@habemus-papadum/aiui 0.2.0 → 0.5.0

package/dist/config-Cis6kCik.js

@@ -0,0 +1,293 @@
+import { readFileSync as C, mkdirSync as T, writeFileSync as x } from "node:fs";
+import { join as p, dirname as S } from "node:path";
+import { projectCacheDir as E } from "@habemus-papadum/aiui-claude-channel";
+import { CHROME_CHANNELS as N, cacheDir as $ } from "@habemus-papadum/aiui-util";
+const O = ["prompt", "auto", "off"], P = ["attach", "launch"], D = ["loopback", "host"], u = [
+  {
+    name: "claude",
+    summary: "how `aiui claude` launches Claude Code",
+    fields: [
+      {
+        key: "skipPermissions",
+        type: "boolean",
+        default: !0,
+        defaultText: "true (unset: the first interactive launch asks, then persists the answer)",
+        summary: "Launch Claude Code with --dangerously-skip-permissions.",
+        doc: "A personal preference with real consequences (docs/guide/warning): every agent action — shell commands, file writes, network, the browser — runs without asking first. aiui works fine either way. The first interactive launch asks and persists the answer at the user level; when unset, non-interactive sessions fall back to true."
+      },
+      {
+        key: "enterNudge",
+        type: "boolean",
+        default: !0,
+        defaultText: "true (unset: the first interactive launch asks, then persists the answer)",
+        summary: "Auto-dismiss Claude Code's development-channel acknowledgement prompt.",
+        doc: "aiui loads a custom development channel, so Claude Code shows a one-key acknowledgement at every startup; this injects a single Enter keystroke into the terminal to dismiss it (best-effort TIOCSTI on /dev/tty — platforms that forbid it harmlessly do nothing). Saying no just means pressing Enter yourself each launch."
+      }
+    ]
+  },
+  {
+    name: "channel",
+    summary: "the channel server's web backend",
+    fields: [
+      {
+        key: "bind",
+        type: "enum",
+        values: D,
+        default: "loopback",
+        defaultText: '"loopback" (unset: the first interactive launch asks, then persists the answer)',
+        summary: "Which interface the channel web server binds: loopback, or host (LAN).",
+        doc: '"host" (0.0.0.0) makes the session\'s whole web surface — the iPad paint page, but also prompt injection, /debug, and every sidecar — reachable by anyone on your network, UNAUTHENTICATED. That is the trusted-LAN posture (docs/guide/warning): right on a network that is yours alone, wrong on shared Wi-Fi. "loopback" keeps everything this-machine-only; reaching the paint page from an iPad is then up to you — tunnel the channel port however you like (Tailscale, `ssh -L`). The first interactive launch asks and persists the answer at the user level. Per-launch flag: --aiui-bind.'
+      }
+    ]
+  },
+  {
+    name: "chrome",
+    summary: "the agent's browser and the Chrome DevTools MCP",
+    fields: [
+      {
+        key: "enabled",
+        type: "boolean",
+        default: !0,
+        summary: "Attach the Chrome DevTools MCP.",
+        doc: "false turns it off everywhere; true restates the default and does NOT override the CI default-off — only the --aiui-chrome flag forces it on under CI."
+      },
+      {
+        key: "mode",
+        type: "enum",
+        values: P,
+        default: "attach",
+        summary: "How the MCP reaches a browser: shared session browser, or its own.",
+        doc: `"attach" shares a user-visible session browser: an already-running one is discovered by profile, or an interactive launch starts one eagerly. "launch" is the hands-off mode: chrome-devtools-mcp launches its own private browser lazily, on the agent's first browser tool call.`
+      },
+      {
+        key: "browserUrl",
+        type: "string",
+        defaultText: "unset (manage a browser locally)",
+        summary: "Attach to this DevTools endpoint instead of managing a browser at all.",
+        doc: 'The remote-development key (docs/guide/remote): the browser runs on another machine (started there with `aiui browser`) and its debug port is tunneled over. Setting it implies mode: "attach" and makes every local-browser setting (profile, executablePath, channel, forTesting…) irrelevant. Per-launch flag: --aiui-browser-url.',
+        validate: (e) => j(String(e)) ? void 0 : 'expected an http(s) URL like "http://127.0.0.1:9222"'
+      },
+      {
+        key: "debugPort",
+        type: "number",
+        default: 0,
+        defaultText: "0 (an OS-assigned free port)",
+        summary: "Fixed DevTools debug port for session browsers aiui launches.",
+        doc: "Pin it (e.g. 9222) when something external must find the port — an ssh tunnel, a VS Code attach-to-Chrome launch config. 0 means an OS-assigned free port.",
+        validate: (e) => Number.isInteger(e) && e >= 0 && e <= 65535 ? void 0 : "expected 0..65535"
+      },
+      {
+        key: "profile",
+        type: "string",
+        default: "default",
+        summary: "Named profile under .aiui-cache/chrome/.",
+        doc: "Per-launch flag: --aiui-chrome-profile."
+      },
+      {
+        key: "dataDir",
+        type: "string",
+        defaultText: "unset (derived from chrome.profile)",
+        summary: "Explicit Chrome user data dir; takes precedence over chrome.profile.",
+        doc: "Per-launch flag: --aiui-chrome-data-dir."
+      },
+      {
+        key: "executablePath",
+        type: "string",
+        defaultText: "unset (managed Chrome for Testing when installed, else installed Chrome)",
+        summary: "Chrome binary to launch — e.g. a Chrome for Testing install.",
+        doc: "Chrome for Testing still honors --load-extension, so the aiui DevTools panel can auto-load. Mutually exclusive with chrome.channel."
+      },
+      {
+        key: "channel",
+        type: "enum",
+        values: N,
+        defaultText: 'unset ("stable" when launching an installed Chrome)',
+        summary: "Installed Chrome release channel to launch.",
+        doc: "Mutually exclusive with chrome.executablePath."
+      },
+      {
+        key: "forTesting",
+        type: "enum",
+        values: O,
+        default: "prompt",
+        summary: "How `aiui claude` manages the recommended Chrome for Testing install.",
+        doc: '"prompt" asks before installing or updating it — interactive sessions only, never under CI; "auto" installs/updates without asking; "off" never checks. Prompt answers ("automatically", "never ask again") persist here at the user level. Skipped entirely when executablePath or channel picks a browser explicitly.'
+      },
+      {
+        key: "headless",
+        type: "boolean",
+        default: !1,
+        summary: "Launch Chrome with no UI."
+      },
+      {
+        key: "buildExtension",
+        type: "boolean",
+        default: !0,
+        summary: "OBSOLETE — parsed and ignored (the DevTools extension is deleted).",
+        doc: "The only extension a launch auto-loads is the intent client, whose MV3 bundle is built deliberately (`pnpm -C packages/aiui-intent-client build:ext`). Kept in the schema so old configs stay valid."
+      },
+      {
+        key: "autoCapture",
+        type: "boolean",
+        default: !0,
+        summary: "OBSOLETE — parsed and ignored (page-side getDisplayMedia capture is gone).",
+        doc: "The intent client's hosts capture natively (CDP screenshots / the extension's tabCapture stream); nothing reads the page-side capture marker any more. Kept in the schema so old configs stay valid."
+      }
+    ]
+  }
+];
+function J() {
+  return u.flatMap(
+    (e) => e.fields.map((t) => ({ section: e, field: t, path: `${e.name}.${t.key}` }))
+  );
+}
+function w(e) {
+  return e.type === "enum" ? "string" : e.type;
+}
+function b(e, t) {
+  var n;
+  return e.type === "enum" && !(e.values ?? []).includes(String(t)) ? `expected one of: ${(e.values ?? []).join(", ")}` : (n = e.validate) == null ? void 0 : n.call(e, t);
+}
+function V(e, t) {
+  let n;
+  switch (w(e)) {
+    case "boolean": {
+      if (t !== "true" && t !== "false")
+        return { error: "expected true or false" };
+      n = t === "true";
+      break;
+    }
+    case "number": {
+      if (n = Number(t), t.trim() === "" || Number.isNaN(n))
+        return { error: "expected a number" };
+      break;
+    }
+    default:
+      n = t;
+  }
+  const a = b(e, n);
+  return a ? { error: a } : { value: n };
+}
+function k(e) {
+  return typeof e == "string" ? JSON.stringify(e) : String(e);
+}
+function B(e) {
+  return e.defaultText ? e.defaultText : e.default === void 0 ? "unset" : k(e.default);
+}
+function j(e) {
+  try {
+    const t = new URL(e);
+    return t.protocol === "http:" || t.protocol === "https:";
+  } catch {
+    return !1;
+  }
+}
+const y = "config.json", A = /* @__PURE__ */ new Set(["sidecars"]);
+function v(e = process.cwd()) {
+  return {
+    user: p($(void 0, { create: !1 }), y),
+    project: p(E(e), y)
+  };
+}
+function G(e = process.cwd()) {
+  const t = v(e);
+  return I(l(t.user) ?? {}, l(t.project) ?? {});
+}
+function I(e, t) {
+  const n = {};
+  for (const a of u)
+    n[a.name] = {
+      ...e[a.name],
+      ...t[a.name]
+    };
+  return n;
+}
+function l(e) {
+  let t;
+  try {
+    t = C(e, "utf8");
+  } catch {
+    return;
+  }
+  let n;
+  try {
+    n = JSON.parse(t);
+  } catch (a) {
+    throw new Error(
+      `invalid JSON in ${e}: ${a instanceof Error ? a.message : String(a)}`
+    );
+  }
+  return M(n, e);
+}
+function M(e, t) {
+  const n = g(e, t, "the top level"), a = u.map((r) => r.name);
+  for (const r of Object.keys(n))
+    if (!(a.includes(r) || A.has(r)))
+      throw new Error(
+        `unknown key "${r}" at the top level of ${t} — known keys: ${a.join(", ")}`
+      );
+  const s = {};
+  for (const r of u) {
+    if (n[r.name] === void 0)
+      continue;
+    const c = g(n[r.name], t, `"${r.name}"`);
+    L(
+      c,
+      r.fields.map((o) => o.key),
+      t,
+      `"${r.name}"`
+    );
+    const h = {};
+    for (const o of r.fields) {
+      const i = c[o.key];
+      if (i === void 0)
+        continue;
+      const d = `${r.name}.${o.key}`, m = w(o);
+      if (typeof i !== m)
+        throw new Error(`expected a ${m} for ${d} in ${t}`);
+      const f = b(o, i);
+      if (f)
+        throw new Error(
+          `invalid ${d} ${k(i)} in ${t} — ${f}`
+        );
+      h[o.key] = i;
+    }
+    s[r.name] = h;
+  }
+  return s;
+}
+function K(e) {
+  return F(v().user, e);
+}
+function F(e, t) {
+  const n = l(e) ?? {};
+  return t(n), T(S(e), { recursive: !0 }), x(e, `${JSON.stringify(n, null, 2)}
+`), e;
+}
+function g(e, t, n) {
+  if (typeof e != "object" || e === null || Array.isArray(e))
+    throw new Error(`expected an object at ${n} of ${t}`);
+  return e;
+}
+function L(e, t, n, a) {
+  for (const s of Object.keys(e))
+    if (!t.includes(s))
+      throw new Error(
+        `unknown key "${s}" at ${a} of ${n} — known keys: ${t.join(", ")}`
+      );
+}
+export {
+  D as C,
+  J as a,
+  F as b,
+  v as c,
+  B as d,
+  u as e,
+  k as f,
+  G as l,
+  I as m,
+  V as p,
+  l as r,
+  K as u
+};
+//# sourceMappingURL=config-Cis6kCik.js.map

package/dist/config-Cis6kCik.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-Cis6kCik.js","sources":["../src/util/config-schema.ts","../src/util/config.ts"],"sourcesContent":["/**\n * The declarative schema for aiui's `config.json` — one table that drives\n * everything config-shaped:\n *\n *   - validation (util/config.ts walks these sections instead of hand-rolled\n *     per-key checks),\n *   - the `aiui config` commands (show/get/set/unset use it to resolve keys,\n *     parse CLI values, and report defaults),\n *   - the `aiui config tui` browser (docs, defaults, and enum choices all\n *     render from here).\n *\n * Because docs, defaults, and validation come from the same rows, they cannot\n * drift apart. `docs/guide/config.md` remains the long-form narrative; the\n * `doc` strings here are the terminal-sized versions.\n *\n * **How a component participates.** `CONFIG_SECTIONS` is the registry: a\n * section is plain data, so a future component that grows file-backed settings\n * (say, an `intent` section for the pipeline) joins by contributing one\n * `ConfigSectionSchema` object here and a matching optional section on\n * `AiuiConfig`. Nothing else — validation, show/get/set, and the TUI pick it\n * up from the table. (The intent pipeline's current config is deliberately\n * *not* here: it is per-app, passed as `aiuiDevOverlay({ intent: { … } })` in\n * the app's Vite config — see docs/guide/intent-overlay.md.)\n */\n\n// The channel list lives with the launch code (aiui-util's browser module,\n// whose RELEASE_CHANNELS map must stay exhaustive over it); re-exported here\n// so the config table keeps being the one import surface for config shapes.\nimport { CHROME_CHANNELS } from \"@habemus-papadum/aiui-util\";\n\nexport { CHROME_CHANNELS, type ChromeChannel } from \"@habemus-papadum/aiui-util\";\n\nexport const FOR_TESTING_MODES = [\"prompt\", \"auto\", \"off\"] as const;\nexport type ForTestingMode = (typeof FOR_TESTING_MODES)[number];\n\nexport const CHROME_MODES = [\"attach\", \"launch\"] as const;\nexport type ChromeMode = (typeof CHROME_MODES)[number];\n\nexport const CHANNEL_BINDS = [\"loopback\", \"host\"] as const;\nexport type ChannelBind = (typeof CHANNEL_BINDS)[number];\n\n/** Every config leaf is a JSON scalar; sections never nest further. */\nexport type ConfigValue = boolean | number | string;\n\nexport interface ConfigFieldSchema {\n  /** Leaf key within its section, e.g. `\"skipPermissions\"`. */\n  key: string;\n  /** `\"enum\"` is a string constrained to {@link values}. */\n  type: \"boolean\" | \"number\" | \"string\" | \"enum\";\n  /** The allowed values when {@link type} is `\"enum\"`. */\n  values?: readonly string[];\n  /** The built-in default, when the fallback is a plain value. */\n  default?: ConfigValue;\n  /**\n   * Human phrasing of the default when a bare value would mislead (dynamic\n   * fallbacks, first-run prompts). Shown instead of {@link default}.\n   */\n  defaultText?: string;\n  /** One-line summary — the TUI's list row. */\n  summary: string;\n  /** The rest of the documentation (terminal-sized; optional). */\n  doc?: string;\n  /**\n   * Constraint beyond type/enum. Returns the \"expected …\" tail of the error\n   * message, or undefined when the value is fine.\n   */\n  validate?: (value: ConfigValue) => string | undefined;\n}\n\nexport interface ConfigSectionSchema {\n  /** Top-level key in config.json, e.g. `\"chrome\"`. */\n  name: string;\n  /** One-line summary of what the section configures. */\n  summary: string;\n  fields: ConfigFieldSchema[];\n}\n\nexport const CONFIG_SECTIONS: ConfigSectionSchema[] = [\n  {\n    name: \"claude\",\n    summary: \"how `aiui claude` launches Claude Code\",\n    fields: [\n      {\n        key: \"skipPermissions\",\n        type: \"boolean\",\n        default: true,\n        defaultText: \"true (unset: the first interactive launch asks, then persists the answer)\",\n        summary: \"Launch Claude Code with --dangerously-skip-permissions.\",\n        doc:\n          \"A personal preference with real consequences (docs/guide/warning): every agent \" +\n          \"action — shell commands, file writes, network, the browser — runs without asking \" +\n          \"first. aiui works fine either way. The first interactive launch asks and persists \" +\n          \"the answer at the user level; when unset, non-interactive sessions fall back to true.\",\n      },\n      {\n        key: \"enterNudge\",\n        type: \"boolean\",\n        default: true,\n        defaultText: \"true (unset: the first interactive launch asks, then persists the answer)\",\n        summary: \"Auto-dismiss Claude Code's development-channel acknowledgement prompt.\",\n        doc:\n          \"aiui loads a custom development channel, so Claude Code shows a one-key \" +\n          \"acknowledgement at every startup; this injects a single Enter keystroke into the \" +\n          \"terminal to dismiss it (best-effort TIOCSTI on /dev/tty — platforms that forbid it \" +\n          \"harmlessly do nothing). Saying no just means pressing Enter yourself each launch.\",\n      },\n    ],\n  },\n  {\n    name: \"channel\",\n    summary: \"the channel server's web backend\",\n    fields: [\n      {\n        key: \"bind\",\n        type: \"enum\",\n        values: CHANNEL_BINDS,\n        default: \"loopback\",\n        defaultText:\n          '\"loopback\" (unset: the first interactive launch asks, then persists the answer)',\n        summary: \"Which interface the channel web server binds: loopback, or host (LAN).\",\n        doc:\n          '\"host\" (0.0.0.0) makes the session\\'s whole web surface — the iPad paint page, but ' +\n          \"also prompt injection, /debug, and every sidecar — reachable by anyone on your \" +\n          \"network, UNAUTHENTICATED. That is the trusted-LAN posture (docs/guide/warning): \" +\n          'right on a network that is yours alone, wrong on shared Wi-Fi. \"loopback\" keeps ' +\n          \"everything this-machine-only; reaching the paint page from an iPad is then up to \" +\n          \"you — tunnel the channel port however you like (Tailscale, `ssh -L`). The first \" +\n          \"interactive launch asks and persists the answer at the user level. Per-launch \" +\n          \"flag: --aiui-bind.\",\n      },\n    ],\n  },\n  {\n    name: \"chrome\",\n    summary: \"the agent's browser and the Chrome DevTools MCP\",\n    fields: [\n      {\n        key: \"enabled\",\n        type: \"boolean\",\n        default: true,\n        summary: \"Attach the Chrome DevTools MCP.\",\n        doc:\n          \"false turns it off everywhere; true restates the default and does NOT override the \" +\n          \"CI default-off — only the --aiui-chrome flag forces it on under CI.\",\n      },\n      {\n        key: \"mode\",\n        type: \"enum\",\n        values: CHROME_MODES,\n        default: \"attach\",\n        summary: \"How the MCP reaches a browser: shared session browser, or its own.\",\n        doc:\n          '\"attach\" shares a user-visible session browser: an already-running one is ' +\n          'discovered by profile, or an interactive launch starts one eagerly. \"launch\" is ' +\n          \"the hands-off mode: chrome-devtools-mcp launches its own private browser lazily, on \" +\n          \"the agent's first browser tool call.\",\n      },\n      {\n        key: \"browserUrl\",\n        type: \"string\",\n        defaultText: \"unset (manage a browser locally)\",\n        summary: \"Attach to this DevTools endpoint instead of managing a browser at all.\",\n        doc:\n          \"The remote-development key (docs/guide/remote): the browser runs on another machine \" +\n          \"(started there with `aiui browser`) and its debug port is tunneled over. Setting it \" +\n          'implies mode: \"attach\" and makes every local-browser setting (profile, ' +\n          \"executablePath, channel, forTesting…) irrelevant. Per-launch flag: --aiui-browser-url.\",\n        validate: (value) =>\n          isHttpUrl(String(value))\n            ? undefined\n            : 'expected an http(s) URL like \"http://127.0.0.1:9222\"',\n      },\n      {\n        key: \"debugPort\",\n        type: \"number\",\n        default: 0,\n        defaultText: \"0 (an OS-assigned free port)\",\n        summary: \"Fixed DevTools debug port for session browsers aiui launches.\",\n        doc:\n          \"Pin it (e.g. 9222) when something external must find the port — an ssh tunnel, a \" +\n          \"VS Code attach-to-Chrome launch config. 0 means an OS-assigned free port.\",\n        validate: (value) =>\n          Number.isInteger(value) && (value as number) >= 0 && (value as number) <= 65535\n            ? undefined\n            : \"expected 0..65535\",\n      },\n      {\n        key: \"profile\",\n        type: \"string\",\n        default: \"default\",\n        summary: \"Named profile under .aiui-cache/chrome/.\",\n        doc: \"Per-launch flag: --aiui-chrome-profile.\",\n      },\n      {\n        key: \"dataDir\",\n        type: \"string\",\n        defaultText: \"unset (derived from chrome.profile)\",\n        summary: \"Explicit Chrome user data dir; takes precedence over chrome.profile.\",\n        doc: \"Per-launch flag: --aiui-chrome-data-dir.\",\n      },\n      {\n        key: \"executablePath\",\n        type: \"string\",\n        defaultText: \"unset (managed Chrome for Testing when installed, else installed Chrome)\",\n        summary: \"Chrome binary to launch — e.g. a Chrome for Testing install.\",\n        doc:\n          \"Chrome for Testing still honors --load-extension, so the aiui DevTools panel can \" +\n          \"auto-load. Mutually exclusive with chrome.channel.\",\n      },\n      {\n        key: \"channel\",\n        type: \"enum\",\n        values: CHROME_CHANNELS,\n        defaultText: 'unset (\"stable\" when launching an installed Chrome)',\n        summary: \"Installed Chrome release channel to launch.\",\n        doc: \"Mutually exclusive with chrome.executablePath.\",\n      },\n      {\n        key: \"forTesting\",\n        type: \"enum\",\n        values: FOR_TESTING_MODES,\n        default: \"prompt\",\n        summary: \"How `aiui claude` manages the recommended Chrome for Testing install.\",\n        doc:\n          '\"prompt\" asks before installing or updating it — interactive sessions only, never ' +\n          'under CI; \"auto\" installs/updates without asking; \"off\" never checks. Prompt ' +\n          'answers (\"automatically\", \"never ask again\") persist here at the user level. ' +\n          \"Skipped entirely when executablePath or channel picks a browser explicitly.\",\n      },\n      {\n        key: \"headless\",\n        type: \"boolean\",\n        default: false,\n        summary: \"Launch Chrome with no UI.\",\n      },\n      {\n        key: \"buildExtension\",\n        type: \"boolean\",\n        default: true,\n        summary: \"OBSOLETE — parsed and ignored (the DevTools extension is deleted).\",\n        doc:\n          \"The only extension a launch auto-loads is the intent client, whose MV3 bundle \" +\n          \"is built deliberately (`pnpm -C packages/aiui-intent-client build:ext`). \" +\n          \"Kept in the schema so old configs stay valid.\",\n      },\n      {\n        key: \"autoCapture\",\n        type: \"boolean\",\n        default: true,\n        summary: \"OBSOLETE — parsed and ignored (page-side getDisplayMedia capture is gone).\",\n        doc:\n          \"The intent client's hosts capture natively (CDP screenshots / the extension's \" +\n          \"tabCapture stream); nothing reads the page-side capture marker any more. Kept in \" +\n          \"the schema so old configs stay valid.\",\n      },\n    ],\n  },\n];\n\n/** A field paired with its section — what key-resolution hands back. */\nexport interface ResolvedField {\n  section: ConfigSectionSchema;\n  field: ConfigFieldSchema;\n  /** The dotted path, e.g. `\"chrome.mode\"`. */\n  path: string;\n}\n\n/** Every field in schema order, with dotted paths. */\nexport function allConfigFields(): ResolvedField[] {\n  return CONFIG_SECTIONS.flatMap((section) =>\n    section.fields.map((field) => ({ section, field, path: `${section.name}.${field.key}` })),\n  );\n}\n\n/** Resolve a dotted path like `\"chrome.mode\"`; undefined when unknown. */\nexport function findConfigField(path: string): ResolvedField | undefined {\n  return allConfigFields().find((entry) => entry.path === path);\n}\n\n/** The `typeof` a field's values (enums are strings). */\nexport function fieldRuntimeType(field: ConfigFieldSchema): \"boolean\" | \"number\" | \"string\" {\n  return field.type === \"enum\" ? \"string\" : field.type;\n}\n\n/**\n * Constraint check beyond the runtime type: enum membership, then the field's\n * own `validate`. Returns the \"expected …\" tail for the error, or undefined.\n */\nexport function invalidReason(field: ConfigFieldSchema, value: ConfigValue): string | undefined {\n  if (field.type === \"enum\" && !(field.values ?? []).includes(String(value))) {\n    return `expected one of: ${(field.values ?? []).join(\", \")}`;\n  }\n  return field.validate?.(value);\n}\n\n/**\n * Parse a CLI-provided string into the field's type and validate it — how\n * `aiui config set` and the TUI turn text into a config value.\n */\nexport function parseFieldValue(\n  field: ConfigFieldSchema,\n  raw: string,\n): { value: ConfigValue } | { error: string } {\n  let value: ConfigValue;\n  switch (fieldRuntimeType(field)) {\n    case \"boolean\": {\n      if (raw !== \"true\" && raw !== \"false\") {\n        return { error: \"expected true or false\" };\n      }\n      value = raw === \"true\";\n      break;\n    }\n    case \"number\": {\n      value = Number(raw);\n      if (raw.trim() === \"\" || Number.isNaN(value)) {\n        return { error: \"expected a number\" };\n      }\n      break;\n    }\n    default:\n      value = raw;\n  }\n  const reason = invalidReason(field, value);\n  return reason ? { error: reason } : { value };\n}\n\n/** Render a value the way config.json would hold it (strings quoted). */\nexport function formatConfigValue(value: ConfigValue): string {\n  return typeof value === \"string\" ? JSON.stringify(value) : String(value);\n}\n\n/** The default, phrased for humans: `defaultText` wins, then the value, then \"unset\". */\nexport function describeDefault(field: ConfigFieldSchema): string {\n  if (field.defaultText) {\n    return field.defaultText;\n  }\n  return field.default === undefined ? \"unset\" : formatConfigValue(field.default);\n}\n\nfunction isHttpUrl(value: string): boolean {\n  try {\n    const url = new URL(value);\n    return url.protocol === \"http:\" || url.protocol === \"https:\";\n  } catch {\n    return false;\n  }\n}\n","/**\n * aiui's two-level configuration file.\n *\n * Settings live in `config.json` at up to two places, merged per-key with the\n * more specific one winning:\n *\n *   <user cache>/config.json          e.g. ~/.cache/aiui/config.json (respects\n *                                     AIUI_CACHE / XDG_CACHE_HOME)\n *   <project>/.aiui-cache/config.json  next to the traces and Chrome profiles\n *\n * CLI flags override both. Everything is optional; a missing file is an empty\n * config. A *malformed* file is a hard error, not a warning — these settings\n * gate security-relevant behavior (`claude.skipPermissions`), and a typo that\n * silently reverts to the dangerous default is worse than a failed launch. The\n * same reasoning rejects unknown keys.\n *\n * What the keys are — types, enums, defaults, and documentation — lives in one\n * declarative table, `config-schema.ts`. Validation here walks that schema, and\n * the `aiui config` commands (show/get/set/tui) render from it, so the checks\n * and the docs cannot drift apart.\n */\nimport { mkdirSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { dirname, join } from \"node:path\";\nimport { projectCacheDir } from \"@habemus-papadum/aiui-claude-channel\";\nimport { cacheDir } from \"@habemus-papadum/aiui-util\";\nimport {\n  type ChannelBind,\n  type ChromeChannel,\n  type ChromeMode,\n  CONFIG_SECTIONS,\n  type ConfigValue,\n  type ForTestingMode,\n  fieldRuntimeType,\n  formatConfigValue,\n  invalidReason,\n} from \"./config-schema\";\n\nexport {\n  CHANNEL_BINDS,\n  CHROME_CHANNELS,\n  CHROME_MODES,\n  type ChannelBind,\n  type ChromeChannel,\n  type ChromeMode,\n  FOR_TESTING_MODES,\n  type ForTestingMode,\n} from \"./config-schema\";\n\nexport const CONFIG_FILENAME = \"config.json\";\n\n/**\n * The typed shape of a config file. Must mirror `CONFIG_SECTIONS` in\n * config-schema.ts — the schema rows carry the full per-key documentation and\n * defaults; the comments here are just orientation.\n */\nexport interface AiuiConfig {\n  claude?: {\n    /** Launch Claude Code with `--dangerously-skip-permissions`. */\n    skipPermissions?: boolean;\n    /** Auto-dismiss Claude Code's development-channel prompt (util/enter-nudge.ts). */\n    enterNudge?: boolean;\n  };\n  channel?: {\n    /** Which interface the channel web server binds: loopback (default) or host (LAN). */\n    bind?: ChannelBind;\n  };\n  chrome?: {\n    /** Attach the Chrome DevTools MCP (default: true). */\n    enabled?: boolean;\n    /** How the MCP reaches a browser: shared session browser, or its own. */\n    mode?: ChromeMode;\n    /** Attach to this DevTools endpoint instead of managing a browser at all. */\n    browserUrl?: string;\n    /** Fixed DevTools debug port for session browsers aiui launches (0 = OS-assigned). */\n    debugPort?: number;\n    /** Named profile under `.aiui-cache/chrome/` (default: \"default\"). */\n    profile?: string;\n    /** Explicit Chrome user data dir; takes precedence over `profile`. */\n    dataDir?: string;\n    /** Chrome binary to launch. Mutually exclusive with `channel`. */\n    executablePath?: string;\n    /** Installed Chrome release channel to launch. */\n    channel?: ChromeChannel;\n    /** How `aiui claude` manages the Chrome for Testing install. */\n    forTesting?: ForTestingMode;\n    /** Launch Chrome headless (default: false). */\n    headless?: boolean;\n    /** OBSOLETE (the devtools extension is deleted): parsed and ignored so old\n     * configs stay valid. */\n    buildExtension?: boolean;\n    /** OBSOLETE (page-side getDisplayMedia capture is gone): parsed and\n     * ignored so old configs stay valid. */\n    autoCapture?: boolean;\n  };\n}\n\n/** The untyped view validation and merging work in: section → leaf values. */\ntype SectionValues = Record<string, ConfigValue>;\n\n/**\n * Top-level sections that USED to be valid and are now gone. A config file that\n * still carries one must not hard-fail — that would break every existing\n * config on upgrade — so it is accepted and ignored, distinct from a\n * genuinely-unknown key (a typo), which still throws. `sidecars.*` retired when\n * the channel began hosting its whole standard set unconditionally (paint,\n * intent, bar, pencil): there is nothing left to toggle, so the key is inert and\n * safe to delete.\n */\nconst DEPRECATED_SECTIONS = new Set([\"sidecars\"]);\n\n/** The `config.json` paths consulted, user-level first (base: the project dir). */\nexport function configPaths(base: string = process.cwd()): { user: string; project: string } {\n  return {\n    user: join(cacheDir(undefined, { create: false }), CONFIG_FILENAME),\n    project: join(projectCacheDir(base), CONFIG_FILENAME),\n  };\n}\n\n/** Load and merge the user- and project-level configs (project wins per key). */\nexport function loadAiuiConfig(base: string = process.cwd()): AiuiConfig {\n  const paths = configPaths(base);\n  return mergeAiuiConfig(readConfigFile(paths.user) ?? {}, readConfigFile(paths.project) ?? {});\n}\n\n/** Merge two configs section-by-section; `override`'s keys win within a section. */\nexport function mergeAiuiConfig(base: AiuiConfig, override: AiuiConfig): AiuiConfig {\n  const merged: Record<string, SectionValues> = {};\n  for (const section of CONFIG_SECTIONS) {\n    merged[section.name] = {\n      ...(base as Record<string, SectionValues | undefined>)[section.name],\n      ...(override as Record<string, SectionValues | undefined>)[section.name],\n    };\n  }\n  return merged as AiuiConfig;\n}\n\n/**\n * Read one config file. Missing → undefined; unreadable JSON or an unexpected\n * shape → an error naming the file, so the fix is obvious.\n */\nexport function readConfigFile(file: string): AiuiConfig | undefined {\n  let text: string;\n  try {\n    text = readFileSync(file, \"utf8\");\n  } catch {\n    return undefined;\n  }\n  let raw: unknown;\n  try {\n    raw = JSON.parse(text);\n  } catch (error) {\n    throw new Error(\n      `invalid JSON in ${file}: ${error instanceof Error ? error.message : String(error)}`,\n    );\n  }\n  return validateConfig(raw, file);\n}\n\n/** Walk `CONFIG_SECTIONS`, rejecting unknown keys, wrong types, and bad values. */\nfunction validateConfig(raw: unknown, file: string): AiuiConfig {\n  const root = asSection(raw, file, \"the top level\");\n  const knownSections = CONFIG_SECTIONS.map((s) => s.name);\n  for (const key of Object.keys(root)) {\n    // A retired section is tolerated (accepted, then ignored below); a truly\n    // unknown one is a typo and still throws — see DEPRECATED_SECTIONS.\n    if (knownSections.includes(key) || DEPRECATED_SECTIONS.has(key)) {\n      continue;\n    }\n    throw new Error(\n      `unknown key \"${key}\" at the top level of ${file} — known keys: ${knownSections.join(\", \")}`,\n    );\n  }\n\n  const config: Record<string, SectionValues> = {};\n  for (const section of CONFIG_SECTIONS) {\n    if (root[section.name] === undefined) {\n      continue;\n    }\n    const values = asSection(root[section.name], file, `\"${section.name}\"`);\n    rejectUnknownKeys(\n      values,\n      section.fields.map((f) => f.key),\n      file,\n      `\"${section.name}\"`,\n    );\n    // Absent keys stay absent (never `undefined`), or merging would let them\n    // clobber a value from the other config level.\n    const out: SectionValues = {};\n    for (const field of section.fields) {\n      const value = values[field.key];\n      if (value === undefined) {\n        continue;\n      }\n      const path = `${section.name}.${field.key}`;\n      const type = fieldRuntimeType(field);\n      if (typeof value !== type) {\n        throw new Error(`expected a ${type} for ${path} in ${file}`);\n      }\n      const reason = invalidReason(field, value as ConfigValue);\n      if (reason) {\n        throw new Error(\n          `invalid ${path} ${formatConfigValue(value as ConfigValue)} in ${file} — ${reason}`,\n        );\n      }\n      out[field.key] = value as ConfigValue;\n    }\n    config[section.name] = out;\n  }\n  return config as AiuiConfig;\n}\n\n/**\n * Persist a change to the **user-level** config (creating the file if needed).\n *\n * This is how interactive prompt answers like \"never ask again\" become\n * durable: they are per-user decisions, so they land in the user cache — never\n * in the project file, which may be shared/committed by a team.\n */\nexport function updateUserConfig(mutate: (config: AiuiConfig) => void): string {\n  return updateConfigFile(configPaths().user, mutate);\n}\n\n/**\n * Persist a change to a specific config file — the general form behind\n * {@link updateUserConfig}, and how `aiui config set --project` writes the\n * project level deliberately.\n */\nexport function updateConfigFile(file: string, mutate: (config: AiuiConfig) => void): string {\n  const config = readConfigFile(file) ?? {};\n  mutate(config);\n  mkdirSync(dirname(file), { recursive: true });\n  writeFileSync(file, `${JSON.stringify(config, null, 2)}\\n`);\n  return file;\n}\n\nfunction asSection(value: unknown, file: string, where: string): Record<string, unknown> {\n  if (typeof value !== \"object\" || value === null || Array.isArray(value)) {\n    throw new Error(`expected an object at ${where} of ${file}`);\n  }\n  return value as Record<string, unknown>;\n}\n\nfunction rejectUnknownKeys(\n  section: Record<string, unknown>,\n  known: string[],\n  file: string,\n  where: string,\n): void {\n  for (const key of Object.keys(section)) {\n    if (!known.includes(key)) {\n      throw new Error(\n        `unknown key \"${key}\" at ${where} of ${file} — known keys: ${known.join(\", \")}`,\n      );\n    }\n  }\n}\n"],"names":["FOR_TESTING_MODES","CHROME_MODES","CHANNEL_BINDS","CONFIG_SECTIONS","value","isHttpUrl","CHROME_CHANNELS","allConfigFields","section","field","fieldRuntimeType","invalidReason","_a","parseFieldValue","raw","reason","formatConfigValue","describeDefault","url","CONFIG_FILENAME","DEPRECATED_SECTIONS","configPaths","base","join","cacheDir","projectCacheDir","loadAiuiConfig","paths","mergeAiuiConfig","readConfigFile","override","merged","file","text","readFileSync","error","validateConfig","root","asSection","knownSections","s","key","config","values","rejectUnknownKeys","f","out","path","type","updateUserConfig","mutate","updateConfigFile","mkdirSync","dirname","writeFileSync","where","known"],"mappings":";;;;AAgCO,MAAMA,IAAoB,CAAC,UAAU,QAAQ,KAAK,GAG5CC,IAAe,CAAC,UAAU,QAAQ,GAGlCC,IAAgB,CAAC,YAAY,MAAM,GAuCnCC,IAAyC;AAAA,EACpD;AAAA,IACE,MAAM;AAAA,IACN,SAAS;AAAA,IACT,QAAQ;AAAA,MACN;AAAA,QACE,KAAK;AAAA,QACL,MAAM;AAAA,QACN,SAAS;AAAA,QACT,aAAa;AAAA,QACb,SAAS;AAAA,QACT,KACE;AAAA,MAAA;AAAA,MAKJ;AAAA,QACE,KAAK;AAAA,QACL,MAAM;AAAA,QACN,SAAS;AAAA,QACT,aAAa;AAAA,QACb,SAAS;AAAA,QACT,KACE;AAAA,MAAA;AAAA,IAIJ;AAAA,EACF;AAAA,EAEF;AAAA,IACE,MAAM;AAAA,IACN,SAAS;AAAA,IACT,QAAQ;AAAA,MACN;AAAA,QACE,KAAK;AAAA,QACL,MAAM;AAAA,QACN,QAAQD;AAAA,QACR,SAAS;AAAA,QACT,aACE;AAAA,QACF,SAAS;AAAA,QACT,KACE;AAAA,MAAA;AAAA,IAQJ;AAAA,EACF;AAAA,EAEF;AAAA,IACE,MAAM;AAAA,IACN,SAAS;AAAA,IACT,QAAQ;AAAA,MACN;AAAA,QACE,KAAK;AAAA,QACL,MAAM;AAAA,QACN,SAAS;AAAA,QACT,SAAS;AAAA,QACT,KACE;AAAA,MAAA;AAAA,MAGJ;AAAA,QACE,KAAK;AAAA,QACL,MAAM;AAAA,QACN,QAAQD;AAAA,QACR,SAAS;AAAA,QACT,SAAS;AAAA,QACT,KACE;AAAA,MAAA;AAAA,MAKJ;AAAA,QACE,KAAK;AAAA,QACL,MAAM;AAAA,QACN,aAAa;AAAA,QACb,SAAS;AAAA,QACT,KACE;AAAA,QAIF,UAAU,CAACG,MACTC,EAAU,OAAOD,CAAK,CAAC,IACnB,SACA;AAAA,MAAA;AAAA,MAER;AAAA,QACE,KAAK;AAAA,QACL,MAAM;AAAA,QACN,SAAS;AAAA,QACT,aAAa;AAAA,QACb,SAAS;AAAA,QACT,KACE;AAAA,QAEF,UAAU,CAACA,MACT,OAAO,UAAUA,CAAK,KAAMA,KAAoB,KAAMA,KAAoB,QACtE,SACA;AAAA,MAAA;AAAA,MAER;AAAA,QACE,KAAK;AAAA,QACL,MAAM;AAAA,QACN,SAAS;AAAA,QACT,SAAS;AAAA,QACT,KAAK;AAAA,MAAA;AAAA,MAEP;AAAA,QACE,KAAK;AAAA,QACL,MAAM;AAAA,QACN,aAAa;AAAA,QACb,SAAS;AAAA,QACT,KAAK;AAAA,MAAA;AAAA,MAEP;AAAA,QACE,KAAK;AAAA,QACL,MAAM;AAAA,QACN,aAAa;AAAA,QACb,SAAS;AAAA,QACT,KACE;AAAA,MAAA;AAAA,MAGJ;AAAA,QACE,KAAK;AAAA,QACL,MAAM;AAAA,QACN,QAAQE;AAAA,QACR,aAAa;AAAA,QACb,SAAS;AAAA,QACT,KAAK;AAAA,MAAA;AAAA,MAEP;AAAA,QACE,KAAK;AAAA,QACL,MAAM;AAAA,QACN,QAAQN;AAAA,QACR,SAAS;AAAA,QACT,SAAS;AAAA,QACT,KACE;AAAA,MAAA;AAAA,MAKJ;AAAA,QACE,KAAK;AAAA,QACL,MAAM;AAAA,QACN,SAAS;AAAA,QACT,SAAS;AAAA,MAAA;AAAA,MAEX;AAAA,QACE,KAAK;AAAA,QACL,MAAM;AAAA,QACN,SAAS;AAAA,QACT,SAAS;AAAA,QACT,KACE;AAAA,MAAA;AAAA,MAIJ;AAAA,QACE,KAAK;AAAA,QACL,MAAM;AAAA,QACN,SAAS;AAAA,QACT,SAAS;AAAA,QACT,KACE;AAAA,MAAA;AAAA,IAGJ;AAAA,EACF;AAEJ;AAWO,SAASO,IAAmC;AACjD,SAAOJ,EAAgB;AAAA,IAAQ,CAACK,MAC9BA,EAAQ,OAAO,IAAI,CAACC,OAAW,EAAE,SAAAD,GAAS,OAAAC,GAAO,MAAM,GAAGD,EAAQ,IAAI,IAAIC,EAAM,GAAG,KAAK;AAAA,EAAA;AAE5F;AAQO,SAASC,EAAiBD,GAA2D;AAC1F,SAAOA,EAAM,SAAS,SAAS,WAAWA,EAAM;AAClD;AAMO,SAASE,EAAcF,GAA0BL,GAAwC;;AAC9F,SAAIK,EAAM,SAAS,UAAU,EAAEA,EAAM,UAAU,CAAA,GAAI,SAAS,OAAOL,CAAK,CAAC,IAChE,qBAAqBK,EAAM,UAAU,CAAA,GAAI,KAAK,IAAI,CAAC,MAErDG,IAAAH,EAAM,aAAN,gBAAAG,EAAA,KAAAH,GAAiBL;AAC1B;AAMO,SAASS,EACdJ,GACAK,GAC4C;AAC5C,MAAIV;AACJ,UAAQM,EAAiBD,CAAK,GAAA;AAAA,IAC5B,KAAK,WAAW;AACd,UAAIK,MAAQ,UAAUA,MAAQ;AAC5B,eAAO,EAAE,OAAO,yBAAA;AAElB,MAAAV,IAAQU,MAAQ;AAChB;AAAA,IACF;AAAA,IACA,KAAK,UAAU;AAEb,UADAV,IAAQ,OAAOU,CAAG,GACdA,EAAI,WAAW,MAAM,OAAO,MAAMV,CAAK;AACzC,eAAO,EAAE,OAAO,oBAAA;AAElB;AAAA,IACF;AAAA,IACA;AACE,MAAAA,IAAQU;AAAA,EAAA;AAEZ,QAAMC,IAASJ,EAAcF,GAAOL,CAAK;AACzC,SAAOW,IAAS,EAAE,OAAOA,EAAA,IAAW,EAAE,OAAAX,EAAA;AACxC;AAGO,SAASY,EAAkBZ,GAA4B;AAC5D,SAAO,OAAOA,KAAU,WAAW,KAAK,UAAUA,CAAK,IAAI,OAAOA,CAAK;AACzE;AAGO,SAASa,EAAgBR,GAAkC;AAChE,SAAIA,EAAM,cACDA,EAAM,cAERA,EAAM,YAAY,SAAY,UAAUO,EAAkBP,EAAM,OAAO;AAChF;AAEA,SAASJ,EAAUD,GAAwB;AACzC,MAAI;AACF,UAAMc,IAAM,IAAI,IAAId,CAAK;AACzB,WAAOc,EAAI,aAAa,WAAWA,EAAI,aAAa;AAAA,EACtD,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AC1SO,MAAMC,IAAkB,eA4DzBC,IAAsB,oBAAI,IAAI,CAAC,UAAU,CAAC;AAGzC,SAASC,EAAYC,IAAe,QAAQ,OAA0C;AAC3F,SAAO;AAAA,IACL,MAAMC,EAAKC,EAAS,QAAW,EAAE,QAAQ,GAAA,CAAO,GAAGL,CAAe;AAAA,IAClE,SAASI,EAAKE,EAAgBH,CAAI,GAAGH,CAAe;AAAA,EAAA;AAExD;AAGO,SAASO,EAAeJ,IAAe,QAAQ,OAAmB;AACvE,QAAMK,IAAQN,EAAYC,CAAI;AAC9B,SAAOM,EAAgBC,EAAeF,EAAM,IAAI,KAAK,IAAIE,EAAeF,EAAM,OAAO,KAAK,EAAE;AAC9F;AAGO,SAASC,EAAgBN,GAAkBQ,GAAkC;AAClF,QAAMC,IAAwC,CAAA;AAC9C,aAAWvB,KAAWL;AACpB,IAAA4B,EAAOvB,EAAQ,IAAI,IAAI;AAAA,MACrB,GAAIc,EAAmDd,EAAQ,IAAI;AAAA,MACnE,GAAIsB,EAAuDtB,EAAQ,IAAI;AAAA,IAAA;AAG3E,SAAOuB;AACT;AAMO,SAASF,EAAeG,GAAsC;AACnE,MAAIC;AACJ,MAAI;AACF,IAAAA,IAAOC,EAAaF,GAAM,MAAM;AAAA,EAClC,QAAQ;AACN;AAAA,EACF;AACA,MAAIlB;AACJ,MAAI;AACF,IAAAA,IAAM,KAAK,MAAMmB,CAAI;AAAA,EACvB,SAASE,GAAO;AACd,UAAM,IAAI;AAAA,MACR,mBAAmBH,CAAI,KAAKG,aAAiB,QAAQA,EAAM,UAAU,OAAOA,CAAK,CAAC;AAAA,IAAA;AAAA,EAEtF;AACA,SAAOC,EAAetB,GAAKkB,CAAI;AACjC;AAGA,SAASI,EAAetB,GAAckB,GAA0B;AAC9D,QAAMK,IAAOC,EAAUxB,GAAKkB,GAAM,eAAe,GAC3CO,IAAgBpC,EAAgB,IAAI,CAACqC,MAAMA,EAAE,IAAI;AACvD,aAAWC,KAAO,OAAO,KAAKJ,CAAI;AAGhC,QAAI,EAAAE,EAAc,SAASE,CAAG,KAAKrB,EAAoB,IAAIqB,CAAG;AAG9D,YAAM,IAAI;AAAA,QACR,gBAAgBA,CAAG,yBAAyBT,CAAI,kBAAkBO,EAAc,KAAK,IAAI,CAAC;AAAA,MAAA;AAI9F,QAAMG,IAAwC,CAAA;AAC9C,aAAWlC,KAAWL,GAAiB;AACrC,QAAIkC,EAAK7B,EAAQ,IAAI,MAAM;AACzB;AAEF,UAAMmC,IAASL,EAAUD,EAAK7B,EAAQ,IAAI,GAAGwB,GAAM,IAAIxB,EAAQ,IAAI,GAAG;AACtE,IAAAoC;AAAA,MACED;AAAA,MACAnC,EAAQ,OAAO,IAAI,CAACqC,MAAMA,EAAE,GAAG;AAAA,MAC/Bb;AAAA,MACA,IAAIxB,EAAQ,IAAI;AAAA,IAAA;AAIlB,UAAMsC,IAAqB,CAAA;AAC3B,eAAWrC,KAASD,EAAQ,QAAQ;AAClC,YAAMJ,IAAQuC,EAAOlC,EAAM,GAAG;AAC9B,UAAIL,MAAU;AACZ;AAEF,YAAM2C,IAAO,GAAGvC,EAAQ,IAAI,IAAIC,EAAM,GAAG,IACnCuC,IAAOtC,EAAiBD,CAAK;AACnC,UAAI,OAAOL,MAAU4C;AACnB,cAAM,IAAI,MAAM,cAAcA,CAAI,QAAQD,CAAI,OAAOf,CAAI,EAAE;AAE7D,YAAMjB,IAASJ,EAAcF,GAAOL,CAAoB;AACxD,UAAIW;AACF,cAAM,IAAI;AAAA,UACR,WAAWgC,CAAI,IAAI/B,EAAkBZ,CAAoB,CAAC,OAAO4B,CAAI,MAAMjB,CAAM;AAAA,QAAA;AAGrF,MAAA+B,EAAIrC,EAAM,GAAG,IAAIL;AAAA,IACnB;AACA,IAAAsC,EAAOlC,EAAQ,IAAI,IAAIsC;AAAA,EACzB;AACA,SAAOJ;AACT;AASO,SAASO,EAAiBC,GAA8C;AAC7E,SAAOC,EAAiB9B,IAAc,MAAM6B,CAAM;AACpD;AAOO,SAASC,EAAiBnB,GAAckB,GAA8C;AAC3F,QAAMR,IAASb,EAAeG,CAAI,KAAK,CAAA;AACvC,SAAAkB,EAAOR,CAAM,GACbU,EAAUC,EAAQrB,CAAI,GAAG,EAAE,WAAW,IAAM,GAC5CsB,EAActB,GAAM,GAAG,KAAK,UAAUU,GAAQ,MAAM,CAAC,CAAC;AAAA,CAAI,GACnDV;AACT;AAEA,SAASM,EAAUlC,GAAgB4B,GAAcuB,GAAwC;AACvF,MAAI,OAAOnD,KAAU,YAAYA,MAAU,QAAQ,MAAM,QAAQA,CAAK;AACpE,UAAM,IAAI,MAAM,yBAAyBmD,CAAK,OAAOvB,CAAI,EAAE;AAE7D,SAAO5B;AACT;AAEA,SAASwC,EACPpC,GACAgD,GACAxB,GACAuB,GACM;AACN,aAAWd,KAAO,OAAO,KAAKjC,CAAO;AACnC,QAAI,CAACgD,EAAM,SAASf,CAAG;AACrB,YAAM,IAAI;AAAA,QACR,gBAAgBA,CAAG,QAAQc,CAAK,OAAOvB,CAAI,kBAAkBwB,EAAM,KAAK,IAAI,CAAC;AAAA,MAAA;AAIrF;"}

package/dist/index.d.ts

@@ -1,8 +1,14 @@
 /**
  * ai ui frontends
  *
+ * The `aiui` CLI's library surface. Launch *policy* the CLI applies lives here
+ * too, so sibling supervisors can reuse it instead of re-deriving it — e.g. the
+ * layered config loader below, so a debug-channel supervisor binds the channel
+ * the same way a real `aiui claude` launch would.
+ *
  * @packageDocumentation
  */
+export { type AiuiConfig, loadAiuiConfig } from "./util/config";
 /** The published package name — handy for smoke tests. */
 export declare const name = "@habemus-papadum/aiui";
 /** Greet someone. Replace with your library's real API. */

package/dist/index.js

@@ -1,9 +1,11 @@
-const a = "@habemus-papadum/aiui";
-function n(e) {
+import { l as r } from "./config-Cis6kCik.js";
+const o = "@habemus-papadum/aiui";
+function a(e) {
   return `Hello, ${e}!`;
 }
 export {
-  n as greet,
-  a as name
+  a as greet,
+  r as loadAiuiConfig,
+  o as name
 };
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sources":["../src/index.ts"],"sourcesContent":["/**\n * ai ui frontends\n *\n * @packageDocumentation\n */\n\n/** The published package name — handy for smoke tests. */\nexport const name = \"@habemus-papadum/aiui\";\n\n/** Greet someone. Replace with your library's real API. */\nexport function greet(who: string): string {\n  return `Hello, ${who}!`;\n}\n"],"names":["name","greet","who"],"mappings":"AAOO,MAAMA,IAAO;AAGb,SAASC,EAAMC,GAAqB;AACzC,SAAO,UAAUA,CAAG;AACtB;"}
+{"version":3,"file":"index.js","sources":["../src/index.ts"],"sourcesContent":["/**\n * ai ui frontends\n *\n * The `aiui` CLI's library surface. Launch *policy* the CLI applies lives here\n * too, so sibling supervisors can reuse it instead of re-deriving it — e.g. the\n * layered config loader below, so a debug-channel supervisor binds the channel\n * the same way a real `aiui claude` launch would.\n *\n * @packageDocumentation\n */\n\n// The layered config loader (user config ← project config), for supervisors\n// that must obey the same settings a real `aiui claude` launch would — the\n// supervisors read `channel.bind` through this so a debug channel binds the\n// way the user configured the real one.\nexport { type AiuiConfig, loadAiuiConfig } from \"./util/config\";\n\n/** The published package name — handy for smoke tests. */\nexport const name = \"@habemus-papadum/aiui\";\n\n/** Greet someone. Replace with your library's real API. */\nexport function greet(who: string): string {\n  return `Hello, ${who}!`;\n}\n"],"names":["name","greet","who"],"mappings":";AAkBO,MAAMA,IAAO;AAGb,SAASC,EAAMC,GAAqB;AACzC,SAAO,UAAUA,CAAG;AACtB;"}

package/dist/util/aiui-args.d.ts

@@ -6,6 +6,7 @@
  * begin with `--aiui-` so they're unambiguously distinguishable from flags meant
  * for the wrapped command (e.g. claude's `--resume`).
  */
+import { type ChannelBind } from "./config-schema";
 export interface AiuiArgs {
     /** The `--aiui-tag <tag>` value, if provided (the channel/MCP session tag). */
     tag?: string;
@@ -25,6 +26,18 @@ export interface AiuiArgs {
      * Code's built-in browser integration and forwards via passthrough.)
      */
     noChrome: boolean;
+    /**
+     * `--aiui-browser` was passed: open the wrapped tool's page in the session
+     * browser even where it would default off (CI / headless environments —
+     * e.g. `aiui vite` on a machine whose port *is* getting forwarded to one
+     * with a display).
+     */
+    browser: boolean;
+    /**
+     * `--aiui-no-browser` was passed: skip all session-browser activity (no
+     * tab opened, no browser launched) for this run.
+     */
+    noBrowser: boolean;
     /**
      * The `--aiui-chrome-profile <name>` value, if provided — which named Chrome
      * profile (user data dir under `.aiui-cache/chrome/`) to launch with.
@@ -42,6 +55,13 @@ export interface AiuiArgs {
      * `chrome.browserUrl` in config for this launch.
      */
     browserUrl?: string;
+    /**
+     * The `--aiui-bind <loopback|host>` value, if provided — where the channel's
+     * web backend binds for this launch, overriding `channel.bind` in config.
+     * `host` is the trusted-LAN posture: the whole (unauthenticated) channel
+     * surface, iPad paint page included, becomes reachable from the network.
+     */
+    bind?: ChannelBind;
     /** Everything else, to forward verbatim to the wrapped tool. */
     passthrough: string[];
 }
@@ -65,12 +85,18 @@ export declare function infoFlag(passthrough: string[]): "help" | "version" | un
  *    MCP server to target (e.g. which session `aiui vite` should connect to).
  *  - `--aiui-chrome` / `--aiui-no-chrome` — force the Chrome DevTools MCP on
  *    (even under CI) / leave it off. Passing both is an error.
+ *  - `--aiui-browser` / `--aiui-no-browser` — force opening the page in the
+ *    session browser (even in CI/headless environments) / never open one.
+ *    Passing both is an error.
  *  - `--aiui-chrome-profile <name>` — launch Chrome with the named profile
  *    (created on first use under `.aiui-cache/chrome/<name>`).
  *  - `--aiui-chrome-data-dir <path>` — launch Chrome with an explicit user data
  *    dir instead of a named profile. Mutually exclusive with the above.
  *  - `--aiui-browser-url <url>` — attach the Chrome DevTools MCP to this
  *    endpoint (e.g. a tunneled remote browser) instead of managing one.
+ *  - `--aiui-bind <loopback|host>` — where the channel's web backend binds for
+ *    this launch (see `channel.bind` in the config guide). Any other value is
+ *    an error.
  *
  * Any other `--aiui-*` flag throws, so a typo surfaces loudly instead of being
  * silently dropped or leaking into the child command.

package/dist/util/channel-launch.d.ts

@@ -0,0 +1,67 @@
+/**
+ * How a channel process gets configured, in one place.
+ *
+ * There are two ways the channel server comes up, and they must agree:
+ *
+ *  - **`aiui claude`** builds an argv for the channel's `mcp` subcommand and
+ *    hands it to Claude Code inside `--mcp-config`, which spawns it.
+ *  - **`aiui mcp serve` / `aiui mcp mcp`** run the very same channel CLI
+ *    directly, with no Claude Code anywhere in the loop.
+ *
+ * The one durable setting they must both derive from config is where the web
+ * backend binds (`channel.bind`) — the trusted-LAN posture. The second path
+ * used to forward its arguments verbatim and so never computed it; this module
+ * is what makes both paths resolve the same {@link ChannelLaunch} and emit the
+ * same `--bind` flag, so a standalone channel binds exactly like a session's.
+ *
+ * Which sidecars a channel hosts is NOT decided here anymore. The channel
+ * imports and mounts its own standard set (intent, bar, pencil — see the
+ * channel's standard-sidecars.ts), so there is nothing to pass: every channel
+ * hosts all four, and `channel.bind` alone decides whether a remote device can
+ * reach them.
+ *
+ * What else deliberately does NOT live here: `--launch-info` (a summary of *how
+ * a Claude Code session was assembled* — browser wiring, key preflight — which
+ * a direct launch has nothing to say about, and which `serve` does not even
+ * accept), and `--tag` / `--name` / `--port`, which are per-invocation identity
+ * rather than durable configuration.
+ */
+import type { AiuiConfig, ChannelBind } from "./config";
+/** Everything a launcher knows that can influence the channel's configuration. */
+export interface ChannelLaunchInput {
+    /** Merged user + project config (`util/config`). */
+    config: AiuiConfig;
+    /** An explicit per-launch bind (`--aiui-bind`, or `serve`'s own `--bind`). */
+    bind?: ChannelBind;
+}
+/** The resolved settings, ready to be rendered as channel CLI flags. */
+export interface ChannelLaunch {
+    bind: ChannelBind;
+}
+/**
+ * Resolve the channel's bind for a launch. Follows the three-tier precedence
+ * the docs promise: per-launch flag, then durable config, then the built-in
+ * default (`loopback`).
+ */
+export declare function resolveChannelLaunch(input: ChannelLaunchInput): ChannelLaunch;
+/**
+ * Render a {@link ChannelLaunch} as flags for the channel CLI. Both the `mcp`
+ * and `serve` subcommands accept `--bind` (see the channel's program.ts).
+ */
+export declare function channelLaunchFlags(launch: ChannelLaunch): string[];
+/**
+ * Whether `aiui mcp <args...>` will start a channel process, and so wants the
+ * config-derived settings. Callers use this to leave the subcommands that
+ * merely talk to a channel someone else is running (`quick`, `config`)
+ * untouched.
+ */
+export declare function isChannelLaunch(args: string[]): boolean;
+/**
+ * Apply the config-derived channel settings to a raw `aiui mcp <args...>`
+ * invocation.
+ *
+ * Returns `args` untouched unless its subcommand actually launches a channel.
+ * A setting the caller named explicitly is never overridden — `aiui mcp serve
+ * --bind host` means `host` no matter what config says.
+ */
+export declare function applyChannelLaunchArgs(args: string[], launch: ChannelLaunch): string[];

package/dist/util/channel-target.d.ts

@@ -0,0 +1,33 @@
+/**
+ * channel-target.ts — resolve which running channel a channel-CONNECTING
+ * command should talk to.
+ *
+ * Used by the commands that genuinely reach into a channel: `aiui debug` (the
+ * trace viewer, bound to one channel's port) and, in spirit, the intent
+ * client's standalone `pnpm dev` launcher. Deliberately NOT used by `aiui
+ * vite` any more: an app it serves reaches the channel through the intent
+ * client at `/intent/`, not a build-time port, so there is nothing to resolve.
+ * (This helper lived in `commands/vite.ts` while vite was that connection;
+ * it moved here when vite stopped connecting — owner, 2026-07-17.)
+ */
+import type { RunningServer } from "@habemus-papadum/aiui-claude-channel";
+/** The channel a command should point at, or why it couldn't be resolved. */
+export interface ChannelTarget {
+    /** The server resolved without prompting (by tag). */
+    server?: RunningServer;
+    /** Servers to offer in the interactive selector (no tag given, ≥1 running). */
+    select?: RunningServer[];
+    /** A human-readable reason a requested server couldn't be resolved. */
+    error?: string;
+}
+/**
+ * Decide which running channel server a command should connect to.
+ *
+ * Pure so it can be unit-tested without spawning anything:
+ *  - With a `targetTag`, return the server whose `tag` matches exactly; if none
+ *    matches, return an `error` naming the tag and the tags that *are* running.
+ *  - Without a `targetTag`, don't guess: return `{}` when nothing is running, or
+ *    `{ select }` so the caller runs the same selector as `quick` (which
+ *    auto-picks a lone server and prompts when there are several).
+ */
+export declare function resolveChannelTarget(servers: RunningServer[], targetTag: string | undefined): ChannelTarget;