@ashx-j/lunr 0.2.25 → 0.2.27

package/dist/gateway/setup.js

@@ -102,8 +102,10 @@ export async function setupGateway() {
             cfg[platform].token = token;
             cfg[platform].enabled = true;
             cfg.owners ??= { telegram: [], discord: [] };
-            const ownerChoice = await choose(`${platform} owner access`, [
-                ...(cfg.owners[platform].length ? [{ label: "Keep the saved owners", value: "keep" }] : []),
+            const ownerChoice = await choose(`${platform} gateway access`, [
+                ...(cfg.owners[platform].length || cfg[platform].allowedUsers.length
+                    ? [{ label: "Keep the approved users", value: "keep" }]
+                    : []),
                 { label: "Enter my user ID", value: "enter" },
                 { label: "Approve a pairing code later on this computer", value: "later" },
             ]);
@@ -177,7 +179,7 @@ export async function setupGateway() {
             { label: "Not now", value: false },
         ]))
             console.log(await startGatewayService());
-        console.log("\nIf you entered your user ID, send /start to your bot, then send a task. Otherwise send /whoami, then on this computer run:\nlunr gateway pair approve <telegram|discord> <code> --owner\nOrdinary pairing without --owner does not grant project or TUI access.");
+        console.log("\nIf you entered your user ID, send /start to your bot, then send a task. Otherwise send /whoami, then on this computer run:\nlunr gateway pair approve <telegram|discord> <code>\nApproval grants full gateway access, including local projects and saved sessions. Only approve people you trust with this computer.");
     }
     catch (error) {
         if (error !== cancelled)
@@ -197,6 +199,6 @@ export function approveGatewayOwner(platform, code) {
     cfg.owners[platform] = [...new Set([...cfg.owners[platform], user])];
     cfg[platform].allowedUsers = [...new Set([...cfg[platform].allowedUsers, user])];
     saveGatewayConfig(cfg);
-    return `Approved ${platform} owner ${user}. Owner access includes local projects and TUI session history.`;
+    return `Approved ${platform} user ${user}. Gateway access includes local projects and saved sessions.`;
 }
 //# sourceMappingURL=setup.js.map

package/dist/gateway/setup.js.map

@@ -1 +1 @@
-{"version":3,"file":"setup.js","sourceRoot":"","sources":["../../src/gateway/setup.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC7D,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,wBAAwB,CAAC;AAC7E,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC3F,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AACvF,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,KAAK,EAAE,MAAM,qCAAqC,CAAC;AAChF,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAoB,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAE5G,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,QAAgC,EAAE,KAAa,EAAmB;IACxG,MAAM,GAAG,GACR,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,+BAA+B,KAAK,QAAQ,CAAC,CAAC,CAAC,uCAAuC,CAAC;IAClH,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACJ,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC3B,OAAO,EAAE,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE;YACxE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;SACnC,CAAC,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,KAAK,CAAC,GAAG,QAAQ,qEAAqE,CAAC,CAAC;IACnG,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE;QACf,MAAM,IAAI,KAAK,CACd,GAAG,QAAQ,kCAAkC,QAAQ,CAAC,MAAM,wCAAwC,CACpG,CAAC;IACH,MAAM,KAAK,GAAY,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC7C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,QAAQ,gCAAgC,CAAC,CAAC;IACtG,MAAM,IAAI,GAAG,QAAQ,KAAK,UAAU,IAAI,QAAQ,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;IACjF,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,QAAQ,6BAA6B,CAAC,CAAC;IACpH,OAAO,UAAU,IAAI,IAAI,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAAA,CACjG;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACtC,QAAyB,EACzB,KAAa,EACb,OAA2C,EAC3C,OAAW,EACc;IACzB,MAAM,EAAE,GAAG,MAAM,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC5C,IAAI,CAAC;QACJ,OAAO,MAAM,IAAI,OAAO,CAAgB,CAAC,OAAO,EAAE,EAAE,CAAC;YACpD,MAAM,IAAI,GAAG,IAAI,UAAU,CAC1B,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,EAC/E,CAAC,EACD,kBAAkB,EAAE,CACpB,CAAC;YACF,IAAI,CAAC,gBAAgB,CACpB,IAAI,CAAC,GAAG,CACP,CAAC,EACD,OAAO,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,KAAK,OAAO,CAAC,CACvD,CACD,CAAC;YACF,IAAI,CAAC,QAAQ,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YACrE,IAAI,CAAC,QAAQ,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACzC,MAAM,KAAK,GAAG,IAAI,SAAS,EAAE,CAAC;YAC9B,KAAK,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAC1D,KAAK,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9B,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACrB,KAAK,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,qDAAqD,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YACtF,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YACnB,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAClB,eAAe,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QAAA,CAC9B,CAAC,CAAC;IACJ,CAAC;YAAS,CAAC;QACV,EAAE,CAAC,KAAK,EAAE,CAAC;QACX,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;QACxD,EAAE,CAAC,IAAI,EAAE,CAAC;IACX,CAAC;AAAA,CACD;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,GAAkB;IACnD,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK;QAChD,MAAM,IAAI,KAAK,CACd,mGAAmG,CACnG,CAAC;IACH,MAAM,UAAU,GAAG,eAAe,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IAC/D,MAAM,SAAS,GAAG,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;IAChD,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,MAAM,MAAM,GAAG,KAAK,EAAK,KAAa,EAAE,OAA2C,EAAE,OAAW,EAAE,EAAE,CAAC;QACpG,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QAC3E,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,SAAS,CAAC;QACzC,OAAO,KAAK,CAAC;IAAA,CACb,CAAC;IACF,MAAM,GAAG,GAAG,KAAK,EAAE,KAAa,EAAE,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QACxD,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,SAAS,CAAC;QACzC,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;IAAA,CACpB,CAAC;IACF,MAAM,GAAG,GAAG,iBAAiB,EAAE,CAAC;IAChC,IAAI,CAAC;QACJ,OAAO,CAAC,GAAG,CAAC,2FAA2F,CAAC,CAAC;QACzG,MAAM,MAAM,GAAG,MAAM,MAAM,CAC1B,yBAAyB,EACzB;YACC,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE;YACxC,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE;YACtC,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE;SAChC,EACD,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,UAAU,CAC9E,CAAC;QACF,KAAK,MAAM,QAAQ,IAAI,CAAC,UAAU,EAAE,SAAS,CAAU,EAAE,CAAC;YACzD,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,MAAM;gBAAE,SAAS;YACvD,OAAO,CAAC,GAAG,CACV,QAAQ,KAAK,UAAU;gBACtB,CAAC,CAAC,gRAAgR;gBAClR,CAAC,CAAC,ghBAAghB,CACnhB,CAAC;YACF,IAAI,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC;YAChC,IACC,CAAC,KAAK;gBACN,CAAC,MAAM,MAAM,CAAC,GAAG,QAAQ,YAAY,EAAE;oBACtC,EAAE,KAAK,EAAE,sBAAsB,EAAE,KAAK,EAAE,KAAK,EAAE;oBAC/C,EAAE,KAAK,EAAE,yBAAyB,EAAE,KAAK,EAAE,IAAI,EAAE;iBACjD,CAAC,CAAC,EACF,CAAC;gBACF,KAAK,GAAG,CAAC,MAAM,UAAU,CAAC,GAAG,QAAQ,YAAY,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;YAC7D,CAAC;YACD,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;YACzF,OAAO,CAAC,GAAG,CAAC,kBAAkB,MAAM,gBAAgB,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;YACzE,GAAG,CAAC,QAAQ,CAAC,CAAC,KAAK,GAAG,KAAK,CAAC;YAC5B,GAAG,CAAC,QAAQ,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC;YAC7B,GAAG,CAAC,MAAM,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;YAC7C,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,GAAG,QAAQ,eAAe,EAAE;gBAC5D,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3F,EAAE,KAAK,EAAE,kBAAkB,EAAE,KAAK,EAAE,OAAO,EAAE;gBAC7C,EAAE,KAAK,EAAE,+CAA+C,EAAE,KAAK,EAAE,OAAO,EAAE;aAC1E,CAAC,CAAC;YACH,MAAM,KAAK,GAAG,WAAW,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,QAAQ,QAAQ,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACnF,IAAI,WAAW,KAAK,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;YACtG,IAAI,KAAK,EAAE,CAAC;gBACX,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;gBACtE,GAAG,CAAC,QAAQ,CAAC,CAAC,YAAY,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;YACnF,CAAC;QACF,CAAC;QACD,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CACpG,CAAC,MAAM,EAAoB,EAAE,CAAC,CAAC,CAAC,MAAM,CACtC,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAgB,iBAAiB,EAAE;YAC7D,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;YACpD,EAAE,KAAK,EAAE,2BAA2B,EAAE,KAAK,EAAE,IAAI,EAAE;SACnD,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,GAAG,CAAC,qBAAqB,CAAC,CAAC,CAAC;QAC1D,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QACrE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC3B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QAC/G,GAAG,CAAC,cAAc,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QACxC,GAAG,CAAC,YAAY,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;QACnF,MAAM,OAAO,GAAG,MAAM,MAAM,CAC3B,mBAAmB,EACnB;YACC,EAAE,KAAK,EAAE,qBAAqB,EAAE,KAAK,EAAE,KAAK,EAAE;YAC9C,EAAE,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE,OAAO,EAAE;YAC3C,EAAE,KAAK,EAAE,yBAAyB,EAAE,KAAK,EAAE,MAAM,EAAE;SACnD,EACD,mBAAmB,EAAE,CAAC,OAAO,CAC7B,CAAC;QACF,IAAI,OAAO,KAAK,MAAM;YACrB,OAAO,CAAC,GAAG,CACV,gIAAgI,CAChI,CAAC;QACH,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAC;QAClE,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC,CAAC;QACxE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,YAAY,EAAE,CAAC;QAC5C,IAAI,CAAC,MAAM,CAAC,MAAM;YACjB,MAAM,IAAI,KAAK,CACd,8GAA8G,CAC9G,CAAC;QACH,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAC5D,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QACtE,MAAM,QAAQ,GAAG,MAAM,MAAM,CAC5B,gBAAgB,EAChB,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,EACnD,QAAQ,CAAC,kBAAkB,EAAE,CAC7B,CAAC;QACF,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;QACtE,MAAM,KAAK,GAAG,MAAM,MAAM,CACzB,OAAO,EACP,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,EACpD,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,QAAQ,CAAC,eAAe,EAAE,CAAC,CAChE,CAAC;QACF,IACC,CAAC,CAAC,MAAM,MAAM,CACb,oCAAoC,GAAG,CAAC,cAAc,YAAY,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,EAAE,cAAc,OAAO,EAAE,EACnH;YACC,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE;YAC9B,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE;SACjC,CACD,CAAC,EACD,CAAC;YACF,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;YACzC,OAAO;QACR,CAAC;QACD,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACvB,KAAK,GAAG,IAAI,CAAC;QACb,QAAQ,CAAC,0BAA0B,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;QAC9D,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,mBAAmB,EAAE,CAAC;QACvC,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,CAAC,GAAG;YACrC,OAAO,EAAE,IAAI;YACb,OAAO,EAAE;gBACR,GAAG,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO;gBAC/C,SAAS,EAAE,mBAAmB,EAAE,CAAC,OAAO,KAAK,KAAK;aAClD;SACD,CAAC;QACF,mBAAmB,CAAC,QAAQ,CAAC,CAAC;QAC9B,IAAI,CAAC;YACJ,MAAM,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACjC,CAAC;gBAAS,CAAC;YACV,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,OAAO,CAAC,SAAS,GAAG,mBAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,CAAC;YAChG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;QAC/B,CAAC;QACD,IACC,MAAM,MAAM,CAAC,wBAAwB,EAAE;YACtC,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE;YACnC,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE;SAClC,CAAC;YAEF,OAAO,CAAC,GAAG,CAAC,MAAM,mBAAmB,EAAE,CAAC,CAAC;QAC1C,OAAO,CAAC,GAAG,CACV,mQAAmQ,CACnQ,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,KAAK,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,4DAA4D,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC;IACjH,CAAC;AAAA,CACD;AAED,MAAM,UAAU,mBAAmB,CAAC,QAAgB,EAAE,IAAY,EAAU;IAC3E,IAAI,QAAQ,KAAK,UAAU,IAAI,QAAQ,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACtG,MAAM,OAAO,GAAG,kBAAkB,EAAE,CAAC;IACrC,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC7C,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IAClE,MAAM,GAAG,GAAG,iBAAiB,EAAE,CAAC;IAChC,GAAG,CAAC,MAAM,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAC7C,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IACrE,GAAG,CAAC,QAAQ,CAAC,CAAC,YAAY,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IACjF,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACvB,OAAO,YAAY,QAAQ,UAAU,IAAI,iEAAiE,CAAC;AAAA,CAC3G","sourcesContent":["import { existsSync, realpathSync, statSync } from \"node:fs\";\nimport { resolve } from \"node:path\";\nimport { Container, SelectList, Spacer, Text } from \"@ashx-j/lunr-tui\";\nimport { readSecret } from \"../cli/read-secret.ts\";\nimport { createStartupTui, showStartupInput, startStartupTui } from \"../cli/startup-ui.ts\";\nimport { loadInstallFeatures, saveInstallFeatures } from \"../core/install-features.ts\";\nimport { SettingsManager } from \"../core/settings-manager.ts\";\nimport { getSelectListTheme, theme } from \"../modes/interactive/theme/theme.ts\";\nimport { loadGatewayConfig, saveGatewayConfig } from \"./config.ts\";\nimport { createPairingStore } from \"./pairing.ts\";\nimport { configureStartup, loadServiceSettings, type StartupMode, startGatewayService } from \"./service.ts\";\n\nexport async function validateBotToken(platform: \"telegram\" | \"discord\", token: string): Promise<string> {\n\tconst url =\n\t\tplatform === \"telegram\" ? `https://api.telegram.org/bot${token}/getMe` : \"https://discord.com/api/v10/users/@me\";\n\tlet response: Response;\n\ttry {\n\t\tresponse = await fetch(url, {\n\t\t\theaders: platform === \"discord\" ? { Authorization: `Bot ${token}` } : {},\n\t\t\tsignal: AbortSignal.timeout(15_000),\n\t\t});\n\t} catch {\n\t\tthrow new Error(`${platform}: could not reach the bot API. Check your connection and try again.`);\n\t}\n\tif (!response.ok)\n\t\tthrow new Error(\n\t\t\t`${platform}: token check failed with HTTP ${response.status}. Check the token and bot permissions.`,\n\t\t);\n\tconst value: unknown = await response.json();\n\tif (!value || typeof value !== \"object\") throw new Error(`${platform}: unexpected bot API response.`);\n\tconst user = platform === \"telegram\" && \"result\" in value ? value.result : value;\n\tif (!user || typeof user !== \"object\" || !(\"id\" in user)) throw new Error(`${platform}: bot identity was missing.`);\n\treturn \"username\" in user && typeof user.username === \"string\" ? user.username : String(user.id);\n}\n\nexport async function selectSetupOption<T>(\n\tsettings: SettingsManager,\n\ttitle: string,\n\toptions: Array<{ label: string; value: T }>,\n\tinitial?: T,\n): Promise<T | undefined> {\n\tconst ui = await createStartupTui(settings);\n\ttry {\n\t\treturn await new Promise<T | undefined>((resolve) => {\n\t\t\tconst list = new SelectList(\n\t\t\t\toptions.map((option, index) => ({ label: option.label, value: String(index) })),\n\t\t\t\t8,\n\t\t\t\tgetSelectListTheme(),\n\t\t\t);\n\t\t\tlist.setSelectedIndex(\n\t\t\t\tMath.max(\n\t\t\t\t\t0,\n\t\t\t\t\toptions.findIndex((option) => option.value === initial),\n\t\t\t\t),\n\t\t\t);\n\t\t\tlist.onSelect = (item) => resolve(options[Number(item.value)].value);\n\t\t\tlist.onCancel = () => resolve(undefined);\n\t\t\tconst panel = new Container();\n\t\t\tpanel.addChild(new Text(theme.fg(\"accent\", title), 1, 0));\n\t\t\tpanel.addChild(new Spacer(1));\n\t\t\tpanel.addChild(list);\n\t\t\tpanel.addChild(new Text(\"Up/Down to navigate, Enter to select, Esc to cancel\", 1, 1));\n\t\t\tui.addChild(panel);\n\t\t\tui.setFocus(list);\n\t\t\tstartStartupTui(ui, settings);\n\t\t});\n\t} finally {\n\t\tui.clear();\n\t\tui.requestRender();\n\t\tawait new Promise((resolve) => setTimeout(resolve, 25));\n\t\tui.stop();\n\t}\n}\n\nexport async function setupGateway(): Promise<void> {\n\tif (!process.stdin.isTTY || !process.stdout.isTTY)\n\t\tthrow new Error(\n\t\t\t\"Run lunr gateway setup in a terminal. Bot tokens are entered privately, not as command arguments.\",\n\t\t);\n\tconst uiSettings = SettingsManager.inMemory({ theme: \"moon\" });\n\tconst cancelled = new Error(\"Setup cancelled.\");\n\tlet saved = false;\n\tconst choose = async <T>(title: string, options: Array<{ label: string; value: T }>, initial?: T) => {\n\t\tconst value = await selectSetupOption(uiSettings, title, options, initial);\n\t\tif (value === undefined) throw cancelled;\n\t\treturn value;\n\t};\n\tconst ask = async (title: string) => {\n\t\tconst value = await showStartupInput(uiSettings, title);\n\t\tif (value === undefined) throw cancelled;\n\t\treturn value.trim();\n\t};\n\tconst cfg = loadGatewayConfig();\n\ttry {\n\t\tconsole.log(\"Set up lunR on your phone\\nYour computer must stay awake and connected to the internet.\\n\");\n\t\tconst choice = await choose(\n\t\t\t\"Connect a chat platform\",\n\t\t\t[\n\t\t\t\t{ label: \"Telegram\", value: \"telegram\" },\n\t\t\t\t{ label: \"Discord\", value: \"discord\" },\n\t\t\t\t{ label: \"Both\", value: \"both\" },\n\t\t\t],\n\t\t\tcfg.discord.enabled ? (cfg.telegram.enabled ? \"both\" : \"discord\") : \"telegram\",\n\t\t);\n\t\tfor (const platform of [\"telegram\", \"discord\"] as const) {\n\t\t\tif (choice !== platform && choice !== \"both\") continue;\n\t\t\tconsole.log(\n\t\t\t\tplatform === \"telegram\"\n\t\t\t\t\t? \"\\nTelegram\\n1. Open https://t.me/BotFather and send /newbot.\\n2. Follow its prompts and copy the bot token.\\n3. Open your new bot and send /whoami. If your ID was not configured, it sends a pairing code for local approval.\\nGuide: https://core.telegram.org/bots/tutorial\"\n\t\t\t\t\t: \"\\nDiscord\\n1. Open https://discord.com/developers/applications and create an application.\\n2. Open Bot, create or reset its token, and enable Message Content Intent for ordinary chat.\\n3. Under Installation, add bot and applications.commands scopes. Grant View Channels, Send Messages, Read Message History, Attach Files, and thread permissions if needed.\\n4. Use the install link to add your bot. In Discord, enable Developer Mode and copy your user ID.\\nGuide: https://docs.discord.com/developers/quick-start/getting-started\",\n\t\t\t);\n\t\t\tlet token = cfg[platform].token;\n\t\t\tif (\n\t\t\t\t!token ||\n\t\t\t\t(await choose(`${platform} bot token`, [\n\t\t\t\t\t{ label: \"Keep the saved token\", value: false },\n\t\t\t\t\t{ label: \"Enter a different token\", value: true },\n\t\t\t\t]))\n\t\t\t) {\n\t\t\t\ttoken = (await readSecret(`${platform} bot token`))?.trim();\n\t\t\t}\n\t\t\tif (!token) throw new Error(\"No token entered. Existing configuration was not changed.\");\n\t\t\tconsole.log(`Connected bot: ${await validateBotToken(platform, token)}`);\n\t\t\tcfg[platform].token = token;\n\t\t\tcfg[platform].enabled = true;\n\t\t\tcfg.owners ??= { telegram: [], discord: [] };\n\t\t\tconst ownerChoice = await choose(`${platform} owner access`, [\n\t\t\t\t...(cfg.owners[platform].length ? [{ label: \"Keep the saved owners\", value: \"keep\" }] : []),\n\t\t\t\t{ label: \"Enter my user ID\", value: \"enter\" },\n\t\t\t\t{ label: \"Approve a pairing code later on this computer\", value: \"later\" },\n\t\t\t]);\n\t\t\tconst owner = ownerChoice === \"enter\" ? await ask(`Your ${platform} user ID`) : \"\";\n\t\t\tif (ownerChoice === \"enter\" && !/^\\d+$/.test(owner)) throw new Error(\"User IDs contain digits only.\");\n\t\t\tif (owner) {\n\t\t\t\tcfg.owners[platform] = [...new Set([...cfg.owners[platform], owner])];\n\t\t\t\tcfg[platform].allowedUsers = [...new Set([...cfg[platform].allowedUsers, owner])];\n\t\t\t}\n\t\t}\n\t\tconst folders = [...new Set([cfg.defaultProject, ...(cfg.projectRoots ?? []), process.cwd()])].filter(\n\t\t\t(folder): folder is string => !!folder,\n\t\t);\n\t\tconst folder = await choose<string | null>(\"Default project\", [\n\t\t\t...folders.map((value) => ({ label: value, value })),\n\t\t\t{ label: \"Enter another folder path\", value: null },\n\t\t]);\n\t\tconst root = folder ?? (await ask(\"Project folder path\"));\n\t\tif (!root) throw new Error(\"Enter a project folder. Nothing saved.\");\n\t\tconst path = resolve(root);\n\t\tif (!existsSync(path) || !statSync(path).isDirectory()) throw new Error(\"That project folder does not exist.\");\n\t\tcfg.defaultProject = realpathSync(path);\n\t\tcfg.projectRoots = [...new Set([...(cfg.projectRoots ?? []), cfg.defaultProject])];\n\t\tconst startup = await choose<StartupMode>(\n\t\t\t\"Automatic startup\",\n\t\t\t[\n\t\t\t\t{ label: \"Off. Start manually\", value: \"off\" },\n\t\t\t\t{ label: \"When I sign in\", value: \"login\" },\n\t\t\t\t{ label: \"When the computer boots\", value: \"boot\" },\n\t\t\t],\n\t\t\tloadServiceSettings().startup,\n\t\t);\n\t\tif (startup === \"boot\")\n\t\t\tconsole.log(\n\t\t\t\t\"Boot startup may require administrator permission or OS-managed account credentials. lunR does not save your account password.\",\n\t\t\t);\n\t\tconst { ModelRuntime } = await import(\"../core/model-runtime.ts\");\n\t\tconst runtime = await ModelRuntime.create({ allowModelNetwork: false });\n\t\tconst models = await runtime.getAvailable();\n\t\tif (!models.length)\n\t\t\tthrow new Error(\n\t\t\t\t\"No saved model credentials found. Open lunr locally and use /login, then rerun gateway setup. Nothing saved.\",\n\t\t\t);\n\t\tconst settings = SettingsManager.create(cfg.defaultProject);\n\t\tconst providers = [...new Set(models.map((model) => model.provider))];\n\t\tconst provider = await choose(\n\t\t\t\"Model provider\",\n\t\t\tproviders.map((value) => ({ label: value, value })),\n\t\t\tsettings.getDefaultProvider(),\n\t\t);\n\t\tconst choices = models.filter((model) => model.provider === provider);\n\t\tconst model = await choose(\n\t\t\t\"Model\",\n\t\t\tchoices.map((value) => ({ label: value.id, value })),\n\t\t\tchoices.find((model) => model.id === settings.getDefaultModel()),\n\t\t);\n\t\tif (\n\t\t\t!(await choose(\n\t\t\t\t`Save gateway settings?\\nProject: ${cfg.defaultProject}\\nModel: ${model.provider}/${model.id}\\nStartup: ${startup}`,\n\t\t\t\t[\n\t\t\t\t\t{ label: \"Save\", value: true },\n\t\t\t\t\t{ label: \"Cancel\", value: false },\n\t\t\t\t],\n\t\t\t))\n\t\t) {\n\t\t\tconsole.log(\"Cancelled. Nothing saved.\");\n\t\t\treturn;\n\t\t}\n\t\tsaveGatewayConfig(cfg);\n\t\tsaved = true;\n\t\tsettings.setDefaultModelAndProvider(model.provider, model.id);\n\t\tawait settings.flush();\n\t\tconst features = loadInstallFeatures();\n\t\tfeatures.features[\"chat-platforms\"] = {\n\t\t\tenabled: true,\n\t\t\toptions: {\n\t\t\t\t...features.features[\"chat-platforms\"]?.options,\n\t\t\t\tautostart: loadServiceSettings().startup !== \"off\",\n\t\t\t},\n\t\t};\n\t\tsaveInstallFeatures(features);\n\t\ttry {\n\t\t\tawait configureStartup(startup);\n\t\t} finally {\n\t\t\tfeatures.features[\"chat-platforms\"].options.autostart = loadServiceSettings().startup !== \"off\";\n\t\t\tsaveInstallFeatures(features);\n\t\t}\n\t\tif (\n\t\t\tawait choose(\"Start the gateway now?\", [\n\t\t\t\t{ label: \"Start now\", value: true },\n\t\t\t\t{ label: \"Not now\", value: false },\n\t\t\t])\n\t\t)\n\t\t\tconsole.log(await startGatewayService());\n\t\tconsole.log(\n\t\t\t\"\\nIf you entered your user ID, send /start to your bot, then send a task. Otherwise send /whoami, then on this computer run:\\nlunr gateway pair approve <telegram|discord> <code> --owner\\nOrdinary pairing without --owner does not grant project or TUI access.\",\n\t\t);\n\t} catch (error) {\n\t\tif (error !== cancelled) throw error;\n\t\tconsole.log(saved ? \"Settings saved. Start the gateway with lunr gateway start.\" : \"Cancelled. Nothing saved.\");\n\t}\n}\n\nexport function approveGatewayOwner(platform: string, code: string): string {\n\tif (platform !== \"telegram\" && platform !== \"discord\") throw new Error(\"Choose telegram or discord.\");\n\tconst pairing = createPairingStore();\n\tconst user = pairing.approve(platform, code);\n\tif (!user) throw new Error(\"Pairing code is invalid or expired.\");\n\tconst cfg = loadGatewayConfig();\n\tcfg.owners ??= { telegram: [], discord: [] };\n\tcfg.owners[platform] = [...new Set([...cfg.owners[platform], user])];\n\tcfg[platform].allowedUsers = [...new Set([...cfg[platform].allowedUsers, user])];\n\tsaveGatewayConfig(cfg);\n\treturn `Approved ${platform} owner ${user}. Owner access includes local projects and TUI session history.`;\n}\n"]}
+{"version":3,"file":"setup.js","sourceRoot":"","sources":["../../src/gateway/setup.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC7D,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,wBAAwB,CAAC;AAC7E,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC3F,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AACvF,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,KAAK,EAAE,MAAM,qCAAqC,CAAC;AAChF,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAoB,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAE5G,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,QAAgC,EAAE,KAAa,EAAmB;IACxG,MAAM,GAAG,GACR,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,+BAA+B,KAAK,QAAQ,CAAC,CAAC,CAAC,uCAAuC,CAAC;IAClH,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACJ,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC3B,OAAO,EAAE,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE;YACxE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;SACnC,CAAC,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,KAAK,CAAC,GAAG,QAAQ,qEAAqE,CAAC,CAAC;IACnG,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE;QACf,MAAM,IAAI,KAAK,CACd,GAAG,QAAQ,kCAAkC,QAAQ,CAAC,MAAM,wCAAwC,CACpG,CAAC;IACH,MAAM,KAAK,GAAY,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC7C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,QAAQ,gCAAgC,CAAC,CAAC;IACtG,MAAM,IAAI,GAAG,QAAQ,KAAK,UAAU,IAAI,QAAQ,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;IACjF,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,QAAQ,6BAA6B,CAAC,CAAC;IACpH,OAAO,UAAU,IAAI,IAAI,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAAA,CACjG;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACtC,QAAyB,EACzB,KAAa,EACb,OAA2C,EAC3C,OAAW,EACc;IACzB,MAAM,EAAE,GAAG,MAAM,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC5C,IAAI,CAAC;QACJ,OAAO,MAAM,IAAI,OAAO,CAAgB,CAAC,OAAO,EAAE,EAAE,CAAC;YACpD,MAAM,IAAI,GAAG,IAAI,UAAU,CAC1B,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,EAC/E,CAAC,EACD,kBAAkB,EAAE,CACpB,CAAC;YACF,IAAI,CAAC,gBAAgB,CACpB,IAAI,CAAC,GAAG,CACP,CAAC,EACD,OAAO,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,KAAK,OAAO,CAAC,CACvD,CACD,CAAC;YACF,IAAI,CAAC,QAAQ,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YACrE,IAAI,CAAC,QAAQ,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACzC,MAAM,KAAK,GAAG,IAAI,SAAS,EAAE,CAAC;YAC9B,KAAK,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAC1D,KAAK,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9B,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACrB,KAAK,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,qDAAqD,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YACtF,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YACnB,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAClB,eAAe,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QAAA,CAC9B,CAAC,CAAC;IACJ,CAAC;YAAS,CAAC;QACV,EAAE,CAAC,KAAK,EAAE,CAAC;QACX,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;QACxD,EAAE,CAAC,IAAI,EAAE,CAAC;IACX,CAAC;AAAA,CACD;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,GAAkB;IACnD,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK;QAChD,MAAM,IAAI,KAAK,CACd,mGAAmG,CACnG,CAAC;IACH,MAAM,UAAU,GAAG,eAAe,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IAC/D,MAAM,SAAS,GAAG,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;IAChD,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,MAAM,MAAM,GAAG,KAAK,EAAK,KAAa,EAAE,OAA2C,EAAE,OAAW,EAAE,EAAE,CAAC;QACpG,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QAC3E,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,SAAS,CAAC;QACzC,OAAO,KAAK,CAAC;IAAA,CACb,CAAC;IACF,MAAM,GAAG,GAAG,KAAK,EAAE,KAAa,EAAE,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QACxD,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,SAAS,CAAC;QACzC,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;IAAA,CACpB,CAAC;IACF,MAAM,GAAG,GAAG,iBAAiB,EAAE,CAAC;IAChC,IAAI,CAAC;QACJ,OAAO,CAAC,GAAG,CAAC,2FAA2F,CAAC,CAAC;QACzG,MAAM,MAAM,GAAG,MAAM,MAAM,CAC1B,yBAAyB,EACzB;YACC,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE;YACxC,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE;YACtC,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE;SAChC,EACD,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,UAAU,CAC9E,CAAC;QACF,KAAK,MAAM,QAAQ,IAAI,CAAC,UAAU,EAAE,SAAS,CAAU,EAAE,CAAC;YACzD,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,MAAM;gBAAE,SAAS;YACvD,OAAO,CAAC,GAAG,CACV,QAAQ,KAAK,UAAU;gBACtB,CAAC,CAAC,gRAAgR;gBAClR,CAAC,CAAC,ghBAAghB,CACnhB,CAAC;YACF,IAAI,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC;YAChC,IACC,CAAC,KAAK;gBACN,CAAC,MAAM,MAAM,CAAC,GAAG,QAAQ,YAAY,EAAE;oBACtC,EAAE,KAAK,EAAE,sBAAsB,EAAE,KAAK,EAAE,KAAK,EAAE;oBAC/C,EAAE,KAAK,EAAE,yBAAyB,EAAE,KAAK,EAAE,IAAI,EAAE;iBACjD,CAAC,CAAC,EACF,CAAC;gBACF,KAAK,GAAG,CAAC,MAAM,UAAU,CAAC,GAAG,QAAQ,YAAY,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;YAC7D,CAAC;YACD,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;YACzF,OAAO,CAAC,GAAG,CAAC,kBAAkB,MAAM,gBAAgB,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;YACzE,GAAG,CAAC,QAAQ,CAAC,CAAC,KAAK,GAAG,KAAK,CAAC;YAC5B,GAAG,CAAC,QAAQ,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC;YAC7B,GAAG,CAAC,MAAM,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;YAC7C,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,GAAG,QAAQ,iBAAiB,EAAE;gBAC9D,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,YAAY,CAAC,MAAM;oBACnE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;oBACvD,CAAC,CAAC,EAAE,CAAC;gBACN,EAAE,KAAK,EAAE,kBAAkB,EAAE,KAAK,EAAE,OAAO,EAAE;gBAC7C,EAAE,KAAK,EAAE,+CAA+C,EAAE,KAAK,EAAE,OAAO,EAAE;aAC1E,CAAC,CAAC;YACH,MAAM,KAAK,GAAG,WAAW,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,QAAQ,QAAQ,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACnF,IAAI,WAAW,KAAK,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;YACtG,IAAI,KAAK,EAAE,CAAC;gBACX,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;gBACtE,GAAG,CAAC,QAAQ,CAAC,CAAC,YAAY,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;YACnF,CAAC;QACF,CAAC;QACD,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CACpG,CAAC,MAAM,EAAoB,EAAE,CAAC,CAAC,CAAC,MAAM,CACtC,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAgB,iBAAiB,EAAE;YAC7D,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;YACpD,EAAE,KAAK,EAAE,2BAA2B,EAAE,KAAK,EAAE,IAAI,EAAE;SACnD,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,GAAG,CAAC,qBAAqB,CAAC,CAAC,CAAC;QAC1D,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QACrE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC3B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QAC/G,GAAG,CAAC,cAAc,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QACxC,GAAG,CAAC,YAAY,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;QACnF,MAAM,OAAO,GAAG,MAAM,MAAM,CAC3B,mBAAmB,EACnB;YACC,EAAE,KAAK,EAAE,qBAAqB,EAAE,KAAK,EAAE,KAAK,EAAE;YAC9C,EAAE,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE,OAAO,EAAE;YAC3C,EAAE,KAAK,EAAE,yBAAyB,EAAE,KAAK,EAAE,MAAM,EAAE;SACnD,EACD,mBAAmB,EAAE,CAAC,OAAO,CAC7B,CAAC;QACF,IAAI,OAAO,KAAK,MAAM;YACrB,OAAO,CAAC,GAAG,CACV,gIAAgI,CAChI,CAAC;QACH,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAC;QAClE,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC,CAAC;QACxE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,YAAY,EAAE,CAAC;QAC5C,IAAI,CAAC,MAAM,CAAC,MAAM;YACjB,MAAM,IAAI,KAAK,CACd,8GAA8G,CAC9G,CAAC;QACH,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAC5D,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QACtE,MAAM,QAAQ,GAAG,MAAM,MAAM,CAC5B,gBAAgB,EAChB,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,EACnD,QAAQ,CAAC,kBAAkB,EAAE,CAC7B,CAAC;QACF,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;QACtE,MAAM,KAAK,GAAG,MAAM,MAAM,CACzB,OAAO,EACP,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,EACpD,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,QAAQ,CAAC,eAAe,EAAE,CAAC,CAChE,CAAC;QACF,IACC,CAAC,CAAC,MAAM,MAAM,CACb,oCAAoC,GAAG,CAAC,cAAc,YAAY,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,EAAE,cAAc,OAAO,EAAE,EACnH;YACC,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE;YAC9B,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE;SACjC,CACD,CAAC,EACD,CAAC;YACF,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;YACzC,OAAO;QACR,CAAC;QACD,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACvB,KAAK,GAAG,IAAI,CAAC;QACb,QAAQ,CAAC,0BAA0B,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;QAC9D,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,mBAAmB,EAAE,CAAC;QACvC,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,CAAC,GAAG;YACrC,OAAO,EAAE,IAAI;YACb,OAAO,EAAE;gBACR,GAAG,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO;gBAC/C,SAAS,EAAE,mBAAmB,EAAE,CAAC,OAAO,KAAK,KAAK;aAClD;SACD,CAAC;QACF,mBAAmB,CAAC,QAAQ,CAAC,CAAC;QAC9B,IAAI,CAAC;YACJ,MAAM,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACjC,CAAC;gBAAS,CAAC;YACV,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,OAAO,CAAC,SAAS,GAAG,mBAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,CAAC;YAChG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;QAC/B,CAAC;QACD,IACC,MAAM,MAAM,CAAC,wBAAwB,EAAE;YACtC,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE;YACnC,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE;SAClC,CAAC;YAEF,OAAO,CAAC,GAAG,CAAC,MAAM,mBAAmB,EAAE,CAAC,CAAC;QAC1C,OAAO,CAAC,GAAG,CACV,wTAAwT,CACxT,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,KAAK,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,4DAA4D,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC;IACjH,CAAC;AAAA,CACD;AAED,MAAM,UAAU,mBAAmB,CAAC,QAAgB,EAAE,IAAY,EAAU;IAC3E,IAAI,QAAQ,KAAK,UAAU,IAAI,QAAQ,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACtG,MAAM,OAAO,GAAG,kBAAkB,EAAE,CAAC;IACrC,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC7C,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IAClE,MAAM,GAAG,GAAG,iBAAiB,EAAE,CAAC;IAChC,GAAG,CAAC,MAAM,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAC7C,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IACrE,GAAG,CAAC,QAAQ,CAAC,CAAC,YAAY,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IACjF,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACvB,OAAO,YAAY,QAAQ,SAAS,IAAI,8DAA8D,CAAC;AAAA,CACvG","sourcesContent":["import { existsSync, realpathSync, statSync } from \"node:fs\";\nimport { resolve } from \"node:path\";\nimport { Container, SelectList, Spacer, Text } from \"@ashx-j/lunr-tui\";\nimport { readSecret } from \"../cli/read-secret.ts\";\nimport { createStartupTui, showStartupInput, startStartupTui } from \"../cli/startup-ui.ts\";\nimport { loadInstallFeatures, saveInstallFeatures } from \"../core/install-features.ts\";\nimport { SettingsManager } from \"../core/settings-manager.ts\";\nimport { getSelectListTheme, theme } from \"../modes/interactive/theme/theme.ts\";\nimport { loadGatewayConfig, saveGatewayConfig } from \"./config.ts\";\nimport { createPairingStore } from \"./pairing.ts\";\nimport { configureStartup, loadServiceSettings, type StartupMode, startGatewayService } from \"./service.ts\";\n\nexport async function validateBotToken(platform: \"telegram\" | \"discord\", token: string): Promise<string> {\n\tconst url =\n\t\tplatform === \"telegram\" ? `https://api.telegram.org/bot${token}/getMe` : \"https://discord.com/api/v10/users/@me\";\n\tlet response: Response;\n\ttry {\n\t\tresponse = await fetch(url, {\n\t\t\theaders: platform === \"discord\" ? { Authorization: `Bot ${token}` } : {},\n\t\t\tsignal: AbortSignal.timeout(15_000),\n\t\t});\n\t} catch {\n\t\tthrow new Error(`${platform}: could not reach the bot API. Check your connection and try again.`);\n\t}\n\tif (!response.ok)\n\t\tthrow new Error(\n\t\t\t`${platform}: token check failed with HTTP ${response.status}. Check the token and bot permissions.`,\n\t\t);\n\tconst value: unknown = await response.json();\n\tif (!value || typeof value !== \"object\") throw new Error(`${platform}: unexpected bot API response.`);\n\tconst user = platform === \"telegram\" && \"result\" in value ? value.result : value;\n\tif (!user || typeof user !== \"object\" || !(\"id\" in user)) throw new Error(`${platform}: bot identity was missing.`);\n\treturn \"username\" in user && typeof user.username === \"string\" ? user.username : String(user.id);\n}\n\nexport async function selectSetupOption<T>(\n\tsettings: SettingsManager,\n\ttitle: string,\n\toptions: Array<{ label: string; value: T }>,\n\tinitial?: T,\n): Promise<T | undefined> {\n\tconst ui = await createStartupTui(settings);\n\ttry {\n\t\treturn await new Promise<T | undefined>((resolve) => {\n\t\t\tconst list = new SelectList(\n\t\t\t\toptions.map((option, index) => ({ label: option.label, value: String(index) })),\n\t\t\t\t8,\n\t\t\t\tgetSelectListTheme(),\n\t\t\t);\n\t\t\tlist.setSelectedIndex(\n\t\t\t\tMath.max(\n\t\t\t\t\t0,\n\t\t\t\t\toptions.findIndex((option) => option.value === initial),\n\t\t\t\t),\n\t\t\t);\n\t\t\tlist.onSelect = (item) => resolve(options[Number(item.value)].value);\n\t\t\tlist.onCancel = () => resolve(undefined);\n\t\t\tconst panel = new Container();\n\t\t\tpanel.addChild(new Text(theme.fg(\"accent\", title), 1, 0));\n\t\t\tpanel.addChild(new Spacer(1));\n\t\t\tpanel.addChild(list);\n\t\t\tpanel.addChild(new Text(\"Up/Down to navigate, Enter to select, Esc to cancel\", 1, 1));\n\t\t\tui.addChild(panel);\n\t\t\tui.setFocus(list);\n\t\t\tstartStartupTui(ui, settings);\n\t\t});\n\t} finally {\n\t\tui.clear();\n\t\tui.requestRender();\n\t\tawait new Promise((resolve) => setTimeout(resolve, 25));\n\t\tui.stop();\n\t}\n}\n\nexport async function setupGateway(): Promise<void> {\n\tif (!process.stdin.isTTY || !process.stdout.isTTY)\n\t\tthrow new Error(\n\t\t\t\"Run lunr gateway setup in a terminal. Bot tokens are entered privately, not as command arguments.\",\n\t\t);\n\tconst uiSettings = SettingsManager.inMemory({ theme: \"moon\" });\n\tconst cancelled = new Error(\"Setup cancelled.\");\n\tlet saved = false;\n\tconst choose = async <T>(title: string, options: Array<{ label: string; value: T }>, initial?: T) => {\n\t\tconst value = await selectSetupOption(uiSettings, title, options, initial);\n\t\tif (value === undefined) throw cancelled;\n\t\treturn value;\n\t};\n\tconst ask = async (title: string) => {\n\t\tconst value = await showStartupInput(uiSettings, title);\n\t\tif (value === undefined) throw cancelled;\n\t\treturn value.trim();\n\t};\n\tconst cfg = loadGatewayConfig();\n\ttry {\n\t\tconsole.log(\"Set up lunR on your phone\\nYour computer must stay awake and connected to the internet.\\n\");\n\t\tconst choice = await choose(\n\t\t\t\"Connect a chat platform\",\n\t\t\t[\n\t\t\t\t{ label: \"Telegram\", value: \"telegram\" },\n\t\t\t\t{ label: \"Discord\", value: \"discord\" },\n\t\t\t\t{ label: \"Both\", value: \"both\" },\n\t\t\t],\n\t\t\tcfg.discord.enabled ? (cfg.telegram.enabled ? \"both\" : \"discord\") : \"telegram\",\n\t\t);\n\t\tfor (const platform of [\"telegram\", \"discord\"] as const) {\n\t\t\tif (choice !== platform && choice !== \"both\") continue;\n\t\t\tconsole.log(\n\t\t\t\tplatform === \"telegram\"\n\t\t\t\t\t? \"\\nTelegram\\n1. Open https://t.me/BotFather and send /newbot.\\n2. Follow its prompts and copy the bot token.\\n3. Open your new bot and send /whoami. If your ID was not configured, it sends a pairing code for local approval.\\nGuide: https://core.telegram.org/bots/tutorial\"\n\t\t\t\t\t: \"\\nDiscord\\n1. Open https://discord.com/developers/applications and create an application.\\n2. Open Bot, create or reset its token, and enable Message Content Intent for ordinary chat.\\n3. Under Installation, add bot and applications.commands scopes. Grant View Channels, Send Messages, Read Message History, Attach Files, and thread permissions if needed.\\n4. Use the install link to add your bot. In Discord, enable Developer Mode and copy your user ID.\\nGuide: https://docs.discord.com/developers/quick-start/getting-started\",\n\t\t\t);\n\t\t\tlet token = cfg[platform].token;\n\t\t\tif (\n\t\t\t\t!token ||\n\t\t\t\t(await choose(`${platform} bot token`, [\n\t\t\t\t\t{ label: \"Keep the saved token\", value: false },\n\t\t\t\t\t{ label: \"Enter a different token\", value: true },\n\t\t\t\t]))\n\t\t\t) {\n\t\t\t\ttoken = (await readSecret(`${platform} bot token`))?.trim();\n\t\t\t}\n\t\t\tif (!token) throw new Error(\"No token entered. Existing configuration was not changed.\");\n\t\t\tconsole.log(`Connected bot: ${await validateBotToken(platform, token)}`);\n\t\t\tcfg[platform].token = token;\n\t\t\tcfg[platform].enabled = true;\n\t\t\tcfg.owners ??= { telegram: [], discord: [] };\n\t\t\tconst ownerChoice = await choose(`${platform} gateway access`, [\n\t\t\t\t...(cfg.owners[platform].length || cfg[platform].allowedUsers.length\n\t\t\t\t\t? [{ label: \"Keep the approved users\", value: \"keep\" }]\n\t\t\t\t\t: []),\n\t\t\t\t{ label: \"Enter my user ID\", value: \"enter\" },\n\t\t\t\t{ label: \"Approve a pairing code later on this computer\", value: \"later\" },\n\t\t\t]);\n\t\t\tconst owner = ownerChoice === \"enter\" ? await ask(`Your ${platform} user ID`) : \"\";\n\t\t\tif (ownerChoice === \"enter\" && !/^\\d+$/.test(owner)) throw new Error(\"User IDs contain digits only.\");\n\t\t\tif (owner) {\n\t\t\t\tcfg.owners[platform] = [...new Set([...cfg.owners[platform], owner])];\n\t\t\t\tcfg[platform].allowedUsers = [...new Set([...cfg[platform].allowedUsers, owner])];\n\t\t\t}\n\t\t}\n\t\tconst folders = [...new Set([cfg.defaultProject, ...(cfg.projectRoots ?? []), process.cwd()])].filter(\n\t\t\t(folder): folder is string => !!folder,\n\t\t);\n\t\tconst folder = await choose<string | null>(\"Default project\", [\n\t\t\t...folders.map((value) => ({ label: value, value })),\n\t\t\t{ label: \"Enter another folder path\", value: null },\n\t\t]);\n\t\tconst root = folder ?? (await ask(\"Project folder path\"));\n\t\tif (!root) throw new Error(\"Enter a project folder. Nothing saved.\");\n\t\tconst path = resolve(root);\n\t\tif (!existsSync(path) || !statSync(path).isDirectory()) throw new Error(\"That project folder does not exist.\");\n\t\tcfg.defaultProject = realpathSync(path);\n\t\tcfg.projectRoots = [...new Set([...(cfg.projectRoots ?? []), cfg.defaultProject])];\n\t\tconst startup = await choose<StartupMode>(\n\t\t\t\"Automatic startup\",\n\t\t\t[\n\t\t\t\t{ label: \"Off. Start manually\", value: \"off\" },\n\t\t\t\t{ label: \"When I sign in\", value: \"login\" },\n\t\t\t\t{ label: \"When the computer boots\", value: \"boot\" },\n\t\t\t],\n\t\t\tloadServiceSettings().startup,\n\t\t);\n\t\tif (startup === \"boot\")\n\t\t\tconsole.log(\n\t\t\t\t\"Boot startup may require administrator permission or OS-managed account credentials. lunR does not save your account password.\",\n\t\t\t);\n\t\tconst { ModelRuntime } = await import(\"../core/model-runtime.ts\");\n\t\tconst runtime = await ModelRuntime.create({ allowModelNetwork: false });\n\t\tconst models = await runtime.getAvailable();\n\t\tif (!models.length)\n\t\t\tthrow new Error(\n\t\t\t\t\"No saved model credentials found. Open lunr locally and use /login, then rerun gateway setup. Nothing saved.\",\n\t\t\t);\n\t\tconst settings = SettingsManager.create(cfg.defaultProject);\n\t\tconst providers = [...new Set(models.map((model) => model.provider))];\n\t\tconst provider = await choose(\n\t\t\t\"Model provider\",\n\t\t\tproviders.map((value) => ({ label: value, value })),\n\t\t\tsettings.getDefaultProvider(),\n\t\t);\n\t\tconst choices = models.filter((model) => model.provider === provider);\n\t\tconst model = await choose(\n\t\t\t\"Model\",\n\t\t\tchoices.map((value) => ({ label: value.id, value })),\n\t\t\tchoices.find((model) => model.id === settings.getDefaultModel()),\n\t\t);\n\t\tif (\n\t\t\t!(await choose(\n\t\t\t\t`Save gateway settings?\\nProject: ${cfg.defaultProject}\\nModel: ${model.provider}/${model.id}\\nStartup: ${startup}`,\n\t\t\t\t[\n\t\t\t\t\t{ label: \"Save\", value: true },\n\t\t\t\t\t{ label: \"Cancel\", value: false },\n\t\t\t\t],\n\t\t\t))\n\t\t) {\n\t\t\tconsole.log(\"Cancelled. Nothing saved.\");\n\t\t\treturn;\n\t\t}\n\t\tsaveGatewayConfig(cfg);\n\t\tsaved = true;\n\t\tsettings.setDefaultModelAndProvider(model.provider, model.id);\n\t\tawait settings.flush();\n\t\tconst features = loadInstallFeatures();\n\t\tfeatures.features[\"chat-platforms\"] = {\n\t\t\tenabled: true,\n\t\t\toptions: {\n\t\t\t\t...features.features[\"chat-platforms\"]?.options,\n\t\t\t\tautostart: loadServiceSettings().startup !== \"off\",\n\t\t\t},\n\t\t};\n\t\tsaveInstallFeatures(features);\n\t\ttry {\n\t\t\tawait configureStartup(startup);\n\t\t} finally {\n\t\t\tfeatures.features[\"chat-platforms\"].options.autostart = loadServiceSettings().startup !== \"off\";\n\t\t\tsaveInstallFeatures(features);\n\t\t}\n\t\tif (\n\t\t\tawait choose(\"Start the gateway now?\", [\n\t\t\t\t{ label: \"Start now\", value: true },\n\t\t\t\t{ label: \"Not now\", value: false },\n\t\t\t])\n\t\t)\n\t\t\tconsole.log(await startGatewayService());\n\t\tconsole.log(\n\t\t\t\"\\nIf you entered your user ID, send /start to your bot, then send a task. Otherwise send /whoami, then on this computer run:\\nlunr gateway pair approve <telegram|discord> <code>\\nApproval grants full gateway access, including local projects and saved sessions. Only approve people you trust with this computer.\",\n\t\t);\n\t} catch (error) {\n\t\tif (error !== cancelled) throw error;\n\t\tconsole.log(saved ? \"Settings saved. Start the gateway with lunr gateway start.\" : \"Cancelled. Nothing saved.\");\n\t}\n}\n\nexport function approveGatewayOwner(platform: string, code: string): string {\n\tif (platform !== \"telegram\" && platform !== \"discord\") throw new Error(\"Choose telegram or discord.\");\n\tconst pairing = createPairingStore();\n\tconst user = pairing.approve(platform, code);\n\tif (!user) throw new Error(\"Pairing code is invalid or expired.\");\n\tconst cfg = loadGatewayConfig();\n\tcfg.owners ??= { telegram: [], discord: [] };\n\tcfg.owners[platform] = [...new Set([...cfg.owners[platform], user])];\n\tcfg[platform].allowedUsers = [...new Set([...cfg[platform].allowedUsers, user])];\n\tsaveGatewayConfig(cfg);\n\treturn `Approved ${platform} user ${user}. Gateway access includes local projects and saved sessions.`;\n}\n"]}

package/dist/main.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"main.d.ts","sourceRoot":"","sources":["../src/main.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AA8BH,OAAO,KAAK,EAAE,eAAe,EAAuB,MAAM,4BAA4B,CAAC;AAwBvF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAarE;;;GAGG;AACH,wBAAsB,cAAc,CACnC,MAAM,GAAE,MAAM,CAAC,UAA0B,EACzC,OAAO,GAAE;IAAE,YAAY,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAO,GACtD,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CA0C7B;AA2aD,MAAM,WAAW,WAAW;IAC3B,kBAAkB,CAAC,EAAE,eAAe,EAAE,CAAC;IACvC,WAAW,CAAC,EAAE,eAAe,CAAC;CAC9B;AAED,wBAAsB,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,CAAC,EAAE,WAAW,iBAuf/D","sourcesContent":["/**\n * Main entry point for the coding agent CLI.\n *\n * This file handles CLI argument parsing and translates them into\n * createAgentSession() options. The SDK does the heavy lifting.\n */\n\nimport { createInterface } from \"node:readline\";\nimport { type ImageContent, modelsAreEqual } from \"@ashx-j/lunr-ai\";\nimport chalk from \"chalk\";\nimport { lightBuiltinExtensions, loadAllBuiltinExtensions } from \"./builtin-extensions/index.ts\";\nimport { type Args, type Mode, parseArgs, printHelp } from \"./cli/args.ts\";\nimport { processFileArguments } from \"./cli/file-processor.ts\";\nimport { buildInitialMessage } from \"./cli/initial-message.ts\";\nimport { listModels } from \"./cli/list-models.ts\";\nimport { createProjectTrustContext } from \"./cli/project-trust.ts\";\nimport { selectSession } from \"./cli/session-picker.ts\";\nimport { shouldRunFirstTimeSetup, showFirstTimeSetup, showStartupSelector } from \"./cli/startup-ui.ts\";\nimport {\n\tAPP_NAME,\n\tappendDebugLog,\n\tENV_SESSION_DIR,\n\texpandTildePath,\n\tgetAgentDir,\n\tgetSessionsDir,\n\tVERSION,\n} from \"./config.ts\";\nimport { type CreateAgentSessionRuntimeFactory, createAgentSessionRuntime } from \"./core/agent-session-runtime.ts\";\nimport {\n\ttype AgentSessionRuntimeDiagnostic,\n\tcreateAgentSessionFromServices,\n\tcreateAgentSessionServices,\n} from \"./core/agent-session-services.ts\";\nimport { formatNoModelsAvailableMessage } from \"./core/auth-guidance.ts\";\nimport { registerCustomizeBridge } from \"./core/customize.ts\";\nimport type { InlineExtension, ProjectTrustContext } from \"./core/extensions/types.ts\";\nimport { applyHttpProxySettings, configureHttpDispatcher } from \"./core/http-dispatcher.ts\";\nimport { registerMemoryCapBridge } from \"./core/memory-cap.ts\";\nimport { resolveCliModel, resolveModelScope, type ScopedModel } from \"./core/model-resolver.ts\";\nimport type { ModelRuntime } from \"./core/model-runtime.ts\";\nimport { registerModelTierBridge } from \"./core/model-tiers.ts\";\nimport { restoreStdout, takeOverStdout } from \"./core/output-guard.ts\";\nimport { type AppMode, resolveProjectTrusted } from \"./core/project-trust.ts\";\nimport { bindRuntimeBridges } from \"./core/runtime-bridges.ts\";\nimport type { CreateAgentSessionOptions } from \"./core/sdk.ts\";\nimport {\n\tformatMissingSessionCwdPrompt,\n\tgetMissingSessionCwdIssue,\n\tMissingSessionCwdError,\n\ttype SessionCwdIssue,\n} from \"./core/session-cwd.ts\";\nimport { assertValidSessionId, SessionManager } from \"./core/session-manager.ts\";\nimport { pruneOldSessions } from \"./core/session-retention.ts\";\nimport { SettingsManager } from \"./core/settings-manager.ts\";\nimport { applyInheritedSubagentPermissions } from \"./core/subagent-permission-inherit.ts\";\nimport { printTimings, resetTimings, time } from \"./core/timings.ts\";\nimport { hasTrustRequiringProjectResources, ProjectTrustStore } from \"./core/trust-manager.ts\";\nimport { runMigrations, showDeprecationWarnings } from \"./migrations.ts\";\nimport { initTheme, stopThemeWatcher } from \"./modes/interactive/theme/theme.ts\";\nimport type { InteractiveView } from \"./startup/interactive-view.ts\";\nimport { markStartupMilestone } from \"./startup/startup-milestones.ts\";\nimport { isLocalPath, normalizePath, resolvePath } from \"./utils/paths.ts\";\n\nconst EXTENSION_LOAD_FAILURE_HINT = `Hint: Start without extensions using \"${APP_NAME} -ne\".`;\n\n/**\n * Read all content from piped stdin.\n * Returns undefined if stdin is a TTY (interactive terminal).\n */\nconst PIPED_STDIN_FIRST_CHUNK_MS = 50;\nconst PIPED_STDIN_IDLE_MS = 2000;\n\n/**\n * Read piped stdin. A non-TTY that never emits data (Windows console, leftover\n * redirected handle) must not block interactive start forever.\n */\nexport async function readPipedStdin(\n\tstream: NodeJS.ReadStream = process.stdin,\n\toptions: { firstChunkMs?: number; idleMs?: number } = {},\n): Promise<string | undefined> {\n\tif (stream.isTTY) {\n\t\treturn undefined;\n\t}\n\n\tconst firstChunkMs = options.firstChunkMs ?? PIPED_STDIN_FIRST_CHUNK_MS;\n\tconst idleMs = options.idleMs ?? PIPED_STDIN_IDLE_MS;\n\n\treturn new Promise((resolve) => {\n\t\tlet data = \"\";\n\t\tlet settled = false;\n\t\tlet sawData = false;\n\t\tlet idleTimer: ReturnType<typeof setTimeout> | undefined;\n\t\tconst firstChunkTimer = setTimeout(() => {\n\t\t\tif (!sawData) finish(undefined);\n\t\t}, firstChunkMs);\n\n\t\tconst finish = (value: string | undefined) => {\n\t\t\tif (settled) return;\n\t\t\tsettled = true;\n\t\t\tclearTimeout(firstChunkTimer);\n\t\t\tif (idleTimer) clearTimeout(idleTimer);\n\t\t\tstream.off(\"data\", onData);\n\t\t\tstream.off(\"end\", onEnd);\n\t\t\tstream.off(\"error\", onEnd);\n\t\t\tresolve(value);\n\t\t};\n\n\t\tconst onEnd = () => finish(data.trim() || undefined);\n\t\tconst onData = (chunk: string | Buffer) => {\n\t\t\tsawData = true;\n\t\t\tdata += typeof chunk === \"string\" ? chunk : chunk.toString(\"utf8\");\n\t\t\tif (idleTimer) clearTimeout(idleTimer);\n\t\t\tidleTimer = setTimeout(onEnd, idleMs);\n\t\t};\n\n\t\tstream.setEncoding(\"utf8\");\n\t\tstream.on(\"data\", onData);\n\t\tstream.on(\"end\", onEnd);\n\t\tstream.on(\"error\", onEnd);\n\t\tstream.resume();\n\t});\n}\n\nfunction collectSettingsDiagnostics(\n\tsettingsManager: SettingsManager,\n\tcontext: string,\n): AgentSessionRuntimeDiagnostic[] {\n\treturn settingsManager.drainErrors().map(({ scope, error }) => ({\n\t\ttype: \"warning\",\n\t\tmessage: `(${context}, ${scope} settings) ${error.message}`,\n\t}));\n}\n\nfunction reportDiagnostics(diagnostics: readonly AgentSessionRuntimeDiagnostic[]): void {\n\tfor (const diagnostic of diagnostics) {\n\t\tconst color = diagnostic.type === \"error\" ? chalk.red : diagnostic.type === \"warning\" ? chalk.yellow : chalk.dim;\n\t\tconst prefix = diagnostic.type === \"error\" ? \"Error: \" : diagnostic.type === \"warning\" ? \"Warning: \" : \"\";\n\t\tconsole.error(color(`${prefix}${diagnostic.message}`));\n\t}\n}\n\nfunction isTruthyEnvFlag(value: string | undefined): boolean {\n\tif (!value) return false;\n\treturn value === \"1\" || value.toLowerCase() === \"true\" || value.toLowerCase() === \"yes\";\n}\n\nfunction resolveAppMode(parsed: Args, stdinIsTTY: boolean, stdoutIsTTY: boolean): AppMode {\n\tif (parsed.mode === \"rpc\") {\n\t\treturn \"rpc\";\n\t}\n\tif (parsed.mode === \"json\") {\n\t\treturn \"json\";\n\t}\n\t// PI_STARTUP_BENCHMARK=1 times interactive first paint even when stdin/stdout\n\t// are not TTYs (repo npx, CI, redirected logs).\n\tif (isTruthyEnvFlag(process.env.PI_STARTUP_BENCHMARK) && !parsed.print) {\n\t\treturn \"interactive\";\n\t}\n\tif (parsed.print || !stdinIsTTY || !stdoutIsTTY) {\n\t\treturn \"print\";\n\t}\n\treturn \"interactive\";\n}\n\nfunction toPrintOutputMode(appMode: AppMode): Exclude<Mode, \"rpc\"> {\n\treturn appMode === \"json\" ? \"json\" : \"text\";\n}\n\nfunction isPlainRuntimeMetadataCommand(parsed: Args): boolean {\n\treturn !parsed.print && parsed.mode === undefined && (parsed.help === true || parsed.listModels !== undefined);\n}\n\nasync function prepareInitialMessage(\n\tparsed: Args,\n\tautoResizeImages: boolean,\n\tstdinContent?: string,\n): Promise<{\n\tinitialMessage?: string;\n\tinitialImages?: ImageContent[];\n}> {\n\tif (parsed.fileArgs.length === 0) {\n\t\treturn buildInitialMessage({ parsed, stdinContent });\n\t}\n\n\tconst { text, images } = await processFileArguments(parsed.fileArgs, { autoResizeImages });\n\treturn buildInitialMessage({\n\t\tparsed,\n\t\tfileText: text,\n\t\tfileImages: images,\n\t\tstdinContent,\n\t});\n}\n\n/** Result from resolving a session argument */\ntype ResolvedSession =\n\t| { type: \"path\"; path: string } // Direct file path\n\t| { type: \"local\"; path: string } // Found in current project\n\t| { type: \"global\"; path: string; cwd: string } // Found in different project\n\t| { type: \"not_found\"; arg: string }; // Not found anywhere\n\n/**\n * Resolve a session argument to a file path.\n * If it looks like a path, use as-is. Otherwise try to match as session ID prefix.\n */\nasync function findLocalSessionByExactId(\n\tsessionId: string,\n\tcwd: string,\n\tsessionDir?: string,\n): Promise<{ type: \"local\"; path: string } | undefined> {\n\tconst localSessions = await SessionManager.list(cwd, sessionDir);\n\tconst localMatch = localSessions.find((s) => s.id === sessionId);\n\treturn localMatch ? { type: \"local\", path: localMatch.path } : undefined;\n}\n\nasync function resolveSessionPath(sessionArg: string, cwd: string, sessionDir?: string): Promise<ResolvedSession> {\n\t// If it looks like a file path, resolve it before handing it to the session manager.\n\tif (sessionArg.includes(\"/\") || sessionArg.includes(\"\\\\\") || sessionArg.endsWith(\".jsonl\")) {\n\t\treturn { type: \"path\", path: resolvePath(sessionArg, cwd) };\n\t}\n\n\t// Try to match as session ID in current project first\n\tconst localSessions = await SessionManager.list(cwd, sessionDir);\n\tconst localMatch =\n\t\tlocalSessions.find((s) => s.id === sessionArg) ?? localSessions.find((s) => s.id.startsWith(sessionArg));\n\n\tif (localMatch) {\n\t\treturn { type: \"local\", path: localMatch.path };\n\t}\n\n\t// Try global search across all projects\n\tconst allSessions = await SessionManager.listAll(sessionDir);\n\tconst globalMatch =\n\t\tallSessions.find((s) => s.id === sessionArg) ?? allSessions.find((s) => s.id.startsWith(sessionArg));\n\n\tif (globalMatch) {\n\t\treturn { type: \"global\", path: globalMatch.path, cwd: globalMatch.cwd };\n\t}\n\n\t// Not found anywhere\n\treturn { type: \"not_found\", arg: sessionArg };\n}\n\n/** Prompt user for yes/no confirmation */\nasync function promptConfirm(message: string, startupView?: InteractiveView): Promise<boolean> {\n\tif (startupView) {\n\t\treturn startupView.confirm(\"Confirm\", message);\n\t}\n\treturn new Promise((resolve) => {\n\t\tconst rl = createInterface({\n\t\t\tinput: process.stdin,\n\t\t\toutput: process.stdout,\n\t\t});\n\t\trl.question(`${message} [y/N] `, (answer) => {\n\t\t\trl.close();\n\t\t\tresolve(answer.toLowerCase() === \"y\" || answer.toLowerCase() === \"yes\");\n\t\t});\n\t});\n}\n\nfunction validateForkFlags(parsed: Args): void {\n\tif (!parsed.fork) return;\n\n\tconst conflictingFlags = [\n\t\tparsed.session ? \"--session\" : undefined,\n\t\tparsed.continue ? \"--continue\" : undefined,\n\t\tparsed.resume ? \"--resume\" : undefined,\n\t\tparsed.noSession ? \"--no-session\" : undefined,\n\t].filter((flag): flag is string => flag !== undefined);\n\n\tif (conflictingFlags.length > 0) {\n\t\tconsole.error(chalk.red(`Error: --fork cannot be combined with ${conflictingFlags.join(\", \")}`));\n\t\tprocess.exit(1);\n\t}\n}\n\nfunction validateSessionIdFlags(parsed: Args): void {\n\tif (parsed.sessionId === undefined) return;\n\n\tconst conflictingFlags = [\n\t\tparsed.session ? \"--session\" : undefined,\n\t\tparsed.continue ? \"--continue\" : undefined,\n\t\tparsed.resume ? \"--resume\" : undefined,\n\t].filter((flag): flag is string => flag !== undefined);\n\n\tif (conflictingFlags.length > 0) {\n\t\tconsole.error(chalk.red(`Error: --session-id cannot be combined with ${conflictingFlags.join(\", \")}`));\n\t\tprocess.exit(1);\n\t}\n\n\ttry {\n\t\tassertValidSessionId(parsed.sessionId);\n\t} catch (error: unknown) {\n\t\tconst message = error instanceof Error ? error.message : String(error);\n\t\tconsole.error(chalk.red(`Error: ${message}`));\n\t\tprocess.exit(1);\n\t}\n}\n\nfunction openSessionOrExit(path: string, sessionDir?: string): SessionManager {\n\ttry {\n\t\treturn SessionManager.open(path, sessionDir);\n\t} catch (error: unknown) {\n\t\tconst message = error instanceof Error ? error.message : String(error);\n\t\tconsole.error(chalk.red(`Error: ${message}`));\n\t\tprocess.exit(1);\n\t}\n}\n\nfunction forkSessionOrExit(sourcePath: string, cwd: string, sessionDir?: string, sessionId?: string): SessionManager {\n\ttry {\n\t\treturn SessionManager.forkFrom(sourcePath, cwd, sessionDir, { id: sessionId });\n\t} catch (error: unknown) {\n\t\tconst message = error instanceof Error ? error.message : String(error);\n\t\tconsole.error(chalk.red(`Error: ${message}`));\n\t\tprocess.exit(1);\n\t}\n}\n\nasync function createSessionManager(\n\tparsed: Args,\n\tcwd: string,\n\tsessionDir: string | undefined,\n\tsettingsManager: SettingsManager,\n\tstartupView?: InteractiveView,\n): Promise<SessionManager> {\n\tif (parsed.noSession || parsed.help || parsed.listModels !== undefined) {\n\t\treturn SessionManager.inMemory(cwd, parsed.sessionId !== undefined ? { id: parsed.sessionId } : undefined);\n\t}\n\n\tif (parsed.fork) {\n\t\tif (parsed.sessionId) {\n\t\t\tconst existingTarget = await findLocalSessionByExactId(parsed.sessionId, cwd, sessionDir);\n\t\t\tif (existingTarget) {\n\t\t\t\tconsole.error(chalk.red(`Session already exists with id '${parsed.sessionId}'`));\n\t\t\t\tprocess.exit(1);\n\t\t\t}\n\t\t}\n\n\t\tconst resolved = await resolveSessionPath(parsed.fork, cwd, sessionDir);\n\n\t\tswitch (resolved.type) {\n\t\t\tcase \"path\":\n\t\t\tcase \"local\":\n\t\t\tcase \"global\":\n\t\t\t\treturn forkSessionOrExit(resolved.path, cwd, sessionDir, parsed.sessionId);\n\n\t\t\tcase \"not_found\":\n\t\t\t\tconsole.error(chalk.red(`No session found matching '${resolved.arg}'`));\n\t\t\t\tprocess.exit(1);\n\t\t}\n\t}\n\n\tif (parsed.session) {\n\t\tconst resolved = await resolveSessionPath(parsed.session, cwd, sessionDir);\n\n\t\tswitch (resolved.type) {\n\t\t\tcase \"path\":\n\t\t\tcase \"local\":\n\t\t\t\treturn openSessionOrExit(resolved.path, sessionDir);\n\n\t\t\tcase \"global\": {\n\t\t\t\tconsole.log(chalk.yellow(`Session found in different project: ${resolved.cwd}`));\n\t\t\t\tconst shouldFork = await promptConfirm(\"Fork this session into current directory?\", startupView);\n\t\t\t\tif (!shouldFork) {\n\t\t\t\t\tconsole.log(chalk.dim(\"Aborted.\"));\n\t\t\t\t\tprocess.exit(0);\n\t\t\t\t}\n\t\t\t\treturn forkSessionOrExit(resolved.path, cwd, sessionDir);\n\t\t\t}\n\n\t\t\tcase \"not_found\":\n\t\t\t\tconsole.error(chalk.red(`No session found matching '${resolved.arg}'`));\n\t\t\t\tprocess.exit(1);\n\t\t}\n\t}\n\n\tif (parsed.resume) {\n\t\ttry {\n\t\t\tconst currentSessionsLoader = (onProgress?: Parameters<typeof SessionManager.list>[2]) =>\n\t\t\t\tSessionManager.list(cwd, sessionDir, onProgress);\n\t\t\tconst allSessionsLoader = (onProgress?: Parameters<typeof SessionManager.listAll>[1]) =>\n\t\t\t\tSessionManager.listAll(sessionDir, onProgress);\n\t\t\tconst selectedPath = startupView\n\t\t\t\t? await startupView.selectSession(currentSessionsLoader, allSessionsLoader)\n\t\t\t\t: await selectSession(currentSessionsLoader, allSessionsLoader, settingsManager);\n\t\t\tif (!selectedPath) {\n\t\t\t\tconsole.log(chalk.dim(\"No session selected\"));\n\t\t\t\tprocess.exit(0);\n\t\t\t}\n\t\t\treturn SessionManager.open(selectedPath, sessionDir);\n\t\t} finally {\n\t\t\tstopThemeWatcher();\n\t\t}\n\t}\n\n\tif (parsed.continue) {\n\t\treturn SessionManager.continueRecent(cwd, sessionDir);\n\t}\n\n\tif (parsed.sessionId) {\n\t\tconst existingSession = await findLocalSessionByExactId(parsed.sessionId, cwd, sessionDir);\n\t\tif (existingSession) {\n\t\t\treturn SessionManager.open(existingSession.path, sessionDir);\n\t\t}\n\t\tconsole.error(\n\t\t\tchalk.yellow(\n\t\t\t\t`Warning: No project session found with id '${parsed.sessionId}'; creating a new session with that id.`,\n\t\t\t),\n\t\t);\n\t}\n\n\treturn SessionManager.create(cwd, sessionDir, { id: parsed.sessionId });\n}\n\nfunction buildSessionOptions(\n\tparsed: Args,\n\tscopedModels: ScopedModel[],\n\thasExistingSession: boolean,\n\tmodelRuntime: ModelRuntime,\n\tsettingsManager: SettingsManager,\n): {\n\toptions: CreateAgentSessionOptions;\n\tcliThinkingFromModel: boolean;\n\tdiagnostics: AgentSessionRuntimeDiagnostic[];\n} {\n\tconst options: CreateAgentSessionOptions = {};\n\tconst diagnostics: AgentSessionRuntimeDiagnostic[] = [];\n\tlet cliThinkingFromModel = false;\n\n\t// Model from CLI\n\t// - supports --provider <name> --model <pattern>\n\t// - supports --model <provider>/<pattern>\n\tif (parsed.model) {\n\t\tconst resolved = resolveCliModel({\n\t\t\tcliProvider: parsed.provider,\n\t\t\tcliModel: parsed.model,\n\t\t\tcliThinking: parsed.thinking,\n\t\t\tmodelRuntime,\n\t\t});\n\t\tif (resolved.warning) {\n\t\t\tdiagnostics.push({ type: \"warning\", message: resolved.warning });\n\t\t}\n\t\tif (resolved.error) {\n\t\t\tdiagnostics.push({ type: \"error\", message: resolved.error });\n\t\t}\n\t\tif (resolved.model) {\n\t\t\toptions.model = resolved.model;\n\t\t\t// Allow \"--model <pattern>:<thinking>\" as a shorthand.\n\t\t\t// Explicit --thinking still takes precedence (applied later).\n\t\t\tif (!parsed.thinking && resolved.thinkingLevel) {\n\t\t\t\toptions.thinkingLevel = resolved.thinkingLevel;\n\t\t\t\tcliThinkingFromModel = true;\n\t\t\t}\n\t\t}\n\t}\n\n\tif (!options.model && scopedModels.length > 0 && !hasExistingSession) {\n\t\t// Check if saved default is in scoped models - use it if so, otherwise first scoped model\n\t\tconst savedProvider = settingsManager.getDefaultProvider();\n\t\tconst savedModelId = settingsManager.getDefaultModel();\n\t\tconst savedModel = savedProvider && savedModelId ? modelRuntime.getModel(savedProvider, savedModelId) : undefined;\n\t\tconst savedInScope = savedModel ? scopedModels.find((sm) => modelsAreEqual(sm.model, savedModel)) : undefined;\n\n\t\tif (savedInScope) {\n\t\t\toptions.model = savedInScope.model;\n\t\t\t// Use thinking level from scoped model config if explicitly set\n\t\t\tif (!parsed.thinking && savedInScope.thinkingLevel) {\n\t\t\t\toptions.thinkingLevel = savedInScope.thinkingLevel;\n\t\t\t}\n\t\t} else {\n\t\t\toptions.model = scopedModels[0].model;\n\t\t\t// Use thinking level from first scoped model if explicitly set\n\t\t\tif (!parsed.thinking && scopedModels[0].thinkingLevel) {\n\t\t\t\toptions.thinkingLevel = scopedModels[0].thinkingLevel;\n\t\t\t}\n\t\t}\n\t}\n\n\t// Thinking level from CLI (takes precedence over scoped model thinking levels set above)\n\tif (parsed.thinking) {\n\t\toptions.thinkingLevel = parsed.thinking;\n\t}\n\n\t// Scoped models for Ctrl+P cycling\n\t// Keep thinking level undefined when not explicitly set in the model pattern.\n\t// Undefined means \"inherit current session thinking level\" during cycling.\n\tif (scopedModels.length > 0) {\n\t\toptions.scopedModels = scopedModels.map((sm) => ({\n\t\t\tmodel: sm.model,\n\t\t\tthinkingLevel: sm.thinkingLevel,\n\t\t}));\n\t}\n\n\t// API key from CLI - set as a non-persistent runtime override\n\t// (handled by caller before createAgentSession)\n\n\t// Tools\n\tif (parsed.noTools) {\n\t\toptions.noTools = \"all\";\n\t} else if (parsed.noBuiltinTools) {\n\t\toptions.noTools = \"builtin\";\n\t}\n\tif (parsed.tools) {\n\t\toptions.tools = [...parsed.tools];\n\t}\n\tif (parsed.excludeTools) {\n\t\toptions.excludeTools = [...parsed.excludeTools];\n\t}\n\n\treturn { options, cliThinkingFromModel, diagnostics };\n}\n\nfunction resolveCliPaths(cwd: string, paths: string[] | undefined): string[] | undefined {\n\treturn paths?.map((value) => (isLocalPath(value) ? resolvePath(value, cwd) : value));\n}\n\nfunction createStartupViewTrustContext(cwd: string, startupView: InteractiveView): ProjectTrustContext {\n\treturn {\n\t\tcwd,\n\t\tmode: \"tui\",\n\t\thasUI: true,\n\t\tui: {\n\t\t\tselect: (title, options) =>\n\t\t\t\tstartupView.select(\n\t\t\t\t\ttitle,\n\t\t\t\t\toptions.map((option) => ({ label: option, value: option })),\n\t\t\t\t),\n\t\t\tconfirm: (title, message) => startupView.confirm(title, message),\n\t\t\tinput: (title, placeholder) => startupView.input(title, placeholder),\n\t\t\tnotify: () => {},\n\t\t},\n\t};\n}\n\nasync function promptForMissingSessionCwd(\n\tissue: SessionCwdIssue,\n\tsettingsManager: SettingsManager,\n\tstartupView?: InteractiveView,\n): Promise<string | undefined> {\n\tconst options = [\n\t\t{ label: \"Continue\", value: issue.fallbackCwd },\n\t\t{ label: \"Cancel\", value: undefined },\n\t];\n\treturn startupView\n\t\t? startupView.select(formatMissingSessionCwdPrompt(issue), options)\n\t\t: showStartupSelector(settingsManager, formatMissingSessionCwdPrompt(issue), options);\n}\n\nexport interface MainOptions {\n\textensionFactories?: InlineExtension[];\n\tstartupView?: InteractiveView;\n}\n\nexport async function main(args: string[], options?: MainOptions) {\n\tresetTimings();\n\tconst offlineMode = args.includes(\"--offline\") || isTruthyEnvFlag(process.env.PI_OFFLINE);\n\tif (offlineMode) {\n\t\tprocess.env.PI_OFFLINE = \"1\";\n\t}\n\n\tconst cwd = process.cwd();\n\tconst agentDir = getAgentDir();\n\tconst bootstrapSettingsManager = SettingsManager.create(cwd, agentDir, { projectTrusted: false });\n\tapplyHttpProxySettings(bootstrapSettingsManager.getGlobalSettings().httpProxy);\n\tconfigureHttpDispatcher();\n\n\tif ([\"setup\", \"features\", \"uninstall\", \"browser\"].includes(args[0])) {\n\t\tconst { handleInstallCli } = await import(\"./cli/install-cli.ts\");\n\t\tif (await handleInstallCli(args)) return;\n\t}\n\n\tif (args[0] === \"update\") {\n\t\tconst { handleUpdateCli } = await import(\"./cli/update-cli.ts\");\n\t\tif (await handleUpdateCli(args)) return;\n\t}\n\n\tif ([\"install\", \"remove\", \"uninstall\", \"list\", \"config\"].includes(args[0])) {\n\t\tconst { handleConfigCommand, handlePackageCommand } = await import(\"./package-manager-cli.ts\");\n\t\tif (await handlePackageCommand(args, { extensionFactories: options?.extensionFactories })) {\n\t\t\tprocess.exit(process.exitCode ?? 0);\n\t\t\treturn;\n\t\t}\n\t\tif (await handleConfigCommand(args, { extensionFactories: options?.extensionFactories })) return;\n\t}\n\n\tif (args[0] === \"gateway\") {\n\t\tconst { handleGatewayCommand } = await import(\"./gateway/command.ts\");\n\t\tif (await handleGatewayCommand(args)) return;\n\t}\n\n\tconst parsed = parseArgs(args);\n\tif (parsed.diagnostics.length > 0) {\n\t\tfor (const d of parsed.diagnostics) {\n\t\t\tconst color = d.type === \"error\" ? chalk.red : chalk.yellow;\n\t\t\tconsole.error(color(`${d.type === \"error\" ? \"Error\" : \"Warning\"}: ${d.message}`));\n\t\t}\n\t\tif (parsed.diagnostics.some((d) => d.type === \"error\")) {\n\t\t\tprocess.exit(1);\n\t\t}\n\t}\n\ttime(\"parseArgs\");\n\n\tif (parsed.version) {\n\t\tconsole.log(VERSION);\n\t\tprocess.exit(0);\n\t}\n\n\tif (parsed.export) {\n\t\tlet result: string;\n\t\ttry {\n\t\t\tconst { exportFromFile } = await import(\"./core/export-html/index.ts\");\n\t\t\tconst outputPath = parsed.messages.length > 0 ? parsed.messages[0] : undefined;\n\t\t\tresult = await exportFromFile(parsed.export, outputPath);\n\t\t} catch (error: unknown) {\n\t\t\tconst message = error instanceof Error ? error.message : \"Failed to export session\";\n\t\t\tconsole.error(chalk.red(`Error: ${message}`));\n\t\t\tprocess.exit(1);\n\t\t}\n\t\tconsole.log(`Exported to: ${result}`);\n\t\tprocess.exit(0);\n\t}\n\n\tlet appMode = resolveAppMode(parsed, process.stdin.isTTY, process.stdout.isTTY);\n\tconst interactiveModeImport =\n\t\tappMode === \"interactive\" ? import(\"./modes/interactive/interactive-mode.ts\") : undefined;\n\tconst startupView = appMode === \"interactive\" ? options?.startupView : undefined;\n\tif (options?.startupView && !startupView) options.startupView.stop();\n\t// Parent-delegated children inherit read-only or auto before any tool call.\n\tapplyInheritedSubagentPermissions();\n\tconst shouldTakeOverStdout = appMode !== \"interactive\" && !isPlainRuntimeMetadataCommand(parsed);\n\tif (shouldTakeOverStdout) {\n\t\ttakeOverStdout();\n\t}\n\n\tif (parsed.mode === \"rpc\" && parsed.fileArgs.length > 0) {\n\t\tconsole.error(chalk.red(\"Error: @file arguments are not supported in RPC mode\"));\n\t\tprocess.exit(1);\n\t}\n\n\tvalidateForkFlags(parsed);\n\tvalidateSessionIdFlags(parsed);\n\n\t// Run migrations (pass cwd for project-local migrations)\n\tconst { migratedAuthProviders: migratedProviders, deprecationWarnings } = runMigrations(cwd);\n\ttime(\"runMigrations\");\n\n\tconst startupSettingsManager = SettingsManager.create(cwd, agentDir);\n\treportDiagnostics(collectSettingsDiagnostics(startupSettingsManager, \"startup session lookup\"));\n\n\t// Register the model-tier bridge before extensions load so pi-subagents can read\n\t// tier settings when building its tool description. Re-pointed to the runtime\n\t// settings manager below once services exist.\n\tregisterModelTierBridge(startupSettingsManager);\n\t// lunr: same for the simple-pi-memory character cap — extensions read it via the\n\t// bridge at load/runtime; re-pointed to the runtime settings manager below.\n\tregisterMemoryCapBridge(startupSettingsManager);\n\t// lunr: TUI customize settings (spinner, dividers, rail, prompt symbol) read by\n\t// ashxj-spinners and ashxj-tui via the bridge; re-pointed to runtime below.\n\tregisterCustomizeBridge(startupSettingsManager);\n\n\t// Experimental first-time setup: theme choice and analytics opt-in.\n\t// Runs before any runtime services are created so the chosen settings apply everywhere.\n\tif (appMode === \"interactive\" && !parsed.help && parsed.listModels === undefined && shouldRunFirstTimeSetup()) {\n\t\tstartupView?.pause();\n\t\tawait showFirstTimeSetup(startupSettingsManager);\n\t\tstartupView?.resume();\n\t\ttime(\"firstTimeSetup\");\n\t}\n\n\t// Decide the final runtime cwd before creating cwd-bound runtime services.\n\t// --session and --resume may select a session from another project, so project-local\n\t// settings, resources, provider registrations, and models must be resolved only after\n\t// the target session cwd is known. The startup-cwd settings manager is used only for\n\t// sessionDir lookup during session selection.\n\tconst envSessionDir = process.env[ENV_SESSION_DIR];\n\tconst sessionDir =\n\t\t(parsed.sessionDir ? normalizePath(parsed.sessionDir) : undefined) ??\n\t\t(envSessionDir ? expandTildePath(envSessionDir) : undefined) ??\n\t\tstartupSettingsManager.getSessionDir();\n\tlet sessionManager = await createSessionManager(parsed, cwd, sessionDir, startupSettingsManager, startupView);\n\tconst missingSessionCwdIssue = getMissingSessionCwdIssue(sessionManager, cwd);\n\tif (missingSessionCwdIssue) {\n\t\tif (appMode === \"interactive\") {\n\t\t\tconst selectedCwd = await promptForMissingSessionCwd(\n\t\t\t\tmissingSessionCwdIssue,\n\t\t\t\tstartupSettingsManager,\n\t\t\t\tstartupView,\n\t\t\t);\n\t\t\tif (!selectedCwd) {\n\t\t\t\tprocess.exit(0);\n\t\t\t}\n\t\t\tsessionManager.dispose();\n\t\t\tsessionManager = SessionManager.open(missingSessionCwdIssue.sessionFile!, sessionDir, selectedCwd);\n\t\t} else {\n\t\t\tconsole.error(chalk.red(new MissingSessionCwdError(missingSessionCwdIssue).message));\n\t\t\tprocess.exit(1);\n\t\t}\n\t}\n\tif (parsed.name !== undefined) {\n\t\tconst name = parsed.name.trim();\n\t\tif (!name) {\n\t\t\tconsole.error(chalk.red(\"Error: --name requires a non-empty value\"));\n\t\t\tprocess.exit(1);\n\t\t}\n\t\tsessionManager.appendSessionInfo(name);\n\t}\n\ttime(\"createSessionManager\");\n\n\tconst runSessionRetention = async () => {\n\t\ttry {\n\t\t\tconst retentionDays = startupSettingsManager.getSessionRetentionDays();\n\t\t\tif (retentionDays <= 0) return;\n\t\t\tconst activeSessionFile = sessionManager.getSessionFile();\n\t\t\tconst { deleted } = await pruneOldSessions(getSessionsDir(), retentionDays, {\n\t\t\t\texcludeFile: activeSessionFile,\n\t\t\t});\n\t\t\tif (sessionDir) {\n\t\t\t\tconst extra = await pruneOldSessions(sessionDir, retentionDays, { excludeFile: activeSessionFile });\n\t\t\t\tdeleted.push(...extra.deleted);\n\t\t\t}\n\t\t\tif (deleted.length > 0) {\n\t\t\t\tappendDebugLog(\n\t\t\t\t\t`session-retention: deleted ${deleted.length} file(s):\\n${deleted.map((path) => `  ${path}`).join(\"\\n\")}`,\n\t\t\t\t);\n\t\t\t}\n\t\t} catch (error) {\n\t\t\tappendDebugLog(`session-retention: prune failed: ${error instanceof Error ? error.message : String(error)}`);\n\t\t}\n\t};\n\n\tconst trustStore = new ProjectTrustStore(agentDir);\n\tconst sessionCwd = sessionManager.getCwd();\n\tconst autoTrustOnReloadCwd =\n\t\tparsed.projectTrustOverride === undefined && !hasTrustRequiringProjectResources(sessionCwd)\n\t\t\t? sessionCwd\n\t\t\t: undefined;\n\tconst trustPromptMode: AppMode = parsed.help || parsed.listModels !== undefined ? \"print\" : appMode;\n\tconst projectTrustByCwd = new Map<string, boolean>();\n\n\tconst resolvedExtensionPaths = resolveCliPaths(cwd, parsed.extensions);\n\tconst resolvedSkillPaths = resolveCliPaths(cwd, parsed.skills);\n\tconst resolvedPromptTemplatePaths = resolveCliPaths(cwd, parsed.promptTemplates);\n\tconst resolvedThemePaths = resolveCliPaths(cwd, parsed.themes);\n\tconst builtinRoster = appMode === \"interactive\" ? [...lightBuiltinExtensions] : await loadAllBuiltinExtensions();\n\tconst rememberAttachedFactories = (factories: InlineExtension[]) => {\n\t\tconst seen = new Set(\n\t\t\tbuiltinRoster.map((entry) => (typeof entry === \"function\" ? undefined : entry.name)).filter(Boolean),\n\t\t);\n\t\tfor (const factory of factories) {\n\t\t\tconst name = typeof factory === \"function\" ? undefined : factory.name;\n\t\t\tif (name && seen.has(name)) continue;\n\t\t\tif (name) seen.add(name);\n\t\t\tbuiltinRoster.push(factory);\n\t\t}\n\t};\n\tconst createRuntime: CreateAgentSessionRuntimeFactory = async ({\n\t\tcwd,\n\t\tagentDir,\n\t\tsessionManager,\n\t\tsessionStartEvent,\n\t\tprojectTrustContext,\n\t}) => {\n\t\tconst isInitialRuntime = sessionStartEvent === undefined;\n\t\tconst projectTrustDiagnostics: AgentSessionRuntimeDiagnostic[] = [];\n\t\tconst cachedProjectTrust = projectTrustByCwd.get(cwd);\n\t\tconst hasTrustRequiringResources = hasTrustRequiringProjectResources(cwd);\n\t\tconst shouldResolveProjectTrust =\n\t\t\tparsed.projectTrustOverride === undefined && cachedProjectTrust === undefined && hasTrustRequiringResources;\n\t\tconst projectTrusted = shouldResolveProjectTrust\n\t\t\t? false\n\t\t\t: (cachedProjectTrust ??\n\t\t\t\tparsed.projectTrustOverride ??\n\t\t\t\t(!hasTrustRequiringResources || trustStore.get(cwd) === true));\n\t\tconst runtimeSettingsManager = SettingsManager.create(cwd, agentDir, { projectTrusted });\n\t\tconst skipMissingPackageInstall = isInitialRuntime && appMode === \"interactive\";\n\t\tconst services = await createAgentSessionServices({\n\t\t\tcwd,\n\t\t\tagentDir,\n\t\t\tsettingsManager: runtimeSettingsManager,\n\t\t\textensionFlagValues: parsed.unknownFlags,\n\t\t\tresourceLoaderReloadOptions: shouldResolveProjectTrust\n\t\t\t\t? {\n\t\t\t\t\t\tskipMissingPackageInstall,\n\t\t\t\t\t\tresolveProjectTrust: async ({ extensionsResult }) => {\n\t\t\t\t\t\t\tconst trusted = await resolveProjectTrusted({\n\t\t\t\t\t\t\t\tcwd,\n\t\t\t\t\t\t\t\ttrustStore,\n\t\t\t\t\t\t\t\ttrustOverride: parsed.projectTrustOverride,\n\t\t\t\t\t\t\t\tdefaultProjectTrust: startupSettingsManager.getDefaultProjectTrust(),\n\t\t\t\t\t\t\t\textensionsResult,\n\t\t\t\t\t\t\t\tprojectTrustContext:\n\t\t\t\t\t\t\t\t\tprojectTrustContext ??\n\t\t\t\t\t\t\t\t\t(isInitialRuntime && startupView\n\t\t\t\t\t\t\t\t\t\t? createStartupViewTrustContext(cwd, startupView)\n\t\t\t\t\t\t\t\t\t\t: createProjectTrustContext({\n\t\t\t\t\t\t\t\t\t\t\t\tcwd,\n\t\t\t\t\t\t\t\t\t\t\t\tmode: isInitialRuntime ? trustPromptMode : appMode,\n\t\t\t\t\t\t\t\t\t\t\t\tsettingsManager: startupSettingsManager,\n\t\t\t\t\t\t\t\t\t\t\t\thasUI: isInitialRuntime && trustPromptMode === \"interactive\",\n\t\t\t\t\t\t\t\t\t\t\t})),\n\t\t\t\t\t\t\t\tonExtensionError: (message) => projectTrustDiagnostics.push({ type: \"warning\", message }),\n\t\t\t\t\t\t\t});\n\t\t\t\t\t\t\tprojectTrustByCwd.set(cwd, trusted);\n\t\t\t\t\t\t\treturn trusted;\n\t\t\t\t\t\t},\n\t\t\t\t\t}\n\t\t\t\t: skipMissingPackageInstall\n\t\t\t\t\t? { skipMissingPackageInstall }\n\t\t\t\t\t: undefined,\n\t\t\tresourceLoaderOptions: {\n\t\t\t\tadditionalExtensionPaths: resolvedExtensionPaths,\n\t\t\t\tadditionalSkillPaths: resolvedSkillPaths,\n\t\t\t\tadditionalPromptTemplatePaths: resolvedPromptTemplatePaths,\n\t\t\t\tadditionalThemePaths: resolvedThemePaths,\n\t\t\t\tnoExtensions: parsed.noExtensions,\n\t\t\t\tnoSkills: parsed.noSkills,\n\t\t\t\tnoPromptTemplates: parsed.noPromptTemplates,\n\t\t\t\tnoThemes: parsed.noThemes,\n\t\t\t\tnoContextFiles: parsed.noContextFiles,\n\t\t\t\tsystemPrompt: parsed.systemPrompt,\n\t\t\t\tappendSystemPrompt: parsed.appendSystemPrompt,\n\t\t\t\textensionFactories: [...builtinRoster, ...(options?.extensionFactories ?? [])],\n\t\t\t},\n\t\t});\n\t\tconst { settingsManager, modelRuntime, resourceLoader } = services;\n\t\tif (\n\t\t\tparsed.model &&\n\t\t\t!resolveCliModel({\n\t\t\t\tcliProvider: parsed.provider,\n\t\t\t\tcliModel: parsed.model,\n\t\t\t\tcliThinking: parsed.thinking,\n\t\t\t\tmodelRuntime,\n\t\t\t}).model\n\t\t) {\n\t\t\tawait modelRuntime.refreshIfStale();\n\t\t}\n\t\tconst diagnostics: AgentSessionRuntimeDiagnostic[] = [\n\t\t\t...projectTrustDiagnostics,\n\t\t\t...services.diagnostics,\n\t\t\t...collectSettingsDiagnostics(settingsManager, \"runtime creation\"),\n\t\t\t...resourceLoader.getExtensions().errors.map(({ path, error }) => ({\n\t\t\t\ttype: \"error\" as const,\n\t\t\t\tmessage: `Failed to load extension \"${path}\": ${error}`,\n\t\t\t})),\n\t\t];\n\n\t\tconst modelPatterns = parsed.models ?? settingsManager.getEnabledModels();\n\t\tconst scopedModels =\n\t\t\tmodelPatterns && modelPatterns.length > 0 ? await resolveModelScope(modelPatterns, modelRuntime) : [];\n\t\tconst {\n\t\t\toptions: sessionOptions,\n\t\t\tcliThinkingFromModel,\n\t\t\tdiagnostics: sessionOptionDiagnostics,\n\t\t} = buildSessionOptions(\n\t\t\tparsed,\n\t\t\tscopedModels,\n\t\t\tsessionManager.buildSessionContext().messages.length > 0,\n\t\t\tmodelRuntime,\n\t\t\tsettingsManager,\n\t\t);\n\t\tdiagnostics.push(...sessionOptionDiagnostics);\n\n\t\tif (parsed.apiKey) {\n\t\t\tif (!sessionOptions.model) {\n\t\t\t\tdiagnostics.push({\n\t\t\t\t\ttype: \"error\",\n\t\t\t\t\tmessage: \"--api-key requires a model to be specified via --model, --provider/--model, or --models\",\n\t\t\t\t});\n\t\t\t} else {\n\t\t\t\t// Cache-only: do not wait on GitHub / provider /v1/models before first paint.\n\t\t\t\tawait modelRuntime.setRuntimeApiKey(sessionOptions.model.provider, parsed.apiKey, {\n\t\t\t\t\tallowNetwork: false,\n\t\t\t\t});\n\t\t\t}\n\t\t}\n\n\t\tconst created = await createAgentSessionFromServices({\n\t\t\tservices,\n\t\t\tsessionManager,\n\t\t\tsessionStartEvent,\n\t\t\tmodel: sessionOptions.model,\n\t\t\tthinkingLevel: sessionOptions.thinkingLevel,\n\t\t\tscopedModels: sessionOptions.scopedModels,\n\t\t\ttools: sessionOptions.tools,\n\t\t\texcludeTools: sessionOptions.excludeTools,\n\t\t\tnoTools: sessionOptions.noTools,\n\t\t\tcustomTools: sessionOptions.customTools,\n\t\t});\n\t\tconst cliThinkingOverride = parsed.thinking !== undefined || cliThinkingFromModel;\n\t\tif (created.session.model && cliThinkingOverride) {\n\t\t\tcreated.session.setThinkingLevel(created.session.thinkingLevel);\n\t\t}\n\n\t\treturn {\n\t\t\t...created,\n\t\t\tservices,\n\t\t\tdiagnostics,\n\t\t};\n\t};\n\ttime(\"createRuntime\");\n\tconst runtime = await createAgentSessionRuntime(createRuntime, {\n\t\tcwd: sessionManager.getCwd(),\n\t\tagentDir,\n\t\tsessionManager,\n\t\tonRuntimeApplied: bindRuntimeBridges,\n\t});\n\tif (startupView?.isExitRequested) {\n\t\tawait runtime.dispose();\n\t\treturn;\n\t}\n\tmarkStartupMilestone(\"runtime_hydrated\");\n\ttime(\"createAgentSessionRuntime\");\n\tif (appMode !== \"interactive\") await runSessionRetention();\n\tconst { services, session, modelFallbackMessage } = runtime;\n\tconst { settingsManager, modelRuntime, resourceLoader } = services;\n\tapplyHttpProxySettings(settingsManager.getGlobalSettings().httpProxy);\n\tconfigureHttpDispatcher(settingsManager.getHttpIdleTimeoutMs());\n\n\tif (parsed.help) {\n\t\tconst extensionFlags = resourceLoader\n\t\t\t.getExtensions()\n\t\t\t.extensions.flatMap((extension) => Array.from(extension.flags.values()));\n\t\tprintHelp(extensionFlags);\n\t\tprocess.exit(0);\n\t}\n\n\tif (parsed.listModels !== undefined) {\n\t\tconst searchPattern = typeof parsed.listModels === \"string\" ? parsed.listModels : undefined;\n\t\tawait listModels(modelRuntime, searchPattern);\n\t\tprocess.exit(0);\n\t}\n\n\t// Read piped stdin content (if any) - skip for RPC mode which uses stdin for JSON-RPC.\n\t// Startup benchmark must stay interactive even if a leftover redirected handle has bytes.\n\tlet stdinContent: string | undefined;\n\tconst startupBenchmark = isTruthyEnvFlag(process.env.PI_STARTUP_BENCHMARK);\n\tif (appMode !== \"rpc\" && !startupBenchmark) {\n\t\tstdinContent = await readPipedStdin();\n\t\tif (stdinContent !== undefined && appMode === \"interactive\") {\n\t\t\tappMode = \"print\";\n\t\t}\n\t}\n\ttime(\"readPipedStdin\");\n\n\tconst { initialMessage, initialImages } = await prepareInitialMessage(\n\t\tparsed,\n\t\tsettingsManager.getImageAutoResize(),\n\t\tstdinContent,\n\t);\n\ttime(\"prepareInitialMessage\");\n\tinitTheme(settingsManager.getTheme(), appMode === \"interactive\");\n\ttime(\"initTheme\");\n\n\tif (appMode === \"interactive\" && !startupView && deprecationWarnings.length > 0) {\n\t\tawait showDeprecationWarnings(deprecationWarnings);\n\t}\n\n\ttime(\"resolveModelScope\");\n\tif (!(appMode === \"interactive\" && startupView)) reportDiagnostics(runtime.diagnostics);\n\tif (runtime.diagnostics.some((diagnostic) => diagnostic.type === \"error\")) {\n\t\tconst extensionHint = runtime.diagnostics.some((diagnostic) =>\n\t\t\tdiagnostic.message.includes(\"Failed to load extension\"),\n\t\t)\n\t\t\t? `\\n${EXTENSION_LOAD_FAILURE_HINT}`\n\t\t\t: \"\";\n\t\tif (startupView) {\n\t\t\tprocess.exitCode = 1;\n\t\t\tawait startupView.fail(\n\t\t\t\t`${runtime.diagnostics.map((diagnostic) => diagnostic.message).join(\"\\n\")}${extensionHint}`,\n\t\t\t);\n\t\t\treturn;\n\t\t}\n\t\tif (extensionHint) console.error(chalk.yellow(EXTENSION_LOAD_FAILURE_HINT));\n\t\tprocess.exit(1);\n\t}\n\ttime(\"createAgentSession\");\n\n\tif (appMode !== \"interactive\" && !session.model) {\n\t\tconsole.error(chalk.red(formatNoModelsAvailableMessage()));\n\t\tprocess.exit(1);\n\t}\n\n\tif (startupBenchmark && appMode !== \"interactive\") {\n\t\tconsole.error(chalk.red(\"Error: PI_STARTUP_BENCHMARK only supports interactive mode\"));\n\t\tprocess.exit(1);\n\t}\n\n\tif (appMode === \"rpc\") {\n\t\tconst { runRpcMode } = await import(\"./modes/rpc/rpc-mode.ts\");\n\t\tprintTimings();\n\t\tawait runRpcMode(runtime);\n\t} else if (appMode === \"interactive\") {\n\t\tconst [{ InteractiveMode }, { loadDeferredBuiltinExtensions }] = await Promise.all([\n\t\t\tinteractiveModeImport!,\n\t\t\timport(\"./builtin-extensions/index.ts\"),\n\t\t]);\n\t\tconst interactiveMode = new InteractiveMode(runtime, {\n\t\t\tmigratedProviders,\n\t\t\tmodelFallbackMessage,\n\t\t\tautoTrustOnReloadCwd,\n\t\t\tinitialMessage,\n\t\t\tinitialImages,\n\t\t\tinitialMessages: parsed.messages,\n\t\t\tverbose: parsed.verbose,\n\t\t\tdeprecationWarnings: startupView ? deprecationWarnings : undefined,\n\t\t\tstartupDiagnostics: startupView\n\t\t\t\t? runtime.diagnostics.filter((diagnostic) => diagnostic.type !== \"error\")\n\t\t\t\t: undefined,\n\t\t\tstartupView: startupView?.binding(),\n\t\t\tdeferredMaintenance: runSessionRetention,\n\t\t\tdeferredBuiltinFactories: parsed.noExtensions ? undefined : loadDeferredBuiltinExtensions,\n\t\t\tonDeferredBuiltinsAttached: rememberAttachedFactories,\n\t\t});\n\t\tif (startupBenchmark) {\n\t\t\tconst { prepareBenchmarkRequest } = await import(\"./startup/benchmark-request.ts\");\n\t\t\tconst request = await prepareBenchmarkRequest(session);\n\t\t\tawait interactiveMode.init();\n\t\t\ttime(\"interactiveMode.init\");\n\t\t\tawait interactiveMode.waitForStartupReady();\n\t\t\ttime(\"promptBarrier\");\n\t\t\tawait request();\n\t\t\t// Consume terminal-query replies before returning control to the shell.\n\t\t\tawait new Promise((resolve) => setTimeout(resolve, 150));\n\t\t\tinteractiveMode.stop();\n\t\t\tawait runtime.dispose();\n\t\t\tstopThemeWatcher();\n\t\t\tprintTimings();\n\t\t\tif (process.stdout.writableLength > 0) {\n\t\t\t\tawait new Promise<void>((resolve) => process.stdout.once(\"drain\", resolve));\n\t\t\t}\n\t\t\tif (process.stderr.writableLength > 0) {\n\t\t\t\tawait new Promise<void>((resolve) => process.stderr.once(\"drain\", resolve));\n\t\t\t}\n\t\t\treturn;\n\t\t}\n\n\t\tawait interactiveMode.init();\n\t\ttime(\"interactiveMode.init\");\n\t\tprintTimings();\n\t\tawait interactiveMode.run();\n\t} else {\n\t\tconst { runPrintMode } = await import(\"./modes/print-mode.ts\");\n\t\tprintTimings();\n\t\tconst exitCode = await runPrintMode(runtime, {\n\t\t\tmode: toPrintOutputMode(appMode),\n\t\t\tmessages: parsed.messages,\n\t\t\tinitialMessage,\n\t\t\tinitialImages,\n\t\t});\n\t\tstopThemeWatcher();\n\t\trestoreStdout();\n\t\tif (exitCode !== 0) {\n\t\t\tprocess.exitCode = exitCode;\n\t\t}\n\t\treturn;\n\t}\n}\n"]}
+{"version":3,"file":"main.d.ts","sourceRoot":"","sources":["../src/main.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAuBH,OAAO,KAAK,EAAE,eAAe,EAAuB,MAAM,4BAA4B,CAAC;AA0BvF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAarE;;;GAGG;AACH,wBAAsB,cAAc,CACnC,MAAM,GAAE,MAAM,CAAC,UAA0B,EACzC,OAAO,GAAE;IAAE,YAAY,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAO,GACtD,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CA0C7B;AA+aD,MAAM,WAAW,WAAW;IAC3B,kBAAkB,CAAC,EAAE,eAAe,EAAE,CAAC;IACvC,WAAW,CAAC,EAAE,eAAe,CAAC;CAC9B;AAED,wBAAsB,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,CAAC,EAAE,WAAW,iBA4jB/D","sourcesContent":["/**\n * Main entry point for the coding agent CLI.\n *\n * This file handles CLI argument parsing and translates them into\n * createAgentSession() options. The SDK does the heavy lifting.\n */\n\nimport { createInterface } from \"node:readline\";\nimport { type ImageContent, modelsAreEqual } from \"@ashx-j/lunr-ai\";\nimport chalk from \"chalk\";\nimport { lightBuiltinExtensions, loadAllBuiltinExtensions } from \"./builtin-extensions/index.ts\";\nimport { type Args, type Mode, parseArgs, printHelp } from \"./cli/args.ts\";\nimport { processFileArguments } from \"./cli/file-processor.ts\";\nimport { buildInitialMessage } from \"./cli/initial-message.ts\";\nimport { listModels } from \"./cli/list-models.ts\";\nimport { createProjectTrustContext } from \"./cli/project-trust.ts\";\nimport { selectSession } from \"./cli/session-picker.ts\";\nimport { shouldRunFirstTimeSetup, showFirstTimeSetup, showStartupSelector } from \"./cli/startup-ui.ts\";\nimport { APP_NAME, appendDebugLog, ENV_SESSION_DIR, expandTildePath, getAgentDir, VERSION } from \"./config.ts\";\nimport { type CreateAgentSessionRuntimeFactory, createAgentSessionRuntime } from \"./core/agent-session-runtime.ts\";\nimport {\n\ttype AgentSessionRuntimeDiagnostic,\n\tcreateAgentSessionFromServices,\n\tcreateAgentSessionServices,\n} from \"./core/agent-session-services.ts\";\nimport { formatNoModelsAvailableMessage } from \"./core/auth-guidance.ts\";\nimport { registerCustomizeBridge } from \"./core/customize.ts\";\nimport { ExtensionRunner, emitSessionShutdownEvent } from \"./core/extensions/runner.ts\";\nimport type { InlineExtension, ProjectTrustContext } from \"./core/extensions/types.ts\";\nimport { applyHttpProxySettings, configureHttpDispatcher } from \"./core/http-dispatcher.ts\";\nimport { registerMemoryCapBridge } from \"./core/memory-cap.ts\";\nimport { ModelRegistry } from \"./core/model-registry.ts\";\nimport { resolveCliModel, resolveModelScope, type ScopedModel } from \"./core/model-resolver.ts\";\nimport type { ModelRuntime } from \"./core/model-runtime.ts\";\nimport { registerModelTierBridge } from \"./core/model-tiers.ts\";\nimport { restoreStdout, takeOverStdout } from \"./core/output-guard.ts\";\nimport { type AppMode, resolveProjectTrusted } from \"./core/project-trust.ts\";\nimport { bindRuntimeBridges } from \"./core/runtime-bridges.ts\";\nimport type { CreateAgentSessionOptions } from \"./core/sdk.ts\";\nimport {\n\tformatMissingSessionCwdPrompt,\n\tgetMissingSessionCwdIssue,\n\tMissingSessionCwdError,\n\ttype SessionCwdIssue,\n} from \"./core/session-cwd.ts\";\nimport { assertValidSessionId, SessionManager } from \"./core/session-manager.ts\";\nimport { pruneOldSessions } from \"./core/session-retention.ts\";\nimport { getSessionRetentionTargets, selectApprovedStartupSession } from \"./core/session-startup-settings.ts\";\nimport { SettingsManager } from \"./core/settings-manager.ts\";\nimport { applyInheritedSubagentPermissions } from \"./core/subagent-permission-inherit.ts\";\nimport { printTimings, resetTimings, time } from \"./core/timings.ts\";\nimport { hasTrustRequiringProjectResources, ProjectTrustStore } from \"./core/trust-manager.ts\";\nimport { runMigrations, showDeprecationWarnings } from \"./migrations.ts\";\nimport { initTheme, stopThemeWatcher } from \"./modes/interactive/theme/theme.ts\";\nimport type { InteractiveView } from \"./startup/interactive-view.ts\";\nimport { markStartupMilestone } from \"./startup/startup-milestones.ts\";\nimport { isLocalPath, normalizePath, resolvePath } from \"./utils/paths.ts\";\n\nconst EXTENSION_LOAD_FAILURE_HINT = `Hint: Start without extensions using \"${APP_NAME} -ne\".`;\n\n/**\n * Read all content from piped stdin.\n * Returns undefined if stdin is a TTY (interactive terminal).\n */\nconst PIPED_STDIN_FIRST_CHUNK_MS = 50;\nconst PIPED_STDIN_IDLE_MS = 2000;\n\n/**\n * Read piped stdin. A non-TTY that never emits data (Windows console, leftover\n * redirected handle) must not block interactive start forever.\n */\nexport async function readPipedStdin(\n\tstream: NodeJS.ReadStream = process.stdin,\n\toptions: { firstChunkMs?: number; idleMs?: number } = {},\n): Promise<string | undefined> {\n\tif (stream.isTTY) {\n\t\treturn undefined;\n\t}\n\n\tconst firstChunkMs = options.firstChunkMs ?? PIPED_STDIN_FIRST_CHUNK_MS;\n\tconst idleMs = options.idleMs ?? PIPED_STDIN_IDLE_MS;\n\n\treturn new Promise((resolve) => {\n\t\tlet data = \"\";\n\t\tlet settled = false;\n\t\tlet sawData = false;\n\t\tlet idleTimer: ReturnType<typeof setTimeout> | undefined;\n\t\tconst firstChunkTimer = setTimeout(() => {\n\t\t\tif (!sawData) finish(undefined);\n\t\t}, firstChunkMs);\n\n\t\tconst finish = (value: string | undefined) => {\n\t\t\tif (settled) return;\n\t\t\tsettled = true;\n\t\t\tclearTimeout(firstChunkTimer);\n\t\t\tif (idleTimer) clearTimeout(idleTimer);\n\t\t\tstream.off(\"data\", onData);\n\t\t\tstream.off(\"end\", onEnd);\n\t\t\tstream.off(\"error\", onEnd);\n\t\t\tresolve(value);\n\t\t};\n\n\t\tconst onEnd = () => finish(data.trim() || undefined);\n\t\tconst onData = (chunk: string | Buffer) => {\n\t\t\tsawData = true;\n\t\t\tdata += typeof chunk === \"string\" ? chunk : chunk.toString(\"utf8\");\n\t\t\tif (idleTimer) clearTimeout(idleTimer);\n\t\t\tidleTimer = setTimeout(onEnd, idleMs);\n\t\t};\n\n\t\tstream.setEncoding(\"utf8\");\n\t\tstream.on(\"data\", onData);\n\t\tstream.on(\"end\", onEnd);\n\t\tstream.on(\"error\", onEnd);\n\t\tstream.resume();\n\t});\n}\n\nfunction collectSettingsDiagnostics(\n\tsettingsManager: SettingsManager,\n\tcontext: string,\n): AgentSessionRuntimeDiagnostic[] {\n\treturn settingsManager.drainErrors().map(({ scope, error }) => ({\n\t\ttype: \"warning\",\n\t\tmessage: `(${context}, ${scope} settings) ${error.message}`,\n\t}));\n}\n\nfunction reportDiagnostics(diagnostics: readonly AgentSessionRuntimeDiagnostic[]): void {\n\tfor (const diagnostic of diagnostics) {\n\t\tconst color = diagnostic.type === \"error\" ? chalk.red : diagnostic.type === \"warning\" ? chalk.yellow : chalk.dim;\n\t\tconst prefix = diagnostic.type === \"error\" ? \"Error: \" : diagnostic.type === \"warning\" ? \"Warning: \" : \"\";\n\t\tconsole.error(color(`${prefix}${diagnostic.message}`));\n\t}\n}\n\nfunction isTruthyEnvFlag(value: string | undefined): boolean {\n\tif (!value) return false;\n\treturn value === \"1\" || value.toLowerCase() === \"true\" || value.toLowerCase() === \"yes\";\n}\n\nfunction resolveAppMode(parsed: Args, stdinIsTTY: boolean, stdoutIsTTY: boolean): AppMode {\n\tif (parsed.mode === \"rpc\") {\n\t\treturn \"rpc\";\n\t}\n\tif (parsed.mode === \"json\") {\n\t\treturn \"json\";\n\t}\n\t// PI_STARTUP_BENCHMARK=1 times interactive first paint even when stdin/stdout\n\t// are not TTYs (repo npx, CI, redirected logs).\n\tif (isTruthyEnvFlag(process.env.PI_STARTUP_BENCHMARK) && !parsed.print) {\n\t\treturn \"interactive\";\n\t}\n\tif (parsed.print || !stdinIsTTY || !stdoutIsTTY) {\n\t\treturn \"print\";\n\t}\n\treturn \"interactive\";\n}\n\nfunction toPrintOutputMode(appMode: AppMode): Exclude<Mode, \"rpc\"> {\n\treturn appMode === \"json\" ? \"json\" : \"text\";\n}\n\nfunction isPlainRuntimeMetadataCommand(parsed: Args): boolean {\n\treturn !parsed.print && parsed.mode === undefined && (parsed.help === true || parsed.listModels !== undefined);\n}\n\nasync function prepareInitialMessage(\n\tparsed: Args,\n\tautoResizeImages: boolean,\n\tstdinContent?: string,\n): Promise<{\n\tinitialMessage?: string;\n\tinitialImages?: ImageContent[];\n}> {\n\tif (parsed.fileArgs.length === 0) {\n\t\treturn buildInitialMessage({ parsed, stdinContent });\n\t}\n\n\tconst { text, images } = await processFileArguments(parsed.fileArgs, { autoResizeImages });\n\treturn buildInitialMessage({\n\t\tparsed,\n\t\tfileText: text,\n\t\tfileImages: images,\n\t\tstdinContent,\n\t});\n}\n\n/** Result from resolving a session argument */\ntype ResolvedSession =\n\t| { type: \"path\"; path: string } // Direct file path\n\t| { type: \"local\"; path: string } // Found in current project\n\t| { type: \"global\"; path: string; cwd: string } // Found in different project\n\t| { type: \"not_found\"; arg: string }; // Not found anywhere\n\n/**\n * Resolve a session argument to a file path.\n * If it looks like a path, use as-is. Otherwise try to match as session ID prefix.\n */\nasync function findLocalSessionByExactId(\n\tsessionId: string,\n\tcwd: string,\n\tsessionDir?: string,\n): Promise<{ type: \"local\"; path: string } | undefined> {\n\tconst localSessions = await SessionManager.list(cwd, sessionDir);\n\tconst localMatch = localSessions.find((s) => s.id === sessionId);\n\treturn localMatch ? { type: \"local\", path: localMatch.path } : undefined;\n}\n\nasync function resolveSessionPath(sessionArg: string, cwd: string, sessionDir?: string): Promise<ResolvedSession> {\n\t// If it looks like a file path, resolve it before handing it to the session manager.\n\tif (sessionArg.includes(\"/\") || sessionArg.includes(\"\\\\\") || sessionArg.endsWith(\".jsonl\")) {\n\t\treturn { type: \"path\", path: resolvePath(sessionArg, cwd) };\n\t}\n\n\t// Try to match as session ID in current project first\n\tconst localSessions = await SessionManager.list(cwd, sessionDir);\n\tconst localMatch =\n\t\tlocalSessions.find((s) => s.id === sessionArg) ?? localSessions.find((s) => s.id.startsWith(sessionArg));\n\n\tif (localMatch) {\n\t\treturn { type: \"local\", path: localMatch.path };\n\t}\n\n\t// Try global search across all projects\n\tconst allSessions = await SessionManager.listAll(sessionDir);\n\tconst globalMatch =\n\t\tallSessions.find((s) => s.id === sessionArg) ?? allSessions.find((s) => s.id.startsWith(sessionArg));\n\n\tif (globalMatch) {\n\t\treturn { type: \"global\", path: globalMatch.path, cwd: globalMatch.cwd };\n\t}\n\n\t// Not found anywhere\n\treturn { type: \"not_found\", arg: sessionArg };\n}\n\n/** Prompt user for yes/no confirmation */\nasync function promptConfirm(message: string, startupView?: InteractiveView): Promise<boolean> {\n\tif (startupView) {\n\t\treturn startupView.confirm(\"Confirm\", message);\n\t}\n\treturn new Promise((resolve) => {\n\t\tconst rl = createInterface({\n\t\t\tinput: process.stdin,\n\t\t\toutput: process.stdout,\n\t\t});\n\t\trl.question(`${message} [y/N] `, (answer) => {\n\t\t\trl.close();\n\t\t\tresolve(answer.toLowerCase() === \"y\" || answer.toLowerCase() === \"yes\");\n\t\t});\n\t});\n}\n\nfunction validateForkFlags(parsed: Args): void {\n\tif (!parsed.fork) return;\n\n\tconst conflictingFlags = [\n\t\tparsed.session ? \"--session\" : undefined,\n\t\tparsed.continue ? \"--continue\" : undefined,\n\t\tparsed.resume ? \"--resume\" : undefined,\n\t\tparsed.noSession ? \"--no-session\" : undefined,\n\t].filter((flag): flag is string => flag !== undefined);\n\n\tif (conflictingFlags.length > 0) {\n\t\tconsole.error(chalk.red(`Error: --fork cannot be combined with ${conflictingFlags.join(\", \")}`));\n\t\tprocess.exit(1);\n\t}\n}\n\nfunction validateSessionIdFlags(parsed: Args): void {\n\tif (parsed.sessionId === undefined) return;\n\n\tconst conflictingFlags = [\n\t\tparsed.session ? \"--session\" : undefined,\n\t\tparsed.continue ? \"--continue\" : undefined,\n\t\tparsed.resume ? \"--resume\" : undefined,\n\t].filter((flag): flag is string => flag !== undefined);\n\n\tif (conflictingFlags.length > 0) {\n\t\tconsole.error(chalk.red(`Error: --session-id cannot be combined with ${conflictingFlags.join(\", \")}`));\n\t\tprocess.exit(1);\n\t}\n\n\ttry {\n\t\tassertValidSessionId(parsed.sessionId);\n\t} catch (error: unknown) {\n\t\tconst message = error instanceof Error ? error.message : String(error);\n\t\tconsole.error(chalk.red(`Error: ${message}`));\n\t\tprocess.exit(1);\n\t}\n}\n\nfunction openSessionOrExit(path: string, sessionDir?: string): SessionManager {\n\ttry {\n\t\treturn SessionManager.open(path, sessionDir);\n\t} catch (error: unknown) {\n\t\tconst message = error instanceof Error ? error.message : String(error);\n\t\tconsole.error(chalk.red(`Error: ${message}`));\n\t\tprocess.exit(1);\n\t}\n}\n\nfunction forkSessionOrExit(sourcePath: string, cwd: string, sessionDir?: string, sessionId?: string): SessionManager {\n\ttry {\n\t\treturn SessionManager.forkFrom(sourcePath, cwd, sessionDir, { id: sessionId });\n\t} catch (error: unknown) {\n\t\tconst message = error instanceof Error ? error.message : String(error);\n\t\tconsole.error(chalk.red(`Error: ${message}`));\n\t\tprocess.exit(1);\n\t}\n}\n\nasync function createSessionManager(\n\tparsed: Args,\n\tcwd: string,\n\tsessionDir: string | undefined,\n\tsettingsManager: SettingsManager,\n\tstartupView?: InteractiveView,\n\tdeferSelection?: () => SessionManager,\n): Promise<SessionManager> {\n\tif (parsed.noSession || parsed.help || parsed.listModels !== undefined) {\n\t\treturn SessionManager.inMemory(cwd, parsed.sessionId !== undefined ? { id: parsed.sessionId } : undefined);\n\t}\n\n\tif (parsed.fork) {\n\t\tif (parsed.sessionId) {\n\t\t\tconst existingTarget = await findLocalSessionByExactId(parsed.sessionId, cwd, sessionDir);\n\t\t\tif (existingTarget) {\n\t\t\t\tconsole.error(chalk.red(`Session already exists with id '${parsed.sessionId}'`));\n\t\t\t\tprocess.exit(1);\n\t\t\t}\n\t\t}\n\n\t\tconst resolved = await resolveSessionPath(parsed.fork, cwd, sessionDir);\n\n\t\tswitch (resolved.type) {\n\t\t\tcase \"path\":\n\t\t\tcase \"local\":\n\t\t\tcase \"global\":\n\t\t\t\treturn forkSessionOrExit(resolved.path, cwd, sessionDir, parsed.sessionId);\n\n\t\t\tcase \"not_found\":\n\t\t\t\tif (deferSelection) return deferSelection();\n\t\t\t\tconsole.error(chalk.red(`No session found matching '${resolved.arg}'`));\n\t\t\t\tprocess.exit(1);\n\t\t}\n\t}\n\n\tif (parsed.session) {\n\t\tconst resolved = await resolveSessionPath(parsed.session, cwd, sessionDir);\n\n\t\tswitch (resolved.type) {\n\t\t\tcase \"path\":\n\t\t\tcase \"local\":\n\t\t\t\treturn openSessionOrExit(resolved.path, sessionDir);\n\n\t\t\tcase \"global\": {\n\t\t\t\tconsole.log(chalk.yellow(`Session found in different project: ${resolved.cwd}`));\n\t\t\t\tconst shouldFork = await promptConfirm(\"Fork this session into current directory?\", startupView);\n\t\t\t\tif (!shouldFork) {\n\t\t\t\t\tconsole.log(chalk.dim(\"Aborted.\"));\n\t\t\t\t\tprocess.exit(0);\n\t\t\t\t}\n\t\t\t\treturn forkSessionOrExit(resolved.path, cwd, sessionDir);\n\t\t\t}\n\n\t\t\tcase \"not_found\":\n\t\t\t\tif (deferSelection) return deferSelection();\n\t\t\t\tconsole.error(chalk.red(`No session found matching '${resolved.arg}'`));\n\t\t\t\tprocess.exit(1);\n\t\t}\n\t}\n\n\tif (parsed.resume) {\n\t\tif (deferSelection) return deferSelection();\n\t\ttry {\n\t\t\tconst currentSessionsLoader = (onProgress?: Parameters<typeof SessionManager.list>[2]) =>\n\t\t\t\tSessionManager.list(cwd, sessionDir, onProgress);\n\t\t\tconst allSessionsLoader = (onProgress?: Parameters<typeof SessionManager.listAll>[1]) =>\n\t\t\t\tSessionManager.listAll(sessionDir, onProgress);\n\t\t\tconst selectedPath = startupView\n\t\t\t\t? await startupView.selectSession(currentSessionsLoader, allSessionsLoader)\n\t\t\t\t: await selectSession(currentSessionsLoader, allSessionsLoader, settingsManager);\n\t\t\tif (!selectedPath) {\n\t\t\t\tconsole.log(chalk.dim(\"No session selected\"));\n\t\t\t\tprocess.exit(0);\n\t\t\t}\n\t\t\treturn SessionManager.open(selectedPath, sessionDir);\n\t\t} finally {\n\t\t\tstopThemeWatcher();\n\t\t}\n\t}\n\n\tif (parsed.continue) {\n\t\treturn SessionManager.continueRecent(cwd, sessionDir);\n\t}\n\n\tif (parsed.sessionId) {\n\t\tconst existingSession = await findLocalSessionByExactId(parsed.sessionId, cwd, sessionDir);\n\t\tif (existingSession) {\n\t\t\treturn SessionManager.open(existingSession.path, sessionDir);\n\t\t}\n\t\tconsole.error(\n\t\t\tchalk.yellow(\n\t\t\t\t`Warning: No project session found with id '${parsed.sessionId}'; creating a new session with that id.`,\n\t\t\t),\n\t\t);\n\t}\n\n\treturn SessionManager.create(cwd, sessionDir, { id: parsed.sessionId });\n}\n\nfunction buildSessionOptions(\n\tparsed: Args,\n\tscopedModels: ScopedModel[],\n\thasExistingSession: boolean,\n\tmodelRuntime: ModelRuntime,\n\tsettingsManager: SettingsManager,\n): {\n\toptions: CreateAgentSessionOptions;\n\tcliThinkingFromModel: boolean;\n\tdiagnostics: AgentSessionRuntimeDiagnostic[];\n} {\n\tconst options: CreateAgentSessionOptions = {};\n\tconst diagnostics: AgentSessionRuntimeDiagnostic[] = [];\n\tlet cliThinkingFromModel = false;\n\n\t// Model from CLI\n\t// - supports --provider <name> --model <pattern>\n\t// - supports --model <provider>/<pattern>\n\tif (parsed.model) {\n\t\tconst resolved = resolveCliModel({\n\t\t\tcliProvider: parsed.provider,\n\t\t\tcliModel: parsed.model,\n\t\t\tcliThinking: parsed.thinking,\n\t\t\tmodelRuntime,\n\t\t});\n\t\tif (resolved.warning) {\n\t\t\tdiagnostics.push({ type: \"warning\", message: resolved.warning });\n\t\t}\n\t\tif (resolved.error) {\n\t\t\tdiagnostics.push({ type: \"error\", message: resolved.error });\n\t\t}\n\t\tif (resolved.model) {\n\t\t\toptions.model = resolved.model;\n\t\t\t// Allow \"--model <pattern>:<thinking>\" as a shorthand.\n\t\t\t// Explicit --thinking still takes precedence (applied later).\n\t\t\tif (!parsed.thinking && resolved.thinkingLevel) {\n\t\t\t\toptions.thinkingLevel = resolved.thinkingLevel;\n\t\t\t\tcliThinkingFromModel = true;\n\t\t\t}\n\t\t}\n\t}\n\n\tif (!options.model && scopedModels.length > 0 && !hasExistingSession) {\n\t\t// Check if saved default is in scoped models - use it if so, otherwise first scoped model\n\t\tconst savedProvider = settingsManager.getDefaultProvider();\n\t\tconst savedModelId = settingsManager.getDefaultModel();\n\t\tconst savedModel = savedProvider && savedModelId ? modelRuntime.getModel(savedProvider, savedModelId) : undefined;\n\t\tconst savedInScope = savedModel ? scopedModels.find((sm) => modelsAreEqual(sm.model, savedModel)) : undefined;\n\n\t\tif (savedInScope) {\n\t\t\toptions.model = savedInScope.model;\n\t\t\t// Use thinking level from scoped model config if explicitly set\n\t\t\tif (!parsed.thinking && savedInScope.thinkingLevel) {\n\t\t\t\toptions.thinkingLevel = savedInScope.thinkingLevel;\n\t\t\t}\n\t\t} else {\n\t\t\toptions.model = scopedModels[0].model;\n\t\t\t// Use thinking level from first scoped model if explicitly set\n\t\t\tif (!parsed.thinking && scopedModels[0].thinkingLevel) {\n\t\t\t\toptions.thinkingLevel = scopedModels[0].thinkingLevel;\n\t\t\t}\n\t\t}\n\t}\n\n\t// Thinking level from CLI (takes precedence over scoped model thinking levels set above)\n\tif (parsed.thinking) {\n\t\toptions.thinkingLevel = parsed.thinking;\n\t}\n\n\t// Scoped models for Ctrl+P cycling\n\t// Keep thinking level undefined when not explicitly set in the model pattern.\n\t// Undefined means \"inherit current session thinking level\" during cycling.\n\tif (scopedModels.length > 0) {\n\t\toptions.scopedModels = scopedModels.map((sm) => ({\n\t\t\tmodel: sm.model,\n\t\t\tthinkingLevel: sm.thinkingLevel,\n\t\t}));\n\t}\n\n\t// API key from CLI - set as a non-persistent runtime override\n\t// (handled by caller before createAgentSession)\n\n\t// Tools\n\tif (parsed.noTools) {\n\t\toptions.noTools = \"all\";\n\t} else if (parsed.noBuiltinTools) {\n\t\toptions.noTools = \"builtin\";\n\t}\n\tif (parsed.tools) {\n\t\toptions.tools = [...parsed.tools];\n\t}\n\tif (parsed.excludeTools) {\n\t\toptions.excludeTools = [...parsed.excludeTools];\n\t}\n\n\treturn { options, cliThinkingFromModel, diagnostics };\n}\n\nfunction resolveCliPaths(cwd: string, paths: string[] | undefined): string[] | undefined {\n\treturn paths?.map((value) => (isLocalPath(value) ? resolvePath(value, cwd) : value));\n}\n\nfunction createStartupViewTrustContext(cwd: string, startupView: InteractiveView): ProjectTrustContext {\n\treturn {\n\t\tcwd,\n\t\tmode: \"tui\",\n\t\thasUI: true,\n\t\tui: {\n\t\t\tselect: (title, options) =>\n\t\t\t\tstartupView.select(\n\t\t\t\t\ttitle,\n\t\t\t\t\toptions.map((option) => ({ label: option, value: option })),\n\t\t\t\t),\n\t\t\tconfirm: (title, message) => startupView.confirm(title, message),\n\t\t\tinput: (title, placeholder) => startupView.input(title, placeholder),\n\t\t\tnotify: () => {},\n\t\t},\n\t};\n}\n\nasync function promptForMissingSessionCwd(\n\tissue: SessionCwdIssue,\n\tsettingsManager: SettingsManager,\n\tstartupView?: InteractiveView,\n): Promise<string | undefined> {\n\tconst options = [\n\t\t{ label: \"Continue\", value: issue.fallbackCwd },\n\t\t{ label: \"Cancel\", value: undefined },\n\t];\n\treturn startupView\n\t\t? startupView.select(formatMissingSessionCwdPrompt(issue), options)\n\t\t: showStartupSelector(settingsManager, formatMissingSessionCwdPrompt(issue), options);\n}\n\nexport interface MainOptions {\n\textensionFactories?: InlineExtension[];\n\tstartupView?: InteractiveView;\n}\n\nexport async function main(args: string[], options?: MainOptions) {\n\tresetTimings();\n\tconst offlineMode = args.includes(\"--offline\") || isTruthyEnvFlag(process.env.PI_OFFLINE);\n\tif (offlineMode) {\n\t\tprocess.env.PI_OFFLINE = \"1\";\n\t}\n\n\tconst cwd = process.cwd();\n\tconst agentDir = getAgentDir();\n\tconst bootstrapSettingsManager = SettingsManager.create(cwd, agentDir, { projectTrusted: false });\n\tapplyHttpProxySettings(bootstrapSettingsManager.getGlobalSettings().httpProxy);\n\tconfigureHttpDispatcher();\n\n\tif ([\"setup\", \"features\", \"uninstall\", \"browser\"].includes(args[0])) {\n\t\tconst { handleInstallCli } = await import(\"./cli/install-cli.ts\");\n\t\tif (await handleInstallCli(args)) return;\n\t}\n\n\tif (args[0] === \"update\") {\n\t\tconst { handleUpdateCli } = await import(\"./cli/update-cli.ts\");\n\t\tif (await handleUpdateCli(args)) return;\n\t}\n\n\tif ([\"install\", \"remove\", \"uninstall\", \"list\", \"config\"].includes(args[0])) {\n\t\tconst { handleConfigCommand, handlePackageCommand } = await import(\"./package-manager-cli.ts\");\n\t\tif (await handlePackageCommand(args, { extensionFactories: options?.extensionFactories })) {\n\t\t\tprocess.exit(process.exitCode ?? 0);\n\t\t\treturn;\n\t\t}\n\t\tif (await handleConfigCommand(args, { extensionFactories: options?.extensionFactories })) return;\n\t}\n\n\tif (args[0] === \"gateway\") {\n\t\tconst { handleGatewayCommand } = await import(\"./gateway/command.ts\");\n\t\tif (await handleGatewayCommand(args)) return;\n\t}\n\n\tconst parsed = parseArgs(args);\n\tif (parsed.diagnostics.length > 0) {\n\t\tfor (const d of parsed.diagnostics) {\n\t\t\tconst color = d.type === \"error\" ? chalk.red : chalk.yellow;\n\t\t\tconsole.error(color(`${d.type === \"error\" ? \"Error\" : \"Warning\"}: ${d.message}`));\n\t\t}\n\t\tif (parsed.diagnostics.some((d) => d.type === \"error\")) {\n\t\t\tprocess.exit(1);\n\t\t}\n\t}\n\ttime(\"parseArgs\");\n\n\tif (parsed.version) {\n\t\tconsole.log(VERSION);\n\t\tprocess.exit(0);\n\t}\n\n\tif (parsed.export) {\n\t\tlet result: string;\n\t\ttry {\n\t\t\tconst { exportFromFile } = await import(\"./core/export-html/index.ts\");\n\t\t\tconst outputPath = parsed.messages.length > 0 ? parsed.messages[0] : undefined;\n\t\t\tresult = await exportFromFile(parsed.export, outputPath);\n\t\t} catch (error: unknown) {\n\t\t\tconst message = error instanceof Error ? error.message : \"Failed to export session\";\n\t\t\tconsole.error(chalk.red(`Error: ${message}`));\n\t\t\tprocess.exit(1);\n\t\t}\n\t\tconsole.log(`Exported to: ${result}`);\n\t\tprocess.exit(0);\n\t}\n\n\tlet appMode = resolveAppMode(parsed, process.stdin.isTTY, process.stdout.isTTY);\n\tconst interactiveModeImport =\n\t\tappMode === \"interactive\" ? import(\"./modes/interactive/interactive-mode.ts\") : undefined;\n\tconst startupView = appMode === \"interactive\" ? options?.startupView : undefined;\n\tif (options?.startupView && !startupView) options.startupView.stop();\n\t// Parent-delegated children inherit read-only or auto before any tool call.\n\tapplyInheritedSubagentPermissions();\n\tconst shouldTakeOverStdout = appMode !== \"interactive\" && !isPlainRuntimeMetadataCommand(parsed);\n\tif (shouldTakeOverStdout) {\n\t\ttakeOverStdout();\n\t}\n\n\tif (parsed.mode === \"rpc\" && parsed.fileArgs.length > 0) {\n\t\tconsole.error(chalk.red(\"Error: @file arguments are not supported in RPC mode\"));\n\t\tprocess.exit(1);\n\t}\n\n\tvalidateForkFlags(parsed);\n\tvalidateSessionIdFlags(parsed);\n\n\t// Run migrations (pass cwd for project-local migrations)\n\tconst { migratedAuthProviders: migratedProviders, deprecationWarnings } = runMigrations(cwd);\n\ttime(\"runMigrations\");\n\n\tconst startupSettingsManager = SettingsManager.create(cwd, agentDir, { projectTrusted: false });\n\treportDiagnostics(collectSettingsDiagnostics(startupSettingsManager, \"startup session lookup\"));\n\n\t// Register the model-tier bridge before extensions load so pi-subagents can read\n\t// tier settings when building its tool description. Re-pointed to the runtime\n\t// settings manager below once services exist.\n\tregisterModelTierBridge(startupSettingsManager);\n\t// lunr: same for the simple-pi-memory character cap — extensions read it via the\n\t// bridge at load/runtime; re-pointed to the runtime settings manager below.\n\tregisterMemoryCapBridge(startupSettingsManager);\n\t// lunr: TUI customize settings (spinner, dividers, rail, prompt symbol) read by\n\t// ashxj-spinners and ashxj-tui via the bridge; re-pointed to runtime below.\n\tregisterCustomizeBridge(startupSettingsManager);\n\n\t// Experimental first-time setup: theme choice and analytics opt-in.\n\t// Runs before any runtime services are created so the chosen settings apply everywhere.\n\tif (appMode === \"interactive\" && !parsed.help && parsed.listModels === undefined && shouldRunFirstTimeSetup()) {\n\t\tstartupView?.pause();\n\t\tawait showFirstTimeSetup(startupSettingsManager);\n\t\tstartupView?.resume();\n\t\ttime(\"firstTimeSetup\");\n\t}\n\n\t// Decide the final runtime cwd before creating cwd-bound runtime services.\n\t// --session and --resume may select a session from another project, so project-local\n\t// settings, resources, provider registrations, and models must be resolved only after\n\t// the target session cwd is known. Initial lookup uses global settings or saved\n\t// approval; newly approved settings are applied after the runtime trust decision.\n\tconst trustStore = new ProjectTrustStore(agentDir);\n\tconst envSessionDir = process.env[ENV_SESSION_DIR];\n\tconst explicitSessionDir =\n\t\t(parsed.sessionDir ? normalizePath(parsed.sessionDir) : undefined) ??\n\t\t(envSessionDir ? expandTildePath(envSessionDir) : undefined);\n\t// Saved approval and explicit trust allow custom session lookup before runtime hydration.\n\tconst lookupTrusted =\n\t\tparsed.projectTrustOverride ??\n\t\ttrustStore.get(cwd) ??\n\t\tstartupSettingsManager.getDefaultProjectTrust() === \"always\";\n\tconst lookupSettings = lookupTrusted\n\t\t? SettingsManager.create(cwd, agentDir, { projectTrusted: true })\n\t\t: startupSettingsManager;\n\tlet sessionDir = explicitSessionDir ?? lookupSettings.getSessionDir();\n\tlet startupSelectionDeferred = false;\n\t// A missing ID or the picker may need storage that the pending trust decision enables.\n\tconst deferSelection =\n\t\t!lookupTrusted && !explicitSessionDir && hasTrustRequiringProjectResources(cwd)\n\t\t\t? () => {\n\t\t\t\t\tstartupSelectionDeferred = true;\n\t\t\t\t\treturn SessionManager.create(cwd, sessionDir);\n\t\t\t\t}\n\t\t\t: undefined;\n\tlet sessionManager = await createSessionManager(\n\t\tparsed,\n\t\tcwd,\n\t\tsessionDir,\n\t\tstartupSettingsManager,\n\t\tstartupView,\n\t\tdeferSelection,\n\t);\n\tconst resolveStartupSessionCwd = async (manager: SessionManager): Promise<SessionManager> => {\n\t\tconst missingSessionCwdIssue = getMissingSessionCwdIssue(manager, cwd);\n\t\tif (!missingSessionCwdIssue) return manager;\n\t\tif (appMode === \"interactive\") {\n\t\t\tconst selectedCwd = await promptForMissingSessionCwd(\n\t\t\t\tmissingSessionCwdIssue,\n\t\t\t\tstartupSettingsManager,\n\t\t\t\tstartupView,\n\t\t\t);\n\t\t\tif (!selectedCwd) {\n\t\t\t\tprocess.exit(0);\n\t\t\t}\n\t\t\tmanager.dispose();\n\t\t\treturn SessionManager.open(missingSessionCwdIssue.sessionFile!, sessionDir, selectedCwd);\n\t\t} else {\n\t\t\tconsole.error(chalk.red(new MissingSessionCwdError(missingSessionCwdIssue).message));\n\t\t\tprocess.exit(1);\n\t\t}\n\t};\n\tsessionManager = await resolveStartupSessionCwd(sessionManager);\n\ttime(\"createSessionManager\");\n\n\tconst runSessionRetention = async () => {\n\t\ttry {\n\t\t\tconst activeSessionFile = runtime.session.sessionManager.getSessionFile();\n\t\t\tconst deleted: string[] = [];\n\t\t\tfor (const { directory, days } of getSessionRetentionTargets(\n\t\t\t\tstartupSettingsManager,\n\t\t\t\truntime.services.settingsManager,\n\t\t\t\texplicitSessionDir,\n\t\t\t)) {\n\t\t\t\tconst result = await pruneOldSessions(directory, days, { excludeFile: activeSessionFile });\n\t\t\t\tdeleted.push(...result.deleted);\n\t\t\t}\n\t\t\tif (deleted.length > 0) {\n\t\t\t\tappendDebugLog(\n\t\t\t\t\t`session-retention: deleted ${deleted.length} file(s):\\n${deleted.map((path) => `  ${path}`).join(\"\\n\")}`,\n\t\t\t\t);\n\t\t\t}\n\t\t} catch (error) {\n\t\t\tappendDebugLog(`session-retention: prune failed: ${error instanceof Error ? error.message : String(error)}`);\n\t\t}\n\t};\n\n\tconst sessionCwd = sessionManager.getCwd();\n\tconst autoTrustOnReloadCwd =\n\t\tparsed.projectTrustOverride === undefined && !hasTrustRequiringProjectResources(sessionCwd)\n\t\t\t? sessionCwd\n\t\t\t: undefined;\n\tconst trustPromptMode: AppMode = parsed.help || parsed.listModels !== undefined ? \"print\" : appMode;\n\tconst projectTrustByCwd = new Map<string, boolean>();\n\n\tconst resolvedExtensionPaths = resolveCliPaths(cwd, parsed.extensions);\n\tconst resolvedSkillPaths = resolveCliPaths(cwd, parsed.skills);\n\tconst resolvedPromptTemplatePaths = resolveCliPaths(cwd, parsed.promptTemplates);\n\tconst resolvedThemePaths = resolveCliPaths(cwd, parsed.themes);\n\tconst builtinRoster = appMode === \"interactive\" ? [...lightBuiltinExtensions] : await loadAllBuiltinExtensions();\n\tconst rememberAttachedFactories = (factories: InlineExtension[]) => {\n\t\tconst seen = new Set(\n\t\t\tbuiltinRoster.map((entry) => (typeof entry === \"function\" ? undefined : entry.name)).filter(Boolean),\n\t\t);\n\t\tfor (const factory of factories) {\n\t\t\tconst name = typeof factory === \"function\" ? undefined : factory.name;\n\t\t\tif (name && seen.has(name)) continue;\n\t\t\tif (name) seen.add(name);\n\t\t\tbuiltinRoster.push(factory);\n\t\t}\n\t};\n\tlet startupDirectoryResolved = false;\n\tconst createRuntime: CreateAgentSessionRuntimeFactory = async ({\n\t\tcwd,\n\t\tagentDir,\n\t\tsessionManager,\n\t\tsessionStartEvent,\n\t\tprojectTrustContext,\n\t}) => {\n\t\tconst isInitialRuntime = sessionStartEvent === undefined;\n\t\tconst projectTrustDiagnostics: AgentSessionRuntimeDiagnostic[] = [];\n\t\tconst cachedProjectTrust = projectTrustByCwd.get(cwd);\n\t\tconst hasTrustRequiringResources = hasTrustRequiringProjectResources(cwd);\n\t\tconst shouldResolveProjectTrust =\n\t\t\tparsed.projectTrustOverride === undefined && cachedProjectTrust === undefined && hasTrustRequiringResources;\n\t\tconst projectTrusted = shouldResolveProjectTrust\n\t\t\t? false\n\t\t\t: (cachedProjectTrust ??\n\t\t\t\tparsed.projectTrustOverride ??\n\t\t\t\t(!hasTrustRequiringResources || trustStore.get(cwd) === true));\n\t\tconst runtimeSettingsManager = SettingsManager.create(cwd, agentDir, { projectTrusted });\n\t\tconst skipMissingPackageInstall = isInitialRuntime && appMode === \"interactive\";\n\t\tconst services = await createAgentSessionServices({\n\t\t\tcwd,\n\t\t\tagentDir,\n\t\t\tsettingsManager: runtimeSettingsManager,\n\t\t\textensionFlagValues: parsed.unknownFlags,\n\t\t\tresourceLoaderReloadOptions: shouldResolveProjectTrust\n\t\t\t\t? {\n\t\t\t\t\t\tskipMissingPackageInstall,\n\t\t\t\t\t\tresolveProjectTrust: async ({ extensionsResult }) => {\n\t\t\t\t\t\t\tconst trusted = await resolveProjectTrusted({\n\t\t\t\t\t\t\t\tcwd,\n\t\t\t\t\t\t\t\ttrustStore,\n\t\t\t\t\t\t\t\ttrustOverride: parsed.projectTrustOverride,\n\t\t\t\t\t\t\t\tdefaultProjectTrust: startupSettingsManager.getDefaultProjectTrust(),\n\t\t\t\t\t\t\t\textensionsResult,\n\t\t\t\t\t\t\t\tprojectTrustContext:\n\t\t\t\t\t\t\t\t\tprojectTrustContext ??\n\t\t\t\t\t\t\t\t\t(isInitialRuntime && startupView\n\t\t\t\t\t\t\t\t\t\t? createStartupViewTrustContext(cwd, startupView)\n\t\t\t\t\t\t\t\t\t\t: createProjectTrustContext({\n\t\t\t\t\t\t\t\t\t\t\t\tcwd,\n\t\t\t\t\t\t\t\t\t\t\t\tmode: isInitialRuntime ? trustPromptMode : appMode,\n\t\t\t\t\t\t\t\t\t\t\t\tsettingsManager: startupSettingsManager,\n\t\t\t\t\t\t\t\t\t\t\t\thasUI: isInitialRuntime && trustPromptMode === \"interactive\",\n\t\t\t\t\t\t\t\t\t\t\t})),\n\t\t\t\t\t\t\t\tonExtensionError: (message) => projectTrustDiagnostics.push({ type: \"warning\", message }),\n\t\t\t\t\t\t\t});\n\t\t\t\t\t\t\tprojectTrustByCwd.set(cwd, trusted);\n\t\t\t\t\t\t\treturn trusted;\n\t\t\t\t\t\t},\n\t\t\t\t\t}\n\t\t\t\t: skipMissingPackageInstall\n\t\t\t\t\t? { skipMissingPackageInstall }\n\t\t\t\t\t: undefined,\n\t\t\tresourceLoaderOptions: {\n\t\t\t\tadditionalExtensionPaths: resolvedExtensionPaths,\n\t\t\t\tadditionalSkillPaths: resolvedSkillPaths,\n\t\t\t\tadditionalPromptTemplatePaths: resolvedPromptTemplatePaths,\n\t\t\t\tadditionalThemePaths: resolvedThemePaths,\n\t\t\t\tnoExtensions: parsed.noExtensions,\n\t\t\t\tnoSkills: parsed.noSkills,\n\t\t\t\tnoPromptTemplates: parsed.noPromptTemplates,\n\t\t\t\tnoThemes: parsed.noThemes,\n\t\t\t\tnoContextFiles: parsed.noContextFiles,\n\t\t\t\tsystemPrompt: parsed.systemPrompt,\n\t\t\t\tappendSystemPrompt: parsed.appendSystemPrompt,\n\t\t\t\textensionFactories: [...builtinRoster, ...(options?.extensionFactories ?? [])],\n\t\t\t},\n\t\t});\n\t\tconst { settingsManager, modelRuntime, resourceLoader } = services;\n\t\tif (isInitialRuntime && !parsed.noSession && !parsed.help && parsed.listModels === undefined) {\n\t\t\tconst maySelectAgain = !startupDirectoryResolved;\n\t\t\tstartupDirectoryResolved = true;\n\t\t\tconst approvedSessionDir = explicitSessionDir ?? settingsManager.getSessionDir();\n\t\t\tif (startupSelectionDeferred || approvedSessionDir !== sessionDir) {\n\t\t\t\tconst selectCurrentProject =\n\t\t\t\t\tmaySelectAgain &&\n\t\t\t\t\t(startupSelectionDeferred || (!parsed.session && !parsed.resume && !parsed.fork)) &&\n\t\t\t\t\tcwd === sessionCwd;\n\t\t\t\tconst provisionalManager = sessionManager;\n\t\t\t\tsessionManager = await selectApprovedStartupSession(\n\t\t\t\t\tsessionManager,\n\t\t\t\t\tapprovedSessionDir,\n\t\t\t\t\tselectCurrentProject\n\t\t\t\t\t\t? () => createSessionManager(parsed, cwd, approvedSessionDir, settingsManager, startupView)\n\t\t\t\t\t\t: undefined,\n\t\t\t\t);\n\t\t\t\tsessionDir = approvedSessionDir;\n\t\t\t\tstartupSelectionDeferred = false;\n\t\t\t\tsessionManager = await resolveStartupSessionCwd(sessionManager);\n\t\t\t\tif (sessionManager.getCwd() !== cwd) {\n\t\t\t\t\t// No turn has started. Shut down bootstrap hooks before resolving the selected cwd once.\n\t\t\t\t\tconst extensions = resourceLoader.getExtensions();\n\t\t\t\t\tconst runner = new ExtensionRunner(\n\t\t\t\t\t\textensions.extensions,\n\t\t\t\t\t\textensions.runtime,\n\t\t\t\t\t\tcwd,\n\t\t\t\t\t\tprovisionalManager,\n\t\t\t\t\t\tnew ModelRegistry(modelRuntime),\n\t\t\t\t\t);\n\t\t\t\t\ttry {\n\t\t\t\t\t\tawait emitSessionShutdownEvent(runner, { type: \"session_shutdown\", reason: \"resume\" });\n\t\t\t\t\t} finally {\n\t\t\t\t\t\textensions.runtime.invalidate();\n\t\t\t\t\t}\n\t\t\t\t\treturn createRuntime({ cwd: sessionManager.getCwd(), agentDir, sessionManager, projectTrustContext });\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\n\t\tif (isInitialRuntime && parsed.name !== undefined) {\n\t\t\tconst name = parsed.name.trim();\n\t\t\tif (!name) {\n\t\t\t\tconsole.error(chalk.red(\"Error: --name requires a non-empty value\"));\n\t\t\t\tprocess.exit(1);\n\t\t\t}\n\t\t\tsessionManager.appendSessionInfo(name);\n\t\t}\n\n\t\tif (\n\t\t\tparsed.model &&\n\t\t\t!resolveCliModel({\n\t\t\t\tcliProvider: parsed.provider,\n\t\t\t\tcliModel: parsed.model,\n\t\t\t\tcliThinking: parsed.thinking,\n\t\t\t\tmodelRuntime,\n\t\t\t}).model\n\t\t) {\n\t\t\tawait modelRuntime.refreshIfStale();\n\t\t}\n\t\tconst diagnostics: AgentSessionRuntimeDiagnostic[] = [\n\t\t\t...projectTrustDiagnostics,\n\t\t\t...services.diagnostics,\n\t\t\t...collectSettingsDiagnostics(settingsManager, \"runtime creation\"),\n\t\t\t...resourceLoader.getExtensions().errors.map(({ path, error }) => ({\n\t\t\t\ttype: \"error\" as const,\n\t\t\t\tmessage: `Failed to load extension \"${path}\": ${error}`,\n\t\t\t})),\n\t\t];\n\n\t\tconst modelPatterns = parsed.models ?? settingsManager.getEnabledModels();\n\t\tconst scopedModels =\n\t\t\tmodelPatterns && modelPatterns.length > 0 ? await resolveModelScope(modelPatterns, modelRuntime) : [];\n\t\tconst {\n\t\t\toptions: sessionOptions,\n\t\t\tcliThinkingFromModel,\n\t\t\tdiagnostics: sessionOptionDiagnostics,\n\t\t} = buildSessionOptions(\n\t\t\tparsed,\n\t\t\tscopedModels,\n\t\t\tsessionManager.buildSessionContext().messages.length > 0,\n\t\t\tmodelRuntime,\n\t\t\tsettingsManager,\n\t\t);\n\t\tdiagnostics.push(...sessionOptionDiagnostics);\n\n\t\tif (parsed.apiKey) {\n\t\t\tif (!sessionOptions.model) {\n\t\t\t\tdiagnostics.push({\n\t\t\t\t\ttype: \"error\",\n\t\t\t\t\tmessage: \"--api-key requires a model to be specified via --model, --provider/--model, or --models\",\n\t\t\t\t});\n\t\t\t} else {\n\t\t\t\t// Cache-only: do not wait on GitHub / provider /v1/models before first paint.\n\t\t\t\tawait modelRuntime.setRuntimeApiKey(sessionOptions.model.provider, parsed.apiKey, {\n\t\t\t\t\tallowNetwork: false,\n\t\t\t\t});\n\t\t\t}\n\t\t}\n\n\t\tconst created = await createAgentSessionFromServices({\n\t\t\tservices,\n\t\t\tsessionManager,\n\t\t\tsessionStartEvent,\n\t\t\tmodel: sessionOptions.model,\n\t\t\tthinkingLevel: sessionOptions.thinkingLevel,\n\t\t\tscopedModels: sessionOptions.scopedModels,\n\t\t\ttools: sessionOptions.tools,\n\t\t\texcludeTools: sessionOptions.excludeTools,\n\t\t\tnoTools: sessionOptions.noTools,\n\t\t\tcustomTools: sessionOptions.customTools,\n\t\t});\n\t\tconst cliThinkingOverride = parsed.thinking !== undefined || cliThinkingFromModel;\n\t\tif (created.session.model && cliThinkingOverride) {\n\t\t\tcreated.session.setThinkingLevel(created.session.thinkingLevel);\n\t\t}\n\n\t\treturn {\n\t\t\t...created,\n\t\t\tservices,\n\t\t\tdiagnostics,\n\t\t};\n\t};\n\ttime(\"createRuntime\");\n\tconst runtime = await createAgentSessionRuntime(createRuntime, {\n\t\tcwd: sessionManager.getCwd(),\n\t\tagentDir,\n\t\tsessionManager,\n\t\tonRuntimeApplied: bindRuntimeBridges,\n\t});\n\tif (startupView?.isExitRequested) {\n\t\tawait runtime.dispose();\n\t\treturn;\n\t}\n\tsessionManager = runtime.session.sessionManager;\n\tmarkStartupMilestone(\"runtime_hydrated\");\n\ttime(\"createAgentSessionRuntime\");\n\tif (appMode !== \"interactive\") await runSessionRetention();\n\tconst { services, session, modelFallbackMessage } = runtime;\n\tconst { settingsManager, modelRuntime, resourceLoader } = services;\n\tapplyHttpProxySettings(settingsManager.getGlobalSettings().httpProxy);\n\tconfigureHttpDispatcher(settingsManager.getHttpIdleTimeoutMs());\n\n\tif (parsed.help) {\n\t\tconst extensionFlags = resourceLoader\n\t\t\t.getExtensions()\n\t\t\t.extensions.flatMap((extension) => Array.from(extension.flags.values()));\n\t\tprintHelp(extensionFlags);\n\t\tprocess.exit(0);\n\t}\n\n\tif (parsed.listModels !== undefined) {\n\t\tconst searchPattern = typeof parsed.listModels === \"string\" ? parsed.listModels : undefined;\n\t\tawait listModels(modelRuntime, searchPattern);\n\t\tprocess.exit(0);\n\t}\n\n\t// Read piped stdin content (if any) - skip for RPC mode which uses stdin for JSON-RPC.\n\t// Startup benchmark must stay interactive even if a leftover redirected handle has bytes.\n\tlet stdinContent: string | undefined;\n\tconst startupBenchmark = isTruthyEnvFlag(process.env.PI_STARTUP_BENCHMARK);\n\tif (appMode !== \"rpc\" && !startupBenchmark) {\n\t\tstdinContent = await readPipedStdin();\n\t\tif (stdinContent !== undefined && appMode === \"interactive\") {\n\t\t\tappMode = \"print\";\n\t\t}\n\t}\n\ttime(\"readPipedStdin\");\n\n\tconst { initialMessage, initialImages } = await prepareInitialMessage(\n\t\tparsed,\n\t\tsettingsManager.getImageAutoResize(),\n\t\tstdinContent,\n\t);\n\ttime(\"prepareInitialMessage\");\n\tinitTheme(settingsManager.getTheme(), appMode === \"interactive\");\n\ttime(\"initTheme\");\n\n\tif (appMode === \"interactive\" && !startupView && deprecationWarnings.length > 0) {\n\t\tawait showDeprecationWarnings(deprecationWarnings);\n\t}\n\n\ttime(\"resolveModelScope\");\n\tif (!(appMode === \"interactive\" && startupView)) reportDiagnostics(runtime.diagnostics);\n\tif (runtime.diagnostics.some((diagnostic) => diagnostic.type === \"error\")) {\n\t\tconst extensionHint = runtime.diagnostics.some((diagnostic) =>\n\t\t\tdiagnostic.message.includes(\"Failed to load extension\"),\n\t\t)\n\t\t\t? `\\n${EXTENSION_LOAD_FAILURE_HINT}`\n\t\t\t: \"\";\n\t\tif (startupView) {\n\t\t\tprocess.exitCode = 1;\n\t\t\tawait startupView.fail(\n\t\t\t\t`${runtime.diagnostics.map((diagnostic) => diagnostic.message).join(\"\\n\")}${extensionHint}`,\n\t\t\t);\n\t\t\treturn;\n\t\t}\n\t\tif (extensionHint) console.error(chalk.yellow(EXTENSION_LOAD_FAILURE_HINT));\n\t\tprocess.exit(1);\n\t}\n\ttime(\"createAgentSession\");\n\n\tif (appMode !== \"interactive\" && !session.model) {\n\t\tconsole.error(chalk.red(formatNoModelsAvailableMessage()));\n\t\tprocess.exit(1);\n\t}\n\n\tif (startupBenchmark && appMode !== \"interactive\") {\n\t\tconsole.error(chalk.red(\"Error: PI_STARTUP_BENCHMARK only supports interactive mode\"));\n\t\tprocess.exit(1);\n\t}\n\n\tif (appMode === \"rpc\") {\n\t\tconst { runRpcMode } = await import(\"./modes/rpc/rpc-mode.ts\");\n\t\tprintTimings();\n\t\tawait runRpcMode(runtime);\n\t} else if (appMode === \"interactive\") {\n\t\tconst [{ InteractiveMode }, { loadDeferredBuiltinExtensions }] = await Promise.all([\n\t\t\tinteractiveModeImport!,\n\t\t\timport(\"./builtin-extensions/index.ts\"),\n\t\t]);\n\t\tconst interactiveMode = new InteractiveMode(runtime, {\n\t\t\tmigratedProviders,\n\t\t\tmodelFallbackMessage,\n\t\t\tautoTrustOnReloadCwd,\n\t\t\tinitialMessage,\n\t\t\tinitialImages,\n\t\t\tinitialMessages: parsed.messages,\n\t\t\tverbose: parsed.verbose,\n\t\t\tdeprecationWarnings: startupView ? deprecationWarnings : undefined,\n\t\t\tstartupDiagnostics: startupView\n\t\t\t\t? runtime.diagnostics.filter((diagnostic) => diagnostic.type !== \"error\")\n\t\t\t\t: undefined,\n\t\t\tstartupView: startupView?.binding(),\n\t\t\tdeferredMaintenance: runSessionRetention,\n\t\t\tdeferredBuiltinFactories: parsed.noExtensions ? undefined : loadDeferredBuiltinExtensions,\n\t\t\tonDeferredBuiltinsAttached: rememberAttachedFactories,\n\t\t});\n\t\tif (startupBenchmark) {\n\t\t\tconst { prepareBenchmarkRequest } = await import(\"./startup/benchmark-request.ts\");\n\t\t\tconst request = await prepareBenchmarkRequest(session);\n\t\t\tawait interactiveMode.init();\n\t\t\ttime(\"interactiveMode.init\");\n\t\t\tawait interactiveMode.waitForStartupReady();\n\t\t\ttime(\"promptBarrier\");\n\t\t\tawait request();\n\t\t\t// Consume terminal-query replies before returning control to the shell.\n\t\t\tawait new Promise((resolve) => setTimeout(resolve, 150));\n\t\t\tinteractiveMode.stop();\n\t\t\tawait runtime.dispose();\n\t\t\tstopThemeWatcher();\n\t\t\tprintTimings();\n\t\t\tif (process.stdout.writableLength > 0) {\n\t\t\t\tawait new Promise<void>((resolve) => process.stdout.once(\"drain\", resolve));\n\t\t\t}\n\t\t\tif (process.stderr.writableLength > 0) {\n\t\t\t\tawait new Promise<void>((resolve) => process.stderr.once(\"drain\", resolve));\n\t\t\t}\n\t\t\treturn;\n\t\t}\n\n\t\tawait interactiveMode.init();\n\t\ttime(\"interactiveMode.init\");\n\t\tprintTimings();\n\t\tawait interactiveMode.run();\n\t} else {\n\t\tconst { runPrintMode } = await import(\"./modes/print-mode.ts\");\n\t\tprintTimings();\n\t\tconst exitCode = await runPrintMode(runtime, {\n\t\t\tmode: toPrintOutputMode(appMode),\n\t\t\tmessages: parsed.messages,\n\t\t\tinitialMessage,\n\t\t\tinitialImages,\n\t\t});\n\t\tstopThemeWatcher();\n\t\trestoreStdout();\n\t\tif (exitCode !== 0) {\n\t\t\tprocess.exitCode = exitCode;\n\t\t}\n\t\treturn;\n\t}\n}\n"]}

package/dist/main.js

@@ -15,13 +15,15 @@ import { listModels } from "./cli/list-models.js";
 import { createProjectTrustContext } from "./cli/project-trust.js";
 import { selectSession } from "./cli/session-picker.js";
 import { shouldRunFirstTimeSetup, showFirstTimeSetup, showStartupSelector } from "./cli/startup-ui.js";
-import { APP_NAME, appendDebugLog, ENV_SESSION_DIR, expandTildePath, getAgentDir, getSessionsDir, VERSION, } from "./config.js";
+import { APP_NAME, appendDebugLog, ENV_SESSION_DIR, expandTildePath, getAgentDir, VERSION } from "./config.js";
 import { createAgentSessionRuntime } from "./core/agent-session-runtime.js";
 import { createAgentSessionFromServices, createAgentSessionServices, } from "./core/agent-session-services.js";
 import { formatNoModelsAvailableMessage } from "./core/auth-guidance.js";
 import { registerCustomizeBridge } from "./core/customize.js";
+import { ExtensionRunner, emitSessionShutdownEvent } from "./core/extensions/runner.js";
 import { applyHttpProxySettings, configureHttpDispatcher } from "./core/http-dispatcher.js";
 import { registerMemoryCapBridge } from "./core/memory-cap.js";
+import { ModelRegistry } from "./core/model-registry.js";
 import { resolveCliModel, resolveModelScope } from "./core/model-resolver.js";
 import { registerModelTierBridge } from "./core/model-tiers.js";
 import { restoreStdout, takeOverStdout } from "./core/output-guard.js";
@@ -30,6 +32,7 @@ import { bindRuntimeBridges } from "./core/runtime-bridges.js";
 import { formatMissingSessionCwdPrompt, getMissingSessionCwdIssue, MissingSessionCwdError, } from "./core/session-cwd.js";
 import { assertValidSessionId, SessionManager } from "./core/session-manager.js";
 import { pruneOldSessions } from "./core/session-retention.js";
+import { getSessionRetentionTargets, selectApprovedStartupSession } from "./core/session-startup-settings.js";
 import { SettingsManager } from "./core/settings-manager.js";
 import { applyInheritedSubagentPermissions } from "./core/subagent-permission-inherit.js";
 import { printTimings, resetTimings, time } from "./core/timings.js";
@@ -244,7 +247,7 @@ function forkSessionOrExit(sourcePath, cwd, sessionDir, sessionId) {
         process.exit(1);
     }
 }
-async function createSessionManager(parsed, cwd, sessionDir, settingsManager, startupView) {
+async function createSessionManager(parsed, cwd, sessionDir, settingsManager, startupView, deferSelection) {
     if (parsed.noSession || parsed.help || parsed.listModels !== undefined) {
         return SessionManager.inMemory(cwd, parsed.sessionId !== undefined ? { id: parsed.sessionId } : undefined);
     }
@@ -263,6 +266,8 @@ async function createSessionManager(parsed, cwd, sessionDir, settingsManager, st
             case "global":
                 return forkSessionOrExit(resolved.path, cwd, sessionDir, parsed.sessionId);
             case "not_found":
+                if (deferSelection)
+                    return deferSelection();
                 console.error(chalk.red(`No session found matching '${resolved.arg}'`));
                 process.exit(1);
         }
@@ -283,11 +288,15 @@ async function createSessionManager(parsed, cwd, sessionDir, settingsManager, st
                 return forkSessionOrExit(resolved.path, cwd, sessionDir);
             }
             case "not_found":
+                if (deferSelection)
+                    return deferSelection();
                 console.error(chalk.red(`No session found matching '${resolved.arg}'`));
                 process.exit(1);
         }
     }
     if (parsed.resume) {
+        if (deferSelection)
+            return deferSelection();
         try {
             const currentSessionsLoader = (onProgress) => SessionManager.list(cwd, sessionDir, onProgress);
             const allSessionsLoader = (onProgress) => SessionManager.listAll(sessionDir, onProgress);
@@ -507,7 +516,7 @@ export async function main(args, options) {
     // Run migrations (pass cwd for project-local migrations)
     const { migratedAuthProviders: migratedProviders, deprecationWarnings } = runMigrations(cwd);
     time("runMigrations");
-    const startupSettingsManager = SettingsManager.create(cwd, agentDir);
+    const startupSettingsManager = SettingsManager.create(cwd, agentDir, { projectTrusted: false });
     reportDiagnostics(collectSettingsDiagnostics(startupSettingsManager, "startup session lookup"));
     // Register the model-tier bridge before extensions load so pi-subagents can read
     // tier settings when building its tool description. Re-pointed to the runtime
@@ -530,49 +539,55 @@ export async function main(args, options) {
     // Decide the final runtime cwd before creating cwd-bound runtime services.
     // --session and --resume may select a session from another project, so project-local
     // settings, resources, provider registrations, and models must be resolved only after
-    // the target session cwd is known. The startup-cwd settings manager is used only for
-    // sessionDir lookup during session selection.
+    // the target session cwd is known. Initial lookup uses global settings or saved
+    // approval; newly approved settings are applied after the runtime trust decision.
+    const trustStore = new ProjectTrustStore(agentDir);
     const envSessionDir = process.env[ENV_SESSION_DIR];
-    const sessionDir = (parsed.sessionDir ? normalizePath(parsed.sessionDir) : undefined) ??
-        (envSessionDir ? expandTildePath(envSessionDir) : undefined) ??
-        startupSettingsManager.getSessionDir();
-    let sessionManager = await createSessionManager(parsed, cwd, sessionDir, startupSettingsManager, startupView);
-    const missingSessionCwdIssue = getMissingSessionCwdIssue(sessionManager, cwd);
-    if (missingSessionCwdIssue) {
+    const explicitSessionDir = (parsed.sessionDir ? normalizePath(parsed.sessionDir) : undefined) ??
+        (envSessionDir ? expandTildePath(envSessionDir) : undefined);
+    // Saved approval and explicit trust allow custom session lookup before runtime hydration.
+    const lookupTrusted = parsed.projectTrustOverride ??
+        trustStore.get(cwd) ??
+        startupSettingsManager.getDefaultProjectTrust() === "always";
+    const lookupSettings = lookupTrusted
+        ? SettingsManager.create(cwd, agentDir, { projectTrusted: true })
+        : startupSettingsManager;
+    let sessionDir = explicitSessionDir ?? lookupSettings.getSessionDir();
+    let startupSelectionDeferred = false;
+    // A missing ID or the picker may need storage that the pending trust decision enables.
+    const deferSelection = !lookupTrusted && !explicitSessionDir && hasTrustRequiringProjectResources(cwd)
+        ? () => {
+            startupSelectionDeferred = true;
+            return SessionManager.create(cwd, sessionDir);
+        }
+        : undefined;
+    let sessionManager = await createSessionManager(parsed, cwd, sessionDir, startupSettingsManager, startupView, deferSelection);
+    const resolveStartupSessionCwd = async (manager) => {
+        const missingSessionCwdIssue = getMissingSessionCwdIssue(manager, cwd);
+        if (!missingSessionCwdIssue)
+            return manager;
         if (appMode === "interactive") {
             const selectedCwd = await promptForMissingSessionCwd(missingSessionCwdIssue, startupSettingsManager, startupView);
             if (!selectedCwd) {
                 process.exit(0);
             }
-            sessionManager.dispose();
-            sessionManager = SessionManager.open(missingSessionCwdIssue.sessionFile, sessionDir, selectedCwd);
+            manager.dispose();
+            return SessionManager.open(missingSessionCwdIssue.sessionFile, sessionDir, selectedCwd);
         }
         else {
             console.error(chalk.red(new MissingSessionCwdError(missingSessionCwdIssue).message));
             process.exit(1);
         }
-    }
-    if (parsed.name !== undefined) {
-        const name = parsed.name.trim();
-        if (!name) {
-            console.error(chalk.red("Error: --name requires a non-empty value"));
-            process.exit(1);
-        }
-        sessionManager.appendSessionInfo(name);
-    }
+    };
+    sessionManager = await resolveStartupSessionCwd(sessionManager);
     time("createSessionManager");
     const runSessionRetention = async () => {
         try {
-            const retentionDays = startupSettingsManager.getSessionRetentionDays();
-            if (retentionDays <= 0)
-                return;
-            const activeSessionFile = sessionManager.getSessionFile();
-            const { deleted } = await pruneOldSessions(getSessionsDir(), retentionDays, {
-                excludeFile: activeSessionFile,
-            });
-            if (sessionDir) {
-                const extra = await pruneOldSessions(sessionDir, retentionDays, { excludeFile: activeSessionFile });
-                deleted.push(...extra.deleted);
+            const activeSessionFile = runtime.session.sessionManager.getSessionFile();
+            const deleted = [];
+            for (const { directory, days } of getSessionRetentionTargets(startupSettingsManager, runtime.services.settingsManager, explicitSessionDir)) {
+                const result = await pruneOldSessions(directory, days, { excludeFile: activeSessionFile });
+                deleted.push(...result.deleted);
             }
             if (deleted.length > 0) {
                 appendDebugLog(`session-retention: deleted ${deleted.length} file(s):\n${deleted.map((path) => `  ${path}`).join("\n")}`);
@@ -582,7 +597,6 @@ export async function main(args, options) {
             appendDebugLog(`session-retention: prune failed: ${error instanceof Error ? error.message : String(error)}`);
         }
     };
-    const trustStore = new ProjectTrustStore(agentDir);
     const sessionCwd = sessionManager.getCwd();
     const autoTrustOnReloadCwd = parsed.projectTrustOverride === undefined && !hasTrustRequiringProjectResources(sessionCwd)
         ? sessionCwd
@@ -605,6 +619,7 @@ export async function main(args, options) {
             builtinRoster.push(factory);
         }
     };
+    let startupDirectoryResolved = false;
     const createRuntime = async ({ cwd, agentDir, sessionManager, sessionStartEvent, projectTrustContext, }) => {
         const isInitialRuntime = sessionStartEvent === undefined;
         const projectTrustDiagnostics = [];
@@ -667,6 +682,43 @@ export async function main(args, options) {
             },
         });
         const { settingsManager, modelRuntime, resourceLoader } = services;
+        if (isInitialRuntime && !parsed.noSession && !parsed.help && parsed.listModels === undefined) {
+            const maySelectAgain = !startupDirectoryResolved;
+            startupDirectoryResolved = true;
+            const approvedSessionDir = explicitSessionDir ?? settingsManager.getSessionDir();
+            if (startupSelectionDeferred || approvedSessionDir !== sessionDir) {
+                const selectCurrentProject = maySelectAgain &&
+                    (startupSelectionDeferred || (!parsed.session && !parsed.resume && !parsed.fork)) &&
+                    cwd === sessionCwd;
+                const provisionalManager = sessionManager;
+                sessionManager = await selectApprovedStartupSession(sessionManager, approvedSessionDir, selectCurrentProject
+                    ? () => createSessionManager(parsed, cwd, approvedSessionDir, settingsManager, startupView)
+                    : undefined);
+                sessionDir = approvedSessionDir;
+                startupSelectionDeferred = false;
+                sessionManager = await resolveStartupSessionCwd(sessionManager);
+                if (sessionManager.getCwd() !== cwd) {
+                    // No turn has started. Shut down bootstrap hooks before resolving the selected cwd once.
+                    const extensions = resourceLoader.getExtensions();
+                    const runner = new ExtensionRunner(extensions.extensions, extensions.runtime, cwd, provisionalManager, new ModelRegistry(modelRuntime));
+                    try {
+                        await emitSessionShutdownEvent(runner, { type: "session_shutdown", reason: "resume" });
+                    }
+                    finally {
+                        extensions.runtime.invalidate();
+                    }
+                    return createRuntime({ cwd: sessionManager.getCwd(), agentDir, sessionManager, projectTrustContext });
+                }
+            }
+        }
+        if (isInitialRuntime && parsed.name !== undefined) {
+            const name = parsed.name.trim();
+            if (!name) {
+                console.error(chalk.red("Error: --name requires a non-empty value"));
+                process.exit(1);
+            }
+            sessionManager.appendSessionInfo(name);
+        }
         if (parsed.model &&
             !resolveCliModel({
                 cliProvider: parsed.provider,
@@ -736,6 +788,7 @@ export async function main(args, options) {
         await runtime.dispose();
         return;
     }
+    sessionManager = runtime.session.sessionManager;
     markStartupMilestone("runtime_hydrated");
     time("createAgentSessionRuntime");
     if (appMode !== "interactive")