@jungjaehoon/mama-os 0.53.1 → 0.58.0

package/dist/cli/commands/init.js

@@ -1,300 +1,384 @@
 "use strict";
-/**
- * mama init command
- *
- * Initialize MAMA configuration
- */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.initCommand = initCommand;
+exports.runInit = runInit;
+const node_crypto_1 = require("node:crypto");
 const node_fs_1 = require("node:fs");
-const promises_1 = require("node:fs/promises");
+const node_os_1 = require("node:os");
 const node_path_1 = require("node:path");
-const node_child_process_1 = require("node:child_process");
-const config_manager_js_1 = require("../config/config-manager.js");
-const index_js_1 = require("../../auth/index.js");
-const cline_cli_adapter_js_1 = require("../../agent/cline-cli-adapter.js");
-const backend_model_policy_js_1 = require("../../agent/backend-model-policy.js");
-/**
- * CLAUDE.md template for workspace documentation
- */
-const CLAUDE_MD_TEMPLATE = `# MAMA
-
-I am MAMA, an AI assistant with persistent memory.
-
-## Workspace (Important!)
-
-**All file operations must be performed only in the paths below:**
-
-| Purpose | Path |
-|---------|------|
-| Working directory | \`~/.mama/workspace/\` |
-| Skills storage | \`~/.mama/skills/\` |
-| Scripts | \`~/.mama/workspace/scripts/\` |
-| Data | \`~/.mama/workspace/data/\` |
-| Logs | \`~/.mama/logs/\` |
-
-**Never use:**
-- \`~/.openclaw/\` - Different project
-- \`~/project/\` - User project (do not modify without explicit request)
-
-## Memory System
-
-MAMA tracks the evolution of decisions:
-
-\`\`\`
-Decision v1 (failed) → v2 (partial success) → v3 (success)
-\`\`\`
-
-Searching past decisions provides full context.
-
-## Available Commands
-
-- \`mama start\` - Start agent
-- \`mama stop\` - Stop agent
-- \`mama status\` - Check status
-- \`mama run <command>\` - Run one-off command
-`;
-/**
- * Copy built-in skill templates to user's skills directory (skip existing)
- */
-async function copyDefaultSkills(skillsDir) {
-    const templatesDir = (0, node_path_1.join)(__dirname, '..', '..', '..', 'templates', 'skills');
-    try {
-        const entries = await (0, promises_1.readdir)(templatesDir);
-        for (const file of entries) {
-            if (!file.endsWith('.md'))
-                continue;
-            const dest = (0, node_path_1.join)(skillsDir, file);
-            if ((0, node_fs_1.existsSync)(dest)) {
-                console.log(`  ${file} (already exists)`);
-                continue;
-            }
-            await (0, promises_1.copyFile)((0, node_path_1.join)(templatesDir, file), dest);
-            console.log(`  ${file} ✓`);
-        }
-    }
-    catch {
-        console.log('  (no template skills found)');
-    }
+const yaml = __importStar(require("js-yaml"));
+const config_js_1 = require("../../runtime/config.js");
+const launch_files_js_1 = require("../launch-files.js");
+const prompt_js_1 = require("../prompt.js");
+const secrets_js_1 = require("../secrets.js");
+const connectorNames = [
+    'slack',
+    'chatwork',
+    'trello',
+    'kagemusha',
+    'calendar',
+    'gmail',
+    'drive',
+    'sheets',
+    'notion',
+    'obsidian',
+    'discord',
+    'telegram',
+    'imessage',
+    'claude-code',
+];
+const connectorSecrets = {
+    slack: ['MAMA_SLACK_TOKEN'],
+    chatwork: ['MAMA_CHATWORK_TOKEN'],
+    trello: ['MAMA_TRELLO_KEY', 'MAMA_TRELLO_TOKEN'],
+    kagemusha: [],
+    calendar: [],
+    gmail: [],
+    drive: [],
+    sheets: [],
+    notion: ['MAMA_NOTION_TOKEN'],
+    obsidian: [],
+    discord: ['MAMA_DISCORD_TOKEN'],
+    telegram: ['MAMA_TELEGRAM_SOURCE_TOKEN'],
+    imessage: [],
+    'claude-code': [],
+};
+const gwsConnectorNames = new Set(['calendar', 'gmail', 'drive', 'sheets']);
+const noSecretConnectorNames = new Set(['kagemusha', 'obsidian', 'imessage', 'claude-code']);
+async function yes(prompt, label) {
+    const value = (await prompt.text(`${label} [y/N]`)).trim().toLowerCase();
+    if (['', 'n', 'no'].includes(value))
+        return false;
+    if (['y', 'yes'].includes(value))
+        return true;
+    throw new prompt_js_1.CliInputError('Answer yes or no.');
 }
-function isClineAvailable(command) {
-    const result = (0, node_child_process_1.spawnSync)(command, ['--version'], { stdio: 'ignore', timeout: 5_000 });
-    return !result.error && result.status === 0;
+async function text(prompt, label) {
+    return (0, prompt_js_1.nonblankLine)(await prompt.text(label)).trim();
 }
-async function resolvePreferredBackend(preferredBackend) {
-    const requestedBackend = resolveRequestedBackend(preferredBackend);
-    const codexAuthPaths = [(0, config_manager_js_1.expandPath)('~/.mama/.codex/auth.json'), (0, config_manager_js_1.expandPath)('~/.codex/auth.json')];
-    const codexAuthPath = codexAuthPaths.find((p) => (0, node_fs_1.existsSync)(p));
-    const hasCodexAuth = Boolean(codexAuthPath);
-    const hasClaudeAuth = (0, index_js_1.getClaudeCodeAuthStatus)().loggedIn;
-    const clineCommand = process.env.MAMA_CLINE_COMMAND ?? process.env.CLINE_COMMAND ?? 'cline';
-    const resolveCline = async () => {
-        if (!isClineAvailable(clineCommand))
-            return null;
-        return (await (0, cline_cli_adapter_js_1.hasPersistedClineCredential)({ command: clineCommand }))
-            ? { backend: 'cline' }
-            : null;
-    };
-    if (requestedBackend) {
-        if (requestedBackend === 'cline') {
-            return await resolveCline();
-        }
-        if (requestedBackend === 'codex') {
-            return hasCodexAuth ? { backend: 'codex', codexAuthPath } : null;
-        }
-        return hasClaudeAuth ? { backend: 'claude' } : null;
-    }
-    // Neutral auto resolution:
-    // Deterministic compatibility precedence: Claude, then Codex, then Cline.
-    // Cline remains a full auto candidate when it is the only authenticated backend.
-    if (hasCodexAuth && !hasClaudeAuth) {
-        return { backend: 'codex', codexAuthPath };
-    }
-    if (hasClaudeAuth) {
-        return { backend: 'claude' };
-    }
-    return await resolveCline();
+async function optionalText(prompt, label) {
+    const value = (await prompt.text(label)).trim();
+    return value === '' ? undefined : (0, prompt_js_1.nonblankLine)(value).trim();
 }
-function resolveRequestedBackend(preferredBackend) {
-    if (preferredBackend === 'claude' ||
-        preferredBackend === 'codex' ||
-        preferredBackend === 'cline') {
-        return preferredBackend;
+async function collectConnectors(prompt, secrets) {
+    const selected = (await prompt.text(`Connectors to enable (${connectorNames.join(', ')}; comma-separated, blank for none)`)).trim();
+    const names = selected === '' ? [] : [...new Set(selected.split(',').map((name) => name.trim()))];
+    if (names.some((name) => !connectorNames.includes(name))) {
+        throw new prompt_js_1.CliInputError(`Choose connectors from: ${connectorNames.join(', ')}`);
     }
-    return process.env.MAMA_DEFAULT_BACKEND === 'codex' ||
-        process.env.MAMA_DEFAULT_BACKEND === 'claude' ||
-        process.env.MAMA_DEFAULT_BACKEND === 'cline'
-        ? process.env.MAMA_DEFAULT_BACKEND
-        : undefined;
-}
-/**
- * Execute init command
- */
-async function initCommand(options = {}) {
-    console.log('\n🔧 MAMA Standalone Initialization\n');
-    const requestedBackend = resolveRequestedBackend(options.backend);
-    let selectedBackend = {
-        backend: requestedBackend ?? 'claude',
-    };
-    if (!options.skipAuthCheck) {
-        process.stdout.write('Checking backend availability and authentication... ');
-        const resolved = await resolvePreferredBackend(options.backend);
-        if (!resolved) {
-            console.log('❌');
-            if (requestedBackend === 'codex') {
-                console.error('\n⚠️  Requested backend "codex" is not authenticated.');
-                console.error(`   Expected auth: ${(0, config_manager_js_1.expandPath)('~/.mama/.codex/auth.json')} or ${(0, config_manager_js_1.expandPath)('~/.codex/auth.json')}`);
-                console.error('\n   Please run: codex login\n');
-                process.exit(1);
-            }
-            if (requestedBackend === 'claude') {
-                console.error('\n⚠️  Requested backend "claude" is not authenticated.');
-                const authStatus = (0, index_js_1.getClaudeCodeAuthStatus)();
-                if (!authStatus.cliInstalled) {
-                    console.error('   Claude Code CLI is not installed.');
-                    console.error('   https://claude.ai/code\n');
-                }
-                else {
-                    console.error('   Run: claude auth login\n');
-                }
-                process.exit(1);
+    const config = {};
+    for (const name of names) {
+        for (const tokenName of connectorSecrets[name])
+            secrets[tokenName] = (0, prompt_js_1.nonblankLine)(await prompt.secret(tokenName));
+        if (name === 'slack')
+            secrets.MAMA_SLACK_APP_TOKEN = (0, prompt_js_1.nonblankLine)(await prompt.secret('MAMA_SLACK_APP_TOKEN'));
+        if (name === 'calendar')
+            prompt.write('Calendar currently reads the primary calendar only; its source channel id is calendar.');
+        if (name === 'gmail') {
+            config.gmail = {
+                enabled: true,
+                pollIntervalMinutes: 5,
+                channels: { inbox: { role: 'hub' } },
+                auth: { type: 'cli', cli: 'gws', cliAuthCommand: 'gws auth login' },
+            };
+            continue;
+        }
+        if (name === 'notion') {
+            config.notion = {
+                enabled: true,
+                pollIntervalMinutes: 5,
+                channels: { workspace: { role: 'hub', name: 'Notion workspace' } },
+                auth: { type: 'token', tokenName: 'MAMA_NOTION_TOKEN' },
+            };
+            continue;
+        }
+        if (name === 'obsidian') {
+            const vaultPath = await text(prompt, 'Obsidian vault path');
+            config.obsidian = {
+                enabled: true,
+                pollIntervalMinutes: 5,
+                channels: { vault: { role: 'hub', name: 'Vault', vaultPath } },
+                auth: { type: 'none' },
+            };
+            continue;
+        }
+        if (name === 'claude-code') {
+            const selectedProjects = (await text(prompt, 'Claude Code project directory names (comma-separated)'))
+                .split(',')
+                .map((project) => project.trim());
+            if (selectedProjects.some((project) => !project || /[/\\\s]/.test(project))) {
+                throw new prompt_js_1.CliInputError('Enter Claude Code project directory names without paths or spaces.');
             }
-            if (requestedBackend === 'cline') {
-                console.error('\n⚠️  Requested backend "cline" is unavailable or not authenticated.');
-                console.error('   Install Cline CLI, then run: cline auth cline\n');
-                process.exit(1);
+            const channels = {};
+            for (const project of selectedProjects) {
+                const alias = await text(prompt, `Display alias for ${project}`);
+                channels[project] = { role: 'hub', name: alias };
             }
-            console.error('\n⚠️  No authenticated backend found.');
-            console.error(`   Codex auth: ${(0, config_manager_js_1.expandPath)('~/.mama/.codex/auth.json')} or ${(0, config_manager_js_1.expandPath)('~/.codex/auth.json')}`);
-            console.error(`   Claude auth (legacy fallback): ${(0, config_manager_js_1.expandPath)('~/.claude/.credentials.json')}`);
-            console.error('\n   Please authenticate one backend first:');
-            console.error('   - Codex: codex login');
-            console.error('   - Claude: claude auth login (or install from https://claude.ai/code)');
-            console.error('   - Cline: cline auth cline\n');
-            process.exit(1);
+            config['claude-code'] = {
+                enabled: true,
+                pollIntervalMinutes: 5,
+                channels,
+                auth: { type: 'none' },
+            };
+            continue;
+        }
+        if (name === 'drive') {
+            const folderIds = (await text(prompt, 'Drive folder ids (comma-separated)'))
+                .split(',')
+                .map((id) => id.trim());
+            if (folderIds.some((id) => !id || /\s/.test(id)))
+                throw new prompt_js_1.CliInputError('Enter Drive folder ids separated by commas without spaces.');
+            config.drive = {
+                enabled: true,
+                pollIntervalMinutes: 5,
+                channels: Object.fromEntries(folderIds.map((folderId) => [folderId, { role: 'hub', folderId }])),
+                auth: { type: 'cli', cli: 'gws', cliAuthCommand: 'gws auth login' },
+            };
+            continue;
         }
-        selectedBackend = resolved;
-        console.log('✓');
+        if (name === 'sheets') {
+            const spreadsheetId = await text(prompt, 'Google Sheets spreadsheet id');
+            const sheetRange = await text(prompt, 'Google Sheets header-and-data range');
+            const dataRange = await optionalText(prompt, 'Separate data range (blank to use the full range)');
+            config.sheets = {
+                enabled: true,
+                pollIntervalMinutes: 5,
+                channels: {
+                    spreadsheet: {
+                        role: 'hub',
+                        spreadsheetId,
+                        sheetRange,
+                        ...(dataRange ? { dataRange } : {}),
+                    },
+                },
+                auth: { type: 'cli', cli: 'gws', cliAuthCommand: 'gws auth login' },
+            };
+            continue;
+        }
+        const ids = (await text(prompt, `${name} ${name === 'trello' ? 'board' : 'channel'} ids (comma-separated ids only)`))
+            .split(',')
+            .map((id) => id.trim());
+        if (ids.some((id) => !id || /\s/.test(id)))
+            throw new prompt_js_1.CliInputError('Enter channel ids separated by commas, without display names.');
+        if (name === 'calendar' && (ids.length !== 1 || ids[0] !== 'calendar')) {
+            throw new prompt_js_1.CliInputError('Calendar supports only the source channel id calendar (primary calendar).');
+        }
+        config[name] = {
+            enabled: true,
+            pollIntervalMinutes: 5,
+            channels: Object.fromEntries(ids.map((id) => [id, { role: 'hub', ...(name === 'trello' ? { boardId: id } : {}) }])),
+            auth: gwsConnectorNames.has(name)
+                ? { type: 'cli', cli: 'gws', cliAuthCommand: 'gws auth login' }
+                : noSecretConnectorNames.has(name)
+                    ? { type: 'none' }
+                    : { type: 'token', tokenName: connectorSecrets[name].at(-1) },
+        };
     }
-    if (selectedBackend.backend === 'codex') {
-        const authPathMsg = selectedBackend.codexAuthPath
-            ? ` (auth detected at ${selectedBackend.codexAuthPath})`
-            : '';
-        console.log(`Selected backend: codex${authPathMsg}`);
+    return config;
+}
+async function runInit(options = {}) {
+    const prompt = options.prompt ?? (0, prompt_js_1.createTerminalPrompt)();
+    (0, prompt_js_1.requireTTY)(prompt);
+    const home = options.home ?? (0, node_os_1.homedir)();
+    const root = (0, node_path_1.join)(home, '.mama');
+    const configPath = (0, node_path_1.join)(root, 'config.yaml');
+    if ((0, node_fs_1.existsSync)(configPath))
+        throw new prompt_js_1.CliInputError('config.yaml already exists; init will not overwrite it.');
+    // A partial manual setup must also be reviewed by the owner before replacing files.
+    for (const name of ['connectors.json', 'start.sh']) {
+        if ((0, node_fs_1.existsSync)((0, node_path_1.join)(root, name)))
+            throw new prompt_js_1.CliInputError(`${name} already exists; init will not overwrite it.`);
     }
-    else if (selectedBackend.backend === 'cline') {
-        console.log('Selected backend: cline');
+    const backend = await text(prompt, 'Backend (claude|codex)');
+    if (backend !== 'claude' && backend !== 'codex')
+        throw new prompt_js_1.CliInputError('Backend must be claude or codex.');
+    const model = await text(prompt, 'Model');
+    const machineTimeZone = Intl.DateTimeFormat().resolvedOptions().timeZone;
+    const timezoneAnswer = (await prompt.text(`Owner timezone [${machineTimeZone}]`)).trim();
+    const timezone = timezoneAnswer || machineTimeZone;
+    try {
+        new Intl.DateTimeFormat('en', { timeZone: timezone });
     }
-    else {
-        console.log('Selected backend: claude');
+    catch {
+        throw new prompt_js_1.CliInputError(`Timezone "${timezone}" is not a valid IANA time zone.`);
     }
-    // Check if config already exists
-    if ((0, config_manager_js_1.configExists)() && !options.force) {
-        console.log(`\n⚠️  Configuration file already exists: ${(0, config_manager_js_1.getConfigPath)()}`);
-        console.log('   Use --force option to overwrite.\n');
-        process.exit(1);
+    const secrets = {
+        MAMA_TELEGRAM_TOKEN: (0, prompt_js_1.nonblankLine)(await prompt.secret('Telegram bot token')),
+    };
+    const chatId = await text(prompt, 'Telegram owner chat id');
+    const userId = await text(prompt, 'Telegram owner user id');
+    if (!/^-?[1-9]\d*$/.test(chatId) || !/^[1-9]\d*$/.test(userId)) {
+        throw new prompt_js_1.CliInputError('Enter numeric Telegram chat and user ids.');
     }
-    // Create config
-    process.stdout.write('Creating configuration file... ');
-    try {
-        const configPath = await (0, config_manager_js_1.createDefaultConfig)(options.force);
-        const config = await (0, config_manager_js_1.loadConfig)();
-        config.agent.backend = selectedBackend.backend;
-        if (selectedBackend.backend === 'cline') {
-            config.agent.cline_provider = 'cline';
-        }
-        const roleDefinitions = config.roles?.definitions ?? {};
-        const scopedModels = (0, backend_model_policy_js_1.rescopeConfigModels)({
-            backend: selectedBackend.backend,
-            roleModels: Object.fromEntries(Object.keys(roleDefinitions).map((name) => [name, undefined])),
-        });
-        config.agent.model = scopedModels.agentModel;
-        for (const [name, role] of Object.entries(roleDefinitions)) {
-            role.model = scopedModels.roleModels[name];
-        }
-        (0, backend_model_policy_js_1.emitBackendModelWarnings)(scopedModels.warnings ?? []);
-        await (0, config_manager_js_1.saveConfig)(config);
-        if (options.skipAuthCheck && requestedBackend) {
-            console.log(`Auth check skipped; applied requested backend "${selectedBackend.backend}" to config.`);
-        }
-        else if (options.skipAuthCheck) {
-            console.log(`Auth check skipped; applied default backend "${selectedBackend.backend}" to config.`);
-        }
-        console.log('✓');
-        console.log(`\n${configPath} created successfully\n`);
+    const connectors = await collectConnectors(prompt, secrets);
+    const discordEnabled = await yes(prompt, 'Enable Discord owner messages');
+    let discordConfig = {
+        enabled: false,
+        allowed_channels: [],
+        owner_user_ids: [],
+    };
+    if (discordEnabled) {
+        secrets.MAMA_DISCORD_TOKEN ??= (0, prompt_js_1.nonblankLine)(await prompt.secret('Discord bot token'));
+        const channel = await text(prompt, 'Discord owner channel id');
+        const user = await text(prompt, 'Discord owner user id');
+        discordConfig = {
+            enabled: true,
+            owner_channel_id: channel,
+            allowed_channels: [channel],
+            owner_user_ids: [user],
+        };
     }
-    catch (error) {
-        console.log('❌');
-        console.error(`\nFailed to create configuration file: ${error instanceof Error ? error.message : String(error)}\n`);
-        process.exit(1);
+    const slackEnabled = await yes(prompt, 'Enable Slack owner messages');
+    let slackConfig = {
+        enabled: false,
+        allowed_channels: [],
+        owner_user_ids: [],
+    };
+    if (slackEnabled) {
+        secrets.MAMA_SLACK_TOKEN ??= (0, prompt_js_1.nonblankLine)(await prompt.secret('Slack bot token'));
+        secrets.MAMA_SLACK_APP_TOKEN ??= (0, prompt_js_1.nonblankLine)(await prompt.secret('Slack Socket Mode app token'));
+        const channel = await text(prompt, 'Slack owner channel id');
+        const user = await text(prompt, 'Slack owner user id');
+        slackConfig = {
+            enabled: true,
+            owner_channel_id: channel,
+            allowed_channels: [channel],
+            owner_user_ids: [user],
+        };
     }
-    // Create directory structure
-    const directories = [
-        { path: '~/.mama/skills', label: 'Skills directory' },
-        { path: '~/.mama/workspace', label: 'Workspace' },
-        { path: '~/.mama/workspace/scripts', label: 'Scripts directory' },
-        { path: '~/.mama/workspace/data', label: 'Data directory' },
-        { path: '~/.mama/logs', label: 'Logs directory' },
-    ];
-    for (const dir of directories) {
-        const expandedPath = (0, config_manager_js_1.expandPath)(dir.path);
-        process.stdout.write(`Creating ${dir.label}... `);
+    const viewer = {};
+    if (await yes(prompt, 'Expose the viewer through a tunnel')) {
+        const issuer = await text(prompt, 'Access issuer (HTTPS URL)');
+        let url;
         try {
-            if (!(0, node_fs_1.existsSync)(expandedPath)) {
-                await (0, promises_1.mkdir)(expandedPath, { recursive: true });
-                console.log('✓');
-            }
-            else {
-                console.log('(already exists)');
-            }
-        }
-        catch (error) {
-            console.log('❌');
-            console.error(`\nFailed to create ${dir.label}: ${error instanceof Error ? error.message : String(error)}\n`);
-            process.exit(1);
+            url = new URL(issuer);
         }
-    }
-    // Copy default skills
-    const skillsDir = (0, config_manager_js_1.expandPath)('~/.mama/skills');
-    process.stdout.write('Copying default skills...\n');
-    await copyDefaultSkills(skillsDir);
-    // Create CLAUDE.md
-    const claudeMdPath = (0, config_manager_js_1.expandPath)('~/.mama/CLAUDE.md');
-    process.stdout.write('Creating CLAUDE.md... ');
-    try {
-        if ((0, node_fs_1.existsSync)(claudeMdPath) && !options.force) {
-            console.log('(already exists)');
+        catch {
+            throw new prompt_js_1.CliInputError('Access issuer must be an HTTPS origin.');
         }
-        else {
-            await (0, promises_1.writeFile)(claudeMdPath, CLAUDE_MD_TEMPLATE, 'utf-8');
-            console.log('✓');
+        if (url.protocol !== 'https:' ||
+            url.username ||
+            url.password ||
+            url.search ||
+            url.hash ||
+            url.pathname !== '/') {
+            throw new prompt_js_1.CliInputError('Access issuer must be an HTTPS origin.');
         }
+        viewer.MAMA_CF_ACCESS_ISSUER = url.origin;
+        viewer.MAMA_CF_ACCESS_AUD = await text(prompt, 'Access audience');
+        const hostname = await text(prompt, 'Viewer hostname (no scheme or path)');
+        if (!/^[a-z0-9]+(?:[.-][a-z0-9]+)*$/i.test(hostname))
+            throw new prompt_js_1.CliInputError('Enter a hostname without scheme or path.');
+        viewer.MAMA_VIEWER_HOSTNAMES = hostname;
+        const emails = (await prompt.text('Viewer owner emails for access monitoring (comma-separated, optional)')).trim();
+        if (emails)
+            viewer.MAMA_VIEWER_OWNER_EMAILS = (0, prompt_js_1.nonblankLine)(emails);
     }
-    catch (error) {
-        console.log('❌');
-        console.error(`\nFailed to create CLAUDE.md: ${error instanceof Error ? error.message : String(error)}\n`);
-        process.exit(1);
+    const installLaunchAgent = await yes(prompt, 'Write ~/Library/LaunchAgents/com.mama.server.plist');
+    const plistPath = (0, node_path_1.join)(home, 'Library', 'LaunchAgents', 'com.mama.server.plist');
+    if (installLaunchAgent && (0, node_fs_1.existsSync)(plistPath))
+        throw new prompt_js_1.CliInputError('com.mama.server.plist already exists; init will not overwrite it.');
+    const config = (0, config_js_1.parseConfig)({
+        version: 1,
+        timezone,
+        agent: {
+            backend,
+            model,
+            effort: 'medium',
+            max_turns: 100,
+            timeout: 300_000,
+            run_token_budget: 0,
+        },
+        database: { path: (0, node_path_1.join)(root, 'memory.db') },
+        logging: { level: 'info', file: (0, node_path_1.join)(root, 'logs', 'daemon.log') },
+        telegram: {
+            enabled: true,
+            owner_chat_id: chatId,
+            allowed_chats: [chatId],
+            owner_user_ids: [userId],
+            polling: true,
+        },
+        discord: discordConfig,
+        slack: slackConfig,
+        delivery: { reports: 'telegram', notifications: 'telegram', security_alerts: 'telegram' },
+        wiki: {
+            enabled: true,
+            vaultPath: (0, node_path_1.join)(root, 'workspace'),
+            wikiDir: (0, node_path_1.join)(root, 'workspace', 'wiki'),
+        },
+    }, { home });
+    const locate = options.findExecutable ?? launch_files_js_1.findExecutable;
+    const backendPath = locate(backend);
+    const gwsPath = locate('gws');
+    const script = (0, launch_files_js_1.startScript)({
+        home,
+        viewer,
+        nodePath: options.nodePath ?? process.execPath,
+        cliPath: options.cliPath ?? (0, node_path_1.join)(__dirname, '..', 'index.js'),
+        executablePaths: [backendPath, gwsPath].filter((path) => path !== undefined),
+    });
+    secrets.MAMA_AUTH_TOKEN = (0, node_crypto_1.randomBytes)(32).toString('hex');
+    (0, node_fs_1.mkdirSync)(root, { recursive: true, mode: 0o700 });
+    (0, node_fs_1.mkdirSync)((0, node_path_1.join)(root, 'logs'), { recursive: true, mode: 0o700 });
+    (0, node_fs_1.mkdirSync)((0, node_path_1.join)(root, 'workspace', 'wiki'), { recursive: true, mode: 0o700 });
+    // Finish all prompts before any write, and publish config last as the setup completion marker.
+    (0, secrets_js_1.updateSecrets)(home, secrets);
+    (0, node_fs_1.writeFileSync)((0, node_path_1.join)(root, 'connectors.json'), `${JSON.stringify(connectors, null, 2)}\n`, {
+        flag: 'wx',
+        mode: 0o600,
+    });
+    (0, node_fs_1.writeFileSync)((0, node_path_1.join)(root, 'start.sh'), script, { flag: 'wx', mode: 0o700 });
+    if (installLaunchAgent) {
+        (0, node_fs_1.mkdirSync)((0, node_path_1.dirname)(plistPath), { recursive: true });
+        (0, node_fs_1.writeFileSync)(plistPath, (0, launch_files_js_1.launchAgent)(home), { flag: 'wx', mode: 0o600 });
     }
-    // Copy backend-specific AGENTS.md templates
-    process.stdout.write('Copying backend AGENTS templates...\n');
-    const agentsTemplatesDir = (0, node_path_1.join)(__dirname, '..', '..', '..', 'templates');
-    for (const file of ['AGENTS.claude.md', 'AGENTS.codex.md']) {
-        const dest = (0, config_manager_js_1.expandPath)(`~/.mama/${file}`);
-        if ((0, node_fs_1.existsSync)(dest) && !options.force) {
-            console.log(`  ${file} (already exists)`);
-        }
-        else {
-            const src = (0, node_path_1.join)(agentsTemplatesDir, file);
-            if ((0, node_fs_1.existsSync)(src)) {
-                await (0, promises_1.copyFile)(src, dest);
-                console.log(`  ${file} ✓`);
-            }
-        }
+    (0, node_fs_1.writeFileSync)(configPath, yaml.dump(config), { flag: 'wx', mode: 0o600 });
+    prompt.write('Setup written. Credentials are stored only in auth.env (0600).');
+    if (!backendPath)
+        prompt.write(`Install ${backend} and add its bin directory to PATH in ~/.mama/start.sh.`);
+    prompt.write(`If you have not logged in, run: ${backend === 'claude' ? 'claude auth login' : `CODEX_HOME=${(0, secrets_js_1.shellQuote)((0, node_path_1.join)(root, '.codex'))} codex login`}`);
+    if (Object.keys(connectors).some((name) => gwsConnectorNames.has(name))) {
+        if (!gwsPath)
+            prompt.write('Install gws and add its bin directory to PATH in ~/.mama/start.sh.');
+        prompt.write('Log in with the Google scopes your selected connectors need: gws auth login.');
     }
-    // Show next steps
-    console.log('\nNext steps:');
-    console.log('  mama status   Show onboarding state and next actions');
-    console.log('  mama start    Start agent when status asks for it');
-    console.log('');
+    if (viewer.MAMA_VIEWER_HOSTNAMES)
+        prompt.write('Configure your tunnel to the local viewer and protect its hostname with the Access application above.');
+    if (installLaunchAgent)
+        prompt.write(`After login, start with: launchctl bootstrap gui/$(id -u) ${(0, secrets_js_1.shellQuote)(plistPath)}`);
+    else
+        prompt.write(`After login, start with: ${(0, secrets_js_1.shellQuote)((0, node_path_1.join)(root, 'start.sh'))}`);
 }
 //# sourceMappingURL=init.js.map