savant-code 0.0.17 → 0.0.19

package/bunfig.toml

@@ -0,0 +1,7 @@
+[install]
+linker = "hoisted"
+linkWorkspacePackages = true
+
+[test]
+exclude = ["**/*.integration.test.*", "savant-free/e2e/**"]
+preload = ["./sdk/test/setup-env.ts"]

package/cli/README.md

@@ -0,0 +1,111 @@
+<!-- markdownlint-disable MD041 -->
+<img src="../assets/banner.png" alt="@savant-code/cli — TUI source for Savant-Code and Savant-Free" width="650" />
+
+# @savant-code/cli
+
+The TUI source for both **Savant-Code** and **Savant-Free** — built with OpenTUI and React.
+
+[![TypeScript](https://img.shields.io/badge/TypeScript-5.5-%23000000?style=flat-square&logo=typescript&logoColor=%2300fbff)](https://www.typescriptlang.org/)[![Bun](https://img.shields.io/badge/Bun-1.3.14-%23000000?style=flat-square&logo=bun&logoColor=%2300fbff)](https://bun.sh/)[![OpenTUI](https://img.shields.io/badge/OpenTUI-0.2.2-%23000000?style=flat-square&logo=opentui&logoColor=%2300fbff)](https://github.com/anomalyco/opentui)[![React](https://img.shields.io/badge/React-19-%23000000?style=flat-square&logo=react&logoColor=%2300fbff)](https://react.dev/)[![ECHO](https://img.shields.io/badge/ECHO-v0.2.0-%23000000?style=flat-square&logo=github&logoColor=%2300fbff)](../ECHO.md)
+
+**For the end-user Quick Start** (how to install/launch Savant-Code or Savant-Free), see the [root
+README](../README.md#quick-start). This CLI package is the **internal dev source** used to build both CLI binaries.
+
+## Installation
+
+```bash
+bun install
+```
+
+## Development
+
+Run the TUI in development mode:
+
+```bash
+bun run dev
+```
+
+## Testing
+
+Run the test suite:
+
+```bash
+bun test
+```
+
+### Interactive E2E Testing
+
+For testing interactive CLI features, install tmux:
+
+```bash
+# macOS
+brew install tmux
+
+# Ubuntu/Debian
+sudo apt-get install tmux
+
+# Windows (via WSL)
+wsl --install
+sudo apt-get install tmux
+```
+
+Then run the proof-of-concept:
+
+```bash
+bun run test:tmux-poc
+```
+
+**Note:** When sending input to the CLI via tmux, you must use bracketed paste mode. Standard `send-keys` drops characters.
+
+```bash
+# ❌ Broken: tmux send-keys -t session "hello"
+# ✅ Works:  tmux send-keys -t session $'\e[200~hello\e[201~'
+```
+
+See [tmux.knowledge.md](tmux.knowledge.md) for comprehensive tmux documentation and
+[src/__tests__/README.md](src/__tests__/README.md) for testing documentation.
+
+## Build
+
+Build the package:
+
+```bash
+bun run build
+```
+
+## Run
+
+Run the built TUI:
+
+```bash
+bun run start
+```
+
+Or use the binary directly:
+
+```bash
+savant-code-tui
+```
+
+## Features
+
+- Built with OpenTUI for modern terminal interfaces
+- Uses React for declarative component-based UI
+- TypeScript support out of the box
+- Multi-agent orchestration via [ECHO Protocol v0.2.0](../ECHO.md) (9 specialized agents)
+- ECHO-driven Perfection Loop: RED → GREEN → AUDIT → SELF-CORRECT → COMPLETE
+- FID-Bound Execution: code is never written until the FID converges
+
+---
+
+<div align="center">
+
+_This CLI source is part of the [savant-code/savant-code monorepo](https://github.com/savant0x/savant-code), governed by the [ECHO Protocol](../ECHO.md)._
+
+**Savant** • 2026
+</div>
+
+---
+
+## License
+
+Apache-2.0 — this project ships under the [root LICENSE](../LICENSE) file. See [LICENSE](../LICENSE) for full text.

package/cli/bunfig.toml

@@ -0,0 +1,2 @@
+[test]
+preload = ["./src/test-setup.ts"]

package/cli/cli_exit

@@ -0,0 +1 @@
+0

package/cli/package.json

@@ -0,0 +1,66 @@
+{
+  "name": "@savant-code/cli",
+  "version": "0.0.18",
+  "type": "module",
+  "bin": {
+    "savant-code": "./bin/savant-code"
+  },
+  "exports": {
+    ".": {
+      "bun": "./src/index.tsx",
+      "import": "./dist/index.js",
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "scripts": {
+    "dev": "bun run prebuild:agents && bun run src/index.tsx --cwd ..",
+    "prebuild:agents": "bun run scripts/prebuild-agents.ts",
+    "build:binary": "bun ./scripts/build-binary.ts savant-code $npm_package_version",
+    "clean": "bun run scripts/clean.ts",
+    "release": "bun run scripts/release.ts",
+    "test": "NODE_ENV=production bun test",
+    "test:tmux-poc": "bun run src/__tests__/tmux-poc.ts",
+    "typecheck": "tsc --noEmit -p ."
+  },
+  "sideEffects": [
+    "./src/pre-init/*.ts"
+  ],
+  "engines": {
+    "bun": "1.3.11"
+  },
+  "dependencies": {
+    "@savant-code/sdk": "workspace:*",
+    "@gravity-ai/api": "^0.1.2",
+    "@opentui/core": "0.2.2",
+    "@opentui/react": "0.2.2",
+    "@tanstack/react-query": "^5.90.12",
+    "commander": "^14.0.1",
+    "immer": "^10.1.3",
+    "jimp": "^1.6.0",
+    "node-machine-id": "^1.1.12",
+    "open": "^10.1.0",
+    "pino": "9.4.0",
+    "posthog-node": "^5.8.0",
+    "react": "^19.0.0",
+    "react-reconciler": "^0.32.0",
+    "remark-breaks": "^4.0.0",
+    "remark-gfm": "^4.0.1",
+    "remark-parse": "^11.0.0",
+    "string-width": "^7.2.0",
+    "systeminformation": "^5.30.7",
+    "terminal-image": "^4.1.0",
+    "ts-pattern": "^5.9.0",
+    "unified": "^11.0.0",
+    "wsl-utils": "^0.1.0",
+    "yoga-layout": "^3.2.1",
+    "zod": "^4.2.1",
+    "zustand": "^5.0.8"
+  },
+  "devDependencies": {
+    "@types/react": "19.2.14",
+    "@types/react-reconciler": "^0.32.0",
+    "react-dom": "^19.0.0",
+    "strip-ansi": "^7.1.2"
+  }
+}

package/cli/release/README.md

@@ -0,0 +1,348 @@
+<!-- markdownlint-disable MD013 -->
+
+# Savant-Code
+
+**A terminal-native multi-agent AI coding assistant that audits every change before it touches your repo.**
+
+Built with TypeScript/Bun, governed by the [ECHO Protocol](https://github.com/savant0x/savant-code/blob/main/ECHO.md), and designed for local-first use with Ollama or any OpenAI-compatible provider.
+
+[![GitHub Stars](https://img.shields.io/github/stars/savant0x/savant-code?style=social)](https://github.com/savant0x/savant-code)
+[![License: Apache-2.0](https://img.shields.io/badge/License-Apache%202.0-blue.svg)](https://github.com/savant0x/savant-code/blob/main/LICENSE)
+
+## Installation
+
+```bash
+npm install -g savant-code
+```
+
+## Quick Start
+
+```bash
+cd your-project
+savant-code
+```
+
+Describe the change you want. Savant-Code explores the repository, plans the work, implements approved changes, and verifies the result.
+
+If Ollama is installed and running, it is detected automatically and requires no API key:
+
+```bash
+ollama serve
+savant-code
+```
+
+Run `/health` inside the chat to inspect Ollama connectivity, available local models, provider mode, and permission mode.
+
+## Provider Setup
+
+Savant-Code supports local Ollama, hosted gateway providers, and direct OpenRouter or OpenAI-compatible endpoints. Use the interactive picker:
+
+```text
+/provider
+```
+
+Or select one of the supported gateway providers directly:
+
+| Provider | Selection | Environment variable | Notes |
+| --- | --- | --- | --- |
+| Ollama | Automatic detection | `OLLAMA_HOST` (optional) | Local inference; no API key required |
+| OpenCode Go | `/provider opencode-go` | `OPENCODE_GO_API_KEY` | Hosted gateway; MiMo 2.5 is the default model |
+| TokenRouter | `/provider tokenrouter` | `TOKENROUTER_API_KEY` | Multi-provider gateway |
+| NVIDIA NIM | `/provider nvidia` | `NVIDIA_API_KEY` | NVIDIA-hosted inference |
+| CommandCode | `/provider commandcode` | `COMMAND_CODE_API_KEY` | OpenAI-compatible hosted inference |
+| OpenRouter direct | `DIRECT_PROVIDER=openrouter` | `OR_MASTER_KEY`, `OPENROUTER_API_KEY`, or `INFERENCE_API_KEY` | Direct mode without the Savant backend |
+| Custom endpoint | Environment configuration | `INFERENCE_BASE_URL`, `INFERENCE_API_KEY` | Advanced OpenAI-compatible endpoint |
+
+The interactive key prompt is masked. Saved provider credentials are stored in the user configuration directory and are not added to chat history:
+
+- **Windows:** `C:\Users\<username>\.savant-code\credentials.json`
+- **macOS/Linux:** `~/.savant-code/credentials.json`
+
+Shell environment variables take precedence over saved credentials. Configure one provider key before launching:
+
+```powershell
+# PowerShell — choose one hosted gateway
+$env:OPENCODE_GO_API_KEY = "your-key"
+# $env:TOKENROUTER_API_KEY = "your-key"
+# $env:NVIDIA_API_KEY = "your-key"
+# $env:COMMAND_CODE_API_KEY = "your-key"
+savant-code
+```
+
+```cmd
+:: Windows Command Prompt — choose one hosted gateway
+set OPENCODE_GO_API_KEY=your-key
+:: set TOKENROUTER_API_KEY=your-key
+:: set NVIDIA_API_KEY=your-key
+:: set COMMAND_CODE_API_KEY=your-key
+savant-code
+```
+
+```bash
+# macOS/Linux — choose one hosted gateway
+export OPENCODE_GO_API_KEY="your-key"
+# export TOKENROUTER_API_KEY="your-key"
+# export NVIDIA_API_KEY="your-key"
+# export COMMAND_CODE_API_KEY="your-key"
+savant-code
+```
+
+### OpenRouter direct mode
+
+To bypass the Savant Code backend for inference and route directly to OpenRouter:
+
+```bash
+export DIRECT_PROVIDER=openrouter
+export INFERENCE_BASE_URL=https://openrouter.ai/api/v1
+```
+
+The credential resolution order is:
+
+1. `OR_MASTER_KEY` — exchanges a master key for a regular key through OpenRouter `/api/v1/keys`.
+2. `OPENROUTER_API_KEY` — uses an existing regular OpenRouter key directly.
+3. `INFERENCE_API_KEY` — uses the SDK-specific inference key.
+
+### Complete safe local configuration example
+
+The following is a public template containing dummy values only. Copy it to `.env.local` for local development, then replace only the values you actually use. Configure one inference mode or hosted provider at a time; the entries below document the complete variable surface, not a recommendation to enable every provider simultaneously. `.env.local` must remain private and gitignored. Never copy real credentials into documentation.
+
+```dotenv
+# Core and app configuration
+NEXT_PUBLIC_CB_ENVIRONMENT=dev
+NEXT_PUBLIC_WEB_PORT=3000
+NEXT_PUBLIC_SAVANT_CODE_APP_URL=http://localhost:3000
+# NEXT_PUBLIC_FREEBUFF_APP_URL=http://localhost:3001
+
+# Analytics, support, and billing placeholders
+NEXT_PUBLIC_POSTHOG_API_KEY=phc_dummy_replace_me
+NEXT_PUBLIC_POSTHOG_HOST_URL=http://localhost:4000
+NEXT_PUBLIC_GRAVITY_PIXEL_ID=00000000-0000-0000-0000-000000000000
+NEXT_PUBLIC_SUPPORT_EMAIL=replace-me@example.com
+NEXT_PUBLIC_STRIPE_PUBLISHABLE_KEY=pk_dummy_replace_me
+NEXT_PUBLIC_STRIPE_CUSTOMER_PORTAL=http://localhost:3000/portal
+NEXT_PUBLIC_GOOGLE_SITE_VERIFICATION_ID=dummy_replace_me
+
+# OpenRouter direct mode
+DIRECT_PROVIDER=openrouter
+INFERENCE_BASE_URL=https://openrouter.ai/api/v1
+OR_MASTER_KEY=dummy-or-master-key-replace-me
+# OPENROUTER_API_KEY=dummy-openrouter-api-key-replace-me
+# INFERENCE_API_KEY=dummy-inference-api-key-replace-me
+
+# Supported hosted gateways
+OPENCODE_GO_API_KEY=dummy-opencode-go-key-replace-me
+TOKENROUTER_API_KEY=dummy-tokenrouter-key-replace-me
+NVIDIA_API_KEY=dummy-nvidia-key-replace-me
+COMMAND_CODE_API_KEY=dummy-commandcode-key-replace-me
+
+# Local Ollama override (optional)
+# OLLAMA_HOST=http://localhost:11434
+
+# Optional backend and advanced integrations
+# SAVANT_CODE_API_KEY=backend-dummy-replace-me
+# CLOUDFLARE_API_TOKEN=cloudflare-dummy-replace-me
+# CLOUDFLARE_ACCOUNT_ID=cloudflare-account-dummy-replace-me
+AMAZON_WORKER=amazon-worker-dummy-replace-me
+```
+
+`AMAZON_WORKER` is retained for local deployment integrations. `GITHUB_TOKEN` and `NPM_PUBLISH` are intentionally not part of the public template because they are private release credentials.
+
+## What Makes Savant-Code Different
+
+Savant-Code is a multi-agent system rather than a single model guessing at your code. Nine canonical ECHO roles coordinate with strict separation of duties:
+
+| Agent | Responsibility |
+| --- | --- |
+| **Savant** | Orchestrator — routes work, enforces protocol, and spawns agents |
+| **Detective** | Finds bugs and issues with evidence before code is written |
+| **Forge** | Implements code changes from a converged plan |
+| **Verifier** | Performs the independent double-audit after implementation |
+| **Recorder** | Manages FID lifecycle and release tracking |
+| **Thinker** | Performs deep sequential reasoning for complex problems |
+| **Scout** | Explores files and code to gather context |
+| **Researcher** | Performs web search and documentation lookup |
+| **Scribe** | Captures session summaries and durable knowledge |
+
+Infrastructure helpers such as terminal execution, browser automation, and web/docs tool libraries support these roles; they are not additional roster members.
+
+### ECHO Protocol
+
+Every code change follows the ECHO Perfection Loop:
+
+1. **RED** — identify all failures and issues with evidence.
+2. **GREEN** — implement minimal, surgical changes from the converged FID.
+3. **AUDIT** — independently verify the implementation and call-graph reachability.
+4. **SELF-CORRECT** — resolve audit findings and repeat verification when needed.
+5. **COMPLETE** — record evidence, update tracking, and close the work item.
+
+No code is written without a converged plan, and the implementing agent cannot serve as the final verifier.
+
+## Features
+
+### Multi-agent orchestration
+
+- Nine canonical agents coordinate through ECHO with explicit separation of duties.
+- Child agents receive only their authorized tool subset through strict allowlist filtering.
+- Parallel agent work supports exploration, research, implementation, and independent review.
+- FID-bound execution keeps implementation tied to an approved specification.
+
+### Thinker and sequential reasoning
+
+The Thinker accumulates typed sequential reasoning steps and converges to a non-null final artifact containing status, synthesis, payload, metrics, and thoughts. Thinker cascades preserve prompt inheritance while keeping child tools restricted.
+
+### Safe execution and tool-call hardening
+
+- Fail-closed handling for incomplete, malformed, or truncated native tool calls.
+- Strict tool schema validation with safe coercion of stringified numbers and booleans.
+- Programmatic tool primitives with explicit authorization boundaries.
+- Write-gate checkpoints capture files before `write_file`, `str_replace`, or `apply_patch` changes.
+- Tool errors, cancellation, retry, and child-agent failures are surfaced rather than silently treated as success.
+
+### Checkpoint and Rewind
+
+Each user turn can persist the pre-edit content of every first-touched file, including subagent writes. `/rewind` supports:
+
+- **Code only** — restore files while keeping the conversation.
+- **Conversation only** — restore the transcript boundary without changing files.
+- **Both** — restore code and conversation together.
+- **Fork** — restore the selected turn into a fresh chat.
+
+Retention is bounded to the most recent 20 turns, restore paths are revalidated, and terminal side effects are intentionally not rewound. No Git repository is required.
+
+### Permissions and modes
+
+- `--permission-mode safe|prompt|unsafe` selects the startup policy.
+- `/permissions` (aliases `/sandbox` and `/safety`) views or changes the policy.
+- `safe` denies risky tools; `prompt` currently also denies them because interactive confirmations are not yet implemented; `unsafe` allows them explicitly.
+- `EDIT`, `ANALYZE`, and `SCAFFOLD` modes change the execution scope at runtime.
+
+### Planning, review, and goals
+
+- `/interview` turns an underspecified idea into a structured specification.
+- `/plan` creates an implementation plan.
+- `/review` opens a focused code-review workflow.
+- `/goal` defines a verifiable goal.
+- `/loop` schedules recurring checks with cadence, run counts, and convergence detection.
+
+### Context and project knowledge
+
+- Four-layer progressive context compaction keeps large repositories within model limits.
+- `knowledge.md` files provide durable project conventions and preferences.
+- User-level knowledge can be loaded alongside project knowledge.
+- OpenClaw-format `SKILL.md` files are discovered and exposed as native skills.
+- MCP servers are discovered at startup and their tools are published to the model.
+- Gateway model context lengths can be resolved from the live catalog.
+
+### Terminal UI
+
+- Token-by-token streaming with cancellation and retry backoff.
+- Universal copy actions for code blocks, tool output, and diffs.
+- Light/dark themes with the Neon Slate aesthetic.
+- Collapsible sidebar sections and FID cards.
+- `@filename` and `@AgentName` autocomplete.
+- Bash mode via `!command` or `/bash` with permission enforcement.
+- Masked provider setup and health diagnostics.
+- Telemetry consent controls through `/telemetry status|enable|disable`.
+- Optional image attachments for multimodal providers.
+
+### SDK and runtime
+
+The package ships the CLI on top of shared runtime and SDK capabilities:
+
+- `SavantCodeClient` for running agents from Node.js, Bun, or browser applications.
+- Streaming `RunState` events for progress, tool calls, diffs, and final output.
+- Custom `AgentDefinition[]` agents and custom tool definitions.
+- `AbortSignal` cancellation propagated through subagent streams.
+- Checkpoint APIs (`openTurn`, `captureSnapshot`, `closeTurn`, `listTurns`, `restoreTurn`, and `forkFrom`).
+- LLM-agnostic runtime with OpenAI-compatible, Anthropic, Ollama, and gateway provider shims.
+- Per-call token counts and USD cost estimates surfaced in run state.
+
+## Slash Command Reference
+
+Commands can be entered with `/`; aliases are shown in parentheses. Some commands are intentionally unavailable in Savant-Free builds.
+
+| Command | Purpose |
+| --- | --- |
+| `/help` (`/h`, `/?`) | Show command help and tips |
+| `/new` (`/clear`, `/reset`) | Start a fresh conversation |
+| `/history` (`/chats`) | Browse and resume previous sessions |
+| `/copy` (`/export`) | Copy the complete conversation |
+| `/interview` | Create a structured specification |
+| `/plan` | Create an implementation plan |
+| `/review` | Review code changes |
+| `/goal` (`/g`) | Iterate toward a verifiable goal |
+| `/loop` (`/repeat`) | Schedule recurring checks; use `status` or `stop` |
+| `/verify` (`/typecheck`) | Run all four core workspace typechecks or one selected workspace |
+| `/permissions` (`/sandbox`, `/safety`) | View or set the tool permission mode |
+| `/rewind` (`/undo`, `/checkpoint`) | Restore code and/or conversation from a prior turn |
+| `/health` (`/status`, `/check`) | Check provider, Ollama, model, and permission status |
+| `/diagnostics` (`/diag`, `/processes`) | Show local process and resource diagnostics |
+| `/provider` | Configure a hosted provider key with masked input |
+| `/model` | Select or switch the active model |
+| `/publish` | Publish agent templates through the Savant backend |
+| `/feedback` (`/bug`, `/report`) | Open the feedback flow |
+| `/telemetry` (`/analytics`) | View or change remote analytics consent |
+| `/theme:toggle` | Switch between light and dark themes |
+| `/bash` (`!`) | Run a shell command or enter Bash mode |
+| `/image` (`/img`, `/attach`) | Attach an image for supported multimodal models |
+| `/init` | Create starter agent types and `knowledge.md` |
+| `/login` / `/logout` | Authenticate or end the current session |
+| `/exit` (`/quit`, `/q`) | Quit the CLI |
+
+## Usage Examples
+
+**Implement a feature:**
+
+> Add a rate limiter to the API endpoints that allows 100 requests per minute per IP address, with Redis-backed counting.
+
+**Fix a bug:**
+
+> The login form crashes on submit when the email field is empty. Find the bug and fix it.
+
+**Write tests:**
+
+> Add unit tests for the UserService class covering all edge cases in the register flow.
+
+**Refactor:**
+
+> Refactor the database connection layer to use connection pooling instead of creating a new connection per request.
+
+**Code review:**
+
+> Review my recent changes and flag security issues, performance problems, and style violations.
+
+## Troubleshooting
+
+### Permission errors
+
+Use a user-writable Node/npm installation or, where appropriate, install globally with elevated permissions:
+
+```bash
+sudo npm install -g savant-code
+```
+
+### Corporate proxy or firewall
+
+```bash
+export HTTPS_PROXY=http://your-proxy-server:port
+savant-code
+```
+
+### No model available
+
+Run `/provider` to configure one of the hosted gateways, or install and start [Ollama](https://ollama.com) for local inference.
+
+### Direct-provider mode cannot connect
+
+Confirm that `DIRECT_PROVIDER`, `INFERENCE_BASE_URL`, and the selected credential are set in the same shell that launches Savant-Code. For OpenRouter, verify the precedence order above and use `/health` to inspect the active mode.
+
+## Links
+
+- **GitHub:** [github.com/savant0x/savant-code](https://github.com/savant0x/savant-code)
+- **Documentation:** [savant-code.com/docs](https://savant-code.com/docs)
+- **Issues:** [GitHub Issues](https://github.com/savant0x/savant-code/issues)
+- **License:** [Apache 2.0](https://github.com/savant0x/savant-code/blob/main/LICENSE)
+
+---
+
+_Savant-Code is the public TypeScript monorepo for the Savant-Code agent framework._

package/cli/release/package.json

@@ -0,0 +1,56 @@
+{
+  "name": "savant-code",
+  "version": "0.0.18",
+  "description": "Multi-Agent AI Coding Assistant with ECHO Protocol",
+  "license": "Apache-2.0",
+  "author": "Savant Code <founders@savant-code.com>",
+  "keywords": [
+    "ai",
+    "cli",
+    "coding-assistant",
+    "agent",
+    "echo-protocol",
+    "multi-agent",
+    "typescript"
+  ],
+  "bin": {
+    "savant-code": "index.js",
+    "sc": "index.js"
+  },
+  "scripts": {
+    "prepack": "node ../release-core/prepare-package.js",
+    "postpack": "node ../release-core/prepare-package.js --clean"
+  },
+  "files": [
+    "index.js",
+    "launcher.js",
+    "http.js",
+    "README.md"
+  ],
+  "os": [
+    "darwin",
+    "linux",
+    "win32"
+  ],
+  "cpu": [
+    "x64",
+    "arm64"
+  ],
+  "engines": {
+    "node": ">=16"
+  },
+  "dependencies": {
+    "tar": "^7.0.0"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/savant0x/savant-code.git"
+  },
+  "bugs": {
+    "url": "https://github.com/savant0x/savant-code/issues"
+  },
+  "homepage": "https://github.com/savant0x/savant-code#readme",
+  "publishConfig": {
+    "access": "public"
+  }
+}

package/cli/release-core/README.md

@@ -0,0 +1,20 @@
+# Release launcher core
+
+This directory is the canonical implementation of the npm launchers used by
+SavantCode, Codecane, and SavantFree. Each product keeps a small `index.js` in its
+release package that supplies product-specific configuration to
+`createLauncher()`.
+
+The npm packages must remain standalone, so their `prepack` scripts copy
+`launcher.js` and `http.js` into the package directory. `postpack` removes those
+generated, gitignored files again. No lifecycle scripts run when users install
+or uninstall the packages.
+
+When changing launcher behavior, edit this directory and test all package
+assemblies with:
+
+```bash
+npm pack ./cli/release --dry-run
+npm pack ./cli/release-staging --dry-run
+npm pack ./savant-free/cli/release --dry-run
+```

package/cli/release-core/package.json

@@ -0,0 +1,4 @@
+{
+  "private": true,
+  "type": "commonjs"
+}

package/cli/release-core/prepare-package.js

@@ -0,0 +1,31 @@
+#!/usr/bin/env node
+
+const fs = require('fs')
+const path = require('path')
+
+const packageDir = process.cwd()
+const packageJson = JSON.parse(
+  fs.readFileSync(path.join(packageDir, 'package.json'), 'utf8'),
+)
+const supportedPackages = new Set([
+  'savant-code',
+  'savant-code-staging',
+  'savant-free',
+])
+
+if (!supportedPackages.has(packageJson.name)) {
+  throw new Error(
+    `Refusing to prepare unexpected release package: ${packageJson.name}`,
+  )
+}
+
+const generatedFiles = ['launcher.js', 'http.js']
+
+for (const fileName of generatedFiles) {
+  const destinationPath = path.join(packageDir, fileName)
+  if (process.argv.includes('--clean')) {
+    fs.rmSync(destinationPath, { force: true })
+  } else {
+    fs.copyFileSync(path.join(__dirname, fileName), destinationPath)
+  }
+}