@alphacoder-v0/pi-loops 0.24.0 → 0.24.2

package/src/cli.ts

@@ -9,14 +9,14 @@
  *   pi-loops import <file> [--cwd <dir>] [--activate-triggers=off|ask|on]
  */
 import { execFileSync, spawn, spawnSync } from "node:child_process";
-import { plural } from "./job-lines.ts";
+import { plural } from "./plural.ts";
 import * as fs from "node:fs";
 import * as net from "node:net";
 import * as os from "node:os";
 import * as path from "node:path";
 import * as readline from "node:readline";
-import { fileURLToPath, pathToFileURL } from "node:url";
-import { SessionManager, getAgentDir } from "@earendil-works/pi-coding-agent";
+import { fileURLToPath } from "node:url";
+import { isRemoteTty, openFileTarget, openUrl, thisMachine } from "./browser-open.ts";
 import { applyImport, automationOf, exportSession, defaultExportPath, importSession, inspectArchive, offerToEnable, parseActivateMode } from "./archive.ts";
 import { API_KEY_REFUSAL, CONTROL_TIMEOUT_MS, COPY_KEY_MS, askHost, hostSocketPath, openConversations, renderHostSnapshot, requestLines, requestQueues, ringHost } from "./host-control-channel.ts";
 import { heldTurnFor, stopRow } from "./engine.ts";
@@ -30,13 +30,13 @@ import { crashPaused, crashPauseText, ensureHost, HOST_LOG, hostCommand, hostSer
 import { loadConfig, pageBindPort } from "./config.ts";
 import { writeUiPref } from "./ui-prefs.ts";
 import { type UiPrefs, clearUiPref, readUiPrefs } from "./ui-prefs.ts";
-import { JobStore, defaultLoopsDir, homeLoopsDir } from "./store.ts";
+import { JobStore, defaultLoopsDir, homeLoopsDir, piAgentDir } from "./store.ts";
 import { automationBadge, previewText, readSessionHead, shortSessionId } from "./session-head.ts";
 import { AUTONOMY_LEVELS, type AutonomyLevel, INSTALL_ROOT, TRACKER_FILE, addLineFor, ensureExcluded, installDirFor, installFiles, installedRecipes, listRecipes, loadRecipe, planInstall, playbookFiles, readRecord, resolveRecipeRef } from "./recipe.ts";
 import { TriggerStore } from "./triggers.ts";
 import { PI_LOOPS_VERSION } from "./version.ts";
 import { formatLocal, stamp } from "./schedule.ts";
-import { canonicalDir } from "./trust.ts";
+import { canonicalDir } from "./paths.ts";
 
 /**
  * Which front end `pi-loops` opens when you do not say. A browser is the better window when one is
@@ -67,17 +67,12 @@ export function noTerminalRefusal(input: { web: boolean; tui: boolean; interacti
 	return `pi-loops: there is no terminal here to open pi in; run pi-loops --web to open the page, or pi-loops -- -p "<prompt>" for one answer`;
 }
 
-/** ssh and mosh set at least one of these; opening a browser on the far end helps nobody. */
-export function isRemoteTty(env: NodeJS.ProcessEnv = process.env): boolean {
-	return ["SSH_CONNECTION", "SSH_CLIENT", "SSH_TTY", "MOSH_CONNECTION"].some((k) => !!env[k]);
-}
-
 /**
  * Flags `pi-loops` reads for itself when launching; everything else is pi's. `port`, `host`,
  * `allow-host` and `no-auth` are claimed only to be refused: the page outlives the command now, so
  * its address lives in config.toml.
  */
-const LAUNCH_FLAGS = new Set(["web", "tui", "port", "host", "allow-host", "open", "no-open", "no-auth", "loops-dir", "help"]);
+const LAUNCH_FLAGS = new Set(["web", "tui", "port", "host", "allow-host", "no-open", "no-auth", "loops-dir", "help"]);
 /** The ones that take the next argument as their value. */
 const LAUNCH_FLAGS_WITH_VALUE = new Set(["port", "host", "allow-host", "loops-dir"]);
 
@@ -114,19 +109,25 @@ const CLI_USAGE = [
 	"pi-loops [--web | --tui] [--no-open] [--loops-dir <dir>] [<pi flags>] [-- <pi flags>]",
 	"    Open a conversation: the browser page on a local terminal, pi itself over ssh (pi-loops web and pi-loops tui say which).",
 	"",
+	"pi-loops open [--cwd <dir>] [--loops-dir <dir>]",
+	"    Open the page on this project's newest conversation, with a one-use link that signs a browser in.",
+	"",
 	"pi-loops upgrade [--check]",
 	"    Install the newest release from the repository this copy came from.",
 	"",
 	"pi-loops install-launcher [--dir <dir>]",
 	"    Put a `pi-loops` launcher on your PATH.",
 	"",
+	"pi-loops uninstall-launcher [--dir <dir>]",
+	"    Remove the `pi-loops` launcher, so no pi session writes it again.",
+	"",
 	"pi-loops export [--session <id>] [--cwd <dir>] [--output <file>] [--exclude-triggers]",
 	"    Bundle a session and its automation into a .pisession archive.",
 	"",
 	"pi-loops import <file> [--cwd <dir>] [--activate-triggers=off|ask|on]",
 	"    Restore an archive into a project.",
 	"",
-	"pi-loops sessions [--all] [--limit <n>]",
+	"pi-loops sessions [--all] [--limit <n>] [--cwd <dir>]",
 	"    List sessions, newest first.",
 	"",
 	"pi-loops inspect <file>",
@@ -285,6 +286,10 @@ function runChild(command: string, args: string[], env?: NodeJS.ProcessEnv): Pro
 export async function runCli(argv: string[], out: (line: string) => void = console.log): Promise<number> {
 	const route = cliRoute(argv);
 	if (route === "launch") return launch(argv, out);
+	if (route === "version") {
+		out(`pi-loops v${PI_LOOPS_VERSION}`);
+		return 0;
+	}
 	if (route === "help") {
 		out(usageFor(argv[0]));
 		return 0;
@@ -297,13 +302,22 @@ export async function runCli(argv: string[], out: (line: string) => void = conso
 		const v = flags.get(name);
 		return typeof v === "string" ? v : undefined;
 	};
-	const agentDir = getAgentDir();
+	const agentDir = piAgentDir();
 	const loopsDir = process.env.PI_LOOPS_DIR || defaultLoopsDir(agentDir);
 	const cwd = path.resolve(str("cwd") ?? process.cwd());
 
 	if (command === "web" || command === "tui") return launch(argv, out);
+	// What the door tells a browser with no way in to run: the project's newest conversation, so
+	// signing in adds none, or a new one where there is none yet. The keyed link is printed with no
+	// terminal too: printing it is what this command is for.
+	if (command === "open") {
+		const named = str("loops-dir");
+		const args = [...(named ? [`--loops-dir=${named}`] : []), ...(listSessions(path.join(agentDir, "sessions")).some((s) => sameProject(s.cwd, cwd)) ? ["--continue"] : [])];
+		return launch(["web", ...args], out, cwd, { key: true });
+	}
 	if (command === "upgrade") return upgrade(flags.has("check"), out);
-	if (command === "install-launcher") return installLauncher(str("dir"), out);
+	if (command === "install-launcher") return installLauncher(launcherDirFlag(flags), out);
+	if (command === "uninstall-launcher") return uninstallLauncher(launcherDirFlag(flags), out);
 	if (command === "recipe") return recipeCommand(positional, { level: str("level"), overwrite: flags.has("overwrite") }, cwd, loopsDir, out);
 	if (command === "inbox") return inboxCommand(positional, { all: flags.has("all"), json: flags.has("json"), reason: flags.get("reason") }, cwd, loopsDir, out);
 
@@ -372,6 +386,8 @@ export async function runCli(argv: string[], out: (line: string) => void = conso
 		const triggerStore = new TriggerStore(loopsDir);
 		// pi encodes a project as `--home-u-proj--` and `SessionManager.list()` reads only that one
 		// directory, with no fallback — a hand-rolled name here would restore a session pi never sees.
+		// Loaded here, not at the top: pi's SDK takes about a second, and only this verb needs it.
+		const { SessionManager } = await import("@earendil-works/pi-coding-agent");
 		const sessionDir = SessionManager.create(cwd).getSessionDir();
 		const existingJobs = jobStore.load();
 		const existingRules = triggerStore.load();
@@ -426,7 +442,7 @@ export async function runCli(argv: string[], out: (line: string) => void = conso
 /** What runs loops while no pi is open, started, stopped and looked at by name. */
 const SERVICE_VERBS = new Set(["start", "stop", "restart", "status", "abort", "pair"]);
 
-const SUBCOMMANDS = new Set(["export", "import", "sessions", "inspect", "start", "stop", "restart", "status", "abort", "pair", "host", "recipe", "inbox", "web", "upgrade", "install-launcher", "help"]);
+const SUBCOMMANDS = new Set(["export", "import", "sessions", "inspect", "start", "stop", "restart", "status", "abort", "pair", "host", "recipe", "inbox", "web", "open", "upgrade", "install-launcher", "uninstall-launcher", "help"]);
 
 /**
  * `pi-loops inbox`: `/inbox list|claim|dismiss` for a shell with no pi open, and — with `--json` —
@@ -740,7 +756,7 @@ async function upgrade(checkOnly: boolean, out: (line: string) => void): Promise
 		out("already up to date");
 		return 0;
 	}
-	const spec = upgradeSpec(packageRoot(), name ?? "", getAgentDir(), latest, configuredNpmSource(packageRoot(), name ?? ""));
+	const spec = upgradeSpec(packageRoot(), name ?? "", piAgentDir(), latest, configuredNpmSource(packageRoot(), name ?? ""));
 	if (!spec) {
 		// Nothing failed, so this is not an error: the newest release is out and the way to it is a
 		// pull, not an install that would leave a second copy beside the checkout.
@@ -768,11 +784,14 @@ async function upgrade(checkOnly: boolean, out: (line: string) => void): Promise
  * `-h` or `--help` anywhere before a `--` asks how a subcommand works, and asking must not run it:
  * `install-launcher --help` wrote the launcher and `upgrade --help` ran the upgrade. After `--`
  * they are pi's.
+ *
+ * `--version` alone names this pi-loops; `pi-loops --tui -- --version` still asks pi.
  */
-export function cliRoute(argv: string[]): "launch" | "subcommand" | "help" {
+export function cliRoute(argv: string[]): "launch" | "subcommand" | "help" | "version" {
 	const first = argv[0];
 	if (first === undefined) return "launch";
 	if (first === "--help" || first === "-h" || first === "help") return "help";
+	if (argv.length === 1 && (first === "--version" || first === "-v")) return "version";
 	if (first.startsWith("-")) return "launch";
 	const dashdash = argv.indexOf("--");
 	const before = dashdash === -1 ? argv.slice(1) : argv.slice(1, dashdash);
@@ -784,7 +803,7 @@ export function cliRoute(argv: string[]): "launch" | "subcommand" | "help" {
 
 /** Each subcommand, and the line that starts its section of `CLI_USAGE`. */
 const USAGE_SECTIONS: Record<string, string> = {
-	web: "pi-loops [--web", tui: "pi-loops [--web", upgrade: "pi-loops upgrade", "install-launcher": "pi-loops install-launcher",
+	web: "pi-loops [--web", tui: "pi-loops [--web", open: "pi-loops open", upgrade: "pi-loops upgrade", "install-launcher": "pi-loops install-launcher", "uninstall-launcher": "pi-loops uninstall-launcher",
 	export: "pi-loops export", import: "pi-loops import", sessions: "pi-loops sessions", inspect: "pi-loops inspect",
 	start: "pi-loops start | stop", stop: "pi-loops start | stop", restart: "pi-loops start | stop", status: "pi-loops start | stop",
 	abort: "pi-loops start | stop", host: "pi-loops start | stop", pair: "pi-loops pair", recipe: "pi-loops recipe", inbox: "pi-loops inbox",
@@ -795,14 +814,14 @@ const GLOBAL_FLAGS = new Set(["cwd", "help"]);
 
 /** The flags each subcommand reads beside the global ones; any other is refused, not ignored. */
 const VERB_FLAGS: Record<string, readonly string[]> = {
-	upgrade: ["check"], "install-launcher": ["dir"], import: ["activate-triggers"], export: ["session", "output", "exclude-triggers"],
+	upgrade: ["check"], "install-launcher": ["dir"], "uninstall-launcher": ["dir"], import: ["activate-triggers"], export: ["session", "output", "exclude-triggers"],
 	sessions: ["limit", "all"], recipe: ["level", "overwrite"], inbox: ["all", "json", "reason"], start: ["foreground"], status: ["url"],
-	inspect: [], stop: [], restart: [], abort: [], pair: [],
+	inspect: [], stop: [], restart: [], abort: [], pair: [], open: ["loops-dir"],
 };
 
 /** How many words each subcommand reads after its name. */
 const VERB_POSITIONALS: Record<string, number> = {
-	upgrade: 0, "install-launcher": 0, export: 0, sessions: 0, start: 0, stop: 0, restart: 0, status: 0, pair: 0,
+	upgrade: 0, "install-launcher": 0, "uninstall-launcher": 0, export: 0, sessions: 0, start: 0, stop: 0, restart: 0, status: 0, pair: 0, open: 0,
 	import: 1, inspect: 1, abort: 1, recipe: 2, inbox: 2,
 };
 
@@ -849,10 +868,7 @@ function isOnPath(dir: string, pathEnv: string = process.env.PATH ?? ""): boolea
  * is no; with nowhere to write there is nothing to ask, and the refusal says why.
  */
 export async function installLauncherWithConfirm(args: string[], confirm: (title: string, body: string) => Promise<boolean>, out: (line: string) => void): Promise<number | undefined> {
-	const flag = parseCliArgs(["install-launcher", ...args]).flags.get("dir");
-	// No shell has expanded `~` on the way here, so it is expanded now or becomes a directory named `~`.
-	const dir = typeof flag === "string" ? flag.replace(/^~(?=$|\/)/, os.homedir()) : undefined;
-	const target = launcherTarget(dir);
+	const target = launcherTarget(slashDir(args));
 	if (!target) return installLauncher(undefined, out);
 	const reach = isOnPath(target) ? ["Afterwards `pi-loops` starts a session from any directory."] : [`${target} is not on your PATH, so \`pi-loops\` will not be found until it is.`];
 	const ok = await confirm("Put `pi-loops` on your PATH?", [`This writes a launcher into ${target}.`, "", "It is a small shell script that runs this package with this node.", ...reach].join("\n"));
@@ -862,6 +878,66 @@ export async function installLauncherWithConfirm(args: string[], confirm: (title
 	return installLauncher(target, out);
 }
 
+/**
+ * The `--dir` of a `/pi-loops install-launcher` or `uninstall-launcher` line. No shell has expanded
+ * `~` on the way here, so it is expanded now or becomes a directory named `~`.
+ */
+export function slashDir(args: string[]): string | undefined {
+	return launcherDirFlag(parseCliArgs(["install-launcher", ...args]).flags)?.replace(/^~(?=$|\/)/, os.homedir());
+}
+
+/**
+ * The directory `--dir` names. A `--dir` with nothing after it, or with a flag after it, is an
+ * error rather than no `--dir`: read as the default, `uninstall-launcher --dir` removed the
+ * launcher on PATH that nobody had named.
+ */
+function launcherDirFlag(flags: ReadonlyMap<string, string | true>): string | undefined {
+	const dir = flags.get("dir");
+	if (dir === undefined) return undefined;
+	if (dir === true || dir === "" || dir.startsWith("-")) throw new UsageError(`--dir takes a directory; got ${dir === true || dir === "" ? "nothing" : JSON.stringify(dir)}`);
+	return dir;
+}
+
+/**
+ * `uninstall-launcher`: remove the launcher, and remember that it was removed so no session start
+ * writes it again (`ui.json` `launcher: "declined"`, which `install-launcher` clears). Only a
+ * launcher of ours that this copy keeps (`current` or `stale`) is removed. Somebody's own
+ * `pi-loops`, or one of ours that runs another copy still on disk, is left as it is and the line
+ * says whose it is. With nothing there, the state asked for is already the state on disk.
+ */
+export function uninstallLauncher(dir: string | undefined, out: (line: string) => void): number {
+	writeUiPref(defaultLoopsDir(piAgentDir()), "launcher", "declined");
+	const target = launcherTarget(dir);
+	const again = "no pi session writes it again; `/pi-loops install-launcher` in pi puts it back";
+	if (!target) {
+		out("no launcher to remove: neither ~/.local/bin nor /usr/local/bin is on your PATH; pass the directory with --dir <dir>");
+		out(`  ${again}`);
+		return 0;
+	}
+	const { entryDir, node, agentDir } = launcherSource();
+	const { file, state } = launcherState(entryDir, node, agentDir, target);
+	if (state === "foreign") {
+		out(`left ${file} as it is: it is not a pi-loops launcher, so it is somebody's own`);
+		return 1;
+	}
+	if (state === "other") {
+		out(`left ${file} as it is: it runs another copy of pi-loops, ${launcherRecords(readLauncher(file) ?? "").entries[0]}, so remove it from that copy`);
+		return 1;
+	}
+	if (state === "absent") out(`no launcher at ${file}`);
+	else {
+		try {
+			fs.rmSync(file);
+		} catch (err: any) {
+			out(`could not remove ${file}: ${err?.message ?? err}`);
+			return 1;
+		}
+		out(`removed ${file}`);
+	}
+	out(`  ${again}`);
+	return 0;
+}
+
 /**
  * What a launcher says when no copy of this package is at any of the paths it knows. One line and
  * an exit code, because the alternative a person actually saw was Node's `Cannot find module` stack
@@ -912,15 +988,20 @@ export async function installLauncher(dir: string | undefined, out: (line: strin
 	}
 	// Whatever a session start was told once, this is the answer now: a launcher exists because
 	// someone asked for it, so the offer is live again if the file ever goes.
-	clearUiPref(defaultLoopsDir(getAgentDir()), "launcher");
+	clearUiPref(defaultLoopsDir(piAgentDir()), "launcher");
+	clearUiPref(defaultLoopsDir(piAgentDir()), "launcherFailedIn");
 	out(`wrote ${file}`);
 	out(`  it runs ${path.join(entryDir, "cli-entry.mjs")}`);
 	out("  `pi-loops` now starts a session; `pi-loops --tui` opens the terminal one instead");
 	return 0;
 }
 
-/** The marker line that says a `pi-loops` on someone's PATH is one this project wrote. */
-const LAUNCHER_MARKER = "# pi-loops launcher, written by";
+/**
+ * The first two lines of every launcher this project has written, and the only thing that says a
+ * `pi-loops` on someone's PATH is ours. In that position and nowhere else: a script that quotes
+ * the marker further down is somebody's own, and uninstall-launcher deletes what this calls ours.
+ */
+const LAUNCHER_HEADER = "#!/bin/sh\n# pi-loops launcher, written by `pi-loops install-launcher`.\n";
 
 /**
  * The launcher, as text. The one place the script is spelled: `installLauncher` writes this, and a
@@ -939,9 +1020,7 @@ export function launcherScript(entryDir: string, node: string, agentDir: string)
 	const entry = path.join(entryDir, "cli-entry.mjs");
 	const candidates = [entry, ...piInstallEntries(agentDir).filter((e) => e !== entry)].map((e) => JSON.stringify(e)).join(" ");
 	return [
-		"#!/bin/sh",
-		`${LAUNCHER_MARKER} \`pi-loops install-launcher\`.`,
-		`node=${JSON.stringify(node)}`,
+		`${LAUNCHER_HEADER}node=${JSON.stringify(node)}`,
 		'[ -x "$node" ] || node=$(command -v node) || node=node',
 		`for entry in ${candidates}; do`,
 		'\t[ -f "$entry" ] || continue',
@@ -955,7 +1034,7 @@ export function launcherScript(entryDir: string, node: string, agentDir: string)
 
 /** What a launcher for *this* copy is written from, so a caller needs to know none of the three. */
 export function launcherSource(): { entryDir: string; node: string; agentDir: string } {
-	return { entryDir: path.dirname(fileURLToPath(import.meta.url)), node: process.execPath, agentDir: getAgentDir() };
+	return { entryDir: path.dirname(fileURLToPath(import.meta.url)), node: process.execPath, agentDir: piAgentDir() };
 }
 
 /**
@@ -965,7 +1044,7 @@ export function launcherSource(): { entryDir: string; node: string; agentDir: st
  * for a command that was never put on their PATH.
  */
 export function installedByPi(): boolean {
-	return upgradeSpec(packageRoot(), manifest().name ?? "", getAgentDir(), "v0.0.0") !== undefined;
+	return upgradeSpec(packageRoot(), manifest().name ?? "", piAgentDir(), "v0.0.0") !== undefined;
 }
 
 export type LauncherState = "absent" | "current" | "stale" | "other" | "foreign";
@@ -974,21 +1053,47 @@ export type LauncherState = "absent" | "current" | "stale" | "other" | "foreign"
  * What is at `<target>/pi-loops`, as far as this copy is concerned: nothing at all (`absent`), a
  * launcher this project wrote that matches this node and this copy (`current`), one of ours that
  * this copy should rewrite (`stale`), one of ours that belongs to another copy still on disk
- * (`other`), or a file carrying no marker of ours — someone's own wrapper, which is not ours to
- * rewrite either (`foreign`).
+ * (`other`), or a file that does not open with our header — someone's own wrapper, which is not
+ * ours to rewrite either (`foreign`).
  *
  * It takes the three things a launcher is written from rather than reading them, so the decision is
  * a function of its arguments and the session-start caller is a few lines.
  */
 export function launcherState(entryDir: string, node: string, agentDir: string, target: string): { file: string; state: LauncherState } {
 	const file = path.join(target, "pi-loops");
-	const found = readLauncher(file);
-	if (found === undefined) return { file, state: "absent" };
-	if (!found.includes(LAUNCHER_MARKER)) return { file, state: "foreign" };
+	let found: string;
+	try {
+		// A link, dangling or not, a directory or a file nobody can read: this project writes none
+		// of these, so whatever is there is somebody's own, and absent means only that nothing is.
+		if (!fs.lstatSync(file).isFile()) return { file, state: "foreign" };
+		found = fs.readFileSync(file, "utf8");
+	} catch (err: any) {
+		return { file, state: err?.code === "ENOENT" ? "absent" : "foreign" };
+	}
+	if (!found.startsWith(LAUNCHER_HEADER)) return { file, state: "foreign" };
 	if (found === launcherScript(entryDir, node, agentDir)) return { file, state: "current" };
 	return { file, state: oursToRewrite(found, entryDir) ? "stale" : "other" };
 }
 
+/**
+ * What a session start does about the launcher: write one with no question, rewrite one of ours,
+ * or nothing. pi's own installer links `pi` into a directory on PATH and says so, and one extra
+ * keystroke after `pi install` is a cost the owner counts (#180), so a write asks nothing.
+ *
+ * A write needs all of these: a directory on PATH (`target`), nothing named `pi-loops` there, a
+ * UI to say it in, a copy that `pi install` put there (a checkout is missing nothing), no earlier
+ * `uninstall-launcher` (`declined`), and no failed write into this same directory (`failedIn`).
+ * The last one is so that a directory nobody can write to is not tried, and warned about, in
+ * every window; a PATH that names another directory is a new attempt.
+ */
+export function launcherAction(o: { target: string | undefined; state: LauncherState | undefined; hasUI: boolean; declined: boolean; failedIn: string | undefined; installedByPi: boolean }): "write" | "refresh" | "none" {
+	if (!o.target) return "none";
+	if (o.state === "stale") return "refresh";
+	if (o.state !== "absent") return "none";
+	if (!o.hasUI || o.declined || !o.installedByPi || o.failedIn === o.target) return "none";
+	return "write";
+}
+
 /**
  * Whether a launcher of ours that no longer matches is this copy's to rewrite. Two cases, and only
  * these two: the entry it recorded is gone — the package moved, which is the reading that ends in
@@ -1004,6 +1109,43 @@ function oursToRewrite(script: string, entryDir: string): boolean {
 	return recorded === path.join(entryDir, "cli-entry.mjs") || !fs.existsSync(recorded);
 }
 
+/**
+ * The write a session start makes: a new file in a directory that is already there, created
+ * exclusively, so a path that is already there in any form, a dangling link included, fails the
+ * create and is left as it is. It is quietly nothing, because the same file appearing between the
+ * check and the write is somebody else's.
+ */
+export function addLauncher(entryDir: string, node: string, agentDir: string, target: string): { kind: "added"; file: string } | { kind: "none" } | { kind: "failed"; message: string } {
+	const file = path.join(target, "pi-loops");
+	try {
+		// A directory already on your PATH, as the docs promise: PATH can name ~/.local/bin before
+		// anything has made it, and making it is for an install-launcher somebody asked for.
+		if (!fs.statSync(target).isDirectory()) return { kind: "none" };
+	} catch {
+		// Not there, or not reachable: either way there is no directory on PATH to write into.
+		return { kind: "none" };
+	}
+	let fd: number;
+	try {
+		fd = fs.openSync(file, "wx", 0o755);
+	} catch (err: any) {
+		if (err?.code === "EEXIST") return { kind: "none" };
+		return { kind: "failed", message: `could not write ${file}: ${err?.message ?? err}` };
+	}
+	try {
+		fs.writeSync(fd, launcherScript(entryDir, node, agentDir));
+		fs.fchmodSync(fd, 0o755);
+	} catch (err: any) {
+		fs.closeSync(fd);
+		// The file is ours, made a moment ago: a half-written one would read as somebody else's
+		// from then on and never be written again, so it goes.
+		fs.rmSync(file, { force: true });
+		return { kind: "failed", message: `could not write ${file}: ${err?.message ?? err}` };
+	}
+	fs.closeSync(fd);
+	return { kind: "added", file };
+}
+
 /** The file, or undefined when there is nothing there to read — which is the same news. */
 function readLauncher(file: string): string | undefined {
 	try {
@@ -1060,7 +1202,7 @@ function staleReason(old: string, entryDir: string, node: string): string {
  * `pi --mode rpc` that pi-loops runs in the background — so this is a choice of window, not of
  * product, and `--tui` is always there when the guess is wrong.
  */
-async function launch(argv: string[], out: (line: string) => void): Promise<number> {
+async function launch(argv: string[], out: (line: string) => void, cwd = process.cwd(), opts: { key?: boolean } = {}): Promise<number> {
 	const { ours, pi, misplaced } = splitLaunchArgs(argv[0] === "web" || argv[0] === "tui" ? argv.slice(1) : argv);
 	const has = (name: string) => ours.some((a) => a === `--${name}` || a.startsWith(`--${name}=`));
 	if (has("help")) {
@@ -1080,7 +1222,8 @@ async function launch(argv: string[], out: (line: string) => void): Promise<numb
 	const mode = resolveUiMode({ ...asked, remoteTty: isRemoteTty() });
 	const dir = loopsDir(ours);
 	const withDefaults = applyRememberedModel(pi, readUiPrefs(dir));
-	if (mode === "terminal") return runChild(process.env.PI_BIN || "pi", withDefaults);
+	// The extension in that terminal reads its directory from the environment, not from our flags.
+	if (mode === "terminal") return runChild(process.env.PI_BIN || "pi", withDefaults, has("loops-dir") ? { ...process.env, PI_LOOPS_DIR: dir } : undefined);
 
 	const refused = pageFlagRefusal(ours);
 	if (refused) {
@@ -1091,7 +1234,7 @@ async function launch(argv: string[], out: (line: string) => void): Promise<numb
 		out("pi-loops: --resume is pi's picker, which the page has as /resume; pi-loops --session <id> opens one by id");
 		return 2;
 	}
-	const target = pageTarget(withDefaults, process.cwd());
+	const target = pageTarget(withDefaults, cwd);
 	if ("error" in target) {
 		out(`pi-loops: ${target.error}`);
 		return 1;
@@ -1102,12 +1245,38 @@ async function launch(argv: string[], out: (line: string) => void): Promise<numb
 		out(`pi-loops: ${API_KEY_REFUSAL}`);
 		return 1;
 	}
+	const tty = !!process.stdout.isTTY;
+	const browser = !tty || has("no-open") ? "no" : isRemoteTty() ? "remote" : "yes";
+	const key = tty || !!opts.key;
+	const opened = await openPage(dir, { cwd, sessionId: target.sessionId, sessionFile: target.sessionFile, piArgs: target.piArgs }, { key, browser, host: pageLaunchHost(dir) }, out, () =>
+		process.stderr.write("waiting for pi-loops to open the conversation…\n"),
+	);
+	return opened.code;
+}
+
+/** Whether `openPage` tries a browser: `remote` is a terminal over ssh, where it never does. */
+export type PageBrowser = "yes" | "no" | "remote";
+
+/**
+ * Open the page on a conversation and say so in `out`: start pi-loops in the background as `host`
+ * says when it is not running, ask it for `page-open`, print the one-use link, then try the browser
+ * and say what happened. `pi-loops`, `pi-loops open` and `/pi-loops web` all come here. `link` is
+ * the printed address with its key, for a caller that also copies it.
+ */
+export async function openPage(
+	dir: string,
+	req: { cwd: string; sessionId?: string; sessionFile?: string; piArgs: string[] },
+	how: { key: boolean; browser: PageBrowser; host: EnsureHostOptions },
+	out: (line: string) => void,
+	slowNote: () => void = () => {},
+	onLink: (link: string) => void | Promise<void> = () => {},
+): Promise<{ code: number; link?: string }> {
 	// Asking for the page is asking for pi-loops: a stop by hand ends here, or the process it starts
 	// would find the mark and leave again. Every loop and rule resumes with it, which is said once
 	// pi-loops is up; if it does not come up, the stop stays as it was.
 	const liftedStop = readUiPrefs(dir).host === "stopped";
 	if (liftedStop) clearUiPref(dir, "host");
-	const ensured = await ensureHost(pageLaunchHost(dir));
+	const ensured = await ensureHost({ ...how.host, onLeaveWait: () => process.stderr.write(`${RESTART_WAIT_LINE}\n`) });
 	// Running, started, or being started by a window right now: each of these has a page coming.
 	const why = ensured.error ?? (ensured.action.kind === "none" && ensured.action.reason !== "running" && ensured.action.reason !== IN_PROGRESS ? ensured.action.reason : undefined);
 	const rec = await waitForSocket(dir, why ? 0 : PAGE_WAIT_MS);
@@ -1117,41 +1286,36 @@ async function launch(argv: string[], out: (line: string) => void): Promise<numb
 	}
 	if (!rec) {
 		out(why ? `pi-loops did not start: ${why}` : `pi-loops: the page did not come up within ${PAGE_WAIT_MS / 1000} s; see ${path.join(dir, HOST_LOG)}`);
-		return 1;
+		return { code: 1 };
 	}
 	const waiting = (r: HostServiceRecord | undefined) => (r && !r.url && r.pageWaiting ? pageWaitingLine(r.pageWaiting.reason, pageAddress(dir)) : undefined);
 	const held = waiting(rec);
 	if (held) {
 		out(held);
-		return 1;
+		return { code: 1 };
 	}
 	// Asked while the page may still be binding: pi starts beside the bind, and the answer brings the
 	// address. Opening may also wait for an older pi in that conversation to stop, up to 15 s.
-	const tty = !!process.stdout.isTTY;
-	const wantOpen = tty && !has("no-open") && !isRemoteTty();
-	const slow = setTimeout(() => process.stderr.write("waiting for pi-loops to open the conversation…\n"), PAGE_OPEN_SLOW_MS);
-	const res = await askHost(dir, { op: "page-open", cwd: process.cwd(), sessionId: target.sessionId, sessionFile: target.sessionFile, piArgs: target.piArgs, ...(wantOpen ? { openFile: true } : {}), ...(tty ? { copyKey: true } : {}) }, PAGE_OPEN_WAIT_MS).finally(() => clearTimeout(slow));
+	const wantOpen = how.browser === "yes";
+	const slow = setTimeout(slowNote, PAGE_OPEN_SLOW_MS);
+	const res = await askHost(dir, { op: "page-open", ...req, ...(wantOpen ? { openFile: true } : {}), ...(how.key ? { copyKey: true } : {}) }, PAGE_OPEN_WAIT_MS).finally(() => clearTimeout(slow));
 	if (!res) {
 		out(`pi-loops (pid ${rec.pid}) is not answering; see ${path.join(dir, HOST_LOG)}`);
-		return 1;
+		return { code: 1 };
 	}
 	if (!res.ok) {
 		out(waiting(readHostService(dir)) ?? `pi-loops: ${res.error}`);
-		return 1;
+		return { code: 1 };
 	}
+	const link = pageLink({ url: res.url!, copyKey: res.copyKey, key: how.key });
+	if (ensured.up && ensured.pid === rec.pid) out("started pi-loops in the background");
+	out(`pi-loops: ${link}`);
+	if (how.key) await onLink(link);
 	// The browser opens on a file only this user can read, which holds the key: an argv is anyone's.
-	// "Opened" only when an opener started; whether the browser could read the file it cannot tell.
-	const opened = wantOpen && !!res.openFile && (await openBrowser(openFileUrl(res.openFile!)));
-	const lines = pageLaunchLines({
-		startedPid: ensured.up && ensured.pid === rec.pid ? rec.pid : undefined,
-		url: res.url!,
-		copyKey: res.copyKey,
-		opened,
-		tty,
-		ignoredArgs: res.ignoredArgs,
-	});
-	for (const line of lines) out(line);
-	return 0;
+	const openTarget = wantOpen && res.openFile ? openFileTarget(res.openFile, thisMachine()) : undefined;
+	const outcome: OpenOutcome = how.browser === "remote" ? "remote" : how.browser === "no" ? "not-asked" : openTarget ? await openOutcome(openTarget, res.openFile!) : "failed";
+	for (const line of pageOutcomeLines({ outcome, key: how.key, ignoredArgs: res.ignoredArgs })) out(line);
+	return { code: 0, ...(how.key ? { link } : {}) };
 }
 
 /**
@@ -1228,7 +1392,7 @@ function socketOpen(socketPath: string): Promise<boolean> {
  */
 export function pageAddress(dir: string): string {
 	const config = loadConfig(dir);
-	const port = pageBindPort(config, { defaultDir: path.resolve(dir) === path.resolve(homeLoopsDir(getAgentDir())), env: process.env.PI_LOOPS_PAGE_PORT });
+	const port = pageBindPort(config, { defaultDir: path.resolve(dir) === path.resolve(homeLoopsDir(piAgentDir())), env: process.env.PI_LOOPS_PAGE_PORT });
 	return port ? `${config.pageHost}:${port}` : `${config.pageHost} (on a free port; pi-loops status names it)`;
 }
 
@@ -1272,7 +1436,7 @@ export function pageFlagRefusal(ours: string[]): string[] | undefined {
  * already has, found the way `pi-loops export` finds it and taken out of pi's arguments; without
  * either, a new one in `cwd` with the arguments as they are.
  */
-export function pageTarget(piArgs: string[], cwd: string, sessionsRoot = path.join(getAgentDir(), "sessions")): { sessionId?: string; sessionFile?: string; piArgs: string[] } | { error: string } {
+export function pageTarget(piArgs: string[], cwd: string, sessionsRoot = path.join(piAgentDir(), "sessions")): { sessionId?: string; sessionFile?: string; piArgs: string[] } | { error: string } {
 	const rest: string[] = [];
 	let id: string | undefined;
 	let latest = false;
@@ -1292,18 +1456,79 @@ export function pageTarget(piArgs: string[], cwd: string, sessionsRoot = path.jo
 	}
 }
 
+/** What the browser did, as `openPage` says it on the second line. */
+export type OpenOutcome = "opened" | "unconfirmed" | "failed" | "remote" | "not-asked";
+
 /**
- * What `pi-loops` prints once the page has the conversation. The token is on a terminal only: it is
- * a way in, and stdout redirected to a file would keep it. No pairing code: one armed on every launch
- * is one any local process can burn; `pi-loops pair` arms one when somebody asks.
+ * What `/pi-loops web` asks `page-open` for: the conversation it is in once pi has saved it. Before
+ * the first answer (a path with no file) and under `--no-session` (no path) the page has nothing to
+ * show under that id, so it asks with no id, which opens a new conversation in the project.
  */
-export function pageLaunchLines(i: { startedPid?: number; url: string; copyKey?: string; opened: boolean; tty: boolean; ignoredArgs?: string[] }): string[] {
-	const lines: string[] = [];
-	if (i.startedPid !== undefined) lines.push("started pi-loops in the background");
-	lines.push(`pi-loops page: ${i.url} (${i.opened ? "opened in your browser" : "open it in a browser"})`);
-	// A one-use key, not the token: scrollback, recordings and shared screens keep what is printed,
-	// and the token is a shell for as long as pi-loops runs.
-	if (i.tty && i.copyKey) lines.push(`  ${i.opened ? "if it did not open, or" : "first visit"} from another browser: ${i.url}?open=${i.copyKey} (works once, for ${COPY_KEY_MS / 60_000} minutes)`);
+export function webPageRequest(here: { cwd: string; sessionId?: string; sessionFile?: string }): { cwd: string; sessionId?: string; sessionFile?: string; piArgs: string[] } {
+	const saved = here.sessionId && here.sessionFile && fs.existsSync(here.sessionFile);
+	return saved ? { cwd: here.cwd, sessionId: here.sessionId, sessionFile: here.sessionFile, piArgs: [] } : { cwd: here.cwd, piArgs: [] };
+}
+
+/**
+ * The address `pi-loops` prints: on a terminal, with a one-use key that works for `COPY_KEY_MS`.
+ * Never the token: scrollback, recordings and shared screens keep what is printed, and the token is
+ * a shell for as long as pi-loops runs. `key` is false when stdout is not a terminal, since a
+ * redirected stdout would keep the key, except for `pi-loops open`, which is asked for exactly that
+ * link. No pairing code: one armed on every launch is one any local
+ * process can burn; `pi-loops pair` arms one when somebody asks.
+ */
+export function pageLink(i: { url: string; copyKey?: string; key: boolean }): string {
+	return i.key && i.copyKey ? `${i.url}?open=${i.copyKey}` : i.url;
+}
+
+/**
+ * An opener's exit code does not say a page loaded: rundll32 exits 0 for a target it cannot open.
+ * The background process removes the launch file when the browser spends its key, so the file
+ * going away is the one sign that a browser got in.
+ */
+export async function keySpent(file: string, waitMs = OPEN_CONFIRM_MS, stopped: () => boolean = () => false): Promise<boolean> {
+	const until = Date.now() + waitMs;
+	while (Date.now() < until && !stopped()) {
+		if (!fs.existsSync(file)) return true;
+		await new Promise((r) => setTimeout(r, 100));
+	}
+	return !fs.existsSync(file);
+}
+
+/**
+ * The opener and the key watch run side by side: a browser that spends the key is "opened" at once,
+ * even while `xdg-open` is still running; an opener that fails before the key is spent is "failed".
+ */
+export async function openOutcome(target: string, file: string, open: (t: string) => Promise<boolean> = openUrl, waitMs = OPEN_CONFIRM_MS): Promise<OpenOutcome> {
+	let openerFailed = false;
+	const spent = keySpent(file, waitMs, () => openerFailed);
+	const opener = open(target).then((ok) => ((openerFailed = !ok), ok));
+	const first = await Promise.race([spent.then((s) => (s ? "spent" : "not-spent")), opener.then((ok) => (ok ? "ran" : "failed"))]);
+	if (first === "spent") return "opened";
+	if (first === "failed") return "failed";
+	if (first === "ran") return (await spent) ? "opened" : "unconfirmed";
+	return (await opener) ? "unconfirmed" : "failed";
+}
+
+/** How long a launch waits for the browser to spend the key before it says it cannot tell. */
+const OPEN_CONFIRM_MS = 8_000;
+
+/** The lines after the link: what the browser did, and the pi arguments an open conversation did not take. */
+export function pageOutcomeLines(i: { outcome: OpenOutcome; key: boolean; ignoredArgs?: string[] }): string[] {
+	const once = `it works once, for ${COPY_KEY_MS / 60_000} minutes`;
+	const lines = [
+		!i.key
+			? "  pi-loops open prints a link that signs a browser in"
+			: i.outcome === "opened"
+				? "  opened in your browser"
+				: i.outcome === "remote"
+					? "  open the link above in a browser on this machine"
+					: i.outcome === "unconfirmed"
+						? `  if no browser opened, open the link above (${once})`
+						: i.outcome === "failed"
+						? `  could not open a browser here; open the link above (${once})`
+						: `  open the link above in a browser (${once})`,
+	];
 	if (i.ignoredArgs?.length) {
 		const flags = i.ignoredArgs.filter((a) => a.startsWith("-"));
 		const named = flags.length ? flags : i.ignoredArgs;
@@ -1312,26 +1537,6 @@ export function pageLaunchLines(i: { startedPid?: number; url: string; copyKey?:
 	return lines;
 }
 
-/** What the opener is given for the launch file: a file: URL, which holds no key. */
-export function openFileUrl(file: string): string {
-	return pathToFileURL(file).href;
-}
-
-/** Hand `url` to the system's opener; true once it has started, false when there is none. */
-function openBrowser(url: string): Promise<boolean> {
-	const [cmd, args] = process.platform === "darwin" ? ["open", [url]] : process.platform === "win32" ? ["cmd", ["/c", "start", "", url]] : ["xdg-open", [url]];
-	return new Promise((resolve) => {
-		try {
-			const child = spawn(cmd, args, { stdio: "ignore", detached: true });
-			child.once("spawn", () => resolve(true));
-			child.once("error", () => resolve(false)); // no opener on this machine: the address is printed
-			child.unref();
-		} catch {
-			resolve(false); // a URL on stdout is enough
-		}
-	});
-}
-
 /**
  * Where the data lives for this run: the flag, then the environment, then the default — the default
  * being the extension's own (`loops` under pi's agent directory, which `PI_CODING_AGENT_DIR` moves),
@@ -1342,7 +1547,7 @@ export function loopsDir(ours: string[]): string {
 	if (at !== -1 && ours[at + 1]) return ours[at + 1];
 	const eq = ours.find((a) => a.startsWith("--loops-dir="));
 	if (eq) return eq.slice("--loops-dir=".length);
-	return process.env.PI_LOOPS_DIR || defaultLoopsDir(getAgentDir());
+	return process.env.PI_LOOPS_DIR || defaultLoopsDir(piAgentDir());
 }
 
 /**