@geohar/un-bien 0.8.0 → 0.14.0

package/dist/actions/handlers.js.map

@@ -1 +1 @@
-{"version":3,"file":"handlers.js","sourceRoot":"","sources":["../../src/actions/handlers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAuEH;8EAC8E;AAC9E,MAAM,UAAU,aAAa,CAAC,KAAiB;IAC7C,OAAO;QACL,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,cAAc,EAAE,KAAK,CAAC,aAAa;QACnC,gEAAgE;QAChE,2EAA2E;QAC3E,wDAAwD;QACxD,MAAM,EAAE,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK;KAChD,CAAC;AACJ,CAAC"}
+{"version":3,"file":"handlers.js","sourceRoot":"","sources":["../../src/actions/handlers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAuEH;8EAC8E;AAC9E,MAAM,UAAU,aAAa,CAAC,KAAiB;IAC7C,OAAO;QACL,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,cAAc,EAAE,KAAK,CAAC,aAAa;QACnC,gEAAgE;QAChE,2EAA2E;QAC3E,wDAAwD;QACxD,MAAM,EAAE,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK;KAChD,CAAA;AACH,CAAC"}

package/dist/actions/registry.js.map

@@ -1 +1 @@
-{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/actions/registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AASH,IAAI,iBAAiB,GAA+B,IAAI,CAAC;AAEzD;;;GAGG;AACH,MAAM,aAAa,GAAwB;IACzC,OAAO,KAAI,CAAC;IACZ,YAAY;QACV,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI;QACF,OAAO,SAAS,CAAC;IACnB,CAAC;CACF,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CACjC,GAA+B;IAE/B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,GAAG,EAAE,aAAa,CAAC;QAChC,IAAI,IAAI,EAAE,CAAC;YACT,iBAAiB,GAAG,IAAI,CAAC;YACzB,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,qEAAqE;IACvE,CAAC;IACD,OAAO,iBAAiB,IAAI,aAAa,CAAC;AAC5C,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,2BAA2B;IACzC,iBAAiB,GAAG,IAAI,CAAC;AAC3B,CAAC"}
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/actions/registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AASH,IAAI,iBAAiB,GAA+B,IAAI,CAAA;AAExD;;;GAGG;AACH,MAAM,aAAa,GAAwB;IACzC,OAAO,KAAI,CAAC;IACZ,YAAY;QACV,OAAO,EAAE,CAAA;IACX,CAAC;IACD,IAAI;QACF,OAAO,SAAS,CAAA;IAClB,CAAC;CACF,CAAA;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CACjC,GAA+B;IAE/B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,GAAG,EAAE,aAAa,CAAA;QAC/B,IAAI,IAAI,EAAE,CAAC;YACT,iBAAiB,GAAG,IAAI,CAAA;YACxB,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,qEAAqE;IACvE,CAAC;IACD,OAAO,iBAAiB,IAAI,aAAa,CAAA;AAC3C,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,2BAA2B;IACzC,iBAAiB,GAAG,IAAI,CAAA;AAC1B,CAAC"}

package/dist/bin/launcher.js

@@ -0,0 +1,38 @@
+#!/usr/bin/env node
+/**
+ * `pi-unbien-launcher` — the regime-2 machine-launcher daemon.
+ *
+ * A lightweight mesh peer (NOT a pi session) that lets a paired app launch a
+ * session on THIS machine even when no pi is running here. Reads the machine's
+ * un-bien config for identity + relay + launch backend, joins the machine-level
+ * control room, advertises `remote_launch`, and spawns tmux/herdr on request.
+ *
+ * Run by hand during bring-up:
+ *   pnpm build && node dist/bin/launcher.js
+ * (An OS-service unit for keepalive is a separate install step.)
+ */
+import { startLauncher } from "../launcher/launcher.js";
+async function main() {
+    const handle = await startLauncher();
+    // eslint-disable-next-line no-console
+    console.log(`[un-bien launcher] listening on control room ${handle.roomId} ` +
+        `(epk ${handle.epk.slice(0, 16)}…) — Ctrl-C to stop`);
+    let shuttingDown = false;
+    const shutdown = (signal) => {
+        if (shuttingDown)
+            return;
+        shuttingDown = true;
+        // eslint-disable-next-line no-console
+        console.log(`[un-bien launcher] ${signal} — shutting down`);
+        handle.stop();
+        process.exit(0);
+    };
+    process.on("SIGINT", () => shutdown("SIGINT"));
+    process.on("SIGTERM", () => shutdown("SIGTERM"));
+}
+main().catch((err) => {
+    // eslint-disable-next-line no-console
+    console.error(`[un-bien launcher] fatal: ${err instanceof Error ? err.message : String(err)}`);
+    process.exit(1);
+});
+//# sourceMappingURL=launcher.js.map

package/dist/bin/launcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"launcher.js","sourceRoot":"","sources":["../../src/bin/launcher.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AAEvD,KAAK,UAAU,IAAI;IACjB,MAAM,MAAM,GAAG,MAAM,aAAa,EAAE,CAAA;IACpC,sCAAsC;IACtC,OAAO,CAAC,GAAG,CACT,gDAAgD,MAAM,CAAC,MAAM,GAAG;QAC9D,QAAQ,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,qBAAqB,CACvD,CAAA;IAED,IAAI,YAAY,GAAG,KAAK,CAAA;IACxB,MAAM,QAAQ,GAAG,CAAC,MAAc,EAAE,EAAE;QAClC,IAAI,YAAY;YAAE,OAAM;QACxB,YAAY,GAAG,IAAI,CAAA;QACnB,sCAAsC;QACtC,OAAO,CAAC,GAAG,CAAC,sBAAsB,MAAM,kBAAkB,CAAC,CAAA;QAC3D,MAAM,CAAC,IAAI,EAAE,CAAA;QACb,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAA;IACD,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAA;IAC9C,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAA;AAClD,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;IAC5B,sCAAsC;IACtC,OAAO,CAAC,KAAK,CACX,6BAA6B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAChF,CAAA;IACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AACjB,CAAC,CAAC,CAAA"}

package/dist/commands/deps.d.ts

@@ -0,0 +1,156 @@
+import type { ExtensionAPI, ExtensionContext } from "@earendil-works/pi-coding-agent";
+import type { Ed25519Keypair } from "../pairing/crypto.js";
+import type { SelfRevoke } from "../mesh/self_revoke.js";
+import type { MeshTopologySnapshot } from "../mesh/siblings.js";
+import type { Envelope } from "../session/envelope.js";
+import type { MeshNode } from "../session/mesh_node.js";
+import type { AcquiredLock } from "../session/cwd_lock.js";
+import type { RelayClient } from "../transport/relay_client.js";
+import type { PlainPeerChannel } from "../transport/peer_channel.js";
+import type { ThinkingLevel } from "../protocol/types.js";
+/** App↔Pi room meta projected by the ROOT session (see index.ts `_myRoomMeta`). */
+export type RoomMeta = {
+    name: string;
+    cwd: string;
+    model?: string;
+    thinking?: ThinkingLevel;
+    working?: boolean;
+    sessionId?: string;
+};
+/**
+ * The seam between index.ts (composition root) and the `/unbien` command
+ * modules.
+ *
+ * index.ts owns every piece of mutable module state and every lifecycle
+ * helper the command handlers touch. Command modules MUST NOT import from
+ * `../index.js` (that would be a circular import); instead index.ts builds
+ * one `CommandDeps` object (accessor closures over its module state plus
+ * direct function references) and passes it to `registerUnbienCommands`,
+ * which threads it into every handler that needs it.
+ *
+ * Members are added exactly as the moved code requires them — nothing
+ * speculative. Mutable state that commands write is a get/set pair; state
+ * they only read is `readonly`.
+ */
+export interface CommandDeps {
+    /** Remote state machine: `idle` → `started` (`paired` is derived). */
+    state: "idle" | "started";
+    /** Live relay WS connection, null when off. */
+    relay: RelayClient | null;
+    /** URL used by the current relay connection (http(s):// canonical form). */
+    relayUrl: string | null;
+    /** Local UDS mesh node, null when not joined. */
+    meshNode: MeshNode | null;
+    /** Mesh session name (LOCAL_SESSION_NAME once joined). */
+    sessionName: string | null;
+    /** Authoritative local-mesh peer count (broker `list_peers`). */
+    sessionPeerCount: number;
+    /** Cached Ed25519 identity of this connect cycle. */
+    cachedEd25519: Ed25519Keypair | null;
+    /** Last-known model name (root session projection). */
+    currentModel: string | undefined;
+    /** Last-known thinking level (root session projection). */
+    currentThinking: ThinkingLevel | undefined;
+    /** THE App↔Pi room id for the current chat session. */
+    myRoomId: string | null;
+    /** Room meta hello payload persisted for reconnect replay. */
+    myRoomMeta: RoomMeta | null;
+    /** Shortid of the most recently attached peer (UX hint only). */
+    peerShort: string;
+    /** Epoch of this Pi process's session (stamped on first start). */
+    sessionStartedAt: number | null;
+    /** Per-(cwd,name) singleton lock backing the mesh registration. */
+    cwdLock: AcquiredLock | null;
+    /** Name the cwd-lock actually reserved (`name` or `name#N`). */
+    lockedName: string | null;
+    /** Relay candidate generation (invalidates in-flight starts/stops). */
+    relayLifecycleGeneration: number;
+    /** True when a relay start was deferred because no session id existed yet
+     *  (design 01M1CAW0); the root session_start re-runs the start once the id
+     *  is available. */
+    relayStartDeferred: boolean;
+    /** Root replacement authority epoch (session replacements). */
+    rootLifecycleGeneration: number;
+    /** Mesh join candidate generation. */
+    meshJoinGeneration: number;
+    /** SelfRevoke topology producer for the relay path. */
+    selfRevoke: SelfRevoke | null;
+    /** Epoch guarding the SelfRevoke producer identity. */
+    selfRevokeEpoch: number;
+    /** Producer epoch that last published a verified topology. */
+    selfRevokeTopologyReadyEpoch: number;
+    /** Last topology snapshot published by the producer. */
+    selfRevokeTopology: MeshTopologySnapshot | null;
+    /** Auto-listener dispose fn for the current relay connection. */
+    stopAutoListener: (() => void) | null;
+    /** Cached "any device is paired machine-wide" flag (peers.json). */
+    readonly hasGlobalPairings: boolean;
+    /** Connected owner channels, keyed by canonical owner pubkey. */
+    readonly activePeers: Map<string, PlainPeerChannel>;
+    /** Set by session_shutdown; blocks outgoing candidates until rearm. */
+    readonly disposed: boolean;
+    /** Always-fresh session_start ctx (model/registry fallback). */
+    readonly lastEventCtx: Pick<ExtensionContext, "compact" | "abort" | "ui"> | null;
+    /** The ROOT session's ExtensionAPI (never a subagent child's). */
+    readonly pi: ExtensionAPI | null;
+    /** The root session's pi sessionId, null pre-sessionManager. */
+    readonly rootSessionId: string | null;
+    /** True while `generation` is the current root lifecycle epoch. */
+    isCurrentRootLifecycle(generation: number): boolean;
+    /** Friendly (configured or derived) agent name for a cwd. */
+    displayName(cwd: string): string;
+    /** Room id for the current chat session, derived from the stable pi
+     *  session id — or null when no session id exists yet, in which case the
+     *  caller must NOT announce/join a room (design 01M1CAW0; the cwd-derived
+     *  fallback is retired). */
+    deriveRoomId(cwd: string, name: string): string | null;
+    /** Friendly model name for room_meta. */
+    currentModelName(): string | undefined;
+    /** The ROOT session's state record (turn/agentRun/sessionManager). */
+    rootState(): {
+        sessionManager?: {
+            getSessionId(): string;
+        } | null;
+    };
+    /** Full teardown of relay-side state (relay off, bridge detached). */
+    goIdle(): void;
+    /** Reconnect backoff entry for a closed relay. */
+    onRelayClose(closedRelay: RelayClient): void;
+    /** Attach the pair_request auto-listener to a live relay. */
+    installAutoListener(relay: RelayClient): () => void;
+    /** Repaint the footer status line from current state. */
+    refreshFooter(ctx?: {
+        ui?: {
+            setStatus?: unknown;
+            setTitle?: unknown;
+        };
+    } | null): void;
+    /** Tear down an owner's live channel + report the revocation. */
+    revokeActiveOwnerRuntime(canonicalOwnerPubkey: string): void;
+    /** Attach the cross-PC bridge once relay + leader are both up. */
+    attachBridgeIfReady(): void;
+    /** Broadcast relay connectivity state to RPC clients. */
+    emitRelayState(force?: boolean): void;
+    /** Re-query the broker for the authoritative local peer count. */
+    refreshSessionPeerCount(peer: MeshNode, ctx?: Pick<ExtensionContext, "ui"> | null): void;
+    /** Queue an inbound mesh message for agent delivery. */
+    deliverMeshMessageToAgent(env: Envelope): void;
+    /** Reads peers.json and refreshes the global-pairings cache + footer. */
+    refreshPairingsCache(): void;
+    /** Tear down a connected owner's channel (revoke / disconnect). */
+    detachPeerChannel(appPeerId: string): void;
+    /** RPC control channel verbs (`relay:toggle` / `relay:on` / `relay:off`). */
+    handleControl(cmd: string): Promise<void>;
+    /** Relay connectivity label for status output. */
+    relayStatus(): "connected" | "reconnecting" | "disconnected";
+    /** Test-visible state: `idle` | `started` | derived `paired`. */
+    getState(): "idle" | "started" | "paired";
+    /** Hidden dev-only e2e UI harness (`/unbien test <scenario>`). */
+    runTestScenario(scenario: string): string;
+    /** ctx.ui.notify that never throws (stale-ctx safe). */
+    safeNotify(message: string, level?: "info" | "warning" | "error", preferred?: {
+        ui?: unknown;
+    } | null): void;
+    /** Rename this agent (mesh + relay room) — `/unbien rename`. */
+    renameAgent(newName: string): Promise<void>;
+}

package/dist/commands/deps.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=deps.js.map

package/dist/commands/deps.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deps.js","sourceRoot":"","sources":["../../src/commands/deps.ts"],"names":[],"mappings":""}

package/dist/commands/fork_link.d.ts

@@ -0,0 +1,4 @@
+/** Record that `sessionId` was born from the app fork request `req`. Best-effort. */
+export declare function writeForkLink(sessionDir: string, sessionId: string, req: string): void;
+/** Read + delete the fork request id for `sessionId`, or undefined when none. */
+export declare function takeForkLink(sessionDir: string, sessionId: string): string | undefined;

package/dist/commands/fork_link.js

@@ -0,0 +1,45 @@
+/**
+ * Fork-born linkage: a tiny marker persisted by `_cmdFork`'s `withSession`
+ * (running in the NEW forked session) and consumed by that session's FIRST
+ * `session_sync_end`, which echoes the app's originating fork request id as
+ * `forked_from_req` so the app can auto-navigate to the new session.
+ *
+ * Why a FILE and not a module variable: `ctx.fork` replaces the AgentSession,
+ * and the pi TUI host re-evaluates this extension module fresh for the new
+ * session (jiti moduleCache:false), so a module-level stash set in withSession
+ * would be lost before the new session handles the app's session_sync. The
+ * marker is keyed by the new session id and lives in the session dir, so it
+ * survives the re-eval (and a process restart) and is unambiguous.
+ *
+ * Consumed ONCE (take = read + unlink): the app navigates on the first sync;
+ * leaving it would re-fire the jump on every reconnect.
+ */
+import { existsSync, readFileSync, unlinkSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+function _linkPath(sessionDir, sessionId) {
+    return join(sessionDir, `.unbien-fork-${sessionId}.json`);
+}
+/** Record that `sessionId` was born from the app fork request `req`. Best-effort. */
+export function writeForkLink(sessionDir, sessionId, req) {
+    try {
+        writeFileSync(_linkPath(sessionDir, sessionId), JSON.stringify({ req, ts: Date.now() }));
+    }
+    catch {
+        /* best-effort — a missing link just means no auto-nav */
+    }
+}
+/** Read + delete the fork request id for `sessionId`, or undefined when none. */
+export function takeForkLink(sessionDir, sessionId) {
+    const path = _linkPath(sessionDir, sessionId);
+    try {
+        if (!existsSync(path))
+            return undefined;
+        const parsed = JSON.parse(readFileSync(path, "utf8"));
+        unlinkSync(path);
+        return typeof parsed.req === "string" ? parsed.req : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+//# sourceMappingURL=fork_link.js.map

package/dist/commands/fork_link.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fork_link.js","sourceRoot":"","sources":["../../src/commands/fork_link.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AAC7E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC,SAAS,SAAS,CAAC,UAAkB,EAAE,SAAiB;IACtD,OAAO,IAAI,CAAC,UAAU,EAAE,gBAAgB,SAAS,OAAO,CAAC,CAAA;AAC3D,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,aAAa,CAC3B,UAAkB,EAClB,SAAiB,EACjB,GAAW;IAEX,IAAI,CAAC;QACH,aAAa,CACX,SAAS,CAAC,UAAU,EAAE,SAAS,CAAC,EAChC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CACxC,CAAA;IACH,CAAC;IAAC,MAAM,CAAC;QACP,yDAAyD;IAC3D,CAAC;AACH,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,YAAY,CAC1B,UAAkB,EAClB,SAAiB;IAEjB,MAAM,IAAI,GAAG,SAAS,CAAC,UAAU,EAAE,SAAS,CAAC,CAAA;IAC7C,IAAI,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,SAAS,CAAA;QACvC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAsB,CAAA;QAC1E,UAAU,CAAC,IAAI,CAAC,CAAA;QAChB,OAAO,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAA;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC"}

package/dist/commands/housekeeping.d.ts

@@ -0,0 +1,34 @@
+/**
+ * `/unbien` housekeeping commands: service install/uninstall, the
+ * agent-network skill deploy, extension-dir/skill-path resolution, and the
+ * `unbien claude` CLI launcher.
+ *
+ * None of these touch index.ts module state, so they take no CommandDeps —
+ * everything they use is imported from pi-independent modules. Carved out
+ * of index.ts (phase 1 of the index.ts carve-up).
+ *
+ * NOTE: this file lives one directory deeper than index.ts used to, so the
+ * import.meta.url-based path math (extension dir, packaged skill, mesh
+ * server) climbs one extra level — behavior is otherwise identical.
+ */
+import type { ExtensionContext } from "@earendil-works/pi-coding-agent";
+/**
+ * `linkCli` controls whether we symlink `un-bien` into `~/.local/bin/`. The
+ * slash-command path passes `true` (user is inside Pi's TUI — they installed
+ * via `pi install npm:un-bien` and need us to expose the CLI for them). The
+ * standalone-CLI path passes `false` because the user is already running our
+ * binary from PATH (they did `npm install -g un-bien`), so re-linking would
+ * point their `un-bien` at the Pi-extension copy and diverge on upgrades.
+ */
+/** Returns true on success, false when install failed (so the standalone CLI
+ *  can exit non-zero — e.g. the Cockpit / CI detect failure by exit code).
+ *  We do NOT process.exit here: this also runs inside the Pi TUI, where exiting
+ *  would kill the session. */
+export declare function _cmdInstall(ctx: Pick<ExtensionContext, "ui">, opts?: {
+    linkCli?: boolean;
+}): boolean;
+export declare function _cmdUninstall(ctx: Pick<ExtensionContext, "ui">, opts?: {
+    linkCli?: boolean;
+}): void;
+export declare function _deployAgentNetworkSkill(): void;
+export declare function _cmdClaudeCli(args: string[]): Promise<void>;

package/dist/commands/housekeeping.js

@@ -0,0 +1,275 @@
+import { installService, uninstallService, linkCliBinaries, unlinkCliBinaries, } from "../daemon/install.js";
+import { defaultAgentName, localConfigExists, saveLocalConfig, } from "../session/local_config.js";
+import { skillsDir } from "../session/global_config.js";
+import { spawnSync } from "node:child_process";
+import { copyFileSync, existsSync, mkdirSync, unlinkSync, writeFileSync, } from "node:fs";
+import { tmpdir } from "node:os";
+import { dirname, join, resolve } from "node:path";
+import { createInterface } from "node:readline";
+import { fileURLToPath } from "node:url";
+// ── Install/uninstall the launcher-daemon service ────────────────────────────
+//
+// Installs the un-bien launcher daemon as a user-level system service (systemd
+// `--user` unit on Linux, launchd LaunchAgent on macOS, Task Scheduler on
+// Windows). Once installed the launcher daemon starts at login + survives
+// reboots. Uninstall is the inverse.
+/**
+ * `linkCli` controls whether we symlink `un-bien` into `~/.local/bin/`. The
+ * slash-command path passes `true` (user is inside Pi's TUI — they installed
+ * via `pi install npm:un-bien` and need us to expose the CLI for them). The
+ * standalone-CLI path passes `false` because the user is already running our
+ * binary from PATH (they did `npm install -g un-bien`), so re-linking would
+ * point their `un-bien` at the Pi-extension copy and diverge on upgrades.
+ */
+/** Returns true on success, false when install failed (so the standalone CLI
+ *  can exit non-zero — e.g. the Cockpit / CI detect failure by exit code).
+ *  We do NOT process.exit here: this also runs inside the Pi TUI, where exiting
+ *  would kill the session. */
+export function _cmdInstall(ctx, opts = {}) {
+    const linkCli = opts.linkCli ?? false;
+    try {
+        const result = installService();
+        const sections = [
+            `[un-bien] Launcher daemon service installed (${result.platform}).`,
+            `  Unit: ${result.unitPath}`,
+            `  Steps:\n${result.log.map((l) => "    " + l).join("\n")}`,
+        ];
+        if (linkCli) {
+            const link = linkCliBinaries();
+            sections.push(`  CLI bins linked into ${link.binDir}:`, link.links.map((l) => `    ${l.name} → ${l.target}`).join("\n"), `  Steps:\n${link.log.map((l) => "    " + l).join("\n")}`);
+            if (!link.onPath) {
+                if (process.platform === "win32") {
+                    sections.push(`  ⚠ ${link.binDir} was just added to your user PATH (it wasn't there yet).`, `    Open a NEW terminal and run \`unbien status\` to verify.`);
+                }
+                else {
+                    sections.push(`  ⚠ ${link.binDir} is not on $PATH yet. Add this line to ~/.zshrc / ~/.bashrc:`, `      export PATH="$HOME/.local/bin:$PATH"`, `    Then open a new terminal and run \`unbien status\` to verify.`);
+                }
+            }
+        }
+        ctx.ui.notify(sections.join("\n"), "info");
+        return true;
+    }
+    catch (err) {
+        ctx.ui.notify(`[un-bien] install failed: ${String(err)}`, "error");
+        return false;
+    }
+}
+export function _cmdUninstall(ctx, opts = {}) {
+    const linkCli = opts.linkCli ?? false;
+    try {
+        const result = uninstallService();
+        const sections = [
+            `[un-bien] Launcher daemon service uninstalled (${result.platform}).`,
+            `  Unit: ${result.unitPath} (${result.removed ? "removed" : "not present"})`,
+            `  Steps:\n${result.log.map((l) => "    " + l).join("\n")}`,
+        ];
+        if (linkCli) {
+            const unlink = unlinkCliBinaries();
+            sections.push(`  CLI bins cleanup (${unlink.binDir}):`, unlink.removed
+                .map((r) => `    ${r.name} (${r.existed ? "removed" : "not present"})`)
+                .join("\n"));
+        }
+        ctx.ui.notify(sections.join("\n"), "info");
+    }
+    catch (err) {
+        ctx.ui.notify(`[un-bien] uninstall failed: ${String(err)}`, "error");
+    }
+}
+// ── Agent-network commands (plano 19) ─────────────────────────────────────────
+function _resolveExtensionDir() {
+    // dist/commands/housekeeping.js → dist/commands; skills sit at
+    // <extensionRoot>/skills/. When we run from src/ via tsx (dev), this file
+    // is in src/commands/ and skills/ is two levels up. We detect by checking
+    // both locations.
+    const here = fileURLToPath(import.meta.url);
+    // dist/commands/housekeeping.js or src/commands/housekeeping.ts → parent =
+    // <dist or src>/commands; sibling = ../../skills (dist) / ../skills (src)
+    const parent = here.replace(/\/[^/]+$/, "");
+    const candidateA = join(parent, "..", "..", "skills"); // dist/commands → ../../skills
+    const candidateB = join(parent, "..", "skills"); // src/commands → ../skills
+    if (existsSync(candidateA))
+        return parent.replace(/\/(dist\/)?commands$/, "");
+    if (existsSync(candidateB))
+        return parent.replace(/\/commands$/, "");
+    return parent.replace(/\/commands$/, "");
+}
+export function _deployAgentNetworkSkill() {
+    // Pi SDK spec (core/skills.js): every skill must live at
+    //   <skillsRoot>/<skill-name>/SKILL.md
+    // The skill `name:` frontmatter must equal the parent directory name. We
+    // ship the source pre-arranged that way so deploy is a straight copy into
+    // `<state root>/skills/agent-network/SKILL.md`.
+    const root = _resolveExtensionDir();
+    const src1 = join(root, "skills", "agent-network", "SKILL.md");
+    const src2 = join(root, "..", "skills", "agent-network", "SKILL.md");
+    const src = existsSync(src1) ? src1 : existsSync(src2) ? src2 : null;
+    if (!src)
+        return;
+    const dstDir = join(skillsDir(), "agent-network");
+    const dst = join(dstDir, "SKILL.md");
+    try {
+        mkdirSync(dstDir, { recursive: true });
+        copyFileSync(src, dst);
+        // Cleanup legacy flat-layout deploy at `<state root>/skills/agent-network.md`
+        // (fails the Pi SDK's name-vs-parent-dir validation).
+        const legacy = join(skillsDir(), "agent-network.md");
+        if (existsSync(legacy)) {
+            try {
+                unlinkSync(legacy);
+            }
+            catch {
+                /* ignored */
+            }
+        }
+    }
+    catch {
+        /* best-effort */
+    }
+}
+// ── `unbien claude` — launch Claude Code connected to the mesh ─────────────
+/**
+ * Resolve the packaged agent-network skill path
+ * (`<pkgRoot>/skills/agent-network/SKILL.md`). Single source of truth shared
+ * by both runtimes: Pi discovers it via `resources_discover`, and the Claude
+ * launcher injects it as a system prompt (see `_cmdClaudeCli`). Returns null
+ * if the file is missing (e.g. running before `pnpm build`).
+ */
+function _agentNetworkSkillPath() {
+    const here = fileURLToPath(import.meta.url); // dist/commands/housekeeping.js (or src/ via tsx)
+    const pkgRoot = dirname(dirname(dirname(here))); // package root (dist/commands → ../..; src/commands → ../..)
+    const skill = join(pkgRoot, "skills", "agent-network", "SKILL.md");
+    return existsSync(skill) ? skill : null;
+}
+export async function _cmdClaudeCli(args) {
+    // Contract: `unbien claude [cwd] [claude-flags...]`. The optional cwd is
+    // ONLY the leading positional (first token, not a flag); everything after it
+    // is forwarded verbatim to the `claude` binary (e.g. `--resume`, `-c`,
+    // `-p "prompt"`). Restricting cwd to the leading token avoids mistaking a
+    // flag's value (e.g. the id in `--resume <id>`) for the cwd.
+    const hasCwdArg = args.length > 0 && !args[0].startsWith("-");
+    const targetCwd = hasCwdArg ? args[0] : process.cwd();
+    const passthroughArgs = hasCwdArg ? args.slice(1) : args;
+    // Wizard when no local config exists
+    if (!localConfigExists(targetCwd)) {
+        const suggested = defaultAgentName(targetCwd);
+        process.stdout.write(`\n[un-bien] No config found for ${targetCwd}\n`);
+        process.stdout.write("Let's set up this agent.\n\n");
+        const rl = createInterface({
+            input: process.stdin,
+            output: process.stdout,
+        });
+        const agentName = await new Promise((res) => rl.question(`Agent name [${suggested}]: `, (ans) => {
+            rl.close();
+            res(ans.trim() || suggested);
+        }));
+        saveLocalConfig(targetCwd, {
+            agent_name: agentName,
+            auto_start_relay: true,
+        });
+        process.stdout.write(`[un-bien] Config saved: agent="${agentName}"\n\n`);
+    }
+    // Resolve mesh server script path (dist/mcp/mesh_server.js)
+    const here = fileURLToPath(import.meta.url);
+    const distRoot = dirname(here); // dist/commands → mesh server at ../mcp/
+    const meshServerPath = resolve(distRoot, "..", "mcp/mesh_server.js");
+    if (!existsSync(meshServerPath)) {
+        console.log(`[un-bien] mesh server not found at ${meshServerPath}. Run pnpm build first.`);
+        process.exit(1);
+    }
+    const absCwd = resolve(targetCwd);
+    const SERVER_NAME = "un-bien-mesh";
+    // The mesh MCP must be visible ONLY inside a `unbien claude` session — a
+    // plain `claude` in the same repo must NOT inherit it (otherwise every
+    // ordinary session silently joins the mesh as a stray agent).
+    //
+    // Older builds registered the server with `claude mcp add -s local`. That
+    // scope lives in `~/.claude.json` keyed by the **git repo root** and is
+    // inherited by EVERY claude session under that root — which is exactly the
+    // leak we're closing. So we no longer write any persistent scope; we load
+    // the server through an ephemeral `--mcp-config <tmpfile>` passed on the
+    // launch command line (see below). That config is session-only: it is never
+    // recorded in any scope `claude mcp list` enumerates, so a normal `claude`
+    // sees nothing.
+    //
+    // Migration: best-effort scrub of the stale `-s local` entry that prior
+    // versions left behind (and that is the source of the inherited-mesh bug).
+    // Idempotent — a no-op (non-zero, ignored) when the entry is already gone.
+    spawnSync("claude", ["mcp", "remove", SERVER_NAME, "-s", "local"], {
+        cwd: absCwd,
+        stdio: "ignore",
+        shell: false,
+    });
+    // Ephemeral MCP config consumed by `--mcp-config` below. We do NOT bake a
+    // `cwd` into it: the server resolves its folder from its own `process.cwd()`,
+    // which Claude sets to the directory the session was launched in (verified
+    // empirically — NOT the git root, NOT CLAUDE_PROJECT_DIR). We spawn claude
+    // with `cwd: absCwd`, the MCP child inherits it, so the server self-identifies
+    // as the right agent without leaking that path to any other session.
+    // Unique per pid so concurrent `unbien claude` launches don't collide.
+    const mcpConfigPath = join(tmpdir(), `un-bien-mesh-mcp-${process.pid}.json`);
+    writeFileSync(mcpConfigPath, JSON.stringify({
+        mcpServers: {
+            [SERVER_NAME]: { command: process.execPath, args: [meshServerPath] },
+        },
+    }));
+    // Inject the agent-network protocol as a system prompt instead of deploying a
+    // skill file into ~/.claude. Anyone running `unbien claude` is here to use
+    // the mesh, so load the protocol unconditionally — no lazy skill gating, no
+    // global skills-dir pollution, and the packaged file is the single source of
+    // truth shared with the Pi runtime. Skipped only if the file is missing.
+    const skillPath = _agentNetworkSkillPath();
+    // Launch flags:
+    //   --mcp-config <tmpfile>                       — load the mesh server for
+    //       THIS session only (never a persistent scope). We intentionally omit
+    //       `--strict-mcp-config` so the user's own persistent MCP servers stay
+    //       available alongside the mesh.
+    //   --dangerously-load-development-channels TAG  — enable claude/channel push
+    //       for our local (non-allowlisted) server, so incoming mesh messages
+    //       wake Claude instead of waiting for a get_messages poll. Entries must
+    //       be tagged: `server:<name>` for a manually configured MCP server
+    //       (`plugin:<name>@<marketplace>` is the plugin form). Shows a one-time
+    //       confirmation dialog at startup. Works against the `--mcp-config`
+    //       server in current Claude Code; if a build ever fails to match it, the
+    //       per-turn `get_messages` poll (mandated by the mesh protocol) still
+    //       delivers — we lose the wake, not the messages.
+    //   --dangerously-skip-permissions               — auto-approve tool calls
+    //   --append-system-prompt-file=<skill>           — load the mesh protocol
+    // `--append-system-prompt-file` uses the glued `--flag=value` form (a SINGLE
+    // argv token) on purpose: tools that restore a session by capturing and
+    // replaying the live process's argv (e.g. cmux) drop the TRAILING token,
+    // which here was the skill path — leaving a dangling `--append-system-prompt-file`
+    // → `claude` aborts with "argument missing" and the session never comes back.
+    // As one token, the worst case is the whole flag being dropped: claude still
+    // starts (just without the injected protocol), which is recoverable instead
+    // of fatal. (The other flags stay separate pairs — never last, so unaffected,
+    // and we don't risk a parser that may not accept `=`.)
+    // Any extra args the user passed (e.g. `--resume`, `-c`) are appended last so
+    // they reach the claude binary; ours come first as sensible defaults.
+    try {
+        spawnSync("claude", [
+            "--mcp-config",
+            mcpConfigPath,
+            "--dangerously-load-development-channels",
+            `server:${SERVER_NAME}`,
+            "--dangerously-skip-permissions",
+            ...(skillPath ? [`--append-system-prompt-file=${skillPath}`] : []),
+            ...passthroughArgs,
+        ], {
+            cwd: absCwd,
+            stdio: "inherit",
+            shell: false,
+        });
+    }
+    finally {
+        // Session over — drop the ephemeral config so it never lingers as a stray
+        // file. spawnSync blocks until claude exits, so claude has long since read
+        // it. Best-effort: ignore if already gone.
+        try {
+            unlinkSync(mcpConfigPath);
+        }
+        catch {
+            /* already removed */
+        }
+    }
+}
+//# sourceMappingURL=housekeeping.js.map

package/dist/commands/housekeeping.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"housekeeping.js","sourceRoot":"","sources":["../../src/commands/housekeeping.ts"],"names":[],"mappings":"AAcA,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,eAAe,EACf,iBAAiB,GAClB,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,eAAe,GAChB,MAAM,4BAA4B,CAAA;AACnC,OAAO,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAA;AACvD,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAC9C,OAAO,EACL,YAAY,EACZ,UAAU,EACV,SAAS,EACT,UAAU,EACV,aAAa,GACd,MAAM,SAAS,CAAA;AAChB,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AAExC,gFAAgF;AAChF,EAAE;AACF,+EAA+E;AAC/E,0EAA0E;AAC1E,0EAA0E;AAC1E,qCAAqC;AAErC;;;;;;;GAOG;AACH;;;8BAG8B;AAC9B,MAAM,UAAU,WAAW,CACzB,GAAiC,EACjC,OAA8B,EAAE;IAEhC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,KAAK,CAAA;IACrC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,cAAc,EAAE,CAAA;QAC/B,MAAM,QAAQ,GAAG;YACf,gDAAgD,MAAM,CAAC,QAAQ,IAAI;YACnE,WAAW,MAAM,CAAC,QAAQ,EAAE;YAC5B,aAAa,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;SAC5D,CAAA;QACD,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,eAAe,EAAE,CAAA;YAC9B,QAAQ,CAAC,IAAI,CACX,0BAA0B,IAAI,CAAC,MAAM,GAAG,EACxC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAC/D,aAAa,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC1D,CAAA;YACD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACjB,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;oBACjC,QAAQ,CAAC,IAAI,CACX,OAAO,IAAI,CAAC,MAAM,0DAA0D,EAC5E,8DAA8D,CAC/D,CAAA;gBACH,CAAC;qBAAM,CAAC;oBACN,QAAQ,CAAC,IAAI,CACX,OAAO,IAAI,CAAC,MAAM,8DAA8D,EAChF,4CAA4C,EAC5C,mEAAmE,CACpE,CAAA;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QACD,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAA;QAC1C,OAAO,IAAI,CAAA;IACb,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,6BAA6B,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,CAAA;QAClE,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,GAAiC,EACjC,OAA8B,EAAE;IAEhC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,KAAK,CAAA;IACrC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAA;QACjC,MAAM,QAAQ,GAAG;YACf,kDAAkD,MAAM,CAAC,QAAQ,IAAI;YACrE,WAAW,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,GAAG;YAC5E,aAAa,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;SAC5D,CAAA;QACD,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,MAAM,GAAG,iBAAiB,EAAE,CAAA;YAClC,QAAQ,CAAC,IAAI,CACX,uBAAuB,MAAM,CAAC,MAAM,IAAI,EACxC,MAAM,CAAC,OAAO;iBACX,GAAG,CACF,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,GAAG,CAClE;iBACA,IAAI,CAAC,IAAI,CAAC,CACd,CAAA;QACH,CAAC;QACD,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAA;IAC5C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,+BAA+B,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,CAAA;IACtE,CAAC;AACH,CAAC;AAED,iFAAiF;AACjF,SAAS,oBAAoB;IAC3B,+DAA+D;IAC/D,0EAA0E;IAC1E,0EAA0E;IAC1E,kBAAkB;IAClB,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAC3C,2EAA2E;IAC3E,0EAA0E;IAC1E,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAA;IAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAA,CAAC,+BAA+B;IACrF,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAA,CAAC,2BAA2B;IAC3E,IAAI,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC,sBAAsB,EAAE,EAAE,CAAC,CAAA;IAC7E,IAAI,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAA;IACpE,OAAO,MAAM,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAA;AAC1C,CAAC;AAED,MAAM,UAAU,wBAAwB;IACtC,yDAAyD;IACzD,uCAAuC;IACvC,yEAAyE;IACzE,0EAA0E;IAC1E,gDAAgD;IAChD,MAAM,IAAI,GAAG,oBAAoB,EAAE,CAAA;IACnC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,eAAe,EAAE,UAAU,CAAC,CAAA;IAC9D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,eAAe,EAAE,UAAU,CAAC,CAAA;IACpE,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAA;IACpE,IAAI,CAAC,GAAG;QAAE,OAAM;IAChB,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,EAAE,eAAe,CAAC,CAAA;IACjD,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;IACpC,IAAI,CAAC;QACH,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACtC,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;QACtB,8EAA8E;QAC9E,sDAAsD;QACtD,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,EAAE,kBAAkB,CAAC,CAAA;QACpD,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACvB,IAAI,CAAC;gBACH,UAAU,CAAC,MAAM,CAAC,CAAA;YACpB,CAAC;YAAC,MAAM,CAAC;gBACP,aAAa;YACf,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,iBAAiB;IACnB,CAAC;AACH,CAAC;AAED,8EAA8E;AAE9E;;;;;;GAMG;AACH,SAAS,sBAAsB;IAC7B,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA,CAAC,kDAAkD;IAC9F,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA,CAAC,6DAA6D;IAC7G,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,UAAU,CAAC,CAAA;IAClE,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAA;AACzC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAc;IAChD,yEAAyE;IACzE,6EAA6E;IAC7E,uEAAuE;IACvE,0EAA0E;IAC1E,6DAA6D;IAC7D,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAA;IAC9D,MAAM,SAAS,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAA;IACtD,MAAM,eAAe,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IAExD,qCAAqC;IACrC,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,EAAE,CAAC;QAClC,MAAM,SAAS,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAA;QAC7C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mCAAmC,SAAS,IAAI,CAAC,CAAA;QACtE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAA;QAEpD,MAAM,EAAE,GAAG,eAAe,CAAC;YACzB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,CAAC,CAAA;QACF,MAAM,SAAS,GAAW,MAAM,IAAI,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAClD,EAAE,CAAC,QAAQ,CAAC,eAAe,SAAS,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE;YACjD,EAAE,CAAC,KAAK,EAAE,CAAA;YACV,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,SAAS,CAAC,CAAA;QAC9B,CAAC,CAAC,CACH,CAAA;QAED,eAAe,CAAC,SAAS,EAAE;YACzB,UAAU,EAAE,SAAS;YACrB,gBAAgB,EAAE,IAAI;SACvB,CAAC,CAAA;QACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kCAAkC,SAAS,OAAO,CAAC,CAAA;IAC1E,CAAC;IAED,4DAA4D;IAC5D,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAC3C,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA,CAAC,yCAAyC;IACxE,MAAM,cAAc,GAAG,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,oBAAoB,CAAC,CAAA;IAEpE,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QAChC,OAAO,CAAC,GAAG,CACT,sCAAsC,cAAc,yBAAyB,CAC9E,CAAA;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACjC,MAAM,WAAW,GAAG,cAAc,CAAA;IAElC,yEAAyE;IACzE,uEAAuE;IACvE,8DAA8D;IAC9D,EAAE;IACF,0EAA0E;IAC1E,wEAAwE;IACxE,2EAA2E;IAC3E,0EAA0E;IAC1E,yEAAyE;IACzE,4EAA4E;IAC5E,2EAA2E;IAC3E,gBAAgB;IAChB,EAAE;IACF,wEAAwE;IACxE,2EAA2E;IAC3E,2EAA2E;IAC3E,SAAS,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE;QACjE,GAAG,EAAE,MAAM;QACX,KAAK,EAAE,QAAQ;QACf,KAAK,EAAE,KAAK;KACb,CAAC,CAAA;IAEF,0EAA0E;IAC1E,8EAA8E;IAC9E,2EAA2E;IAC3E,2EAA2E;IAC3E,+EAA+E;IAC/E,qEAAqE;IACrE,uEAAuE;IACvE,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,oBAAoB,OAAO,CAAC,GAAG,OAAO,CAAC,CAAA;IAC5E,aAAa,CACX,aAAa,EACb,IAAI,CAAC,SAAS,CAAC;QACb,UAAU,EAAE;YACV,CAAC,WAAW,CAAC,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,cAAc,CAAC,EAAE;SACrE;KACF,CAAC,CACH,CAAA;IAED,8EAA8E;IAC9E,2EAA2E;IAC3E,4EAA4E;IAC5E,6EAA6E;IAC7E,yEAAyE;IACzE,MAAM,SAAS,GAAG,sBAAsB,EAAE,CAAA;IAE1C,gBAAgB;IAChB,4EAA4E;IAC5E,4EAA4E;IAC5E,4EAA4E;IAC5E,sCAAsC;IACtC,8EAA8E;IAC9E,0EAA0E;IAC1E,6EAA6E;IAC7E,wEAAwE;IACxE,6EAA6E;IAC7E,yEAAyE;IACzE,8EAA8E;IAC9E,2EAA2E;IAC3E,uDAAuD;IACvD,2EAA2E;IAC3E,2EAA2E;IAC3E,6EAA6E;IAC7E,wEAAwE;IACxE,yEAAyE;IACzE,mFAAmF;IACnF,8EAA8E;IAC9E,6EAA6E;IAC7E,4EAA4E;IAC5E,8EAA8E;IAC9E,uDAAuD;IACvD,8EAA8E;IAC9E,sEAAsE;IACtE,IAAI,CAAC;QACH,SAAS,CACP,QAAQ,EACR;YACE,cAAc;YACd,aAAa;YACb,yCAAyC;YACzC,UAAU,WAAW,EAAE;YACvB,gCAAgC;YAChC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,+BAA+B,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAClE,GAAG,eAAe;SACnB,EACD;YACE,GAAG,EAAE,MAAM;YACX,KAAK,EAAE,SAAS;YAChB,KAAK,EAAE,KAAK;SACb,CACF,CAAA;IACH,CAAC;YAAS,CAAC;QACT,0EAA0E;QAC1E,2EAA2E;QAC3E,2CAA2C;QAC3C,IAAI,CAAC;YACH,UAAU,CAAC,aAAa,CAAC,CAAA;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,qBAAqB;QACvB,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/commands/info.d.ts

@@ -0,0 +1,43 @@
+/**
+ * `/unbien` info commands: status, peers, devices/list, config, identity.
+ *
+ * Read-only views over the composition root's state — everything they need
+ * from index.ts's module scope comes through `CommandDeps` (see deps.ts).
+ * Carved out of index.ts (phase 1 of the index.ts carve-up).
+ */
+import type { ExtensionContext } from "@earendil-works/pi-coding-agent";
+import type { CommandDeps } from "./deps.js";
+/**
+ * `/unbien status` — full state snapshot. Two lines: local mesh + relay.
+ *
+ * Always callable; safe when nothing is up (renders the off variants).
+ * Reuses the same icons as the footer so terminal + status output stay
+ * visually consistent.
+ */
+export declare function _cmdStatus(deps: CommandDeps, ctx: Pick<ExtensionContext, "ui">): void;
+/**
+ * Plan/25 Wave D: `/unbien peers`.
+ *
+ * Queries the local broker for the aggregated peer inventory (`list_peers`
+ * returns locals + cross-PC entries prefixed with `<pc_label>:`). Formats
+ * the result grouped by source so users can see at a glance who's on
+ * their machine vs. on a paired sibling Pi.
+ */
+export declare function _cmdPeers(deps: CommandDeps, ctx: Pick<ExtensionContext, "ui">): Promise<void>;
+export declare function _cmdList(deps: CommandDeps, ctx: Pick<ExtensionContext, "ui">): Promise<void>;
+/**
+ * `/unbien config` — print the effective relay URL and where it came from.
+ *
+ * Documented in the README ("Verify the active URL and its source") and in
+ * CLAUDE.md, but like the `relay` family (issue #119) it had no handler and
+ * fell through to the status panel, which shows the URL but not the source —
+ * so `env` vs `config` vs `default` was unverifiable without a restart.
+ */
+export declare function _cmdConfig(deps: CommandDeps, ctx: Pick<ExtensionContext, "ui">): void;
+/**
+ * `/unbien identity` — report NON-SECRET identity state (active EPK, backend,
+ * resolved source). The private seed is NEVER shown: command output is
+ * LLM-visible, so extraction stays a manual `cat`/keychain op. Read-only
+ * (never mints).
+ */
+export declare function _cmdIdentity(ctx: Pick<ExtensionContext, "ui">): Promise<void>;