@habemus-papadum/aiui 0.3.0 → 0.6.0

package/dist/cli.js

@@ -1,302 +1,143 @@
 #!/usr/bin/env node
-import { Command as gt } from "commander";
-import { join as f, dirname as R, resolve as P, delimiter as bt, relative as yt } from "node:path";
-import { CHROME_CHANNELS as vt, cacheDir as Y, packageRoot as L, runningFromSource as kt, isCi as ue, discoverSessionBrowser as F, openInSessionBrowser as H, sessionBrowserBinary as Fe, launchSessionBrowser as Ve, decideBrowserAction as Ct } from "@habemus-papadum/aiui-util";
-import { execa as k } from "execa";
-import { readFileSync as U, mkdirSync as W, writeFileSync as q, existsSync as v, realpathSync as He, readdirSync as G, accessSync as $t, constants as xt, rmSync as Tt, lstatSync as Pt, cpSync as Et, renameSync as Dt } from "node:fs";
-import { detectBrowserPlatform as Ke, resolveBuildId as Ye, Browser as I, getInstalledBrowsers as We, install as It, uninstall as St } from "@puppeteer/browsers";
-import { projectCacheDir as de, listMcpServers as J, selectMcpServer as qe } from "@habemus-papadum/aiui-claude-channel";
-import { createInterface as Ot } from "node:readline/promises";
+import { Command as yt } from "commander";
+import { join as h, resolve as x, dirname as Oe, delimiter as vt } from "node:path";
+import { packageRoot as K, runningFromSource as $t, isCi as ce, cacheDir as Y, discoverSessionBrowser as U, openInSessionBrowser as H, sessionBrowserBinary as Ue, launchSessionBrowser as Me, decideBrowserAction as kt } from "@habemus-papadum/aiui-util";
+import { execa as E } from "execa";
+import { readFileSync as M, existsSync as v, writeFileSync as W, realpathSync as Ct, mkdirSync as z, readdirSync as q, chmodSync as xt, accessSync as It, constants as Et, rmSync as Pt, lstatSync as Dt } from "node:fs";
+import { projectCacheDir as Le, listMcpServers as L, selectMcpServer as Be, agentsByPid as Re, listClaudeAgents as He } from "@habemus-papadum/aiui-claude-channel";
+import { r as B, D as St, M as Fe, u as N, l as P, a as le, C as $e, m as Tt, d as oe, p as re, c as At, b as ie, e as Ve, f as I, g as Ge, h as Nt } from "./config-xLcoLiLT.js";
 import l from "chalk";
-import { spawn as jt } from "node:child_process";
-import { r as Ut } from "./sidecars-BKlhUA0V.js";
-import { homedir as At, networkInterfaces as Nt } from "node:os";
-import { Separator as ie, select as K, input as _t } from "@inquirer/prompts";
-import { fileURLToPath as Ge } from "node:url";
-import { aiuiDevOverlay as Rt } from "@habemus-papadum/aiui-dev-overlay/vite";
-import { createServer as Lt } from "vite";
-const Mt = ["prompt", "auto", "off"], Bt = ["attach", "launch"], se = ["loopback", "host"], M = [
-  {
-    name: "claude",
-    summary: "how `aiui claude` launches Claude Code",
-    fields: [
-      {
-        key: "skipPermissions",
-        type: "boolean",
-        default: !0,
-        defaultText: "true (unset: the first interactive launch asks, then persists the answer)",
-        summary: "Launch Claude Code with --dangerously-skip-permissions.",
-        doc: "A personal preference with real consequences (docs/guide/warning): every agent action — shell commands, file writes, network, the browser — runs without asking first. aiui works fine either way. The first interactive launch asks and persists the answer at the user level; when unset, non-interactive sessions fall back to true."
-      },
-      {
-        key: "enterNudge",
-        type: "boolean",
-        default: !0,
-        defaultText: "true (unset: the first interactive launch asks, then persists the answer)",
-        summary: "Auto-dismiss Claude Code's development-channel acknowledgement prompt.",
-        doc: "aiui loads a custom development channel, so Claude Code shows a one-key acknowledgement at every startup; this injects a single Enter keystroke into the terminal to dismiss it (best-effort TIOCSTI on /dev/tty — platforms that forbid it harmlessly do nothing). Saying no just means pressing Enter yourself each launch."
-      }
-    ]
-  },
-  {
-    name: "channel",
-    summary: "the channel server's web backend",
-    fields: [
-      {
-        key: "bind",
-        type: "enum",
-        values: se,
-        default: "loopback",
-        defaultText: '"loopback" (unset: the first interactive launch asks, then persists the answer)',
-        summary: "Which interface the channel web server binds: loopback, or host (LAN).",
-        doc: '"host" (0.0.0.0) makes the session\'s whole web surface — the iPad paint page, but also prompt injection, /debug, and every sidecar — reachable by anyone on your network, UNAUTHENTICATED. That is the trusted-LAN posture (docs/guide/warning): right on a network that is yours alone, wrong on shared Wi-Fi. "loopback" keeps everything this-machine-only; reaching the paint page from an iPad is then up to you — tunnel the channel port however you like (Tailscale, `ssh -L`). The first interactive launch asks and persists the answer at the user level. Per-launch flag: --aiui-bind.'
-      }
-    ]
-  },
-  {
-    name: "sidecars",
-    summary: "which session sidecars `aiui claude` asks the channel to host",
-    fields: [
-      {
-        key: "paint",
-        type: "boolean",
-        default: !0,
-        summary: "Host the iPad paint sidecar (on the channel's own port).",
-        doc: "The iPad paint stream (docs/guide/paint-stream) rides the channel's one port — no extra process, no extra listener — so it is on by default; false turns it off. Whether an iPad can actually reach it is channel.bind's call (host, or a tunnel you own). Per-launch flags win: --aiui-sidecar paint / --aiui-no-sidecar paint. `aiui paint url` prints the URL to open on the iPad."
-      }
-    ]
-  },
-  {
-    name: "chrome",
-    summary: "the agent's browser and the Chrome DevTools MCP",
-    fields: [
-      {
-        key: "enabled",
-        type: "boolean",
-        default: !0,
-        summary: "Attach the Chrome DevTools MCP.",
-        doc: "false turns it off everywhere; true restates the default and does NOT override the CI default-off — only the --aiui-chrome flag forces it on under CI."
-      },
-      {
-        key: "mode",
-        type: "enum",
-        values: Bt,
-        default: "attach",
-        summary: "How the MCP reaches a browser: shared session browser, or its own.",
-        doc: `"attach" shares a user-visible session browser: an already-running one is discovered by profile, or an interactive launch starts one eagerly. "launch" is the hands-off mode: chrome-devtools-mcp launches its own private browser lazily, on the agent's first browser tool call.`
-      },
-      {
-        key: "browserUrl",
-        type: "string",
-        defaultText: "unset (manage a browser locally)",
-        summary: "Attach to this DevTools endpoint instead of managing a browser at all.",
-        doc: 'The remote-development key (docs/guide/remote): the browser runs on another machine (started there with `aiui browser`) and its debug port is tunneled over. Setting it implies mode: "attach" and makes every local-browser setting (profile, executablePath, channel, forTesting…) irrelevant. Per-launch flag: --aiui-browser-url.',
-        validate: (e) => Ft(String(e)) ? void 0 : 'expected an http(s) URL like "http://127.0.0.1:9222"'
-      },
-      {
-        key: "debugPort",
-        type: "number",
-        default: 0,
-        defaultText: "0 (an OS-assigned free port)",
-        summary: "Fixed DevTools debug port for session browsers aiui launches.",
-        doc: "Pin it (e.g. 9222) when something external must find the port — an ssh tunnel, a VS Code attach-to-Chrome launch config. 0 means an OS-assigned free port.",
-        validate: (e) => Number.isInteger(e) && e >= 0 && e <= 65535 ? void 0 : "expected 0..65535"
-      },
-      {
-        key: "profile",
-        type: "string",
-        default: "default",
-        summary: "Named profile under .aiui-cache/chrome/.",
-        doc: "Per-launch flag: --aiui-chrome-profile."
-      },
-      {
-        key: "dataDir",
-        type: "string",
-        defaultText: "unset (derived from chrome.profile)",
-        summary: "Explicit Chrome user data dir; takes precedence over chrome.profile.",
-        doc: "Per-launch flag: --aiui-chrome-data-dir."
-      },
-      {
-        key: "executablePath",
-        type: "string",
-        defaultText: "unset (managed Chrome for Testing when installed, else installed Chrome)",
-        summary: "Chrome binary to launch — e.g. a Chrome for Testing install.",
-        doc: "Chrome for Testing still honors --load-extension, so the aiui DevTools panel can auto-load. Mutually exclusive with chrome.channel."
-      },
-      {
-        key: "channel",
-        type: "enum",
-        values: vt,
-        defaultText: 'unset ("stable" when launching an installed Chrome)',
-        summary: "Installed Chrome release channel to launch.",
-        doc: "Mutually exclusive with chrome.executablePath."
-      },
-      {
-        key: "forTesting",
-        type: "enum",
-        values: Mt,
-        default: "prompt",
-        summary: "How `aiui claude` manages the recommended Chrome for Testing install.",
-        doc: '"prompt" asks before installing or updating it — interactive sessions only, never under CI; "auto" installs/updates without asking; "off" never checks. Prompt answers ("automatically", "never ask again") persist here at the user level. Skipped entirely when executablePath or channel picks a browser explicitly.'
-      },
-      {
-        key: "headless",
-        type: "boolean",
-        default: !1,
-        summary: "Launch Chrome with no UI."
-      },
-      {
-        key: "buildExtension",
-        type: "boolean",
-        default: !0,
-        summary: "Rebuild the aiui-devtools-extension whenever a browser starts in a dev checkout.",
-        doc: "~0.3s of tsc so the auto-loaded DevTools panel is never stale. Only relevant in a dev checkout of pdum_aiui."
-      }
-    ]
+import { detectBrowserPlatform as Ke, resolveBuildId as Ye, Browser as ke, getInstalledBrowsers as We, install as _t, uninstall as jt } from "@puppeteer/browsers";
+import { createInterface as Ot } from "node:readline/promises";
+import { homedir as ue, networkInterfaces as ze } from "node:os";
+import { Separator as se, select as _, input as Ut } from "@inquirer/prompts";
+function J(e, t) {
+  const n = K(e), o = JSON.parse(M(h(n, "package.json"), "utf8")), r = typeof o.bin == "string" ? o.bin : Mt(o.bin);
+  if (!r)
+    throw new Error(
+      `package ${e} declares no bin`
+    );
+  if ($t(n)) {
+    const i = r.replace(/^\.?\/?dist\//, "src/").replace(/\.js$/, ".ts");
+    return { command: process.execPath, args: ["--import", "tsx", x(n, i)] };
   }
-];
-function Je() {
-  return M.flatMap(
-    (e) => e.fields.map((t) => ({ section: e, field: t, path: `${e.name}.${t.key}` }))
-  );
+  return { command: process.execPath, args: [x(n, r)] };
 }
-function ze(e) {
-  return e.type === "enum" ? "string" : e.type;
-}
-function Xe(e, t) {
-  var n;
-  return e.type === "enum" && !(e.values ?? []).includes(String(t)) ? `expected one of: ${(e.values ?? []).join(", ")}` : (n = e.validate) == null ? void 0 : n.call(e, t);
+function Mt(e) {
+  return e ? Object.values(e)[0] : void 0;
 }
-function ae(e, t) {
-  let n;
-  switch (ze(e)) {
-    case "boolean": {
-      if (t !== "true" && t !== "false")
-        return { error: "expected true or false" };
-      n = t === "true";
-      break;
-    }
-    case "number": {
-      if (n = Number(t), t.trim() === "" || Number.isNaN(n))
-        return { error: "expected a number" };
-      break;
-    }
-    default:
-      n = t;
-  }
-  const o = Xe(e, n);
-  return o ? { error: o } : { value: n };
+function y(e, t) {
+  console.error(`${l.bgRed.white.bold(" ERROR ")} ${l.red.bold(e)}`), t && console.error(l.dim(t));
 }
-function $(e) {
-  return typeof e == "string" ? JSON.stringify(e) : String(e);
+function C(e, t) {
+  console.error(`${l.bgYellow.black.bold(" WARN ")} ${l.yellow.bold(e)}`), t && console.error(l.dim(t));
 }
-function ce(e) {
-  return e.defaultText ? e.defaultText : e.default === void 0 ? "unset" : $(e.default);
+function g(e, t) {
+  console.error(`${l.bgCyan.black.bold(" NOTE ")} ${l.cyan(e)}`), t && console.error(l.dim(t));
 }
-function Ft(e) {
-  try {
-    const t = new URL(e);
-    return t.protocol === "http:" || t.protocol === "https:";
-  } catch {
-    return !1;
-  }
+const Lt = "chrome-devtools", Bt = "@habemus-papadum/aiui-intent-client", Rt = "default", Ht = /^[A-Za-z0-9][A-Za-z0-9._-]*$/;
+function qe(e, t = {}, n = process.env) {
+  return e.noChrome ? !1 : e.chrome ? !0 : t.enabled === !1 ? !1 : !ce(n);
 }
-const Ee = "config.json";
-function he(e = process.cwd()) {
+function T(e, t = {}, n = process.cwd()) {
+  if (t.executablePath && t.channel)
+    throw new Error(
+      "config sets both chrome.executablePath and chrome.channel — they pick the browser two different ways; keep exactly one"
+    );
+  const o = e.chromeProfile !== void 0 || e.chromeDataDir !== void 0, r = e.chromeDataDir ?? (o ? void 0 : t.dataDir), i = e.chromeProfile ?? (o ? void 0 : t.profile), s = Ft(t);
   return {
-    user: f(Y(void 0, { create: !1 }), Ee),
-    project: f(de(e), Ee)
+    userDataDir: Gt({ dataDir: r, profile: i, variant: s }, n),
+    variant: s,
+    // A configured endpoint means the browser is managed elsewhere (usually
+    // another machine) — that's always attach, whatever `mode` says.
+    mode: t.browserUrl ? "attach" : t.mode ?? "attach",
+    browserUrl: t.browserUrl,
+    debugPort: t.debugPort ?? 0,
+    executablePath: t.executablePath && x(n, t.executablePath),
+    channel: t.channel,
+    headless: t.headless ?? !1
   };
 }
-function V(e = process.cwd()) {
-  const t = he(e);
-  return Qe(O(t.user) ?? {}, O(t.project) ?? {});
+function Ft(e) {
+  return e.channel ? `chrome-${e.channel}` : e.executablePath ? `custom-${Vt(e.executablePath)}` : B(e);
 }
-function Qe(e, t) {
-  const n = {};
-  for (const o of M)
-    n[o.name] = {
-      ...e[o.name],
-      ...t[o.name]
-    };
-  return n;
+function Vt(e) {
+  let t = 5381;
+  for (let n = 0; n < e.length; n++)
+    t = (t * 33 ^ e.charCodeAt(n)) >>> 0;
+  return t.toString(36);
 }
-function O(e) {
-  let t;
+function Gt(e, t = process.cwd()) {
+  if (e.dataDir)
+    return x(t, e.dataDir);
+  const n = e.profile ?? Rt;
+  if (!Ht.test(n))
+    throw new Error(
+      `invalid chrome profile name "${n}" — use letters, digits, ".", "_", "-" (or --aiui-chrome-data-dir for an arbitrary path)`
+    );
+  const o = e.variant ?? St;
+  return h(Le(t), "chrome", o, n);
+}
+const Kt = "dist-ext";
+function Yt() {
   try {
-    t = U(e, "utf8");
+    const e = Ct(K(Bt));
+    return { root: e, outDir: h(e, Kt) };
   } catch {
     return;
   }
-  let n;
-  try {
-    n = JSON.parse(t);
-  } catch (o) {
-    throw new Error(
-      `invalid JSON in ${e}: ${o instanceof Error ? o.message : String(o)}`
-    );
-  }
-  return Vt(n, e);
 }
-function Vt(e, t) {
-  const n = De(e, t, "the top level");
-  Ie(
-    n,
-    M.map((r) => r.name),
-    t,
-    "the top level"
+function Wt(e) {
+  return e === void 0 ? { state: "absent" } : v(h(e.outDir, "manifest.json")) ? { state: "ready", dir: e.outDir } : { state: "unbuilt", root: e.root };
+}
+function j() {
+  return Wt(Yt());
+}
+function Je(e) {
+  e.state === "unbuilt" && g(
+    "the aiui intent client has no MV3 bundle yet, so this launch won't load it",
+    `Build it once:  pnpm -C packages/aiui-intent-client build:ext
+then relaunch — or load it into the RUNNING browser:
+  pnpm -C packages/aiui-intent-client ext`
   );
-  const o = {};
-  for (const r of M) {
-    if (n[r.name] === void 0)
-      continue;
-    const i = De(n[r.name], t, `"${r.name}"`);
-    Ie(
-      i,
-      r.fields.map((a) => a.key),
-      t,
-      `"${r.name}"`
+}
+function Xe(e, t) {
+  if (!t.length || e.executablePath)
+    return;
+  const n = h(e.userDataDir, "aiui-extension-autoload-hint");
+  if (!v(n)) {
+    g(
+      "the aiui intent client can't auto-load into regular Chrome (≥ 137 ignores --load-extension)",
+      `Load it once in the launched Chrome — chrome://extensions → Developer mode → Load unpacked →
+${t.join(`
+`)}
+— and this profile remembers it. Or use the managed browser (\`aiui chrome install\`),
+which auto-loads it. This note won't repeat for this profile.`
     );
-    const s = {};
-    for (const a of r.fields) {
-      const c = i[a.key];
-      if (c === void 0)
-        continue;
-      const d = `${r.name}.${a.key}`, p = ze(a);
-      if (typeof c !== p)
-        throw new Error(`expected a ${p} for ${d} in ${t}`);
-      const h = Xe(a, c);
-      if (h)
-        throw new Error(
-          `invalid ${d} ${$(c)} in ${t} — ${h}`
-        );
-      s[a.key] = c;
+    try {
+      W(n, `${(/* @__PURE__ */ new Date()).toISOString()}
+`);
+    } catch {
     }
-    o[r.name] = s;
   }
-  return o;
-}
-function B(e) {
-  return fe(he().user, e);
-}
-function fe(e, t) {
-  const n = O(e) ?? {};
-  return t(n), W(R(e), { recursive: !0 }), q(e, `${JSON.stringify(n, null, 2)}
-`), e;
 }
-function De(e, t, n) {
-  if (typeof e != "object" || e === null || Array.isArray(e))
-    throw new Error(`expected an object at ${n} of ${t}`);
-  return e;
+function te(e) {
+  return {
+    command: "npx",
+    args: ["-y", "chrome-devtools-mcp@latest", "--browser-url", e]
+  };
 }
-function Ie(e, t, n, o) {
-  for (const r of Object.keys(e))
-    if (!t.includes(r))
-      throw new Error(
-        `unknown key "${r}" at ${o} of ${n} — known keys: ${t.join(", ")}`
-      );
+function zt(e, t = []) {
+  const n = [
+    "-y",
+    "chrome-devtools-mcp@latest",
+    "--userDataDir",
+    e.userDataDir,
+    "--ignoreDefaultChromeArg=--disable-extensions"
+  ];
+  return e.executablePath && n.push("--executablePath", e.executablePath), e.channel && n.push("--channel", e.channel), e.headless && n.push("--headless"), t.length && n.push(`--chromeArg=--load-extension=${t.join(",")}`), { command: "npx", args: n };
 }
-async function z(e, t, n) {
+async function X(e, t, n) {
   const o = Ot({ input: process.stdin, output: process.stderr });
   try {
     const r = t.map(
@@ -312,41 +153,60 @@ ${r}
           return n;
         continue;
       }
-      const a = t.find((c) => c.key === s) ?? t.find((c) => c.label.toLowerCase().startsWith(s));
-      if (a)
-        return a.key;
+      const c = t.find((a) => a.key === s) ?? t.find((a) => a.label.toLowerCase().startsWith(s));
+      if (c)
+        return c.key;
     }
   } finally {
     o.close();
   }
 }
-function g(e, t) {
-  console.error(`${l.bgRed.white.bold(" ERROR ")} ${l.red.bold(e)}`), t && console.error(l.dim(t));
-}
-function T(e, t) {
-  console.error(`${l.bgYellow.black.bold(" WARN ")} ${l.yellow.bold(e)}`), t && console.error(l.dim(t));
-}
-function y(e, t) {
-  console.error(`${l.bgCyan.black.bold(" NOTE ")} ${l.cyan(e)}`), t && console.error(l.dim(t));
-}
-const Ze = 1440 * 60 * 1e3, Ht = 4e3;
-function A(e = !0) {
-  return Y("chrome", { create: e });
-}
-const et = "update-state.json";
-function X() {
+const Ze = 1440 * 60 * 1e3, qt = 4e3, Jt = {
+  chromium: {
+    flavor: "chromium",
+    browser: ke.CHROMIUM,
+    latestTag: "latest",
+    displayName: "Chromium",
+    cacheSubdir: "chromium",
+    approxSizeMb: 150
+  },
+  "chrome-for-testing": {
+    flavor: "chrome-for-testing",
+    browser: ke.CHROME,
+    latestTag: "stable",
+    displayName: "Chrome for Testing",
+    cacheSubdir: "chrome",
+    approxSizeMb: 160
+  }
+};
+function k(e) {
+  return Jt[e];
+}
+function A(e, t = !0) {
+  return Y(k(e).cacheSubdir, { create: t });
+}
+function Xt(e = !1) {
+  return Fe.map((t) => A(t, e));
+}
+const Qe = "update-state.json";
+function Z(e) {
   try {
-    return JSON.parse(U(f(A(!1), et), "utf8"));
+    return JSON.parse(
+      M(h(A(e, !1), Qe), "utf8")
+    );
   } catch {
     return {};
   }
 }
-function Q(e) {
-  const t = A();
-  W(t, { recursive: !0 }), q(f(t, et), `${JSON.stringify({ ...X(), ...e })}
-`);
+function Q(e, t) {
+  const n = A(e);
+  z(n, { recursive: !0 }), W(
+    h(n, Qe),
+    `${JSON.stringify({ ...Z(e), ...t })}
+`
+  );
 }
-function pe(e, t) {
+function de(e, t) {
   const n = e.split(".").map(Number), o = t.split(".").map(Number);
   for (let r = 0; r < Math.max(n.length, o.length); r++) {
     const i = (n[r] ?? 0) - (o[r] ?? 0);
@@ -355,133 +215,134 @@ function pe(e, t) {
   }
   return 0;
 }
-async function me() {
-  const e = A(!1);
-  if (!v(e))
+async function F(e) {
+  const t = k(e), n = A(e, !1);
+  if (!v(n))
     return;
-  const o = (await We({ cacheDir: e })).filter((r) => r.browser === I.CHROME).sort((r, i) => pe(r.buildId, i.buildId)).at(-1);
-  return o && { buildId: o.buildId, executablePath: o.executablePath };
-}
-async function we(e = {}) {
-  const { maxAgeMs: t = Ze, timeoutMs: n = Ht, now: o = Date.now() } = e, r = X();
-  if (r.latestBuildId && r.checkedAt && o - r.checkedAt < t)
-    return r.latestBuildId;
-  const i = Ke();
-  if (i)
+  const r = (await We({ cacheDir: n })).filter((i) => i.browser === t.browser).sort((i, s) => de(i.buildId, s.buildId)).at(-1);
+  return r && { flavor: e, buildId: r.buildId, executablePath: r.executablePath };
+}
+async function he(e, t = {}) {
+  const { maxAgeMs: n = Ze, timeoutMs: o = qt, now: r = Date.now() } = t, i = Z(e);
+  if (i.latestBuildId && i.checkedAt && r - i.checkedAt < n)
+    return i.latestBuildId;
+  const s = Ke();
+  if (s)
     try {
-      const s = await qt(
-        Ye(I.CHROME, i, "stable"),
-        n
+      const c = k(e), a = await tn(
+        Ye(c.browser, s, c.latestTag),
+        o
       );
-      return Q({ checkedAt: o, latestBuildId: s }), s;
+      return Q(e, { checkedAt: r, latestBuildId: a }), a;
     } catch {
-      return r.latestBuildId;
+      return i.latestBuildId;
     }
 }
-async function S(e) {
-  const t = A(), n = await It({
-    browser: I.CHROME,
-    buildId: e,
-    cacheDir: t,
+async function D(e, t) {
+  const n = k(e), o = A(e), r = await _t({
+    browser: n.browser,
+    buildId: t,
+    cacheDir: o,
     downloadProgressCallback: "default"
-  }), o = (await We({ cacheDir: t })).filter(
-    (r) => r.browser === I.CHROME && r.buildId !== e
+  }), i = (await We({ cacheDir: o })).filter(
+    (s) => s.browser === n.browser && s.buildId !== t
   );
-  for (const r of o)
-    await St({ browser: I.CHROME, buildId: r.buildId, cacheDir: t });
-  return { buildId: e, executablePath: n.executablePath };
-}
-async function Kt(e) {
-  const t = Ke();
-  if (!t)
-    throw new Error("could not detect a supported platform for Chrome for Testing");
-  const n = await Ye(I.CHROME, t, "stable");
-  Q({ checkedAt: Date.now(), latestBuildId: n });
-  const o = await me();
-  if (o && pe(o.buildId, n) >= 0)
-    return e(`Chrome for Testing ${o.buildId} is up to date`), { ...o, outcome: "current" };
-  e(
-    o ? `updating Chrome for Testing ${o.buildId} → ${n}…` : `installing Chrome for Testing ${n}…`
+  for (const s of i)
+    await jt({ browser: n.browser, buildId: s.buildId, cacheDir: o });
+  return { flavor: e, buildId: t, executablePath: r.executablePath };
+}
+async function Zt(e, t) {
+  const n = k(e), o = Ke();
+  if (!o)
+    throw new Error(`could not detect a supported platform for ${n.displayName}`);
+  const r = await Ye(n.browser, o, n.latestTag);
+  Q(e, { checkedAt: Date.now(), latestBuildId: r });
+  const i = await F(e);
+  if (i && de(i.buildId, r) >= 0)
+    return t(`${n.displayName} ${i.buildId} is up to date`), { ...i, outcome: "current" };
+  t(
+    i ? `updating ${n.displayName} ${i.buildId} → ${r}…` : `installing ${n.displayName} ${r}…`
   );
-  const r = await S(n);
-  return e(`Chrome for Testing ${n} installed at ${r.executablePath}`), { ...r, outcome: o ? "updated" : "installed" };
+  const s = await D(e, r);
+  return t(`${n.displayName} ${r} installed at ${s.executablePath}`), { ...s, outcome: i ? "updated" : "installed" };
 }
-async function tt(e) {
-  const { mode: t, interactive: n, now: o = Date.now() } = e, r = await me();
-  if (t === "off" || !n)
-    return r == null ? void 0 : r.executablePath;
-  if (!r)
-    return Yt(t, o);
-  const i = await we({ now: o });
-  return !i || pe(i, r.buildId) <= 0 ? r.executablePath : Wt(t, r, i);
+async function et(e) {
+  const { flavor: t, mode: n, interactive: o, now: r = Date.now() } = e, i = await F(t);
+  if (n === "off" || !o)
+    return i == null ? void 0 : i.executablePath;
+  if (!i)
+    return Qt(t, n, r);
+  const s = await he(t, { now: r });
+  return !s || de(s, i.buildId) <= 0 ? i.executablePath : en(t, n, i, s);
 }
-async function Yt(e, t) {
-  const n = await we({ now: t });
-  if (!n)
+async function Qt(e, t, n) {
+  const o = k(e), r = await he(e, { now: n });
+  if (!r)
     return;
-  if (e === "auto")
-    return y(`installing Chrome for Testing ${n} (chrome.forTesting: "auto")…`), (await S(n)).executablePath;
-  const o = X();
-  if (o.installDeclinedAt && t - o.installDeclinedAt < Ze)
+  if (t === "auto")
+    return g(`installing ${o.displayName} ${r} (chrome.manage: "auto")…`), (await D(e, r)).executablePath;
+  const i = Z(e);
+  if (i.installDeclinedAt && n - i.installDeclinedAt < Ze)
     return;
-  const r = await z(
-    `Chrome for Testing isn't installed. It's the recommended browser for aiui — version-pinned, separate from your real Chrome, and it auto-loads the aiui DevTools panel (branded Chrome can't). Download ${n} (~160 MB) to ${A(!1)}?`,
+  const s = await X(
+    `${o.displayName} isn't installed. It's the recommended browser for aiui — version-pinned, separate from your real Chrome, and it auto-loads the aiui intent client (branded Chrome can't). Download ${r} (~${o.approxSizeMb} MB) to ${A(e, !1)}?`,
     [
       { key: "y", label: "yes, install it" },
       { key: "n", label: "not now — use the regular Chrome (asks again tomorrow)" },
-      { key: "never", label: 'never — stop offering (writes chrome.forTesting: "off")' }
+      { key: "never", label: 'never — stop offering (writes chrome.manage: "off")' }
     ],
     "y"
   );
-  if (r === "y")
-    return (await S(n)).executablePath;
-  if (r === "never") {
-    const i = B((s) => {
-      s.chrome = { ...s.chrome, forTesting: "off" };
+  if (s === "y")
+    return (await D(e, r)).executablePath;
+  if (s === "never") {
+    const c = N((a) => {
+      a.chrome = { ...a.chrome, manage: "off" };
     });
-    y(`wrote chrome.forTesting: "off" to ${i}`);
+    g(`wrote chrome.manage: "off" to ${c}`);
   } else
-    Q({ installDeclinedAt: t });
-}
-async function Wt(e, t, n) {
-  if (e === "auto")
-    return y(
-      `updating Chrome for Testing ${t.buildId} → ${n} (chrome.forTesting: "auto")…`
-    ), (await S(n)).executablePath;
-  if (X().skippedBuildId === n)
-    return t.executablePath;
-  switch (await z(
-    `Your Chrome for Testing (${t.buildId}) is out of date — latest stable is ${n}. Update?`,
+    Q(e, { installDeclinedAt: n });
+}
+async function en(e, t, n, o) {
+  const r = k(e);
+  if (t === "auto")
+    return g(
+      `updating ${r.displayName} ${n.buildId} → ${o} (chrome.manage: "auto")…`
+    ), (await D(e, o)).executablePath;
+  if (Z(e).skippedBuildId === o)
+    return n.executablePath;
+  switch (await X(
+    `Your ${r.displayName} (${n.buildId}) is out of date — latest is ${o}. Update?`,
     [
       { key: "y", label: "yes, just this once" },
-      { key: "a", label: 'automatically, now and from here on (writes chrome.forTesting: "auto")' },
+      { key: "a", label: 'automatically, now and from here on (writes chrome.manage: "auto")' },
       {
         key: "s",
-        label: `skip ${n} — keep ${t.buildId}, don't ask again for this version`
+        label: `skip ${o} — keep ${n.buildId}, don't ask again for this version`
       },
-      { key: "never", label: 'never ask again (writes chrome.forTesting: "off")' }
+      { key: "never", label: 'never ask again (writes chrome.manage: "off")' }
     ],
     "y"
   )) {
     case "y":
-      return (await S(n)).executablePath;
+      return (await D(e, o)).executablePath;
     case "a": {
-      const r = B((i) => {
-        i.chrome = { ...i.chrome, forTesting: "auto" };
+      const s = N((c) => {
+        c.chrome = { ...c.chrome, manage: "auto" };
       });
-      return y(`wrote chrome.forTesting: "auto" to ${r}`), (await S(n)).executablePath;
+      return g(`wrote chrome.manage: "auto" to ${s}`), (await D(e, o)).executablePath;
     }
     case "never": {
-      const r = B((i) => {
-        i.chrome = { ...i.chrome, forTesting: "off" };
+      const s = N((c) => {
+        c.chrome = { ...c.chrome, manage: "off" };
       });
-      return y(`wrote chrome.forTesting: "off" to ${r}`), t.executablePath;
+      return g(`wrote chrome.manage: "off" to ${s}`), n.executablePath;
     }
     default:
-      return Q({ skippedBuildId: n }), t.executablePath;
+      return Q(e, { skippedBuildId: o }), n.executablePath;
   }
 }
-async function qt(e, t) {
+async function tn(e, t) {
   let n;
   try {
     return await Promise.race([
@@ -494,137 +355,158 @@ async function qt(e, t) {
     clearTimeout(n);
   }
 }
-function ge(e, t) {
-  const n = L(e), o = JSON.parse(U(f(n, "package.json"), "utf8")), r = typeof o.bin == "string" ? o.bin : Gt(o.bin);
-  if (!r)
-    throw new Error(
-      `package ${e} declares no bin`
-    );
-  if (kt(n)) {
-    const i = r.replace(/^\.?\/?dist\//, "src/").replace(/\.js$/, ".ts");
-    return { command: process.execPath, args: ["--import", "tsx", P(n, i)] };
-  }
-  return { command: process.execPath, args: [P(n, r)] };
+const O = "com.habemus_papadum.aiui", fe = "cdpbfpcelmifhagikjlfpgfipggcmdeg";
+function tt(e, t) {
+  if (e === "darwin") {
+    const n = h(t, "Library", "Application Support");
+    return [
+      h(n, "Google", "Chrome", "NativeMessagingHosts"),
+      h(n, "Chromium", "NativeMessagingHosts"),
+      h(n, "Microsoft Edge", "NativeMessagingHosts")
+    ];
+  }
+  if (e === "linux")
+    return [
+      h(t, ".config", "google-chrome", "NativeMessagingHosts"),
+      h(t, ".config", "chromium", "NativeMessagingHosts"),
+      h(t, ".config", "microsoft-edge", "NativeMessagingHosts")
+    ];
+  throw new Error(`aiui extension: unsupported platform ${e} (macOS/Linux only for now)`);
+}
+function nn(e, t, n) {
+  const o = (r) => `"${r.replace(/(["\\$`])/g, "\\$1")}"`;
+  return [
+    "#!/bin/sh",
+    "# aiui native-messaging host wrapper — generated by `aiui extension install-native-host`.",
+    "# Chrome spawns this with a minimal env and cwd /; everything below is absolute.",
+    `cd ${o(e)} || exit 1`,
+    `exec ${[t, ...n].map(o).join(" ")} native-host`,
+    ""
+  ].join(`
+`);
 }
-function Gt(e) {
-  return e ? Object.values(e)[0] : void 0;
+const on = ["install-native-host", "status"];
+async function rn(e, t = {}) {
+  switch (e) {
+    case "install-native-host":
+      an(t);
+      return;
+    case "status":
+      cn();
+      return;
+    case "dev":
+    case "reload":
+      y(
+        `aiui extension ${e} is gone — the frozen aiui-extension was deleted`,
+        `The intent client's extension is a static build:
+  pnpm -C packages/aiui-intent-client ext   (build + load into the session browser)`
+      ), process.exitCode = 1;
+      return;
+    default:
+      throw new Error(`aiui extension: unknown action "${e}" (${on.join(" | ")})`);
+  }
 }
-const Jt = "chrome-devtools", nt = "@habemus-papadum/aiui-devtools-extension", zt = "default", Xt = /^[A-Za-z0-9][A-Za-z0-9._-]*$/;
-function ot(e, t = {}, n = process.env) {
-  return e.noChrome ? !1 : e.chrome ? !0 : t.enabled === !1 ? !1 : !ue(n);
+function nt() {
+  return h(Y("native-host", { create: !0 }), "aiui-native-host.sh");
 }
-function D(e, t = {}, n = process.cwd()) {
-  if (t.executablePath && t.channel)
-    throw new Error(
-      "config sets both chrome.executablePath and chrome.channel — they pick the browser two different ways; keep exactly one"
-    );
-  const o = e.chromeProfile !== void 0 || e.chromeDataDir !== void 0, r = e.chromeDataDir ?? (o ? void 0 : t.dataDir), i = e.chromeProfile ?? (o ? void 0 : t.profile);
-  return {
-    userDataDir: rt({ dataDir: r, profile: i }, n),
-    // A configured endpoint means the browser is managed elsewhere (usually
-    // another machine) — that's always attach, whatever `mode` says.
-    mode: t.browserUrl ? "attach" : t.mode ?? "attach",
-    browserUrl: t.browserUrl,
-    debugPort: t.debugPort ?? 0,
-    executablePath: t.executablePath && P(n, t.executablePath),
-    channel: t.channel,
-    headless: t.headless ?? !1,
-    buildExtension: t.buildExtension ?? !0
+function ot(e) {
+  const t = J("@habemus-papadum/aiui"), n = K("@habemus-papadum/aiui"), o = nt();
+  rt(o, nn(n, t.command, t.args)), xt(o, 493);
+  const r = {
+    name: O,
+    description: "aiui native-messaging host: channel discovery for the aiui intent client",
+    path: o,
+    type: "stdio",
+    // The host answers one question — "which channels are up?" — for the
+    // intent client's cold start. An overridden id rides alongside the stable
+    // one so a custom build never locks the shipped client out.
+    allowed_origins: [
+      .../* @__PURE__ */ new Set([
+        `chrome-extension://${e}/`,
+        `chrome-extension://${fe}/`
+      ])
+    ]
   };
+  return { wrapper: o, body: `${JSON.stringify(r, null, 2)}
+` };
 }
-function rt(e, t = process.cwd()) {
-  if (e.dataDir)
-    return P(t, e.dataDir);
-  const n = e.profile ?? zt;
-  if (!Xt.test(n))
-    throw new Error(
-      `invalid chrome profile name "${n}" — use letters, digits, ".", "_", "-" (or --aiui-chrome-data-dir for an arbitrary path)`
-    );
-  return f(de(t), "chrome", n);
-}
-function Z() {
-  let e;
+function rt(e, t) {
   try {
-    e = He(f(L(nt), "extension"));
+    if (M(e, "utf8") === t)
+      return !1;
   } catch {
-    return;
   }
-  return v(f(e, "js")) ? e : void 0;
+  return W(e, t), !0;
+}
+function sn(e, t = {}) {
+  const { body: n } = ot(t.extensionId ?? fe), o = h(e, "NativeMessagingHosts");
+  z(o, { recursive: !0 }), rt(h(o, `${O}.json`), n);
+}
+function V(e, t, n) {
+  if (t)
+    try {
+      sn(e);
+    } catch (o) {
+      n(
+        "couldn't install the native-messaging host into the browser profile — the intent extension will need a manually typed port",
+        o instanceof Error ? o.message : String(o)
+      );
+    }
 }
-async function be() {
-  let e, t;
+function an(e) {
+  const t = e.extensionId ?? fe, { wrapper: n, body: o } = ot(t);
+  process.stdout.write(`wrote ${n}
+`);
+  for (const r of tt(process.platform, ue())) {
+    z(r, { recursive: !0 });
+    const i = h(r, `${O}.json`);
+    W(i, o), process.stdout.write(`wrote ${i}
+`);
+  }
+  process.stdout.write(
+    `native host installed for extension ${t}.
+No browser restart needed; reload the extension if it was already running.
+(Session browsers launched by aiui get the manifest in their own profile
+automatically — this global install is for browsers aiui does not manage.)
+`
+  );
+}
+function cn() {
+  const e = nt();
+  process.stdout.write(`wrapper: ${e} ${v(e) ? "(present)" : "(MISSING)"}
+`);
+  for (const o of tt(process.platform, ue()))
+    Ce(h(o, `${O}.json`));
+  const t = h(process.cwd(), ".aiui-cache", "chrome");
+  let n = [];
   try {
-    e = He(L(nt)), t = f(L("typescript"), "bin", "tsc");
+    n = q(t, { withFileTypes: !0 }).filter((o) => o.isDirectory()).map((o) => o.name);
   } catch {
-    return;
-  }
-  if (!v(f(e, "src")))
-    return;
-  const n = await k(process.execPath, [t, "-p", f(e, "tsconfig.json")], {
-    cwd: e,
-    reject: !1,
-    all: !0
-  });
-  if (n.exitCode) {
-    T(
-      "aiui-devtools-extension failed to compile — the DevTools panel will be stale or missing",
-      n.all || n.message
-    );
-    return;
   }
-  const o = f(e, "build-debug-ui.mjs");
-  if (!v(o))
-    return;
-  const r = await k(process.execPath, [o], {
-    cwd: e,
-    reject: !1,
-    all: !0
-  });
-  r.exitCode && T(
-    "aiui-devtools-extension debug-ui bundle failed — the Intent pane will be degraded",
-    r.all || r.message
-  );
+  for (const o of n)
+    Ce(h(t, o, "NativeMessagingHosts", `${O}.json`));
 }
-function it(e, t) {
-  if (!t || e.executablePath)
+function Ce(e) {
+  var t;
+  if (!v(e)) {
+    process.stdout.write(`absent:  ${e}
+`);
     return;
-  const n = f(e.userDataDir, "aiui-devtools-extension-hint");
-  if (!v(n)) {
-    y(
-      "the aiui DevTools panel can't auto-load into regular Chrome (≥ 137 ignores --load-extension)",
-      `Load it once in the launched Chrome — chrome://extensions → Developer mode → Load unpacked →
-${t}
-— and this profile remembers it. Or switch to Chrome for Testing (\`aiui chrome install\`),
-which auto-loads it. This note won't repeat for this profile.`
-    );
-    try {
-      q(n, `${(/* @__PURE__ */ new Date()).toISOString()}
+  }
+  try {
+    const n = JSON.parse(M(e, "utf8"));
+    process.stdout.write(`present: ${e} → ${(t = n.allowed_origins) == null ? void 0 : t.join(", ")}
+`);
+  } catch {
+    process.stdout.write(`present: ${e} (unparseable)
 `);
-    } catch {
-    }
   }
 }
-function te(e) {
-  return {
-    command: "npx",
-    args: ["-y", "chrome-devtools-mcp@latest", "--browser-url", e]
-  };
-}
-function Qt(e, t) {
-  const n = [
-    "-y",
-    "chrome-devtools-mcp@latest",
-    "--userDataDir",
-    e.userDataDir,
-    "--ignoreDefaultChromeArg=--disable-extensions"
-  ];
-  return e.executablePath && n.push("--executablePath", e.executablePath), e.channel && n.push("--channel", e.channel), e.headless && n.push("--headless"), t && n.push(`--chromeArg=--load-extension=${t}`), { command: "npx", args: n };
-}
-const Zt = 9222;
-async function en(e) {
-  const n = { ...V().chrome };
+const ln = 9222;
+async function un(e) {
+  const n = { ...P().chrome };
   if (n.browserUrl) {
-    y(
+    g(
       `config pins chrome.browserUrl to ${n.browserUrl} — the browser is managed elsewhere`,
       "Run `aiui browser` on the machine that should host it (and drop browserUrl there)."
     );
@@ -632,86 +514,86 @@ async function en(e) {
   }
   let o, r;
   try {
-    o = Se(e.remotePort, "--remote-port") ?? Zt, r = Se(e.port, "--port");
-  } catch (c) {
-    g(c instanceof Error ? c.message : String(c)), process.exitCode = 1;
+    o = xe(e.remotePort, "--remote-port") ?? ln, r = xe(e.port, "--port");
+  } catch (a) {
+    y(a instanceof Error ? a.message : String(a)), process.exitCode = 1;
     return;
   }
   const i = {
     chromeProfile: e.tunnel ? void 0 : e.profile,
-    chromeDataDir: e.dataDir ?? (e.tunnel ? tn(e.tunnel, e.profile) : void 0)
+    chromeDataDir: e.dataDir ?? (e.tunnel ? dn(e.tunnel, e.profile) : void 0)
   };
-  let s = D(i, n);
+  let s = T(i, n);
   r !== void 0 && (s = { ...s, debugPort: r });
-  let a = await F(s.userDataDir);
-  if (a)
-    Oe("session browser already running", s, a), e.open && (await H(a.browserUrl, e.open), console.log(`opened ${e.open}`));
+  let c = await U(s.userDataDir);
+  if (c)
+    V(
+      s.userDataDir,
+      j().state === "ready",
+      g
+    ), Ie("session browser already running", s, c), e.open && (await H(c.browserUrl, e.open), console.log(`opened ${e.open}`));
   else {
-    const c = !!process.stdin.isTTY && !!process.stdout.isTTY && !ue();
+    const a = !!process.stdin.isTTY && !!process.stdout.isTTY && !ce();
     try {
-      const d = await st({
+      const u = await it({
         flags: i,
         config: n,
-        interactive: c,
+        interactive: a,
         debugPort: r,
         headless: e.headless,
         startUrl: e.open
       });
-      a = d.session, s = d.settings;
-    } catch (d) {
-      g(
+      c = u.session, s = u.settings;
+    } catch (u) {
+      y(
         "the session browser failed to start",
-        d instanceof Error ? d.message : String(d)
+        u instanceof Error ? u.message : String(u)
       ), process.exitCode = 1;
       return;
     }
-    Oe("session browser started", s, a);
+    Ie("session browser started", s, c);
   }
-  e.tunnel ? await rn(e.tunnel, o, a.port) : sn(a, o);
+  e.tunnel ? await pn(e.tunnel, o, c.port) : mn(c, o);
 }
-async function st(e) {
-  let t = e.config ?? {};
-  const n = e.flags ?? {}, o = () => {
-    const c = D(n, t);
-    return e.debugPort === void 0 ? c : { ...c, debugPort: e.debugPort };
-  };
-  let r = o();
-  if (!t.executablePath && !t.channel) {
-    const c = await tt({
-      mode: t.forTesting ?? "prompt",
+async function it(e) {
+  const t = e.config ?? {}, n = e.flags ?? {};
+  let o = T(n, t);
+  if (e.debugPort !== void 0 && (o = { ...o, debugPort: e.debugPort }), !t.executablePath && !t.channel) {
+    const a = await et({
+      flavor: B(t),
+      mode: le(t),
       interactive: e.interactive
     });
-    c && (t = { ...t, executablePath: c }, r = o());
+    a && (o = { ...o, executablePath: a });
   }
-  r.buildExtension && await be();
-  const i = Z();
-  e.interactive && it(r, i);
+  const r = j(), i = r.state === "ready" ? [r.dir] : [];
+  V(o.userDataDir, r.state === "ready", g), e.interactive && (Xe(o, i), Je(r));
   let s;
   try {
-    s = Fe(r);
-  } catch (c) {
+    s = Ue(o);
+  } catch (a) {
     throw new Error(
-      `${c instanceof Error ? c.message : String(c)}
-Install Chrome for Testing with \`aiui chrome install\`, or set chrome.executablePath.`
+      `${a instanceof Error ? a.message : String(a)}
+Install the managed browser with \`aiui chrome install\`, or set chrome.executablePath.`
     );
   }
-  return { session: await Ve({
+  return { session: await Me({
     binary: s,
-    userDataDir: r.userDataDir,
-    debugPort: r.debugPort,
-    extensionDir: i,
-    headless: r.headless || e.headless,
+    userDataDir: o.userDataDir,
+    debugPort: o.debugPort,
+    extensionDirs: i,
+    headless: o.headless || e.headless,
     startUrl: e.startUrl
-  }), settings: r };
+  }), settings: o };
 }
-function tn(e, t) {
-  const n = t ?? nn(e);
-  return f(Y("browser-profiles", { create: !1 }), n);
+function dn(e, t) {
+  const n = t ?? hn(e);
+  return h(Y("browser-profiles", { create: !1 }), n);
 }
-function nn(e) {
+function hn(e) {
   return (e.includes("@") ? e.slice(e.indexOf("@") + 1) : e).replace(/[^A-Za-z0-9._-]/g, "-") || "remote";
 }
-function on(e, t, n) {
+function fn(e, t, n) {
   return [
     // No remote command — the connection exists only to carry the forward...
     "-N",
@@ -724,28 +606,28 @@ function on(e, t, n) {
     e
   ];
 }
-function at(e) {
+function st(e) {
   return `aiui claude --aiui-browser-url http://127.0.0.1:${e}`;
 }
-async function rn(e, t, n) {
+async function pn(e, t, n) {
   console.log(
     `
 tunneling ${e}:${t} → localhost:${n} — on ${e}, run:
 
-  ${at(t)}
+  ${st(t)}
 
 (Ctrl-C closes the tunnel; the browser stays running.)`
   );
-  const o = await k("ssh", on(e, t, n), {
+  const o = await E("ssh", fn(e, t, n), {
     stdio: "inherit",
     reject: !1
   });
-  o.failed && !o.isTerminated && (g(
+  o.failed && !o.isTerminated && (y(
     `the ssh tunnel to ${e} exited (code ${o.exitCode})`,
     "A taken remote port exits immediately (ExitOnForwardFailure) — try another --remote-port. The browser is still running; rerun `aiui browser --tunnel …` to reconnect."
   ), process.exitCode = 1);
 }
-function Se(e, t) {
+function xe(e, t) {
   if (e === void 0)
     return;
   const n = Number(e);
@@ -753,26 +635,26 @@ function Se(e, t) {
     throw new Error(`invalid ${t} ${e} — expected 0..65535`);
   return n;
 }
-function Oe(e, t, n) {
+function Ie(e, t, n) {
   console.log(e), console.log(`  profile:        ${t.userDataDir}`), console.log(`  debug endpoint: ${n.browserUrl}`);
 }
-function sn(e, t) {
+function mn(e, t) {
   console.log(
     `
 An \`aiui claude\` in this profile's project attaches automatically. For a *remote*
 session, rerun with \`--tunnel <[user@]host>\` — or do it by hand:
   ssh -N -o ExitOnForwardFailure=yes -R ${t}:localhost:${e.port} <host>
-then, on the remote: ${at(t)}`
+then, on the remote: ${st(t)}`
   );
 }
-async function an(e, t) {
+async function wn(e, t) {
   var i, s;
-  const n = V(), o = D(
+  const n = P(), o = T(
     { chromeProfile: t.profile, chromeDataDir: t.dataDir },
     n.chrome ?? {}
-  ), r = ((i = n.chrome) == null ? void 0 : i.browserUrl) ?? ((s = await F(o.userDataDir)) == null ? void 0 : s.browserUrl);
+  ), r = ((i = n.chrome) == null ? void 0 : i.browserUrl) ?? ((s = await U(o.userDataDir)) == null ? void 0 : s.browserUrl);
   if (!r) {
-    g(
+    y(
       "no session browser is running for this profile",
       `Start one with \`aiui browser\` (profile: ${o.userDataDir}).`
     ), process.exitCode = 1;
@@ -780,50 +662,59 @@ async function an(e, t) {
   }
   try {
     await H(r, e), console.log(`opened ${e}`);
-  } catch (a) {
-    g(`couldn't open ${e}`, a instanceof Error ? a.message : String(a)), process.exitCode = 1;
+  } catch (c) {
+    y(`couldn't open ${e}`, c instanceof Error ? c.message : String(c)), process.exitCode = 1;
   }
 }
-async function cn(e) {
-  const [t] = e;
+async function gn(e) {
+  const [t, n] = e;
   switch (t) {
     case "install":
-    case "update":
-      await Kt((n) => console.log(n));
-      return;
-    case "status":
-      await ln();
-      return;
-    case "extension": {
-      await be();
-      const n = Z();
-      if (!n) {
-        g(
-          "the aiui-devtools-extension is not available in this install",
-          "In a dev checkout, build it first: pnpm --filter @habemus-papadum/aiui-devtools-extension build"
-        ), process.exitCode = 1;
+    case "update": {
+      const o = bn(n);
+      if ("error" in o) {
+        y(o.error, "Usage: aiui chrome install [chromium | chrome-for-testing]"), process.exitCode = 1;
         return;
       }
-      console.log(n);
+      await Zt(o.flavor, (r) => console.log(r));
       return;
     }
+    case "status":
+      await yn();
+      return;
     default:
-      g(
+      y(
         t ? `unknown aiui chrome action: ${t}` : "aiui chrome needs an action",
-        "Usage: aiui chrome <install | update | status | extension>"
+        "Usage: aiui chrome <install | update [flavor] | status>"
       ), process.exitCode = 1;
       return;
   }
 }
-async function ln() {
-  const t = V().chrome ?? {}, n = { chrome: !1, noChrome: !1 }, o = await me(), r = await we();
-  if (console.log("Chrome for Testing (managed):"), o) {
-    const m = r === void 0 ? "(latest stable unknown — offline?)" : r === o.buildId ? "(latest stable)" : `(latest stable is ${r} — run \`aiui chrome update\`)`;
-    console.log(`  installed ${o.buildId} ${m}`), console.log(`  ${o.executablePath}`);
-  } else
-    console.log("  not installed — `aiui chrome install` (recommended; auto-loads the panel)");
-  if (console.log(`  startup checks (chrome.forTesting): ${t.forTesting ?? "prompt"}`), console.log(`
-This directory would launch:`), !ot(n, t)) {
+function bn(e) {
+  if (e === void 0)
+    return { flavor: B(P().chrome) };
+  const n = {
+    chromium: "chromium",
+    "chrome-for-testing": "chrome-for-testing",
+    cft: "chrome-for-testing"
+  }[e];
+  return n ? { flavor: n } : { error: `unknown browser "${e}" — use chromium or chrome-for-testing` };
+}
+async function yn() {
+  const t = P().chrome ?? {}, n = { chrome: !1, noChrome: !1 }, o = B(t);
+  console.log("Managed browsers:"), console.log(`  preferred (chrome.managed): ${k(o).displayName}`);
+  for (const p of Fe) {
+    const w = k(p), b = p === o ? " *preferred*" : "", $ = await F(p);
+    if ($) {
+      const d = await he(p), R = d === void 0 ? "(latest unknown — offline?)" : d === $.buildId ? "(latest)" : `(latest is ${d} — \`aiui chrome update ${p}\`)`;
+      console.log(`  ${w.displayName}${b}: ${$.buildId} ${R}`), console.log(`    ${$.executablePath}`);
+    } else {
+      const d = p === o ? "aiui chrome install" : `aiui chrome install ${p}`;
+      console.log(`  ${w.displayName}${b}: not installed — \`${d}\``);
+    }
+  }
+  if (console.log(`  startup checks (chrome.manage): ${le(t)}`), console.log(`
+This directory would launch:`), !qe(n, t)) {
     console.log("  nothing — the Chrome DevTools MCP is disabled here");
     return;
   }
@@ -831,132 +722,129 @@ This directory would launch:`), !ot(n, t)) {
     console.log(`  connection: attach to ${t.browserUrl} (chrome.browserUrl)`), console.log("  the browser is managed elsewhere — nothing launches on this machine");
     return;
   }
-  const i = { ...t };
-  !i.executablePath && !i.channel && o && (i.executablePath = o.executablePath);
-  const s = D({}, i), a = await F(s.userDataDir), c = s.mode === "attach" ? a ? `attach to the running session browser at ${a.browserUrl}` : "attach — a session browser starts with the next interactive launch (or `aiui browser`)" : "launch — chrome-devtools-mcp starts a private browser on the agent's first tool use";
+  const r = T({}, t), i = r.executablePath || r.channel ? void 0 : await F(o), s = await U(r.userDataDir), c = r.mode === "attach" ? s ? `attach to the running session browser at ${s.browserUrl}` : "attach — a session browser starts with the next interactive launch (or `aiui browser`)" : "launch — chrome-devtools-mcp starts a private browser on the agent's first tool use";
   console.log(`  connection: ${c}`);
-  const d = s.executablePath ? s.executablePath === (o == null ? void 0 : o.executablePath) ? `Chrome for Testing ${o.buildId}` : s.executablePath : s.channel ? `installed Chrome (${s.channel} channel)` : "installed Chrome (stable)";
-  console.log(`  browser: ${d}${s.headless ? " — headless" : ""}`), console.log(`  user data dir: ${s.userDataDir}`);
-  const p = f(rt({}, process.cwd()), "..");
-  if (v(p)) {
-    const m = G(p, { withFileTypes: !0 }).filter((b) => b.isDirectory()).map((b) => b.name);
-    m.length && console.log(`  profiles here: ${m.join(", ")}`);
+  const a = r.executablePath ? r.executablePath : r.channel ? `installed Chrome (${r.channel} channel)` : i ? `${k(o).displayName} ${i.buildId} (managed)` : `${k(o).displayName} (managed — not yet installed)`;
+  console.log(`  browser: ${a}${r.headless ? " — headless" : ""}`), console.log(`  profile variant: ${r.variant}`), console.log(`  user data dir: ${r.userDataDir}`);
+  const u = !r.channel, m = Oe(r.userDataDir);
+  if (v(m)) {
+    const p = q(m, { withFileTypes: !0 }).filter((w) => w.isDirectory()).map((w) => w.name);
+    p.length && console.log(`  profiles here (${r.variant}): ${p.join(", ")}`);
   }
   console.log(`
-aiui DevTools panel:`);
-  const h = Z();
-  if (!h) {
-    console.log("  not available (unbuilt dev checkout? run `aiui chrome extension` for help)");
-    return;
+aiui intent client (the extension launches auto-load):`);
+  const f = j();
+  switch (f.state) {
+    case "absent":
+      console.log("  not available in this install (aiui-intent-client is not resolvable)");
+      break;
+    case "unbuilt":
+      console.log(
+        `  no MV3 bundle yet (${f.root})
+  build it:      pnpm -C packages/aiui-intent-client build:ext
+  build + load into the running browser:  pnpm -C packages/aiui-intent-client ext`
+      );
+      break;
+    case "ready":
+      console.log(`  ${f.dir}`), vn(u);
+      break;
   }
-  console.log(`  ${h}`), s.executablePath ? console.log("  auto-loads via --load-extension (honored by Chrome for Testing/Chromium)") : (console.log("  can NOT auto-load into branded Chrome ≥ 137 — load it unpacked once"), console.log(
+}
+function vn(e) {
+  e ? console.log("  auto-loads via --load-extension (honored by Chromium/Chrome for Testing)") : (console.log("  can NOT auto-load into branded Chrome ≥ 137 — load it unpacked once"), console.log(
     "  (chrome://extensions → Developer mode → Load unpacked), or `aiui chrome install`"
   ));
 }
-const un = "--aiui-";
-function ct(e) {
+const $n = "--aiui-";
+function at(e) {
   if (e.includes("--help") || e.includes("-h"))
     return "help";
   if (e.includes("--version") || e.includes("-v"))
     return "version";
 }
-function lt(e) {
-  let t, n, o = !1, r = !1, i = !1, s = !1, a, c, d;
-  const p = [], h = [];
-  let m;
-  const b = [];
-  for (let w = 0; w < e.length; w++) {
-    const C = e[w];
-    if (!C.startsWith(un)) {
-      b.push(C);
+function pe(e) {
+  let t, n, o = !1, r = !1, i = !1, s = !1, c, a, u, m;
+  const f = [];
+  for (let p = 0; p < e.length; p++) {
+    const w = e[p];
+    if (!w.startsWith($n)) {
+      f.push(w);
       continue;
     }
-    const x = C.indexOf("="), N = x === -1 ? C : C.slice(0, x);
-    let u = x === -1 ? void 0 : C.slice(x + 1);
-    switch (N) {
+    const b = w.indexOf("="), $ = b === -1 ? w : w.slice(0, b);
+    let d = b === -1 ? void 0 : w.slice(b + 1);
+    switch ($) {
       case "--aiui-tag": {
-        if (u === void 0 && (u = e[++w]), !u)
+        if (d === void 0 && (d = e[++p]), !d)
           throw new Error("--aiui-tag requires a non-empty value");
-        t = u;
+        t = d;
         break;
       }
       case "--aiui-mcp": {
-        if (u === void 0 && (u = e[++w]), !u)
+        if (d === void 0 && (d = e[++p]), !d)
           throw new Error("--aiui-mcp requires a non-empty value");
-        n = u;
+        n = d;
         break;
       }
       case "--aiui-chrome": {
-        if (u !== void 0)
+        if (d !== void 0)
           throw new Error("--aiui-chrome takes no value");
         o = !0;
         break;
       }
       case "--aiui-no-chrome": {
-        if (u !== void 0)
+        if (d !== void 0)
           throw new Error("--aiui-no-chrome takes no value");
         r = !0;
         break;
       }
       case "--aiui-browser": {
-        if (u !== void 0)
+        if (d !== void 0)
           throw new Error("--aiui-browser takes no value");
         i = !0;
         break;
       }
       case "--aiui-no-browser": {
-        if (u !== void 0)
+        if (d !== void 0)
           throw new Error("--aiui-no-browser takes no value");
         s = !0;
         break;
       }
       case "--aiui-chrome-profile": {
-        if (u === void 0 && (u = e[++w]), !u)
+        if (d === void 0 && (d = e[++p]), !d)
           throw new Error("--aiui-chrome-profile requires a non-empty value");
-        a = u;
+        c = d;
         break;
       }
       case "--aiui-chrome-data-dir": {
-        if (u === void 0 && (u = e[++w]), !u)
+        if (d === void 0 && (d = e[++p]), !d)
           throw new Error("--aiui-chrome-data-dir requires a non-empty value");
-        c = u;
+        a = d;
         break;
       }
       case "--aiui-browser-url": {
-        if (u === void 0 && (u = e[++w]), !u)
+        if (d === void 0 && (d = e[++p]), !d)
           throw new Error("--aiui-browser-url requires a non-empty value");
-        d = u;
-        break;
-      }
-      case "--aiui-sidecar": {
-        if (u === void 0 && (u = e[++w]), !u)
-          throw new Error("--aiui-sidecar requires a non-empty value");
-        p.push(u);
-        break;
-      }
-      case "--aiui-no-sidecar": {
-        if (u === void 0 && (u = e[++w]), !u)
-          throw new Error("--aiui-no-sidecar requires a non-empty value");
-        h.push(u);
+        u = d;
         break;
       }
       case "--aiui-bind": {
-        if (u === void 0 && (u = e[++w]), !u || !se.includes(u))
-          throw new Error(`--aiui-bind requires one of: ${se.join(", ")}`);
-        m = u;
+        if (d === void 0 && (d = e[++p]), !d || !$e.includes(d))
+          throw new Error(`--aiui-bind requires one of: ${$e.join(", ")}`);
+        m = d;
         break;
       }
       default:
-        throw new Error(`unknown aiui option: ${N}`);
+        throw new Error(`unknown aiui option: ${$}`);
     }
   }
   if (o && r)
     throw new Error("--aiui-chrome and --aiui-no-chrome are mutually exclusive");
   if (i && s)
     throw new Error("--aiui-browser and --aiui-no-browser are mutually exclusive");
-  if (a !== void 0 && c !== void 0)
+  if (c !== void 0 && a !== void 0)
     throw new Error("--aiui-chrome-profile and --aiui-chrome-data-dir are mutually exclusive");
-  if (d !== void 0 && (a !== void 0 || c !== void 0))
+  if (u !== void 0 && (c !== void 0 || a !== void 0))
     throw new Error(
       "--aiui-browser-url means the browser is managed elsewhere — it can't be combined with --aiui-chrome-profile or --aiui-chrome-data-dir"
     );
@@ -967,114 +855,174 @@ function lt(e) {
     noChrome: r,
     browser: i,
     noBrowser: s,
-    chromeProfile: a,
-    chromeDataDir: c,
-    browserUrl: d,
-    sidecar: p,
-    noSidecar: h,
+    chromeProfile: c,
+    chromeDataDir: a,
+    browserUrl: u,
     bind: m,
-    passthrough: b
+    passthrough: f
   };
 }
-const dn = {
-  darwin: 2147578994,
-  linux: 21522
-}, hn = 'open(my $t,"+<","/dev/tty") or exit 0; my $c="\\r"; ioctl($t,$ARGV[0]+0,$c);', fn = [250, 750];
-function pn(e = fn) {
-  const t = dn[process.platform];
-  if (t !== void 0)
-    for (const n of e)
-      setTimeout(() => {
-        try {
-          jt("perl", ["-e", hn, String(t)], { stdio: "ignore" }).on("error", () => {
-          });
-        } catch {
-        }
-      }, n).unref();
+function ct(e) {
+  var t;
+  return { bind: e.bind ?? ((t = e.config.channel) == null ? void 0 : t.bind) ?? "loopback" };
+}
+function lt(e) {
+  return ["--bind", e.bind];
+}
+const kn = /* @__PURE__ */ new Set(["serve", "mcp"]);
+function Cn(e, t) {
+  return e.some((n) => n === t || n.startsWith(`${t}=`));
 }
-const mn = `One-time setup — how should aiui launch Claude Code?
+function ut(e) {
+  const t = e.find((n) => !n.startsWith("-"));
+  return t !== void 0 && kn.has(t);
+}
+function xn(e, t) {
+  if (!ut(e))
+    return e;
+  const n = lt(t), o = [...e];
+  for (let r = 0; r < n.length; r += 2) {
+    const i = n[r], s = n[r + 1];
+    Cn(e, i) || o.push(i, s);
+  }
+  return o;
+}
+const In = `One-time setup — how should aiui launch Claude Code?
 With --dangerously-skip-permissions, every agent action (shell commands, file writes,
 network, the browser) runs without asking you first. Fast, and dangerous. It's a personal
 preference — aiui works fine either way. Saved as claude.skipPermissions in your user
-config; edit or delete it there to change your mind.`, wn = `One-time setup — where should the channel's web server bind?
+config; edit or delete it there to change your mind.`, En = `One-time setup — where should the channel's web server bind?
 Binding the HOST interface puts the session's whole web surface on your network,
 UNAUTHENTICATED — the iPad paint page (\`aiui paint url\` prints its URL), but also prompt
 injection, /debug, and every sidecar. That's the simple, single-port way to use the iPad —
 on a network that is yours alone (a home LAN), not on café Wi-Fi. LOOPBACK keeps everything
 this-machine-only; reaching it from an iPad is then up to you — tunnel the channel port
 however you like (Tailscale, \`ssh -L\`). Saved as channel.bind in your user config;
---aiui-bind wins per launch.`, gn = `One-time setup — auto-dismiss Claude Code's channel prompt?
+--aiui-bind wins per launch.`, Pn = `One-time setup — auto-dismiss Claude Code's channel prompt?
 aiui loads a custom development channel, so Claude Code shows a one-key acknowledgement
 prompt at every startup. aiui can dismiss it for you: shortly after launch it injects a
 single Enter keystroke into this terminal (a best-effort TIOCSTI ioctl on /dev/tty — it
 literally "types" the Enter for you; on platforms that forbid that, nothing happens and
 you press it yourself). Saying no just means pressing Enter once per launch. Saved as
 claude.enterNudge in your user config.`;
-async function bn(e, t = z) {
+async function Dn(e, t = X) {
   var o, r, i;
   let n = e;
   if (((o = n.claude) == null ? void 0 : o.skipPermissions) === void 0) {
-    const s = await t(mn, [
+    const s = await t(In, [
       { key: "y", label: "yes — skip permissions; nothing asks before acting" },
       { key: "n", label: "no — keep Claude Code's own permission prompts" }
     ]);
-    n = je(n, "skipPermissions", s === "y");
+    n = Ee(n, "skipPermissions", s === "y");
   }
   if (((r = n.claude) == null ? void 0 : r.enterNudge) === void 0) {
-    const s = await t(gn, [
+    const s = await t(Pn, [
       { key: "y", label: "yes — press Enter for me at startup" },
       { key: "n", label: "no — I'll press it myself each launch" }
     ]);
-    n = je(n, "enterNudge", s === "y");
+    n = Ee(n, "enterNudge", s === "y");
   }
   if (((i = n.channel) == null ? void 0 : i.bind) === void 0) {
-    const s = await t(wn, [
+    const s = await t(En, [
       { key: "h", label: "host — reachable on my (trusted) network; the iPad just works" },
       { key: "l", label: "loopback — this machine only; I'll tunnel when I want the iPad" }
     ]);
-    n = yn(n, s === "h" ? "host" : "loopback");
+    n = Sn(n, s === "h" ? "host" : "loopback");
   }
   return n;
 }
-function je(e, t, n) {
-  const o = B((r) => {
+function Ee(e, t, n) {
+  const o = N((r) => {
     r.claude = { ...r.claude, [t]: n };
   });
-  return y(`wrote claude.${t}: ${n} to ${o}`), { ...e, claude: { ...e.claude, [t]: n } };
+  return g(`wrote claude.${t}: ${n} to ${o}`), { ...e, claude: { ...e.claude, [t]: n } };
 }
-function yn(e, t) {
-  const n = B((o) => {
+function Sn(e, t) {
+  const n = N((o) => {
     o.channel = { ...o.channel, bind: t };
   });
-  return y(`wrote channel.bind: ${t} to ${n}`), { ...e, channel: { ...e.channel, bind: t } };
+  return g(`wrote channel.bind: ${t} to ${n}`), { ...e, channel: { ...e.channel, bind: t } };
 }
-const vn = "https://api.openai.com/v1/models", kn = 3e3;
-async function Cn(e = {}) {
-  var c;
+const Tn = "https://generativelanguage.googleapis.com/v1beta/models", An = 3e3;
+async function Nn(e = {}) {
+  var a;
+  const {
+    verify: t = !0,
+    env: n = process.env,
+    fetchImpl: o = fetch,
+    timeoutMs: r = An
+  } = e, i = (a = n.GEMINI_API_KEY) == null ? void 0 : a.trim();
+  if (!i)
+    return "missing";
+  if (!t)
+    return "unverified";
+  const s = new AbortController(), c = setTimeout(() => s.abort(), r);
+  try {
+    const u = await o(`${Tn}?key=${encodeURIComponent(i)}`, {
+      signal: s.signal
+    });
+    return u.ok ? "valid" : u.status === 400 || u.status === 401 || u.status === 403 ? "invalid" : "unverified";
+  } catch {
+    return "unverified";
+  } finally {
+    clearTimeout(c);
+  }
+}
+function _n(e) {
+  switch (e) {
+    case "valid":
+      return null;
+    case "missing":
+      return {
+        level: "note",
+        title: "GEMINI_API_KEY is not set — the realtime (Gemini Live) tier is unavailable",
+        detail: "Only the realtime conversational submode needs it; transcription tiers are unaffected. To enable it, export the key in the shell you run `aiui claude` from:\n  export GEMINI_API_KEY=…\nIt flows through to the channel process, where the Gemini Live session runs."
+      };
+    case "invalid":
+      return {
+        level: "warn",
+        title: "GEMINI_API_KEY was rejected by Google — the realtime tier will fail",
+        detail: "The key in your environment isn't valid, so every Gemini Live session will close immediately. The usual cause is a stale shell export shadowing your real key — check what's actually set (this prints only a short prefix, not the whole secret):\n  echo $GEMINI_API_KEY | head -c 8\nFix the export and relaunch `aiui claude`."
+      };
+    case "unverified":
+      return {
+        level: "note",
+        title: "couldn't verify GEMINI_API_KEY with Google — continuing",
+        detail: "The check didn't complete (offline, a timeout, or a transient error), so the key is unverified — not known-bad. Launch continues; if the realtime tier turns out unavailable, an unreachable or invalid key may be why."
+      };
+  }
+}
+function jn(e) {
+  const t = _n(e);
+  t && (t.level === "warn" ? C(t.title, t.detail) : g(t.title, t.detail));
+}
+const On = "https://api.openai.com/v1/models", Un = 3e3;
+async function Mn(e = {}) {
+  var a;
   const {
     verify: t = !0,
     env: n = process.env,
     fetchImpl: o = fetch,
-    timeoutMs: r = kn
-  } = e, i = (c = n.OPENAI_API_KEY) == null ? void 0 : c.trim();
+    timeoutMs: r = Un
+  } = e, i = (a = n.OPENAI_API_KEY) == null ? void 0 : a.trim();
   if (!i)
     return "missing";
   if (!t)
     return "unverified";
-  const s = new AbortController(), a = setTimeout(() => s.abort(), r);
+  const s = new AbortController(), c = setTimeout(() => s.abort(), r);
   try {
-    const d = await o(vn, {
+    const u = await o(On, {
       headers: { authorization: `Bearer ${i}` },
       signal: s.signal
     });
-    return d.ok ? "valid" : d.status === 401 || d.status === 403 ? "invalid" : "unverified";
+    return u.ok ? "valid" : u.status === 401 || u.status === 403 ? "invalid" : "unverified";
   } catch {
     return "unverified";
   } finally {
-    clearTimeout(a);
+    clearTimeout(c);
   }
 }
-function $n(e) {
+function Ln(e) {
   switch (e) {
     case "valid":
       return null;
@@ -1100,93 +1048,89 @@ and compare that against the start of your real key. Until it's fixed, transcrip
       };
   }
 }
-function xn(e) {
-  const t = $n(e);
-  t && (t.level === "warn" ? T(t.title, t.detail) : y(t.title, t.detail));
+function Bn(e) {
+  const t = Ln(e);
+  t && (t.level === "warn" ? C(t.title, t.detail) : g(t.title, t.detail));
 }
-const ee = "0.3.0";
-function ye(e) {
-  const t = (process.env.PATH ?? "").split(bt).filter(Boolean), n = process.platform === "win32" ? (process.env.PATHEXT ?? ".EXE;.CMD;.BAT;.COM").split(";") : [""];
+const me = "0.6.0";
+function Rn(e) {
+  const t = (process.env.PATH ?? "").split(vt).filter(Boolean), n = process.platform === "win32" ? (process.env.PATHEXT ?? ".EXE;.CMD;.BAT;.COM").split(";") : [""];
   for (const o of t)
     for (const r of n)
       try {
-        return $t(f(o, e + r), xt.X_OK), !0;
+        return It(h(o, e + r), Et.X_OK), !0;
       } catch {
       }
   return !1;
 }
-const Tn = "@habemus-papadum/aiui-claude-channel", Pn = "@habemus-papadum/aiui-claude-plugin", Ue = "aiui";
-async function En(e = []) {
-  var xe, Te, Pe;
-  const t = lt(e), { tag: n, passthrough: o } = t, r = ct(o);
+const Hn = "@habemus-papadum/aiui-claude-channel", Fn = "@habemus-papadum/aiui-claude-plugin", Pe = "aiui";
+async function Vn(e = []) {
+  var ye;
+  const t = pe(e), { tag: n, passthrough: o } = t, r = at(o);
   if (r) {
-    r === "help" ? In() : console.log(`aiui ${ee}`), await Dn(o);
+    r === "help" ? Kn() : console.log(`aiui ${me}`), await Gn(o);
     return;
   }
-  let i = V();
-  const s = On(o) && !ue();
-  s && (i = await bn(i));
-  const a = await Cn({ verify: s });
-  if (s && xn(a), !ut())
+  let i = P();
+  const s = Wn(o) && !ce();
+  s && (i = await Dn(i));
+  const c = await Mn({ verify: s });
+  s && Bn(c);
+  const a = await Nn({ verify: s });
+  if (s && jn(a), !dt())
     return;
-  const c = P(L(Pn), "marketplace", "plugins"), d = ge(Tn), p = [...d.args, "mcp"];
-  n && p.push("--tag", n);
-  const h = t.bind ?? ((xe = i.channel) == null ? void 0 : xe.bind) ?? "loopback";
-  p.push("--bind", h);
-  const m = {
-    [Ue]: { command: d.command, args: p }
+  const u = x(K(Fn), "marketplace", "plugins"), m = J(Hn), f = [...m.args, "mcp"];
+  n && f.push("--tag", n);
+  const p = ct({ config: i, bind: t.bind });
+  f.push(...lt(p));
+  const w = {
+    [Pe]: { command: m.command, args: f }
   };
   let b = { enabled: !1 };
-  if (ot(t, i.chrome)) {
-    const E = {
+  if (qe(t, i.chrome)) {
+    const ee = {
       ...i.chrome,
       ...t.browserUrl ? { browserUrl: t.browserUrl } : {}
-    }, _ = await Sn(t, E, s);
-    m[Jt] = _.entry, b = _.info;
+    }, ve = await Yn(t, ee, s);
+    w[Lt] = ve.entry, b = ve.info;
   }
-  const w = {
+  const $ = {
     launcher: "aiui claude",
     chromeDevtools: b,
-    openaiKey: a
+    openaiKey: c,
+    geminiKey: a
   };
-  p.push("--launch-info", JSON.stringify(w));
-  const C = [...t.sidecar], x = [...t.noSidecar];
-  for (const [E, _] of Object.entries(i.sidecars ?? {}))
-    _ === void 0 || C.includes(E) || x.includes(E) || (_ ? C : x).push(E);
-  const N = Ut(process.cwd(), { enable: C, disable: x });
-  N.length > 0 && p.push("--sidecars", JSON.stringify(N));
-  const u = JSON.stringify({ mcpServers: m }), Ce = [f(c, "aiui"), f(c, "frontend-design")];
-  b.enabled && Ce.push(f(c, "session-browser"));
-  const wt = [
-    ...((Te = i.claude) == null ? void 0 : Te.skipPermissions) ?? !0 ? ["--dangerously-skip-permissions"] : [],
+  f.push("--launch-info", JSON.stringify($));
+  const d = JSON.stringify({ mcpServers: w }), R = [h(u, "aiui"), h(u, "frontend-design")];
+  b.enabled && R.push(h(u, "session-browser"));
+  const bt = [
+    ...((ye = i.claude) == null ? void 0 : ye.skipPermissions) ?? !0 ? ["--dangerously-skip-permissions"] : [],
     "--mcp-config",
-    u,
-    ...Ce.flatMap((E) => ["--plugin-dir", E]),
+    d,
+    ...R.flatMap((ee) => ["--plugin-dir", ee]),
     // Custom channels are a research preview and not on the approved allowlist,
     // so opt this session into loading ours as a development channel.
     "--dangerously-load-development-channels",
-    `server:${Ue}`
-  ];
-  s && (((Pe = i.claude) == null ? void 0 : Pe.enterNudge) ?? !0) && pn();
-  const $e = await k("claude", [...wt, ...o], {
+    `server:${Pe}`
+  ], be = await E("claude", [...bt, ...o], {
     stdio: "inherit",
     reject: !1
   });
-  $e.exitCode && (process.exitCode = $e.exitCode);
+  be.exitCode && (process.exitCode = be.exitCode);
 }
-function ut() {
-  return ye("claude") ? !0 : (g(
+function dt() {
+  return Rn("claude") ? !0 : (y(
     "`claude` was not found on your PATH",
     "Install Claude Code and make sure the `claude` command is available, then try again."
   ), process.exitCode = 1, !1);
 }
-async function Dn(e) {
-  if (!ut())
+async function Gn(e) {
+  if (!dt())
     return;
-  const t = await k("claude", e, { stdio: "inherit", reject: !1 });
+  const t = await E("claude", e, { stdio: "inherit", reject: !1 });
   t.exitCode && (process.exitCode = t.exitCode);
 }
-function In() {
+function Kn() {
   console.log(`aiui claude — launch Claude Code wired with the aiui channel, plugin, and browser MCP
 
 aiui's own flags (everything else forwards to claude verbatim):
@@ -1202,25 +1146,29 @@ aiui's own flags (everything else forwards to claude verbatim):
                                  whole network can reach the session's web
                                  surface — the iPad paint page included;
                                  trusted networks only)
-  --aiui-sidecar <name>          host this session sidecar (repeatable);
-                                 \`paint\` (iPad ink) is always on
-  --aiui-no-sidecar <name>       don't host this session sidecar (repeatable)
 
+Every channel hosts the same session sidecars — paint (iPad ink), the intent panel
+at /intent/, the remote bar, and the remote pencil — reachable per --aiui-bind.
 Durable settings live in config.json (project .aiui-cache/ + user cache) — see the
 Configuration guide. What follows is claude's own --help:
 `);
 }
-async function Sn(e, t, n) {
+async function Yn(e, t, n) {
   if (t.browserUrl)
     return {
       entry: te(t.browserUrl),
       info: { enabled: !0, connection: "attach", browserUrl: t.browserUrl }
     };
-  let o = { ...t }, r = D(e, o);
+  const o = t;
+  let r = T(e, o);
   if (r.mode === "attach") {
-    const a = await F(r.userDataDir);
+    const a = await U(r.userDataDir);
     if (a)
-      return {
+      return V(
+        r.userDataDir,
+        j().state === "ready",
+        C
+      ), {
         entry: te(a.browserUrl),
         info: {
           enabled: !0,
@@ -1231,26 +1179,30 @@ async function Sn(e, t, n) {
       };
   }
   if (!o.executablePath && !o.channel) {
-    const a = await tt({ mode: o.forTesting ?? "prompt", interactive: n });
-    a && (o = { ...o, executablePath: a }, r = D(e, o));
+    const a = await et({
+      flavor: B(o),
+      mode: le(o),
+      interactive: n
+    });
+    a && (r = { ...r, executablePath: a });
   }
-  W(r.userDataDir, { recursive: !0 }), r.buildExtension && await be();
-  const i = Z();
-  n && it(r, i);
-  const s = {
+  z(r.userDataDir, { recursive: !0 });
+  const i = j(), s = i.state === "ready" ? [i.dir] : [];
+  V(r.userDataDir, i.state === "ready", C), n && (Xe(r, s), Je(i));
+  const c = {
     userDataDir: r.userDataDir,
     executablePath: r.executablePath,
     channel: r.channel,
     headless: r.headless,
-    extensionDir: i
+    extensionDirs: s
   };
   if (r.mode === "attach" && n)
     try {
-      const a = await Ve({
-        binary: Fe(r),
+      const a = await Me({
+        binary: Ue(r),
         userDataDir: r.userDataDir,
         debugPort: r.debugPort,
-        extensionDir: i,
+        extensionDirs: s,
         headless: r.headless
       });
       return {
@@ -1259,64 +1211,64 @@ async function Sn(e, t, n) {
           enabled: !0,
           connection: "attach",
           browserUrl: a.browserUrl,
-          ...s
+          ...c
         }
       };
     } catch (a) {
-      T(
+      C(
         "couldn't start the session browser — falling back to a browser private to the MCP",
         a instanceof Error ? a.message : String(a)
       );
     }
   return {
-    entry: Qt(r, i),
-    info: { enabled: !0, connection: "launch", ...s }
+    entry: zt(r, s),
+    info: { enabled: !0, connection: "launch", ...c }
   };
 }
-function On(e) {
+function Wn(e) {
   return !process.stdin.isTTY || !process.stdout.isTTY ? !1 : !e.some((t) => t === "-p" || t === "--print");
 }
-function jn(e = process.cwd()) {
+function zn(e = process.cwd()) {
   return {
-    project: de(e),
+    project: Le(e),
     user: Y(void 0, { create: !1 }),
-    browser: A(!1)
+    browsers: Xt(!1)
   };
 }
-function Un(e, t) {
+function qn(e, t) {
   const n = [];
   return e.userOnly || n.push({ label: "project cache", path: t.project }), e.projectOnly || n.push(
     e.keepBrowser ? {
-      label: "user cache (keeping Chrome for Testing)",
+      label: "user cache (keeping the managed browsers)",
       path: t.user,
-      keep: [t.browser]
+      keep: t.browsers
     } : { label: "user cache", path: t.user }
   ), n;
 }
-function An(e) {
+function Jn(e) {
   var o;
   if (!v(e.path))
     return [];
   if (!((o = e.keep) != null && o.length))
     return [e.path];
-  const t = new Set(e.keep.map((r) => P(r)));
+  const t = new Set(e.keep.map((r) => x(r)));
   let n;
   try {
-    n = G(e.path);
+    n = q(e.path);
   } catch {
     return [];
   }
-  return n.map((r) => P(f(e.path, r))).filter((r) => !t.has(r));
+  return n.map((r) => x(h(e.path, r))).filter((r) => !t.has(r));
 }
-async function Nn(e = {}) {
+async function Xn(e = {}) {
   if (e.projectOnly && e.userOnly) {
-    g(
+    y(
       "pass at most one of --project-only / --user-only",
       "with neither, `aiui clean` removes both"
     ), process.exitCode = 1;
     return;
   }
-  const t = process.cwd(), o = Un(e, jn(t)).map((h) => ({ target: h, paths: An(h) })).filter((h) => h.paths.length > 0);
+  const t = process.cwd(), o = qn(e, zn(t)).map((f) => ({ target: f, paths: Jn(f) })).filter((f) => f.paths.length > 0);
   if (o.length === 0) {
     console.log("nothing to clean — no aiui state here or in the user cache.");
     return;
@@ -1324,39 +1276,39 @@ async function Nn(e = {}) {
   let r = 0;
   console.log(`aiui clean will remove:
 `);
-  for (const { target: h, paths: m } of o) {
-    const b = m.reduce((w, C) => w + le(C), 0);
-    r += b, console.log(`  ${ne(b).padStart(9)}  ${h.label}`), console.log(`  ${" ".repeat(9)}  ${l.dim(h.path)}`);
+  for (const { target: f, paths: p } of o) {
+    const w = p.reduce((b, $) => b + ae($), 0);
+    r += w, console.log(`  ${ne(w).padStart(9)}  ${f.label}`), console.log(`  ${" ".repeat(9)}  ${l.dim(f.path)}`);
   }
   console.log(`
   ${ne(r).padStart(9)}  total
 `);
-  const i = !e.projectOnly, s = i && !e.keepBrowser, a = [
+  const i = !e.projectOnly, s = i && !e.keepBrowser, c = [
     "traces and session-browser logins are cleared",
     i && "the Claude permission prompt (claude.skipPermissions) returns on next launch",
-    s && "Chrome for Testing re-downloads (~160 MB) on the next `aiui claude`"
-  ].filter((h) => !!h);
+    s && "the managed browser re-downloads (~150-160 MB) on the next `aiui claude`"
+  ].filter((f) => !!f);
   console.log("This resets aiui toward a fresh install:");
-  for (const h of a)
-    console.log(`  • ${h}`);
+  for (const f of c)
+    console.log(`  • ${f}`);
   console.log("");
-  const c = J(t);
-  if (c.length && T(
-    `${c.length} aiui session${c.length === 1 ? "" : "s"} still running`,
+  const a = L(t);
+  if (a.length && C(
+    `${a.length} aiui session${a.length === 1 ? "" : "s"} still running`,
     "stop them first — a live session rewrites its registry entry as it exits, and an open browser can lock files being deleted"
   ), e.dryRun) {
-    y("dry run — nothing was deleted");
+    g("dry run — nothing was deleted");
     return;
   }
   if (!e.yes) {
     if (!process.stdin.isTTY) {
-      g(
+      y(
         "refusing to delete without confirmation",
         "re-run with --yes for a non-interactive clean, or from a terminal"
       ), process.exitCode = 1;
       return;
     }
-    if (await z(
+    if (await X(
       "Delete these now?",
       [
         { key: "y", label: "yes, delete" },
@@ -1368,28 +1320,28 @@ async function Nn(e = {}) {
       return;
     }
   }
-  let d = 0, p = 0;
-  for (const { paths: h } of o)
-    for (const m of h) {
-      const b = le(m);
+  let u = 0, m = 0;
+  for (const { paths: f } of o)
+    for (const p of f) {
+      const w = ae(p);
       try {
-        Tt(m, { recursive: !0, force: !0 }), d += b;
-      } catch (w) {
-        p++, T(
-          `could not remove ${m}`,
-          w instanceof Error ? w.message : String(w)
+        Pt(p, { recursive: !0, force: !0 }), u += w;
+      } catch (b) {
+        m++, C(
+          `could not remove ${p}`,
+          b instanceof Error ? b.message : String(b)
         );
       }
     }
-  p && T(
-    `${p} path${p === 1 ? "" : "s"} could not be deleted`,
+  m && C(
+    `${m} path${m === 1 ? "" : "s"} could not be deleted`,
     "a running browser can lock its files — close the session browser and re-run"
-  ), console.log(`clean complete — freed ~${ne(d)}.`);
+  ), console.log(`clean complete — freed ~${ne(u)}.`);
 }
-function le(e) {
+function ae(e) {
   let t;
   try {
-    t = Pt(e);
+    t = Dt(e);
   } catch {
     return 0;
   }
@@ -1397,13 +1349,13 @@ function le(e) {
     return t.size;
   let n;
   try {
-    n = G(e);
+    n = q(e);
   } catch {
     return 0;
   }
   let o = 0;
   for (const r of n)
-    o += le(f(e, r));
+    o += ae(h(e, r));
   return o;
 }
 function ne(e) {
@@ -1415,35 +1367,35 @@ function ne(e) {
     n /= 1024, o++;
   return `${n.toFixed(1)} ${t[o]}`;
 }
-function j(e = process.cwd()) {
-  const t = he(e);
+function S(e = process.cwd()) {
+  const t = At(e);
   return {
     paths: t,
-    user: O(t.user) ?? {},
-    project: O(t.project) ?? {}
+    user: ie(t.user) ?? {},
+    project: ie(t.project) ?? {}
   };
 }
-function ve(e) {
-  return Je().map((t) => {
-    const n = Ae(e.user, t), o = Ae(e.project, t), r = o ?? n, i = o !== void 0 ? "project" : n !== void 0 ? "user" : t.field.default !== void 0 ? "default" : "unset";
+function we(e) {
+  return Ve().map((t) => {
+    const n = De(e.user, t), o = De(e.project, t), r = o ?? n, i = o !== void 0 ? "project" : n !== void 0 ? "user" : t.field.default !== void 0 ? "default" : "unset";
     return { ...t, userValue: n, projectValue: o, effective: r, source: i };
   });
 }
-function Ae(e, t) {
+function De(e, t) {
   var o;
   return (o = e[t.section.name]) == null ? void 0 : o[t.field.key];
 }
-function ke(e, t) {
-  const n = ve(t).find((o) => o.path === e);
-  return n || (g(
+function ge(e, t) {
+  const n = we(t).find((o) => o.path === e);
+  return n || (y(
     `unknown config key: ${e}`,
     `Known keys:
-  ${Je().map((o) => o.path).join(`
+  ${Ve().map((o) => o.path).join(`
   `)}`
   ), process.exitCode = 1), n;
 }
-function _n(e = {}, t = process.cwd()) {
-  const n = j(t), o = ve(n);
+function Zn(e = {}, t = process.cwd()) {
+  const n = S(t), o = we(n);
   if (e.json) {
     console.log(
       JSON.stringify(
@@ -1454,7 +1406,7 @@ function _n(e = {}, t = process.cwd()) {
           },
           user: n.user,
           project: n.project,
-          effective: Qe(n.user, n.project)
+          effective: Tt(n.user, n.project)
         },
         null,
         2
@@ -1462,28 +1414,28 @@ function _n(e = {}, t = process.cwd()) {
     );
     return;
   }
-  console.log(`user:    ${n.paths.user}${Ne(n.paths.user)}`), console.log(`project: ${n.paths.project}${Ne(n.paths.project)}`);
+  console.log(`user:    ${n.paths.user}${Se(n.paths.user)}`), console.log(`project: ${n.paths.project}${Se(n.paths.project)}`);
   const r = Math.max(...o.map((s) => s.path.length));
   let i = "";
   for (const s of o)
     s.section.name !== i && (i = s.section.name, console.log(`
-${l.bold(i)} ${l.dim(`— ${s.section.summary}`)}`)), console.log(`  ${s.path.padEnd(r + 2)}${dt(s)}`);
+${l.bold(i)} ${l.dim(`— ${s.section.summary}`)}`)), console.log(`  ${s.path.padEnd(r + 2)}${ht(s)}`);
   console.log(
     l.dim(
       "\nProject beats user per key; CLI flags beat both. `aiui config` browses the docs interactively."
     )
   );
 }
-function Ne(e) {
+function Se(e) {
   return v(e) ? "" : l.dim(" (not present)");
 }
-function dt(e) {
-  return e.effective !== void 0 ? `${l.cyan($(e.effective))} ${l.dim(`(${e.source})`)}` : l.dim(
-    e.field.default !== void 0 ? `default: ${$(e.field.default)}` : "unset"
+function ht(e) {
+  return e.effective !== void 0 ? `${l.cyan(I(e.effective))} ${l.dim(`(${e.source})`)}` : l.dim(
+    e.field.default !== void 0 ? `default: ${I(e.field.default)}` : "unset"
   );
 }
-function Rn(e, t = process.cwd()) {
-  const n = j(t), o = ke(e, n);
+function Qn(e, t = process.cwd()) {
+  const n = S(t), o = ge(e, n);
   if (o) {
     if (o.effective !== void 0) {
       console.log(String(o.effective));
@@ -1492,65 +1444,65 @@ function Rn(e, t = process.cwd()) {
       return;
     }
     if (o.field.default !== void 0) {
-      console.log(String(o.field.default)), console.error(l.dim(`# built-in default — ${ce(o.field)}`));
+      console.log(String(o.field.default)), console.error(l.dim(`# built-in default — ${oe(o.field)}`));
       return;
     }
     console.error(
-      l.dim(`# not set in any config file — default: ${ce(o.field)}`)
+      l.dim(`# not set in any config file — default: ${oe(o.field)}`)
     );
   }
 }
-function Ln(e, t, n = {}, o = process.cwd()) {
-  const r = j(o), i = ke(e, r);
+function eo(e, t, n = {}, o = process.cwd()) {
+  const r = S(o), i = ge(e, r);
   if (!i)
     return;
-  const s = ae(i.field, t);
+  const s = re(i.field, t);
   if ("error" in s) {
-    g(`invalid value for ${i.path}: ${t}`, s.error), process.exitCode = 1;
+    y(`invalid value for ${i.path}: ${t}`, s.error), process.exitCode = 1;
     return;
   }
-  ht(r, i, s.value, n.project ? "project" : "user");
+  ft(r, i, s.value, n.project ? "project" : "user");
 }
-function ht(e, t, n, o) {
-  const r = fe(e.paths[o], (i) => {
+function ft(e, t, n, o) {
+  const r = Ge(e.paths[o], (i) => {
     const s = i;
     s[t.section.name] = { ...s[t.section.name], [t.field.key]: n };
   });
-  y(`wrote ${t.path}: ${$(n)} to ${r}`);
+  g(`wrote ${t.path}: ${I(n)} to ${r}`);
 }
-function Mn(e, t = {}, n = process.cwd()) {
-  const o = j(n), r = ke(e, o);
-  r && ft(o, r, t.project ? "project" : "user");
+function to(e, t = {}, n = process.cwd()) {
+  const o = S(n), r = ge(e, o);
+  r && pt(o, r, t.project ? "project" : "user");
 }
-function ft(e, t, n) {
-  var a;
+function pt(e, t, n) {
+  var c;
   const o = e.paths[n];
-  if (((a = (O(o) ?? {})[t.section.name]) == null ? void 0 : a[t.field.key]) === void 0) {
-    y(`${t.path} is not set in the ${n} config (${o})`);
+  if (((c = (ie(o) ?? {})[t.section.name]) == null ? void 0 : c[t.field.key]) === void 0) {
+    g(`${t.path} is not set in the ${n} config (${o})`);
     return;
   }
-  const s = fe(o, (c) => {
-    const d = c, p = { ...d[t.section.name] };
-    delete p[t.field.key], Object.keys(p).length === 0 ? delete d[t.section.name] : d[t.section.name] = p;
+  const s = Ge(o, (a) => {
+    const u = a, m = { ...u[t.section.name] };
+    delete m[t.field.key], Object.keys(m).length === 0 ? delete u[t.section.name] : u[t.section.name] = m;
   });
-  y(`removed ${t.path} from ${s}`);
+  g(`removed ${t.path} from ${s}`);
 }
-async function _e(e = process.cwd()) {
+async function Te(e = process.cwd()) {
   if (!process.stdin.isTTY || !process.stdout.isTTY) {
-    g(
+    y(
       "aiui config tui needs an interactive terminal",
       "In scripts and non-TTY sessions use `aiui config show` (or `show --json`)."
     ), process.exitCode = 1;
     return;
   }
-  const t = j(e).paths;
-  console.log(l.dim(`user:    ${Le(t.user)}`)), console.log(l.dim(`project: ${Le(t.project)}`));
+  const t = S(e).paths;
+  console.log(l.dim(`user:    ${Ne(t.user)}`)), console.log(l.dim(`project: ${Ne(t.project)}`));
   try {
     for (; ; ) {
-      const n = j(e), o = await Bn(n);
+      const n = S(e), o = await no(n);
       if (!o)
         return;
-      await Vn(n, o);
+      await ro(n, o);
     }
   } catch (n) {
     if (n instanceof Error && n.name === "ExitPromptError")
@@ -1558,35 +1510,35 @@ async function _e(e = process.cwd()) {
     throw n;
   }
 }
-async function Bn(e) {
-  const t = ve(e), n = Math.max(...t.map((r) => r.path.length)) + 2, o = [];
-  for (const r of M) {
-    o.push(new ie(l.dim(`── ${r.name} — ${r.summary}`)));
+async function no(e) {
+  const t = we(e), n = Math.max(...t.map((r) => r.path.length)) + 2, o = [];
+  for (const r of Nt) {
+    o.push(new se(l.dim(`── ${r.name} — ${r.summary}`)));
     for (const i of t.filter((s) => s.section.name === r.name))
       o.push({
-        name: `${i.path.padEnd(n)}${dt(i)}`,
+        name: `${i.path.padEnd(n)}${ht(i)}`,
         value: i,
-        description: Fn(i)
+        description: oo(i)
       });
   }
-  return o.push(new ie(" ")), o.push({ name: "exit", value: void 0, description: "Leave the config browser." }), K({
+  return o.push(new se(" ")), o.push({ name: "exit", value: void 0, description: "Leave the config browser." }), _({
     message: "aiui config",
     choices: o,
     pageSize: o.length,
     loop: !1
   });
 }
-function Fn(e) {
+function oo(e) {
   const t = [l.bold(e.field.summary)];
-  return e.field.doc && t.push(Kn(e.field.doc, 76)), t.push(""), e.field.type === "enum" && t.push(`allowed:   ${(e.field.values ?? []).join(" | ")}`), t.push(`default:   ${ce(e.field)}`), t.push(`user:      ${Re(e.userValue)}`), t.push(`project:   ${Re(e.projectValue)}`), t.push(
-    `effective: ${e.effective !== void 0 ? `${$(e.effective)} (from the ${e.source} config)` : "the built-in default"}`
+  return e.field.doc && t.push(so(e.field.doc, 76)), t.push(""), e.field.type === "enum" && t.push(`allowed:   ${(e.field.values ?? []).join(" | ")}`), t.push(`default:   ${oe(e.field)}`), t.push(`user:      ${Ae(e.userValue)}`), t.push(`project:   ${Ae(e.projectValue)}`), t.push(
+    `effective: ${e.effective !== void 0 ? `${I(e.effective)} (from the ${e.source} config)` : "the built-in default"}`
   ), t.join(`
 `);
 }
-function Re(e) {
-  return e === void 0 ? l.dim("(not set)") : $(e);
+function Ae(e) {
+  return e === void 0 ? l.dim("(not set)") : I(e);
 }
-async function Vn(e, t) {
+async function ro(e, t) {
   const n = [
     {
       name: "set in the user config",
@@ -1602,13 +1554,13 @@ This project only; the file may be shared or committed by a team.`
     }
   ];
   t.userValue !== void 0 && n.push({
-    name: `unset in the user config (currently ${$(t.userValue)})`,
+    name: `unset in the user config (currently ${I(t.userValue)})`,
     value: "unset-user"
   }), t.projectValue !== void 0 && n.push({
-    name: `unset in the project config (currently ${$(t.projectValue)})`,
+    name: `unset in the project config (currently ${I(t.projectValue)})`,
     value: "unset-project"
-  }), n.push(new ie()), n.push({ name: "back", value: "back" });
-  const o = await K({
+  }), n.push(new se()), n.push({ name: "back", value: "back" });
+  const o = await _({
     message: `${t.path} — ${t.field.summary}`,
     choices: n
   });
@@ -1616,16 +1568,16 @@ This project only; the file may be shared or committed by a team.`
     return;
   const r = o.endsWith("project") ? "project" : "user";
   if (o.startsWith("unset")) {
-    ft(e, t, r);
+    pt(e, t, r);
     return;
   }
-  const i = await Hn(t);
-  i !== void 0 && ht(e, t, i, r);
+  const i = await io(t);
+  i !== void 0 && ft(e, t, i, r);
 }
-async function Hn(e) {
+async function io(e) {
   const t = (r) => r === e.effective ? " (current)" : r === e.field.default ? " (default)" : "";
   if (e.field.type === "boolean")
-    return K({
+    return _({
       message: `${e.path} =`,
       choices: [!0, !1].map((r) => ({
         name: `${r}${l.dim(t(r))}`,
@@ -1633,28 +1585,28 @@ async function Hn(e) {
       }))
     });
   if (e.field.type === "enum")
-    return K({
+    return _({
       message: `${e.path} =`,
       choices: (e.field.values ?? []).map((r) => ({
         name: `${r}${l.dim(t(r))}`,
         value: r
       }))
     });
-  const n = await _t({
+  const n = await Ut({
     message: `${e.path} = `,
     default: e.effective !== void 0 ? String(e.effective) : void 0,
     validate: (r) => {
-      const i = ae(e.field, r);
+      const i = re(e.field, r);
       return "error" in i ? i.error : !0;
     }
-  }), o = ae(e.field, n);
+  }), o = re(e.field, n);
   return "error" in o ? void 0 : o.value;
 }
-function Le(e) {
-  const t = At();
+function Ne(e) {
+  const t = ue();
   return e.startsWith(t) ? `~${e.slice(t.length)}` : e;
 }
-function Kn(e, t) {
+function so(e, t) {
   const n = [];
   let o = "";
   for (const r of e.split(/\s+/))
@@ -1662,8 +1614,7 @@ function Kn(e, t) {
   return o && n.push(o), n.join(`
 `);
 }
-const Yn = "vite", oe = "VITE_AIUI_PORT";
-function pt(e, t) {
+function ao(e, t) {
   if (t !== void 0) {
     const n = e.find((o) => o.tag === t);
     if (!n) {
@@ -1676,49 +1627,42 @@ function pt(e, t) {
   }
   return e.length > 0 ? { select: e } : {};
 }
-async function Wn(e = []) {
-  const t = lt(e), { mcp: n, tag: o, passthrough: r } = t, i = ct(r);
+const co = "vite";
+async function lo(e = []) {
+  const t = pe(e), { mcp: n, tag: o, passthrough: r } = t, i = at(r);
   if (i) {
-    i === "help" ? Qn() : console.log(`aiui ${ee}`), await Xn(r);
+    i === "help" ? mo() : console.log(`aiui ${me}`), await po(r);
     return;
   }
-  const s = n ?? o, a = pt(J(), s);
-  if (a.error) {
-    g("Could not resolve an aiui channel", a.error), process.exitCode = 1;
-    return;
-  }
-  const c = a.select ? await qe(a.select) : a.server;
-  let d;
-  c ? (d = String(c.port), console.error(
-    l.dim(
-      `aiui: connecting vite to channel "${c.tag}" (${c.cwd}) on port ${d} via ${oe}`
-    )
-  )) : console.error(l.dim(`aiui: no running channel found — ${oe} left unset`));
-  const p = mt();
-  if (!p)
+  (n !== void 0 || o !== void 0) && C(
+    "aiui vite no longer connects the app to a channel",
+    "--aiui-mcp / --aiui-tag are ignored. The app reaches the channel through the intent client served at /intent/, not a build-time port. (The standalone panel's own `pnpm dev` still selects a channel — that page is served on Vite's origin, not the channel's.)"
+  );
+  const s = wt();
+  if (!s)
     return;
-  const h = {};
-  d && (h[oe] = d), process.stdout.isTTY && !("FORCE_COLOR" in process.env) && !("NO_COLOR" in process.env) && (h.FORCE_COLOR = "1");
-  const m = k(p.command, [...p.args, ...r], {
+  const c = {};
+  process.stdout.isTTY && !("FORCE_COLOR" in process.env) && !("NO_COLOR" in process.env) && (c.FORCE_COLOR = "1");
+  const a = E(s.command, [...s.args, ...r], {
     stdio: ["inherit", "pipe", "inherit"],
     buffer: !1,
     reject: !1,
-    env: h
+    env: c
   });
-  m.stdout && Jn(m.stdout, process.stdout, (w) => {
-    zn(w, t);
+  a.stdout && fo(a.stdout, process.stdout, (m) => {
+    mt(m, t);
   });
-  const b = await m;
-  b.exitCode && (process.exitCode = b.exitCode);
+  const u = await a;
+  u.exitCode && (process.exitCode = u.exitCode);
 }
-const qn = /\x1b\[[0-9;?]*[ -/]*[@-~]/g;
-function Gn(e) {
-  const n = e.replace(qn, "").match(
+const uo = /\x1b\[[0-9;?]*[ -/]*[@-~]/g;
+function ho(e) {
+  const n = e.replace(uo, "").match(
     /\bLocal:\s+(https?:\/\/(?:localhost|127\.0\.0\.1|\[::1\])(?::\d+)?\/?\S*)/
   );
   return n == null ? void 0 : n[1];
 }
-function Jn(e, t, n) {
+function fo(e, t, n) {
   let o = "", r = !1;
   e.on("data", (i) => {
     if (t.write(i), !r) {
@@ -1727,11 +1671,11 @@ function Jn(e, t, n) {
 `);
         if (s === -1)
           break;
-        const a = o.slice(0, s);
+        const c = o.slice(0, s);
         o = o.slice(s + 1);
-        const c = Gn(a);
-        if (c) {
-          r = !0, o = "", n(c);
+        const a = ho(c);
+        if (a) {
+          r = !0, o = "", n(a);
           return;
         }
       }
@@ -1739,16 +1683,16 @@ function Jn(e, t, n) {
     }
   });
 }
-async function zn(e, t) {
+async function mt(e, t) {
   try {
     const n = {
-      ...V().chrome,
+      ...P().chrome,
       ...t.browserUrl ? { browserUrl: t.browserUrl } : {}
-    }, o = Ct(t, n);
+    }, o = kt(t, n);
     if (o.kind === "skip")
       return;
     if (o.kind === "hint") {
-      y(
+      g(
         `detected a headless environment (${o.reason}) — not opening a browser`,
         `Assuming the dev server's port is already forwarded, open ${e} in the browser
 on your local machine. (Pass --aiui-browser to open one here anyway.)`
@@ -1759,251 +1703,229 @@ on your local machine. (Pass --aiui-browser to open one here anyway.)`
       await H(n.browserUrl, e), console.error(l.dim(`aiui: opened ${e} in the browser at ${n.browserUrl}`));
       return;
     }
-    const r = D(t, n), i = await F(r.userDataDir);
-    i ? (await H(i.browserUrl, e), console.error(l.dim(`aiui: opened ${e} in the session browser`))) : (await st({
+    const r = T(t, n), i = await U(r.userDataDir);
+    i ? (await H(i.browserUrl, e), console.error(l.dim(`aiui: opened ${e} in the session browser`))) : (await it({
       flags: t,
       config: n,
       interactive: !1,
       startUrl: e
     }), console.error(l.dim(`aiui: opened ${e} in a new session browser`)));
   } catch (n) {
-    T(
+    C(
       "couldn't open the app in the session browser — the dev server is unaffected",
       n instanceof Error ? n.message : String(n)
     );
   }
 }
-function mt() {
+function wt() {
   try {
-    return ge(Yn);
+    return J(co);
   } catch {
-    g(
+    y(
       "Vite is not available",
       "`vite` should be installed as a dependency of aiui — try reinstalling."
     ), process.exitCode = 1;
     return;
   }
 }
-async function Xn(e) {
-  const t = mt();
+async function po(e) {
+  const t = wt();
   if (!t)
     return;
-  const n = await k(t.command, [...t.args, ...e], {
+  const n = await E(t.command, [...t.args, ...e], {
     stdio: "inherit",
     reject: !1
   });
   n.exitCode && (process.exitCode = n.exitCode);
 }
-function Qn() {
-  console.log(`aiui vite — launch Vite connected to the running aiui channel
+function mo() {
+  console.log(`aiui vite — launch Vite and open the app in the session browser
 
 aiui's own flags (everything else forwards to vite verbatim):
-  --aiui-mcp <tag>               connect to the channel server with this tag
-  --aiui-tag <tag>               accepted alias for --aiui-mcp
   --aiui-browser                 open the app in the session browser even when
                                  the environment looks headless (CI, SSH, no display)
   --aiui-no-browser              never open a browser for this run
   --aiui-chrome-profile <name>   browser profile at .aiui-cache/chrome/<name>
   --aiui-chrome-data-dir <path>  explicit browser user data dir
 
-The chosen channel's port is exported as VITE_AIUI_PORT; the aiuiDevOverlay()
-Vite plugin picks it up there and wires the intent tool to it. When Vite prints
-its Local: URL, aiui opens it in the shared session browser (the one \`aiui
-claude\` and \`aiui open\` use); in headless environments it prints the URL to
-open on your own machine instead. What follows is vite's own --help:
+When Vite prints its Local: URL, aiui opens it in the shared session browser
+(the one \`aiui claude\` and \`aiui open\` use); in headless environments it
+prints the URL to open on your own machine instead.
+
+The app reaches the aiui channel through the intent client served at /intent/,
+not through this command — so there is no channel to pick here. (The standalone
+intent panel, served on Vite's own origin, is the exception: its \`pnpm dev\`
+selects a channel itself.) What follows is vite's own --help:
 `);
 }
-const re = "/__aiui/debug", Me = 4747;
-function Zn() {
-  let e = R(Ge(import.meta.url));
-  for (let t = 0; t < 5; t++) {
-    const n = f(e, "package.json");
-    if (v(n))
-      try {
-        if (JSON.parse(U(n, "utf8")).name === "@habemus-papadum/aiui")
-          return e;
-      } catch {
-      }
-    e = R(e);
-  }
-}
-async function eo(e = {}) {
-  var d;
-  const t = pt(J(), e.mcp);
+async function wo(e = {}) {
+  const t = ao(L(), e.mcp);
   if (t.error) {
-    g("Could not resolve an aiui channel", t.error), process.exitCode = 1;
+    y("Could not resolve an aiui channel", t.error), process.exitCode = 1;
     return;
   }
-  const n = t.select ? await qe(t.select) : t.server;
+  const n = t.select ? await Be(t.select) : t.server;
   if (!n) {
-    console.log("No running aiui channel to debug — start one with `aiui claude`."), process.exitCode = 1;
+    console.log("No running aiui channel to open — start one with `aiui claude`."), process.exitCode = 1;
     return;
   }
-  const o = Zn();
-  if (!o) {
-    g("Could not locate the aiui package root to serve the viewer from"), process.exitCode = 1;
-    return;
+  const o = `http://127.0.0.1:${n.port}/`;
+  console.log(`${l.cyan("aiui debug")} — the channel console`), console.log(`  ${l.bold(o)}`), console.log(
+    l.dim(`  channel "${n.tag}" (${n.cwd}) on port ${n.port}`) + l.dim(" — the dashboard links to the trace debugger at /__aiui/debug.")
+  ), e.open !== !1 && await mt(o, pe([]));
+}
+const _e = [".env", ".env.local", ".env.dev", ".env.dev.local"];
+function go(e) {
+  let t = e;
+  for (; ; ) {
+    if (v(h(t, "pnpm-workspace.yaml")) || v(h(t, ".git")))
+      return t;
+    const n = Oe(t);
+    if (n === t)
+      return e;
+    t = n;
+  }
+}
+function bo(e) {
+  const t = /* @__PURE__ */ new Map();
+  for (const n of e.split(`
+`)) {
+    const o = n.trim();
+    if (o === "" || o.startsWith("#"))
+      continue;
+    const r = /^(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=\s*(.*)$/.exec(o);
+    if (!r)
+      continue;
+    let i = r[2].trim();
+    i.length >= 2 && (i[0] === '"' || i[0] === "'") && i[i.length - 1] === i[0] && (i = i.slice(1, -1)), t.set(r[1], i);
   }
-  const r = {
-    name: "aiui:debug-home",
-    configureServer(p) {
-      p.middlewares.use((h, m, b) => {
-        if ((h.url ?? "/").split("?")[0] === "/") {
-          m.statusCode = 302, m.setHeader("location", re), m.end();
-          return;
-        }
-        b();
-      });
-    }
-  }, i = Number(e.port), s = await Lt({
-    root: o,
-    configFile: !1,
-    // `mount: false`: this server hosts the viewer, not an app — nothing to
-    // arm, so the intent tool stays out of it. The plugin still serves the
-    // DEBUG_ROUTE page and seeds the picked channel's port into it.
-    plugins: [r, Rt({ port: n.port, mount: !1 })],
-    server: {
-      port: Number.isInteger(i) && i > 0 ? i : Me,
-      open: e.open === !1 ? !1 : re
-    },
-    logLevel: "warn"
-  });
-  await s.listen();
-  const c = `${(((d = s.resolvedUrls) == null ? void 0 : d.local[0]) ?? `http://localhost:${Me}/`).replace(/\/$/, "")}${re}`;
-  console.log(`${l.cyan("aiui debug")} — the lowering-trace viewer`), console.log(`  viewing  ${l.bold(c)}`), console.log(
-    l.dim(`  channel  "${n.tag}" (${n.cwd}) on port ${n.port}`) + l.dim(" — switch channels from the page's header. Ctrl-C to stop.")
-  );
+  return t;
 }
-async function to(e, t = {}) {
-  const n = P(process.cwd(), e ?? "aiui-demo");
-  switch (no(n)) {
-    case "occupied":
-      g(
-        `${n} already exists and isn't an aiui demo`,
-        "Pick an empty (or new) directory — the scaffold never overwrites existing content."
-      ), process.exitCode = 1;
-      return;
-    case "existing-demo":
-      y(`existing demo found at ${n} — continuing where it left off`);
-      break;
-    case "new": {
-      const o = so();
-      if (!o) {
-        g("the demo template did not ship with this aiui install"), process.exitCode = 1;
-        return;
-      }
-      ro(o, n), console.log(`scaffolded the demo playground at ${n}`), await io(n);
-      break;
-    }
-  }
-  if (!t.skipInstall && !v(f(n, "node_modules")))
-    if (!ye("npm"))
-      y("npm not found on PATH — run your package manager's install in the demo yourself");
-    else {
-      console.log("installing dependencies (one time)…");
-      const o = await k("npm", ["install", "--no-audit", "--no-fund"], {
-        cwd: n,
-        stdio: "inherit",
-        reject: !1
-      });
-      if (o.exitCode) {
-        g("npm install failed — fix that, then re-run this command to continue"), process.exitCode = o.exitCode;
-        return;
-      }
-    }
-  ao(n);
+function je(e) {
+  return `'${e.replace(/'/g, "'\\''")}'`;
 }
-function no(e) {
-  var n;
-  if (!v(e))
-    return "new";
-  let t;
-  try {
-    t = G(e);
-  } catch {
-    return "occupied";
-  }
-  if (t.length === 0)
-    return "new";
-  try {
-    if (((n = JSON.parse(U(f(e, "package.json"), "utf8")).aiui) == null ? void 0 : n.demo) === !0)
-      return "existing-demo";
-  } catch {
-  }
-  return "occupied";
-}
-function oo(e) {
-  return /^\d+\.\d+\.\d+$/.test(e) ? `^${e}` : "latest";
-}
-function ro(e, t) {
-  W(t, { recursive: !0 }), Et(e, t, { recursive: !0 }), v(f(t, "gitignore")) && Dt(f(t, "gitignore"), f(t, ".gitignore"));
-  const n = f(t, "package.json");
-  q(
-    n,
-    U(n, "utf8").replaceAll(
-      "__AIUI_VERSION_RANGE__",
-      oo(ee)
+function yo(e) {
+  const t = [];
+  t.push(
+    // biome-ignore lint/suspicious/noTemplateCurlyInString: shell parameter expansion, not a JS template
+    'if [ -z "${_AIUI_OLD_PATH:-}" ]; then _AIUI_OLD_PATH="$PATH"; export _AIUI_OLD_PATH; fi;'
+  );
+  for (const o of [...e.pathDirs].reverse()) {
+    const r = je(o);
+    t.push(`case ":$PATH:" in *":"${r}":"*) : ;; *) PATH=${r}":$PATH"; export PATH ;; esac;`);
+  }
+  for (const [o, r] of e.vars)
+    t.push(`export ${o}=${je(r)};`);
+  const n = e.vars.size > 0 ? ` unset ${[...e.vars.keys()].join(" ")};` : "";
+  return t.push(
+    `aiui_deactivate () { if [ -n "\${_AIUI_OLD_PATH:-}" ]; then PATH="$_AIUI_OLD_PATH"; export PATH; unset _AIUI_OLD_PATH; fi;${n} unset -f aiui_deactivate; };`
+  ), `${t.join(`
+`)}
+`;
+}
+function vo() {
+  const e = process.cwd(), t = go(e), n = [h(t, "bin"), h(t, "node_modules", ".bin")];
+  e !== t && n.push(h(e, "node_modules", ".bin"));
+  const o = n.filter((c) => v(c)), r = /* @__PURE__ */ new Map(), i = /* @__PURE__ */ new Map();
+  for (const c of _e) {
+    const a = h(t, c);
+    if (v(a))
+      for (const [u, m] of bo(M(a, "utf8")))
+        r.set(u, m), i.set(u, c);
+  }
+  process.stdout.write(yo({ pathDirs: o, vars: r }));
+  const s = [...r.keys()].map((c) => `${c} (${i.get(c)})`);
+  process.stderr.write(
+    l.dim(
+      `aiui env: root ${t}
+aiui env: PATH + ${o.length > 0 ? o.join(", ") : "(nothing found)"}
+aiui env: export ${s.length > 0 ? s.join(", ") : `(none — no ${_e.join("/")} at root)`}
+aiui env: activate with  eval "$(aiui env)"  — undo with  aiui_deactivate
+`
     )
   );
 }
-async function io(e) {
-  !ye("git") || (await k("git", ["-C", e, "rev-parse", "--is-inside-work-tree"], {
-    reject: !1
-  })).exitCode === 0 || (await k("git", ["-C", e, "init", "--quiet"], { reject: !1 })).exitCode !== 0 || (await k("git", ["-C", e, "add", "-A"], { reject: !1 }), await k("git", ["-C", e, "commit", "--quiet", "-m", "aiui demo scaffold"], {
-    reject: !1
-  }));
-}
-function so() {
-  let e = R(Ge(import.meta.url));
-  for (let t = 0; t < 4; t++) {
-    const n = f(e, "templates", "demo");
-    if (v(f(n, "package.json")))
-      return n;
-    e = R(e);
-  }
-}
-function ao(e) {
-  const t = yt(process.cwd(), e) || ".", n = t === "aiui-demo" ? "aiui demo" : `aiui demo ${t}`;
-  console.log(`
-demo ready. Run the loop:
-
-  cd ${t}
-  npm run claude     # terminal 1 — Claude Code with the aiui channel + session browser
-  npm run dev        # terminal 2 — the demo app (Vite + the intent tool)
-
-then open the app in the session browser (the window you share with the agent):
-
-  npx aiui open http://localhost:5173
-
-Click the ✳ aiui button on the page and type an intent — it lands in the session
-as a prompt. Re-run \`${n}\` anytime to continue this sandbox.`);
-}
-const co = "@habemus-papadum/aiui-claude-channel";
-async function lo(e = []) {
+const $o = "@habemus-papadum/aiui-claude-channel";
+async function ko(e = []) {
   let t;
   try {
-    t = ge(co);
+    t = J($o);
   } catch {
-    g(
+    y(
       "The aiui Claude channel CLI is not available",
       "`@habemus-papadum/aiui-claude-channel` should be installed as a dependency of aiui — try reinstalling."
     ), process.exitCode = 1;
     return;
   }
-  const n = await k(t.command, [...t.args, ...e], {
+  const n = ut(e) ? xn(e, ct({ config: P() })) : e, o = await E(t.command, [...t.args, ...n], {
     stdio: "inherit",
     reject: !1
   });
-  n.exitCode && (process.exitCode = n.exitCode);
+  o.exitCode && (process.exitCode = o.exitCode);
+}
+function Co(e) {
+  const t = Buffer.from(JSON.stringify(e), "utf8"), n = Buffer.allocUnsafe(4 + t.length);
+  return gt() ? n.writeUInt32LE(t.length, 0) : n.writeUInt32BE(t.length, 0), t.copy(n, 4), n;
+}
+function xo(e) {
+  const t = [];
+  let n = 0;
+  for (; e.length - n >= 4; ) {
+    const o = gt() ? e.readUInt32LE(n) : e.readUInt32BE(n);
+    if (e.length - n - 4 < o)
+      break;
+    const r = e.subarray(n + 4, n + 4 + o);
+    n += 4 + o;
+    try {
+      t.push(JSON.parse(r.toString("utf8")));
+    } catch {
+      t.push(void 0);
+    }
+  }
+  return { messages: t, rest: e.subarray(n) };
+}
+function gt() {
+  return new Uint8Array(new Uint32Array([1]).buffer)[0] === 1;
+}
+function Io(e) {
+  const t = e !== null && typeof e == "object" ? e.cmd : void 0;
+  return t === "ping" ? { ok: !0, at: (/* @__PURE__ */ new Date()).toISOString() } : t === "version" ? { ok: !0, version: 1 } : t === "listChannels" ? { ok: !0, channels: L().map((o) => ({
+    tag: o.tag,
+    port: o.port,
+    pid: o.pid,
+    cwd: o.cwd,
+    startedAt: o.startedAt,
+    ...o.name !== void 0 ? { name: o.name } : {},
+    ...o.debug === !0 ? { debug: !0 } : {}
+  })) } : { ok: !1, error: `unknown cmd ${JSON.stringify(t)}` };
+}
+async function Eo() {
+  let e = Buffer.alloc(0);
+  process.stdin.on("data", (t) => {
+    e = Buffer.concat([e, t]);
+    const { messages: n, rest: o } = xo(e);
+    e = o;
+    for (const r of n) {
+      let i;
+      try {
+        i = Io(r);
+      } catch (s) {
+        i = { ok: !1, error: s instanceof Error ? s.message : String(s) };
+      }
+      process.stdout.write(Co(i));
+    }
+  }), await new Promise((t) => {
+    process.stdin.on("end", t), process.stdin.on("close", t);
+  });
 }
-function uo() {
+function Po() {
   const e = [];
-  for (const t of Object.values(Nt()))
+  for (const t of Object.values(ze()))
     for (const n of t ?? [])
       n.family === "IPv4" && !n.internal && e.push(n.address);
   return e;
 }
-async function Be(e, t) {
+async function G(e, t) {
   try {
     const n = await fetch(`http://127.0.0.1:${e}${t}`, {
       signal: AbortSignal.timeout(1500)
@@ -2013,53 +1935,103 @@ async function Be(e, t) {
     return;
   }
 }
-async function ho(e) {
-  const t = await Be(
+async function Do(e, t) {
+  const n = await G(
     e,
-    "/paint/info"
+    `${t}/info`
   );
-  if (!(t != null && t.ok))
+  if (!(n != null && n.ok))
     return;
-  const n = await Be(e, "/health"), o = (n == null ? void 0 : n.host) !== void 0 && n.host !== "127.0.0.1";
+  const o = await G(e, "/health"), r = (o == null ? void 0 : o.host) !== void 0 && o.host !== "127.0.0.1";
   return {
-    lan: o,
-    urls: o ? uo().map((r) => `http://${r}:${e}/paint/`) : [`http://127.0.0.1:${e}/paint/`],
-    hosts: t.hosts ?? 0,
-    clients: t.clients ?? 0
+    lan: r,
+    urls: r ? Po().map((i) => `http://${i}:${e}${t}/`) : [`http://127.0.0.1:${e}${t}/`],
+    hosts: n.hosts ?? 0,
+    clients: n.clients ?? 0
   };
 }
-async function fo(e = {}) {
-  const t = J(), n = [];
-  for (const o of t) {
-    const r = await ho(o.port);
-    r && n.push({ cwd: o.cwd, pid: o.pid, port: o.port, ...r });
+function So(e) {
+  const t = { name: "loopback", address: "127.0.0.1" };
+  if (e === void 0 || e === "127.0.0.1")
+    return [t];
+  const n = [];
+  for (const [o, r] of Object.entries(ze()))
+    for (const i of r ?? [])
+      i.family === "IPv4" && !i.internal && n.push({ name: o, address: i.address });
+  return [...n, t];
+}
+async function To(e) {
+  if (process.platform !== "darwin")
+    return !1;
+  try {
+    return await E("pbcopy", { input: e }), !0;
+  } catch {
+    return !1;
   }
-  if (e.json) {
-    console.log(JSON.stringify({ targets: n }, null, 2));
+}
+function Ao(e, t) {
+  var n;
+  return e.name ?? ((n = t.get(e.ppid)) == null ? void 0 : n.name) ?? e.cwd;
+}
+function No(e = {}) {
+  return e.json ? Oo("/pencil") : _o("/pencil", "pencil");
+}
+async function _o(e, t) {
+  const n = L();
+  if (n.length === 0) {
+    jo(t);
     return;
   }
-  if (n.length === 0) {
-    console.log("No running channel is hosting the paint surface."), console.log(""), console.log(
-      `It is on by default — start a session with ${l.cyan("aiui claude")}. If it's off here,`
-    ), console.log(
-      `check for ${l.cyan("sidecars.paint false")} in config or a --aiui-no-sidecar flag.`
+  const o = await Be(n), r = await G(o.port, `${e}/info`);
+  if (!(r != null && r.ok)) {
+    console.log(
+      `${l.bold(Ao(o, Re(He())))} is not hosting the ${t} surface.`
     ), process.exitCode = 1;
     return;
   }
-  for (const o of n) {
-    console.log(""), console.log(`${l.bold(o.cwd)} ${l.dim(`(channel :${o.port})`)}`);
-    for (const i of o.urls.length ? o.urls : ["(no LAN address found)"])
-      console.log(`  ${l.cyan(i)}`);
-    const r = o.lan ? "open the URL on the iPad (same Wi-Fi)" : "loopback-only — the iPad needs a tunnel to this port (Tailscale, ssh -L), or relaunch with --aiui-bind host";
-    console.log(
-      l.dim(`  ${o.hosts} browser host(s), ${o.clients} viewer(s) — ${r}`)
-    );
+  const i = await G(o.port, "/health"), s = So(i == null ? void 0 : i.host), c = (i == null ? void 0 : i.host) !== void 0 && i.host !== "127.0.0.1", u = `http://${(s.length === 1 ? s[0] : await _({
+    message: "Which host interface should the iPad reach the channel on?",
+    choices: s.map((f) => ({
+      name: `${f.address}  ${l.dim(`(${f.name})`)}`,
+      value: f
+    }))
+  })).address}:${o.port}${e}/`, m = await To(u);
+  console.log(""), console.log(`  ${l.cyan(u)}`), console.log(""), m ? (console.log(l.dim("  Copied to your clipboard.")), console.log(
+    l.dim("  Use Universal Clipboard (⌘V on the iPad) to paste it into Safari there.")
+  )) : console.log(l.dim("  (Copy it to the iPad however you like.)")), c || console.log(
+    l.dim(
+      "  This channel is loopback-only: the iPad needs a tunnel to this port (Tailscale, ssh -L), or relaunch with --aiui-bind host."
+    )
+  ), console.log("");
+}
+function jo(e) {
+  console.log(`No running channel is hosting the ${e} surface.`), console.log(""), console.log(`Every channel hosts it — start a session with ${l.cyan("aiui claude")} (or a`), console.log(
+    `standalone ${l.cyan("aiui mcp serve")}), then run this again to reach the ${e} surface.`
+  ), process.exitCode = 1;
+}
+async function Oo(e, t) {
+  var i;
+  const n = L(), o = n.length > 0 ? Re(He()) : /* @__PURE__ */ new Map(), r = [];
+  for (const s of n) {
+    const c = await Do(s.port, e);
+    if (c) {
+      const a = s.name ?? ((i = o.get(s.ppid)) == null ? void 0 : i.name);
+      r.push({
+        cwd: s.cwd,
+        pid: s.pid,
+        port: s.port,
+        ...a !== void 0 ? { session: a } : {},
+        ...c
+      });
+    }
   }
-  console.log("");
+  console.log(JSON.stringify({ targets: r }, null, 2));
 }
-function po() {
-  const e = new gt();
-  e.name("aiui").description("ai ui frontends — thin launchers for Claude, Vite, and the channel CLI").version(ee).enablePositionalOptions(), e.command("claude").description("launch Claude (extra args are forwarded, e.g. `aiui claude --resume`)").allowUnknownOption().allowExcessArguments().helpOption(!1).argument("[args...]", "arguments forwarded to claude").action((o) => En(o)), e.command("vite").description("launch Vite (extra args are forwarded, e.g. `aiui vite dev`)").allowUnknownOption().allowExcessArguments().helpOption(!1).argument("[args...]", "arguments forwarded to vite").action((o) => Wn(o)), e.command("debug").description("open the lowering-trace viewer for a running channel (switchable in-page)").option("--mcp <tag>", "target a channel by registry tag (skips the selector)").option("--port <port>", "UI port for the viewer's dev server (default 4747)").option("--no-open", "don't open the browser").action((o) => eo(o)), e.command("chrome").description("manage the agent's browser: install | update | status | extension").argument("<action>", "install | update | status | extension").action((o) => cn([o])), e.command("browser").description(
+function Uo() {
+  const e = new yt();
+  e.name("aiui").description("ai ui frontends — thin launchers for Claude, Vite, and the channel CLI").version(me).enablePositionalOptions(), e.command("claude").description("launch Claude (extra args are forwarded, e.g. `aiui claude --resume`)").allowUnknownOption().allowExcessArguments().helpOption(!1).argument("[args...]", "arguments forwarded to claude").action((o) => Vn(o)), e.command("vite").description("launch Vite (extra args are forwarded, e.g. `aiui vite dev`)").allowUnknownOption().allowExcessArguments().helpOption(!1).argument("[args...]", "arguments forwarded to vite").action((o) => lo(o)), e.command("debug").description("open the channel console (dashboard + trace debugger) in the session browser").option("--mcp <tag>", "target a channel by registry tag (skips the selector)").option("--no-open", "print the URL but don't open the browser").action((o) => wo(o)), e.command("chrome").description("manage the agent's browser: install | update | status").argument("<action>", "install | update | status").argument("[flavor]", "for install/update: chromium | chrome-for-testing (default: configured)").action(
+    (o, r) => gn(r === void 0 ? [o] : [o, r])
+  ), e.command("browser").description(
     "start (or find) the shared session browser; --tunnel does the whole remote-dev local half"
   ).option(
     "--profile <name>",
@@ -2067,13 +2039,13 @@ function po() {
   ).option("--data-dir <path>", "explicit Chrome user data dir").option("--port <port>", "fixed local DevTools debug port (default: OS-assigned)").option("--headless", "launch with no UI").option("--open <url>", "also open this URL in it").option(
     "--tunnel <[user@]host>",
     "reverse-tunnel the debug port to this host (Ctrl-C closes it)"
-  ).option("--remote-port <port>", "fixed port on the tunnel's remote side (default: 9222)").action((o) => en(o)), e.command("demo").description("scaffold a runnable demo playground (safe to re-run; default dir: aiui-demo)").argument("[dir]", "target directory (default: aiui-demo)").option("--skip-install", "scaffold only — don't run npm install").action((o, r) => to(o, r)), e.command("clean").description(
-    "reset aiui state (project + user cache, incl. Chrome for Testing) for a clean-slate demo"
-  ).option("--project-only", "only this repo's .aiui-cache/").option("--user-only", "only the user cache (~/.cache/aiui)").option("--keep-browser", "keep Chrome for Testing (skip the ~160 MB re-download)").option("-n, --dry-run", "print what would be deleted, then stop").option("-y, --yes", "delete without the confirmation prompt").action((o) => Nn(o)), e.command("open").description("open a URL in the session browser, e.g. `aiui open http://localhost:5173`").argument("<url>", "the URL to open").option("--profile <name>", "named profile under .aiui-cache/chrome/").option("--data-dir <path>", "explicit Chrome user data dir").action((o, r) => an(o, r));
-  const t = e.command("config").description("inspect and edit aiui's config.json — tui | show | get | set | unset").action(() => _e());
-  return t.command("tui").description("browse every setting interactively: docs, defaults, current values, editing").action(() => _e()), t.command("show").description("every key with its effective value and which file set it").option("--json", "machine-readable: file paths, per-level values, effective merge").action((o) => _n(o)), t.command("get").description("print a key's effective value (provenance goes to stderr)").argument("<key>", 'dotted key, e.g. "chrome.mode"').action((o) => Rn(o)), t.command("set").description("set a key in the user config (or the project's with --project)").argument("<key>", 'dotted key, e.g. "chrome.mode"').argument("<value>", "the new value, validated against the schema").option("--project", "write .aiui-cache/config.json here instead of the user config").action((o, r, i) => Ln(o, r, i)), t.command("unset").description("remove a key from the user config (or the project's with --project)").argument("<key>", 'dotted key, e.g. "claude.skipPermissions"').option("--project", "remove from .aiui-cache/config.json here instead of the user config").action((o, r) => Mn(o, r)), e.command("mcp").description("run a channel command (forwards to aiui-claude-channel), e.g. `aiui mcp quick`").allowUnknownOption().allowExcessArguments().helpOption(!1).argument("[args...]", "arguments forwarded to the aiui-claude-channel CLI").action((o) => lo(o)), e.command("paint").description("the iPad paint stream — url (where the iPad should connect)").command("url").description("print the URL(s) an iPad should open, per running paint-enabled channel").option("--json", "machine-readable targets").action((o) => fo(o)), e;
+  ).option("--remote-port <port>", "fixed port on the tunnel's remote side (default: 9222)").action((o) => un(o)), e.command("extension").description("the intent client extension's native host: install-native-host | status").argument("<action>", "install-native-host | status").option("--extension-id <id>", "extension id for allowed_origins (default: the pinned id)").action((o, r) => rn(o, r)), e.command("native-host", { hidden: !0 }).description("(internal) Chrome native-messaging host — spawned by the browser").action(() => Eo()), e.command("clean").description(
+    "reset aiui state (project + user cache, incl. the managed browser) for a clean-slate demo"
+  ).option("--project-only", "only this repo's .aiui-cache/").option("--user-only", "only the user cache (~/.cache/aiui)").option("--keep-browser", "keep the managed browser (skip the ~150-160 MB re-download)").option("-n, --dry-run", "print what would be deleted, then stop").option("-y, --yes", "delete without the confirmation prompt").action((o) => Xn(o)), e.command("open").description("open a URL in the session browser, e.g. `aiui open http://localhost:5173`").argument("<url>", "the URL to open").option("--profile <name>", "named profile under .aiui-cache/chrome/").option("--data-dir <path>", "explicit Chrome user data dir").action((o, r) => wn(o, r)), e.command("env").description('print shell code to activate this checkout — use as: eval "$(aiui env)"').action(() => vo());
+  const t = e.command("config").description("inspect and edit aiui's config.json — tui | show | get | set | unset").action(() => Te());
+  return t.command("tui").description("browse every setting interactively: docs, defaults, current values, editing").action(() => Te()), t.command("show").description("every key with its effective value and which file set it").option("--json", "machine-readable: file paths, per-level values, effective merge").action((o) => Zn(o)), t.command("get").description("print a key's effective value (provenance goes to stderr)").argument("<key>", 'dotted key, e.g. "chrome.mode"').action((o) => Qn(o)), t.command("set").description("set a key in the user config (or the project's with --project)").argument("<key>", 'dotted key, e.g. "chrome.mode"').argument("<value>", "the new value, validated against the schema").option("--project", "write .aiui-cache/config.json here instead of the user config").action((o, r, i) => eo(o, r, i)), t.command("unset").description("remove a key from the user config (or the project's with --project)").argument("<key>", 'dotted key, e.g. "claude.skipPermissions"').option("--project", "remove from .aiui-cache/config.json here instead of the user config").action((o, r) => to(o, r)), e.command("mcp").description("run a channel command (forwards to aiui-claude-channel), e.g. `aiui mcp quick`").allowUnknownOption().allowExcessArguments().helpOption(!1).argument("[args...]", "arguments forwarded to the aiui-claude-channel CLI").action((o) => ko(o)), e.command("pencil").description("the remote pencil — url (where the iPad should connect)").command("url").description("pick a channel + interface, print the iPad URL and copy it to the clipboard").option("--json", "machine-readable targets (every hosting channel, no prompts)").action((o) => No(o)), e;
 }
-po().parseAsync().catch((e) => {
+Uo().parseAsync().catch((e) => {
   console.error(e instanceof Error ? e.message : e), process.exitCode = 1;
 });
 //# sourceMappingURL=cli.js.map