@habemus-papadum/aiui 0.2.0 → 0.5.0

package/dist/cli.js

@@ -1,381 +1,147 @@
 #!/usr/bin/env node
-import { Command as Be } from "commander";
-import { join as l, dirname as S, resolve as E, delimiter as Ve, relative as Ke } from "node:path";
-import { cacheDir as q } from "@habemus-papadum/aiui-util";
-import { execa as p } from "execa";
-import { mkdirSync as k, rmSync as Ye, writeFileSync as T, readFileSync as P, existsSync as b, realpathSync as we, readdirSync as ge, accessSync as qe, constants as Ge, cpSync as Je, renameSync as We } from "node:fs";
-import { computeSystemExecutablePath as ze, ChromeReleaseChannel as O, Browser as x, detectBrowserPlatform as be, resolveBuildId as ye, getInstalledBrowsers as ve, install as Xe, uninstall as Ze } from "@puppeteer/browsers";
-import { projectCacheDir as xe, listMcpServers as Qe, selectMcpServer as et } from "@habemus-papadum/aiui-claude-channel";
-import { createInterface as tt } from "node:readline/promises";
-import g from "chalk";
-import { createRequire as ot } from "node:module";
-import { spawn as rt } from "node:child_process";
-import { fileURLToPath as nt } from "node:url";
-const Ce = "DevToolsActivePort", ae = 2e4;
-async function I(e) {
-  const t = it(e);
-  if (t !== void 0 && await at(t))
-    return { browserUrl: `http://127.0.0.1:${t}`, port: t };
-}
-function it(e) {
-  try {
-    const [t] = P(l(e, Ce), "utf8").split(`
-`), o = Number(t);
-    return Number.isInteger(o) && o > 0 ? o : void 0;
-  } catch {
-    return;
-  }
-}
-async function at(e) {
-  try {
-    return (await fetch(`http://127.0.0.1:${e}/json/version`, {
-      signal: AbortSignal.timeout(1e3)
-    })).ok;
-  } catch {
-    return !1;
-  }
-}
-function Ee(e) {
-  return e.executablePath ? e.executablePath : ze({
-    browser: x.CHROME,
-    channel: st[e.channel ?? "stable"]
-  });
-}
-const st = {
-  stable: O.STABLE,
-  beta: O.BETA,
-  dev: O.DEV,
-  canary: O.CANARY
-};
-async function $e(e) {
-  k(e.userDataDir, { recursive: !0 }), Ye(l(e.userDataDir, Ce), { force: !0 });
-  const t = [
-    `--remote-debugging-port=${e.debugPort ?? 0}`,
-    `--user-data-dir=${e.userDataDir}`,
-    "--no-first-run",
-    "--no-default-browser-check"
-  ];
-  e.extensionDir && t.push(`--load-extension=${e.extensionDir}`), e.headless && t.push("--headless"), t.push(e.startUrl ?? "about:blank");
-  const o = p(e.binary, t, {
-    detached: !0,
-    stdio: "ignore",
-    reject: !1,
-    cleanup: !1
-  });
-  o.unref();
-  let n = !1;
-  o.then(() => {
-    n = !0;
-  });
-  const r = Date.now() + ae;
-  for (; Date.now() < r; ) {
-    const i = await I(e.userDataDir);
-    if (i) {
-      try {
-        T(
-          l(e.userDataDir, "aiui-browser.json"),
-          `${JSON.stringify({ pid: o.pid, startedAt: (/* @__PURE__ */ new Date()).toISOString() })}
-`
-        );
-      } catch {
-      }
-      return i;
-    }
-    if (n)
-      throw new Error(
-        "the browser exited before exposing its DevTools endpoint — is another Chrome already running on this profile without a debug port? Close it and retry."
-      );
-    await ct(250);
-  }
-  throw new Error(
-    `the browser did not expose its DevTools endpoint within ${ae / 1e3}s`
-  );
-}
-async function Pe(e, t) {
-  const o = e.replace(/\/+$/, ""), n = await fetch(`${o}/json/new?${encodeURI(t)}`, {
-    method: "PUT",
-    signal: AbortSignal.timeout(3e3)
-  });
-  if (!n.ok)
-    throw new Error(`the browser refused to open the tab (${n.status} ${n.statusText})`);
-}
-function ct(e) {
-  return new Promise((t) => setTimeout(t, e));
-}
-const se = "config.json", ce = ["stable", "beta", "dev", "canary"], le = ["prompt", "auto", "off"], ue = ["attach", "launch"];
-function De(e = process.cwd()) {
-  return {
-    user: l(q(void 0, { create: !1 }), se),
-    project: l(xe(e), se)
-  };
-}
-function N(e = process.cwd()) {
-  const t = De(e);
-  return lt(Y(t.user) ?? {}, Y(t.project) ?? {});
-}
-function lt(e, t) {
-  return {
-    claude: { ...e.claude, ...t.claude },
-    chrome: { ...e.chrome, ...t.chrome }
-  };
-}
-function Y(e) {
-  let t;
-  try {
-    t = P(e, "utf8");
-  } catch {
-    return;
-  }
-  let o;
-  try {
-    o = JSON.parse(t);
-  } catch (n) {
-    throw new Error(
-      `invalid JSON in ${e}: ${n instanceof Error ? n.message : String(n)}`
-    );
-  }
-  return ut(o, e);
-}
-function ut(e, t) {
-  const o = H(e, t, "the top level");
-  B(o, ["claude", "chrome"], t, "the top level");
-  const n = {};
-  if (o.claude !== void 0) {
-    const r = H(o.claude, t, '"claude"');
-    B(r, ["skipPermissions", "enterNudge"], t, '"claude"'), n.claude = de({
-      skipPermissions: w(
-        r.skipPermissions,
-        "boolean",
-        t,
-        "claude.skipPermissions"
-      ),
-      enterNudge: w(r.enterNudge, "boolean", t, "claude.enterNudge")
-    });
-  }
-  if (o.chrome !== void 0) {
-    const r = H(o.chrome, t, '"chrome"');
-    B(
-      r,
-      [
-        "enabled",
-        "mode",
-        "browserUrl",
-        "debugPort",
-        "profile",
-        "dataDir",
-        "executablePath",
-        "channel",
-        "forTesting",
-        "headless",
-        "buildExtension"
-      ],
-      t,
-      '"chrome"'
-    );
-    const i = w(r.channel, "string", t, "chrome.channel");
-    if (i !== void 0 && !ce.includes(i))
-      throw new Error(
-        `invalid chrome.channel "${i}" in ${t} — expected one of: ${ce.join(", ")}`
-      );
-    const a = w(r.forTesting, "string", t, "chrome.forTesting");
-    if (a !== void 0 && !le.includes(a))
-      throw new Error(
-        `invalid chrome.forTesting "${a}" in ${t} — expected one of: ${le.join(", ")}`
-      );
-    const s = w(r.mode, "string", t, "chrome.mode");
-    if (s !== void 0 && !ue.includes(s))
-      throw new Error(
-        `invalid chrome.mode "${s}" in ${t} — expected one of: ${ue.join(", ")}`
-      );
-    const c = w(r.browserUrl, "string", t, "chrome.browserUrl");
-    if (c !== void 0 && !dt(c))
-      throw new Error(
-        `invalid chrome.browserUrl "${c}" in ${t} — expected an http(s) URL like "http://127.0.0.1:9222"`
-      );
-    const u = w(r.debugPort, "number", t, "chrome.debugPort");
-    if (u !== void 0 && !(Number.isInteger(u) && u >= 0 && u <= 65535))
-      throw new Error(`invalid chrome.debugPort ${u} in ${t} — expected 0..65535`);
-    n.chrome = de({
-      enabled: w(r.enabled, "boolean", t, "chrome.enabled"),
-      mode: s,
-      browserUrl: c,
-      debugPort: u,
-      profile: w(r.profile, "string", t, "chrome.profile"),
-      dataDir: w(r.dataDir, "string", t, "chrome.dataDir"),
-      executablePath: w(r.executablePath, "string", t, "chrome.executablePath"),
-      channel: i,
-      forTesting: a,
-      headless: w(r.headless, "boolean", t, "chrome.headless"),
-      buildExtension: w(r.buildExtension, "boolean", t, "chrome.buildExtension")
-    });
-  }
-  return n;
-}
-function dt(e) {
-  try {
-    const t = new URL(e);
-    return t.protocol === "http:" || t.protocol === "https:";
-  } catch {
-    return !1;
-  }
-}
-function U(e) {
-  const t = De().user, o = Y(t) ?? {};
-  return e(o), k(S(t), { recursive: !0 }), T(t, `${JSON.stringify(o, null, 2)}
-`), t;
-}
-function de(e) {
-  return Object.fromEntries(Object.entries(e).filter(([, t]) => t !== void 0));
-}
-function H(e, t, o) {
-  if (typeof e != "object" || e === null || Array.isArray(e))
-    throw new Error(`expected an object at ${o} of ${t}`);
-  return e;
-}
-function B(e, t, o, n) {
-  for (const r of Object.keys(e))
-    if (!t.includes(r))
-      throw new Error(
-        `unknown key "${r}" at ${n} of ${o} — known keys: ${t.join(", ")}`
-      );
-}
-function w(e, t, o, n) {
-  if (e !== void 0) {
-    if (typeof e !== t)
-      throw new Error(`expected a ${t} for ${n} in ${o}`);
-    return e;
-  }
-}
-async function G(e, t, o) {
-  const n = tt({ input: process.stdin, output: process.stderr });
+import { Command as wt } from "commander";
+import { join as d, resolve as C, delimiter as gt, dirname as bt } from "node:path";
+import { cacheDir as F, packageRoot as V, runningFromSource as yt, isCi as ie, discoverSessionBrowser as U, openInSessionBrowser as R, sessionBrowserBinary as Oe, launchSessionBrowser as je, decideBrowserAction as vt } from "@habemus-papadum/aiui-util";
+import { execa as T } from "execa";
+import { existsSync as v, mkdirSync as G, writeFileSync as K, readFileSync as L, realpathSync as $t, readdirSync as Y, chmodSync as Ct, accessSync as kt, constants as xt, rmSync as Tt, lstatSync as It } from "node:fs";
+import { detectBrowserPlatform as Ne, resolveBuildId as Ue, Browser as E, getInstalledBrowsers as Le, install as Et, uninstall as Pt } from "@puppeteer/browsers";
+import { u as _, l as S, C as ve, m as Dt, d as ee, p as te, c as St, r as ne, a as Me, f as k, b as Re, e as At } from "./config-Cis6kCik.js";
+import { createInterface as _t } from "node:readline/promises";
+import u from "chalk";
+import { projectCacheDir as Be, listMcpServers as M, selectMcpServer as He, agentsByPid as Fe, listClaudeAgents as Ve } from "@habemus-papadum/aiui-claude-channel";
+import { homedir as se, networkInterfaces as Ge } from "node:os";
+import { spawn as Ot } from "node:child_process";
+import { Separator as oe, select as O, input as jt } from "@inquirer/prompts";
+async function W(e, t, n) {
+  const o = _t({ input: process.stdin, output: process.stderr });
   try {
     const r = t.map(
-      (i) => `  ${g.bold(`[${i.key === o ? i.key.toUpperCase() : i.key}]`)} ${i.label}`
+      (i) => `  ${u.bold(`[${i.key === n ? i.key.toUpperCase() : i.key}]`)} ${i.label}`
     ).join(`
 `);
     for (; ; ) {
-      const a = (await n.question(`${g.cyan(e)}
+      const s = (await o.question(`${u.cyan(e)}
 ${r}
 > `)).trim().toLowerCase();
-      if (!a) {
-        if (o !== void 0)
-          return o;
+      if (!s) {
+        if (n !== void 0)
+          return n;
         continue;
       }
-      const s = t.find((c) => c.key === a) ?? t.find((c) => c.label.toLowerCase().startsWith(a));
-      if (s)
-        return s.key;
+      const c = t.find((a) => a.key === s) ?? t.find((a) => a.label.toLowerCase().startsWith(s));
+      if (c)
+        return c.key;
     }
   } finally {
-    n.close();
+    o.close();
   }
 }
-function m(e, t) {
-  console.error(`${g.bgRed.white.bold(" ERROR ")} ${g.red.bold(e)}`), t && console.error(g.dim(t));
+function b(e, t) {
+  console.error(`${u.bgRed.white.bold(" ERROR ")} ${u.red.bold(e)}`), t && console.error(u.dim(t));
 }
-function _(e, t) {
-  console.error(`${g.bgYellow.black.bold(" WARN ")} ${g.yellow.bold(e)}`), t && console.error(g.dim(t));
+function $(e, t) {
+  console.error(`${u.bgYellow.black.bold(" WARN ")} ${u.yellow.bold(e)}`), t && console.error(u.dim(t));
 }
-function v(e, t) {
-  console.error(`${g.bgCyan.black.bold(" NOTE ")} ${g.cyan(e)}`), t && console.error(g.dim(t));
+function w(e, t) {
+  console.error(`${u.bgCyan.black.bold(" NOTE ")} ${u.cyan(e)}`), t && console.error(u.dim(t));
 }
-const ke = 1440 * 60 * 1e3, ht = 4e3;
+const Ke = 1440 * 60 * 1e3, Nt = 4e3;
 function A(e = !0) {
-  return q("chrome", { create: e });
+  return F("chrome", { create: e });
 }
-const Te = "update-state.json";
-function R() {
+const Ye = "update-state.json";
+function q() {
   try {
-    return JSON.parse(P(l(A(!1), Te), "utf8"));
+    return JSON.parse(L(d(A(!1), Ye), "utf8"));
   } catch {
     return {};
   }
 }
-function j(e) {
+function z(e) {
   const t = A();
-  k(t, { recursive: !0 }), T(l(t, Te), `${JSON.stringify({ ...R(), ...e })}
+  G(t, { recursive: !0 }), K(d(t, Ye), `${JSON.stringify({ ...q(), ...e })}
 `);
 }
-function J(e, t) {
-  const o = e.split(".").map(Number), n = t.split(".").map(Number);
-  for (let r = 0; r < Math.max(o.length, n.length); r++) {
-    const i = (o[r] ?? 0) - (n[r] ?? 0);
+function ae(e, t) {
+  const n = e.split(".").map(Number), o = t.split(".").map(Number);
+  for (let r = 0; r < Math.max(n.length, o.length); r++) {
+    const i = (n[r] ?? 0) - (o[r] ?? 0);
     if (i)
       return i < 0 ? -1 : 1;
   }
   return 0;
 }
-async function W() {
+async function ce() {
   const e = A(!1);
-  if (!b(e))
+  if (!v(e))
     return;
-  const n = (await ve({ cacheDir: e })).filter((r) => r.browser === x.CHROME).sort((r, i) => J(r.buildId, i.buildId)).at(-1);
-  return n && { buildId: n.buildId, executablePath: n.executablePath };
+  const o = (await Le({ cacheDir: e })).filter((r) => r.browser === E.CHROME).sort((r, i) => ae(r.buildId, i.buildId)).at(-1);
+  return o && { buildId: o.buildId, executablePath: o.executablePath };
 }
-async function z(e = {}) {
-  const { maxAgeMs: t = ke, timeoutMs: o = ht, now: n = Date.now() } = e, r = R();
-  if (r.latestBuildId && r.checkedAt && n - r.checkedAt < t)
+async function le(e = {}) {
+  const { maxAgeMs: t = Ke, timeoutMs: n = Nt, now: o = Date.now() } = e, r = q();
+  if (r.latestBuildId && r.checkedAt && o - r.checkedAt < t)
     return r.latestBuildId;
-  const i = be();
+  const i = Ne();
   if (i)
     try {
-      const a = await wt(
-        ye(x.CHROME, i, "stable"),
-        o
+      const s = await Rt(
+        Ue(E.CHROME, i, "stable"),
+        n
       );
-      return j({ checkedAt: n, latestBuildId: a }), a;
+      return z({ checkedAt: o, latestBuildId: s }), s;
     } catch {
       return r.latestBuildId;
     }
 }
-async function C(e) {
-  const t = A(), o = await Xe({
-    browser: x.CHROME,
+async function P(e) {
+  const t = A(), n = await Et({
+    browser: E.CHROME,
     buildId: e,
     cacheDir: t,
     downloadProgressCallback: "default"
-  }), n = (await ve({ cacheDir: t })).filter(
-    (r) => r.browser === x.CHROME && r.buildId !== e
+  }), o = (await Le({ cacheDir: t })).filter(
+    (r) => r.browser === E.CHROME && r.buildId !== e
   );
-  for (const r of n)
-    await Ze({ browser: x.CHROME, buildId: r.buildId, cacheDir: t });
-  return { buildId: e, executablePath: o.executablePath };
+  for (const r of o)
+    await Pt({ browser: E.CHROME, buildId: r.buildId, cacheDir: t });
+  return { buildId: e, executablePath: n.executablePath };
 }
-async function ft(e) {
-  const t = be();
+async function Ut(e) {
+  const t = Ne();
   if (!t)
     throw new Error("could not detect a supported platform for Chrome for Testing");
-  const o = await ye(x.CHROME, t, "stable");
-  j({ checkedAt: Date.now(), latestBuildId: o });
-  const n = await W();
-  if (n && J(n.buildId, o) >= 0)
-    return e(`Chrome for Testing ${n.buildId} is up to date`), { ...n, outcome: "current" };
+  const n = await Ue(E.CHROME, t, "stable");
+  z({ checkedAt: Date.now(), latestBuildId: n });
+  const o = await ce();
+  if (o && ae(o.buildId, n) >= 0)
+    return e(`Chrome for Testing ${o.buildId} is up to date`), { ...o, outcome: "current" };
   e(
-    n ? `updating Chrome for Testing ${n.buildId} → ${o}…` : `installing Chrome for Testing ${o}…`
+    o ? `updating Chrome for Testing ${o.buildId} → ${n}…` : `installing Chrome for Testing ${n}…`
   );
-  const r = await C(o);
-  return e(`Chrome for Testing ${o} installed at ${r.executablePath}`), { ...r, outcome: n ? "updated" : "installed" };
+  const r = await P(n);
+  return e(`Chrome for Testing ${n} installed at ${r.executablePath}`), { ...r, outcome: o ? "updated" : "installed" };
 }
-async function Ie(e) {
-  const { mode: t, interactive: o, now: n = Date.now() } = e, r = await W();
-  if (t === "off" || !o)
+async function We(e) {
+  const { mode: t, interactive: n, now: o = Date.now() } = e, r = await ce();
+  if (t === "off" || !n)
     return r == null ? void 0 : r.executablePath;
   if (!r)
-    return mt(t, n);
-  const i = await z({ now: n });
-  return !i || J(i, r.buildId) <= 0 ? r.executablePath : pt(t, r, i);
+    return Lt(t, o);
+  const i = await le({ now: o });
+  return !i || ae(i, r.buildId) <= 0 ? r.executablePath : Mt(t, r, i);
 }
-async function mt(e, t) {
-  const o = await z({ now: t });
-  if (!o)
+async function Lt(e, t) {
+  const n = await le({ now: t });
+  if (!n)
     return;
   if (e === "auto")
-    return v(`installing Chrome for Testing ${o} (chrome.forTesting: "auto")…`), (await C(o)).executablePath;
-  const n = R();
-  if (n.installDeclinedAt && t - n.installDeclinedAt < ke)
+    return w(`installing Chrome for Testing ${n} (chrome.forTesting: "auto")…`), (await P(n)).executablePath;
+  const o = q();
+  if (o.installDeclinedAt && t - o.installDeclinedAt < Ke)
     return;
-  const r = await G(
-    `Chrome for Testing isn't installed. It's the recommended browser for aiui — version-pinned, separate from your real Chrome, and it auto-loads the aiui DevTools panel (branded Chrome can't). Download ${o} (~160 MB) to ${A(!1)}?`,
+  const r = await W(
+    `Chrome for Testing isn't installed. It's the recommended browser for aiui — version-pinned, separate from your real Chrome, and it auto-loads the aiui DevTools panel (branded Chrome can't). Download ${n} (~160 MB) to ${A(!1)}?`,
     [
       { key: "y", label: "yes, install it" },
       { key: "n", label: "not now — use the regular Chrome (asks again tomorrow)" },
@@ -384,279 +150,414 @@ async function mt(e, t) {
     "y"
   );
   if (r === "y")
-    return (await C(o)).executablePath;
+    return (await P(n)).executablePath;
   if (r === "never") {
-    const i = U((a) => {
-      a.chrome = { ...a.chrome, forTesting: "off" };
+    const i = _((s) => {
+      s.chrome = { ...s.chrome, forTesting: "off" };
     });
-    v(`wrote chrome.forTesting: "off" to ${i}`);
+    w(`wrote chrome.forTesting: "off" to ${i}`);
   } else
-    j({ installDeclinedAt: t });
+    z({ installDeclinedAt: t });
 }
-async function pt(e, t, o) {
+async function Mt(e, t, n) {
   if (e === "auto")
-    return v(
-      `updating Chrome for Testing ${t.buildId} → ${o} (chrome.forTesting: "auto")…`
-    ), (await C(o)).executablePath;
-  if (R().skippedBuildId === o)
+    return w(
+      `updating Chrome for Testing ${t.buildId} → ${n} (chrome.forTesting: "auto")…`
+    ), (await P(n)).executablePath;
+  if (q().skippedBuildId === n)
     return t.executablePath;
-  switch (await G(
-    `Your Chrome for Testing (${t.buildId}) is out of date — latest stable is ${o}. Update?`,
+  switch (await W(
+    `Your Chrome for Testing (${t.buildId}) is out of date — latest stable is ${n}. Update?`,
     [
       { key: "y", label: "yes, just this once" },
       { key: "a", label: 'automatically, now and from here on (writes chrome.forTesting: "auto")' },
       {
         key: "s",
-        label: `skip ${o} — keep ${t.buildId}, don't ask again for this version`
+        label: `skip ${n} — keep ${t.buildId}, don't ask again for this version`
       },
       { key: "never", label: 'never ask again (writes chrome.forTesting: "off")' }
     ],
     "y"
   )) {
     case "y":
-      return (await C(o)).executablePath;
+      return (await P(n)).executablePath;
     case "a": {
-      const r = U((i) => {
+      const r = _((i) => {
         i.chrome = { ...i.chrome, forTesting: "auto" };
       });
-      return v(`wrote chrome.forTesting: "auto" to ${r}`), (await C(o)).executablePath;
+      return w(`wrote chrome.forTesting: "auto" to ${r}`), (await P(n)).executablePath;
     }
     case "never": {
-      const r = U((i) => {
+      const r = _((i) => {
         i.chrome = { ...i.chrome, forTesting: "off" };
       });
-      return v(`wrote chrome.forTesting: "off" to ${r}`), t.executablePath;
+      return w(`wrote chrome.forTesting: "off" to ${r}`), t.executablePath;
     }
     default:
-      return j({ skippedBuildId: o }), t.executablePath;
+      return z({ skippedBuildId: n }), t.executablePath;
   }
 }
-async function wt(e, t) {
-  let o;
+async function Rt(e, t) {
+  let n;
   try {
     return await Promise.race([
       e,
-      new Promise((n, r) => {
-        o = setTimeout(() => r(new Error(`timed out after ${t}ms`)), t);
+      new Promise((o, r) => {
+        n = setTimeout(() => r(new Error(`timed out after ${t}ms`)), t);
       })
     ]);
   } finally {
-    clearTimeout(o);
+    clearTimeout(n);
   }
 }
-const gt = ot(import.meta.url);
-function D(e) {
-  const t = e.split("/");
-  for (const o of gt.resolve.paths(e) ?? []) {
-    const n = l(o, ...t, "package.json");
-    if (b(n))
-      return S(n);
-  }
-  throw new Error(`could not locate the "${e}" package (is it installed?)`);
-}
-function X(e, t) {
-  const o = D(e), n = JSON.parse(P(l(o, "package.json"), "utf8")), r = typeof n.bin == "string" ? n.bin : bt(n.bin);
+function J(e, t) {
+  const n = V(e), o = JSON.parse(L(d(n, "package.json"), "utf8")), r = typeof o.bin == "string" ? o.bin : Bt(o.bin);
   if (!r)
     throw new Error(
       `package ${e} declares no bin`
     );
-  if (b(l(o, "src"))) {
+  if (yt(n)) {
     const i = r.replace(/^\.?\/?dist\//, "src/").replace(/\.js$/, ".ts");
-    return { command: process.execPath, args: ["--import", "tsx", E(o, i)] };
+    return { command: process.execPath, args: ["--import", "tsx", C(n, i)] };
   }
-  return { command: process.execPath, args: [E(o, r)] };
+  return { command: process.execPath, args: [C(n, r)] };
 }
-function bt(e) {
+function Bt(e) {
   return e ? Object.values(e)[0] : void 0;
 }
-const yt = "chrome-devtools", Ae = "@habemus-papadum/aiui-devtools-extension", vt = "default", xt = /^[A-Za-z0-9][A-Za-z0-9._-]*$/;
-function Oe(e, t = {}, o = process.env) {
-  return e.noChrome ? !1 : e.chrome ? !0 : t.enabled === !1 ? !1 : !Z(o);
+const Ht = "chrome-devtools", Ft = "@habemus-papadum/aiui-intent-client", Vt = "default", Gt = /^[A-Za-z0-9][A-Za-z0-9._-]*$/;
+function qe(e, t = {}, n = process.env) {
+  return e.noChrome ? !1 : e.chrome ? !0 : t.enabled === !1 ? !1 : !ie(n);
 }
-function Z(e = process.env) {
-  const t = e.CI;
-  return t !== void 0 && t !== "" && t !== "0" && t.toLowerCase() !== "false";
-}
-function $(e, t = {}, o = process.cwd()) {
+function x(e, t = {}, n = process.cwd()) {
   if (t.executablePath && t.channel)
     throw new Error(
       "config sets both chrome.executablePath and chrome.channel — they pick the browser two different ways; keep exactly one"
     );
-  const n = e.chromeProfile !== void 0 || e.chromeDataDir !== void 0, r = e.chromeDataDir ?? (n ? void 0 : t.dataDir), i = e.chromeProfile ?? (n ? void 0 : t.profile);
+  const o = e.chromeProfile !== void 0 || e.chromeDataDir !== void 0, r = e.chromeDataDir ?? (o ? void 0 : t.dataDir), i = e.chromeProfile ?? (o ? void 0 : t.profile);
   return {
-    userDataDir: Se({ dataDir: r, profile: i }, o),
+    userDataDir: ze({ dataDir: r, profile: i }, n),
     // A configured endpoint means the browser is managed elsewhere (usually
     // another machine) — that's always attach, whatever `mode` says.
     mode: t.browserUrl ? "attach" : t.mode ?? "attach",
     browserUrl: t.browserUrl,
     debugPort: t.debugPort ?? 0,
-    executablePath: t.executablePath && E(o, t.executablePath),
+    executablePath: t.executablePath && C(n, t.executablePath),
     channel: t.channel,
-    headless: t.headless ?? !1,
-    buildExtension: t.buildExtension ?? !0
+    headless: t.headless ?? !1
   };
 }
-function Se(e, t = process.cwd()) {
+function ze(e, t = process.cwd()) {
   if (e.dataDir)
-    return E(t, e.dataDir);
-  const o = e.profile ?? vt;
-  if (!xt.test(o))
+    return C(t, e.dataDir);
+  const n = e.profile ?? Vt;
+  if (!Gt.test(n))
     throw new Error(
-      `invalid chrome profile name "${o}" — use letters, digits, ".", "_", "-" (or --aiui-chrome-data-dir for an arbitrary path)`
+      `invalid chrome profile name "${n}" — use letters, digits, ".", "_", "-" (or --aiui-chrome-data-dir for an arbitrary path)`
     );
-  return l(xe(t), "chrome", o);
+  return d(Be(t), "chrome", n);
 }
-function M() {
-  let e;
+const Kt = "dist-ext";
+function Yt() {
   try {
-    e = we(l(D(Ae), "extension"));
+    const e = $t(V(Ft));
+    return { root: e, outDir: d(e, Kt) };
   } catch {
     return;
   }
-  return b(l(e, "js")) ? e : void 0;
 }
-async function Q() {
-  let e, t;
-  try {
-    e = we(D(Ae)), t = l(D("typescript"), "bin", "tsc");
-  } catch {
-    return;
-  }
-  if (!b(l(e, "src")))
-    return;
-  const o = await p(process.execPath, [t, "-p", l(e, "tsconfig.json")], {
-    cwd: e,
-    reject: !1,
-    all: !0
-  });
-  if (o.exitCode) {
-    _(
-      "aiui-devtools-extension failed to compile — the DevTools panel will be stale or missing",
-      o.all || o.message
-    );
-    return;
-  }
-  const n = l(e, "build-debug-ui.mjs");
-  if (!b(n))
-    return;
-  const r = await p(process.execPath, [n], {
-    cwd: e,
-    reject: !1,
-    all: !0
-  });
-  r.exitCode && _(
-    "aiui-devtools-extension debug-ui bundle failed — the Intent pane will be degraded",
-    r.all || r.message
+function Wt(e) {
+  return e === void 0 ? { state: "absent" } : v(d(e.outDir, "manifest.json")) ? { state: "ready", dir: e.outDir } : { state: "unbuilt", root: e.root };
+}
+function j() {
+  return Wt(Yt());
+}
+function Je(e) {
+  e.state === "unbuilt" && w(
+    "the aiui intent client has no MV3 bundle yet, so this launch won't load it",
+    `Build it once:  pnpm -C packages/aiui-intent-client build:ext
+then relaunch — or load it into the RUNNING browser:
+  pnpm -C packages/aiui-intent-client ext`
   );
 }
-function Ue(e, t) {
-  if (!t || e.executablePath)
+function Xe(e, t) {
+  if (!t.length || e.executablePath)
     return;
-  const o = l(e.userDataDir, "aiui-devtools-extension-hint");
-  if (!b(o)) {
-    v(
-      "the aiui DevTools panel can't auto-load into regular Chrome (≥ 137 ignores --load-extension)",
+  const n = d(e.userDataDir, "aiui-extension-autoload-hint");
+  if (!v(n)) {
+    w(
+      "the aiui intent client can't auto-load into regular Chrome (≥ 137 ignores --load-extension)",
       `Load it once in the launched Chrome — chrome://extensions → Developer mode → Load unpacked →
-${t}
+${t.join(`
+`)}
 — and this profile remembers it. Or switch to Chrome for Testing (\`aiui chrome install\`),
 which auto-loads it. This note won't repeat for this profile.`
     );
     try {
-      T(o, `${(/* @__PURE__ */ new Date()).toISOString()}
+      K(n, `${(/* @__PURE__ */ new Date()).toISOString()}
 `);
     } catch {
     }
   }
 }
-function V(e) {
+function Z(e) {
   return {
     command: "npx",
     args: ["-y", "chrome-devtools-mcp@latest", "--browser-url", e]
   };
 }
-function Ct(e, t) {
-  const o = [
+function qt(e, t = []) {
+  const n = [
     "-y",
     "chrome-devtools-mcp@latest",
     "--userDataDir",
     e.userDataDir,
     "--ignoreDefaultChromeArg=--disable-extensions"
   ];
-  return e.executablePath && o.push("--executablePath", e.executablePath), e.channel && o.push("--channel", e.channel), e.headless && o.push("--headless"), t && o.push(`--chromeArg=--load-extension=${t}`), { command: "npx", args: o };
-}
-const Et = 9222;
-async function $t(e) {
-  const o = { ...N().chrome };
-  if (o.browserUrl) {
-    v(
-      `config pins chrome.browserUrl to ${o.browserUrl} — the browser is managed elsewhere`,
+  return e.executablePath && n.push("--executablePath", e.executablePath), e.channel && n.push("--channel", e.channel), e.headless && n.push("--headless"), t.length && n.push(`--chromeArg=--load-extension=${t.join(",")}`), { command: "npx", args: n };
+}
+const N = "com.habemus_papadum.aiui", ue = "cdpbfpcelmifhagikjlfpgfipggcmdeg";
+function Ze(e, t) {
+  if (e === "darwin") {
+    const n = d(t, "Library", "Application Support");
+    return [
+      d(n, "Google", "Chrome", "NativeMessagingHosts"),
+      d(n, "Chromium", "NativeMessagingHosts"),
+      d(n, "Microsoft Edge", "NativeMessagingHosts")
+    ];
+  }
+  if (e === "linux")
+    return [
+      d(t, ".config", "google-chrome", "NativeMessagingHosts"),
+      d(t, ".config", "chromium", "NativeMessagingHosts"),
+      d(t, ".config", "microsoft-edge", "NativeMessagingHosts")
+    ];
+  throw new Error(`aiui extension: unsupported platform ${e} (macOS/Linux only for now)`);
+}
+function zt(e, t, n) {
+  const o = (r) => `"${r.replace(/(["\\$`])/g, "\\$1")}"`;
+  return [
+    "#!/bin/sh",
+    "# aiui native-messaging host wrapper — generated by `aiui extension install-native-host`.",
+    "# Chrome spawns this with a minimal env and cwd /; everything below is absolute.",
+    `cd ${o(e)} || exit 1`,
+    `exec ${[t, ...n].map(o).join(" ")} native-host`,
+    ""
+  ].join(`
+`);
+}
+const Jt = ["install-native-host", "status"];
+async function Xt(e, t = {}) {
+  switch (e) {
+    case "install-native-host":
+      Qt(t);
+      return;
+    case "status":
+      en();
+      return;
+    case "dev":
+    case "reload":
+      b(
+        `aiui extension ${e} is gone — the frozen aiui-extension was deleted`,
+        `The intent client's extension is a static build:
+  pnpm -C packages/aiui-intent-client ext   (build + load into the session browser)`
+      ), process.exitCode = 1;
+      return;
+    default:
+      throw new Error(`aiui extension: unknown action "${e}" (${Jt.join(" | ")})`);
+  }
+}
+function Qe() {
+  return d(F("native-host", { create: !0 }), "aiui-native-host.sh");
+}
+function et(e) {
+  const t = J("@habemus-papadum/aiui"), n = V("@habemus-papadum/aiui"), o = Qe();
+  tt(o, zt(n, t.command, t.args)), Ct(o, 493);
+  const r = {
+    name: N,
+    description: "aiui native-messaging host: channel discovery for the aiui intent client",
+    path: o,
+    type: "stdio",
+    // The host answers one question — "which channels are up?" — for the
+    // intent client's cold start. An overridden id rides alongside the stable
+    // one so a custom build never locks the shipped client out.
+    allowed_origins: [
+      .../* @__PURE__ */ new Set([
+        `chrome-extension://${e}/`,
+        `chrome-extension://${ue}/`
+      ])
+    ]
+  };
+  return { wrapper: o, body: `${JSON.stringify(r, null, 2)}
+` };
+}
+function tt(e, t) {
+  try {
+    if (L(e, "utf8") === t)
+      return !1;
+  } catch {
+  }
+  return K(e, t), !0;
+}
+function Zt(e, t = {}) {
+  const { body: n } = et(t.extensionId ?? ue), o = d(e, "NativeMessagingHosts");
+  G(o, { recursive: !0 }), tt(d(o, `${N}.json`), n);
+}
+function B(e, t, n) {
+  if (t)
+    try {
+      Zt(e);
+    } catch (o) {
+      n(
+        "couldn't install the native-messaging host into the browser profile — the intent extension will need a manually typed port",
+        o instanceof Error ? o.message : String(o)
+      );
+    }
+}
+function Qt(e) {
+  const t = e.extensionId ?? ue, { wrapper: n, body: o } = et(t);
+  process.stdout.write(`wrote ${n}
+`);
+  for (const r of Ze(process.platform, se())) {
+    G(r, { recursive: !0 });
+    const i = d(r, `${N}.json`);
+    K(i, o), process.stdout.write(`wrote ${i}
+`);
+  }
+  process.stdout.write(
+    `native host installed for extension ${t}.
+No browser restart needed; reload the extension if it was already running.
+(Session browsers launched by aiui get the manifest in their own profile
+automatically — this global install is for browsers aiui does not manage.)
+`
+  );
+}
+function en() {
+  const e = Qe();
+  process.stdout.write(`wrapper: ${e} ${v(e) ? "(present)" : "(MISSING)"}
+`);
+  for (const o of Ze(process.platform, se()))
+    $e(d(o, `${N}.json`));
+  const t = d(process.cwd(), ".aiui-cache", "chrome");
+  let n = [];
+  try {
+    n = Y(t, { withFileTypes: !0 }).filter((o) => o.isDirectory()).map((o) => o.name);
+  } catch {
+  }
+  for (const o of n)
+    $e(d(t, o, "NativeMessagingHosts", `${N}.json`));
+}
+function $e(e) {
+  var t;
+  if (!v(e)) {
+    process.stdout.write(`absent:  ${e}
+`);
+    return;
+  }
+  try {
+    const n = JSON.parse(L(e, "utf8"));
+    process.stdout.write(`present: ${e} → ${(t = n.allowed_origins) == null ? void 0 : t.join(", ")}
+`);
+  } catch {
+    process.stdout.write(`present: ${e} (unparseable)
+`);
+  }
+}
+const tn = 9222;
+async function nn(e) {
+  const n = { ...S().chrome };
+  if (n.browserUrl) {
+    w(
+      `config pins chrome.browserUrl to ${n.browserUrl} — the browser is managed elsewhere`,
       "Run `aiui browser` on the machine that should host it (and drop browserUrl there)."
     );
     return;
   }
-  let n;
+  let o, r;
   try {
-    n = Ne(e.remotePort, "--remote-port") ?? Et;
-  } catch (c) {
-    m(c instanceof Error ? c.message : String(c)), process.exitCode = 1;
+    o = Ce(e.remotePort, "--remote-port") ?? tn, r = Ce(e.port, "--port");
+  } catch (a) {
+    b(a instanceof Error ? a.message : String(a)), process.exitCode = 1;
     return;
   }
-  let r = o;
   const i = {
     chromeProfile: e.tunnel ? void 0 : e.profile,
-    chromeDataDir: e.dataDir ?? (e.tunnel ? Pt(e.tunnel, e.profile) : void 0)
+    chromeDataDir: e.dataDir ?? (e.tunnel ? on(e.tunnel, e.profile) : void 0)
   };
-  let a = he($(i, r), e), s = await I(a.userDataDir);
-  if (s)
-    fe("session browser already running", a, s), e.open && (await Pe(s.browserUrl, e.open), console.log(`opened ${e.open}`));
+  let s = x(i, n);
+  r !== void 0 && (s = { ...s, debugPort: r });
+  let c = await U(s.userDataDir);
+  if (c)
+    B(
+      s.userDataDir,
+      j().state === "ready",
+      w
+    ), ke("session browser already running", s, c), e.open && (await R(c.browserUrl, e.open), console.log(`opened ${e.open}`));
   else {
-    const c = !!process.stdin.isTTY && !!process.stdout.isTTY && !Z();
-    if (!r.executablePath && !r.channel) {
-      const h = await Ie({ mode: r.forTesting ?? "prompt", interactive: c });
-      h && (r = { ...r, executablePath: h }, a = he($(i, r), e));
-    }
-    a.buildExtension && await Q();
-    const u = M();
-    c && Ue(a, u);
-    let f;
+    const a = !!process.stdin.isTTY && !!process.stdout.isTTY && !ie();
     try {
-      f = Ee(a);
-    } catch (h) {
-      m(
-        "no browser to launch",
-        `${h instanceof Error ? h.message : String(h)}
-Install Chrome for Testing with \`aiui chrome install\`, or set chrome.executablePath.`
-      ), process.exitCode = 1;
-      return;
-    }
-    try {
-      s = await $e({
-        binary: f,
-        userDataDir: a.userDataDir,
-        debugPort: a.debugPort,
-        extensionDir: u,
-        headless: a.headless || e.headless,
+      const l = await nt({
+        flags: i,
+        config: n,
+        interactive: a,
+        debugPort: r,
+        headless: e.headless,
         startUrl: e.open
       });
-    } catch (h) {
-      m(
+      c = l.session, s = l.settings;
+    } catch (l) {
+      b(
         "the session browser failed to start",
-        h instanceof Error ? h.message : String(h)
+        l instanceof Error ? l.message : String(l)
       ), process.exitCode = 1;
       return;
     }
-    fe("session browser started", a, s);
+    ke("session browser started", s, c);
+  }
+  e.tunnel ? await an(e.tunnel, o, c.port) : cn(c, o);
+}
+async function nt(e) {
+  let t = e.config ?? {};
+  const n = e.flags ?? {}, o = () => {
+    const l = x(n, t);
+    return e.debugPort === void 0 ? l : { ...l, debugPort: e.debugPort };
+  };
+  let r = o();
+  if (!t.executablePath && !t.channel) {
+    const l = await We({
+      mode: t.forTesting ?? "prompt",
+      interactive: e.interactive
+    });
+    l && (t = { ...t, executablePath: l }, r = o());
+  }
+  const i = j(), s = i.state === "ready" ? [i.dir] : [];
+  B(r.userDataDir, i.state === "ready", w), e.interactive && (Xe(r, s), Je(i));
+  let c;
+  try {
+    c = Oe(r);
+  } catch (l) {
+    throw new Error(
+      `${l instanceof Error ? l.message : String(l)}
+Install Chrome for Testing with \`aiui chrome install\`, or set chrome.executablePath.`
+    );
   }
-  e.tunnel ? await Tt(e.tunnel, n, s.port) : It(s, n);
+  return { session: await je({
+    binary: c,
+    userDataDir: r.userDataDir,
+    debugPort: r.debugPort,
+    extensionDirs: s,
+    headless: r.headless || e.headless,
+    startUrl: e.startUrl
+  }), settings: r };
 }
-function Pt(e, t) {
-  const o = t ?? Dt(e);
-  return l(q("browser-profiles", { create: !1 }), o);
+function on(e, t) {
+  const n = t ?? rn(e);
+  return d(F("browser-profiles", { create: !1 }), n);
 }
-function Dt(e) {
+function rn(e) {
   return (e.includes("@") ? e.slice(e.indexOf("@") + 1) : e).replace(/[^A-Za-z0-9._-]/g, "-") || "remote";
 }
-function kt(e, t, o) {
+function sn(e, t, n) {
   return [
     // No remote command — the connection exists only to carry the forward...
     "-N",
@@ -665,114 +566,97 @@ function kt(e, t, o) {
     "-o",
     "ExitOnForwardFailure=yes",
     "-R",
-    `${t}:localhost:${o}`,
+    `${t}:localhost:${n}`,
     e
   ];
 }
-function _e(e) {
+function ot(e) {
   return `aiui claude --aiui-browser-url http://127.0.0.1:${e}`;
 }
-async function Tt(e, t, o) {
+async function an(e, t, n) {
   console.log(
     `
-tunneling ${e}:${t} → localhost:${o} — on ${e}, run:
+tunneling ${e}:${t} → localhost:${n} — on ${e}, run:
 
-  ${_e(t)}
+  ${ot(t)}
 
 (Ctrl-C closes the tunnel; the browser stays running.)`
   );
-  const n = await p("ssh", kt(e, t, o), {
+  const o = await T("ssh", sn(e, t, n), {
     stdio: "inherit",
     reject: !1
   });
-  n.failed && !n.isTerminated && (m(
-    `the ssh tunnel to ${e} exited (code ${n.exitCode})`,
+  o.failed && !o.isTerminated && (b(
+    `the ssh tunnel to ${e} exited (code ${o.exitCode})`,
     "A taken remote port exits immediately (ExitOnForwardFailure) — try another --remote-port. The browser is still running; rerun `aiui browser --tunnel …` to reconnect."
   ), process.exitCode = 1);
 }
-function Ne(e, t) {
+function Ce(e, t) {
   if (e === void 0)
     return;
-  const o = Number(e);
-  if (!(Number.isInteger(o) && o >= 0 && o <= 65535))
+  const n = Number(e);
+  if (!(Number.isInteger(n) && n >= 0 && n <= 65535))
     throw new Error(`invalid ${t} ${e} — expected 0..65535`);
-  return o;
-}
-function he(e, t) {
-  const o = Ne(t.port, "--port");
-  return o === void 0 ? e : { ...e, debugPort: o };
+  return n;
 }
-function fe(e, t, o) {
-  console.log(e), console.log(`  profile:        ${t.userDataDir}`), console.log(`  debug endpoint: ${o.browserUrl}`);
+function ke(e, t, n) {
+  console.log(e), console.log(`  profile:        ${t.userDataDir}`), console.log(`  debug endpoint: ${n.browserUrl}`);
 }
-function It(e, t) {
+function cn(e, t) {
   console.log(
     `
 An \`aiui claude\` in this profile's project attaches automatically. For a *remote*
 session, rerun with \`--tunnel <[user@]host>\` — or do it by hand:
   ssh -N -o ExitOnForwardFailure=yes -R ${t}:localhost:${e.port} <host>
-then, on the remote: ${_e(t)}`
+then, on the remote: ${ot(t)}`
   );
 }
-async function At(e, t) {
-  var i, a;
-  const o = N(), n = $(
+async function ln(e, t) {
+  var i, s;
+  const n = S(), o = x(
     { chromeProfile: t.profile, chromeDataDir: t.dataDir },
-    o.chrome ?? {}
-  ), r = ((i = o.chrome) == null ? void 0 : i.browserUrl) ?? ((a = await I(n.userDataDir)) == null ? void 0 : a.browserUrl);
+    n.chrome ?? {}
+  ), r = ((i = n.chrome) == null ? void 0 : i.browserUrl) ?? ((s = await U(o.userDataDir)) == null ? void 0 : s.browserUrl);
   if (!r) {
-    m(
+    b(
       "no session browser is running for this profile",
-      `Start one with \`aiui browser\` (profile: ${n.userDataDir}).`
+      `Start one with \`aiui browser\` (profile: ${o.userDataDir}).`
     ), process.exitCode = 1;
     return;
   }
   try {
-    await Pe(r, e), console.log(`opened ${e}`);
-  } catch (s) {
-    m(`couldn't open ${e}`, s instanceof Error ? s.message : String(s)), process.exitCode = 1;
+    await R(r, e), console.log(`opened ${e}`);
+  } catch (c) {
+    b(`couldn't open ${e}`, c instanceof Error ? c.message : String(c)), process.exitCode = 1;
   }
 }
-async function Ot(e) {
+async function un(e) {
   const [t] = e;
   switch (t) {
     case "install":
     case "update":
-      await ft((o) => console.log(o));
+      await Ut((n) => console.log(n));
       return;
     case "status":
-      await St();
-      return;
-    case "extension": {
-      await Q();
-      const o = M();
-      if (!o) {
-        m(
-          "the aiui-devtools-extension is not available in this install",
-          "In a dev checkout, build it first: pnpm --filter @habemus-papadum/aiui-devtools-extension build"
-        ), process.exitCode = 1;
-        return;
-      }
-      console.log(o);
+      await dn();
       return;
-    }
     default:
-      m(
+      b(
         t ? `unknown aiui chrome action: ${t}` : "aiui chrome needs an action",
-        "Usage: aiui chrome <install | update | status | extension>"
+        "Usage: aiui chrome <install | update | status>"
       ), process.exitCode = 1;
       return;
   }
 }
-async function St() {
-  const t = N().chrome ?? {}, o = { chrome: !1, noChrome: !1 }, n = await W(), r = await z();
-  if (console.log("Chrome for Testing (managed):"), n) {
-    const y = r === void 0 ? "(latest stable unknown — offline?)" : r === n.buildId ? "(latest stable)" : `(latest stable is ${r} — run \`aiui chrome update\`)`;
-    console.log(`  installed ${n.buildId} ${y}`), console.log(`  ${n.executablePath}`);
+async function dn() {
+  const t = S().chrome ?? {}, n = { chrome: !1, noChrome: !1 }, o = await ce(), r = await le();
+  if (console.log("Chrome for Testing (managed):"), o) {
+    const m = r === void 0 ? "(latest stable unknown — offline?)" : r === o.buildId ? "(latest stable)" : `(latest stable is ${r} — run \`aiui chrome update\`)`;
+    console.log(`  installed ${o.buildId} ${m}`), console.log(`  ${o.executablePath}`);
   } else
     console.log("  not installed — `aiui chrome install` (recommended; auto-loads the panel)");
   if (console.log(`  startup checks (chrome.forTesting): ${t.forTesting ?? "prompt"}`), console.log(`
-This directory would launch:`), !Oe(o, t)) {
+This directory would launch:`), !qe(n, t)) {
     console.log("  nothing — the Chrome DevTools MCP is disabled here");
     return;
   }
@@ -781,181 +665,324 @@ This directory would launch:`), !Oe(o, t)) {
     return;
   }
   const i = { ...t };
-  !i.executablePath && !i.channel && n && (i.executablePath = n.executablePath);
-  const a = $({}, i), s = await I(a.userDataDir), c = a.mode === "attach" ? s ? `attach to the running session browser at ${s.browserUrl}` : "attach — a session browser starts with the next interactive launch (or `aiui browser`)" : "launch — chrome-devtools-mcp starts a private browser on the agent's first tool use";
-  console.log(`  connection: ${c}`);
-  const u = a.executablePath ? a.executablePath === (n == null ? void 0 : n.executablePath) ? `Chrome for Testing ${n.buildId}` : a.executablePath : a.channel ? `installed Chrome (${a.channel} channel)` : "installed Chrome (stable)";
-  console.log(`  browser: ${u}${a.headless ? " — headless" : ""}`), console.log(`  user data dir: ${a.userDataDir}`);
-  const f = l(Se({}, process.cwd()), "..");
-  if (b(f)) {
-    const y = ge(f, { withFileTypes: !0 }).filter((d) => d.isDirectory()).map((d) => d.name);
-    y.length && console.log(`  profiles here: ${y.join(", ")}`);
+  !i.executablePath && !i.channel && o && (i.executablePath = o.executablePath);
+  const s = x({}, i), c = await U(s.userDataDir), a = s.mode === "attach" ? c ? `attach to the running session browser at ${c.browserUrl}` : "attach — a session browser starts with the next interactive launch (or `aiui browser`)" : "launch — chrome-devtools-mcp starts a private browser on the agent's first tool use";
+  console.log(`  connection: ${a}`);
+  const l = s.executablePath ? s.executablePath === (o == null ? void 0 : o.executablePath) ? `Chrome for Testing ${o.buildId}` : s.executablePath : s.channel ? `installed Chrome (${s.channel} channel)` : "installed Chrome (stable)";
+  console.log(`  browser: ${l}${s.headless ? " — headless" : ""}`), console.log(`  user data dir: ${s.userDataDir}`);
+  const p = d(ze({}, process.cwd()), "..");
+  if (v(p)) {
+    const m = Y(p, { withFileTypes: !0 }).filter((g) => g.isDirectory()).map((g) => g.name);
+    m.length && console.log(`  profiles here: ${m.join(", ")}`);
   }
   console.log(`
-aiui DevTools panel:`);
-  const h = M();
-  if (!h) {
-    console.log("  not available (unbuilt dev checkout? run `aiui chrome extension` for help)");
-    return;
+aiui intent client (the extension launches auto-load):`);
+  const f = j();
+  switch (f.state) {
+    case "absent":
+      console.log("  not available in this install (aiui-intent-client is not resolvable)");
+      break;
+    case "unbuilt":
+      console.log(
+        `  no MV3 bundle yet (${f.root})
+  build it:      pnpm -C packages/aiui-intent-client build:ext
+  build + load into the running browser:  pnpm -C packages/aiui-intent-client ext`
+      );
+      break;
+    case "ready":
+      console.log(`  ${f.dir}`), hn(s.executablePath);
+      break;
   }
-  console.log(`  ${h}`), a.executablePath ? console.log("  auto-loads via --load-extension (honored by Chrome for Testing/Chromium)") : (console.log("  can NOT auto-load into branded Chrome ≥ 137 — load it unpacked once"), console.log(
+}
+function hn(e) {
+  e ? console.log("  auto-loads via --load-extension (honored by Chrome for Testing/Chromium)") : (console.log("  can NOT auto-load into branded Chrome ≥ 137 — load it unpacked once"), console.log(
     "  (chrome://extensions → Developer mode → Load unpacked), or `aiui chrome install`"
   ));
 }
-const Ut = "--aiui-";
-function Re(e) {
+const fn = "--aiui-";
+function rt(e) {
   if (e.includes("--help") || e.includes("-h"))
     return "help";
   if (e.includes("--version") || e.includes("-v"))
     return "version";
 }
-function je(e) {
-  let t, o, n = !1, r = !1, i, a, s;
-  const c = [];
-  for (let u = 0; u < e.length; u++) {
-    const f = e[u];
-    if (!f.startsWith(Ut)) {
-      c.push(f);
+function de(e) {
+  let t, n, o = !1, r = !1, i = !1, s = !1, c, a, l, p;
+  const f = [];
+  for (let m = 0; m < e.length; m++) {
+    const g = e[m];
+    if (!g.startsWith(fn)) {
+      f.push(g);
       continue;
     }
-    const h = f.indexOf("="), y = h === -1 ? f : f.slice(0, h);
-    let d = h === -1 ? void 0 : f.slice(h + 1);
-    switch (y) {
+    const y = g.indexOf("="), I = y === -1 ? g : g.slice(0, y);
+    let h = y === -1 ? void 0 : g.slice(y + 1);
+    switch (I) {
       case "--aiui-tag": {
-        if (d === void 0 && (d = e[++u]), !d)
+        if (h === void 0 && (h = e[++m]), !h)
           throw new Error("--aiui-tag requires a non-empty value");
-        t = d;
+        t = h;
         break;
       }
       case "--aiui-mcp": {
-        if (d === void 0 && (d = e[++u]), !d)
+        if (h === void 0 && (h = e[++m]), !h)
           throw new Error("--aiui-mcp requires a non-empty value");
-        o = d;
+        n = h;
         break;
       }
       case "--aiui-chrome": {
-        if (d !== void 0)
+        if (h !== void 0)
           throw new Error("--aiui-chrome takes no value");
-        n = !0;
+        o = !0;
         break;
       }
       case "--aiui-no-chrome": {
-        if (d !== void 0)
+        if (h !== void 0)
           throw new Error("--aiui-no-chrome takes no value");
         r = !0;
         break;
       }
+      case "--aiui-browser": {
+        if (h !== void 0)
+          throw new Error("--aiui-browser takes no value");
+        i = !0;
+        break;
+      }
+      case "--aiui-no-browser": {
+        if (h !== void 0)
+          throw new Error("--aiui-no-browser takes no value");
+        s = !0;
+        break;
+      }
       case "--aiui-chrome-profile": {
-        if (d === void 0 && (d = e[++u]), !d)
+        if (h === void 0 && (h = e[++m]), !h)
           throw new Error("--aiui-chrome-profile requires a non-empty value");
-        i = d;
+        c = h;
         break;
       }
       case "--aiui-chrome-data-dir": {
-        if (d === void 0 && (d = e[++u]), !d)
+        if (h === void 0 && (h = e[++m]), !h)
           throw new Error("--aiui-chrome-data-dir requires a non-empty value");
-        a = d;
+        a = h;
         break;
       }
       case "--aiui-browser-url": {
-        if (d === void 0 && (d = e[++u]), !d)
+        if (h === void 0 && (h = e[++m]), !h)
           throw new Error("--aiui-browser-url requires a non-empty value");
-        s = d;
+        l = h;
+        break;
+      }
+      case "--aiui-bind": {
+        if (h === void 0 && (h = e[++m]), !h || !ve.includes(h))
+          throw new Error(`--aiui-bind requires one of: ${ve.join(", ")}`);
+        p = h;
         break;
       }
       default:
-        throw new Error(`unknown aiui option: ${y}`);
+        throw new Error(`unknown aiui option: ${I}`);
     }
   }
-  if (n && r)
+  if (o && r)
     throw new Error("--aiui-chrome and --aiui-no-chrome are mutually exclusive");
-  if (i !== void 0 && a !== void 0)
+  if (i && s)
+    throw new Error("--aiui-browser and --aiui-no-browser are mutually exclusive");
+  if (c !== void 0 && a !== void 0)
     throw new Error("--aiui-chrome-profile and --aiui-chrome-data-dir are mutually exclusive");
-  if (s !== void 0 && (i !== void 0 || a !== void 0))
+  if (l !== void 0 && (c !== void 0 || a !== void 0))
     throw new Error(
       "--aiui-browser-url means the browser is managed elsewhere — it can't be combined with --aiui-chrome-profile or --aiui-chrome-data-dir"
     );
-  return { tag: t, mcp: o, chrome: n, noChrome: r, chromeProfile: i, chromeDataDir: a, browserUrl: s, passthrough: c };
+  return {
+    tag: t,
+    mcp: n,
+    chrome: o,
+    noChrome: r,
+    browser: i,
+    noBrowser: s,
+    chromeProfile: c,
+    chromeDataDir: a,
+    browserUrl: l,
+    bind: p,
+    passthrough: f
+  };
+}
+function it(e) {
+  var t;
+  return { bind: e.bind ?? ((t = e.config.channel) == null ? void 0 : t.bind) ?? "loopback" };
+}
+function st(e) {
+  return ["--bind", e.bind];
+}
+const pn = /* @__PURE__ */ new Set(["serve", "mcp"]);
+function mn(e, t) {
+  return e.some((n) => n === t || n.startsWith(`${t}=`));
+}
+function at(e) {
+  const t = e.find((n) => !n.startsWith("-"));
+  return t !== void 0 && pn.has(t);
 }
-const _t = {
+function wn(e, t) {
+  if (!at(e))
+    return e;
+  const n = st(t), o = [...e];
+  for (let r = 0; r < n.length; r += 2) {
+    const i = n[r], s = n[r + 1];
+    mn(e, i) || o.push(i, s);
+  }
+  return o;
+}
+const gn = {
   darwin: 2147578994,
   linux: 21522
-}, Nt = 'open(my $t,"+<","/dev/tty") or exit 0; my $c="\\r"; ioctl($t,$ARGV[0]+0,$c);', Rt = [250, 750];
-function jt(e = Rt) {
-  const t = _t[process.platform];
+}, bn = 'open(my $t,"+<","/dev/tty") or exit 0; my $c="\\r"; ioctl($t,$ARGV[0]+0,$c);', yn = [250, 750];
+function vn(e = yn) {
+  const t = gn[process.platform];
   if (t !== void 0)
-    for (const o of e)
+    for (const n of e)
       setTimeout(() => {
         try {
-          rt("perl", ["-e", Nt, String(t)], { stdio: "ignore" }).on("error", () => {
+          Ot("perl", ["-e", bn, String(t)], { stdio: "ignore" }).on("error", () => {
           });
         } catch {
         }
-      }, o).unref();
+      }, n).unref();
 }
-const Mt = `One-time setup — how should aiui launch Claude Code?
+const $n = `One-time setup — how should aiui launch Claude Code?
 With --dangerously-skip-permissions, every agent action (shell commands, file writes,
 network, the browser) runs without asking you first. Fast, and dangerous. It's a personal
 preference — aiui works fine either way. Saved as claude.skipPermissions in your user
-config; edit or delete it there to change your mind.`, Lt = `One-time setup — auto-dismiss Claude Code's channel prompt?
+config; edit or delete it there to change your mind.`, Cn = `One-time setup — where should the channel's web server bind?
+Binding the HOST interface puts the session's whole web surface on your network,
+UNAUTHENTICATED — the iPad paint page (\`aiui paint url\` prints its URL), but also prompt
+injection, /debug, and every sidecar. That's the simple, single-port way to use the iPad —
+on a network that is yours alone (a home LAN), not on café Wi-Fi. LOOPBACK keeps everything
+this-machine-only; reaching it from an iPad is then up to you — tunnel the channel port
+however you like (Tailscale, \`ssh -L\`). Saved as channel.bind in your user config;
+--aiui-bind wins per launch.`, kn = `One-time setup — auto-dismiss Claude Code's channel prompt?
 aiui loads a custom development channel, so Claude Code shows a one-key acknowledgement
 prompt at every startup. aiui can dismiss it for you: shortly after launch it injects a
 single Enter keystroke into this terminal (a best-effort TIOCSTI ioctl on /dev/tty — it
 literally "types" the Enter for you; on platforms that forbid that, nothing happens and
 you press it yourself). Saying no just means pressing Enter once per launch. Saved as
 claude.enterNudge in your user config.`;
-async function Ft(e, t = G) {
-  var n, r;
-  let o = e;
-  if (((n = o.claude) == null ? void 0 : n.skipPermissions) === void 0) {
-    const i = await t(Mt, [
+async function xn(e, t = W) {
+  var o, r, i;
+  let n = e;
+  if (((o = n.claude) == null ? void 0 : o.skipPermissions) === void 0) {
+    const s = await t($n, [
       { key: "y", label: "yes — skip permissions; nothing asks before acting" },
       { key: "n", label: "no — keep Claude Code's own permission prompts" }
     ]);
-    o = me(o, "skipPermissions", i === "y");
+    n = xe(n, "skipPermissions", s === "y");
   }
-  if (((r = o.claude) == null ? void 0 : r.enterNudge) === void 0) {
-    const i = await t(Lt, [
+  if (((r = n.claude) == null ? void 0 : r.enterNudge) === void 0) {
+    const s = await t(kn, [
       { key: "y", label: "yes — press Enter for me at startup" },
       { key: "n", label: "no — I'll press it myself each launch" }
     ]);
-    o = me(o, "enterNudge", i === "y");
+    n = xe(n, "enterNudge", s === "y");
   }
-  return o;
+  if (((i = n.channel) == null ? void 0 : i.bind) === void 0) {
+    const s = await t(Cn, [
+      { key: "h", label: "host — reachable on my (trusted) network; the iPad just works" },
+      { key: "l", label: "loopback — this machine only; I'll tunnel when I want the iPad" }
+    ]);
+    n = Tn(n, s === "h" ? "host" : "loopback");
+  }
+  return n;
 }
-function me(e, t, o) {
-  const n = U((r) => {
-    r.claude = { ...r.claude, [t]: o };
+function xe(e, t, n) {
+  const o = _((r) => {
+    r.claude = { ...r.claude, [t]: n };
   });
-  return v(`wrote claude.${t}: ${o} to ${n}`), { ...e, claude: { ...e.claude, [t]: o } };
+  return w(`wrote claude.${t}: ${n} to ${o}`), { ...e, claude: { ...e.claude, [t]: n } };
 }
-const Ht = "https://api.openai.com/v1/models", Bt = 3e3;
-async function Vt(e = {}) {
-  var c;
+function Tn(e, t) {
+  const n = _((o) => {
+    o.channel = { ...o.channel, bind: t };
+  });
+  return w(`wrote channel.bind: ${t} to ${n}`), { ...e, channel: { ...e.channel, bind: t } };
+}
+const In = "https://generativelanguage.googleapis.com/v1beta/models", En = 3e3;
+async function Pn(e = {}) {
+  var a;
+  const {
+    verify: t = !0,
+    env: n = process.env,
+    fetchImpl: o = fetch,
+    timeoutMs: r = En
+  } = e, i = (a = n.GEMINI_API_KEY) == null ? void 0 : a.trim();
+  if (!i)
+    return "missing";
+  if (!t)
+    return "unverified";
+  const s = new AbortController(), c = setTimeout(() => s.abort(), r);
+  try {
+    const l = await o(`${In}?key=${encodeURIComponent(i)}`, {
+      signal: s.signal
+    });
+    return l.ok ? "valid" : l.status === 400 || l.status === 401 || l.status === 403 ? "invalid" : "unverified";
+  } catch {
+    return "unverified";
+  } finally {
+    clearTimeout(c);
+  }
+}
+function Dn(e) {
+  switch (e) {
+    case "valid":
+      return null;
+    case "missing":
+      return {
+        level: "note",
+        title: "GEMINI_API_KEY is not set — the realtime (Gemini Live) tier is unavailable",
+        detail: "Only the realtime conversational submode needs it; transcription tiers are unaffected. To enable it, export the key in the shell you run `aiui claude` from:\n  export GEMINI_API_KEY=…\nIt flows through to the channel process, where the Gemini Live session runs."
+      };
+    case "invalid":
+      return {
+        level: "warn",
+        title: "GEMINI_API_KEY was rejected by Google — the realtime tier will fail",
+        detail: "The key in your environment isn't valid, so every Gemini Live session will close immediately. The usual cause is a stale shell export shadowing your real key — check what's actually set (this prints only a short prefix, not the whole secret):\n  echo $GEMINI_API_KEY | head -c 8\nFix the export and relaunch `aiui claude`."
+      };
+    case "unverified":
+      return {
+        level: "note",
+        title: "couldn't verify GEMINI_API_KEY with Google — continuing",
+        detail: "The check didn't complete (offline, a timeout, or a transient error), so the key is unverified — not known-bad. Launch continues; if the realtime tier turns out unavailable, an unreachable or invalid key may be why."
+      };
+  }
+}
+function Sn(e) {
+  const t = Dn(e);
+  t && (t.level === "warn" ? $(t.title, t.detail) : w(t.title, t.detail));
+}
+const An = "https://api.openai.com/v1/models", _n = 3e3;
+async function On(e = {}) {
+  var a;
   const {
     verify: t = !0,
-    env: o = process.env,
-    fetchImpl: n = fetch,
-    timeoutMs: r = Bt
-  } = e, i = (c = o.OPENAI_API_KEY) == null ? void 0 : c.trim();
+    env: n = process.env,
+    fetchImpl: o = fetch,
+    timeoutMs: r = _n
+  } = e, i = (a = n.OPENAI_API_KEY) == null ? void 0 : a.trim();
   if (!i)
     return "missing";
   if (!t)
     return "unverified";
-  const a = new AbortController(), s = setTimeout(() => a.abort(), r);
+  const s = new AbortController(), c = setTimeout(() => s.abort(), r);
   try {
-    const u = await n(Ht, {
+    const l = await o(An, {
       headers: { authorization: `Bearer ${i}` },
-      signal: a.signal
+      signal: s.signal
     });
-    return u.ok ? "valid" : u.status === 401 || u.status === 403 ? "invalid" : "unverified";
+    return l.ok ? "valid" : l.status === 401 || l.status === 403 ? "invalid" : "unverified";
   } catch {
     return "unverified";
   } finally {
-    clearTimeout(s);
+    clearTimeout(c);
   }
 }
-function Kt(e) {
+function jn(e) {
   switch (e) {
     case "valid":
       return null;
@@ -963,7 +990,7 @@ function Kt(e) {
       return {
         level: "warn",
         title: "OPENAI_API_KEY is not set — the intent pipeline will run degraded",
-        detail: "Speech transcription and dictation correction fall back to mock/off mode. To enable them, export the key in the shell you run `aiui claude` from:\n  export OPENAI_API_KEY=sk-…\nIt flows through to the channel process, which is where those calls happen."
+        detail: "Speech transcription and dictation correction are unavailable — the overlay says so when you try to dictate. To enable them, export the key in the shell you run `aiui claude` from:\n  export OPENAI_API_KEY=sk-…\nIt flows through to the channel process, which is where those calls happen. (For offline work, switch the overlay to the mock backends — see the intent-overlay guide.)"
       };
     case "invalid":
       return {
@@ -971,96 +998,101 @@ function Kt(e) {
         title: "OPENAI_API_KEY was rejected by OpenAI (401) — the intent pipeline will run degraded",
         detail: `The key in your environment isn't valid. The usual cause is a stale shell export shadowing your real key — check what's actually set (this prints only a short prefix, not the whole secret):
   echo $OPENAI_API_KEY | head -c 12
-and compare that against the start of your real key. Until it's fixed, transcription and correction run in mock/off mode.`
+and compare that against the start of your real key. Until it's fixed, transcription and correction are unavailable.`
       };
     case "unverified":
       return {
         level: "note",
         title: "couldn't verify OPENAI_API_KEY with OpenAI — continuing",
-        detail: "The check didn't complete (offline, a timeout, or a transient OpenAI error), so the key is unverified — not known-bad. Launch continues; if the intent pipeline degrades to mock/off, an unreachable or invalid key may be why."
+        detail: "The check didn't complete (offline, a timeout, or a transient OpenAI error), so the key is unverified — not known-bad. Launch continues; if transcription and correction turn out unavailable, an unreachable or invalid key may be why."
       };
   }
 }
-function Yt(e) {
-  const t = Kt(e);
-  t && (t.level === "warn" ? _(t.title, t.detail) : v(t.title, t.detail));
+function Nn(e) {
+  const t = jn(e);
+  t && (t.level === "warn" ? $(t.title, t.detail) : w(t.title, t.detail));
 }
-const L = "0.2.0";
-function ee(e) {
-  const t = (process.env.PATH ?? "").split(Ve).filter(Boolean), o = process.platform === "win32" ? (process.env.PATHEXT ?? ".EXE;.CMD;.BAT;.COM").split(";") : [""];
-  for (const n of t)
-    for (const r of o)
+const he = "0.5.0";
+function Un(e) {
+  const t = (process.env.PATH ?? "").split(gt).filter(Boolean), n = process.platform === "win32" ? (process.env.PATHEXT ?? ".EXE;.CMD;.BAT;.COM").split(";") : [""];
+  for (const o of t)
+    for (const r of n)
       try {
-        return qe(l(n, e + r), Ge.X_OK), !0;
+        return kt(d(o, e + r), xt.X_OK), !0;
       } catch {
       }
   return !1;
 }
-const qt = "@habemus-papadum/aiui-claude-channel", Gt = "@habemus-papadum/aiui-claude-plugin", pe = "aiui";
-async function Jt(e = []) {
-  var re, ne;
-  const t = je(e), { tag: o, passthrough: n } = t, r = Re(n);
+const Ln = "@habemus-papadum/aiui-claude-channel", Mn = "@habemus-papadum/aiui-claude-plugin", Te = "aiui";
+async function Rn(e = []) {
+  var ge, be;
+  const t = de(e), { tag: n, passthrough: o } = t, r = rt(o);
   if (r) {
-    r === "help" ? zt() : console.log(`aiui ${L}`), await Wt(n);
+    r === "help" ? Hn() : console.log(`aiui ${he}`), await Bn(o);
     return;
   }
-  let i = N();
-  const a = Zt(n) && !Z();
-  a && (i = await Ft(i));
-  const s = await Vt({ verify: a });
-  if (a && Yt(s), !Me())
+  let i = S();
+  const s = Vn(o) && !ie();
+  s && (i = await xn(i));
+  const c = await On({ verify: s });
+  s && Nn(c);
+  const a = await Pn({ verify: s });
+  if (s && Sn(a), !ct())
     return;
-  const c = E(D(Gt), "marketplace", "plugins"), u = X(qt), f = [...u.args, "mcp"];
-  o && f.push("--tag", o);
-  const h = {
-    [pe]: { command: u.command, args: f }
+  const l = C(V(Mn), "marketplace", "plugins"), p = J(Ln), f = [...p.args, "mcp"];
+  n && f.push("--tag", n);
+  const m = it({ config: i, bind: t.bind });
+  f.push(...st(m));
+  const g = {
+    [Te]: { command: p.command, args: f }
   };
   let y = { enabled: !1 };
-  if (Oe(t, i.chrome)) {
-    const F = {
+  if (qe(t, i.chrome)) {
+    const X = {
       ...i.chrome,
       ...t.browserUrl ? { browserUrl: t.browserUrl } : {}
-    }, ie = await Xt(t, F, a);
-    h[yt] = ie.entry, y = ie.info;
+    }, ye = await Fn(t, X, s);
+    g[Ht] = ye.entry, y = ye.info;
   }
-  const d = {
+  const I = {
     launcher: "aiui claude",
     chromeDevtools: y,
-    openaiKey: s
+    openaiKey: c,
+    geminiKey: a
   };
-  f.push("--launch-info", JSON.stringify(d));
-  const Fe = JSON.stringify({ mcpServers: h }), te = [l(c, "aiui"), l(c, "frontend-design")];
-  y.enabled && te.push(l(c, "session-browser"));
-  const He = [
-    ...((re = i.claude) == null ? void 0 : re.skipPermissions) ?? !0 ? ["--dangerously-skip-permissions"] : [],
+  f.push("--launch-info", JSON.stringify(I));
+  const h = JSON.stringify({ mcpServers: g }), me = [d(l, "aiui"), d(l, "frontend-design")];
+  y.enabled && me.push(d(l, "session-browser"));
+  const mt = [
+    ...((ge = i.claude) == null ? void 0 : ge.skipPermissions) ?? !0 ? ["--dangerously-skip-permissions"] : [],
     "--mcp-config",
-    Fe,
-    ...te.flatMap((F) => ["--plugin-dir", F]),
+    h,
+    ...me.flatMap((X) => ["--plugin-dir", X]),
     // Custom channels are a research preview and not on the approved allowlist,
     // so opt this session into loading ours as a development channel.
     "--dangerously-load-development-channels",
-    `server:${pe}`
+    `server:${Te}`
   ];
-  a && (((ne = i.claude) == null ? void 0 : ne.enterNudge) ?? !0) && jt();
-  const oe = await p("claude", [...He, ...n], {
+  s && (((be = i.claude) == null ? void 0 : be.enterNudge) ?? !0) && vn();
+  const we = await T("claude", [...mt, ...o], {
     stdio: "inherit",
     reject: !1
   });
-  oe.exitCode && (process.exitCode = oe.exitCode);
+  we.exitCode && (process.exitCode = we.exitCode);
 }
-function Me() {
-  return ee("claude") ? !0 : (m(
+function ct() {
+  return Un("claude") ? !0 : (b(
     "`claude` was not found on your PATH",
     "Install Claude Code and make sure the `claude` command is available, then try again."
   ), process.exitCode = 1, !1);
 }
-async function Wt(e) {
-  if (!Me())
+async function Bn(e) {
+  if (!ct())
     return;
-  const t = await p("claude", e, { stdio: "inherit", reject: !1 });
+  const t = await T("claude", e, { stdio: "inherit", reject: !1 });
   t.exitCode && (process.exitCode = t.exitCode);
 }
-function zt() {
+function Hn() {
   console.log(`aiui claude — launch Claude Code wired with the aiui channel, plugin, and browser MCP
 
 aiui's own flags (everything else forwards to claude verbatim):
@@ -1071,277 +1103,890 @@ aiui's own flags (everything else forwards to claude verbatim):
   --aiui-chrome-data-dir <path>  explicit browser user data dir
   --aiui-browser-url <url>       attach to a browser at this DevTools endpoint
                                  (e.g. a tunnel from \`aiui browser --tunnel\`)
+  --aiui-bind <loopback|host>    where the channel's web server binds: loopback
+                                 (this machine only, the default) or host (your
+                                 whole network can reach the session's web
+                                 surface — the iPad paint page included;
+                                 trusted networks only)
 
+Every channel hosts the same session sidecars — paint (iPad ink), the intent panel
+at /intent/, the remote bar, and the remote pencil — reachable per --aiui-bind.
 Durable settings live in config.json (project .aiui-cache/ + user cache) — see the
 Configuration guide. What follows is claude's own --help:
 `);
 }
-async function Xt(e, t, o) {
+async function Fn(e, t, n) {
   if (t.browserUrl)
     return {
-      entry: V(t.browserUrl),
+      entry: Z(t.browserUrl),
       info: { enabled: !0, connection: "attach", browserUrl: t.browserUrl }
     };
-  let n = { ...t }, r = $(e, n);
+  let o = { ...t }, r = x(e, o);
   if (r.mode === "attach") {
-    const s = await I(r.userDataDir);
-    if (s)
-      return {
-        entry: V(s.browserUrl),
+    const a = await U(r.userDataDir);
+    if (a)
+      return B(
+        r.userDataDir,
+        j().state === "ready",
+        $
+      ), {
+        entry: Z(a.browserUrl),
         info: {
           enabled: !0,
           connection: "attach",
-          browserUrl: s.browserUrl,
+          browserUrl: a.browserUrl,
           userDataDir: r.userDataDir
         }
       };
   }
-  if (!n.executablePath && !n.channel) {
-    const s = await Ie({ mode: n.forTesting ?? "prompt", interactive: o });
-    s && (n = { ...n, executablePath: s }, r = $(e, n));
+  if (!o.executablePath && !o.channel) {
+    const a = await We({ mode: o.forTesting ?? "prompt", interactive: n });
+    a && (o = { ...o, executablePath: a }, r = x(e, o));
   }
-  k(r.userDataDir, { recursive: !0 }), r.buildExtension && await Q();
-  const i = M();
-  o && Ue(r, i);
-  const a = {
+  G(r.userDataDir, { recursive: !0 });
+  const i = j(), s = i.state === "ready" ? [i.dir] : [];
+  B(r.userDataDir, i.state === "ready", $), n && (Xe(r, s), Je(i));
+  const c = {
     userDataDir: r.userDataDir,
     executablePath: r.executablePath,
     channel: r.channel,
     headless: r.headless,
-    extensionDir: i
+    extensionDirs: s
   };
-  if (r.mode === "attach" && o)
+  if (r.mode === "attach" && n)
     try {
-      const s = await $e({
-        binary: Ee(r),
+      const a = await je({
+        binary: Oe(r),
         userDataDir: r.userDataDir,
         debugPort: r.debugPort,
-        extensionDir: i,
+        extensionDirs: s,
         headless: r.headless
       });
       return {
-        entry: V(s.browserUrl),
+        entry: Z(a.browserUrl),
         info: {
           enabled: !0,
           connection: "attach",
-          browserUrl: s.browserUrl,
-          ...a
+          browserUrl: a.browserUrl,
+          ...c
         }
       };
-    } catch (s) {
-      _(
+    } catch (a) {
+      $(
         "couldn't start the session browser — falling back to a browser private to the MCP",
-        s instanceof Error ? s.message : String(s)
+        a instanceof Error ? a.message : String(a)
       );
     }
   return {
-    entry: Ct(r, i),
-    info: { enabled: !0, connection: "launch", ...a }
+    entry: qt(r, s),
+    info: { enabled: !0, connection: "launch", ...c }
   };
 }
-function Zt(e) {
+function Vn(e) {
   return !process.stdin.isTTY || !process.stdout.isTTY ? !1 : !e.some((t) => t === "-p" || t === "--print");
 }
-async function Qt(e, t = {}) {
-  const o = E(process.cwd(), e ?? "aiui-demo");
-  switch (eo(o)) {
-    case "occupied":
-      m(
-        `${o} already exists and isn't an aiui demo`,
-        "Pick an empty (or new) directory — the scaffold never overwrites existing content."
+function Gn(e = process.cwd()) {
+  return {
+    project: Be(e),
+    user: F(void 0, { create: !1 }),
+    browser: A(!1)
+  };
+}
+function Kn(e, t) {
+  const n = [];
+  return e.userOnly || n.push({ label: "project cache", path: t.project }), e.projectOnly || n.push(
+    e.keepBrowser ? {
+      label: "user cache (keeping Chrome for Testing)",
+      path: t.user,
+      keep: [t.browser]
+    } : { label: "user cache", path: t.user }
+  ), n;
+}
+function Yn(e) {
+  var o;
+  if (!v(e.path))
+    return [];
+  if (!((o = e.keep) != null && o.length))
+    return [e.path];
+  const t = new Set(e.keep.map((r) => C(r)));
+  let n;
+  try {
+    n = Y(e.path);
+  } catch {
+    return [];
+  }
+  return n.map((r) => C(d(e.path, r))).filter((r) => !t.has(r));
+}
+async function Wn(e = {}) {
+  if (e.projectOnly && e.userOnly) {
+    b(
+      "pass at most one of --project-only / --user-only",
+      "with neither, `aiui clean` removes both"
+    ), process.exitCode = 1;
+    return;
+  }
+  const t = process.cwd(), o = Kn(e, Gn(t)).map((f) => ({ target: f, paths: Yn(f) })).filter((f) => f.paths.length > 0);
+  if (o.length === 0) {
+    console.log("nothing to clean — no aiui state here or in the user cache.");
+    return;
+  }
+  let r = 0;
+  console.log(`aiui clean will remove:
+`);
+  for (const { target: f, paths: m } of o) {
+    const g = m.reduce((y, I) => y + re(I), 0);
+    r += g, console.log(`  ${Q(g).padStart(9)}  ${f.label}`), console.log(`  ${" ".repeat(9)}  ${u.dim(f.path)}`);
+  }
+  console.log(`
+  ${Q(r).padStart(9)}  total
+`);
+  const i = !e.projectOnly, s = i && !e.keepBrowser, c = [
+    "traces and session-browser logins are cleared",
+    i && "the Claude permission prompt (claude.skipPermissions) returns on next launch",
+    s && "Chrome for Testing re-downloads (~160 MB) on the next `aiui claude`"
+  ].filter((f) => !!f);
+  console.log("This resets aiui toward a fresh install:");
+  for (const f of c)
+    console.log(`  • ${f}`);
+  console.log("");
+  const a = M(t);
+  if (a.length && $(
+    `${a.length} aiui session${a.length === 1 ? "" : "s"} still running`,
+    "stop them first — a live session rewrites its registry entry as it exits, and an open browser can lock files being deleted"
+  ), e.dryRun) {
+    w("dry run — nothing was deleted");
+    return;
+  }
+  if (!e.yes) {
+    if (!process.stdin.isTTY) {
+      b(
+        "refusing to delete without confirmation",
+        "re-run with --yes for a non-interactive clean, or from a terminal"
       ), process.exitCode = 1;
       return;
-    case "existing-demo":
-      v(`existing demo found at ${o} — continuing where it left off`);
-      break;
-    case "new": {
-      const n = no();
-      if (!n) {
-        m("the demo template did not ship with this aiui install"), process.exitCode = 1;
-        return;
-      }
-      oo(n, o), console.log(`scaffolded the demo playground at ${o}`), await ro(o);
-      break;
+    }
+    if (await W(
+      "Delete these now?",
+      [
+        { key: "y", label: "yes, delete" },
+        { key: "n", label: "no, cancel" }
+      ],
+      "n"
+    ) !== "y") {
+      console.log("cancelled — nothing was deleted.");
+      return;
     }
   }
-  if (!t.skipInstall && !b(l(o, "node_modules")))
-    if (!ee("npm"))
-      v("npm not found on PATH — run your package manager's install in the demo yourself");
-    else {
-      console.log("installing dependencies (one time)…");
-      const n = await p("npm", ["install", "--no-audit", "--no-fund"], {
-        cwd: o,
-        stdio: "inherit",
-        reject: !1
-      });
-      if (n.exitCode) {
-        m("npm install failed — fix that, then re-run this command to continue"), process.exitCode = n.exitCode;
-        return;
+  let l = 0, p = 0;
+  for (const { paths: f } of o)
+    for (const m of f) {
+      const g = re(m);
+      try {
+        Tt(m, { recursive: !0, force: !0 }), l += g;
+      } catch (y) {
+        p++, $(
+          `could not remove ${m}`,
+          y instanceof Error ? y.message : String(y)
+        );
       }
     }
-  io(o);
+  p && $(
+    `${p} path${p === 1 ? "" : "s"} could not be deleted`,
+    "a running browser can lock its files — close the session browser and re-run"
+  ), console.log(`clean complete — freed ~${Q(l)}.`);
 }
-function eo(e) {
-  var o;
-  if (!b(e))
-    return "new";
+function re(e) {
   let t;
   try {
-    t = ge(e);
+    t = It(e);
   } catch {
-    return "occupied";
+    return 0;
   }
-  if (t.length === 0)
-    return "new";
+  if (t.isSymbolicLink() || !t.isDirectory())
+    return t.size;
+  let n;
   try {
-    if (((o = JSON.parse(P(l(e, "package.json"), "utf8")).aiui) == null ? void 0 : o.demo) === !0)
-      return "existing-demo";
+    n = Y(e);
   } catch {
+    return 0;
   }
-  return "occupied";
+  let o = 0;
+  for (const r of n)
+    o += re(d(e, r));
+  return o;
 }
-function to(e) {
-  return /^\d+\.\d+\.\d+$/.test(e) ? `^${e}` : "latest";
+function Q(e) {
+  if (e < 1024)
+    return `${e} B`;
+  const t = ["KB", "MB", "GB", "TB"];
+  let n = e / 1024, o = 0;
+  for (; n >= 1024 && o < t.length - 1; )
+    n /= 1024, o++;
+  return `${n.toFixed(1)} ${t[o]}`;
+}
+function D(e = process.cwd()) {
+  const t = St(e);
+  return {
+    paths: t,
+    user: ne(t.user) ?? {},
+    project: ne(t.project) ?? {}
+  };
 }
-function oo(e, t) {
-  k(t, { recursive: !0 }), Je(e, t, { recursive: !0 }), b(l(t, "gitignore")) && We(l(t, "gitignore"), l(t, ".gitignore"));
-  const o = l(t, "package.json");
-  T(
-    o,
-    P(o, "utf8").replaceAll(
-      "__AIUI_VERSION_RANGE__",
-      to(L)
+function fe(e) {
+  return Me().map((t) => {
+    const n = Ie(e.user, t), o = Ie(e.project, t), r = o ?? n, i = o !== void 0 ? "project" : n !== void 0 ? "user" : t.field.default !== void 0 ? "default" : "unset";
+    return { ...t, userValue: n, projectValue: o, effective: r, source: i };
+  });
+}
+function Ie(e, t) {
+  var o;
+  return (o = e[t.section.name]) == null ? void 0 : o[t.field.key];
+}
+function pe(e, t) {
+  const n = fe(t).find((o) => o.path === e);
+  return n || (b(
+    `unknown config key: ${e}`,
+    `Known keys:
+  ${Me().map((o) => o.path).join(`
+  `)}`
+  ), process.exitCode = 1), n;
+}
+function qn(e = {}, t = process.cwd()) {
+  const n = D(t), o = fe(n);
+  if (e.json) {
+    console.log(
+      JSON.stringify(
+        {
+          files: {
+            user: { path: n.paths.user, exists: v(n.paths.user) },
+            project: { path: n.paths.project, exists: v(n.paths.project) }
+          },
+          user: n.user,
+          project: n.project,
+          effective: Dt(n.user, n.project)
+        },
+        null,
+        2
+      )
+    );
+    return;
+  }
+  console.log(`user:    ${n.paths.user}${Ee(n.paths.user)}`), console.log(`project: ${n.paths.project}${Ee(n.paths.project)}`);
+  const r = Math.max(...o.map((s) => s.path.length));
+  let i = "";
+  for (const s of o)
+    s.section.name !== i && (i = s.section.name, console.log(`
+${u.bold(i)} ${u.dim(`— ${s.section.summary}`)}`)), console.log(`  ${s.path.padEnd(r + 2)}${lt(s)}`);
+  console.log(
+    u.dim(
+      "\nProject beats user per key; CLI flags beat both. `aiui config` browses the docs interactively."
     )
   );
 }
-async function ro(e) {
-  !ee("git") || (await p("git", ["-C", e, "rev-parse", "--is-inside-work-tree"], {
-    reject: !1
-  })).exitCode === 0 || (await p("git", ["-C", e, "init", "--quiet"], { reject: !1 })).exitCode !== 0 || (await p("git", ["-C", e, "add", "-A"], { reject: !1 }), await p("git", ["-C", e, "commit", "--quiet", "-m", "aiui demo scaffold"], {
-    reject: !1
-  }));
+function Ee(e) {
+  return v(e) ? "" : u.dim(" (not present)");
+}
+function lt(e) {
+  return e.effective !== void 0 ? `${u.cyan(k(e.effective))} ${u.dim(`(${e.source})`)}` : u.dim(
+    e.field.default !== void 0 ? `default: ${k(e.field.default)}` : "unset"
+  );
 }
-function no() {
-  let e = S(nt(import.meta.url));
-  for (let t = 0; t < 4; t++) {
-    const o = l(e, "templates", "demo");
-    if (b(l(o, "package.json")))
-      return o;
-    e = S(e);
+function zn(e, t = process.cwd()) {
+  const n = D(t), o = pe(e, n);
+  if (o) {
+    if (o.effective !== void 0) {
+      console.log(String(o.effective));
+      const r = o.source === "project" ? n.paths.project : n.paths.user;
+      console.error(u.dim(`# set in the ${o.source} config: ${r}`));
+      return;
+    }
+    if (o.field.default !== void 0) {
+      console.log(String(o.field.default)), console.error(u.dim(`# built-in default — ${ee(o.field)}`));
+      return;
+    }
+    console.error(
+      u.dim(`# not set in any config file — default: ${ee(o.field)}`)
+    );
   }
 }
-function io(e) {
-  const t = Ke(process.cwd(), e) || ".", o = t === "aiui-demo" ? "aiui demo" : `aiui demo ${t}`;
-  console.log(`
-demo ready. Run the loop:
-
-  cd ${t}
-  npm run claude     # terminal 1 — Claude Code with the aiui channel + session browser
-  npm run dev        # terminal 2 — the demo app (Vite + the intent tool)
-
-then open the app in the session browser (the window you share with the agent):
-
-  npx aiui open http://localhost:5173
-
-Click the ✳ aiui button on the page and type an intent — it lands in the session
-as a prompt. Re-run \`${o}\` anytime to continue this sandbox.`);
+function Jn(e, t, n = {}, o = process.cwd()) {
+  const r = D(o), i = pe(e, r);
+  if (!i)
+    return;
+  const s = te(i.field, t);
+  if ("error" in s) {
+    b(`invalid value for ${i.path}: ${t}`, s.error), process.exitCode = 1;
+    return;
+  }
+  ut(r, i, s.value, n.project ? "project" : "user");
 }
-const ao = "@habemus-papadum/aiui-claude-channel";
-async function so(e = []) {
-  let t;
-  try {
-    t = X(ao);
-  } catch {
-    m(
-      "The aiui Claude channel CLI is not available",
-      "`@habemus-papadum/aiui-claude-channel` should be installed as a dependency of aiui — try reinstalling."
+function ut(e, t, n, o) {
+  const r = Re(e.paths[o], (i) => {
+    const s = i;
+    s[t.section.name] = { ...s[t.section.name], [t.field.key]: n };
+  });
+  w(`wrote ${t.path}: ${k(n)} to ${r}`);
+}
+function Xn(e, t = {}, n = process.cwd()) {
+  const o = D(n), r = pe(e, o);
+  r && dt(o, r, t.project ? "project" : "user");
+}
+function dt(e, t, n) {
+  var c;
+  const o = e.paths[n];
+  if (((c = (ne(o) ?? {})[t.section.name]) == null ? void 0 : c[t.field.key]) === void 0) {
+    w(`${t.path} is not set in the ${n} config (${o})`);
+    return;
+  }
+  const s = Re(o, (a) => {
+    const l = a, p = { ...l[t.section.name] };
+    delete p[t.field.key], Object.keys(p).length === 0 ? delete l[t.section.name] : l[t.section.name] = p;
+  });
+  w(`removed ${t.path} from ${s}`);
+}
+async function Pe(e = process.cwd()) {
+  if (!process.stdin.isTTY || !process.stdout.isTTY) {
+    b(
+      "aiui config tui needs an interactive terminal",
+      "In scripts and non-TTY sessions use `aiui config show` (or `show --json`)."
     ), process.exitCode = 1;
     return;
   }
-  const o = await p(t.command, [...t.args, ...e], {
-    stdio: "inherit",
-    reject: !1
+  const t = D(e).paths;
+  console.log(u.dim(`user:    ${Se(t.user)}`)), console.log(u.dim(`project: ${Se(t.project)}`));
+  try {
+    for (; ; ) {
+      const n = D(e), o = await Zn(n);
+      if (!o)
+        return;
+      await eo(n, o);
+    }
+  } catch (n) {
+    if (n instanceof Error && n.name === "ExitPromptError")
+      return;
+    throw n;
+  }
+}
+async function Zn(e) {
+  const t = fe(e), n = Math.max(...t.map((r) => r.path.length)) + 2, o = [];
+  for (const r of At) {
+    o.push(new oe(u.dim(`── ${r.name} — ${r.summary}`)));
+    for (const i of t.filter((s) => s.section.name === r.name))
+      o.push({
+        name: `${i.path.padEnd(n)}${lt(i)}`,
+        value: i,
+        description: Qn(i)
+      });
+  }
+  return o.push(new oe(" ")), o.push({ name: "exit", value: void 0, description: "Leave the config browser." }), O({
+    message: "aiui config",
+    choices: o,
+    pageSize: o.length,
+    loop: !1
   });
-  o.exitCode && (process.exitCode = o.exitCode);
 }
-const co = "vite", K = "VITE_AIUI_PORT";
-function lo(e, t) {
+function Qn(e) {
+  const t = [u.bold(e.field.summary)];
+  return e.field.doc && t.push(no(e.field.doc, 76)), t.push(""), e.field.type === "enum" && t.push(`allowed:   ${(e.field.values ?? []).join(" | ")}`), t.push(`default:   ${ee(e.field)}`), t.push(`user:      ${De(e.userValue)}`), t.push(`project:   ${De(e.projectValue)}`), t.push(
+    `effective: ${e.effective !== void 0 ? `${k(e.effective)} (from the ${e.source} config)` : "the built-in default"}`
+  ), t.join(`
+`);
+}
+function De(e) {
+  return e === void 0 ? u.dim("(not set)") : k(e);
+}
+async function eo(e, t) {
+  const n = [
+    {
+      name: "set in the user config",
+      value: "set-user",
+      description: `${e.paths.user}
+Personal preference — applies to every project.`
+    },
+    {
+      name: "set in the project config",
+      value: "set-project",
+      description: `${e.paths.project}
+This project only; the file may be shared or committed by a team.`
+    }
+  ];
+  t.userValue !== void 0 && n.push({
+    name: `unset in the user config (currently ${k(t.userValue)})`,
+    value: "unset-user"
+  }), t.projectValue !== void 0 && n.push({
+    name: `unset in the project config (currently ${k(t.projectValue)})`,
+    value: "unset-project"
+  }), n.push(new oe()), n.push({ name: "back", value: "back" });
+  const o = await O({
+    message: `${t.path} — ${t.field.summary}`,
+    choices: n
+  });
+  if (o === "back")
+    return;
+  const r = o.endsWith("project") ? "project" : "user";
+  if (o.startsWith("unset")) {
+    dt(e, t, r);
+    return;
+  }
+  const i = await to(t);
+  i !== void 0 && ut(e, t, i, r);
+}
+async function to(e) {
+  const t = (r) => r === e.effective ? " (current)" : r === e.field.default ? " (default)" : "";
+  if (e.field.type === "boolean")
+    return O({
+      message: `${e.path} =`,
+      choices: [!0, !1].map((r) => ({
+        name: `${r}${u.dim(t(r))}`,
+        value: r
+      }))
+    });
+  if (e.field.type === "enum")
+    return O({
+      message: `${e.path} =`,
+      choices: (e.field.values ?? []).map((r) => ({
+        name: `${r}${u.dim(t(r))}`,
+        value: r
+      }))
+    });
+  const n = await jt({
+    message: `${e.path} = `,
+    default: e.effective !== void 0 ? String(e.effective) : void 0,
+    validate: (r) => {
+      const i = te(e.field, r);
+      return "error" in i ? i.error : !0;
+    }
+  }), o = te(e.field, n);
+  return "error" in o ? void 0 : o.value;
+}
+function Se(e) {
+  const t = se();
+  return e.startsWith(t) ? `~${e.slice(t.length)}` : e;
+}
+function no(e, t) {
+  const n = [];
+  let o = "";
+  for (const r of e.split(/\s+/))
+    o && o.length + 1 + r.length > t ? (n.push(o), o = r) : o = o ? `${o} ${r}` : r;
+  return o && n.push(o), n.join(`
+`);
+}
+function oo(e, t) {
   if (t !== void 0) {
-    const o = e.find((n) => n.tag === t);
-    if (!o) {
-      const n = e.length > 0 ? e.map((r) => r.tag).join(", ") : "(none running)";
+    const n = e.find((o) => o.tag === t);
+    if (!n) {
+      const o = e.length > 0 ? e.map((r) => r.tag).join(", ") : "(none running)";
       return {
-        error: `no running aiui channel with tag "${t}" — running tags: ${n}`
+        error: `no running aiui channel with tag "${t}" — running tags: ${o}`
       };
     }
-    return { server: o };
+    return { server: n };
   }
   return e.length > 0 ? { select: e } : {};
 }
-async function uo(e = []) {
-  const { mcp: t, tag: o, passthrough: n } = je(e), r = Re(n);
-  if (r) {
-    r === "help" ? fo() : console.log(`aiui ${L}`), await ho(n);
+const ro = "vite";
+async function io(e = []) {
+  const t = de(e), { mcp: n, tag: o, passthrough: r } = t, i = rt(r);
+  if (i) {
+    i === "help" ? uo() : console.log(`aiui ${he}`), await lo(r);
     return;
   }
-  const i = t ?? o, a = lo(Qe(), i);
-  if (a.error) {
-    m("Could not resolve an aiui channel", a.error), process.exitCode = 1;
-    return;
-  }
-  const s = a.select ? await et(a.select) : a.server;
-  let c;
-  s ? (c = String(s.port), console.error(
-    g.dim(
-      `aiui: connecting vite to channel "${s.tag}" (${s.cwd}) on port ${c} via ${K}`
-    )
-  )) : console.error(g.dim(`aiui: no running channel found — ${K} left unset`));
-  const u = Le();
-  if (!u)
+  (n !== void 0 || o !== void 0) && $(
+    "aiui vite no longer connects the app to a channel",
+    "--aiui-mcp / --aiui-tag are ignored. The app reaches the channel through the intent client served at /intent/, not a build-time port. (The standalone panel's own `pnpm dev` still selects a channel — that page is served on Vite's origin, not the channel's.)"
+  );
+  const s = ft();
+  if (!s)
     return;
-  const f = await p(u.command, [...u.args, ...n], {
-    stdio: "inherit",
+  const c = {};
+  process.stdout.isTTY && !("FORCE_COLOR" in process.env) && !("NO_COLOR" in process.env) && (c.FORCE_COLOR = "1");
+  const a = T(s.command, [...s.args, ...r], {
+    stdio: ["inherit", "pipe", "inherit"],
+    buffer: !1,
     reject: !1,
-    ...c ? { env: { [K]: c } } : {}
+    env: c
+  });
+  a.stdout && co(a.stdout, process.stdout, (p) => {
+    ht(p, t);
   });
-  f.exitCode && (process.exitCode = f.exitCode);
+  const l = await a;
+  l.exitCode && (process.exitCode = l.exitCode);
+}
+const so = /\x1b\[[0-9;?]*[ -/]*[@-~]/g;
+function ao(e) {
+  const n = e.replace(so, "").match(
+    /\bLocal:\s+(https?:\/\/(?:localhost|127\.0\.0\.1|\[::1\])(?::\d+)?\/?\S*)/
+  );
+  return n == null ? void 0 : n[1];
+}
+function co(e, t, n) {
+  let o = "", r = !1;
+  e.on("data", (i) => {
+    if (t.write(i), !r) {
+      for (o += i.toString(); ; ) {
+        const s = o.indexOf(`
+`);
+        if (s === -1)
+          break;
+        const c = o.slice(0, s);
+        o = o.slice(s + 1);
+        const a = ao(c);
+        if (a) {
+          r = !0, o = "", n(a);
+          return;
+        }
+      }
+      o.length > 8192 && (o = o.slice(-8192));
+    }
+  });
+}
+async function ht(e, t) {
+  try {
+    const n = {
+      ...S().chrome,
+      ...t.browserUrl ? { browserUrl: t.browserUrl } : {}
+    }, o = vt(t, n);
+    if (o.kind === "skip")
+      return;
+    if (o.kind === "hint") {
+      w(
+        `detected a headless environment (${o.reason}) — not opening a browser`,
+        `Assuming the dev server's port is already forwarded, open ${e} in the browser
+on your local machine. (Pass --aiui-browser to open one here anyway.)`
+      );
+      return;
+    }
+    if (n.browserUrl) {
+      await R(n.browserUrl, e), console.error(u.dim(`aiui: opened ${e} in the browser at ${n.browserUrl}`));
+      return;
+    }
+    const r = x(t, n), i = await U(r.userDataDir);
+    i ? (await R(i.browserUrl, e), console.error(u.dim(`aiui: opened ${e} in the session browser`))) : (await nt({
+      flags: t,
+      config: n,
+      interactive: !1,
+      startUrl: e
+    }), console.error(u.dim(`aiui: opened ${e} in a new session browser`)));
+  } catch (n) {
+    $(
+      "couldn't open the app in the session browser — the dev server is unaffected",
+      n instanceof Error ? n.message : String(n)
+    );
+  }
 }
-function Le() {
+function ft() {
   try {
-    return X(co);
+    return J(ro);
   } catch {
-    m(
+    b(
       "Vite is not available",
       "`vite` should be installed as a dependency of aiui — try reinstalling."
     ), process.exitCode = 1;
     return;
   }
 }
-async function ho(e) {
-  const t = Le();
+async function lo(e) {
+  const t = ft();
   if (!t)
     return;
-  const o = await p(t.command, [...t.args, ...e], {
+  const n = await T(t.command, [...t.args, ...e], {
     stdio: "inherit",
     reject: !1
   });
-  o.exitCode && (process.exitCode = o.exitCode);
+  n.exitCode && (process.exitCode = n.exitCode);
 }
-function fo() {
-  console.log(`aiui vite — launch Vite connected to the running aiui channel
+function uo() {
+  console.log(`aiui vite — launch Vite and open the app in the session browser
 
 aiui's own flags (everything else forwards to vite verbatim):
-  --aiui-mcp <tag>   connect to the channel server with this tag
-  --aiui-tag <tag>   accepted alias for --aiui-mcp
+  --aiui-browser                 open the app in the session browser even when
+                                 the environment looks headless (CI, SSH, no display)
+  --aiui-no-browser              never open a browser for this run
+  --aiui-chrome-profile <name>   browser profile at .aiui-cache/chrome/<name>
+  --aiui-chrome-data-dir <path>  explicit browser user data dir
+
+When Vite prints its Local: URL, aiui opens it in the shared session browser
+(the one \`aiui claude\` and \`aiui open\` use); in headless environments it
+prints the URL to open on your own machine instead.
 
-The chosen channel's port is exported as VITE_AIUI_PORT; the aiuiDevOverlay()
-Vite plugin picks it up there and wires the intent tool to it. What follows is
-vite's own --help:
+The app reaches the aiui channel through the intent client served at /intent/,
+not through this command — so there is no channel to pick here. (The standalone
+intent panel, served on Vite's own origin, is the exception: its \`pnpm dev\`
+selects a channel itself.) What follows is vite's own --help:
 `);
 }
-function mo() {
-  const e = new Be();
-  return e.name("aiui").description("ai ui frontends — thin launchers for Claude, Vite, and the channel CLI").version(L).enablePositionalOptions(), e.command("claude").description("launch Claude (extra args are forwarded, e.g. `aiui claude --resume`)").allowUnknownOption().allowExcessArguments().helpOption(!1).argument("[args...]", "arguments forwarded to claude").action((t) => Jt(t)), e.command("vite").description("launch Vite (extra args are forwarded, e.g. `aiui vite dev`)").allowUnknownOption().allowExcessArguments().helpOption(!1).argument("[args...]", "arguments forwarded to vite").action((t) => uo(t)), e.command("chrome").description("manage the agent's browser: install | update | status | extension").argument("<action>", "install | update | status | extension").action((t) => Ot([t])), e.command("browser").description(
+async function ho(e = {}) {
+  const t = oo(M(), e.mcp);
+  if (t.error) {
+    b("Could not resolve an aiui channel", t.error), process.exitCode = 1;
+    return;
+  }
+  const n = t.select ? await He(t.select) : t.server;
+  if (!n) {
+    console.log("No running aiui channel to open — start one with `aiui claude`."), process.exitCode = 1;
+    return;
+  }
+  const o = `http://127.0.0.1:${n.port}/`;
+  console.log(`${u.cyan("aiui debug")} — the channel console`), console.log(`  ${u.bold(o)}`), console.log(
+    u.dim(`  channel "${n.tag}" (${n.cwd}) on port ${n.port}`) + u.dim(" — the dashboard links to the trace debugger at /__aiui/debug.")
+  ), e.open !== !1 && await ht(o, de([]));
+}
+const Ae = [".env", ".env.local", ".env.dev", ".env.dev.local"];
+function fo(e) {
+  let t = e;
+  for (; ; ) {
+    if (v(d(t, "pnpm-workspace.yaml")) || v(d(t, ".git")))
+      return t;
+    const n = bt(t);
+    if (n === t)
+      return e;
+    t = n;
+  }
+}
+function po(e) {
+  const t = /* @__PURE__ */ new Map();
+  for (const n of e.split(`
+`)) {
+    const o = n.trim();
+    if (o === "" || o.startsWith("#"))
+      continue;
+    const r = /^(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=\s*(.*)$/.exec(o);
+    if (!r)
+      continue;
+    let i = r[2].trim();
+    i.length >= 2 && (i[0] === '"' || i[0] === "'") && i[i.length - 1] === i[0] && (i = i.slice(1, -1)), t.set(r[1], i);
+  }
+  return t;
+}
+function _e(e) {
+  return `'${e.replace(/'/g, "'\\''")}'`;
+}
+function mo(e) {
+  const t = [];
+  t.push(
+    // biome-ignore lint/suspicious/noTemplateCurlyInString: shell parameter expansion, not a JS template
+    'if [ -z "${_AIUI_OLD_PATH:-}" ]; then _AIUI_OLD_PATH="$PATH"; export _AIUI_OLD_PATH; fi;'
+  );
+  for (const o of [...e.pathDirs].reverse()) {
+    const r = _e(o);
+    t.push(`case ":$PATH:" in *":"${r}":"*) : ;; *) PATH=${r}":$PATH"; export PATH ;; esac;`);
+  }
+  for (const [o, r] of e.vars)
+    t.push(`export ${o}=${_e(r)};`);
+  const n = e.vars.size > 0 ? ` unset ${[...e.vars.keys()].join(" ")};` : "";
+  return t.push(
+    `aiui_deactivate () { if [ -n "\${_AIUI_OLD_PATH:-}" ]; then PATH="$_AIUI_OLD_PATH"; export PATH; unset _AIUI_OLD_PATH; fi;${n} unset -f aiui_deactivate; };`
+  ), `${t.join(`
+`)}
+`;
+}
+function wo() {
+  const e = process.cwd(), t = fo(e), n = [d(t, "bin"), d(t, "node_modules", ".bin")];
+  e !== t && n.push(d(e, "node_modules", ".bin"));
+  const o = n.filter((c) => v(c)), r = /* @__PURE__ */ new Map(), i = /* @__PURE__ */ new Map();
+  for (const c of Ae) {
+    const a = d(t, c);
+    if (v(a))
+      for (const [l, p] of po(L(a, "utf8")))
+        r.set(l, p), i.set(l, c);
+  }
+  process.stdout.write(mo({ pathDirs: o, vars: r }));
+  const s = [...r.keys()].map((c) => `${c} (${i.get(c)})`);
+  process.stderr.write(
+    u.dim(
+      `aiui env: root ${t}
+aiui env: PATH + ${o.length > 0 ? o.join(", ") : "(nothing found)"}
+aiui env: export ${s.length > 0 ? s.join(", ") : `(none — no ${Ae.join("/")} at root)`}
+aiui env: activate with  eval "$(aiui env)"  — undo with  aiui_deactivate
+`
+    )
+  );
+}
+const go = "@habemus-papadum/aiui-claude-channel";
+async function bo(e = []) {
+  let t;
+  try {
+    t = J(go);
+  } catch {
+    b(
+      "The aiui Claude channel CLI is not available",
+      "`@habemus-papadum/aiui-claude-channel` should be installed as a dependency of aiui — try reinstalling."
+    ), process.exitCode = 1;
+    return;
+  }
+  const n = at(e) ? wn(e, it({ config: S() })) : e, o = await T(t.command, [...t.args, ...n], {
+    stdio: "inherit",
+    reject: !1
+  });
+  o.exitCode && (process.exitCode = o.exitCode);
+}
+function yo(e) {
+  const t = Buffer.from(JSON.stringify(e), "utf8"), n = Buffer.allocUnsafe(4 + t.length);
+  return pt() ? n.writeUInt32LE(t.length, 0) : n.writeUInt32BE(t.length, 0), t.copy(n, 4), n;
+}
+function vo(e) {
+  const t = [];
+  let n = 0;
+  for (; e.length - n >= 4; ) {
+    const o = pt() ? e.readUInt32LE(n) : e.readUInt32BE(n);
+    if (e.length - n - 4 < o)
+      break;
+    const r = e.subarray(n + 4, n + 4 + o);
+    n += 4 + o;
+    try {
+      t.push(JSON.parse(r.toString("utf8")));
+    } catch {
+      t.push(void 0);
+    }
+  }
+  return { messages: t, rest: e.subarray(n) };
+}
+function pt() {
+  return new Uint8Array(new Uint32Array([1]).buffer)[0] === 1;
+}
+function $o(e) {
+  const t = e !== null && typeof e == "object" ? e.cmd : void 0;
+  return t === "ping" ? { ok: !0, at: (/* @__PURE__ */ new Date()).toISOString() } : t === "version" ? { ok: !0, version: 1 } : t === "listChannels" ? { ok: !0, channels: M().map((o) => ({
+    tag: o.tag,
+    port: o.port,
+    pid: o.pid,
+    cwd: o.cwd,
+    startedAt: o.startedAt,
+    ...o.name !== void 0 ? { name: o.name } : {},
+    ...o.debug === !0 ? { debug: !0 } : {}
+  })) } : { ok: !1, error: `unknown cmd ${JSON.stringify(t)}` };
+}
+async function Co() {
+  let e = Buffer.alloc(0);
+  process.stdin.on("data", (t) => {
+    e = Buffer.concat([e, t]);
+    const { messages: n, rest: o } = vo(e);
+    e = o;
+    for (const r of n) {
+      let i;
+      try {
+        i = $o(r);
+      } catch (s) {
+        i = { ok: !1, error: s instanceof Error ? s.message : String(s) };
+      }
+      process.stdout.write(yo(i));
+    }
+  }), await new Promise((t) => {
+    process.stdin.on("end", t), process.stdin.on("close", t);
+  });
+}
+function ko() {
+  const e = [];
+  for (const t of Object.values(Ge()))
+    for (const n of t ?? [])
+      n.family === "IPv4" && !n.internal && e.push(n.address);
+  return e;
+}
+async function H(e, t) {
+  try {
+    const n = await fetch(`http://127.0.0.1:${e}${t}`, {
+      signal: AbortSignal.timeout(1500)
+    });
+    return n.ok ? await n.json() : void 0;
+  } catch {
+    return;
+  }
+}
+async function xo(e, t) {
+  const n = await H(
+    e,
+    `${t}/info`
+  );
+  if (!(n != null && n.ok))
+    return;
+  const o = await H(e, "/health"), r = (o == null ? void 0 : o.host) !== void 0 && o.host !== "127.0.0.1";
+  return {
+    lan: r,
+    urls: r ? ko().map((i) => `http://${i}:${e}${t}/`) : [`http://127.0.0.1:${e}${t}/`],
+    hosts: n.hosts ?? 0,
+    clients: n.clients ?? 0
+  };
+}
+function To(e) {
+  const t = { name: "loopback", address: "127.0.0.1" };
+  if (e === void 0 || e === "127.0.0.1")
+    return [t];
+  const n = [];
+  for (const [o, r] of Object.entries(Ge()))
+    for (const i of r ?? [])
+      i.family === "IPv4" && !i.internal && n.push({ name: o, address: i.address });
+  return [...n, t];
+}
+async function Io(e) {
+  if (process.platform !== "darwin")
+    return !1;
+  try {
+    return await T("pbcopy", { input: e }), !0;
+  } catch {
+    return !1;
+  }
+}
+function Eo(e, t) {
+  var n;
+  return e.name ?? ((n = t.get(e.ppid)) == null ? void 0 : n.name) ?? e.cwd;
+}
+function Po(e = {}) {
+  return e.json ? Ao("/pencil") : Do("/pencil", "pencil");
+}
+async function Do(e, t) {
+  const n = M();
+  if (n.length === 0) {
+    So(t);
+    return;
+  }
+  const o = await He(n), r = await H(o.port, `${e}/info`);
+  if (!(r != null && r.ok)) {
+    console.log(
+      `${u.bold(Eo(o, Fe(Ve())))} is not hosting the ${t} surface.`
+    ), process.exitCode = 1;
+    return;
+  }
+  const i = await H(o.port, "/health"), s = To(i == null ? void 0 : i.host), c = (i == null ? void 0 : i.host) !== void 0 && i.host !== "127.0.0.1", l = `http://${(s.length === 1 ? s[0] : await O({
+    message: "Which host interface should the iPad reach the channel on?",
+    choices: s.map((f) => ({
+      name: `${f.address}  ${u.dim(`(${f.name})`)}`,
+      value: f
+    }))
+  })).address}:${o.port}${e}/`, p = await Io(l);
+  console.log(""), console.log(`  ${u.cyan(l)}`), console.log(""), p ? (console.log(u.dim("  Copied to your clipboard.")), console.log(
+    u.dim("  Use Universal Clipboard (⌘V on the iPad) to paste it into Safari there.")
+  )) : console.log(u.dim("  (Copy it to the iPad however you like.)")), c || console.log(
+    u.dim(
+      "  This channel is loopback-only: the iPad needs a tunnel to this port (Tailscale, ssh -L), or relaunch with --aiui-bind host."
+    )
+  ), console.log("");
+}
+function So(e) {
+  console.log(`No running channel is hosting the ${e} surface.`), console.log(""), console.log(`Every channel hosts it — start a session with ${u.cyan("aiui claude")} (or a`), console.log(
+    `standalone ${u.cyan("aiui mcp serve")}), then run this again to reach the ${e} surface.`
+  ), process.exitCode = 1;
+}
+async function Ao(e, t) {
+  var i;
+  const n = M(), o = n.length > 0 ? Fe(Ve()) : /* @__PURE__ */ new Map(), r = [];
+  for (const s of n) {
+    const c = await xo(s.port, e);
+    if (c) {
+      const a = s.name ?? ((i = o.get(s.ppid)) == null ? void 0 : i.name);
+      r.push({
+        cwd: s.cwd,
+        pid: s.pid,
+        port: s.port,
+        ...a !== void 0 ? { session: a } : {},
+        ...c
+      });
+    }
+  }
+  console.log(JSON.stringify({ targets: r }, null, 2));
+}
+function _o() {
+  const e = new wt();
+  e.name("aiui").description("ai ui frontends — thin launchers for Claude, Vite, and the channel CLI").version(he).enablePositionalOptions(), e.command("claude").description("launch Claude (extra args are forwarded, e.g. `aiui claude --resume`)").allowUnknownOption().allowExcessArguments().helpOption(!1).argument("[args...]", "arguments forwarded to claude").action((o) => Rn(o)), e.command("vite").description("launch Vite (extra args are forwarded, e.g. `aiui vite dev`)").allowUnknownOption().allowExcessArguments().helpOption(!1).argument("[args...]", "arguments forwarded to vite").action((o) => io(o)), e.command("debug").description("open the channel console (dashboard + trace debugger) in the session browser").option("--mcp <tag>", "target a channel by registry tag (skips the selector)").option("--no-open", "print the URL but don't open the browser").action((o) => ho(o)), e.command("chrome").description("manage the agent's browser: install | update | status").argument("<action>", "install | update | status").action((o) => un([o])), e.command("browser").description(
     "start (or find) the shared session browser; --tunnel does the whole remote-dev local half"
   ).option(
     "--profile <name>",
@@ -1349,9 +1994,13 @@ function mo() {
   ).option("--data-dir <path>", "explicit Chrome user data dir").option("--port <port>", "fixed local DevTools debug port (default: OS-assigned)").option("--headless", "launch with no UI").option("--open <url>", "also open this URL in it").option(
     "--tunnel <[user@]host>",
     "reverse-tunnel the debug port to this host (Ctrl-C closes it)"
-  ).option("--remote-port <port>", "fixed port on the tunnel's remote side (default: 9222)").action((t) => $t(t)), e.command("demo").description("scaffold a runnable demo playground (safe to re-run; default dir: aiui-demo)").argument("[dir]", "target directory (default: aiui-demo)").option("--skip-install", "scaffold only — don't run npm install").action((t, o) => Qt(t, o)), e.command("open").description("open a URL in the session browser, e.g. `aiui open http://localhost:5173`").argument("<url>", "the URL to open").option("--profile <name>", "named profile under .aiui-cache/chrome/").option("--data-dir <path>", "explicit Chrome user data dir").action((t, o) => At(t, o)), e.command("mcp").description("run a channel command (forwards to aiui-claude-channel), e.g. `aiui mcp quick`").allowUnknownOption().allowExcessArguments().helpOption(!1).argument("[args...]", "arguments forwarded to the aiui-claude-channel CLI").action((t) => so(t)), e;
+  ).option("--remote-port <port>", "fixed port on the tunnel's remote side (default: 9222)").action((o) => nn(o)), e.command("extension").description("the intent client extension's native host: install-native-host | status").argument("<action>", "install-native-host | status").option("--extension-id <id>", "extension id for allowed_origins (default: the pinned id)").action((o, r) => Xt(o, r)), e.command("native-host", { hidden: !0 }).description("(internal) Chrome native-messaging host — spawned by the browser").action(() => Co()), e.command("clean").description(
+    "reset aiui state (project + user cache, incl. Chrome for Testing) for a clean-slate demo"
+  ).option("--project-only", "only this repo's .aiui-cache/").option("--user-only", "only the user cache (~/.cache/aiui)").option("--keep-browser", "keep Chrome for Testing (skip the ~160 MB re-download)").option("-n, --dry-run", "print what would be deleted, then stop").option("-y, --yes", "delete without the confirmation prompt").action((o) => Wn(o)), e.command("open").description("open a URL in the session browser, e.g. `aiui open http://localhost:5173`").argument("<url>", "the URL to open").option("--profile <name>", "named profile under .aiui-cache/chrome/").option("--data-dir <path>", "explicit Chrome user data dir").action((o, r) => ln(o, r)), e.command("env").description('print shell code to activate this checkout — use as: eval "$(aiui env)"').action(() => wo());
+  const t = e.command("config").description("inspect and edit aiui's config.json — tui | show | get | set | unset").action(() => Pe());
+  return t.command("tui").description("browse every setting interactively: docs, defaults, current values, editing").action(() => Pe()), t.command("show").description("every key with its effective value and which file set it").option("--json", "machine-readable: file paths, per-level values, effective merge").action((o) => qn(o)), t.command("get").description("print a key's effective value (provenance goes to stderr)").argument("<key>", 'dotted key, e.g. "chrome.mode"').action((o) => zn(o)), t.command("set").description("set a key in the user config (or the project's with --project)").argument("<key>", 'dotted key, e.g. "chrome.mode"').argument("<value>", "the new value, validated against the schema").option("--project", "write .aiui-cache/config.json here instead of the user config").action((o, r, i) => Jn(o, r, i)), t.command("unset").description("remove a key from the user config (or the project's with --project)").argument("<key>", 'dotted key, e.g. "claude.skipPermissions"').option("--project", "remove from .aiui-cache/config.json here instead of the user config").action((o, r) => Xn(o, r)), e.command("mcp").description("run a channel command (forwards to aiui-claude-channel), e.g. `aiui mcp quick`").allowUnknownOption().allowExcessArguments().helpOption(!1).argument("[args...]", "arguments forwarded to the aiui-claude-channel CLI").action((o) => bo(o)), e.command("pencil").description("the remote pencil — url (where the iPad should connect)").command("url").description("pick a channel + interface, print the iPad URL and copy it to the clipboard").option("--json", "machine-readable targets (every hosting channel, no prompts)").action((o) => Po(o)), e;
 }
-mo().parseAsync().catch((e) => {
+_o().parseAsync().catch((e) => {
   console.error(e instanceof Error ? e.message : e), process.exitCode = 1;
 });
 //# sourceMappingURL=cli.js.map