whale-code 6.5.5 → 6.5.7

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","names":["Server","StdioServerTransport","CallToolRequestSchema","ListToolsRequestSchema","createClient","createRequire","startUpdateLoop","resolveConfig","loadConfig","updateConfig","getValidToken","getStoresForUser","selectStore","SUPABASE_ANON_KEY","signInWithBrowser","LocalAgentConnection","initErrorLogger","setErrorLoggerUser","captureError","require","import","meta","url","PKG_VERSION","version","config","rawConfig","SUPABASE_URL","supabaseUrl","INITIAL_SUPABASE_KEY","supabaseKey","STORE_ID","storeId","IS_SERVICE_ROLE","process","env","SUPABASE_SERVICE_ROLE_KEY","USER_ID","user_id","USER_EMAIL","email","access_token","refresh_token","now","Math","floor","Date","expires_at","console","error","freshToken","store_id","e","message","isAuthenticated","supabase","auth","persistSession","autoRefreshToken","global","headers","Authorization","reloadConfig","getAuthToken","token","SERVER_URL","serverUrl","SESSION_ID","crypto","randomUUID","WHALE_LOGIN_TOOL","name","description","inputSchema","type","properties","WHALE_STATUS_TOOL","WHALE_STORES_TOOL","LOCAL_TOOLS","toolDefinitions","toolsLoadedAt","TOOL_CACHE_TTL","loadToolDefinitions","force","length","data","from","select","eq","neq","map","t","definition","input_schema","err","executeToolRemote","toolName","args","traceId","response","fetch","method","body","JSON","stringify","mode","tool_name","conversation_id","trace_id","userId","userEmail","source","result","json","success","handleWhaleLogin","platformUrl","onBrowserOpening","onWaitingForCallback","onExchangingCode","content","text","isError","tools","server","notification","cfg","msg","store_name","stores","s","id","Error","String","handleWhaleStatus","lines","push","exp","toISOString","join","handleWhaleStores","switchToId","target","find","active","slug","capabilities","setRequestHandler","remoteTools","allTools","request","params","toolArgs","arguments","effectiveStoreId","undefined","slice","localAgent","getOrCreateAgentApiKey","agent_api_key","action","scopes","key_type","key","key_value","api_key","getAgentWsUrl","base","replace","wsBase","startLocalAgent","apiKey","wsUrl","onConnected","onDisconnected","reason","onError","onLog","connect","main","serviceName","transport","catch","on","disconnect","severity","tags","setTimeout","exit"],"sources":["../src/index.ts"],"sourcesContent":["#!/usr/bin/env node\n/**\n * Whale Code MCP Server\n *\n * Thin proxy that connects any MCP client (Claude Code, Cursor, etc.)\n * to the WhaleTools platform.\n *\n * - Tool DEFINITIONS loaded from ai_tool_registry (database-driven)\n * - Tool EXECUTION proxied to the Fly.io server (server-driven)\n * - Auth via browser-based OAuth (`whale_login` tool) or env vars\n *\n * When tools change on the server, this MCP server automatically picks\n * them up — no code changes, no rebuild, no redeploy.\n */\n\nimport { Server } from \"@modelcontextprotocol/sdk/server/index.js\";\nimport { StdioServerTransport } from \"@modelcontextprotocol/sdk/server/stdio.js\";\nimport {\n  CallToolRequestSchema,\n  ListToolsRequestSchema,\n} from \"@modelcontextprotocol/sdk/types.js\";\nimport { createClient, type SupabaseClient } from \"@supabase/supabase-js\";\nimport { createRequire } from \"module\";\nimport { startUpdateLoop } from \"./updater.js\";\nimport { resolveConfig, loadConfig, updateConfig } from \"./cli/services/config-store.js\";\nimport { getValidToken, getStoresForUser, selectStore, createAuthenticatedClient, SUPABASE_URL as AUTH_SUPABASE_URL, SUPABASE_ANON_KEY } from \"./cli/services/auth-service.js\";\nimport { signInWithBrowser } from \"./cli/services/browser-auth.js\";\nimport { LocalAgentConnection } from \"./local-agent/connection.js\";\nimport { initErrorLogger, setErrorLoggerUser, captureError } from \"./cli/services/error-logger.js\";\n\nconst require = createRequire(import.meta.url);\nconst PKG_VERSION: string = require(\"../package.json\").version;\n\n// ============================================================================\n// CONFIGURATION — env vars → ~/.whaletools/session.json (set by `whale login`)\n// ============================================================================\n\nlet config = resolveConfig();\nlet rawConfig = loadConfig();\nconst SUPABASE_URL = config.supabaseUrl;\nlet INITIAL_SUPABASE_KEY = config.supabaseKey;\nlet STORE_ID = config.storeId;\nconst IS_SERVICE_ROLE = !!process.env.SUPABASE_SERVICE_ROLE_KEY;\n\n// User identity — loaded from config (set by `whale login`)\nlet USER_ID = rawConfig.user_id || null;\nlet USER_EMAIL = rawConfig.email || null;\n\n// ============================================================================\n// AUTH STATE — auto-refresh expired tokens before connecting\n// ============================================================================\n\n// If using a user JWT (not service role), check if it needs refreshing\nif (!IS_SERVICE_ROLE && rawConfig.access_token && rawConfig.refresh_token) {\n  const now = Math.floor(Date.now() / 1000);\n  if (!rawConfig.expires_at || rawConfig.expires_at - 300 < now) {\n    console.error(\"[MCP] Access token expired, refreshing...\");\n    try {\n      const freshToken = await getValidToken();\n      if (freshToken) {\n        INITIAL_SUPABASE_KEY = freshToken;\n        // Reload config to get updated values\n        rawConfig = loadConfig();\n        USER_ID = rawConfig.user_id || USER_ID;\n        USER_EMAIL = rawConfig.email || USER_EMAIL;\n        STORE_ID = rawConfig.store_id || STORE_ID;\n        console.error(\"[MCP] Token refreshed successfully\");\n      } else {\n        console.error(\"[MCP] Token refresh failed — run `whale login` to re-authenticate\");\n      }\n    } catch (e) {\n      console.error(\"[MCP] Token refresh error:\", (e as Error).message);\n    }\n  }\n}\n\nlet isAuthenticated = !!(SUPABASE_URL && INITIAL_SUPABASE_KEY);\nlet supabase: SupabaseClient | null = null;\n\nif (isAuthenticated) {\n  if (IS_SERVICE_ROLE) {\n    // Service role key — use directly as apiKey (full access)\n    supabase = createClient(SUPABASE_URL, INITIAL_SUPABASE_KEY, {\n      auth: { persistSession: false, autoRefreshToken: false },\n    });\n    if (!USER_ID) {\n      console.error(\"[MCP] WARNING: Using service role key without user login. Tools will work but store scoping is disabled.\");\n    }\n  } else {\n    // User JWT — use anon key as apiKey, pass JWT via Authorization header\n    supabase = createClient(SUPABASE_URL, SUPABASE_ANON_KEY, {\n      auth: { persistSession: false, autoRefreshToken: false },\n      global: { headers: { Authorization: `Bearer ${INITIAL_SUPABASE_KEY}` } },\n    });\n  }\n} else {\n  console.error(\"[MCP] Not authenticated. Use the whale_login tool to sign in, or run `whale login` in a terminal.\");\n}\n\n/** Reload config from disk and update in-memory state */\nfunction reloadConfig(): void {\n  config = resolveConfig();\n  rawConfig = loadConfig();\n  INITIAL_SUPABASE_KEY = config.supabaseKey;\n  STORE_ID = config.storeId;\n  USER_ID = rawConfig.user_id || null;\n  USER_EMAIL = rawConfig.email || null;\n\n  if (config.supabaseUrl && config.supabaseKey) {\n    supabase = createClient(config.supabaseUrl, config.supabaseKey);\n    isAuthenticated = true;\n  }\n}\n\n/** Get a fresh auth token — service role keys are static, JWTs auto-refresh */\nasync function getAuthToken(): Promise<string> {\n  if (IS_SERVICE_ROLE) return INITIAL_SUPABASE_KEY!;\n  // JWT user — refresh if needed\n  const token = await getValidToken();\n  return token || INITIAL_SUPABASE_KEY!;\n}\n\n// Fly.io server URL for tool execution\nconst SERVER_URL = config.serverUrl;\n\n// Session ID for tracing — links all tool calls in one conversation\nconst SESSION_ID = crypto.randomUUID();\n\n// ============================================================================\n// LOCAL TOOL DEFINITIONS (whale_login, whale_status, whale_stores)\n// ============================================================================\n\ninterface ToolDefinition {\n  name: string;\n  description: string;\n  inputSchema: {\n    type: \"object\";\n    properties: Record<string, any>;\n    required?: string[];\n  };\n}\n\nconst WHALE_LOGIN_TOOL: ToolDefinition = {\n  name: \"whale_login\",\n  description: \"Log in to your WhaleTools account. Opens a browser for secure authentication. Use this when you see 'not authenticated' errors.\",\n  inputSchema: { type: \"object\", properties: {} },\n};\n\nconst WHALE_STATUS_TOOL: ToolDefinition = {\n  name: \"whale_status\",\n  description: \"Check current authentication status, active store, and account info.\",\n  inputSchema: { type: \"object\", properties: {} },\n};\n\nconst WHALE_STORES_TOOL: ToolDefinition = {\n  name: \"whale_stores\",\n  description: \"List your stores or switch the active store.\",\n  inputSchema: {\n    type: \"object\",\n    properties: {\n      store_id: {\n        type: \"string\",\n        description: \"Store ID to switch to. Omit to list all available stores.\",\n      },\n    },\n  },\n};\n\nconst LOCAL_TOOLS = [WHALE_LOGIN_TOOL, WHALE_STATUS_TOOL, WHALE_STORES_TOOL];\n\n// ============================================================================\n// REMOTE TOOL DEFINITIONS (loaded from database)\n// ============================================================================\n\nlet toolDefinitions: ToolDefinition[] = [];\nlet toolsLoadedAt = 0;\nconst TOOL_CACHE_TTL = 300_000; // 5 minutes — tool defs rarely change mid-session\n\nasync function loadToolDefinitions(force = false): Promise<ToolDefinition[]> {\n  if (!isAuthenticated || !supabase) return [];\n\n  if (!force && toolDefinitions.length > 0 && Date.now() - toolsLoadedAt < TOOL_CACHE_TTL) {\n    return toolDefinitions;\n  }\n\n  try {\n    const { data, error } = await supabase\n      .from(\"ai_tool_registry\")\n      .select(\"name, description, definition\")\n      .eq(\"is_active\", true)\n      .neq(\"tool_mode\", \"code\");\n\n    if (error) {\n      console.error(\"[MCP] Failed to load tools from registry:\", error.message);\n      return toolDefinitions; // Return stale cache on error\n    }\n\n    toolDefinitions = (data || []).map(t => ({\n      name: t.name,\n      description: t.description || t.definition?.description || `Execute ${t.name}`,\n      inputSchema: t.definition?.input_schema || { type: \"object\", properties: {} }\n    }));\n    toolsLoadedAt = Date.now();\n\n    return toolDefinitions;\n  } catch (err) {\n    console.error(\"[MCP] Error loading tool definitions:\", err);\n    return toolDefinitions;\n  }\n}\n\n// ============================================================================\n// TOOL EXECUTION (proxied to Fly.io server)\n// ============================================================================\n\ninterface RemoteToolResult {\n  success: boolean;\n  data?: unknown;\n  error?: string;\n}\n\nasync function executeToolRemote(\n  toolName: string,\n  args: Record<string, unknown>,\n  storeId?: string,\n  traceId?: string,\n): Promise<RemoteToolResult> {\n  try {\n    const token = await getAuthToken();\n    const response = await fetch(SERVER_URL, {\n      method: \"POST\",\n      headers: {\n        \"Content-Type\": \"application/json\",\n        \"Authorization\": `Bearer ${token}`,\n      },\n      body: JSON.stringify({\n        mode: \"tool\",\n        tool_name: toolName,\n        args,\n        store_id: storeId,\n        conversation_id: SESSION_ID,\n        trace_id: traceId,\n        userId: USER_ID,\n        userEmail: USER_EMAIL,\n        source: \"whale-code-mcp\",\n      }),\n    });\n\n    const result = await response.json() as RemoteToolResult;\n    return result;\n  } catch (err: any) {\n    return {\n      success: false,\n      error: `Server tool call failed: ${err.message}`,\n    };\n  }\n}\n\n// ============================================================================\n// LOCAL TOOL HANDLERS\n// ============================================================================\n\nasync function handleWhaleLogin(): Promise<{ content: Array<{ type: \"text\"; text: string }>; isError?: boolean }> {\n  try {\n    const result = await signInWithBrowser(config.platformUrl, {\n      onBrowserOpening: (url) => {\n        console.error(`[MCP] Opening browser for login: ${url}`);\n      },\n      onWaitingForCallback: () => {\n        console.error(\"[MCP] Waiting for browser login...\");\n      },\n      onExchangingCode: () => {\n        console.error(\"[MCP] Exchanging auth code...\");\n      },\n    });\n\n    if (!result.success) {\n      return {\n        content: [{ type: \"text\", text: `Login failed: ${result.error}\\n\\nYou can also try running \\`whale login\\` in a terminal.` }],\n        isError: true,\n      };\n    }\n\n    // Reload config after successful login\n    reloadConfig();\n\n    // Force-reload tool definitions\n    const tools = await loadToolDefinitions(true);\n\n    // Notify MCP client that tools have changed\n    server.notification({ method: \"notifications/tools/list_changed\" });\n\n    const cfg = result.config!;\n    let msg = `Logged in as ${cfg.email || \"unknown\"}`;\n    if (cfg.store_name || cfg.store_id) {\n      msg += `\\nActive store: ${cfg.store_name || cfg.store_id}`;\n    }\n    msg += `\\n${tools.length} tools now available.`;\n\n    if (result.stores && result.stores.length > 1) {\n      msg += `\\n\\nYou have ${result.stores.length} stores. Use whale_stores to switch:`;\n      for (const s of result.stores) {\n        msg += `\\n  - ${s.name} (${s.id})`;\n      }\n    }\n\n    return { content: [{ type: \"text\", text: msg }] };\n  } catch (err) {\n    return {\n      content: [{ type: \"text\", text: `Login error: ${err instanceof Error ? err.message : String(err)}` }],\n      isError: true,\n    };\n  }\n}\n\nfunction handleWhaleStatus(): { content: Array<{ type: \"text\"; text: string }> } {\n  const cfg = loadConfig();\n  const lines: string[] = [];\n\n  if (isAuthenticated) {\n    lines.push(\"Authenticated: yes\");\n    lines.push(`User: ${cfg.email || \"(unknown)\"}`);\n    lines.push(`User ID: ${cfg.user_id || \"(unknown)\"}`);\n    lines.push(`Store: ${cfg.store_name || cfg.store_id || \"(none selected)\"}`);\n    lines.push(`Auth method: ${IS_SERVICE_ROLE ? \"service role key (env var)\" : \"user JWT (whale login)\"}`);\n    if (cfg.expires_at) {\n      const exp = new Date(cfg.expires_at * 1000);\n      lines.push(`Token expires: ${exp.toISOString()}`);\n    }\n  } else {\n    lines.push(\"Authenticated: no\");\n    lines.push(\"Use whale_login to sign in.\");\n  }\n\n  lines.push(`MCP version: ${PKG_VERSION}`);\n  lines.push(`Server: ${SERVER_URL}`);\n  lines.push(`Tools loaded: ${toolDefinitions.length}`);\n\n  return { content: [{ type: \"text\", text: lines.join(\"\\n\") }] };\n}\n\nasync function handleWhaleStores(args: Record<string, any>): Promise<{ content: Array<{ type: \"text\"; text: string }>; isError?: boolean }> {\n  if (!isAuthenticated) {\n    return {\n      content: [{ type: \"text\", text: \"Not authenticated. Use whale_login first.\" }],\n      isError: true,\n    };\n  }\n\n  const switchToId = args.store_id as string | undefined;\n\n  if (switchToId) {\n    // Switch store\n    // Verify the store exists for this user\n    const token = await getAuthToken();\n    const stores = await getStoresForUser(token, USER_ID || \"\");\n\n    const target = stores.find(s => s.id === switchToId);\n    if (!target) {\n      return {\n        content: [{ type: \"text\", text: `Store not found: ${switchToId}\\nAvailable stores: ${stores.map(s => `${s.name} (${s.id})`).join(\", \")}` }],\n        isError: true,\n      };\n    }\n\n    selectStore(target.id, target.name);\n    reloadConfig();\n\n    // Notify MCP client that tools may have changed context\n    server.notification({ method: \"notifications/tools/list_changed\" });\n\n    return {\n      content: [{ type: \"text\", text: `Switched to store: ${target.name} (${target.id})` }],\n    };\n  }\n\n  // List stores\n  const token = await getAuthToken();\n  const stores = await getStoresForUser(token, USER_ID || \"\");\n\n  if (stores.length === 0) {\n    return { content: [{ type: \"text\", text: \"No stores found for your account.\" }] };\n  }\n\n  const cfg = loadConfig();\n  const lines = [\"Your stores:\"];\n  for (const s of stores) {\n    const active = s.id === cfg.store_id ? \" (active)\" : \"\";\n    lines.push(`  - ${s.name}${s.slug ? ` [${s.slug}]` : \"\"}: ${s.id}${active}`);\n  }\n  lines.push(\"\\nTo switch: use whale_stores with store_id parameter\");\n\n  return { content: [{ type: \"text\", text: lines.join(\"\\n\") }] };\n}\n\n// ============================================================================\n// MCP SERVER\n// ============================================================================\n\nconst server = new Server(\n  { name: \"whale\", version: PKG_VERSION },\n  { capabilities: { tools: {} } }\n);\n\n// List available tools — local auth tools always present; remote tools when authenticated\nserver.setRequestHandler(ListToolsRequestSchema, async () => {\n  if (!isAuthenticated) {\n    console.error(`[MCP] Returning ${LOCAL_TOOLS.length} tools (not authenticated)`);\n    return {\n      tools: LOCAL_TOOLS.map(t => ({\n        name: t.name,\n        description: t.description,\n        inputSchema: t.inputSchema,\n      })),\n    };\n  }\n\n  const remoteTools = await loadToolDefinitions();\n  const allTools = [...LOCAL_TOOLS, ...remoteTools];\n  console.error(`[MCP] Returning ${allTools.length} tools (${LOCAL_TOOLS.length} local + ${remoteTools.length} remote)`);\n\n  return {\n    tools: allTools.map(t => ({\n      name: t.name,\n      description: t.description,\n      inputSchema: t.inputSchema,\n    })),\n  };\n});\n\n// Execute a tool — local auth tools handled here, everything else proxied to Fly.io\nserver.setRequestHandler(CallToolRequestSchema, async (request) => {\n  const toolName = request.params.name;\n  const toolArgs = (request.params.arguments || {}) as Record<string, any>;\n\n  // ── Local tools (handled in-process) ──\n\n  if (toolName === \"whale_login\") {\n    return handleWhaleLogin();\n  }\n\n  if (toolName === \"whale_status\") {\n    return handleWhaleStatus();\n  }\n\n  if (toolName === \"whale_stores\") {\n    return handleWhaleStores(toolArgs);\n  }\n\n  // ── Auth gate for remote tools ──\n\n  if (!isAuthenticated) {\n    return {\n      content: [{\n        type: \"text\" as const,\n        text: \"Not authenticated. Please use the whale_login tool first to sign in to your WhaleTools account.\",\n      }],\n      isError: true,\n    };\n  }\n\n  // ── Remote tool execution ──\n\n  const traceId = crypto.randomUUID();\n\n  // Allow tool-level store_id override (e.g. multi-store users switching context)\n  const effectiveStoreId = (toolArgs.store_id as string) || STORE_ID || undefined;\n  if (toolArgs.store_id) {\n    delete toolArgs.store_id; // Don't send as a tool arg — it's a routing param\n  }\n\n  console.error(`[MCP] Executing: ${toolName} → Fly.io [${traceId.slice(0, 8)}] store=${effectiveStoreId?.slice(0, 8) || \"none\"}`);\n\n  const result = await executeToolRemote(toolName, toolArgs, effectiveStoreId, traceId);\n\n  if (result.success) {\n    return {\n      content: [{\n        type: \"text\" as const,\n        text: typeof result.data === \"string\"\n          ? result.data\n          : JSON.stringify(result.data, null, 2),\n      }],\n    };\n  } else {\n    return {\n      content: [{\n        type: \"text\" as const,\n        text: JSON.stringify({ error: result.error }),\n      }],\n      isError: true,\n    };\n  }\n});\n\n// ============================================================================\n// LOCAL AGENT (auto-spawned — shares this process with MCP server)\n// ============================================================================\n\nlet localAgent: LocalAgentConnection | null = null;\n\n/**\n * Get or create a store API key for the local agent WebSocket connection.\n * Persisted to ~/.whaletools/session.json so we reuse across restarts.\n */\nasync function getOrCreateAgentApiKey(): Promise<string | null> {\n  const rawConfig = loadConfig();\n  if (rawConfig.agent_api_key) return rawConfig.agent_api_key;\n\n  // Auto-generate via the server's api_keys tool\n  try {\n    const result = await executeToolRemote(\"api_keys\", {\n      action: \"generate\",\n      name: \"local-agent-auto\",\n      scopes: [\"*\"],\n      key_type: \"live\",\n    }, STORE_ID || undefined);\n\n    if (result.success && result.data) {\n      const data = result.data as any;\n      const key = data.key_value || data.api_key || data.key;\n      if (key) {\n        updateConfig({ agent_api_key: key });\n        console.error(\"[MCP] Auto-generated local agent API key\");\n        return key;\n      }\n    }\n    console.error(\"[MCP] Failed to auto-generate agent API key:\", result.error);\n    return null;\n  } catch (err: any) {\n    console.error(\"[MCP] Error generating agent API key:\", err.message);\n    return null;\n  }\n}\n\n/**\n * Derive WebSocket URL from the HTTP server URL.\n * https://whale-agent.fly.dev → wss://whale-agent.fly.dev/agent/ws\n */\nfunction getAgentWsUrl(): string {\n  const base = SERVER_URL.replace(/\\/$/, \"\");\n  const wsBase = base.replace(/^https:/, \"wss:\").replace(/^http:/, \"ws:\");\n  return `${wsBase}/agent/ws`;\n}\n\n/**\n * Start the local agent WebSocket connection in the background.\n * Non-blocking — MCP server continues even if this fails.\n */\nasync function startLocalAgent(): Promise<void> {\n  const apiKey = await getOrCreateAgentApiKey();\n  if (!apiKey) {\n    console.error(\"[MCP] Skipping local agent — no API key available\");\n    return;\n  }\n\n  const wsUrl = getAgentWsUrl();\n  console.error(`[MCP] Starting local agent → ${wsUrl}`);\n\n  localAgent = new LocalAgentConnection({\n    apiKey,\n    serverUrl: wsUrl,\n    onConnected: () => console.error(\"[MCP] Local agent connected — WhaleChat can now use local tools\"),\n    onDisconnected: (reason) => console.error(`[MCP] Local agent disconnected: ${reason}`),\n    onError: (err) => console.error(`[MCP] Local agent error: ${err.message}`),\n    onLog: (msg) => console.error(msg),\n  });\n\n  try {\n    await localAgent.connect();\n  } catch (err: any) {\n    console.error(`[MCP] Local agent failed to connect: ${err.message} (non-fatal)`);\n  }\n}\n\n// ============================================================================\n// STARTUP\n// ============================================================================\n\nasync function main() {\n  // Initialize error logging for MCP mode\n  initErrorLogger({ serviceName: \"whale-code-mcp\" });\n  if (USER_ID || USER_EMAIL) {\n    setErrorLoggerUser(USER_ID || undefined, USER_EMAIL || undefined, STORE_ID || undefined);\n  }\n\n  console.error(`[MCP] Whale MCP Server v${PKG_VERSION}`);\n  console.error(`[MCP] Supabase: ${SUPABASE_URL}`);\n  console.error(`[MCP] Server: ${SERVER_URL}`);\n  console.error(`[MCP] Store: ${STORE_ID || \"(default)\"}`);\n  console.error(`[MCP] User: ${USER_EMAIL || \"(unknown)\"} [${USER_ID?.slice(0, 8) || \"no-id\"}]`);\n  console.error(`[MCP] Session: ${SESSION_ID}`);\n  console.error(`[MCP] Authenticated: ${isAuthenticated ? \"yes\" : \"no — use whale_login tool\"}`);\n\n  // Pre-load tools from database (only if authenticated)\n  if (isAuthenticated) {\n    const tools = await loadToolDefinitions(true);\n    console.error(`[MCP] Loaded ${tools.length} tools from registry`);\n  } else {\n    console.error(`[MCP] Skipping tool load — not authenticated. ${LOCAL_TOOLS.length} auth tools available.`);\n  }\n\n  // Start OTA update checker (non-blocking, runs in background)\n  startUpdateLoop(true);\n\n  // Connect via stdio\n  const transport = new StdioServerTransport();\n  await server.connect(transport);\n  console.error(\"[MCP] Ready\");\n\n  // Start local agent in background — only if authenticated\n  if (isAuthenticated) {\n    startLocalAgent().catch((err) => {\n      console.error(\"[MCP] Local agent startup error:\", err.message);\n    });\n  }\n}\n\n// Graceful shutdown — disconnect local agent\nprocess.on(\"SIGINT\", () => {\n  localAgent?.disconnect();\n});\nprocess.on(\"SIGTERM\", () => {\n  localAgent?.disconnect();\n});\n\nmain().catch((err) => {\n  console.error(\"[MCP] Fatal:\", err);\n  captureError({ error: err instanceof Error ? err : new Error(String(err)), severity: \"fatal\", tags: { source: \"mcp_main\" } });\n  // Give error logger a moment to flush before exit\n  setTimeout(() => process.exit(1), 500);\n});\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAEA,SAASA,MAAM,QAAQ,2CAA2C;AAClE,SAASC,oBAAoB,QAAQ,2CAA2C;AAChF,SACEC,qBAAqB,EACrBC,sBAAsB,QACjB,oCAAoC;AAC3C,SAASC,YAAY,QAA6B,uBAAuB;AACzE,SAASC,aAAa,QAAQ,QAAQ;AACtC,SAASC,eAAe,QAAQ,cAAc;AAC9C,SAASC,aAAa,EAAEC,UAAU,EAAEC,YAAY,QAAQ,gCAAgC;AACxF,SAASC,aAAa,EAAEC,gBAAgB,EAAEC,WAAW,EAAgEC,iBAAiB,QAAQ,gCAAgC;AAC9K,SAASC,iBAAiB,QAAQ,gCAAgC;AAClE,SAASC,oBAAoB,QAAQ,6BAA6B;AAClE,SAASC,eAAe,EAAEC,kBAAkB,EAAEC,YAAY,QAAQ,gCAAgC;AAElG,MAAMC,OAAO,GAAGd,aAAa,CAACe,MAAM,CAACC,IAAI,CAACC,GAAG,CAAC;AAC9C,MAAMC,WAAmB,GAAGJ,OAAO,CAAC,iBAAiB,CAAC,CAACK,OAAO;;AAE9D;AACA;AACA;;AAEA,IAAIC,MAAM,GAAGlB,aAAa,CAAC,CAAC;AAC5B,IAAImB,SAAS,GAAGlB,UAAU,CAAC,CAAC;AAC5B,MAAMmB,YAAY,GAAGF,MAAM,CAACG,WAAW;AACvC,IAAIC,oBAAoB,GAAGJ,MAAM,CAACK,WAAW;AAC7C,IAAIC,QAAQ,GAAGN,MAAM,CAACO,OAAO;AAC7B,MAAMC,eAAe,GAAG,CAAC,CAACC,OAAO,CAACC,GAAG,CAACC,yBAAyB;;AAE/D;AACA,IAAIC,OAAO,GAAGX,SAAS,CAACY,OAAO,IAAI,IAAI;AACvC,IAAIC,UAAU,GAAGb,SAAS,CAACc,KAAK,IAAI,IAAI;;AAExC;AACA;AACA;;AAEA;AACA,IAAI,CAACP,eAAe,IAAIP,SAAS,CAACe,YAAY,IAAIf,SAAS,CAACgB,aAAa,EAAE;EACzE,MAAMC,GAAG,GAAGC,IAAI,CAACC,KAAK,CAACC,IAAI,CAACH,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC;EACzC,IAAI,CAACjB,SAAS,CAACqB,UAAU,IAAIrB,SAAS,CAACqB,UAAU,GAAG,GAAG,GAAGJ,GAAG,EAAE;IAC7DK,OAAO,CAACC,KAAK,CAAC,2CAA2C,CAAC;IAC1D,IAAI;MACF,MAAMC,UAAU,GAAG,MAAMxC,aAAa,CAAC,CAAC;MACxC,IAAIwC,UAAU,EAAE;QACdrB,oBAAoB,GAAGqB,UAAU;QACjC;QACAxB,SAAS,GAAGlB,UAAU,CAAC,CAAC;QACxB6B,OAAO,GAAGX,SAAS,CAACY,OAAO,IAAID,OAAO;QACtCE,UAAU,GAAGb,SAAS,CAACc,KAAK,IAAID,UAAU;QAC1CR,QAAQ,GAAGL,SAAS,CAACyB,QAAQ,IAAIpB,QAAQ;QACzCiB,OAAO,CAACC,KAAK,CAAC,oCAAoC,CAAC;MACrD,CAAC,MAAM;QACLD,OAAO,CAACC,KAAK,CAAC,mEAAmE,CAAC;MACpF;IACF,CAAC,CAAC,OAAOG,CAAC,EAAE;MACVJ,OAAO,CAACC,KAAK,CAAC,4BAA4B,EAAGG,CAAC,CAAWC,OAAO,CAAC;IACnE;EACF;AACF;AAEA,IAAIC,eAAe,GAAG,CAAC,EAAE3B,YAAY,IAAIE,oBAAoB,CAAC;AAC9D,IAAI0B,QAA+B,GAAG,IAAI;AAE1C,IAAID,eAAe,EAAE;EACnB,IAAIrB,eAAe,EAAE;IACnB;IACAsB,QAAQ,GAAGnD,YAAY,CAACuB,YAAY,EAAEE,oBAAoB,EAAE;MAC1D2B,IAAI,EAAE;QAAEC,cAAc,EAAE,KAAK;QAAEC,gBAAgB,EAAE;MAAM;IACzD,CAAC,CAAC;IACF,IAAI,CAACrB,OAAO,EAAE;MACZW,OAAO,CAACC,KAAK,CAAC,0GAA0G,CAAC;IAC3H;EACF,CAAC,MAAM;IACL;IACAM,QAAQ,GAAGnD,YAAY,CAACuB,YAAY,EAAEd,iBAAiB,EAAE;MACvD2C,IAAI,EAAE;QAAEC,cAAc,EAAE,KAAK;QAAEC,gBAAgB,EAAE;MAAM,CAAC;MACxDC,MAAM,EAAE;QAAEC,OAAO,EAAE;UAAEC,aAAa,EAAE,UAAUhC,oBAAoB;QAAG;MAAE;IACzE,CAAC,CAAC;EACJ;AACF,CAAC,MAAM;EACLmB,OAAO,CAACC,KAAK,CAAC,mGAAmG,CAAC;AACpH;;AAEA;AACA,SAASa,YAAYA,CAAA,EAAS;EAC5BrC,MAAM,GAAGlB,aAAa,CAAC,CAAC;EACxBmB,SAAS,GAAGlB,UAAU,CAAC,CAAC;EACxBqB,oBAAoB,GAAGJ,MAAM,CAACK,WAAW;EACzCC,QAAQ,GAAGN,MAAM,CAACO,OAAO;EACzBK,OAAO,GAAGX,SAAS,CAACY,OAAO,IAAI,IAAI;EACnCC,UAAU,GAAGb,SAAS,CAACc,KAAK,IAAI,IAAI;EAEpC,IAAIf,MAAM,CAACG,WAAW,IAAIH,MAAM,CAACK,WAAW,EAAE;IAC5CyB,QAAQ,GAAGnD,YAAY,CAACqB,MAAM,CAACG,WAAW,EAAEH,MAAM,CAACK,WAAW,CAAC;IAC/DwB,eAAe,GAAG,IAAI;EACxB;AACF;;AAEA;AACA,eAAeS,YAAYA,CAAA,EAAoB;EAC7C,IAAI9B,eAAe,EAAE,OAAOJ,oBAAoB;EAChD;EACA,MAAMmC,KAAK,GAAG,MAAMtD,aAAa,CAAC,CAAC;EACnC,OAAOsD,KAAK,IAAInC,oBAAqB;AACvC;;AAEA;AACA,MAAMoC,UAAU,GAAGxC,MAAM,CAACyC,SAAS;;AAEnC;AACA,MAAMC,UAAU,GAAGC,MAAM,CAACC,UAAU,CAAC,CAAC;;AAEtC;AACA;AACA;;AAYA,MAAMC,gBAAgC,GAAG;EACvCC,IAAI,EAAE,aAAa;EACnBC,WAAW,EAAE,iIAAiI;EAC9IC,WAAW,EAAE;IAAEC,IAAI,EAAE,QAAQ;IAAEC,UAAU,EAAE,CAAC;EAAE;AAChD,CAAC;AAED,MAAMC,iBAAiC,GAAG;EACxCL,IAAI,EAAE,cAAc;EACpBC,WAAW,EAAE,sEAAsE;EACnFC,WAAW,EAAE;IAAEC,IAAI,EAAE,QAAQ;IAAEC,UAAU,EAAE,CAAC;EAAE;AAChD,CAAC;AAED,MAAME,iBAAiC,GAAG;EACxCN,IAAI,EAAE,cAAc;EACpBC,WAAW,EAAE,8CAA8C;EAC3DC,WAAW,EAAE;IACXC,IAAI,EAAE,QAAQ;IACdC,UAAU,EAAE;MACVxB,QAAQ,EAAE;QACRuB,IAAI,EAAE,QAAQ;QACdF,WAAW,EAAE;MACf;IACF;EACF;AACF,CAAC;AAED,MAAMM,WAAW,GAAG,CAACR,gBAAgB,EAAEM,iBAAiB,EAAEC,iBAAiB,CAAC;;AAE5E;AACA;AACA;;AAEA,IAAIE,eAAiC,GAAG,EAAE;AAC1C,IAAIC,aAAa,GAAG,CAAC;AACrB,MAAMC,cAAc,GAAG,OAAO,CAAC,CAAC;;AAEhC,eAAeC,mBAAmBA,CAACC,KAAK,GAAG,KAAK,EAA6B;EAC3E,IAAI,CAAC7B,eAAe,IAAI,CAACC,QAAQ,EAAE,OAAO,EAAE;EAE5C,IAAI,CAAC4B,KAAK,IAAIJ,eAAe,CAACK,MAAM,GAAG,CAAC,IAAItC,IAAI,CAACH,GAAG,CAAC,CAAC,GAAGqC,aAAa,GAAGC,cAAc,EAAE;IACvF,OAAOF,eAAe;EACxB;EAEA,IAAI;IACF,MAAM;MAAEM,IAAI;MAAEpC;IAAM,CAAC,GAAG,MAAMM,QAAQ,CACnC+B,IAAI,CAAC,kBAAkB,CAAC,CACxBC,MAAM,CAAC,+BAA+B,CAAC,CACvCC,EAAE,CAAC,WAAW,EAAE,IAAI,CAAC,CACrBC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC;IAE3B,IAAIxC,KAAK,EAAE;MACTD,OAAO,CAACC,KAAK,CAAC,2CAA2C,EAAEA,KAAK,CAACI,OAAO,CAAC;MACzE,OAAO0B,eAAe,CAAC,CAAC;IAC1B;IAEAA,eAAe,GAAG,CAACM,IAAI,IAAI,EAAE,EAAEK,GAAG,CAACC,CAAC,KAAK;MACvCpB,IAAI,EAAEoB,CAAC,CAACpB,IAAI;MACZC,WAAW,EAAEmB,CAAC,CAACnB,WAAW,IAAImB,CAAC,CAACC,UAAU,EAAEpB,WAAW,IAAI,WAAWmB,CAAC,CAACpB,IAAI,EAAE;MAC9EE,WAAW,EAAEkB,CAAC,CAACC,UAAU,EAAEC,YAAY,IAAI;QAAEnB,IAAI,EAAE,QAAQ;QAAEC,UAAU,EAAE,CAAC;MAAE;IAC9E,CAAC,CAAC,CAAC;IACHK,aAAa,GAAGlC,IAAI,CAACH,GAAG,CAAC,CAAC;IAE1B,OAAOoC,eAAe;EACxB,CAAC,CAAC,OAAOe,GAAG,EAAE;IACZ9C,OAAO,CAACC,KAAK,CAAC,uCAAuC,EAAE6C,GAAG,CAAC;IAC3D,OAAOf,eAAe;EACxB;AACF;;AAEA;AACA;AACA;;AAQA,eAAegB,iBAAiBA,CAC9BC,QAAgB,EAChBC,IAA6B,EAC7BjE,OAAgB,EAChBkE,OAAgB,EACW;EAC3B,IAAI;IACF,MAAMlC,KAAK,GAAG,MAAMD,YAAY,CAAC,CAAC;IAClC,MAAMoC,QAAQ,GAAG,MAAMC,KAAK,CAACnC,UAAU,EAAE;MACvCoC,MAAM,EAAE,MAAM;MACdzC,OAAO,EAAE;QACP,cAAc,EAAE,kBAAkB;QAClC,eAAe,EAAE,UAAUI,KAAK;MAClC,CAAC;MACDsC,IAAI,EAAEC,IAAI,CAACC,SAAS,CAAC;QACnBC,IAAI,EAAE,MAAM;QACZC,SAAS,EAAEV,QAAQ;QACnBC,IAAI;QACJ9C,QAAQ,EAAEnB,OAAO;QACjB2E,eAAe,EAAExC,UAAU;QAC3ByC,QAAQ,EAAEV,OAAO;QACjBW,MAAM,EAAExE,OAAO;QACfyE,SAAS,EAAEvE,UAAU;QACrBwE,MAAM,EAAE;MACV,CAAC;IACH,CAAC,CAAC;IAEF,MAAMC,MAAM,GAAG,MAAMb,QAAQ,CAACc,IAAI,CAAC,CAAqB;IACxD,OAAOD,MAAM;EACf,CAAC,CAAC,OAAOlB,GAAQ,EAAE;IACjB,OAAO;MACLoB,OAAO,EAAE,KAAK;MACdjE,KAAK,EAAE,4BAA4B6C,GAAG,CAACzC,OAAO;IAChD,CAAC;EACH;AACF;;AAEA;AACA;AACA;;AAEA,eAAe8D,gBAAgBA,CAAA,EAAmF;EAChH,IAAI;IACF,MAAMH,MAAM,GAAG,MAAMlG,iBAAiB,CAACW,MAAM,CAAC2F,WAAW,EAAE;MACzDC,gBAAgB,EAAG/F,GAAG,IAAK;QACzB0B,OAAO,CAACC,KAAK,CAAC,oCAAoC3B,GAAG,EAAE,CAAC;MAC1D,CAAC;MACDgG,oBAAoB,EAAEA,CAAA,KAAM;QAC1BtE,OAAO,CAACC,KAAK,CAAC,oCAAoC,CAAC;MACrD,CAAC;MACDsE,gBAAgB,EAAEA,CAAA,KAAM;QACtBvE,OAAO,CAACC,KAAK,CAAC,+BAA+B,CAAC;MAChD;IACF,CAAC,CAAC;IAEF,IAAI,CAAC+D,MAAM,CAACE,OAAO,EAAE;MACnB,OAAO;QACLM,OAAO,EAAE,CAAC;UAAE9C,IAAI,EAAE,MAAM;UAAE+C,IAAI,EAAE,iBAAiBT,MAAM,CAAC/D,KAAK;QAA8D,CAAC,CAAC;QAC7HyE,OAAO,EAAE;MACX,CAAC;IACH;;IAEA;IACA5D,YAAY,CAAC,CAAC;;IAEd;IACA,MAAM6D,KAAK,GAAG,MAAMzC,mBAAmB,CAAC,IAAI,CAAC;;IAE7C;IACA0C,MAAM,CAACC,YAAY,CAAC;MAAExB,MAAM,EAAE;IAAmC,CAAC,CAAC;IAEnE,MAAMyB,GAAG,GAAGd,MAAM,CAACvF,MAAO;IAC1B,IAAIsG,GAAG,GAAG,gBAAgBD,GAAG,CAACtF,KAAK,IAAI,SAAS,EAAE;IAClD,IAAIsF,GAAG,CAACE,UAAU,IAAIF,GAAG,CAAC3E,QAAQ,EAAE;MAClC4E,GAAG,IAAI,mBAAmBD,GAAG,CAACE,UAAU,IAAIF,GAAG,CAAC3E,QAAQ,EAAE;IAC5D;IACA4E,GAAG,IAAI,KAAKJ,KAAK,CAACvC,MAAM,uBAAuB;IAE/C,IAAI4B,MAAM,CAACiB,MAAM,IAAIjB,MAAM,CAACiB,MAAM,CAAC7C,MAAM,GAAG,CAAC,EAAE;MAC7C2C,GAAG,IAAI,gBAAgBf,MAAM,CAACiB,MAAM,CAAC7C,MAAM,sCAAsC;MACjF,KAAK,MAAM8C,CAAC,IAAIlB,MAAM,CAACiB,MAAM,EAAE;QAC7BF,GAAG,IAAI,SAASG,CAAC,CAAC3D,IAAI,KAAK2D,CAAC,CAACC,EAAE,GAAG;MACpC;IACF;IAEA,OAAO;MAAEX,OAAO,EAAE,CAAC;QAAE9C,IAAI,EAAE,MAAM;QAAE+C,IAAI,EAAEM;MAAI,CAAC;IAAE,CAAC;EACnD,CAAC,CAAC,OAAOjC,GAAG,EAAE;IACZ,OAAO;MACL0B,OAAO,EAAE,CAAC;QAAE9C,IAAI,EAAE,MAAM;QAAE+C,IAAI,EAAE,gBAAgB3B,GAAG,YAAYsC,KAAK,GAAGtC,GAAG,CAACzC,OAAO,GAAGgF,MAAM,CAACvC,GAAG,CAAC;MAAG,CAAC,CAAC;MACrG4B,OAAO,EAAE;IACX,CAAC;EACH;AACF;AAEA,SAASY,iBAAiBA,CAAA,EAAuD;EAC/E,MAAMR,GAAG,GAAGtH,UAAU,CAAC,CAAC;EACxB,MAAM+H,KAAe,GAAG,EAAE;EAE1B,IAAIjF,eAAe,EAAE;IACnBiF,KAAK,CAACC,IAAI,CAAC,oBAAoB,CAAC;IAChCD,KAAK,CAACC,IAAI,CAAC,SAASV,GAAG,CAACtF,KAAK,IAAI,WAAW,EAAE,CAAC;IAC/C+F,KAAK,CAACC,IAAI,CAAC,YAAYV,GAAG,CAACxF,OAAO,IAAI,WAAW,EAAE,CAAC;IACpDiG,KAAK,CAACC,IAAI,CAAC,UAAUV,GAAG,CAACE,UAAU,IAAIF,GAAG,CAAC3E,QAAQ,IAAI,iBAAiB,EAAE,CAAC;IAC3EoF,KAAK,CAACC,IAAI,CAAC,gBAAgBvG,eAAe,GAAG,4BAA4B,GAAG,wBAAwB,EAAE,CAAC;IACvG,IAAI6F,GAAG,CAAC/E,UAAU,EAAE;MAClB,MAAM0F,GAAG,GAAG,IAAI3F,IAAI,CAACgF,GAAG,CAAC/E,UAAU,GAAG,IAAI,CAAC;MAC3CwF,KAAK,CAACC,IAAI,CAAC,kBAAkBC,GAAG,CAACC,WAAW,CAAC,CAAC,EAAE,CAAC;IACnD;EACF,CAAC,MAAM;IACLH,KAAK,CAACC,IAAI,CAAC,mBAAmB,CAAC;IAC/BD,KAAK,CAACC,IAAI,CAAC,6BAA6B,CAAC;EAC3C;EAEAD,KAAK,CAACC,IAAI,CAAC,gBAAgBjH,WAAW,EAAE,CAAC;EACzCgH,KAAK,CAACC,IAAI,CAAC,WAAWvE,UAAU,EAAE,CAAC;EACnCsE,KAAK,CAACC,IAAI,CAAC,iBAAiBzD,eAAe,CAACK,MAAM,EAAE,CAAC;EAErD,OAAO;IAAEoC,OAAO,EAAE,CAAC;MAAE9C,IAAI,EAAE,MAAM;MAAE+C,IAAI,EAAEc,KAAK,CAACI,IAAI,CAAC,IAAI;IAAE,CAAC;EAAE,CAAC;AAChE;AAEA,eAAeC,iBAAiBA,CAAC3C,IAAyB,EAAkF;EAC1I,IAAI,CAAC3C,eAAe,EAAE;IACpB,OAAO;MACLkE,OAAO,EAAE,CAAC;QAAE9C,IAAI,EAAE,MAAM;QAAE+C,IAAI,EAAE;MAA4C,CAAC,CAAC;MAC9EC,OAAO,EAAE;IACX,CAAC;EACH;EAEA,MAAMmB,UAAU,GAAG5C,IAAI,CAAC9C,QAA8B;EAEtD,IAAI0F,UAAU,EAAE;IACd;IACA;IACA,MAAM7E,KAAK,GAAG,MAAMD,YAAY,CAAC,CAAC;IAClC,MAAMkE,MAAM,GAAG,MAAMtH,gBAAgB,CAACqD,KAAK,EAAE3B,OAAO,IAAI,EAAE,CAAC;IAE3D,MAAMyG,MAAM,GAAGb,MAAM,CAACc,IAAI,CAACb,CAAC,IAAIA,CAAC,CAACC,EAAE,KAAKU,UAAU,CAAC;IACpD,IAAI,CAACC,MAAM,EAAE;MACX,OAAO;QACLtB,OAAO,EAAE,CAAC;UAAE9C,IAAI,EAAE,MAAM;UAAE+C,IAAI,EAAE,oBAAoBoB,UAAU,uBAAuBZ,MAAM,CAACvC,GAAG,CAACwC,CAAC,IAAI,GAAGA,CAAC,CAAC3D,IAAI,KAAK2D,CAAC,CAACC,EAAE,GAAG,CAAC,CAACQ,IAAI,CAAC,IAAI,CAAC;QAAG,CAAC,CAAC;QAC3IjB,OAAO,EAAE;MACX,CAAC;IACH;IAEA9G,WAAW,CAACkI,MAAM,CAACX,EAAE,EAAEW,MAAM,CAACvE,IAAI,CAAC;IACnCT,YAAY,CAAC,CAAC;;IAEd;IACA8D,MAAM,CAACC,YAAY,CAAC;MAAExB,MAAM,EAAE;IAAmC,CAAC,CAAC;IAEnE,OAAO;MACLmB,OAAO,EAAE,CAAC;QAAE9C,IAAI,EAAE,MAAM;QAAE+C,IAAI,EAAE,sBAAsBqB,MAAM,CAACvE,IAAI,KAAKuE,MAAM,CAACX,EAAE;MAAI,CAAC;IACtF,CAAC;EACH;;EAEA;EACA,MAAMnE,KAAK,GAAG,MAAMD,YAAY,CAAC,CAAC;EAClC,MAAMkE,MAAM,GAAG,MAAMtH,gBAAgB,CAACqD,KAAK,EAAE3B,OAAO,IAAI,EAAE,CAAC;EAE3D,IAAI4F,MAAM,CAAC7C,MAAM,KAAK,CAAC,EAAE;IACvB,OAAO;MAAEoC,OAAO,EAAE,CAAC;QAAE9C,IAAI,EAAE,MAAM;QAAE+C,IAAI,EAAE;MAAoC,CAAC;IAAE,CAAC;EACnF;EAEA,MAAMK,GAAG,GAAGtH,UAAU,CAAC,CAAC;EACxB,MAAM+H,KAAK,GAAG,CAAC,cAAc,CAAC;EAC9B,KAAK,MAAML,CAAC,IAAID,MAAM,EAAE;IACtB,MAAMe,MAAM,GAAGd,CAAC,CAACC,EAAE,KAAKL,GAAG,CAAC3E,QAAQ,GAAG,WAAW,GAAG,EAAE;IACvDoF,KAAK,CAACC,IAAI,CAAC,OAAON,CAAC,CAAC3D,IAAI,GAAG2D,CAAC,CAACe,IAAI,GAAG,KAAKf,CAAC,CAACe,IAAI,GAAG,GAAG,EAAE,KAAKf,CAAC,CAACC,EAAE,GAAGa,MAAM,EAAE,CAAC;EAC9E;EACAT,KAAK,CAACC,IAAI,CAAC,uDAAuD,CAAC;EAEnE,OAAO;IAAEhB,OAAO,EAAE,CAAC;MAAE9C,IAAI,EAAE,MAAM;MAAE+C,IAAI,EAAEc,KAAK,CAACI,IAAI,CAAC,IAAI;IAAE,CAAC;EAAE,CAAC;AAChE;;AAEA;AACA;AACA;;AAEA,MAAMf,MAAM,GAAG,IAAI5H,MAAM,CACvB;EAAEuE,IAAI,EAAE,OAAO;EAAE/C,OAAO,EAAED;AAAY,CAAC,EACvC;EAAE2H,YAAY,EAAE;IAAEvB,KAAK,EAAE,CAAC;EAAE;AAAE,CAChC,CAAC;;AAED;AACAC,MAAM,CAACuB,iBAAiB,CAAChJ,sBAAsB,EAAE,YAAY;EAC3D,IAAI,CAACmD,eAAe,EAAE;IACpBN,OAAO,CAACC,KAAK,CAAC,mBAAmB6B,WAAW,CAACM,MAAM,4BAA4B,CAAC;IAChF,OAAO;MACLuC,KAAK,EAAE7C,WAAW,CAACY,GAAG,CAACC,CAAC,KAAK;QAC3BpB,IAAI,EAAEoB,CAAC,CAACpB,IAAI;QACZC,WAAW,EAAEmB,CAAC,CAACnB,WAAW;QAC1BC,WAAW,EAAEkB,CAAC,CAAClB;MACjB,CAAC,CAAC;IACJ,CAAC;EACH;EAEA,MAAM2E,WAAW,GAAG,MAAMlE,mBAAmB,CAAC,CAAC;EAC/C,MAAMmE,QAAQ,GAAG,CAAC,GAAGvE,WAAW,EAAE,GAAGsE,WAAW,CAAC;EACjDpG,OAAO,CAACC,KAAK,CAAC,mBAAmBoG,QAAQ,CAACjE,MAAM,WAAWN,WAAW,CAACM,MAAM,YAAYgE,WAAW,CAAChE,MAAM,UAAU,CAAC;EAEtH,OAAO;IACLuC,KAAK,EAAE0B,QAAQ,CAAC3D,GAAG,CAACC,CAAC,KAAK;MACxBpB,IAAI,EAAEoB,CAAC,CAACpB,IAAI;MACZC,WAAW,EAAEmB,CAAC,CAACnB,WAAW;MAC1BC,WAAW,EAAEkB,CAAC,CAAClB;IACjB,CAAC,CAAC;EACJ,CAAC;AACH,CAAC,CAAC;;AAEF;AACAmD,MAAM,CAACuB,iBAAiB,CAACjJ,qBAAqB,EAAE,MAAOoJ,OAAO,IAAK;EACjE,MAAMtD,QAAQ,GAAGsD,OAAO,CAACC,MAAM,CAAChF,IAAI;EACpC,MAAMiF,QAAQ,GAAIF,OAAO,CAACC,MAAM,CAACE,SAAS,IAAI,CAAC,CAAyB;;EAExE;;EAEA,IAAIzD,QAAQ,KAAK,aAAa,EAAE;IAC9B,OAAOmB,gBAAgB,CAAC,CAAC;EAC3B;EAEA,IAAInB,QAAQ,KAAK,cAAc,EAAE;IAC/B,OAAOsC,iBAAiB,CAAC,CAAC;EAC5B;EAEA,IAAItC,QAAQ,KAAK,cAAc,EAAE;IAC/B,OAAO4C,iBAAiB,CAACY,QAAQ,CAAC;EACpC;;EAEA;;EAEA,IAAI,CAAClG,eAAe,EAAE;IACpB,OAAO;MACLkE,OAAO,EAAE,CAAC;QACR9C,IAAI,EAAE,MAAe;QACrB+C,IAAI,EAAE;MACR,CAAC,CAAC;MACFC,OAAO,EAAE;IACX,CAAC;EACH;;EAEA;;EAEA,MAAMxB,OAAO,GAAG9B,MAAM,CAACC,UAAU,CAAC,CAAC;;EAEnC;EACA,MAAMqF,gBAAgB,GAAIF,QAAQ,CAACrG,QAAQ,IAAepB,QAAQ,IAAI4H,SAAS;EAC/E,IAAIH,QAAQ,CAACrG,QAAQ,EAAE;IACrB,OAAOqG,QAAQ,CAACrG,QAAQ,CAAC,CAAC;EAC5B;EAEAH,OAAO,CAACC,KAAK,CAAC,oBAAoB+C,QAAQ,cAAcE,OAAO,CAAC0D,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,WAAWF,gBAAgB,EAAEE,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,EAAE,CAAC;EAEhI,MAAM5C,MAAM,GAAG,MAAMjB,iBAAiB,CAACC,QAAQ,EAAEwD,QAAQ,EAAEE,gBAAgB,EAAExD,OAAO,CAAC;EAErF,IAAIc,MAAM,CAACE,OAAO,EAAE;IAClB,OAAO;MACLM,OAAO,EAAE,CAAC;QACR9C,IAAI,EAAE,MAAe;QACrB+C,IAAI,EAAE,OAAOT,MAAM,CAAC3B,IAAI,KAAK,QAAQ,GACjC2B,MAAM,CAAC3B,IAAI,GACXkB,IAAI,CAACC,SAAS,CAACQ,MAAM,CAAC3B,IAAI,EAAE,IAAI,EAAE,CAAC;MACzC,CAAC;IACH,CAAC;EACH,CAAC,MAAM;IACL,OAAO;MACLmC,OAAO,EAAE,CAAC;QACR9C,IAAI,EAAE,MAAe;QACrB+C,IAAI,EAAElB,IAAI,CAACC,SAAS,CAAC;UAAEvD,KAAK,EAAE+D,MAAM,CAAC/D;QAAM,CAAC;MAC9C,CAAC,CAAC;MACFyE,OAAO,EAAE;IACX,CAAC;EACH;AACF,CAAC,CAAC;;AAEF;AACA;AACA;;AAEA,IAAImC,UAAuC,GAAG,IAAI;;AAElD;AACA;AACA;AACA;AACA,eAAeC,sBAAsBA,CAAA,EAA2B;EAC9D,MAAMpI,SAAS,GAAGlB,UAAU,CAAC,CAAC;EAC9B,IAAIkB,SAAS,CAACqI,aAAa,EAAE,OAAOrI,SAAS,CAACqI,aAAa;;EAE3D;EACA,IAAI;IACF,MAAM/C,MAAM,GAAG,MAAMjB,iBAAiB,CAAC,UAAU,EAAE;MACjDiE,MAAM,EAAE,UAAU;MAClBzF,IAAI,EAAE,kBAAkB;MACxB0F,MAAM,EAAE,CAAC,GAAG,CAAC;MACbC,QAAQ,EAAE;IACZ,CAAC,EAAEnI,QAAQ,IAAI4H,SAAS,CAAC;IAEzB,IAAI3C,MAAM,CAACE,OAAO,IAAIF,MAAM,CAAC3B,IAAI,EAAE;MACjC,MAAMA,IAAI,GAAG2B,MAAM,CAAC3B,IAAW;MAC/B,MAAM8E,GAAG,GAAG9E,IAAI,CAAC+E,SAAS,IAAI/E,IAAI,CAACgF,OAAO,IAAIhF,IAAI,CAAC8E,GAAG;MACtD,IAAIA,GAAG,EAAE;QACP1J,YAAY,CAAC;UAAEsJ,aAAa,EAAEI;QAAI,CAAC,CAAC;QACpCnH,OAAO,CAACC,KAAK,CAAC,0CAA0C,CAAC;QACzD,OAAOkH,GAAG;MACZ;IACF;IACAnH,OAAO,CAACC,KAAK,CAAC,8CAA8C,EAAE+D,MAAM,CAAC/D,KAAK,CAAC;IAC3E,OAAO,IAAI;EACb,CAAC,CAAC,OAAO6C,GAAQ,EAAE;IACjB9C,OAAO,CAACC,KAAK,CAAC,uCAAuC,EAAE6C,GAAG,CAACzC,OAAO,CAAC;IACnE,OAAO,IAAI;EACb;AACF;;AAEA;AACA;AACA;AACA;AACA,SAASiH,aAAaA,CAAA,EAAW;EAC/B,MAAMC,IAAI,GAAGtG,UAAU,CAACuG,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;EAC1C,MAAMC,MAAM,GAAGF,IAAI,CAACC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAACA,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC;EACvE,OAAO,GAAGC,MAAM,WAAW;AAC7B;;AAEA;AACA;AACA;AACA;AACA,eAAeC,eAAeA,CAAA,EAAkB;EAC9C,MAAMC,MAAM,GAAG,MAAMb,sBAAsB,CAAC,CAAC;EAC7C,IAAI,CAACa,MAAM,EAAE;IACX3H,OAAO,CAACC,KAAK,CAAC,mDAAmD,CAAC;IAClE;EACF;EAEA,MAAM2H,KAAK,GAAGN,aAAa,CAAC,CAAC;EAC7BtH,OAAO,CAACC,KAAK,CAAC,gCAAgC2H,KAAK,EAAE,CAAC;EAEtDf,UAAU,GAAG,IAAI9I,oBAAoB,CAAC;IACpC4J,MAAM;IACNzG,SAAS,EAAE0G,KAAK;IAChBC,WAAW,EAAEA,CAAA,KAAM7H,OAAO,CAACC,KAAK,CAAC,iEAAiE,CAAC;IACnG6H,cAAc,EAAGC,MAAM,IAAK/H,OAAO,CAACC,KAAK,CAAC,mCAAmC8H,MAAM,EAAE,CAAC;IACtFC,OAAO,EAAGlF,GAAG,IAAK9C,OAAO,CAACC,KAAK,CAAC,4BAA4B6C,GAAG,CAACzC,OAAO,EAAE,CAAC;IAC1E4H,KAAK,EAAGlD,GAAG,IAAK/E,OAAO,CAACC,KAAK,CAAC8E,GAAG;EACnC,CAAC,CAAC;EAEF,IAAI;IACF,MAAM8B,UAAU,CAACqB,OAAO,CAAC,CAAC;EAC5B,CAAC,CAAC,OAAOpF,GAAQ,EAAE;IACjB9C,OAAO,CAACC,KAAK,CAAC,wCAAwC6C,GAAG,CAACzC,OAAO,cAAc,CAAC;EAClF;AACF;;AAEA;AACA;AACA;;AAEA,eAAe8H,IAAIA,CAAA,EAAG;EACpB;EACAnK,eAAe,CAAC;IAAEoK,WAAW,EAAE;EAAiB,CAAC,CAAC;EAClD,IAAI/I,OAAO,IAAIE,UAAU,EAAE;IACzBtB,kBAAkB,CAACoB,OAAO,IAAIsH,SAAS,EAAEpH,UAAU,IAAIoH,SAAS,EAAE5H,QAAQ,IAAI4H,SAAS,CAAC;EAC1F;EAEA3G,OAAO,CAACC,KAAK,CAAC,2BAA2B1B,WAAW,EAAE,CAAC;EACvDyB,OAAO,CAACC,KAAK,CAAC,mBAAmBtB,YAAY,EAAE,CAAC;EAChDqB,OAAO,CAACC,KAAK,CAAC,iBAAiBgB,UAAU,EAAE,CAAC;EAC5CjB,OAAO,CAACC,KAAK,CAAC,gBAAgBlB,QAAQ,IAAI,WAAW,EAAE,CAAC;EACxDiB,OAAO,CAACC,KAAK,CAAC,eAAeV,UAAU,IAAI,WAAW,KAAKF,OAAO,EAAEuH,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,OAAO,GAAG,CAAC;EAC9F5G,OAAO,CAACC,KAAK,CAAC,kBAAkBkB,UAAU,EAAE,CAAC;EAC7CnB,OAAO,CAACC,KAAK,CAAC,wBAAwBK,eAAe,GAAG,KAAK,GAAG,2BAA2B,EAAE,CAAC;;EAE9F;EACA,IAAIA,eAAe,EAAE;IACnB,MAAMqE,KAAK,GAAG,MAAMzC,mBAAmB,CAAC,IAAI,CAAC;IAC7ClC,OAAO,CAACC,KAAK,CAAC,gBAAgB0E,KAAK,CAACvC,MAAM,sBAAsB,CAAC;EACnE,CAAC,MAAM;IACLpC,OAAO,CAACC,KAAK,CAAC,iDAAiD6B,WAAW,CAACM,MAAM,wBAAwB,CAAC;EAC5G;;EAEA;EACA9E,eAAe,CAAC,IAAI,CAAC;;EAErB;EACA,MAAM+K,SAAS,GAAG,IAAIpL,oBAAoB,CAAC,CAAC;EAC5C,MAAM2H,MAAM,CAACsD,OAAO,CAACG,SAAS,CAAC;EAC/BrI,OAAO,CAACC,KAAK,CAAC,aAAa,CAAC;;EAE5B;EACA,IAAIK,eAAe,EAAE;IACnBoH,eAAe,CAAC,CAAC,CAACY,KAAK,CAAExF,GAAG,IAAK;MAC/B9C,OAAO,CAACC,KAAK,CAAC,kCAAkC,EAAE6C,GAAG,CAACzC,OAAO,CAAC;IAChE,CAAC,CAAC;EACJ;AACF;;AAEA;AACAnB,OAAO,CAACqJ,EAAE,CAAC,QAAQ,EAAE,MAAM;EACzB1B,UAAU,EAAE2B,UAAU,CAAC,CAAC;AAC1B,CAAC,CAAC;AACFtJ,OAAO,CAACqJ,EAAE,CAAC,SAAS,EAAE,MAAM;EAC1B1B,UAAU,EAAE2B,UAAU,CAAC,CAAC;AAC1B,CAAC,CAAC;AAEFL,IAAI,CAAC,CAAC,CAACG,KAAK,CAAExF,GAAG,IAAK;EACpB9C,OAAO,CAACC,KAAK,CAAC,cAAc,EAAE6C,GAAG,CAAC;EAClC5E,YAAY,CAAC;IAAE+B,KAAK,EAAE6C,GAAG,YAAYsC,KAAK,GAAGtC,GAAG,GAAG,IAAIsC,KAAK,CAACC,MAAM,CAACvC,GAAG,CAAC,CAAC;IAAE2F,QAAQ,EAAE,OAAO;IAAEC,IAAI,EAAE;MAAE3E,MAAM,EAAE;IAAW;EAAE,CAAC,CAAC;EAC7H;EACA4E,UAAU,CAAC,MAAMzJ,OAAO,CAAC0J,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC;AACxC,CAAC,CAAC","ignoreList":[]}

package/dist/local-agent/__tests__/connection-disconnect.test.js

@@ -0,0 +1,201 @@
+/**
+ * Tests for LocalAgentConnection — disconnect().
+ */
+
+import { describe, it, expect, vi, beforeEach, afterEach } from "vitest";
+
+// ============================================================================
+// Mocks — vi.hoisted ensures MockWebSocket is available when vi.mock hoists
+// ============================================================================
+
+const {
+  MockWebSocket,
+  getLastWsInstance,
+  resetWsInstance
+} = vi.hoisted(() => {
+  let _lastWsInstance = null;
+  class MockWebSocket {
+    static OPEN = 1;
+    static CLOSED = 3;
+    static CONNECTING = 0;
+    readyState = 0;
+    handlers = {};
+    sentMessages = [];
+    terminated = false;
+    closedWith = null;
+    constructor(url, options) {
+      this.url = url;
+      this.options = options;
+      _lastWsInstance = this;
+    }
+    on(event, handler) {
+      if (!this.handlers[event]) this.handlers[event] = [];
+      this.handlers[event].push(handler);
+    }
+    send(data) {
+      this.sentMessages.push(JSON.parse(data));
+    }
+    close(code, reason) {
+      this.closedWith = {
+        code,
+        reason
+      };
+      this.readyState = 3;
+      this.emit("close", code, reason);
+    }
+    terminate() {
+      this.terminated = true;
+      this.readyState = 3;
+    }
+    emit(event, ...args) {
+      (this.handlers[event] || []).forEach(h => h(...args));
+    }
+    simulateOpen() {
+      this.readyState = 1;
+      this.emit("open");
+    }
+    simulateMessage(data) {
+      this.emit("message", Buffer.from(JSON.stringify(data)));
+    }
+    simulateError(err) {
+      this.emit("error", err);
+    }
+    simulateClose(code, reason) {
+      this.readyState = 3;
+      this.emit("close", code, Buffer.from(reason || ""));
+    }
+  }
+  return {
+    MockWebSocket,
+    getLastWsInstance: () => _lastWsInstance,
+    resetWsInstance: () => {
+      _lastWsInstance = null;
+    }
+  };
+});
+vi.mock("ws", () => ({
+  default: MockWebSocket
+}));
+vi.mock("node:os", () => ({
+  default: {
+    hostname: () => "test-machine"
+  }
+}));
+vi.mock("../discovery.js", () => ({
+  discoverTools: vi.fn(() => [{
+    name: "nmap",
+    path: "/usr/bin/nmap",
+    category: "network_scanning",
+    version: "7.94"
+  }, {
+    name: "curl",
+    path: "/usr/bin/curl",
+    category: "utility",
+    version: "8.1"
+  }])
+}));
+vi.mock("../executor.js", () => ({
+  exec: vi.fn(async () => ({
+    success: true,
+    stdout: "ok",
+    stderr: "",
+    exit_code: 0,
+    killed: false,
+    cwd: "/tmp",
+    duration_ms: 10
+  })),
+  getSystemInfo: vi.fn(() => ({
+    platform: "darwin",
+    arch: "arm64",
+    hostname: "testhost",
+    user: "tester",
+    home: "/Users/tester",
+    cpus: 8,
+    memory_gb: 16,
+    uptime_hours: 100,
+    node_version: "v20.0.0"
+  }))
+}));
+import { LocalAgentConnection } from "../connection.js";
+import { discoverTools } from "../discovery.js";
+
+// ============================================================================
+// Setup
+// ============================================================================
+
+const defaultConfig = {
+  apiKey: "test-api-key-123"
+};
+let agent;
+beforeEach(() => {
+  vi.clearAllMocks();
+  vi.useFakeTimers();
+  resetWsInstance();
+  agent = new LocalAgentConnection(defaultConfig);
+});
+afterEach(() => {
+  vi.useRealTimers();
+  agent.disconnect();
+});
+function lastWs() {
+  return getLastWsInstance();
+}
+
+// ============================================================================
+// disconnect()
+// ============================================================================
+
+describe("LocalAgentConnection - disconnect", () => {
+  it("closes WebSocket with code 1000", async () => {
+    const connectPromise = agent.connect();
+    const ws = lastWs();
+    ws.simulateOpen();
+    ws.simulateMessage({
+      type: "authenticated",
+      agent_id: "a1"
+    });
+    await connectPromise;
+    agent.disconnect();
+    expect(ws.closedWith?.code).toBe(1000);
+    expect(ws.closedWith?.reason).toBe("Agent shutting down");
+  });
+  it("sets connected to false", async () => {
+    const connectPromise = agent.connect();
+    lastWs().simulateOpen();
+    lastWs().simulateMessage({
+      type: "authenticated",
+      agent_id: "a1"
+    });
+    await connectPromise;
+    agent.disconnect();
+    expect(agent.connected).toBe(false);
+  });
+  it("prevents auto-reconnect after intentional disconnect", async () => {
+    const connectPromise = agent.connect();
+    lastWs().simulateOpen();
+    lastWs().simulateMessage({
+      type: "authenticated",
+      agent_id: "a1"
+    });
+    await connectPromise;
+    agent.disconnect();
+    vi.advanceTimersByTime(120_000);
+    expect(discoverTools).toHaveBeenCalledTimes(1);
+  });
+  it("clears pending reconnect timer", async () => {
+    const connectPromise = agent.connect();
+    lastWs().simulateOpen();
+    lastWs().simulateMessage({
+      type: "authenticated",
+      agent_id: "a1"
+    });
+    await connectPromise;
+    lastWs().simulateClose(1006, "Connection lost");
+    agent.disconnect();
+    vi.advanceTimersByTime(120_000);
+    expect(discoverTools).toHaveBeenCalledTimes(1);
+  });
+  it("is safe to call disconnect when not connected", () => {
+    expect(() => agent.disconnect()).not.toThrow();
+  });
+});

package/dist/local-agent/__tests__/connection-lifecycle.test.js

@@ -0,0 +1,289 @@
+/**
+ * Tests for LocalAgentConnection — constructor and connect().
+ */
+
+import { describe, it, expect, vi, beforeEach, afterEach } from "vitest";
+
+// ============================================================================
+// Mocks — vi.hoisted ensures MockWebSocket is available when vi.mock hoists
+// ============================================================================
+
+const {
+  MockWebSocket,
+  getLastWsInstance,
+  resetWsInstance
+} = vi.hoisted(() => {
+  let _lastWsInstance = null;
+  class MockWebSocket {
+    static OPEN = 1;
+    static CLOSED = 3;
+    static CONNECTING = 0;
+    readyState = 0; // CONNECTING
+    handlers = {};
+    sentMessages = [];
+    terminated = false;
+    closedWith = null;
+    constructor(url, options) {
+      this.url = url;
+      this.options = options;
+      _lastWsInstance = this;
+    }
+    on(event, handler) {
+      if (!this.handlers[event]) this.handlers[event] = [];
+      this.handlers[event].push(handler);
+    }
+    send(data) {
+      this.sentMessages.push(JSON.parse(data));
+    }
+    close(code, reason) {
+      this.closedWith = {
+        code,
+        reason
+      };
+      this.readyState = 3; // CLOSED
+      this.emit("close", code, reason);
+    }
+    terminate() {
+      this.terminated = true;
+      this.readyState = 3; // CLOSED
+    }
+    emit(event, ...args) {
+      (this.handlers[event] || []).forEach(h => h(...args));
+    }
+    simulateOpen() {
+      this.readyState = 1; // OPEN
+      this.emit("open");
+    }
+    simulateMessage(data) {
+      this.emit("message", Buffer.from(JSON.stringify(data)));
+    }
+    simulateError(err) {
+      this.emit("error", err);
+    }
+    simulateClose(code, reason) {
+      this.readyState = 3; // CLOSED
+      this.emit("close", code, Buffer.from(reason || ""));
+    }
+  }
+  return {
+    MockWebSocket,
+    getLastWsInstance: () => _lastWsInstance,
+    resetWsInstance: () => {
+      _lastWsInstance = null;
+    }
+  };
+});
+vi.mock("ws", () => ({
+  default: MockWebSocket
+}));
+vi.mock("node:os", () => ({
+  default: {
+    hostname: () => "test-machine"
+  }
+}));
+vi.mock("../discovery.js", () => ({
+  discoverTools: vi.fn(() => [{
+    name: "nmap",
+    path: "/usr/bin/nmap",
+    category: "network_scanning",
+    version: "7.94"
+  }, {
+    name: "curl",
+    path: "/usr/bin/curl",
+    category: "utility",
+    version: "8.1"
+  }])
+}));
+vi.mock("../executor.js", () => ({
+  exec: vi.fn(async () => ({
+    success: true,
+    stdout: "ok",
+    stderr: "",
+    exit_code: 0,
+    killed: false,
+    cwd: "/tmp",
+    duration_ms: 10
+  })),
+  getSystemInfo: vi.fn(() => ({
+    platform: "darwin",
+    arch: "arm64",
+    hostname: "testhost",
+    user: "tester",
+    home: "/Users/tester",
+    cpus: 8,
+    memory_gb: 16,
+    uptime_hours: 100,
+    node_version: "v20.0.0"
+  }))
+}));
+import { LocalAgentConnection } from "../connection.js";
+import { discoverTools } from "../discovery.js";
+
+// ============================================================================
+// Setup
+// ============================================================================
+
+const defaultConfig = {
+  apiKey: "test-api-key-123"
+};
+let agent;
+beforeEach(() => {
+  vi.clearAllMocks();
+  vi.useFakeTimers();
+  resetWsInstance();
+  agent = new LocalAgentConnection(defaultConfig);
+});
+afterEach(() => {
+  vi.useRealTimers();
+  agent.disconnect();
+});
+
+// Convenience accessor
+function lastWs() {
+  return getLastWsInstance();
+}
+
+// ============================================================================
+// Constructor / Properties
+// ============================================================================
+
+describe("LocalAgentConnection - constructor", () => {
+  it("accepts minimal config with just apiKey", () => {
+    const a = new LocalAgentConnection({
+      apiKey: "key"
+    });
+    expect(a.connected).toBe(false);
+  });
+  it("is not connected initially", () => {
+    expect(agent.connected).toBe(false);
+  });
+  it("applies default config values", () => {
+    expect(agent.connected).toBe(false);
+  });
+  it("accepts custom serverUrl", () => {
+    const a = new LocalAgentConnection({
+      apiKey: "key",
+      serverUrl: "wss://custom.server/ws"
+    });
+    expect(a).toBeDefined();
+  });
+  it("accepts all callback options", () => {
+    const a = new LocalAgentConnection({
+      apiKey: "key",
+      onConnected: vi.fn(),
+      onDisconnected: vi.fn(),
+      onError: vi.fn(),
+      onLog: vi.fn()
+    });
+    expect(a).toBeDefined();
+  });
+});
+
+// ============================================================================
+// connect()
+// ============================================================================
+
+describe("LocalAgentConnection - connect", () => {
+  it("discovers tools before connecting", async () => {
+    const connectPromise = agent.connect();
+    lastWs().simulateOpen();
+    lastWs().simulateMessage({
+      type: "authenticated",
+      agent_id: "a1",
+      message: "OK"
+    });
+    await connectPromise;
+    expect(discoverTools).toHaveBeenCalledOnce();
+  });
+  it("creates WebSocket with correct URL", async () => {
+    const connectPromise = agent.connect();
+    expect(getLastWsInstance()).not.toBeNull();
+    expect(lastWs().url).toBe("wss://whale-agent.fly.dev/agent/ws");
+    lastWs().simulateOpen();
+    lastWs().simulateMessage({
+      type: "authenticated",
+      agent_id: "a1",
+      message: "OK"
+    });
+    await connectPromise;
+  });
+  it("uses custom serverUrl when provided", async () => {
+    const custom = new LocalAgentConnection({
+      apiKey: "key",
+      serverUrl: "wss://custom/ws"
+    });
+    const connectPromise = custom.connect();
+    expect(lastWs().url).toBe("wss://custom/ws");
+    lastWs().simulateOpen();
+    lastWs().simulateMessage({
+      type: "authenticated",
+      agent_id: "a1"
+    });
+    await connectPromise;
+    custom.disconnect();
+  });
+  it("sends auth message on open", async () => {
+    const connectPromise = agent.connect();
+    lastWs().simulateOpen();
+    expect(lastWs().sentMessages).toHaveLength(1);
+    const authMsg = lastWs().sentMessages[0];
+    expect(authMsg.type).toBe("auth");
+    expect(authMsg.api_key).toBe("test-api-key-123");
+    expect(authMsg.capabilities).toEqual(["nmap", "curl"]);
+    expect(authMsg.hostname).toBe("test-machine");
+    expect(authMsg.version).toBe("1.0.0");
+    expect(authMsg.platform).toBe(process.platform);
+    lastWs().simulateMessage({
+      type: "authenticated",
+      agent_id: "a1"
+    });
+    await connectPromise;
+  });
+  it("resolves promise on authenticated message", async () => {
+    const connectPromise = agent.connect();
+    lastWs().simulateOpen();
+    lastWs().simulateMessage({
+      type: "authenticated",
+      agent_id: "a1",
+      message: "Welcome"
+    });
+    await expect(connectPromise).resolves.toBeUndefined();
+  });
+  it("calls onConnected callback on authentication", async () => {
+    const onConnected = vi.fn();
+    const a = new LocalAgentConnection({
+      apiKey: "key",
+      onConnected
+    });
+    const connectPromise = a.connect();
+    lastWs().simulateOpen();
+    lastWs().simulateMessage({
+      type: "authenticated",
+      agent_id: "a1"
+    });
+    await connectPromise;
+    expect(onConnected).toHaveBeenCalledOnce();
+    a.disconnect();
+  });
+  it("reports connected=true after authentication", async () => {
+    const connectPromise = agent.connect();
+    lastWs().simulateOpen();
+    lastWs().simulateMessage({
+      type: "authenticated",
+      agent_id: "a1"
+    });
+    await connectPromise;
+    expect(agent.connected).toBe(true);
+  });
+  it("rejects on connection error before open", async () => {
+    const connectPromise = agent.connect();
+    lastWs().simulateError(new Error("ECONNREFUSED"));
+    await expect(connectPromise).rejects.toThrow("ECONNREFUSED");
+  });
+  it("times out after 15 seconds if not opened", async () => {
+    const connectPromise = agent.connect();
+    vi.advanceTimersByTime(15_001);
+    expect(lastWs().terminated).toBe(true);
+    await expect(connectPromise).rejects.toThrow("Connection timeout");
+  });
+});