@habemus-papadum/aiui 0.1.0 → 0.3.0

package/dist/cli.js

@@ -1,381 +1,431 @@
 #!/usr/bin/env node
-import { Command as He } from "commander";
-import { join as c, dirname as U, resolve as $, delimiter as Ve, relative as Be } from "node:path";
-import { cacheDir as G } from "@habemus-papadum/aiui-util";
-import { execa as w } from "execa";
-import { mkdirSync as T, rmSync as qe, writeFileSync as k, readFileSync as D, existsSync as g, realpathSync as pe, readdirSync as we, accessSync as Ge, constants as Je, cpSync as We, renameSync as Ye } from "node:fs";
-import { computeSystemExecutablePath as Ke, ChromeReleaseChannel as O, Browser as x, detectBrowserPlatform as be, resolveBuildId as ge, getInstalledBrowsers as ye, install as ze, uninstall as Xe } from "@puppeteer/browsers";
-import { projectCacheDir as ve, listMcpServers as Ze, selectMcpServer as Qe } from "@habemus-papadum/aiui-claude-channel";
-import { createInterface as et } from "node:readline/promises";
-import b from "chalk";
-import { createRequire as tt } from "node:module";
-import { spawn as ot } from "node:child_process";
-import { fileURLToPath as rt } from "node:url";
-const xe = "DevToolsActivePort", ie = 2e4;
-async function I(e) {
-  const t = nt(e);
-  if (t !== void 0 && await it(t))
-    return { browserUrl: `http://127.0.0.1:${t}`, port: t };
-}
-function nt(e) {
-  try {
-    const [t] = D(c(e, xe), "utf8").split(`
-`), o = Number(t);
-    return Number.isInteger(o) && o > 0 ? o : void 0;
-  } catch {
-    return;
+import { Command as gt } from "commander";
+import { join as f, dirname as R, resolve as P, delimiter as bt, relative as yt } from "node:path";
+import { CHROME_CHANNELS as vt, cacheDir as Y, packageRoot as L, runningFromSource as kt, isCi as ue, discoverSessionBrowser as F, openInSessionBrowser as H, sessionBrowserBinary as Fe, launchSessionBrowser as Ve, decideBrowserAction as Ct } from "@habemus-papadum/aiui-util";
+import { execa as k } from "execa";
+import { readFileSync as U, mkdirSync as W, writeFileSync as q, existsSync as v, realpathSync as He, readdirSync as G, accessSync as $t, constants as xt, rmSync as Tt, lstatSync as Pt, cpSync as Et, renameSync as Dt } from "node:fs";
+import { detectBrowserPlatform as Ke, resolveBuildId as Ye, Browser as I, getInstalledBrowsers as We, install as It, uninstall as St } from "@puppeteer/browsers";
+import { projectCacheDir as de, listMcpServers as J, selectMcpServer as qe } from "@habemus-papadum/aiui-claude-channel";
+import { createInterface as Ot } from "node:readline/promises";
+import l from "chalk";
+import { spawn as jt } from "node:child_process";
+import { r as Ut } from "./sidecars-BKlhUA0V.js";
+import { homedir as At, networkInterfaces as Nt } from "node:os";
+import { Separator as ie, select as K, input as _t } from "@inquirer/prompts";
+import { fileURLToPath as Ge } from "node:url";
+import { aiuiDevOverlay as Rt } from "@habemus-papadum/aiui-dev-overlay/vite";
+import { createServer as Lt } from "vite";
+const Mt = ["prompt", "auto", "off"], Bt = ["attach", "launch"], se = ["loopback", "host"], M = [
+  {
+    name: "claude",
+    summary: "how `aiui claude` launches Claude Code",
+    fields: [
+      {
+        key: "skipPermissions",
+        type: "boolean",
+        default: !0,
+        defaultText: "true (unset: the first interactive launch asks, then persists the answer)",
+        summary: "Launch Claude Code with --dangerously-skip-permissions.",
+        doc: "A personal preference with real consequences (docs/guide/warning): every agent action — shell commands, file writes, network, the browser — runs without asking first. aiui works fine either way. The first interactive launch asks and persists the answer at the user level; when unset, non-interactive sessions fall back to true."
+      },
+      {
+        key: "enterNudge",
+        type: "boolean",
+        default: !0,
+        defaultText: "true (unset: the first interactive launch asks, then persists the answer)",
+        summary: "Auto-dismiss Claude Code's development-channel acknowledgement prompt.",
+        doc: "aiui loads a custom development channel, so Claude Code shows a one-key acknowledgement at every startup; this injects a single Enter keystroke into the terminal to dismiss it (best-effort TIOCSTI on /dev/tty — platforms that forbid it harmlessly do nothing). Saying no just means pressing Enter yourself each launch."
+      }
+    ]
+  },
+  {
+    name: "channel",
+    summary: "the channel server's web backend",
+    fields: [
+      {
+        key: "bind",
+        type: "enum",
+        values: se,
+        default: "loopback",
+        defaultText: '"loopback" (unset: the first interactive launch asks, then persists the answer)',
+        summary: "Which interface the channel web server binds: loopback, or host (LAN).",
+        doc: '"host" (0.0.0.0) makes the session\'s whole web surface — the iPad paint page, but also prompt injection, /debug, and every sidecar — reachable by anyone on your network, UNAUTHENTICATED. That is the trusted-LAN posture (docs/guide/warning): right on a network that is yours alone, wrong on shared Wi-Fi. "loopback" keeps everything this-machine-only; reaching the paint page from an iPad is then up to you — tunnel the channel port however you like (Tailscale, `ssh -L`). The first interactive launch asks and persists the answer at the user level. Per-launch flag: --aiui-bind.'
+      }
+    ]
+  },
+  {
+    name: "sidecars",
+    summary: "which session sidecars `aiui claude` asks the channel to host",
+    fields: [
+      {
+        key: "paint",
+        type: "boolean",
+        default: !0,
+        summary: "Host the iPad paint sidecar (on the channel's own port).",
+        doc: "The iPad paint stream (docs/guide/paint-stream) rides the channel's one port — no extra process, no extra listener — so it is on by default; false turns it off. Whether an iPad can actually reach it is channel.bind's call (host, or a tunnel you own). Per-launch flags win: --aiui-sidecar paint / --aiui-no-sidecar paint. `aiui paint url` prints the URL to open on the iPad."
+      }
+    ]
+  },
+  {
+    name: "chrome",
+    summary: "the agent's browser and the Chrome DevTools MCP",
+    fields: [
+      {
+        key: "enabled",
+        type: "boolean",
+        default: !0,
+        summary: "Attach the Chrome DevTools MCP.",
+        doc: "false turns it off everywhere; true restates the default and does NOT override the CI default-off — only the --aiui-chrome flag forces it on under CI."
+      },
+      {
+        key: "mode",
+        type: "enum",
+        values: Bt,
+        default: "attach",
+        summary: "How the MCP reaches a browser: shared session browser, or its own.",
+        doc: `"attach" shares a user-visible session browser: an already-running one is discovered by profile, or an interactive launch starts one eagerly. "launch" is the hands-off mode: chrome-devtools-mcp launches its own private browser lazily, on the agent's first browser tool call.`
+      },
+      {
+        key: "browserUrl",
+        type: "string",
+        defaultText: "unset (manage a browser locally)",
+        summary: "Attach to this DevTools endpoint instead of managing a browser at all.",
+        doc: 'The remote-development key (docs/guide/remote): the browser runs on another machine (started there with `aiui browser`) and its debug port is tunneled over. Setting it implies mode: "attach" and makes every local-browser setting (profile, executablePath, channel, forTesting…) irrelevant. Per-launch flag: --aiui-browser-url.',
+        validate: (e) => Ft(String(e)) ? void 0 : 'expected an http(s) URL like "http://127.0.0.1:9222"'
+      },
+      {
+        key: "debugPort",
+        type: "number",
+        default: 0,
+        defaultText: "0 (an OS-assigned free port)",
+        summary: "Fixed DevTools debug port for session browsers aiui launches.",
+        doc: "Pin it (e.g. 9222) when something external must find the port — an ssh tunnel, a VS Code attach-to-Chrome launch config. 0 means an OS-assigned free port.",
+        validate: (e) => Number.isInteger(e) && e >= 0 && e <= 65535 ? void 0 : "expected 0..65535"
+      },
+      {
+        key: "profile",
+        type: "string",
+        default: "default",
+        summary: "Named profile under .aiui-cache/chrome/.",
+        doc: "Per-launch flag: --aiui-chrome-profile."
+      },
+      {
+        key: "dataDir",
+        type: "string",
+        defaultText: "unset (derived from chrome.profile)",
+        summary: "Explicit Chrome user data dir; takes precedence over chrome.profile.",
+        doc: "Per-launch flag: --aiui-chrome-data-dir."
+      },
+      {
+        key: "executablePath",
+        type: "string",
+        defaultText: "unset (managed Chrome for Testing when installed, else installed Chrome)",
+        summary: "Chrome binary to launch — e.g. a Chrome for Testing install.",
+        doc: "Chrome for Testing still honors --load-extension, so the aiui DevTools panel can auto-load. Mutually exclusive with chrome.channel."
+      },
+      {
+        key: "channel",
+        type: "enum",
+        values: vt,
+        defaultText: 'unset ("stable" when launching an installed Chrome)',
+        summary: "Installed Chrome release channel to launch.",
+        doc: "Mutually exclusive with chrome.executablePath."
+      },
+      {
+        key: "forTesting",
+        type: "enum",
+        values: Mt,
+        default: "prompt",
+        summary: "How `aiui claude` manages the recommended Chrome for Testing install.",
+        doc: '"prompt" asks before installing or updating it — interactive sessions only, never under CI; "auto" installs/updates without asking; "off" never checks. Prompt answers ("automatically", "never ask again") persist here at the user level. Skipped entirely when executablePath or channel picks a browser explicitly.'
+      },
+      {
+        key: "headless",
+        type: "boolean",
+        default: !1,
+        summary: "Launch Chrome with no UI."
+      },
+      {
+        key: "buildExtension",
+        type: "boolean",
+        default: !0,
+        summary: "Rebuild the aiui-devtools-extension whenever a browser starts in a dev checkout.",
+        doc: "~0.3s of tsc so the auto-loaded DevTools panel is never stale. Only relevant in a dev checkout of pdum_aiui."
+      }
+    ]
   }
+];
+function Je() {
+  return M.flatMap(
+    (e) => e.fields.map((t) => ({ section: e, field: t, path: `${e.name}.${t.key}` }))
+  );
 }
-async function it(e) {
-  try {
-    return (await fetch(`http://127.0.0.1:${e}/json/version`, {
-      signal: AbortSignal.timeout(1e3)
-    })).ok;
-  } catch {
-    return !1;
-  }
+function ze(e) {
+  return e.type === "enum" ? "string" : e.type;
 }
-function Ce(e) {
-  return e.executablePath ? e.executablePath : Ke({
-    browser: x.CHROME,
-    channel: at[e.channel ?? "stable"]
-  });
+function Xe(e, t) {
+  var n;
+  return e.type === "enum" && !(e.values ?? []).includes(String(t)) ? `expected one of: ${(e.values ?? []).join(", ")}` : (n = e.validate) == null ? void 0 : n.call(e, t);
 }
-const at = {
-  stable: O.STABLE,
-  beta: O.BETA,
-  dev: O.DEV,
-  canary: O.CANARY
-};
-async function $e(e) {
-  T(e.userDataDir, { recursive: !0 }), qe(c(e.userDataDir, xe), { force: !0 });
-  const t = [
-    `--remote-debugging-port=${e.debugPort ?? 0}`,
-    `--user-data-dir=${e.userDataDir}`,
-    "--no-first-run",
-    "--no-default-browser-check"
-  ];
-  e.extensionDir && t.push(`--load-extension=${e.extensionDir}`), e.headless && t.push("--headless"), t.push(e.startUrl ?? "about:blank");
-  const o = w(e.binary, t, {
-    detached: !0,
-    stdio: "ignore",
-    reject: !1,
-    cleanup: !1
-  });
-  o.unref();
-  let n = !1;
-  o.then(() => {
-    n = !0;
-  });
-  const r = Date.now() + ie;
-  for (; Date.now() < r; ) {
-    const i = await I(e.userDataDir);
-    if (i) {
-      try {
-        k(
-          c(e.userDataDir, "aiui-browser.json"),
-          `${JSON.stringify({ pid: o.pid, startedAt: (/* @__PURE__ */ new Date()).toISOString() })}
-`
-        );
-      } catch {
-      }
-      return i;
+function ae(e, t) {
+  let n;
+  switch (ze(e)) {
+    case "boolean": {
+      if (t !== "true" && t !== "false")
+        return { error: "expected true or false" };
+      n = t === "true";
+      break;
     }
-    if (n)
-      throw new Error(
-        "the browser exited before exposing its DevTools endpoint — is another Chrome already running on this profile without a debug port? Close it and retry."
-      );
-    await st(250);
+    case "number": {
+      if (n = Number(t), t.trim() === "" || Number.isNaN(n))
+        return { error: "expected a number" };
+      break;
+    }
+    default:
+      n = t;
   }
-  throw new Error(
-    `the browser did not expose its DevTools endpoint within ${ie / 1e3}s`
-  );
+  const o = Xe(e, n);
+  return o ? { error: o } : { value: n };
 }
-async function Ee(e, t) {
-  const o = e.replace(/\/+$/, ""), n = await fetch(`${o}/json/new?${encodeURI(t)}`, {
-    method: "PUT",
-    signal: AbortSignal.timeout(3e3)
-  });
-  if (!n.ok)
-    throw new Error(`the browser refused to open the tab (${n.status} ${n.statusText})`);
+function $(e) {
+  return typeof e == "string" ? JSON.stringify(e) : String(e);
 }
-function st(e) {
-  return new Promise((t) => setTimeout(t, e));
+function ce(e) {
+  return e.defaultText ? e.defaultText : e.default === void 0 ? "unset" : $(e.default);
 }
-const ae = "config.json", se = ["stable", "beta", "dev", "canary"], ce = ["prompt", "auto", "off"], le = ["attach", "launch"];
-function De(e = process.cwd()) {
+function Ft(e) {
+  try {
+    const t = new URL(e);
+    return t.protocol === "http:" || t.protocol === "https:";
+  } catch {
+    return !1;
+  }
+}
+const Ee = "config.json";
+function he(e = process.cwd()) {
   return {
-    user: c(G(void 0, { create: !1 }), ae),
-    project: c(ve(e), ae)
+    user: f(Y(void 0, { create: !1 }), Ee),
+    project: f(de(e), Ee)
   };
 }
-function R(e = process.cwd()) {
-  const t = De(e);
-  return ct(q(t.user) ?? {}, q(t.project) ?? {});
+function V(e = process.cwd()) {
+  const t = he(e);
+  return Qe(O(t.user) ?? {}, O(t.project) ?? {});
 }
-function ct(e, t) {
-  return {
-    claude: { ...e.claude, ...t.claude },
-    chrome: { ...e.chrome, ...t.chrome }
-  };
+function Qe(e, t) {
+  const n = {};
+  for (const o of M)
+    n[o.name] = {
+      ...e[o.name],
+      ...t[o.name]
+    };
+  return n;
 }
-function q(e) {
+function O(e) {
   let t;
   try {
-    t = D(e, "utf8");
+    t = U(e, "utf8");
   } catch {
     return;
   }
-  let o;
+  let n;
   try {
-    o = JSON.parse(t);
-  } catch (n) {
+    n = JSON.parse(t);
+  } catch (o) {
     throw new Error(
-      `invalid JSON in ${e}: ${n instanceof Error ? n.message : String(n)}`
+      `invalid JSON in ${e}: ${o instanceof Error ? o.message : String(o)}`
     );
   }
-  return lt(o, e);
-}
-function lt(e, t) {
-  const o = F(e, t, "the top level");
-  H(o, ["claude", "chrome"], t, "the top level");
-  const n = {};
-  if (o.claude !== void 0) {
-    const r = F(o.claude, t, '"claude"');
-    H(r, ["skipPermissions", "enterNudge"], t, '"claude"'), n.claude = ue({
-      skipPermissions: p(
-        r.skipPermissions,
-        "boolean",
-        t,
-        "claude.skipPermissions"
-      ),
-      enterNudge: p(r.enterNudge, "boolean", t, "claude.enterNudge")
-    });
-  }
-  if (o.chrome !== void 0) {
-    const r = F(o.chrome, t, '"chrome"');
-    H(
-      r,
-      [
-        "enabled",
-        "mode",
-        "browserUrl",
-        "debugPort",
-        "profile",
-        "dataDir",
-        "executablePath",
-        "channel",
-        "forTesting",
-        "headless",
-        "buildExtension"
-      ],
+  return Vt(n, e);
+}
+function Vt(e, t) {
+  const n = De(e, t, "the top level");
+  Ie(
+    n,
+    M.map((r) => r.name),
+    t,
+    "the top level"
+  );
+  const o = {};
+  for (const r of M) {
+    if (n[r.name] === void 0)
+      continue;
+    const i = De(n[r.name], t, `"${r.name}"`);
+    Ie(
+      i,
+      r.fields.map((a) => a.key),
       t,
-      '"chrome"'
+      `"${r.name}"`
     );
-    const i = p(r.channel, "string", t, "chrome.channel");
-    if (i !== void 0 && !se.includes(i))
-      throw new Error(
-        `invalid chrome.channel "${i}" in ${t} — expected one of: ${se.join(", ")}`
-      );
-    const a = p(r.forTesting, "string", t, "chrome.forTesting");
-    if (a !== void 0 && !ce.includes(a))
-      throw new Error(
-        `invalid chrome.forTesting "${a}" in ${t} — expected one of: ${ce.join(", ")}`
-      );
-    const s = p(r.mode, "string", t, "chrome.mode");
-    if (s !== void 0 && !le.includes(s))
-      throw new Error(
-        `invalid chrome.mode "${s}" in ${t} — expected one of: ${le.join(", ")}`
-      );
-    const l = p(r.browserUrl, "string", t, "chrome.browserUrl");
-    if (l !== void 0 && !ut(l))
-      throw new Error(
-        `invalid chrome.browserUrl "${l}" in ${t} — expected an http(s) URL like "http://127.0.0.1:9222"`
-      );
-    const u = p(r.debugPort, "number", t, "chrome.debugPort");
-    if (u !== void 0 && !(Number.isInteger(u) && u >= 0 && u <= 65535))
-      throw new Error(`invalid chrome.debugPort ${u} in ${t} — expected 0..65535`);
-    n.chrome = ue({
-      enabled: p(r.enabled, "boolean", t, "chrome.enabled"),
-      mode: s,
-      browserUrl: l,
-      debugPort: u,
-      profile: p(r.profile, "string", t, "chrome.profile"),
-      dataDir: p(r.dataDir, "string", t, "chrome.dataDir"),
-      executablePath: p(r.executablePath, "string", t, "chrome.executablePath"),
-      channel: i,
-      forTesting: a,
-      headless: p(r.headless, "boolean", t, "chrome.headless"),
-      buildExtension: p(r.buildExtension, "boolean", t, "chrome.buildExtension")
-    });
-  }
-  return n;
-}
-function ut(e) {
-  try {
-    const t = new URL(e);
-    return t.protocol === "http:" || t.protocol === "https:";
-  } catch {
-    return !1;
+    const s = {};
+    for (const a of r.fields) {
+      const c = i[a.key];
+      if (c === void 0)
+        continue;
+      const d = `${r.name}.${a.key}`, p = ze(a);
+      if (typeof c !== p)
+        throw new Error(`expected a ${p} for ${d} in ${t}`);
+      const h = Xe(a, c);
+      if (h)
+        throw new Error(
+          `invalid ${d} ${$(c)} in ${t} — ${h}`
+        );
+      s[a.key] = c;
+    }
+    o[r.name] = s;
   }
+  return o;
 }
-function A(e) {
-  const t = De().user, o = q(t) ?? {};
-  return e(o), T(U(t), { recursive: !0 }), k(t, `${JSON.stringify(o, null, 2)}
-`), t;
+function B(e) {
+  return fe(he().user, e);
 }
-function ue(e) {
-  return Object.fromEntries(Object.entries(e).filter(([, t]) => t !== void 0));
+function fe(e, t) {
+  const n = O(e) ?? {};
+  return t(n), W(R(e), { recursive: !0 }), q(e, `${JSON.stringify(n, null, 2)}
+`), e;
 }
-function F(e, t, o) {
+function De(e, t, n) {
   if (typeof e != "object" || e === null || Array.isArray(e))
-    throw new Error(`expected an object at ${o} of ${t}`);
+    throw new Error(`expected an object at ${n} of ${t}`);
   return e;
 }
-function H(e, t, o, n) {
+function Ie(e, t, n, o) {
   for (const r of Object.keys(e))
     if (!t.includes(r))
       throw new Error(
-        `unknown key "${r}" at ${n} of ${o} — known keys: ${t.join(", ")}`
+        `unknown key "${r}" at ${o} of ${n} — known keys: ${t.join(", ")}`
       );
 }
-function p(e, t, o, n) {
-  if (e !== void 0) {
-    if (typeof e !== t)
-      throw new Error(`expected a ${t} for ${n} in ${o}`);
-    return e;
-  }
-}
-async function J(e, t, o) {
-  const n = et({ input: process.stdin, output: process.stderr });
+async function z(e, t, n) {
+  const o = Ot({ input: process.stdin, output: process.stderr });
   try {
     const r = t.map(
-      (i) => `  ${b.bold(`[${i.key === o ? i.key.toUpperCase() : i.key}]`)} ${i.label}`
+      (i) => `  ${l.bold(`[${i.key === n ? i.key.toUpperCase() : i.key}]`)} ${i.label}`
     ).join(`
 `);
     for (; ; ) {
-      const a = (await n.question(`${b.cyan(e)}
+      const s = (await o.question(`${l.cyan(e)}
 ${r}
 > `)).trim().toLowerCase();
-      if (!a) {
-        if (o !== void 0)
-          return o;
+      if (!s) {
+        if (n !== void 0)
+          return n;
         continue;
       }
-      const s = t.find((l) => l.key === a) ?? t.find((l) => l.label.toLowerCase().startsWith(a));
-      if (s)
-        return s.key;
+      const a = t.find((c) => c.key === s) ?? t.find((c) => c.label.toLowerCase().startsWith(s));
+      if (a)
+        return a.key;
     }
   } finally {
-    n.close();
+    o.close();
   }
 }
-function m(e, t) {
-  console.error(`${b.bgRed.white.bold(" ERROR ")} ${b.red.bold(e)}`), t && console.error(b.dim(t));
+function g(e, t) {
+  console.error(`${l.bgRed.white.bold(" ERROR ")} ${l.red.bold(e)}`), t && console.error(l.dim(t));
 }
-function Pe(e, t) {
-  console.error(`${b.bgYellow.black.bold(" WARN ")} ${b.yellow.bold(e)}`), t && console.error(b.dim(t));
+function T(e, t) {
+  console.error(`${l.bgYellow.black.bold(" WARN ")} ${l.yellow.bold(e)}`), t && console.error(l.dim(t));
 }
 function y(e, t) {
-  console.error(`${b.bgCyan.black.bold(" NOTE ")} ${b.cyan(e)}`), t && console.error(b.dim(t));
+  console.error(`${l.bgCyan.black.bold(" NOTE ")} ${l.cyan(e)}`), t && console.error(l.dim(t));
 }
-const Te = 1440 * 60 * 1e3, dt = 4e3;
-function S(e = !0) {
-  return G("chrome", { create: e });
+const Ze = 1440 * 60 * 1e3, Ht = 4e3;
+function A(e = !0) {
+  return Y("chrome", { create: e });
 }
-const ke = "update-state.json";
-function N() {
+const et = "update-state.json";
+function X() {
   try {
-    return JSON.parse(D(c(S(!1), ke), "utf8"));
+    return JSON.parse(U(f(A(!1), et), "utf8"));
   } catch {
     return {};
   }
 }
-function _(e) {
-  const t = S();
-  T(t, { recursive: !0 }), k(c(t, ke), `${JSON.stringify({ ...N(), ...e })}
+function Q(e) {
+  const t = A();
+  W(t, { recursive: !0 }), q(f(t, et), `${JSON.stringify({ ...X(), ...e })}
 `);
 }
-function W(e, t) {
-  const o = e.split(".").map(Number), n = t.split(".").map(Number);
-  for (let r = 0; r < Math.max(o.length, n.length); r++) {
-    const i = (o[r] ?? 0) - (n[r] ?? 0);
+function pe(e, t) {
+  const n = e.split(".").map(Number), o = t.split(".").map(Number);
+  for (let r = 0; r < Math.max(n.length, o.length); r++) {
+    const i = (n[r] ?? 0) - (o[r] ?? 0);
     if (i)
       return i < 0 ? -1 : 1;
   }
   return 0;
 }
-async function Y() {
-  const e = S(!1);
-  if (!g(e))
+async function me() {
+  const e = A(!1);
+  if (!v(e))
     return;
-  const n = (await ye({ cacheDir: e })).filter((r) => r.browser === x.CHROME).sort((r, i) => W(r.buildId, i.buildId)).at(-1);
-  return n && { buildId: n.buildId, executablePath: n.executablePath };
+  const o = (await We({ cacheDir: e })).filter((r) => r.browser === I.CHROME).sort((r, i) => pe(r.buildId, i.buildId)).at(-1);
+  return o && { buildId: o.buildId, executablePath: o.executablePath };
 }
-async function K(e = {}) {
-  const { maxAgeMs: t = Te, timeoutMs: o = dt, now: n = Date.now() } = e, r = N();
-  if (r.latestBuildId && r.checkedAt && n - r.checkedAt < t)
+async function we(e = {}) {
+  const { maxAgeMs: t = Ze, timeoutMs: n = Ht, now: o = Date.now() } = e, r = X();
+  if (r.latestBuildId && r.checkedAt && o - r.checkedAt < t)
     return r.latestBuildId;
-  const i = be();
+  const i = Ke();
   if (i)
     try {
-      const a = await pt(
-        ge(x.CHROME, i, "stable"),
-        o
+      const s = await qt(
+        Ye(I.CHROME, i, "stable"),
+        n
       );
-      return _({ checkedAt: n, latestBuildId: a }), a;
+      return Q({ checkedAt: o, latestBuildId: s }), s;
     } catch {
       return r.latestBuildId;
     }
 }
-async function C(e) {
-  const t = S(), o = await ze({
-    browser: x.CHROME,
+async function S(e) {
+  const t = A(), n = await It({
+    browser: I.CHROME,
     buildId: e,
     cacheDir: t,
     downloadProgressCallback: "default"
-  }), n = (await ye({ cacheDir: t })).filter(
-    (r) => r.browser === x.CHROME && r.buildId !== e
+  }), o = (await We({ cacheDir: t })).filter(
+    (r) => r.browser === I.CHROME && r.buildId !== e
   );
-  for (const r of n)
-    await Xe({ browser: x.CHROME, buildId: r.buildId, cacheDir: t });
-  return { buildId: e, executablePath: o.executablePath };
+  for (const r of o)
+    await St({ browser: I.CHROME, buildId: r.buildId, cacheDir: t });
+  return { buildId: e, executablePath: n.executablePath };
 }
-async function ht(e) {
-  const t = be();
+async function Kt(e) {
+  const t = Ke();
   if (!t)
     throw new Error("could not detect a supported platform for Chrome for Testing");
-  const o = await ge(x.CHROME, t, "stable");
-  _({ checkedAt: Date.now(), latestBuildId: o });
-  const n = await Y();
-  if (n && W(n.buildId, o) >= 0)
-    return e(`Chrome for Testing ${n.buildId} is up to date`), { ...n, outcome: "current" };
+  const n = await Ye(I.CHROME, t, "stable");
+  Q({ checkedAt: Date.now(), latestBuildId: n });
+  const o = await me();
+  if (o && pe(o.buildId, n) >= 0)
+    return e(`Chrome for Testing ${o.buildId} is up to date`), { ...o, outcome: "current" };
   e(
-    n ? `updating Chrome for Testing ${n.buildId} → ${o}…` : `installing Chrome for Testing ${o}…`
+    o ? `updating Chrome for Testing ${o.buildId} → ${n}…` : `installing Chrome for Testing ${n}…`
   );
-  const r = await C(o);
-  return e(`Chrome for Testing ${o} installed at ${r.executablePath}`), { ...r, outcome: n ? "updated" : "installed" };
+  const r = await S(n);
+  return e(`Chrome for Testing ${n} installed at ${r.executablePath}`), { ...r, outcome: o ? "updated" : "installed" };
 }
-async function Ie(e) {
-  const { mode: t, interactive: o, now: n = Date.now() } = e, r = await Y();
-  if (t === "off" || !o)
+async function tt(e) {
+  const { mode: t, interactive: n, now: o = Date.now() } = e, r = await me();
+  if (t === "off" || !n)
     return r == null ? void 0 : r.executablePath;
   if (!r)
-    return ft(t, n);
-  const i = await K({ now: n });
-  return !i || W(i, r.buildId) <= 0 ? r.executablePath : mt(t, r, i);
+    return Yt(t, o);
+  const i = await we({ now: o });
+  return !i || pe(i, r.buildId) <= 0 ? r.executablePath : Wt(t, r, i);
 }
-async function ft(e, t) {
-  const o = await K({ now: t });
-  if (!o)
+async function Yt(e, t) {
+  const n = await we({ now: t });
+  if (!n)
     return;
   if (e === "auto")
-    return y(`installing Chrome for Testing ${o} (chrome.forTesting: "auto")…`), (await C(o)).executablePath;
-  const n = N();
-  if (n.installDeclinedAt && t - n.installDeclinedAt < Te)
+    return y(`installing Chrome for Testing ${n} (chrome.forTesting: "auto")…`), (await S(n)).executablePath;
+  const o = X();
+  if (o.installDeclinedAt && t - o.installDeclinedAt < Ze)
     return;
-  const r = await J(
-    `Chrome for Testing isn't installed. It's the recommended browser for aiui — version-pinned, separate from your real Chrome, and it auto-loads the aiui DevTools panel (branded Chrome can't). Download ${o} (~160 MB) to ${S(!1)}?`,
+  const r = await z(
+    `Chrome for Testing isn't installed. It's the recommended browser for aiui — version-pinned, separate from your real Chrome, and it auto-loads the aiui DevTools panel (branded Chrome can't). Download ${n} (~160 MB) to ${A(!1)}?`,
     [
       { key: "y", label: "yes, install it" },
       { key: "n", label: "not now — use the regular Chrome (asks again tomorrow)" },
@@ -384,161 +434,162 @@ async function ft(e, t) {
     "y"
   );
   if (r === "y")
-    return (await C(o)).executablePath;
+    return (await S(n)).executablePath;
   if (r === "never") {
-    const i = A((a) => {
-      a.chrome = { ...a.chrome, forTesting: "off" };
+    const i = B((s) => {
+      s.chrome = { ...s.chrome, forTesting: "off" };
     });
     y(`wrote chrome.forTesting: "off" to ${i}`);
   } else
-    _({ installDeclinedAt: t });
+    Q({ installDeclinedAt: t });
 }
-async function mt(e, t, o) {
+async function Wt(e, t, n) {
   if (e === "auto")
     return y(
-      `updating Chrome for Testing ${t.buildId} → ${o} (chrome.forTesting: "auto")…`
-    ), (await C(o)).executablePath;
-  if (N().skippedBuildId === o)
+      `updating Chrome for Testing ${t.buildId} → ${n} (chrome.forTesting: "auto")…`
+    ), (await S(n)).executablePath;
+  if (X().skippedBuildId === n)
     return t.executablePath;
-  switch (await J(
-    `Your Chrome for Testing (${t.buildId}) is out of date — latest stable is ${o}. Update?`,
+  switch (await z(
+    `Your Chrome for Testing (${t.buildId}) is out of date — latest stable is ${n}. Update?`,
     [
       { key: "y", label: "yes, just this once" },
       { key: "a", label: 'automatically, now and from here on (writes chrome.forTesting: "auto")' },
       {
         key: "s",
-        label: `skip ${o} — keep ${t.buildId}, don't ask again for this version`
+        label: `skip ${n} — keep ${t.buildId}, don't ask again for this version`
       },
       { key: "never", label: 'never ask again (writes chrome.forTesting: "off")' }
     ],
     "y"
   )) {
     case "y":
-      return (await C(o)).executablePath;
+      return (await S(n)).executablePath;
     case "a": {
-      const r = A((i) => {
+      const r = B((i) => {
         i.chrome = { ...i.chrome, forTesting: "auto" };
       });
-      return y(`wrote chrome.forTesting: "auto" to ${r}`), (await C(o)).executablePath;
+      return y(`wrote chrome.forTesting: "auto" to ${r}`), (await S(n)).executablePath;
     }
     case "never": {
-      const r = A((i) => {
+      const r = B((i) => {
         i.chrome = { ...i.chrome, forTesting: "off" };
       });
       return y(`wrote chrome.forTesting: "off" to ${r}`), t.executablePath;
     }
     default:
-      return _({ skippedBuildId: o }), t.executablePath;
+      return Q({ skippedBuildId: n }), t.executablePath;
   }
 }
-async function pt(e, t) {
-  let o;
+async function qt(e, t) {
+  let n;
   try {
     return await Promise.race([
       e,
-      new Promise((n, r) => {
-        o = setTimeout(() => r(new Error(`timed out after ${t}ms`)), t);
+      new Promise((o, r) => {
+        n = setTimeout(() => r(new Error(`timed out after ${t}ms`)), t);
       })
     ]);
   } finally {
-    clearTimeout(o);
-  }
-}
-const wt = tt(import.meta.url);
-function P(e) {
-  const t = e.split("/");
-  for (const o of wt.resolve.paths(e) ?? []) {
-    const n = c(o, ...t, "package.json");
-    if (g(n))
-      return U(n);
+    clearTimeout(n);
   }
-  throw new Error(`could not locate the "${e}" package (is it installed?)`);
 }
-function z(e, t) {
-  const o = P(e), n = JSON.parse(D(c(o, "package.json"), "utf8")), r = typeof n.bin == "string" ? n.bin : bt(n.bin);
+function ge(e, t) {
+  const n = L(e), o = JSON.parse(U(f(n, "package.json"), "utf8")), r = typeof o.bin == "string" ? o.bin : Gt(o.bin);
   if (!r)
     throw new Error(
       `package ${e} declares no bin`
     );
-  if (g(c(o, "src"))) {
+  if (kt(n)) {
     const i = r.replace(/^\.?\/?dist\//, "src/").replace(/\.js$/, ".ts");
-    return { command: process.execPath, args: ["--import", "tsx", $(o, i)] };
+    return { command: process.execPath, args: ["--import", "tsx", P(n, i)] };
   }
-  return { command: process.execPath, args: [$(o, r)] };
+  return { command: process.execPath, args: [P(n, r)] };
 }
-function bt(e) {
+function Gt(e) {
   return e ? Object.values(e)[0] : void 0;
 }
-const gt = "chrome-devtools", Se = "@habemus-papadum/aiui-devtools-extension", yt = "default", vt = /^[A-Za-z0-9][A-Za-z0-9._-]*$/;
-function Oe(e, t = {}, o = process.env) {
-  return e.noChrome ? !1 : e.chrome ? !0 : t.enabled === !1 ? !1 : !X(o);
-}
-function X(e = process.env) {
-  const t = e.CI;
-  return t !== void 0 && t !== "" && t !== "0" && t.toLowerCase() !== "false";
+const Jt = "chrome-devtools", nt = "@habemus-papadum/aiui-devtools-extension", zt = "default", Xt = /^[A-Za-z0-9][A-Za-z0-9._-]*$/;
+function ot(e, t = {}, n = process.env) {
+  return e.noChrome ? !1 : e.chrome ? !0 : t.enabled === !1 ? !1 : !ue(n);
 }
-function E(e, t = {}, o = process.cwd()) {
+function D(e, t = {}, n = process.cwd()) {
   if (t.executablePath && t.channel)
     throw new Error(
       "config sets both chrome.executablePath and chrome.channel — they pick the browser two different ways; keep exactly one"
     );
-  const n = e.chromeProfile !== void 0 || e.chromeDataDir !== void 0, r = e.chromeDataDir ?? (n ? void 0 : t.dataDir), i = e.chromeProfile ?? (n ? void 0 : t.profile);
+  const o = e.chromeProfile !== void 0 || e.chromeDataDir !== void 0, r = e.chromeDataDir ?? (o ? void 0 : t.dataDir), i = e.chromeProfile ?? (o ? void 0 : t.profile);
   return {
-    userDataDir: Ue({ dataDir: r, profile: i }, o),
+    userDataDir: rt({ dataDir: r, profile: i }, n),
     // A configured endpoint means the browser is managed elsewhere (usually
     // another machine) — that's always attach, whatever `mode` says.
     mode: t.browserUrl ? "attach" : t.mode ?? "attach",
     browserUrl: t.browserUrl,
     debugPort: t.debugPort ?? 0,
-    executablePath: t.executablePath && $(o, t.executablePath),
+    executablePath: t.executablePath && P(n, t.executablePath),
     channel: t.channel,
     headless: t.headless ?? !1,
     buildExtension: t.buildExtension ?? !0
   };
 }
-function Ue(e, t = process.cwd()) {
+function rt(e, t = process.cwd()) {
   if (e.dataDir)
-    return $(t, e.dataDir);
-  const o = e.profile ?? yt;
-  if (!vt.test(o))
+    return P(t, e.dataDir);
+  const n = e.profile ?? zt;
+  if (!Xt.test(n))
     throw new Error(
-      `invalid chrome profile name "${o}" — use letters, digits, ".", "_", "-" (or --aiui-chrome-data-dir for an arbitrary path)`
+      `invalid chrome profile name "${n}" — use letters, digits, ".", "_", "-" (or --aiui-chrome-data-dir for an arbitrary path)`
     );
-  return c(ve(t), "chrome", o);
+  return f(de(t), "chrome", n);
 }
-function j() {
+function Z() {
   let e;
   try {
-    e = pe(c(P(Se), "extension"));
+    e = He(f(L(nt), "extension"));
   } catch {
     return;
   }
-  return g(c(e, "js")) ? e : void 0;
+  return v(f(e, "js")) ? e : void 0;
 }
-async function Z() {
+async function be() {
   let e, t;
   try {
-    e = pe(P(Se)), t = c(P("typescript"), "bin", "tsc");
+    e = He(L(nt)), t = f(L("typescript"), "bin", "tsc");
   } catch {
     return;
   }
-  if (!g(c(e, "src")))
+  if (!v(f(e, "src")))
     return;
-  const o = await w(process.execPath, [t, "-p", c(e, "tsconfig.json")], {
+  const n = await k(process.execPath, [t, "-p", f(e, "tsconfig.json")], {
     cwd: e,
     reject: !1,
     all: !0
   });
-  o.exitCode && Pe(
-    "aiui-devtools-extension failed to compile — the DevTools panel will be stale or missing",
-    o.all || o.message
+  if (n.exitCode) {
+    T(
+      "aiui-devtools-extension failed to compile — the DevTools panel will be stale or missing",
+      n.all || n.message
+    );
+    return;
+  }
+  const o = f(e, "build-debug-ui.mjs");
+  if (!v(o))
+    return;
+  const r = await k(process.execPath, [o], {
+    cwd: e,
+    reject: !1,
+    all: !0
+  });
+  r.exitCode && T(
+    "aiui-devtools-extension debug-ui bundle failed — the Intent pane will be degraded",
+    r.all || r.message
   );
 }
-function Ae(e, t) {
+function it(e, t) {
   if (!t || e.executablePath)
     return;
-  const o = c(e.userDataDir, "aiui-devtools-extension-hint");
-  if (!g(o)) {
+  const n = f(e.userDataDir, "aiui-devtools-extension-hint");
+  if (!v(n)) {
     y(
       "the aiui DevTools panel can't auto-load into regular Chrome (≥ 137 ignores --load-extension)",
       `Load it once in the launched Chrome — chrome://extensions → Developer mode → Load unpacked →
@@ -547,101 +598,120 @@ ${t}
 which auto-loads it. This note won't repeat for this profile.`
     );
     try {
-      k(o, `${(/* @__PURE__ */ new Date()).toISOString()}
+      q(n, `${(/* @__PURE__ */ new Date()).toISOString()}
 `);
     } catch {
     }
   }
 }
-function V(e) {
+function te(e) {
   return {
     command: "npx",
     args: ["-y", "chrome-devtools-mcp@latest", "--browser-url", e]
   };
 }
-function xt(e, t) {
-  const o = [
+function Qt(e, t) {
+  const n = [
     "-y",
     "chrome-devtools-mcp@latest",
     "--userDataDir",
     e.userDataDir,
     "--ignoreDefaultChromeArg=--disable-extensions"
   ];
-  return e.executablePath && o.push("--executablePath", e.executablePath), e.channel && o.push("--channel", e.channel), e.headless && o.push("--headless"), t && o.push(`--chromeArg=--load-extension=${t}`), { command: "npx", args: o };
+  return e.executablePath && n.push("--executablePath", e.executablePath), e.channel && n.push("--channel", e.channel), e.headless && n.push("--headless"), t && n.push(`--chromeArg=--load-extension=${t}`), { command: "npx", args: n };
 }
-const Ct = 9222;
-async function $t(e) {
-  const o = { ...R().chrome };
-  if (o.browserUrl) {
+const Zt = 9222;
+async function en(e) {
+  const n = { ...V().chrome };
+  if (n.browserUrl) {
     y(
-      `config pins chrome.browserUrl to ${o.browserUrl} — the browser is managed elsewhere`,
+      `config pins chrome.browserUrl to ${n.browserUrl} — the browser is managed elsewhere`,
       "Run `aiui browser` on the machine that should host it (and drop browserUrl there)."
     );
     return;
   }
-  let n;
+  let o, r;
   try {
-    n = Ne(e.remotePort, "--remote-port") ?? Ct;
-  } catch (l) {
-    m(l instanceof Error ? l.message : String(l)), process.exitCode = 1;
+    o = Se(e.remotePort, "--remote-port") ?? Zt, r = Se(e.port, "--port");
+  } catch (c) {
+    g(c instanceof Error ? c.message : String(c)), process.exitCode = 1;
     return;
   }
-  let r = o;
   const i = {
     chromeProfile: e.tunnel ? void 0 : e.profile,
-    chromeDataDir: e.dataDir ?? (e.tunnel ? Et(e.tunnel, e.profile) : void 0)
+    chromeDataDir: e.dataDir ?? (e.tunnel ? tn(e.tunnel, e.profile) : void 0)
   };
-  let a = de(E(i, r), e), s = await I(a.userDataDir);
-  if (s)
-    he("session browser already running", a, s), e.open && (await Ee(s.browserUrl, e.open), console.log(`opened ${e.open}`));
+  let s = D(i, n);
+  r !== void 0 && (s = { ...s, debugPort: r });
+  let a = await F(s.userDataDir);
+  if (a)
+    Oe("session browser already running", s, a), e.open && (await H(a.browserUrl, e.open), console.log(`opened ${e.open}`));
   else {
-    const l = !!process.stdin.isTTY && !!process.stdout.isTTY && !X();
-    if (!r.executablePath && !r.channel) {
-      const h = await Ie({ mode: r.forTesting ?? "prompt", interactive: l });
-      h && (r = { ...r, executablePath: h }, a = de(E(i, r), e));
-    }
-    a.buildExtension && await Z();
-    const u = j();
-    l && Ae(a, u);
-    let f;
-    try {
-      f = Ce(a);
-    } catch (h) {
-      m(
-        "no browser to launch",
-        `${h instanceof Error ? h.message : String(h)}
-Install Chrome for Testing with \`aiui chrome install\`, or set chrome.executablePath.`
-      ), process.exitCode = 1;
-      return;
-    }
+    const c = !!process.stdin.isTTY && !!process.stdout.isTTY && !ue();
     try {
-      s = await $e({
-        binary: f,
-        userDataDir: a.userDataDir,
-        debugPort: a.debugPort,
-        extensionDir: u,
-        headless: a.headless || e.headless,
+      const d = await st({
+        flags: i,
+        config: n,
+        interactive: c,
+        debugPort: r,
+        headless: e.headless,
         startUrl: e.open
       });
-    } catch (h) {
-      m(
+      a = d.session, s = d.settings;
+    } catch (d) {
+      g(
         "the session browser failed to start",
-        h instanceof Error ? h.message : String(h)
+        d instanceof Error ? d.message : String(d)
       ), process.exitCode = 1;
       return;
     }
-    he("session browser started", a, s);
+    Oe("session browser started", s, a);
+  }
+  e.tunnel ? await rn(e.tunnel, o, a.port) : sn(a, o);
+}
+async function st(e) {
+  let t = e.config ?? {};
+  const n = e.flags ?? {}, o = () => {
+    const c = D(n, t);
+    return e.debugPort === void 0 ? c : { ...c, debugPort: e.debugPort };
+  };
+  let r = o();
+  if (!t.executablePath && !t.channel) {
+    const c = await tt({
+      mode: t.forTesting ?? "prompt",
+      interactive: e.interactive
+    });
+    c && (t = { ...t, executablePath: c }, r = o());
+  }
+  r.buildExtension && await be();
+  const i = Z();
+  e.interactive && it(r, i);
+  let s;
+  try {
+    s = Fe(r);
+  } catch (c) {
+    throw new Error(
+      `${c instanceof Error ? c.message : String(c)}
+Install Chrome for Testing with \`aiui chrome install\`, or set chrome.executablePath.`
+    );
   }
-  e.tunnel ? await Tt(e.tunnel, n, s.port) : kt(s, n);
+  return { session: await Ve({
+    binary: s,
+    userDataDir: r.userDataDir,
+    debugPort: r.debugPort,
+    extensionDir: i,
+    headless: r.headless || e.headless,
+    startUrl: e.startUrl
+  }), settings: r };
 }
-function Et(e, t) {
-  const o = t ?? Dt(e);
-  return c(G("browser-profiles", { create: !1 }), o);
+function tn(e, t) {
+  const n = t ?? nn(e);
+  return f(Y("browser-profiles", { create: !1 }), n);
 }
-function Dt(e) {
+function nn(e) {
   return (e.includes("@") ? e.slice(e.indexOf("@") + 1) : e).replace(/[^A-Za-z0-9._-]/g, "-") || "remote";
 }
-function Pt(e, t, o) {
+function on(e, t, n) {
   return [
     // No remote command — the connection exists only to carry the forward...
     "-N",
@@ -650,114 +720,110 @@ function Pt(e, t, o) {
     "-o",
     "ExitOnForwardFailure=yes",
     "-R",
-    `${t}:localhost:${o}`,
+    `${t}:localhost:${n}`,
     e
   ];
 }
-function Re(e) {
+function at(e) {
   return `aiui claude --aiui-browser-url http://127.0.0.1:${e}`;
 }
-async function Tt(e, t, o) {
+async function rn(e, t, n) {
   console.log(
     `
-tunneling ${e}:${t} → localhost:${o} — on ${e}, run:
+tunneling ${e}:${t} → localhost:${n} — on ${e}, run:
 
-  ${Re(t)}
+  ${at(t)}
 
 (Ctrl-C closes the tunnel; the browser stays running.)`
   );
-  const n = await w("ssh", Pt(e, t, o), {
+  const o = await k("ssh", on(e, t, n), {
     stdio: "inherit",
     reject: !1
   });
-  n.failed && !n.isTerminated && (m(
-    `the ssh tunnel to ${e} exited (code ${n.exitCode})`,
+  o.failed && !o.isTerminated && (g(
+    `the ssh tunnel to ${e} exited (code ${o.exitCode})`,
     "A taken remote port exits immediately (ExitOnForwardFailure) — try another --remote-port. The browser is still running; rerun `aiui browser --tunnel …` to reconnect."
   ), process.exitCode = 1);
 }
-function Ne(e, t) {
+function Se(e, t) {
   if (e === void 0)
     return;
-  const o = Number(e);
-  if (!(Number.isInteger(o) && o >= 0 && o <= 65535))
+  const n = Number(e);
+  if (!(Number.isInteger(n) && n >= 0 && n <= 65535))
     throw new Error(`invalid ${t} ${e} — expected 0..65535`);
-  return o;
-}
-function de(e, t) {
-  const o = Ne(t.port, "--port");
-  return o === void 0 ? e : { ...e, debugPort: o };
+  return n;
 }
-function he(e, t, o) {
-  console.log(e), console.log(`  profile:        ${t.userDataDir}`), console.log(`  debug endpoint: ${o.browserUrl}`);
+function Oe(e, t, n) {
+  console.log(e), console.log(`  profile:        ${t.userDataDir}`), console.log(`  debug endpoint: ${n.browserUrl}`);
 }
-function kt(e, t) {
+function sn(e, t) {
   console.log(
     `
 An \`aiui claude\` in this profile's project attaches automatically. For a *remote*
 session, rerun with \`--tunnel <[user@]host>\` — or do it by hand:
   ssh -N -o ExitOnForwardFailure=yes -R ${t}:localhost:${e.port} <host>
-then, on the remote: ${Re(t)}`
+then, on the remote: ${at(t)}`
   );
 }
-async function It(e, t) {
-  var i, a;
-  const o = R(), n = E(
+async function an(e, t) {
+  var i, s;
+  const n = V(), o = D(
     { chromeProfile: t.profile, chromeDataDir: t.dataDir },
-    o.chrome ?? {}
-  ), r = ((i = o.chrome) == null ? void 0 : i.browserUrl) ?? ((a = await I(n.userDataDir)) == null ? void 0 : a.browserUrl);
+    n.chrome ?? {}
+  ), r = ((i = n.chrome) == null ? void 0 : i.browserUrl) ?? ((s = await F(o.userDataDir)) == null ? void 0 : s.browserUrl);
   if (!r) {
-    m(
+    g(
       "no session browser is running for this profile",
-      `Start one with \`aiui browser\` (profile: ${n.userDataDir}).`
+      `Start one with \`aiui browser\` (profile: ${o.userDataDir}).`
     ), process.exitCode = 1;
     return;
   }
   try {
-    await Ee(r, e), console.log(`opened ${e}`);
-  } catch (s) {
-    m(`couldn't open ${e}`, s instanceof Error ? s.message : String(s)), process.exitCode = 1;
+    await H(r, e), console.log(`opened ${e}`);
+  } catch (a) {
+    g(`couldn't open ${e}`, a instanceof Error ? a.message : String(a)), process.exitCode = 1;
   }
 }
-async function St(e) {
+async function cn(e) {
   const [t] = e;
   switch (t) {
     case "install":
     case "update":
-      await ht((o) => console.log(o));
+      await Kt((n) => console.log(n));
       return;
     case "status":
-      await Ot();
+      await ln();
       return;
     case "extension": {
-      await Z();
-      const o = j();
-      if (!o) {
-        m(
+      await be();
+      const n = Z();
+      if (!n) {
+        g(
           "the aiui-devtools-extension is not available in this install",
           "In a dev checkout, build it first: pnpm --filter @habemus-papadum/aiui-devtools-extension build"
         ), process.exitCode = 1;
         return;
       }
-      console.log(o);
+      console.log(n);
       return;
     }
     default:
-      m(
+      g(
         t ? `unknown aiui chrome action: ${t}` : "aiui chrome needs an action",
         "Usage: aiui chrome <install | update | status | extension>"
       ), process.exitCode = 1;
       return;
   }
 }
-async function Ot() {
-  const t = R().chrome ?? {}, o = { chrome: !1, noChrome: !1 }, n = await Y(), r = await K();
-  if (console.log("Chrome for Testing (managed):"), n) {
-    const v = r === void 0 ? "(latest stable unknown — offline?)" : r === n.buildId ? "(latest stable)" : `(latest stable is ${r} — run \`aiui chrome update\`)`;
-    console.log(`  installed ${n.buildId} ${v}`), console.log(`  ${n.executablePath}`);
+async function ln() {
+  const t = V().chrome ?? {}, n = { chrome: !1, noChrome: !1 }, o = await me(), r = await we();
+  if (console.log("Chrome for Testing (managed):"), o) {
+    const m = r === void 0 ? "(latest stable unknown — offline?)" : r === o.buildId ? "(latest stable)" : `(latest stable is ${r} — run \`aiui chrome update\`)`;
+    console.log(`  installed ${o.buildId} ${m}`), console.log(`  ${o.executablePath}`);
   } else
     console.log("  not installed — `aiui chrome install` (recommended; auto-loads the panel)");
   if (console.log(`  startup checks (chrome.forTesting): ${t.forTesting ?? "prompt"}`), console.log(`
-This directory would launch:`), !Oe(o, t)) {
+This directory would launch:`), !ot(n, t)) {
     console.log("  nothing — the Chrome DevTools MCP is disabled here");
     return;
   }
@@ -766,224 +832,361 @@ This directory would launch:`), !Oe(o, t)) {
     return;
   }
   const i = { ...t };
-  !i.executablePath && !i.channel && n && (i.executablePath = n.executablePath);
-  const a = E({}, i), s = await I(a.userDataDir), l = a.mode === "attach" ? s ? `attach to the running session browser at ${s.browserUrl}` : "attach — a session browser starts with the next interactive launch (or `aiui browser`)" : "launch — chrome-devtools-mcp starts a private browser on the agent's first tool use";
-  console.log(`  connection: ${l}`);
-  const u = a.executablePath ? a.executablePath === (n == null ? void 0 : n.executablePath) ? `Chrome for Testing ${n.buildId}` : a.executablePath : a.channel ? `installed Chrome (${a.channel} channel)` : "installed Chrome (stable)";
-  console.log(`  browser: ${u}${a.headless ? " — headless" : ""}`), console.log(`  user data dir: ${a.userDataDir}`);
-  const f = c(Ue({}, process.cwd()), "..");
-  if (g(f)) {
-    const v = we(f, { withFileTypes: !0 }).filter((d) => d.isDirectory()).map((d) => d.name);
-    v.length && console.log(`  profiles here: ${v.join(", ")}`);
+  !i.executablePath && !i.channel && o && (i.executablePath = o.executablePath);
+  const s = D({}, i), a = await F(s.userDataDir), c = s.mode === "attach" ? a ? `attach to the running session browser at ${a.browserUrl}` : "attach — a session browser starts with the next interactive launch (or `aiui browser`)" : "launch — chrome-devtools-mcp starts a private browser on the agent's first tool use";
+  console.log(`  connection: ${c}`);
+  const d = s.executablePath ? s.executablePath === (o == null ? void 0 : o.executablePath) ? `Chrome for Testing ${o.buildId}` : s.executablePath : s.channel ? `installed Chrome (${s.channel} channel)` : "installed Chrome (stable)";
+  console.log(`  browser: ${d}${s.headless ? " — headless" : ""}`), console.log(`  user data dir: ${s.userDataDir}`);
+  const p = f(rt({}, process.cwd()), "..");
+  if (v(p)) {
+    const m = G(p, { withFileTypes: !0 }).filter((b) => b.isDirectory()).map((b) => b.name);
+    m.length && console.log(`  profiles here: ${m.join(", ")}`);
   }
   console.log(`
 aiui DevTools panel:`);
-  const h = j();
+  const h = Z();
   if (!h) {
     console.log("  not available (unbuilt dev checkout? run `aiui chrome extension` for help)");
     return;
   }
-  console.log(`  ${h}`), a.executablePath ? console.log("  auto-loads via --load-extension (honored by Chrome for Testing/Chromium)") : (console.log("  can NOT auto-load into branded Chrome ≥ 137 — load it unpacked once"), console.log(
+  console.log(`  ${h}`), s.executablePath ? console.log("  auto-loads via --load-extension (honored by Chrome for Testing/Chromium)") : (console.log("  can NOT auto-load into branded Chrome ≥ 137 — load it unpacked once"), console.log(
     "  (chrome://extensions → Developer mode → Load unpacked), or `aiui chrome install`"
   ));
 }
-const Ut = "--aiui-";
-function _e(e) {
+const un = "--aiui-";
+function ct(e) {
   if (e.includes("--help") || e.includes("-h"))
     return "help";
   if (e.includes("--version") || e.includes("-v"))
     return "version";
 }
-function je(e) {
-  let t, o, n = !1, r = !1, i, a, s;
-  const l = [];
-  for (let u = 0; u < e.length; u++) {
-    const f = e[u];
-    if (!f.startsWith(Ut)) {
-      l.push(f);
+function lt(e) {
+  let t, n, o = !1, r = !1, i = !1, s = !1, a, c, d;
+  const p = [], h = [];
+  let m;
+  const b = [];
+  for (let w = 0; w < e.length; w++) {
+    const C = e[w];
+    if (!C.startsWith(un)) {
+      b.push(C);
       continue;
     }
-    const h = f.indexOf("="), v = h === -1 ? f : f.slice(0, h);
-    let d = h === -1 ? void 0 : f.slice(h + 1);
-    switch (v) {
+    const x = C.indexOf("="), N = x === -1 ? C : C.slice(0, x);
+    let u = x === -1 ? void 0 : C.slice(x + 1);
+    switch (N) {
       case "--aiui-tag": {
-        if (d === void 0 && (d = e[++u]), !d)
+        if (u === void 0 && (u = e[++w]), !u)
           throw new Error("--aiui-tag requires a non-empty value");
-        t = d;
+        t = u;
         break;
       }
       case "--aiui-mcp": {
-        if (d === void 0 && (d = e[++u]), !d)
+        if (u === void 0 && (u = e[++w]), !u)
           throw new Error("--aiui-mcp requires a non-empty value");
-        o = d;
+        n = u;
         break;
       }
       case "--aiui-chrome": {
-        if (d !== void 0)
+        if (u !== void 0)
           throw new Error("--aiui-chrome takes no value");
-        n = !0;
+        o = !0;
         break;
       }
       case "--aiui-no-chrome": {
-        if (d !== void 0)
+        if (u !== void 0)
           throw new Error("--aiui-no-chrome takes no value");
         r = !0;
         break;
       }
+      case "--aiui-browser": {
+        if (u !== void 0)
+          throw new Error("--aiui-browser takes no value");
+        i = !0;
+        break;
+      }
+      case "--aiui-no-browser": {
+        if (u !== void 0)
+          throw new Error("--aiui-no-browser takes no value");
+        s = !0;
+        break;
+      }
       case "--aiui-chrome-profile": {
-        if (d === void 0 && (d = e[++u]), !d)
+        if (u === void 0 && (u = e[++w]), !u)
           throw new Error("--aiui-chrome-profile requires a non-empty value");
-        i = d;
+        a = u;
         break;
       }
       case "--aiui-chrome-data-dir": {
-        if (d === void 0 && (d = e[++u]), !d)
+        if (u === void 0 && (u = e[++w]), !u)
           throw new Error("--aiui-chrome-data-dir requires a non-empty value");
-        a = d;
+        c = u;
         break;
       }
       case "--aiui-browser-url": {
-        if (d === void 0 && (d = e[++u]), !d)
+        if (u === void 0 && (u = e[++w]), !u)
           throw new Error("--aiui-browser-url requires a non-empty value");
-        s = d;
+        d = u;
+        break;
+      }
+      case "--aiui-sidecar": {
+        if (u === void 0 && (u = e[++w]), !u)
+          throw new Error("--aiui-sidecar requires a non-empty value");
+        p.push(u);
+        break;
+      }
+      case "--aiui-no-sidecar": {
+        if (u === void 0 && (u = e[++w]), !u)
+          throw new Error("--aiui-no-sidecar requires a non-empty value");
+        h.push(u);
+        break;
+      }
+      case "--aiui-bind": {
+        if (u === void 0 && (u = e[++w]), !u || !se.includes(u))
+          throw new Error(`--aiui-bind requires one of: ${se.join(", ")}`);
+        m = u;
         break;
       }
       default:
-        throw new Error(`unknown aiui option: ${v}`);
+        throw new Error(`unknown aiui option: ${N}`);
     }
   }
-  if (n && r)
+  if (o && r)
     throw new Error("--aiui-chrome and --aiui-no-chrome are mutually exclusive");
-  if (i !== void 0 && a !== void 0)
+  if (i && s)
+    throw new Error("--aiui-browser and --aiui-no-browser are mutually exclusive");
+  if (a !== void 0 && c !== void 0)
     throw new Error("--aiui-chrome-profile and --aiui-chrome-data-dir are mutually exclusive");
-  if (s !== void 0 && (i !== void 0 || a !== void 0))
+  if (d !== void 0 && (a !== void 0 || c !== void 0))
     throw new Error(
       "--aiui-browser-url means the browser is managed elsewhere — it can't be combined with --aiui-chrome-profile or --aiui-chrome-data-dir"
     );
-  return { tag: t, mcp: o, chrome: n, noChrome: r, chromeProfile: i, chromeDataDir: a, browserUrl: s, passthrough: l };
+  return {
+    tag: t,
+    mcp: n,
+    chrome: o,
+    noChrome: r,
+    browser: i,
+    noBrowser: s,
+    chromeProfile: a,
+    chromeDataDir: c,
+    browserUrl: d,
+    sidecar: p,
+    noSidecar: h,
+    bind: m,
+    passthrough: b
+  };
 }
-const At = {
+const dn = {
   darwin: 2147578994,
   linux: 21522
-}, Rt = 'open(my $t,"+<","/dev/tty") or exit 0; my $c="\\r"; ioctl($t,$ARGV[0]+0,$c);', Nt = [250, 750];
-function _t(e = Nt) {
-  const t = At[process.platform];
+}, hn = 'open(my $t,"+<","/dev/tty") or exit 0; my $c="\\r"; ioctl($t,$ARGV[0]+0,$c);', fn = [250, 750];
+function pn(e = fn) {
+  const t = dn[process.platform];
   if (t !== void 0)
-    for (const o of e)
+    for (const n of e)
       setTimeout(() => {
         try {
-          ot("perl", ["-e", Rt, String(t)], { stdio: "ignore" }).on("error", () => {
+          jt("perl", ["-e", hn, String(t)], { stdio: "ignore" }).on("error", () => {
           });
         } catch {
         }
-      }, o).unref();
+      }, n).unref();
 }
-const jt = `One-time setup — how should aiui launch Claude Code?
+const mn = `One-time setup — how should aiui launch Claude Code?
 With --dangerously-skip-permissions, every agent action (shell commands, file writes,
 network, the browser) runs without asking you first. Fast, and dangerous. It's a personal
 preference — aiui works fine either way. Saved as claude.skipPermissions in your user
-config; edit or delete it there to change your mind.`, Mt = `One-time setup — auto-dismiss Claude Code's channel prompt?
+config; edit or delete it there to change your mind.`, wn = `One-time setup — where should the channel's web server bind?
+Binding the HOST interface puts the session's whole web surface on your network,
+UNAUTHENTICATED — the iPad paint page (\`aiui paint url\` prints its URL), but also prompt
+injection, /debug, and every sidecar. That's the simple, single-port way to use the iPad —
+on a network that is yours alone (a home LAN), not on café Wi-Fi. LOOPBACK keeps everything
+this-machine-only; reaching it from an iPad is then up to you — tunnel the channel port
+however you like (Tailscale, \`ssh -L\`). Saved as channel.bind in your user config;
+--aiui-bind wins per launch.`, gn = `One-time setup — auto-dismiss Claude Code's channel prompt?
 aiui loads a custom development channel, so Claude Code shows a one-key acknowledgement
 prompt at every startup. aiui can dismiss it for you: shortly after launch it injects a
 single Enter keystroke into this terminal (a best-effort TIOCSTI ioctl on /dev/tty — it
 literally "types" the Enter for you; on platforms that forbid that, nothing happens and
 you press it yourself). Saying no just means pressing Enter once per launch. Saved as
 claude.enterNudge in your user config.`;
-async function Lt(e, t = J) {
-  var n, r;
-  let o = e;
-  if (((n = o.claude) == null ? void 0 : n.skipPermissions) === void 0) {
-    const i = await t(jt, [
+async function bn(e, t = z) {
+  var o, r, i;
+  let n = e;
+  if (((o = n.claude) == null ? void 0 : o.skipPermissions) === void 0) {
+    const s = await t(mn, [
       { key: "y", label: "yes — skip permissions; nothing asks before acting" },
       { key: "n", label: "no — keep Claude Code's own permission prompts" }
     ]);
-    o = fe(o, "skipPermissions", i === "y");
+    n = je(n, "skipPermissions", s === "y");
   }
-  if (((r = o.claude) == null ? void 0 : r.enterNudge) === void 0) {
-    const i = await t(Mt, [
+  if (((r = n.claude) == null ? void 0 : r.enterNudge) === void 0) {
+    const s = await t(gn, [
       { key: "y", label: "yes — press Enter for me at startup" },
       { key: "n", label: "no — I'll press it myself each launch" }
     ]);
-    o = fe(o, "enterNudge", i === "y");
+    n = je(n, "enterNudge", s === "y");
   }
-  return o;
+  if (((i = n.channel) == null ? void 0 : i.bind) === void 0) {
+    const s = await t(wn, [
+      { key: "h", label: "host — reachable on my (trusted) network; the iPad just works" },
+      { key: "l", label: "loopback — this machine only; I'll tunnel when I want the iPad" }
+    ]);
+    n = yn(n, s === "h" ? "host" : "loopback");
+  }
+  return n;
 }
-function fe(e, t, o) {
-  const n = A((r) => {
-    r.claude = { ...r.claude, [t]: o };
+function je(e, t, n) {
+  const o = B((r) => {
+    r.claude = { ...r.claude, [t]: n };
   });
-  return y(`wrote claude.${t}: ${o} to ${n}`), { ...e, claude: { ...e.claude, [t]: o } };
+  return y(`wrote claude.${t}: ${n} to ${o}`), { ...e, claude: { ...e.claude, [t]: n } };
 }
-const M = "0.1.0";
-function Q(e) {
-  const t = (process.env.PATH ?? "").split(Ve).filter(Boolean), o = process.platform === "win32" ? (process.env.PATHEXT ?? ".EXE;.CMD;.BAT;.COM").split(";") : [""];
-  for (const n of t)
-    for (const r of o)
+function yn(e, t) {
+  const n = B((o) => {
+    o.channel = { ...o.channel, bind: t };
+  });
+  return y(`wrote channel.bind: ${t} to ${n}`), { ...e, channel: { ...e.channel, bind: t } };
+}
+const vn = "https://api.openai.com/v1/models", kn = 3e3;
+async function Cn(e = {}) {
+  var c;
+  const {
+    verify: t = !0,
+    env: n = process.env,
+    fetchImpl: o = fetch,
+    timeoutMs: r = kn
+  } = e, i = (c = n.OPENAI_API_KEY) == null ? void 0 : c.trim();
+  if (!i)
+    return "missing";
+  if (!t)
+    return "unverified";
+  const s = new AbortController(), a = setTimeout(() => s.abort(), r);
+  try {
+    const d = await o(vn, {
+      headers: { authorization: `Bearer ${i}` },
+      signal: s.signal
+    });
+    return d.ok ? "valid" : d.status === 401 || d.status === 403 ? "invalid" : "unverified";
+  } catch {
+    return "unverified";
+  } finally {
+    clearTimeout(a);
+  }
+}
+function $n(e) {
+  switch (e) {
+    case "valid":
+      return null;
+    case "missing":
+      return {
+        level: "warn",
+        title: "OPENAI_API_KEY is not set — the intent pipeline will run degraded",
+        detail: "Speech transcription and dictation correction are unavailable — the overlay says so when you try to dictate. To enable them, export the key in the shell you run `aiui claude` from:\n  export OPENAI_API_KEY=sk-…\nIt flows through to the channel process, which is where those calls happen. (For offline work, switch the overlay to the mock backends — see the intent-overlay guide.)"
+      };
+    case "invalid":
+      return {
+        level: "warn",
+        title: "OPENAI_API_KEY was rejected by OpenAI (401) — the intent pipeline will run degraded",
+        detail: `The key in your environment isn't valid. The usual cause is a stale shell export shadowing your real key — check what's actually set (this prints only a short prefix, not the whole secret):
+  echo $OPENAI_API_KEY | head -c 12
+and compare that against the start of your real key. Until it's fixed, transcription and correction are unavailable.`
+      };
+    case "unverified":
+      return {
+        level: "note",
+        title: "couldn't verify OPENAI_API_KEY with OpenAI — continuing",
+        detail: "The check didn't complete (offline, a timeout, or a transient OpenAI error), so the key is unverified — not known-bad. Launch continues; if transcription and correction turn out unavailable, an unreachable or invalid key may be why."
+      };
+  }
+}
+function xn(e) {
+  const t = $n(e);
+  t && (t.level === "warn" ? T(t.title, t.detail) : y(t.title, t.detail));
+}
+const ee = "0.3.0";
+function ye(e) {
+  const t = (process.env.PATH ?? "").split(bt).filter(Boolean), n = process.platform === "win32" ? (process.env.PATHEXT ?? ".EXE;.CMD;.BAT;.COM").split(";") : [""];
+  for (const o of t)
+    for (const r of n)
       try {
-        return Ge(c(n, e + r), Je.X_OK), !0;
+        return $t(f(o, e + r), xt.X_OK), !0;
       } catch {
       }
   return !1;
 }
-const Ft = "@habemus-papadum/aiui-claude-channel", Ht = "@habemus-papadum/aiui-claude-plugin", me = "aiui";
-async function Vt(e = []) {
-  var oe, re;
-  const t = je(e), { tag: o, passthrough: n } = t, r = _e(n);
+const Tn = "@habemus-papadum/aiui-claude-channel", Pn = "@habemus-papadum/aiui-claude-plugin", Ue = "aiui";
+async function En(e = []) {
+  var xe, Te, Pe;
+  const t = lt(e), { tag: n, passthrough: o } = t, r = ct(o);
   if (r) {
-    r === "help" ? qt() : console.log(`aiui ${M}`), await Bt(n);
+    r === "help" ? In() : console.log(`aiui ${ee}`), await Dn(o);
     return;
   }
-  let i = R();
-  const a = Jt(n) && !X();
-  if (a && (i = await Lt(i)), !Me())
+  let i = V();
+  const s = On(o) && !ue();
+  s && (i = await bn(i));
+  const a = await Cn({ verify: s });
+  if (s && xn(a), !ut())
     return;
-  const s = $(P(Ht), "marketplace", "plugins"), l = z(Ft), u = [...l.args, "mcp"];
-  o && u.push("--tag", o);
-  const f = {
-    [me]: { command: l.command, args: u }
+  const c = P(L(Pn), "marketplace", "plugins"), d = ge(Tn), p = [...d.args, "mcp"];
+  n && p.push("--tag", n);
+  const h = t.bind ?? ((xe = i.channel) == null ? void 0 : xe.bind) ?? "loopback";
+  p.push("--bind", h);
+  const m = {
+    [Ue]: { command: d.command, args: p }
   };
-  let h = { enabled: !1 };
-  if (Oe(t, i.chrome)) {
-    const L = {
+  let b = { enabled: !1 };
+  if (ot(t, i.chrome)) {
+    const E = {
       ...i.chrome,
       ...t.browserUrl ? { browserUrl: t.browserUrl } : {}
-    }, ne = await Gt(t, L, a);
-    f[gt] = ne.entry, h = ne.info;
-  }
-  const v = { launcher: "aiui claude", chromeDevtools: h };
-  u.push("--launch-info", JSON.stringify(v));
-  const d = JSON.stringify({ mcpServers: f }), ee = [c(s, "aiui"), c(s, "frontend-design")];
-  h.enabled && ee.push(c(s, "session-browser"));
-  const Fe = [
-    ...((oe = i.claude) == null ? void 0 : oe.skipPermissions) ?? !0 ? ["--dangerously-skip-permissions"] : [],
+    }, _ = await Sn(t, E, s);
+    m[Jt] = _.entry, b = _.info;
+  }
+  const w = {
+    launcher: "aiui claude",
+    chromeDevtools: b,
+    openaiKey: a
+  };
+  p.push("--launch-info", JSON.stringify(w));
+  const C = [...t.sidecar], x = [...t.noSidecar];
+  for (const [E, _] of Object.entries(i.sidecars ?? {}))
+    _ === void 0 || C.includes(E) || x.includes(E) || (_ ? C : x).push(E);
+  const N = Ut(process.cwd(), { enable: C, disable: x });
+  N.length > 0 && p.push("--sidecars", JSON.stringify(N));
+  const u = JSON.stringify({ mcpServers: m }), Ce = [f(c, "aiui"), f(c, "frontend-design")];
+  b.enabled && Ce.push(f(c, "session-browser"));
+  const wt = [
+    ...((Te = i.claude) == null ? void 0 : Te.skipPermissions) ?? !0 ? ["--dangerously-skip-permissions"] : [],
     "--mcp-config",
-    d,
-    ...ee.flatMap((L) => ["--plugin-dir", L]),
+    u,
+    ...Ce.flatMap((E) => ["--plugin-dir", E]),
     // Custom channels are a research preview and not on the approved allowlist,
     // so opt this session into loading ours as a development channel.
     "--dangerously-load-development-channels",
-    `server:${me}`
+    `server:${Ue}`
   ];
-  a && (((re = i.claude) == null ? void 0 : re.enterNudge) ?? !0) && _t();
-  const te = await w("claude", [...Fe, ...n], {
+  s && (((Pe = i.claude) == null ? void 0 : Pe.enterNudge) ?? !0) && pn();
+  const $e = await k("claude", [...wt, ...o], {
     stdio: "inherit",
     reject: !1
   });
-  te.exitCode && (process.exitCode = te.exitCode);
+  $e.exitCode && (process.exitCode = $e.exitCode);
 }
-function Me() {
-  return Q("claude") ? !0 : (m(
+function ut() {
+  return ye("claude") ? !0 : (g(
     "`claude` was not found on your PATH",
     "Install Claude Code and make sure the `claude` command is available, then try again."
   ), process.exitCode = 1, !1);
 }
-async function Bt(e) {
-  if (!Me())
+async function Dn(e) {
+  if (!ut())
     return;
-  const t = await w("claude", e, { stdio: "inherit", reject: !1 });
+  const t = await k("claude", e, { stdio: "inherit", reject: !1 });
   t.exitCode && (process.exitCode = t.exitCode);
 }
-function qt() {
+function In() {
   console.log(`aiui claude — launch Claude Code wired with the aiui channel, plugin, and browser MCP
 
 aiui's own flags (everything else forwards to claude verbatim):
@@ -994,167 +1197,773 @@ aiui's own flags (everything else forwards to claude verbatim):
   --aiui-chrome-data-dir <path>  explicit browser user data dir
   --aiui-browser-url <url>       attach to a browser at this DevTools endpoint
                                  (e.g. a tunnel from \`aiui browser --tunnel\`)
+  --aiui-bind <loopback|host>    where the channel's web server binds: loopback
+                                 (this machine only, the default) or host (your
+                                 whole network can reach the session's web
+                                 surface — the iPad paint page included;
+                                 trusted networks only)
+  --aiui-sidecar <name>          host this session sidecar (repeatable);
+                                 \`paint\` (iPad ink) is always on
+  --aiui-no-sidecar <name>       don't host this session sidecar (repeatable)
 
 Durable settings live in config.json (project .aiui-cache/ + user cache) — see the
 Configuration guide. What follows is claude's own --help:
 `);
 }
-async function Gt(e, t, o) {
+async function Sn(e, t, n) {
   if (t.browserUrl)
     return {
-      entry: V(t.browserUrl),
+      entry: te(t.browserUrl),
       info: { enabled: !0, connection: "attach", browserUrl: t.browserUrl }
     };
-  let n = { ...t }, r = E(e, n);
+  let o = { ...t }, r = D(e, o);
   if (r.mode === "attach") {
-    const s = await I(r.userDataDir);
-    if (s)
+    const a = await F(r.userDataDir);
+    if (a)
       return {
-        entry: V(s.browserUrl),
+        entry: te(a.browserUrl),
         info: {
           enabled: !0,
           connection: "attach",
-          browserUrl: s.browserUrl,
+          browserUrl: a.browserUrl,
           userDataDir: r.userDataDir
         }
       };
   }
-  if (!n.executablePath && !n.channel) {
-    const s = await Ie({ mode: n.forTesting ?? "prompt", interactive: o });
-    s && (n = { ...n, executablePath: s }, r = E(e, n));
+  if (!o.executablePath && !o.channel) {
+    const a = await tt({ mode: o.forTesting ?? "prompt", interactive: n });
+    a && (o = { ...o, executablePath: a }, r = D(e, o));
   }
-  T(r.userDataDir, { recursive: !0 }), r.buildExtension && await Z();
-  const i = j();
-  o && Ae(r, i);
-  const a = {
+  W(r.userDataDir, { recursive: !0 }), r.buildExtension && await be();
+  const i = Z();
+  n && it(r, i);
+  const s = {
     userDataDir: r.userDataDir,
     executablePath: r.executablePath,
     channel: r.channel,
     headless: r.headless,
     extensionDir: i
   };
-  if (r.mode === "attach" && o)
+  if (r.mode === "attach" && n)
     try {
-      const s = await $e({
-        binary: Ce(r),
+      const a = await Ve({
+        binary: Fe(r),
         userDataDir: r.userDataDir,
         debugPort: r.debugPort,
         extensionDir: i,
         headless: r.headless
       });
       return {
-        entry: V(s.browserUrl),
+        entry: te(a.browserUrl),
         info: {
           enabled: !0,
           connection: "attach",
-          browserUrl: s.browserUrl,
-          ...a
+          browserUrl: a.browserUrl,
+          ...s
         }
       };
-    } catch (s) {
-      Pe(
+    } catch (a) {
+      T(
         "couldn't start the session browser — falling back to a browser private to the MCP",
-        s instanceof Error ? s.message : String(s)
+        a instanceof Error ? a.message : String(a)
       );
     }
   return {
-    entry: xt(r, i),
-    info: { enabled: !0, connection: "launch", ...a }
+    entry: Qt(r, i),
+    info: { enabled: !0, connection: "launch", ...s }
   };
 }
-function Jt(e) {
+function On(e) {
   return !process.stdin.isTTY || !process.stdout.isTTY ? !1 : !e.some((t) => t === "-p" || t === "--print");
 }
-async function Wt(e, t = {}) {
-  const o = $(process.cwd(), e ?? "aiui-demo");
-  switch (Yt(o)) {
+function jn(e = process.cwd()) {
+  return {
+    project: de(e),
+    user: Y(void 0, { create: !1 }),
+    browser: A(!1)
+  };
+}
+function Un(e, t) {
+  const n = [];
+  return e.userOnly || n.push({ label: "project cache", path: t.project }), e.projectOnly || n.push(
+    e.keepBrowser ? {
+      label: "user cache (keeping Chrome for Testing)",
+      path: t.user,
+      keep: [t.browser]
+    } : { label: "user cache", path: t.user }
+  ), n;
+}
+function An(e) {
+  var o;
+  if (!v(e.path))
+    return [];
+  if (!((o = e.keep) != null && o.length))
+    return [e.path];
+  const t = new Set(e.keep.map((r) => P(r)));
+  let n;
+  try {
+    n = G(e.path);
+  } catch {
+    return [];
+  }
+  return n.map((r) => P(f(e.path, r))).filter((r) => !t.has(r));
+}
+async function Nn(e = {}) {
+  if (e.projectOnly && e.userOnly) {
+    g(
+      "pass at most one of --project-only / --user-only",
+      "with neither, `aiui clean` removes both"
+    ), process.exitCode = 1;
+    return;
+  }
+  const t = process.cwd(), o = Un(e, jn(t)).map((h) => ({ target: h, paths: An(h) })).filter((h) => h.paths.length > 0);
+  if (o.length === 0) {
+    console.log("nothing to clean — no aiui state here or in the user cache.");
+    return;
+  }
+  let r = 0;
+  console.log(`aiui clean will remove:
+`);
+  for (const { target: h, paths: m } of o) {
+    const b = m.reduce((w, C) => w + le(C), 0);
+    r += b, console.log(`  ${ne(b).padStart(9)}  ${h.label}`), console.log(`  ${" ".repeat(9)}  ${l.dim(h.path)}`);
+  }
+  console.log(`
+  ${ne(r).padStart(9)}  total
+`);
+  const i = !e.projectOnly, s = i && !e.keepBrowser, a = [
+    "traces and session-browser logins are cleared",
+    i && "the Claude permission prompt (claude.skipPermissions) returns on next launch",
+    s && "Chrome for Testing re-downloads (~160 MB) on the next `aiui claude`"
+  ].filter((h) => !!h);
+  console.log("This resets aiui toward a fresh install:");
+  for (const h of a)
+    console.log(`  • ${h}`);
+  console.log("");
+  const c = J(t);
+  if (c.length && T(
+    `${c.length} aiui session${c.length === 1 ? "" : "s"} still running`,
+    "stop them first — a live session rewrites its registry entry as it exits, and an open browser can lock files being deleted"
+  ), e.dryRun) {
+    y("dry run — nothing was deleted");
+    return;
+  }
+  if (!e.yes) {
+    if (!process.stdin.isTTY) {
+      g(
+        "refusing to delete without confirmation",
+        "re-run with --yes for a non-interactive clean, or from a terminal"
+      ), process.exitCode = 1;
+      return;
+    }
+    if (await z(
+      "Delete these now?",
+      [
+        { key: "y", label: "yes, delete" },
+        { key: "n", label: "no, cancel" }
+      ],
+      "n"
+    ) !== "y") {
+      console.log("cancelled — nothing was deleted.");
+      return;
+    }
+  }
+  let d = 0, p = 0;
+  for (const { paths: h } of o)
+    for (const m of h) {
+      const b = le(m);
+      try {
+        Tt(m, { recursive: !0, force: !0 }), d += b;
+      } catch (w) {
+        p++, T(
+          `could not remove ${m}`,
+          w instanceof Error ? w.message : String(w)
+        );
+      }
+    }
+  p && T(
+    `${p} path${p === 1 ? "" : "s"} could not be deleted`,
+    "a running browser can lock its files — close the session browser and re-run"
+  ), console.log(`clean complete — freed ~${ne(d)}.`);
+}
+function le(e) {
+  let t;
+  try {
+    t = Pt(e);
+  } catch {
+    return 0;
+  }
+  if (t.isSymbolicLink() || !t.isDirectory())
+    return t.size;
+  let n;
+  try {
+    n = G(e);
+  } catch {
+    return 0;
+  }
+  let o = 0;
+  for (const r of n)
+    o += le(f(e, r));
+  return o;
+}
+function ne(e) {
+  if (e < 1024)
+    return `${e} B`;
+  const t = ["KB", "MB", "GB", "TB"];
+  let n = e / 1024, o = 0;
+  for (; n >= 1024 && o < t.length - 1; )
+    n /= 1024, o++;
+  return `${n.toFixed(1)} ${t[o]}`;
+}
+function j(e = process.cwd()) {
+  const t = he(e);
+  return {
+    paths: t,
+    user: O(t.user) ?? {},
+    project: O(t.project) ?? {}
+  };
+}
+function ve(e) {
+  return Je().map((t) => {
+    const n = Ae(e.user, t), o = Ae(e.project, t), r = o ?? n, i = o !== void 0 ? "project" : n !== void 0 ? "user" : t.field.default !== void 0 ? "default" : "unset";
+    return { ...t, userValue: n, projectValue: o, effective: r, source: i };
+  });
+}
+function Ae(e, t) {
+  var o;
+  return (o = e[t.section.name]) == null ? void 0 : o[t.field.key];
+}
+function ke(e, t) {
+  const n = ve(t).find((o) => o.path === e);
+  return n || (g(
+    `unknown config key: ${e}`,
+    `Known keys:
+  ${Je().map((o) => o.path).join(`
+  `)}`
+  ), process.exitCode = 1), n;
+}
+function _n(e = {}, t = process.cwd()) {
+  const n = j(t), o = ve(n);
+  if (e.json) {
+    console.log(
+      JSON.stringify(
+        {
+          files: {
+            user: { path: n.paths.user, exists: v(n.paths.user) },
+            project: { path: n.paths.project, exists: v(n.paths.project) }
+          },
+          user: n.user,
+          project: n.project,
+          effective: Qe(n.user, n.project)
+        },
+        null,
+        2
+      )
+    );
+    return;
+  }
+  console.log(`user:    ${n.paths.user}${Ne(n.paths.user)}`), console.log(`project: ${n.paths.project}${Ne(n.paths.project)}`);
+  const r = Math.max(...o.map((s) => s.path.length));
+  let i = "";
+  for (const s of o)
+    s.section.name !== i && (i = s.section.name, console.log(`
+${l.bold(i)} ${l.dim(`— ${s.section.summary}`)}`)), console.log(`  ${s.path.padEnd(r + 2)}${dt(s)}`);
+  console.log(
+    l.dim(
+      "\nProject beats user per key; CLI flags beat both. `aiui config` browses the docs interactively."
+    )
+  );
+}
+function Ne(e) {
+  return v(e) ? "" : l.dim(" (not present)");
+}
+function dt(e) {
+  return e.effective !== void 0 ? `${l.cyan($(e.effective))} ${l.dim(`(${e.source})`)}` : l.dim(
+    e.field.default !== void 0 ? `default: ${$(e.field.default)}` : "unset"
+  );
+}
+function Rn(e, t = process.cwd()) {
+  const n = j(t), o = ke(e, n);
+  if (o) {
+    if (o.effective !== void 0) {
+      console.log(String(o.effective));
+      const r = o.source === "project" ? n.paths.project : n.paths.user;
+      console.error(l.dim(`# set in the ${o.source} config: ${r}`));
+      return;
+    }
+    if (o.field.default !== void 0) {
+      console.log(String(o.field.default)), console.error(l.dim(`# built-in default — ${ce(o.field)}`));
+      return;
+    }
+    console.error(
+      l.dim(`# not set in any config file — default: ${ce(o.field)}`)
+    );
+  }
+}
+function Ln(e, t, n = {}, o = process.cwd()) {
+  const r = j(o), i = ke(e, r);
+  if (!i)
+    return;
+  const s = ae(i.field, t);
+  if ("error" in s) {
+    g(`invalid value for ${i.path}: ${t}`, s.error), process.exitCode = 1;
+    return;
+  }
+  ht(r, i, s.value, n.project ? "project" : "user");
+}
+function ht(e, t, n, o) {
+  const r = fe(e.paths[o], (i) => {
+    const s = i;
+    s[t.section.name] = { ...s[t.section.name], [t.field.key]: n };
+  });
+  y(`wrote ${t.path}: ${$(n)} to ${r}`);
+}
+function Mn(e, t = {}, n = process.cwd()) {
+  const o = j(n), r = ke(e, o);
+  r && ft(o, r, t.project ? "project" : "user");
+}
+function ft(e, t, n) {
+  var a;
+  const o = e.paths[n];
+  if (((a = (O(o) ?? {})[t.section.name]) == null ? void 0 : a[t.field.key]) === void 0) {
+    y(`${t.path} is not set in the ${n} config (${o})`);
+    return;
+  }
+  const s = fe(o, (c) => {
+    const d = c, p = { ...d[t.section.name] };
+    delete p[t.field.key], Object.keys(p).length === 0 ? delete d[t.section.name] : d[t.section.name] = p;
+  });
+  y(`removed ${t.path} from ${s}`);
+}
+async function _e(e = process.cwd()) {
+  if (!process.stdin.isTTY || !process.stdout.isTTY) {
+    g(
+      "aiui config tui needs an interactive terminal",
+      "In scripts and non-TTY sessions use `aiui config show` (or `show --json`)."
+    ), process.exitCode = 1;
+    return;
+  }
+  const t = j(e).paths;
+  console.log(l.dim(`user:    ${Le(t.user)}`)), console.log(l.dim(`project: ${Le(t.project)}`));
+  try {
+    for (; ; ) {
+      const n = j(e), o = await Bn(n);
+      if (!o)
+        return;
+      await Vn(n, o);
+    }
+  } catch (n) {
+    if (n instanceof Error && n.name === "ExitPromptError")
+      return;
+    throw n;
+  }
+}
+async function Bn(e) {
+  const t = ve(e), n = Math.max(...t.map((r) => r.path.length)) + 2, o = [];
+  for (const r of M) {
+    o.push(new ie(l.dim(`── ${r.name} — ${r.summary}`)));
+    for (const i of t.filter((s) => s.section.name === r.name))
+      o.push({
+        name: `${i.path.padEnd(n)}${dt(i)}`,
+        value: i,
+        description: Fn(i)
+      });
+  }
+  return o.push(new ie(" ")), o.push({ name: "exit", value: void 0, description: "Leave the config browser." }), K({
+    message: "aiui config",
+    choices: o,
+    pageSize: o.length,
+    loop: !1
+  });
+}
+function Fn(e) {
+  const t = [l.bold(e.field.summary)];
+  return e.field.doc && t.push(Kn(e.field.doc, 76)), t.push(""), e.field.type === "enum" && t.push(`allowed:   ${(e.field.values ?? []).join(" | ")}`), t.push(`default:   ${ce(e.field)}`), t.push(`user:      ${Re(e.userValue)}`), t.push(`project:   ${Re(e.projectValue)}`), t.push(
+    `effective: ${e.effective !== void 0 ? `${$(e.effective)} (from the ${e.source} config)` : "the built-in default"}`
+  ), t.join(`
+`);
+}
+function Re(e) {
+  return e === void 0 ? l.dim("(not set)") : $(e);
+}
+async function Vn(e, t) {
+  const n = [
+    {
+      name: "set in the user config",
+      value: "set-user",
+      description: `${e.paths.user}
+Personal preference — applies to every project.`
+    },
+    {
+      name: "set in the project config",
+      value: "set-project",
+      description: `${e.paths.project}
+This project only; the file may be shared or committed by a team.`
+    }
+  ];
+  t.userValue !== void 0 && n.push({
+    name: `unset in the user config (currently ${$(t.userValue)})`,
+    value: "unset-user"
+  }), t.projectValue !== void 0 && n.push({
+    name: `unset in the project config (currently ${$(t.projectValue)})`,
+    value: "unset-project"
+  }), n.push(new ie()), n.push({ name: "back", value: "back" });
+  const o = await K({
+    message: `${t.path} — ${t.field.summary}`,
+    choices: n
+  });
+  if (o === "back")
+    return;
+  const r = o.endsWith("project") ? "project" : "user";
+  if (o.startsWith("unset")) {
+    ft(e, t, r);
+    return;
+  }
+  const i = await Hn(t);
+  i !== void 0 && ht(e, t, i, r);
+}
+async function Hn(e) {
+  const t = (r) => r === e.effective ? " (current)" : r === e.field.default ? " (default)" : "";
+  if (e.field.type === "boolean")
+    return K({
+      message: `${e.path} =`,
+      choices: [!0, !1].map((r) => ({
+        name: `${r}${l.dim(t(r))}`,
+        value: r
+      }))
+    });
+  if (e.field.type === "enum")
+    return K({
+      message: `${e.path} =`,
+      choices: (e.field.values ?? []).map((r) => ({
+        name: `${r}${l.dim(t(r))}`,
+        value: r
+      }))
+    });
+  const n = await _t({
+    message: `${e.path} = `,
+    default: e.effective !== void 0 ? String(e.effective) : void 0,
+    validate: (r) => {
+      const i = ae(e.field, r);
+      return "error" in i ? i.error : !0;
+    }
+  }), o = ae(e.field, n);
+  return "error" in o ? void 0 : o.value;
+}
+function Le(e) {
+  const t = At();
+  return e.startsWith(t) ? `~${e.slice(t.length)}` : e;
+}
+function Kn(e, t) {
+  const n = [];
+  let o = "";
+  for (const r of e.split(/\s+/))
+    o && o.length + 1 + r.length > t ? (n.push(o), o = r) : o = o ? `${o} ${r}` : r;
+  return o && n.push(o), n.join(`
+`);
+}
+const Yn = "vite", oe = "VITE_AIUI_PORT";
+function pt(e, t) {
+  if (t !== void 0) {
+    const n = e.find((o) => o.tag === t);
+    if (!n) {
+      const o = e.length > 0 ? e.map((r) => r.tag).join(", ") : "(none running)";
+      return {
+        error: `no running aiui channel with tag "${t}" — running tags: ${o}`
+      };
+    }
+    return { server: n };
+  }
+  return e.length > 0 ? { select: e } : {};
+}
+async function Wn(e = []) {
+  const t = lt(e), { mcp: n, tag: o, passthrough: r } = t, i = ct(r);
+  if (i) {
+    i === "help" ? Qn() : console.log(`aiui ${ee}`), await Xn(r);
+    return;
+  }
+  const s = n ?? o, a = pt(J(), s);
+  if (a.error) {
+    g("Could not resolve an aiui channel", a.error), process.exitCode = 1;
+    return;
+  }
+  const c = a.select ? await qe(a.select) : a.server;
+  let d;
+  c ? (d = String(c.port), console.error(
+    l.dim(
+      `aiui: connecting vite to channel "${c.tag}" (${c.cwd}) on port ${d} via ${oe}`
+    )
+  )) : console.error(l.dim(`aiui: no running channel found — ${oe} left unset`));
+  const p = mt();
+  if (!p)
+    return;
+  const h = {};
+  d && (h[oe] = d), process.stdout.isTTY && !("FORCE_COLOR" in process.env) && !("NO_COLOR" in process.env) && (h.FORCE_COLOR = "1");
+  const m = k(p.command, [...p.args, ...r], {
+    stdio: ["inherit", "pipe", "inherit"],
+    buffer: !1,
+    reject: !1,
+    env: h
+  });
+  m.stdout && Jn(m.stdout, process.stdout, (w) => {
+    zn(w, t);
+  });
+  const b = await m;
+  b.exitCode && (process.exitCode = b.exitCode);
+}
+const qn = /\x1b\[[0-9;?]*[ -/]*[@-~]/g;
+function Gn(e) {
+  const n = e.replace(qn, "").match(
+    /\bLocal:\s+(https?:\/\/(?:localhost|127\.0\.0\.1|\[::1\])(?::\d+)?\/?\S*)/
+  );
+  return n == null ? void 0 : n[1];
+}
+function Jn(e, t, n) {
+  let o = "", r = !1;
+  e.on("data", (i) => {
+    if (t.write(i), !r) {
+      for (o += i.toString(); ; ) {
+        const s = o.indexOf(`
+`);
+        if (s === -1)
+          break;
+        const a = o.slice(0, s);
+        o = o.slice(s + 1);
+        const c = Gn(a);
+        if (c) {
+          r = !0, o = "", n(c);
+          return;
+        }
+      }
+      o.length > 8192 && (o = o.slice(-8192));
+    }
+  });
+}
+async function zn(e, t) {
+  try {
+    const n = {
+      ...V().chrome,
+      ...t.browserUrl ? { browserUrl: t.browserUrl } : {}
+    }, o = Ct(t, n);
+    if (o.kind === "skip")
+      return;
+    if (o.kind === "hint") {
+      y(
+        `detected a headless environment (${o.reason}) — not opening a browser`,
+        `Assuming the dev server's port is already forwarded, open ${e} in the browser
+on your local machine. (Pass --aiui-browser to open one here anyway.)`
+      );
+      return;
+    }
+    if (n.browserUrl) {
+      await H(n.browserUrl, e), console.error(l.dim(`aiui: opened ${e} in the browser at ${n.browserUrl}`));
+      return;
+    }
+    const r = D(t, n), i = await F(r.userDataDir);
+    i ? (await H(i.browserUrl, e), console.error(l.dim(`aiui: opened ${e} in the session browser`))) : (await st({
+      flags: t,
+      config: n,
+      interactive: !1,
+      startUrl: e
+    }), console.error(l.dim(`aiui: opened ${e} in a new session browser`)));
+  } catch (n) {
+    T(
+      "couldn't open the app in the session browser — the dev server is unaffected",
+      n instanceof Error ? n.message : String(n)
+    );
+  }
+}
+function mt() {
+  try {
+    return ge(Yn);
+  } catch {
+    g(
+      "Vite is not available",
+      "`vite` should be installed as a dependency of aiui — try reinstalling."
+    ), process.exitCode = 1;
+    return;
+  }
+}
+async function Xn(e) {
+  const t = mt();
+  if (!t)
+    return;
+  const n = await k(t.command, [...t.args, ...e], {
+    stdio: "inherit",
+    reject: !1
+  });
+  n.exitCode && (process.exitCode = n.exitCode);
+}
+function Qn() {
+  console.log(`aiui vite — launch Vite connected to the running aiui channel
+
+aiui's own flags (everything else forwards to vite verbatim):
+  --aiui-mcp <tag>               connect to the channel server with this tag
+  --aiui-tag <tag>               accepted alias for --aiui-mcp
+  --aiui-browser                 open the app in the session browser even when
+                                 the environment looks headless (CI, SSH, no display)
+  --aiui-no-browser              never open a browser for this run
+  --aiui-chrome-profile <name>   browser profile at .aiui-cache/chrome/<name>
+  --aiui-chrome-data-dir <path>  explicit browser user data dir
+
+The chosen channel's port is exported as VITE_AIUI_PORT; the aiuiDevOverlay()
+Vite plugin picks it up there and wires the intent tool to it. When Vite prints
+its Local: URL, aiui opens it in the shared session browser (the one \`aiui
+claude\` and \`aiui open\` use); in headless environments it prints the URL to
+open on your own machine instead. What follows is vite's own --help:
+`);
+}
+const re = "/__aiui/debug", Me = 4747;
+function Zn() {
+  let e = R(Ge(import.meta.url));
+  for (let t = 0; t < 5; t++) {
+    const n = f(e, "package.json");
+    if (v(n))
+      try {
+        if (JSON.parse(U(n, "utf8")).name === "@habemus-papadum/aiui")
+          return e;
+      } catch {
+      }
+    e = R(e);
+  }
+}
+async function eo(e = {}) {
+  var d;
+  const t = pt(J(), e.mcp);
+  if (t.error) {
+    g("Could not resolve an aiui channel", t.error), process.exitCode = 1;
+    return;
+  }
+  const n = t.select ? await qe(t.select) : t.server;
+  if (!n) {
+    console.log("No running aiui channel to debug — start one with `aiui claude`."), process.exitCode = 1;
+    return;
+  }
+  const o = Zn();
+  if (!o) {
+    g("Could not locate the aiui package root to serve the viewer from"), process.exitCode = 1;
+    return;
+  }
+  const r = {
+    name: "aiui:debug-home",
+    configureServer(p) {
+      p.middlewares.use((h, m, b) => {
+        if ((h.url ?? "/").split("?")[0] === "/") {
+          m.statusCode = 302, m.setHeader("location", re), m.end();
+          return;
+        }
+        b();
+      });
+    }
+  }, i = Number(e.port), s = await Lt({
+    root: o,
+    configFile: !1,
+    // `mount: false`: this server hosts the viewer, not an app — nothing to
+    // arm, so the intent tool stays out of it. The plugin still serves the
+    // DEBUG_ROUTE page and seeds the picked channel's port into it.
+    plugins: [r, Rt({ port: n.port, mount: !1 })],
+    server: {
+      port: Number.isInteger(i) && i > 0 ? i : Me,
+      open: e.open === !1 ? !1 : re
+    },
+    logLevel: "warn"
+  });
+  await s.listen();
+  const c = `${(((d = s.resolvedUrls) == null ? void 0 : d.local[0]) ?? `http://localhost:${Me}/`).replace(/\/$/, "")}${re}`;
+  console.log(`${l.cyan("aiui debug")} — the lowering-trace viewer`), console.log(`  viewing  ${l.bold(c)}`), console.log(
+    l.dim(`  channel  "${n.tag}" (${n.cwd}) on port ${n.port}`) + l.dim(" — switch channels from the page's header. Ctrl-C to stop.")
+  );
+}
+async function to(e, t = {}) {
+  const n = P(process.cwd(), e ?? "aiui-demo");
+  switch (no(n)) {
     case "occupied":
-      m(
-        `${o} already exists and isn't an aiui demo`,
+      g(
+        `${n} already exists and isn't an aiui demo`,
         "Pick an empty (or new) directory — the scaffold never overwrites existing content."
       ), process.exitCode = 1;
       return;
     case "existing-demo":
-      y(`existing demo found at ${o} — continuing where it left off`);
+      y(`existing demo found at ${n} — continuing where it left off`);
       break;
     case "new": {
-      const n = Zt();
-      if (!n) {
-        m("the demo template did not ship with this aiui install"), process.exitCode = 1;
+      const o = so();
+      if (!o) {
+        g("the demo template did not ship with this aiui install"), process.exitCode = 1;
         return;
       }
-      zt(n, o), console.log(`scaffolded the demo playground at ${o}`), await Xt(o);
+      ro(o, n), console.log(`scaffolded the demo playground at ${n}`), await io(n);
       break;
     }
   }
-  if (!t.skipInstall && !g(c(o, "node_modules")))
-    if (!Q("npm"))
+  if (!t.skipInstall && !v(f(n, "node_modules")))
+    if (!ye("npm"))
       y("npm not found on PATH — run your package manager's install in the demo yourself");
     else {
       console.log("installing dependencies (one time)…");
-      const n = await w("npm", ["install", "--no-audit", "--no-fund"], {
-        cwd: o,
+      const o = await k("npm", ["install", "--no-audit", "--no-fund"], {
+        cwd: n,
         stdio: "inherit",
         reject: !1
       });
-      if (n.exitCode) {
-        m("npm install failed — fix that, then re-run this command to continue"), process.exitCode = n.exitCode;
+      if (o.exitCode) {
+        g("npm install failed — fix that, then re-run this command to continue"), process.exitCode = o.exitCode;
         return;
       }
     }
-  Qt(o);
+  ao(n);
 }
-function Yt(e) {
-  var o;
-  if (!g(e))
+function no(e) {
+  var n;
+  if (!v(e))
     return "new";
   let t;
   try {
-    t = we(e);
+    t = G(e);
   } catch {
     return "occupied";
   }
   if (t.length === 0)
     return "new";
   try {
-    if (((o = JSON.parse(D(c(e, "package.json"), "utf8")).aiui) == null ? void 0 : o.demo) === !0)
+    if (((n = JSON.parse(U(f(e, "package.json"), "utf8")).aiui) == null ? void 0 : n.demo) === !0)
       return "existing-demo";
   } catch {
   }
   return "occupied";
 }
-function Kt(e) {
+function oo(e) {
   return /^\d+\.\d+\.\d+$/.test(e) ? `^${e}` : "latest";
 }
-function zt(e, t) {
-  T(t, { recursive: !0 }), We(e, t, { recursive: !0 }), g(c(t, "gitignore")) && Ye(c(t, "gitignore"), c(t, ".gitignore"));
-  const o = c(t, "package.json");
-  k(
-    o,
-    D(o, "utf8").replaceAll(
+function ro(e, t) {
+  W(t, { recursive: !0 }), Et(e, t, { recursive: !0 }), v(f(t, "gitignore")) && Dt(f(t, "gitignore"), f(t, ".gitignore"));
+  const n = f(t, "package.json");
+  q(
+    n,
+    U(n, "utf8").replaceAll(
       "__AIUI_VERSION_RANGE__",
-      Kt(M)
+      oo(ee)
     )
   );
 }
-async function Xt(e) {
-  !Q("git") || (await w("git", ["-C", e, "rev-parse", "--is-inside-work-tree"], {
+async function io(e) {
+  !ye("git") || (await k("git", ["-C", e, "rev-parse", "--is-inside-work-tree"], {
     reject: !1
-  })).exitCode === 0 || (await w("git", ["-C", e, "init", "--quiet"], { reject: !1 })).exitCode !== 0 || (await w("git", ["-C", e, "add", "-A"], { reject: !1 }), await w("git", ["-C", e, "commit", "--quiet", "-m", "aiui demo scaffold"], {
+  })).exitCode === 0 || (await k("git", ["-C", e, "init", "--quiet"], { reject: !1 })).exitCode !== 0 || (await k("git", ["-C", e, "add", "-A"], { reject: !1 }), await k("git", ["-C", e, "commit", "--quiet", "-m", "aiui demo scaffold"], {
     reject: !1
   }));
 }
-function Zt() {
-  let e = U(rt(import.meta.url));
+function so() {
+  let e = R(Ge(import.meta.url));
   for (let t = 0; t < 4; t++) {
-    const o = c(e, "templates", "demo");
-    if (g(c(o, "package.json")))
-      return o;
-    e = U(e);
+    const n = f(e, "templates", "demo");
+    if (v(f(n, "package.json")))
+      return n;
+    e = R(e);
   }
 }
-function Qt(e) {
-  const t = Be(process.cwd(), e) || ".", o = t === "aiui-demo" ? "aiui demo" : `aiui demo ${t}`;
+function ao(e) {
+  const t = yt(process.cwd(), e) || ".", n = t === "aiui-demo" ? "aiui demo" : `aiui demo ${t}`;
   console.log(`
 demo ready. Run the loop:
 
@@ -1167,104 +1976,90 @@ then open the app in the session browser (the window you share with the agent):
   npx aiui open http://localhost:5173
 
 Click the ✳ aiui button on the page and type an intent — it lands in the session
-as a prompt. Re-run \`${o}\` anytime to continue this sandbox.`);
+as a prompt. Re-run \`${n}\` anytime to continue this sandbox.`);
 }
-const eo = "@habemus-papadum/aiui-claude-channel";
-async function to(e = []) {
+const co = "@habemus-papadum/aiui-claude-channel";
+async function lo(e = []) {
   let t;
   try {
-    t = z(eo);
+    t = ge(co);
   } catch {
-    m(
+    g(
       "The aiui Claude channel CLI is not available",
       "`@habemus-papadum/aiui-claude-channel` should be installed as a dependency of aiui — try reinstalling."
     ), process.exitCode = 1;
     return;
   }
-  const o = await w(t.command, [...t.args, ...e], {
+  const n = await k(t.command, [...t.args, ...e], {
     stdio: "inherit",
     reject: !1
   });
-  o.exitCode && (process.exitCode = o.exitCode);
+  n.exitCode && (process.exitCode = n.exitCode);
 }
-const oo = "vite", B = "VITE_AIUI_PORT";
-function ro(e, t) {
-  if (t !== void 0) {
-    const o = e.find((n) => n.tag === t);
-    if (!o) {
-      const n = e.length > 0 ? e.map((r) => r.tag).join(", ") : "(none running)";
-      return {
-        error: `no running aiui channel with tag "${t}" — running tags: ${n}`
-      };
-    }
-    return { server: o };
-  }
-  return e.length > 0 ? { select: e } : {};
+function uo() {
+  const e = [];
+  for (const t of Object.values(Nt()))
+    for (const n of t ?? [])
+      n.family === "IPv4" && !n.internal && e.push(n.address);
+  return e;
 }
-async function no(e = []) {
-  const { mcp: t, tag: o, passthrough: n } = je(e), r = _e(n);
-  if (r) {
-    r === "help" ? ao() : console.log(`aiui ${M}`), await io(n);
+async function Be(e, t) {
+  try {
+    const n = await fetch(`http://127.0.0.1:${e}${t}`, {
+      signal: AbortSignal.timeout(1500)
+    });
+    return n.ok ? await n.json() : void 0;
+  } catch {
     return;
   }
-  const i = t ?? o, a = ro(Ze(), i);
-  if (a.error) {
-    m("Could not resolve an aiui channel", a.error), process.exitCode = 1;
+}
+async function ho(e) {
+  const t = await Be(
+    e,
+    "/paint/info"
+  );
+  if (!(t != null && t.ok))
     return;
+  const n = await Be(e, "/health"), o = (n == null ? void 0 : n.host) !== void 0 && n.host !== "127.0.0.1";
+  return {
+    lan: o,
+    urls: o ? uo().map((r) => `http://${r}:${e}/paint/`) : [`http://127.0.0.1:${e}/paint/`],
+    hosts: t.hosts ?? 0,
+    clients: t.clients ?? 0
+  };
+}
+async function fo(e = {}) {
+  const t = J(), n = [];
+  for (const o of t) {
+    const r = await ho(o.port);
+    r && n.push({ cwd: o.cwd, pid: o.pid, port: o.port, ...r });
   }
-  const s = a.select ? await Qe(a.select) : a.server;
-  let l;
-  s ? (l = String(s.port), console.error(
-    b.dim(
-      `aiui: connecting vite to channel "${s.tag}" (${s.cwd}) on port ${l} via ${B}`
-    )
-  )) : console.error(b.dim(`aiui: no running channel found — ${B} left unset`));
-  const u = Le();
-  if (!u)
+  if (e.json) {
+    console.log(JSON.stringify({ targets: n }, null, 2));
     return;
-  const f = await w(u.command, [...u.args, ...n], {
-    stdio: "inherit",
-    reject: !1,
-    ...l ? { env: { [B]: l } } : {}
-  });
-  f.exitCode && (process.exitCode = f.exitCode);
-}
-function Le() {
-  try {
-    return z(oo);
-  } catch {
-    m(
-      "Vite is not available",
-      "`vite` should be installed as a dependency of aiui — try reinstalling."
+  }
+  if (n.length === 0) {
+    console.log("No running channel is hosting the paint surface."), console.log(""), console.log(
+      `It is on by default — start a session with ${l.cyan("aiui claude")}. If it's off here,`
+    ), console.log(
+      `check for ${l.cyan("sidecars.paint false")} in config or a --aiui-no-sidecar flag.`
     ), process.exitCode = 1;
     return;
   }
+  for (const o of n) {
+    console.log(""), console.log(`${l.bold(o.cwd)} ${l.dim(`(channel :${o.port})`)}`);
+    for (const i of o.urls.length ? o.urls : ["(no LAN address found)"])
+      console.log(`  ${l.cyan(i)}`);
+    const r = o.lan ? "open the URL on the iPad (same Wi-Fi)" : "loopback-only — the iPad needs a tunnel to this port (Tailscale, ssh -L), or relaunch with --aiui-bind host";
+    console.log(
+      l.dim(`  ${o.hosts} browser host(s), ${o.clients} viewer(s) — ${r}`)
+    );
+  }
+  console.log("");
 }
-async function io(e) {
-  const t = Le();
-  if (!t)
-    return;
-  const o = await w(t.command, [...t.args, ...e], {
-    stdio: "inherit",
-    reject: !1
-  });
-  o.exitCode && (process.exitCode = o.exitCode);
-}
-function ao() {
-  console.log(`aiui vite — launch Vite connected to the running aiui channel
-
-aiui's own flags (everything else forwards to vite verbatim):
-  --aiui-mcp <tag>   connect to the channel server with this tag
-  --aiui-tag <tag>   accepted alias for --aiui-mcp
-
-The chosen channel's port is exported as VITE_AIUI_PORT; the aiuiDevOverlay()
-Vite plugin picks it up there and wires the intent tool to it. What follows is
-vite's own --help:
-`);
-}
-function so() {
-  const e = new He();
-  return e.name("aiui").description("ai ui frontends — thin launchers for Claude, Vite, and the channel CLI").version(M).enablePositionalOptions(), e.command("claude").description("launch Claude (extra args are forwarded, e.g. `aiui claude --resume`)").allowUnknownOption().allowExcessArguments().helpOption(!1).argument("[args...]", "arguments forwarded to claude").action((t) => Vt(t)), e.command("vite").description("launch Vite (extra args are forwarded, e.g. `aiui vite dev`)").allowUnknownOption().allowExcessArguments().helpOption(!1).argument("[args...]", "arguments forwarded to vite").action((t) => no(t)), e.command("chrome").description("manage the agent's browser: install | update | status | extension").argument("<action>", "install | update | status | extension").action((t) => St([t])), e.command("browser").description(
+function po() {
+  const e = new gt();
+  e.name("aiui").description("ai ui frontends — thin launchers for Claude, Vite, and the channel CLI").version(ee).enablePositionalOptions(), e.command("claude").description("launch Claude (extra args are forwarded, e.g. `aiui claude --resume`)").allowUnknownOption().allowExcessArguments().helpOption(!1).argument("[args...]", "arguments forwarded to claude").action((o) => En(o)), e.command("vite").description("launch Vite (extra args are forwarded, e.g. `aiui vite dev`)").allowUnknownOption().allowExcessArguments().helpOption(!1).argument("[args...]", "arguments forwarded to vite").action((o) => Wn(o)), e.command("debug").description("open the lowering-trace viewer for a running channel (switchable in-page)").option("--mcp <tag>", "target a channel by registry tag (skips the selector)").option("--port <port>", "UI port for the viewer's dev server (default 4747)").option("--no-open", "don't open the browser").action((o) => eo(o)), e.command("chrome").description("manage the agent's browser: install | update | status | extension").argument("<action>", "install | update | status | extension").action((o) => cn([o])), e.command("browser").description(
     "start (or find) the shared session browser; --tunnel does the whole remote-dev local half"
   ).option(
     "--profile <name>",
@@ -1272,9 +2067,13 @@ function so() {
   ).option("--data-dir <path>", "explicit Chrome user data dir").option("--port <port>", "fixed local DevTools debug port (default: OS-assigned)").option("--headless", "launch with no UI").option("--open <url>", "also open this URL in it").option(
     "--tunnel <[user@]host>",
     "reverse-tunnel the debug port to this host (Ctrl-C closes it)"
-  ).option("--remote-port <port>", "fixed port on the tunnel's remote side (default: 9222)").action((t) => $t(t)), e.command("demo").description("scaffold a runnable demo playground (safe to re-run; default dir: aiui-demo)").argument("[dir]", "target directory (default: aiui-demo)").option("--skip-install", "scaffold only — don't run npm install").action((t, o) => Wt(t, o)), e.command("open").description("open a URL in the session browser, e.g. `aiui open http://localhost:5173`").argument("<url>", "the URL to open").option("--profile <name>", "named profile under .aiui-cache/chrome/").option("--data-dir <path>", "explicit Chrome user data dir").action((t, o) => It(t, o)), e.command("mcp").description("run a channel command (forwards to aiui-claude-channel), e.g. `aiui mcp quick`").allowUnknownOption().allowExcessArguments().helpOption(!1).argument("[args...]", "arguments forwarded to the aiui-claude-channel CLI").action((t) => to(t)), e;
+  ).option("--remote-port <port>", "fixed port on the tunnel's remote side (default: 9222)").action((o) => en(o)), e.command("demo").description("scaffold a runnable demo playground (safe to re-run; default dir: aiui-demo)").argument("[dir]", "target directory (default: aiui-demo)").option("--skip-install", "scaffold only — don't run npm install").action((o, r) => to(o, r)), e.command("clean").description(
+    "reset aiui state (project + user cache, incl. Chrome for Testing) for a clean-slate demo"
+  ).option("--project-only", "only this repo's .aiui-cache/").option("--user-only", "only the user cache (~/.cache/aiui)").option("--keep-browser", "keep Chrome for Testing (skip the ~160 MB re-download)").option("-n, --dry-run", "print what would be deleted, then stop").option("-y, --yes", "delete without the confirmation prompt").action((o) => Nn(o)), e.command("open").description("open a URL in the session browser, e.g. `aiui open http://localhost:5173`").argument("<url>", "the URL to open").option("--profile <name>", "named profile under .aiui-cache/chrome/").option("--data-dir <path>", "explicit Chrome user data dir").action((o, r) => an(o, r));
+  const t = e.command("config").description("inspect and edit aiui's config.json — tui | show | get | set | unset").action(() => _e());
+  return t.command("tui").description("browse every setting interactively: docs, defaults, current values, editing").action(() => _e()), t.command("show").description("every key with its effective value and which file set it").option("--json", "machine-readable: file paths, per-level values, effective merge").action((o) => _n(o)), t.command("get").description("print a key's effective value (provenance goes to stderr)").argument("<key>", 'dotted key, e.g. "chrome.mode"').action((o) => Rn(o)), t.command("set").description("set a key in the user config (or the project's with --project)").argument("<key>", 'dotted key, e.g. "chrome.mode"').argument("<value>", "the new value, validated against the schema").option("--project", "write .aiui-cache/config.json here instead of the user config").action((o, r, i) => Ln(o, r, i)), t.command("unset").description("remove a key from the user config (or the project's with --project)").argument("<key>", 'dotted key, e.g. "claude.skipPermissions"').option("--project", "remove from .aiui-cache/config.json here instead of the user config").action((o, r) => Mn(o, r)), e.command("mcp").description("run a channel command (forwards to aiui-claude-channel), e.g. `aiui mcp quick`").allowUnknownOption().allowExcessArguments().helpOption(!1).argument("[args...]", "arguments forwarded to the aiui-claude-channel CLI").action((o) => lo(o)), e.command("paint").description("the iPad paint stream — url (where the iPad should connect)").command("url").description("print the URL(s) an iPad should open, per running paint-enabled channel").option("--json", "machine-readable targets").action((o) => fo(o)), e;
 }
-so().parseAsync().catch((e) => {
+po().parseAsync().catch((e) => {
   console.error(e instanceof Error ? e.message : e), process.exitCode = 1;
 });
 //# sourceMappingURL=cli.js.map