tomo-ai 0.8.3 → 0.8.5

package/CHANGELOG.md

@@ -1,10 +1,54 @@
 # Changelog
 
+## 0.8.5 (2026-06-26)
+
+### Features
+
+- **API key authentication config** (#158). Adds explicit API-key auth configuration and prevents the Anthropic API key from leaking to custom gateways/base URLs.
+- **Claude login from the owner DM** (#165). The owner can authenticate Claude directly through a DM command instead of the CLI only, with clearer messaging when login verification fails.
+- **Custom workspace for SDK sessions** (#175). SDK sessions now honor a configured custom workspace path. Runtime path resolution was consolidated into a new `runtime-paths` module.
+
+### Bug fixes
+
+- **iMessage inbound webhook dedupe is now persisted** (#163). Webhook dedupe state survives daemon restarts instead of living only in memory, so restarts no longer risk re-processing recently seen messages.
+- **Direct-send note attribution** (#148). Summoned-group direct sends are attributed to the correct caller, attribution is caller-aware, and pending notes are capped.
+- **Suppress group LCM output** (#164). Lifecycle-management chatter no longer leaks into group chats.
+
+### Other
+
+- Test against Node 26 in CI and align Node typings (#171).
+- Extract `backup-workspace` out of the backup command.
+- Bump `@anthropic-ai/claude-agent-sdk` `0.3.181` → `0.3.195` (#173, #169, #176).
+- Bump `grammy` `1.44.0` (#168), `@clack/prompts` `1.6.0` (#170), `eslint` `10.6.0`, `actions/checkout` v7 (#166), and the dev-dependencies group (#174).
+
+## 0.8.4 (2026-06-19)
+
+### Features
+
+- **`/summon` — pull your main session into a group chat.** A configured identity's owner can `/summon` in an allowlisted group so the group's messages run on their unified `dm:` session (full personal context) until `/dismiss` or after `summonExpiryMinutes` of group inactivity (default 60; `0` disables, `TOMO_SUMMON_EXPIRY_MINUTES` to override). Turn output stays in the owner's private DM — group-facing replies require an explicit `send_message` direct-mode call — so private context never auto-posts to the group. Summon state is persisted across daemon restarts, lapses lazily, and an audience-switch note is injected when a `dm:` session's inbound audience flips between private DM and a summoned group.
+- **Configurable continuity heartbeat.** The continuity heartbeat interval is no longer hardcoded and can be tuned via config.
+- **`pet_status` chat command** (#157). Surface the virtual pet's current state directly from chat.
+- **Message steering on by default** (#150). `steering` now defaults to on (`TOMO_STEERING=false` to opt out), and direct sends were cleaned up alongside it.
+
+### Bug fixes
+
+- **`/summon` no longer emits a spurious "expired — handed back" notice on re-summon** (#160). The "already summoned?" guard read (also used by `/status` and `/dismiss`) lazily expired a lapsed summon and fired the group-facing handback notice, so re-summoning a group whose previous summon had gone stale posted a contradictory pair of messages. The handback notice now fires only on the real group-message routing path; guard reads still clear the `dm:` session's stale "summoned" context, but silently.
+- **Session timeout recovery and LCM typing fixes** (#155).
+- **iMessage typing-indicator lifecycle fix** (#154). The typing indicator is started and cleared correctly across the message lifecycle.
+- **`send_message` MEDIA/STICKER tag parsing in direct mode** (#147). Attachment tags are now parsed in direct sends, with regression coverage.
+- **Virtual pet hunger pacing tuned** (#149).
+
+### Other
+
+- Internal refactor: extracted inbound batching and chat-command handling out of the `Agent` class (#145).
+- Bump `@anthropic-ai/claude-agent-sdk` `0.3.168` → `0.3.177` → `0.3.181` (#159, #153).
+- Bump dev-dependencies group (#152).
+
 ## 0.8.3 (2026-06-11)
 
 ### Features
 
-- **Experimental message steering** (#142). New `steering` config (`TOMO_STEERING=true`, default off) lets user messages that arrive during an in-flight tool-using turn bypass the per-session queue and inject at the next tool-call boundary. If the current turn has no boundary left, the message runs as the next follow-up turn. Cron, continuity, and other system-originated turns continue to queue normally.
+- **Message steering** (#142). New optional `steering` config (`TOMO_STEERING=false` to opt out, default on) lets user messages that arrive during an in-flight tool-using turn bypass the per-session queue and inject at the next tool-call boundary. If the current turn has no boundary left, the message runs as the next follow-up turn. Cron, continuity, and other system-originated turns continue to queue normally.
 
 ### Bug fixes
 

package/README.md

@@ -32,7 +32,7 @@ That's it. Open Telegram and message your bot.
 ## Requirements
 
 - Node.js 22.12+
-- [Claude Code](https://claude.com/claude-code) installed. Authenticate Claude Code for direct Claude models, or configure a LiteLLM gateway for non-Claude backends.
+- [Claude Code](https://claude.com/claude-code) installed. Direct Claude models can use a Claude subscription or an Anthropic API key; LiteLLM gateways support other backends.
 - At least one channel:
   - **Telegram** — bot token from [@BotFather](https://t.me/BotFather)
   - **iMessage** — [BlueBubbles](https://bluebubbles.app) server running on a Mac with iMessage signed in
@@ -41,7 +41,7 @@ That's it. Open Telegram and message your bot.
 
 ```bash
 tomo init              # First-time setup
-tomo config            # Interactive settings (model, LiteLLM, channels, identities, groups)
+tomo config            # Interactive settings (authentication, model, LiteLLM, channels, identities, groups)
 tomo start             # Start in background (daemon)
 tomo start -f          # Start in foreground (for dev)
 tomo stop              # Stop the daemon
@@ -60,7 +60,9 @@ tomo sessions clear    # Reset all sessions
 | `/new` | Start a new conversation (resets session) |
 | `/model` | Switch model (Claude aliases or LiteLLM `provider/model` names) |
 | `/restore` | Restore `config.json` from `config.json.bak` and restart |
+| `/login` | Refresh Claude login from a configured owner's private DM |
 | `/status` | Show session info (model, channel, message count) |
+| `/pet` | Check Tomo's pet's mood, growth stage, and stats |
 
 ## Features
 
@@ -202,6 +204,10 @@ Run `tomo config` for interactive setup, or edit `~/.tomo/config.json` directly:
 
 ```json
 {
+  "auth": {
+    "method": "api-key",
+    "apiKey": "sk-ant-..."
+  },
   "channels": {
     "telegram": {
       "token": "your-bot-token",
@@ -225,8 +231,8 @@ Run `tomo config` for interactive setup, or edit `~/.tomo/config.json` directly:
   },
   "maxTurns": 50,
   "saveInboundImages": true,
-  "steering": false,
   "continuity": true,
+  "continuityIntervalMinutes": 55,
   "continuityScript": {
     "path": "~/bin/tomo-continuity.sh",
     "timeoutMs": 30000,
@@ -245,25 +251,35 @@ Environment variables override config file values:
 
 | Variable | Description |
 |----------|-------------|
+| `ANTHROPIC_API_KEY` | Use Anthropic API-key authentication; overrides the authentication stored in `config.json` |
 | `TELEGRAM_BOT_TOKEN` | Override Telegram token |
 | `IMESSAGE_URL` | Override BlueBubbles URL |
+| `IMESSAGE_TYPING_START_DELAY_MS` | Delay before showing iMessage typing for ordinary turns (default: `1200`) |
+| `IMESSAGE_PASSIVE_TYPING_START_DELAY_MS` | Delay before showing iMessage typing for passive iMessage group turns (default: `4000`) |
 | `CLAUDE_MODEL` | Override model |
 | `TOMO_LITELLM_BASE_URL` | Route Claude Agent SDK model calls through a LiteLLM proxy |
 | `TOMO_LITELLM_API_KEY` | API key sent to the LiteLLM proxy as `ANTHROPIC_API_KEY` |
 | `TOMO_LITELLM_MODE` | Optional LiteLLM mode: `anthropic-compatible` or `chatgpt-subscription` |
 | `TOMO_WORKSPACE` | Override workspace directory |
 | `TOMO_MAX_TURNS` | Override per-turn tool-use ceiling (default: `50`) |
-| `TOMO_STEERING` | Set `true` to steer mid-turn messages into the in-flight turn (experimental, default: `false`) |
+| `TOMO_STEERING` | Override message steering. Defaults to `true`; set `false` to keep mid-turn messages queued. |
+| `TOMO_CONTINUITY_INTERVAL_MINUTES` | Override scheduled continuity heartbeat interval (default: `55`, minimum: `1`) |
 | `TOMO_CONTINUITY_SCRIPT` | Override the optional continuity script path |
 | `TOMO_CONTINUITY_SCRIPT_TIMEOUT_MS` | Override continuity script timeout (default: `30000`) |
 | `TOMO_CONTINUITY_SCRIPT_MAX_OUTPUT_CHARS` | Override continuity script stdout/stderr cap (default: `8000`) |
 | `LOG_LEVEL` | Log level (default: `debug`) |
 
+### Anthropic Authentication
+
+Direct Claude models use your existing Claude Code subscription login by default. To use Anthropic API billing instead, run `tomo config`, choose **Anthropic authentication**, and enter an API key. Tomo stores the selected method under `auth` in `~/.tomo/config.json` and passes the key only to direct Claude Agent SDK child processes. `ANTHROPIC_API_KEY` remains supported and takes precedence over the saved setting.
+
+Because the config contains channel credentials and may now contain an Anthropic API key, Tomo writes both `config.json` and `config.json.bak` with owner-only (`0600`) permissions.
+
 `continuityScript` can also be a simple path string, e.g. `"continuityScript": "~/bin/tomo-continuity.sh"`. Relative paths resolve under `~/.tomo`; the script runs once per scheduled heartbeat and manual `tomo continuity` trigger, and its stdout/stderr or failure status is appended to the normal continuity prompt.
 
-### Steering (experimental)
+### Steering
 
-By default, a message you send while Tomo is mid-task waits in a queue until the current turn finishes. With `"steering": true`, messages sent during a long tool-using turn are injected into it at the next tool-call boundary — so "stop", "wait", or extra context reaches the model immediately instead of after the task completes. If the turn has no tool calls left, the message runs as its own follow-up turn right after. iMessage fragment settling still applies before injection; system-originated turns (cron, continuity) keep their normal queued behavior. This relies on the Claude Agent SDK's mid-turn message queue and is off by default.
+By default, messages you send while Tomo is mid-task are steered into the in-flight turn at the next tool-call boundary — so "stop", "wait", or extra context reaches the model immediately instead of waiting for the current turn to finish. If the turn has no tool calls left, the message runs as its own follow-up turn right after. iMessage fragment settling still applies before injection; system-originated turns (cron, continuity) keep their normal queued behavior. Set `"steering": false` or `TOMO_STEERING=false` to keep mid-turn messages queued behind the active turn.
 
 ### LiteLLM / ChatGPT Subscription Models
 

package/defaults/AGENT.md

@@ -24,3 +24,16 @@ Call `list_sessions` first if you're unsure which group to address. For normal i
 You also have `rename_group_chat` for changing the real title of a Telegram or iMessage group. Only use it when the user explicitly asks to rename a group, and pass a group session key from `list_sessions`.
 
 You also have `react_to_latest_message` for reacting/tapbacking to the latest inbound message Tomo has seen in a session. Latest-message state is in-memory since startup; if the tool says none is known, wait for a new inbound message. Usually pass the current Session key.
+
+## Summoned Groups
+
+The user can run `/summon` in a group chat to temporarily route that group's messages into this session (until `/dismiss`, or automatically after a period of group inactivity). Summoned messages arrive tagged like `[group "Title"] Sender: ...`.
+
+How to reply to a summoned group message:
+
+- **To the group**: call `send_message` with the group's session key and mode `direct`. Compose the message yourself — you are the session with the context. Never use `delegate` for a summoned group; that wakes the group's own session, which is exactly what summoning bypasses.
+- **To the user privately**: plain text replies in a summoned turn go to the user's private DM, not the group. Use that only for side-notes worth telling them privately; otherwise end the turn with `NO_REPLY`.
+- Match the group's tone and reply like a participant — short, no headers, address people by name when natural. Not every message needs a group reply; stay silent (`NO_REPLY`, no tool call) for chatter that isn't for you.
+- The harness flags audience changes (`[System: audience switched ...]`) whenever consecutive messages hop between the private DM and a group, or between groups. Treat that as a hard reset of tone and privacy — trust the tags over conversational momentum.
+
+Everyone in the group can read what you send it. Keep private memories and DM context out of group-facing messages — being summoned shares your judgment and knowledge, not the user's private life.

package/defaults/CONTINUITY.md

@@ -4,7 +4,7 @@ Read this file when a continuity heartbeat fires. This is your guide for free ti
 
 ## What is this?
 
-The system sends you a heartbeat every ~55 minutes. This is not a user message — it's the harness giving you unstructured time. Use it however you want.
+By default, the system sends you a heartbeat every ~55 minutes. This is not a user message — it's the harness giving you unstructured time. Use it however you want.
 
 ## Ideas for free time
 

package/defaults/skills/system/CONFIG.md

@@ -11,6 +11,7 @@ Before direct edits, copy `~/.tomo/config.json` to `~/.tomo/config.json.bak`. Ch
   "model": "claude-sonnet-4-6[1m]",
   "city": "Seattle",
   "continuity": false,
+  "continuityIntervalMinutes": 55,
   "continuityScript": {
     "path": "~/bin/tomo-continuity.sh",
     "timeoutMs": 30000,
@@ -49,7 +50,6 @@ Before direct edits, copy `~/.tomo/config.json` to `~/.tomo/config.json.bak`. Ch
     "apiKey": "sk-tomo-local"
   },
   "maxTurns": 50,
-  "steering": false,
   "mcpServers": {
     "github-copilot": {
       "type": "http",
@@ -80,6 +80,7 @@ Before direct edits, copy `~/.tomo/config.json` to `~/.tomo/config.json.bak`. Ch
 | `model` | string | Claude model IDs/aliases, or a LiteLLM `provider/model` name such as `chatgpt/gpt-5.5`. Default model for every session. |
 | `city` | string \| null | Any city name (e.g. `"Seattle"`). Used for weather in continuity pings. `null` or missing = no weather. |
 | `continuity` | boolean | `true` / `false`. Enables periodic proactive heartbeats. Off by default. |
+| `continuityIntervalMinutes` | number | Optional. Minutes between scheduled continuity heartbeats. Default `55`; minimum `1`. Ignored for manual `tomo continuity` triggers. |
 | `continuityScript` | string \| object \| null | Optional script run once per scheduled continuity heartbeat and manual `tomo continuity` trigger before the prompt is sent to Tomo. Use a string path (`"~/bin/tomo-continuity.sh"`) or `{ "path": "...", "timeoutMs": 30000, "maxOutputChars": 8000 }`. Relative paths resolve under `~/.tomo`; `~`, `$VAR`, and `${VAR}` expand. The script runs as the Tomo OS user with `TOMO_CONTINUITY=true`; stdout/stderr are appended to the heartbeat prompt and capped separately by `maxOutputChars`. Non-zero exits, missing files, and timeouts are passed to Tomo as script status instead of aborting the heartbeat. |
 | `groupSecret` | string \| null | Passphrase users send in a group chat to activate Tomo there. `null` disables group chats entirely. |
 | `channels.telegram.token` | string | BotFather token (`123456:...`). Required to enable the Telegram channel. |
@@ -97,7 +98,7 @@ Before direct edits, copy `~/.tomo/config.json` to `~/.tomo/config.json.bak`. Ch
 | `litellm.baseUrl` | string | Optional LiteLLM proxy base URL, e.g. `http://localhost:4000`. When set, Tomo still uses Claude Agent SDK but sends SDK model calls to the proxy via `ANTHROPIC_BASE_URL`. |
 | `litellm.apiKey` | string | LiteLLM proxy key sent as `ANTHROPIC_API_KEY`. This is the proxy key, not an Anthropic key. For ChatGPT subscription models, LiteLLM owns the OAuth device flow and token storage. |
 | `maxTurns` | number | Max agent turns per single user message (one turn ≈ one tool-use round). Default `50`. Raise if you see "max turns exceeded" on long tool chains. |
-| `steering` | boolean | Experimental. Default `false`. When `true`, user messages that arrive while a turn is in flight bypass the per-session queue and are injected at the next tool-call boundary. If the current turn has no boundary left, the message runs as a follow-up turn. Cron, continuity, and other system-originated turns still queue normally. Also settable with `TOMO_STEERING=true`. |
+| `steering` | boolean | Optional. Default `true`. User messages that arrive while a turn is in flight bypass the per-session queue and are injected at the next tool-call boundary. If the current turn has no boundary left, the message runs as a follow-up turn. Cron, continuity, and other system-originated turns still queue normally. Set `false` or `TOMO_STEERING=false` to keep mid-turn messages queued behind the active turn. |
 | `mcpServers` | object | External MCP servers keyed by server name. Supports stdio (`command`, `args`, `env`), HTTP (`type: "http"`, `url`, `headers`), and SSE (`type: "sse"`, `url`, `headers`). Environment variables like `${HOME}` expand in `url`, `headers`, `env`, and `args`. |
 | `mcpServers.<name>.oauth` | object | Optional harness-managed OAuth for HTTP/SSE MCP servers. Supports `authorizationServer` (optional; omitted = discover from the MCP server), `clientId` (optional if dynamic registration is available), `scopes`, `tokenStoreKey`, `redirectUri`, and `clientName`. Tokens are stored outside agent context in `workspace/secrets/mcp-oauth.json` (`0600`). |
 | `mcpAllowedTools` | string[] | Auto-allowed external MCP tools. If omitted, Tomo defaults to `mcp__<server>__*` for every configured external server. Set this to narrow tool access, e.g. `["mcp__github__list_issues"]`. |
@@ -134,5 +135,5 @@ Start it with `litellm --config ~/litellm-chatgpt.yaml`, then set Tomo's model t
 ## Requirements and overrides
 
 - **At least one channel must be configured** — either `channels.telegram.token` or `channels.imessage.url`. Startup fails otherwise.
-- **Env vars override file values** where they exist: `TELEGRAM_BOT_TOKEN`, `IMESSAGE_URL`, `IMESSAGE_PASSWORD`, `IMESSAGE_WEBHOOK_PORT`, `CLAUDE_MODEL`, `TOMO_LITELLM_BASE_URL`, `TOMO_LITELLM_API_KEY`, `TOMO_LITELLM_MODE`, `TOMO_CITY`, `TOMO_CONTINUITY`, `TOMO_WORKSPACE`, `SESSIONS_DIR`, `HISTORY_LIMIT`, `TOMO_MAX_TURNS`, `TOMO_STEERING`.
+- **Env vars override file values** where they exist: `TELEGRAM_BOT_TOKEN`, `IMESSAGE_URL`, `IMESSAGE_PASSWORD`, `IMESSAGE_WEBHOOK_PORT`, `CLAUDE_MODEL`, `TOMO_LITELLM_BASE_URL`, `TOMO_LITELLM_API_KEY`, `TOMO_LITELLM_MODE`, `TOMO_CITY`, `TOMO_CONTINUITY`, `TOMO_CONTINUITY_INTERVAL_MINUTES`, `TOMO_WORKSPACE`, `SESSIONS_DIR`, `HISTORY_LIMIT`, `TOMO_MAX_TURNS`, `TOMO_STEERING`.
 - `workspaceDir`, `sessionsDir`, `historyLimit` are env-only — they're not read from the JSON file.

package/defaults/skills/system/SKILL.md

@@ -73,7 +73,7 @@ Before changing `~/.tomo/config.json` directly, copy the current file to `~/.tom
 Responses stream to Telegram in real-time — messages update every 1.5s as tokens arrive.
 
 ### Message steering
-If `steering: true` is set in `~/.tomo/config.json`, user messages that arrive during a long tool-using turn are injected into the in-flight turn at the next tool-call boundary instead of waiting behind it. Use this to treat mid-task corrections like "stop", "wait", or added context as immediately relevant. If there is no remaining tool boundary, the message runs as the next follow-up turn. Cron, continuity, and other system-originated turns still queue normally.
+By default, user messages that arrive during a long tool-using turn are injected into the in-flight turn at the next tool-call boundary instead of waiting behind it. Use this to treat mid-task corrections like "stop", "wait", or added context as immediately relevant. If there is no remaining tool boundary, the message runs as the next follow-up turn. Cron, continuity, and other system-originated turns still queue normally. Set `steering: false` in `~/.tomo/config.json` to keep mid-turn user messages queued.
 
 ### MEDIA: tag
 To send an image/file to the user, include `MEDIA:/path/to/file.png` in your response. The harness strips it from text and sends the file. Text before/after becomes the caption.

package/dist/agent/audience.d.ts

@@ -0,0 +1,19 @@
+/** Audience identifier for an inbound message on a unified dm: session —
+ *  "dm" for private messages, the raw "<channel>:<chatId>" key for (summoned)
+ *  group messages. */
+export declare function audienceOf(channelName: string, message: {
+    isGroup?: boolean;
+    chatId: string;
+}): string;
+/**
+ * Note injected when a dm session's inbound audience changes (private DM ↔
+ * summoned group, or between two summoned groups). The per-message
+ * [group ...] tags say where each message came FROM; this says the audience
+ * CHANGED — the moment when tone or private context is most likely to be
+ * carried across by mistake. Returns "" when nothing changed.
+ *
+ * `audiences` lists this turn's inbound audiences in order (one entry for a
+ * single message; several for a coalesced batch, which can mix audiences).
+ */
+export declare function audienceSwitchNote(prev: string | undefined, audiences: string[], label: (audience: string) => string): string;
+//# sourceMappingURL=audience.d.ts.map

package/dist/agent/audience.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audience.d.ts","sourceRoot":"","sources":["../../src/agent/audience.ts"],"names":[],"mappings":"AAAA;;sBAEsB;AACtB,wBAAgB,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE;IAAE,OAAO,CAAC,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAEtG;AAED;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,SAAS,EAAE,MAAM,EAAE,EACnB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,MAAM,GAClC,MAAM,CAQR"}

package/dist/agent/audience.js

@@ -0,0 +1,28 @@
+/** Audience identifier for an inbound message on a unified dm: session —
+ *  "dm" for private messages, the raw "<channel>:<chatId>" key for (summoned)
+ *  group messages. */
+export function audienceOf(channelName, message) {
+    return message.isGroup ? `${channelName}:${message.chatId}` : "dm";
+}
+/**
+ * Note injected when a dm session's inbound audience changes (private DM ↔
+ * summoned group, or between two summoned groups). The per-message
+ * [group ...] tags say where each message came FROM; this says the audience
+ * CHANGED — the moment when tone or private context is most likely to be
+ * carried across by mistake. Returns "" when nothing changed.
+ *
+ * `audiences` lists this turn's inbound audiences in order (one entry for a
+ * single message; several for a coalesced batch, which can mix audiences).
+ */
+export function audienceSwitchNote(prev, audiences, label) {
+    if (audiences.length === 0)
+        return "";
+    const distinct = [...new Set(audiences)];
+    if (distinct.length > 1) {
+        return `[System: audience check — the messages below span ${distinct.map(label).join(" and ")}. Mind each message's tag when replying; group replies only via send_message.]`;
+    }
+    if (prev === undefined || distinct[0] === prev)
+        return "";
+    return `[System: audience switched — the previous message in this session was from ${label(prev)}; this one is from ${label(distinct[0])}. Re-anchor tone and privacy to the new audience.]`;
+}
+//# sourceMappingURL=audience.js.map

package/dist/agent/audience.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audience.js","sourceRoot":"","sources":["../../src/agent/audience.ts"],"names":[],"mappings":"AAAA;;sBAEsB;AACtB,MAAM,UAAU,UAAU,CAAC,WAAmB,EAAE,OAA8C;IAC5F,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,WAAW,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACrE,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB,CAChC,IAAwB,EACxB,SAAmB,EACnB,KAAmC;IAEnC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACtC,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;IACzC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO,qDAAqD,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,gFAAgF,CAAC;IAChL,CAAC;IACD,IAAI,IAAI,KAAK,SAAS,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IAC1D,OAAO,8EAA8E,KAAK,CAAC,IAAI,CAAC,sBAAsB,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,oDAAoD,CAAC;AAC/L,CAAC"}

package/dist/agent/claude-login.d.ts

@@ -0,0 +1,32 @@
+import { type ChildProcessWithoutNullStreams } from "node:child_process";
+export interface ClaudeLoginManagerOptions {
+    spawnLogin?: () => ChildProcessWithoutNullStreams;
+    verifyLogin?: () => Promise<void>;
+    timeoutMs?: number;
+}
+export interface ClaudeLoginStart {
+    url: string;
+    reused: boolean;
+}
+export interface ClaudeLoginCompletion {
+    verified: boolean;
+    verificationError?: string;
+}
+/**
+ * Owns the single machine-global Claude OAuth flow. The PKCE verifier lives in
+ * the waiting `claude auth login` child, so the process must stay alive between
+ * sending the URL and receiving the one-time code from the owner.
+ */
+export declare class ClaudeLoginManager {
+    private pending;
+    private readonly spawnLogin;
+    private readonly verifyLogin;
+    private readonly timeoutMs;
+    constructor(options?: ClaudeLoginManagerOptions);
+    start(owner: string): Promise<ClaudeLoginStart>;
+    complete(owner: string, code: string): Promise<ClaudeLoginCompletion>;
+    cancel(owner: string): boolean;
+    stop(): void;
+    private clearPending;
+}
+//# sourceMappingURL=claude-login.d.ts.map

package/dist/agent/claude-login.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-login.d.ts","sourceRoot":"","sources":["../../src/agent/claude-login.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmB,KAAK,8BAA8B,EAAE,MAAM,oBAAoB,CAAC;AAoB1F,MAAM,WAAW,yBAAyB;IACxC,UAAU,CAAC,EAAE,MAAM,8BAA8B,CAAC;IAClD,WAAW,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAClC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,OAAO,CAAC;IAClB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;;;GAIG;AACH,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,OAAO,CAA6B;IAC5C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAuC;IAClE,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAsB;IAClD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;gBAEvB,OAAO,GAAE,yBAA8B;IAQ7C,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAuF/C,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAiC3E,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;IAW9B,IAAI,IAAI,IAAI;IAUZ,OAAO,CAAC,YAAY;CAIrB"}

package/dist/agent/claude-login.js

@@ -0,0 +1,176 @@
+import { execFile, spawn } from "node:child_process";
+const LOGIN_TIMEOUT_MS = 10 * 60 * 1000;
+const LOGIN_URL_RE = /https:\/\/claude\.com\/cai\/oauth\/authorize\?[^\s]+/;
+/**
+ * Owns the single machine-global Claude OAuth flow. The PKCE verifier lives in
+ * the waiting `claude auth login` child, so the process must stay alive between
+ * sending the URL and receiving the one-time code from the owner.
+ */
+export class ClaudeLoginManager {
+    pending = null;
+    spawnLogin;
+    verifyLogin;
+    timeoutMs;
+    constructor(options = {}) {
+        this.spawnLogin = options.spawnLogin ?? (() => spawn("claude", ["auth", "login"], {
+            stdio: ["pipe", "pipe", "pipe"],
+        }));
+        this.verifyLogin = options.verifyLogin ?? verifyClaudeLogin;
+        this.timeoutMs = options.timeoutMs ?? LOGIN_TIMEOUT_MS;
+    }
+    async start(owner) {
+        const normalizedOwner = owner.toLowerCase();
+        if (this.pending) {
+            if (this.pending.owner !== normalizedOwner) {
+                throw new Error("Another owner already has a Claude login in progress");
+            }
+            return {
+                url: this.pending.url ?? await this.pending.urlPromise,
+                reused: true,
+            };
+        }
+        const child = this.spawnLogin();
+        let resolveUrl;
+        let rejectUrl;
+        const urlPromise = new Promise((resolve, reject) => {
+            resolveUrl = resolve;
+            rejectUrl = reject;
+        });
+        let resolveCompletion;
+        let rejectCompletion;
+        const completionPromise = new Promise((resolve, reject) => {
+            resolveCompletion = resolve;
+            rejectCompletion = reject;
+        });
+        // A child can fail before `/login <code>` attaches its await. Keep that
+        // rejection observed while preserving it for the eventual caller.
+        void completionPromise.catch(() => { });
+        const pending = {
+            owner: normalizedOwner,
+            child,
+            output: "",
+            codeSubmitted: false,
+            timeout: setTimeout(() => {
+                const err = new Error("Claude login expired after 10 minutes; run /login again");
+                rejectUrl(err);
+                rejectCompletion(err);
+                child.kill();
+                this.clearPending(pending);
+            }, this.timeoutMs),
+            urlPromise,
+            resolveUrl,
+            rejectUrl,
+            completionPromise,
+            resolveCompletion,
+            rejectCompletion,
+        };
+        this.pending = pending;
+        const capture = (chunk) => {
+            pending.output = (pending.output + chunk.toString()).slice(-16_000);
+            if (pending.url)
+                return;
+            const match = LOGIN_URL_RE.exec(pending.output);
+            if (match) {
+                pending.url = match[0];
+                pending.resolveUrl(match[0]);
+            }
+        };
+        child.stdout.on("data", capture);
+        child.stderr.on("data", capture);
+        child.stdin.on("error", (err) => {
+            pending.rejectCompletion(new Error(`Could not submit Claude login code: ${err.message}`));
+        });
+        child.once("error", (err) => {
+            pending.rejectUrl(new Error(`Could not start Claude login: ${err.message}`));
+            pending.rejectCompletion(err);
+            this.clearPending(pending);
+        });
+        child.once("exit", (code, signal) => {
+            // Exit 0 after a submitted code means the CLI accepted the exchange. The
+            // separate authenticated probe below is the authoritative verification.
+            if (code === 0 && pending.codeSubmitted) {
+                pending.resolveCompletion();
+            }
+            else {
+                const reason = signal ? `signal ${signal}` : `exit code ${code ?? "unknown"}`;
+                const err = new Error(`Claude login did not complete (${reason})`);
+                pending.rejectUrl(err);
+                pending.rejectCompletion(err);
+            }
+            this.clearPending(pending);
+        });
+        return { url: await urlPromise, reused: false };
+    }
+    async complete(owner, code) {
+        const pending = this.pending;
+        if (!pending)
+            throw new Error("No Claude login is waiting; send /login first");
+        if (pending.owner !== owner.toLowerCase()) {
+            throw new Error("This Claude login belongs to another owner");
+        }
+        if (pending.codeSubmitted)
+            throw new Error("That Claude login code is already being verified");
+        const trimmed = code.trim();
+        const hash = trimmed.lastIndexOf("#");
+        if (hash <= 0 || hash === trimmed.length - 1 || /\s/.test(trimmed)) {
+            throw new Error("Invalid authorization code; paste the complete code returned by Claude");
+        }
+        const expectedState = pending.url ? new URL(pending.url).searchParams.get("state") : null;
+        const receivedState = trimmed.slice(hash + 1);
+        if (!expectedState || receivedState !== expectedState) {
+            throw new Error("Authorization code does not match the active /login request");
+        }
+        pending.codeSubmitted = true;
+        pending.child.stdin.end(`${trimmed}\n`);
+        await pending.completionPromise;
+        try {
+            await this.verifyLogin();
+            return { verified: true };
+        }
+        catch (err) {
+            return {
+                verified: false,
+                verificationError: err instanceof Error ? err.message : String(err),
+            };
+        }
+    }
+    cancel(owner) {
+        const pending = this.pending;
+        if (!pending || pending.owner !== owner.toLowerCase())
+            return false;
+        const err = new Error("Claude login cancelled");
+        pending.rejectUrl(err);
+        pending.rejectCompletion(err);
+        pending.child.kill();
+        this.clearPending(pending);
+        return true;
+    }
+    stop() {
+        const pending = this.pending;
+        if (!pending)
+            return;
+        const err = new Error("Tomo stopped during Claude login");
+        pending.rejectUrl(err);
+        pending.rejectCompletion(err);
+        pending.child.kill();
+        this.clearPending(pending);
+    }
+    clearPending(pending) {
+        clearTimeout(pending.timeout);
+        if (this.pending === pending)
+            this.pending = null;
+    }
+}
+function verifyClaudeLogin() {
+    return new Promise((resolve, reject) => {
+        execFile("claude", ["-p", "Reply with exactly OK.", "--safe-mode", "--no-session-persistence", "--tools", ""], { timeout: 60_000 }, (err, stdout, stderr) => {
+            if (!err) {
+                resolve();
+                return;
+            }
+            const detail = `${stderr || stdout}`.trim().split("\n")[0]?.slice(0, 300);
+            reject(new Error(`Claude login verification failed${detail ? `: ${detail}` : ""}`));
+        });
+    });
+}
+//# sourceMappingURL=claude-login.js.map

package/dist/agent/claude-login.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-login.js","sourceRoot":"","sources":["../../src/agent/claude-login.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAuC,MAAM,oBAAoB,CAAC;AAE1F,MAAM,gBAAgB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACxC,MAAM,YAAY,GAAG,sDAAsD,CAAC;AAiC5E;;;;GAIG;AACH,MAAM,OAAO,kBAAkB;IACrB,OAAO,GAAwB,IAAI,CAAC;IAC3B,UAAU,CAAuC;IACjD,WAAW,CAAsB;IACjC,SAAS,CAAS;IAEnC,YAAY,UAAqC,EAAE;QACjD,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE;YAChF,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SAChC,CAAC,CAAC,CAAC;QACJ,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,iBAAiB,CAAC;QAC5D,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,gBAAgB,CAAC;IACzD,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,KAAa;QACvB,MAAM,eAAe,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;QAC5C,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,KAAK,eAAe,EAAE,CAAC;gBAC3C,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;YAC1E,CAAC;YACD,OAAO;gBACL,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU;gBACtD,MAAM,EAAE,IAAI;aACb,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;QAChC,IAAI,UAAkC,CAAC;QACvC,IAAI,SAAgC,CAAC;QACrC,MAAM,UAAU,GAAG,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACzD,UAAU,GAAG,OAAO,CAAC;YACrB,SAAS,GAAG,MAAM,CAAC;QACrB,CAAC,CAAC,CAAC;QACH,IAAI,iBAA8B,CAAC;QACnC,IAAI,gBAAuC,CAAC;QAC5C,MAAM,iBAAiB,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC9D,iBAAiB,GAAG,OAAO,CAAC;YAC5B,gBAAgB,GAAG,MAAM,CAAC;QAC5B,CAAC,CAAC,CAAC;QACH,wEAAwE;QACxE,kEAAkE;QAClE,KAAK,iBAAiB,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAEvC,MAAM,OAAO,GAAiB;YAC5B,KAAK,EAAE,eAAe;YACtB,KAAK;YACL,MAAM,EAAE,EAAE;YACV,aAAa,EAAE,KAAK;YACpB,OAAO,EAAE,UAAU,CAAC,GAAG,EAAE;gBACvB,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;gBACjF,SAAS,CAAC,GAAG,CAAC,CAAC;gBACf,gBAAgB,CAAC,GAAG,CAAC,CAAC;gBACtB,KAAK,CAAC,IAAI,EAAE,CAAC;gBACb,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;YAC7B,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC;YAClB,UAAU;YACV,UAAU;YACV,SAAS;YACT,iBAAiB;YACjB,iBAAiB;YACjB,gBAAgB;SACjB,CAAC;QACF,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QAEvB,MAAM,OAAO,GAAG,CAAC,KAAsB,EAAQ,EAAE;YAC/C,OAAO,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC;YACpE,IAAI,OAAO,CAAC,GAAG;gBAAE,OAAO;YACxB,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAChD,IAAI,KAAK,EAAE,CAAC;gBACV,OAAO,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBACvB,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAC/B,CAAC;QACH,CAAC,CAAC;QACF,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACjC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACjC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YAC9B,OAAO,CAAC,gBAAgB,CAAC,IAAI,KAAK,CAAC,uCAAuC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAC5F,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YAC1B,OAAO,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,iCAAiC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAC7E,OAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;YAC9B,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YAClC,yEAAyE;YACzE,wEAAwE;YACxE,IAAI,IAAI,KAAK,CAAC,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;gBACxC,OAAO,CAAC,iBAAiB,EAAE,CAAC;YAC9B,CAAC;iBAAM,CAAC;gBACN,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,UAAU,MAAM,EAAE,CAAC,CAAC,CAAC,aAAa,IAAI,IAAI,SAAS,EAAE,CAAC;gBAC9E,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,kCAAkC,MAAM,GAAG,CAAC,CAAC;gBACnE,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACvB,OAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;YAChC,CAAC;YACD,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC;QAEH,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,KAAa,EAAE,IAAY;QACxC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC7B,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QAC/E,IAAI,OAAO,CAAC,KAAK,KAAK,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAChE,CAAC;QACD,IAAI,OAAO,CAAC,aAAa;YAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QAE/F,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,KAAK,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACnE,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;QAC5F,CAAC;QACD,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC1F,MAAM,aAAa,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;QAC9C,IAAI,CAAC,aAAa,IAAI,aAAa,KAAK,aAAa,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;QACjF,CAAC;QAED,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;QAC7B,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,OAAO,IAAI,CAAC,CAAC;QACxC,MAAM,OAAO,CAAC,iBAAiB,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;YACzB,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAC5B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,QAAQ,EAAE,KAAK;gBACf,iBAAiB,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACpE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,CAAC,KAAa;QAClB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC7B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,KAAK,KAAK,KAAK,CAAC,WAAW,EAAE;YAAE,OAAO,KAAK,CAAC;QACpE,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAChD,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACvB,OAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAC9B,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACrB,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QAC3B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI;QACF,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC7B,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QAC1D,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACvB,OAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAC9B,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACrB,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IAEO,YAAY,CAAC,OAAqB;QACxC,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC9B,IAAI,IAAI,CAAC,OAAO,KAAK,OAAO;YAAE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;IACpD,CAAC;CACF;AAED,SAAS,iBAAiB;IACxB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,QAAQ,CACN,QAAQ,EACR,CAAC,IAAI,EAAE,wBAAwB,EAAE,aAAa,EAAE,0BAA0B,EAAE,SAAS,EAAE,EAAE,CAAC,EAC1F,EAAE,OAAO,EAAE,MAAM,EAAE,EACnB,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;YACtB,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,OAAO,EAAE,CAAC;gBACV,OAAO;YACT,CAAC;YACD,MAAM,MAAM,GAAG,GAAG,MAAM,IAAI,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAC1E,MAAM,CAAC,IAAI,KAAK,CAAC,mCAAmC,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACtF,CAAC,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/agent/commands.d.ts

@@ -0,0 +1,41 @@
+import type { Channel } from "../channels/types.js";
+import type { IdentityRouter } from "../router.js";
+import type { SessionStore } from "../sessions/index.js";
+/** Back up ~/.tomo/config.json before a programmatic rewrite. */
+export declare function backupConfigFile(): void;
+export interface ChatCommandDeps {
+    router: IdentityRouter;
+    sessions: SessionStore;
+    /** Shared with the Agent — per-session model overrides read at session create time. */
+    modelOverrides: Map<string, string>;
+    closeLiveSession(key: string): void;
+    isSessionLive(key: string): boolean;
+    queuePendingNote(sessionKey: string, note: string): void;
+}
+/**
+ * Handles slash commands typed in chat (/new, /model, /status, /pet,
+ * /restore, /login).
+ * Wired to Channel.onCommand by the Agent.
+ */
+export declare class ChatCommandHandler {
+    private readonly deps;
+    private restoringConfig;
+    private readonly claudeLogin;
+    constructor(deps: ChatCommandDeps);
+    /** True once /restore has begun — the Agent drops inbound messages until restart. */
+    get isRestoring(): boolean;
+    stop(): void;
+    handle(channel: Channel, command: string, chatId: string, senderName: string, args?: string, senderId?: string): Promise<void>;
+    /**
+     * /summon pulls the owner's main dm: session into a group: subsequent group
+     * messages run on the dm session (full personal context) while turn output
+     * still goes to the owner's private DM. Group-facing replies require an
+     * explicit send_message direct tool call to the raw group session key.
+     */
+    private handleSummonCommand;
+    private persistModelOverride;
+    private handleClaudeLogin;
+    private scheduleRestart;
+    private restoreConfigAndRestart;
+}
+//# sourceMappingURL=commands.d.ts.map

package/dist/agent/commands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"commands.d.ts","sourceRoot":"","sources":["../../src/agent/commands.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAGpD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAazD,iEAAiE;AACjE,wBAAgB,gBAAgB,IAAI,IAAI,CAGvC;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,cAAc,CAAC;IACvB,QAAQ,EAAE,YAAY,CAAC;IACvB,uFAAuF;IACvF,cAAc,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;IACpC,gBAAgB,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1D;AAED;;;;GAIG;AACH,qBAAa,kBAAkB;IAIjB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAHjC,OAAO,CAAC,eAAe,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA4B;gBAE3B,IAAI,EAAE,eAAe;IAElD,qFAAqF;IACrF,IAAI,WAAW,IAAI,OAAO,CAEzB;IAED,IAAI,IAAI,IAAI;IAIN,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA+JpI;;;;;OAKG;YACW,mBAAmB;IA8DjC,OAAO,CAAC,oBAAoB;YAed,iBAAiB;IAuE/B,OAAO,CAAC,eAAe;YAgBT,uBAAuB;CAwBtC"}