@m8t-stack/cli 0.2.8 → 0.2.11

package/dist/cli.js

@@ -650,19 +650,47 @@ var init_foundry_agent_get = __esm({
 });
 
 // src/lib/brain-yaml-mirror.ts
+import { parse as parseYaml4 } from "yaml";
 function linkSection(args) {
   return [
     `link:`,
     `  repo: "${args.repo}"`,
     `  branch: ${args.branch}`,
     `  topology: per-worker`,
-    `  schemaVersion: "1"`,
+    `  schemaVersion: "2"`,
     `  persona: "${args.persona}"`,
-    `  agent: "${args.agent}"`,
+    `  agents:`,
+    ...args.agents.map((a) => `    - ${a}`),
     ``
   ].join("\n");
 }
+function mergeAgents(prior, incoming) {
+  return prior.includes(incoming) ? prior : [...prior, incoming];
+}
+function readLinkAgents(existing) {
+  if (!existing) return [];
+  let parsed;
+  try {
+    parsed = parseYaml4(existing);
+  } catch {
+    return [];
+  }
+  if (!parsed || typeof parsed !== "object") return [];
+  const root = parsed;
+  const link = root.link && typeof root.link === "object" ? root.link : root;
+  const raw = Array.isArray(link.agents) ? link.agents : typeof link.agent === "string" ? [link.agent] : [];
+  const out = [];
+  for (const v of raw) {
+    const s = typeof v === "string" ? v.trim() : "";
+    if (!s) continue;
+    if (/^\{\{.*\}\}$/.test(s)) continue;
+    if (!out.includes(s)) out.push(s);
+  }
+  return out;
+}
 function buildBrainYaml(existing, args) {
+  const agents = mergeAgents(readLinkAgents(existing), args.agent);
+  const link = linkSection({ repo: args.repo, branch: args.branch, persona: args.persona, agents });
   if (existing) {
     const hasAuthoritative = /^engine:/m.test(existing) || /^processes:/m.test(existing);
     if (hasAuthoritative) {
@@ -670,10 +698,10 @@ function buildBrainYaml(existing, args) {
       const linkIdx = existing.search(/^link:/m);
       const cut = mirrorIdx >= 0 ? mirrorIdx : linkIdx >= 0 ? linkIdx : existing.length;
       const authoritative = existing.slice(0, cut).replace(/\s*$/, "\n\n");
-      return authoritative + MIRROR_BANNER + "\n" + linkSection(args);
+      return authoritative + MIRROR_BANNER + "\n" + link;
     }
   }
-  return DEFAULT_AUTHORITATIVE + "\n\n" + MIRROR_BANNER + "\n" + linkSection(args);
+  return DEFAULT_AUTHORITATIVE + "\n\n" + MIRROR_BANNER + "\n" + link;
 }
 async function mirrorBrainYaml(args) {
   const minted = await mintInstallationToken({
@@ -683,58 +711,56 @@ async function mirrorBrainYaml(args) {
     repository: args.repo
   });
   const [owner, repoName] = args.repo.split("/");
-  const getRes = await fetch(
-    `https://api.github.com/repos/${owner}/${repoName}/contents/.m8t/brain.yaml`,
-    {
-      headers: {
-        Authorization: `Bearer ${minted.token}`,
-        Accept: "application/vnd.github+json",
-        "X-GitHub-Api-Version": "2022-11-28"
-      }
-    }
-  );
-  let sha;
-  let existing;
-  if (getRes.ok) {
-    const data = await getRes.json();
-    sha = data.sha;
-    if (typeof data.content === "string") {
-      existing = Buffer.from(data.content, "base64").toString("utf8");
-    }
-  }
-  const content = buildBrainYaml(existing, {
-    repo: args.repo,
-    branch: args.branch,
-    persona: args.persona,
-    agent: args.agent
-  });
-  const body = {
-    message: "chore(brain): mirror .m8t/brain.yaml (m8t brain link)",
-    content: Buffer.from(content, "utf8").toString("base64"),
-    branch: args.branch,
-    ...sha ? { sha } : {}
+  const url = `https://api.github.com/repos/${owner}/${repoName}/contents/.m8t/brain.yaml`;
+  const headers = {
+    Authorization: `Bearer ${minted.token}`,
+    Accept: "application/vnd.github+json",
+    "X-GitHub-Api-Version": "2022-11-28"
   };
-  const putRes = await fetch(
-    `https://api.github.com/repos/${owner}/${repoName}/contents/.m8t/brain.yaml`,
-    {
+  const MAX_ATTEMPTS2 = 3;
+  for (let attempt = 1; attempt <= MAX_ATTEMPTS2; attempt++) {
+    const getRes = await fetch(url, { headers });
+    let sha;
+    let existing;
+    if (getRes.ok) {
+      const data = await getRes.json();
+      sha = data.sha;
+      if (typeof data.content === "string") {
+        existing = Buffer.from(data.content, "base64").toString("utf8");
+      }
+    }
+    const content = buildBrainYaml(existing, {
+      repo: args.repo,
+      branch: args.branch,
+      persona: args.persona,
+      agent: args.agent
+    });
+    const body = {
+      message: "chore(brain): mirror .m8t/brain.yaml (m8t brain link)",
+      content: Buffer.from(content, "utf8").toString("base64"),
+      branch: args.branch,
+      ...sha ? { sha } : {}
+    };
+    const putRes = await fetch(url, {
       method: "PUT",
-      headers: {
-        Authorization: `Bearer ${minted.token}`,
-        Accept: "application/vnd.github+json",
-        "X-GitHub-Api-Version": "2022-11-28",
-        "Content-Type": "application/json"
-      },
+      headers: { ...headers, "Content-Type": "application/json" },
       body: JSON.stringify(body)
-    }
-  );
-  if (!putRes.ok) {
+    });
+    if (putRes.ok) return;
     const text = await putRes.text();
+    const retryable = putRes.status === 409 || putRes.status === 422;
+    if (retryable && attempt < MAX_ATTEMPTS2) continue;
+    const suffix = retryable ? ` after ${MAX_ATTEMPTS2.toString()} attempts` : "";
     throw new LocalCliError({
       code: "BRAIN_YAML_MIRROR_FAILED",
-      message: `PUT .m8t/brain.yaml: HTTP ${putRes.status.toString()}
+      message: `PUT .m8t/brain.yaml: HTTP ${putRes.status.toString()}${suffix}
 ${text.slice(0, 300)}`
     });
   }
+  throw new LocalCliError({
+    code: "BRAIN_YAML_MIRROR_FAILED",
+    message: `PUT .m8t/brain.yaml: retry loop exited unexpectedly`
+  });
 }
 var DEFAULT_AUTHORITATIVE, MIRROR_BANNER;
 var init_brain_yaml_mirror = __esm({
@@ -1169,7 +1195,7 @@ var init_enable_hosted_brain = __esm({
 import { Builtins, Cli } from "clipanion";
 
 // src/lib/package-version.ts
-var CLI_VERSION = "0.2.8";
+var CLI_VERSION = "0.2.11";
 
 // src/lib/render-error.ts
 init_errors();
@@ -12946,6 +12972,7 @@ function buildManifest(args) {
     name: `m8t-brain-${args.org}-${args.nameSuffix}`,
     url: `https://github.com/${args.org}`,
     redirect_url: args.redirectUrl,
+    setup_url: args.setupUrl,
     public: false,
     // workflows:write is REQUIRED — the brain template ships .github/workflows/*
     // (skill-gate.yml, librarian.yml); GitHub rejects an App push of workflow files
@@ -12973,7 +13000,7 @@ async function convertManifestCode(code) {
 // src/lib/github-app-create.ts
 init_errors();
 function renderManifestForm(args) {
-  const manifest = buildManifest({ org: args.org, redirectUrl: args.redirectUrl, nameSuffix: args.nameSuffix });
+  const manifest = buildManifest({ org: args.org, redirectUrl: args.redirectUrl, setupUrl: args.setupUrl, nameSuffix: args.nameSuffix });
   return `<!doctype html><html><head><meta charset="utf-8"></head><body>
 <p>Redirecting you to GitHub's pre-filled "Create GitHub App" page\u2026</p>
 <form id="f" action="${newAppUrl(args.org, args.state)}" method="post">
@@ -12985,16 +13012,58 @@ document.getElementById("manifest").value = JSON.stringify(${JSON.stringify(mani
 document.getElementById("f").submit();
 </script></body></html>`;
 }
+var PAGE_STYLE = `<style>
+body{font-family:-apple-system,Segoe UI,Roboto,sans-serif;max-width:560px;margin:48px auto;padding:0 20px;line-height:1.5;color:#1a1a1a}
+.btn{display:inline-block;background:#1f6feb;color:#fff;padding:10px 18px;border-radius:8px;text-decoration:none;font-weight:600;font-size:15px}
+.muted{color:#666;font-size:14px}
+</style>`;
+var shell = (body) => `<!doctype html><html><head><meta charset="utf-8">${PAGE_STYLE}</head><body>${body}</body></html>`;
+var INSTALLED_HTML = (org) => `<h3>\u2705 Installed on ${org} \u2014 you're all set.</h3><p>Return to your terminal.</p>`;
+var ERROR_HTML = (org) => `<h3>\u26A0 Couldn't confirm the install.</h3><p>Re-run <code>m8t brain app-create --org ${org}</code>, or check the terminal.</p>`;
+function renderStatusPage(args) {
+  const { state, org, slug } = args;
+  if (state === "installed") return shell(INSTALLED_HTML(org));
+  if (state === "error") return shell(ERROR_HTML(org));
+  const installUrl2 = `https://github.com/apps/${slug}/installations/new`;
+  return shell(`
+<h3>\u2705 App created \u2014 ${args.appName}</h3>
+<p>One step left: install it on <b>${org}</b>.</p>
+<p><a href="${installUrl2}" role="button" class="btn">Install on ${org}</a></p>
+<p class="muted">You'll pick repositories on GitHub, then GitHub brings you right back here.</p>`);
+}
 async function createGitHubApp(args) {
+  const convert = args.deps?.convertManifestCode ?? convertManifestCode;
+  const pollFallbackMs = args.pollFallbackMs ?? 8e3;
+  const base = `http://localhost:${args.port.toString()}`;
   const state = `m8t-${args.org}`;
-  const redirectUrl = `http://localhost:${args.port.toString()}/callback`;
+  const redirectUrl = `${base}/callback`;
+  const setupUrl = `${base}/setup`;
+  let createdApp = null;
+  let polledInstallationId = null;
   return new Promise((resolve3, reject) => {
-    const server = createServer((req2, res) => {
+    let settled = false;
+    let server;
+    const complete = (installationId) => {
+      if (settled || !createdApp) return;
+      settled = true;
+      resolve3({ app: createdApp, installationId });
+      setTimeout(() => {
+        server.close();
+      }, 2500);
+    };
+    server = createServer((req2, res) => {
       void (async () => {
-        const u = new URL(req2.url ?? "/", `http://localhost:${args.port.toString()}`);
+        const u = new URL(req2.url ?? "/", base);
         if (u.pathname === "/") {
           res.writeHead(200, { "Content-Type": "text/html; charset=utf-8" });
-          res.end(renderManifestForm({ org: args.org, state, redirectUrl, nameSuffix: args.nameSuffix }));
+          res.end(renderManifestForm({ org: args.org, state, redirectUrl, setupUrl, nameSuffix: args.nameSuffix }));
+          return;
+        }
+        if (u.pathname === "/setup") {
+          const id = u.searchParams.get("installation_id") ?? polledInstallationId ?? "";
+          res.writeHead(200, { "Content-Type": "text/html; charset=utf-8" });
+          res.end(renderStatusPage({ state: "installed", org: args.org, slug: createdApp?.slug ?? "", appName: createdApp?.name ?? "" }));
+          complete(id);
           return;
         }
         if (u.pathname === "/callback") {
@@ -13005,11 +13074,26 @@ async function createGitHubApp(args) {
             return;
           }
           try {
-            const app = await convertManifestCode(code);
+            const app = await convert(code);
+            createdApp = app;
             res.writeHead(200, { "Content-Type": "text/html; charset=utf-8" });
-            res.end(`<!doctype html><meta charset="utf-8"><h3>App created \u2705</h3><p>Return to the terminal.</p>`);
-            server.close();
-            resolve3(app);
+            res.end(renderStatusPage({ state: "awaiting-install", org: args.org, slug: app.slug, appName: app.name }));
+            args.pollInstallation(app).then(
+              (installationId) => {
+                polledInstallationId = installationId;
+                setTimeout(() => {
+                  complete(installationId);
+                }, pollFallbackMs);
+              },
+              (e) => {
+                if (settled) return;
+                settled = true;
+                setTimeout(() => {
+                  server.close();
+                }, 2500);
+                reject(e instanceof Error ? e : new Error(String(e)));
+              }
+            );
           } catch (e) {
             res.writeHead(500);
             res.end(String(e));
@@ -13023,13 +13107,11 @@ async function createGitHubApp(args) {
       })();
     });
     server.on("error", (e) => {
-      reject(
-        new LocalCliError({ code: "GH_APP_SERVER", message: `localhost server failed: ${e.message}` })
-      );
+      reject(new LocalCliError({ code: "GH_APP_SERVER", message: `localhost server failed: ${e.message}` }));
     });
     server.listen(args.port, () => {
-      const url = `http://localhost:${args.port.toString()}/`;
-      args.onProgress?.(`Opening ${url} \u2014 click "Create GitHub App" on GitHub's pre-filled page.`);
+      const url = `${base}/`;
+      args.onProgress?.(`Opening ${url} \u2014 follow the page: Create the App, then Install it on ${args.org}.`);
       void args.openBrowser(url);
     });
   });
@@ -13281,12 +13363,13 @@ var BrainAppCreateCommand = class extends M8tCommand {
         hint: "For a personal account, use the gh fallback (m8t brain create without an App)."
       });
     }
+    const org = this.org;
     const pemOut = typeof this.pemOut === "string" ? this.pemOut : path4.join(os.homedir(), ".m8t-stack", "github-app.pem");
     const credsOut = typeof this.credsOut === "string" ? this.credsOut : path4.join(os.homedir(), ".m8t-stack", "github-app.json");
     const port = Number(this.port);
     const onProgress = (m) => this.context.stderr.write(`  ${colors.dim(m)}
 `);
-    const existing = await findValidBrainApp(credsOut, this.org);
+    const existing = await findValidBrainApp(credsOut, org);
     if (existing) {
       const isTTY = this.context.stdout.isTTY === true;
       let keep;
@@ -13296,59 +13379,55 @@ var BrainAppCreateCommand = class extends M8tCommand {
         keep = await promptKeepNew(
           { stdin: this.context.stdin, stdout: this.context.stdout },
           existing.slug,
-          this.org
+          org
         );
       else keep = true;
       if (keep) {
         this.context.stdout.write(
-          `${colors.success("\u2713")} Reusing the existing brain App ${colors.field(existing.slug)} on ${this.org} (installation ${existing.installationId}).
+          `${colors.success("\u2713")} Reusing the existing brain App ${colors.field(existing.slug)} on ${org} (installation ${existing.installationId}).
   ${colors.dim("Pass --new to create a fresh App instead.")}
 `
         );
         if (this.output === "json") this.context.stdout.write(JSON.stringify(existing) + "\n");
         return 0;
       }
-      onProgress(`creating a NEW brain App on ${this.org} (existing ${existing.slug} left intact)\u2026`);
+      onProgress(`creating a NEW brain App on ${org} (existing ${existing.slug} left intact)\u2026`);
     }
     const nameSuffix = randomBytes(3).toString("hex");
-    const app = await createGitHubApp({
-      org: this.org,
+    this.context.stdout.write(
+      `${colors.field("\u2192")} Opening your browser to create + install the GitHub App on ${org}.
+  GitHub may ask you to confirm your identity once or twice \u2014 a sign-in plus a security re-check for creating an org app. That's expected, not an error.
+  ${colors.dim(`Follow the page: click Create GitHub App, then Install (leave "All repositories"). GitHub brings you right back here when it's done.`)}
+`
+    );
+    const { app, installationId } = await createGitHubApp({
+      org,
       port,
       nameSuffix,
       openBrowser: (u) => {
         void tryOpenUrl(u);
       },
+      pollInstallation: (a) => pollOrgInstallation({
+        appId: a.id,
+        pem: a.pem,
+        org,
+        onTick: (n) => {
+          if (n % 5 === 0) onProgress(`\u2026waiting for install (${(n * 2).toString()}s)`);
+        }
+      }),
       onProgress
     });
     fs4.mkdirSync(path4.dirname(pemOut), { recursive: true });
     fs4.writeFileSync(pemOut, app.pem, { mode: 384 });
     this.context.stdout.write(
       `${colors.success("\u2713")} App created: ${colors.field(app.slug)} (id ${app.id}); pem \u2192 ${pemOut}
-`
-    );
-    const installUrl2 = `https://github.com/apps/${app.slug}/installations/new`;
-    this.context.stdout.write(
-      `${colors.field("\u2192")} Install it (default: All repositories):
-  ${installUrl2}
-`
-    );
-    void tryOpenUrl(installUrl2);
-    const installationId = await pollOrgInstallation({
-      appId: app.id,
-      pem: app.pem,
-      org: this.org,
-      onTick: (n) => {
-        if (n % 5 === 0) onProgress(`\u2026waiting for install (${(n * 2).toString()}s)`);
-      }
-    });
-    this.context.stdout.write(
-      `${colors.success("\u2713")} installed on ${this.org} (installation ${installationId})
+${colors.success("\u2713")} installed on ${org} (installation ${installationId})
 `
     );
     const creds = {
       appId: app.id,
       slug: app.slug,
-      org: this.org,
+      org,
       installationId,
       pemPath: pemOut
     };
@@ -13667,6 +13746,40 @@ ${LOADER_END}
 `;
 }
 
+// src/lib/a2a-snippet.ts
+var SNIPPET_START = "<!-- m8t:a2a:start -->";
+var SNIPPET_END = "<!-- m8t:a2a:end -->";
+var DELEGATE_SNIPPET = `${SNIPPET_START}
+## Working with other workers
+You can delegate to other m8t workers. Before you do:
+1. Call \`discover_workers\` to see who's available now \u2014 each entry's card says what
+   the worker is for, when to delegate to it, and what it accepts and returns.
+2. If one is a clear fit, call \`invoke_worker(target, task)\` \u2014 \`target\` is the name
+   from the directory; \`task\` is a complete, self-contained instruction (the worker
+   can't ask follow-ups mid-task).
+3. If invoke_worker returns status "in_progress" with a taskId, the worker is taking
+   a while \u2014 call \`check_delegation(taskId)\` to fetch the result, repeating until the
+   status is no longer "in_progress".
+4. Fold the worker's result into your own answer.
+Delegate only when another worker is genuinely better suited; otherwise answer
+directly. Don't re-delegate the same request in a loop.
+${SNIPPET_END}`;
+function esc(s) {
+  return s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+function stripSnippet(instructions) {
+  const re = new RegExp(`\\n*${esc(SNIPPET_START)}[\\s\\S]*?${esc(SNIPPET_END)}\\n*`, "g");
+  return instructions.replace(re, "\n").replace(/\s+$/, "");
+}
+function appendSnippet(instructions) {
+  return `${stripSnippet(instructions).replace(/\s+$/, "")}
+
+${DELEGATE_SNIPPET}`;
+}
+function hasA2aSnippet(instructions) {
+  return instructions.includes(SNIPPET_START);
+}
+
 // src/lib/brain-link.ts
 init_foundry_agent_get();
 init_brain_yaml_mirror();
@@ -13759,7 +13872,10 @@ async function linkBrain(args) {
       progress("No local persona yaml \u2014 basing instructions on the deployed agent\u2026");
       base = current.definition.instructions ?? "";
     }
-    const instructionsWithLoader = appendBrainLoader(base, loader);
+    let instructionsWithLoader = appendBrainLoader(base, loader);
+    if (hasA2aSnippet(current.definition.instructions ?? "")) {
+      instructionsWithLoader = appendSnippet(instructionsWithLoader);
+    }
     const link = {
       repo: args.repo,
       branch: args.branch,
@@ -14891,7 +15007,7 @@ init_errors();
 // src/lib/deploy-prompt-advisor.ts
 import * as fs12 from "fs";
 import * as path11 from "path";
-import { parse as parseYaml4 } from "yaml";
+import { parse as parseYaml5 } from "yaml";
 init_foundry_agents();
 init_errors();
 function findPersonasRoot(hint) {
@@ -14919,7 +15035,7 @@ async function deployPromptAdvisor(args) {
     });
   }
   const fmMatch = /^---\n([\s\S]*?)\n---/.exec(raw);
-  const fm = fmMatch ? parseYaml4(fmMatch[1]) : {};
+  const fm = fmMatch ? parseYaml5(fmMatch[1]) : {};
   const model = args.model ?? fm.targets?.foundry?.model;
   if (!model) {
     throw new LocalCliError({
@@ -15084,7 +15200,7 @@ import { randomBytes as randomBytes2, createHash } from "crypto";
 init_errors();
 init_esm();
 import * as fs13 from "fs";
-import { parse as parseYaml5 } from "yaml";
+import { parse as parseYaml6 } from "yaml";
 function readPersonaA2aCard(personaPath) {
   let raw;
   try {
@@ -15094,7 +15210,7 @@ function readPersonaA2aCard(personaPath) {
   }
   const fm = /^---\n([\s\S]*?)\n---/.exec(raw);
   if (!fm) throw new LocalCliError({ code: "PERSONA_NO_FRONTMATTER", message: `Persona '${personaPath}' has no frontmatter.` });
-  const front = parseYaml5(fm[1]);
+  const front = parseYaml6(fm[1]);
   const role = typeof front.role === "string" ? front.role : "";
   const cardYaml = front.targets?.foundry?.["a2a-card"];
   if (!cardYaml || typeof cardYaml !== "object") {
@@ -15129,23 +15245,6 @@ var FOUNDRY_ARM_API3 = "2025-04-01-preview";
 var FOUNDRY_DATA_SCOPE3 = "https://ai.azure.com/.default";
 var ARM_SCOPE6 = "https://management.azure.com/.default";
 var A2A_TOOLS = ["discover_workers", "invoke_worker", "check_delegation"];
-var SNIPPET_START = "<!-- m8t:a2a:start -->";
-var SNIPPET_END = "<!-- m8t:a2a:end -->";
-var DELEGATE_SNIPPET = `${SNIPPET_START}
-## Working with other workers
-You can delegate to other m8t workers. Before you do:
-1. Call \`discover_workers\` to see who's available now \u2014 each entry's card says what
-   the worker is for, when to delegate to it, and what it accepts and returns.
-2. If one is a clear fit, call \`invoke_worker(target, task)\` \u2014 \`target\` is the name
-   from the directory; \`task\` is a complete, self-contained instruction (the worker
-   can't ask follow-ups mid-task).
-3. If invoke_worker returns status "in_progress" with a taskId, the worker is taking
-   a while \u2014 call \`check_delegation(taskId)\` to fetch the result, repeating until the
-   status is no longer "in_progress".
-4. Fold the worker's result into your own answer.
-Delegate only when another worker is genuinely better suited; otherwise answer
-directly. Don't re-delegate the same request in a loop.
-${SNIPPET_END}`;
 async function enableA2a(args) {
   const progress = args.onProgress ?? ((_m) => {
   });
@@ -15204,15 +15303,6 @@ async function disableA2a(args) {
   await deleteConnection2({ credential: args.credential, projectArmId: args.projectArmId, connectionName });
   return { connectionName, foundryVersion };
 }
-function appendSnippet(instructions) {
-  return `${stripSnippet(instructions).replace(/\s+$/, "")}
-
-${DELEGATE_SNIPPET}`;
-}
-function stripSnippet(instructions) {
-  const re = new RegExp(`\\n*${esc(SNIPPET_START)}[\\s\\S]*?${esc(SNIPPET_END)}\\n*`, "g");
-  return instructions.replace(re, "\n").replace(/\s+$/, "");
-}
 function withA2aTool(tools, bridgeUrl, connectionName) {
   const others = tools.filter(
     (t) => !(t.type === "mcp" && t.server_label === "a2a")
@@ -15222,9 +15312,6 @@ function withA2aTool(tools, bridgeUrl, connectionName) {
     { type: "mcp", server_label: "a2a", server_url: bridgeUrl, allowed_tools: A2A_TOOLS, require_approval: "never", project_connection_id: connectionName }
   ];
 }
-function esc(s) {
-  return s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-}
 async function putA2aConnection(args) {
   const token = await args.credential.getToken(ARM_SCOPE6);
   if (!token?.token) throw new LocalCliError({ code: "ARM_AUTH", message: "Could not acquire ARM token" });
@@ -15602,7 +15689,7 @@ init_errors();
 import * as fs15 from "fs";
 import * as os6 from "os";
 import * as path12 from "path";
-import { parse as parseYaml6 } from "yaml";
+import { parse as parseYaml7 } from "yaml";
 var A2A_PATH = "/api/a2a/mcp";
 function resolveBridgeUrl(opts) {
   const env = opts.env ?? process.env;
@@ -15626,7 +15713,7 @@ function readConfigGatewayUrl(home) {
   const cfg = path12.join(home ?? os6.homedir(), ".m8t-stack", "config.yaml");
   if (!fs15.existsSync(cfg)) return void 0;
   try {
-    const o = parseYaml6(fs15.readFileSync(cfg, "utf8"));
+    const o = parseYaml7(fs15.readFileSync(cfg, "utf8"));
     return typeof o.gatewayUrl === "string" ? o.gatewayUrl : void 0;
   } catch {
     return void 0;
@@ -16128,7 +16215,7 @@ async function deployHostedWorker(args) {
 // src/lib/persona.ts
 import * as fs17 from "fs";
 import * as path15 from "path";
-import { parse as parseYaml7 } from "yaml";
+import { parse as parseYaml8 } from "yaml";
 function findRepoRoot(startDir) {
   let dir = path15.resolve(startDir);
   for (; ; ) {
@@ -16152,7 +16239,7 @@ function resolvePersona(persona, cwd = process.cwd()) {
   if (!match) return { persona, personaVersion: null };
   let fm = null;
   try {
-    fm = parseYaml7(match[1]);
+    fm = parseYaml8(match[1]);
   } catch {
     return { persona, personaVersion: null };
   }
@@ -18932,7 +19019,7 @@ import { Command as Command40, Option as Option38 } from "clipanion";
 // src/lib/profiles.ts
 import * as fs20 from "fs/promises";
 import * as path21 from "path";
-import { parse as parseYaml8, stringify as stringifyYaml4 } from "yaml";
+import { parse as parseYaml9, stringify as stringifyYaml4 } from "yaml";
 function profilesDir() {
   const home = process.env.HOME ?? process.env.USERPROFILE ?? "";
   return path21.join(home, ".m8t-stack", "profiles");
@@ -18957,7 +19044,7 @@ async function listProfiles() {
 async function readProfile(name) {
   try {
     const raw = await fs20.readFile(getProfilePath(name), "utf8");
-    const parsed = parseYaml8(raw);
+    const parsed = parseYaml9(raw);
     if (!parsed || typeof parsed !== "object") return null;
     return parsed;
   } catch (e) {
@@ -21224,7 +21311,7 @@ async function emitDigest(input, deps, digest) {
 }
 
 // ../../packages/brain/engine/dist/esm/dream/config.js
-import { parse as parseYaml9 } from "yaml";
+import { parse as parseYaml10 } from "yaml";
 var DEFAULT_DREAM_MODEL = "gpt-5.4";
 function asCadence(v) {
   return v === "nightly" ? "nightly" : "off";
@@ -21232,7 +21319,7 @@ function asCadence(v) {
 function parseDreamerConfig(rawYaml, env) {
   let parsed;
   try {
-    parsed = parseYaml9(rawYaml);
+    parsed = parseYaml10(rawYaml);
   } catch {
     return { enabled: false, cadence: "off", model: env.M8T_DREAM_MODEL ?? DEFAULT_DREAM_MODEL };
   }
@@ -21249,10 +21336,10 @@ function parseDreamerConfig(rawYaml, env) {
 var ZERO_WIDTH_RE = new RegExp("\u200B|\u200C|\u200D|\uFEFF", "g");
 
 // ../../packages/brain/engine/dist/esm/librarian/janitor/frontmatter.js
-import { parse as parseYaml10, stringify as stringifyYaml5 } from "yaml";
+import { parse as parseYaml11, stringify as stringifyYaml5 } from "yaml";
 
 // ../../packages/brain/engine/dist/esm/librarian/config.js
-import { parse as parseYaml11 } from "yaml";
+import { parse as parseYaml12 } from "yaml";
 
 // src/lib/dream-discovery.ts
 init_http();
@@ -23119,6 +23206,37 @@ async function reactiveSeedOnFinish(args) {
   );
 }
 
+// src/lib/install-summary.ts
+var DEFAULT_WORKERS = [
+  { name: "stacey", label: "Stacey \u2014 Startup Advisor", brain: "stacey-brain", executor: "stacey-coder" },
+  { name: "azzy", label: "Azzy   \u2014 Azure Advisor", brain: "azzy-brain", executor: "azure-executor" }
+];
+function renderInstallSummary(args) {
+  const open = args.webappUrl ? `${args.webappUrl}        (or run: m8t open)` : "run: m8t open";
+  const lines = [
+    "\u2705 Your m8t platform is ready to use.",
+    `   Open it:  ${open}`,
+    ""
+  ];
+  if (args.brainOrg) {
+    lines.push("   Your team:");
+    for (const w of DEFAULT_WORKERS) {
+      lines.push(`     \u2022 ${w.label}   \xB7 brain: ${args.brainOrg}/${w.brain}   \xB7 executor: ${w.executor}`);
+    }
+    lines.push(
+      "",
+      "   Reach them:  @stacey / @azzy (or /stacey) in your coding agent",
+      "                \xB7 the webapp  \xB7 or connect Telegram in the webapp (Channels)"
+    );
+  } else {
+    lines.push(
+      "   No brain-backed workers yet \u2014 deploy one with:  m8t coder deploy <name>   (or the m8t-architect skill)",
+      "   Reach your platform via the webapp, or `m8t open`."
+    );
+  }
+  return lines.join("\n") + "\n";
+}
+
 // src/commands/bootstrap/finish.ts
 var BootstrapFinishCommand = class extends M8tCommand {
   static paths = [["bootstrap", "finish"]];
@@ -23150,6 +23268,7 @@ var BootstrapFinishCommand = class extends M8tCommand {
 `, "utf8");
     const subscriptionId = (typeof this.subscription === "string" ? this.subscription : void 0) ?? state.subscriptionId;
     const resourceGroup = (typeof this.resourceGroup === "string" ? this.resourceGroup : void 0) ?? state.resourceGroup;
+    let webappUrl;
     try {
       const d = await discoverGateway({ subscriptionId, interactive: false, resourceGroup });
       await writeConfig({
@@ -23160,6 +23279,7 @@ var BootstrapFinishCommand = class extends M8tCommand {
         containerAppResourceId: d.containerAppResourceId,
         cachedAt: (/* @__PURE__ */ new Date()).toISOString()
       });
+      webappUrl = d.gatewayUrl;
       this.context.stdout.write(
         `${colors.success("\u2705 The platform is live and your local tools are pointed at it.")}
   gateway:  ${d.gatewayUrl}
@@ -23178,6 +23298,14 @@ var BootstrapFinishCommand = class extends M8tCommand {
 ` : "") + "\n"
       );
     }
+    let brainOrg = null;
+    try {
+      const credsRaw = await fs24.readFile(path26.join(markerDir, "github-app.json"), "utf8");
+      const creds = JSON.parse(credsRaw);
+      brainOrg = typeof creds.org === "string" ? creds.org : null;
+    } catch {
+    }
+    this.context.stdout.write(renderInstallSummary({ webappUrl, brainOrg }) + "\n");
     this.context.stdout.write(
       `${colors.field("Finish wiring your coding agent:")}
   \u2022 Render the m8t personas + MCP into your host \u2014 follow guides/install/m8t.md (step 4) and, optionally, guides/install/m8t-stack.md (step 5).
@@ -23392,6 +23520,16 @@ async function serveOnboardingUiDetached(args) {
   }
   return { alreadyRunning: false, logPath };
 }
+function autoOpenOnboardingUi(url, open = tryOpenUrl) {
+  try {
+    const result = open(url);
+    if (result instanceof Promise) {
+      result.catch(() => {
+      });
+    }
+  } catch {
+  }
+}
 function stopOnboardingUi(home = os15.homedir()) {
   const { pidPath } = onboardingUiPaths(home);
   let pidStr;
@@ -23557,7 +23695,8 @@ var BootstrapUiCommand = class extends M8tCommand {
     this.context.stdout.write(
       `${colors.success("\u2713")} Simple Stacey is live (stacey-intake v${version}).
   env: ${envPath}
-  Open ${colors.field("http://localhost:3000")} \u2192 Sign in with Microsoft \u2192 chat with Stacey.
+  Opening ${colors.field("http://localhost:3000")} in your browser \u2192 Sign in with Microsoft \u2192 chat with Stacey.
+  ${colors.dim("(If it doesn't open, browse to http://localhost:3000 yourself.)")}
   ${colors.dim("First turn may say 'warming up' for a few minutes while access propagates \u2014 that's expected.")}
 `
     );
@@ -23585,6 +23724,7 @@ var BootstrapUiCommand = class extends M8tCommand {
 `
       );
     }
+    autoOpenOnboardingUi(`http://localhost:${this.port}`);
     return 0;
   }
 };