }
 function formatSymbols(symbols) {
-    const lines = symbols.map(s => `- \`${s.name}\` — ${s.file}:${s.line} (${s.references} refs)`).join('\n');
+    const lines = symbols.map((s) => `- \`${s.name}\` — ${s.file}:${s.line} (${s.references} refs)`).join('\n');
     return `# Top symbols in this repo (.codehere/memory/episodic/repo_map.json)\n\n${lines}\n`;
 }
 /**
@@ -232,7 +228,7 @@ export function buildMemoryPrefix(projectRoot, options = {}) {
     let kept = [...candidates];
     while (kept.length > 0) {
         const totalChars = kept.reduce((acc, c) => acc + c.body.length, 0);
-        const totalTokens = estimateTokens(kept.map(c => c.body).join('\n')) + separatorTokens;
+        const totalTokens = estimateTokens(kept.map((c) => c.body).join('\n')) + separatorTokens;
         if (totalTokens <= maxTokens)
             break;
         // Drop the last (least-essential) section.
@@ -250,10 +246,10 @@ export function buildMemoryPrefix(projectRoot, options = {}) {
     if (kept.length === 0) {
         return { prefix: '', included: [], tokens: 0, truncated };
     }
-    const prefix = kept.map(c => c.body).join('\n') + SEPARATOR;
+    const prefix = kept.map((c) => c.body).join('\n') + SEPARATOR;
     return {
         prefix,
-        included: kept.map(c => c.key),
+        included: kept.map((c) => c.key),
         tokens: estimateTokens(prefix),
         truncated,
     };
@@ -296,8 +292,7 @@ function findProjectRoot(startPath) {
     }
     // Bound the loop at the filesystem root by checking dirname stability.
     for (;;) {
-        if (existsSync(join(current, '.codehere')) ||
-            existsSync(join(current, 'AGENTS.md'))) {
+        if (existsSync(join(current, '.codehere')) || existsSync(join(current, 'AGENTS.md'))) {
             return current;
         }
         const parent = dirname(current);

package/dist/infrastructure/orchestration/opencode-adapter.js

@@ -434,7 +434,7 @@ export function spawnOpenCode(prompt, options = {}) {
 export const OpenCodeAdapter = {
     id: 'opencode',
     label: 'OpenCode',
-    description: 'Runs several agents at once for genuinely independent jobs. You won\'t see live progress while it works — the trade-off for the speed of doing things in parallel.',
+    description: "Runs several agents at once for genuinely independent jobs. You won't see live progress while it works — the trade-off for the speed of doing things in parallel.",
     processPattern: /(?:^|\/)opencode(?:\s|$)/,
     isInstalled() {
         try {

package/dist/infrastructure/orchestration/progress-aggregator.js

@@ -464,8 +464,7 @@ export class ProgressAggregator {
         if (itemType === 'tool_call' || itemType === 'local_shell_call') {
             const name = String(item.tool_name ?? item.name ?? 'tool');
             // Tool-call items may carry a `result` or `output` field too.
-            const result = (typeof item.result === 'string' ? item.result : '') ||
-                (typeof item.output === 'string' ? item.output : '');
+            const result = (typeof item.result === 'string' ? item.result : '') || (typeof item.output === 'string' ? item.output : '');
             this._steps.push({
                 label: truncate(name),
                 state: 'done',

package/dist/infrastructure/orchestration/session-manager.js

@@ -22,14 +22,14 @@ import { buildGenericAdapter, loadAgentsConfig } from './generic-cli-adapter.js'
 import { buildConductorAdapter } from './conductor-adapter.js';
 import { seedAgentsConfig } from './agents-config-seed.js';
 import { AUDIT_FILE } from '../hooks/claude-sdk-hook.js';
-import { appendSpawned, appendCompleted, appendFinalReport, loadRecent } from './session-persistence.js';
+import { appendSpawned, appendCompleted, appendFinalReport, loadRecent, } from './session-persistence.js';
 import { generateFinalReport, printFinalReportToTerminal } from '../../application/use-cases/generate-final-report.js';
 import { mirrorSpawnedToThread, mirrorCompletedToThread } from '../storage/project-thread-mirror.js';
 import { scanPromptBeforeSpawn } from '../hooks/pre-prompt-scan.js';
 import { generateNarration } from '../../application/use-cases/generate-narration.js';
 import { randomUUID } from 'crypto';
 import { classifyFailoverEligibility } from './failover-classifier.js';
-import { resolveFailoverTarget, toAvailability, } from './failover-policy.js';
+import { resolveFailoverTarget, toAvailability } from './failover-policy.js';
 import { loadFailoverConfig, resolveChain } from './failover-config.js';
 import { enrichPromptWithPackSync, compileSessionPackSync, persistContextPack } from './graphify-context.js';
 import { buildFailoverHandoff, enrichPromptWithHandoff } from './context-handoff.js';
@@ -39,7 +39,13 @@ import { mirrorFailoverToThread } from '../storage/project-thread-mirror.js';
 // order. Built-in adapters first; user-config-driven ones appended from
 // ~/.codehere/agents.yaml (generic-cli-adapter). isInstalled() gates visibility
 // so an adapter registering for an un-installed CLI is harmless.
-const BUILTIN_REGISTRY = [ClaudeCodeAdapter, CodexAdapter, AiderAdapter, OpenCodeAdapter, GeminiAdapter];
+const BUILTIN_REGISTRY = [
+    ClaudeCodeAdapter,
+    CodexAdapter,
+    AiderAdapter,
+    OpenCodeAdapter,
+    GeminiAdapter,
+];
 // Seed the default agents.yaml if this user has never configured one, so Gemini
 // / Cursor / Pi / Antigravity / Goose appear in the registry pre-wired. They
 // stay hidden in the UI until isInstalled() flips to true. Idempotent.
@@ -149,16 +155,16 @@ export class SessionManager {
      *  reads these via getFailoverOffers() for the /api/failover-offers endpoint. */
     failoverOffers;
     /** Tracks the failover error code per session so acceptFailover can emit
-      *  the correct reason in the thread event. Populated by handleFailover. */
+     *  the correct reason in the thread event. Populated by handleFailover. */
     failoverReasonBySession = new Map();
     /** Session threading — tracks which session continued as which after failover.
-      *  continuedAsBySession: original → new session ID
-      *  continuedFromBySession: new → original session ID */
+     *  continuedAsBySession: original → new session ID
+     *  continuedFromBySession: new → original session ID */
     continuedAsBySession = new Map();
     continuedFromBySession = new Map();
     /** Final Report failure tracking — when generateFinalReport rejects, we
-      *  record it so the API can return a definitive "failed" status instead
-      *  of leaving the UI showing "Generating report…" forever. */
+     *  record it so the API can return a definitive "failed" status instead
+     *  of leaving the UI showing "Generating report…" forever. */
     failedReportBySession = new Set();
     spawn(prompt, agentId = 'claude-code', options) {
         const adapter = getAdapter(agentId);
@@ -305,7 +311,10 @@ export class SessionManager {
             // or pack compilation may fail. All degrade silently.
             void Promise.resolve().then(() => {
                 try {
-                    const stepsStr = session.steps?.map((s) => `${s.label}: ${s.output || s.state}`).filter(Boolean).join('\n') ?? '';
+                    const stepsStr = session.steps
+                        ?.map((s) => `${s.label}: ${s.output || s.state}`)
+                        .filter(Boolean)
+                        .join('\n') ?? '';
                     const pack = compileSessionPackSync(cwd, {
                         prompt: session.prompt,
                         artifacts: JSON.stringify(session.artifacts, null, 2),
@@ -446,14 +455,21 @@ export class SessionManager {
                             try {
                                 printFinalReportToTerminal(reportInput, report);
                             }
-                            catch { /* defensive */ }
+                            catch {
+                                /* defensive */
+                            }
                         }
                     })
-                        .catch(() => { });
+                        .catch(() => {
+                        /* defensive */
+                    });
                     // P1 — persist context pack at failover-replacement session exit.
                     void Promise.resolve().then(() => {
                         try {
-                            const stepsStr = newSession.steps?.map((s) => `${s.label}: ${s.output || s.state}`).filter(Boolean).join('\n') ?? '';
+                            const stepsStr = newSession.steps
+                                ?.map((s) => `${s.label}: ${s.output || s.state}`)
+                                .filter(Boolean)
+                                .join('\n') ?? '';
                             const pack = compileSessionPackSync(cwd, {
                                 prompt: newSession.prompt,
                                 artifacts: JSON.stringify(newSession.artifacts, null, 2),
@@ -546,9 +562,9 @@ export class SessionManager {
         return offers;
     }
     /** v0.6.x P0 — user-initiated failover accept. Spawns a replacement
-       *  session on the target agent, preserving the original prompt + cwd.
-       *  P2 — injects handoff context for cross-agent continuity.
-       *  Returns the new session or undefined if the target is unavailable. */
+     *  session on the target agent, preserving the original prompt + cwd.
+     *  P2 — injects handoff context for cross-agent continuity.
+     *  Returns the new session or undefined if the target is unavailable. */
     acceptFailover(sessionId, targetAgent) {
         const session = this.sessions.get(sessionId);
         if (!session)
@@ -631,14 +647,21 @@ export class SessionManager {
                     try {
                         printFinalReportToTerminal(reportInput, report);
                     }
-                    catch { /* defensive */ }
+                    catch {
+                        /* defensive */
+                    }
                 }
             })
-                .catch(() => { });
+                .catch(() => {
+                /* defensive */
+            });
             // P1 — persist context pack at accept-failover replacement session exit.
             void Promise.resolve().then(() => {
                 try {
-                    const stepsStr = newSession.steps?.map((s) => `${s.label}: ${s.output || s.state}`).filter(Boolean).join('\n') ?? '';
+                    const stepsStr = newSession.steps
+                        ?.map((s) => `${s.label}: ${s.output || s.state}`)
+                        .filter(Boolean)
+                        .join('\n') ?? '';
                     const pack = compileSessionPackSync(cwd, {
                         prompt: newSession.prompt,
                         artifacts: JSON.stringify(newSession.artifacts, null, 2),
@@ -718,7 +741,9 @@ export class SessionManager {
                 if (out)
                     this.narrationBySession.set(session.sessionId, out);
             })
-                .catch(() => { });
+                .catch(() => {
+                /* defensive — generateNarration never throws */
+            });
         }, intervalMs);
         this.narrationTimers.set(session.sessionId, timer);
     }
@@ -750,14 +775,14 @@ export class SessionManager {
         return this.continuedAsBySession.get(sessionId);
     }
     /** PM-UX Layer 3 · prose Final Report for an in-memory exited session.
-      *  Returns undefined while generation is in flight OR if the provider chain
-      *  failed (no claude-free, no claude, no credit, etc). The web UI reads this
-      *  through the /api/tasks serializer to render the prose summary inline. */
+     *  Returns undefined while generation is in flight OR if the provider chain
+     *  failed (no claude-free, no claude, no credit, etc). The web UI reads this
+     *  through the /api/tasks serializer to render the prose summary inline. */
     getFinalReport(sessionId) {
         return this.finalReportBySession.get(sessionId);
     }
     /** Returns true if Final Report generation explicitly failed for this session.
-      *  Lets the API distinguish "not yet" from "never coming". */
+     *  Lets the API distinguish "not yet" from "never coming". */
     hasFailedReport(sessionId) {
         return this.failedReportBySession.has(sessionId);
     }

package/dist/infrastructure/protocols/cloud-sync.js

@@ -62,7 +62,7 @@ export function collectSessionMetadata() {
     }
     try {
         const content = readFileSync(SESSIONS_FILE, 'utf-8');
-        const lines = content.split('\n').filter(l => l.trim().length > 0);
+        const lines = content.split('\n').filter((l) => l.trim().length > 0);
         // Parse records and pair spawned + completed
         const spawnedMap = new Map();
         const completedMap = new Map();
@@ -89,9 +89,13 @@ export function collectSessionMetadata() {
             const completed = completedMap.get(id);
             const finalReport = finalReportMap.get(id);
             const status = completed
-                ? (completed.status === 'completed' ? 'done' : completed.status === 'failed' ? 'failed' : 'done')
+                ? completed.status === 'completed'
+                    ? 'done'
+                    : completed.status === 'failed'
+                        ? 'failed'
+                        : 'done'
                 : 'running';
-            const durationMs = completed?.durationMs ?? (Date.now() - spawned.startedAt);
+            const durationMs = completed?.durationMs ?? Date.now() - spawned.startedAt;
             const tools = completed?.steps?.length ?? 0;
             const files = completed?.artifacts?.filesChanged?.length ?? 0;
             const trustScore = extractTrustScore(completed?.artifacts);
@@ -151,7 +155,7 @@ export function startCloudSync(machineName) {
                 console.error(`  Cloud sync failed: ${res.status} ${body}`);
             }
             else {
-                const data = await res.json();
+                const data = (await res.json());
                 if (data.sessionsPushed && data.sessionsPushed > 0) {
                     console.log(`  Cloud sync: ${data.sessionsPushed} session(s) pushed`);
                 }
@@ -166,7 +170,7 @@ export function startCloudSync(machineName) {
             const res = await fetch(`${CLOUD_URL}?action=pull-tasks&machineId=${machineId}`);
             if (!res.ok)
                 return;
-            const data = await res.json();
+            const data = (await res.json());
             const tasks = data.tasks || [];
             for (const task of tasks) {
                 if (task.prompt) {

package/dist/infrastructure/protocols/mcp-server-impl.js

@@ -439,7 +439,7 @@ export function startMCPServer(options = {}) {
             // Send current session state on connect
             try {
                 const manager = SessionManager.getInstance();
-                const sessions = manager.list().map(s => ({
+                const sessions = manager.list().map((s) => ({
                     sessionId: s.sessionId,
                     status: s.status,
                     agent: s.agent,
@@ -455,7 +455,9 @@ export function startMCPServer(options = {}) {
                 try {
                     lastSize = statSync(SESSIONS_FILE).size;
                 }
-                catch { /* first time */ }
+                catch {
+                    /* first time */
+                }
             }
             const onChange = () => {
                 try {
@@ -467,7 +469,9 @@ export function startMCPServer(options = {}) {
                     lastSize = currentSize;
                     res.write(`data: ${JSON.stringify({ type: 'change' })}\n\n`);
                 }
-                catch { /* transient */ }
+                catch {
+                    /* transient */
+                }
             };
             watchFile(SESSIONS_FILE, { interval: 500 }, onChange);
             const ping = setInterval(() => res.write(': ping\n\n'), 15000);
@@ -1257,7 +1261,9 @@ export function startMCPServer(options = {}) {
                                         });
                                     }
                                 }
-                                catch { /* mirror is best-effort */ }
+                                catch {
+                                    /* mirror is best-effort */
+                                }
                                 res.writeHead(200, { 'Content-Type': 'application/json' });
                                 res.end(JSON.stringify({ sessionId, ...out }));
                             }
@@ -1325,7 +1331,11 @@ export function startMCPServer(options = {}) {
                         }
                         else {
                             res.writeHead(200, { 'Content-Type': 'application/json' });
-                            res.end(JSON.stringify({ ok: false, error: 'target_unavailable', detail: `Could not spawn ${parsed.targetAgent}. Check if it's installed and authenticated.` }));
+                            res.end(JSON.stringify({
+                                ok: false,
+                                error: 'target_unavailable',
+                                detail: `Could not spawn ${parsed.targetAgent}. Check if it's installed and authenticated.`,
+                            }));
                         }
                     }
                     catch (e) {

package/dist/infrastructure/storage/cross-tool-agents.js

@@ -143,7 +143,10 @@ export function parseAgentFile(filePath, defaultFormat = 'unknown') {
     // Tools normalization
     let tools = null;
     if (typeof fm.tools === 'string') {
-        tools = fm.tools.split(',').map((t) => t.trim().toLowerCase()).filter(Boolean);
+        tools = fm.tools
+            .split(',')
+            .map((t) => t.trim().toLowerCase())
+            .filter(Boolean);
     }
     else if (hasObjectTools) {
         tools = [];
@@ -162,7 +165,21 @@ export function parseAgentFile(filePath, defaultFormat = 'unknown') {
             ? 'subagent'
             : 'all';
     // Track unknown frontmatter keys (everything outside our normalized set)
-    const knownKeys = new Set(['name', 'description', 'mode', 'model', 'temperature', 'tools', 'permission', 'color', 'hidden', 'top_p', 'steps', 'prompt', 'disable']);
+    const knownKeys = new Set([
+        'name',
+        'description',
+        'mode',
+        'model',
+        'temperature',
+        'tools',
+        'permission',
+        'color',
+        'hidden',
+        'top_p',
+        'steps',
+        'prompt',
+        'disable',
+    ]);
     const unknownKeys = Object.keys(fm).filter((k) => !knownKeys.has(k));
     return {
         name: typeof fm.name === 'string' ? fm.name : filenameName,

package/dist/infrastructure/storage/project-thread-migration.js

@@ -32,12 +32,7 @@ import { readFileSync, writeFileSync, mkdirSync, rmSync, existsSync, readdirSync
 import { join } from 'path';
 import { createHash } from 'crypto';
 /** Path patterns considered ephemeral and skipped from project list. */
-const DEFAULT_TEMP_DIR_PATTERNS = [
-    /^\/tmp\//,
-    /^\/var\/folders\//,
-    /^\/private\/var\/folders\//,
-    /^\/private\/tmp\//,
-];
+const DEFAULT_TEMP_DIR_PATTERNS = [/^\/tmp\//, /^\/var\/folders\//, /^\/private\/var\/folders\//, /^\/private\/tmp\//];
 /** sha1(cwd)[:12] — stable, short, filesystem-safe. */
 function slugForCwd(cwd, unknownLabel) {
     if (!cwd)
@@ -79,7 +74,17 @@ function rollupSessions(events) {
             completedIds.add(id);
         const existing = byId.get(id) ?? { id, abandoned: true };
         const existingAny = existing;
-        for (const k of ['agent', 'prompt', 'cwd', 'startedAt', 'status', 'durationMs', 'completedAt', 'steps', 'artifacts']) {
+        for (const k of [
+            'agent',
+            'prompt',
+            'cwd',
+            'startedAt',
+            'status',
+            'durationMs',
+            'completedAt',
+            'steps',
+            'artifacts',
+        ]) {
             if (e[k] !== undefined && existingAny[k] === undefined) {
                 existingAny[k] = e[k];
             }

package/dist/infrastructure/storage/project-thread-reader.js

@@ -133,7 +133,17 @@ export function readProjectThread(slug, options) {
             };
             // Merge fields — later entries override earlier (covers
             // spawn → completion update pattern from forward-mirror)
-            for (const k of ['agent', 'prompt', 'cwd', 'startedAt', 'status', 'durationMs', 'completedAt', 'steps', 'artifacts']) {
+            for (const k of [
+                'agent',
+                'prompt',
+                'cwd',
+                'startedAt',
+                'status',
+                'durationMs',
+                'completedAt',
+                'steps',
+                'artifacts',
+            ]) {
                 if (rec[k] !== undefined) {
                     existing[k] = rec[k];
                 }

package/dist/infrastructure/storage/project-thread-title-backfill.js

@@ -178,10 +178,14 @@ export async function backfillThreadTitles(options) {
                         break;
                     }
                 }
-                catch { /* skip malformed */ }
+                catch {
+                    /* skip malformed */
+                }
             }
         }
-        catch { /* if we can't read, fall through and let the append fail */ }
+        catch {
+            /* if we can't read, fall through and let the append fail */
+        }
         if (userBeatUs) {
             result.alreadyTitled++;
             continue;

package/dist/presentation/cli/commands/budget-command.js

@@ -39,7 +39,7 @@ function showBudget() {
     const cfg = loadBudget();
     const spend = computeSpendToday();
     newline();
-    console.log(info('Today\'s estimated spend:'), fmtUsd(spend.totalUsd), `(${spend.sessionCount} session${spend.sessionCount === 1 ? '' : 's'})`);
+    console.log(info("Today's estimated spend:"), fmtUsd(spend.totalUsd), `(${spend.sessionCount} session${spend.sessionCount === 1 ? '' : 's'})`);
     if (cfg.dailyUsd === null) {
         console.log(info('Daily budget:'), 'none — no enforcement');
         console.log(info('Set one with:'), 'codehere budget set 5');
@@ -67,7 +67,7 @@ function setBudget(value) {
     cfg.dailyUsd = n;
     saveBudget(cfg);
     console.log(success('Daily budget set to'), fmtUsd(n));
-    console.log(info('Spawns will be blocked once today\'s estimated spend reaches this amount.'));
+    console.log(info("Spawns will be blocked once today's estimated spend reaches this amount."));
     console.log(info('Disable with:'), 'codehere budget off');
 }
 function disableBudget() {

package/dist/presentation/cli/commands/init-command.js

@@ -39,7 +39,7 @@
  * Refuses to follow symlinks (lstat check) so a hostile/misplaced symlink at
  * `.codehere/CONTEXT.md` or `.gitignore` cannot redirect writes outside the repo.
  */
-import { existsSync, mkdirSync, writeFileSync, readFileSync, appendFileSync, lstatSync, statSync, symlinkSync, readlinkSync, rmSync } from 'fs';
+import { existsSync, mkdirSync, writeFileSync, readFileSync, appendFileSync, lstatSync, statSync, symlinkSync, readlinkSync, rmSync, } from 'fs';
 import { homedir } from 'os';
 import { join, dirname } from 'path';
 import { colors, success, info, warning, error, newline } from '../../../ui.js';
@@ -316,7 +316,7 @@ function findSymlinkAncestor(codehereDir, relativePath) {
     // Defensive: reject any relative path containing .. — even though templates
     // are hard-coded, this protects against future schema additions slipping a
     // traversal through.
-    if (segments.some(seg => seg === '..' || seg === '')) {
+    if (segments.some((seg) => seg === '..' || seg === '')) {
         return relativePath;
     }
     // Walk codehereDir, codehereDir/seg1, codehereDir/seg1/seg2, ... (excluding
@@ -338,12 +338,13 @@ function ensureGitignore(repoRoot) {
         return { result: 'refused-symlink', addedLines: 0 };
     const existing = existsSync(gitignorePath) ? readFileSync(gitignorePath, 'utf8') : '';
     // De-duplicate: only append lines that aren't already present.
-    const missing = GITIGNORE_LINES.filter(line => !existing.includes(line));
+    const missing = GITIGNORE_LINES.filter((line) => !existing.includes(line));
     if (missing.length === 0)
         return { result: 'already-present', addedLines: 0 };
     const block = (existing.length > 0 && !existing.endsWith('\n') ? '\n' : '') +
         `\n${GITIGNORE_MARKER}\n` +
-        missing.join('\n') + '\n';
+        missing.join('\n') +
+        '\n';
     appendFileSync(gitignorePath, block);
     return { result: 'updated', addedLines: missing.length };
 }

package/dist/presentation/cli/commands/memory-command.js

@@ -48,7 +48,7 @@ import { buildMemoryPrefix } from '../../../infrastructure/orchestration/memory-
  * Built lazily from init-command.ts's F3_TEMPLATES so the seed bodies stay
  * in one place — no duplication, no drift.
  */
-const DEFAULT_SEED_BODIES = new Map(F3_TEMPLATES.map(t => [t.filename, t.body]));
+const DEFAULT_SEED_BODIES = new Map(F3_TEMPLATES.map((t) => [t.filename, t.body]));
 function lessonIdForText(text) {
     return createHash('sha256').update(text).digest('hex').slice(0, 16);
 }
@@ -58,8 +58,8 @@ function readLessonsFile(path) {
     return readFileSync(path, 'utf8')
         .trim()
         .split('\n')
-        .filter(l => l.length > 0)
-        .map(l => {
+        .filter((l) => l.length > 0)
+        .map((l) => {
         try {
             return JSON.parse(l);
         }
@@ -83,7 +83,7 @@ function readLessonsFile(path) {
 function appendLessonIfNew(path, text, source) {
     const id = lessonIdForText(text);
     const existing = readLessonsFile(path);
-    const dup = existing.find(l => l.id === id);
+    const dup = existing.find((l) => l.id === id);
     if (dup)
         return { result: 'duplicate', lesson: dup };
     const lesson = {
@@ -326,7 +326,9 @@ function gatherLayerSummary(codehereDir, projectRoot) {
     const episodicLearnings = join(codehereDir, 'memory/episodic/AGENT_LEARNINGS.jsonl');
     const repoMapPath = join(codehereDir, 'memory/episodic/repo_map.json');
     const learningsLine = existsSync(episodicLearnings) || isSymlink(episodicLearnings)
-        ? (isSymlink(episodicLearnings) ? `AGENT_LEARNINGS.jsonl → ${readlinkSync(episodicLearnings)}` : 'AGENT_LEARNINGS.jsonl (real file)')
+        ? isSymlink(episodicLearnings)
+            ? `AGENT_LEARNINGS.jsonl → ${readlinkSync(episodicLearnings)}`
+            : 'AGENT_LEARNINGS.jsonl (real file)'
         : '(no AGENT_LEARNINGS.jsonl)';
     const repoMapLine = existsSync(repoMapPath)
         ? `repo_map.json (${fmtSize(statSync(repoMapPath).size)})`
@@ -354,9 +356,12 @@ function gatherLayerSummary(codehereDir, projectRoot) {
     const skillsDir = join(codehereDir, 'skills');
     if (existsSync(skillsDir)) {
         const subdirs = readdirSync(skillsDir, { withFileTypes: true })
-            .filter(e => e.isDirectory())
-            .filter(e => existsSync(join(skillsDir, e.name, 'SKILL.md')));
-        out.push({ layer: 'skills', line: `skills     · ${subdirs.length} skill folder${subdirs.length === 1 ? '' : 's'}` });
+            .filter((e) => e.isDirectory())
+            .filter((e) => existsSync(join(skillsDir, e.name, 'SKILL.md')));
+        out.push({
+            layer: 'skills',
+            line: `skills     · ${subdirs.length} skill folder${subdirs.length === 1 ? '' : 's'}`,
+        });
     }
     else {
         out.push({ layer: 'skills', line: `skills     · (no skills/ dir)` });
@@ -368,7 +373,10 @@ function gatherLayerSummary(codehereDir, projectRoot) {
             const parsed = JSON.parse(readFileSync(patternsPath, 'utf8'));
             const builtin = Array.isArray(parsed.patterns_builtin) ? parsed.patterns_builtin.length : 0;
             const project = Array.isArray(parsed.patterns_project) ? parsed.patterns_project.length : 0;
-            out.push({ layer: 'protocols', line: `protocols  · hook_patterns.json (${builtin} built-in + ${project} project)` });
+            out.push({
+                layer: 'protocols',
+                line: `protocols  · hook_patterns.json (${builtin} built-in + ${project} project)`,
+            });
         }
         catch {
             out.push({ layer: 'protocols', line: `protocols  · hook_patterns.json (parse error)` });
@@ -389,7 +397,10 @@ function gatherLayerSummary(codehereDir, projectRoot) {
     }
     else {
         const truncNote = inj.truncated ? ' TRUNCATED' : '';
-        out.push({ layer: 'injection', line: `injection  · ${inj.tokens} tokens · ${inj.included.join(', ')}${truncNote}` });
+        out.push({
+            layer: 'injection',
+            line: `injection  · ${inj.tokens} tokens · ${inj.included.join(', ')}${truncNote}`,
+        });
     }
     return out;
 }
@@ -526,7 +537,10 @@ function executeMemoryShow(layerArg) {
                 console.log(`  ${info('empty  ')} no lessons.jsonl yet`);
                 break;
             }
-            const lines = readFileSync(path, 'utf8').trim().split('\n').filter(l => l.length > 0);
+            const lines = readFileSync(path, 'utf8')
+                .trim()
+                .split('\n')
+                .filter((l) => l.length > 0);
             if (lines.length === 0) {
                 console.log(`  ${info('empty  ')} lessons.jsonl is empty — run ${colors.cyan('codehere memory graduate')} (coming in v0.5)`);
                 break;
@@ -561,8 +575,8 @@ function executeMemoryShow(layerArg) {
                 break;
             }
             const subdirs = readdirSync(skillsDir, { withFileTypes: true })
-                .filter(e => e.isDirectory())
-                .filter(e => existsSync(join(skillsDir, e.name, 'SKILL.md')));
+                .filter((e) => e.isDirectory())
+                .filter((e) => existsSync(join(skillsDir, e.name, 'SKILL.md')));
             if (subdirs.length === 0) {
                 console.log(`  ${info('empty  ')} no skill folders yet (skills/<name>/SKILL.md)`);
                 break;
@@ -907,8 +921,8 @@ function executeMemoryInit(options) {
     }
     // Idempotency hint when nothing was actually migrated.
     const allOutcomes = [contextOutcome, handoverOutcome, promptsResult.outcome];
-    const anyMigrated = allOutcomes.some(o => o === 'migrated');
-    const allAlreadyOrMissing = allOutcomes.every(o => o === 'already-migrated' || o === 'missing');
+    const anyMigrated = allOutcomes.some((o) => o === 'migrated');
+    const allAlreadyOrMissing = allOutcomes.every((o) => o === 'already-migrated' || o === 'missing');
     if (!anyMigrated && allAlreadyOrMissing) {
         newline();
         console.log(`  ${info('no-op')} everything already migrated or no source files to migrate.`);

package/dist/presentation/cli/commands/protocols-builder.js

@@ -122,8 +122,8 @@ export function buildHookPatternsExport() {
         source: 'agent/src/infrastructure/security/trust-scorer.ts',
         _note: "Exported from codehere's trust-scorer pattern bank via 'codehere protocols export'. " +
             "DO NOT hand-edit `patterns_builtin[]` — it's regenerated on every export. " +
-            "Add project-specific patterns to `patterns_project[]` — those are preserved across re-exports. " +
-            "Pattern ids are stable slugs of category + description; reference them deterministically.",
+            'Add project-specific patterns to `patterns_project[]` — those are preserved across re-exports. ' +
+            'Pattern ids are stable slugs of category + description; reference them deterministically.',
         patterns_builtin: builtin,
         patterns_project: [],
     };

package/dist/presentation/cli/commands/repo-map-builder.js

@@ -107,8 +107,8 @@ function gitListFiles(repoRoot) {
         return null;
     return r.stdout
         .split('\0')
-        .filter(p => p.length > 0)
-        .filter(p => SUPPORTED_EXTENSIONS.has(extname(p)));
+        .filter((p) => p.length > 0)
+        .filter((p) => SUPPORTED_EXTENSIONS.has(extname(p)));
 }
 /**
  * Count references to a symbol name across the repo via git grep.
@@ -191,13 +191,13 @@ export function buildRepoMap(repoRoot) {
     // acceptable for v0.5 — codehere's own 249-symbol repo runs in ~5s.
     // v0.6's tree-sitter port will swap raw grep for AST-aware reference
     // resolution + PageRank, which is faster AND more accurate.
-    const uniqueNames = Array.from(new Set(allSymbols.map(s => s.name)));
+    const uniqueNames = Array.from(new Set(allSymbols.map((s) => s.name)));
     const refCounts = new Map();
     for (const name of uniqueNames) {
         refCounts.set(name, countReferences(repoRoot, name));
     }
     const topSymbols = allSymbols
-        .map(s => ({ ...s, references: refCounts.get(s.name) ?? 0 }))
+        .map((s) => ({ ...s, references: refCounts.get(s.name) ?? 0 }))
         // Stable sort: references DESC, then name ASC for tie-breaking.
         .sort((a, b) => b.references - a.references || a.name.localeCompare(b.name))
         .slice(0, 50);

package/dist/presentation/cli/repl.js

@@ -648,7 +648,24 @@ async function runSubcommand(name, extraArgs) {
         });
     });
 }
+/**
+ * UAT-002 — exit-intent words typed at the REPL prompt without a leading
+ * slash should leave the session, not get routed to a Conductor spawn.
+ *
+ * Pre-fix: typing bare `exit` (no `/`) fell through to spawnViaConductor,
+ * which booted Conductor, picked claude-code under default routing, made
+ * a real API call (network or quota), and emitted a confusing Final Report
+ * echoing the provider error verbatim. First-impression UX bug found by
+ * UAT 2026-05-19.
+ */
+const EXIT_INTENT_WORDS = new Set(['exit', 'quit', 'q', 'bye', 'goodbye', 'logout', ':q']);
 async function spawnViaConductor(prompt, state) {
+    // UAT-002 guard — exit-intent before any spawn / API call.
+    const trimmed = prompt.trim().toLowerCase();
+    if (EXIT_INTENT_WORDS.has(trimmed)) {
+        console.log(colors.dim('Goodbye! 👋'));
+        process.exit(0);
+    }
     const installed = availableAgents().filter((a) => a.installed);
     if (installed.length === 0) {
         console.log(warning('No specialist installed — install one and try again.'));
@@ -711,7 +728,9 @@ function renderEvent(event) {
                 console.log(colors.dim('  │ ') + icon + ' ' + label);
                 // P22 / Track B #8 — render last 3 lines of step output for done/failed
                 if (lastStep.output && String(lastStep.output).trim()) {
-                    const outLines = String(lastStep.output).split(String.fromCharCode(10)).filter(l => l.trim());
+                    const outLines = String(lastStep.output)
+                        .split(String.fromCharCode(10))
+                        .filter((l) => l.trim());
                     const preview = outLines.slice(-3);
                     for (const ln of preview) {
                         console.log(colors.dim('  │   ') + colors.gray(ln));

package/dist/ui.js

@@ -397,37 +397,45 @@ export function randomFarewell() {
 export function randomCleanScan() {
     return CLEAN_SCAN_CELEBRATIONS[Math.floor(Math.random() * CLEAN_SCAN_CELEBRATIONS.length)];
 }
+/**
+ * v0.6.2 sync — every non-replOnly entry MUST correspond to a real
+ * `program.command('<name>')` registration in src/index.ts. Drift is
+ * blocked by test/cli/slash-commands-sync.test.ts (UAT-001 CI guard).
+ *
+ * Pre-fix (v0.6.1 and earlier): this list carried 16 ghost commands
+ * (ask/explain/fix/review/plan/suggest/test/docs/refactor/orchestrate/run/
+ * git-review/index/cost/models/undo) removed in v0.3 — and was missing
+ * 8 real commands (init/memory/permission/narrator/budget/start/task/kill).
+ * Catastrophic first-impression bug found by UAT 2026-05-19.
+ */
 export const SLASH_COMMANDS = [
-    // AI-powered
-    { name: 'ask', args: '<question>', description: 'Ask anything about your codebase' },
-    { name: 'explain', args: '<file>', description: 'Explain a file' },
-    { name: 'fix', args: '<file> <hint>', description: 'Apply a targeted fix' },
-    { name: 'review', args: '<file>', description: 'Code review with findings' },
-    { name: 'plan', args: '<goal>', description: 'Break a goal into steps' },
-    { name: 'suggest', args: '<query>', description: 'Read-only assistant — no changes' },
-    { name: 'test', args: '<file>', description: 'Generate tests for a file' },
-    { name: 'docs', args: '<type>', description: 'Generate documentation' },
-    { name: 'refactor', args: '<pattern> <instr>', description: 'Refactor across files' },
-    { name: 'orchestrate', args: '<goal>', description: 'Multi-agent workflow' },
-    { name: 'run', args: '<goal>', description: 'Execute a task or goal' },
-    { name: 'git-review', args: '', description: 'Review git changes' },
-    // Safety & config (no key)
-    { name: 'trust', args: '[path]', description: 'Scan for vulnerabilities', noKey: true },
-    { name: 'report', args: '[path]', description: 'Security audit report', noKey: true },
-    { name: 'hook', args: '[install|status]', description: 'Safety hook management', noKey: true },
-    { name: 'status', args: '', description: 'Dashboard — hook activity', noKey: true },
-    { name: 'health', args: '', description: 'System health check', noKey: true },
-    { name: 'index', args: '', description: 'Build the search index' },
-    { name: 'serve', args: '', description: 'Start MCP server', noKey: true },
-    { name: 'setup', args: '', description: 'Configure API provider', noKey: true },
+    // Setup + config (no key)
+    { name: 'setup', args: '', description: 'Interactive first-run wizard', noKey: true },
+    { name: 'init', args: '', description: 'Scaffold .codehere/ in this repo', noKey: true },
+    { name: 'memory', args: '<sub>', description: 'Project memory · init / repo-map / show', noKey: true },
     { name: 'config', args: '[key] [value]', description: 'Manage preferences', noKey: true },
-    { name: 'cost', args: '', description: 'View API cost tracking', noKey: true },
-    { name: 'models', args: '', description: 'List available AI models', noKey: true },
-    { name: 'undo', args: '<file>', description: 'Undo file changes', noKey: true },
-    // Utility
+    { name: 'permission', args: '<sub>', description: 'Manage .codehere/permissions.yaml allow/deny', noKey: true },
+    { name: 'narrator', args: '', description: 'Customize the PM narrator prompt', noKey: true },
+    { name: 'budget', args: '[set <amount>]', description: 'Daily spend budget', noKey: true },
+    // Safety + observability (no key)
+    { name: 'hook', args: '[install|status]', description: 'Safety hook management', noKey: true },
+    { name: 'trust', args: '[path]', description: 'Scan for vulnerabilities', noKey: true },
+    { name: 'report', args: '[path]', description: 'Shareable security audit', noKey: true },
+    { name: 'status', args: '', description: 'Security dashboard — hook activity', noKey: true },
+    { name: 'health', args: '', description: 'System health + metrics', noKey: true },
+    // Orchestration
+    { name: 'start', args: '', description: 'Open the dashboard at localhost:3773' },
+    { name: 'serve', args: '', description: 'Run headless MCP server (no UI)', noKey: true },
+    { name: 'task', args: '<prompt>', description: 'Delegate a task to a coding agent' },
+    { name: 'kill', args: '<sessionId>', description: 'Kill a running task' },
+    // Utility (no key)
     { name: 'help', args: '', description: 'Command reference', noKey: true },
-    { name: 'clear', args: '', description: 'Clear the screen', noKey: true },
-    { name: 'exit', args: '', description: 'Leave the session', noKey: true },
+    // REPL-only meta-commands (handled in repl.ts, not in Commander).
+    // Marked replOnly so the CI sync guard skips them.
+    { name: 'agents', args: '', description: 'List installed specialists', noKey: true, replOnly: true },
+    { name: 'history', args: '', description: 'Recent REPL session history', noKey: true, replOnly: true },
+    { name: 'clear', args: '', description: 'Clear the screen', noKey: true, replOnly: true },
+    { name: 'exit', args: '', description: 'Leave the session', noKey: true, replOnly: true },
 ];
 export function showSlashCommandMenu() {
     newline();

package/dist/utils/typo-guard.js

@@ -64,7 +64,7 @@ function checkTypoSingle(token, knownCommands) {
         .map((n) => ({ n, d: levenshtein(lower, n) }))
         .filter((s) => s.d > 0 && s.d <= 2 && s.d < lower.length)
         // Deterministic tie-breaker (alphabetical) so ranking is stable across runs.
-        .sort((a, b) => (a.d - b.d) || a.n.localeCompare(b.n))
+        .sort((a, b) => a.d - b.d || a.n.localeCompare(b.n))
         .slice(0, 3);
     return scored.length > 0 ? scored.map((s) => s.n) : null;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codehere",
-  "version": "0.6.1",
+  "version": "0.6.2",
   "description": "A PM for your AI coding agents. Delegate, orchestrate, and audit Claude Code, Codex, Aider, OpenCode, Gemini, and any user-configured CLI agent from one local web UI — every AI action traced, every file scored, every spawn warmed with project memory.",
   "main": "dist/index.js",
   "type": "module",