@base44-preview/cli 0.1.15-pr.630.5b0c119 → 0.1.15-pr.630.5c9bc15

package/dist/cli/index.js

@@ -268401,6 +268401,10 @@ async function captureRequestBody(request, options) {
   if (request.body == null) {
     return;
   }
+  if (options.context.__redactBody) {
+    options.context.__requestBody = "[redacted]";
+    return;
+  }
   try {
     const cloned = request.clone();
     const text = await cloned.text();
@@ -270155,7 +270159,7 @@ function eventLine(event, elapsedMs, options = {}) {
       return null;
     case "waiting": {
       const what = event.label || toolAlias(event.name);
-      return source_default.yellow(`⏸ ${what} — needs your input (answer in the editor)`);
+      return source_default.yellow(`⏸ ${what} — needs your input (${options.waitingHint ?? "answer in the editor"})`);
     }
     case "tool_end": {
       const alias = toolAlias(event.name);
@@ -270343,6 +270347,10 @@ var CreatedAppSchema = object({
   name: string2().nullish(),
   imported_repo_url: string2().nullish()
 });
+var WixCreatedAppSchema = object({
+  app_id: string2().min(1),
+  client_creation_id: string2().min(1)
+});
 var AppStateSchema = object({
   id: string2(),
   app_type: string2().nullish(),
@@ -270382,7 +270390,8 @@ var ConversationMessageSchema = object({
     name: string2(),
     arguments_string: string2().nullish(),
     status: string2().nullish(),
-    results: unknown().nullish()
+    results: unknown().nullish(),
+    waiting_on: object({ kind: string2().nullish() }).nullish()
   })).nullish()
 });
 var FullConversationSchema = object({
@@ -270399,6 +270408,24 @@ function parseOrThrow(schema, payload, what) {
 function branchScope(branchId) {
   return branchId ? { branch_id: branchId } : {};
 }
+async function createWixLaunchedApp(options) {
+  let response;
+  try {
+    response = await base44Client.post("api/wix/create-app", {
+      timeout: false,
+      context: { __redactBody: true },
+      json: {
+        prompt: options.prompt,
+        signed_instance: options.signedInstance,
+        ...options.wixClientId ? { wix_client_id: options.wixClientId } : {}
+      }
+    });
+  } catch (error) {
+    throw await ApiError.fromHttpError(error, "creating app via Wix launch");
+  }
+  const created = parseOrThrow(WixCreatedAppSchema, await response.json(), "app");
+  return { id: created.app_id, client_creation_id: created.client_creation_id };
+}
 async function createApp(options) {
   let response;
   try {
@@ -270456,6 +270483,25 @@ async function getAppState(appId) {
   }
   return parseOrThrow(AppStateSchema, await response.json(), "app status");
 }
+async function answerToolCall(options, branchId) {
+  let response;
+  try {
+    response = await getAppClient().post("chat/submit-tool-call-input", {
+      timeout: false,
+      context: { __redactBody: true },
+      searchParams: branchScope(branchId),
+      json: {
+        tool_call_id: options.toolCallId,
+        action: options.action,
+        extra_user_input: options.input ?? {},
+        ...options.messageId ? { message_id: options.messageId } : {}
+      }
+    });
+  } catch (error) {
+    throw await ApiError.fromHttpError(error, "answering the agent");
+  }
+  return parseOrThrow(ChatTurnSchema, await response.json(), "chat turn");
+}
 async function sendTurn(content, branchId) {
   let response;
   try {
@@ -270528,12 +270574,32 @@ function inventAppName(prompt) {
 function repoBasename(repoUrl) {
   return repoUrl.replace(/\/+$/, "").replace(/\.git$/, "").split("/").pop() ?? "app";
 }
+function parseWixLaunchUrl(raw) {
+  let url;
+  try {
+    url = new URL(raw.trim());
+  } catch {
+    throw new InvalidInputError("--wix-launch expects the full launch URL.");
+  }
+  const fragment = new URLSearchParams(url.hash.replace(/^#/, ""));
+  const signedInstance = fragment.get("wix-signed-instance")?.trim();
+  if (!signedInstance) {
+    throw new InvalidInputError("The launch URL has no #wix-signed-instance — copy the whole URL the funnel printed.");
+  }
+  const prompt = url.searchParams.get("prompt")?.trim();
+  const wixClientId = fragment.get("wix-client-id")?.trim();
+  return {
+    ...prompt ? { prompt } : {},
+    signedInstance,
+    ...wixClientId ? { wixClientId } : {}
+  };
+}
 async function createAndLinkApp(options) {
   if (options.name && !APP_NAME_RE.test(options.name)) {
     throw new InvalidInputError("The name becomes a directory — letters, digits, dots, dashes and underscores only.");
   }
   const cwd = process.cwd();
-  const fallbackName = () => options.importRepo ? repoBasename(options.importRepo) : inventAppName(options.prompt);
+  const fallbackName = () => options.importRepo ? repoBasename(options.importRepo) : inventAppName(options.prompt ?? options.wixLaunch?.prompt);
   const chosenDir = options.path ? resolve8(cwd, options.path) : await isDirEmpty(cwd) ? cwd : undefined;
   const dirBase = chosenDir ? basename6(chosenDir) : undefined;
   const name = options.name ?? (dirBase && APP_NAME_RE.test(dirBase) ? dirBase : fallbackName());
@@ -270544,7 +270610,15 @@ async function createAndLinkApp(options) {
   if (await appConfigExists(targetDir)) {
     throw new InvalidInputError(here ? "This directory is already linked to a Base44 app. Run `base44 code` here to keep building it, or pass --path for a new one." : `./${dirName} is already linked to a Base44 app. Pick another name or --path.`);
   }
-  const created = options.importRepo ? await createImportedApp({
+  let clientCreationId;
+  const created = options.wixLaunch ? await createWixLaunchedApp({
+    prompt: options.prompt ?? options.wixLaunch.prompt ?? "",
+    signedInstance: options.wixLaunch.signedInstance,
+    wixClientId: options.wixLaunch.wixClientId
+  }).then((c) => {
+    clientCreationId = c.client_creation_id;
+    return c;
+  }) : options.importRepo ? await createImportedApp({
     appName: name,
     repoUrl: options.importRepo,
     sourceMode: options.mode ?? "direct",
@@ -270568,7 +270642,8 @@ async function createAndLinkApp(options) {
     repoUrl: created.imported_repo_url ?? undefined,
     dirName,
     targetDir,
-    here
+    here,
+    ...clientCreationId ? { clientCreationId } : {}
   };
 }
 function repoLabel(url) {
@@ -270920,6 +270995,12 @@ function getSendCommand() {
 // src/cli/commands/builder/new.ts
 var POLL_TIMEOUT_MS = 20 * 60000;
 var MODES = ["direct", "fork", "copy"];
+async function readStdin2() {
+  const chunks = [];
+  for await (const chunk of process.stdin)
+    chunks.push(chunk);
+  return Buffer.concat(chunks).toString("utf8");
+}
 async function newAction({ log, runTask, jsonMode }, prompt, options) {
   if (options.mode && !MODES.includes(options.mode)) {
     throw new InvalidInputError("--mode must be direct, fork, or copy.");
@@ -270927,8 +271008,15 @@ async function newAction({ log, runTask, jsonMode }, prompt, options) {
   if ((options.mode || options.repoName || options.fromBranch) && !options.import) {
     throw new InvalidInputError("--mode, --repo-name and --from-branch apply only with --import <repo>.");
   }
-  if (!prompt && !options.import) {
-    throw new InvalidInputError('Describe the app ("<prompt>") or pass --import <repo>.');
+  if (options.wixLaunch && options.import) {
+    throw new InvalidInputError("--wix-launch and --import are exclusive.");
+  }
+  const wixLaunch = options.wixLaunch ? parseWixLaunchUrl(options.wixLaunch === "-" ? await readStdin2() : options.wixLaunch) : undefined;
+  if (wixLaunch && !prompt && !wixLaunch.prompt) {
+    throw new InvalidInputError("The launch URL has no ?prompt= — pass the prompt as the argument.");
+  }
+  if (!prompt && !options.import && !wixLaunch) {
+    throw new InvalidInputError('Describe the app ("<prompt>") or pass --import <repo> / --wix-launch <url>.');
   }
   if (options.streamJson && jsonMode) {
     throw new InvalidInputError("--stream-json and --json are exclusive.");
@@ -270943,7 +271031,8 @@ async function newAction({ log, runTask, jsonMode }, prompt, options) {
       mode: options.mode,
       repoName: options.repoName,
       fromBranch: options.fromBranch,
-      path: options.path
+      path: options.path,
+      wixLaunch
     }));
   } catch (error) {
     for (const line of await githubReauthLines(error) ?? [])
@@ -270957,11 +271046,15 @@ async function newAction({ log, runTask, jsonMode }, prompt, options) {
       repo_url: app.repoUrl ?? null,
       editor_url: app.editorUrl,
       dir: app.dirName,
-      path: app.targetDir
+      path: app.targetDir,
+      ...app.clientCreationId ? { client_creation_id: app.clientCreationId } : {}
     });
   } else if (!jsonMode) {
     if (app.repoUrl)
       log.message(source_default.dim(`repo    ${app.repoUrl}`));
+    if (app.clientCreationId) {
+      log.message(source_default.dim("wix     launched — connector connected before the first turn"));
+    }
     log.message(source_default.dim(`editor  ${app.editorUrl}`));
     log.message(source_default.dim(`linked  ${app.here ? "./  (this directory)" : `./${app.dirName}`}`));
   }
@@ -271012,7 +271105,8 @@ async function newAction({ log, runTask, jsonMode }, prompt, options) {
         preview_url: previewUrl ?? null,
         dir: app.dirName,
         path: app.targetDir,
-        status: finalState ?? "created"
+        status: finalState ?? "created",
+        ...app.clientCreationId ? { client_creation_id: app.clientCreationId } : {}
       })}
 `
     };
@@ -271037,7 +271131,7 @@ async function newAction({ log, runTask, jsonMode }, prompt, options) {
 }
 function getNewCommand() {
   const command = new Base44Command("new", { requireAppContext: false });
-  command.description("Create an app and start building: from a prompt (the Base44 template), or over an existing GitHub repo with --import").argument("[prompt]", "What to build; the first agent turn starts immediately").option("--import <repo>", "Build over an existing GitHub repository instead of the template").option("--mode <mode>", "How to import: direct, fork, or copy (default: direct)").option("--name <name>", "Directory and app name (invented when omitted)").option("--path <dir>", "Directory to link (default: the current directory when empty, else ./<name>)").option("--repo-name <name>", "Name for the new GitHub repo when forking/copying").option("--from-branch <name>", "Import a specific branch of the repo").option("--verbose", "Show every tool result in full (no folding)").option("--stream-json", "Emit each stream event as a JSON line as it happens, then a final result line").action(newAction);
+  command.description("Create an app and start building: from a prompt (the Base44 template), or over an existing GitHub repo with --import").argument("[prompt]", "What to build; the first agent turn starts immediately").option("--import <repo>", "Build over an existing GitHub repository instead of the template").option("--mode <mode>", "How to import: direct, fork, or copy (default: direct)").option("--name <name>", "Directory and app name (invented when omitted)").option("--path <dir>", "Directory to link (default: the current directory when empty, else ./<name>)").option("--repo-name <name>", "Name for the new GitHub repo when forking/copying").option("--from-branch <name>", "Import a specific branch of the repo").addOption(new Option2("--wix-launch <url>", `Create through a Wix launch URL (the funnel's ?prompt= and #wix-signed-instance); "-" reads it from stdin. A prompt argument is what the agent runs instead of the URL's`).env("BASE44_WIX_LAUNCH_URL")).option("--verbose", "Show every tool result in full (no folding)").option("--stream-json", "Emit each stream event as a JSON line as it happens, then a final result line").action(newAction);
   return command;
 }
 
@@ -276232,6 +276326,393 @@ function createPasteFriendlyStdin(real) {
   return proxy;
 }
 
+// src/core/resources/apps/pending.ts
+var CHOICE_TOOLS = new Set([
+  "ask_clarifying_questions",
+  "ask_plan_questions"
+]);
+var SECRET_TOOLS = new Set(["set_secrets"]);
+var PERMISSION_TOOLS = new Set(["request_agent_tool_permissions"]);
+var BROWSER_TOOLS = new Set([
+  "connect_github_account",
+  "request_oauth_authorization",
+  "register_workspace_connector",
+  "configure_psp_credentials",
+  "plaid_connect"
+]);
+var str2 = (v) => typeof v === "string" && v.trim() ? v.trim() : undefined;
+function parseArgs(raw) {
+  try {
+    const parsed = JSON.parse(raw ?? "");
+    return parsed && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : {};
+  } catch {
+    return {};
+  }
+}
+function questionsFrom(args) {
+  const raw = Array.isArray(args.questions) ? args.questions : [];
+  return raw.flatMap((q) => {
+    if (!q || typeof q !== "object")
+      return [];
+    const item = q;
+    const question = str2(item.question);
+    if (!question)
+      return [];
+    const options = (Array.isArray(item.options) ? item.options : []).flatMap((o) => {
+      const opt = o;
+      const label = str2(opt?.label);
+      return label ? [{ label, description: str2(opt.description) }] : [];
+    });
+    return [
+      {
+        question,
+        description: str2(item.description),
+        options,
+        multiSelect: item.multi_select === true
+      }
+    ];
+  });
+}
+function secretsFrom(args) {
+  const raw = Array.isArray(args.secrets_schema) ? args.secrets_schema : [];
+  return raw.flatMap((s) => {
+    const item = s;
+    const name = str2(item?.secretName) ?? str2(item?.name);
+    return name ? [{ name, description: str2(item.description) }] : [];
+  });
+}
+function permissionKey(row) {
+  switch (row.type) {
+    case "entity":
+      return row.entity_name ? `entity:${row.entity_name}` : null;
+    case "backend_function":
+      return row.function_name ? `backend_function:${row.function_name}` : null;
+    case "app_user_connector":
+      return row.connector_id ? `app_user_connector:${row.connector_id}` : null;
+    default:
+      return null;
+  }
+}
+function permissionsFrom(args) {
+  const raw = Array.isArray(args.requested_permissions) ? args.requested_permissions : [];
+  return raw.flatMap((r) => {
+    const row = r;
+    const key = permissionKey(row);
+    if (!key)
+      return [];
+    const ops = Array.isArray(row.allowed_operations) ? ` (${row.allowed_operations.join(", ")})` : "";
+    const target = str2(row.entity_name) ?? str2(row.function_name) ?? str2(row.connector_name) ?? key;
+    return [
+      { key, label: `${row.type}: ${target}${ops}`, reason: str2(row.reason) }
+    ];
+  });
+}
+function guardFrom(results) {
+  const value = typeof results === "string" ? (() => {
+    try {
+      return JSON.parse(results);
+    } catch {
+      return null;
+    }
+  })() : results;
+  if (!value || typeof value !== "object")
+    return null;
+  const g = value;
+  if (!str2(g.guard))
+    return null;
+  return { title: `${g.guard}: needs your approval`, detail: str2(g.reason) };
+}
+function humanize(tool) {
+  return tool.replace(/_/g, " ");
+}
+function pendingInputs(messages) {
+  const out = [];
+  for (const message of messages) {
+    for (const call of message.tool_calls ?? []) {
+      if (call.status !== "waiting_for_user_input")
+        continue;
+      const args = parseArgs(call.arguments_string);
+      const base = {
+        toolCallId: call.id,
+        messageId: message.id,
+        tool: call.name
+      };
+      const summary = str2(args.summary);
+      if (CHOICE_TOOLS.has(call.name)) {
+        out.push({
+          ...base,
+          kind: "choice",
+          title: summary ?? "The agent has a few questions",
+          questions: questionsFrom(args)
+        });
+      } else if (SECRET_TOOLS.has(call.name)) {
+        out.push({
+          ...base,
+          kind: "secrets",
+          title: summary ?? "The agent needs secrets",
+          secrets: secretsFrom(args)
+        });
+      } else if (PERMISSION_TOOLS.has(call.name)) {
+        out.push({
+          ...base,
+          kind: "permissions",
+          title: summary ?? "Grant the app's agent these permissions?",
+          detail: str2(args.reason),
+          permissions: permissionsFrom(args)
+        });
+      } else if (BROWSER_TOOLS.has(call.name)) {
+        out.push({
+          ...base,
+          kind: "browser",
+          title: summary ?? humanize(call.name),
+          detail: str2(args.reason)
+        });
+      } else {
+        const guard = guardFrom(call.results);
+        const integration = str2(args.integration_type);
+        out.push({
+          ...base,
+          kind: "approval",
+          title: guard?.title ?? (integration ? `Enable ${integration}?` : summary ?? `${humanize(call.name)}?`),
+          detail: guard?.detail ?? (integration ? summary : undefined)
+        });
+      }
+    }
+  }
+  return out;
+}
+function choiceAnswers(questions, selections) {
+  const answers = questions.flatMap((q, index) => {
+    const sel = selections[index];
+    if (!sel || sel.labels.length === 0 && !sel.customText)
+      return [];
+    const answer = { question_index: index };
+    if (q.multiSelect) {
+      if (sel.labels.length)
+        answer.selected_labels = sel.labels;
+    } else if (sel.labels[0]) {
+      answer.selected_label = sel.labels[0];
+    }
+    if (sel.customText)
+      answer.custom_text = sel.customText;
+    return [answer];
+  });
+  return { answers };
+}
+
+// src/cli/commands/code/pending-card.ts
+function openCard(pending) {
+  return {
+    pending,
+    step: 0,
+    cursor: 0,
+    selections: (pending.questions ?? []).map(() => ({ labels: [] })),
+    granted: new Set((pending.permissions ?? []).map((p) => p.key)),
+    typing: pending.kind === "secrets" ? "secret" : null,
+    secretValues: {}
+  };
+}
+var done = (action, input = {}) => ({ state: null, submit: { action, input } });
+var later = { state: null, dismissed: true };
+function choiceRows(state) {
+  return (state.pending.questions?.[state.step]?.options.length ?? 0) + 1;
+}
+function advanceChoice(state) {
+  const questions = state.pending.questions ?? [];
+  if (state.step + 1 < questions.length) {
+    return {
+      state: { ...state, step: state.step + 1, cursor: 0, typing: null }
+    };
+  }
+  return done("approved", choiceAnswers(questions, state.selections));
+}
+function choiceKey(state, key) {
+  const question = state.pending.questions?.[state.step];
+  if (!question)
+    return done("approved", { answers: [] });
+  const rows = choiceRows(state);
+  const custom = state.cursor === rows - 1;
+  const sel = state.selections[state.step] ?? { labels: [] };
+  const setSel = (next) => {
+    const selections = [...state.selections];
+    selections[state.step] = next;
+    return { ...state, selections };
+  };
+  switch (key) {
+    case "up":
+      return { state: { ...state, cursor: (state.cursor - 1 + rows) % rows } };
+    case "down":
+      return { state: { ...state, cursor: (state.cursor + 1) % rows } };
+    case "space": {
+      if (custom)
+        return { state: { ...state, typing: "custom" } };
+      const label = question.options[state.cursor].label;
+      const labels = question.multiSelect ? sel.labels.includes(label) ? sel.labels.filter((l) => l !== label) : [...sel.labels, label] : [label];
+      return { state: setSel({ ...sel, labels }) };
+    }
+    case "enter": {
+      if (custom)
+        return { state: { ...state, typing: "custom" } };
+      if (question.multiSelect) {
+        if (sel.labels.length === 0 && !sel.customText)
+          return { state };
+        return advanceChoice(state);
+      }
+      const label = question.options[state.cursor].label;
+      return advanceChoice(setSel({ labels: [label] }));
+    }
+    case "s":
+      return done("approved", { answers: [] });
+    case "escape":
+      return later;
+    default:
+      return { state };
+  }
+}
+function permissionsKey(state, key) {
+  const rows = state.pending.permissions ?? [];
+  switch (key) {
+    case "up":
+      return {
+        state: {
+          ...state,
+          cursor: (state.cursor - 1 + rows.length) % rows.length
+        }
+      };
+    case "down":
+      return { state: { ...state, cursor: (state.cursor + 1) % rows.length } };
+    case "space": {
+      const k = rows[state.cursor]?.key;
+      if (!k)
+        return { state };
+      const granted = new Set(state.granted);
+      if (granted.has(k))
+        granted.delete(k);
+      else
+        granted.add(k);
+      return { state: { ...state, granted } };
+    }
+    case "enter":
+    case "y":
+      return done("approved", {
+        approved_permission_keys: rows.map((r) => r.key).filter((k) => state.granted.has(k))
+      });
+    case "n":
+      return done("rejected");
+    case "escape":
+      return later;
+    default:
+      return { state };
+  }
+}
+function cardKey(state, key) {
+  if (state.typing) {
+    if (key === "escape") {
+      return state.typing === "secret" ? later : { state: { ...state, typing: null } };
+    }
+    return { state };
+  }
+  switch (state.pending.kind) {
+    case "choice":
+      return choiceKey(state, key);
+    case "permissions":
+      return permissionsKey(state, key);
+    default:
+      if (key === "y" || key === "enter")
+        return done("approved");
+      if (key === "n")
+        return done("rejected");
+      if (key === "escape")
+        return later;
+      return { state };
+  }
+}
+function cardText(state, text) {
+  const value = text.trim();
+  if (state.typing === "custom") {
+    if (!value)
+      return { state: { ...state, typing: null } };
+    const selections = [...state.selections];
+    const current = selections[state.step] ?? { labels: [] };
+    selections[state.step] = { ...current, customText: value };
+    return advanceChoice({ ...state, selections, typing: null });
+  }
+  if (state.typing === "secret") {
+    const fields = state.pending.secrets ?? [];
+    const field = fields[state.step];
+    if (!field || !value)
+      return { state };
+    const secretValues = { ...state.secretValues, [field.name]: value };
+    if (state.step + 1 < fields.length) {
+      return { state: { ...state, secretValues, step: state.step + 1 } };
+    }
+    return done("approved", { secrets: secretValues });
+  }
+  return { state };
+}
+function cardLines(state) {
+  const p = state.pending;
+  const head = [source_default.bold(`⏸ ${p.title}`)];
+  if (p.detail)
+    head.push(source_default.dim(`  ${p.detail}`));
+  switch (p.kind) {
+    case "choice": {
+      const q = p.questions?.[state.step];
+      if (!q)
+        return [...head, source_default.dim("  (no questions) · Enter to continue")];
+      const total = p.questions?.length ?? 1;
+      const sel = state.selections[state.step] ?? { labels: [] };
+      const rows = q.options.map((o, i) => {
+        const on = sel.labels.includes(o.label);
+        const mark = q.multiSelect ? on ? "☑" : "☐" : on ? "●" : "○";
+        const text = `${state.cursor === i ? "▸" : " "} ${mark} ${o.label}${o.description ? source_default.dim(`  — ${o.description}`) : ""}`;
+        return state.cursor === i ? source_default.cyan(text) : text;
+      });
+      const customRow = `${state.cursor === q.options.length ? "▸" : " "} ✎ something else${sel.customText ? source_default.dim(`  — ${sel.customText}`) : ""}`;
+      rows.push(state.cursor === q.options.length ? source_default.cyan(customRow) : customRow);
+      return [
+        ...head,
+        `  ${source_default.bold(q.question)} ${source_default.dim(`(${state.step + 1}/${total})`)}`,
+        ...q.description ? [source_default.dim(`  ${q.description}`)] : [],
+        ...rows.map((r) => `  ${r}`),
+        source_default.dim(q.multiSelect ? "  ↑↓ move · space toggle · Enter next · s skip all · Esc later" : "  ↑↓ move · Enter choose · s skip all · Esc later")
+      ];
+    }
+    case "permissions": {
+      const rows = (p.permissions ?? []).map((r, i) => {
+        const text = `${state.cursor === i ? "▸" : " "} ${state.granted.has(r.key) ? "☑" : "☐"} ${r.label}${r.reason ? source_default.dim(`  — ${r.reason}`) : ""}`;
+        return `  ${state.cursor === i ? source_default.cyan(text) : text}`;
+      });
+      return [
+        ...head,
+        ...rows,
+        source_default.dim("  space toggle · Enter grant ticked · n reject all · Esc later")
+      ];
+    }
+    case "secrets": {
+      const fields = p.secrets ?? [];
+      const rows = fields.map((f, i) => {
+        const filled = f.name in state.secretValues;
+        const mark = filled ? source_default.green("✓") : i === state.step ? "▸" : "○";
+        return `  ${mark} ${f.name}${f.description ? source_default.dim(`  — ${f.description}`) : ""}`;
+      });
+      return [
+        ...head,
+        ...rows,
+        source_default.dim("  type the value below (hidden) · Enter next · Esc later")
+      ];
+    }
+    case "browser":
+      return [
+        ...head,
+        source_default.dim("  finish this step in the editor (footer link), then press y"),
+        source_default.dim("  y continue · n reject · Esc later")
+      ];
+    default:
+      return [...head, source_default.dim("  y approve · n reject · Esc later")];
+  }
+}
+
 // src/cli/commands/code/session-engine.ts
 var POLL_MS = 1000;
 function createSessionEngine(options) {
@@ -276251,6 +276732,28 @@ function createSessionEngine(options) {
   let awaitingTurn = options.awaitingTurnLabel ?? null;
   const awaitingSince = Date.now();
   let lastEventAt = Date.now();
+  let pending = [];
+  const answered = new Set;
+  const answer = (p, action, input = {}) => {
+    answered.add(p.toolCallId);
+    pending = pending.filter((x) => x.toolCallId !== p.toolCallId);
+    const verb = action === "rejected" ? source_default.red("✗ rejected") : Object.keys(input).length ? source_default.green("→ answered") : source_default.green("✓ approved");
+    options.onLine(`${verb} ${source_default.dim("—")} ${p.title}`);
+    pendingSubmitAt = Date.now();
+    sendsInFlight++;
+    answerToolCall({ toolCallId: p.toolCallId, messageId: p.messageId, action, input }, options.branchId).catch((error) => {
+      const status = error instanceof ApiError ? error.statusCode : undefined;
+      const edgeDrop = status === 502 || status === 503 || status === 504 || /timeout|gateway/i.test(error instanceof Error ? error.message : "");
+      if (edgeDrop && (turnStartedAt != null || pendingSubmitAt == null)) {
+        return;
+      }
+      answered.delete(p.toolCallId);
+      pendingSubmitAt = null;
+      options.onLine(source_default.red(`✗ answer failed: ${error instanceof Error ? error.message : String(error)}`));
+    }).finally(() => {
+      sendsInFlight--;
+    });
+  };
   const submit = (raw) => {
     const typed = raw.trim();
     if (!typed)
@@ -276291,6 +276794,12 @@ function createSessionEngine(options) {
         return;
       }
       const events = diffConversation(diffState, messages);
+      const waiting = pendingInputs(messages);
+      for (const id of answered) {
+        if (!waiting.some((w) => w.toolCallId === id))
+          answered.delete(id);
+      }
+      pending = waiting.filter((w) => !answered.has(w.toolCallId));
       if (!prime) {
         for (const event of events) {
           if (event.kind === "tool_start") {
@@ -276314,7 +276823,9 @@ function createSessionEngine(options) {
             });
             continue;
           }
-          const line = eventLine(event);
+          const line = eventLine(event, undefined, {
+            waitingHint: "answer in the card below"
+          });
           if (line != null) {
             lastEventAt = Date.now();
             options.onLine(line);
@@ -276381,6 +276892,7 @@ function createSessionEngine(options) {
       });
     },
     submit,
+    answer,
     status() {
       let phase = "idle";
       if (awaitingTurn != null)
@@ -276403,7 +276915,8 @@ function createSessionEngine(options) {
         turnStartedAt,
         runningTool,
         lastTurnMs,
-        lastTurnOk
+        lastTurnOk,
+        pending
       };
     },
     turnRunning() {
@@ -276475,6 +276988,8 @@ function SessionView({ engine, footer, subscribe }) {
   const [musingSeed] = import_react23.useState(() => Math.floor(Math.random() * 97));
   const [currentModel, setCurrentModel] = import_react23.useState(null);
   const [pickerIndex, setPickerIndex] = import_react23.useState(null);
+  const [card, setCard] = import_react23.useState(null);
+  const dismissedRef = import_react23.useRef(new Set);
   const maxScrollRef = import_react23.useRef(0);
   const meIdRef = import_react23.useRef(null);
   const emit = (entry) => setItems((h) => withEntry(h, entry));
@@ -276520,6 +277035,29 @@ function SessionView({ engine, footer, subscribe }) {
       emit(source_default.red(`  /model: ${error instanceof Error ? error.message : String(error)}`));
     }
   };
+  const applyCard = (outcome) => {
+    if (outcome.submit && card) {
+      engine.answer(card.pending, outcome.submit.action, outcome.submit.input);
+    }
+    if (outcome.dismissed && card) {
+      dismissedRef.current.add(card.pending.toolCallId);
+    }
+    setCard(outcome.state);
+  };
+  const pending = engine.status().pending;
+  import_react23.useEffect(() => {
+    if (card) {
+      if (!pending.some((p) => p.toolCallId === card.pending.toolCallId)) {
+        setCard(null);
+      }
+      return;
+    }
+    if (pickerIndex !== null)
+      return;
+    const next = pending.find((p) => !dismissedRef.current.has(p.toolCallId));
+    if (next)
+      setCard(openCard(next));
+  }, [pending, card, pickerIndex]);
   use_input_default((char, key) => {
     if (pickerIndex !== null) {
       if (key.upArrow)
@@ -276535,6 +277073,23 @@ function SessionView({ engine, footer, subscribe }) {
       }
       return;
     }
+    if (key.tab && !card) {
+      const next = pending.find((p) => dismissedRef.current.has(p.toolCallId));
+      if (next) {
+        dismissedRef.current.delete(next.toolCallId);
+        setCard(openCard(next));
+      }
+      return;
+    }
+    if (card) {
+      const mapped = key.upArrow ? "up" : key.downArrow ? "down" : key.return ? "enter" : key.escape ? "escape" : char === " " ? "space" : char === "y" || char === "n" || char === "s" ? char : null;
+      if (card.typing && mapped !== "escape")
+        return;
+      if (mapped)
+        applyCard(cardKey(card, mapped));
+      if (mapped || !card.typing)
+        return;
+    }
     if (key.ctrl && char === "c") {
       if (input)
         setInput("");
@@ -276579,7 +277134,9 @@ function SessionView({ engine, footer, subscribe }) {
   const innerWidth = Math.max(10, width - 4);
   const inputRows = Math.max(1, Math.ceil((input.length + 3) / innerWidth));
   const pickerOpen = pickerIndex !== null;
-  const inputBlockHeight = pickerOpen ? MODELS.length + 3 : inputRows + 2;
+  const cardOpen = card !== null && !card.typing;
+  const cardRows = card ? cardLines(card).length : 0;
+  const inputBlockHeight = pickerOpen ? MODELS.length + 3 : cardOpen ? cardRows + 2 : inputRows + 2 + (card?.typing ? 1 : 0);
   const widgetHeight = inputBlockHeight + 3 + (footer.length ? 1 : 0);
   const viewHeight = Math.max(3, rows - widgetHeight - 1);
   const lines = items.flatMap((item) => hardWrapAnsi(`${renderEntry(item, { verbose, foldHint: "Ctrl+O to expand" })}
@@ -276630,29 +277187,64 @@ function SessionView({ engine, footer, subscribe }) {
             }, m.name, false, undefined, this);
           })
         ]
-      }, undefined, true, undefined, this) : /* @__PURE__ */ jsx_dev_runtime.jsxDEV(Box_default, {
+      }, undefined, true, undefined, this) : cardOpen && card ? /* @__PURE__ */ jsx_dev_runtime.jsxDEV(Box_default, {
+        flexDirection: "column",
+        borderStyle: "round",
+        borderColor: "yellow",
+        paddingX: 1,
+        width,
+        children: cardLines(card).map((line, i) => /* @__PURE__ */ jsx_dev_runtime.jsxDEV(Text, {
+          wrap: "truncate-end",
+          children: line
+        }, i, false, undefined, this))
+      }, undefined, false, undefined, this) : /* @__PURE__ */ jsx_dev_runtime.jsxDEV(Box_default, {
+        flexDirection: "column",
         borderStyle: "round",
-        borderColor: "gray",
+        borderColor: card?.typing ? "yellow" : "gray",
         paddingX: 1,
         width,
         children: [
-          /* @__PURE__ */ jsx_dev_runtime.jsxDEV(Text, {
-            color: "cyan",
-            children: "❯ "
-          }, undefined, false, undefined, this),
-          /* @__PURE__ */ jsx_dev_runtime.jsxDEV(build_default, {
-            value: input,
-            onChange: setInput,
-            onSubmit: (value) => {
-              const trimmed = value.trim();
-              if (trimmed === "/model" || trimmed.startsWith("/model ")) {
-                runModelSlash(trimmed.slice("/model".length).trim());
-              } else if (trimmed) {
-                engine.submit(value);
-              }
-              setInput("");
-            }
-          }, undefined, false, undefined, this)
+          card?.typing === "secret" && /* @__PURE__ */ jsx_dev_runtime.jsxDEV(Text, {
+            wrap: "truncate-end",
+            children: [
+              source_default.bold(card.pending.secrets?.[card.step]?.name ?? "secret"),
+              source_default.dim("  — value is hidden · Enter to save · Esc to cancel")
+            ]
+          }, undefined, true, undefined, this),
+          card?.typing === "custom" && /* @__PURE__ */ jsx_dev_runtime.jsxDEV(Text, {
+            wrap: "truncate-end",
+            children: [
+              source_default.bold(card.pending.questions?.[card.step]?.question ?? ""),
+              source_default.dim("  — your own answer · Enter to save · Esc to go back")
+            ]
+          }, undefined, true, undefined, this),
+          /* @__PURE__ */ jsx_dev_runtime.jsxDEV(Box_default, {
+            children: [
+              /* @__PURE__ */ jsx_dev_runtime.jsxDEV(Text, {
+                color: "cyan",
+                children: "❯ "
+              }, undefined, false, undefined, this),
+              /* @__PURE__ */ jsx_dev_runtime.jsxDEV(build_default, {
+                value: input,
+                onChange: setInput,
+                mask: card?.typing === "secret" ? "•" : undefined,
+                onSubmit: (value) => {
+                  if (card?.typing) {
+                    applyCard(cardText(card, value));
+                    setInput("");
+                    return;
+                  }
+                  const trimmed = value.trim();
+                  if (trimmed === "/model" || trimmed.startsWith("/model ")) {
+                    runModelSlash(trimmed.slice("/model".length).trim());
+                  } else if (trimmed) {
+                    engine.submit(value);
+                  }
+                  setInput("");
+                }
+              }, undefined, false, undefined, this)
+            ]
+          }, undefined, true, undefined, this)
         ]
       }, undefined, true, undefined, this),
       footer.length > 0 && /* @__PURE__ */ jsx_dev_runtime.jsxDEV(Text, {
@@ -276666,7 +277258,7 @@ function SessionView({ engine, footer, subscribe }) {
       /* @__PURE__ */ jsx_dev_runtime.jsxDEV(Text, {
         dimColor: true,
         wrap: "truncate-end",
-        children: pickerOpen ? "  ↑↓ to move · Enter to select · Esc to cancel" : engine.turnRunning() ? "  Esc to stop · type to queue · scroll to read · Ctrl+O to expand · Ctrl+C to exit" : "  Enter to send · /model to switch model · Esc for live · Ctrl+O to expand · Ctrl+C to exit"
+        children: pickerOpen ? "  ↑↓ to move · Enter to select · Esc to cancel" : cardOpen ? "  the agent is waiting on you · answer above, or Esc for later" : pending.length > 0 && !card ? `  ⏸ ${pending[0].title} — Tab to answer · Ctrl+C to exit` : engine.turnRunning() ? "  Esc to stop · type to queue · scroll to read · Ctrl+O to expand · Ctrl+C to exit" : "  Enter to send · /model to switch model · Esc for live · Ctrl+O to expand · Ctrl+C to exit"
       }, undefined, false, undefined, this)
     ]
   }, undefined, true, undefined, this);
@@ -276791,6 +277383,7 @@ async function runGenesisSession(options) {
     runningTool: null,
     lastTurnMs: null,
     lastTurnOk: true,
+    pending: [],
     quietForMs: 0
   };
   const genesis = {
@@ -276846,6 +277439,9 @@ async function runGenesisSession(options) {
       }
       return IDLE_STATUS;
     },
+    answer(p, action, input) {
+      inner?.answer(p, action, input);
+    },
     turnRunning() {
       return inner?.turnRunning() ?? creating;
     }
@@ -276878,10 +277474,10 @@ async function runGenesisSession(options) {
 
 // src/cli/commands/code/index.ts
 var BRAND_ORANGE2 = "#E86B3C";
-async function bootstrapApp(prompt, footer, emit, onCreated, importRepo, path) {
+async function bootstrapApp(prompt, footer, emit, onCreated, importRepo, path, wixLaunch) {
   let app;
   try {
-    app = await createAndLinkApp({ prompt, importRepo, path });
+    app = await createAndLinkApp({ prompt, importRepo, path, wixLaunch });
   } catch (error) {
     for (const line of await githubReauthLines(error) ?? [])
       emit(line);
@@ -276928,8 +277524,8 @@ async function codeAction({ log }, options, appId) {
     linked = true;
   } catch {}
   if (linked) {
-    if (options.import || options.path) {
-      throw new InvalidInputError("--import and --path create a new app; run them outside a linked project, without --app-id.");
+    if (options.import || options.path || options.wixLaunch) {
+      throw new InvalidInputError("--import, --path and --wix-launch create a new app; run them outside a linked project, without --app-id.");
     }
     const { id, projectRoot } = getAppContext();
     const state = await assertBuilderApp(id);
@@ -276952,16 +277548,22 @@ async function codeAction({ log }, options, appId) {
       outroMessage: `Session closed. Resume with \`base44 code --app-id ${id}\`.`
     };
   }
+  if (options.wixLaunch && options.import) {
+    throw new InvalidInputError("--wix-launch and --import are exclusive.");
+  }
+  const wixLaunch = options.wixLaunch ? parseWixLaunchUrl(options.wixLaunch) : undefined;
   let created;
-  const footer = [chip(options.import ? repoLabel(options.import) : "web app")];
+  const footer = [
+    chip(options.import ? repoLabel(options.import) : wixLaunch ? "web app · wix" : "web app")
+  ];
   await runGenesisSession({
     idleHint: options.import ? "describe what to build over the repository" : "describe the app you want to build  ·  have one already? base44 code --app-id <id>, or base44 link",
     creatingLabel: options.import ? "importing the repository" : "creating your app",
-    modeLabel: options.import ? `Repository — ${repoLabel(options.import)}` : "Web app — Base44 template + builder agent",
+    modeLabel: options.import ? `Repository — ${repoLabel(options.import)}` : wixLaunch ? "Web app — Wix launch (connector connected first)" : "Web app — Base44 template + builder agent",
     footer,
     createApp: (prompt, emit) => bootstrapApp(prompt, footer, emit, (app) => {
       created = app;
-    }, options.import, options.path)
+    }, options.import, options.path, wixLaunch)
   });
   if (!created) {
     return { outroMessage: "Session closed. No app was created." };
@@ -276973,7 +277575,7 @@ async function codeAction({ log }, options, appId) {
 }
 function getCodeCommand() {
   const command = new Base44Command("code", { requireAppContext: false });
-  command.description("Open Base44 Code, an interactive builder session. In a linked directory (or with --app-id <id>) it opens that app; anywhere else your first prompt creates one (--import <repo> to build over your own repository). Attach a directory to an existing app with base44 link.").option("--import <repo>", "Build over an existing GitHub repository instead of the Base44 template").option("--path <dir>", "Directory to link the new app to (default: the current directory when empty, else ./<name>)").action((ctx, options) => codeAction(ctx, options, command.optsWithGlobals().appId));
+  command.description("Open Base44 Code, an interactive builder session. In a linked directory (or with --app-id <id>) it opens that app; anywhere else your first prompt creates one (--import <repo> to build over your own repository). Attach a directory to an existing app with base44 link.").option("--import <repo>", "Build over an existing GitHub repository instead of the Base44 template").option("--path <dir>", "Directory to link the new app to (default: the current directory when empty, else ./<name>)").option("--wix-launch <url>", "Create the new app through a Wix launch URL (your first prompt is what the agent runs)").action((ctx, options) => codeAction(ctx, options, command.optsWithGlobals().appId));
   return command;
 }
 
@@ -284356,7 +284958,7 @@ async function runScript(options) {
   }
 }
 // src/cli/commands/exec.ts
-function readStdin2() {
+function readStdin3() {
   return new Promise((resolve, reject) => {
     let data = "";
     process.stdin.setEncoding("utf-8");
@@ -284400,7 +285002,7 @@ async function execAction({ app, isNonInteractive }, options) {
   if (!isNonInteractive) {
     throw noInputError;
   }
-  const code = await readStdin2();
+  const code = await readStdin3();
   if (!code.trim()) {
     throw noInputError;
   }
@@ -288581,6 +289183,13 @@ function getFullCommandName(command) {
   }
   return parts.join(" ");
 }
+var SENSITIVE_OPTION = /secret|token|password|launch|instance|key$/i;
+function redactSensitiveOptions(options) {
+  return Object.fromEntries(Object.entries(options).map(([k, v]) => [
+    k,
+    SENSITIVE_OPTION.test(k) && v != null && v !== false ? "[redacted]" : v
+  ]));
+}
 function addCommandInfoToErrorReporter(program, errorReporter) {
   program.hook("preAction", (_, actionCommand) => {
     const fullCommandName = getFullCommandName(actionCommand);
@@ -288588,7 +289197,7 @@ function addCommandInfoToErrorReporter(program, errorReporter) {
       command: {
         name: fullCommandName,
         args: actionCommand.args,
-        options: actionCommand.opts()
+        options: redactSensitiveOptions(actionCommand.opts())
       }
     });
   });
@@ -288635,4 +289244,4 @@ export {
   runCLI
 };
 
-//# debugId=DBD6D874F0F8D0A564756E2164756E21
+//# debugId=D93D1396A8EFA10D64756E2164756E21