devwing 0.1.6 → 0.1.8

package/dist/index.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { Command } from 'commander';
-import chalk3 from 'chalk';
-import inquirer from 'inquirer';
+import chalk7 from 'chalk';
+import inquirer5 from 'inquirer';
 import axios2 from 'axios';
 import Conf from 'conf';
 import { AsyncEntry } from '@napi-rs/keyring';
@@ -10,7 +10,7 @@ import ora from 'ora';
 import boxen from 'boxen';
 import gradient from 'gradient-string';
 import terminalLink from 'terminal-link';
-import { promises, readFileSync } from 'fs';
+import { readFileSync, promises } from 'fs';
 import path, { dirname, join } from 'path';
 import os from 'os';
 import { exec, execSync } from 'child_process';
@@ -72,16 +72,21 @@ var ConfigManager = class {
     }
   }
   /**
-   * Get API URL
+   * Get API URL — ensures /api/v1 suffix is always present
    */
   getApiUrl() {
-    return this.conf.get("apiUrl");
+    let url = this.conf.get("apiUrl");
+    if (url && !url.endsWith("/api/v1") && url.includes("devwing.ai")) {
+      url = url.replace(/\/+$/, "") + "/api/v1";
+      this.conf.set("apiUrl", url);
+    }
+    return url;
   }
   /**
    * Set API URL (for development/testing)
    */
   setApiUrl(url) {
-    this.conf.set("apiUrl", url);
+    this.conf.set("apiUrl", url.replace(/\/+$/, ""));
   }
   /**
    * Get current workspace ID
@@ -157,6 +162,11 @@ var ConfigManager = class {
   }
 };
 var configManager = new ConfigManager();
+function extractErrorMessage(data) {
+  if (!data) return "Unknown error";
+  if (typeof data === "string") return data;
+  return data.detail || data.message || data.error || JSON.stringify(data);
+}
 var APIClient = class {
   client;
   jwtToken = null;
@@ -180,9 +190,18 @@ var APIClient = class {
       (response) => response,
       (error) => {
         if (error.response?.data) {
-          throw new Error(error.response.data.message || error.response.data.error);
+          const message = extractErrorMessage(error.response.data);
+          const err = new Error(message);
+          err.statusCode = error.response.status;
+          throw err;
+        }
+        if (error.code === "ECONNREFUSED") {
+          throw new Error("Cannot connect to DevWing API. Is the server running?");
         }
-        throw error;
+        if (error.code === "ENOTFOUND") {
+          throw new Error("Cannot resolve DevWing API hostname. Check your internet connection.");
+        }
+        throw new Error(error.message || "Network error");
       }
     );
   }
@@ -194,11 +213,22 @@ var APIClient = class {
   }
   /**
    * Login with email and password
+   * Returns full login response including 2FA handling
    */
   async login(email, password) {
     const response = await this.client.post("/auth/login", { email, password });
     return response.data;
   }
+  /**
+   * Complete 2FA login
+   */
+  async complete2FA(tempToken, totpCode) {
+    const response = await this.client.post("/auth/2fa/complete", {
+      temp_token: tempToken,
+      totp_code: totpCode
+    });
+    return response.data;
+  }
   /**
    * Get current user profile
    */
@@ -249,8 +279,13 @@ var APIClient = class {
       body: JSON.stringify(request)
     });
     if (!response.ok) {
-      const error = await response.json();
-      throw new Error(error.message || "Failed to get completion");
+      let errorMsg = `API error (${response.status})`;
+      try {
+        const error = await response.json();
+        errorMsg = extractErrorMessage(error);
+      } catch {
+      }
+      throw new Error(errorMsg);
     }
     if (!response.body) {
       throw new Error("No response body");
@@ -261,8 +296,7 @@ var APIClient = class {
         try {
           const message = JSON.parse(event.data);
           yield message;
-        } catch (error) {
-          console.error("Failed to parse SSE message:", error);
+        } catch {
         }
       }
     }
@@ -288,8 +322,13 @@ var APIClient = class {
       })
     });
     if (!response.ok) {
-      const error = await response.json();
-      throw new Error(error.message || "Failed to continue completion");
+      let errorMsg = `API error (${response.status})`;
+      try {
+        const error = await response.json();
+        errorMsg = extractErrorMessage(error);
+      } catch {
+      }
+      throw new Error(errorMsg);
     }
     if (!response.body) {
       throw new Error("No response body");
@@ -300,18 +339,25 @@ var APIClient = class {
         try {
           const message = JSON.parse(event.data);
           yield message;
-        } catch (error) {
-          console.error("Failed to parse SSE message:", error);
+        } catch {
         }
       }
     }
   }
   /**
    * Get project memory
+   * Backend returns { memories: [...], total: N }
    */
   async getProjectMemory(projectId) {
     const response = await this.client.get(`/memory/${projectId}`);
-    return response.data;
+    const data = response.data;
+    if (data.memories && Array.isArray(data.memories)) {
+      return data.memories;
+    }
+    if (Array.isArray(data)) {
+      return data;
+    }
+    return [];
   }
   /**
    * Add project memory
@@ -331,7 +377,14 @@ var APIClient = class {
    */
   async getModels() {
     const response = await this.client.get("/models");
-    return response.data;
+    const data = response.data;
+    if (data.models && Array.isArray(data.models)) {
+      return data.models;
+    }
+    if (Array.isArray(data)) {
+      return data;
+    }
+    return [];
   }
   /**
    * Get usage stats
@@ -348,37 +401,37 @@ var Logger = class {
    * Success message
    */
   success(message) {
-    console.log(chalk3.green("\u2713"), message);
+    console.log(chalk7.green("\u2713"), message);
   }
   /**
    * Error message
    */
   error(message, error) {
-    console.log(chalk3.red("\u2717"), message);
+    console.log(chalk7.red("\u2717"), message);
     if (error && process.env.DEBUG) {
-      console.error(chalk3.gray(error.stack || error));
+      console.error(chalk7.gray(error.stack || error));
     }
   }
   /**
    * Warning message
    */
   warn(message) {
-    console.log(chalk3.yellow("\u26A0"), message);
+    console.log(chalk7.yellow("\u26A0"), message);
   }
   /**
    * Info message
    */
   info(message) {
-    console.log(chalk3.blue("\u2139"), message);
+    console.log(chalk7.blue("\u2139"), message);
   }
   /**
    * Debug message (only shown if DEBUG env var is set)
    */
   debug(message, data) {
     if (process.env.DEBUG) {
-      console.log(chalk3.gray("\u2699"), chalk3.gray(message));
+      console.log(chalk7.gray("\u2699"), chalk7.gray(message));
       if (data) {
-        console.log(chalk3.gray(JSON.stringify(data, null, 2)));
+        console.log(chalk7.gray(JSON.stringify(data, null, 2)));
       }
     }
   }
@@ -467,11 +520,17 @@ var Logger = class {
   }
 };
 var logger = new Logger();
+function getUserPlan(user) {
+  return user.subscription_plan || user.plan || "free";
+}
+function getUserDisplayName(user) {
+  return user.full_name || user.username || user.email;
+}
 async function loginCommand() {
   try {
     const existingKey = await configManager.getApiKey();
     if (existingKey) {
-      const { overwrite } = await inquirer.prompt([
+      const { overwrite } = await inquirer5.prompt([
         {
           type: "confirm",
           name: "overwrite",
@@ -486,14 +545,14 @@ async function loginCommand() {
     }
     logger.printBanner();
     logger.newline();
-    const { method } = await inquirer.prompt([
+    const { method } = await inquirer5.prompt([
       {
         type: "list",
         name: "method",
         message: "How would you like to authenticate?",
         choices: [
-          { name: "Email & Password", value: "email" },
           { name: "Via Browser (easiest)", value: "browser" },
+          { name: "Email & Password", value: "email" },
           { name: "API Key (from dashboard)", value: "apikey" }
         ]
       }
@@ -506,18 +565,21 @@ async function loginCommand() {
       await loginWithApiKey();
     }
   } catch (error) {
-    logger.error("Login failed", error);
+    logger.error("Login failed");
+    if (error.message) {
+      logger.error(error.message);
+    }
     process.exit(1);
   }
 }
 async function loginWithEmail() {
-  const { email, password } = await inquirer.prompt([
+  const { email, password } = await inquirer5.prompt([
     {
       type: "input",
       name: "email",
       message: "Email:",
       validate: (input) => {
-        if (!input.includes("@")) {
+        if (!input.includes("@") || !input.includes(".")) {
           return "Please enter a valid email address";
         }
         return true;
@@ -527,23 +589,56 @@ async function loginWithEmail() {
       type: "password",
       name: "password",
       message: "Password:",
-      mask: "*"
+      mask: "*",
+      validate: (input) => {
+        if (!input || input.length < 1) {
+          return "Password is required";
+        }
+        return true;
+      }
     }
   ]);
   logger.startSpinner("Authenticating...");
   try {
-    const { access_token, user } = await apiClient.login(email, password);
-    apiClient.setJwtToken(access_token);
+    let loginResult = await apiClient.login(email, password);
+    if (loginResult.requires_2fa) {
+      logger.succeedSpinner("Credentials verified");
+      logger.info("Two-factor authentication is enabled on your account");
+      const { totpCode } = await inquirer5.prompt([
+        {
+          type: "input",
+          name: "totpCode",
+          message: "2FA Code (from authenticator app):",
+          validate: (input) => {
+            if (!/^\d{6}$/.test(input)) {
+              return "Please enter a 6-digit code";
+            }
+            return true;
+          }
+        }
+      ]);
+      logger.startSpinner("Verifying 2FA code...");
+      loginResult = await apiClient.complete2FA(loginResult.temp_token, totpCode);
+    }
+    if (!loginResult.access_token || !loginResult.user) {
+      logger.failSpinner("Login failed");
+      logger.error("Unexpected response from server");
+      return;
+    }
+    apiClient.setJwtToken(loginResult.access_token);
     logger.updateSpinner("Creating API key...");
-    const { key } = await apiClient.createApiKey("CLI - Auto-generated");
+    const apiKeyResult = await apiClient.createApiKey("CLI - Auto-generated");
     apiClient.setJwtToken(null);
-    await configManager.setApiKey(key);
-    logger.succeedSpinner(`Welcome back, ${user.full_name || user.email}!`);
-    logger.success(`Plan: ${user.plan.toUpperCase()}`);
+    await configManager.setApiKey(apiKeyResult.key);
+    const user = loginResult.user;
+    const plan = getUserPlan(user);
+    logger.succeedSpinner(`Welcome back, ${getUserDisplayName(user)}!`);
+    logger.success(`Plan: ${plan.toUpperCase()}`);
     logger.newline();
     showQuickStart();
   } catch (error) {
     logger.failSpinner("Authentication failed");
+    logger.error(error.message || "Unknown error occurred");
     throw error;
   }
 }
@@ -552,21 +647,23 @@ async function loginWithBrowser() {
   const open = await import('open');
   logger.startSpinner("Initiating browser authentication...");
   try {
-    const deviceInfo = `DevWing CLI on ${os2.platform()}`;
+    const deviceInfo = `DevWing CLI on ${os2.platform()} (${os2.hostname()})`;
     const initResponse = await apiClient.initiateCliAuth(deviceInfo);
-    logger.succeedSpinner("Opening browser...");
+    logger.succeedSpinner("Device code created");
     logger.newline();
+    const verifyUrl = initResponse.verification_url_complete;
     try {
-      await open.default(initResponse.verification_url_complete);
-      logger.success("Browser opened! Please log in to complete authentication.");
-    } catch (err) {
-      logger.warn("Could not open browser automatically");
-      logger.info(`Please visit: ${chalk3.cyan(initResponse.verification_url_complete)}`);
+      await open.default(verifyUrl);
+      logger.success("Browser opened! Please log in to authorize this device.");
+    } catch {
+      logger.warn("Could not open browser automatically.");
+      logger.info(`Please visit: ${chalk7.cyan(verifyUrl)}`);
     }
     logger.newline();
+    logger.info(chalk7.dim(`Device code: ${initResponse.user_code.substring(0, 8)}...`));
     logger.startSpinner("Waiting for authorization...");
-    const pollInterval = initResponse.interval * 1e3;
-    const maxAttempts = Math.floor(initResponse.expires_in / initResponse.interval);
+    const pollInterval = (initResponse.interval || 5) * 1e3;
+    const maxAttempts = Math.floor((initResponse.expires_in || 900) / (initResponse.interval || 5));
     let attempts = 0;
     const pollForAuth = async () => {
       return new Promise((resolve, reject) => {
@@ -574,13 +671,11 @@ async function loginWithBrowser() {
           attempts++;
           if (attempts >= maxAttempts) {
             clearInterval(interval);
-            reject(new Error("Authentication timed out. Please try again."));
+            reject(new Error('Authentication timed out. Please try again with "devwing login".'));
             return;
           }
           try {
-            const pollResponse = await apiClient.pollCliAuth(
-              initResponse.device_code
-            );
+            const pollResponse = await apiClient.pollCliAuth(initResponse.device_code);
             if (pollResponse.status === "authorized" && pollResponse.api_key) {
               clearInterval(interval);
               resolve(pollResponse.api_key);
@@ -589,11 +684,12 @@ async function loginWithBrowser() {
               reject(new Error("Authorization denied by user."));
             } else if (pollResponse.status === "expired") {
               clearInterval(interval);
-              reject(
-                new Error('Device code expired. Please run "devwing login" again.')
-              );
+              reject(new Error('Device code expired. Please run "devwing login" again.'));
             }
           } catch (error) {
+            if (error.statusCode === 429) {
+              return;
+            }
             clearInterval(interval);
             reject(error);
           }
@@ -604,12 +700,14 @@ async function loginWithBrowser() {
     await configManager.setApiKey(apiKey);
     logger.updateSpinner("Fetching profile...");
     const user = await apiClient.getProfile();
-    logger.succeedSpinner(`Welcome, ${user.full_name || user.email}!`);
-    logger.success(`Plan: ${user.plan.toUpperCase()}`);
+    const plan = getUserPlan(user);
+    logger.succeedSpinner(`Welcome, ${getUserDisplayName(user)}!`);
+    logger.success(`Plan: ${plan.toUpperCase()}`);
     logger.newline();
     showQuickStart();
   } catch (error) {
     logger.failSpinner("Browser authentication failed");
+    logger.error(error.message || "Unknown error");
     throw error;
   }
 }
@@ -621,7 +719,7 @@ async function loginWithApiKey() {
   );
   logger.info(`Get your API key from the ${dashboardUrl}`);
   logger.newline();
-  const { apiKey } = await inquirer.prompt([
+  const { apiKey } = await inquirer5.prompt([
     {
       type: "password",
       name: "apiKey",
@@ -642,13 +740,15 @@ async function loginWithApiKey() {
   try {
     await configManager.setApiKey(apiKey);
     const user = await apiClient.getProfile();
-    logger.succeedSpinner(`Successfully authenticated as ${user.full_name || user.email}!`);
-    logger.success(`Plan: ${user.plan.toUpperCase()}`);
+    const plan = getUserPlan(user);
+    logger.succeedSpinner(`Authenticated as ${getUserDisplayName(user)}!`);
+    logger.success(`Plan: ${plan.toUpperCase()}`);
     logger.newline();
     showQuickStart();
   } catch (error) {
     await configManager.deleteApiKey();
     logger.failSpinner("Invalid API key");
+    logger.error(error.message || "Could not verify API key");
     throw error;
   }
 }
@@ -659,7 +759,7 @@ async function logoutCommand() {
       logger.info("You are not logged in");
       return;
     }
-    const { confirm } = await inquirer.prompt([
+    const { confirm } = await inquirer5.prompt([
       {
         type: "confirm",
         name: "confirm",
@@ -677,7 +777,8 @@ async function logoutCommand() {
     configManager.setApiUrl(apiUrl);
     logger.success("Successfully logged out");
   } catch (error) {
-    logger.error("Logout failed", error);
+    logger.error("Logout failed");
+    logger.error(error.message || "Unknown error");
     process.exit(1);
   }
 }
@@ -692,15 +793,19 @@ async function statusCommand() {
     logger.startSpinner("Fetching profile...");
     try {
       const user = await apiClient.getProfile();
+      const plan = getUserPlan(user);
       logger.succeedSpinner("Authenticated");
       logger.newline();
-      console.log(chalk3.bold("User Profile:"));
+      console.log(chalk7.bold("User Profile:"));
       console.log(`  Email: ${user.email}`);
-      console.log(`  Name: ${user.full_name || "Not set"}`);
-      console.log(`  Plan: ${user.plan.toUpperCase()}`);
-      console.log(
-        `  Tokens used today: ${user.tokens_used_today.toLocaleString()}`
-      );
+      console.log(`  Name: ${getUserDisplayName(user)}`);
+      console.log(`  Plan: ${plan.toUpperCase()}`);
+      if (user.is_verified !== void 0) {
+        console.log(`  Verified: ${user.is_verified ? chalk7.green("Yes") : chalk7.yellow("No")}`);
+      }
+      if (user.totp_enabled !== void 0) {
+        console.log(`  2FA: ${user.totp_enabled ? chalk7.green("Enabled") : chalk7.dim("Disabled")}`);
+      }
       const config = configManager.getAll();
       if (config.workspaceId) {
         console.log(`  Workspace: ${config.workspaceId}`);
@@ -711,11 +816,12 @@ async function statusCommand() {
       logger.newline();
     } catch (error) {
       logger.failSpinner("Failed to fetch profile");
-      logger.error("API key may be invalid or expired");
+      logger.error(error.message || "API key may be invalid or expired");
       logger.info('Run "devwing login" to re-authenticate');
     }
   } catch (error) {
-    logger.error("Failed to check status", error);
+    logger.error("Failed to check status");
+    logger.error(error.message || "Unknown error");
     process.exit(1);
   }
 }
@@ -725,6 +831,7 @@ function showQuickStart() {
       "Quick Start:",
       "",
       '  devwing "fix the auth bug"       Ask anything',
+      "  devwing chat                     Interactive chat mode",
       "  devwing scan                     Security scan",
       "  devwing review                   Code review",
       "  devwing explain file.js          Explain code",
@@ -1292,22 +1399,22 @@ Summary: ${result.summary.changes} changes, ${result.summary.insertions} inserti
 // src/streaming/renderer.ts
 marked.setOptions({
   renderer: new TerminalRenderer({
-    code: chalk3.cyan,
-    blockquote: chalk3.gray.italic,
-    html: chalk3.gray,
-    heading: chalk3.bold.underline,
-    firstHeading: chalk3.bold.magenta,
-    hr: chalk3.reset,
-    listitem: chalk3.reset,
-    list: chalk3.reset,
-    table: chalk3.reset,
-    paragraph: chalk3.reset,
-    strong: chalk3.bold,
-    em: chalk3.italic,
-    codespan: chalk3.cyan,
-    del: chalk3.dim.strikethrough,
-    link: chalk3.blue.underline,
-    href: chalk3.blue.underline
+    code: chalk7.cyan,
+    blockquote: chalk7.gray.italic,
+    html: chalk7.gray,
+    heading: chalk7.bold.underline,
+    firstHeading: chalk7.bold.magenta,
+    hr: chalk7.reset,
+    listitem: chalk7.reset,
+    list: chalk7.reset,
+    table: chalk7.reset,
+    paragraph: chalk7.reset,
+    strong: chalk7.bold,
+    em: chalk7.italic,
+    codespan: chalk7.cyan,
+    del: chalk7.dim.strikethrough,
+    link: chalk7.blue.underline,
+    href: chalk7.blue.underline
   })
 });
 var StreamingRenderer = class {
@@ -1402,10 +1509,10 @@ var StreamingRenderer = class {
     logger.newline();
     const { tool, args } = message;
     if (!tool) return;
-    logger.info(chalk3.yellow(`AI requested tool: ${chalk3.bold(tool)}`));
+    logger.info(chalk7.yellow(`AI requested tool: ${chalk7.bold(tool)}`));
     if (args && Object.keys(args).length > 0) {
-      console.log(chalk3.gray("Arguments:"));
-      console.log(chalk3.gray(JSON.stringify(args, null, 2)));
+      console.log(chalk7.gray("Arguments:"));
+      console.log(chalk7.gray(JSON.stringify(args, null, 2)));
     }
     logger.newline();
   }
@@ -1417,11 +1524,11 @@ var StreamingRenderer = class {
     const results = [];
     for (const { tool, args } of this.pendingToolCalls) {
       logger.newline();
-      logger.info(chalk3.yellow(`Executing ${chalk3.bold(tool)}...`));
+      logger.info(chalk7.yellow(`Executing ${chalk7.bold(tool)}...`));
       const requiresConfirmation = this.requiresConfirmation(tool);
       let confirmed = true;
       if (requiresConfirmation) {
-        const answers = await inquirer.prompt([
+        const answers = await inquirer5.prompt([
           {
             type: "confirm",
             name: "confirmed",
@@ -1450,9 +1557,9 @@ var StreamingRenderer = class {
           const content = result.output || "";
           const preview = content.substring(0, 500);
           if (preview.length < content.length) {
-            console.log(chalk3.gray(preview + "... (truncated)"));
+            console.log(chalk7.gray(preview + "... (truncated)"));
           } else {
-            console.log(chalk3.gray(preview));
+            console.log(chalk7.gray(preview));
           }
           results.push({
             tool,
@@ -1490,9 +1597,9 @@ var StreamingRenderer = class {
     if (message.content) {
       const preview = message.content.substring(0, 500);
       if (preview.length < message.content.length) {
-        console.log(chalk3.gray(preview + "... (truncated)"));
+        console.log(chalk7.gray(preview + "... (truncated)"));
       } else {
-        console.log(chalk3.gray(preview));
+        console.log(chalk7.gray(preview));
       }
     }
     logger.newline();
@@ -1506,7 +1613,7 @@ var StreamingRenderer = class {
     if (message.usage) {
       const { tokens_in, tokens_out, cost_usd } = message.usage;
       console.log(
-        chalk3.gray(
+        chalk7.gray(
           `\u{1F4CA} Tokens: ${tokens_in.toLocaleString()} in, ${tokens_out.toLocaleString()} out | Cost: $${cost_usd.toFixed(4)}`
         )
       );
@@ -1684,7 +1791,7 @@ async function memorySave(projectId, content) {
     logger.error("Please provide content to save");
     return;
   }
-  const { type } = await inquirer.prompt([
+  const { type } = await inquirer5.prompt([
     {
       type: "list",
       name: "type",
@@ -1725,7 +1832,7 @@ async function memoryShow(projectId) {
     for (const memory of memories) {
       const preview = memory.content.length > 100 ? memory.content.substring(0, 100) + "..." : memory.content;
       table.push([
-        chalk3.cyan(memory.type),
+        chalk7.cyan(memory.type),
         preview,
         new Date(memory.created_at).toLocaleDateString()
       ]);
@@ -1737,7 +1844,7 @@ async function memoryShow(projectId) {
   }
 }
 async function memoryClear(projectId) {
-  const { confirm } = await inquirer.prompt([
+  const { confirm } = await inquirer5.prompt([
     {
       type: "confirm",
       name: "confirm",
@@ -1766,7 +1873,7 @@ async function configCommand(action, key, value) {
     if (!action || action === "list") {
       const config = configManager.getAll();
       const apiKey = await configManager.getApiKey();
-      console.log(chalk3.bold("Current Configuration:"));
+      console.log(chalk7.bold("Current Configuration:"));
       console.log(`  API URL: ${config.apiUrl}`);
       console.log(`  API Key: ${apiKey ? apiKey.substring(0, 12) + "..." : "Not set"}`);
       console.log(`  Workspace: ${config.workspaceId || "Not set"}`);
@@ -1774,7 +1881,7 @@ async function configCommand(action, key, value) {
       console.log(`  Model: ${config.model || "Auto"}`);
       console.log(`  Mode: ${config.mode || "Auto"}`);
       console.log();
-      console.log(chalk3.gray(`Config file: ${configManager.getPath()}`));
+      console.log(chalk7.gray(`Config file: ${configManager.getPath()}`));
       return;
     }
     if (action === "get") {
@@ -1865,26 +1972,26 @@ async function handleSpecialCommand(command, session, options) {
   const mainCmd = parts[0].toLowerCase();
   if (cmd === "/help") {
     logger.box([
-      chalk3.bold("DevWing Chat Commands:"),
+      chalk7.bold("DevWing Chat Commands:"),
       "",
-      chalk3.bold.yellow("Navigation & Session:"),
-      chalk3.cyan("/help") + "                  - Show this help message",
-      chalk3.cyan("/exit, /quit") + "           - Exit chat mode",
-      chalk3.cyan("/clear") + "                 - Clear conversation history",
-      chalk3.cyan("/context") + "               - Show current context",
-      chalk3.cyan("/history") + "               - Show conversation history",
+      chalk7.bold.yellow("Navigation & Session:"),
+      chalk7.cyan("/help") + "                  - Show this help message",
+      chalk7.cyan("/exit, /quit") + "           - Exit chat mode",
+      chalk7.cyan("/clear") + "                 - Clear conversation history",
+      chalk7.cyan("/context") + "               - Show current context",
+      chalk7.cyan("/history") + "               - Show conversation history",
       "",
-      chalk3.bold.yellow("Specialized Commands:"),
-      chalk3.cyan("/scan") + "                   - Run security vulnerability scan",
-      chalk3.cyan("/review") + "                 - Perform code review",
-      chalk3.cyan("/explain <target>") + "      - Explain code, file, or concept",
+      chalk7.bold.yellow("Specialized Commands:"),
+      chalk7.cyan("/scan") + "                   - Run security vulnerability scan",
+      chalk7.cyan("/review") + "                 - Perform code review",
+      chalk7.cyan("/explain <target>") + "      - Explain code, file, or concept",
       "",
-      chalk3.bold.yellow("Project Memory:"),
-      chalk3.cyan("/memory save <content>") + " - Save note to project memory",
-      chalk3.cyan("/memory show") + "           - Show all project memories",
-      chalk3.cyan("/memory clear") + "          - Clear all project memories",
+      chalk7.bold.yellow("Project Memory:"),
+      chalk7.cyan("/memory save <content>") + " - Save note to project memory",
+      chalk7.cyan("/memory show") + "           - Show all project memories",
+      chalk7.cyan("/memory clear") + "          - Clear all project memories",
       "",
-      chalk3.dim("Just type your message to chat with DevWing!")
+      chalk7.dim("Just type your message to chat with DevWing!")
     ].join("\n"), { title: "Chat Commands", color: "blue" });
     return true;
   }
@@ -1906,9 +2013,9 @@ async function handleSpecialCommand(command, session, options) {
       return true;
     }
     logger.box([
-      chalk3.bold("Current Context:"),
+      chalk7.bold("Current Context:"),
       "",
-      `Working Directory: ${chalk3.cyan(context.cwd)}`,
+      `Working Directory: ${chalk7.cyan(context.cwd)}`,
       `Shell: ${context.shell}`,
       `OS: ${context.os}`,
       `Files: ${context.files.length}`,
@@ -1927,7 +2034,7 @@ async function handleSpecialCommand(command, session, options) {
       return true;
     }
     logger.box([
-      chalk3.bold("Conversation History:"),
+      chalk7.bold("Conversation History:"),
       "",
       session.getConversationSummary()
     ].join("\n"), { title: "History", color: "magenta" });
@@ -1983,11 +2090,11 @@ async function handleSpecialCommand(command, session, options) {
 }
 function printWelcomeBanner() {
   logger.box([
-    chalk3.bold.cyan("DevWing AI - Interactive Chat Mode"),
+    chalk7.bold.cyan("DevWing AI - Interactive Chat Mode"),
     "",
     "Chat with AI about your codebase. Type your message and press Enter.",
     "",
-    chalk3.dim("Type /help for commands \u2022 /exit to quit")
+    chalk7.dim("Type /help for commands \u2022 /exit to quit")
   ].join("\n"), { title: "\u{1F680} Welcome", color: "cyan" });
 }
 async function chatCommand(options) {
@@ -2004,7 +2111,7 @@ async function chatCommand(options) {
     const rl = readline.createInterface({
       input: process.stdin,
       output: process.stdout,
-      prompt: chalk3.bold.green("You: ")
+      prompt: chalk7.bold.green("You: ")
     });
     rl.on("SIGINT", () => {
       logger.newline();
@@ -2037,7 +2144,7 @@ async function chatCommand(options) {
       }
       session.addMessage("user", userMessage);
       logger.newline();
-      logger.info(chalk3.dim("DevWing is thinking..."));
+      logger.info(chalk7.dim("DevWing is thinking..."));
       logger.newline();
       try {
         const request = {
@@ -2203,14 +2310,14 @@ function installUpdate(packageName, packageManager, version) {
 }
 function displayUpdateInfo(currentVersion, latestVersion) {
   console.log();
-  console.log(chalk3.cyan("\u2501".repeat(60)));
-  console.log(chalk3.bold.cyan("  DevWing CLI Update Available"));
-  console.log(chalk3.cyan("\u2501".repeat(60)));
+  console.log(chalk7.cyan("\u2501".repeat(60)));
+  console.log(chalk7.bold.cyan("  DevWing CLI Update Available"));
+  console.log(chalk7.cyan("\u2501".repeat(60)));
   console.log();
-  console.log(`  ${chalk3.gray("Current version:")} ${chalk3.yellow(currentVersion)}`);
-  console.log(`  ${chalk3.gray("Latest version:")}  ${chalk3.green(latestVersion)}`);
+  console.log(`  ${chalk7.gray("Current version:")} ${chalk7.yellow(currentVersion)}`);
+  console.log(`  ${chalk7.gray("Latest version:")}  ${chalk7.green(latestVersion)}`);
   console.log();
-  console.log(chalk3.gray("  Changelog: https://github.com/devwing/devwing/releases"));
+  console.log(chalk7.gray("  Changelog: https://github.com/devwing/devwing/releases"));
   console.log();
 }
 async function updateCommand(options) {
@@ -2218,7 +2325,7 @@ async function updateCommand(options) {
     const currentVersion = getCurrentVersion();
     const packageName = getPackageName();
     console.log();
-    console.log(chalk3.cyan(`\u{1F4E6} DevWing CLI v${currentVersion}`));
+    console.log(chalk7.cyan(`\u{1F4E6} DevWing CLI v${currentVersion}`));
     console.log();
     logger.startSpinner("Checking for updates...");
     const latestVersion = await getLatestVersion(packageName);
@@ -2242,9 +2349,9 @@ async function updateCommand(options) {
       logger.error("No package manager found. Please install npm, pnpm, or yarn.");
       return;
     }
-    logger.info(`Detected package manager: ${chalk3.cyan(packageManager)}`);
+    logger.info(`Detected package manager: ${chalk7.cyan(packageManager)}`);
     if (!options?.force) {
-      const { confirm } = await inquirer.prompt([
+      const { confirm } = await inquirer5.prompt([
         {
           type: "confirm",
           name: "confirm",
@@ -2263,13 +2370,13 @@ async function updateCommand(options) {
       console.log();
       logger.success(`Successfully updated to v${latestVersion}`);
       console.log();
-      console.log(chalk3.gray('  Run "devwing --version" to verify'));
+      console.log(chalk7.gray('  Run "devwing --version" to verify'));
       console.log();
     } else {
       console.log();
       logger.error("Update failed. Please try manually:");
       console.log();
-      console.log(chalk3.gray(`  ${packageManager} install -g ${packageName}@${latestVersion}`));
+      console.log(chalk7.gray(`  ${packageManager} install -g ${packageName}@${latestVersion}`));
       console.log();
       process.exit(1);
     }
@@ -2278,49 +2385,867 @@ async function updateCommand(options) {
     process.exit(1);
   }
 }
-
-// src/index.ts
+var TYPING_SPEED = 16;
+var PAUSE_SHORT = 300;
+var PAUSE_MEDIUM = 800;
+var PAUSE_LONG = 1500;
+function sleep(ms) {
+  return new Promise((resolve) => setTimeout(resolve, ms));
+}
+async function typeOut(text, speed = TYPING_SPEED) {
+  for (const char of text) {
+    process.stdout.write(char);
+    await sleep(speed);
+  }
+}
+async function typeLine(text, speed = TYPING_SPEED) {
+  await typeOut(text, speed);
+  process.stdout.write("\n");
+}
+var DEMO_USER = {
+  email: "aliyu@devwing.ai",
+  full_name: "Aliyu Mohammed",
+  subscription_plan: "pro"};
+var DEMO_API_KEY = "dw_sk_demo_4xK9mQzR2pLvBnWcYjEtHuFi";
+var DEMO_PASSWORD = "DevWing2026!";
+var DEMO_WORKSPACE = {
+  name: "Kano State Government",
+  plan: "enterprise"};
+var DEMO_PROJECT = {
+  name: "Kano Smart API"};
+var DEMO_MEMORIES = [
+  { id: "mem_001", type: "rule", content: "All API responses must include Hausa language support", created_at: "2026-03-01T10:00:00Z" },
+  { id: "mem_002", type: "context", content: "Auth uses JWT with RS256 signing, 1hr expiry, refresh tokens in Redis", created_at: "2026-03-05T14:00:00Z" },
+  { id: "mem_003", type: "decision", content: "Chose PostgreSQL over MongoDB for ACID compliance \u2014 government data requires strict consistency", created_at: "2026-03-10T09:00:00Z" },
+  { id: "mem_004", type: "summary", content: 'Kano Smart serves 16M residents via kanostate.gov.ng and smart.kano.gov.ng \u2014 all responses branded "Powered by devwing.ai"', created_at: "2026-03-15T11:00:00Z" }
+];
+async function demoLoginCommand() {
+  try {
+    const existingKey = await configManager.getApiKey();
+    if (existingKey) {
+      const { overwrite } = await inquirer5.prompt([
+        {
+          type: "confirm",
+          name: "overwrite",
+          message: "You are already logged in. Do you want to log in with a different account?",
+          default: false
+        }
+      ]);
+      if (!overwrite) {
+        logger.info("Login cancelled");
+        return;
+      }
+    }
+    logger.printBanner();
+    logger.newline();
+    const { method } = await inquirer5.prompt([
+      {
+        type: "list",
+        name: "method",
+        message: "How would you like to authenticate?",
+        choices: [
+          { name: "Via Browser (easiest)", value: "browser" },
+          { name: "Email & Password", value: "email" },
+          { name: "API Key (from dashboard)", value: "apikey" }
+        ]
+      }
+    ]);
+    if (method === "email") {
+      await demoLoginEmail();
+    } else if (method === "browser") {
+      await demoLoginBrowser();
+    } else {
+      await demoLoginApiKey();
+    }
+  } catch (error) {
+    logger.error("Login failed");
+    if (error.message) logger.error(error.message);
+    process.exit(1);
+  }
+}
+async function demoLoginEmail() {
+  const { email, password } = await inquirer5.prompt([
+    {
+      type: "input",
+      name: "email",
+      message: "Email:",
+      validate: (input) => {
+        if (!input.includes("@") || !input.includes(".")) return "Please enter a valid email address";
+        return true;
+      }
+    },
+    {
+      type: "password",
+      name: "password",
+      message: "Password:",
+      mask: "*"
+    }
+  ]);
+  logger.startSpinner("Authenticating...");
+  await sleep(1200);
+  if (email !== DEMO_USER.email || password !== DEMO_PASSWORD) {
+    logger.failSpinner("Authentication failed");
+    logger.error("Incorrect email or password");
+    return;
+  }
+  logger.updateSpinner("Creating API key...");
+  await sleep(800);
+  await configManager.setApiKey(DEMO_API_KEY);
+  logger.succeedSpinner(`Welcome back, ${DEMO_USER.full_name}!`);
+  logger.success(`Plan: ${DEMO_USER.subscription_plan.toUpperCase()}`);
+  logger.newline();
+  showQuickStart2();
+}
+async function demoLoginBrowser() {
+  logger.startSpinner("Initiating browser authentication...");
+  await sleep(1e3);
+  logger.succeedSpinner("Device code created");
+  logger.newline();
+  logger.success("Browser opened! Please log in to authorize this device.");
+  logger.newline();
+  logger.info(chalk7.dim("Device code: fSibdCwR..."));
+  logger.startSpinner("Waiting for authorization...");
+  await sleep(3e3);
+  logger.updateSpinner("Authorization received!");
+  await sleep(500);
+  await configManager.setApiKey(DEMO_API_KEY);
+  logger.updateSpinner("Fetching profile...");
+  await sleep(600);
+  logger.succeedSpinner(`Welcome, ${DEMO_USER.full_name}!`);
+  logger.success(`Plan: ${DEMO_USER.subscription_plan.toUpperCase()}`);
+  logger.newline();
+  showQuickStart2();
+}
+async function demoLoginApiKey() {
+  logger.info(`Get your API key from the dashboard`);
+  logger.newline();
+  const { apiKey } = await inquirer5.prompt([
+    {
+      type: "password",
+      name: "apiKey",
+      message: "API Key:",
+      mask: "*",
+      validate: (input) => {
+        if (!input.startsWith("dw_sk_")) return 'Invalid API key format. Should start with "dw_sk_"';
+        if (input.length < 20) return "API key seems too short";
+        return true;
+      }
+    }
+  ]);
+  logger.startSpinner("Verifying API key...");
+  await sleep(1e3);
+  if (apiKey !== DEMO_API_KEY) {
+    logger.failSpinner("Invalid API key");
+    logger.error("API key not recognized");
+    return;
+  }
+  await configManager.setApiKey(apiKey);
+  logger.succeedSpinner(`Authenticated as ${DEMO_USER.full_name}!`);
+  logger.success(`Plan: ${DEMO_USER.subscription_plan.toUpperCase()}`);
+  logger.newline();
+  showQuickStart2();
+}
+function showQuickStart2() {
+  logger.box(
+    [
+      "Quick Start:",
+      "",
+      '  devwing "fix the auth bug"       Ask anything',
+      "  devwing chat                     Interactive chat mode",
+      "  devwing scan                     Security scan",
+      "  devwing review                   Code review",
+      "  devwing explain file.js          Explain code",
+      "",
+      "For more commands, run: devwing --help"
+    ].join("\n"),
+    { title: "Ready to go!", color: "green" }
+  );
+}
+async function demoStatusCommand() {
+  const apiKey = await configManager.getApiKey();
+  if (!apiKey) {
+    logger.warn("Not authenticated");
+    logger.info('Run "devwing login" to get started');
+    return;
+  }
+  logger.startSpinner("Fetching profile...");
+  await sleep(800);
+  logger.succeedSpinner("Authenticated");
+  logger.newline();
+  console.log(chalk7.bold("User Profile:"));
+  console.log(`  Email: ${DEMO_USER.email}`);
+  console.log(`  Name: ${DEMO_USER.full_name}`);
+  console.log(`  Plan: ${DEMO_USER.subscription_plan.toUpperCase()}`);
+  console.log(`  Verified: ${chalk7.green("Yes")}`);
+  console.log(`  2FA: ${chalk7.dim("Disabled")}`);
+  console.log(`  Workspace: ${DEMO_WORKSPACE.name} (${DEMO_WORKSPACE.plan})`);
+  console.log(`  Project: ${DEMO_PROJECT.name}`);
+  logger.newline();
+}
+async function demoLogoutCommand() {
+  const apiKey = await configManager.getApiKey();
+  if (!apiKey) {
+    logger.info("You are not logged in");
+    return;
+  }
+  const { confirm } = await inquirer5.prompt([
+    {
+      type: "confirm",
+      name: "confirm",
+      message: "Are you sure you want to log out?",
+      default: false
+    }
+  ]);
+  if (!confirm) {
+    logger.info("Logout cancelled");
+    return;
+  }
+  await configManager.deleteApiKey();
+  const apiUrl = configManager.getApiUrl();
+  configManager.clear();
+  configManager.setApiUrl(apiUrl);
+  logger.success("Successfully logged out");
+}
+async function demoMemoryCommand(action, content) {
+  if (action === "show") {
+    logger.startSpinner("Loading project memory...");
+    await sleep(800);
+    logger.stopSpinner();
+    logger.success(`Found ${DEMO_MEMORIES.length} memory items`);
+    logger.newline();
+    const table = new Table({
+      head: [chalk7.bold("Type"), chalk7.bold("Content"), chalk7.bold("Created")],
+      colWidths: [15, 60, 15],
+      wordWrap: true
+    });
+    for (const memory of DEMO_MEMORIES) {
+      const preview = memory.content.length > 80 ? memory.content.substring(0, 80) + "..." : memory.content;
+      table.push([
+        chalk7.cyan(memory.type),
+        preview,
+        new Date(memory.created_at).toLocaleDateString()
+      ]);
+    }
+    console.log(table.toString());
+  } else if (action === "save") {
+    if (!content) {
+      logger.error("Please provide content to save");
+      return;
+    }
+    const { type } = await inquirer5.prompt([
+      {
+        type: "list",
+        name: "type",
+        message: "What type of memory is this?",
+        choices: [
+          { name: "Context (general information)", value: "context" },
+          { name: "Rule (coding standard or guideline)", value: "rule" },
+          { name: "Decision (architectural decision)", value: "decision" },
+          { name: "Summary (project summary)", value: "summary" }
+        ]
+      }
+    ]);
+    logger.startSpinner("Saving to project memory...");
+    await sleep(1e3);
+    logger.succeedSpinner(`Memory saved as ${type}`);
+  } else if (action === "clear") {
+    const { confirm } = await inquirer5.prompt([
+      {
+        type: "confirm",
+        name: "confirm",
+        message: "Are you sure you want to clear all project memory?",
+        default: false
+      }
+    ]);
+    if (!confirm) {
+      logger.info("Operation cancelled");
+      return;
+    }
+    logger.startSpinner("Clearing project memory...");
+    await sleep(800);
+    logger.succeedSpinner("Project memory cleared");
+  }
+}
+async function demoExplainCommand(target) {
+  await requireDemoAuth();
+  await showContextLoading(24, "general");
+  logger.startSpinner("DevWing is thinking...");
+  await sleep(1500);
+  logger.stopSpinner();
+  console.log();
+  await typeLine(chalk7.bold.magenta(`## Explaining: ${target}`));
+  console.log();
+  if (target.includes("auth") || target.includes("middleware")) {
+    await typeLine(`The auth middleware at ${chalk7.cyan(target)} handles request authentication:`);
+    console.log();
+    await typeLine("  1. Extracts the JWT token from the `Authorization: Bearer` header");
+    await typeLine("  2. Verifies the token signature using RS256 algorithm");
+    await typeLine("  3. Checks token expiration and issuer claims");
+    await typeLine("  4. Loads the user from the database using the `sub` claim");
+    await typeLine("  5. Attaches the user object to `req.user` for downstream handlers");
+    console.log();
+    await typeLine(chalk7.bold("Key patterns:"));
+    await typeLine(`  ${chalk7.green("\u2022")} Uses decorator pattern \u2014 ${chalk7.cyan("@authenticate")} on route handlers`);
+    await typeLine(`  ${chalk7.green("\u2022")} Implements token refresh via ${chalk7.cyan("X-Refresh-Token")} header`);
+    await typeLine(`  ${chalk7.green("\u2022")} Rate limited to prevent brute force (10 req/min per IP)`);
+    console.log();
+    await typeLine(chalk7.dim("This middleware is critical \u2014 it protects all /api/* routes."));
+  } else {
+    await typeLine(`${chalk7.cyan(target)} is a core component of the system.`);
+    console.log();
+    await typeLine(`  ${chalk7.green("\u2022")} Responsible for handling ${target}-related logic`);
+    await typeLine(`  ${chalk7.green("\u2022")} Integrates with the main application pipeline`);
+    await typeLine(`  ${chalk7.green("\u2022")} Well-structured with clear separation of concerns`);
+  }
+  await showUsage(1200, 680, 45e-4, "general");
+  logger.success("Done!");
+}
+async function demoReviewCommand() {
+  await requireDemoAuth();
+  logger.info("Performing code review...");
+  logger.newline();
+  await showContextLoading(38, "general");
+  logger.startSpinner("DevWing is thinking...");
+  await sleep(2e3);
+  logger.stopSpinner();
+  console.log();
+  await typeLine(chalk7.bold.magenta("## Code Review \u2014 Recent Changes"));
+  console.log();
+  await typeLine(chalk7.bold("Files reviewed: 5 | Commits: 3 | Lines changed: +142 / -67"));
+  console.log();
+  await typeLine(chalk7.green.bold("  \u2713 GOOD") + " \u2014 Error handling is consistent across all new endpoints");
+  await typeLine(chalk7.green.bold("  \u2713 GOOD") + " \u2014 Database queries use parameterized statements");
+  await typeLine(chalk7.green.bold("  \u2713 GOOD") + " \u2014 TypeScript strict mode is properly enforced");
+  console.log();
+  await typeLine(chalk7.yellow.bold("  \u25B2 SUGGESTION") + " \u2014 Consider extracting the validation logic at " + chalk7.cyan("user_service.ts:45"));
+  await typeLine(chalk7.gray("    The email regex pattern is duplicated in 3 files. Move to a shared validator."));
+  console.log();
+  await typeLine(chalk7.yellow.bold("  \u25B2 SUGGESTION") + " \u2014 Missing error boundary in " + chalk7.cyan("api_handler.ts:78"));
+  await typeLine(chalk7.gray("    The async handler doesn't catch unhandled promise rejections. Wrap in try/catch."));
+  console.log();
+  await typeLine(chalk7.red.bold("  \u25A0 ISSUE") + " \u2014 Potential memory leak in " + chalk7.cyan("websocket_manager.ts:120"));
+  await typeLine(chalk7.gray("    Event listeners are added on each connection but never removed on disconnect."));
+  console.log();
+  await typeLine(chalk7.bold("Summary: ") + chalk7.green("3 good") + " | " + chalk7.yellow("2 suggestions") + " | " + chalk7.red("1 issue"));
+  await showUsage(2800, 1200, 95e-4, "general");
+  logger.success("Done!");
+}
+async function demoPromptCommand(prompt, options) {
+  await requireDemoAuth();
+  const promptLower = prompt.toLowerCase();
+  if (promptLower.includes("refactor") && promptLower.includes("auth")) {
+    await demoBackendRefactor();
+  } else if (promptLower.includes("scan") || promptLower.includes("owasp") || promptLower.includes("vulnerabilit")) {
+    await demoSecurityScan();
+  } else if (promptLower.includes("explain")) {
+    const target = prompt.replace(/explain\s*/i, "").trim() || "this code";
+    await demoExplainCommand(target);
+  } else if (promptLower.includes("review")) {
+    await demoReviewCommand();
+  } else if (promptLower.includes("deploy") || promptLower.includes("docker") || promptLower.includes("kubernetes")) {
+    await demoDeployAssist();
+  } else if (promptLower.includes("fix") || promptLower.includes("bug") || promptLower.includes("error")) {
+    await demoBugFix();
+  } else if (promptLower.includes("test") || promptLower.includes("spec")) {
+    await demoWriteTests();
+  } else {
+    await demoGenericPrompt(prompt, options);
+  }
+}
+async function demoChatCommand(options) {
+  await requireDemoAuth();
+  const readline2 = await import('readline');
+  console.clear();
+  logger.box([
+    chalk7.bold.cyan("DevWing AI - Interactive Chat Mode"),
+    "",
+    "Chat with AI about your codebase. Type your message and press Enter.",
+    "",
+    chalk7.dim("Type /help for commands | /exit to quit")
+  ].join("\n"), { title: "Welcome", color: "cyan" });
+  logger.newline();
+  logger.startSpinner("Loading codebase context...");
+  await sleep(1200);
+  logger.succeedSpinner("Context loaded \u2014 34 files");
+  logger.newline();
+  const rl = readline2.createInterface({
+    input: process.stdin,
+    output: process.stdout,
+    prompt: chalk7.bold.green("You: ")
+  });
+  rl.on("SIGINT", () => {
+    logger.newline();
+    logger.info("Exiting chat mode...");
+    rl.close();
+    process.exit(0);
+  });
+  rl.prompt();
+  rl.on("line", async (input) => {
+    const msg = input.trim();
+    if (!msg) {
+      rl.prompt();
+      return;
+    }
+    if (msg === "/exit" || msg === "/quit") {
+      logger.info("Exiting chat mode...");
+      rl.close();
+      return;
+    }
+    if (msg === "/help") {
+      logger.box([
+        chalk7.bold("DevWing Chat Commands:"),
+        "",
+        chalk7.cyan("/help") + "          \u2014 Show this message",
+        chalk7.cyan("/exit") + "          \u2014 Exit chat mode",
+        chalk7.cyan("/scan") + "          \u2014 Security scan",
+        chalk7.cyan("/review") + "        \u2014 Code review",
+        chalk7.cyan("/context") + "       \u2014 Show loaded context",
+        chalk7.cyan("/memory show") + "   \u2014 Show project memory"
+      ].join("\n"), { title: "Commands", color: "blue" });
+      logger.newline();
+      rl.prompt();
+      return;
+    }
+    if (msg === "/context") {
+      logger.box([
+        chalk7.bold("Current Context:"),
+        "",
+        `Working Directory: ${chalk7.cyan(process.cwd())}`,
+        `Shell: zsh | OS: darwin`,
+        `Files: 34 | Git Branch: main`,
+        "",
+        "Top files:",
+        "  \u2022 src/auth/auth_controller.ts",
+        "  \u2022 src/middleware/jwt.middleware.ts",
+        "  \u2022 src/services/user_service.ts",
+        "  \u2022 package.json",
+        "  ... and 30 more"
+      ].join("\n"), { title: "Context", color: "cyan" });
+      logger.newline();
+      rl.prompt();
+      return;
+    }
+    if (msg === "/memory show") {
+      await demoMemoryCommand("show");
+      logger.newline();
+      rl.prompt();
+      return;
+    }
+    if (msg === "/scan") {
+      logger.newline();
+      await demoSecurityScan();
+      logger.newline();
+      rl.prompt();
+      return;
+    }
+    if (msg === "/review") {
+      logger.newline();
+      await demoReviewCommand();
+      logger.newline();
+      rl.prompt();
+      return;
+    }
+    logger.newline();
+    logger.info(chalk7.dim("DevWing is thinking..."));
+    logger.newline();
+    await demoPromptCommand(msg, options);
+    logger.newline();
+    rl.prompt();
+  });
+  rl.on("close", () => {
+    logger.newline();
+    logger.success("Chat session ended. Goodbye!");
+    process.exit(0);
+  });
+}
+async function demoBackendRefactor() {
+  await showContextLoading(47, "backend");
+  logger.startSpinner("DevWing is thinking...");
+  await sleep(2e3);
+  logger.stopSpinner();
+  console.log();
+  await typeLine(chalk7.bold.magenta("## Analysis"));
+  console.log();
+  await typeLine("I've analyzed the auth service across 6 files. Here's what I found:");
+  console.log();
+  await typeLine(`  ${chalk7.red("\u2022")} Auth logic, validation, and DB queries are tightly coupled in ${chalk7.cyan("auth_controller.ts")}`);
+  await typeLine(`  ${chalk7.red("\u2022")} JWT validation is duplicated across 4 route handlers`);
+  await typeLine(`  ${chalk7.red("\u2022")} No rate limiting on login/register endpoints`);
+  await typeLine(`  ${chalk7.red("\u2022")} User lookup queries repeated in 3 places`);
+  console.log();
+  await sleep(PAUSE_MEDIUM);
+  await typeLine(chalk7.bold.magenta("## Refactor Plan"));
+  console.log();
+  await typeLine("1. Extract JWT validation into reusable middleware");
+  await typeLine("2. Create `UserRepository` with all DB operations");
+  await typeLine("3. Add `RateLimiter` decorator using sliding window algorithm");
+  await typeLine("4. Separate controller into thin route handlers");
+  console.log();
+  await sleep(PAUSE_MEDIUM);
+  await typeLine(chalk7.bold.magenta("## Executing Refactor"));
+  console.log();
+  await showToolCall("read_file", "src/auth/auth_controller.ts");
+  await showToolResult("Read 156 lines");
+  await showToolCall("read_file", "src/auth/auth_routes.ts");
+  await showToolResult("Read 89 lines");
+  await showToolCall("read_file", "src/middleware/index.ts");
+  await showToolResult("Read 23 lines");
+  await showToolCall("write_file", "src/auth/repositories/user.repository.ts");
+  await sleep(PAUSE_LONG);
+  await showToolResult("Created \u2014 UserRepository with findByEmail, findById, create, updateLastLogin");
+  await showToolCall("write_file", "src/middleware/jwt.middleware.ts");
+  await sleep(PAUSE_MEDIUM);
+  await showToolResult("Created \u2014 JWT validation middleware with token extraction and verification");
+  await showToolCall("write_file", "src/middleware/rate-limiter.ts");
+  await sleep(PAUSE_MEDIUM);
+  await showToolResult("Created \u2014 Sliding window rate limiter: 10 req/min login, 5 req/min register");
+  await showToolCall("write_file", "src/auth/auth_controller.ts");
+  await sleep(PAUSE_LONG);
+  await showToolResult("Refactored \u2014 156 lines \u2192 89 lines, clean separation of concerns");
+  await showToolCall("run_command", "npm test -- --filter auth");
+  await sleep(2e3);
+  await showToolResult("All 12 tests passed");
+  console.log();
+  await sleep(PAUSE_MEDIUM);
+  await typeLine(chalk7.bold.magenta("## Summary"));
+  console.log();
+  await typeLine(chalk7.green("\u2713") + " Extracted JWT validation to dedicated middleware");
+  await typeLine(chalk7.green("\u2713") + " Created UserRepository \u2014 single source for all user DB operations");
+  await typeLine(chalk7.green("\u2713") + " Added rate limiting: 10 req/min (login), 5 req/min (register)");
+  await typeLine(chalk7.green("\u2713") + ` Reduced ${chalk7.red("156")} lines \u2192 ${chalk7.green("89")} lines (${chalk7.cyan("43% reduction")})`);
+  await typeLine(chalk7.green("\u2713") + " All 12 existing tests pass \u2014 no regressions");
+  console.log();
+  await typeLine(chalk7.dim("Files modified: 4 | Files created: 3 | Lines removed: 67"));
+  await showUsage(3420, 1890, 0.0127, "backend");
+  logger.success("Done!");
+}
+async function demoSecurityScan() {
+  await showContextLoading(32, "security");
+  logger.startSpinner("DevWing is thinking...");
+  await sleep(1800);
+  logger.stopSpinner();
+  console.log();
+  await typeLine(chalk7.bold.magenta("## OWASP Security Scan \u2014 Auth Service"));
+  console.log();
+  await showToolCall("read_file", "src/auth/auth_controller.ts");
+  await showToolResult("Read 89 lines");
+  await showToolCall("read_file", "src/middleware/jwt.middleware.ts");
+  await showToolResult("Read 34 lines");
+  await showToolCall("read_file", "src/auth/repositories/user.repository.ts");
+  await showToolResult("Read 52 lines");
+  await sleep(PAUSE_LONG);
+  await typeLine(chalk7.bold.red("## Vulnerabilities Found: 3"));
+  console.log();
+  await typeLine(chalk7.red.bold("  \u25A0 CRITICAL") + chalk7.red(" \u2014 Weak JWT Token Configuration"));
+  await typeLine(chalk7.gray("    Location: src/middleware/jwt.middleware.ts:12"));
+  await typeLine(chalk7.gray("    Issue: JWT tokens signed with HS256 and no expiration validation"));
+  await typeLine(chalk7.gray("    OWASP: A2:2021 \u2014 Cryptographic Failures"));
+  console.log();
+  await typeLine(chalk7.yellow.bold("  \u25A0 HIGH") + chalk7.yellow(" \u2014 SQL Injection via User Lookup"));
+  await typeLine(chalk7.gray("    Location: src/auth/repositories/user.repository.ts:18"));
+  await typeLine(chalk7.gray("    Issue: Raw string interpolation in findByEmail query"));
+  await typeLine(chalk7.gray("    OWASP: A3:2021 \u2014 Injection"));
+  console.log();
+  await typeLine(chalk7.yellow.bold("  \u25A0 MEDIUM") + chalk7.yellow(" \u2014 Missing Password Complexity Enforcement"));
+  await typeLine(chalk7.gray("    Location: src/auth/auth_controller.ts:34"));
+  await typeLine(chalk7.gray("    Issue: No minimum length, complexity, or breach database check"));
+  await typeLine(chalk7.gray("    OWASP: A7:2021 \u2014 Identification and Authentication Failures"));
+  console.log();
+  await sleep(PAUSE_MEDIUM);
+  await typeLine(chalk7.bold.magenta("## Applying Security Patches"));
+  console.log();
+  await showToolCall("write_file", "src/middleware/jwt.middleware.ts");
+  await sleep(PAUSE_LONG);
+  await showToolResult("Patched \u2014 Added RS256 signing, exp/iat validation, token rotation support");
+  await showToolCall("write_file", "src/auth/repositories/user.repository.ts");
+  await sleep(PAUSE_MEDIUM);
+  await showToolResult("Patched \u2014 Parameterized queries, input sanitization added");
+  await showToolCall("write_file", "src/auth/validators/password.validator.ts");
+  await sleep(PAUSE_MEDIUM);
+  await showToolResult("Created \u2014 Min 12 chars, uppercase, number, special char, breach check");
+  await showToolCall("run_command", "npm test -- --filter auth");
+  await sleep(1500);
+  await showToolResult("All 15 tests passed (3 new security tests added)");
+  console.log();
+  await typeLine(chalk7.bold.magenta("## Scan Complete"));
+  console.log();
+  await typeLine(chalk7.green("\u2713") + " 3 vulnerabilities found and patched");
+  await typeLine(chalk7.green("\u2713") + " JWT upgraded to RS256 with expiration enforcement");
+  await typeLine(chalk7.green("\u2713") + " SQL injection eliminated via parameterized queries");
+  await typeLine(chalk7.green("\u2713") + " Password policy enforced \u2014 NIST 800-63B compliant");
+  await typeLine(chalk7.green("\u2713") + " 3 new security regression tests added");
+  console.log();
+  await typeLine(chalk7.dim("Severity breakdown: 1 critical, 1 high, 1 medium \u2014 all resolved"));
+  await showUsage(2180, 1450, 89e-4, "security");
+  logger.success("Done!");
+}
+async function demoDeployAssist(_prompt) {
+  await showContextLoading(18, "devops");
+  logger.startSpinner("DevWing is thinking...");
+  await sleep(1800);
+  logger.stopSpinner();
+  console.log();
+  await typeLine(chalk7.bold.magenta("## Deployment Analysis"));
+  console.log();
+  await showToolCall("read_file", "Dockerfile");
+  await showToolResult("Read 28 lines");
+  await showToolCall("read_file", "docker-compose.yml");
+  await showToolResult("Read 45 lines");
+  await showToolCall("read_file", ".github/workflows/deploy.yml");
+  await showToolResult("Read 67 lines");
+  await sleep(PAUSE_MEDIUM);
+  await typeLine("Current deployment configuration:");
+  console.log();
+  await typeLine(`  ${chalk7.green("\u2022")} Docker image: ${chalk7.cyan("node:20-alpine")} \u2014 multi-stage build`);
+  await typeLine(`  ${chalk7.green("\u2022")} Target: Railway (detected from ${chalk7.cyan("railway.toml")})`);
+  await typeLine(`  ${chalk7.green("\u2022")} Health check: ${chalk7.cyan("/health")} endpoint configured`);
+  await typeLine(`  ${chalk7.green("\u2022")} Environment: 12 vars configured, 3 secrets`);
+  console.log();
+  await typeLine(chalk7.bold.magenta("## Optimizations Applied"));
+  console.log();
+  await showToolCall("write_file", "Dockerfile");
+  await sleep(PAUSE_LONG);
+  await showToolResult("Optimized \u2014 Added layer caching, reduced image size from 340MB to 89MB");
+  await showToolCall("write_file", "docker-compose.yml");
+  await sleep(PAUSE_MEDIUM);
+  await showToolResult("Added health checks, restart policies, resource limits");
+  console.log();
+  await typeLine(chalk7.green("\u2713") + " Docker image optimized: 340MB \u2192 89MB (74% smaller)");
+  await typeLine(chalk7.green("\u2713") + " Added proper health checks and restart policies");
+  await typeLine(chalk7.green("\u2713") + " Build time reduced: ~4min \u2192 ~1.5min with layer caching");
+  await showUsage(1800, 950, 65e-4, "devops");
+  logger.success("Done!");
+}
+async function demoBugFix(_prompt) {
+  await showContextLoading(35, "backend");
+  logger.startSpinner("DevWing is thinking...");
+  await sleep(1800);
+  logger.stopSpinner();
+  console.log();
+  await typeLine(chalk7.bold.magenta("## Bug Analysis"));
+  console.log();
+  await showToolCall("read_file", "src/services/user_service.ts");
+  await showToolResult("Read 94 lines");
+  await showToolCall("git_diff", "");
+  await showToolResult("3 files changed, 12 insertions, 4 deletions");
+  await showToolCall("git_log", "last 5 commits");
+  await showToolResult("Loaded recent history");
+  await sleep(PAUSE_MEDIUM);
+  await typeLine("I found the issue. The bug is in " + chalk7.cyan("user_service.ts:67") + ":");
+  console.log();
+  await typeLine(chalk7.red("  - const user = await db.query(`SELECT * FROM users WHERE id = ${userId}`);"));
+  await typeLine(chalk7.green("  + const user = await db.query(`SELECT * FROM users WHERE id = $1`, [userId]);"));
+  console.log();
+  await typeLine("The user ID was being interpolated directly into the SQL query instead of");
+  await typeLine("using parameterized binding. This causes:");
+  await typeLine("  1. SQL injection vulnerability");
+  await typeLine("  2. Query failure when ID contains special characters");
+  console.log();
+  await showToolCall("write_file", "src/services/user_service.ts");
+  await sleep(PAUSE_LONG);
+  await showToolResult("Fixed \u2014 Parameterized query binding");
+  await showToolCall("run_command", "npm test -- --filter user");
+  await sleep(1500);
+  await showToolResult("All 8 tests passed");
+  console.log();
+  await typeLine(chalk7.green("\u2713") + " Bug fixed \u2014 parameterized SQL query");
+  await typeLine(chalk7.green("\u2713") + " SQL injection vulnerability closed");
+  await typeLine(chalk7.green("\u2713") + " All tests pass");
+  await showUsage(1650, 890, 62e-4, "backend");
+  logger.success("Done!");
+}
+async function demoWriteTests(_prompt) {
+  await showContextLoading(22, "backend");
+  logger.startSpinner("DevWing is thinking...");
+  await sleep(1800);
+  logger.stopSpinner();
+  console.log();
+  await typeLine(chalk7.bold.magenta("## Generating Tests"));
+  console.log();
+  await showToolCall("read_file", "src/auth/auth_controller.ts");
+  await showToolResult("Read 89 lines \u2014 4 functions to test");
+  await showToolCall("read_file", "src/auth/repositories/user.repository.ts");
+  await showToolResult("Read 52 lines \u2014 5 methods to test");
+  await sleep(PAUSE_MEDIUM);
+  await showToolCall("write_file", "tests/auth/auth_controller.test.ts");
+  await sleep(PAUSE_LONG);
+  await showToolResult("Created \u2014 8 test cases: login, register, refresh, logout, edge cases");
+  await showToolCall("write_file", "tests/auth/user_repository.test.ts");
+  await sleep(PAUSE_LONG);
+  await showToolResult("Created \u2014 10 test cases: CRUD operations, error handling, constraints");
+  await showToolCall("run_command", "npm test -- --filter auth");
+  await sleep(2e3);
+  await showToolResult("18 / 18 tests passed");
+  console.log();
+  await typeLine(chalk7.bold.magenta("## Test Coverage"));
+  console.log();
+  await typeLine("  auth_controller.ts:     " + chalk7.green("94%") + " (was 0%)");
+  await typeLine("  user.repository.ts:     " + chalk7.green("98%") + " (was 0%)");
+  await typeLine("  Overall auth module:    " + chalk7.green("96%"));
+  console.log();
+  await typeLine(chalk7.green("\u2713") + " 18 tests generated and passing");
+  await typeLine(chalk7.green("\u2713") + " Covers happy paths, edge cases, and error states");
+  await showUsage(2400, 1680, 98e-4, "backend");
+  logger.success("Done!");
+}
+async function demoGenericPrompt(prompt, options) {
+  const mode = options.mode || "general";
+  await showContextLoading(28, mode);
+  logger.startSpinner("DevWing is thinking...");
+  await sleep(1500);
+  logger.stopSpinner();
+  console.log();
+  await typeLine(chalk7.bold.magenta("## Response"));
+  console.log();
+  await typeLine(`Based on your codebase analysis, here's my approach to: "${prompt}"`);
+  console.log();
+  await typeLine(`  ${chalk7.green("\u2022")} Analyzed project structure and dependencies`);
+  await typeLine(`  ${chalk7.green("\u2022")} Reviewed relevant files based on your prompt`);
+  await typeLine(`  ${chalk7.green("\u2022")} Generated solution aligned with existing patterns`);
+  console.log();
+  await showUsage(1100, 620, 41e-4, mode);
+  logger.success("Done!");
+}
+async function showToolCall(tool, args) {
+  await sleep(PAUSE_SHORT);
+  console.log();
+  console.log(chalk7.yellow(`  \u25B6 ${chalk7.bold(tool)}`));
+  if (args) console.log(chalk7.gray(`    ${args}`));
+  await sleep(PAUSE_MEDIUM);
+}
+async function showToolResult(result) {
+  console.log(chalk7.green(`  \u2713 ${result}`));
+  await sleep(PAUSE_SHORT);
+}
+async function showContextLoading(fileCount, mode) {
+  logger.startSpinner("Analyzing codebase...");
+  await sleep(1200);
+  logger.updateSpinner(`Scanning ${fileCount} files...`);
+  await sleep(800);
+  logger.updateSpinner("Building dependency graph...");
+  await sleep(600);
+  logger.updateSpinner("Collecting git context...");
+  await sleep(500);
+  logger.succeedSpinner(`Context loaded \u2014 ${fileCount} files, mode: ${chalk7.cyan(mode)}`);
+  console.log();
+}
+async function showUsage(tokensIn, tokensOut, cost, mode) {
+  const modelName = mode === "security" ? "devwing-security-1" : mode === "devops" ? "devwing-devops-1" : mode === "frontend" ? "devwing-frontend-1" : "devwing-backend-1";
+  console.log();
+  console.log(
+    chalk7.gray(
+      `\u{1F4CA} Tokens: ${tokensIn.toLocaleString()} in, ${tokensOut.toLocaleString()} out | Cost: $${cost.toFixed(4)} | Model: ${modelName}`
+    )
+  );
+  console.log();
+}
+async function requireDemoAuth() {
+  const apiKey = await configManager.getApiKey();
+  if (!apiKey) {
+    logger.error('Not authenticated. Run "devwing login" first.');
+    process.exit(1);
+  }
+}
+function isDemoMode() {
+  return process.env.DEVWING_DEMO === "1" || process.env.DEVWING_DEMO === "true";
+}
 var program = new Command();
-var VERSION = "0.1.4";
+var __cliFilename = fileURLToPath(import.meta.url);
+var __cliDirname = dirname(__cliFilename);
+function getVersion() {
+  const paths = [
+    join(__cliDirname, "../package.json"),
+    join(__cliDirname, "../../package.json")
+  ];
+  for (const p of paths) {
+    try {
+      return JSON.parse(readFileSync(p, "utf-8")).version;
+    } catch {
+      continue;
+    }
+  }
+  return "0.1.6";
+}
+var VERSION = getVersion();
 program.name("devwing").description("DevWing.ai - Your AI Wingman in the Terminal").version(VERSION, "-v, --version", "Display version number").helpOption("-h, --help", "Display help information");
 program.option("--mode <mode>", "AI mode: general|frontend|backend|security|devops").option("--model <model>", "Specific model to use").option("--project <id>", "Project ID").option("--workspace <id>", "Workspace ID").option("--verbose", "Verbose output for debugging").option("-y, --yes", "Auto-confirm destructive actions");
 program.command("login").description("Authenticate with DevWing").action(async () => {
-  await loginCommand();
+  if (isDemoMode()) {
+    await demoLoginCommand();
+  } else {
+    await loginCommand();
+  }
 });
 program.command("logout").description("Clear stored credentials").action(async () => {
-  await logoutCommand();
+  if (isDemoMode()) {
+    await demoLogoutCommand();
+  } else {
+    await logoutCommand();
+  }
 });
 program.command("status").description("Show authentication status and profile").action(async () => {
-  await statusCommand();
+  if (isDemoMode()) {
+    await demoStatusCommand();
+  } else {
+    await statusCommand();
+  }
 });
 program.command("chat").description("Start interactive chat mode (like Claude Code)").action(async () => {
   const opts = program.opts();
-  await chatCommand(opts);
+  if (isDemoMode()) {
+    await demoChatCommand(opts);
+  } else {
+    await chatCommand(opts);
+  }
 });
 program.command("scan").description("Run security vulnerability scan").action(async () => {
   const opts = program.opts();
-  await scanCommand(opts);
+  if (isDemoMode()) {
+    await demoPromptCommand("scan auth service for OWASP vulnerabilities", { ...opts, mode: "security" });
+  } else {
+    await scanCommand(opts);
+  }
 });
 program.command("review").description("Perform code review on recent changes").action(async () => {
   const opts = program.opts();
-  await reviewCommand(opts);
+  if (isDemoMode()) {
+    await demoReviewCommand();
+  } else {
+    await reviewCommand(opts);
+  }
 });
 program.command("explain <target>").description("Explain code, file, or concept").action(async (target) => {
   const opts = program.opts();
-  await explainCommand(target, opts);
+  if (isDemoMode()) {
+    await demoExplainCommand(target);
+  } else {
+    await explainCommand(target, opts);
+  }
 });
 var memoryCmd = program.command("memory").description("Manage project memory");
 memoryCmd.command("save <content>").description("Save information to project memory").action(async (content) => {
   const opts = program.opts();
-  await memoryCommand("save", content, opts);
+  if (isDemoMode()) {
+    await demoMemoryCommand("save", content);
+  } else {
+    await memoryCommand("save", content, opts);
+  }
 });
 memoryCmd.command("show").description("Show all project memories").action(async () => {
   const opts = program.opts();
-  await memoryCommand("show", void 0, opts);
+  if (isDemoMode()) {
+    await demoMemoryCommand("show");
+  } else {
+    await memoryCommand("show", void 0, opts);
+  }
 });
 memoryCmd.command("clear").description("Clear all project memories").action(async () => {
   const opts = program.opts();
-  await memoryCommand("clear", void 0, opts);
+  if (isDemoMode()) {
+    await demoMemoryCommand("clear");
+  } else {
+    await memoryCommand("clear", void 0, opts);
+  }
 });
 var configCmd = program.command("config").description("Manage CLI configuration");
 configCmd.command("list").description("Show all configuration").action(async () => {
@@ -2338,20 +3263,30 @@ program.command("update").description("Check for and install CLI updates").optio
 program.argument("[prompt...]", "Natural language prompt for AI (optional - starts chat mode if empty)").action(async (promptParts) => {
   const opts = program.opts();
   if (promptParts.length === 0) {
-    await chatCommand(opts);
+    if (isDemoMode()) {
+      await demoChatCommand(opts);
+    } else {
+      await chatCommand(opts);
+    }
     return;
   }
   const prompt = promptParts.join(" ");
-  await promptCommand(prompt, opts);
+  if (isDemoMode()) {
+    await demoPromptCommand(prompt, opts);
+  } else {
+    await promptCommand(prompt, opts);
+  }
 });
 program.exitOverride();
 try {
   await program.parseAsync(process.argv);
 } catch (error) {
-  if (error.code === "commander.help" || error.code === "commander.version") {
+  if (error.code === "commander.help" || error.code === "commander.helpDisplayed" || error.code === "commander.version") {
     process.exit(0);
   }
-  logger.error("An error occurred", error);
+  if (error.message && !error.message.includes("process.exit")) {
+    logger.error(error.message);
+  }
   if (process.env.DEBUG) {
     console.error(error);
   }