@habemus-papadum/aiui 0.2.0 → 0.3.0

package/dist/cli.js

@@ -1,381 +1,431 @@
 #!/usr/bin/env node
-import { Command as Be } from "commander";
-import { join as l, dirname as S, resolve as E, delimiter as Ve, relative as Ke } from "node:path";
-import { cacheDir as q } from "@habemus-papadum/aiui-util";
-import { execa as p } from "execa";
-import { mkdirSync as k, rmSync as Ye, writeFileSync as T, readFileSync as P, existsSync as b, realpathSync as we, readdirSync as ge, accessSync as qe, constants as Ge, cpSync as Je, renameSync as We } from "node:fs";
-import { computeSystemExecutablePath as ze, ChromeReleaseChannel as O, Browser as x, detectBrowserPlatform as be, resolveBuildId as ye, getInstalledBrowsers as ve, install as Xe, uninstall as Ze } from "@puppeteer/browsers";
-import { projectCacheDir as xe, listMcpServers as Qe, selectMcpServer as et } from "@habemus-papadum/aiui-claude-channel";
-import { createInterface as tt } from "node:readline/promises";
-import g from "chalk";
-import { createRequire as ot } from "node:module";
-import { spawn as rt } from "node:child_process";
-import { fileURLToPath as nt } from "node:url";
-const Ce = "DevToolsActivePort", ae = 2e4;
-async function I(e) {
-  const t = it(e);
-  if (t !== void 0 && await at(t))
-    return { browserUrl: `http://127.0.0.1:${t}`, port: t };
-}
-function it(e) {
-  try {
-    const [t] = P(l(e, Ce), "utf8").split(`
-`), o = Number(t);
-    return Number.isInteger(o) && o > 0 ? o : void 0;
-  } catch {
-    return;
+import { Command as gt } from "commander";
+import { join as f, dirname as R, resolve as P, delimiter as bt, relative as yt } from "node:path";
+import { CHROME_CHANNELS as vt, cacheDir as Y, packageRoot as L, runningFromSource as kt, isCi as ue, discoverSessionBrowser as F, openInSessionBrowser as H, sessionBrowserBinary as Fe, launchSessionBrowser as Ve, decideBrowserAction as Ct } from "@habemus-papadum/aiui-util";
+import { execa as k } from "execa";
+import { readFileSync as U, mkdirSync as W, writeFileSync as q, existsSync as v, realpathSync as He, readdirSync as G, accessSync as $t, constants as xt, rmSync as Tt, lstatSync as Pt, cpSync as Et, renameSync as Dt } from "node:fs";
+import { detectBrowserPlatform as Ke, resolveBuildId as Ye, Browser as I, getInstalledBrowsers as We, install as It, uninstall as St } from "@puppeteer/browsers";
+import { projectCacheDir as de, listMcpServers as J, selectMcpServer as qe } from "@habemus-papadum/aiui-claude-channel";
+import { createInterface as Ot } from "node:readline/promises";
+import l from "chalk";
+import { spawn as jt } from "node:child_process";
+import { r as Ut } from "./sidecars-BKlhUA0V.js";
+import { homedir as At, networkInterfaces as Nt } from "node:os";
+import { Separator as ie, select as K, input as _t } from "@inquirer/prompts";
+import { fileURLToPath as Ge } from "node:url";
+import { aiuiDevOverlay as Rt } from "@habemus-papadum/aiui-dev-overlay/vite";
+import { createServer as Lt } from "vite";
+const Mt = ["prompt", "auto", "off"], Bt = ["attach", "launch"], se = ["loopback", "host"], M = [
+  {
+    name: "claude",
+    summary: "how `aiui claude` launches Claude Code",
+    fields: [
+      {
+        key: "skipPermissions",
+        type: "boolean",
+        default: !0,
+        defaultText: "true (unset: the first interactive launch asks, then persists the answer)",
+        summary: "Launch Claude Code with --dangerously-skip-permissions.",
+        doc: "A personal preference with real consequences (docs/guide/warning): every agent action — shell commands, file writes, network, the browser — runs without asking first. aiui works fine either way. The first interactive launch asks and persists the answer at the user level; when unset, non-interactive sessions fall back to true."
+      },
+      {
+        key: "enterNudge",
+        type: "boolean",
+        default: !0,
+        defaultText: "true (unset: the first interactive launch asks, then persists the answer)",
+        summary: "Auto-dismiss Claude Code's development-channel acknowledgement prompt.",
+        doc: "aiui loads a custom development channel, so Claude Code shows a one-key acknowledgement at every startup; this injects a single Enter keystroke into the terminal to dismiss it (best-effort TIOCSTI on /dev/tty — platforms that forbid it harmlessly do nothing). Saying no just means pressing Enter yourself each launch."
+      }
+    ]
+  },
+  {
+    name: "channel",
+    summary: "the channel server's web backend",
+    fields: [
+      {
+        key: "bind",
+        type: "enum",
+        values: se,
+        default: "loopback",
+        defaultText: '"loopback" (unset: the first interactive launch asks, then persists the answer)',
+        summary: "Which interface the channel web server binds: loopback, or host (LAN).",
+        doc: '"host" (0.0.0.0) makes the session\'s whole web surface — the iPad paint page, but also prompt injection, /debug, and every sidecar — reachable by anyone on your network, UNAUTHENTICATED. That is the trusted-LAN posture (docs/guide/warning): right on a network that is yours alone, wrong on shared Wi-Fi. "loopback" keeps everything this-machine-only; reaching the paint page from an iPad is then up to you — tunnel the channel port however you like (Tailscale, `ssh -L`). The first interactive launch asks and persists the answer at the user level. Per-launch flag: --aiui-bind.'
+      }
+    ]
+  },
+  {
+    name: "sidecars",
+    summary: "which session sidecars `aiui claude` asks the channel to host",
+    fields: [
+      {
+        key: "paint",
+        type: "boolean",
+        default: !0,
+        summary: "Host the iPad paint sidecar (on the channel's own port).",
+        doc: "The iPad paint stream (docs/guide/paint-stream) rides the channel's one port — no extra process, no extra listener — so it is on by default; false turns it off. Whether an iPad can actually reach it is channel.bind's call (host, or a tunnel you own). Per-launch flags win: --aiui-sidecar paint / --aiui-no-sidecar paint. `aiui paint url` prints the URL to open on the iPad."
+      }
+    ]
+  },
+  {
+    name: "chrome",
+    summary: "the agent's browser and the Chrome DevTools MCP",
+    fields: [
+      {
+        key: "enabled",
+        type: "boolean",
+        default: !0,
+        summary: "Attach the Chrome DevTools MCP.",
+        doc: "false turns it off everywhere; true restates the default and does NOT override the CI default-off — only the --aiui-chrome flag forces it on under CI."
+      },
+      {
+        key: "mode",
+        type: "enum",
+        values: Bt,
+        default: "attach",
+        summary: "How the MCP reaches a browser: shared session browser, or its own.",
+        doc: `"attach" shares a user-visible session browser: an already-running one is discovered by profile, or an interactive launch starts one eagerly. "launch" is the hands-off mode: chrome-devtools-mcp launches its own private browser lazily, on the agent's first browser tool call.`
+      },
+      {
+        key: "browserUrl",
+        type: "string",
+        defaultText: "unset (manage a browser locally)",
+        summary: "Attach to this DevTools endpoint instead of managing a browser at all.",
+        doc: 'The remote-development key (docs/guide/remote): the browser runs on another machine (started there with `aiui browser`) and its debug port is tunneled over. Setting it implies mode: "attach" and makes every local-browser setting (profile, executablePath, channel, forTesting…) irrelevant. Per-launch flag: --aiui-browser-url.',
+        validate: (e) => Ft(String(e)) ? void 0 : 'expected an http(s) URL like "http://127.0.0.1:9222"'
+      },
+      {
+        key: "debugPort",
+        type: "number",
+        default: 0,
+        defaultText: "0 (an OS-assigned free port)",
+        summary: "Fixed DevTools debug port for session browsers aiui launches.",
+        doc: "Pin it (e.g. 9222) when something external must find the port — an ssh tunnel, a VS Code attach-to-Chrome launch config. 0 means an OS-assigned free port.",
+        validate: (e) => Number.isInteger(e) && e >= 0 && e <= 65535 ? void 0 : "expected 0..65535"
+      },
+      {
+        key: "profile",
+        type: "string",
+        default: "default",
+        summary: "Named profile under .aiui-cache/chrome/.",
+        doc: "Per-launch flag: --aiui-chrome-profile."
+      },
+      {
+        key: "dataDir",
+        type: "string",
+        defaultText: "unset (derived from chrome.profile)",
+        summary: "Explicit Chrome user data dir; takes precedence over chrome.profile.",
+        doc: "Per-launch flag: --aiui-chrome-data-dir."
+      },
+      {
+        key: "executablePath",
+        type: "string",
+        defaultText: "unset (managed Chrome for Testing when installed, else installed Chrome)",
+        summary: "Chrome binary to launch — e.g. a Chrome for Testing install.",
+        doc: "Chrome for Testing still honors --load-extension, so the aiui DevTools panel can auto-load. Mutually exclusive with chrome.channel."
+      },
+      {
+        key: "channel",
+        type: "enum",
+        values: vt,
+        defaultText: 'unset ("stable" when launching an installed Chrome)',
+        summary: "Installed Chrome release channel to launch.",
+        doc: "Mutually exclusive with chrome.executablePath."
+      },
+      {
+        key: "forTesting",
+        type: "enum",
+        values: Mt,
+        default: "prompt",
+        summary: "How `aiui claude` manages the recommended Chrome for Testing install.",
+        doc: '"prompt" asks before installing or updating it — interactive sessions only, never under CI; "auto" installs/updates without asking; "off" never checks. Prompt answers ("automatically", "never ask again") persist here at the user level. Skipped entirely when executablePath or channel picks a browser explicitly.'
+      },
+      {
+        key: "headless",
+        type: "boolean",
+        default: !1,
+        summary: "Launch Chrome with no UI."
+      },
+      {
+        key: "buildExtension",
+        type: "boolean",
+        default: !0,
+        summary: "Rebuild the aiui-devtools-extension whenever a browser starts in a dev checkout.",
+        doc: "~0.3s of tsc so the auto-loaded DevTools panel is never stale. Only relevant in a dev checkout of pdum_aiui."
+      }
+    ]
   }
+];
+function Je() {
+  return M.flatMap(
+    (e) => e.fields.map((t) => ({ section: e, field: t, path: `${e.name}.${t.key}` }))
+  );
 }
-async function at(e) {
-  try {
-    return (await fetch(`http://127.0.0.1:${e}/json/version`, {
-      signal: AbortSignal.timeout(1e3)
-    })).ok;
-  } catch {
-    return !1;
-  }
+function ze(e) {
+  return e.type === "enum" ? "string" : e.type;
 }
-function Ee(e) {
-  return e.executablePath ? e.executablePath : ze({
-    browser: x.CHROME,
-    channel: st[e.channel ?? "stable"]
-  });
+function Xe(e, t) {
+  var n;
+  return e.type === "enum" && !(e.values ?? []).includes(String(t)) ? `expected one of: ${(e.values ?? []).join(", ")}` : (n = e.validate) == null ? void 0 : n.call(e, t);
 }
-const st = {
-  stable: O.STABLE,
-  beta: O.BETA,
-  dev: O.DEV,
-  canary: O.CANARY
-};
-async function $e(e) {
-  k(e.userDataDir, { recursive: !0 }), Ye(l(e.userDataDir, Ce), { force: !0 });
-  const t = [
-    `--remote-debugging-port=${e.debugPort ?? 0}`,
-    `--user-data-dir=${e.userDataDir}`,
-    "--no-first-run",
-    "--no-default-browser-check"
-  ];
-  e.extensionDir && t.push(`--load-extension=${e.extensionDir}`), e.headless && t.push("--headless"), t.push(e.startUrl ?? "about:blank");
-  const o = p(e.binary, t, {
-    detached: !0,
-    stdio: "ignore",
-    reject: !1,
-    cleanup: !1
-  });
-  o.unref();
-  let n = !1;
-  o.then(() => {
-    n = !0;
-  });
-  const r = Date.now() + ae;
-  for (; Date.now() < r; ) {
-    const i = await I(e.userDataDir);
-    if (i) {
-      try {
-        T(
-          l(e.userDataDir, "aiui-browser.json"),
-          `${JSON.stringify({ pid: o.pid, startedAt: (/* @__PURE__ */ new Date()).toISOString() })}
-`
-        );
-      } catch {
-      }
-      return i;
+function ae(e, t) {
+  let n;
+  switch (ze(e)) {
+    case "boolean": {
+      if (t !== "true" && t !== "false")
+        return { error: "expected true or false" };
+      n = t === "true";
+      break;
     }
-    if (n)
-      throw new Error(
-        "the browser exited before exposing its DevTools endpoint — is another Chrome already running on this profile without a debug port? Close it and retry."
-      );
-    await ct(250);
+    case "number": {
+      if (n = Number(t), t.trim() === "" || Number.isNaN(n))
+        return { error: "expected a number" };
+      break;
+    }
+    default:
+      n = t;
   }
-  throw new Error(
-    `the browser did not expose its DevTools endpoint within ${ae / 1e3}s`
-  );
+  const o = Xe(e, n);
+  return o ? { error: o } : { value: n };
 }
-async function Pe(e, t) {
-  const o = e.replace(/\/+$/, ""), n = await fetch(`${o}/json/new?${encodeURI(t)}`, {
-    method: "PUT",
-    signal: AbortSignal.timeout(3e3)
-  });
-  if (!n.ok)
-    throw new Error(`the browser refused to open the tab (${n.status} ${n.statusText})`);
+function $(e) {
+  return typeof e == "string" ? JSON.stringify(e) : String(e);
 }
-function ct(e) {
-  return new Promise((t) => setTimeout(t, e));
+function ce(e) {
+  return e.defaultText ? e.defaultText : e.default === void 0 ? "unset" : $(e.default);
+}
+function Ft(e) {
+  try {
+    const t = new URL(e);
+    return t.protocol === "http:" || t.protocol === "https:";
+  } catch {
+    return !1;
+  }
 }
-const se = "config.json", ce = ["stable", "beta", "dev", "canary"], le = ["prompt", "auto", "off"], ue = ["attach", "launch"];
-function De(e = process.cwd()) {
+const Ee = "config.json";
+function he(e = process.cwd()) {
   return {
-    user: l(q(void 0, { create: !1 }), se),
-    project: l(xe(e), se)
+    user: f(Y(void 0, { create: !1 }), Ee),
+    project: f(de(e), Ee)
   };
 }
-function N(e = process.cwd()) {
-  const t = De(e);
-  return lt(Y(t.user) ?? {}, Y(t.project) ?? {});
+function V(e = process.cwd()) {
+  const t = he(e);
+  return Qe(O(t.user) ?? {}, O(t.project) ?? {});
 }
-function lt(e, t) {
-  return {
-    claude: { ...e.claude, ...t.claude },
-    chrome: { ...e.chrome, ...t.chrome }
-  };
+function Qe(e, t) {
+  const n = {};
+  for (const o of M)
+    n[o.name] = {
+      ...e[o.name],
+      ...t[o.name]
+    };
+  return n;
 }
-function Y(e) {
+function O(e) {
   let t;
   try {
-    t = P(e, "utf8");
+    t = U(e, "utf8");
   } catch {
     return;
   }
-  let o;
+  let n;
   try {
-    o = JSON.parse(t);
-  } catch (n) {
+    n = JSON.parse(t);
+  } catch (o) {
     throw new Error(
-      `invalid JSON in ${e}: ${n instanceof Error ? n.message : String(n)}`
+      `invalid JSON in ${e}: ${o instanceof Error ? o.message : String(o)}`
     );
   }
-  return ut(o, e);
-}
-function ut(e, t) {
-  const o = H(e, t, "the top level");
-  B(o, ["claude", "chrome"], t, "the top level");
-  const n = {};
-  if (o.claude !== void 0) {
-    const r = H(o.claude, t, '"claude"');
-    B(r, ["skipPermissions", "enterNudge"], t, '"claude"'), n.claude = de({
-      skipPermissions: w(
-        r.skipPermissions,
-        "boolean",
-        t,
-        "claude.skipPermissions"
-      ),
-      enterNudge: w(r.enterNudge, "boolean", t, "claude.enterNudge")
-    });
-  }
-  if (o.chrome !== void 0) {
-    const r = H(o.chrome, t, '"chrome"');
-    B(
-      r,
-      [
-        "enabled",
-        "mode",
-        "browserUrl",
-        "debugPort",
-        "profile",
-        "dataDir",
-        "executablePath",
-        "channel",
-        "forTesting",
-        "headless",
-        "buildExtension"
-      ],
+  return Vt(n, e);
+}
+function Vt(e, t) {
+  const n = De(e, t, "the top level");
+  Ie(
+    n,
+    M.map((r) => r.name),
+    t,
+    "the top level"
+  );
+  const o = {};
+  for (const r of M) {
+    if (n[r.name] === void 0)
+      continue;
+    const i = De(n[r.name], t, `"${r.name}"`);
+    Ie(
+      i,
+      r.fields.map((a) => a.key),
       t,
-      '"chrome"'
+      `"${r.name}"`
     );
-    const i = w(r.channel, "string", t, "chrome.channel");
-    if (i !== void 0 && !ce.includes(i))
-      throw new Error(
-        `invalid chrome.channel "${i}" in ${t} — expected one of: ${ce.join(", ")}`
-      );
-    const a = w(r.forTesting, "string", t, "chrome.forTesting");
-    if (a !== void 0 && !le.includes(a))
-      throw new Error(
-        `invalid chrome.forTesting "${a}" in ${t} — expected one of: ${le.join(", ")}`
-      );
-    const s = w(r.mode, "string", t, "chrome.mode");
-    if (s !== void 0 && !ue.includes(s))
-      throw new Error(
-        `invalid chrome.mode "${s}" in ${t} — expected one of: ${ue.join(", ")}`
-      );
-    const c = w(r.browserUrl, "string", t, "chrome.browserUrl");
-    if (c !== void 0 && !dt(c))
-      throw new Error(
-        `invalid chrome.browserUrl "${c}" in ${t} — expected an http(s) URL like "http://127.0.0.1:9222"`
-      );
-    const u = w(r.debugPort, "number", t, "chrome.debugPort");
-    if (u !== void 0 && !(Number.isInteger(u) && u >= 0 && u <= 65535))
-      throw new Error(`invalid chrome.debugPort ${u} in ${t} — expected 0..65535`);
-    n.chrome = de({
-      enabled: w(r.enabled, "boolean", t, "chrome.enabled"),
-      mode: s,
-      browserUrl: c,
-      debugPort: u,
-      profile: w(r.profile, "string", t, "chrome.profile"),
-      dataDir: w(r.dataDir, "string", t, "chrome.dataDir"),
-      executablePath: w(r.executablePath, "string", t, "chrome.executablePath"),
-      channel: i,
-      forTesting: a,
-      headless: w(r.headless, "boolean", t, "chrome.headless"),
-      buildExtension: w(r.buildExtension, "boolean", t, "chrome.buildExtension")
-    });
-  }
-  return n;
-}
-function dt(e) {
-  try {
-    const t = new URL(e);
-    return t.protocol === "http:" || t.protocol === "https:";
-  } catch {
-    return !1;
+    const s = {};
+    for (const a of r.fields) {
+      const c = i[a.key];
+      if (c === void 0)
+        continue;
+      const d = `${r.name}.${a.key}`, p = ze(a);
+      if (typeof c !== p)
+        throw new Error(`expected a ${p} for ${d} in ${t}`);
+      const h = Xe(a, c);
+      if (h)
+        throw new Error(
+          `invalid ${d} ${$(c)} in ${t} — ${h}`
+        );
+      s[a.key] = c;
+    }
+    o[r.name] = s;
   }
+  return o;
 }
-function U(e) {
-  const t = De().user, o = Y(t) ?? {};
-  return e(o), k(S(t), { recursive: !0 }), T(t, `${JSON.stringify(o, null, 2)}
-`), t;
+function B(e) {
+  return fe(he().user, e);
 }
-function de(e) {
-  return Object.fromEntries(Object.entries(e).filter(([, t]) => t !== void 0));
+function fe(e, t) {
+  const n = O(e) ?? {};
+  return t(n), W(R(e), { recursive: !0 }), q(e, `${JSON.stringify(n, null, 2)}
+`), e;
 }
-function H(e, t, o) {
+function De(e, t, n) {
   if (typeof e != "object" || e === null || Array.isArray(e))
-    throw new Error(`expected an object at ${o} of ${t}`);
+    throw new Error(`expected an object at ${n} of ${t}`);
   return e;
 }
-function B(e, t, o, n) {
+function Ie(e, t, n, o) {
   for (const r of Object.keys(e))
     if (!t.includes(r))
       throw new Error(
-        `unknown key "${r}" at ${n} of ${o} — known keys: ${t.join(", ")}`
+        `unknown key "${r}" at ${o} of ${n} — known keys: ${t.join(", ")}`
       );
 }
-function w(e, t, o, n) {
-  if (e !== void 0) {
-    if (typeof e !== t)
-      throw new Error(`expected a ${t} for ${n} in ${o}`);
-    return e;
-  }
-}
-async function G(e, t, o) {
-  const n = tt({ input: process.stdin, output: process.stderr });
+async function z(e, t, n) {
+  const o = Ot({ input: process.stdin, output: process.stderr });
   try {
     const r = t.map(
-      (i) => `  ${g.bold(`[${i.key === o ? i.key.toUpperCase() : i.key}]`)} ${i.label}`
+      (i) => `  ${l.bold(`[${i.key === n ? i.key.toUpperCase() : i.key}]`)} ${i.label}`
     ).join(`
 `);
     for (; ; ) {
-      const a = (await n.question(`${g.cyan(e)}
+      const s = (await o.question(`${l.cyan(e)}
 ${r}
 > `)).trim().toLowerCase();
-      if (!a) {
-        if (o !== void 0)
-          return o;
+      if (!s) {
+        if (n !== void 0)
+          return n;
         continue;
       }
-      const s = t.find((c) => c.key === a) ?? t.find((c) => c.label.toLowerCase().startsWith(a));
-      if (s)
-        return s.key;
+      const a = t.find((c) => c.key === s) ?? t.find((c) => c.label.toLowerCase().startsWith(s));
+      if (a)
+        return a.key;
     }
   } finally {
-    n.close();
+    o.close();
   }
 }
-function m(e, t) {
-  console.error(`${g.bgRed.white.bold(" ERROR ")} ${g.red.bold(e)}`), t && console.error(g.dim(t));
+function g(e, t) {
+  console.error(`${l.bgRed.white.bold(" ERROR ")} ${l.red.bold(e)}`), t && console.error(l.dim(t));
 }
-function _(e, t) {
-  console.error(`${g.bgYellow.black.bold(" WARN ")} ${g.yellow.bold(e)}`), t && console.error(g.dim(t));
+function T(e, t) {
+  console.error(`${l.bgYellow.black.bold(" WARN ")} ${l.yellow.bold(e)}`), t && console.error(l.dim(t));
 }
-function v(e, t) {
-  console.error(`${g.bgCyan.black.bold(" NOTE ")} ${g.cyan(e)}`), t && console.error(g.dim(t));
+function y(e, t) {
+  console.error(`${l.bgCyan.black.bold(" NOTE ")} ${l.cyan(e)}`), t && console.error(l.dim(t));
 }
-const ke = 1440 * 60 * 1e3, ht = 4e3;
+const Ze = 1440 * 60 * 1e3, Ht = 4e3;
 function A(e = !0) {
-  return q("chrome", { create: e });
+  return Y("chrome", { create: e });
 }
-const Te = "update-state.json";
-function R() {
+const et = "update-state.json";
+function X() {
   try {
-    return JSON.parse(P(l(A(!1), Te), "utf8"));
+    return JSON.parse(U(f(A(!1), et), "utf8"));
   } catch {
     return {};
   }
 }
-function j(e) {
+function Q(e) {
   const t = A();
-  k(t, { recursive: !0 }), T(l(t, Te), `${JSON.stringify({ ...R(), ...e })}
+  W(t, { recursive: !0 }), q(f(t, et), `${JSON.stringify({ ...X(), ...e })}
 `);
 }
-function J(e, t) {
-  const o = e.split(".").map(Number), n = t.split(".").map(Number);
-  for (let r = 0; r < Math.max(o.length, n.length); r++) {
-    const i = (o[r] ?? 0) - (n[r] ?? 0);
+function pe(e, t) {
+  const n = e.split(".").map(Number), o = t.split(".").map(Number);
+  for (let r = 0; r < Math.max(n.length, o.length); r++) {
+    const i = (n[r] ?? 0) - (o[r] ?? 0);
     if (i)
       return i < 0 ? -1 : 1;
   }
   return 0;
 }
-async function W() {
+async function me() {
   const e = A(!1);
-  if (!b(e))
+  if (!v(e))
     return;
-  const n = (await ve({ cacheDir: e })).filter((r) => r.browser === x.CHROME).sort((r, i) => J(r.buildId, i.buildId)).at(-1);
-  return n && { buildId: n.buildId, executablePath: n.executablePath };
+  const o = (await We({ cacheDir: e })).filter((r) => r.browser === I.CHROME).sort((r, i) => pe(r.buildId, i.buildId)).at(-1);
+  return o && { buildId: o.buildId, executablePath: o.executablePath };
 }
-async function z(e = {}) {
-  const { maxAgeMs: t = ke, timeoutMs: o = ht, now: n = Date.now() } = e, r = R();
-  if (r.latestBuildId && r.checkedAt && n - r.checkedAt < t)
+async function we(e = {}) {
+  const { maxAgeMs: t = Ze, timeoutMs: n = Ht, now: o = Date.now() } = e, r = X();
+  if (r.latestBuildId && r.checkedAt && o - r.checkedAt < t)
     return r.latestBuildId;
-  const i = be();
+  const i = Ke();
   if (i)
     try {
-      const a = await wt(
-        ye(x.CHROME, i, "stable"),
-        o
+      const s = await qt(
+        Ye(I.CHROME, i, "stable"),
+        n
       );
-      return j({ checkedAt: n, latestBuildId: a }), a;
+      return Q({ checkedAt: o, latestBuildId: s }), s;
     } catch {
       return r.latestBuildId;
     }
 }
-async function C(e) {
-  const t = A(), o = await Xe({
-    browser: x.CHROME,
+async function S(e) {
+  const t = A(), n = await It({
+    browser: I.CHROME,
     buildId: e,
     cacheDir: t,
     downloadProgressCallback: "default"
-  }), n = (await ve({ cacheDir: t })).filter(
-    (r) => r.browser === x.CHROME && r.buildId !== e
+  }), o = (await We({ cacheDir: t })).filter(
+    (r) => r.browser === I.CHROME && r.buildId !== e
   );
-  for (const r of n)
-    await Ze({ browser: x.CHROME, buildId: r.buildId, cacheDir: t });
-  return { buildId: e, executablePath: o.executablePath };
+  for (const r of o)
+    await St({ browser: I.CHROME, buildId: r.buildId, cacheDir: t });
+  return { buildId: e, executablePath: n.executablePath };
 }
-async function ft(e) {
-  const t = be();
+async function Kt(e) {
+  const t = Ke();
   if (!t)
     throw new Error("could not detect a supported platform for Chrome for Testing");
-  const o = await ye(x.CHROME, t, "stable");
-  j({ checkedAt: Date.now(), latestBuildId: o });
-  const n = await W();
-  if (n && J(n.buildId, o) >= 0)
-    return e(`Chrome for Testing ${n.buildId} is up to date`), { ...n, outcome: "current" };
+  const n = await Ye(I.CHROME, t, "stable");
+  Q({ checkedAt: Date.now(), latestBuildId: n });
+  const o = await me();
+  if (o && pe(o.buildId, n) >= 0)
+    return e(`Chrome for Testing ${o.buildId} is up to date`), { ...o, outcome: "current" };
   e(
-    n ? `updating Chrome for Testing ${n.buildId} → ${o}…` : `installing Chrome for Testing ${o}…`
+    o ? `updating Chrome for Testing ${o.buildId} → ${n}…` : `installing Chrome for Testing ${n}…`
   );
-  const r = await C(o);
-  return e(`Chrome for Testing ${o} installed at ${r.executablePath}`), { ...r, outcome: n ? "updated" : "installed" };
+  const r = await S(n);
+  return e(`Chrome for Testing ${n} installed at ${r.executablePath}`), { ...r, outcome: o ? "updated" : "installed" };
 }
-async function Ie(e) {
-  const { mode: t, interactive: o, now: n = Date.now() } = e, r = await W();
-  if (t === "off" || !o)
+async function tt(e) {
+  const { mode: t, interactive: n, now: o = Date.now() } = e, r = await me();
+  if (t === "off" || !n)
     return r == null ? void 0 : r.executablePath;
   if (!r)
-    return mt(t, n);
-  const i = await z({ now: n });
-  return !i || J(i, r.buildId) <= 0 ? r.executablePath : pt(t, r, i);
+    return Yt(t, o);
+  const i = await we({ now: o });
+  return !i || pe(i, r.buildId) <= 0 ? r.executablePath : Wt(t, r, i);
 }
-async function mt(e, t) {
-  const o = await z({ now: t });
-  if (!o)
+async function Yt(e, t) {
+  const n = await we({ now: t });
+  if (!n)
     return;
   if (e === "auto")
-    return v(`installing Chrome for Testing ${o} (chrome.forTesting: "auto")…`), (await C(o)).executablePath;
-  const n = R();
-  if (n.installDeclinedAt && t - n.installDeclinedAt < ke)
+    return y(`installing Chrome for Testing ${n} (chrome.forTesting: "auto")…`), (await S(n)).executablePath;
+  const o = X();
+  if (o.installDeclinedAt && t - o.installDeclinedAt < Ze)
     return;
-  const r = await G(
-    `Chrome for Testing isn't installed. It's the recommended browser for aiui — version-pinned, separate from your real Chrome, and it auto-loads the aiui DevTools panel (branded Chrome can't). Download ${o} (~160 MB) to ${A(!1)}?`,
+  const r = await z(
+    `Chrome for Testing isn't installed. It's the recommended browser for aiui — version-pinned, separate from your real Chrome, and it auto-loads the aiui DevTools panel (branded Chrome can't). Download ${n} (~160 MB) to ${A(!1)}?`,
     [
       { key: "y", label: "yes, install it" },
       { key: "n", label: "not now — use the regular Chrome (asks again tomorrow)" },
@@ -384,177 +434,163 @@ async function mt(e, t) {
     "y"
   );
   if (r === "y")
-    return (await C(o)).executablePath;
+    return (await S(n)).executablePath;
   if (r === "never") {
-    const i = U((a) => {
-      a.chrome = { ...a.chrome, forTesting: "off" };
+    const i = B((s) => {
+      s.chrome = { ...s.chrome, forTesting: "off" };
     });
-    v(`wrote chrome.forTesting: "off" to ${i}`);
+    y(`wrote chrome.forTesting: "off" to ${i}`);
   } else
-    j({ installDeclinedAt: t });
+    Q({ installDeclinedAt: t });
 }
-async function pt(e, t, o) {
+async function Wt(e, t, n) {
   if (e === "auto")
-    return v(
-      `updating Chrome for Testing ${t.buildId} → ${o} (chrome.forTesting: "auto")…`
-    ), (await C(o)).executablePath;
-  if (R().skippedBuildId === o)
+    return y(
+      `updating Chrome for Testing ${t.buildId} → ${n} (chrome.forTesting: "auto")…`
+    ), (await S(n)).executablePath;
+  if (X().skippedBuildId === n)
     return t.executablePath;
-  switch (await G(
-    `Your Chrome for Testing (${t.buildId}) is out of date — latest stable is ${o}. Update?`,
+  switch (await z(
+    `Your Chrome for Testing (${t.buildId}) is out of date — latest stable is ${n}. Update?`,
     [
       { key: "y", label: "yes, just this once" },
       { key: "a", label: 'automatically, now and from here on (writes chrome.forTesting: "auto")' },
       {
         key: "s",
-        label: `skip ${o} — keep ${t.buildId}, don't ask again for this version`
+        label: `skip ${n} — keep ${t.buildId}, don't ask again for this version`
       },
       { key: "never", label: 'never ask again (writes chrome.forTesting: "off")' }
     ],
     "y"
   )) {
     case "y":
-      return (await C(o)).executablePath;
+      return (await S(n)).executablePath;
     case "a": {
-      const r = U((i) => {
+      const r = B((i) => {
         i.chrome = { ...i.chrome, forTesting: "auto" };
       });
-      return v(`wrote chrome.forTesting: "auto" to ${r}`), (await C(o)).executablePath;
+      return y(`wrote chrome.forTesting: "auto" to ${r}`), (await S(n)).executablePath;
     }
     case "never": {
-      const r = U((i) => {
+      const r = B((i) => {
         i.chrome = { ...i.chrome, forTesting: "off" };
       });
-      return v(`wrote chrome.forTesting: "off" to ${r}`), t.executablePath;
+      return y(`wrote chrome.forTesting: "off" to ${r}`), t.executablePath;
     }
     default:
-      return j({ skippedBuildId: o }), t.executablePath;
+      return Q({ skippedBuildId: n }), t.executablePath;
   }
 }
-async function wt(e, t) {
-  let o;
+async function qt(e, t) {
+  let n;
   try {
     return await Promise.race([
       e,
-      new Promise((n, r) => {
-        o = setTimeout(() => r(new Error(`timed out after ${t}ms`)), t);
+      new Promise((o, r) => {
+        n = setTimeout(() => r(new Error(`timed out after ${t}ms`)), t);
       })
     ]);
   } finally {
-    clearTimeout(o);
+    clearTimeout(n);
   }
 }
-const gt = ot(import.meta.url);
-function D(e) {
-  const t = e.split("/");
-  for (const o of gt.resolve.paths(e) ?? []) {
-    const n = l(o, ...t, "package.json");
-    if (b(n))
-      return S(n);
-  }
-  throw new Error(`could not locate the "${e}" package (is it installed?)`);
-}
-function X(e, t) {
-  const o = D(e), n = JSON.parse(P(l(o, "package.json"), "utf8")), r = typeof n.bin == "string" ? n.bin : bt(n.bin);
+function ge(e, t) {
+  const n = L(e), o = JSON.parse(U(f(n, "package.json"), "utf8")), r = typeof o.bin == "string" ? o.bin : Gt(o.bin);
   if (!r)
     throw new Error(
       `package ${e} declares no bin`
     );
-  if (b(l(o, "src"))) {
+  if (kt(n)) {
     const i = r.replace(/^\.?\/?dist\//, "src/").replace(/\.js$/, ".ts");
-    return { command: process.execPath, args: ["--import", "tsx", E(o, i)] };
+    return { command: process.execPath, args: ["--import", "tsx", P(n, i)] };
   }
-  return { command: process.execPath, args: [E(o, r)] };
+  return { command: process.execPath, args: [P(n, r)] };
 }
-function bt(e) {
+function Gt(e) {
   return e ? Object.values(e)[0] : void 0;
 }
-const yt = "chrome-devtools", Ae = "@habemus-papadum/aiui-devtools-extension", vt = "default", xt = /^[A-Za-z0-9][A-Za-z0-9._-]*$/;
-function Oe(e, t = {}, o = process.env) {
-  return e.noChrome ? !1 : e.chrome ? !0 : t.enabled === !1 ? !1 : !Z(o);
-}
-function Z(e = process.env) {
-  const t = e.CI;
-  return t !== void 0 && t !== "" && t !== "0" && t.toLowerCase() !== "false";
+const Jt = "chrome-devtools", nt = "@habemus-papadum/aiui-devtools-extension", zt = "default", Xt = /^[A-Za-z0-9][A-Za-z0-9._-]*$/;
+function ot(e, t = {}, n = process.env) {
+  return e.noChrome ? !1 : e.chrome ? !0 : t.enabled === !1 ? !1 : !ue(n);
 }
-function $(e, t = {}, o = process.cwd()) {
+function D(e, t = {}, n = process.cwd()) {
   if (t.executablePath && t.channel)
     throw new Error(
       "config sets both chrome.executablePath and chrome.channel — they pick the browser two different ways; keep exactly one"
     );
-  const n = e.chromeProfile !== void 0 || e.chromeDataDir !== void 0, r = e.chromeDataDir ?? (n ? void 0 : t.dataDir), i = e.chromeProfile ?? (n ? void 0 : t.profile);
+  const o = e.chromeProfile !== void 0 || e.chromeDataDir !== void 0, r = e.chromeDataDir ?? (o ? void 0 : t.dataDir), i = e.chromeProfile ?? (o ? void 0 : t.profile);
   return {
-    userDataDir: Se({ dataDir: r, profile: i }, o),
+    userDataDir: rt({ dataDir: r, profile: i }, n),
     // A configured endpoint means the browser is managed elsewhere (usually
     // another machine) — that's always attach, whatever `mode` says.
     mode: t.browserUrl ? "attach" : t.mode ?? "attach",
     browserUrl: t.browserUrl,
     debugPort: t.debugPort ?? 0,
-    executablePath: t.executablePath && E(o, t.executablePath),
+    executablePath: t.executablePath && P(n, t.executablePath),
     channel: t.channel,
     headless: t.headless ?? !1,
     buildExtension: t.buildExtension ?? !0
   };
 }
-function Se(e, t = process.cwd()) {
+function rt(e, t = process.cwd()) {
   if (e.dataDir)
-    return E(t, e.dataDir);
-  const o = e.profile ?? vt;
-  if (!xt.test(o))
+    return P(t, e.dataDir);
+  const n = e.profile ?? zt;
+  if (!Xt.test(n))
     throw new Error(
-      `invalid chrome profile name "${o}" — use letters, digits, ".", "_", "-" (or --aiui-chrome-data-dir for an arbitrary path)`
+      `invalid chrome profile name "${n}" — use letters, digits, ".", "_", "-" (or --aiui-chrome-data-dir for an arbitrary path)`
     );
-  return l(xe(t), "chrome", o);
+  return f(de(t), "chrome", n);
 }
-function M() {
+function Z() {
   let e;
   try {
-    e = we(l(D(Ae), "extension"));
+    e = He(f(L(nt), "extension"));
   } catch {
     return;
   }
-  return b(l(e, "js")) ? e : void 0;
+  return v(f(e, "js")) ? e : void 0;
 }
-async function Q() {
+async function be() {
   let e, t;
   try {
-    e = we(D(Ae)), t = l(D("typescript"), "bin", "tsc");
+    e = He(L(nt)), t = f(L("typescript"), "bin", "tsc");
   } catch {
     return;
   }
-  if (!b(l(e, "src")))
+  if (!v(f(e, "src")))
     return;
-  const o = await p(process.execPath, [t, "-p", l(e, "tsconfig.json")], {
+  const n = await k(process.execPath, [t, "-p", f(e, "tsconfig.json")], {
     cwd: e,
     reject: !1,
     all: !0
   });
-  if (o.exitCode) {
-    _(
+  if (n.exitCode) {
+    T(
       "aiui-devtools-extension failed to compile — the DevTools panel will be stale or missing",
-      o.all || o.message
+      n.all || n.message
     );
     return;
   }
-  const n = l(e, "build-debug-ui.mjs");
-  if (!b(n))
+  const o = f(e, "build-debug-ui.mjs");
+  if (!v(o))
     return;
-  const r = await p(process.execPath, [n], {
+  const r = await k(process.execPath, [o], {
     cwd: e,
     reject: !1,
     all: !0
   });
-  r.exitCode && _(
+  r.exitCode && T(
     "aiui-devtools-extension debug-ui bundle failed — the Intent pane will be degraded",
     r.all || r.message
   );
 }
-function Ue(e, t) {
+function it(e, t) {
   if (!t || e.executablePath)
     return;
-  const o = l(e.userDataDir, "aiui-devtools-extension-hint");
-  if (!b(o)) {
-    v(
+  const n = f(e.userDataDir, "aiui-devtools-extension-hint");
+  if (!v(n)) {
+    y(
       "the aiui DevTools panel can't auto-load into regular Chrome (≥ 137 ignores --load-extension)",
       `Load it once in the launched Chrome — chrome://extensions → Developer mode → Load unpacked →
 ${t}
@@ -562,101 +598,120 @@ ${t}
 which auto-loads it. This note won't repeat for this profile.`
     );
     try {
-      T(o, `${(/* @__PURE__ */ new Date()).toISOString()}
+      q(n, `${(/* @__PURE__ */ new Date()).toISOString()}
 `);
     } catch {
     }
   }
 }
-function V(e) {
+function te(e) {
   return {
     command: "npx",
     args: ["-y", "chrome-devtools-mcp@latest", "--browser-url", e]
   };
 }
-function Ct(e, t) {
-  const o = [
+function Qt(e, t) {
+  const n = [
     "-y",
     "chrome-devtools-mcp@latest",
     "--userDataDir",
     e.userDataDir,
     "--ignoreDefaultChromeArg=--disable-extensions"
   ];
-  return e.executablePath && o.push("--executablePath", e.executablePath), e.channel && o.push("--channel", e.channel), e.headless && o.push("--headless"), t && o.push(`--chromeArg=--load-extension=${t}`), { command: "npx", args: o };
-}
-const Et = 9222;
-async function $t(e) {
-  const o = { ...N().chrome };
-  if (o.browserUrl) {
-    v(
-      `config pins chrome.browserUrl to ${o.browserUrl} — the browser is managed elsewhere`,
+  return e.executablePath && n.push("--executablePath", e.executablePath), e.channel && n.push("--channel", e.channel), e.headless && n.push("--headless"), t && n.push(`--chromeArg=--load-extension=${t}`), { command: "npx", args: n };
+}
+const Zt = 9222;
+async function en(e) {
+  const n = { ...V().chrome };
+  if (n.browserUrl) {
+    y(
+      `config pins chrome.browserUrl to ${n.browserUrl} — the browser is managed elsewhere`,
       "Run `aiui browser` on the machine that should host it (and drop browserUrl there)."
     );
     return;
   }
-  let n;
+  let o, r;
   try {
-    n = Ne(e.remotePort, "--remote-port") ?? Et;
+    o = Se(e.remotePort, "--remote-port") ?? Zt, r = Se(e.port, "--port");
   } catch (c) {
-    m(c instanceof Error ? c.message : String(c)), process.exitCode = 1;
+    g(c instanceof Error ? c.message : String(c)), process.exitCode = 1;
     return;
   }
-  let r = o;
   const i = {
     chromeProfile: e.tunnel ? void 0 : e.profile,
-    chromeDataDir: e.dataDir ?? (e.tunnel ? Pt(e.tunnel, e.profile) : void 0)
+    chromeDataDir: e.dataDir ?? (e.tunnel ? tn(e.tunnel, e.profile) : void 0)
   };
-  let a = he($(i, r), e), s = await I(a.userDataDir);
-  if (s)
-    fe("session browser already running", a, s), e.open && (await Pe(s.browserUrl, e.open), console.log(`opened ${e.open}`));
+  let s = D(i, n);
+  r !== void 0 && (s = { ...s, debugPort: r });
+  let a = await F(s.userDataDir);
+  if (a)
+    Oe("session browser already running", s, a), e.open && (await H(a.browserUrl, e.open), console.log(`opened ${e.open}`));
   else {
-    const c = !!process.stdin.isTTY && !!process.stdout.isTTY && !Z();
-    if (!r.executablePath && !r.channel) {
-      const h = await Ie({ mode: r.forTesting ?? "prompt", interactive: c });
-      h && (r = { ...r, executablePath: h }, a = he($(i, r), e));
-    }
-    a.buildExtension && await Q();
-    const u = M();
-    c && Ue(a, u);
-    let f;
-    try {
-      f = Ee(a);
-    } catch (h) {
-      m(
-        "no browser to launch",
-        `${h instanceof Error ? h.message : String(h)}
-Install Chrome for Testing with \`aiui chrome install\`, or set chrome.executablePath.`
-      ), process.exitCode = 1;
-      return;
-    }
+    const c = !!process.stdin.isTTY && !!process.stdout.isTTY && !ue();
     try {
-      s = await $e({
-        binary: f,
-        userDataDir: a.userDataDir,
-        debugPort: a.debugPort,
-        extensionDir: u,
-        headless: a.headless || e.headless,
+      const d = await st({
+        flags: i,
+        config: n,
+        interactive: c,
+        debugPort: r,
+        headless: e.headless,
         startUrl: e.open
       });
-    } catch (h) {
-      m(
+      a = d.session, s = d.settings;
+    } catch (d) {
+      g(
         "the session browser failed to start",
-        h instanceof Error ? h.message : String(h)
+        d instanceof Error ? d.message : String(d)
       ), process.exitCode = 1;
       return;
     }
-    fe("session browser started", a, s);
+    Oe("session browser started", s, a);
+  }
+  e.tunnel ? await rn(e.tunnel, o, a.port) : sn(a, o);
+}
+async function st(e) {
+  let t = e.config ?? {};
+  const n = e.flags ?? {}, o = () => {
+    const c = D(n, t);
+    return e.debugPort === void 0 ? c : { ...c, debugPort: e.debugPort };
+  };
+  let r = o();
+  if (!t.executablePath && !t.channel) {
+    const c = await tt({
+      mode: t.forTesting ?? "prompt",
+      interactive: e.interactive
+    });
+    c && (t = { ...t, executablePath: c }, r = o());
+  }
+  r.buildExtension && await be();
+  const i = Z();
+  e.interactive && it(r, i);
+  let s;
+  try {
+    s = Fe(r);
+  } catch (c) {
+    throw new Error(
+      `${c instanceof Error ? c.message : String(c)}
+Install Chrome for Testing with \`aiui chrome install\`, or set chrome.executablePath.`
+    );
   }
-  e.tunnel ? await Tt(e.tunnel, n, s.port) : It(s, n);
+  return { session: await Ve({
+    binary: s,
+    userDataDir: r.userDataDir,
+    debugPort: r.debugPort,
+    extensionDir: i,
+    headless: r.headless || e.headless,
+    startUrl: e.startUrl
+  }), settings: r };
 }
-function Pt(e, t) {
-  const o = t ?? Dt(e);
-  return l(q("browser-profiles", { create: !1 }), o);
+function tn(e, t) {
+  const n = t ?? nn(e);
+  return f(Y("browser-profiles", { create: !1 }), n);
 }
-function Dt(e) {
+function nn(e) {
   return (e.includes("@") ? e.slice(e.indexOf("@") + 1) : e).replace(/[^A-Za-z0-9._-]/g, "-") || "remote";
 }
-function kt(e, t, o) {
+function on(e, t, n) {
   return [
     // No remote command — the connection exists only to carry the forward...
     "-N",
@@ -665,114 +720,110 @@ function kt(e, t, o) {
     "-o",
     "ExitOnForwardFailure=yes",
     "-R",
-    `${t}:localhost:${o}`,
+    `${t}:localhost:${n}`,
     e
   ];
 }
-function _e(e) {
+function at(e) {
   return `aiui claude --aiui-browser-url http://127.0.0.1:${e}`;
 }
-async function Tt(e, t, o) {
+async function rn(e, t, n) {
   console.log(
     `
-tunneling ${e}:${t} → localhost:${o} — on ${e}, run:
+tunneling ${e}:${t} → localhost:${n} — on ${e}, run:
 
-  ${_e(t)}
+  ${at(t)}
 
 (Ctrl-C closes the tunnel; the browser stays running.)`
   );
-  const n = await p("ssh", kt(e, t, o), {
+  const o = await k("ssh", on(e, t, n), {
     stdio: "inherit",
     reject: !1
   });
-  n.failed && !n.isTerminated && (m(
-    `the ssh tunnel to ${e} exited (code ${n.exitCode})`,
+  o.failed && !o.isTerminated && (g(
+    `the ssh tunnel to ${e} exited (code ${o.exitCode})`,
     "A taken remote port exits immediately (ExitOnForwardFailure) — try another --remote-port. The browser is still running; rerun `aiui browser --tunnel …` to reconnect."
   ), process.exitCode = 1);
 }
-function Ne(e, t) {
+function Se(e, t) {
   if (e === void 0)
     return;
-  const o = Number(e);
-  if (!(Number.isInteger(o) && o >= 0 && o <= 65535))
+  const n = Number(e);
+  if (!(Number.isInteger(n) && n >= 0 && n <= 65535))
     throw new Error(`invalid ${t} ${e} — expected 0..65535`);
-  return o;
-}
-function he(e, t) {
-  const o = Ne(t.port, "--port");
-  return o === void 0 ? e : { ...e, debugPort: o };
+  return n;
 }
-function fe(e, t, o) {
-  console.log(e), console.log(`  profile:        ${t.userDataDir}`), console.log(`  debug endpoint: ${o.browserUrl}`);
+function Oe(e, t, n) {
+  console.log(e), console.log(`  profile:        ${t.userDataDir}`), console.log(`  debug endpoint: ${n.browserUrl}`);
 }
-function It(e, t) {
+function sn(e, t) {
   console.log(
     `
 An \`aiui claude\` in this profile's project attaches automatically. For a *remote*
 session, rerun with \`--tunnel <[user@]host>\` — or do it by hand:
   ssh -N -o ExitOnForwardFailure=yes -R ${t}:localhost:${e.port} <host>
-then, on the remote: ${_e(t)}`
+then, on the remote: ${at(t)}`
   );
 }
-async function At(e, t) {
-  var i, a;
-  const o = N(), n = $(
+async function an(e, t) {
+  var i, s;
+  const n = V(), o = D(
     { chromeProfile: t.profile, chromeDataDir: t.dataDir },
-    o.chrome ?? {}
-  ), r = ((i = o.chrome) == null ? void 0 : i.browserUrl) ?? ((a = await I(n.userDataDir)) == null ? void 0 : a.browserUrl);
+    n.chrome ?? {}
+  ), r = ((i = n.chrome) == null ? void 0 : i.browserUrl) ?? ((s = await F(o.userDataDir)) == null ? void 0 : s.browserUrl);
   if (!r) {
-    m(
+    g(
       "no session browser is running for this profile",
-      `Start one with \`aiui browser\` (profile: ${n.userDataDir}).`
+      `Start one with \`aiui browser\` (profile: ${o.userDataDir}).`
     ), process.exitCode = 1;
     return;
   }
   try {
-    await Pe(r, e), console.log(`opened ${e}`);
-  } catch (s) {
-    m(`couldn't open ${e}`, s instanceof Error ? s.message : String(s)), process.exitCode = 1;
+    await H(r, e), console.log(`opened ${e}`);
+  } catch (a) {
+    g(`couldn't open ${e}`, a instanceof Error ? a.message : String(a)), process.exitCode = 1;
   }
 }
-async function Ot(e) {
+async function cn(e) {
   const [t] = e;
   switch (t) {
     case "install":
     case "update":
-      await ft((o) => console.log(o));
+      await Kt((n) => console.log(n));
       return;
     case "status":
-      await St();
+      await ln();
       return;
     case "extension": {
-      await Q();
-      const o = M();
-      if (!o) {
-        m(
+      await be();
+      const n = Z();
+      if (!n) {
+        g(
           "the aiui-devtools-extension is not available in this install",
           "In a dev checkout, build it first: pnpm --filter @habemus-papadum/aiui-devtools-extension build"
         ), process.exitCode = 1;
         return;
       }
-      console.log(o);
+      console.log(n);
       return;
     }
     default:
-      m(
+      g(
         t ? `unknown aiui chrome action: ${t}` : "aiui chrome needs an action",
         "Usage: aiui chrome <install | update | status | extension>"
       ), process.exitCode = 1;
       return;
   }
 }
-async function St() {
-  const t = N().chrome ?? {}, o = { chrome: !1, noChrome: !1 }, n = await W(), r = await z();
-  if (console.log("Chrome for Testing (managed):"), n) {
-    const y = r === void 0 ? "(latest stable unknown — offline?)" : r === n.buildId ? "(latest stable)" : `(latest stable is ${r} — run \`aiui chrome update\`)`;
-    console.log(`  installed ${n.buildId} ${y}`), console.log(`  ${n.executablePath}`);
+async function ln() {
+  const t = V().chrome ?? {}, n = { chrome: !1, noChrome: !1 }, o = await me(), r = await we();
+  if (console.log("Chrome for Testing (managed):"), o) {
+    const m = r === void 0 ? "(latest stable unknown — offline?)" : r === o.buildId ? "(latest stable)" : `(latest stable is ${r} — run \`aiui chrome update\`)`;
+    console.log(`  installed ${o.buildId} ${m}`), console.log(`  ${o.executablePath}`);
   } else
     console.log("  not installed — `aiui chrome install` (recommended; auto-loads the panel)");
   if (console.log(`  startup checks (chrome.forTesting): ${t.forTesting ?? "prompt"}`), console.log(`
-This directory would launch:`), !Oe(o, t)) {
+This directory would launch:`), !ot(n, t)) {
     console.log("  nothing — the Chrome DevTools MCP is disabled here");
     return;
   }
@@ -781,181 +832,249 @@ This directory would launch:`), !Oe(o, t)) {
     return;
   }
   const i = { ...t };
-  !i.executablePath && !i.channel && n && (i.executablePath = n.executablePath);
-  const a = $({}, i), s = await I(a.userDataDir), c = a.mode === "attach" ? s ? `attach to the running session browser at ${s.browserUrl}` : "attach — a session browser starts with the next interactive launch (or `aiui browser`)" : "launch — chrome-devtools-mcp starts a private browser on the agent's first tool use";
+  !i.executablePath && !i.channel && o && (i.executablePath = o.executablePath);
+  const s = D({}, i), a = await F(s.userDataDir), c = s.mode === "attach" ? a ? `attach to the running session browser at ${a.browserUrl}` : "attach — a session browser starts with the next interactive launch (or `aiui browser`)" : "launch — chrome-devtools-mcp starts a private browser on the agent's first tool use";
   console.log(`  connection: ${c}`);
-  const u = a.executablePath ? a.executablePath === (n == null ? void 0 : n.executablePath) ? `Chrome for Testing ${n.buildId}` : a.executablePath : a.channel ? `installed Chrome (${a.channel} channel)` : "installed Chrome (stable)";
-  console.log(`  browser: ${u}${a.headless ? " — headless" : ""}`), console.log(`  user data dir: ${a.userDataDir}`);
-  const f = l(Se({}, process.cwd()), "..");
-  if (b(f)) {
-    const y = ge(f, { withFileTypes: !0 }).filter((d) => d.isDirectory()).map((d) => d.name);
-    y.length && console.log(`  profiles here: ${y.join(", ")}`);
+  const d = s.executablePath ? s.executablePath === (o == null ? void 0 : o.executablePath) ? `Chrome for Testing ${o.buildId}` : s.executablePath : s.channel ? `installed Chrome (${s.channel} channel)` : "installed Chrome (stable)";
+  console.log(`  browser: ${d}${s.headless ? " — headless" : ""}`), console.log(`  user data dir: ${s.userDataDir}`);
+  const p = f(rt({}, process.cwd()), "..");
+  if (v(p)) {
+    const m = G(p, { withFileTypes: !0 }).filter((b) => b.isDirectory()).map((b) => b.name);
+    m.length && console.log(`  profiles here: ${m.join(", ")}`);
   }
   console.log(`
 aiui DevTools panel:`);
-  const h = M();
+  const h = Z();
   if (!h) {
     console.log("  not available (unbuilt dev checkout? run `aiui chrome extension` for help)");
     return;
   }
-  console.log(`  ${h}`), a.executablePath ? console.log("  auto-loads via --load-extension (honored by Chrome for Testing/Chromium)") : (console.log("  can NOT auto-load into branded Chrome ≥ 137 — load it unpacked once"), console.log(
+  console.log(`  ${h}`), s.executablePath ? console.log("  auto-loads via --load-extension (honored by Chrome for Testing/Chromium)") : (console.log("  can NOT auto-load into branded Chrome ≥ 137 — load it unpacked once"), console.log(
     "  (chrome://extensions → Developer mode → Load unpacked), or `aiui chrome install`"
   ));
 }
-const Ut = "--aiui-";
-function Re(e) {
+const un = "--aiui-";
+function ct(e) {
   if (e.includes("--help") || e.includes("-h"))
     return "help";
   if (e.includes("--version") || e.includes("-v"))
     return "version";
 }
-function je(e) {
-  let t, o, n = !1, r = !1, i, a, s;
-  const c = [];
-  for (let u = 0; u < e.length; u++) {
-    const f = e[u];
-    if (!f.startsWith(Ut)) {
-      c.push(f);
+function lt(e) {
+  let t, n, o = !1, r = !1, i = !1, s = !1, a, c, d;
+  const p = [], h = [];
+  let m;
+  const b = [];
+  for (let w = 0; w < e.length; w++) {
+    const C = e[w];
+    if (!C.startsWith(un)) {
+      b.push(C);
       continue;
     }
-    const h = f.indexOf("="), y = h === -1 ? f : f.slice(0, h);
-    let d = h === -1 ? void 0 : f.slice(h + 1);
-    switch (y) {
+    const x = C.indexOf("="), N = x === -1 ? C : C.slice(0, x);
+    let u = x === -1 ? void 0 : C.slice(x + 1);
+    switch (N) {
       case "--aiui-tag": {
-        if (d === void 0 && (d = e[++u]), !d)
+        if (u === void 0 && (u = e[++w]), !u)
           throw new Error("--aiui-tag requires a non-empty value");
-        t = d;
+        t = u;
         break;
       }
       case "--aiui-mcp": {
-        if (d === void 0 && (d = e[++u]), !d)
+        if (u === void 0 && (u = e[++w]), !u)
           throw new Error("--aiui-mcp requires a non-empty value");
-        o = d;
+        n = u;
         break;
       }
       case "--aiui-chrome": {
-        if (d !== void 0)
+        if (u !== void 0)
           throw new Error("--aiui-chrome takes no value");
-        n = !0;
+        o = !0;
         break;
       }
       case "--aiui-no-chrome": {
-        if (d !== void 0)
+        if (u !== void 0)
           throw new Error("--aiui-no-chrome takes no value");
         r = !0;
         break;
       }
+      case "--aiui-browser": {
+        if (u !== void 0)
+          throw new Error("--aiui-browser takes no value");
+        i = !0;
+        break;
+      }
+      case "--aiui-no-browser": {
+        if (u !== void 0)
+          throw new Error("--aiui-no-browser takes no value");
+        s = !0;
+        break;
+      }
       case "--aiui-chrome-profile": {
-        if (d === void 0 && (d = e[++u]), !d)
+        if (u === void 0 && (u = e[++w]), !u)
           throw new Error("--aiui-chrome-profile requires a non-empty value");
-        i = d;
+        a = u;
         break;
       }
       case "--aiui-chrome-data-dir": {
-        if (d === void 0 && (d = e[++u]), !d)
+        if (u === void 0 && (u = e[++w]), !u)
           throw new Error("--aiui-chrome-data-dir requires a non-empty value");
-        a = d;
+        c = u;
         break;
       }
       case "--aiui-browser-url": {
-        if (d === void 0 && (d = e[++u]), !d)
+        if (u === void 0 && (u = e[++w]), !u)
           throw new Error("--aiui-browser-url requires a non-empty value");
-        s = d;
+        d = u;
+        break;
+      }
+      case "--aiui-sidecar": {
+        if (u === void 0 && (u = e[++w]), !u)
+          throw new Error("--aiui-sidecar requires a non-empty value");
+        p.push(u);
+        break;
+      }
+      case "--aiui-no-sidecar": {
+        if (u === void 0 && (u = e[++w]), !u)
+          throw new Error("--aiui-no-sidecar requires a non-empty value");
+        h.push(u);
+        break;
+      }
+      case "--aiui-bind": {
+        if (u === void 0 && (u = e[++w]), !u || !se.includes(u))
+          throw new Error(`--aiui-bind requires one of: ${se.join(", ")}`);
+        m = u;
         break;
       }
       default:
-        throw new Error(`unknown aiui option: ${y}`);
+        throw new Error(`unknown aiui option: ${N}`);
     }
   }
-  if (n && r)
+  if (o && r)
     throw new Error("--aiui-chrome and --aiui-no-chrome are mutually exclusive");
-  if (i !== void 0 && a !== void 0)
+  if (i && s)
+    throw new Error("--aiui-browser and --aiui-no-browser are mutually exclusive");
+  if (a !== void 0 && c !== void 0)
     throw new Error("--aiui-chrome-profile and --aiui-chrome-data-dir are mutually exclusive");
-  if (s !== void 0 && (i !== void 0 || a !== void 0))
+  if (d !== void 0 && (a !== void 0 || c !== void 0))
     throw new Error(
       "--aiui-browser-url means the browser is managed elsewhere — it can't be combined with --aiui-chrome-profile or --aiui-chrome-data-dir"
     );
-  return { tag: t, mcp: o, chrome: n, noChrome: r, chromeProfile: i, chromeDataDir: a, browserUrl: s, passthrough: c };
+  return {
+    tag: t,
+    mcp: n,
+    chrome: o,
+    noChrome: r,
+    browser: i,
+    noBrowser: s,
+    chromeProfile: a,
+    chromeDataDir: c,
+    browserUrl: d,
+    sidecar: p,
+    noSidecar: h,
+    bind: m,
+    passthrough: b
+  };
 }
-const _t = {
+const dn = {
   darwin: 2147578994,
   linux: 21522
-}, Nt = 'open(my $t,"+<","/dev/tty") or exit 0; my $c="\\r"; ioctl($t,$ARGV[0]+0,$c);', Rt = [250, 750];
-function jt(e = Rt) {
-  const t = _t[process.platform];
+}, hn = 'open(my $t,"+<","/dev/tty") or exit 0; my $c="\\r"; ioctl($t,$ARGV[0]+0,$c);', fn = [250, 750];
+function pn(e = fn) {
+  const t = dn[process.platform];
   if (t !== void 0)
-    for (const o of e)
+    for (const n of e)
       setTimeout(() => {
         try {
-          rt("perl", ["-e", Nt, String(t)], { stdio: "ignore" }).on("error", () => {
+          jt("perl", ["-e", hn, String(t)], { stdio: "ignore" }).on("error", () => {
           });
         } catch {
         }
-      }, o).unref();
+      }, n).unref();
 }
-const Mt = `One-time setup — how should aiui launch Claude Code?
+const mn = `One-time setup — how should aiui launch Claude Code?
 With --dangerously-skip-permissions, every agent action (shell commands, file writes,
 network, the browser) runs without asking you first. Fast, and dangerous. It's a personal
 preference — aiui works fine either way. Saved as claude.skipPermissions in your user
-config; edit or delete it there to change your mind.`, Lt = `One-time setup — auto-dismiss Claude Code's channel prompt?
+config; edit or delete it there to change your mind.`, wn = `One-time setup — where should the channel's web server bind?
+Binding the HOST interface puts the session's whole web surface on your network,
+UNAUTHENTICATED — the iPad paint page (\`aiui paint url\` prints its URL), but also prompt
+injection, /debug, and every sidecar. That's the simple, single-port way to use the iPad —
+on a network that is yours alone (a home LAN), not on café Wi-Fi. LOOPBACK keeps everything
+this-machine-only; reaching it from an iPad is then up to you — tunnel the channel port
+however you like (Tailscale, \`ssh -L\`). Saved as channel.bind in your user config;
+--aiui-bind wins per launch.`, gn = `One-time setup — auto-dismiss Claude Code's channel prompt?
 aiui loads a custom development channel, so Claude Code shows a one-key acknowledgement
 prompt at every startup. aiui can dismiss it for you: shortly after launch it injects a
 single Enter keystroke into this terminal (a best-effort TIOCSTI ioctl on /dev/tty — it
 literally "types" the Enter for you; on platforms that forbid that, nothing happens and
 you press it yourself). Saying no just means pressing Enter once per launch. Saved as
 claude.enterNudge in your user config.`;
-async function Ft(e, t = G) {
-  var n, r;
-  let o = e;
-  if (((n = o.claude) == null ? void 0 : n.skipPermissions) === void 0) {
-    const i = await t(Mt, [
+async function bn(e, t = z) {
+  var o, r, i;
+  let n = e;
+  if (((o = n.claude) == null ? void 0 : o.skipPermissions) === void 0) {
+    const s = await t(mn, [
       { key: "y", label: "yes — skip permissions; nothing asks before acting" },
       { key: "n", label: "no — keep Claude Code's own permission prompts" }
     ]);
-    o = me(o, "skipPermissions", i === "y");
+    n = je(n, "skipPermissions", s === "y");
   }
-  if (((r = o.claude) == null ? void 0 : r.enterNudge) === void 0) {
-    const i = await t(Lt, [
+  if (((r = n.claude) == null ? void 0 : r.enterNudge) === void 0) {
+    const s = await t(gn, [
       { key: "y", label: "yes — press Enter for me at startup" },
       { key: "n", label: "no — I'll press it myself each launch" }
     ]);
-    o = me(o, "enterNudge", i === "y");
+    n = je(n, "enterNudge", s === "y");
   }
-  return o;
+  if (((i = n.channel) == null ? void 0 : i.bind) === void 0) {
+    const s = await t(wn, [
+      { key: "h", label: "host — reachable on my (trusted) network; the iPad just works" },
+      { key: "l", label: "loopback — this machine only; I'll tunnel when I want the iPad" }
+    ]);
+    n = yn(n, s === "h" ? "host" : "loopback");
+  }
+  return n;
+}
+function je(e, t, n) {
+  const o = B((r) => {
+    r.claude = { ...r.claude, [t]: n };
+  });
+  return y(`wrote claude.${t}: ${n} to ${o}`), { ...e, claude: { ...e.claude, [t]: n } };
 }
-function me(e, t, o) {
-  const n = U((r) => {
-    r.claude = { ...r.claude, [t]: o };
+function yn(e, t) {
+  const n = B((o) => {
+    o.channel = { ...o.channel, bind: t };
   });
-  return v(`wrote claude.${t}: ${o} to ${n}`), { ...e, claude: { ...e.claude, [t]: o } };
+  return y(`wrote channel.bind: ${t} to ${n}`), { ...e, channel: { ...e.channel, bind: t } };
 }
-const Ht = "https://api.openai.com/v1/models", Bt = 3e3;
-async function Vt(e = {}) {
+const vn = "https://api.openai.com/v1/models", kn = 3e3;
+async function Cn(e = {}) {
   var c;
   const {
     verify: t = !0,
-    env: o = process.env,
-    fetchImpl: n = fetch,
-    timeoutMs: r = Bt
-  } = e, i = (c = o.OPENAI_API_KEY) == null ? void 0 : c.trim();
+    env: n = process.env,
+    fetchImpl: o = fetch,
+    timeoutMs: r = kn
+  } = e, i = (c = n.OPENAI_API_KEY) == null ? void 0 : c.trim();
   if (!i)
     return "missing";
   if (!t)
     return "unverified";
-  const a = new AbortController(), s = setTimeout(() => a.abort(), r);
+  const s = new AbortController(), a = setTimeout(() => s.abort(), r);
   try {
-    const u = await n(Ht, {
+    const d = await o(vn, {
       headers: { authorization: `Bearer ${i}` },
-      signal: a.signal
+      signal: s.signal
     });
-    return u.ok ? "valid" : u.status === 401 || u.status === 403 ? "invalid" : "unverified";
+    return d.ok ? "valid" : d.status === 401 || d.status === 403 ? "invalid" : "unverified";
   } catch {
     return "unverified";
   } finally {
-    clearTimeout(s);
+    clearTimeout(a);
   }
 }
-function Kt(e) {
+function $n(e) {
   switch (e) {
     case "valid":
       return null;
@@ -963,7 +1082,7 @@ function Kt(e) {
       return {
         level: "warn",
         title: "OPENAI_API_KEY is not set — the intent pipeline will run degraded",
-        detail: "Speech transcription and dictation correction fall back to mock/off mode. To enable them, export the key in the shell you run `aiui claude` from:\n  export OPENAI_API_KEY=sk-…\nIt flows through to the channel process, which is where those calls happen."
+        detail: "Speech transcription and dictation correction are unavailable — the overlay says so when you try to dictate. To enable them, export the key in the shell you run `aiui claude` from:\n  export OPENAI_API_KEY=sk-…\nIt flows through to the channel process, which is where those calls happen. (For offline work, switch the overlay to the mock backends — see the intent-overlay guide.)"
       };
     case "invalid":
       return {
@@ -971,96 +1090,103 @@ function Kt(e) {
         title: "OPENAI_API_KEY was rejected by OpenAI (401) — the intent pipeline will run degraded",
         detail: `The key in your environment isn't valid. The usual cause is a stale shell export shadowing your real key — check what's actually set (this prints only a short prefix, not the whole secret):
   echo $OPENAI_API_KEY | head -c 12
-and compare that against the start of your real key. Until it's fixed, transcription and correction run in mock/off mode.`
+and compare that against the start of your real key. Until it's fixed, transcription and correction are unavailable.`
       };
     case "unverified":
       return {
         level: "note",
         title: "couldn't verify OPENAI_API_KEY with OpenAI — continuing",
-        detail: "The check didn't complete (offline, a timeout, or a transient OpenAI error), so the key is unverified — not known-bad. Launch continues; if the intent pipeline degrades to mock/off, an unreachable or invalid key may be why."
+        detail: "The check didn't complete (offline, a timeout, or a transient OpenAI error), so the key is unverified — not known-bad. Launch continues; if transcription and correction turn out unavailable, an unreachable or invalid key may be why."
       };
   }
 }
-function Yt(e) {
-  const t = Kt(e);
-  t && (t.level === "warn" ? _(t.title, t.detail) : v(t.title, t.detail));
+function xn(e) {
+  const t = $n(e);
+  t && (t.level === "warn" ? T(t.title, t.detail) : y(t.title, t.detail));
 }
-const L = "0.2.0";
-function ee(e) {
-  const t = (process.env.PATH ?? "").split(Ve).filter(Boolean), o = process.platform === "win32" ? (process.env.PATHEXT ?? ".EXE;.CMD;.BAT;.COM").split(";") : [""];
-  for (const n of t)
-    for (const r of o)
+const ee = "0.3.0";
+function ye(e) {
+  const t = (process.env.PATH ?? "").split(bt).filter(Boolean), n = process.platform === "win32" ? (process.env.PATHEXT ?? ".EXE;.CMD;.BAT;.COM").split(";") : [""];
+  for (const o of t)
+    for (const r of n)
       try {
-        return qe(l(n, e + r), Ge.X_OK), !0;
+        return $t(f(o, e + r), xt.X_OK), !0;
       } catch {
       }
   return !1;
 }
-const qt = "@habemus-papadum/aiui-claude-channel", Gt = "@habemus-papadum/aiui-claude-plugin", pe = "aiui";
-async function Jt(e = []) {
-  var re, ne;
-  const t = je(e), { tag: o, passthrough: n } = t, r = Re(n);
+const Tn = "@habemus-papadum/aiui-claude-channel", Pn = "@habemus-papadum/aiui-claude-plugin", Ue = "aiui";
+async function En(e = []) {
+  var xe, Te, Pe;
+  const t = lt(e), { tag: n, passthrough: o } = t, r = ct(o);
   if (r) {
-    r === "help" ? zt() : console.log(`aiui ${L}`), await Wt(n);
+    r === "help" ? In() : console.log(`aiui ${ee}`), await Dn(o);
     return;
   }
-  let i = N();
-  const a = Zt(n) && !Z();
-  a && (i = await Ft(i));
-  const s = await Vt({ verify: a });
-  if (a && Yt(s), !Me())
+  let i = V();
+  const s = On(o) && !ue();
+  s && (i = await bn(i));
+  const a = await Cn({ verify: s });
+  if (s && xn(a), !ut())
     return;
-  const c = E(D(Gt), "marketplace", "plugins"), u = X(qt), f = [...u.args, "mcp"];
-  o && f.push("--tag", o);
-  const h = {
-    [pe]: { command: u.command, args: f }
+  const c = P(L(Pn), "marketplace", "plugins"), d = ge(Tn), p = [...d.args, "mcp"];
+  n && p.push("--tag", n);
+  const h = t.bind ?? ((xe = i.channel) == null ? void 0 : xe.bind) ?? "loopback";
+  p.push("--bind", h);
+  const m = {
+    [Ue]: { command: d.command, args: p }
   };
-  let y = { enabled: !1 };
-  if (Oe(t, i.chrome)) {
-    const F = {
+  let b = { enabled: !1 };
+  if (ot(t, i.chrome)) {
+    const E = {
       ...i.chrome,
       ...t.browserUrl ? { browserUrl: t.browserUrl } : {}
-    }, ie = await Xt(t, F, a);
-    h[yt] = ie.entry, y = ie.info;
+    }, _ = await Sn(t, E, s);
+    m[Jt] = _.entry, b = _.info;
   }
-  const d = {
+  const w = {
     launcher: "aiui claude",
-    chromeDevtools: y,
-    openaiKey: s
+    chromeDevtools: b,
+    openaiKey: a
   };
-  f.push("--launch-info", JSON.stringify(d));
-  const Fe = JSON.stringify({ mcpServers: h }), te = [l(c, "aiui"), l(c, "frontend-design")];
-  y.enabled && te.push(l(c, "session-browser"));
-  const He = [
-    ...((re = i.claude) == null ? void 0 : re.skipPermissions) ?? !0 ? ["--dangerously-skip-permissions"] : [],
+  p.push("--launch-info", JSON.stringify(w));
+  const C = [...t.sidecar], x = [...t.noSidecar];
+  for (const [E, _] of Object.entries(i.sidecars ?? {}))
+    _ === void 0 || C.includes(E) || x.includes(E) || (_ ? C : x).push(E);
+  const N = Ut(process.cwd(), { enable: C, disable: x });
+  N.length > 0 && p.push("--sidecars", JSON.stringify(N));
+  const u = JSON.stringify({ mcpServers: m }), Ce = [f(c, "aiui"), f(c, "frontend-design")];
+  b.enabled && Ce.push(f(c, "session-browser"));
+  const wt = [
+    ...((Te = i.claude) == null ? void 0 : Te.skipPermissions) ?? !0 ? ["--dangerously-skip-permissions"] : [],
     "--mcp-config",
-    Fe,
-    ...te.flatMap((F) => ["--plugin-dir", F]),
+    u,
+    ...Ce.flatMap((E) => ["--plugin-dir", E]),
     // Custom channels are a research preview and not on the approved allowlist,
     // so opt this session into loading ours as a development channel.
     "--dangerously-load-development-channels",
-    `server:${pe}`
+    `server:${Ue}`
   ];
-  a && (((ne = i.claude) == null ? void 0 : ne.enterNudge) ?? !0) && jt();
-  const oe = await p("claude", [...He, ...n], {
+  s && (((Pe = i.claude) == null ? void 0 : Pe.enterNudge) ?? !0) && pn();
+  const $e = await k("claude", [...wt, ...o], {
     stdio: "inherit",
     reject: !1
   });
-  oe.exitCode && (process.exitCode = oe.exitCode);
+  $e.exitCode && (process.exitCode = $e.exitCode);
 }
-function Me() {
-  return ee("claude") ? !0 : (m(
+function ut() {
+  return ye("claude") ? !0 : (g(
     "`claude` was not found on your PATH",
     "Install Claude Code and make sure the `claude` command is available, then try again."
   ), process.exitCode = 1, !1);
 }
-async function Wt(e) {
-  if (!Me())
+async function Dn(e) {
+  if (!ut())
     return;
-  const t = await p("claude", e, { stdio: "inherit", reject: !1 });
+  const t = await k("claude", e, { stdio: "inherit", reject: !1 });
   t.exitCode && (process.exitCode = t.exitCode);
 }
-function zt() {
+function In() {
   console.log(`aiui claude — launch Claude Code wired with the aiui channel, plugin, and browser MCP
 
 aiui's own flags (everything else forwards to claude verbatim):
@@ -1071,167 +1197,773 @@ aiui's own flags (everything else forwards to claude verbatim):
   --aiui-chrome-data-dir <path>  explicit browser user data dir
   --aiui-browser-url <url>       attach to a browser at this DevTools endpoint
                                  (e.g. a tunnel from \`aiui browser --tunnel\`)
+  --aiui-bind <loopback|host>    where the channel's web server binds: loopback
+                                 (this machine only, the default) or host (your
+                                 whole network can reach the session's web
+                                 surface — the iPad paint page included;
+                                 trusted networks only)
+  --aiui-sidecar <name>          host this session sidecar (repeatable);
+                                 \`paint\` (iPad ink) is always on
+  --aiui-no-sidecar <name>       don't host this session sidecar (repeatable)
 
 Durable settings live in config.json (project .aiui-cache/ + user cache) — see the
 Configuration guide. What follows is claude's own --help:
 `);
 }
-async function Xt(e, t, o) {
+async function Sn(e, t, n) {
   if (t.browserUrl)
     return {
-      entry: V(t.browserUrl),
+      entry: te(t.browserUrl),
       info: { enabled: !0, connection: "attach", browserUrl: t.browserUrl }
     };
-  let n = { ...t }, r = $(e, n);
+  let o = { ...t }, r = D(e, o);
   if (r.mode === "attach") {
-    const s = await I(r.userDataDir);
-    if (s)
+    const a = await F(r.userDataDir);
+    if (a)
       return {
-        entry: V(s.browserUrl),
+        entry: te(a.browserUrl),
         info: {
           enabled: !0,
           connection: "attach",
-          browserUrl: s.browserUrl,
+          browserUrl: a.browserUrl,
           userDataDir: r.userDataDir
         }
       };
   }
-  if (!n.executablePath && !n.channel) {
-    const s = await Ie({ mode: n.forTesting ?? "prompt", interactive: o });
-    s && (n = { ...n, executablePath: s }, r = $(e, n));
+  if (!o.executablePath && !o.channel) {
+    const a = await tt({ mode: o.forTesting ?? "prompt", interactive: n });
+    a && (o = { ...o, executablePath: a }, r = D(e, o));
   }
-  k(r.userDataDir, { recursive: !0 }), r.buildExtension && await Q();
-  const i = M();
-  o && Ue(r, i);
-  const a = {
+  W(r.userDataDir, { recursive: !0 }), r.buildExtension && await be();
+  const i = Z();
+  n && it(r, i);
+  const s = {
     userDataDir: r.userDataDir,
     executablePath: r.executablePath,
     channel: r.channel,
     headless: r.headless,
     extensionDir: i
   };
-  if (r.mode === "attach" && o)
+  if (r.mode === "attach" && n)
     try {
-      const s = await $e({
-        binary: Ee(r),
+      const a = await Ve({
+        binary: Fe(r),
         userDataDir: r.userDataDir,
         debugPort: r.debugPort,
         extensionDir: i,
         headless: r.headless
       });
       return {
-        entry: V(s.browserUrl),
+        entry: te(a.browserUrl),
         info: {
           enabled: !0,
           connection: "attach",
-          browserUrl: s.browserUrl,
-          ...a
+          browserUrl: a.browserUrl,
+          ...s
         }
       };
-    } catch (s) {
-      _(
+    } catch (a) {
+      T(
         "couldn't start the session browser — falling back to a browser private to the MCP",
-        s instanceof Error ? s.message : String(s)
+        a instanceof Error ? a.message : String(a)
       );
     }
   return {
-    entry: Ct(r, i),
-    info: { enabled: !0, connection: "launch", ...a }
+    entry: Qt(r, i),
+    info: { enabled: !0, connection: "launch", ...s }
   };
 }
-function Zt(e) {
+function On(e) {
   return !process.stdin.isTTY || !process.stdout.isTTY ? !1 : !e.some((t) => t === "-p" || t === "--print");
 }
-async function Qt(e, t = {}) {
-  const o = E(process.cwd(), e ?? "aiui-demo");
-  switch (eo(o)) {
+function jn(e = process.cwd()) {
+  return {
+    project: de(e),
+    user: Y(void 0, { create: !1 }),
+    browser: A(!1)
+  };
+}
+function Un(e, t) {
+  const n = [];
+  return e.userOnly || n.push({ label: "project cache", path: t.project }), e.projectOnly || n.push(
+    e.keepBrowser ? {
+      label: "user cache (keeping Chrome for Testing)",
+      path: t.user,
+      keep: [t.browser]
+    } : { label: "user cache", path: t.user }
+  ), n;
+}
+function An(e) {
+  var o;
+  if (!v(e.path))
+    return [];
+  if (!((o = e.keep) != null && o.length))
+    return [e.path];
+  const t = new Set(e.keep.map((r) => P(r)));
+  let n;
+  try {
+    n = G(e.path);
+  } catch {
+    return [];
+  }
+  return n.map((r) => P(f(e.path, r))).filter((r) => !t.has(r));
+}
+async function Nn(e = {}) {
+  if (e.projectOnly && e.userOnly) {
+    g(
+      "pass at most one of --project-only / --user-only",
+      "with neither, `aiui clean` removes both"
+    ), process.exitCode = 1;
+    return;
+  }
+  const t = process.cwd(), o = Un(e, jn(t)).map((h) => ({ target: h, paths: An(h) })).filter((h) => h.paths.length > 0);
+  if (o.length === 0) {
+    console.log("nothing to clean — no aiui state here or in the user cache.");
+    return;
+  }
+  let r = 0;
+  console.log(`aiui clean will remove:
+`);
+  for (const { target: h, paths: m } of o) {
+    const b = m.reduce((w, C) => w + le(C), 0);
+    r += b, console.log(`  ${ne(b).padStart(9)}  ${h.label}`), console.log(`  ${" ".repeat(9)}  ${l.dim(h.path)}`);
+  }
+  console.log(`
+  ${ne(r).padStart(9)}  total
+`);
+  const i = !e.projectOnly, s = i && !e.keepBrowser, a = [
+    "traces and session-browser logins are cleared",
+    i && "the Claude permission prompt (claude.skipPermissions) returns on next launch",
+    s && "Chrome for Testing re-downloads (~160 MB) on the next `aiui claude`"
+  ].filter((h) => !!h);
+  console.log("This resets aiui toward a fresh install:");
+  for (const h of a)
+    console.log(`  • ${h}`);
+  console.log("");
+  const c = J(t);
+  if (c.length && T(
+    `${c.length} aiui session${c.length === 1 ? "" : "s"} still running`,
+    "stop them first — a live session rewrites its registry entry as it exits, and an open browser can lock files being deleted"
+  ), e.dryRun) {
+    y("dry run — nothing was deleted");
+    return;
+  }
+  if (!e.yes) {
+    if (!process.stdin.isTTY) {
+      g(
+        "refusing to delete without confirmation",
+        "re-run with --yes for a non-interactive clean, or from a terminal"
+      ), process.exitCode = 1;
+      return;
+    }
+    if (await z(
+      "Delete these now?",
+      [
+        { key: "y", label: "yes, delete" },
+        { key: "n", label: "no, cancel" }
+      ],
+      "n"
+    ) !== "y") {
+      console.log("cancelled — nothing was deleted.");
+      return;
+    }
+  }
+  let d = 0, p = 0;
+  for (const { paths: h } of o)
+    for (const m of h) {
+      const b = le(m);
+      try {
+        Tt(m, { recursive: !0, force: !0 }), d += b;
+      } catch (w) {
+        p++, T(
+          `could not remove ${m}`,
+          w instanceof Error ? w.message : String(w)
+        );
+      }
+    }
+  p && T(
+    `${p} path${p === 1 ? "" : "s"} could not be deleted`,
+    "a running browser can lock its files — close the session browser and re-run"
+  ), console.log(`clean complete — freed ~${ne(d)}.`);
+}
+function le(e) {
+  let t;
+  try {
+    t = Pt(e);
+  } catch {
+    return 0;
+  }
+  if (t.isSymbolicLink() || !t.isDirectory())
+    return t.size;
+  let n;
+  try {
+    n = G(e);
+  } catch {
+    return 0;
+  }
+  let o = 0;
+  for (const r of n)
+    o += le(f(e, r));
+  return o;
+}
+function ne(e) {
+  if (e < 1024)
+    return `${e} B`;
+  const t = ["KB", "MB", "GB", "TB"];
+  let n = e / 1024, o = 0;
+  for (; n >= 1024 && o < t.length - 1; )
+    n /= 1024, o++;
+  return `${n.toFixed(1)} ${t[o]}`;
+}
+function j(e = process.cwd()) {
+  const t = he(e);
+  return {
+    paths: t,
+    user: O(t.user) ?? {},
+    project: O(t.project) ?? {}
+  };
+}
+function ve(e) {
+  return Je().map((t) => {
+    const n = Ae(e.user, t), o = Ae(e.project, t), r = o ?? n, i = o !== void 0 ? "project" : n !== void 0 ? "user" : t.field.default !== void 0 ? "default" : "unset";
+    return { ...t, userValue: n, projectValue: o, effective: r, source: i };
+  });
+}
+function Ae(e, t) {
+  var o;
+  return (o = e[t.section.name]) == null ? void 0 : o[t.field.key];
+}
+function ke(e, t) {
+  const n = ve(t).find((o) => o.path === e);
+  return n || (g(
+    `unknown config key: ${e}`,
+    `Known keys:
+  ${Je().map((o) => o.path).join(`
+  `)}`
+  ), process.exitCode = 1), n;
+}
+function _n(e = {}, t = process.cwd()) {
+  const n = j(t), o = ve(n);
+  if (e.json) {
+    console.log(
+      JSON.stringify(
+        {
+          files: {
+            user: { path: n.paths.user, exists: v(n.paths.user) },
+            project: { path: n.paths.project, exists: v(n.paths.project) }
+          },
+          user: n.user,
+          project: n.project,
+          effective: Qe(n.user, n.project)
+        },
+        null,
+        2
+      )
+    );
+    return;
+  }
+  console.log(`user:    ${n.paths.user}${Ne(n.paths.user)}`), console.log(`project: ${n.paths.project}${Ne(n.paths.project)}`);
+  const r = Math.max(...o.map((s) => s.path.length));
+  let i = "";
+  for (const s of o)
+    s.section.name !== i && (i = s.section.name, console.log(`
+${l.bold(i)} ${l.dim(`— ${s.section.summary}`)}`)), console.log(`  ${s.path.padEnd(r + 2)}${dt(s)}`);
+  console.log(
+    l.dim(
+      "\nProject beats user per key; CLI flags beat both. `aiui config` browses the docs interactively."
+    )
+  );
+}
+function Ne(e) {
+  return v(e) ? "" : l.dim(" (not present)");
+}
+function dt(e) {
+  return e.effective !== void 0 ? `${l.cyan($(e.effective))} ${l.dim(`(${e.source})`)}` : l.dim(
+    e.field.default !== void 0 ? `default: ${$(e.field.default)}` : "unset"
+  );
+}
+function Rn(e, t = process.cwd()) {
+  const n = j(t), o = ke(e, n);
+  if (o) {
+    if (o.effective !== void 0) {
+      console.log(String(o.effective));
+      const r = o.source === "project" ? n.paths.project : n.paths.user;
+      console.error(l.dim(`# set in the ${o.source} config: ${r}`));
+      return;
+    }
+    if (o.field.default !== void 0) {
+      console.log(String(o.field.default)), console.error(l.dim(`# built-in default — ${ce(o.field)}`));
+      return;
+    }
+    console.error(
+      l.dim(`# not set in any config file — default: ${ce(o.field)}`)
+    );
+  }
+}
+function Ln(e, t, n = {}, o = process.cwd()) {
+  const r = j(o), i = ke(e, r);
+  if (!i)
+    return;
+  const s = ae(i.field, t);
+  if ("error" in s) {
+    g(`invalid value for ${i.path}: ${t}`, s.error), process.exitCode = 1;
+    return;
+  }
+  ht(r, i, s.value, n.project ? "project" : "user");
+}
+function ht(e, t, n, o) {
+  const r = fe(e.paths[o], (i) => {
+    const s = i;
+    s[t.section.name] = { ...s[t.section.name], [t.field.key]: n };
+  });
+  y(`wrote ${t.path}: ${$(n)} to ${r}`);
+}
+function Mn(e, t = {}, n = process.cwd()) {
+  const o = j(n), r = ke(e, o);
+  r && ft(o, r, t.project ? "project" : "user");
+}
+function ft(e, t, n) {
+  var a;
+  const o = e.paths[n];
+  if (((a = (O(o) ?? {})[t.section.name]) == null ? void 0 : a[t.field.key]) === void 0) {
+    y(`${t.path} is not set in the ${n} config (${o})`);
+    return;
+  }
+  const s = fe(o, (c) => {
+    const d = c, p = { ...d[t.section.name] };
+    delete p[t.field.key], Object.keys(p).length === 0 ? delete d[t.section.name] : d[t.section.name] = p;
+  });
+  y(`removed ${t.path} from ${s}`);
+}
+async function _e(e = process.cwd()) {
+  if (!process.stdin.isTTY || !process.stdout.isTTY) {
+    g(
+      "aiui config tui needs an interactive terminal",
+      "In scripts and non-TTY sessions use `aiui config show` (or `show --json`)."
+    ), process.exitCode = 1;
+    return;
+  }
+  const t = j(e).paths;
+  console.log(l.dim(`user:    ${Le(t.user)}`)), console.log(l.dim(`project: ${Le(t.project)}`));
+  try {
+    for (; ; ) {
+      const n = j(e), o = await Bn(n);
+      if (!o)
+        return;
+      await Vn(n, o);
+    }
+  } catch (n) {
+    if (n instanceof Error && n.name === "ExitPromptError")
+      return;
+    throw n;
+  }
+}
+async function Bn(e) {
+  const t = ve(e), n = Math.max(...t.map((r) => r.path.length)) + 2, o = [];
+  for (const r of M) {
+    o.push(new ie(l.dim(`── ${r.name} — ${r.summary}`)));
+    for (const i of t.filter((s) => s.section.name === r.name))
+      o.push({
+        name: `${i.path.padEnd(n)}${dt(i)}`,
+        value: i,
+        description: Fn(i)
+      });
+  }
+  return o.push(new ie(" ")), o.push({ name: "exit", value: void 0, description: "Leave the config browser." }), K({
+    message: "aiui config",
+    choices: o,
+    pageSize: o.length,
+    loop: !1
+  });
+}
+function Fn(e) {
+  const t = [l.bold(e.field.summary)];
+  return e.field.doc && t.push(Kn(e.field.doc, 76)), t.push(""), e.field.type === "enum" && t.push(`allowed:   ${(e.field.values ?? []).join(" | ")}`), t.push(`default:   ${ce(e.field)}`), t.push(`user:      ${Re(e.userValue)}`), t.push(`project:   ${Re(e.projectValue)}`), t.push(
+    `effective: ${e.effective !== void 0 ? `${$(e.effective)} (from the ${e.source} config)` : "the built-in default"}`
+  ), t.join(`
+`);
+}
+function Re(e) {
+  return e === void 0 ? l.dim("(not set)") : $(e);
+}
+async function Vn(e, t) {
+  const n = [
+    {
+      name: "set in the user config",
+      value: "set-user",
+      description: `${e.paths.user}
+Personal preference — applies to every project.`
+    },
+    {
+      name: "set in the project config",
+      value: "set-project",
+      description: `${e.paths.project}
+This project only; the file may be shared or committed by a team.`
+    }
+  ];
+  t.userValue !== void 0 && n.push({
+    name: `unset in the user config (currently ${$(t.userValue)})`,
+    value: "unset-user"
+  }), t.projectValue !== void 0 && n.push({
+    name: `unset in the project config (currently ${$(t.projectValue)})`,
+    value: "unset-project"
+  }), n.push(new ie()), n.push({ name: "back", value: "back" });
+  const o = await K({
+    message: `${t.path} — ${t.field.summary}`,
+    choices: n
+  });
+  if (o === "back")
+    return;
+  const r = o.endsWith("project") ? "project" : "user";
+  if (o.startsWith("unset")) {
+    ft(e, t, r);
+    return;
+  }
+  const i = await Hn(t);
+  i !== void 0 && ht(e, t, i, r);
+}
+async function Hn(e) {
+  const t = (r) => r === e.effective ? " (current)" : r === e.field.default ? " (default)" : "";
+  if (e.field.type === "boolean")
+    return K({
+      message: `${e.path} =`,
+      choices: [!0, !1].map((r) => ({
+        name: `${r}${l.dim(t(r))}`,
+        value: r
+      }))
+    });
+  if (e.field.type === "enum")
+    return K({
+      message: `${e.path} =`,
+      choices: (e.field.values ?? []).map((r) => ({
+        name: `${r}${l.dim(t(r))}`,
+        value: r
+      }))
+    });
+  const n = await _t({
+    message: `${e.path} = `,
+    default: e.effective !== void 0 ? String(e.effective) : void 0,
+    validate: (r) => {
+      const i = ae(e.field, r);
+      return "error" in i ? i.error : !0;
+    }
+  }), o = ae(e.field, n);
+  return "error" in o ? void 0 : o.value;
+}
+function Le(e) {
+  const t = At();
+  return e.startsWith(t) ? `~${e.slice(t.length)}` : e;
+}
+function Kn(e, t) {
+  const n = [];
+  let o = "";
+  for (const r of e.split(/\s+/))
+    o && o.length + 1 + r.length > t ? (n.push(o), o = r) : o = o ? `${o} ${r}` : r;
+  return o && n.push(o), n.join(`
+`);
+}
+const Yn = "vite", oe = "VITE_AIUI_PORT";
+function pt(e, t) {
+  if (t !== void 0) {
+    const n = e.find((o) => o.tag === t);
+    if (!n) {
+      const o = e.length > 0 ? e.map((r) => r.tag).join(", ") : "(none running)";
+      return {
+        error: `no running aiui channel with tag "${t}" — running tags: ${o}`
+      };
+    }
+    return { server: n };
+  }
+  return e.length > 0 ? { select: e } : {};
+}
+async function Wn(e = []) {
+  const t = lt(e), { mcp: n, tag: o, passthrough: r } = t, i = ct(r);
+  if (i) {
+    i === "help" ? Qn() : console.log(`aiui ${ee}`), await Xn(r);
+    return;
+  }
+  const s = n ?? o, a = pt(J(), s);
+  if (a.error) {
+    g("Could not resolve an aiui channel", a.error), process.exitCode = 1;
+    return;
+  }
+  const c = a.select ? await qe(a.select) : a.server;
+  let d;
+  c ? (d = String(c.port), console.error(
+    l.dim(
+      `aiui: connecting vite to channel "${c.tag}" (${c.cwd}) on port ${d} via ${oe}`
+    )
+  )) : console.error(l.dim(`aiui: no running channel found — ${oe} left unset`));
+  const p = mt();
+  if (!p)
+    return;
+  const h = {};
+  d && (h[oe] = d), process.stdout.isTTY && !("FORCE_COLOR" in process.env) && !("NO_COLOR" in process.env) && (h.FORCE_COLOR = "1");
+  const m = k(p.command, [...p.args, ...r], {
+    stdio: ["inherit", "pipe", "inherit"],
+    buffer: !1,
+    reject: !1,
+    env: h
+  });
+  m.stdout && Jn(m.stdout, process.stdout, (w) => {
+    zn(w, t);
+  });
+  const b = await m;
+  b.exitCode && (process.exitCode = b.exitCode);
+}
+const qn = /\x1b\[[0-9;?]*[ -/]*[@-~]/g;
+function Gn(e) {
+  const n = e.replace(qn, "").match(
+    /\bLocal:\s+(https?:\/\/(?:localhost|127\.0\.0\.1|\[::1\])(?::\d+)?\/?\S*)/
+  );
+  return n == null ? void 0 : n[1];
+}
+function Jn(e, t, n) {
+  let o = "", r = !1;
+  e.on("data", (i) => {
+    if (t.write(i), !r) {
+      for (o += i.toString(); ; ) {
+        const s = o.indexOf(`
+`);
+        if (s === -1)
+          break;
+        const a = o.slice(0, s);
+        o = o.slice(s + 1);
+        const c = Gn(a);
+        if (c) {
+          r = !0, o = "", n(c);
+          return;
+        }
+      }
+      o.length > 8192 && (o = o.slice(-8192));
+    }
+  });
+}
+async function zn(e, t) {
+  try {
+    const n = {
+      ...V().chrome,
+      ...t.browserUrl ? { browserUrl: t.browserUrl } : {}
+    }, o = Ct(t, n);
+    if (o.kind === "skip")
+      return;
+    if (o.kind === "hint") {
+      y(
+        `detected a headless environment (${o.reason}) — not opening a browser`,
+        `Assuming the dev server's port is already forwarded, open ${e} in the browser
+on your local machine. (Pass --aiui-browser to open one here anyway.)`
+      );
+      return;
+    }
+    if (n.browserUrl) {
+      await H(n.browserUrl, e), console.error(l.dim(`aiui: opened ${e} in the browser at ${n.browserUrl}`));
+      return;
+    }
+    const r = D(t, n), i = await F(r.userDataDir);
+    i ? (await H(i.browserUrl, e), console.error(l.dim(`aiui: opened ${e} in the session browser`))) : (await st({
+      flags: t,
+      config: n,
+      interactive: !1,
+      startUrl: e
+    }), console.error(l.dim(`aiui: opened ${e} in a new session browser`)));
+  } catch (n) {
+    T(
+      "couldn't open the app in the session browser — the dev server is unaffected",
+      n instanceof Error ? n.message : String(n)
+    );
+  }
+}
+function mt() {
+  try {
+    return ge(Yn);
+  } catch {
+    g(
+      "Vite is not available",
+      "`vite` should be installed as a dependency of aiui — try reinstalling."
+    ), process.exitCode = 1;
+    return;
+  }
+}
+async function Xn(e) {
+  const t = mt();
+  if (!t)
+    return;
+  const n = await k(t.command, [...t.args, ...e], {
+    stdio: "inherit",
+    reject: !1
+  });
+  n.exitCode && (process.exitCode = n.exitCode);
+}
+function Qn() {
+  console.log(`aiui vite — launch Vite connected to the running aiui channel
+
+aiui's own flags (everything else forwards to vite verbatim):
+  --aiui-mcp <tag>               connect to the channel server with this tag
+  --aiui-tag <tag>               accepted alias for --aiui-mcp
+  --aiui-browser                 open the app in the session browser even when
+                                 the environment looks headless (CI, SSH, no display)
+  --aiui-no-browser              never open a browser for this run
+  --aiui-chrome-profile <name>   browser profile at .aiui-cache/chrome/<name>
+  --aiui-chrome-data-dir <path>  explicit browser user data dir
+
+The chosen channel's port is exported as VITE_AIUI_PORT; the aiuiDevOverlay()
+Vite plugin picks it up there and wires the intent tool to it. When Vite prints
+its Local: URL, aiui opens it in the shared session browser (the one \`aiui
+claude\` and \`aiui open\` use); in headless environments it prints the URL to
+open on your own machine instead. What follows is vite's own --help:
+`);
+}
+const re = "/__aiui/debug", Me = 4747;
+function Zn() {
+  let e = R(Ge(import.meta.url));
+  for (let t = 0; t < 5; t++) {
+    const n = f(e, "package.json");
+    if (v(n))
+      try {
+        if (JSON.parse(U(n, "utf8")).name === "@habemus-papadum/aiui")
+          return e;
+      } catch {
+      }
+    e = R(e);
+  }
+}
+async function eo(e = {}) {
+  var d;
+  const t = pt(J(), e.mcp);
+  if (t.error) {
+    g("Could not resolve an aiui channel", t.error), process.exitCode = 1;
+    return;
+  }
+  const n = t.select ? await qe(t.select) : t.server;
+  if (!n) {
+    console.log("No running aiui channel to debug — start one with `aiui claude`."), process.exitCode = 1;
+    return;
+  }
+  const o = Zn();
+  if (!o) {
+    g("Could not locate the aiui package root to serve the viewer from"), process.exitCode = 1;
+    return;
+  }
+  const r = {
+    name: "aiui:debug-home",
+    configureServer(p) {
+      p.middlewares.use((h, m, b) => {
+        if ((h.url ?? "/").split("?")[0] === "/") {
+          m.statusCode = 302, m.setHeader("location", re), m.end();
+          return;
+        }
+        b();
+      });
+    }
+  }, i = Number(e.port), s = await Lt({
+    root: o,
+    configFile: !1,
+    // `mount: false`: this server hosts the viewer, not an app — nothing to
+    // arm, so the intent tool stays out of it. The plugin still serves the
+    // DEBUG_ROUTE page and seeds the picked channel's port into it.
+    plugins: [r, Rt({ port: n.port, mount: !1 })],
+    server: {
+      port: Number.isInteger(i) && i > 0 ? i : Me,
+      open: e.open === !1 ? !1 : re
+    },
+    logLevel: "warn"
+  });
+  await s.listen();
+  const c = `${(((d = s.resolvedUrls) == null ? void 0 : d.local[0]) ?? `http://localhost:${Me}/`).replace(/\/$/, "")}${re}`;
+  console.log(`${l.cyan("aiui debug")} — the lowering-trace viewer`), console.log(`  viewing  ${l.bold(c)}`), console.log(
+    l.dim(`  channel  "${n.tag}" (${n.cwd}) on port ${n.port}`) + l.dim(" — switch channels from the page's header. Ctrl-C to stop.")
+  );
+}
+async function to(e, t = {}) {
+  const n = P(process.cwd(), e ?? "aiui-demo");
+  switch (no(n)) {
     case "occupied":
-      m(
-        `${o} already exists and isn't an aiui demo`,
+      g(
+        `${n} already exists and isn't an aiui demo`,
         "Pick an empty (or new) directory — the scaffold never overwrites existing content."
       ), process.exitCode = 1;
       return;
     case "existing-demo":
-      v(`existing demo found at ${o} — continuing where it left off`);
+      y(`existing demo found at ${n} — continuing where it left off`);
       break;
     case "new": {
-      const n = no();
-      if (!n) {
-        m("the demo template did not ship with this aiui install"), process.exitCode = 1;
+      const o = so();
+      if (!o) {
+        g("the demo template did not ship with this aiui install"), process.exitCode = 1;
         return;
       }
-      oo(n, o), console.log(`scaffolded the demo playground at ${o}`), await ro(o);
+      ro(o, n), console.log(`scaffolded the demo playground at ${n}`), await io(n);
       break;
     }
   }
-  if (!t.skipInstall && !b(l(o, "node_modules")))
-    if (!ee("npm"))
-      v("npm not found on PATH — run your package manager's install in the demo yourself");
+  if (!t.skipInstall && !v(f(n, "node_modules")))
+    if (!ye("npm"))
+      y("npm not found on PATH — run your package manager's install in the demo yourself");
     else {
       console.log("installing dependencies (one time)…");
-      const n = await p("npm", ["install", "--no-audit", "--no-fund"], {
-        cwd: o,
+      const o = await k("npm", ["install", "--no-audit", "--no-fund"], {
+        cwd: n,
         stdio: "inherit",
         reject: !1
       });
-      if (n.exitCode) {
-        m("npm install failed — fix that, then re-run this command to continue"), process.exitCode = n.exitCode;
+      if (o.exitCode) {
+        g("npm install failed — fix that, then re-run this command to continue"), process.exitCode = o.exitCode;
         return;
       }
     }
-  io(o);
+  ao(n);
 }
-function eo(e) {
-  var o;
-  if (!b(e))
+function no(e) {
+  var n;
+  if (!v(e))
     return "new";
   let t;
   try {
-    t = ge(e);
+    t = G(e);
   } catch {
     return "occupied";
   }
   if (t.length === 0)
     return "new";
   try {
-    if (((o = JSON.parse(P(l(e, "package.json"), "utf8")).aiui) == null ? void 0 : o.demo) === !0)
+    if (((n = JSON.parse(U(f(e, "package.json"), "utf8")).aiui) == null ? void 0 : n.demo) === !0)
       return "existing-demo";
   } catch {
   }
   return "occupied";
 }
-function to(e) {
+function oo(e) {
   return /^\d+\.\d+\.\d+$/.test(e) ? `^${e}` : "latest";
 }
-function oo(e, t) {
-  k(t, { recursive: !0 }), Je(e, t, { recursive: !0 }), b(l(t, "gitignore")) && We(l(t, "gitignore"), l(t, ".gitignore"));
-  const o = l(t, "package.json");
-  T(
-    o,
-    P(o, "utf8").replaceAll(
+function ro(e, t) {
+  W(t, { recursive: !0 }), Et(e, t, { recursive: !0 }), v(f(t, "gitignore")) && Dt(f(t, "gitignore"), f(t, ".gitignore"));
+  const n = f(t, "package.json");
+  q(
+    n,
+    U(n, "utf8").replaceAll(
       "__AIUI_VERSION_RANGE__",
-      to(L)
+      oo(ee)
     )
   );
 }
-async function ro(e) {
-  !ee("git") || (await p("git", ["-C", e, "rev-parse", "--is-inside-work-tree"], {
+async function io(e) {
+  !ye("git") || (await k("git", ["-C", e, "rev-parse", "--is-inside-work-tree"], {
     reject: !1
-  })).exitCode === 0 || (await p("git", ["-C", e, "init", "--quiet"], { reject: !1 })).exitCode !== 0 || (await p("git", ["-C", e, "add", "-A"], { reject: !1 }), await p("git", ["-C", e, "commit", "--quiet", "-m", "aiui demo scaffold"], {
+  })).exitCode === 0 || (await k("git", ["-C", e, "init", "--quiet"], { reject: !1 })).exitCode !== 0 || (await k("git", ["-C", e, "add", "-A"], { reject: !1 }), await k("git", ["-C", e, "commit", "--quiet", "-m", "aiui demo scaffold"], {
     reject: !1
   }));
 }
-function no() {
-  let e = S(nt(import.meta.url));
+function so() {
+  let e = R(Ge(import.meta.url));
   for (let t = 0; t < 4; t++) {
-    const o = l(e, "templates", "demo");
-    if (b(l(o, "package.json")))
-      return o;
-    e = S(e);
+    const n = f(e, "templates", "demo");
+    if (v(f(n, "package.json")))
+      return n;
+    e = R(e);
   }
 }
-function io(e) {
-  const t = Ke(process.cwd(), e) || ".", o = t === "aiui-demo" ? "aiui demo" : `aiui demo ${t}`;
+function ao(e) {
+  const t = yt(process.cwd(), e) || ".", n = t === "aiui-demo" ? "aiui demo" : `aiui demo ${t}`;
   console.log(`
 demo ready. Run the loop:
 
@@ -1244,104 +1976,90 @@ then open the app in the session browser (the window you share with the agent):
   npx aiui open http://localhost:5173
 
 Click the ✳ aiui button on the page and type an intent — it lands in the session
-as a prompt. Re-run \`${o}\` anytime to continue this sandbox.`);
+as a prompt. Re-run \`${n}\` anytime to continue this sandbox.`);
 }
-const ao = "@habemus-papadum/aiui-claude-channel";
-async function so(e = []) {
+const co = "@habemus-papadum/aiui-claude-channel";
+async function lo(e = []) {
   let t;
   try {
-    t = X(ao);
+    t = ge(co);
   } catch {
-    m(
+    g(
       "The aiui Claude channel CLI is not available",
       "`@habemus-papadum/aiui-claude-channel` should be installed as a dependency of aiui — try reinstalling."
     ), process.exitCode = 1;
     return;
   }
-  const o = await p(t.command, [...t.args, ...e], {
+  const n = await k(t.command, [...t.args, ...e], {
     stdio: "inherit",
     reject: !1
   });
-  o.exitCode && (process.exitCode = o.exitCode);
-}
-const co = "vite", K = "VITE_AIUI_PORT";
-function lo(e, t) {
-  if (t !== void 0) {
-    const o = e.find((n) => n.tag === t);
-    if (!o) {
-      const n = e.length > 0 ? e.map((r) => r.tag).join(", ") : "(none running)";
-      return {
-        error: `no running aiui channel with tag "${t}" — running tags: ${n}`
-      };
-    }
-    return { server: o };
-  }
-  return e.length > 0 ? { select: e } : {};
+  n.exitCode && (process.exitCode = n.exitCode);
 }
-async function uo(e = []) {
-  const { mcp: t, tag: o, passthrough: n } = je(e), r = Re(n);
-  if (r) {
-    r === "help" ? fo() : console.log(`aiui ${L}`), await ho(n);
-    return;
-  }
-  const i = t ?? o, a = lo(Qe(), i);
-  if (a.error) {
-    m("Could not resolve an aiui channel", a.error), process.exitCode = 1;
-    return;
-  }
-  const s = a.select ? await et(a.select) : a.server;
-  let c;
-  s ? (c = String(s.port), console.error(
-    g.dim(
-      `aiui: connecting vite to channel "${s.tag}" (${s.cwd}) on port ${c} via ${K}`
-    )
-  )) : console.error(g.dim(`aiui: no running channel found — ${K} left unset`));
-  const u = Le();
-  if (!u)
-    return;
-  const f = await p(u.command, [...u.args, ...n], {
-    stdio: "inherit",
-    reject: !1,
-    ...c ? { env: { [K]: c } } : {}
-  });
-  f.exitCode && (process.exitCode = f.exitCode);
+function uo() {
+  const e = [];
+  for (const t of Object.values(Nt()))
+    for (const n of t ?? [])
+      n.family === "IPv4" && !n.internal && e.push(n.address);
+  return e;
 }
-function Le() {
+async function Be(e, t) {
   try {
-    return X(co);
+    const n = await fetch(`http://127.0.0.1:${e}${t}`, {
+      signal: AbortSignal.timeout(1500)
+    });
+    return n.ok ? await n.json() : void 0;
   } catch {
-    m(
-      "Vite is not available",
-      "`vite` should be installed as a dependency of aiui — try reinstalling."
-    ), process.exitCode = 1;
     return;
   }
 }
 async function ho(e) {
-  const t = Le();
-  if (!t)
+  const t = await Be(
+    e,
+    "/paint/info"
+  );
+  if (!(t != null && t.ok))
     return;
-  const o = await p(t.command, [...t.args, ...e], {
-    stdio: "inherit",
-    reject: !1
-  });
-  o.exitCode && (process.exitCode = o.exitCode);
+  const n = await Be(e, "/health"), o = (n == null ? void 0 : n.host) !== void 0 && n.host !== "127.0.0.1";
+  return {
+    lan: o,
+    urls: o ? uo().map((r) => `http://${r}:${e}/paint/`) : [`http://127.0.0.1:${e}/paint/`],
+    hosts: t.hosts ?? 0,
+    clients: t.clients ?? 0
+  };
 }
-function fo() {
-  console.log(`aiui vite — launch Vite connected to the running aiui channel
-
-aiui's own flags (everything else forwards to vite verbatim):
-  --aiui-mcp <tag>   connect to the channel server with this tag
-  --aiui-tag <tag>   accepted alias for --aiui-mcp
-
-The chosen channel's port is exported as VITE_AIUI_PORT; the aiuiDevOverlay()
-Vite plugin picks it up there and wires the intent tool to it. What follows is
-vite's own --help:
-`);
+async function fo(e = {}) {
+  const t = J(), n = [];
+  for (const o of t) {
+    const r = await ho(o.port);
+    r && n.push({ cwd: o.cwd, pid: o.pid, port: o.port, ...r });
+  }
+  if (e.json) {
+    console.log(JSON.stringify({ targets: n }, null, 2));
+    return;
+  }
+  if (n.length === 0) {
+    console.log("No running channel is hosting the paint surface."), console.log(""), console.log(
+      `It is on by default — start a session with ${l.cyan("aiui claude")}. If it's off here,`
+    ), console.log(
+      `check for ${l.cyan("sidecars.paint false")} in config or a --aiui-no-sidecar flag.`
+    ), process.exitCode = 1;
+    return;
+  }
+  for (const o of n) {
+    console.log(""), console.log(`${l.bold(o.cwd)} ${l.dim(`(channel :${o.port})`)}`);
+    for (const i of o.urls.length ? o.urls : ["(no LAN address found)"])
+      console.log(`  ${l.cyan(i)}`);
+    const r = o.lan ? "open the URL on the iPad (same Wi-Fi)" : "loopback-only — the iPad needs a tunnel to this port (Tailscale, ssh -L), or relaunch with --aiui-bind host";
+    console.log(
+      l.dim(`  ${o.hosts} browser host(s), ${o.clients} viewer(s) — ${r}`)
+    );
+  }
+  console.log("");
 }
-function mo() {
-  const e = new Be();
-  return e.name("aiui").description("ai ui frontends — thin launchers for Claude, Vite, and the channel CLI").version(L).enablePositionalOptions(), e.command("claude").description("launch Claude (extra args are forwarded, e.g. `aiui claude --resume`)").allowUnknownOption().allowExcessArguments().helpOption(!1).argument("[args...]", "arguments forwarded to claude").action((t) => Jt(t)), e.command("vite").description("launch Vite (extra args are forwarded, e.g. `aiui vite dev`)").allowUnknownOption().allowExcessArguments().helpOption(!1).argument("[args...]", "arguments forwarded to vite").action((t) => uo(t)), e.command("chrome").description("manage the agent's browser: install | update | status | extension").argument("<action>", "install | update | status | extension").action((t) => Ot([t])), e.command("browser").description(
+function po() {
+  const e = new gt();
+  e.name("aiui").description("ai ui frontends — thin launchers for Claude, Vite, and the channel CLI").version(ee).enablePositionalOptions(), e.command("claude").description("launch Claude (extra args are forwarded, e.g. `aiui claude --resume`)").allowUnknownOption().allowExcessArguments().helpOption(!1).argument("[args...]", "arguments forwarded to claude").action((o) => En(o)), e.command("vite").description("launch Vite (extra args are forwarded, e.g. `aiui vite dev`)").allowUnknownOption().allowExcessArguments().helpOption(!1).argument("[args...]", "arguments forwarded to vite").action((o) => Wn(o)), e.command("debug").description("open the lowering-trace viewer for a running channel (switchable in-page)").option("--mcp <tag>", "target a channel by registry tag (skips the selector)").option("--port <port>", "UI port for the viewer's dev server (default 4747)").option("--no-open", "don't open the browser").action((o) => eo(o)), e.command("chrome").description("manage the agent's browser: install | update | status | extension").argument("<action>", "install | update | status | extension").action((o) => cn([o])), e.command("browser").description(
     "start (or find) the shared session browser; --tunnel does the whole remote-dev local half"
   ).option(
     "--profile <name>",
@@ -1349,9 +2067,13 @@ function mo() {
   ).option("--data-dir <path>", "explicit Chrome user data dir").option("--port <port>", "fixed local DevTools debug port (default: OS-assigned)").option("--headless", "launch with no UI").option("--open <url>", "also open this URL in it").option(
     "--tunnel <[user@]host>",
     "reverse-tunnel the debug port to this host (Ctrl-C closes it)"
-  ).option("--remote-port <port>", "fixed port on the tunnel's remote side (default: 9222)").action((t) => $t(t)), e.command("demo").description("scaffold a runnable demo playground (safe to re-run; default dir: aiui-demo)").argument("[dir]", "target directory (default: aiui-demo)").option("--skip-install", "scaffold only — don't run npm install").action((t, o) => Qt(t, o)), e.command("open").description("open a URL in the session browser, e.g. `aiui open http://localhost:5173`").argument("<url>", "the URL to open").option("--profile <name>", "named profile under .aiui-cache/chrome/").option("--data-dir <path>", "explicit Chrome user data dir").action((t, o) => At(t, o)), e.command("mcp").description("run a channel command (forwards to aiui-claude-channel), e.g. `aiui mcp quick`").allowUnknownOption().allowExcessArguments().helpOption(!1).argument("[args...]", "arguments forwarded to the aiui-claude-channel CLI").action((t) => so(t)), e;
+  ).option("--remote-port <port>", "fixed port on the tunnel's remote side (default: 9222)").action((o) => en(o)), e.command("demo").description("scaffold a runnable demo playground (safe to re-run; default dir: aiui-demo)").argument("[dir]", "target directory (default: aiui-demo)").option("--skip-install", "scaffold only — don't run npm install").action((o, r) => to(o, r)), e.command("clean").description(
+    "reset aiui state (project + user cache, incl. Chrome for Testing) for a clean-slate demo"
+  ).option("--project-only", "only this repo's .aiui-cache/").option("--user-only", "only the user cache (~/.cache/aiui)").option("--keep-browser", "keep Chrome for Testing (skip the ~160 MB re-download)").option("-n, --dry-run", "print what would be deleted, then stop").option("-y, --yes", "delete without the confirmation prompt").action((o) => Nn(o)), e.command("open").description("open a URL in the session browser, e.g. `aiui open http://localhost:5173`").argument("<url>", "the URL to open").option("--profile <name>", "named profile under .aiui-cache/chrome/").option("--data-dir <path>", "explicit Chrome user data dir").action((o, r) => an(o, r));
+  const t = e.command("config").description("inspect and edit aiui's config.json — tui | show | get | set | unset").action(() => _e());
+  return t.command("tui").description("browse every setting interactively: docs, defaults, current values, editing").action(() => _e()), t.command("show").description("every key with its effective value and which file set it").option("--json", "machine-readable: file paths, per-level values, effective merge").action((o) => _n(o)), t.command("get").description("print a key's effective value (provenance goes to stderr)").argument("<key>", 'dotted key, e.g. "chrome.mode"').action((o) => Rn(o)), t.command("set").description("set a key in the user config (or the project's with --project)").argument("<key>", 'dotted key, e.g. "chrome.mode"').argument("<value>", "the new value, validated against the schema").option("--project", "write .aiui-cache/config.json here instead of the user config").action((o, r, i) => Ln(o, r, i)), t.command("unset").description("remove a key from the user config (or the project's with --project)").argument("<key>", 'dotted key, e.g. "claude.skipPermissions"').option("--project", "remove from .aiui-cache/config.json here instead of the user config").action((o, r) => Mn(o, r)), e.command("mcp").description("run a channel command (forwards to aiui-claude-channel), e.g. `aiui mcp quick`").allowUnknownOption().allowExcessArguments().helpOption(!1).argument("[args...]", "arguments forwarded to the aiui-claude-channel CLI").action((o) => lo(o)), e.command("paint").description("the iPad paint stream — url (where the iPad should connect)").command("url").description("print the URL(s) an iPad should open, per running paint-enabled channel").option("--json", "machine-readable targets").action((o) => fo(o)), e;
 }
-mo().parseAsync().catch((e) => {
+po().parseAsync().catch((e) => {
   console.error(e instanceof Error ? e.message : e), process.exitCode = 1;
 });
 //# sourceMappingURL=cli.js.map