@agentconnect.md/daemon 1.0.0-rc.230 → 1.0.0-rc.232

package/dist/index.js

@@ -68502,8 +68502,8 @@ const [{ Command }, { fileURLToPath: fileURLToPath$1 }, { runChat }, { runLogin
 	import("./commander-B5QVEFzH.js"),
 	import("node:url"),
 	import("./chat-Di5QFvjw.js"),
-	import("./login-8pfSiMc2.js"),
-	import("./run-foreground-DxSBKNXU.js"),
+	import("./login-BCxHYEeG.js"),
+	import("./run-foreground-BQl2a8y9.js"),
 	import("./service-6w0WKhdx.js"),
 	import("./lock-CA9Bm8_s.js"),
 	import("./paths-CcRUjFjy.js")

package/dist/{login-8pfSiMc2.js → login-BCxHYEeG.js}

@@ -1,5 +1,5 @@
 import { t as DAEMON_VERSION } from "./version-DGaRXjBK.js";
-import { n as ClientTransport, t as runForeground } from "./run-foreground-Cg2ewYjn.js";
+import { n as ClientTransport, t as runForeground } from "./run-foreground-DN1BSygk.js";
 import { c as ConfigSchema } from "./load-agents-tb8Rcwan.js";
 import { l as resolveRoot, t as configPath } from "./paths-DEcUO8lC.js";
 import { f as buildEnvelope, l as isFrame, m as encode, p as decodeEnvelope } from "./acp-host-CXUQ91Gh.js";
@@ -226,4 +226,4 @@ async function runLogin(opts, partial = {}) {
 //#endregion
 export { buildInstallOpts, persistCredentials, runLogin };
 
-//# sourceMappingURL=login-8pfSiMc2.js.map
+//# sourceMappingURL=login-BCxHYEeG.js.map

package/dist/{login-8pfSiMc2.js.map → login-BCxHYEeG.js.map}

@@ -1 +1 @@
-{"version":3,"file":"login-8pfSiMc2.js","names":["realRunForeground"],"sources":["../src/cp/auth-probe.ts","../src/cli/login.ts"],"sourcesContent":["/**\n * `probeAuth` — a one-shot CP auth check used by `agentconnect login`. It dials\n * the CP, sends ONLY the `auth` frame (no `register`), and resolves with the\n * authoritative daemonId from `auth/ok`, or a human-readable failure reason on\n * a `4401` close, a correlated `error`, a dial failure, or a timeout. It always\n * closes the socket and never leaves a connection open.\n */\nimport { buildEnvelope, decodeEnvelope, encode, isFrame } from '@agentconnect.md/protocol'\nimport { ClientTransport, type Transport } from './transport.js'\n\nexport interface ProbeResult {\n  ok: boolean\n  daemonId?: string\n  reason?: string\n}\n\nexport interface ProbeOpts {\n  url: string\n  token: string\n  daemonId?: string\n  agentVersion?: string\n  timeoutMs?: number\n  /** Injectable for tests; defaults to dialing the real WebSocket. */\n  connect?: () => Promise<Transport>\n}\n\nexport async function probeAuth(opts: ProbeOpts): Promise<ProbeResult> {\n  const timeoutMs = opts.timeoutMs ?? 10_000\n  const dial = opts.connect ?? (() => ClientTransport.dial(opts.url))\n\n  let transport: Transport\n  try {\n    transport = await dial()\n  } catch (err) {\n    return { ok: false, reason: `cannot reach ${opts.url}: ${(err as Error).message}` }\n  }\n\n  const authPayload: Record<string, unknown> = {\n    apiKey: opts.token,\n    agentVersion: opts.agentVersion ?? 'probe'\n  }\n  if (opts.daemonId) authPayload.daemonId = opts.daemonId\n  const frame = buildEnvelope('auth', authPayload)\n\n  return await new Promise<ProbeResult>((resolve) => {\n    let settled = false\n    const done = (r: ProbeResult): void => {\n      if (settled) return\n      settled = true\n      clearTimeout(timer)\n      try {\n        transport.close(1000, 'probe done')\n      } catch {\n        // socket may already be closed\n      }\n      resolve(r)\n    }\n\n    const timer = setTimeout(\n      () => done({ ok: false, reason: `timed out after ${timeoutMs}ms waiting for auth/ok` }),\n      timeoutMs\n    )\n\n    transport.onMessage((text) => {\n      const decoded = decodeEnvelope(text)\n      if (!decoded.ok) return\n      const f = decoded.frame\n      if (f.corr !== frame.id) return\n      if (f.type === 'error') {\n        const e = f.payload as { code: string; message: string }\n        done({ ok: false, reason: `${e.code}: ${e.message}` })\n        return\n      }\n      if (isFrame('auth/ok')(f)) {\n        const ok = f.payload as { daemonId: string }\n        done({ ok: true, daemonId: ok.daemonId })\n      }\n    })\n\n    transport.onClose((code) => {\n      if (code === 4401) done({ ok: false, reason: 'authentication failed (4401) — check the daemon token' })\n      else done({ ok: false, reason: `connection closed (${code}) before auth/ok` })\n    })\n\n    transport.send(encode(frame))\n  })\n}\n","/**\n * `agentconnect login` — interactive onboarding. It tests the Control Plane auth\n * flow, persists credentials only on success, then offers to install the OS\n * service. If installed it starts the service (`up`) and returns; otherwise it\n * runs the daemon in the foreground (the same path as `agentconnect run`).\n *\n * `persistCredentials` is the pure config-merge half (token-only onboarding:\n * `daemonId` is omitted unless given — the first connect adopts it from the\n * token's `sub`). `runLogin` is the orchestrator, with injectable deps for tests.\n */\nimport { readFileSync, existsSync, writeFileSync, mkdirSync } from 'node:fs'\nimport { dirname } from 'node:path'\nimport { createInterface } from 'node:readline'\nimport { fileURLToPath } from 'node:url'\nimport { ConfigSchema } from '../config/config-schema.js'\nimport { resolveRoot, configPath } from '../paths.js'\nimport { DAEMON_VERSION } from '../version.js'\nimport { probeAuth, type ProbeResult } from '../cp/auth-probe.js'\nimport { resolveController, type InstallOpts } from '../service/index.js'\nimport { runForeground as realRunForeground } from './run-foreground.js'\n\nexport interface PersistCredsOpts {\n  cpUrl: string\n  cpKey: string\n  daemonId?: string\n  root?: string\n  configPath?: string\n}\n\n/** Merge url/token into config.json (validated), returning the written path. */\nexport function persistCredentials(opts: PersistCredsOpts): string {\n  const root = resolveRoot(opts.root)\n  const file = opts.configPath ?? configPath(root)\n  const raw: Record<string, unknown> = existsSync(file) ? JSON.parse(readFileSync(file, 'utf8')) : { version: 1 }\n\n  const cp = (raw.controlPlane as Record<string, unknown> | undefined) ?? {}\n  raw.controlPlane = { ...cp, url: opts.cpUrl, key: opts.cpKey, enabled: true }\n  if (opts.daemonId) raw.daemonId = opts.daemonId\n\n  ConfigSchema.parse(raw) // fail before writing if the merge is invalid\n\n  mkdirSync(dirname(file), { recursive: true })\n  writeFileSync(file, JSON.stringify(raw, null, 2) + '\\n')\n  return file\n}\n\nexport interface RunLoginOpts {\n  cpUrl?: string\n  cpKey?: string\n  daemonId?: string\n  root?: string\n  configPath?: string\n  /** The resolved CLI entry path. Must be supplied by the CLI entry point\n   *  (index.ts) so the correct bundle path is used rather than inferring it\n   *  from login.ts's own import.meta.url (which is the same bundle but the\n   *  `../` path calculation would be wrong). Falls back to import.meta.url\n   *  for the pure test path where login.ts is loaded standalone. */\n  cliEntry?: string\n}\n\n/**\n * Build the InstallOpts for the OS service installer.\n *\n * Exported as a pure helper so it can be unit-tested independently of the\n * full `runLogin` orchestration. The caller (index.ts) passes `cliEntry` so\n * the correct bundle path always flows through; if omitted we fall back to\n * `import.meta.url` (correct only when login.ts is the entry, e.g. in tests).\n */\nexport function buildInstallOpts(opts: { root?: string; cliEntry?: string }): InstallOpts {\n  return {\n    execPath: process.execPath,\n    cliEntry: opts.cliEntry ?? fileURLToPath(import.meta.url),\n    includeRootEnv: resolveRoot(opts.root) !== resolveRoot(undefined)\n  }\n}\n\nexport interface LoginDeps {\n  probe: (o: { url: string; token: string }) => Promise<ProbeResult>\n  installService: () => Promise<void>\n  runForeground: () => Promise<void>\n  out: NodeJS.WritableStream\n  input: NodeJS.ReadableStream\n  isTTY: boolean\n}\n\nfunction realDeps(opts: RunLoginOpts): LoginDeps {\n  return {\n    probe: (o) => probeAuth({ url: o.url, token: o.token, agentVersion: DAEMON_VERSION }),\n    installService: async () => {\n      const controller = resolveController({ root: opts.root })\n      await controller.install(buildInstallOpts(opts))\n      await controller.up()\n    },\n    runForeground: () =>\n      realRunForeground({\n        root: opts.root,\n        overrides: { cpUrl: opts.cpUrl, cpKey: opts.cpKey, daemonId: opts.daemonId }\n      }),\n    out: process.stdout,\n    input: process.stdin,\n    isTTY: Boolean(process.stdin.isTTY)\n  }\n}\n\n/** Read the next line from a readline interface via async iterator. */\nasync function nextLine(\n  iter: AsyncIterableIterator<string>,\n  prompt: string,\n  out: NodeJS.WritableStream\n): Promise<string> {\n  out.write(prompt)\n  const { value, done } = await iter.next()\n  if (done) throw new Error(`unexpected end of input waiting for: ${prompt}`)\n  return (value as string).trim()\n}\n\nexport async function runLogin(opts: RunLoginOpts, partial: Partial<LoginDeps> = {}): Promise<void> {\n  const deps: LoginDeps = { ...realDeps(opts), ...partial }\n  const { out } = deps\n\n  // ── Non-interactive: flags required; probe; persist. No prompts, no handoff. ──\n  if (!deps.isTTY) {\n    if (!opts.cpUrl) throw new Error('login requires --cp-url <url>')\n    if (!opts.cpKey) throw new Error('login requires --cp-key <key>')\n    const r = await deps.probe({ url: opts.cpUrl, token: opts.cpKey })\n    if (!r.ok) throw new Error(`authentication failed: ${r.reason}`)\n    persistCredentials({ ...opts, cpUrl: opts.cpUrl, cpKey: opts.cpKey })\n    out.write(`✓ authenticated${r.daemonId ? ` (daemon ${r.daemonId})` : ''} — credentials saved\\n`)\n    return\n  }\n\n  // Both interactive handoffs read `<root>/config.json`: the installed service\n  // runs `… run` (no `--config`), and the foreground `Daemon` loads by root. A\n  // custom `--config` would persist credentials the daemon never reads, so the\n  // install/run branch would look successful but start without them. Reject it;\n  // `--root` is the knob that keeps persist + service + foreground in sync.\n  if (opts.configPath) {\n    throw new Error(\n      'interactive login does not support --config — use --root <dir> so the daemon and the installed service read the same config'\n    )\n  }\n\n  // ── Interactive ──\n  const rl = createInterface({ input: deps.input, output: out })\n  const iter = rl[Symbol.asyncIterator]()\n  let url = opts.cpUrl\n  let token = opts.cpKey\n  try {\n    if (!url) url = await nextLine(iter, 'Control Plane URL: ', out)\n\n    for (let attempt = 0; ; attempt++) {\n      if (!token) token = await nextLine(iter, 'Daemon API key: ', out)\n      out.write(`Testing connection to ${url}…\\n`)\n      const r = await deps.probe({ url: url!, token: token! })\n      if (r.ok) {\n        out.write(`✓ authenticated${r.daemonId ? ` (daemon ${r.daemonId})` : ''}\\n`)\n        break\n      }\n      out.write(`✗ ${r.reason}\\n`)\n      if (attempt >= 1) throw new Error('authentication failed')\n      token = undefined // re-prompt on retry\n    }\n\n    persistCredentials({ ...opts, cpUrl: url!, cpKey: token! })\n\n    const ans = (await nextLine(iter, 'Install AgentConnect as a background service? (y/N) ', out)).toLowerCase()\n    if (ans === 'y' || ans === 'yes') {\n      await deps.installService()\n      out.write('Service installed and started. Manage it with `agentconnect up` / `down` / `status`.\\n')\n      return\n    }\n    out.write('Starting in the foreground (Ctrl-C to stop)…\\n')\n  } finally {\n    rl.close()\n  }\n\n  await deps.runForeground()\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AA0BA,eAAsB,UAAU,MAAuC;CACrE,MAAM,YAAY,KAAK,aAAa;CACpC,MAAM,OAAO,KAAK,kBAAkB,gBAAgB,KAAK,KAAK,GAAG;CAEjE,IAAI;CACJ,IAAI;EACF,YAAY,MAAM,KAAK;CACzB,SAAS,KAAK;EACZ,OAAO;GAAE,IAAI;GAAO,QAAQ,gBAAgB,KAAK,IAAI,IAAK,IAAc;EAAU;CACpF;CAEA,MAAM,cAAuC;EAC3C,QAAQ,KAAK;EACb,cAAc,KAAK,gBAAgB;CACrC;CACA,IAAI,KAAK,UAAU,YAAY,WAAW,KAAK;CAC/C,MAAM,QAAQ,cAAc,QAAQ,WAAW;CAE/C,OAAO,MAAM,IAAI,SAAsB,YAAY;EACjD,IAAI,UAAU;EACd,MAAM,QAAQ,MAAyB;GACrC,IAAI,SAAS;GACb,UAAU;GACV,aAAa,KAAK;GAClB,IAAI;IACF,UAAU,MAAM,KAAM,YAAY;GACpC,QAAQ,CAER;GACA,QAAQ,CAAC;EACX;EAEA,MAAM,QAAQ,iBACN,KAAK;GAAE,IAAI;GAAO,QAAQ,mBAAmB,UAAU;EAAwB,CAAC,GACtF,SACF;EAEA,UAAU,WAAW,SAAS;GAC5B,MAAM,UAAU,eAAe,IAAI;GACnC,IAAI,CAAC,QAAQ,IAAI;GACjB,MAAM,IAAI,QAAQ;GAClB,IAAI,EAAE,SAAS,MAAM,IAAI;GACzB,IAAI,EAAE,SAAS,SAAS;IACtB,MAAM,IAAI,EAAE;IACZ,KAAK;KAAE,IAAI;KAAO,QAAQ,GAAG,EAAE,KAAK,IAAI,EAAE;IAAU,CAAC;IACrD;GACF;GACA,IAAI,QAAQ,SAAS,CAAC,CAAC,CAAC,GAAG;IACzB,MAAM,KAAK,EAAE;IACb,KAAK;KAAE,IAAI;KAAM,UAAU,GAAG;IAAS,CAAC;GAC1C;EACF,CAAC;EAED,UAAU,SAAS,SAAS;GAC1B,IAAI,SAAS,MAAM,KAAK;IAAE,IAAI;IAAO,QAAQ;GAAwD,CAAC;QACjG,KAAK;IAAE,IAAI;IAAO,QAAQ,sBAAsB,KAAK;GAAkB,CAAC;EAC/E,CAAC;EAED,UAAU,KAAK,OAAO,KAAK,CAAC;CAC9B,CAAC;AACH;;;;;;;;;;;;;;ACxDA,SAAgB,mBAAmB,MAAgC;CACjE,MAAM,OAAO,YAAY,KAAK,IAAI;CAClC,MAAM,OAAO,KAAK,cAAc,WAAW,IAAI;CAC/C,MAAM,MAA+B,WAAW,IAAI,IAAI,KAAK,MAAM,aAAa,MAAM,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE;CAG9G,IAAI,eAAe;EAAE,GADT,IAAI,gBAAwD,CAAC;EAC7C,KAAK,KAAK;EAAO,KAAK,KAAK;EAAO,SAAS;CAAK;CAC5E,IAAI,KAAK,UAAU,IAAI,WAAW,KAAK;CAEvC,aAAa,MAAM,GAAG;CAEtB,UAAU,QAAQ,IAAI,GAAG,EAAE,WAAW,KAAK,CAAC;CAC5C,cAAc,MAAM,KAAK,UAAU,KAAK,MAAM,CAAC,IAAI,IAAI;CACvD,OAAO;AACT;;;;;;;;;AAwBA,SAAgB,iBAAiB,MAAyD;CACxF,OAAO;EACL,UAAU,QAAQ;EAClB,UAAU,KAAK,YAAY,cAAc,OAAO,KAAK,GAAG;EACxD,gBAAgB,YAAY,KAAK,IAAI,MAAM,YAAY,KAAA,CAAS;CAClE;AACF;AAWA,SAAS,SAAS,MAA+B;CAC/C,OAAO;EACL,QAAQ,MAAM,UAAU;GAAE,KAAK,EAAE;GAAK,OAAO,EAAE;GAAO,cAAc;EAAe,CAAC;EACpF,gBAAgB,YAAY;GAC1B,MAAM,aAAa,kBAAkB,EAAE,MAAM,KAAK,KAAK,CAAC;GACxD,MAAM,WAAW,QAAQ,iBAAiB,IAAI,CAAC;GAC/C,MAAM,WAAW,GAAG;EACtB;EACA,qBACEA,cAAkB;GAChB,MAAM,KAAK;GACX,WAAW;IAAE,OAAO,KAAK;IAAO,OAAO,KAAK;IAAO,UAAU,KAAK;GAAS;EAC7E,CAAC;EACH,KAAK,QAAQ;EACb,OAAO,QAAQ;EACf,OAAO,QAAQ,QAAQ,MAAM,KAAK;CACpC;AACF;;AAGA,eAAe,SACb,MACA,QACA,KACiB;CACjB,IAAI,MAAM,MAAM;CAChB,MAAM,EAAE,OAAO,SAAS,MAAM,KAAK,KAAK;CACxC,IAAI,MAAM,MAAM,IAAI,MAAM,wCAAwC,QAAQ;CAC1E,OAAQ,MAAiB,KAAK;AAChC;AAEA,eAAsB,SAAS,MAAoB,UAA8B,CAAC,GAAkB;CAClG,MAAM,OAAkB;EAAE,GAAG,SAAS,IAAI;EAAG,GAAG;CAAQ;CACxD,MAAM,EAAE,QAAQ;CAGhB,IAAI,CAAC,KAAK,OAAO;EACf,IAAI,CAAC,KAAK,OAAO,MAAM,IAAI,MAAM,+BAA+B;EAChE,IAAI,CAAC,KAAK,OAAO,MAAM,IAAI,MAAM,+BAA+B;EAChE,MAAM,IAAI,MAAM,KAAK,MAAM;GAAE,KAAK,KAAK;GAAO,OAAO,KAAK;EAAM,CAAC;EACjE,IAAI,CAAC,EAAE,IAAI,MAAM,IAAI,MAAM,0BAA0B,EAAE,QAAQ;EAC/D,mBAAmB;GAAE,GAAG;GAAM,OAAO,KAAK;GAAO,OAAO,KAAK;EAAM,CAAC;EACpE,IAAI,MAAM,kBAAkB,EAAE,WAAW,YAAY,EAAE,SAAS,KAAK,GAAG,uBAAuB;EAC/F;CACF;CAOA,IAAI,KAAK,YACP,MAAM,IAAI,MACR,6HACF;CAIF,MAAM,KAAK,gBAAgB;EAAE,OAAO,KAAK;EAAO,QAAQ;CAAI,CAAC;CAC7D,MAAM,OAAO,GAAG,OAAO,cAAc,CAAC;CACtC,IAAI,MAAM,KAAK;CACf,IAAI,QAAQ,KAAK;CACjB,IAAI;EACF,IAAI,CAAC,KAAK,MAAM,MAAM,SAAS,MAAM,uBAAuB,GAAG;EAE/D,KAAK,IAAI,UAAU,IAAK,WAAW;GACjC,IAAI,CAAC,OAAO,QAAQ,MAAM,SAAS,MAAM,oBAAoB,GAAG;GAChE,IAAI,MAAM,yBAAyB,IAAI,IAAI;GAC3C,MAAM,IAAI,MAAM,KAAK,MAAM;IAAO;IAAa;GAAO,CAAC;GACvD,IAAI,EAAE,IAAI;IACR,IAAI,MAAM,kBAAkB,EAAE,WAAW,YAAY,EAAE,SAAS,KAAK,GAAG,GAAG;IAC3E;GACF;GACA,IAAI,MAAM,KAAK,EAAE,OAAO,GAAG;GAC3B,IAAI,WAAW,GAAG,MAAM,IAAI,MAAM,uBAAuB;GACzD,QAAQ,KAAA;EACV;EAEA,mBAAmB;GAAE,GAAG;GAAM,OAAO;GAAM,OAAO;EAAO,CAAC;EAE1D,MAAM,OAAO,MAAM,SAAS,MAAM,wDAAwD,GAAG,EAAA,CAAG,YAAY;EAC5G,IAAI,QAAQ,OAAO,QAAQ,OAAO;GAChC,MAAM,KAAK,eAAe;GAC1B,IAAI,MAAM,wFAAwF;GAClG;EACF;EACA,IAAI,MAAM,gDAAgD;CAC5D,UAAU;EACR,GAAG,MAAM;CACX;CAEA,MAAM,KAAK,cAAc;AAC3B"}
+{"version":3,"file":"login-BCxHYEeG.js","names":["realRunForeground"],"sources":["../src/cp/auth-probe.ts","../src/cli/login.ts"],"sourcesContent":["/**\n * `probeAuth` — a one-shot CP auth check used by `agentconnect login`. It dials\n * the CP, sends ONLY the `auth` frame (no `register`), and resolves with the\n * authoritative daemonId from `auth/ok`, or a human-readable failure reason on\n * a `4401` close, a correlated `error`, a dial failure, or a timeout. It always\n * closes the socket and never leaves a connection open.\n */\nimport { buildEnvelope, decodeEnvelope, encode, isFrame } from '@agentconnect.md/protocol'\nimport { ClientTransport, type Transport } from './transport.js'\n\nexport interface ProbeResult {\n  ok: boolean\n  daemonId?: string\n  reason?: string\n}\n\nexport interface ProbeOpts {\n  url: string\n  token: string\n  daemonId?: string\n  agentVersion?: string\n  timeoutMs?: number\n  /** Injectable for tests; defaults to dialing the real WebSocket. */\n  connect?: () => Promise<Transport>\n}\n\nexport async function probeAuth(opts: ProbeOpts): Promise<ProbeResult> {\n  const timeoutMs = opts.timeoutMs ?? 10_000\n  const dial = opts.connect ?? (() => ClientTransport.dial(opts.url))\n\n  let transport: Transport\n  try {\n    transport = await dial()\n  } catch (err) {\n    return { ok: false, reason: `cannot reach ${opts.url}: ${(err as Error).message}` }\n  }\n\n  const authPayload: Record<string, unknown> = {\n    apiKey: opts.token,\n    agentVersion: opts.agentVersion ?? 'probe'\n  }\n  if (opts.daemonId) authPayload.daemonId = opts.daemonId\n  const frame = buildEnvelope('auth', authPayload)\n\n  return await new Promise<ProbeResult>((resolve) => {\n    let settled = false\n    const done = (r: ProbeResult): void => {\n      if (settled) return\n      settled = true\n      clearTimeout(timer)\n      try {\n        transport.close(1000, 'probe done')\n      } catch {\n        // socket may already be closed\n      }\n      resolve(r)\n    }\n\n    const timer = setTimeout(\n      () => done({ ok: false, reason: `timed out after ${timeoutMs}ms waiting for auth/ok` }),\n      timeoutMs\n    )\n\n    transport.onMessage((text) => {\n      const decoded = decodeEnvelope(text)\n      if (!decoded.ok) return\n      const f = decoded.frame\n      if (f.corr !== frame.id) return\n      if (f.type === 'error') {\n        const e = f.payload as { code: string; message: string }\n        done({ ok: false, reason: `${e.code}: ${e.message}` })\n        return\n      }\n      if (isFrame('auth/ok')(f)) {\n        const ok = f.payload as { daemonId: string }\n        done({ ok: true, daemonId: ok.daemonId })\n      }\n    })\n\n    transport.onClose((code) => {\n      if (code === 4401) done({ ok: false, reason: 'authentication failed (4401) — check the daemon token' })\n      else done({ ok: false, reason: `connection closed (${code}) before auth/ok` })\n    })\n\n    transport.send(encode(frame))\n  })\n}\n","/**\n * `agentconnect login` — interactive onboarding. It tests the Control Plane auth\n * flow, persists credentials only on success, then offers to install the OS\n * service. If installed it starts the service (`up`) and returns; otherwise it\n * runs the daemon in the foreground (the same path as `agentconnect run`).\n *\n * `persistCredentials` is the pure config-merge half (token-only onboarding:\n * `daemonId` is omitted unless given — the first connect adopts it from the\n * token's `sub`). `runLogin` is the orchestrator, with injectable deps for tests.\n */\nimport { readFileSync, existsSync, writeFileSync, mkdirSync } from 'node:fs'\nimport { dirname } from 'node:path'\nimport { createInterface } from 'node:readline'\nimport { fileURLToPath } from 'node:url'\nimport { ConfigSchema } from '../config/config-schema.js'\nimport { resolveRoot, configPath } from '../paths.js'\nimport { DAEMON_VERSION } from '../version.js'\nimport { probeAuth, type ProbeResult } from '../cp/auth-probe.js'\nimport { resolveController, type InstallOpts } from '../service/index.js'\nimport { runForeground as realRunForeground } from './run-foreground.js'\n\nexport interface PersistCredsOpts {\n  cpUrl: string\n  cpKey: string\n  daemonId?: string\n  root?: string\n  configPath?: string\n}\n\n/** Merge url/token into config.json (validated), returning the written path. */\nexport function persistCredentials(opts: PersistCredsOpts): string {\n  const root = resolveRoot(opts.root)\n  const file = opts.configPath ?? configPath(root)\n  const raw: Record<string, unknown> = existsSync(file) ? JSON.parse(readFileSync(file, 'utf8')) : { version: 1 }\n\n  const cp = (raw.controlPlane as Record<string, unknown> | undefined) ?? {}\n  raw.controlPlane = { ...cp, url: opts.cpUrl, key: opts.cpKey, enabled: true }\n  if (opts.daemonId) raw.daemonId = opts.daemonId\n\n  ConfigSchema.parse(raw) // fail before writing if the merge is invalid\n\n  mkdirSync(dirname(file), { recursive: true })\n  writeFileSync(file, JSON.stringify(raw, null, 2) + '\\n')\n  return file\n}\n\nexport interface RunLoginOpts {\n  cpUrl?: string\n  cpKey?: string\n  daemonId?: string\n  root?: string\n  configPath?: string\n  /** The resolved CLI entry path. Must be supplied by the CLI entry point\n   *  (index.ts) so the correct bundle path is used rather than inferring it\n   *  from login.ts's own import.meta.url (which is the same bundle but the\n   *  `../` path calculation would be wrong). Falls back to import.meta.url\n   *  for the pure test path where login.ts is loaded standalone. */\n  cliEntry?: string\n}\n\n/**\n * Build the InstallOpts for the OS service installer.\n *\n * Exported as a pure helper so it can be unit-tested independently of the\n * full `runLogin` orchestration. The caller (index.ts) passes `cliEntry` so\n * the correct bundle path always flows through; if omitted we fall back to\n * `import.meta.url` (correct only when login.ts is the entry, e.g. in tests).\n */\nexport function buildInstallOpts(opts: { root?: string; cliEntry?: string }): InstallOpts {\n  return {\n    execPath: process.execPath,\n    cliEntry: opts.cliEntry ?? fileURLToPath(import.meta.url),\n    includeRootEnv: resolveRoot(opts.root) !== resolveRoot(undefined)\n  }\n}\n\nexport interface LoginDeps {\n  probe: (o: { url: string; token: string }) => Promise<ProbeResult>\n  installService: () => Promise<void>\n  runForeground: () => Promise<void>\n  out: NodeJS.WritableStream\n  input: NodeJS.ReadableStream\n  isTTY: boolean\n}\n\nfunction realDeps(opts: RunLoginOpts): LoginDeps {\n  return {\n    probe: (o) => probeAuth({ url: o.url, token: o.token, agentVersion: DAEMON_VERSION }),\n    installService: async () => {\n      const controller = resolveController({ root: opts.root })\n      await controller.install(buildInstallOpts(opts))\n      await controller.up()\n    },\n    runForeground: () =>\n      realRunForeground({\n        root: opts.root,\n        overrides: { cpUrl: opts.cpUrl, cpKey: opts.cpKey, daemonId: opts.daemonId }\n      }),\n    out: process.stdout,\n    input: process.stdin,\n    isTTY: Boolean(process.stdin.isTTY)\n  }\n}\n\n/** Read the next line from a readline interface via async iterator. */\nasync function nextLine(\n  iter: AsyncIterableIterator<string>,\n  prompt: string,\n  out: NodeJS.WritableStream\n): Promise<string> {\n  out.write(prompt)\n  const { value, done } = await iter.next()\n  if (done) throw new Error(`unexpected end of input waiting for: ${prompt}`)\n  return (value as string).trim()\n}\n\nexport async function runLogin(opts: RunLoginOpts, partial: Partial<LoginDeps> = {}): Promise<void> {\n  const deps: LoginDeps = { ...realDeps(opts), ...partial }\n  const { out } = deps\n\n  // ── Non-interactive: flags required; probe; persist. No prompts, no handoff. ──\n  if (!deps.isTTY) {\n    if (!opts.cpUrl) throw new Error('login requires --cp-url <url>')\n    if (!opts.cpKey) throw new Error('login requires --cp-key <key>')\n    const r = await deps.probe({ url: opts.cpUrl, token: opts.cpKey })\n    if (!r.ok) throw new Error(`authentication failed: ${r.reason}`)\n    persistCredentials({ ...opts, cpUrl: opts.cpUrl, cpKey: opts.cpKey })\n    out.write(`✓ authenticated${r.daemonId ? ` (daemon ${r.daemonId})` : ''} — credentials saved\\n`)\n    return\n  }\n\n  // Both interactive handoffs read `<root>/config.json`: the installed service\n  // runs `… run` (no `--config`), and the foreground `Daemon` loads by root. A\n  // custom `--config` would persist credentials the daemon never reads, so the\n  // install/run branch would look successful but start without them. Reject it;\n  // `--root` is the knob that keeps persist + service + foreground in sync.\n  if (opts.configPath) {\n    throw new Error(\n      'interactive login does not support --config — use --root <dir> so the daemon and the installed service read the same config'\n    )\n  }\n\n  // ── Interactive ──\n  const rl = createInterface({ input: deps.input, output: out })\n  const iter = rl[Symbol.asyncIterator]()\n  let url = opts.cpUrl\n  let token = opts.cpKey\n  try {\n    if (!url) url = await nextLine(iter, 'Control Plane URL: ', out)\n\n    for (let attempt = 0; ; attempt++) {\n      if (!token) token = await nextLine(iter, 'Daemon API key: ', out)\n      out.write(`Testing connection to ${url}…\\n`)\n      const r = await deps.probe({ url: url!, token: token! })\n      if (r.ok) {\n        out.write(`✓ authenticated${r.daemonId ? ` (daemon ${r.daemonId})` : ''}\\n`)\n        break\n      }\n      out.write(`✗ ${r.reason}\\n`)\n      if (attempt >= 1) throw new Error('authentication failed')\n      token = undefined // re-prompt on retry\n    }\n\n    persistCredentials({ ...opts, cpUrl: url!, cpKey: token! })\n\n    const ans = (await nextLine(iter, 'Install AgentConnect as a background service? (y/N) ', out)).toLowerCase()\n    if (ans === 'y' || ans === 'yes') {\n      await deps.installService()\n      out.write('Service installed and started. Manage it with `agentconnect up` / `down` / `status`.\\n')\n      return\n    }\n    out.write('Starting in the foreground (Ctrl-C to stop)…\\n')\n  } finally {\n    rl.close()\n  }\n\n  await deps.runForeground()\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AA0BA,eAAsB,UAAU,MAAuC;CACrE,MAAM,YAAY,KAAK,aAAa;CACpC,MAAM,OAAO,KAAK,kBAAkB,gBAAgB,KAAK,KAAK,GAAG;CAEjE,IAAI;CACJ,IAAI;EACF,YAAY,MAAM,KAAK;CACzB,SAAS,KAAK;EACZ,OAAO;GAAE,IAAI;GAAO,QAAQ,gBAAgB,KAAK,IAAI,IAAK,IAAc;EAAU;CACpF;CAEA,MAAM,cAAuC;EAC3C,QAAQ,KAAK;EACb,cAAc,KAAK,gBAAgB;CACrC;CACA,IAAI,KAAK,UAAU,YAAY,WAAW,KAAK;CAC/C,MAAM,QAAQ,cAAc,QAAQ,WAAW;CAE/C,OAAO,MAAM,IAAI,SAAsB,YAAY;EACjD,IAAI,UAAU;EACd,MAAM,QAAQ,MAAyB;GACrC,IAAI,SAAS;GACb,UAAU;GACV,aAAa,KAAK;GAClB,IAAI;IACF,UAAU,MAAM,KAAM,YAAY;GACpC,QAAQ,CAER;GACA,QAAQ,CAAC;EACX;EAEA,MAAM,QAAQ,iBACN,KAAK;GAAE,IAAI;GAAO,QAAQ,mBAAmB,UAAU;EAAwB,CAAC,GACtF,SACF;EAEA,UAAU,WAAW,SAAS;GAC5B,MAAM,UAAU,eAAe,IAAI;GACnC,IAAI,CAAC,QAAQ,IAAI;GACjB,MAAM,IAAI,QAAQ;GAClB,IAAI,EAAE,SAAS,MAAM,IAAI;GACzB,IAAI,EAAE,SAAS,SAAS;IACtB,MAAM,IAAI,EAAE;IACZ,KAAK;KAAE,IAAI;KAAO,QAAQ,GAAG,EAAE,KAAK,IAAI,EAAE;IAAU,CAAC;IACrD;GACF;GACA,IAAI,QAAQ,SAAS,CAAC,CAAC,CAAC,GAAG;IACzB,MAAM,KAAK,EAAE;IACb,KAAK;KAAE,IAAI;KAAM,UAAU,GAAG;IAAS,CAAC;GAC1C;EACF,CAAC;EAED,UAAU,SAAS,SAAS;GAC1B,IAAI,SAAS,MAAM,KAAK;IAAE,IAAI;IAAO,QAAQ;GAAwD,CAAC;QACjG,KAAK;IAAE,IAAI;IAAO,QAAQ,sBAAsB,KAAK;GAAkB,CAAC;EAC/E,CAAC;EAED,UAAU,KAAK,OAAO,KAAK,CAAC;CAC9B,CAAC;AACH;;;;;;;;;;;;;;ACxDA,SAAgB,mBAAmB,MAAgC;CACjE,MAAM,OAAO,YAAY,KAAK,IAAI;CAClC,MAAM,OAAO,KAAK,cAAc,WAAW,IAAI;CAC/C,MAAM,MAA+B,WAAW,IAAI,IAAI,KAAK,MAAM,aAAa,MAAM,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE;CAG9G,IAAI,eAAe;EAAE,GADT,IAAI,gBAAwD,CAAC;EAC7C,KAAK,KAAK;EAAO,KAAK,KAAK;EAAO,SAAS;CAAK;CAC5E,IAAI,KAAK,UAAU,IAAI,WAAW,KAAK;CAEvC,aAAa,MAAM,GAAG;CAEtB,UAAU,QAAQ,IAAI,GAAG,EAAE,WAAW,KAAK,CAAC;CAC5C,cAAc,MAAM,KAAK,UAAU,KAAK,MAAM,CAAC,IAAI,IAAI;CACvD,OAAO;AACT;;;;;;;;;AAwBA,SAAgB,iBAAiB,MAAyD;CACxF,OAAO;EACL,UAAU,QAAQ;EAClB,UAAU,KAAK,YAAY,cAAc,OAAO,KAAK,GAAG;EACxD,gBAAgB,YAAY,KAAK,IAAI,MAAM,YAAY,KAAA,CAAS;CAClE;AACF;AAWA,SAAS,SAAS,MAA+B;CAC/C,OAAO;EACL,QAAQ,MAAM,UAAU;GAAE,KAAK,EAAE;GAAK,OAAO,EAAE;GAAO,cAAc;EAAe,CAAC;EACpF,gBAAgB,YAAY;GAC1B,MAAM,aAAa,kBAAkB,EAAE,MAAM,KAAK,KAAK,CAAC;GACxD,MAAM,WAAW,QAAQ,iBAAiB,IAAI,CAAC;GAC/C,MAAM,WAAW,GAAG;EACtB;EACA,qBACEA,cAAkB;GAChB,MAAM,KAAK;GACX,WAAW;IAAE,OAAO,KAAK;IAAO,OAAO,KAAK;IAAO,UAAU,KAAK;GAAS;EAC7E,CAAC;EACH,KAAK,QAAQ;EACb,OAAO,QAAQ;EACf,OAAO,QAAQ,QAAQ,MAAM,KAAK;CACpC;AACF;;AAGA,eAAe,SACb,MACA,QACA,KACiB;CACjB,IAAI,MAAM,MAAM;CAChB,MAAM,EAAE,OAAO,SAAS,MAAM,KAAK,KAAK;CACxC,IAAI,MAAM,MAAM,IAAI,MAAM,wCAAwC,QAAQ;CAC1E,OAAQ,MAAiB,KAAK;AAChC;AAEA,eAAsB,SAAS,MAAoB,UAA8B,CAAC,GAAkB;CAClG,MAAM,OAAkB;EAAE,GAAG,SAAS,IAAI;EAAG,GAAG;CAAQ;CACxD,MAAM,EAAE,QAAQ;CAGhB,IAAI,CAAC,KAAK,OAAO;EACf,IAAI,CAAC,KAAK,OAAO,MAAM,IAAI,MAAM,+BAA+B;EAChE,IAAI,CAAC,KAAK,OAAO,MAAM,IAAI,MAAM,+BAA+B;EAChE,MAAM,IAAI,MAAM,KAAK,MAAM;GAAE,KAAK,KAAK;GAAO,OAAO,KAAK;EAAM,CAAC;EACjE,IAAI,CAAC,EAAE,IAAI,MAAM,IAAI,MAAM,0BAA0B,EAAE,QAAQ;EAC/D,mBAAmB;GAAE,GAAG;GAAM,OAAO,KAAK;GAAO,OAAO,KAAK;EAAM,CAAC;EACpE,IAAI,MAAM,kBAAkB,EAAE,WAAW,YAAY,EAAE,SAAS,KAAK,GAAG,uBAAuB;EAC/F;CACF;CAOA,IAAI,KAAK,YACP,MAAM,IAAI,MACR,6HACF;CAIF,MAAM,KAAK,gBAAgB;EAAE,OAAO,KAAK;EAAO,QAAQ;CAAI,CAAC;CAC7D,MAAM,OAAO,GAAG,OAAO,cAAc,CAAC;CACtC,IAAI,MAAM,KAAK;CACf,IAAI,QAAQ,KAAK;CACjB,IAAI;EACF,IAAI,CAAC,KAAK,MAAM,MAAM,SAAS,MAAM,uBAAuB,GAAG;EAE/D,KAAK,IAAI,UAAU,IAAK,WAAW;GACjC,IAAI,CAAC,OAAO,QAAQ,MAAM,SAAS,MAAM,oBAAoB,GAAG;GAChE,IAAI,MAAM,yBAAyB,IAAI,IAAI;GAC3C,MAAM,IAAI,MAAM,KAAK,MAAM;IAAO;IAAa;GAAO,CAAC;GACvD,IAAI,EAAE,IAAI;IACR,IAAI,MAAM,kBAAkB,EAAE,WAAW,YAAY,EAAE,SAAS,KAAK,GAAG,GAAG;IAC3E;GACF;GACA,IAAI,MAAM,KAAK,EAAE,OAAO,GAAG;GAC3B,IAAI,WAAW,GAAG,MAAM,IAAI,MAAM,uBAAuB;GACzD,QAAQ,KAAA;EACV;EAEA,mBAAmB;GAAE,GAAG;GAAM,OAAO;GAAM,OAAO;EAAO,CAAC;EAE1D,MAAM,OAAO,MAAM,SAAS,MAAM,wDAAwD,GAAG,EAAA,CAAG,YAAY;EAC5G,IAAI,QAAQ,OAAO,QAAQ,OAAO;GAChC,MAAM,KAAK,eAAe;GAC1B,IAAI,MAAM,wFAAwF;GAClG;EACF;EACA,IAAI,MAAM,gDAAgD;CAC5D,UAAU;EACR,GAAG,MAAM;CACX;CAEA,MAAM,KAAK,cAAc;AAC3B"}

package/dist/run-foreground-BQl2a8y9.js

@@ -0,0 +1,2 @@
+import { t as runForeground } from "./run-foreground-DN1BSygk.js";
+export { runForeground };

package/dist/{run-foreground-Cg2ewYjn.js → run-foreground-DN1BSygk.js}

@@ -5517,6 +5517,19 @@ var LocalStore = class {
 		if (agentId !== void 0) return this.db.prepare("SELECT * FROM sessions WHERE acpSessionId IS NOT NULL AND agentId = ? ORDER BY updatedAt DESC").all(agentId);
 		return this.db.prepare("SELECT * FROM sessions WHERE acpSessionId IS NOT NULL ORDER BY updatedAt DESC").all();
 	}
+	/** The most recently active addressable session (has an ACP id) for an agent in a
+	*  channel, or undefined. Backs `/status` when the command message itself doesn't fall
+	*  in a session's thread (a bare Telegram `/status` keys to its own reply thread) — we
+	*  then report the channel's latest session rather than "nothing here". */
+	latestSession(agentId, channel) {
+		return this.db.prepare("SELECT * FROM sessions WHERE agentId = ? AND channel = ? AND acpSessionId IS NOT NULL ORDER BY updatedAt DESC LIMIT 1").get(agentId, channel);
+	}
+	/** The most recently active addressable session (has an ACP id) in a channel, across
+	*  ALL agents — or undefined. Used to resolve which agent a bare command targets when
+	*  routing can't (e.g. a group `/status@bot` with no mention entity / thread). */
+	latestSessionInChannel(channel) {
+		return this.db.prepare("SELECT * FROM sessions WHERE channel = ? AND acpSessionId IS NOT NULL ORDER BY updatedAt DESC LIMIT 1").get(channel);
+	}
 	/** Lookup by ACP session id (the protocol-facing `sessionId`), or undefined. */
 	getSessionByAcpId(acpSessionId) {
 		return this.db.prepare("SELECT * FROM sessions WHERE acpSessionId = ?").get(acpSessionId);
@@ -10169,6 +10182,13 @@ const CANCEL_WORDS = /* @__PURE__ */ new Set(["cancel"]);
 const QUEUE_WORDS = /* @__PURE__ */ new Set(["queue"]);
 const STATUS_WORDS = /* @__PURE__ */ new Set(["status"]);
 const FAST_WORDS = /* @__PURE__ */ new Set(["fast"]);
+const MODEL_WORDS = /* @__PURE__ */ new Set(["model", "models"]);
+const EFFORT_WORDS = /* @__PURE__ */ new Set(["effort"]);
+const PERMISSION_WORDS = /* @__PURE__ */ new Set([
+	"permission",
+	"permissions",
+	"perm"
+]);
 /**
 * Parse a leading control command from a message's text. Returns `null` when the
 * text is not a recognized command (so it flows to the agent unchanged). The
@@ -10199,6 +10219,18 @@ function parseCommand(raw) {
 			enable: a === "on" ? true : a === "off" ? false : null
 		};
 	}
+	if (MODEL_WORDS.has(word)) return {
+		kind: "model",
+		value: arg || null
+	};
+	if (EFFORT_WORDS.has(word)) return {
+		kind: "effort",
+		value: arg || null
+	};
+	if (PERMISSION_WORDS.has(word)) return {
+		kind: "permission",
+		value: arg || null
+	};
 	return null;
 }
 //#endregion
@@ -117446,6 +117478,18 @@ const BOT_COMMANDS = [
 		command: "fast",
 		description: "Toggle fast mode — /fast on | off"
 	},
+	{
+		command: "models",
+		description: "Choose the model — /models [name] (bare = list)"
+	},
+	{
+		command: "effort",
+		description: "Choose reasoning effort — /effort [level] (bare = list)"
+	},
+	{
+		command: "permission",
+		description: "Choose permission mode — /permission [mode] (bare = list)"
+	},
 	{
 		command: "queue",
 		description: "Queue a message to run when idle — /queue <text>"
@@ -117485,12 +117529,22 @@ function defaultFactory(token) {
 		onMessage(handler) {
 			bot.on("message", (ctx) => handler(ctx.message));
 		},
+		onCallbackQuery(handler) {
+			bot.on("callback_query:data", (ctx) => handler(ctx.callbackQuery));
+		},
 		start(onStart) {
 			bot.start(onStart ? { onStart: () => onStart() } : void 0);
 		},
 		stop: () => bot.stop()
 	};
 }
+/** Map our button rows to grammY's `InlineKeyboardMarkup` wire shape. */
+function toInlineKeyboard(buttons) {
+	return { inline_keyboard: buttons.map((row) => row.map((b) => ({
+		text: b.text,
+		callback_data: b.callbackData
+	}))) };
+}
 const DEFAULT_MAX_ATTACHMENT_BYTES = 8 * 1024 * 1024;
 /** Cap on admins enriched per listMembers call (bounds the response). */
 const MEMBER_CAP = 50;
@@ -117526,6 +117580,19 @@ var TelegramConnection = class {
 			log?.debug(`telegram: inbound ch=${msg.channel} user=${msg.sender.id} isBot=${msg.sender.isBot} isDm=${msg.isDm} topic=${msg.telegramTopicId ?? "-"} root=${msg.telegramThreadRoot ?? "-"} replyTo=${msg.replyTo ?? "-"} mentions=[${msg.mentionedBots.join(",")}] text=${JSON.stringify(msg.text.slice(0, 80))}`);
 			this.deps.onMessage(msg);
 		});
+		this.bot.onCallbackQuery((q) => {
+			if (!q.message || q.data == null) return;
+			const cb = {
+				id: q.id,
+				data: q.data,
+				channel: String(q.message.chat.id),
+				messageId: q.message.message_id,
+				userId: q.from ? String(q.from.id) : "unknown",
+				...q.message.message_thread_id != null ? { topicId: String(q.message.message_thread_id) } : {}
+			};
+			log?.debug(`telegram: callback ch=${cb.channel} user=${cb.userId} data=${JSON.stringify(cb.data)}`);
+			this.deps.onCallback?.(cb);
+		});
 		try {
 			await this.bot.api.setMyCommands(BOT_COMMANDS);
 			log?.debug("telegram: setMyCommands ok");
@@ -117581,6 +117648,53 @@ var TelegramConnection = class {
 			}
 		});
 	}
+	/**
+	* Post an interactive "card": a message carrying an inline keyboard (rows of tappable
+	* buttons) — the session-control pickers (/models, /effort, /permission). Best-effort;
+	* returns the new message id so the card can be edited in place after a tap.
+	*/
+	async postCard(channel, text, buttons, opts = {}) {
+		const thread = opts.threadTs != null && /^\d+$/.test(opts.threadTs) ? Number(opts.threadTs) : void 0;
+		return this.queue.enqueue(async () => {
+			try {
+				const res = await this.bot.api.sendMessage(channel, text, {
+					...thread !== void 0 ? { message_thread_id: thread } : {},
+					...opts.parseMode ? { parse_mode: opts.parseMode } : {},
+					...opts.replyTo !== void 0 ? { reply_parameters: {
+						message_id: opts.replyTo,
+						allow_sending_without_reply: true
+					} } : {},
+					reply_markup: toInlineKeyboard(buttons)
+				});
+				return res?.message_id != null ? String(res.message_id) : void 0;
+			} catch (err) {
+				this.deps.log?.debug(`telegram: sendMessage (card) failed (ch=${channel}): ${err.message}`);
+				return;
+			}
+		});
+	}
+	/** Re-render a card in place (new text + keyboard) after a tap. Best-effort. */
+	async editCard(channel, messageId, text, buttons, opts = {}) {
+		await this.queue.enqueue(async () => {
+			try {
+				await this.bot.api.editMessageText(channel, messageId, text, {
+					...opts.parseMode ? { parse_mode: opts.parseMode } : {},
+					reply_markup: toInlineKeyboard(buttons)
+				});
+			} catch (err) {
+				this.deps.log?.debug(`telegram: editMessageText (card) failed (ch=${channel} id=${messageId}): ${err.message}`);
+			}
+		});
+	}
+	/** Acknowledge an inline-keyboard tap (clears the client's loading spinner; the
+	*  optional `text` shows as a transient toast). Not queued — a quick standalone ack. */
+	async answerCallback(callbackId, text) {
+		try {
+			await this.bot.api.answerCallbackQuery(callbackId, text ? { text } : void 0);
+		} catch (err) {
+			this.deps.log?.debug(`telegram: answerCallbackQuery failed: ${err.message}`);
+		}
+	}
 	/** Edit a previously-posted message in place (editMessageText). Best-effort. */
 	async updateMessage(channel, messageId, text, opts = {}) {
 		await this.queue.enqueue(async () => {
@@ -136307,6 +136421,16 @@ function formatErr(err) {
 	return e?.stack ?? String(err);
 }
 const MAX_QUEUED_PER_SESSION = 10;
+const SELECT_KIND_CODE = {
+	model: "m",
+	effort: "e",
+	permission: "p"
+};
+const SELECT_CODE_KIND = {
+	m: "model",
+	e: "effort",
+	p: "permission"
+};
 const WEBCHAT_CHUNK_BYTES = 32 * 1024;
 /** Split `text` into pieces whose UTF-8 byte length each stays under WEBCHAT_CHUNK_BYTES
 *  so no single webchat/output frame exceeds the 256 KiB cap. Splits on byte budget by
@@ -136801,6 +136925,7 @@ var Daemon = class Daemon {
 				group,
 				newTraceId: () => randomUUID(),
 				onMessage: (msg) => this.onInbound(msg),
+				onCallback: (cb) => this.handleTelegramCallback(cb, conn),
 				log: this.log
 			});
 			try {
@@ -137280,28 +137405,59 @@ var Daemon = class Daemon {
 	}
 	queued = /* @__PURE__ */ new Map();
 	/**
+	* Resolve a command's target from the channel's latest session when the routing ladder
+	* couldn't (no mention entity / thread / dm rule matched — e.g. a group `/status@bot`).
+	* Picks the agent that owns the most-recent session in the channel and its integration
+	* for this platform, enforcing that integration's `allowedUserIds` so a command can't
+	* bypass the authz the routing rules would have applied. Null when there's no session,
+	* no matching integration, or the sender isn't allowed.
+	*/
+	resolveCommandTargetFromLatest(msg) {
+		const latest = this.store.latestSessionInChannel(msg.channel);
+		if (!latest) return null;
+		const integ = this.agents.get(latest.agentId)?.integrations.find((i) => i.platform === msg.platform);
+		if (!integ) return null;
+		const allowed = integ.platform === "telegram" ? integ.telegram.allowedUserIds : integ.slack.allowedUserIds;
+		if (allowed.length > 0 && !allowed.includes(msg.sender.id)) return null;
+		return {
+			agentId: latest.agentId,
+			integrationId: integ.id,
+			via: "thread"
+		};
+	}
+	/**
 	* Handle an in-conversation control command. Resolves the target agent via the
 	* same routing ladder as a normal message (so thread-affinity + per-integration
 	* `allowedUserIds` authz apply), then acts on that agent's session in this
 	* (channel, thread).
 	*/
 	handleCommand(command, msg) {
-		const target = routeRules(msg, this.mergedRules(), (c, t) => this.sessions.threadOwner(c, t));
+		let target = routeRules(msg, this.mergedRules(), (c, t) => this.sessions.threadOwner(c, t));
+		if (!target) target = this.resolveCommandTargetFromLatest(msg);
 		if (!target) {
 			this.log.debug(`command: '${command.kind}' in ch=${msg.channel} — no agent resolved, ignoring`);
 			return;
 		}
 		const conn = this.replyConnFor(target.agentId, target.integrationId);
-		const thread = msg.thread ?? msg.msgId;
-		const key = sessionKey(msg.platform, msg.channel, thread, target.agentId);
-		const rec = this.store.getSession(key);
+		const replyThread = msg.thread ?? msg.msgId;
+		let thread = replyThread;
+		let key = sessionKey(msg.platform, msg.channel, thread, target.agentId);
+		let rec = this.store.getSession(key);
+		if (!rec) {
+			const latest = this.store.latestSession(target.agentId, msg.channel);
+			if (latest) {
+				rec = latest;
+				key = latest.key;
+				thread = latest.thread;
+			}
+		}
 		const acpSessionId = rec?.acpSessionId;
 		const inflight = !!(acpSessionId && this.pending.has(acpSessionId));
 		const tgReplyTo = this.telegramReplyTarget(msg);
 		const reply = (text) => {
 			if (!conn) return;
-			if (msg.platform === "telegram") conn.postMessage(msg.channel, text, thread, tgReplyTo);
-			else conn.postMessage(msg.channel, text, thread);
+			if (msg.platform === "telegram") conn.postMessage(msg.channel, text, replyThread, tgReplyTo);
+			else conn.postMessage(msg.channel, text, replyThread);
 		};
 		if (command.kind === "stop") {
 			if (rec) this.store.setSessionMuted(key, true);
@@ -137332,7 +137488,7 @@ var Daemon = class Daemon {
 			const link = acpSessionId ? this.sessionLink(acpSessionId) : void 0;
 			if (msg.platform === "telegram") conn?.postChrome(msg.channel, renderStatusReply(info, link), {
 				parseMode: "HTML",
-				threadTs: thread,
+				threadTs: replyThread,
 				replyTo: tgReplyTo
 			});
 			else reply(link ? `${renderStatusBar(info)}  ·  <${link}|View session>` : renderStatusBar(info));
@@ -137351,13 +137507,26 @@ var Daemon = class Daemon {
 			reply(command.enable ? "⚡ Fast mode on." : "🐢 Fast mode off.");
 			return;
 		}
+		if (command.kind === "model" || command.kind === "effort" || command.kind === "permission") {
+			if (!rec) {
+				reply("No active session here to configure.");
+				return;
+			}
+			const card = msg.platform === "telegram" && conn ? (text, buttons) => void conn.postCard(msg.channel, text, buttons, {
+				threadTs: replyThread,
+				replyTo: tgReplyTo
+			}) : void 0;
+			this.handleSelectCommand(command.kind, command.value, target.agentId, key, acpSessionId ?? void 0, reply, card);
+			return;
+		}
 		if (!command.text) {
 			reply("Usage: `!queue <message>` — runs when the current turn finishes.");
 			return;
 		}
 		const payload = {
 			...msg,
-			text: command.text
+			text: command.text,
+			thread
 		};
 		if (!inflight) {
 			this.log.info(`command: queue → agent "${target.agentId}" idle, dispatching now`);
@@ -137375,6 +137544,134 @@ var Daemon = class Daemon {
 		this.log.info(`command: queue → agent "${target.agentId}" session ${acpSessionId} (depth ${q.length})`);
 		reply(`📥 Queued (#${q.length}) — will run when the current turn finishes.`);
 	}
+	selectLabel(kind) {
+		return kind === "model" ? "Model" : kind === "effort" ? "Reasoning effort" : "Permission mode";
+	}
+	/** Current value + selectable options for a select kind, from a status snapshot. */
+	selectOptions(kind, info) {
+		if (kind === "model") return {
+			current: info.model,
+			options: info.models ?? []
+		};
+		if (kind === "effort") return {
+			current: info.effort,
+			options: info.efforts ?? []
+		};
+		return {
+			current: info.permissionMode,
+			options: info.permissionModes ?? []
+		};
+	}
+	/** Apply a resolved select value to a session key via the matching sticky-override setter. */
+	applySelect(kind, key, value) {
+		if (kind === "model") this.setModelByKey(key, value);
+		else if (kind === "effort") this.setEffortByKey(key, value);
+		else this.setPermissionModeByKey(key, value);
+	}
+	/** Build a session-control card: a header line + one tappable button per option (the
+	*  current one flagged), with `callback_data` = `<kindCode>:<optionIndex>`. */
+	buildSelectCard(kind, current, options) {
+		const code = SELECT_KIND_CODE[kind];
+		const buttons = options.map((o, i) => [{
+			text: `${o === current ? "✅ " : ""}${o}`,
+			callbackData: `${code}:${i}`
+		}]);
+		return {
+			text: `${this.selectLabel(kind)} — tap to switch (current: ${current ?? "default"}):`,
+			buttons
+		};
+	}
+	/**
+	* Back the `/models` `/effort` `/permission` commands. A bare command lists the current
+	* selectable values — as a tappable inline-keyboard card when `card` is provided
+	* (Telegram), else a numbered text list. An argument applies a choice, matched by exact
+	* id, unique case-insensitive substring, or 1-based list index. Options come from the
+	* live host's config selectors (statusInfoFrom); when the host is cold a given value is
+	* accepted optimistically and takes effect on the next turn.
+	*/
+	handleSelectCommand(kind, value, agentId, key, acpSessionId, reply, card) {
+		const label = this.selectLabel(kind);
+		const info = this.statusInfoFrom(agentId, key, acpSessionId);
+		const { current, options } = this.selectOptions(kind, info);
+		const cmd = kind === "model" ? "models" : kind;
+		if (value === null) {
+			if (options.length === 0) {
+				reply(current ? `${label}: ${current} (no other options offered${kind === "effort" ? " — the current model may not support effort" : ""}).` : `No ${label.toLowerCase()} options available yet — send me a message first, then try /${cmd} again.`);
+				return;
+			}
+			if (card) {
+				const { text, buttons } = this.buildSelectCard(kind, current, options);
+				card(text, buttons);
+				return;
+			}
+			reply(`${label} — reply \`/${cmd} <name or number>\`:\n${options.map((o, i) => `${i + 1}. ${o}${o === current ? "  ✓ (current)" : ""}`).join("\n")}`);
+			return;
+		}
+		let resolved;
+		if (options.length === 0) resolved = value.trim();
+		else {
+			const v = value.trim();
+			const idx = Number(v);
+			if (Number.isInteger(idx) && idx >= 1 && idx <= options.length) resolved = options[idx - 1];
+			else {
+				const lc = v.toLowerCase();
+				resolved = options.find((o) => o.toLowerCase() === lc) ?? (options.filter((o) => o.toLowerCase().includes(lc)).length === 1 ? options.find((o) => o.toLowerCase().includes(lc)) : void 0);
+			}
+		}
+		if (!resolved) {
+			reply(`Unknown ${label.toLowerCase()} "${value.trim()}".${options.length ? ` Options: ${options.join(", ")}` : ""}`);
+			return;
+		}
+		this.applySelect(kind, key, resolved);
+		reply(options.length === 0 ? `${label} set to ${resolved} — applies on your next message.` : `✅ ${label} set to ${resolved}.`);
+	}
+	/**
+	* Handle a tapped session-control card button (Telegram inline keyboard). Decodes
+	* `<kindCode>:<optionIndex>`, resolves the channel's latest session (with the same
+	* allowedUserIds authz as a command), applies the picked value, acks the tap, and
+	* re-renders the card with the new current marked. Best-effort throughout — a tap
+	* must never throw out of the update pump.
+	*/
+	handleTelegramCallback(cb, conn) {
+		const m = /^([mep]):(\d+)$/.exec(cb.data);
+		if (!m) {
+			conn.answerCallback(cb.id);
+			return;
+		}
+		const kind = SELECT_CODE_KIND[m[1]];
+		const idx = Number(m[2]);
+		const session = this.commandSessionForLatest(cb.channel, cb.userId);
+		if (!session) {
+			conn.answerCallback(cb.id, "No active session here.");
+			return;
+		}
+		const info = this.statusInfoFrom(session.agentId, session.key, session.acpSessionId);
+		const { options } = this.selectOptions(kind, info);
+		const value = options[idx];
+		if (value === void 0) {
+			conn.answerCallback(cb.id, "Options changed — reopen the menu.");
+			return;
+		}
+		this.applySelect(kind, session.key, value);
+		conn.answerCallback(cb.id, `${this.selectLabel(kind)} → ${value}`);
+		const { text, buttons } = this.buildSelectCard(kind, value, options);
+		conn.editCard(cb.channel, cb.messageId, text, buttons);
+	}
+	/** The channel's latest session for a Telegram command/callback, gated by the agent's
+	*  telegram integration allowedUserIds. Null when there's no session, no telegram
+	*  integration, or the user isn't allowed. */
+	commandSessionForLatest(channel, userId) {
+		const latest = this.store.latestSessionInChannel(channel);
+		if (!latest) return null;
+		const integ = this.agents.get(latest.agentId)?.integrations.find((i) => i.platform === "telegram");
+		if (!integ || integ.platform !== "telegram") return null;
+		if (integ.telegram.allowedUserIds.length > 0 && !integ.telegram.allowedUserIds.includes(userId)) return null;
+		return {
+			agentId: latest.agentId,
+			key: latest.key,
+			acpSessionId: latest.acpSessionId ?? void 0
+		};
+	}
 	/** Drain one buffered message for a session whose turn just finished (FIFO). */
 	flushQueued(agentId, sessionId, integrationId) {
 		const q = this.queued.get(sessionId);
@@ -138637,4 +138934,4 @@ async function runForeground(opts, deps = {}) {
 //#endregion
 export { ClientTransport as n, runForeground as t };
 
-//# sourceMappingURL=run-foreground-Cg2ewYjn.js.map
+//# sourceMappingURL=run-foreground-DN1BSygk.js.map