whale-code 6.5.10 → 6.6.0

package/dist/cli/services/cli-agent-loop.js

@@ -82,8 +82,9 @@ export class CLIAgentLoop extends AgentLoopBase {
     const {
       retryable
     } = categorizeError(err);
-    if (retryable && iteration < 2) {
-      await new Promise(r => setTimeout(r, 1000 * Math.pow(2, iteration)));
+    if (retryable && iteration < 3) {
+      const delay = 2000 * Math.pow(2, iteration);
+      await new Promise(r => setTimeout(r, Math.min(delay, 30000)));
       return true;
     }
     this.cliConfig.onError?.(`API error: ${err.message}`, this.messages);

package/dist/cli/services/cli-agent-loop.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli-agent-loop.js","names":["AgentLoopBase","estimateCostUsd","categorizeError","CLIAgentLoop","constructor","config","events","cliConfig","executeTurn","messages","_iteration","result","callAPI","systemPrompt","costUsd","usage","inputTokens","outputTokens","model","thinkingTokens","cacheReadTokens","cacheCreationTokens","onUsage","text","toolUseBlocks","thinkingBlocks","compactionContent","stopReason","cacheRead","cacheCreation","createToolExecutor","toolExecutor","checkAbort","abortSignal","aborted","onAborted","onError","onToolResultsReady","_toolBlocks","results","summarizeShellOutput","content","length","handleTurnError","err","iteration","retryable","Promise","r","setTimeout","Math","pow","message","run","onDone"],"sources":["../../../src/cli/services/cli-agent-loop.ts"],"sourcesContent":["/**\n * CLIAgentLoop — AgentLoopBase subclass for CLI interactive agent execution.\n *\n * Handles streaming via callServerProxy + parseSSEStream, routes tools through\n * interactive → local → server → MCP pipeline, and supports shell output summarization.\n *\n * Note: This is the v2 loop. The existing runAgentLoop() can delegate to this class\n * for the core iteration logic while preserving its existing configuration wiring.\n */\n\nimport type Anthropic from \"@anthropic-ai/sdk\";\nimport { AgentLoopBase, type AgentLoopConfig, type AgentLoopEvents, type TurnResult } from \"../../shared/agent-loop-base.js\";\nimport type { CompactableMessage } from \"../../shared/compaction.js\";\nimport { estimateCostUsd, categorizeError } from \"../../shared/agent-core.js\";\nimport type { ToolExecutor } from \"../../shared/tool-dispatch.js\";\nimport type { ToolUseBlock, ToolResultMessage, StreamResult } from \"../../shared/types.js\";\nimport { collectStreamResult } from \"../../shared/sse-parser.js\";\n\n// ============================================================================\n// TYPES\n// ============================================================================\n\nexport interface CLILoopConfig extends AgentLoopConfig {\n  /** Function that calls API and returns a stream result. Injected by runAgentLoop. */\n  callAPI: (messages: CompactableMessage[], systemPrompt: string) => Promise<StreamResult>;\n\n  /** Tool executor injected by runAgentLoop (routes interactive → local → server → MCP). */\n  toolExecutor: ToolExecutor;\n\n  /** Abort signal for cancellation (ESC). */\n  abortSignal?: AbortSignal;\n\n  /** Shell output summarization function (injected). */\n  summarizeShellOutput?: (output: string) => Promise<string>;\n\n  /** Callbacks. */\n  onDone?: (finalMessages: Anthropic.MessageParam[]) => void;\n  onError?: (error: string, partialMessages?: Anthropic.MessageParam[]) => void;\n  onUsage?: (inputTokens: number, outputTokens: number, thinkingTokens?: number, model?: string, costUsd?: number, cacheRead?: number, cacheCreation?: number) => void;\n  onAutoCompact?: (before: number, after: number, tokensSaved: number) => void;\n}\n\n// ============================================================================\n// CLI AGENT LOOP\n// ============================================================================\n\nexport class CLIAgentLoop extends AgentLoopBase {\n  private cliConfig: CLILoopConfig;\n\n  constructor(config: CLILoopConfig, events: AgentLoopEvents = {}) {\n    super(config, events);\n    this.cliConfig = config;\n  }\n\n  // ============================================================================\n  // ABSTRACT IMPLEMENTATIONS\n  // ============================================================================\n\n  protected async executeTurn(messages: CompactableMessage[], _iteration: number): Promise<TurnResult> {\n    const result = await this.cliConfig.callAPI(messages, this.config.systemPrompt);\n\n    // Emit usage callback\n    const costUsd = estimateCostUsd(\n      result.usage.inputTokens, result.usage.outputTokens, this.config.model,\n      result.thinkingTokens || 0, result.usage.cacheReadTokens || 0, result.usage.cacheCreationTokens || 0,\n    );\n    this.cliConfig.onUsage?.(\n      result.usage.inputTokens, result.usage.outputTokens,\n      result.thinkingTokens, this.config.model, costUsd,\n      result.usage.cacheReadTokens, result.usage.cacheCreationTokens,\n    );\n\n    return {\n      text: result.text || \"\",\n      toolUseBlocks: result.toolUseBlocks || [],\n      thinkingBlocks: result.thinkingBlocks || [],\n      compactionContent: result.compactionContent || null,\n      stopReason: result.stopReason || \"end_turn\",\n      usage: {\n        inputTokens: result.usage.inputTokens || 0,\n        outputTokens: result.usage.outputTokens || 0,\n        cacheRead: result.usage.cacheReadTokens || 0,\n        cacheCreation: result.usage.cacheCreationTokens || 0,\n        thinkingTokens: result.thinkingTokens || 0,\n      },\n    };\n  }\n\n  protected createToolExecutor(): ToolExecutor {\n    return this.cliConfig.toolExecutor;\n  }\n\n  // ============================================================================\n  // VIRTUAL OVERRIDES\n  // ============================================================================\n\n  protected checkAbort(): boolean {\n    return this.cliConfig.abortSignal?.aborted === true;\n  }\n\n  protected onAborted(): void {\n    this.cliConfig.onError?.(\"Cancelled\", this.messages as Anthropic.MessageParam[]);\n  }\n\n  protected async onToolResultsReady(_toolBlocks: ToolUseBlock[], results: ToolResultMessage[]): Promise<void> {\n    // Shell output summarization for large outputs\n    if (this.cliConfig.summarizeShellOutput) {\n      for (const result of results) {\n        if (typeof result.content === \"string\" && result.content.length > 200_000) {\n          try {\n            result.content = await this.cliConfig.summarizeShellOutput(result.content);\n          } catch {\n            // Summarization failure is non-critical\n          }\n        }\n      }\n    }\n  }\n\n  protected async handleTurnError(err: unknown, iteration: number): Promise<boolean> {\n    const { retryable } = categorizeError(err);\n    if (retryable && iteration < 2) {\n      await new Promise(r => setTimeout(r, 1000 * Math.pow(2, iteration)));\n      return true;\n    }\n    this.cliConfig.onError?.(\n      `API error: ${(err as Error).message}`,\n      this.messages as Anthropic.MessageParam[],\n    );\n    return false;\n  }\n\n  // ============================================================================\n  // RESULT\n  // ============================================================================\n\n  /** Override run to call onDone at the end */\n  async run() {\n    const result = await super.run();\n    this.cliConfig.onDone?.(this.messages as Anthropic.MessageParam[]);\n    return result;\n  }\n}\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAGA,SAASA,aAAa,QAAqE,iCAAiC;AAE5H,SAASC,eAAe,EAAEC,eAAe,QAAQ,4BAA4B;;AAK7E;AACA;AACA;;AAsBA;AACA;AACA;;AAEA,OAAO,MAAMC,YAAY,SAASH,aAAa,CAAC;EAG9CI,WAAWA,CAACC,MAAqB,EAAEC,MAAuB,GAAG,CAAC,CAAC,EAAE;IAC/D,KAAK,CAACD,MAAM,EAAEC,MAAM,CAAC;IACrB,IAAI,CAACC,SAAS,GAAGF,MAAM;EACzB;;EAEA;EACA;EACA;;EAEA,MAAgBG,WAAWA,CAACC,QAA8B,EAAEC,UAAkB,EAAuB;IACnG,MAAMC,MAAM,GAAG,MAAM,IAAI,CAACJ,SAAS,CAACK,OAAO,CAACH,QAAQ,EAAE,IAAI,CAACJ,MAAM,CAACQ,YAAY,CAAC;;IAE/E;IACA,MAAMC,OAAO,GAAGb,eAAe,CAC7BU,MAAM,CAACI,KAAK,CAACC,WAAW,EAAEL,MAAM,CAACI,KAAK,CAACE,YAAY,EAAE,IAAI,CAACZ,MAAM,CAACa,KAAK,EACtEP,MAAM,CAACQ,cAAc,IAAI,CAAC,EAAER,MAAM,CAACI,KAAK,CAACK,eAAe,IAAI,CAAC,EAAET,MAAM,CAACI,KAAK,CAACM,mBAAmB,IAAI,CACrG,CAAC;IACD,IAAI,CAACd,SAAS,CAACe,OAAO,GACpBX,MAAM,CAACI,KAAK,CAACC,WAAW,EAAEL,MAAM,CAACI,KAAK,CAACE,YAAY,EACnDN,MAAM,CAACQ,cAAc,EAAE,IAAI,CAACd,MAAM,CAACa,KAAK,EAAEJ,OAAO,EACjDH,MAAM,CAACI,KAAK,CAACK,eAAe,EAAET,MAAM,CAACI,KAAK,CAACM,mBAC7C,CAAC;IAED,OAAO;MACLE,IAAI,EAAEZ,MAAM,CAACY,IAAI,IAAI,EAAE;MACvBC,aAAa,EAAEb,MAAM,CAACa,aAAa,IAAI,EAAE;MACzCC,cAAc,EAAEd,MAAM,CAACc,cAAc,IAAI,EAAE;MAC3CC,iBAAiB,EAAEf,MAAM,CAACe,iBAAiB,IAAI,IAAI;MACnDC,UAAU,EAAEhB,MAAM,CAACgB,UAAU,IAAI,UAAU;MAC3CZ,KAAK,EAAE;QACLC,WAAW,EAAEL,MAAM,CAACI,KAAK,CAACC,WAAW,IAAI,CAAC;QAC1CC,YAAY,EAAEN,MAAM,CAACI,KAAK,CAACE,YAAY,IAAI,CAAC;QAC5CW,SAAS,EAAEjB,MAAM,CAACI,KAAK,CAACK,eAAe,IAAI,CAAC;QAC5CS,aAAa,EAAElB,MAAM,CAACI,KAAK,CAACM,mBAAmB,IAAI,CAAC;QACpDF,cAAc,EAAER,MAAM,CAACQ,cAAc,IAAI;MAC3C;IACF,CAAC;EACH;EAEUW,kBAAkBA,CAAA,EAAiB;IAC3C,OAAO,IAAI,CAACvB,SAAS,CAACwB,YAAY;EACpC;;EAEA;EACA;EACA;;EAEUC,UAAUA,CAAA,EAAY;IAC9B,OAAO,IAAI,CAACzB,SAAS,CAAC0B,WAAW,EAAEC,OAAO,KAAK,IAAI;EACrD;EAEUC,SAASA,CAAA,EAAS;IAC1B,IAAI,CAAC5B,SAAS,CAAC6B,OAAO,GAAG,WAAW,EAAE,IAAI,CAAC3B,QAAoC,CAAC;EAClF;EAEA,MAAgB4B,kBAAkBA,CAACC,WAA2B,EAAEC,OAA4B,EAAiB;IAC3G;IACA,IAAI,IAAI,CAAChC,SAAS,CAACiC,oBAAoB,EAAE;MACvC,KAAK,MAAM7B,MAAM,IAAI4B,OAAO,EAAE;QAC5B,IAAI,OAAO5B,MAAM,CAAC8B,OAAO,KAAK,QAAQ,IAAI9B,MAAM,CAAC8B,OAAO,CAACC,MAAM,GAAG,OAAO,EAAE;UACzE,IAAI;YACF/B,MAAM,CAAC8B,OAAO,GAAG,MAAM,IAAI,CAAClC,SAAS,CAACiC,oBAAoB,CAAC7B,MAAM,CAAC8B,OAAO,CAAC;UAC5E,CAAC,CAAC,MAAM;YACN;UAAA;QAEJ;MACF;IACF;EACF;EAEA,MAAgBE,eAAeA,CAACC,GAAY,EAAEC,SAAiB,EAAoB;IACjF,MAAM;MAAEC;IAAU,CAAC,GAAG5C,eAAe,CAAC0C,GAAG,CAAC;IAC1C,IAAIE,SAAS,IAAID,SAAS,GAAG,CAAC,EAAE;MAC9B,MAAM,IAAIE,OAAO,CAACC,CAAC,IAAIC,UAAU,CAACD,CAAC,EAAE,IAAI,GAAGE,IAAI,CAACC,GAAG,CAAC,CAAC,EAAEN,SAAS,CAAC,CAAC,CAAC;MACpE,OAAO,IAAI;IACb;IACA,IAAI,CAACtC,SAAS,CAAC6B,OAAO,GACpB,cAAeQ,GAAG,CAAWQ,OAAO,EAAE,EACtC,IAAI,CAAC3C,QACP,CAAC;IACD,OAAO,KAAK;EACd;;EAEA;EACA;EACA;;EAEA;EACA,MAAM4C,GAAGA,CAAA,EAAG;IACV,MAAM1C,MAAM,GAAG,MAAM,KAAK,CAAC0C,GAAG,CAAC,CAAC;IAChC,IAAI,CAAC9C,SAAS,CAAC+C,MAAM,GAAG,IAAI,CAAC7C,QAAoC,CAAC;IAClE,OAAOE,MAAM;EACf;AACF","ignoreList":[]}
+{"version":3,"file":"cli-agent-loop.js","names":["AgentLoopBase","estimateCostUsd","categorizeError","CLIAgentLoop","constructor","config","events","cliConfig","executeTurn","messages","_iteration","result","callAPI","systemPrompt","costUsd","usage","inputTokens","outputTokens","model","thinkingTokens","cacheReadTokens","cacheCreationTokens","onUsage","text","toolUseBlocks","thinkingBlocks","compactionContent","stopReason","cacheRead","cacheCreation","createToolExecutor","toolExecutor","checkAbort","abortSignal","aborted","onAborted","onError","onToolResultsReady","_toolBlocks","results","summarizeShellOutput","content","length","handleTurnError","err","iteration","retryable","delay","Math","pow","Promise","r","setTimeout","min","message","run","onDone"],"sources":["../../../src/cli/services/cli-agent-loop.ts"],"sourcesContent":["/**\n * CLIAgentLoop — AgentLoopBase subclass for CLI interactive agent execution.\n *\n * Handles streaming via callServerProxy + parseSSEStream, routes tools through\n * interactive → local → server → MCP pipeline, and supports shell output summarization.\n *\n * Note: This is the v2 loop. The existing runAgentLoop() can delegate to this class\n * for the core iteration logic while preserving its existing configuration wiring.\n */\n\nimport type Anthropic from \"@anthropic-ai/sdk\";\nimport { AgentLoopBase, type AgentLoopConfig, type AgentLoopEvents, type TurnResult } from \"../../shared/agent-loop-base.js\";\nimport type { CompactableMessage } from \"../../shared/compaction.js\";\nimport { estimateCostUsd, categorizeError } from \"../../shared/agent-core.js\";\nimport type { ToolExecutor } from \"../../shared/tool-dispatch.js\";\nimport type { ToolUseBlock, ToolResultMessage, StreamResult } from \"../../shared/types.js\";\nimport { collectStreamResult } from \"../../shared/sse-parser.js\";\n\n// ============================================================================\n// TYPES\n// ============================================================================\n\nexport interface CLILoopConfig extends AgentLoopConfig {\n  /** Function that calls API and returns a stream result. Injected by runAgentLoop. */\n  callAPI: (messages: CompactableMessage[], systemPrompt: string) => Promise<StreamResult>;\n\n  /** Tool executor injected by runAgentLoop (routes interactive → local → server → MCP). */\n  toolExecutor: ToolExecutor;\n\n  /** Abort signal for cancellation (ESC). */\n  abortSignal?: AbortSignal;\n\n  /** Shell output summarization function (injected). */\n  summarizeShellOutput?: (output: string) => Promise<string>;\n\n  /** Callbacks. */\n  onDone?: (finalMessages: Anthropic.MessageParam[]) => void;\n  onError?: (error: string, partialMessages?: Anthropic.MessageParam[]) => void;\n  onUsage?: (inputTokens: number, outputTokens: number, thinkingTokens?: number, model?: string, costUsd?: number, cacheRead?: number, cacheCreation?: number) => void;\n  onAutoCompact?: (before: number, after: number, tokensSaved: number) => void;\n}\n\n// ============================================================================\n// CLI AGENT LOOP\n// ============================================================================\n\nexport class CLIAgentLoop extends AgentLoopBase {\n  private cliConfig: CLILoopConfig;\n\n  constructor(config: CLILoopConfig, events: AgentLoopEvents = {}) {\n    super(config, events);\n    this.cliConfig = config;\n  }\n\n  // ============================================================================\n  // ABSTRACT IMPLEMENTATIONS\n  // ============================================================================\n\n  protected async executeTurn(messages: CompactableMessage[], _iteration: number): Promise<TurnResult> {\n    const result = await this.cliConfig.callAPI(messages, this.config.systemPrompt);\n\n    // Emit usage callback\n    const costUsd = estimateCostUsd(\n      result.usage.inputTokens, result.usage.outputTokens, this.config.model,\n      result.thinkingTokens || 0, result.usage.cacheReadTokens || 0, result.usage.cacheCreationTokens || 0,\n    );\n    this.cliConfig.onUsage?.(\n      result.usage.inputTokens, result.usage.outputTokens,\n      result.thinkingTokens, this.config.model, costUsd,\n      result.usage.cacheReadTokens, result.usage.cacheCreationTokens,\n    );\n\n    return {\n      text: result.text || \"\",\n      toolUseBlocks: result.toolUseBlocks || [],\n      thinkingBlocks: result.thinkingBlocks || [],\n      compactionContent: result.compactionContent || null,\n      stopReason: result.stopReason || \"end_turn\",\n      usage: {\n        inputTokens: result.usage.inputTokens || 0,\n        outputTokens: result.usage.outputTokens || 0,\n        cacheRead: result.usage.cacheReadTokens || 0,\n        cacheCreation: result.usage.cacheCreationTokens || 0,\n        thinkingTokens: result.thinkingTokens || 0,\n      },\n    };\n  }\n\n  protected createToolExecutor(): ToolExecutor {\n    return this.cliConfig.toolExecutor;\n  }\n\n  // ============================================================================\n  // VIRTUAL OVERRIDES\n  // ============================================================================\n\n  protected checkAbort(): boolean {\n    return this.cliConfig.abortSignal?.aborted === true;\n  }\n\n  protected onAborted(): void {\n    this.cliConfig.onError?.(\"Cancelled\", this.messages as Anthropic.MessageParam[]);\n  }\n\n  protected async onToolResultsReady(_toolBlocks: ToolUseBlock[], results: ToolResultMessage[]): Promise<void> {\n    // Shell output summarization for large outputs\n    if (this.cliConfig.summarizeShellOutput) {\n      for (const result of results) {\n        if (typeof result.content === \"string\" && result.content.length > 200_000) {\n          try {\n            result.content = await this.cliConfig.summarizeShellOutput(result.content);\n          } catch {\n            // Summarization failure is non-critical\n          }\n        }\n      }\n    }\n  }\n\n  protected async handleTurnError(err: unknown, iteration: number): Promise<boolean> {\n    const { retryable } = categorizeError(err);\n    if (retryable && iteration < 3) {\n      const delay = 2000 * Math.pow(2, iteration);\n      await new Promise(r => setTimeout(r, Math.min(delay, 30000)));\n      return true;\n    }\n    this.cliConfig.onError?.(\n      `API error: ${(err as Error).message}`,\n      this.messages as Anthropic.MessageParam[],\n    );\n    return false;\n  }\n\n  // ============================================================================\n  // RESULT\n  // ============================================================================\n\n  /** Override run to call onDone at the end */\n  async run() {\n    const result = await super.run();\n    this.cliConfig.onDone?.(this.messages as Anthropic.MessageParam[]);\n    return result;\n  }\n}\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAGA,SAASA,aAAa,QAAqE,iCAAiC;AAE5H,SAASC,eAAe,EAAEC,eAAe,QAAQ,4BAA4B;;AAK7E;AACA;AACA;;AAsBA;AACA;AACA;;AAEA,OAAO,MAAMC,YAAY,SAASH,aAAa,CAAC;EAG9CI,WAAWA,CAACC,MAAqB,EAAEC,MAAuB,GAAG,CAAC,CAAC,EAAE;IAC/D,KAAK,CAACD,MAAM,EAAEC,MAAM,CAAC;IACrB,IAAI,CAACC,SAAS,GAAGF,MAAM;EACzB;;EAEA;EACA;EACA;;EAEA,MAAgBG,WAAWA,CAACC,QAA8B,EAAEC,UAAkB,EAAuB;IACnG,MAAMC,MAAM,GAAG,MAAM,IAAI,CAACJ,SAAS,CAACK,OAAO,CAACH,QAAQ,EAAE,IAAI,CAACJ,MAAM,CAACQ,YAAY,CAAC;;IAE/E;IACA,MAAMC,OAAO,GAAGb,eAAe,CAC7BU,MAAM,CAACI,KAAK,CAACC,WAAW,EAAEL,MAAM,CAACI,KAAK,CAACE,YAAY,EAAE,IAAI,CAACZ,MAAM,CAACa,KAAK,EACtEP,MAAM,CAACQ,cAAc,IAAI,CAAC,EAAER,MAAM,CAACI,KAAK,CAACK,eAAe,IAAI,CAAC,EAAET,MAAM,CAACI,KAAK,CAACM,mBAAmB,IAAI,CACrG,CAAC;IACD,IAAI,CAACd,SAAS,CAACe,OAAO,GACpBX,MAAM,CAACI,KAAK,CAACC,WAAW,EAAEL,MAAM,CAACI,KAAK,CAACE,YAAY,EACnDN,MAAM,CAACQ,cAAc,EAAE,IAAI,CAACd,MAAM,CAACa,KAAK,EAAEJ,OAAO,EACjDH,MAAM,CAACI,KAAK,CAACK,eAAe,EAAET,MAAM,CAACI,KAAK,CAACM,mBAC7C,CAAC;IAED,OAAO;MACLE,IAAI,EAAEZ,MAAM,CAACY,IAAI,IAAI,EAAE;MACvBC,aAAa,EAAEb,MAAM,CAACa,aAAa,IAAI,EAAE;MACzCC,cAAc,EAAEd,MAAM,CAACc,cAAc,IAAI,EAAE;MAC3CC,iBAAiB,EAAEf,MAAM,CAACe,iBAAiB,IAAI,IAAI;MACnDC,UAAU,EAAEhB,MAAM,CAACgB,UAAU,IAAI,UAAU;MAC3CZ,KAAK,EAAE;QACLC,WAAW,EAAEL,MAAM,CAACI,KAAK,CAACC,WAAW,IAAI,CAAC;QAC1CC,YAAY,EAAEN,MAAM,CAACI,KAAK,CAACE,YAAY,IAAI,CAAC;QAC5CW,SAAS,EAAEjB,MAAM,CAACI,KAAK,CAACK,eAAe,IAAI,CAAC;QAC5CS,aAAa,EAAElB,MAAM,CAACI,KAAK,CAACM,mBAAmB,IAAI,CAAC;QACpDF,cAAc,EAAER,MAAM,CAACQ,cAAc,IAAI;MAC3C;IACF,CAAC;EACH;EAEUW,kBAAkBA,CAAA,EAAiB;IAC3C,OAAO,IAAI,CAACvB,SAAS,CAACwB,YAAY;EACpC;;EAEA;EACA;EACA;;EAEUC,UAAUA,CAAA,EAAY;IAC9B,OAAO,IAAI,CAACzB,SAAS,CAAC0B,WAAW,EAAEC,OAAO,KAAK,IAAI;EACrD;EAEUC,SAASA,CAAA,EAAS;IAC1B,IAAI,CAAC5B,SAAS,CAAC6B,OAAO,GAAG,WAAW,EAAE,IAAI,CAAC3B,QAAoC,CAAC;EAClF;EAEA,MAAgB4B,kBAAkBA,CAACC,WAA2B,EAAEC,OAA4B,EAAiB;IAC3G;IACA,IAAI,IAAI,CAAChC,SAAS,CAACiC,oBAAoB,EAAE;MACvC,KAAK,MAAM7B,MAAM,IAAI4B,OAAO,EAAE;QAC5B,IAAI,OAAO5B,MAAM,CAAC8B,OAAO,KAAK,QAAQ,IAAI9B,MAAM,CAAC8B,OAAO,CAACC,MAAM,GAAG,OAAO,EAAE;UACzE,IAAI;YACF/B,MAAM,CAAC8B,OAAO,GAAG,MAAM,IAAI,CAAClC,SAAS,CAACiC,oBAAoB,CAAC7B,MAAM,CAAC8B,OAAO,CAAC;UAC5E,CAAC,CAAC,MAAM;YACN;UAAA;QAEJ;MACF;IACF;EACF;EAEA,MAAgBE,eAAeA,CAACC,GAAY,EAAEC,SAAiB,EAAoB;IACjF,MAAM;MAAEC;IAAU,CAAC,GAAG5C,eAAe,CAAC0C,GAAG,CAAC;IAC1C,IAAIE,SAAS,IAAID,SAAS,GAAG,CAAC,EAAE;MAC9B,MAAME,KAAK,GAAG,IAAI,GAAGC,IAAI,CAACC,GAAG,CAAC,CAAC,EAAEJ,SAAS,CAAC;MAC3C,MAAM,IAAIK,OAAO,CAACC,CAAC,IAAIC,UAAU,CAACD,CAAC,EAAEH,IAAI,CAACK,GAAG,CAACN,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;MAC7D,OAAO,IAAI;IACb;IACA,IAAI,CAACxC,SAAS,CAAC6B,OAAO,GACpB,cAAeQ,GAAG,CAAWU,OAAO,EAAE,EACtC,IAAI,CAAC7C,QACP,CAAC;IACD,OAAO,KAAK;EACd;;EAEA;EACA;EACA;;EAEA;EACA,MAAM8C,GAAGA,CAAA,EAAG;IACV,MAAM5C,MAAM,GAAG,MAAM,KAAK,CAAC4C,GAAG,CAAC,CAAC;IAChC,IAAI,CAAChD,SAAS,CAACiD,MAAM,GAAG,IAAI,CAAC/C,QAAoC,CAAC;IAClE,OAAOE,MAAM;EACf;AACF","ignoreList":[]}

package/dist/cli/services/config-store.d.ts

@@ -4,17 +4,14 @@
  * Unified auth session at ~/.whaletools/session.json
  * User preferences at ~/.whaletools/preferences.json
  *
- * v2.0: Raw Supabase/Anthropic keys (for MCP server env vars)
- * v2.1: Auth tokens from login flow (for CLI chat/status)
- * v4.0: Shared auth with Swift apps via ~/.whaletools/session.json
+ * Platform credentials (Supabase URL, anon key) are built-in constants —
+ * users never need to provide API keys. Authentication is handled by
+ * `whale login` (browser OAuth → JWT stored in session.json).
  *
- * Environment variables always override file-based config for MCP server mode.
+ * Environment variables (SUPABASE_SERVICE_ROLE_KEY, etc.) are only for
+ * dev/self-hosted deployments and override the built-in defaults.
  */
 export interface WhaleConfig {
-    supabase_url?: string;
-    supabase_key?: string;
-    anthropic_api_key?: string;
-    default_agent_id?: string;
     access_token?: string;
     refresh_token?: string;
     user_id?: string;
@@ -22,10 +19,11 @@ export interface WhaleConfig {
     store_id?: string;
     store_name?: string;
     expires_at?: number;
+    default_agent_id?: string;
+    agent_api_key?: string;
     default_model?: string;
     thinking_enabled?: boolean;
     permission_mode?: string;
-    agent_api_key?: string;
     platform_url?: string;
     stores?: Array<{
         id: string;
@@ -49,9 +47,9 @@ export declare function loadPreferences(): WhalePreferences;
 export declare function savePreferences(prefs: WhalePreferences): void;
 export interface ResolvedConfig {
     supabaseUrl: string;
+    /** Service role key — only set via SUPABASE_SERVICE_ROLE_KEY env var (dev/self-hosted). Empty for normal users. */
     supabaseKey: string;
     storeId: string;
-    anthropicApiKey: string;
     defaultAgentId: string;
     serverUrl: string;
     platformUrl: string;

package/dist/cli/services/config-store.js

@@ -4,11 +4,12 @@
  * Unified auth session at ~/.whaletools/session.json
  * User preferences at ~/.whaletools/preferences.json
  *
- * v2.0: Raw Supabase/Anthropic keys (for MCP server env vars)
- * v2.1: Auth tokens from login flow (for CLI chat/status)
- * v4.0: Shared auth with Swift apps via ~/.whaletools/session.json
+ * Platform credentials (Supabase URL, anon key) are built-in constants —
+ * users never need to provide API keys. Authentication is handled by
+ * `whale login` (browser OAuth → JWT stored in session.json).
  *
- * Environment variables always override file-based config for MCP server mode.
+ * Environment variables (SUPABASE_SERVICE_ROLE_KEY, etc.) are only for
+ * dev/self-hosted deployments and override the built-in defaults.
  */
 
 import { existsSync, mkdirSync, readFileSync, writeFileSync, unlinkSync } from "fs";
@@ -244,16 +245,15 @@ export function savePreferences(prefs) {
 /** Default Fly.io agent server URL */
 export const WHALE_SERVER_URL = "https://whale-agent.fly.dev";
 
-/** Default Supabase URL — fallback when env var and config are both empty */
+/** Built-in platform Supabase URL */
 const DEFAULT_SUPABASE_URL = "https://uaednwpxursknmwdeejn.supabase.co";
 export function resolveConfig() {
   const file = loadConfig();
   return {
-    supabaseUrl: process.env.SUPABASE_URL || file.supabase_url || DEFAULT_SUPABASE_URL,
-    // Service role key only — user JWTs go through getValidToken() in auth-service
-    supabaseKey: process.env.SUPABASE_SERVICE_ROLE_KEY || file.supabase_key || "",
+    supabaseUrl: process.env.SUPABASE_URL || DEFAULT_SUPABASE_URL,
+    // Service role key — env var only, never from user config file
+    supabaseKey: process.env.SUPABASE_SERVICE_ROLE_KEY || "",
     storeId: process.env.STORE_ID || file.store_id || "",
-    anthropicApiKey: process.env.ANTHROPIC_API_KEY || file.anthropic_api_key || "",
     defaultAgentId: file.default_agent_id || "",
     serverUrl: process.env.WHALE_SERVER_URL || WHALE_SERVER_URL,
     platformUrl: process.env.WHALETOOLS_PLATFORM_URL || file.platform_url || "https://whaletools.dev"
@@ -285,7 +285,7 @@ export async function resolveDefaultAgentId(_serverUrl, storeId, getToken) {
     } = await import("@supabase/supabase-js");
     const token = await getToken();
     if (!token) return null;
-    const supabaseUrl = process.env.SUPABASE_URL || config.supabase_url || DEFAULT_SUPABASE_URL;
+    const supabaseUrl = process.env.SUPABASE_URL || DEFAULT_SUPABASE_URL;
     const anonKey = process.env.SUPABASE_ANON_KEY || DEFAULT_SUPABASE_ANON_KEY;
     const supabase = createClient(supabaseUrl, anonKey, {
       global: {
@@ -294,11 +294,12 @@ export async function resolveDefaultAgentId(_serverUrl, storeId, getToken) {
         }
       }
     });
+
+    // Whale Code is a platform agent (store_id IS NULL, agent_type = 'platform').
+    // Store-level agents are for webchat/channels — never used by the CLI.
     const {
       data
-    } = await supabase.from("ai_agent_config").select("id").eq("store_id", storeId).eq("is_active", true).order("created_at", {
-      ascending: true
-    }).limit(1).single();
+    } = await supabase.from("ai_agent_config").select("id").is("store_id", null).eq("is_platform_agent", true).eq("is_active", true).limit(1).single();
     if (!data?.id) return null;
 
     // Cache for next time

package/dist/cli/services/config-store.js.map

@@ -1 +1 @@
-{"version":3,"file":"config-store.js","names":["existsSync","mkdirSync","readFileSync","writeFileSync","unlinkSync","homedir","join","CONFIG_DIR","SESSION_PATH","PREFS_PATH","LEGACY_CONFIG_DIR","LEGACY_CONFIG_PATH","migrationChecked","ensureMigration","legacy","JSON","parse","recursive","mode","access_token","refresh_token","session","user_id","email","store_id","store_name","expires_at","stringify","encoding","prefs","default_model","thinking_enabled","undefined","permission_mode","platform_url","Object","keys","length","loadConfig","loadPreferences","err","console","error","Error","message","saveConfig","config","authFields","version","stores","updated_at","Math","floor","Date","now","newPrefs","savePreferences","updateConfig","partial","prefUpdates","existingSession","clearConfig","WHALE_SERVER_URL","DEFAULT_SUPABASE_URL","resolveConfig","file","supabaseUrl","process","env","SUPABASE_URL","supabase_url","supabaseKey","SUPABASE_SERVICE_ROLE_KEY","supabase_key","storeId","STORE_ID","anthropicApiKey","ANTHROPIC_API_KEY","anthropic_api_key","defaultAgentId","default_agent_id","serverUrl","platformUrl","WHALETOOLS_PLATFORM_URL","getConfigPath","getProxyUrl","DEFAULT_SUPABASE_ANON_KEY","resolveDefaultAgentId","_serverUrl","getToken","createClient","token","anonKey","SUPABASE_ANON_KEY","supabase","global","headers","Authorization","data","from","select","eq","order","ascending","limit","single","id"],"sources":["../../../src/cli/services/config-store.ts"],"sourcesContent":["/**\n * Config Store\n *\n * Unified auth session at ~/.whaletools/session.json\n * User preferences at ~/.whaletools/preferences.json\n *\n * v2.0: Raw Supabase/Anthropic keys (for MCP server env vars)\n * v2.1: Auth tokens from login flow (for CLI chat/status)\n * v4.0: Shared auth with Swift apps via ~/.whaletools/session.json\n *\n * Environment variables always override file-based config for MCP server mode.\n */\n\nimport { existsSync, mkdirSync, readFileSync, writeFileSync, unlinkSync } from \"fs\";\nimport { homedir } from \"os\";\nimport { join } from \"path\";\n\n// ============================================================================\n// TYPES\n// ============================================================================\n\nexport interface WhaleConfig {\n  // v2.0 — MCP server mode (env var override)\n  supabase_url?: string;\n  supabase_key?: string;       // service role key for MCP server\n  anthropic_api_key?: string;  // only used by MCP server setup\n  default_agent_id?: string;\n\n  // v2.1 — Auth mode (login flow)\n  access_token?: string;\n  refresh_token?: string;\n  user_id?: string;\n  email?: string;\n  store_id?: string;\n  store_name?: string;\n  expires_at?: number;         // unix epoch seconds\n\n  // v3.0 — User preferences (persisted across sessions)\n  default_model?: string;          // model alias e.g. \"opus\", \"gemini-3-pro\"\n  thinking_enabled?: boolean;      // extended thinking toggle\n  permission_mode?: string;        // \"default\" | \"plan\" | \"yolo\"\n\n  // v3.1 — Local agent (auto-spawned from MCP server)\n  agent_api_key?: string;          // store API key for local agent WebSocket auth\n\n  // v3.2 — Browser OAuth\n  platform_url?: string;           // whaletools.dev override (dev/staging)\n\n  // v4.0 — Multi-store support (from login flow)\n  stores?: Array<{ id: string; name: string; role?: string }>;\n}\n\n/** Preferences that survive sign-out (stored in preferences.json) */\nexport interface WhalePreferences {\n  default_model?: string;\n  thinking_enabled?: boolean;\n  permission_mode?: string;\n  platform_url?: string;\n  theme?: string;\n}\n\n// ============================================================================\n// PATHS\n// ============================================================================\n\nconst CONFIG_DIR = join(homedir(), \".whaletools\");\nconst SESSION_PATH = join(CONFIG_DIR, \"session.json\");\nconst PREFS_PATH = join(CONFIG_DIR, \"preferences.json\");\n\n// Legacy paths for migration\nconst LEGACY_CONFIG_DIR = join(homedir(), \".swagmanager\");\nconst LEGACY_CONFIG_PATH = join(LEGACY_CONFIG_DIR, \"config.json\");\n\n// ============================================================================\n// AUTO-MIGRATION from ~/.swagmanager to ~/.whaletools\n// ============================================================================\n\nlet migrationChecked = false;\n\nfunction ensureMigration(): void {\n  if (migrationChecked) return;\n  migrationChecked = true;\n\n  // Skip if new session already exists\n  if (existsSync(SESSION_PATH)) return;\n\n  // Check for legacy config\n  if (!existsSync(LEGACY_CONFIG_PATH)) return;\n\n  try {\n    const legacy: WhaleConfig = JSON.parse(readFileSync(LEGACY_CONFIG_PATH, \"utf-8\"));\n\n    if (!existsSync(CONFIG_DIR)) {\n      mkdirSync(CONFIG_DIR, { recursive: true, mode: 0o700 });\n    }\n\n    // Split auth fields into session.json\n    if (legacy.access_token && legacy.refresh_token) {\n      const session: Partial<WhaleConfig> = {\n        access_token: legacy.access_token,\n        refresh_token: legacy.refresh_token,\n        user_id: legacy.user_id,\n        email: legacy.email,\n        store_id: legacy.store_id,\n        store_name: legacy.store_name,\n        expires_at: legacy.expires_at,\n      };\n      writeFileSync(SESSION_PATH, JSON.stringify(session, null, 2) + \"\\n\", {\n        encoding: \"utf-8\",\n        mode: 0o600,\n      });\n    }\n\n    // Split preference fields into preferences.json\n    const prefs: WhalePreferences = {};\n    if (legacy.default_model) prefs.default_model = legacy.default_model;\n    if (legacy.thinking_enabled !== undefined) prefs.thinking_enabled = legacy.thinking_enabled;\n    if (legacy.permission_mode) prefs.permission_mode = legacy.permission_mode;\n    if (legacy.platform_url) prefs.platform_url = legacy.platform_url;\n\n    if (Object.keys(prefs).length > 0) {\n      writeFileSync(PREFS_PATH, JSON.stringify(prefs, null, 2) + \"\\n\", {\n        encoding: \"utf-8\",\n        mode: 0o600,\n      });\n    }\n  } catch {\n    // Migration failed — not fatal, user can re-login\n  }\n}\n\n// ============================================================================\n// READ / WRITE — session.json (auth tokens + store)\n// ============================================================================\n\nexport function loadConfig(): WhaleConfig {\n  ensureMigration();\n  try {\n    if (existsSync(SESSION_PATH)) {\n      const session = JSON.parse(readFileSync(SESSION_PATH, \"utf-8\"));\n      // Merge preferences so callers see a unified config\n      const prefs = loadPreferences();\n      return { ...prefs, ...session };\n    }\n  } catch (err) {\n    console.error(`[config] Warning: Failed to parse ${SESSION_PATH}: ${err instanceof Error ? err.message : err}`);\n    console.error(\"[config] Using empty config. You may need to re-login with: whale login\");\n  }\n  // Even if no session, return preferences\n  return { ...loadPreferences() };\n}\n\nexport function saveConfig(config: WhaleConfig): void {\n  if (!existsSync(CONFIG_DIR)) {\n    mkdirSync(CONFIG_DIR, { recursive: true, mode: 0o700 });\n  }\n\n  // Split: auth fields go to session.json, prefs go to preferences.json\n  const { default_model, thinking_enabled, permission_mode, platform_url, ...authFields } = config;\n  // Ensure fields required by Swift WhaleSession are present\n  const session = {\n    version: 2,\n    ...authFields,\n    stores: authFields.stores ?? [],\n    updated_at: Math.floor(Date.now() / 1000),\n  };\n  writeFileSync(SESSION_PATH, JSON.stringify(session, null, 2) + \"\\n\", {\n    encoding: \"utf-8\",\n    mode: 0o600,\n  });\n\n  // Update preferences if any pref fields are present\n  const newPrefs: WhalePreferences = {};\n  if (default_model !== undefined) newPrefs.default_model = default_model;\n  if (thinking_enabled !== undefined) newPrefs.thinking_enabled = thinking_enabled;\n  if (permission_mode !== undefined) newPrefs.permission_mode = permission_mode;\n  if (platform_url !== undefined) newPrefs.platform_url = platform_url;\n  if (Object.keys(newPrefs).length > 0) {\n    savePreferences({ ...loadPreferences(), ...newPrefs });\n  }\n}\n\nexport function updateConfig(partial: Partial<WhaleConfig>): void {\n  // Only write the fields that are actually being changed.\n  // Split into auth fields (session.json) and pref fields (preferences.json)\n  // to avoid stale in-memory values overwriting the file.\n  const { default_model, thinking_enabled, permission_mode, platform_url, ...authFields } = partial;\n\n  // Update preferences.json — merge only the provided pref fields\n  const prefUpdates: WhalePreferences = {};\n  if (default_model !== undefined) prefUpdates.default_model = default_model;\n  if (thinking_enabled !== undefined) prefUpdates.thinking_enabled = thinking_enabled;\n  if (permission_mode !== undefined) prefUpdates.permission_mode = permission_mode;\n  if (platform_url !== undefined) prefUpdates.platform_url = platform_url;\n  if (Object.keys(prefUpdates).length > 0) {\n    savePreferences({ ...loadPreferences(), ...prefUpdates });\n  }\n\n  // Update session.json — merge only the provided auth fields\n  if (Object.keys(authFields).length > 0) {\n    const existingSession = (() => {\n      try {\n        if (existsSync(SESSION_PATH)) return JSON.parse(readFileSync(SESSION_PATH, \"utf-8\"));\n      } catch { /* ignore */ }\n      return {};\n    })();\n    const session = { version: 2, ...existingSession, ...authFields, updated_at: Math.floor(Date.now() / 1000) };\n    if (!existsSync(CONFIG_DIR)) mkdirSync(CONFIG_DIR, { recursive: true, mode: 0o700 });\n    writeFileSync(SESSION_PATH, JSON.stringify(session, null, 2) + \"\\n\", { encoding: \"utf-8\", mode: 0o600 });\n  }\n}\n\nexport function clearConfig(): void {\n  try {\n    if (existsSync(SESSION_PATH)) unlinkSync(SESSION_PATH);\n  } catch { /* ignore */ }\n  // Preferences are preserved across sign-out\n}\n\n// ============================================================================\n// READ / WRITE — preferences.json (survives sign-out)\n// ============================================================================\n\nexport function loadPreferences(): WhalePreferences {\n  try {\n    if (existsSync(PREFS_PATH)) {\n      return JSON.parse(readFileSync(PREFS_PATH, \"utf-8\"));\n    }\n  } catch { /* ignore */ }\n  return {};\n}\n\nexport function savePreferences(prefs: WhalePreferences): void {\n  if (!existsSync(CONFIG_DIR)) {\n    mkdirSync(CONFIG_DIR, { recursive: true, mode: 0o700 });\n  }\n  writeFileSync(PREFS_PATH, JSON.stringify(prefs, null, 2) + \"\\n\", {\n    encoding: \"utf-8\",\n    mode: 0o600,\n  });\n}\n\n// ============================================================================\n// RESOLVED CONFIG (env vars override file — used by MCP server)\n// ============================================================================\n\nexport interface ResolvedConfig {\n  supabaseUrl: string;\n  supabaseKey: string;\n  storeId: string;\n  anthropicApiKey: string;\n  defaultAgentId: string;\n  serverUrl: string;\n  platformUrl: string;\n}\n\n/** Default Fly.io agent server URL */\nexport const WHALE_SERVER_URL = \"https://whale-agent.fly.dev\";\n\n/** Default Supabase URL — fallback when env var and config are both empty */\nconst DEFAULT_SUPABASE_URL = \"https://uaednwpxursknmwdeejn.supabase.co\";\n\nexport function resolveConfig(): ResolvedConfig {\n  const file = loadConfig();\n  return {\n    supabaseUrl: process.env.SUPABASE_URL || file.supabase_url || DEFAULT_SUPABASE_URL,\n    // Service role key only — user JWTs go through getValidToken() in auth-service\n    supabaseKey: process.env.SUPABASE_SERVICE_ROLE_KEY || file.supabase_key || \"\",\n    storeId: process.env.STORE_ID || file.store_id || \"\",\n    anthropicApiKey: process.env.ANTHROPIC_API_KEY || file.anthropic_api_key || \"\",\n    defaultAgentId: file.default_agent_id || \"\",\n    serverUrl: process.env.WHALE_SERVER_URL || WHALE_SERVER_URL,\n    platformUrl: process.env.WHALETOOLS_PLATFORM_URL || file.platform_url || \"https://whaletools.dev\",\n  };\n}\n\nexport function getConfigPath(): string {\n  return SESSION_PATH;\n}\n\n/** Lazy proxy URL — avoids reading config at import time */\nexport function getProxyUrl(): string {\n  return resolveConfig().serverUrl;\n}\n\n/** Default Supabase anon key — used for client-side queries */\nconst DEFAULT_SUPABASE_ANON_KEY = \"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InVhZWRud3B4dXJza25td2RlZWpuIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NjA5OTcyMzMsImV4cCI6MjA3NjU3MzIzM30.N8jPwlyCBB5KJB5I-XaK6m-mq88rSR445AWFJJmwRCg\";\n\n/**\n * Resolve default agent ID — queries ai_agent_config for the store's first\n * active agent if not already configured, then caches the result.\n */\nexport async function resolveDefaultAgentId(\n  _serverUrl: string,\n  storeId: string,\n  getToken: () => Promise<string | null>,\n): Promise<string | null> {\n  // Check cached value first\n  const config = loadConfig();\n  if (config.default_agent_id) return config.default_agent_id;\n\n  try {\n    const { createClient } = await import(\"@supabase/supabase-js\");\n    const token = await getToken();\n    if (!token) return null;\n\n    const supabaseUrl = process.env.SUPABASE_URL || config.supabase_url || DEFAULT_SUPABASE_URL;\n    const anonKey = process.env.SUPABASE_ANON_KEY || DEFAULT_SUPABASE_ANON_KEY;\n    const supabase = createClient(supabaseUrl, anonKey, {\n      global: { headers: { Authorization: `Bearer ${token}` } },\n    });\n\n    const { data } = await supabase\n      .from(\"ai_agent_config\")\n      .select(\"id\")\n      .eq(\"store_id\", storeId)\n      .eq(\"is_active\", true)\n      .order(\"created_at\", { ascending: true })\n      .limit(1)\n      .single();\n\n    if (!data?.id) return null;\n\n    // Cache for next time\n    updateConfig({ default_agent_id: data.id });\n    return data.id;\n  } catch {\n    return null;\n  }\n}\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,SAASA,UAAU,EAAEC,SAAS,EAAEC,YAAY,EAAEC,aAAa,EAAEC,UAAU,QAAQ,IAAI;AACnF,SAASC,OAAO,QAAQ,IAAI;AAC5B,SAASC,IAAI,QAAQ,MAAM;;AAE3B;AACA;AACA;;AAiCA;;AASA;AACA;AACA;;AAEA,MAAMC,UAAU,GAAGD,IAAI,CAACD,OAAO,CAAC,CAAC,EAAE,aAAa,CAAC;AACjD,MAAMG,YAAY,GAAGF,IAAI,CAACC,UAAU,EAAE,cAAc,CAAC;AACrD,MAAME,UAAU,GAAGH,IAAI,CAACC,UAAU,EAAE,kBAAkB,CAAC;;AAEvD;AACA,MAAMG,iBAAiB,GAAGJ,IAAI,CAACD,OAAO,CAAC,CAAC,EAAE,cAAc,CAAC;AACzD,MAAMM,kBAAkB,GAAGL,IAAI,CAACI,iBAAiB,EAAE,aAAa,CAAC;;AAEjE;AACA;AACA;;AAEA,IAAIE,gBAAgB,GAAG,KAAK;AAE5B,SAASC,eAAeA,CAAA,EAAS;EAC/B,IAAID,gBAAgB,EAAE;EACtBA,gBAAgB,GAAG,IAAI;;EAEvB;EACA,IAAIZ,UAAU,CAACQ,YAAY,CAAC,EAAE;;EAE9B;EACA,IAAI,CAACR,UAAU,CAACW,kBAAkB,CAAC,EAAE;EAErC,IAAI;IACF,MAAMG,MAAmB,GAAGC,IAAI,CAACC,KAAK,CAACd,YAAY,CAACS,kBAAkB,EAAE,OAAO,CAAC,CAAC;IAEjF,IAAI,CAACX,UAAU,CAACO,UAAU,CAAC,EAAE;MAC3BN,SAAS,CAACM,UAAU,EAAE;QAAEU,SAAS,EAAE,IAAI;QAAEC,IAAI,EAAE;MAAM,CAAC,CAAC;IACzD;;IAEA;IACA,IAAIJ,MAAM,CAACK,YAAY,IAAIL,MAAM,CAACM,aAAa,EAAE;MAC/C,MAAMC,OAA6B,GAAG;QACpCF,YAAY,EAAEL,MAAM,CAACK,YAAY;QACjCC,aAAa,EAAEN,MAAM,CAACM,aAAa;QACnCE,OAAO,EAAER,MAAM,CAACQ,OAAO;QACvBC,KAAK,EAAET,MAAM,CAACS,KAAK;QACnBC,QAAQ,EAAEV,MAAM,CAACU,QAAQ;QACzBC,UAAU,EAAEX,MAAM,CAACW,UAAU;QAC7BC,UAAU,EAAEZ,MAAM,CAACY;MACrB,CAAC;MACDvB,aAAa,CAACK,YAAY,EAAEO,IAAI,CAACY,SAAS,CAACN,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE;QACnEO,QAAQ,EAAE,OAAO;QACjBV,IAAI,EAAE;MACR,CAAC,CAAC;IACJ;;IAEA;IACA,MAAMW,KAAuB,GAAG,CAAC,CAAC;IAClC,IAAIf,MAAM,CAACgB,aAAa,EAAED,KAAK,CAACC,aAAa,GAAGhB,MAAM,CAACgB,aAAa;IACpE,IAAIhB,MAAM,CAACiB,gBAAgB,KAAKC,SAAS,EAAEH,KAAK,CAACE,gBAAgB,GAAGjB,MAAM,CAACiB,gBAAgB;IAC3F,IAAIjB,MAAM,CAACmB,eAAe,EAAEJ,KAAK,CAACI,eAAe,GAAGnB,MAAM,CAACmB,eAAe;IAC1E,IAAInB,MAAM,CAACoB,YAAY,EAAEL,KAAK,CAACK,YAAY,GAAGpB,MAAM,CAACoB,YAAY;IAEjE,IAAIC,MAAM,CAACC,IAAI,CAACP,KAAK,CAAC,CAACQ,MAAM,GAAG,CAAC,EAAE;MACjClC,aAAa,CAACM,UAAU,EAAEM,IAAI,CAACY,SAAS,CAACE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE;QAC/DD,QAAQ,EAAE,OAAO;QACjBV,IAAI,EAAE;MACR,CAAC,CAAC;IACJ;EACF,CAAC,CAAC,MAAM;IACN;EAAA;AAEJ;;AAEA;AACA;AACA;;AAEA,OAAO,SAASoB,UAAUA,CAAA,EAAgB;EACxCzB,eAAe,CAAC,CAAC;EACjB,IAAI;IACF,IAAIb,UAAU,CAACQ,YAAY,CAAC,EAAE;MAC5B,MAAMa,OAAO,GAAGN,IAAI,CAACC,KAAK,CAACd,YAAY,CAACM,YAAY,EAAE,OAAO,CAAC,CAAC;MAC/D;MACA,MAAMqB,KAAK,GAAGU,eAAe,CAAC,CAAC;MAC/B,OAAO;QAAE,GAAGV,KAAK;QAAE,GAAGR;MAAQ,CAAC;IACjC;EACF,CAAC,CAAC,OAAOmB,GAAG,EAAE;IACZC,OAAO,CAACC,KAAK,CAAC,qCAAqClC,YAAY,KAAKgC,GAAG,YAAYG,KAAK,GAAGH,GAAG,CAACI,OAAO,GAAGJ,GAAG,EAAE,CAAC;IAC/GC,OAAO,CAACC,KAAK,CAAC,yEAAyE,CAAC;EAC1F;EACA;EACA,OAAO;IAAE,GAAGH,eAAe,CAAC;EAAE,CAAC;AACjC;AAEA,OAAO,SAASM,UAAUA,CAACC,MAAmB,EAAQ;EACpD,IAAI,CAAC9C,UAAU,CAACO,UAAU,CAAC,EAAE;IAC3BN,SAAS,CAACM,UAAU,EAAE;MAAEU,SAAS,EAAE,IAAI;MAAEC,IAAI,EAAE;IAAM,CAAC,CAAC;EACzD;;EAEA;EACA,MAAM;IAAEY,aAAa;IAAEC,gBAAgB;IAAEE,eAAe;IAAEC,YAAY;IAAE,GAAGa;EAAW,CAAC,GAAGD,MAAM;EAChG;EACA,MAAMzB,OAAO,GAAG;IACd2B,OAAO,EAAE,CAAC;IACV,GAAGD,UAAU;IACbE,MAAM,EAAEF,UAAU,CAACE,MAAM,IAAI,EAAE;IAC/BC,UAAU,EAAEC,IAAI,CAACC,KAAK,CAACC,IAAI,CAACC,GAAG,CAAC,CAAC,GAAG,IAAI;EAC1C,CAAC;EACDnD,aAAa,CAACK,YAAY,EAAEO,IAAI,CAACY,SAAS,CAACN,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE;IACnEO,QAAQ,EAAE,OAAO;IACjBV,IAAI,EAAE;EACR,CAAC,CAAC;;EAEF;EACA,MAAMqC,QAA0B,GAAG,CAAC,CAAC;EACrC,IAAIzB,aAAa,KAAKE,SAAS,EAAEuB,QAAQ,CAACzB,aAAa,GAAGA,aAAa;EACvE,IAAIC,gBAAgB,KAAKC,SAAS,EAAEuB,QAAQ,CAACxB,gBAAgB,GAAGA,gBAAgB;EAChF,IAAIE,eAAe,KAAKD,SAAS,EAAEuB,QAAQ,CAACtB,eAAe,GAAGA,eAAe;EAC7E,IAAIC,YAAY,KAAKF,SAAS,EAAEuB,QAAQ,CAACrB,YAAY,GAAGA,YAAY;EACpE,IAAIC,MAAM,CAACC,IAAI,CAACmB,QAAQ,CAAC,CAAClB,MAAM,GAAG,CAAC,EAAE;IACpCmB,eAAe,CAAC;MAAE,GAAGjB,eAAe,CAAC,CAAC;MAAE,GAAGgB;IAAS,CAAC,CAAC;EACxD;AACF;AAEA,OAAO,SAASE,YAAYA,CAACC,OAA6B,EAAQ;EAChE;EACA;EACA;EACA,MAAM;IAAE5B,aAAa;IAAEC,gBAAgB;IAAEE,eAAe;IAAEC,YAAY;IAAE,GAAGa;EAAW,CAAC,GAAGW,OAAO;;EAEjG;EACA,MAAMC,WAA6B,GAAG,CAAC,CAAC;EACxC,IAAI7B,aAAa,KAAKE,SAAS,EAAE2B,WAAW,CAAC7B,aAAa,GAAGA,aAAa;EAC1E,IAAIC,gBAAgB,KAAKC,SAAS,EAAE2B,WAAW,CAAC5B,gBAAgB,GAAGA,gBAAgB;EACnF,IAAIE,eAAe,KAAKD,SAAS,EAAE2B,WAAW,CAAC1B,eAAe,GAAGA,eAAe;EAChF,IAAIC,YAAY,KAAKF,SAAS,EAAE2B,WAAW,CAACzB,YAAY,GAAGA,YAAY;EACvE,IAAIC,MAAM,CAACC,IAAI,CAACuB,WAAW,CAAC,CAACtB,MAAM,GAAG,CAAC,EAAE;IACvCmB,eAAe,CAAC;MAAE,GAAGjB,eAAe,CAAC,CAAC;MAAE,GAAGoB;IAAY,CAAC,CAAC;EAC3D;;EAEA;EACA,IAAIxB,MAAM,CAACC,IAAI,CAACW,UAAU,CAAC,CAACV,MAAM,GAAG,CAAC,EAAE;IACtC,MAAMuB,eAAe,GAAG,CAAC,MAAM;MAC7B,IAAI;QACF,IAAI5D,UAAU,CAACQ,YAAY,CAAC,EAAE,OAAOO,IAAI,CAACC,KAAK,CAACd,YAAY,CAACM,YAAY,EAAE,OAAO,CAAC,CAAC;MACtF,CAAC,CAAC,MAAM,CAAE;MACV,OAAO,CAAC,CAAC;IACX,CAAC,EAAE,CAAC;IACJ,MAAMa,OAAO,GAAG;MAAE2B,OAAO,EAAE,CAAC;MAAE,GAAGY,eAAe;MAAE,GAAGb,UAAU;MAAEG,UAAU,EAAEC,IAAI,CAACC,KAAK,CAACC,IAAI,CAACC,GAAG,CAAC,CAAC,GAAG,IAAI;IAAE,CAAC;IAC5G,IAAI,CAACtD,UAAU,CAACO,UAAU,CAAC,EAAEN,SAAS,CAACM,UAAU,EAAE;MAAEU,SAAS,EAAE,IAAI;MAAEC,IAAI,EAAE;IAAM,CAAC,CAAC;IACpFf,aAAa,CAACK,YAAY,EAAEO,IAAI,CAACY,SAAS,CAACN,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE;MAAEO,QAAQ,EAAE,OAAO;MAAEV,IAAI,EAAE;IAAM,CAAC,CAAC;EAC1G;AACF;AAEA,OAAO,SAAS2C,WAAWA,CAAA,EAAS;EAClC,IAAI;IACF,IAAI7D,UAAU,CAACQ,YAAY,CAAC,EAAEJ,UAAU,CAACI,YAAY,CAAC;EACxD,CAAC,CAAC,MAAM,CAAE;EACV;AACF;;AAEA;AACA;AACA;;AAEA,OAAO,SAAS+B,eAAeA,CAAA,EAAqB;EAClD,IAAI;IACF,IAAIvC,UAAU,CAACS,UAAU,CAAC,EAAE;MAC1B,OAAOM,IAAI,CAACC,KAAK,CAACd,YAAY,CAACO,UAAU,EAAE,OAAO,CAAC,CAAC;IACtD;EACF,CAAC,CAAC,MAAM,CAAE;EACV,OAAO,CAAC,CAAC;AACX;AAEA,OAAO,SAAS+C,eAAeA,CAAC3B,KAAuB,EAAQ;EAC7D,IAAI,CAAC7B,UAAU,CAACO,UAAU,CAAC,EAAE;IAC3BN,SAAS,CAACM,UAAU,EAAE;MAAEU,SAAS,EAAE,IAAI;MAAEC,IAAI,EAAE;IAAM,CAAC,CAAC;EACzD;EACAf,aAAa,CAACM,UAAU,EAAEM,IAAI,CAACY,SAAS,CAACE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE;IAC/DD,QAAQ,EAAE,OAAO;IACjBV,IAAI,EAAE;EACR,CAAC,CAAC;AACJ;;AAEA;AACA;AACA;;AAYA;AACA,OAAO,MAAM4C,gBAAgB,GAAG,6BAA6B;;AAE7D;AACA,MAAMC,oBAAoB,GAAG,0CAA0C;AAEvE,OAAO,SAASC,aAAaA,CAAA,EAAmB;EAC9C,MAAMC,IAAI,GAAG3B,UAAU,CAAC,CAAC;EACzB,OAAO;IACL4B,WAAW,EAAEC,OAAO,CAACC,GAAG,CAACC,YAAY,IAAIJ,IAAI,CAACK,YAAY,IAAIP,oBAAoB;IAClF;IACAQ,WAAW,EAAEJ,OAAO,CAACC,GAAG,CAACI,yBAAyB,IAAIP,IAAI,CAACQ,YAAY,IAAI,EAAE;IAC7EC,OAAO,EAAEP,OAAO,CAACC,GAAG,CAACO,QAAQ,IAAIV,IAAI,CAACzC,QAAQ,IAAI,EAAE;IACpDoD,eAAe,EAAET,OAAO,CAACC,GAAG,CAACS,iBAAiB,IAAIZ,IAAI,CAACa,iBAAiB,IAAI,EAAE;IAC9EC,cAAc,EAAEd,IAAI,CAACe,gBAAgB,IAAI,EAAE;IAC3CC,SAAS,EAAEd,OAAO,CAACC,GAAG,CAACN,gBAAgB,IAAIA,gBAAgB;IAC3DoB,WAAW,EAAEf,OAAO,CAACC,GAAG,CAACe,uBAAuB,IAAIlB,IAAI,CAAC/B,YAAY,IAAI;EAC3E,CAAC;AACH;AAEA,OAAO,SAASkD,aAAaA,CAAA,EAAW;EACtC,OAAO5E,YAAY;AACrB;;AAEA;AACA,OAAO,SAAS6E,WAAWA,CAAA,EAAW;EACpC,OAAOrB,aAAa,CAAC,CAAC,CAACiB,SAAS;AAClC;;AAEA;AACA,MAAMK,yBAAyB,GAAG,kNAAkN;;AAEpP;AACA;AACA;AACA;AACA,OAAO,eAAeC,qBAAqBA,CACzCC,UAAkB,EAClBd,OAAe,EACfe,QAAsC,EACd;EACxB;EACA,MAAM3C,MAAM,GAAGR,UAAU,CAAC,CAAC;EAC3B,IAAIQ,MAAM,CAACkC,gBAAgB,EAAE,OAAOlC,MAAM,CAACkC,gBAAgB;EAE3D,IAAI;IACF,MAAM;MAAEU;IAAa,CAAC,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC;IAC9D,MAAMC,KAAK,GAAG,MAAMF,QAAQ,CAAC,CAAC;IAC9B,IAAI,CAACE,KAAK,EAAE,OAAO,IAAI;IAEvB,MAAMzB,WAAW,GAAGC,OAAO,CAACC,GAAG,CAACC,YAAY,IAAIvB,MAAM,CAACwB,YAAY,IAAIP,oBAAoB;IAC3F,MAAM6B,OAAO,GAAGzB,OAAO,CAACC,GAAG,CAACyB,iBAAiB,IAAIP,yBAAyB;IAC1E,MAAMQ,QAAQ,GAAGJ,YAAY,CAACxB,WAAW,EAAE0B,OAAO,EAAE;MAClDG,MAAM,EAAE;QAAEC,OAAO,EAAE;UAAEC,aAAa,EAAE,UAAUN,KAAK;QAAG;MAAE;IAC1D,CAAC,CAAC;IAEF,MAAM;MAAEO;IAAK,CAAC,GAAG,MAAMJ,QAAQ,CAC5BK,IAAI,CAAC,iBAAiB,CAAC,CACvBC,MAAM,CAAC,IAAI,CAAC,CACZC,EAAE,CAAC,UAAU,EAAE3B,OAAO,CAAC,CACvB2B,EAAE,CAAC,WAAW,EAAE,IAAI,CAAC,CACrBC,KAAK,CAAC,YAAY,EAAE;MAAEC,SAAS,EAAE;IAAK,CAAC,CAAC,CACxCC,KAAK,CAAC,CAAC,CAAC,CACRC,MAAM,CAAC,CAAC;IAEX,IAAI,CAACP,IAAI,EAAEQ,EAAE,EAAE,OAAO,IAAI;;IAE1B;IACAjD,YAAY,CAAC;MAAEuB,gBAAgB,EAAEkB,IAAI,CAACQ;IAAG,CAAC,CAAC;IAC3C,OAAOR,IAAI,CAACQ,EAAE;EAChB,CAAC,CAAC,MAAM;IACN,OAAO,IAAI;EACb;AACF","ignoreList":[]}
+{"version":3,"file":"config-store.js","names":["existsSync","mkdirSync","readFileSync","writeFileSync","unlinkSync","homedir","join","CONFIG_DIR","SESSION_PATH","PREFS_PATH","LEGACY_CONFIG_DIR","LEGACY_CONFIG_PATH","migrationChecked","ensureMigration","legacy","JSON","parse","recursive","mode","access_token","refresh_token","session","user_id","email","store_id","store_name","expires_at","stringify","encoding","prefs","default_model","thinking_enabled","undefined","permission_mode","platform_url","Object","keys","length","loadConfig","loadPreferences","err","console","error","Error","message","saveConfig","config","authFields","version","stores","updated_at","Math","floor","Date","now","newPrefs","savePreferences","updateConfig","partial","prefUpdates","existingSession","clearConfig","WHALE_SERVER_URL","DEFAULT_SUPABASE_URL","resolveConfig","file","supabaseUrl","process","env","SUPABASE_URL","supabaseKey","SUPABASE_SERVICE_ROLE_KEY","storeId","STORE_ID","defaultAgentId","default_agent_id","serverUrl","platformUrl","WHALETOOLS_PLATFORM_URL","getConfigPath","getProxyUrl","DEFAULT_SUPABASE_ANON_KEY","resolveDefaultAgentId","_serverUrl","getToken","createClient","token","anonKey","SUPABASE_ANON_KEY","supabase","global","headers","Authorization","data","from","select","is","eq","limit","single","id"],"sources":["../../../src/cli/services/config-store.ts"],"sourcesContent":["/**\n * Config Store\n *\n * Unified auth session at ~/.whaletools/session.json\n * User preferences at ~/.whaletools/preferences.json\n *\n * Platform credentials (Supabase URL, anon key) are built-in constants —\n * users never need to provide API keys. Authentication is handled by\n * `whale login` (browser OAuth → JWT stored in session.json).\n *\n * Environment variables (SUPABASE_SERVICE_ROLE_KEY, etc.) are only for\n * dev/self-hosted deployments and override the built-in defaults.\n */\n\nimport { existsSync, mkdirSync, readFileSync, writeFileSync, unlinkSync } from \"fs\";\nimport { homedir } from \"os\";\nimport { join } from \"path\";\n\n// ============================================================================\n// TYPES\n// ============================================================================\n\nexport interface WhaleConfig {\n  // Auth tokens (from `whale login` browser OAuth flow)\n  access_token?: string;\n  refresh_token?: string;\n  user_id?: string;\n  email?: string;\n  store_id?: string;\n  store_name?: string;\n  expires_at?: number;         // unix epoch seconds\n\n  // Agent config\n  default_agent_id?: string;\n  agent_api_key?: string;          // store API key for local agent WebSocket auth\n\n  // User preferences (persisted across sessions)\n  default_model?: string;          // model alias e.g. \"opus\", \"gemini-3-pro\"\n  thinking_enabled?: boolean;      // extended thinking toggle\n  permission_mode?: string;        // \"default\" | \"plan\" | \"yolo\"\n\n  // Browser OAuth\n  platform_url?: string;           // whaletools.dev override (dev/staging)\n\n  // Multi-store support (from login flow)\n  stores?: Array<{ id: string; name: string; role?: string }>;\n}\n\n/** Preferences that survive sign-out (stored in preferences.json) */\nexport interface WhalePreferences {\n  default_model?: string;\n  thinking_enabled?: boolean;\n  permission_mode?: string;\n  platform_url?: string;\n  theme?: string;\n}\n\n// ============================================================================\n// PATHS\n// ============================================================================\n\nconst CONFIG_DIR = join(homedir(), \".whaletools\");\nconst SESSION_PATH = join(CONFIG_DIR, \"session.json\");\nconst PREFS_PATH = join(CONFIG_DIR, \"preferences.json\");\n\n// Legacy paths for migration\nconst LEGACY_CONFIG_DIR = join(homedir(), \".swagmanager\");\nconst LEGACY_CONFIG_PATH = join(LEGACY_CONFIG_DIR, \"config.json\");\n\n// ============================================================================\n// AUTO-MIGRATION from ~/.swagmanager to ~/.whaletools\n// ============================================================================\n\nlet migrationChecked = false;\n\nfunction ensureMigration(): void {\n  if (migrationChecked) return;\n  migrationChecked = true;\n\n  // Skip if new session already exists\n  if (existsSync(SESSION_PATH)) return;\n\n  // Check for legacy config\n  if (!existsSync(LEGACY_CONFIG_PATH)) return;\n\n  try {\n    const legacy: WhaleConfig = JSON.parse(readFileSync(LEGACY_CONFIG_PATH, \"utf-8\"));\n\n    if (!existsSync(CONFIG_DIR)) {\n      mkdirSync(CONFIG_DIR, { recursive: true, mode: 0o700 });\n    }\n\n    // Split auth fields into session.json\n    if (legacy.access_token && legacy.refresh_token) {\n      const session: Partial<WhaleConfig> = {\n        access_token: legacy.access_token,\n        refresh_token: legacy.refresh_token,\n        user_id: legacy.user_id,\n        email: legacy.email,\n        store_id: legacy.store_id,\n        store_name: legacy.store_name,\n        expires_at: legacy.expires_at,\n      };\n      writeFileSync(SESSION_PATH, JSON.stringify(session, null, 2) + \"\\n\", {\n        encoding: \"utf-8\",\n        mode: 0o600,\n      });\n    }\n\n    // Split preference fields into preferences.json\n    const prefs: WhalePreferences = {};\n    if (legacy.default_model) prefs.default_model = legacy.default_model;\n    if (legacy.thinking_enabled !== undefined) prefs.thinking_enabled = legacy.thinking_enabled;\n    if (legacy.permission_mode) prefs.permission_mode = legacy.permission_mode;\n    if (legacy.platform_url) prefs.platform_url = legacy.platform_url;\n\n    if (Object.keys(prefs).length > 0) {\n      writeFileSync(PREFS_PATH, JSON.stringify(prefs, null, 2) + \"\\n\", {\n        encoding: \"utf-8\",\n        mode: 0o600,\n      });\n    }\n  } catch {\n    // Migration failed — not fatal, user can re-login\n  }\n}\n\n// ============================================================================\n// READ / WRITE — session.json (auth tokens + store)\n// ============================================================================\n\nexport function loadConfig(): WhaleConfig {\n  ensureMigration();\n  try {\n    if (existsSync(SESSION_PATH)) {\n      const session = JSON.parse(readFileSync(SESSION_PATH, \"utf-8\"));\n      // Merge preferences so callers see a unified config\n      const prefs = loadPreferences();\n      return { ...prefs, ...session };\n    }\n  } catch (err) {\n    console.error(`[config] Warning: Failed to parse ${SESSION_PATH}: ${err instanceof Error ? err.message : err}`);\n    console.error(\"[config] Using empty config. You may need to re-login with: whale login\");\n  }\n  // Even if no session, return preferences\n  return { ...loadPreferences() };\n}\n\nexport function saveConfig(config: WhaleConfig): void {\n  if (!existsSync(CONFIG_DIR)) {\n    mkdirSync(CONFIG_DIR, { recursive: true, mode: 0o700 });\n  }\n\n  // Split: auth fields go to session.json, prefs go to preferences.json\n  const { default_model, thinking_enabled, permission_mode, platform_url, ...authFields } = config;\n  // Ensure fields required by Swift WhaleSession are present\n  const session = {\n    version: 2,\n    ...authFields,\n    stores: authFields.stores ?? [],\n    updated_at: Math.floor(Date.now() / 1000),\n  };\n  writeFileSync(SESSION_PATH, JSON.stringify(session, null, 2) + \"\\n\", {\n    encoding: \"utf-8\",\n    mode: 0o600,\n  });\n\n  // Update preferences if any pref fields are present\n  const newPrefs: WhalePreferences = {};\n  if (default_model !== undefined) newPrefs.default_model = default_model;\n  if (thinking_enabled !== undefined) newPrefs.thinking_enabled = thinking_enabled;\n  if (permission_mode !== undefined) newPrefs.permission_mode = permission_mode;\n  if (platform_url !== undefined) newPrefs.platform_url = platform_url;\n  if (Object.keys(newPrefs).length > 0) {\n    savePreferences({ ...loadPreferences(), ...newPrefs });\n  }\n}\n\nexport function updateConfig(partial: Partial<WhaleConfig>): void {\n  // Only write the fields that are actually being changed.\n  // Split into auth fields (session.json) and pref fields (preferences.json)\n  // to avoid stale in-memory values overwriting the file.\n  const { default_model, thinking_enabled, permission_mode, platform_url, ...authFields } = partial;\n\n  // Update preferences.json — merge only the provided pref fields\n  const prefUpdates: WhalePreferences = {};\n  if (default_model !== undefined) prefUpdates.default_model = default_model;\n  if (thinking_enabled !== undefined) prefUpdates.thinking_enabled = thinking_enabled;\n  if (permission_mode !== undefined) prefUpdates.permission_mode = permission_mode;\n  if (platform_url !== undefined) prefUpdates.platform_url = platform_url;\n  if (Object.keys(prefUpdates).length > 0) {\n    savePreferences({ ...loadPreferences(), ...prefUpdates });\n  }\n\n  // Update session.json — merge only the provided auth fields\n  if (Object.keys(authFields).length > 0) {\n    const existingSession = (() => {\n      try {\n        if (existsSync(SESSION_PATH)) return JSON.parse(readFileSync(SESSION_PATH, \"utf-8\"));\n      } catch { /* ignore */ }\n      return {};\n    })();\n    const session = { version: 2, ...existingSession, ...authFields, updated_at: Math.floor(Date.now() / 1000) };\n    if (!existsSync(CONFIG_DIR)) mkdirSync(CONFIG_DIR, { recursive: true, mode: 0o700 });\n    writeFileSync(SESSION_PATH, JSON.stringify(session, null, 2) + \"\\n\", { encoding: \"utf-8\", mode: 0o600 });\n  }\n}\n\nexport function clearConfig(): void {\n  try {\n    if (existsSync(SESSION_PATH)) unlinkSync(SESSION_PATH);\n  } catch { /* ignore */ }\n  // Preferences are preserved across sign-out\n}\n\n// ============================================================================\n// READ / WRITE — preferences.json (survives sign-out)\n// ============================================================================\n\nexport function loadPreferences(): WhalePreferences {\n  try {\n    if (existsSync(PREFS_PATH)) {\n      return JSON.parse(readFileSync(PREFS_PATH, \"utf-8\"));\n    }\n  } catch { /* ignore */ }\n  return {};\n}\n\nexport function savePreferences(prefs: WhalePreferences): void {\n  if (!existsSync(CONFIG_DIR)) {\n    mkdirSync(CONFIG_DIR, { recursive: true, mode: 0o700 });\n  }\n  writeFileSync(PREFS_PATH, JSON.stringify(prefs, null, 2) + \"\\n\", {\n    encoding: \"utf-8\",\n    mode: 0o600,\n  });\n}\n\n// ============================================================================\n// RESOLVED CONFIG (env vars override file — used by MCP server)\n// ============================================================================\n\nexport interface ResolvedConfig {\n  supabaseUrl: string;\n  /** Service role key — only set via SUPABASE_SERVICE_ROLE_KEY env var (dev/self-hosted). Empty for normal users. */\n  supabaseKey: string;\n  storeId: string;\n  defaultAgentId: string;\n  serverUrl: string;\n  platformUrl: string;\n}\n\n/** Default Fly.io agent server URL */\nexport const WHALE_SERVER_URL = \"https://whale-agent.fly.dev\";\n\n/** Built-in platform Supabase URL */\nconst DEFAULT_SUPABASE_URL = \"https://uaednwpxursknmwdeejn.supabase.co\";\n\nexport function resolveConfig(): ResolvedConfig {\n  const file = loadConfig();\n  return {\n    supabaseUrl: process.env.SUPABASE_URL || DEFAULT_SUPABASE_URL,\n    // Service role key — env var only, never from user config file\n    supabaseKey: process.env.SUPABASE_SERVICE_ROLE_KEY || \"\",\n    storeId: process.env.STORE_ID || file.store_id || \"\",\n    defaultAgentId: file.default_agent_id || \"\",\n    serverUrl: process.env.WHALE_SERVER_URL || WHALE_SERVER_URL,\n    platformUrl: process.env.WHALETOOLS_PLATFORM_URL || file.platform_url || \"https://whaletools.dev\",\n  };\n}\n\nexport function getConfigPath(): string {\n  return SESSION_PATH;\n}\n\n/** Lazy proxy URL — avoids reading config at import time */\nexport function getProxyUrl(): string {\n  return resolveConfig().serverUrl;\n}\n\n/** Default Supabase anon key — used for client-side queries */\nconst DEFAULT_SUPABASE_ANON_KEY = \"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InVhZWRud3B4dXJza25td2RlZWpuIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NjA5OTcyMzMsImV4cCI6MjA3NjU3MzIzM30.N8jPwlyCBB5KJB5I-XaK6m-mq88rSR445AWFJJmwRCg\";\n\n/**\n * Resolve default agent ID — queries ai_agent_config for the store's first\n * active agent if not already configured, then caches the result.\n */\nexport async function resolveDefaultAgentId(\n  _serverUrl: string,\n  storeId: string,\n  getToken: () => Promise<string | null>,\n): Promise<string | null> {\n  // Check cached value first\n  const config = loadConfig();\n  if (config.default_agent_id) return config.default_agent_id;\n\n  try {\n    const { createClient } = await import(\"@supabase/supabase-js\");\n    const token = await getToken();\n    if (!token) return null;\n\n    const supabaseUrl = process.env.SUPABASE_URL || DEFAULT_SUPABASE_URL;\n    const anonKey = process.env.SUPABASE_ANON_KEY || DEFAULT_SUPABASE_ANON_KEY;\n    const supabase = createClient(supabaseUrl, anonKey, {\n      global: { headers: { Authorization: `Bearer ${token}` } },\n    });\n\n    // Whale Code is a platform agent (store_id IS NULL, agent_type = 'platform').\n    // Store-level agents are for webchat/channels — never used by the CLI.\n    const { data } = await supabase\n      .from(\"ai_agent_config\")\n      .select(\"id\")\n      .is(\"store_id\", null)\n      .eq(\"is_platform_agent\", true)\n      .eq(\"is_active\", true)\n      .limit(1)\n      .single();\n\n    if (!data?.id) return null;\n\n    // Cache for next time\n    updateConfig({ default_agent_id: data.id });\n    return data.id;\n  } catch {\n    return null;\n  }\n}\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,SAASA,UAAU,EAAEC,SAAS,EAAEC,YAAY,EAAEC,aAAa,EAAEC,UAAU,QAAQ,IAAI;AACnF,SAASC,OAAO,QAAQ,IAAI;AAC5B,SAASC,IAAI,QAAQ,MAAM;;AAE3B;AACA;AACA;;AA4BA;;AASA;AACA;AACA;;AAEA,MAAMC,UAAU,GAAGD,IAAI,CAACD,OAAO,CAAC,CAAC,EAAE,aAAa,CAAC;AACjD,MAAMG,YAAY,GAAGF,IAAI,CAACC,UAAU,EAAE,cAAc,CAAC;AACrD,MAAME,UAAU,GAAGH,IAAI,CAACC,UAAU,EAAE,kBAAkB,CAAC;;AAEvD;AACA,MAAMG,iBAAiB,GAAGJ,IAAI,CAACD,OAAO,CAAC,CAAC,EAAE,cAAc,CAAC;AACzD,MAAMM,kBAAkB,GAAGL,IAAI,CAACI,iBAAiB,EAAE,aAAa,CAAC;;AAEjE;AACA;AACA;;AAEA,IAAIE,gBAAgB,GAAG,KAAK;AAE5B,SAASC,eAAeA,CAAA,EAAS;EAC/B,IAAID,gBAAgB,EAAE;EACtBA,gBAAgB,GAAG,IAAI;;EAEvB;EACA,IAAIZ,UAAU,CAACQ,YAAY,CAAC,EAAE;;EAE9B;EACA,IAAI,CAACR,UAAU,CAACW,kBAAkB,CAAC,EAAE;EAErC,IAAI;IACF,MAAMG,MAAmB,GAAGC,IAAI,CAACC,KAAK,CAACd,YAAY,CAACS,kBAAkB,EAAE,OAAO,CAAC,CAAC;IAEjF,IAAI,CAACX,UAAU,CAACO,UAAU,CAAC,EAAE;MAC3BN,SAAS,CAACM,UAAU,EAAE;QAAEU,SAAS,EAAE,IAAI;QAAEC,IAAI,EAAE;MAAM,CAAC,CAAC;IACzD;;IAEA;IACA,IAAIJ,MAAM,CAACK,YAAY,IAAIL,MAAM,CAACM,aAAa,EAAE;MAC/C,MAAMC,OAA6B,GAAG;QACpCF,YAAY,EAAEL,MAAM,CAACK,YAAY;QACjCC,aAAa,EAAEN,MAAM,CAACM,aAAa;QACnCE,OAAO,EAAER,MAAM,CAACQ,OAAO;QACvBC,KAAK,EAAET,MAAM,CAACS,KAAK;QACnBC,QAAQ,EAAEV,MAAM,CAACU,QAAQ;QACzBC,UAAU,EAAEX,MAAM,CAACW,UAAU;QAC7BC,UAAU,EAAEZ,MAAM,CAACY;MACrB,CAAC;MACDvB,aAAa,CAACK,YAAY,EAAEO,IAAI,CAACY,SAAS,CAACN,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE;QACnEO,QAAQ,EAAE,OAAO;QACjBV,IAAI,EAAE;MACR,CAAC,CAAC;IACJ;;IAEA;IACA,MAAMW,KAAuB,GAAG,CAAC,CAAC;IAClC,IAAIf,MAAM,CAACgB,aAAa,EAAED,KAAK,CAACC,aAAa,GAAGhB,MAAM,CAACgB,aAAa;IACpE,IAAIhB,MAAM,CAACiB,gBAAgB,KAAKC,SAAS,EAAEH,KAAK,CAACE,gBAAgB,GAAGjB,MAAM,CAACiB,gBAAgB;IAC3F,IAAIjB,MAAM,CAACmB,eAAe,EAAEJ,KAAK,CAACI,eAAe,GAAGnB,MAAM,CAACmB,eAAe;IAC1E,IAAInB,MAAM,CAACoB,YAAY,EAAEL,KAAK,CAACK,YAAY,GAAGpB,MAAM,CAACoB,YAAY;IAEjE,IAAIC,MAAM,CAACC,IAAI,CAACP,KAAK,CAAC,CAACQ,MAAM,GAAG,CAAC,EAAE;MACjClC,aAAa,CAACM,UAAU,EAAEM,IAAI,CAACY,SAAS,CAACE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE;QAC/DD,QAAQ,EAAE,OAAO;QACjBV,IAAI,EAAE;MACR,CAAC,CAAC;IACJ;EACF,CAAC,CAAC,MAAM;IACN;EAAA;AAEJ;;AAEA;AACA;AACA;;AAEA,OAAO,SAASoB,UAAUA,CAAA,EAAgB;EACxCzB,eAAe,CAAC,CAAC;EACjB,IAAI;IACF,IAAIb,UAAU,CAACQ,YAAY,CAAC,EAAE;MAC5B,MAAMa,OAAO,GAAGN,IAAI,CAACC,KAAK,CAACd,YAAY,CAACM,YAAY,EAAE,OAAO,CAAC,CAAC;MAC/D;MACA,MAAMqB,KAAK,GAAGU,eAAe,CAAC,CAAC;MAC/B,OAAO;QAAE,GAAGV,KAAK;QAAE,GAAGR;MAAQ,CAAC;IACjC;EACF,CAAC,CAAC,OAAOmB,GAAG,EAAE;IACZC,OAAO,CAACC,KAAK,CAAC,qCAAqClC,YAAY,KAAKgC,GAAG,YAAYG,KAAK,GAAGH,GAAG,CAACI,OAAO,GAAGJ,GAAG,EAAE,CAAC;IAC/GC,OAAO,CAACC,KAAK,CAAC,yEAAyE,CAAC;EAC1F;EACA;EACA,OAAO;IAAE,GAAGH,eAAe,CAAC;EAAE,CAAC;AACjC;AAEA,OAAO,SAASM,UAAUA,CAACC,MAAmB,EAAQ;EACpD,IAAI,CAAC9C,UAAU,CAACO,UAAU,CAAC,EAAE;IAC3BN,SAAS,CAACM,UAAU,EAAE;MAAEU,SAAS,EAAE,IAAI;MAAEC,IAAI,EAAE;IAAM,CAAC,CAAC;EACzD;;EAEA;EACA,MAAM;IAAEY,aAAa;IAAEC,gBAAgB;IAAEE,eAAe;IAAEC,YAAY;IAAE,GAAGa;EAAW,CAAC,GAAGD,MAAM;EAChG;EACA,MAAMzB,OAAO,GAAG;IACd2B,OAAO,EAAE,CAAC;IACV,GAAGD,UAAU;IACbE,MAAM,EAAEF,UAAU,CAACE,MAAM,IAAI,EAAE;IAC/BC,UAAU,EAAEC,IAAI,CAACC,KAAK,CAACC,IAAI,CAACC,GAAG,CAAC,CAAC,GAAG,IAAI;EAC1C,CAAC;EACDnD,aAAa,CAACK,YAAY,EAAEO,IAAI,CAACY,SAAS,CAACN,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE;IACnEO,QAAQ,EAAE,OAAO;IACjBV,IAAI,EAAE;EACR,CAAC,CAAC;;EAEF;EACA,MAAMqC,QAA0B,GAAG,CAAC,CAAC;EACrC,IAAIzB,aAAa,KAAKE,SAAS,EAAEuB,QAAQ,CAACzB,aAAa,GAAGA,aAAa;EACvE,IAAIC,gBAAgB,KAAKC,SAAS,EAAEuB,QAAQ,CAACxB,gBAAgB,GAAGA,gBAAgB;EAChF,IAAIE,eAAe,KAAKD,SAAS,EAAEuB,QAAQ,CAACtB,eAAe,GAAGA,eAAe;EAC7E,IAAIC,YAAY,KAAKF,SAAS,EAAEuB,QAAQ,CAACrB,YAAY,GAAGA,YAAY;EACpE,IAAIC,MAAM,CAACC,IAAI,CAACmB,QAAQ,CAAC,CAAClB,MAAM,GAAG,CAAC,EAAE;IACpCmB,eAAe,CAAC;MAAE,GAAGjB,eAAe,CAAC,CAAC;MAAE,GAAGgB;IAAS,CAAC,CAAC;EACxD;AACF;AAEA,OAAO,SAASE,YAAYA,CAACC,OAA6B,EAAQ;EAChE;EACA;EACA;EACA,MAAM;IAAE5B,aAAa;IAAEC,gBAAgB;IAAEE,eAAe;IAAEC,YAAY;IAAE,GAAGa;EAAW,CAAC,GAAGW,OAAO;;EAEjG;EACA,MAAMC,WAA6B,GAAG,CAAC,CAAC;EACxC,IAAI7B,aAAa,KAAKE,SAAS,EAAE2B,WAAW,CAAC7B,aAAa,GAAGA,aAAa;EAC1E,IAAIC,gBAAgB,KAAKC,SAAS,EAAE2B,WAAW,CAAC5B,gBAAgB,GAAGA,gBAAgB;EACnF,IAAIE,eAAe,KAAKD,SAAS,EAAE2B,WAAW,CAAC1B,eAAe,GAAGA,eAAe;EAChF,IAAIC,YAAY,KAAKF,SAAS,EAAE2B,WAAW,CAACzB,YAAY,GAAGA,YAAY;EACvE,IAAIC,MAAM,CAACC,IAAI,CAACuB,WAAW,CAAC,CAACtB,MAAM,GAAG,CAAC,EAAE;IACvCmB,eAAe,CAAC;MAAE,GAAGjB,eAAe,CAAC,CAAC;MAAE,GAAGoB;IAAY,CAAC,CAAC;EAC3D;;EAEA;EACA,IAAIxB,MAAM,CAACC,IAAI,CAACW,UAAU,CAAC,CAACV,MAAM,GAAG,CAAC,EAAE;IACtC,MAAMuB,eAAe,GAAG,CAAC,MAAM;MAC7B,IAAI;QACF,IAAI5D,UAAU,CAACQ,YAAY,CAAC,EAAE,OAAOO,IAAI,CAACC,KAAK,CAACd,YAAY,CAACM,YAAY,EAAE,OAAO,CAAC,CAAC;MACtF,CAAC,CAAC,MAAM,CAAE;MACV,OAAO,CAAC,CAAC;IACX,CAAC,EAAE,CAAC;IACJ,MAAMa,OAAO,GAAG;MAAE2B,OAAO,EAAE,CAAC;MAAE,GAAGY,eAAe;MAAE,GAAGb,UAAU;MAAEG,UAAU,EAAEC,IAAI,CAACC,KAAK,CAACC,IAAI,CAACC,GAAG,CAAC,CAAC,GAAG,IAAI;IAAE,CAAC;IAC5G,IAAI,CAACtD,UAAU,CAACO,UAAU,CAAC,EAAEN,SAAS,CAACM,UAAU,EAAE;MAAEU,SAAS,EAAE,IAAI;MAAEC,IAAI,EAAE;IAAM,CAAC,CAAC;IACpFf,aAAa,CAACK,YAAY,EAAEO,IAAI,CAACY,SAAS,CAACN,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE;MAAEO,QAAQ,EAAE,OAAO;MAAEV,IAAI,EAAE;IAAM,CAAC,CAAC;EAC1G;AACF;AAEA,OAAO,SAAS2C,WAAWA,CAAA,EAAS;EAClC,IAAI;IACF,IAAI7D,UAAU,CAACQ,YAAY,CAAC,EAAEJ,UAAU,CAACI,YAAY,CAAC;EACxD,CAAC,CAAC,MAAM,CAAE;EACV;AACF;;AAEA;AACA;AACA;;AAEA,OAAO,SAAS+B,eAAeA,CAAA,EAAqB;EAClD,IAAI;IACF,IAAIvC,UAAU,CAACS,UAAU,CAAC,EAAE;MAC1B,OAAOM,IAAI,CAACC,KAAK,CAACd,YAAY,CAACO,UAAU,EAAE,OAAO,CAAC,CAAC;IACtD;EACF,CAAC,CAAC,MAAM,CAAE;EACV,OAAO,CAAC,CAAC;AACX;AAEA,OAAO,SAAS+C,eAAeA,CAAC3B,KAAuB,EAAQ;EAC7D,IAAI,CAAC7B,UAAU,CAACO,UAAU,CAAC,EAAE;IAC3BN,SAAS,CAACM,UAAU,EAAE;MAAEU,SAAS,EAAE,IAAI;MAAEC,IAAI,EAAE;IAAM,CAAC,CAAC;EACzD;EACAf,aAAa,CAACM,UAAU,EAAEM,IAAI,CAACY,SAAS,CAACE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE;IAC/DD,QAAQ,EAAE,OAAO;IACjBV,IAAI,EAAE;EACR,CAAC,CAAC;AACJ;;AAEA;AACA;AACA;;AAYA;AACA,OAAO,MAAM4C,gBAAgB,GAAG,6BAA6B;;AAE7D;AACA,MAAMC,oBAAoB,GAAG,0CAA0C;AAEvE,OAAO,SAASC,aAAaA,CAAA,EAAmB;EAC9C,MAAMC,IAAI,GAAG3B,UAAU,CAAC,CAAC;EACzB,OAAO;IACL4B,WAAW,EAAEC,OAAO,CAACC,GAAG,CAACC,YAAY,IAAIN,oBAAoB;IAC7D;IACAO,WAAW,EAAEH,OAAO,CAACC,GAAG,CAACG,yBAAyB,IAAI,EAAE;IACxDC,OAAO,EAAEL,OAAO,CAACC,GAAG,CAACK,QAAQ,IAAIR,IAAI,CAACzC,QAAQ,IAAI,EAAE;IACpDkD,cAAc,EAAET,IAAI,CAACU,gBAAgB,IAAI,EAAE;IAC3CC,SAAS,EAAET,OAAO,CAACC,GAAG,CAACN,gBAAgB,IAAIA,gBAAgB;IAC3De,WAAW,EAAEV,OAAO,CAACC,GAAG,CAACU,uBAAuB,IAAIb,IAAI,CAAC/B,YAAY,IAAI;EAC3E,CAAC;AACH;AAEA,OAAO,SAAS6C,aAAaA,CAAA,EAAW;EACtC,OAAOvE,YAAY;AACrB;;AAEA;AACA,OAAO,SAASwE,WAAWA,CAAA,EAAW;EACpC,OAAOhB,aAAa,CAAC,CAAC,CAACY,SAAS;AAClC;;AAEA;AACA,MAAMK,yBAAyB,GAAG,kNAAkN;;AAEpP;AACA;AACA;AACA;AACA,OAAO,eAAeC,qBAAqBA,CACzCC,UAAkB,EAClBX,OAAe,EACfY,QAAsC,EACd;EACxB;EACA,MAAMtC,MAAM,GAAGR,UAAU,CAAC,CAAC;EAC3B,IAAIQ,MAAM,CAAC6B,gBAAgB,EAAE,OAAO7B,MAAM,CAAC6B,gBAAgB;EAE3D,IAAI;IACF,MAAM;MAAEU;IAAa,CAAC,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC;IAC9D,MAAMC,KAAK,GAAG,MAAMF,QAAQ,CAAC,CAAC;IAC9B,IAAI,CAACE,KAAK,EAAE,OAAO,IAAI;IAEvB,MAAMpB,WAAW,GAAGC,OAAO,CAACC,GAAG,CAACC,YAAY,IAAIN,oBAAoB;IACpE,MAAMwB,OAAO,GAAGpB,OAAO,CAACC,GAAG,CAACoB,iBAAiB,IAAIP,yBAAyB;IAC1E,MAAMQ,QAAQ,GAAGJ,YAAY,CAACnB,WAAW,EAAEqB,OAAO,EAAE;MAClDG,MAAM,EAAE;QAAEC,OAAO,EAAE;UAAEC,aAAa,EAAE,UAAUN,KAAK;QAAG;MAAE;IAC1D,CAAC,CAAC;;IAEF;IACA;IACA,MAAM;MAAEO;IAAK,CAAC,GAAG,MAAMJ,QAAQ,CAC5BK,IAAI,CAAC,iBAAiB,CAAC,CACvBC,MAAM,CAAC,IAAI,CAAC,CACZC,EAAE,CAAC,UAAU,EAAE,IAAI,CAAC,CACpBC,EAAE,CAAC,mBAAmB,EAAE,IAAI,CAAC,CAC7BA,EAAE,CAAC,WAAW,EAAE,IAAI,CAAC,CACrBC,KAAK,CAAC,CAAC,CAAC,CACRC,MAAM,CAAC,CAAC;IAEX,IAAI,CAACN,IAAI,EAAEO,EAAE,EAAE,OAAO,IAAI;;IAE1B;IACA3C,YAAY,CAAC;MAAEkB,gBAAgB,EAAEkB,IAAI,CAACO;IAAG,CAAC,CAAC;IAC3C,OAAOP,IAAI,CAACO,EAAE;EAChB,CAAC,CAAC,MAAM;IACN,OAAO,IAAI;EACb;AACF","ignoreList":[]}

package/dist/cli/services/memory-manager.js

@@ -26,8 +26,8 @@ export function addMemory(fact) {
   const existing = loadMemory();
   const entry = `- ${fact}`;
 
-  // Check for duplicate
-  if (existing.includes(fact)) {
+  // Check for duplicate (case-insensitive)
+  if (existing.toLowerCase().includes(fact.toLowerCase())) {
     return {
       success: false,
       message: "Already remembered."

package/dist/cli/services/memory-manager.js.map

@@ -1 +1 @@
-{"version":3,"file":"memory-manager.js","names":["readFileSync","writeFileSync","existsSync","mkdirSync","MEMORY_DIR","MEMORY_FILE","ensureDataDir","ensureMemoryDir","recursive","loadMemory","trim","addMemory","fact","existing","entry","includes","success","message","updated","removeMemory","pattern","content","lines","split","lower","toLowerCase","filtered","filter","line","length","removed","join","listMemories","l","startsWith","map","replace"],"sources":["../../../src/cli/services/memory-manager.ts"],"sourcesContent":["/**\n * Memory Manager — persistent /remember and /forget across sessions\n *\n * Extracted from agent-loop.ts for single-responsibility.\n * All consumers should import from agent-loop.ts (re-export facade).\n */\n\nimport { readFileSync, writeFileSync, existsSync, mkdirSync } from \"fs\";\nimport { MEMORY_DIR, MEMORY_FILE, ensureDataDir } from \"./paths.js\";\n\nfunction ensureMemoryDir(): void {\n  ensureDataDir();\n  if (!existsSync(MEMORY_DIR)) mkdirSync(MEMORY_DIR, { recursive: true });\n}\n\nexport function loadMemory(): string {\n  if (!existsSync(MEMORY_FILE)) return \"\";\n  try {\n    return readFileSync(MEMORY_FILE, \"utf-8\").trim();\n  } catch { return \"\"; }\n}\n\nexport function addMemory(fact: string): { success: boolean; message: string } {\n  ensureMemoryDir();\n  const existing = loadMemory();\n  const entry = `- ${fact}`;\n\n  // Check for duplicate\n  if (existing.includes(fact)) {\n    return { success: false, message: \"Already remembered.\" };\n  }\n\n  const updated = existing ? existing + \"\\n\" + entry : entry;\n  writeFileSync(MEMORY_FILE, updated + \"\\n\", \"utf-8\");\n  return { success: true, message: `Remembered: ${fact}` };\n}\n\nexport function removeMemory(pattern: string): { success: boolean; message: string } {\n  if (!existsSync(MEMORY_FILE)) return { success: false, message: \"No memories stored.\" };\n\n  const content = readFileSync(MEMORY_FILE, \"utf-8\");\n  const lines = content.split(\"\\n\");\n  const lower = pattern.toLowerCase();\n  const filtered = lines.filter(line => !line.toLowerCase().includes(lower));\n\n  if (filtered.length === lines.length) {\n    return { success: false, message: `No memory matching \"${pattern}\" found.` };\n  }\n\n  const removed = lines.length - filtered.length;\n  writeFileSync(MEMORY_FILE, filtered.join(\"\\n\"), \"utf-8\");\n  return { success: true, message: `Forgot ${removed} memor${removed === 1 ? \"y\" : \"ies\"} matching \"${pattern}\".` };\n}\n\nexport function listMemories(): string[] {\n  const content = loadMemory();\n  if (!content) return [];\n  return content.split(\"\\n\").filter(l => l.trim().startsWith(\"- \")).map(l => l.replace(/^- /, \"\").trim());\n}\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;;AAEA,SAASA,YAAY,EAAEC,aAAa,EAAEC,UAAU,EAAEC,SAAS,QAAQ,IAAI;AACvE,SAASC,UAAU,EAAEC,WAAW,EAAEC,aAAa,QAAQ,YAAY;AAEnE,SAASC,eAAeA,CAAA,EAAS;EAC/BD,aAAa,CAAC,CAAC;EACf,IAAI,CAACJ,UAAU,CAACE,UAAU,CAAC,EAAED,SAAS,CAACC,UAAU,EAAE;IAAEI,SAAS,EAAE;EAAK,CAAC,CAAC;AACzE;AAEA,OAAO,SAASC,UAAUA,CAAA,EAAW;EACnC,IAAI,CAACP,UAAU,CAACG,WAAW,CAAC,EAAE,OAAO,EAAE;EACvC,IAAI;IACF,OAAOL,YAAY,CAACK,WAAW,EAAE,OAAO,CAAC,CAACK,IAAI,CAAC,CAAC;EAClD,CAAC,CAAC,MAAM;IAAE,OAAO,EAAE;EAAE;AACvB;AAEA,OAAO,SAASC,SAASA,CAACC,IAAY,EAAyC;EAC7EL,eAAe,CAAC,CAAC;EACjB,MAAMM,QAAQ,GAAGJ,UAAU,CAAC,CAAC;EAC7B,MAAMK,KAAK,GAAG,KAAKF,IAAI,EAAE;;EAEzB;EACA,IAAIC,QAAQ,CAACE,QAAQ,CAACH,IAAI,CAAC,EAAE;IAC3B,OAAO;MAAEI,OAAO,EAAE,KAAK;MAAEC,OAAO,EAAE;IAAsB,CAAC;EAC3D;EAEA,MAAMC,OAAO,GAAGL,QAAQ,GAAGA,QAAQ,GAAG,IAAI,GAAGC,KAAK,GAAGA,KAAK;EAC1Db,aAAa,CAACI,WAAW,EAAEa,OAAO,GAAG,IAAI,EAAE,OAAO,CAAC;EACnD,OAAO;IAAEF,OAAO,EAAE,IAAI;IAAEC,OAAO,EAAE,eAAeL,IAAI;EAAG,CAAC;AAC1D;AAEA,OAAO,SAASO,YAAYA,CAACC,OAAe,EAAyC;EACnF,IAAI,CAAClB,UAAU,CAACG,WAAW,CAAC,EAAE,OAAO;IAAEW,OAAO,EAAE,KAAK;IAAEC,OAAO,EAAE;EAAsB,CAAC;EAEvF,MAAMI,OAAO,GAAGrB,YAAY,CAACK,WAAW,EAAE,OAAO,CAAC;EAClD,MAAMiB,KAAK,GAAGD,OAAO,CAACE,KAAK,CAAC,IAAI,CAAC;EACjC,MAAMC,KAAK,GAAGJ,OAAO,CAACK,WAAW,CAAC,CAAC;EACnC,MAAMC,QAAQ,GAAGJ,KAAK,CAACK,MAAM,CAACC,IAAI,IAAI,CAACA,IAAI,CAACH,WAAW,CAAC,CAAC,CAACV,QAAQ,CAACS,KAAK,CAAC,CAAC;EAE1E,IAAIE,QAAQ,CAACG,MAAM,KAAKP,KAAK,CAACO,MAAM,EAAE;IACpC,OAAO;MAAEb,OAAO,EAAE,KAAK;MAAEC,OAAO,EAAE,uBAAuBG,OAAO;IAAW,CAAC;EAC9E;EAEA,MAAMU,OAAO,GAAGR,KAAK,CAACO,MAAM,GAAGH,QAAQ,CAACG,MAAM;EAC9C5B,aAAa,CAACI,WAAW,EAAEqB,QAAQ,CAACK,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;EACxD,OAAO;IAAEf,OAAO,EAAE,IAAI;IAAEC,OAAO,EAAE,UAAUa,OAAO,SAASA,OAAO,KAAK,CAAC,GAAG,GAAG,GAAG,KAAK,cAAcV,OAAO;EAAK,CAAC;AACnH;AAEA,OAAO,SAASY,YAAYA,CAAA,EAAa;EACvC,MAAMX,OAAO,GAAGZ,UAAU,CAAC,CAAC;EAC5B,IAAI,CAACY,OAAO,EAAE,OAAO,EAAE;EACvB,OAAOA,OAAO,CAACE,KAAK,CAAC,IAAI,CAAC,CAACI,MAAM,CAACM,CAAC,IAAIA,CAAC,CAACvB,IAAI,CAAC,CAAC,CAACwB,UAAU,CAAC,IAAI,CAAC,CAAC,CAACC,GAAG,CAACF,CAAC,IAAIA,CAAC,CAACG,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC1B,IAAI,CAAC,CAAC,CAAC;AACzG","ignoreList":[]}
+{"version":3,"file":"memory-manager.js","names":["readFileSync","writeFileSync","existsSync","mkdirSync","MEMORY_DIR","MEMORY_FILE","ensureDataDir","ensureMemoryDir","recursive","loadMemory","trim","addMemory","fact","existing","entry","toLowerCase","includes","success","message","updated","removeMemory","pattern","content","lines","split","lower","filtered","filter","line","length","removed","join","listMemories","l","startsWith","map","replace"],"sources":["../../../src/cli/services/memory-manager.ts"],"sourcesContent":["/**\n * Memory Manager — persistent /remember and /forget across sessions\n *\n * Extracted from agent-loop.ts for single-responsibility.\n * All consumers should import from agent-loop.ts (re-export facade).\n */\n\nimport { readFileSync, writeFileSync, existsSync, mkdirSync } from \"fs\";\nimport { MEMORY_DIR, MEMORY_FILE, ensureDataDir } from \"./paths.js\";\n\nfunction ensureMemoryDir(): void {\n  ensureDataDir();\n  if (!existsSync(MEMORY_DIR)) mkdirSync(MEMORY_DIR, { recursive: true });\n}\n\nexport function loadMemory(): string {\n  if (!existsSync(MEMORY_FILE)) return \"\";\n  try {\n    return readFileSync(MEMORY_FILE, \"utf-8\").trim();\n  } catch { return \"\"; }\n}\n\nexport function addMemory(fact: string): { success: boolean; message: string } {\n  ensureMemoryDir();\n  const existing = loadMemory();\n  const entry = `- ${fact}`;\n\n  // Check for duplicate (case-insensitive)\n  if (existing.toLowerCase().includes(fact.toLowerCase())) {\n    return { success: false, message: \"Already remembered.\" };\n  }\n\n  const updated = existing ? existing + \"\\n\" + entry : entry;\n  writeFileSync(MEMORY_FILE, updated + \"\\n\", \"utf-8\");\n  return { success: true, message: `Remembered: ${fact}` };\n}\n\nexport function removeMemory(pattern: string): { success: boolean; message: string } {\n  if (!existsSync(MEMORY_FILE)) return { success: false, message: \"No memories stored.\" };\n\n  const content = readFileSync(MEMORY_FILE, \"utf-8\");\n  const lines = content.split(\"\\n\");\n  const lower = pattern.toLowerCase();\n  const filtered = lines.filter(line => !line.toLowerCase().includes(lower));\n\n  if (filtered.length === lines.length) {\n    return { success: false, message: `No memory matching \"${pattern}\" found.` };\n  }\n\n  const removed = lines.length - filtered.length;\n  writeFileSync(MEMORY_FILE, filtered.join(\"\\n\"), \"utf-8\");\n  return { success: true, message: `Forgot ${removed} memor${removed === 1 ? \"y\" : \"ies\"} matching \"${pattern}\".` };\n}\n\nexport function listMemories(): string[] {\n  const content = loadMemory();\n  if (!content) return [];\n  return content.split(\"\\n\").filter(l => l.trim().startsWith(\"- \")).map(l => l.replace(/^- /, \"\").trim());\n}\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;;AAEA,SAASA,YAAY,EAAEC,aAAa,EAAEC,UAAU,EAAEC,SAAS,QAAQ,IAAI;AACvE,SAASC,UAAU,EAAEC,WAAW,EAAEC,aAAa,QAAQ,YAAY;AAEnE,SAASC,eAAeA,CAAA,EAAS;EAC/BD,aAAa,CAAC,CAAC;EACf,IAAI,CAACJ,UAAU,CAACE,UAAU,CAAC,EAAED,SAAS,CAACC,UAAU,EAAE;IAAEI,SAAS,EAAE;EAAK,CAAC,CAAC;AACzE;AAEA,OAAO,SAASC,UAAUA,CAAA,EAAW;EACnC,IAAI,CAACP,UAAU,CAACG,WAAW,CAAC,EAAE,OAAO,EAAE;EACvC,IAAI;IACF,OAAOL,YAAY,CAACK,WAAW,EAAE,OAAO,CAAC,CAACK,IAAI,CAAC,CAAC;EAClD,CAAC,CAAC,MAAM;IAAE,OAAO,EAAE;EAAE;AACvB;AAEA,OAAO,SAASC,SAASA,CAACC,IAAY,EAAyC;EAC7EL,eAAe,CAAC,CAAC;EACjB,MAAMM,QAAQ,GAAGJ,UAAU,CAAC,CAAC;EAC7B,MAAMK,KAAK,GAAG,KAAKF,IAAI,EAAE;;EAEzB;EACA,IAAIC,QAAQ,CAACE,WAAW,CAAC,CAAC,CAACC,QAAQ,CAACJ,IAAI,CAACG,WAAW,CAAC,CAAC,CAAC,EAAE;IACvD,OAAO;MAAEE,OAAO,EAAE,KAAK;MAAEC,OAAO,EAAE;IAAsB,CAAC;EAC3D;EAEA,MAAMC,OAAO,GAAGN,QAAQ,GAAGA,QAAQ,GAAG,IAAI,GAAGC,KAAK,GAAGA,KAAK;EAC1Db,aAAa,CAACI,WAAW,EAAEc,OAAO,GAAG,IAAI,EAAE,OAAO,CAAC;EACnD,OAAO;IAAEF,OAAO,EAAE,IAAI;IAAEC,OAAO,EAAE,eAAeN,IAAI;EAAG,CAAC;AAC1D;AAEA,OAAO,SAASQ,YAAYA,CAACC,OAAe,EAAyC;EACnF,IAAI,CAACnB,UAAU,CAACG,WAAW,CAAC,EAAE,OAAO;IAAEY,OAAO,EAAE,KAAK;IAAEC,OAAO,EAAE;EAAsB,CAAC;EAEvF,MAAMI,OAAO,GAAGtB,YAAY,CAACK,WAAW,EAAE,OAAO,CAAC;EAClD,MAAMkB,KAAK,GAAGD,OAAO,CAACE,KAAK,CAAC,IAAI,CAAC;EACjC,MAAMC,KAAK,GAAGJ,OAAO,CAACN,WAAW,CAAC,CAAC;EACnC,MAAMW,QAAQ,GAAGH,KAAK,CAACI,MAAM,CAACC,IAAI,IAAI,CAACA,IAAI,CAACb,WAAW,CAAC,CAAC,CAACC,QAAQ,CAACS,KAAK,CAAC,CAAC;EAE1E,IAAIC,QAAQ,CAACG,MAAM,KAAKN,KAAK,CAACM,MAAM,EAAE;IACpC,OAAO;MAAEZ,OAAO,EAAE,KAAK;MAAEC,OAAO,EAAE,uBAAuBG,OAAO;IAAW,CAAC;EAC9E;EAEA,MAAMS,OAAO,GAAGP,KAAK,CAACM,MAAM,GAAGH,QAAQ,CAACG,MAAM;EAC9C5B,aAAa,CAACI,WAAW,EAAEqB,QAAQ,CAACK,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;EACxD,OAAO;IAAEd,OAAO,EAAE,IAAI;IAAEC,OAAO,EAAE,UAAUY,OAAO,SAASA,OAAO,KAAK,CAAC,GAAG,GAAG,GAAG,KAAK,cAAcT,OAAO;EAAK,CAAC;AACnH;AAEA,OAAO,SAASW,YAAYA,CAAA,EAAa;EACvC,MAAMV,OAAO,GAAGb,UAAU,CAAC,CAAC;EAC5B,IAAI,CAACa,OAAO,EAAE,OAAO,EAAE;EACvB,OAAOA,OAAO,CAACE,KAAK,CAAC,IAAI,CAAC,CAACG,MAAM,CAACM,CAAC,IAAIA,CAAC,CAACvB,IAAI,CAAC,CAAC,CAACwB,UAAU,CAAC,IAAI,CAAC,CAAC,CAACC,GAAG,CAACF,CAAC,IAAIA,CAAC,CAACG,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC1B,IAAI,CAAC,CAAC,CAAC;AACzG","ignoreList":[]}

package/dist/cli/services/permission-modes.js

@@ -6,14 +6,15 @@
  */
 
 import { loadConfig, updateConfig } from "./config-store.js";
-/** CLI-only: current permission mode */
+/** CLI-only: current permission mode — always starts as "default".
+ *  Plan mode is session-only; it should never carry over across restarts
+ *  because it blocks write tools and confuses users on fresh launches.
+ *  Only "yolo" is restored from preferences (explicit user opt-in). */
 let activePermissionMode = "default";
-
-// Load persisted permission mode on import
 try {
   const cfg = loadConfig();
-  if (cfg.permission_mode && ["default", "plan", "yolo"].includes(cfg.permission_mode)) {
-    activePermissionMode = cfg.permission_mode;
+  if (cfg.permission_mode === "yolo") {
+    activePermissionMode = "yolo";
   }
 } catch {/* use default */}
 
@@ -36,11 +37,14 @@ const PLAN_MODE_TOOLS = new Set([
 "ask_user_question", "enter_plan_mode", "exit_plan_mode"]);
 export function setPermissionMode(mode) {
   activePermissionMode = mode;
-  try {
-    updateConfig({
-      permission_mode: mode
-    });
-  } catch {/* best effort */}
+  // Only persist "yolo" and "default" — plan mode is session-only
+  if (mode !== "plan") {
+    try {
+      updateConfig({
+        permission_mode: mode
+      });
+    } catch {/* best effort */}
+  }
   return {
     success: true,
     message: `Permission mode: ${mode}`

package/dist/cli/services/permission-modes.js.map

@@ -1 +1 @@
-{"version":3,"file":"permission-modes.js","names":["loadConfig","updateConfig","activePermissionMode","cfg","permission_mode","includes","PLAN_MODE_TOOLS","Set","setPermissionMode","mode","success","message","getPermissionMode","isToolAllowedByPermission","toolName","has"],"sources":["../../../src/cli/services/permission-modes.ts"],"sourcesContent":["/**\n * Permission Modes — control tool access levels\n *\n * Extracted from agent-loop.ts for single-responsibility.\n * All consumers should import from agent-loop.ts (re-export facade).\n */\n\nimport { loadConfig, updateConfig } from \"./config-store.js\";\n\nexport type PermissionMode = \"default\" | \"plan\" | \"yolo\";\n\n/** CLI-only: current permission mode */\nlet activePermissionMode: PermissionMode = \"default\";\n\n// Load persisted permission mode on import\ntry {\n  const cfg = loadConfig();\n  if (cfg.permission_mode && [\"default\", \"plan\", \"yolo\"].includes(cfg.permission_mode)) {\n    activePermissionMode = cfg.permission_mode as PermissionMode;\n  }\n} catch { /* use default */ }\n\n// Tools allowed in plan mode — all read-only tools + planning tools.\n// If a tool only reads data and never mutates state, it belongs here.\nconst PLAN_MODE_TOOLS = new Set([\n  // File reading\n  \"read_file\", \"read_many_files\", \"list_directory\",\n  // Search\n  \"search_files\", \"search_content\", \"glob\", \"grep\",\n  // Web (read-only)\n  \"web_fetch\", \"web_search\",\n  // Agent delegation (subagents, teams read)\n  \"task\", \"task_output\", \"task_stop\",\n  // Shell (read-only output, list)\n  \"bash_output\", \"list_shells\",\n  // Config and planning\n  \"tasks\", \"config\", \"ask_user\", \"lsp\", \"skill\",\n  // Interactive tools\n  \"ask_user_question\", \"enter_plan_mode\", \"exit_plan_mode\",\n]);\n\nexport function setPermissionMode(mode: PermissionMode): { success: boolean; message: string } {\n  activePermissionMode = mode;\n  try { updateConfig({ permission_mode: mode }); } catch { /* best effort */ }\n  return { success: true, message: `Permission mode: ${mode}` };\n}\n\nexport function getPermissionMode(): PermissionMode {\n  return activePermissionMode;\n}\n\nexport function isToolAllowedByPermission(toolName: string): boolean {\n  switch (activePermissionMode) {\n    case \"yolo\": return true;\n    case \"plan\": return PLAN_MODE_TOOLS.has(toolName);\n    case \"default\": return true; // Default allows all — UI can prompt for confirmation\n  }\n}\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;;AAEA,SAASA,UAAU,EAAEC,YAAY,QAAQ,mBAAmB;AAI5D;AACA,IAAIC,oBAAoC,GAAG,SAAS;;AAEpD;AACA,IAAI;EACF,MAAMC,GAAG,GAAGH,UAAU,CAAC,CAAC;EACxB,IAAIG,GAAG,CAACC,eAAe,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,CAACC,QAAQ,CAACF,GAAG,CAACC,eAAe,CAAC,EAAE;IACpFF,oBAAoB,GAAGC,GAAG,CAACC,eAAiC;EAC9D;AACF,CAAC,CAAC,MAAM,CAAE;;AAEV;AACA;AACA,MAAME,eAAe,GAAG,IAAIC,GAAG,CAAC;AAC9B;AACA,WAAW,EAAE,iBAAiB,EAAE,gBAAgB;AAChD;AACA,cAAc,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM;AAChD;AACA,WAAW,EAAE,YAAY;AACzB;AACA,MAAM,EAAE,aAAa,EAAE,WAAW;AAClC;AACA,aAAa,EAAE,aAAa;AAC5B;AACA,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO;AAC7C;AACA,mBAAmB,EAAE,iBAAiB,EAAE,gBAAgB,CACzD,CAAC;AAEF,OAAO,SAASC,iBAAiBA,CAACC,IAAoB,EAAyC;EAC7FP,oBAAoB,GAAGO,IAAI;EAC3B,IAAI;IAAER,YAAY,CAAC;MAAEG,eAAe,EAAEK;IAAK,CAAC,CAAC;EAAE,CAAC,CAAC,MAAM,CAAE;EACzD,OAAO;IAAEC,OAAO,EAAE,IAAI;IAAEC,OAAO,EAAE,oBAAoBF,IAAI;EAAG,CAAC;AAC/D;AAEA,OAAO,SAASG,iBAAiBA,CAAA,EAAmB;EAClD,OAAOV,oBAAoB;AAC7B;AAEA,OAAO,SAASW,yBAAyBA,CAACC,QAAgB,EAAW;EACnE,QAAQZ,oBAAoB;IAC1B,KAAK,MAAM;MAAE,OAAO,IAAI;IACxB,KAAK,MAAM;MAAE,OAAOI,eAAe,CAACS,GAAG,CAACD,QAAQ,CAAC;IACjD,KAAK,SAAS;MAAE,OAAO,IAAI;IAAE;EAC/B;AACF","ignoreList":[]}
+{"version":3,"file":"permission-modes.js","names":["loadConfig","updateConfig","activePermissionMode","cfg","permission_mode","PLAN_MODE_TOOLS","Set","setPermissionMode","mode","success","message","getPermissionMode","isToolAllowedByPermission","toolName","has"],"sources":["../../../src/cli/services/permission-modes.ts"],"sourcesContent":["/**\n * Permission Modes — control tool access levels\n *\n * Extracted from agent-loop.ts for single-responsibility.\n * All consumers should import from agent-loop.ts (re-export facade).\n */\n\nimport { loadConfig, updateConfig } from \"./config-store.js\";\n\nexport type PermissionMode = \"default\" | \"plan\" | \"yolo\";\n\n/** CLI-only: current permission mode — always starts as \"default\".\n *  Plan mode is session-only; it should never carry over across restarts\n *  because it blocks write tools and confuses users on fresh launches.\n *  Only \"yolo\" is restored from preferences (explicit user opt-in). */\nlet activePermissionMode: PermissionMode = \"default\";\n\ntry {\n  const cfg = loadConfig();\n  if (cfg.permission_mode === \"yolo\") {\n    activePermissionMode = \"yolo\";\n  }\n} catch { /* use default */ }\n\n// Tools allowed in plan mode — all read-only tools + planning tools.\n// If a tool only reads data and never mutates state, it belongs here.\nconst PLAN_MODE_TOOLS = new Set([\n  // File reading\n  \"read_file\", \"read_many_files\", \"list_directory\",\n  // Search\n  \"search_files\", \"search_content\", \"glob\", \"grep\",\n  // Web (read-only)\n  \"web_fetch\", \"web_search\",\n  // Agent delegation (subagents, teams read)\n  \"task\", \"task_output\", \"task_stop\",\n  // Shell (read-only output, list)\n  \"bash_output\", \"list_shells\",\n  // Config and planning\n  \"tasks\", \"config\", \"ask_user\", \"lsp\", \"skill\",\n  // Interactive tools\n  \"ask_user_question\", \"enter_plan_mode\", \"exit_plan_mode\",\n]);\n\nexport function setPermissionMode(mode: PermissionMode): { success: boolean; message: string } {\n  activePermissionMode = mode;\n  // Only persist \"yolo\" and \"default\" — plan mode is session-only\n  if (mode !== \"plan\") {\n    try { updateConfig({ permission_mode: mode }); } catch { /* best effort */ }\n  }\n  return { success: true, message: `Permission mode: ${mode}` };\n}\n\nexport function getPermissionMode(): PermissionMode {\n  return activePermissionMode;\n}\n\nexport function isToolAllowedByPermission(toolName: string): boolean {\n  switch (activePermissionMode) {\n    case \"yolo\": return true;\n    case \"plan\": return PLAN_MODE_TOOLS.has(toolName);\n    case \"default\": return true; // Default allows all — UI can prompt for confirmation\n  }\n}\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;;AAEA,SAASA,UAAU,EAAEC,YAAY,QAAQ,mBAAmB;AAI5D;AACA;AACA;AACA;AACA,IAAIC,oBAAoC,GAAG,SAAS;AAEpD,IAAI;EACF,MAAMC,GAAG,GAAGH,UAAU,CAAC,CAAC;EACxB,IAAIG,GAAG,CAACC,eAAe,KAAK,MAAM,EAAE;IAClCF,oBAAoB,GAAG,MAAM;EAC/B;AACF,CAAC,CAAC,MAAM,CAAE;;AAEV;AACA;AACA,MAAMG,eAAe,GAAG,IAAIC,GAAG,CAAC;AAC9B;AACA,WAAW,EAAE,iBAAiB,EAAE,gBAAgB;AAChD;AACA,cAAc,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM;AAChD;AACA,WAAW,EAAE,YAAY;AACzB;AACA,MAAM,EAAE,aAAa,EAAE,WAAW;AAClC;AACA,aAAa,EAAE,aAAa;AAC5B;AACA,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO;AAC7C;AACA,mBAAmB,EAAE,iBAAiB,EAAE,gBAAgB,CACzD,CAAC;AAEF,OAAO,SAASC,iBAAiBA,CAACC,IAAoB,EAAyC;EAC7FN,oBAAoB,GAAGM,IAAI;EAC3B;EACA,IAAIA,IAAI,KAAK,MAAM,EAAE;IACnB,IAAI;MAAEP,YAAY,CAAC;QAAEG,eAAe,EAAEI;MAAK,CAAC,CAAC;IAAE,CAAC,CAAC,MAAM,CAAE;EAC3D;EACA,OAAO;IAAEC,OAAO,EAAE,IAAI;IAAEC,OAAO,EAAE,oBAAoBF,IAAI;EAAG,CAAC;AAC/D;AAEA,OAAO,SAASG,iBAAiBA,CAAA,EAAmB;EAClD,OAAOT,oBAAoB;AAC7B;AAEA,OAAO,SAASU,yBAAyBA,CAACC,QAAgB,EAAW;EACnE,QAAQX,oBAAoB;IAC1B,KAAK,MAAM;MAAE,OAAO,IAAI;IACxB,KAAK,MAAM;MAAE,OAAOG,eAAe,CAACS,GAAG,CAACD,QAAQ,CAAC;IACjD,KAAK,SAAS;MAAE,OAAO,IAAI;IAAE;EAC/B;AACF","ignoreList":[]}

package/dist/cli/services/session-client.js

@@ -53,7 +53,8 @@ export class SessionClient {
       },
       body: JSON.stringify({
         message,
-        streaming: true
+        streaming: true,
+        source: "whale-code"
       }),
       signal
     });

package/dist/cli/services/session-client.js.map

@@ -1 +1 @@
-{"version":3,"file":"session-client.js","names":["SessionClient","constructor","serverUrl","getToken","createSession","opts","token","resp","fetch","method","headers","Authorization","body","JSON","stringify","storeId","agentId","surface","message","ok","err","json","catch","error","statusText","Error","status","data","session","sendMessage","sessionId","callbacks","signal","streaming","errorMsg","onError","reader","getReader","decoder","TextDecoder","buffer","result","done","value","read","decode","stream","lines","split","pop","line","startsWith","slice","trim","event","parse","type","onText","text","onToolStart","name","input","onToolResult","success","onToolProgress","progress","usage","onUsage","input_tokens","output","output_tokens","cacheRead","cache_read_tokens","cacheCreation","cache_creation_tokens","cost_usd","onDone","conversationId","releaseLock","listSessions","params","URLSearchParams","store_id","limit","set","String","sessions","getSession","healthCheck","healthResp","AbortSignal","timeout","probeResp"],"sources":["../../../src/cli/services/session-client.ts"],"sourcesContent":["/**\n * Session Client — thin HTTP client for the session API.\n *\n * Used by the CLI in session mode to create/resume sessions and send messages\n * via the server-side SessionManager, gaining DB persistence, memory, identity,\n * and cross-surface continuity.\n */\n\nexport interface SessionInfo {\n  id: string;\n  store_id: string;\n  agent_id: string;\n  surface: string;\n  status: string;\n  created_at: string;\n  updated_at: string;\n  metadata: Record<string, unknown>;\n}\n\nexport interface SessionTurnResult {\n  finalText: string;\n  tokens: { input: number; output: number; cacheRead: number; cacheCreation: number };\n  costUsd: number;\n  turnCount: number;\n  toolsUsed: string[];\n}\n\nexport interface SessionTurnCallbacks {\n  onText?: (text: string) => void;\n  onToolStart?: (name: string, input?: unknown) => void;\n  onToolResult?: (name: string, success: boolean, result?: unknown) => void;\n  onToolProgress?: (name: string, progress: unknown) => void;\n  onUsage?: (tokens: { input: number; output: number; cacheRead: number; cacheCreation: number }, costUsd: number) => void;\n  onDone?: (conversationId: string) => void;\n  onError?: (error: string) => void;\n}\n\nexport class SessionClient {\n  constructor(\n    private serverUrl: string,\n    private getToken: () => Promise<string | null>,\n  ) {}\n\n  /**\n   * Create a new session on the server.\n   */\n  async createSession(opts: {\n    storeId: string;\n    agentId: string;\n    surface?: string;\n    message?: string;\n  }): Promise<SessionInfo> {\n    const token = await this.getToken();\n    const resp = await fetch(`${this.serverUrl}/sessions`, {\n      method: \"POST\",\n      headers: {\n        \"Content-Type\": \"application/json\",\n        Authorization: `Bearer ${token}`,\n      },\n      body: JSON.stringify({\n        storeId: opts.storeId,\n        agentId: opts.agentId,\n        surface: opts.surface || \"cli\",\n        message: opts.message,\n      }),\n    });\n\n    if (!resp.ok) {\n      const err = await resp.json().catch(() => ({ error: resp.statusText }));\n      throw new Error((err as any).error || `Session creation failed: ${resp.status}`);\n    }\n\n    const data = await resp.json();\n    return (data as any).session;\n  }\n\n  /**\n   * Send a message to a session and stream the response via SSE.\n   */\n  async sendMessage(\n    sessionId: string,\n    message: string,\n    callbacks: SessionTurnCallbacks,\n    signal?: AbortSignal,\n  ): Promise<SessionTurnResult | null> {\n    const token = await this.getToken();\n    const resp = await fetch(`${this.serverUrl}/sessions/${sessionId}/messages`, {\n      method: \"POST\",\n      headers: {\n        \"Content-Type\": \"application/json\",\n        Authorization: `Bearer ${token}`,\n      },\n      body: JSON.stringify({ message, streaming: true }),\n      signal,\n    });\n\n    if (!resp.ok) {\n      const err = await resp.json().catch(() => ({ error: resp.statusText }));\n      const errorMsg = (err as any).error || `Session message failed: ${resp.status}`;\n      callbacks.onError?.(errorMsg);\n      throw new Error(errorMsg);\n    }\n\n    // Parse SSE stream\n    const reader = resp.body?.getReader();\n    if (!reader) throw new Error(\"No response body\");\n\n    const decoder = new TextDecoder();\n    let buffer = \"\";\n    let result: SessionTurnResult | null = null;\n\n    try {\n      while (true) {\n        const { done, value } = await reader.read();\n        if (done) break;\n\n        buffer += decoder.decode(value, { stream: true });\n        const lines = buffer.split(\"\\n\");\n        buffer = lines.pop() || \"\"; // keep incomplete line in buffer\n\n        for (const line of lines) {\n          if (!line.startsWith(\"data: \")) continue;\n          const json = line.slice(6).trim();\n          if (!json || json === \"[DONE]\") continue;\n\n          let event: any;\n          try { event = JSON.parse(json); } catch { continue; }\n\n          switch (event.type) {\n            case \"text\":\n              callbacks.onText?.(event.text);\n              break;\n            case \"tool_start\":\n              callbacks.onToolStart?.(event.name, event.input);\n              break;\n            case \"tool_result\":\n              callbacks.onToolResult?.(event.name, event.success, event.result);\n              break;\n            case \"tool_progress\":\n              callbacks.onToolProgress?.(event.name, event.progress);\n              break;\n            case \"usage\":\n              if (event.usage) {\n                callbacks.onUsage?.(\n                  {\n                    input: event.usage.input_tokens,\n                    output: event.usage.output_tokens,\n                    cacheRead: event.usage.cache_read_tokens || 0,\n                    cacheCreation: event.usage.cache_creation_tokens || 0,\n                  },\n                  event.usage.cost_usd || 0,\n                );\n              }\n              break;\n            case \"done\":\n              callbacks.onDone?.(event.conversationId);\n              break;\n            case \"error\":\n              callbacks.onError?.(event.error);\n              break;\n          }\n        }\n      }\n    } finally {\n      reader.releaseLock();\n    }\n\n    return result;\n  }\n\n  /**\n   * List sessions for a store.\n   */\n  async listSessions(storeId: string, opts?: { limit?: number; surface?: string }): Promise<SessionInfo[]> {\n    const token = await this.getToken();\n    const params = new URLSearchParams({ store_id: storeId });\n    if (opts?.limit) params.set(\"limit\", String(opts.limit));\n    if (opts?.surface) params.set(\"surface\", opts.surface);\n\n    const resp = await fetch(`${this.serverUrl}/sessions?${params}`, {\n      headers: { Authorization: `Bearer ${token}` },\n    });\n\n    if (!resp.ok) return [];\n\n    const data = await resp.json();\n    return (data as any).sessions || [];\n  }\n\n  /**\n   * Get a single session by ID.\n   */\n  async getSession(sessionId: string): Promise<SessionInfo | null> {\n    const token = await this.getToken();\n    const resp = await fetch(`${this.serverUrl}/sessions/${sessionId}`, {\n      headers: { Authorization: `Bearer ${token}` },\n    });\n\n    if (!resp.ok) return null;\n\n    const data = await resp.json();\n    return (data as any).session || null;\n  }\n\n  /**\n   * Health check — verify the session API is available (not just the server).\n   * Uses the /health endpoint first (no auth needed), then probes /sessions\n   * to confirm session routes exist. Does NOT call getToken to avoid side effects.\n   */\n  async healthCheck(): Promise<boolean> {\n    try {\n      // Step 1: check server is up (no auth needed)\n      const healthResp = await fetch(`${this.serverUrl}/health`, {\n        signal: AbortSignal.timeout(3000),\n      });\n      if (!healthResp.ok) return false;\n\n      // Step 2: probe session route existence (no auth — just checking for 405 vs 401/200/400)\n      const probeResp = await fetch(`${this.serverUrl}/sessions?store_id=_probe&limit=1`, {\n        signal: AbortSignal.timeout(3000),\n      });\n      // 401 = route exists (auth required) — this is the expected response\n      // 200/400 = route exists\n      // 404/405 = server doesn't have session routes\n      return probeResp.status !== 404 && probeResp.status !== 405;\n    } catch {\n      return false;\n    }\n  }\n}\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;;AA+BA,OAAO,MAAMA,aAAa,CAAC;EACzBC,WAAWA,CACDC,SAAiB,EACjBC,QAAsC,EAC9C;IAAA,KAFQD,SAAiB,GAAjBA,SAAiB;IAAA,KACjBC,QAAsC,GAAtCA,QAAsC;EAC7C;;EAEH;AACF;AACA;EACE,MAAMC,aAAaA,CAACC,IAKnB,EAAwB;IACvB,MAAMC,KAAK,GAAG,MAAM,IAAI,CAACH,QAAQ,CAAC,CAAC;IACnC,MAAMI,IAAI,GAAG,MAAMC,KAAK,CAAC,GAAG,IAAI,CAACN,SAAS,WAAW,EAAE;MACrDO,MAAM,EAAE,MAAM;MACdC,OAAO,EAAE;QACP,cAAc,EAAE,kBAAkB;QAClCC,aAAa,EAAE,UAAUL,KAAK;MAChC,CAAC;MACDM,IAAI,EAAEC,IAAI,CAACC,SAAS,CAAC;QACnBC,OAAO,EAAEV,IAAI,CAACU,OAAO;QACrBC,OAAO,EAAEX,IAAI,CAACW,OAAO;QACrBC,OAAO,EAAEZ,IAAI,CAACY,OAAO,IAAI,KAAK;QAC9BC,OAAO,EAAEb,IAAI,CAACa;MAChB,CAAC;IACH,CAAC,CAAC;IAEF,IAAI,CAACX,IAAI,CAACY,EAAE,EAAE;MACZ,MAAMC,GAAG,GAAG,MAAMb,IAAI,CAACc,IAAI,CAAC,CAAC,CAACC,KAAK,CAAC,OAAO;QAAEC,KAAK,EAAEhB,IAAI,CAACiB;MAAW,CAAC,CAAC,CAAC;MACvE,MAAM,IAAIC,KAAK,CAAEL,GAAG,CAASG,KAAK,IAAI,4BAA4BhB,IAAI,CAACmB,MAAM,EAAE,CAAC;IAClF;IAEA,MAAMC,IAAI,GAAG,MAAMpB,IAAI,CAACc,IAAI,CAAC,CAAC;IAC9B,OAAQM,IAAI,CAASC,OAAO;EAC9B;;EAEA;AACF;AACA;EACE,MAAMC,WAAWA,CACfC,SAAiB,EACjBZ,OAAe,EACfa,SAA+B,EAC/BC,MAAoB,EACe;IACnC,MAAM1B,KAAK,GAAG,MAAM,IAAI,CAACH,QAAQ,CAAC,CAAC;IACnC,MAAMI,IAAI,GAAG,MAAMC,KAAK,CAAC,GAAG,IAAI,CAACN,SAAS,aAAa4B,SAAS,WAAW,EAAE;MAC3ErB,MAAM,EAAE,MAAM;MACdC,OAAO,EAAE;QACP,cAAc,EAAE,kBAAkB;QAClCC,aAAa,EAAE,UAAUL,KAAK;MAChC,CAAC;MACDM,IAAI,EAAEC,IAAI,CAACC,SAAS,CAAC;QAAEI,OAAO;QAAEe,SAAS,EAAE;MAAK,CAAC,CAAC;MAClDD;IACF,CAAC,CAAC;IAEF,IAAI,CAACzB,IAAI,CAACY,EAAE,EAAE;MACZ,MAAMC,GAAG,GAAG,MAAMb,IAAI,CAACc,IAAI,CAAC,CAAC,CAACC,KAAK,CAAC,OAAO;QAAEC,KAAK,EAAEhB,IAAI,CAACiB;MAAW,CAAC,CAAC,CAAC;MACvE,MAAMU,QAAQ,GAAId,GAAG,CAASG,KAAK,IAAI,2BAA2BhB,IAAI,CAACmB,MAAM,EAAE;MAC/EK,SAAS,CAACI,OAAO,GAAGD,QAAQ,CAAC;MAC7B,MAAM,IAAIT,KAAK,CAACS,QAAQ,CAAC;IAC3B;;IAEA;IACA,MAAME,MAAM,GAAG7B,IAAI,CAACK,IAAI,EAAEyB,SAAS,CAAC,CAAC;IACrC,IAAI,CAACD,MAAM,EAAE,MAAM,IAAIX,KAAK,CAAC,kBAAkB,CAAC;IAEhD,MAAMa,OAAO,GAAG,IAAIC,WAAW,CAAC,CAAC;IACjC,IAAIC,MAAM,GAAG,EAAE;IACf,IAAIC,MAAgC,GAAG,IAAI;IAE3C,IAAI;MACF,OAAO,IAAI,EAAE;QACX,MAAM;UAAEC,IAAI;UAAEC;QAAM,CAAC,GAAG,MAAMP,MAAM,CAACQ,IAAI,CAAC,CAAC;QAC3C,IAAIF,IAAI,EAAE;QAEVF,MAAM,IAAIF,OAAO,CAACO,MAAM,CAACF,KAAK,EAAE;UAAEG,MAAM,EAAE;QAAK,CAAC,CAAC;QACjD,MAAMC,KAAK,GAAGP,MAAM,CAACQ,KAAK,CAAC,IAAI,CAAC;QAChCR,MAAM,GAAGO,KAAK,CAACE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;;QAE5B,KAAK,MAAMC,IAAI,IAAIH,KAAK,EAAE;UACxB,IAAI,CAACG,IAAI,CAACC,UAAU,CAAC,QAAQ,CAAC,EAAE;UAChC,MAAM9B,IAAI,GAAG6B,IAAI,CAACE,KAAK,CAAC,CAAC,CAAC,CAACC,IAAI,CAAC,CAAC;UACjC,IAAI,CAAChC,IAAI,IAAIA,IAAI,KAAK,QAAQ,EAAE;UAEhC,IAAIiC,KAAU;UACd,IAAI;YAAEA,KAAK,GAAGzC,IAAI,CAAC0C,KAAK,CAAClC,IAAI,CAAC;UAAE,CAAC,CAAC,MAAM;YAAE;UAAU;UAEpD,QAAQiC,KAAK,CAACE,IAAI;YAChB,KAAK,MAAM;cACTzB,SAAS,CAAC0B,MAAM,GAAGH,KAAK,CAACI,IAAI,CAAC;cAC9B;YACF,KAAK,YAAY;cACf3B,SAAS,CAAC4B,WAAW,GAAGL,KAAK,CAACM,IAAI,EAAEN,KAAK,CAACO,KAAK,CAAC;cAChD;YACF,KAAK,aAAa;cAChB9B,SAAS,CAAC+B,YAAY,GAAGR,KAAK,CAACM,IAAI,EAAEN,KAAK,CAACS,OAAO,EAAET,KAAK,CAACb,MAAM,CAAC;cACjE;YACF,KAAK,eAAe;cAClBV,SAAS,CAACiC,cAAc,GAAGV,KAAK,CAACM,IAAI,EAAEN,KAAK,CAACW,QAAQ,CAAC;cACtD;YACF,KAAK,OAAO;cACV,IAAIX,KAAK,CAACY,KAAK,EAAE;gBACfnC,SAAS,CAACoC,OAAO,GACf;kBACEN,KAAK,EAAEP,KAAK,CAACY,KAAK,CAACE,YAAY;kBAC/BC,MAAM,EAAEf,KAAK,CAACY,KAAK,CAACI,aAAa;kBACjCC,SAAS,EAAEjB,KAAK,CAACY,KAAK,CAACM,iBAAiB,IAAI,CAAC;kBAC7CC,aAAa,EAAEnB,KAAK,CAACY,KAAK,CAACQ,qBAAqB,IAAI;gBACtD,CAAC,EACDpB,KAAK,CAACY,KAAK,CAACS,QAAQ,IAAI,CAC1B,CAAC;cACH;cACA;YACF,KAAK,MAAM;cACT5C,SAAS,CAAC6C,MAAM,GAAGtB,KAAK,CAACuB,cAAc,CAAC;cACxC;YACF,KAAK,OAAO;cACV9C,SAAS,CAACI,OAAO,GAAGmB,KAAK,CAAC/B,KAAK,CAAC;cAChC;UACJ;QACF;MACF;IACF,CAAC,SAAS;MACRa,MAAM,CAAC0C,WAAW,CAAC,CAAC;IACtB;IAEA,OAAOrC,MAAM;EACf;;EAEA;AACF;AACA;EACE,MAAMsC,YAAYA,CAAChE,OAAe,EAAEV,IAA2C,EAA0B;IACvG,MAAMC,KAAK,GAAG,MAAM,IAAI,CAACH,QAAQ,CAAC,CAAC;IACnC,MAAM6E,MAAM,GAAG,IAAIC,eAAe,CAAC;MAAEC,QAAQ,EAAEnE;IAAQ,CAAC,CAAC;IACzD,IAAIV,IAAI,EAAE8E,KAAK,EAAEH,MAAM,CAACI,GAAG,CAAC,OAAO,EAAEC,MAAM,CAAChF,IAAI,CAAC8E,KAAK,CAAC,CAAC;IACxD,IAAI9E,IAAI,EAAEY,OAAO,EAAE+D,MAAM,CAACI,GAAG,CAAC,SAAS,EAAE/E,IAAI,CAACY,OAAO,CAAC;IAEtD,MAAMV,IAAI,GAAG,MAAMC,KAAK,CAAC,GAAG,IAAI,CAACN,SAAS,aAAa8E,MAAM,EAAE,EAAE;MAC/DtE,OAAO,EAAE;QAAEC,aAAa,EAAE,UAAUL,KAAK;MAAG;IAC9C,CAAC,CAAC;IAEF,IAAI,CAACC,IAAI,CAACY,EAAE,EAAE,OAAO,EAAE;IAEvB,MAAMQ,IAAI,GAAG,MAAMpB,IAAI,CAACc,IAAI,CAAC,CAAC;IAC9B,OAAQM,IAAI,CAAS2D,QAAQ,IAAI,EAAE;EACrC;;EAEA;AACF;AACA;EACE,MAAMC,UAAUA,CAACzD,SAAiB,EAA+B;IAC/D,MAAMxB,KAAK,GAAG,MAAM,IAAI,CAACH,QAAQ,CAAC,CAAC;IACnC,MAAMI,IAAI,GAAG,MAAMC,KAAK,CAAC,GAAG,IAAI,CAACN,SAAS,aAAa4B,SAAS,EAAE,EAAE;MAClEpB,OAAO,EAAE;QAAEC,aAAa,EAAE,UAAUL,KAAK;MAAG;IAC9C,CAAC,CAAC;IAEF,IAAI,CAACC,IAAI,CAACY,EAAE,EAAE,OAAO,IAAI;IAEzB,MAAMQ,IAAI,GAAG,MAAMpB,IAAI,CAACc,IAAI,CAAC,CAAC;IAC9B,OAAQM,IAAI,CAASC,OAAO,IAAI,IAAI;EACtC;;EAEA;AACF;AACA;AACA;AACA;EACE,MAAM4D,WAAWA,CAAA,EAAqB;IACpC,IAAI;MACF;MACA,MAAMC,UAAU,GAAG,MAAMjF,KAAK,CAAC,GAAG,IAAI,CAACN,SAAS,SAAS,EAAE;QACzD8B,MAAM,EAAE0D,WAAW,CAACC,OAAO,CAAC,IAAI;MAClC,CAAC,CAAC;MACF,IAAI,CAACF,UAAU,CAACtE,EAAE,EAAE,OAAO,KAAK;;MAEhC;MACA,MAAMyE,SAAS,GAAG,MAAMpF,KAAK,CAAC,GAAG,IAAI,CAACN,SAAS,mCAAmC,EAAE;QAClF8B,MAAM,EAAE0D,WAAW,CAACC,OAAO,CAAC,IAAI;MAClC,CAAC,CAAC;MACF;MACA;MACA;MACA,OAAOC,SAAS,CAAClE,MAAM,KAAK,GAAG,IAAIkE,SAAS,CAAClE,MAAM,KAAK,GAAG;IAC7D,CAAC,CAAC,MAAM;MACN,OAAO,KAAK;IACd;EACF;AACF","ignoreList":[]}
+{"version":3,"file":"session-client.js","names":["SessionClient","constructor","serverUrl","getToken","createSession","opts","token","resp","fetch","method","headers","Authorization","body","JSON","stringify","storeId","agentId","surface","message","ok","err","json","catch","error","statusText","Error","status","data","session","sendMessage","sessionId","callbacks","signal","streaming","source","errorMsg","onError","reader","getReader","decoder","TextDecoder","buffer","result","done","value","read","decode","stream","lines","split","pop","line","startsWith","slice","trim","event","parse","type","onText","text","onToolStart","name","input","onToolResult","success","onToolProgress","progress","usage","onUsage","input_tokens","output","output_tokens","cacheRead","cache_read_tokens","cacheCreation","cache_creation_tokens","cost_usd","onDone","conversationId","releaseLock","listSessions","params","URLSearchParams","store_id","limit","set","String","sessions","getSession","healthCheck","healthResp","AbortSignal","timeout","probeResp"],"sources":["../../../src/cli/services/session-client.ts"],"sourcesContent":["/**\n * Session Client — thin HTTP client for the session API.\n *\n * Used by the CLI in session mode to create/resume sessions and send messages\n * via the server-side SessionManager, gaining DB persistence, memory, identity,\n * and cross-surface continuity.\n */\n\nexport interface SessionInfo {\n  id: string;\n  store_id: string;\n  agent_id: string;\n  surface: string;\n  status: string;\n  created_at: string;\n  updated_at: string;\n  metadata: Record<string, unknown>;\n}\n\nexport interface SessionTurnResult {\n  finalText: string;\n  tokens: { input: number; output: number; cacheRead: number; cacheCreation: number };\n  costUsd: number;\n  turnCount: number;\n  toolsUsed: string[];\n}\n\nexport interface SessionTurnCallbacks {\n  onText?: (text: string) => void;\n  onToolStart?: (name: string, input?: unknown) => void;\n  onToolResult?: (name: string, success: boolean, result?: unknown) => void;\n  onToolProgress?: (name: string, progress: unknown) => void;\n  onUsage?: (tokens: { input: number; output: number; cacheRead: number; cacheCreation: number }, costUsd: number) => void;\n  onDone?: (conversationId: string) => void;\n  onError?: (error: string) => void;\n}\n\nexport class SessionClient {\n  constructor(\n    private serverUrl: string,\n    private getToken: () => Promise<string | null>,\n  ) {}\n\n  /**\n   * Create a new session on the server.\n   */\n  async createSession(opts: {\n    storeId: string;\n    agentId: string;\n    surface?: string;\n    message?: string;\n  }): Promise<SessionInfo> {\n    const token = await this.getToken();\n    const resp = await fetch(`${this.serverUrl}/sessions`, {\n      method: \"POST\",\n      headers: {\n        \"Content-Type\": \"application/json\",\n        Authorization: `Bearer ${token}`,\n      },\n      body: JSON.stringify({\n        storeId: opts.storeId,\n        agentId: opts.agentId,\n        surface: opts.surface || \"cli\",\n        message: opts.message,\n      }),\n    });\n\n    if (!resp.ok) {\n      const err = await resp.json().catch(() => ({ error: resp.statusText }));\n      throw new Error((err as any).error || `Session creation failed: ${resp.status}`);\n    }\n\n    const data = await resp.json();\n    return (data as any).session;\n  }\n\n  /**\n   * Send a message to a session and stream the response via SSE.\n   */\n  async sendMessage(\n    sessionId: string,\n    message: string,\n    callbacks: SessionTurnCallbacks,\n    signal?: AbortSignal,\n  ): Promise<SessionTurnResult | null> {\n    const token = await this.getToken();\n    const resp = await fetch(`${this.serverUrl}/sessions/${sessionId}/messages`, {\n      method: \"POST\",\n      headers: {\n        \"Content-Type\": \"application/json\",\n        Authorization: `Bearer ${token}`,\n      },\n      body: JSON.stringify({ message, streaming: true, source: \"whale-code\" }),\n      signal,\n    });\n\n    if (!resp.ok) {\n      const err = await resp.json().catch(() => ({ error: resp.statusText }));\n      const errorMsg = (err as any).error || `Session message failed: ${resp.status}`;\n      callbacks.onError?.(errorMsg);\n      throw new Error(errorMsg);\n    }\n\n    // Parse SSE stream\n    const reader = resp.body?.getReader();\n    if (!reader) throw new Error(\"No response body\");\n\n    const decoder = new TextDecoder();\n    let buffer = \"\";\n    let result: SessionTurnResult | null = null;\n\n    try {\n      while (true) {\n        const { done, value } = await reader.read();\n        if (done) break;\n\n        buffer += decoder.decode(value, { stream: true });\n        const lines = buffer.split(\"\\n\");\n        buffer = lines.pop() || \"\"; // keep incomplete line in buffer\n\n        for (const line of lines) {\n          if (!line.startsWith(\"data: \")) continue;\n          const json = line.slice(6).trim();\n          if (!json || json === \"[DONE]\") continue;\n\n          let event: any;\n          try { event = JSON.parse(json); } catch { continue; }\n\n          switch (event.type) {\n            case \"text\":\n              callbacks.onText?.(event.text);\n              break;\n            case \"tool_start\":\n              callbacks.onToolStart?.(event.name, event.input);\n              break;\n            case \"tool_result\":\n              callbacks.onToolResult?.(event.name, event.success, event.result);\n              break;\n            case \"tool_progress\":\n              callbacks.onToolProgress?.(event.name, event.progress);\n              break;\n            case \"usage\":\n              if (event.usage) {\n                callbacks.onUsage?.(\n                  {\n                    input: event.usage.input_tokens,\n                    output: event.usage.output_tokens,\n                    cacheRead: event.usage.cache_read_tokens || 0,\n                    cacheCreation: event.usage.cache_creation_tokens || 0,\n                  },\n                  event.usage.cost_usd || 0,\n                );\n              }\n              break;\n            case \"done\":\n              callbacks.onDone?.(event.conversationId);\n              break;\n            case \"error\":\n              callbacks.onError?.(event.error);\n              break;\n          }\n        }\n      }\n    } finally {\n      reader.releaseLock();\n    }\n\n    return result;\n  }\n\n  /**\n   * List sessions for a store.\n   */\n  async listSessions(storeId: string, opts?: { limit?: number; surface?: string }): Promise<SessionInfo[]> {\n    const token = await this.getToken();\n    const params = new URLSearchParams({ store_id: storeId });\n    if (opts?.limit) params.set(\"limit\", String(opts.limit));\n    if (opts?.surface) params.set(\"surface\", opts.surface);\n\n    const resp = await fetch(`${this.serverUrl}/sessions?${params}`, {\n      headers: { Authorization: `Bearer ${token}` },\n    });\n\n    if (!resp.ok) return [];\n\n    const data = await resp.json();\n    return (data as any).sessions || [];\n  }\n\n  /**\n   * Get a single session by ID.\n   */\n  async getSession(sessionId: string): Promise<SessionInfo | null> {\n    const token = await this.getToken();\n    const resp = await fetch(`${this.serverUrl}/sessions/${sessionId}`, {\n      headers: { Authorization: `Bearer ${token}` },\n    });\n\n    if (!resp.ok) return null;\n\n    const data = await resp.json();\n    return (data as any).session || null;\n  }\n\n  /**\n   * Health check — verify the session API is available (not just the server).\n   * Uses the /health endpoint first (no auth needed), then probes /sessions\n   * to confirm session routes exist. Does NOT call getToken to avoid side effects.\n   */\n  async healthCheck(): Promise<boolean> {\n    try {\n      // Step 1: check server is up (no auth needed)\n      const healthResp = await fetch(`${this.serverUrl}/health`, {\n        signal: AbortSignal.timeout(3000),\n      });\n      if (!healthResp.ok) return false;\n\n      // Step 2: probe session route existence (no auth — just checking for 405 vs 401/200/400)\n      const probeResp = await fetch(`${this.serverUrl}/sessions?store_id=_probe&limit=1`, {\n        signal: AbortSignal.timeout(3000),\n      });\n      // 401 = route exists (auth required) — this is the expected response\n      // 200/400 = route exists\n      // 404/405 = server doesn't have session routes\n      return probeResp.status !== 404 && probeResp.status !== 405;\n    } catch {\n      return false;\n    }\n  }\n}\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;;AA+BA,OAAO,MAAMA,aAAa,CAAC;EACzBC,WAAWA,CACDC,SAAiB,EACjBC,QAAsC,EAC9C;IAAA,KAFQD,SAAiB,GAAjBA,SAAiB;IAAA,KACjBC,QAAsC,GAAtCA,QAAsC;EAC7C;;EAEH;AACF;AACA;EACE,MAAMC,aAAaA,CAACC,IAKnB,EAAwB;IACvB,MAAMC,KAAK,GAAG,MAAM,IAAI,CAACH,QAAQ,CAAC,CAAC;IACnC,MAAMI,IAAI,GAAG,MAAMC,KAAK,CAAC,GAAG,IAAI,CAACN,SAAS,WAAW,EAAE;MACrDO,MAAM,EAAE,MAAM;MACdC,OAAO,EAAE;QACP,cAAc,EAAE,kBAAkB;QAClCC,aAAa,EAAE,UAAUL,KAAK;MAChC,CAAC;MACDM,IAAI,EAAEC,IAAI,CAACC,SAAS,CAAC;QACnBC,OAAO,EAAEV,IAAI,CAACU,OAAO;QACrBC,OAAO,EAAEX,IAAI,CAACW,OAAO;QACrBC,OAAO,EAAEZ,IAAI,CAACY,OAAO,IAAI,KAAK;QAC9BC,OAAO,EAAEb,IAAI,CAACa;MAChB,CAAC;IACH,CAAC,CAAC;IAEF,IAAI,CAACX,IAAI,CAACY,EAAE,EAAE;MACZ,MAAMC,GAAG,GAAG,MAAMb,IAAI,CAACc,IAAI,CAAC,CAAC,CAACC,KAAK,CAAC,OAAO;QAAEC,KAAK,EAAEhB,IAAI,CAACiB;MAAW,CAAC,CAAC,CAAC;MACvE,MAAM,IAAIC,KAAK,CAAEL,GAAG,CAASG,KAAK,IAAI,4BAA4BhB,IAAI,CAACmB,MAAM,EAAE,CAAC;IAClF;IAEA,MAAMC,IAAI,GAAG,MAAMpB,IAAI,CAACc,IAAI,CAAC,CAAC;IAC9B,OAAQM,IAAI,CAASC,OAAO;EAC9B;;EAEA;AACF;AACA;EACE,MAAMC,WAAWA,CACfC,SAAiB,EACjBZ,OAAe,EACfa,SAA+B,EAC/BC,MAAoB,EACe;IACnC,MAAM1B,KAAK,GAAG,MAAM,IAAI,CAACH,QAAQ,CAAC,CAAC;IACnC,MAAMI,IAAI,GAAG,MAAMC,KAAK,CAAC,GAAG,IAAI,CAACN,SAAS,aAAa4B,SAAS,WAAW,EAAE;MAC3ErB,MAAM,EAAE,MAAM;MACdC,OAAO,EAAE;QACP,cAAc,EAAE,kBAAkB;QAClCC,aAAa,EAAE,UAAUL,KAAK;MAChC,CAAC;MACDM,IAAI,EAAEC,IAAI,CAACC,SAAS,CAAC;QAAEI,OAAO;QAAEe,SAAS,EAAE,IAAI;QAAEC,MAAM,EAAE;MAAa,CAAC,CAAC;MACxEF;IACF,CAAC,CAAC;IAEF,IAAI,CAACzB,IAAI,CAACY,EAAE,EAAE;MACZ,MAAMC,GAAG,GAAG,MAAMb,IAAI,CAACc,IAAI,CAAC,CAAC,CAACC,KAAK,CAAC,OAAO;QAAEC,KAAK,EAAEhB,IAAI,CAACiB;MAAW,CAAC,CAAC,CAAC;MACvE,MAAMW,QAAQ,GAAIf,GAAG,CAASG,KAAK,IAAI,2BAA2BhB,IAAI,CAACmB,MAAM,EAAE;MAC/EK,SAAS,CAACK,OAAO,GAAGD,QAAQ,CAAC;MAC7B,MAAM,IAAIV,KAAK,CAACU,QAAQ,CAAC;IAC3B;;IAEA;IACA,MAAME,MAAM,GAAG9B,IAAI,CAACK,IAAI,EAAE0B,SAAS,CAAC,CAAC;IACrC,IAAI,CAACD,MAAM,EAAE,MAAM,IAAIZ,KAAK,CAAC,kBAAkB,CAAC;IAEhD,MAAMc,OAAO,GAAG,IAAIC,WAAW,CAAC,CAAC;IACjC,IAAIC,MAAM,GAAG,EAAE;IACf,IAAIC,MAAgC,GAAG,IAAI;IAE3C,IAAI;MACF,OAAO,IAAI,EAAE;QACX,MAAM;UAAEC,IAAI;UAAEC;QAAM,CAAC,GAAG,MAAMP,MAAM,CAACQ,IAAI,CAAC,CAAC;QAC3C,IAAIF,IAAI,EAAE;QAEVF,MAAM,IAAIF,OAAO,CAACO,MAAM,CAACF,KAAK,EAAE;UAAEG,MAAM,EAAE;QAAK,CAAC,CAAC;QACjD,MAAMC,KAAK,GAAGP,MAAM,CAACQ,KAAK,CAAC,IAAI,CAAC;QAChCR,MAAM,GAAGO,KAAK,CAACE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;;QAE5B,KAAK,MAAMC,IAAI,IAAIH,KAAK,EAAE;UACxB,IAAI,CAACG,IAAI,CAACC,UAAU,CAAC,QAAQ,CAAC,EAAE;UAChC,MAAM/B,IAAI,GAAG8B,IAAI,CAACE,KAAK,CAAC,CAAC,CAAC,CAACC,IAAI,CAAC,CAAC;UACjC,IAAI,CAACjC,IAAI,IAAIA,IAAI,KAAK,QAAQ,EAAE;UAEhC,IAAIkC,KAAU;UACd,IAAI;YAAEA,KAAK,GAAG1C,IAAI,CAAC2C,KAAK,CAACnC,IAAI,CAAC;UAAE,CAAC,CAAC,MAAM;YAAE;UAAU;UAEpD,QAAQkC,KAAK,CAACE,IAAI;YAChB,KAAK,MAAM;cACT1B,SAAS,CAAC2B,MAAM,GAAGH,KAAK,CAACI,IAAI,CAAC;cAC9B;YACF,KAAK,YAAY;cACf5B,SAAS,CAAC6B,WAAW,GAAGL,KAAK,CAACM,IAAI,EAAEN,KAAK,CAACO,KAAK,CAAC;cAChD;YACF,KAAK,aAAa;cAChB/B,SAAS,CAACgC,YAAY,GAAGR,KAAK,CAACM,IAAI,EAAEN,KAAK,CAACS,OAAO,EAAET,KAAK,CAACb,MAAM,CAAC;cACjE;YACF,KAAK,eAAe;cAClBX,SAAS,CAACkC,cAAc,GAAGV,KAAK,CAACM,IAAI,EAAEN,KAAK,CAACW,QAAQ,CAAC;cACtD;YACF,KAAK,OAAO;cACV,IAAIX,KAAK,CAACY,KAAK,EAAE;gBACfpC,SAAS,CAACqC,OAAO,GACf;kBACEN,KAAK,EAAEP,KAAK,CAACY,KAAK,CAACE,YAAY;kBAC/BC,MAAM,EAAEf,KAAK,CAACY,KAAK,CAACI,aAAa;kBACjCC,SAAS,EAAEjB,KAAK,CAACY,KAAK,CAACM,iBAAiB,IAAI,CAAC;kBAC7CC,aAAa,EAAEnB,KAAK,CAACY,KAAK,CAACQ,qBAAqB,IAAI;gBACtD,CAAC,EACDpB,KAAK,CAACY,KAAK,CAACS,QAAQ,IAAI,CAC1B,CAAC;cACH;cACA;YACF,KAAK,MAAM;cACT7C,SAAS,CAAC8C,MAAM,GAAGtB,KAAK,CAACuB,cAAc,CAAC;cACxC;YACF,KAAK,OAAO;cACV/C,SAAS,CAACK,OAAO,GAAGmB,KAAK,CAAChC,KAAK,CAAC;cAChC;UACJ;QACF;MACF;IACF,CAAC,SAAS;MACRc,MAAM,CAAC0C,WAAW,CAAC,CAAC;IACtB;IAEA,OAAOrC,MAAM;EACf;;EAEA;AACF;AACA;EACE,MAAMsC,YAAYA,CAACjE,OAAe,EAAEV,IAA2C,EAA0B;IACvG,MAAMC,KAAK,GAAG,MAAM,IAAI,CAACH,QAAQ,CAAC,CAAC;IACnC,MAAM8E,MAAM,GAAG,IAAIC,eAAe,CAAC;MAAEC,QAAQ,EAAEpE;IAAQ,CAAC,CAAC;IACzD,IAAIV,IAAI,EAAE+E,KAAK,EAAEH,MAAM,CAACI,GAAG,CAAC,OAAO,EAAEC,MAAM,CAACjF,IAAI,CAAC+E,KAAK,CAAC,CAAC;IACxD,IAAI/E,IAAI,EAAEY,OAAO,EAAEgE,MAAM,CAACI,GAAG,CAAC,SAAS,EAAEhF,IAAI,CAACY,OAAO,CAAC;IAEtD,MAAMV,IAAI,GAAG,MAAMC,KAAK,CAAC,GAAG,IAAI,CAACN,SAAS,aAAa+E,MAAM,EAAE,EAAE;MAC/DvE,OAAO,EAAE;QAAEC,aAAa,EAAE,UAAUL,KAAK;MAAG;IAC9C,CAAC,CAAC;IAEF,IAAI,CAACC,IAAI,CAACY,EAAE,EAAE,OAAO,EAAE;IAEvB,MAAMQ,IAAI,GAAG,MAAMpB,IAAI,CAACc,IAAI,CAAC,CAAC;IAC9B,OAAQM,IAAI,CAAS4D,QAAQ,IAAI,EAAE;EACrC;;EAEA;AACF;AACA;EACE,MAAMC,UAAUA,CAAC1D,SAAiB,EAA+B;IAC/D,MAAMxB,KAAK,GAAG,MAAM,IAAI,CAACH,QAAQ,CAAC,CAAC;IACnC,MAAMI,IAAI,GAAG,MAAMC,KAAK,CAAC,GAAG,IAAI,CAACN,SAAS,aAAa4B,SAAS,EAAE,EAAE;MAClEpB,OAAO,EAAE;QAAEC,aAAa,EAAE,UAAUL,KAAK;MAAG;IAC9C,CAAC,CAAC;IAEF,IAAI,CAACC,IAAI,CAACY,EAAE,EAAE,OAAO,IAAI;IAEzB,MAAMQ,IAAI,GAAG,MAAMpB,IAAI,CAACc,IAAI,CAAC,CAAC;IAC9B,OAAQM,IAAI,CAASC,OAAO,IAAI,IAAI;EACtC;;EAEA;AACF;AACA;AACA;AACA;EACE,MAAM6D,WAAWA,CAAA,EAAqB;IACpC,IAAI;MACF;MACA,MAAMC,UAAU,GAAG,MAAMlF,KAAK,CAAC,GAAG,IAAI,CAACN,SAAS,SAAS,EAAE;QACzD8B,MAAM,EAAE2D,WAAW,CAACC,OAAO,CAAC,IAAI;MAClC,CAAC,CAAC;MACF,IAAI,CAACF,UAAU,CAACvE,EAAE,EAAE,OAAO,KAAK;;MAEhC;MACA,MAAM0E,SAAS,GAAG,MAAMrF,KAAK,CAAC,GAAG,IAAI,CAACN,SAAS,mCAAmC,EAAE;QAClF8B,MAAM,EAAE2D,WAAW,CAACC,OAAO,CAAC,IAAI;MAClC,CAAC,CAAC;MACF;MACA;MACA;MACA,OAAOC,SAAS,CAACnE,MAAM,KAAK,GAAG,IAAImE,SAAS,CAACnE,MAAM,KAAK,GAAG;IAC7D,CAAC,CAAC,MAAM;MACN,OAAO,KAAK;IACd;EACF;AACF","ignoreList":[]}

package/dist/cli/services/session-persistence.js

@@ -5,8 +5,9 @@
  * All consumers should import from agent-loop.ts (re-export facade).
  */
 
-import { readFileSync, existsSync, mkdirSync, writeFileSync, readdirSync, appendFileSync } from "fs";
+import { readFileSync, existsSync, mkdirSync, writeFileSync, readdirSync, appendFileSync, renameSync } from "fs";
 import { join } from "path";
+import { randomBytes } from "crypto";
 import { getModel } from "./model-manager.js";
 import { SESSIONS_DIR, APP_DATA_DIR, ensureDataDir } from "./paths.js";
 function ensureSessionsDir() {
@@ -15,6 +16,13 @@ function ensureSessionsDir() {
     recursive: true
   });
 }
+
+/** Write to temp file then rename — atomic on POSIX, prevents corruption from concurrent writes or crashes. */
+function atomicWrite(filePath, data) {
+  const tmp = filePath + `.tmp-${randomBytes(4).toString("hex")}`;
+  writeFileSync(tmp, data, "utf-8");
+  renameSync(tmp, filePath);
+}
 export function saveSession(messages, sessionId) {
   ensureSessionsDir();
   const id = sessionId || `session-${Date.now()}`;
@@ -31,7 +39,7 @@ export function saveSession(messages, sessionId) {
     meta,
     messages
   }, null, 2);
-  writeFileSync(join(SESSIONS_DIR, `${id}.json`), data, "utf-8");
+  atomicWrite(join(SESSIONS_DIR, `${id}.json`), data);
   logSessionHistory(meta);
   return id;
 }
@@ -76,14 +84,14 @@ export function findLatestSessionForCwd() {
   return sessions.find(s => s.cwd === cwd) || null;
 }
 export function updateSessionMeta(sessionId, updates) {
-  const path = join(SESSIONS_DIR, `${sessionId}.json`);
-  if (!existsSync(path)) return;
+  const filePath = join(SESSIONS_DIR, `${sessionId}.json`);
+  if (!existsSync(filePath)) return;
   try {
-    const data = JSON.parse(readFileSync(path, "utf-8"));
+    const data = JSON.parse(readFileSync(filePath, "utf-8"));
     if (data.meta) {
       Object.assign(data.meta, updates);
       data.meta.updatedAt = new Date().toISOString();
-      writeFileSync(path, JSON.stringify(data, null, 2), "utf-8");
+      atomicWrite(filePath, JSON.stringify(data, null, 2));
     }
   } catch {/* best effort */}
 }

package/dist/cli/services/session-persistence.js.map

@@ -1 +1 @@
-{"version":3,"file":"session-persistence.js","names":["readFileSync","existsSync","mkdirSync","writeFileSync","readdirSync","appendFileSync","join","getModel","SESSIONS_DIR","APP_DATA_DIR","ensureDataDir","ensureSessionsDir","recursive","saveSession","messages","sessionId","id","Date","now","meta","title","extractSessionTitle","model","messageCount","length","createdAt","toISOString","updatedAt","cwd","process","data","JSON","stringify","logSessionHistory","loadSession","path","parse","listSessions","limit","files","filter","f","endsWith","sort","reverse","slice","sessions","push","HISTORY_FILE","entry","display","project","timestamp","findLatestSessionForCwd","find","s","updateSessionMeta","updates","Object","assign","m","role","content","Array","isArray","block","text"],"sources":["../../../src/cli/services/session-persistence.ts"],"sourcesContent":["/**\n * Session Persistence — save/load conversations to disk\n *\n * Extracted from agent-loop.ts for single-responsibility.\n * All consumers should import from agent-loop.ts (re-export facade).\n */\n\nimport type Anthropic from \"@anthropic-ai/sdk\";\nimport { readFileSync, existsSync, mkdirSync, writeFileSync, readdirSync, appendFileSync } from \"fs\";\nimport { join } from \"path\";\nimport { getModel } from \"./model-manager.js\";\nimport { SESSIONS_DIR, APP_DATA_DIR, ensureDataDir } from \"./paths.js\";\n\nfunction ensureSessionsDir(): void {\n  ensureDataDir();\n  if (!existsSync(SESSIONS_DIR)) mkdirSync(SESSIONS_DIR, { recursive: true });\n}\n\nexport interface SessionMeta {\n  id: string;\n  title: string;\n  model: string;\n  messageCount: number;\n  createdAt: string;\n  updatedAt: string;\n  cwd?: string;\n  serverSessionId?: string;  // links to server session (unified session architecture)\n  synced?: boolean;          // true if persisted in DB via session API\n}\n\nexport function saveSession(\n  messages: Anthropic.MessageParam[],\n  sessionId?: string\n): string {\n  ensureSessionsDir();\n  const id = sessionId || `session-${Date.now()}`;\n  const meta: SessionMeta = {\n    id,\n    title: extractSessionTitle(messages),\n    model: getModel(),\n    messageCount: messages.length,\n    createdAt: new Date().toISOString(),\n    updatedAt: new Date().toISOString(),\n    cwd: process.cwd(),\n  };\n  const data = JSON.stringify({ meta, messages }, null, 2);\n  writeFileSync(join(SESSIONS_DIR, `${id}.json`), data, \"utf-8\");\n  logSessionHistory(meta);\n  return id;\n}\n\nexport function loadSession(sessionId: string): { meta: SessionMeta; messages: Anthropic.MessageParam[] } | null {\n  const path = join(SESSIONS_DIR, `${sessionId}.json`);\n  if (!existsSync(path)) return null;\n  try {\n    return JSON.parse(readFileSync(path, \"utf-8\"));\n  } catch { return null; }\n}\n\nexport function listSessions(limit = 20): SessionMeta[] {\n  ensureSessionsDir();\n  const files = readdirSync(SESSIONS_DIR)\n    .filter((f) => f.endsWith(\".json\"))\n    .sort()\n    .reverse()\n    .slice(0, limit);\n  const sessions: SessionMeta[] = [];\n  for (const f of files) {\n    try {\n      const data = JSON.parse(readFileSync(join(SESSIONS_DIR, f), \"utf-8\"));\n      if (data.meta) sessions.push(data.meta);\n    } catch { /* skip corrupted */ }\n  }\n  return sessions;\n}\n\nconst HISTORY_FILE = join(APP_DATA_DIR, \"history.jsonl\");\n\nfunction logSessionHistory(meta: SessionMeta): void {\n  try {\n    ensureDataDir();\n    const entry = {\n      display: meta.title,\n      project: meta.cwd || process.cwd(),\n      timestamp: meta.updatedAt,\n      sessionId: meta.id,\n      model: meta.model,\n    };\n    appendFileSync(HISTORY_FILE, JSON.stringify(entry) + \"\\n\");\n  } catch { /* best effort */ }\n}\n\nexport function findLatestSessionForCwd(): SessionMeta | null {\n  const cwd = process.cwd();\n  const sessions = listSessions(100);\n  return sessions.find(s => s.cwd === cwd) || null;\n}\n\nexport function updateSessionMeta(sessionId: string, updates: Partial<SessionMeta>): void {\n  const path = join(SESSIONS_DIR, `${sessionId}.json`);\n  if (!existsSync(path)) return;\n  try {\n    const data = JSON.parse(readFileSync(path, \"utf-8\"));\n    if (data.meta) {\n      Object.assign(data.meta, updates);\n      data.meta.updatedAt = new Date().toISOString();\n      writeFileSync(path, JSON.stringify(data, null, 2), \"utf-8\");\n    }\n  } catch { /* best effort */ }\n}\n\nfunction extractSessionTitle(messages: Anthropic.MessageParam[]): string {\n  // Use first user message as title (truncated)\n  for (const m of messages) {\n    if (m.role === \"user\" && typeof m.content === \"string\") {\n      return m.content.slice(0, 60) + (m.content.length > 60 ? \"...\" : \"\");\n    }\n    if (m.role === \"user\" && Array.isArray(m.content)) {\n      for (const block of m.content) {\n        if (\"text\" in block && typeof block.text === \"string\") {\n          return block.text.slice(0, 60) + (block.text.length > 60 ? \"...\" : \"\");\n        }\n      }\n    }\n  }\n  return \"Untitled session\";\n}\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;;AAGA,SAASA,YAAY,EAAEC,UAAU,EAAEC,SAAS,EAAEC,aAAa,EAAEC,WAAW,EAAEC,cAAc,QAAQ,IAAI;AACpG,SAASC,IAAI,QAAQ,MAAM;AAC3B,SAASC,QAAQ,QAAQ,oBAAoB;AAC7C,SAASC,YAAY,EAAEC,YAAY,EAAEC,aAAa,QAAQ,YAAY;AAEtE,SAASC,iBAAiBA,CAAA,EAAS;EACjCD,aAAa,CAAC,CAAC;EACf,IAAI,CAACT,UAAU,CAACO,YAAY,CAAC,EAAEN,SAAS,CAACM,YAAY,EAAE;IAAEI,SAAS,EAAE;EAAK,CAAC,CAAC;AAC7E;AAcA,OAAO,SAASC,WAAWA,CACzBC,QAAkC,EAClCC,SAAkB,EACV;EACRJ,iBAAiB,CAAC,CAAC;EACnB,MAAMK,EAAE,GAAGD,SAAS,IAAI,WAAWE,IAAI,CAACC,GAAG,CAAC,CAAC,EAAE;EAC/C,MAAMC,IAAiB,GAAG;IACxBH,EAAE;IACFI,KAAK,EAAEC,mBAAmB,CAACP,QAAQ,CAAC;IACpCQ,KAAK,EAAEf,QAAQ,CAAC,CAAC;IACjBgB,YAAY,EAAET,QAAQ,CAACU,MAAM;IAC7BC,SAAS,EAAE,IAAIR,IAAI,CAAC,CAAC,CAACS,WAAW,CAAC,CAAC;IACnCC,SAAS,EAAE,IAAIV,IAAI,CAAC,CAAC,CAACS,WAAW,CAAC,CAAC;IACnCE,GAAG,EAAEC,OAAO,CAACD,GAAG,CAAC;EACnB,CAAC;EACD,MAAME,IAAI,GAAGC,IAAI,CAACC,SAAS,CAAC;IAAEb,IAAI;IAAEL;EAAS,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;EACxDX,aAAa,CAACG,IAAI,CAACE,YAAY,EAAE,GAAGQ,EAAE,OAAO,CAAC,EAAEc,IAAI,EAAE,OAAO,CAAC;EAC9DG,iBAAiB,CAACd,IAAI,CAAC;EACvB,OAAOH,EAAE;AACX;AAEA,OAAO,SAASkB,WAAWA,CAACnB,SAAiB,EAAoE;EAC/G,MAAMoB,IAAI,GAAG7B,IAAI,CAACE,YAAY,EAAE,GAAGO,SAAS,OAAO,CAAC;EACpD,IAAI,CAACd,UAAU,CAACkC,IAAI,CAAC,EAAE,OAAO,IAAI;EAClC,IAAI;IACF,OAAOJ,IAAI,CAACK,KAAK,CAACpC,YAAY,CAACmC,IAAI,EAAE,OAAO,CAAC,CAAC;EAChD,CAAC,CAAC,MAAM;IAAE,OAAO,IAAI;EAAE;AACzB;AAEA,OAAO,SAASE,YAAYA,CAACC,KAAK,GAAG,EAAE,EAAiB;EACtD3B,iBAAiB,CAAC,CAAC;EACnB,MAAM4B,KAAK,GAAGnC,WAAW,CAACI,YAAY,CAAC,CACpCgC,MAAM,CAAEC,CAAC,IAAKA,CAAC,CAACC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAClCC,IAAI,CAAC,CAAC,CACNC,OAAO,CAAC,CAAC,CACTC,KAAK,CAAC,CAAC,EAAEP,KAAK,CAAC;EAClB,MAAMQ,QAAuB,GAAG,EAAE;EAClC,KAAK,MAAML,CAAC,IAAIF,KAAK,EAAE;IACrB,IAAI;MACF,MAAMT,IAAI,GAAGC,IAAI,CAACK,KAAK,CAACpC,YAAY,CAACM,IAAI,CAACE,YAAY,EAAEiC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;MACrE,IAAIX,IAAI,CAACX,IAAI,EAAE2B,QAAQ,CAACC,IAAI,CAACjB,IAAI,CAACX,IAAI,CAAC;IACzC,CAAC,CAAC,MAAM,CAAE;EACZ;EACA,OAAO2B,QAAQ;AACjB;AAEA,MAAME,YAAY,GAAG1C,IAAI,CAACG,YAAY,EAAE,eAAe,CAAC;AAExD,SAASwB,iBAAiBA,CAACd,IAAiB,EAAQ;EAClD,IAAI;IACFT,aAAa,CAAC,CAAC;IACf,MAAMuC,KAAK,GAAG;MACZC,OAAO,EAAE/B,IAAI,CAACC,KAAK;MACnB+B,OAAO,EAAEhC,IAAI,CAACS,GAAG,IAAIC,OAAO,CAACD,GAAG,CAAC,CAAC;MAClCwB,SAAS,EAAEjC,IAAI,CAACQ,SAAS;MACzBZ,SAAS,EAAEI,IAAI,CAACH,EAAE;MAClBM,KAAK,EAAEH,IAAI,CAACG;IACd,CAAC;IACDjB,cAAc,CAAC2C,YAAY,EAAEjB,IAAI,CAACC,SAAS,CAACiB,KAAK,CAAC,GAAG,IAAI,CAAC;EAC5D,CAAC,CAAC,MAAM,CAAE;AACZ;AAEA,OAAO,SAASI,uBAAuBA,CAAA,EAAuB;EAC5D,MAAMzB,GAAG,GAAGC,OAAO,CAACD,GAAG,CAAC,CAAC;EACzB,MAAMkB,QAAQ,GAAGT,YAAY,CAAC,GAAG,CAAC;EAClC,OAAOS,QAAQ,CAACQ,IAAI,CAACC,CAAC,IAAIA,CAAC,CAAC3B,GAAG,KAAKA,GAAG,CAAC,IAAI,IAAI;AAClD;AAEA,OAAO,SAAS4B,iBAAiBA,CAACzC,SAAiB,EAAE0C,OAA6B,EAAQ;EACxF,MAAMtB,IAAI,GAAG7B,IAAI,CAACE,YAAY,EAAE,GAAGO,SAAS,OAAO,CAAC;EACpD,IAAI,CAACd,UAAU,CAACkC,IAAI,CAAC,EAAE;EACvB,IAAI;IACF,MAAML,IAAI,GAAGC,IAAI,CAACK,KAAK,CAACpC,YAAY,CAACmC,IAAI,EAAE,OAAO,CAAC,CAAC;IACpD,IAAIL,IAAI,CAACX,IAAI,EAAE;MACbuC,MAAM,CAACC,MAAM,CAAC7B,IAAI,CAACX,IAAI,EAAEsC,OAAO,CAAC;MACjC3B,IAAI,CAACX,IAAI,CAACQ,SAAS,GAAG,IAAIV,IAAI,CAAC,CAAC,CAACS,WAAW,CAAC,CAAC;MAC9CvB,aAAa,CAACgC,IAAI,EAAEJ,IAAI,CAACC,SAAS,CAACF,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC;IAC7D;EACF,CAAC,CAAC,MAAM,CAAE;AACZ;AAEA,SAAST,mBAAmBA,CAACP,QAAkC,EAAU;EACvE;EACA,KAAK,MAAM8C,CAAC,IAAI9C,QAAQ,EAAE;IACxB,IAAI8C,CAAC,CAACC,IAAI,KAAK,MAAM,IAAI,OAAOD,CAAC,CAACE,OAAO,KAAK,QAAQ,EAAE;MACtD,OAAOF,CAAC,CAACE,OAAO,CAACjB,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAIe,CAAC,CAACE,OAAO,CAACtC,MAAM,GAAG,EAAE,GAAG,KAAK,GAAG,EAAE,CAAC;IACtE;IACA,IAAIoC,CAAC,CAACC,IAAI,KAAK,MAAM,IAAIE,KAAK,CAACC,OAAO,CAACJ,CAAC,CAACE,OAAO,CAAC,EAAE;MACjD,KAAK,MAAMG,KAAK,IAAIL,CAAC,CAACE,OAAO,EAAE;QAC7B,IAAI,MAAM,IAAIG,KAAK,IAAI,OAAOA,KAAK,CAACC,IAAI,KAAK,QAAQ,EAAE;UACrD,OAAOD,KAAK,CAACC,IAAI,CAACrB,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAIoB,KAAK,CAACC,IAAI,CAAC1C,MAAM,GAAG,EAAE,GAAG,KAAK,GAAG,EAAE,CAAC;QACxE;MACF;IACF;EACF;EACA,OAAO,kBAAkB;AAC3B","ignoreList":[]}
+{"version":3,"file":"session-persistence.js","names":["readFileSync","existsSync","mkdirSync","writeFileSync","readdirSync","appendFileSync","renameSync","join","randomBytes","getModel","SESSIONS_DIR","APP_DATA_DIR","ensureDataDir","ensureSessionsDir","recursive","atomicWrite","filePath","data","tmp","toString","saveSession","messages","sessionId","id","Date","now","meta","title","extractSessionTitle","model","messageCount","length","createdAt","toISOString","updatedAt","cwd","process","JSON","stringify","logSessionHistory","loadSession","path","parse","listSessions","limit","files","filter","f","endsWith","sort","reverse","slice","sessions","push","HISTORY_FILE","entry","display","project","timestamp","findLatestSessionForCwd","find","s","updateSessionMeta","updates","Object","assign","m","role","content","Array","isArray","block","text"],"sources":["../../../src/cli/services/session-persistence.ts"],"sourcesContent":["/**\n * Session Persistence — save/load conversations to disk\n *\n * Extracted from agent-loop.ts for single-responsibility.\n * All consumers should import from agent-loop.ts (re-export facade).\n */\n\nimport type Anthropic from \"@anthropic-ai/sdk\";\nimport { readFileSync, existsSync, mkdirSync, writeFileSync, readdirSync, appendFileSync, renameSync } from \"fs\";\nimport { join } from \"path\";\nimport { randomBytes } from \"crypto\";\nimport { getModel } from \"./model-manager.js\";\nimport { SESSIONS_DIR, APP_DATA_DIR, ensureDataDir } from \"./paths.js\";\n\nfunction ensureSessionsDir(): void {\n  ensureDataDir();\n  if (!existsSync(SESSIONS_DIR)) mkdirSync(SESSIONS_DIR, { recursive: true });\n}\n\n/** Write to temp file then rename — atomic on POSIX, prevents corruption from concurrent writes or crashes. */\nfunction atomicWrite(filePath: string, data: string): void {\n  const tmp = filePath + `.tmp-${randomBytes(4).toString(\"hex\")}`;\n  writeFileSync(tmp, data, \"utf-8\");\n  renameSync(tmp, filePath);\n}\n\nexport interface SessionMeta {\n  id: string;\n  title: string;\n  model: string;\n  messageCount: number;\n  createdAt: string;\n  updatedAt: string;\n  cwd?: string;\n  serverSessionId?: string;  // links to server session (unified session architecture)\n  synced?: boolean;          // true if persisted in DB via session API\n}\n\nexport function saveSession(\n  messages: Anthropic.MessageParam[],\n  sessionId?: string\n): string {\n  ensureSessionsDir();\n  const id = sessionId || `session-${Date.now()}`;\n  const meta: SessionMeta = {\n    id,\n    title: extractSessionTitle(messages),\n    model: getModel(),\n    messageCount: messages.length,\n    createdAt: new Date().toISOString(),\n    updatedAt: new Date().toISOString(),\n    cwd: process.cwd(),\n  };\n  const data = JSON.stringify({ meta, messages }, null, 2);\n  atomicWrite(join(SESSIONS_DIR, `${id}.json`), data);\n  logSessionHistory(meta);\n  return id;\n}\n\nexport function loadSession(sessionId: string): { meta: SessionMeta; messages: Anthropic.MessageParam[] } | null {\n  const path = join(SESSIONS_DIR, `${sessionId}.json`);\n  if (!existsSync(path)) return null;\n  try {\n    return JSON.parse(readFileSync(path, \"utf-8\"));\n  } catch { return null; }\n}\n\nexport function listSessions(limit = 20): SessionMeta[] {\n  ensureSessionsDir();\n  const files = readdirSync(SESSIONS_DIR)\n    .filter((f) => f.endsWith(\".json\"))\n    .sort()\n    .reverse()\n    .slice(0, limit);\n  const sessions: SessionMeta[] = [];\n  for (const f of files) {\n    try {\n      const data = JSON.parse(readFileSync(join(SESSIONS_DIR, f), \"utf-8\"));\n      if (data.meta) sessions.push(data.meta);\n    } catch { /* skip corrupted */ }\n  }\n  return sessions;\n}\n\nconst HISTORY_FILE = join(APP_DATA_DIR, \"history.jsonl\");\n\nfunction logSessionHistory(meta: SessionMeta): void {\n  try {\n    ensureDataDir();\n    const entry = {\n      display: meta.title,\n      project: meta.cwd || process.cwd(),\n      timestamp: meta.updatedAt,\n      sessionId: meta.id,\n      model: meta.model,\n    };\n    appendFileSync(HISTORY_FILE, JSON.stringify(entry) + \"\\n\");\n  } catch { /* best effort */ }\n}\n\nexport function findLatestSessionForCwd(): SessionMeta | null {\n  const cwd = process.cwd();\n  const sessions = listSessions(100);\n  return sessions.find(s => s.cwd === cwd) || null;\n}\n\nexport function updateSessionMeta(sessionId: string, updates: Partial<SessionMeta>): void {\n  const filePath = join(SESSIONS_DIR, `${sessionId}.json`);\n  if (!existsSync(filePath)) return;\n  try {\n    const data = JSON.parse(readFileSync(filePath, \"utf-8\"));\n    if (data.meta) {\n      Object.assign(data.meta, updates);\n      data.meta.updatedAt = new Date().toISOString();\n      atomicWrite(filePath, JSON.stringify(data, null, 2));\n    }\n  } catch { /* best effort */ }\n}\n\nfunction extractSessionTitle(messages: Anthropic.MessageParam[]): string {\n  // Use first user message as title (truncated)\n  for (const m of messages) {\n    if (m.role === \"user\" && typeof m.content === \"string\") {\n      return m.content.slice(0, 60) + (m.content.length > 60 ? \"...\" : \"\");\n    }\n    if (m.role === \"user\" && Array.isArray(m.content)) {\n      for (const block of m.content) {\n        if (\"text\" in block && typeof block.text === \"string\") {\n          return block.text.slice(0, 60) + (block.text.length > 60 ? \"...\" : \"\");\n        }\n      }\n    }\n  }\n  return \"Untitled session\";\n}\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;;AAGA,SAASA,YAAY,EAAEC,UAAU,EAAEC,SAAS,EAAEC,aAAa,EAAEC,WAAW,EAAEC,cAAc,EAAEC,UAAU,QAAQ,IAAI;AAChH,SAASC,IAAI,QAAQ,MAAM;AAC3B,SAASC,WAAW,QAAQ,QAAQ;AACpC,SAASC,QAAQ,QAAQ,oBAAoB;AAC7C,SAASC,YAAY,EAAEC,YAAY,EAAEC,aAAa,QAAQ,YAAY;AAEtE,SAASC,iBAAiBA,CAAA,EAAS;EACjCD,aAAa,CAAC,CAAC;EACf,IAAI,CAACX,UAAU,CAACS,YAAY,CAAC,EAAER,SAAS,CAACQ,YAAY,EAAE;IAAEI,SAAS,EAAE;EAAK,CAAC,CAAC;AAC7E;;AAEA;AACA,SAASC,WAAWA,CAACC,QAAgB,EAAEC,IAAY,EAAQ;EACzD,MAAMC,GAAG,GAAGF,QAAQ,GAAG,QAAQR,WAAW,CAAC,CAAC,CAAC,CAACW,QAAQ,CAAC,KAAK,CAAC,EAAE;EAC/DhB,aAAa,CAACe,GAAG,EAAED,IAAI,EAAE,OAAO,CAAC;EACjCX,UAAU,CAACY,GAAG,EAAEF,QAAQ,CAAC;AAC3B;AAcA,OAAO,SAASI,WAAWA,CACzBC,QAAkC,EAClCC,SAAkB,EACV;EACRT,iBAAiB,CAAC,CAAC;EACnB,MAAMU,EAAE,GAAGD,SAAS,IAAI,WAAWE,IAAI,CAACC,GAAG,CAAC,CAAC,EAAE;EAC/C,MAAMC,IAAiB,GAAG;IACxBH,EAAE;IACFI,KAAK,EAAEC,mBAAmB,CAACP,QAAQ,CAAC;IACpCQ,KAAK,EAAEpB,QAAQ,CAAC,CAAC;IACjBqB,YAAY,EAAET,QAAQ,CAACU,MAAM;IAC7BC,SAAS,EAAE,IAAIR,IAAI,CAAC,CAAC,CAACS,WAAW,CAAC,CAAC;IACnCC,SAAS,EAAE,IAAIV,IAAI,CAAC,CAAC,CAACS,WAAW,CAAC,CAAC;IACnCE,GAAG,EAAEC,OAAO,CAACD,GAAG,CAAC;EACnB,CAAC;EACD,MAAMlB,IAAI,GAAGoB,IAAI,CAACC,SAAS,CAAC;IAAEZ,IAAI;IAAEL;EAAS,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;EACxDN,WAAW,CAACR,IAAI,CAACG,YAAY,EAAE,GAAGa,EAAE,OAAO,CAAC,EAAEN,IAAI,CAAC;EACnDsB,iBAAiB,CAACb,IAAI,CAAC;EACvB,OAAOH,EAAE;AACX;AAEA,OAAO,SAASiB,WAAWA,CAAClB,SAAiB,EAAoE;EAC/G,MAAMmB,IAAI,GAAGlC,IAAI,CAACG,YAAY,EAAE,GAAGY,SAAS,OAAO,CAAC;EACpD,IAAI,CAACrB,UAAU,CAACwC,IAAI,CAAC,EAAE,OAAO,IAAI;EAClC,IAAI;IACF,OAAOJ,IAAI,CAACK,KAAK,CAAC1C,YAAY,CAACyC,IAAI,EAAE,OAAO,CAAC,CAAC;EAChD,CAAC,CAAC,MAAM;IAAE,OAAO,IAAI;EAAE;AACzB;AAEA,OAAO,SAASE,YAAYA,CAACC,KAAK,GAAG,EAAE,EAAiB;EACtD/B,iBAAiB,CAAC,CAAC;EACnB,MAAMgC,KAAK,GAAGzC,WAAW,CAACM,YAAY,CAAC,CACpCoC,MAAM,CAAEC,CAAC,IAAKA,CAAC,CAACC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAClCC,IAAI,CAAC,CAAC,CACNC,OAAO,CAAC,CAAC,CACTC,KAAK,CAAC,CAAC,EAAEP,KAAK,CAAC;EAClB,MAAMQ,QAAuB,GAAG,EAAE;EAClC,KAAK,MAAML,CAAC,IAAIF,KAAK,EAAE;IACrB,IAAI;MACF,MAAM5B,IAAI,GAAGoB,IAAI,CAACK,KAAK,CAAC1C,YAAY,CAACO,IAAI,CAACG,YAAY,EAAEqC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;MACrE,IAAI9B,IAAI,CAACS,IAAI,EAAE0B,QAAQ,CAACC,IAAI,CAACpC,IAAI,CAACS,IAAI,CAAC;IACzC,CAAC,CAAC,MAAM,CAAE;EACZ;EACA,OAAO0B,QAAQ;AACjB;AAEA,MAAME,YAAY,GAAG/C,IAAI,CAACI,YAAY,EAAE,eAAe,CAAC;AAExD,SAAS4B,iBAAiBA,CAACb,IAAiB,EAAQ;EAClD,IAAI;IACFd,aAAa,CAAC,CAAC;IACf,MAAM2C,KAAK,GAAG;MACZC,OAAO,EAAE9B,IAAI,CAACC,KAAK;MACnB8B,OAAO,EAAE/B,IAAI,CAACS,GAAG,IAAIC,OAAO,CAACD,GAAG,CAAC,CAAC;MAClCuB,SAAS,EAAEhC,IAAI,CAACQ,SAAS;MACzBZ,SAAS,EAAEI,IAAI,CAACH,EAAE;MAClBM,KAAK,EAAEH,IAAI,CAACG;IACd,CAAC;IACDxB,cAAc,CAACiD,YAAY,EAAEjB,IAAI,CAACC,SAAS,CAACiB,KAAK,CAAC,GAAG,IAAI,CAAC;EAC5D,CAAC,CAAC,MAAM,CAAE;AACZ;AAEA,OAAO,SAASI,uBAAuBA,CAAA,EAAuB;EAC5D,MAAMxB,GAAG,GAAGC,OAAO,CAACD,GAAG,CAAC,CAAC;EACzB,MAAMiB,QAAQ,GAAGT,YAAY,CAAC,GAAG,CAAC;EAClC,OAAOS,QAAQ,CAACQ,IAAI,CAACC,CAAC,IAAIA,CAAC,CAAC1B,GAAG,KAAKA,GAAG,CAAC,IAAI,IAAI;AAClD;AAEA,OAAO,SAAS2B,iBAAiBA,CAACxC,SAAiB,EAAEyC,OAA6B,EAAQ;EACxF,MAAM/C,QAAQ,GAAGT,IAAI,CAACG,YAAY,EAAE,GAAGY,SAAS,OAAO,CAAC;EACxD,IAAI,CAACrB,UAAU,CAACe,QAAQ,CAAC,EAAE;EAC3B,IAAI;IACF,MAAMC,IAAI,GAAGoB,IAAI,CAACK,KAAK,CAAC1C,YAAY,CAACgB,QAAQ,EAAE,OAAO,CAAC,CAAC;IACxD,IAAIC,IAAI,CAACS,IAAI,EAAE;MACbsC,MAAM,CAACC,MAAM,CAAChD,IAAI,CAACS,IAAI,EAAEqC,OAAO,CAAC;MACjC9C,IAAI,CAACS,IAAI,CAACQ,SAAS,GAAG,IAAIV,IAAI,CAAC,CAAC,CAACS,WAAW,CAAC,CAAC;MAC9ClB,WAAW,CAACC,QAAQ,EAAEqB,IAAI,CAACC,SAAS,CAACrB,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACtD;EACF,CAAC,CAAC,MAAM,CAAE;AACZ;AAEA,SAASW,mBAAmBA,CAACP,QAAkC,EAAU;EACvE;EACA,KAAK,MAAM6C,CAAC,IAAI7C,QAAQ,EAAE;IACxB,IAAI6C,CAAC,CAACC,IAAI,KAAK,MAAM,IAAI,OAAOD,CAAC,CAACE,OAAO,KAAK,QAAQ,EAAE;MACtD,OAAOF,CAAC,CAACE,OAAO,CAACjB,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAIe,CAAC,CAACE,OAAO,CAACrC,MAAM,GAAG,EAAE,GAAG,KAAK,GAAG,EAAE,CAAC;IACtE;IACA,IAAImC,CAAC,CAACC,IAAI,KAAK,MAAM,IAAIE,KAAK,CAACC,OAAO,CAACJ,CAAC,CAACE,OAAO,CAAC,EAAE;MACjD,KAAK,MAAMG,KAAK,IAAIL,CAAC,CAACE,OAAO,EAAE;QAC7B,IAAI,MAAM,IAAIG,KAAK,IAAI,OAAOA,KAAK,CAACC,IAAI,KAAK,QAAQ,EAAE;UACrD,OAAOD,KAAK,CAACC,IAAI,CAACrB,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAIoB,KAAK,CAACC,IAAI,CAACzC,MAAM,GAAG,EAAE,GAAG,KAAK,GAAG,EAAE,CAAC;QACxE;MACF;IACF;EACF;EACA,OAAO,kBAAkB;AAC3B","ignoreList":[]}

package/dist/cli/setup/SetupApp.d.ts

@@ -1,8 +1,8 @@
 /**
  * Setup Wizard (Ink)
  *
- * Step-by-step wizard: detect CLIs → collect Supabase creds → collect Anthropic key
- * → pick CLIs to install → write configs + ~/.whale/config.json
+ * Detects installed MCP-compatible CLIs → registers whale-code as MCP server.
+ * No API keys needed — authentication is handled by `whale login` (browser OAuth).
  *
  * Usage: npx whale-code setup
  */