@habemus-papadum/aiui 0.3.0 → 0.5.0

package/dist/commands/browser.d.ts

@@ -48,7 +48,9 @@ export interface StartSessionBrowserOptions {
  *  2. Prefer the managed Chrome for Testing unless config names a browser
  *     explicitly (the sync may prompt to install/update — only when
  *     `interactive`; otherwise it just reports what's installed).
- *  3. Rebuild and load the aiui devtools extension (dev checkouts only).
+ *  3. Rebuild and load the aiui devtools extension, and pick up the
+ *     intent-tool extension's dist/ if its dev loop has produced one
+ *     (dev checkouts only).
  *  4. Launch on the profile's user data dir and wait for the debug endpoint.
  *
  * Throws with a remediation-bearing message when no browser can be found or

package/dist/commands/debug.d.ts

@@ -1,15 +1,7 @@
 export interface DebugOptions {
     /** Target a channel by its registry tag instead of the interactive selector. */
     mcp?: string;
-    /** UI port for the viewer's dev server (default {@link DEFAULT_UI_PORT}). */
-    port?: string;
-    /** Open the browser at the viewer (default true; `--no-open` skips). */
+    /** Open the browser at the console (default true; `--no-open` skips). */
     open?: boolean;
 }
-/**
- * This package's root — the Vite server root, found by walking up from this
- * module to the `@habemus-papadum/aiui` package.json (two levels in the
- * source tree, but the walk keeps it honest against dist layouts too).
- */
-export declare function packageRoot(): string | undefined;
 export declare function runDebug(opts?: DebugOptions): Promise<void>;

package/dist/commands/env.d.ts

@@ -0,0 +1,36 @@
+/** The env files read from the workspace root, in load order (later wins). */
+export declare const ENV_FILES: readonly [".env", ".env.local", ".env.dev", ".env.dev.local"];
+/**
+ * Find the workspace root: the nearest ancestor of `start` carrying a
+ * `pnpm-workspace.yaml` or a `.git`. Falls back to `start` itself (a bare
+ * consumer project without either still gets its own ./node_modules/.bin).
+ */
+export declare function findWorkspaceRoot(start: string): string;
+/**
+ * Parse one dotenv file's text into ordered KEY → value entries. Deliberately
+ * minimal (the files here hold API keys, not programs): `KEY=VALUE` lines, an
+ * optional `export ` prefix, `#` comment lines and blanks skipped, one pair of
+ * matching single or double outer quotes stripped. No escape processing, no
+ * multiline values, no inline comments after unquoted values.
+ */
+export declare function parseDotenv(text: string): Map<string, string>;
+/** Single-quote `value` for POSIX shells (embedded `'` becomes `'\''`). */
+export declare function shQuote(value: string): string;
+/**
+ * Render the activation script. Pure — the command resolves dirs and reads
+ * files, this just writes shell. Every line ends in `;` (see the module
+ * header: unquoted `eval` survival), and each PATH prepend is wrapped in a
+ * containment check so activation is idempotent.
+ */
+export declare function buildEnvScript(input: {
+    /** Directories to prepend to PATH, highest priority first. */
+    pathDirs: string[];
+    /** Env entries to export (already merged across files, later-file wins). */
+    vars: Map<string, string>;
+}): string;
+/**
+ * The command: resolve the workspace root from the cwd, collect the PATH dirs
+ * that exist, merge the env files, and print the script (stdout) + a summary
+ * of what it does (stderr, names only — never a value).
+ */
+export declare function runEnv(): void;

package/dist/commands/extension.d.ts

@@ -0,0 +1,46 @@
+/** The NM host name (lowercase alphanumerics, dots, underscores only). */
+export declare const NATIVE_HOST_NAME = "com.habemus_papadum.aiui";
+/**
+ * The intent client's stable unpacked-extension id (see
+ * `packages/aiui-intent-client/src/ext/manifest.ts`, which owns the key this
+ * is derived from). Duplicated rather than imported: `aiui` does not depend on
+ * the intent client, and this is a 32-char constant that changes only if the
+ * key does.
+ */
+export declare const INTENT_CLIENT_EXTENSION_ID = "cdpbfpcelmifhagikjlfpgfipggcmdeg";
+export interface ExtensionOptions {
+    extensionId?: string;
+}
+/**
+ * Browser NM manifest directories, user-level, per platform.
+ *
+ * Deliberately NO Chrome for Testing entry: CfT does not read a fixed
+ * user-level directory — it looks in `<user-data-dir>/NativeMessagingHosts`
+ * (measured on macOS; an earlier `Google/ChromeForTesting` guess here was
+ * never read by anything). aiui-launched browsers get the manifest written
+ * into their profile at launch instead ({@link installProfileNativeHost}).
+ */
+export declare function nativeHostManifestDirs(platform: NodeJS.Platform, home: string): string[];
+/** The wrapper script body. Exported for tests. */
+export declare function wrapperScript(cwd: string, command: string, args: string[]): string;
+export declare function runExtension(action: string, options?: ExtensionOptions): Promise<void>;
+/**
+ * Install the NM manifest into a session-browser profile
+ * (`<user-data-dir>/NativeMessagingHosts/`) — the directory Chrome for
+ * Testing actually consults (measured; see the module doc). Called by the
+ * launchers whenever they load the intent client's extension: the profile
+ * lives in aiui's own project-local cache, so unlike the global install this
+ * needs no user decision — it is the same class of write as creating the
+ * profile. Quiet and idempotent; no browser restart needed (NM manifests are
+ * read per `connectNative`/`sendNativeMessage` call).
+ */
+export declare function installProfileNativeHost(userDataDir: string, options?: ExtensionOptions): void;
+/**
+ * {@link installProfileNativeHost} as the launchers call it: only when the
+ * intent client's extension is actually loadable (no point granting a host to
+ * an extension that won't be there), and never fatal — a failed write
+ * degrades to the panel's type-a-port fallback, with a note saying so. Called
+ * on both the launch and the attach-to-running paths, so a profile whose
+ * browser outlives many sessions still converges on a current manifest.
+ */
+export declare function ensureProfileNativeHost(userDataDir: string, intentReady: boolean, warn: (title: string, detail: string) => void): void;

package/dist/commands/mcp.d.ts

@@ -7,6 +7,16 @@
  * user-facing channel commands under `aiui` without moving them out of the
  * package that owns the MCP server Claude Code spawns.
  *
+ * **One thing is not verbatim.** The subcommands that *are* a channel process —
+ * `serve` (standalone debug channel) and `mcp` (the stdio MCP server) — get the
+ * same config-derived `--bind` that `aiui claude` computes when it tells Claude
+ * Code how to spawn the channel (see util/channel-launch), so both ways of
+ * starting a channel honor `channel.bind` identically. (Sidecars need no such
+ * plumbing: the channel imports and mounts its own standard set — paint, intent,
+ * bar, pencil — so every channel hosts all four.) Flags you pass explicitly
+ * always win. Every other subcommand (`quick`, `config`) talks to a channel
+ * someone *else* is running and forwards untouched.
+ *
  * Like `aiui vite`, the channel CLI is a declared dependency, so we resolve it
  * from node_modules (tsx-from-source in a dev checkout, the built `dist` when
  * installed; see {@link resolvePackageCli}) rather than looking on the PATH.

package/dist/commands/native-host.d.ts

@@ -0,0 +1,16 @@
+/** Encode one native-messaging frame (native-endian u32 length + JSON). Pure. */
+export declare function encodeNativeFrame(message: unknown): Buffer;
+/**
+ * Split complete frames off an accumulating buffer. Returns the parsed
+ * messages and the unconsumed remainder (a partial frame stays buffered).
+ * Unparseable JSON inside a complete frame yields `undefined` in its slot —
+ * the caller answers with an error rather than dying. Pure.
+ */
+export declare function decodeNativeFrames(buffer: Buffer): {
+    messages: unknown[];
+    rest: Buffer;
+};
+/** Answer one request. Exported for tests. */
+export declare function handleNativeRequest(message: unknown): Record<string, unknown>;
+/** The stdio loop. Never resolves until stdin ends (Chrome closes it). */
+export declare function runNativeHost(): Promise<void>;

package/dist/commands/pencil-url.d.ts

@@ -0,0 +1,18 @@
+/** A network interface the channel's bind makes reachable, as offered in the picker. */
+interface HostInterface {
+    /** The OS interface name (`en0`, `lo0`) or a synthetic label (`loopback`). */
+    name: string;
+    address: string;
+}
+/**
+ * The interfaces the channel is actually reachable on, given its bind:
+ *  - loopback (`127.0.0.1`) → only the loopback address; an iPad can't reach it
+ *    without a tunnel, but we still offer it (the user may have one).
+ *  - host (`0.0.0.0`) → every non-internal IPv4 the machine holds, named by its
+ *    OS interface, plus loopback last for on-machine testing.
+ */
+export declare function boundInterfaces(bindHost: string | undefined): HostInterface[];
+export declare function runPencilUrl(opts?: {
+    json?: boolean;
+}): Promise<void>;
+export {};

package/dist/commands/vite.d.ts

@@ -1,35 +1,8 @@
-import type { RunningServer } from "@habemus-papadum/aiui-claude-channel";
-/** The channel server `runVite` should point Vite at, or why it couldn't. */
-export interface ChannelTarget {
-    /** The server resolved without prompting (by tag). */
-    server?: RunningServer;
-    /** Servers to offer in the interactive selector (no tag given, ≥1 running). */
-    select?: RunningServer[];
-    /** A human-readable reason a requested server couldn't be resolved. */
-    error?: string;
-}
-/**
- * Decide which running channel server Vite should connect to.
- *
- * Pure so it can be unit-tested without spawning anything:
- *  - With a `targetTag`, return the server whose `tag` matches exactly; if none
- *    matches, return an `error` naming the tag and the tags that *are* running.
- *  - Without a `targetTag`, don't guess: return `{}` when nothing is running, or
- *    `{ select }` so the caller runs the same selector as `quick` (which
- *    auto-picks a lone server and prompts when there are several).
- */
-export declare function resolveChannelTarget(servers: RunningServer[], targetTag: string | undefined): ChannelTarget;
+import { type AiuiArgs } from "../util/aiui-args";
 /**
  * Launch Vite, forwarding any extra args (e.g. `aiui vite dev`,
  * `aiui vite --port 3000`, `aiui vite --version`).
  *
- * Before launching, resolve which running aiui channel server the dev server
- * should talk to — either the one named by `--aiui-mcp <tag>` (or `--aiui-tag`),
- * or, with no tag, the one you pick from the same selector `quick` uses (which
- * auto-selects when only one is running) — and inject its port as
- * {@link VITE_PORT_ENV} so the app can reach it. When a specific tag was asked
- * for but isn't running, we fail loudly instead of connecting to the wrong one.
- *
  * Unlike `claude` — an external tool we look up on the PATH — Vite is a declared
  * dependency of this package, so we resolve it straight out of node_modules and
  * run it via the current Node with an absolute path. Resolving it also doubles
@@ -60,7 +33,7 @@ export declare function runVite(rawArgs?: string[]): Promise<void>;
  * stripped *first*: Vite colors the host and the port separately, so escape
  * sequences sit in the middle of the URL text and no pattern would survive
  * matching against the raw bytes. Returns undefined for anything that isn't
- * the ready line — the same shape as the workbench's parseServeReadyLine, the
+ * the ready line — the same shape the retired workbench lab used, the
  * house pattern for these one-line protocols.
  */
 export declare function parseViteLocalUrl(line: string): string | undefined;
@@ -75,3 +48,18 @@ export declare function parseViteLocalUrl(line: string): string | undefined;
  * process).
  */
 export declare function teeAndDetectLocalUrl(source: NodeJS.ReadableStream, sink: NodeJS.WritableStream, onUrl: (url: string) => void): void;
+/**
+ * The browser sidecar: once the dev server's URL is known, put it in front of
+ * the user — in the *session browser* (the shared window `aiui claude`
+ * attaches the agent to; see aiui-util's browser module and `aiui open`),
+ * never their default browser. A running session browser gets a new tab; none running
+ * means launching one exactly the way `aiui browser` does
+ * ({@link startSessionBrowser}), with the app as its first tab.
+ *
+ * Runs concurrently with Vite and must never interfere with it: everything is
+ * caught, failures print a warning, and the dev server keeps the terminal and
+ * keeps running either way. It is also deliberately non-interactive — Vite
+ * owns stdin — so the Chrome for Testing sync never prompts here; it just
+ * uses whatever browser is already available.
+ */
+export declare function openAppInBrowser(url: string, aiuiArgs: AiuiArgs): Promise<void>;

package/dist/config-Cis6kCik.js

@@ -0,0 +1,293 @@
+import { readFileSync as C, mkdirSync as T, writeFileSync as x } from "node:fs";
+import { join as p, dirname as S } from "node:path";
+import { projectCacheDir as E } from "@habemus-papadum/aiui-claude-channel";
+import { CHROME_CHANNELS as N, cacheDir as $ } from "@habemus-papadum/aiui-util";
+const O = ["prompt", "auto", "off"], P = ["attach", "launch"], D = ["loopback", "host"], u = [
+  {
+    name: "claude",
+    summary: "how `aiui claude` launches Claude Code",
+    fields: [
+      {
+        key: "skipPermissions",
+        type: "boolean",
+        default: !0,
+        defaultText: "true (unset: the first interactive launch asks, then persists the answer)",
+        summary: "Launch Claude Code with --dangerously-skip-permissions.",
+        doc: "A personal preference with real consequences (docs/guide/warning): every agent action — shell commands, file writes, network, the browser — runs without asking first. aiui works fine either way. The first interactive launch asks and persists the answer at the user level; when unset, non-interactive sessions fall back to true."
+      },
+      {
+        key: "enterNudge",
+        type: "boolean",
+        default: !0,
+        defaultText: "true (unset: the first interactive launch asks, then persists the answer)",
+        summary: "Auto-dismiss Claude Code's development-channel acknowledgement prompt.",
+        doc: "aiui loads a custom development channel, so Claude Code shows a one-key acknowledgement at every startup; this injects a single Enter keystroke into the terminal to dismiss it (best-effort TIOCSTI on /dev/tty — platforms that forbid it harmlessly do nothing). Saying no just means pressing Enter yourself each launch."
+      }
+    ]
+  },
+  {
+    name: "channel",
+    summary: "the channel server's web backend",
+    fields: [
+      {
+        key: "bind",
+        type: "enum",
+        values: D,
+        default: "loopback",
+        defaultText: '"loopback" (unset: the first interactive launch asks, then persists the answer)',
+        summary: "Which interface the channel web server binds: loopback, or host (LAN).",
+        doc: '"host" (0.0.0.0) makes the session\'s whole web surface — the iPad paint page, but also prompt injection, /debug, and every sidecar — reachable by anyone on your network, UNAUTHENTICATED. That is the trusted-LAN posture (docs/guide/warning): right on a network that is yours alone, wrong on shared Wi-Fi. "loopback" keeps everything this-machine-only; reaching the paint page from an iPad is then up to you — tunnel the channel port however you like (Tailscale, `ssh -L`). The first interactive launch asks and persists the answer at the user level. Per-launch flag: --aiui-bind.'
+      }
+    ]
+  },
+  {
+    name: "chrome",
+    summary: "the agent's browser and the Chrome DevTools MCP",
+    fields: [
+      {
+        key: "enabled",
+        type: "boolean",
+        default: !0,
+        summary: "Attach the Chrome DevTools MCP.",
+        doc: "false turns it off everywhere; true restates the default and does NOT override the CI default-off — only the --aiui-chrome flag forces it on under CI."
+      },
+      {
+        key: "mode",
+        type: "enum",
+        values: P,
+        default: "attach",
+        summary: "How the MCP reaches a browser: shared session browser, or its own.",
+        doc: `"attach" shares a user-visible session browser: an already-running one is discovered by profile, or an interactive launch starts one eagerly. "launch" is the hands-off mode: chrome-devtools-mcp launches its own private browser lazily, on the agent's first browser tool call.`
+      },
+      {
+        key: "browserUrl",
+        type: "string",
+        defaultText: "unset (manage a browser locally)",
+        summary: "Attach to this DevTools endpoint instead of managing a browser at all.",
+        doc: 'The remote-development key (docs/guide/remote): the browser runs on another machine (started there with `aiui browser`) and its debug port is tunneled over. Setting it implies mode: "attach" and makes every local-browser setting (profile, executablePath, channel, forTesting…) irrelevant. Per-launch flag: --aiui-browser-url.',
+        validate: (e) => j(String(e)) ? void 0 : 'expected an http(s) URL like "http://127.0.0.1:9222"'
+      },
+      {
+        key: "debugPort",
+        type: "number",
+        default: 0,
+        defaultText: "0 (an OS-assigned free port)",
+        summary: "Fixed DevTools debug port for session browsers aiui launches.",
+        doc: "Pin it (e.g. 9222) when something external must find the port — an ssh tunnel, a VS Code attach-to-Chrome launch config. 0 means an OS-assigned free port.",
+        validate: (e) => Number.isInteger(e) && e >= 0 && e <= 65535 ? void 0 : "expected 0..65535"
+      },
+      {
+        key: "profile",
+        type: "string",
+        default: "default",
+        summary: "Named profile under .aiui-cache/chrome/.",
+        doc: "Per-launch flag: --aiui-chrome-profile."
+      },
+      {
+        key: "dataDir",
+        type: "string",
+        defaultText: "unset (derived from chrome.profile)",
+        summary: "Explicit Chrome user data dir; takes precedence over chrome.profile.",
+        doc: "Per-launch flag: --aiui-chrome-data-dir."
+      },
+      {
+        key: "executablePath",
+        type: "string",
+        defaultText: "unset (managed Chrome for Testing when installed, else installed Chrome)",
+        summary: "Chrome binary to launch — e.g. a Chrome for Testing install.",
+        doc: "Chrome for Testing still honors --load-extension, so the aiui DevTools panel can auto-load. Mutually exclusive with chrome.channel."
+      },
+      {
+        key: "channel",
+        type: "enum",
+        values: N,
+        defaultText: 'unset ("stable" when launching an installed Chrome)',
+        summary: "Installed Chrome release channel to launch.",
+        doc: "Mutually exclusive with chrome.executablePath."
+      },
+      {
+        key: "forTesting",
+        type: "enum",
+        values: O,
+        default: "prompt",
+        summary: "How `aiui claude` manages the recommended Chrome for Testing install.",
+        doc: '"prompt" asks before installing or updating it — interactive sessions only, never under CI; "auto" installs/updates without asking; "off" never checks. Prompt answers ("automatically", "never ask again") persist here at the user level. Skipped entirely when executablePath or channel picks a browser explicitly.'
+      },
+      {
+        key: "headless",
+        type: "boolean",
+        default: !1,
+        summary: "Launch Chrome with no UI."
+      },
+      {
+        key: "buildExtension",
+        type: "boolean",
+        default: !0,
+        summary: "OBSOLETE — parsed and ignored (the DevTools extension is deleted).",
+        doc: "The only extension a launch auto-loads is the intent client, whose MV3 bundle is built deliberately (`pnpm -C packages/aiui-intent-client build:ext`). Kept in the schema so old configs stay valid."
+      },
+      {
+        key: "autoCapture",
+        type: "boolean",
+        default: !0,
+        summary: "OBSOLETE — parsed and ignored (page-side getDisplayMedia capture is gone).",
+        doc: "The intent client's hosts capture natively (CDP screenshots / the extension's tabCapture stream); nothing reads the page-side capture marker any more. Kept in the schema so old configs stay valid."
+      }
+    ]
+  }
+];
+function J() {
+  return u.flatMap(
+    (e) => e.fields.map((t) => ({ section: e, field: t, path: `${e.name}.${t.key}` }))
+  );
+}
+function w(e) {
+  return e.type === "enum" ? "string" : e.type;
+}
+function b(e, t) {
+  var n;
+  return e.type === "enum" && !(e.values ?? []).includes(String(t)) ? `expected one of: ${(e.values ?? []).join(", ")}` : (n = e.validate) == null ? void 0 : n.call(e, t);
+}
+function V(e, t) {
+  let n;
+  switch (w(e)) {
+    case "boolean": {
+      if (t !== "true" && t !== "false")
+        return { error: "expected true or false" };
+      n = t === "true";
+      break;
+    }
+    case "number": {
+      if (n = Number(t), t.trim() === "" || Number.isNaN(n))
+        return { error: "expected a number" };
+      break;
+    }
+    default:
+      n = t;
+  }
+  const a = b(e, n);
+  return a ? { error: a } : { value: n };
+}
+function k(e) {
+  return typeof e == "string" ? JSON.stringify(e) : String(e);
+}
+function B(e) {
+  return e.defaultText ? e.defaultText : e.default === void 0 ? "unset" : k(e.default);
+}
+function j(e) {
+  try {
+    const t = new URL(e);
+    return t.protocol === "http:" || t.protocol === "https:";
+  } catch {
+    return !1;
+  }
+}
+const y = "config.json", A = /* @__PURE__ */ new Set(["sidecars"]);
+function v(e = process.cwd()) {
+  return {
+    user: p($(void 0, { create: !1 }), y),
+    project: p(E(e), y)
+  };
+}
+function G(e = process.cwd()) {
+  const t = v(e);
+  return I(l(t.user) ?? {}, l(t.project) ?? {});
+}
+function I(e, t) {
+  const n = {};
+  for (const a of u)
+    n[a.name] = {
+      ...e[a.name],
+      ...t[a.name]
+    };
+  return n;
+}
+function l(e) {
+  let t;
+  try {
+    t = C(e, "utf8");
+  } catch {
+    return;
+  }
+  let n;
+  try {
+    n = JSON.parse(t);
+  } catch (a) {
+    throw new Error(
+      `invalid JSON in ${e}: ${a instanceof Error ? a.message : String(a)}`
+    );
+  }
+  return M(n, e);
+}
+function M(e, t) {
+  const n = g(e, t, "the top level"), a = u.map((r) => r.name);
+  for (const r of Object.keys(n))
+    if (!(a.includes(r) || A.has(r)))
+      throw new Error(
+        `unknown key "${r}" at the top level of ${t} — known keys: ${a.join(", ")}`
+      );
+  const s = {};
+  for (const r of u) {
+    if (n[r.name] === void 0)
+      continue;
+    const c = g(n[r.name], t, `"${r.name}"`);
+    L(
+      c,
+      r.fields.map((o) => o.key),
+      t,
+      `"${r.name}"`
+    );
+    const h = {};
+    for (const o of r.fields) {
+      const i = c[o.key];
+      if (i === void 0)
+        continue;
+      const d = `${r.name}.${o.key}`, m = w(o);
+      if (typeof i !== m)
+        throw new Error(`expected a ${m} for ${d} in ${t}`);
+      const f = b(o, i);
+      if (f)
+        throw new Error(
+          `invalid ${d} ${k(i)} in ${t} — ${f}`
+        );
+      h[o.key] = i;
+    }
+    s[r.name] = h;
+  }
+  return s;
+}
+function K(e) {
+  return F(v().user, e);
+}
+function F(e, t) {
+  const n = l(e) ?? {};
+  return t(n), T(S(e), { recursive: !0 }), x(e, `${JSON.stringify(n, null, 2)}
+`), e;
+}
+function g(e, t, n) {
+  if (typeof e != "object" || e === null || Array.isArray(e))
+    throw new Error(`expected an object at ${n} of ${t}`);
+  return e;
+}
+function L(e, t, n, a) {
+  for (const s of Object.keys(e))
+    if (!t.includes(s))
+      throw new Error(
+        `unknown key "${s}" at ${a} of ${n} — known keys: ${t.join(", ")}`
+      );
+}
+export {
+  D as C,
+  J as a,
+  F as b,
+  v as c,
+  B as d,
+  u as e,
+  k as f,
+  G as l,
+  I as m,
+  V as p,
+  l as r,
+  K as u
+};
+//# sourceMappingURL=config-Cis6kCik.js.map

package/dist/config-Cis6kCik.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-Cis6kCik.js","sources":["../src/util/config-schema.ts","../src/util/config.ts"],"sourcesContent":["/**\n * The declarative schema for aiui's `config.json` — one table that drives\n * everything config-shaped:\n *\n *   - validation (util/config.ts walks these sections instead of hand-rolled\n *     per-key checks),\n *   - the `aiui config` commands (show/get/set/unset use it to resolve keys,\n *     parse CLI values, and report defaults),\n *   - the `aiui config tui` browser (docs, defaults, and enum choices all\n *     render from here).\n *\n * Because docs, defaults, and validation come from the same rows, they cannot\n * drift apart. `docs/guide/config.md` remains the long-form narrative; the\n * `doc` strings here are the terminal-sized versions.\n *\n * **How a component participates.** `CONFIG_SECTIONS` is the registry: a\n * section is plain data, so a future component that grows file-backed settings\n * (say, an `intent` section for the pipeline) joins by contributing one\n * `ConfigSectionSchema` object here and a matching optional section on\n * `AiuiConfig`. Nothing else — validation, show/get/set, and the TUI pick it\n * up from the table. (The intent pipeline's current config is deliberately\n * *not* here: it is per-app, passed as `aiuiDevOverlay({ intent: { … } })` in\n * the app's Vite config — see docs/guide/intent-overlay.md.)\n */\n\n// The channel list lives with the launch code (aiui-util's browser module,\n// whose RELEASE_CHANNELS map must stay exhaustive over it); re-exported here\n// so the config table keeps being the one import surface for config shapes.\nimport { CHROME_CHANNELS } from \"@habemus-papadum/aiui-util\";\n\nexport { CHROME_CHANNELS, type ChromeChannel } from \"@habemus-papadum/aiui-util\";\n\nexport const FOR_TESTING_MODES = [\"prompt\", \"auto\", \"off\"] as const;\nexport type ForTestingMode = (typeof FOR_TESTING_MODES)[number];\n\nexport const CHROME_MODES = [\"attach\", \"launch\"] as const;\nexport type ChromeMode = (typeof CHROME_MODES)[number];\n\nexport const CHANNEL_BINDS = [\"loopback\", \"host\"] as const;\nexport type ChannelBind = (typeof CHANNEL_BINDS)[number];\n\n/** Every config leaf is a JSON scalar; sections never nest further. */\nexport type ConfigValue = boolean | number | string;\n\nexport interface ConfigFieldSchema {\n  /** Leaf key within its section, e.g. `\"skipPermissions\"`. */\n  key: string;\n  /** `\"enum\"` is a string constrained to {@link values}. */\n  type: \"boolean\" | \"number\" | \"string\" | \"enum\";\n  /** The allowed values when {@link type} is `\"enum\"`. */\n  values?: readonly string[];\n  /** The built-in default, when the fallback is a plain value. */\n  default?: ConfigValue;\n  /**\n   * Human phrasing of the default when a bare value would mislead (dynamic\n   * fallbacks, first-run prompts). Shown instead of {@link default}.\n   */\n  defaultText?: string;\n  /** One-line summary — the TUI's list row. */\n  summary: string;\n  /** The rest of the documentation (terminal-sized; optional). */\n  doc?: string;\n  /**\n   * Constraint beyond type/enum. Returns the \"expected …\" tail of the error\n   * message, or undefined when the value is fine.\n   */\n  validate?: (value: ConfigValue) => string | undefined;\n}\n\nexport interface ConfigSectionSchema {\n  /** Top-level key in config.json, e.g. `\"chrome\"`. */\n  name: string;\n  /** One-line summary of what the section configures. */\n  summary: string;\n  fields: ConfigFieldSchema[];\n}\n\nexport const CONFIG_SECTIONS: ConfigSectionSchema[] = [\n  {\n    name: \"claude\",\n    summary: \"how `aiui claude` launches Claude Code\",\n    fields: [\n      {\n        key: \"skipPermissions\",\n        type: \"boolean\",\n        default: true,\n        defaultText: \"true (unset: the first interactive launch asks, then persists the answer)\",\n        summary: \"Launch Claude Code with --dangerously-skip-permissions.\",\n        doc:\n          \"A personal preference with real consequences (docs/guide/warning): every agent \" +\n          \"action — shell commands, file writes, network, the browser — runs without asking \" +\n          \"first. aiui works fine either way. The first interactive launch asks and persists \" +\n          \"the answer at the user level; when unset, non-interactive sessions fall back to true.\",\n      },\n      {\n        key: \"enterNudge\",\n        type: \"boolean\",\n        default: true,\n        defaultText: \"true (unset: the first interactive launch asks, then persists the answer)\",\n        summary: \"Auto-dismiss Claude Code's development-channel acknowledgement prompt.\",\n        doc:\n          \"aiui loads a custom development channel, so Claude Code shows a one-key \" +\n          \"acknowledgement at every startup; this injects a single Enter keystroke into the \" +\n          \"terminal to dismiss it (best-effort TIOCSTI on /dev/tty — platforms that forbid it \" +\n          \"harmlessly do nothing). Saying no just means pressing Enter yourself each launch.\",\n      },\n    ],\n  },\n  {\n    name: \"channel\",\n    summary: \"the channel server's web backend\",\n    fields: [\n      {\n        key: \"bind\",\n        type: \"enum\",\n        values: CHANNEL_BINDS,\n        default: \"loopback\",\n        defaultText:\n          '\"loopback\" (unset: the first interactive launch asks, then persists the answer)',\n        summary: \"Which interface the channel web server binds: loopback, or host (LAN).\",\n        doc:\n          '\"host\" (0.0.0.0) makes the session\\'s whole web surface — the iPad paint page, but ' +\n          \"also prompt injection, /debug, and every sidecar — reachable by anyone on your \" +\n          \"network, UNAUTHENTICATED. That is the trusted-LAN posture (docs/guide/warning): \" +\n          'right on a network that is yours alone, wrong on shared Wi-Fi. \"loopback\" keeps ' +\n          \"everything this-machine-only; reaching the paint page from an iPad is then up to \" +\n          \"you — tunnel the channel port however you like (Tailscale, `ssh -L`). The first \" +\n          \"interactive launch asks and persists the answer at the user level. Per-launch \" +\n          \"flag: --aiui-bind.\",\n      },\n    ],\n  },\n  {\n    name: \"chrome\",\n    summary: \"the agent's browser and the Chrome DevTools MCP\",\n    fields: [\n      {\n        key: \"enabled\",\n        type: \"boolean\",\n        default: true,\n        summary: \"Attach the Chrome DevTools MCP.\",\n        doc:\n          \"false turns it off everywhere; true restates the default and does NOT override the \" +\n          \"CI default-off — only the --aiui-chrome flag forces it on under CI.\",\n      },\n      {\n        key: \"mode\",\n        type: \"enum\",\n        values: CHROME_MODES,\n        default: \"attach\",\n        summary: \"How the MCP reaches a browser: shared session browser, or its own.\",\n        doc:\n          '\"attach\" shares a user-visible session browser: an already-running one is ' +\n          'discovered by profile, or an interactive launch starts one eagerly. \"launch\" is ' +\n          \"the hands-off mode: chrome-devtools-mcp launches its own private browser lazily, on \" +\n          \"the agent's first browser tool call.\",\n      },\n      {\n        key: \"browserUrl\",\n        type: \"string\",\n        defaultText: \"unset (manage a browser locally)\",\n        summary: \"Attach to this DevTools endpoint instead of managing a browser at all.\",\n        doc:\n          \"The remote-development key (docs/guide/remote): the browser runs on another machine \" +\n          \"(started there with `aiui browser`) and its debug port is tunneled over. Setting it \" +\n          'implies mode: \"attach\" and makes every local-browser setting (profile, ' +\n          \"executablePath, channel, forTesting…) irrelevant. Per-launch flag: --aiui-browser-url.\",\n        validate: (value) =>\n          isHttpUrl(String(value))\n            ? undefined\n            : 'expected an http(s) URL like \"http://127.0.0.1:9222\"',\n      },\n      {\n        key: \"debugPort\",\n        type: \"number\",\n        default: 0,\n        defaultText: \"0 (an OS-assigned free port)\",\n        summary: \"Fixed DevTools debug port for session browsers aiui launches.\",\n        doc:\n          \"Pin it (e.g. 9222) when something external must find the port — an ssh tunnel, a \" +\n          \"VS Code attach-to-Chrome launch config. 0 means an OS-assigned free port.\",\n        validate: (value) =>\n          Number.isInteger(value) && (value as number) >= 0 && (value as number) <= 65535\n            ? undefined\n            : \"expected 0..65535\",\n      },\n      {\n        key: \"profile\",\n        type: \"string\",\n        default: \"default\",\n        summary: \"Named profile under .aiui-cache/chrome/.\",\n        doc: \"Per-launch flag: --aiui-chrome-profile.\",\n      },\n      {\n        key: \"dataDir\",\n        type: \"string\",\n        defaultText: \"unset (derived from chrome.profile)\",\n        summary: \"Explicit Chrome user data dir; takes precedence over chrome.profile.\",\n        doc: \"Per-launch flag: --aiui-chrome-data-dir.\",\n      },\n      {\n        key: \"executablePath\",\n        type: \"string\",\n        defaultText: \"unset (managed Chrome for Testing when installed, else installed Chrome)\",\n        summary: \"Chrome binary to launch — e.g. a Chrome for Testing install.\",\n        doc:\n          \"Chrome for Testing still honors --load-extension, so the aiui DevTools panel can \" +\n          \"auto-load. Mutually exclusive with chrome.channel.\",\n      },\n      {\n        key: \"channel\",\n        type: \"enum\",\n        values: CHROME_CHANNELS,\n        defaultText: 'unset (\"stable\" when launching an installed Chrome)',\n        summary: \"Installed Chrome release channel to launch.\",\n        doc: \"Mutually exclusive with chrome.executablePath.\",\n      },\n      {\n        key: \"forTesting\",\n        type: \"enum\",\n        values: FOR_TESTING_MODES,\n        default: \"prompt\",\n        summary: \"How `aiui claude` manages the recommended Chrome for Testing install.\",\n        doc:\n          '\"prompt\" asks before installing or updating it — interactive sessions only, never ' +\n          'under CI; \"auto\" installs/updates without asking; \"off\" never checks. Prompt ' +\n          'answers (\"automatically\", \"never ask again\") persist here at the user level. ' +\n          \"Skipped entirely when executablePath or channel picks a browser explicitly.\",\n      },\n      {\n        key: \"headless\",\n        type: \"boolean\",\n        default: false,\n        summary: \"Launch Chrome with no UI.\",\n      },\n      {\n        key: \"buildExtension\",\n        type: \"boolean\",\n        default: true,\n        summary: \"OBSOLETE — parsed and ignored (the DevTools extension is deleted).\",\n        doc:\n          \"The only extension a launch auto-loads is the intent client, whose MV3 bundle \" +\n          \"is built deliberately (`pnpm -C packages/aiui-intent-client build:ext`). \" +\n          \"Kept in the schema so old configs stay valid.\",\n      },\n      {\n        key: \"autoCapture\",\n        type: \"boolean\",\n        default: true,\n        summary: \"OBSOLETE — parsed and ignored (page-side getDisplayMedia capture is gone).\",\n        doc:\n          \"The intent client's hosts capture natively (CDP screenshots / the extension's \" +\n          \"tabCapture stream); nothing reads the page-side capture marker any more. Kept in \" +\n          \"the schema so old configs stay valid.\",\n      },\n    ],\n  },\n];\n\n/** A field paired with its section — what key-resolution hands back. */\nexport interface ResolvedField {\n  section: ConfigSectionSchema;\n  field: ConfigFieldSchema;\n  /** The dotted path, e.g. `\"chrome.mode\"`. */\n  path: string;\n}\n\n/** Every field in schema order, with dotted paths. */\nexport function allConfigFields(): ResolvedField[] {\n  return CONFIG_SECTIONS.flatMap((section) =>\n    section.fields.map((field) => ({ section, field, path: `${section.name}.${field.key}` })),\n  );\n}\n\n/** Resolve a dotted path like `\"chrome.mode\"`; undefined when unknown. */\nexport function findConfigField(path: string): ResolvedField | undefined {\n  return allConfigFields().find((entry) => entry.path === path);\n}\n\n/** The `typeof` a field's values (enums are strings). */\nexport function fieldRuntimeType(field: ConfigFieldSchema): \"boolean\" | \"number\" | \"string\" {\n  return field.type === \"enum\" ? \"string\" : field.type;\n}\n\n/**\n * Constraint check beyond the runtime type: enum membership, then the field's\n * own `validate`. Returns the \"expected …\" tail for the error, or undefined.\n */\nexport function invalidReason(field: ConfigFieldSchema, value: ConfigValue): string | undefined {\n  if (field.type === \"enum\" && !(field.values ?? []).includes(String(value))) {\n    return `expected one of: ${(field.values ?? []).join(\", \")}`;\n  }\n  return field.validate?.(value);\n}\n\n/**\n * Parse a CLI-provided string into the field's type and validate it — how\n * `aiui config set` and the TUI turn text into a config value.\n */\nexport function parseFieldValue(\n  field: ConfigFieldSchema,\n  raw: string,\n): { value: ConfigValue } | { error: string } {\n  let value: ConfigValue;\n  switch (fieldRuntimeType(field)) {\n    case \"boolean\": {\n      if (raw !== \"true\" && raw !== \"false\") {\n        return { error: \"expected true or false\" };\n      }\n      value = raw === \"true\";\n      break;\n    }\n    case \"number\": {\n      value = Number(raw);\n      if (raw.trim() === \"\" || Number.isNaN(value)) {\n        return { error: \"expected a number\" };\n      }\n      break;\n    }\n    default:\n      value = raw;\n  }\n  const reason = invalidReason(field, value);\n  return reason ? { error: reason } : { value };\n}\n\n/** Render a value the way config.json would hold it (strings quoted). */\nexport function formatConfigValue(value: ConfigValue): string {\n  return typeof value === \"string\" ? JSON.stringify(value) : String(value);\n}\n\n/** The default, phrased for humans: `defaultText` wins, then the value, then \"unset\". */\nexport function describeDefault(field: ConfigFieldSchema): string {\n  if (field.defaultText) {\n    return field.defaultText;\n  }\n  return field.default === undefined ? \"unset\" : formatConfigValue(field.default);\n}\n\nfunction isHttpUrl(value: string): boolean {\n  try {\n    const url = new URL(value);\n    return url.protocol === \"http:\" || url.protocol === \"https:\";\n  } catch {\n    return false;\n  }\n}\n","/**\n * aiui's two-level configuration file.\n *\n * Settings live in `config.json` at up to two places, merged per-key with the\n * more specific one winning:\n *\n *   <user cache>/config.json          e.g. ~/.cache/aiui/config.json (respects\n *                                     AIUI_CACHE / XDG_CACHE_HOME)\n *   <project>/.aiui-cache/config.json  next to the traces and Chrome profiles\n *\n * CLI flags override both. Everything is optional; a missing file is an empty\n * config. A *malformed* file is a hard error, not a warning — these settings\n * gate security-relevant behavior (`claude.skipPermissions`), and a typo that\n * silently reverts to the dangerous default is worse than a failed launch. The\n * same reasoning rejects unknown keys.\n *\n * What the keys are — types, enums, defaults, and documentation — lives in one\n * declarative table, `config-schema.ts`. Validation here walks that schema, and\n * the `aiui config` commands (show/get/set/tui) render from it, so the checks\n * and the docs cannot drift apart.\n */\nimport { mkdirSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { dirname, join } from \"node:path\";\nimport { projectCacheDir } from \"@habemus-papadum/aiui-claude-channel\";\nimport { cacheDir } from \"@habemus-papadum/aiui-util\";\nimport {\n  type ChannelBind,\n  type ChromeChannel,\n  type ChromeMode,\n  CONFIG_SECTIONS,\n  type ConfigValue,\n  type ForTestingMode,\n  fieldRuntimeType,\n  formatConfigValue,\n  invalidReason,\n} from \"./config-schema\";\n\nexport {\n  CHANNEL_BINDS,\n  CHROME_CHANNELS,\n  CHROME_MODES,\n  type ChannelBind,\n  type ChromeChannel,\n  type ChromeMode,\n  FOR_TESTING_MODES,\n  type ForTestingMode,\n} from \"./config-schema\";\n\nexport const CONFIG_FILENAME = \"config.json\";\n\n/**\n * The typed shape of a config file. Must mirror `CONFIG_SECTIONS` in\n * config-schema.ts — the schema rows carry the full per-key documentation and\n * defaults; the comments here are just orientation.\n */\nexport interface AiuiConfig {\n  claude?: {\n    /** Launch Claude Code with `--dangerously-skip-permissions`. */\n    skipPermissions?: boolean;\n    /** Auto-dismiss Claude Code's development-channel prompt (util/enter-nudge.ts). */\n    enterNudge?: boolean;\n  };\n  channel?: {\n    /** Which interface the channel web server binds: loopback (default) or host (LAN). */\n    bind?: ChannelBind;\n  };\n  chrome?: {\n    /** Attach the Chrome DevTools MCP (default: true). */\n    enabled?: boolean;\n    /** How the MCP reaches a browser: shared session browser, or its own. */\n    mode?: ChromeMode;\n    /** Attach to this DevTools endpoint instead of managing a browser at all. */\n    browserUrl?: string;\n    /** Fixed DevTools debug port for session browsers aiui launches (0 = OS-assigned). */\n    debugPort?: number;\n    /** Named profile under `.aiui-cache/chrome/` (default: \"default\"). */\n    profile?: string;\n    /** Explicit Chrome user data dir; takes precedence over `profile`. */\n    dataDir?: string;\n    /** Chrome binary to launch. Mutually exclusive with `channel`. */\n    executablePath?: string;\n    /** Installed Chrome release channel to launch. */\n    channel?: ChromeChannel;\n    /** How `aiui claude` manages the Chrome for Testing install. */\n    forTesting?: ForTestingMode;\n    /** Launch Chrome headless (default: false). */\n    headless?: boolean;\n    /** OBSOLETE (the devtools extension is deleted): parsed and ignored so old\n     * configs stay valid. */\n    buildExtension?: boolean;\n    /** OBSOLETE (page-side getDisplayMedia capture is gone): parsed and\n     * ignored so old configs stay valid. */\n    autoCapture?: boolean;\n  };\n}\n\n/** The untyped view validation and merging work in: section → leaf values. */\ntype SectionValues = Record<string, ConfigValue>;\n\n/**\n * Top-level sections that USED to be valid and are now gone. A config file that\n * still carries one must not hard-fail — that would break every existing\n * config on upgrade — so it is accepted and ignored, distinct from a\n * genuinely-unknown key (a typo), which still throws. `sidecars.*` retired when\n * the channel began hosting its whole standard set unconditionally (paint,\n * intent, bar, pencil): there is nothing left to toggle, so the key is inert and\n * safe to delete.\n */\nconst DEPRECATED_SECTIONS = new Set([\"sidecars\"]);\n\n/** The `config.json` paths consulted, user-level first (base: the project dir). */\nexport function configPaths(base: string = process.cwd()): { user: string; project: string } {\n  return {\n    user: join(cacheDir(undefined, { create: false }), CONFIG_FILENAME),\n    project: join(projectCacheDir(base), CONFIG_FILENAME),\n  };\n}\n\n/** Load and merge the user- and project-level configs (project wins per key). */\nexport function loadAiuiConfig(base: string = process.cwd()): AiuiConfig {\n  const paths = configPaths(base);\n  return mergeAiuiConfig(readConfigFile(paths.user) ?? {}, readConfigFile(paths.project) ?? {});\n}\n\n/** Merge two configs section-by-section; `override`'s keys win within a section. */\nexport function mergeAiuiConfig(base: AiuiConfig, override: AiuiConfig): AiuiConfig {\n  const merged: Record<string, SectionValues> = {};\n  for (const section of CONFIG_SECTIONS) {\n    merged[section.name] = {\n      ...(base as Record<string, SectionValues | undefined>)[section.name],\n      ...(override as Record<string, SectionValues | undefined>)[section.name],\n    };\n  }\n  return merged as AiuiConfig;\n}\n\n/**\n * Read one config file. Missing → undefined; unreadable JSON or an unexpected\n * shape → an error naming the file, so the fix is obvious.\n */\nexport function readConfigFile(file: string): AiuiConfig | undefined {\n  let text: string;\n  try {\n    text = readFileSync(file, \"utf8\");\n  } catch {\n    return undefined;\n  }\n  let raw: unknown;\n  try {\n    raw = JSON.parse(text);\n  } catch (error) {\n    throw new Error(\n      `invalid JSON in ${file}: ${error instanceof Error ? error.message : String(error)}`,\n    );\n  }\n  return validateConfig(raw, file);\n}\n\n/** Walk `CONFIG_SECTIONS`, rejecting unknown keys, wrong types, and bad values. */\nfunction validateConfig(raw: unknown, file: string): AiuiConfig {\n  const root = asSection(raw, file, \"the top level\");\n  const knownSections = CONFIG_SECTIONS.map((s) => s.name);\n  for (const key of Object.keys(root)) {\n    // A retired section is tolerated (accepted, then ignored below); a truly\n    // unknown one is a typo and still throws — see DEPRECATED_SECTIONS.\n    if (knownSections.includes(key) || DEPRECATED_SECTIONS.has(key)) {\n      continue;\n    }\n    throw new Error(\n      `unknown key \"${key}\" at the top level of ${file} — known keys: ${knownSections.join(\", \")}`,\n    );\n  }\n\n  const config: Record<string, SectionValues> = {};\n  for (const section of CONFIG_SECTIONS) {\n    if (root[section.name] === undefined) {\n      continue;\n    }\n    const values = asSection(root[section.name], file, `\"${section.name}\"`);\n    rejectUnknownKeys(\n      values,\n      section.fields.map((f) => f.key),\n      file,\n      `\"${section.name}\"`,\n    );\n    // Absent keys stay absent (never `undefined`), or merging would let them\n    // clobber a value from the other config level.\n    const out: SectionValues = {};\n    for (const field of section.fields) {\n      const value = values[field.key];\n      if (value === undefined) {\n        continue;\n      }\n      const path = `${section.name}.${field.key}`;\n      const type = fieldRuntimeType(field);\n      if (typeof value !== type) {\n        throw new Error(`expected a ${type} for ${path} in ${file}`);\n      }\n      const reason = invalidReason(field, value as ConfigValue);\n      if (reason) {\n        throw new Error(\n          `invalid ${path} ${formatConfigValue(value as ConfigValue)} in ${file} — ${reason}`,\n        );\n      }\n      out[field.key] = value as ConfigValue;\n    }\n    config[section.name] = out;\n  }\n  return config as AiuiConfig;\n}\n\n/**\n * Persist a change to the **user-level** config (creating the file if needed).\n *\n * This is how interactive prompt answers like \"never ask again\" become\n * durable: they are per-user decisions, so they land in the user cache — never\n * in the project file, which may be shared/committed by a team.\n */\nexport function updateUserConfig(mutate: (config: AiuiConfig) => void): string {\n  return updateConfigFile(configPaths().user, mutate);\n}\n\n/**\n * Persist a change to a specific config file — the general form behind\n * {@link updateUserConfig}, and how `aiui config set --project` writes the\n * project level deliberately.\n */\nexport function updateConfigFile(file: string, mutate: (config: AiuiConfig) => void): string {\n  const config = readConfigFile(file) ?? {};\n  mutate(config);\n  mkdirSync(dirname(file), { recursive: true });\n  writeFileSync(file, `${JSON.stringify(config, null, 2)}\\n`);\n  return file;\n}\n\nfunction asSection(value: unknown, file: string, where: string): Record<string, unknown> {\n  if (typeof value !== \"object\" || value === null || Array.isArray(value)) {\n    throw new Error(`expected an object at ${where} of ${file}`);\n  }\n  return value as Record<string, unknown>;\n}\n\nfunction rejectUnknownKeys(\n  section: Record<string, unknown>,\n  known: string[],\n  file: string,\n  where: string,\n): void {\n  for (const key of Object.keys(section)) {\n    if (!known.includes(key)) {\n      throw new Error(\n        `unknown key \"${key}\" at ${where} of ${file} — known keys: ${known.join(\", \")}`,\n      );\n    }\n  }\n}\n"],"names":["FOR_TESTING_MODES","CHROME_MODES","CHANNEL_BINDS","CONFIG_SECTIONS","value","isHttpUrl","CHROME_CHANNELS","allConfigFields","section","field","fieldRuntimeType","invalidReason","_a","parseFieldValue","raw","reason","formatConfigValue","describeDefault","url","CONFIG_FILENAME","DEPRECATED_SECTIONS","configPaths","base","join","cacheDir","projectCacheDir","loadAiuiConfig","paths","mergeAiuiConfig","readConfigFile","override","merged","file","text","readFileSync","error","validateConfig","root","asSection","knownSections","s","key","config","values","rejectUnknownKeys","f","out","path","type","updateUserConfig","mutate","updateConfigFile","mkdirSync","dirname","writeFileSync","where","known"],"mappings":";;;;AAgCO,MAAMA,IAAoB,CAAC,UAAU,QAAQ,KAAK,GAG5CC,IAAe,CAAC,UAAU,QAAQ,GAGlCC,IAAgB,CAAC,YAAY,MAAM,GAuCnCC,IAAyC;AAAA,EACpD;AAAA,IACE,MAAM;AAAA,IACN,SAAS;AAAA,IACT,QAAQ;AAAA,MACN;AAAA,QACE,KAAK;AAAA,QACL,MAAM;AAAA,QACN,SAAS;AAAA,QACT,aAAa;AAAA,QACb,SAAS;AAAA,QACT,KACE;AAAA,MAAA;AAAA,MAKJ;AAAA,QACE,KAAK;AAAA,QACL,MAAM;AAAA,QACN,SAAS;AAAA,QACT,aAAa;AAAA,QACb,SAAS;AAAA,QACT,KACE;AAAA,MAAA;AAAA,IAIJ;AAAA,EACF;AAAA,EAEF;AAAA,IACE,MAAM;AAAA,IACN,SAAS;AAAA,IACT,QAAQ;AAAA,MACN;AAAA,QACE,KAAK;AAAA,QACL,MAAM;AAAA,QACN,QAAQD;AAAA,QACR,SAAS;AAAA,QACT,aACE;AAAA,QACF,SAAS;AAAA,QACT,KACE;AAAA,MAAA;AAAA,IAQJ;AAAA,EACF;AAAA,EAEF;AAAA,IACE,MAAM;AAAA,IACN,SAAS;AAAA,IACT,QAAQ;AAAA,MACN;AAAA,QACE,KAAK;AAAA,QACL,MAAM;AAAA,QACN,SAAS;AAAA,QACT,SAAS;AAAA,QACT,KACE;AAAA,MAAA;AAAA,MAGJ;AAAA,QACE,KAAK;AAAA,QACL,MAAM;AAAA,QACN,QAAQD;AAAA,QACR,SAAS;AAAA,QACT,SAAS;AAAA,QACT,KACE;AAAA,MAAA;AAAA,MAKJ;AAAA,QACE,KAAK;AAAA,QACL,MAAM;AAAA,QACN,aAAa;AAAA,QACb,SAAS;AAAA,QACT,KACE;AAAA,QAIF,UAAU,CAACG,MACTC,EAAU,OAAOD,CAAK,CAAC,IACnB,SACA;AAAA,MAAA;AAAA,MAER;AAAA,QACE,KAAK;AAAA,QACL,MAAM;AAAA,QACN,SAAS;AAAA,QACT,aAAa;AAAA,QACb,SAAS;AAAA,QACT,KACE;AAAA,QAEF,UAAU,CAACA,MACT,OAAO,UAAUA,CAAK,KAAMA,KAAoB,KAAMA,KAAoB,QACtE,SACA;AAAA,MAAA;AAAA,MAER;AAAA,QACE,KAAK;AAAA,QACL,MAAM;AAAA,QACN,SAAS;AAAA,QACT,SAAS;AAAA,QACT,KAAK;AAAA,MAAA;AAAA,MAEP;AAAA,QACE,KAAK;AAAA,QACL,MAAM;AAAA,QACN,aAAa;AAAA,QACb,SAAS;AAAA,QACT,KAAK;AAAA,MAAA;AAAA,MAEP;AAAA,QACE,KAAK;AAAA,QACL,MAAM;AAAA,QACN,aAAa;AAAA,QACb,SAAS;AAAA,QACT,KACE;AAAA,MAAA;AAAA,MAGJ;AAAA,QACE,KAAK;AAAA,QACL,MAAM;AAAA,QACN,QAAQE;AAAA,QACR,aAAa;AAAA,QACb,SAAS;AAAA,QACT,KAAK;AAAA,MAAA;AAAA,MAEP;AAAA,QACE,KAAK;AAAA,QACL,MAAM;AAAA,QACN,QAAQN;AAAA,QACR,SAAS;AAAA,QACT,SAAS;AAAA,QACT,KACE;AAAA,MAAA;AAAA,MAKJ;AAAA,QACE,KAAK;AAAA,QACL,MAAM;AAAA,QACN,SAAS;AAAA,QACT,SAAS;AAAA,MAAA;AAAA,MAEX;AAAA,QACE,KAAK;AAAA,QACL,MAAM;AAAA,QACN,SAAS;AAAA,QACT,SAAS;AAAA,QACT,KACE;AAAA,MAAA;AAAA,MAIJ;AAAA,QACE,KAAK;AAAA,QACL,MAAM;AAAA,QACN,SAAS;AAAA,QACT,SAAS;AAAA,QACT,KACE;AAAA,MAAA;AAAA,IAGJ;AAAA,EACF;AAEJ;AAWO,SAASO,IAAmC;AACjD,SAAOJ,EAAgB;AAAA,IAAQ,CAACK,MAC9BA,EAAQ,OAAO,IAAI,CAACC,OAAW,EAAE,SAAAD,GAAS,OAAAC,GAAO,MAAM,GAAGD,EAAQ,IAAI,IAAIC,EAAM,GAAG,KAAK;AAAA,EAAA;AAE5F;AAQO,SAASC,EAAiBD,GAA2D;AAC1F,SAAOA,EAAM,SAAS,SAAS,WAAWA,EAAM;AAClD;AAMO,SAASE,EAAcF,GAA0BL,GAAwC;;AAC9F,SAAIK,EAAM,SAAS,UAAU,EAAEA,EAAM,UAAU,CAAA,GAAI,SAAS,OAAOL,CAAK,CAAC,IAChE,qBAAqBK,EAAM,UAAU,CAAA,GAAI,KAAK,IAAI,CAAC,MAErDG,IAAAH,EAAM,aAAN,gBAAAG,EAAA,KAAAH,GAAiBL;AAC1B;AAMO,SAASS,EACdJ,GACAK,GAC4C;AAC5C,MAAIV;AACJ,UAAQM,EAAiBD,CAAK,GAAA;AAAA,IAC5B,KAAK,WAAW;AACd,UAAIK,MAAQ,UAAUA,MAAQ;AAC5B,eAAO,EAAE,OAAO,yBAAA;AAElB,MAAAV,IAAQU,MAAQ;AAChB;AAAA,IACF;AAAA,IACA,KAAK,UAAU;AAEb,UADAV,IAAQ,OAAOU,CAAG,GACdA,EAAI,WAAW,MAAM,OAAO,MAAMV,CAAK;AACzC,eAAO,EAAE,OAAO,oBAAA;AAElB;AAAA,IACF;AAAA,IACA;AACE,MAAAA,IAAQU;AAAA,EAAA;AAEZ,QAAMC,IAASJ,EAAcF,GAAOL,CAAK;AACzC,SAAOW,IAAS,EAAE,OAAOA,EAAA,IAAW,EAAE,OAAAX,EAAA;AACxC;AAGO,SAASY,EAAkBZ,GAA4B;AAC5D,SAAO,OAAOA,KAAU,WAAW,KAAK,UAAUA,CAAK,IAAI,OAAOA,CAAK;AACzE;AAGO,SAASa,EAAgBR,GAAkC;AAChE,SAAIA,EAAM,cACDA,EAAM,cAERA,EAAM,YAAY,SAAY,UAAUO,EAAkBP,EAAM,OAAO;AAChF;AAEA,SAASJ,EAAUD,GAAwB;AACzC,MAAI;AACF,UAAMc,IAAM,IAAI,IAAId,CAAK;AACzB,WAAOc,EAAI,aAAa,WAAWA,EAAI,aAAa;AAAA,EACtD,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AC1SO,MAAMC,IAAkB,eA4DzBC,IAAsB,oBAAI,IAAI,CAAC,UAAU,CAAC;AAGzC,SAASC,EAAYC,IAAe,QAAQ,OAA0C;AAC3F,SAAO;AAAA,IACL,MAAMC,EAAKC,EAAS,QAAW,EAAE,QAAQ,GAAA,CAAO,GAAGL,CAAe;AAAA,IAClE,SAASI,EAAKE,EAAgBH,CAAI,GAAGH,CAAe;AAAA,EAAA;AAExD;AAGO,SAASO,EAAeJ,IAAe,QAAQ,OAAmB;AACvE,QAAMK,IAAQN,EAAYC,CAAI;AAC9B,SAAOM,EAAgBC,EAAeF,EAAM,IAAI,KAAK,IAAIE,EAAeF,EAAM,OAAO,KAAK,EAAE;AAC9F;AAGO,SAASC,EAAgBN,GAAkBQ,GAAkC;AAClF,QAAMC,IAAwC,CAAA;AAC9C,aAAWvB,KAAWL;AACpB,IAAA4B,EAAOvB,EAAQ,IAAI,IAAI;AAAA,MACrB,GAAIc,EAAmDd,EAAQ,IAAI;AAAA,MACnE,GAAIsB,EAAuDtB,EAAQ,IAAI;AAAA,IAAA;AAG3E,SAAOuB;AACT;AAMO,SAASF,EAAeG,GAAsC;AACnE,MAAIC;AACJ,MAAI;AACF,IAAAA,IAAOC,EAAaF,GAAM,MAAM;AAAA,EAClC,QAAQ;AACN;AAAA,EACF;AACA,MAAIlB;AACJ,MAAI;AACF,IAAAA,IAAM,KAAK,MAAMmB,CAAI;AAAA,EACvB,SAASE,GAAO;AACd,UAAM,IAAI;AAAA,MACR,mBAAmBH,CAAI,KAAKG,aAAiB,QAAQA,EAAM,UAAU,OAAOA,CAAK,CAAC;AAAA,IAAA;AAAA,EAEtF;AACA,SAAOC,EAAetB,GAAKkB,CAAI;AACjC;AAGA,SAASI,EAAetB,GAAckB,GAA0B;AAC9D,QAAMK,IAAOC,EAAUxB,GAAKkB,GAAM,eAAe,GAC3CO,IAAgBpC,EAAgB,IAAI,CAACqC,MAAMA,EAAE,IAAI;AACvD,aAAWC,KAAO,OAAO,KAAKJ,CAAI;AAGhC,QAAI,EAAAE,EAAc,SAASE,CAAG,KAAKrB,EAAoB,IAAIqB,CAAG;AAG9D,YAAM,IAAI;AAAA,QACR,gBAAgBA,CAAG,yBAAyBT,CAAI,kBAAkBO,EAAc,KAAK,IAAI,CAAC;AAAA,MAAA;AAI9F,QAAMG,IAAwC,CAAA;AAC9C,aAAWlC,KAAWL,GAAiB;AACrC,QAAIkC,EAAK7B,EAAQ,IAAI,MAAM;AACzB;AAEF,UAAMmC,IAASL,EAAUD,EAAK7B,EAAQ,IAAI,GAAGwB,GAAM,IAAIxB,EAAQ,IAAI,GAAG;AACtE,IAAAoC;AAAA,MACED;AAAA,MACAnC,EAAQ,OAAO,IAAI,CAACqC,MAAMA,EAAE,GAAG;AAAA,MAC/Bb;AAAA,MACA,IAAIxB,EAAQ,IAAI;AAAA,IAAA;AAIlB,UAAMsC,IAAqB,CAAA;AAC3B,eAAWrC,KAASD,EAAQ,QAAQ;AAClC,YAAMJ,IAAQuC,EAAOlC,EAAM,GAAG;AAC9B,UAAIL,MAAU;AACZ;AAEF,YAAM2C,IAAO,GAAGvC,EAAQ,IAAI,IAAIC,EAAM,GAAG,IACnCuC,IAAOtC,EAAiBD,CAAK;AACnC,UAAI,OAAOL,MAAU4C;AACnB,cAAM,IAAI,MAAM,cAAcA,CAAI,QAAQD,CAAI,OAAOf,CAAI,EAAE;AAE7D,YAAMjB,IAASJ,EAAcF,GAAOL,CAAoB;AACxD,UAAIW;AACF,cAAM,IAAI;AAAA,UACR,WAAWgC,CAAI,IAAI/B,EAAkBZ,CAAoB,CAAC,OAAO4B,CAAI,MAAMjB,CAAM;AAAA,QAAA;AAGrF,MAAA+B,EAAIrC,EAAM,GAAG,IAAIL;AAAA,IACnB;AACA,IAAAsC,EAAOlC,EAAQ,IAAI,IAAIsC;AAAA,EACzB;AACA,SAAOJ;AACT;AASO,SAASO,EAAiBC,GAA8C;AAC7E,SAAOC,EAAiB9B,IAAc,MAAM6B,CAAM;AACpD;AAOO,SAASC,EAAiBnB,GAAckB,GAA8C;AAC3F,QAAMR,IAASb,EAAeG,CAAI,KAAK,CAAA;AACvC,SAAAkB,EAAOR,CAAM,GACbU,EAAUC,EAAQrB,CAAI,GAAG,EAAE,WAAW,IAAM,GAC5CsB,EAActB,GAAM,GAAG,KAAK,UAAUU,GAAQ,MAAM,CAAC,CAAC;AAAA,CAAI,GACnDV;AACT;AAEA,SAASM,EAAUlC,GAAgB4B,GAAcuB,GAAwC;AACvF,MAAI,OAAOnD,KAAU,YAAYA,MAAU,QAAQ,MAAM,QAAQA,CAAK;AACpE,UAAM,IAAI,MAAM,yBAAyBmD,CAAK,OAAOvB,CAAI,EAAE;AAE7D,SAAO5B;AACT;AAEA,SAASwC,EACPpC,GACAgD,GACAxB,GACAuB,GACM;AACN,aAAWd,KAAO,OAAO,KAAKjC,CAAO;AACnC,QAAI,CAACgD,EAAM,SAASf,CAAG;AACrB,YAAM,IAAI;AAAA,QACR,gBAAgBA,CAAG,QAAQc,CAAK,OAAOvB,CAAI,kBAAkBwB,EAAM,KAAK,IAAI,CAAC;AAAA,MAAA;AAIrF;"}

package/dist/index.d.ts

@@ -2,15 +2,13 @@
  * ai ui frontends
  *
  * The `aiui` CLI's library surface. Launch *policy* the CLI applies lives here
- * too, so sibling supervisors can reuse it instead of re-deriving it — the
- * first case is {@link resolveSidecars}, the `aiui claude` logic deciding
- * which session sidecars (e.g. the paint stream) a channel server should host for a
- * project root. The workbench imports it to give its debug channel the same
- * sidecar set a real session would get.
+ * too, so sibling supervisors can reuse it instead of re-deriving it — e.g. the
+ * layered config loader below, so a debug-channel supervisor binds the channel
+ * the same way a real `aiui claude` launch would.
  *
  * @packageDocumentation
  */
-export { type ResolveSidecarsDeps, resolveSidecars, type SidecarDescriptor, } from "./util/sidecars";
+export { type AiuiConfig, loadAiuiConfig } from "./util/config";
 /** The published package name — handy for smoke tests. */
 export declare const name = "@habemus-papadum/aiui";
 /** Greet someone. Replace with your library's real API. */

package/dist/index.js

@@ -1,11 +1,11 @@
-import { r as n } from "./sidecars-BKlhUA0V.js";
-const r = "@habemus-papadum/aiui";
+import { l as r } from "./config-Cis6kCik.js";
+const o = "@habemus-papadum/aiui";
 function a(e) {
   return `Hello, ${e}!`;
 }
 export {
   a as greet,
-  r as name,
-  n as resolveSidecars
+  r as loadAiuiConfig,
+  o as name
 };
 //# sourceMappingURL=index.js.map