feat: add CLI and local MCP session management

.github/workflows/ci.yml

@@ -11,6 +11,7 @@ on:
       - "knip.json"
       - "package-lock.json"
       - "package.json"
+      - "packages/cli/**"
       - "packages/control-plane/**"
       - "packages/github-bot/**"
       - "packages/linear-bot/**"
@@ -33,6 +34,7 @@ on:
       - "knip.json"
       - "package-lock.json"
       - "package.json"
+      - "packages/cli/**"
       - "packages/control-plane/**"
       - "packages/github-bot/**"
       - "packages/linear-bot/**"
@@ -163,6 +165,31 @@ jobs:
       - name: Run control-plane unit tests
         run: npm test -w @open-inspect/control-plane
 
+  test-cli:
+    name: Test (CLI)
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+        with:
+          persist-credentials: false
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v6
+        with:
+          node-version: "22"
+          cache: "npm"
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Build shared package
+        run: npm run build -w @open-inspect/shared
+
+      - name: Run CLI tests
+        run: npm test -w @open-inspect/cli
+
   test-cp-integration:
     name: Test (control-plane integration ${{ matrix.shard }})
     runs-on: ubuntu-latest

AGENTS.md

@@ -28,7 +28,7 @@ events back through the same WebSocket chain.
 ### Package Dependency Graph
 
 ```
-@open-inspect/shared  ←  control-plane, web, slack-bot, github-bot, linear-bot
+@open-inspect/shared  ←  cli, control-plane, web, slack-bot, github-bot, linear-bot
 ```
 
 **Build `@open-inspect/shared` first** whenever you change shared types. Other packages import from
@@ -39,6 +39,7 @@ it at build time.
 | Package         | Lang / Framework                   | Purpose                                                     |
 | --------------- | ---------------------------------- | ----------------------------------------------------------- |
 | `shared`        | TypeScript                         | Shared types, auth utilities, model definitions             |
+| `cli`           | TypeScript / Commander / MCP SDK   | Session CLI and local stdio MCP server                      |
 | `control-plane` | TypeScript / CF Workers + DO       | Session management, WebSocket streaming, GitHub integration |
 | `web`           | TypeScript / Next.js 16 + React 19 | User-facing dashboard, OAuth, real-time UI                  |
 | `slack-bot`     | TypeScript / CF Workers + Hono     | Slack event handler, session creation                       |
@@ -60,6 +61,7 @@ npm run format                                   # Prettier only
 npm run typecheck                                # tsc across all TS packages
 
 # Tests — TypeScript (Vitest)
+npm test -w @open-inspect/cli
 npm test -w @open-inspect/control-plane          # unit tests (node env)
 npm run test:integration -w @open-inspect/control-plane  # integration (workerd/Miniflare + real D1)
 npm test -w @open-inspect/web

CONTRIBUTING.md

@@ -47,6 +47,7 @@ npm test
 
 | Package                    | Description                          |
 | -------------------------- | ------------------------------------ |
+| `packages/cli`             | Session CLI and local stdio MCP      |
 | `packages/control-plane`   | Cloudflare Workers + Durable Objects |
 | `packages/web`             | Next.js web application              |
 | `packages/sandbox-runtime` | Shared in-sandbox agent runtime      |

README.md

@@ -120,6 +120,7 @@ ownership, bots, and member suspension.
 
 | Package                                           | Description                                 |
 | ------------------------------------------------- | ------------------------------------------- |
+| [cli](packages/cli)                               | Session CLI and local stdio MCP server      |
 | [control-plane](packages/control-plane)           | Cloudflare Workers + Durable Objects        |
 | [web](packages/web)                               | Next.js web client                          |
 | [sandbox-runtime](packages/sandbox-runtime)       | Shared in-sandbox agent runtime             |

knip.json

@@ -14,6 +14,10 @@
         "src/types/repositories.ts": ["duplicates"]
       }
     },
+    "packages/cli": {
+      "entry": ["src/**/*.test.ts"],
+      "project": ["src/**/*.ts"]
+    },
     "packages/control-plane": {
       "entry": ["test/integration/**/*.test.ts"],
       "project": ["src/**/*.ts", "test/**/*.ts", "scripts/**/*.ts"]