@moikapy/lich 0.6.0 → 0.7.1

package/dist/index.d.ts

@@ -23,107 +23,6 @@ interface JsonSchemaObject {
     additionalProperties?: boolean;
 }
 
-interface ToolResult {
-    ok: boolean;
-    output: string;
-    error?: string;
-}
-interface ToolContext {
-    work_dir: string;
-    env: Record<string, string>;
-    signal?: AbortSignal;
-}
-interface Tool {
-    name: string;
-    description: string;
-    parameters: JsonSchemaObject;
-    /** Per-tool executor timeout override in ms; unset tools get the 30s default. */
-    timeout_ms?: number;
-    execute(args: Record<string, unknown>, context: ToolContext): Promise<ToolResult>;
-}
-interface Toolset {
-    name: string;
-    tools: Tool[];
-}
-
-/**
- * Plugin surface: user-authored tools and lifecycle hooks loaded at startup.
- *
- * A plugin is a plain object exported from a TS/JS module. Hooks observe and
- * (in the case of before_tool_call) veto tool executions; tools merge into the
- * agent registry after builtin filtering.
- */
-
-/** Runtime info handed to every hook call. */
-interface HookContext {
-    work_dir: string;
-    /**
-     * This plugin's own per-run state sub-map. Every hook invocation receives
-     * a ctx exposing only the invoking plugin's bag; the bag is swapped fresh
-     * at each run start. Absent only on hand-built contexts outside the runner.
-     */
-    state?: Map<string, unknown>;
-}
-/** Argument passed to before_tool_call hooks. */
-interface BeforeToolCallInfo {
-    tool_name: string;
-    args: Record<string, unknown>;
-}
-/** Return value that vetoes a tool call; other hooks still run. */
-interface BeforeToolCallResult {
-    block?: boolean;
-    reason?: string;
-}
-/** Argument passed to after_tool_call hooks. */
-interface AfterToolCallInfo extends BeforeToolCallInfo {
-    result_summary: string;
-    /** Structured executor outcome; gate on this, never parse result_summary. */
-    ok: boolean;
-    error?: string;
-}
-interface RunEndInfo {
-    stopped_reason: string;
-    turns_used: number;
-}
-/** Optional lifecycle hooks a plugin may implement. All hooks are awaited. */
-interface PluginHooks {
-    before_tool_call?(info: BeforeToolCallInfo, ctx: HookContext): Promise<BeforeToolCallResult | void> | BeforeToolCallResult | void;
-    after_tool_call?(info: AfterToolCallInfo, ctx: HookContext): Promise<void> | void;
-    on_run_start?(info: {
-        input_chars: number;
-    }, ctx: HookContext): Promise<void> | void;
-    on_run_end?(info: RunEndInfo, ctx: HookContext): Promise<void> | void;
-}
-/** A user plugin: required unique name, optional tools and hooks. */
-interface Plugin {
-    name: string;
-    version?: string;
-    tools?: Tool[];
-    hooks?: PluginHooks;
-}
-
-/** A successfully loaded plugin plus the entry path it came from. */
-interface LoadedPlugin {
-    plugin: Plugin;
-    entry: string;
-}
-/** One failed entry: the specifier and why it failed. */
-interface PluginLoadError {
-    entry: string;
-    error_message: string;
-}
-/**
- * Load plugins from explicit entry paths (relative to `base_dir` or absolute).
- * Broken imports, missing exports, and duplicate names become error entries;
- * nothing is thrown for a bad plugin.
- */
-declare function load_plugins(entries: readonly string[], base_dir: string): Promise<{
-    plugins: LoadedPlugin[];
-    errors: PluginLoadError[];
-}>;
-/** Joined one-liner per load error, for a single warn log. */
-declare function plugin_errors_summary(errors: readonly PluginLoadError[]): string;
-
 type FinishReason = "stop" | "tool_calls" | "length" | "error" | "unknown";
 type ProviderErrorKind = "rate_limit" | "network" | "auth" | "overflow" | "bad_request" | "unknown";
 interface ToolCall {
@@ -261,19 +160,73 @@ declare const agent_config_schema: z.ZodEffects<z.ZodObject<{
         platforms: z.ZodDefault<z.ZodArray<z.ZodEnum<["webhook", "telegram", "discord", "twitch"]>, "many">>;
         /** Env-var names that hold tokens. Never store the secrets themselves. */
         token_envs: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+        /** Per-platform user ids allowed to talk to the bot (default-deny on public platforms). */
+        allowed_users: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodArray<z.ZodString, "many">>>;
+        /** Per-platform chat/channel ids allowed (default-deny on public platforms). */
+        allowed_chats: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodArray<z.ZodString, "many">>>;
+        /** Tool allowlist for the gateway agent; defaults to a read-only safe subset. */
+        tools_enabled: z.ZodDefault<z.ZodUnion<[z.ZodLiteral<"all">, z.ZodArray<z.ZodString, "many">]>>;
     }, "strip", z.ZodTypeAny, {
+        tools_enabled: string[] | "all";
         platforms: ("webhook" | "telegram" | "discord" | "twitch")[];
         token_envs: Record<string, string>;
+        allowed_users: Record<string, string[]>;
+        allowed_chats: Record<string, string[]>;
     }, {
+        tools_enabled?: string[] | "all" | undefined;
         platforms?: ("webhook" | "telegram" | "discord" | "twitch")[] | undefined;
         token_envs?: Record<string, string> | undefined;
+        allowed_users?: Record<string, string[]> | undefined;
+        allowed_chats?: Record<string, string[]> | undefined;
     }>>;
     log_level: z.ZodDefault<z.ZodEnum<["debug", "info", "warn", "error"]>>;
     theme: z.ZodDefault<z.ZodString>;
+    /** Named MCP servers. Each entry is stdio or loopback http. Default off. */
+    mcp_servers: z.ZodOptional<z.ZodEffects<z.ZodRecord<z.ZodString, z.ZodUnion<[z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        command: z.ZodString;
+        args: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    }, "strict", z.ZodTypeAny, {
+        enabled: boolean;
+        command: string;
+        args: string[];
+        env?: Record<string, string> | undefined;
+    }, {
+        command: string;
+        enabled?: boolean | undefined;
+        args?: string[] | undefined;
+        env?: Record<string, string> | undefined;
+    }>, z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        url: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        url: string;
+        enabled: boolean;
+    }, {
+        url: string;
+        enabled?: boolean | undefined;
+    }>]>>, Record<string, {
+        enabled: boolean;
+        command: string;
+        args: string[];
+        env?: Record<string, string> | undefined;
+    } | {
+        url: string;
+        enabled: boolean;
+    }>, Record<string, {
+        command: string;
+        enabled?: boolean | undefined;
+        args?: string[] | undefined;
+        env?: Record<string, string> | undefined;
+    } | {
+        url: string;
+        enabled?: boolean | undefined;
+    }>>>;
 }, "strip", z.ZodTypeAny, {
-    plugins: string[];
-    agent_name: string;
     max_turns: number;
+    log_level: "debug" | "info" | "warn" | "error";
+    theme: string;
     providers: z.objectOutputType<{
         kind: z.ZodEnum<["openai_compat", "anthropic", "ollama"]>;
         name: z.ZodString;
@@ -285,21 +238,33 @@ declare const agent_config_schema: z.ZodEffects<z.ZodObject<{
         /** Injectable fetch, mainly for tests; passes through untouched. */
         fetch_fn: z.ZodOptional<z.ZodType<typeof fetch, z.ZodTypeDef, typeof fetch>>;
     }, z.ZodTypeAny, "passthrough">[];
+    agent_name: string;
     tools_enabled: string[] | "all";
     context_budget_tokens: number;
     compress_threshold: number;
     terminal_timeout_ms: number;
-    log_level: "debug" | "info" | "warn" | "error";
-    theme: string;
-    temperature?: number | undefined;
-    max_tokens?: number | undefined;
-    system_prompt?: string | undefined;
+    plugins: string[];
     work_dir?: string | undefined;
+    system_prompt?: string | undefined;
     session_dir?: string | undefined;
     gateway?: {
+        tools_enabled: string[] | "all";
         platforms: ("webhook" | "telegram" | "discord" | "twitch")[];
         token_envs: Record<string, string>;
+        allowed_users: Record<string, string[]>;
+        allowed_chats: Record<string, string[]>;
     } | undefined;
+    temperature?: number | undefined;
+    max_tokens?: number | undefined;
+    mcp_servers?: Record<string, {
+        enabled: boolean;
+        command: string;
+        args: string[];
+        env?: Record<string, string> | undefined;
+    } | {
+        url: string;
+        enabled: boolean;
+    }> | undefined;
 }, {
     providers: z.objectInputType<{
         kind: z.ZodEnum<["openai_compat", "anthropic", "ollama"]>;
@@ -312,44 +277,68 @@ declare const agent_config_schema: z.ZodEffects<z.ZodObject<{
         /** Injectable fetch, mainly for tests; passes through untouched. */
         fetch_fn: z.ZodOptional<z.ZodType<typeof fetch, z.ZodTypeDef, typeof fetch>>;
     }, z.ZodTypeAny, "passthrough">[];
-    plugins?: string[] | undefined;
-    temperature?: number | undefined;
-    max_tokens?: number | undefined;
-    agent_name?: string | undefined;
-    system_prompt?: string | undefined;
-    max_turns?: number | undefined;
     work_dir?: string | undefined;
-    tools_enabled?: string[] | "all" | undefined;
-    context_budget_tokens?: number | undefined;
-    compress_threshold?: number | undefined;
+    max_turns?: number | undefined;
+    system_prompt?: string | undefined;
     session_dir?: string | undefined;
-    terminal_timeout_ms?: number | undefined;
+    log_level?: "debug" | "info" | "warn" | "error" | undefined;
+    theme?: string | undefined;
     gateway?: {
+        tools_enabled?: string[] | "all" | undefined;
         platforms?: ("webhook" | "telegram" | "discord" | "twitch")[] | undefined;
         token_envs?: Record<string, string> | undefined;
+        allowed_users?: Record<string, string[]> | undefined;
+        allowed_chats?: Record<string, string[]> | undefined;
     } | undefined;
-    log_level?: "debug" | "info" | "warn" | "error" | undefined;
-    theme?: string | undefined;
+    agent_name?: string | undefined;
+    tools_enabled?: string[] | "all" | undefined;
+    temperature?: number | undefined;
+    max_tokens?: number | undefined;
+    context_budget_tokens?: number | undefined;
+    compress_threshold?: number | undefined;
+    terminal_timeout_ms?: number | undefined;
+    plugins?: string[] | undefined;
+    mcp_servers?: Record<string, {
+        command: string;
+        enabled?: boolean | undefined;
+        args?: string[] | undefined;
+        env?: Record<string, string> | undefined;
+    } | {
+        url: string;
+        enabled?: boolean | undefined;
+    }> | undefined;
 }>, {
     work_dir: string;
     providers: ProviderConfig[];
     session_dir: string;
-    plugins: string[];
-    agent_name: string;
     max_turns: number;
+    log_level: "debug" | "info" | "warn" | "error";
+    theme: string;
+    agent_name: string;
     tools_enabled: string[] | "all";
     context_budget_tokens: number;
     compress_threshold: number;
     terminal_timeout_ms: number;
-    log_level: "debug" | "info" | "warn" | "error";
-    theme: string;
-    temperature?: number | undefined;
-    max_tokens?: number | undefined;
+    plugins: string[];
     system_prompt?: string | undefined;
     gateway?: {
+        tools_enabled: string[] | "all";
         platforms: ("webhook" | "telegram" | "discord" | "twitch")[];
         token_envs: Record<string, string>;
+        allowed_users: Record<string, string[]>;
+        allowed_chats: Record<string, string[]>;
     } | undefined;
+    temperature?: number | undefined;
+    max_tokens?: number | undefined;
+    mcp_servers?: Record<string, {
+        enabled: boolean;
+        command: string;
+        args: string[];
+        env?: Record<string, string> | undefined;
+    } | {
+        url: string;
+        enabled: boolean;
+    }> | undefined;
 }, {
     providers: z.objectInputType<{
         kind: z.ZodEnum<["openai_compat", "anthropic", "ollama"]>;
@@ -362,28 +351,175 @@ declare const agent_config_schema: z.ZodEffects<z.ZodObject<{
         /** Injectable fetch, mainly for tests; passes through untouched. */
         fetch_fn: z.ZodOptional<z.ZodType<typeof fetch, z.ZodTypeDef, typeof fetch>>;
     }, z.ZodTypeAny, "passthrough">[];
-    plugins?: string[] | undefined;
-    temperature?: number | undefined;
-    max_tokens?: number | undefined;
-    agent_name?: string | undefined;
-    system_prompt?: string | undefined;
-    max_turns?: number | undefined;
     work_dir?: string | undefined;
-    tools_enabled?: string[] | "all" | undefined;
-    context_budget_tokens?: number | undefined;
-    compress_threshold?: number | undefined;
+    max_turns?: number | undefined;
+    system_prompt?: string | undefined;
     session_dir?: string | undefined;
-    terminal_timeout_ms?: number | undefined;
+    log_level?: "debug" | "info" | "warn" | "error" | undefined;
+    theme?: string | undefined;
     gateway?: {
+        tools_enabled?: string[] | "all" | undefined;
         platforms?: ("webhook" | "telegram" | "discord" | "twitch")[] | undefined;
         token_envs?: Record<string, string> | undefined;
+        allowed_users?: Record<string, string[]> | undefined;
+        allowed_chats?: Record<string, string[]> | undefined;
     } | undefined;
-    log_level?: "debug" | "info" | "warn" | "error" | undefined;
-    theme?: string | undefined;
+    agent_name?: string | undefined;
+    tools_enabled?: string[] | "all" | undefined;
+    temperature?: number | undefined;
+    max_tokens?: number | undefined;
+    context_budget_tokens?: number | undefined;
+    compress_threshold?: number | undefined;
+    terminal_timeout_ms?: number | undefined;
+    plugins?: string[] | undefined;
+    mcp_servers?: Record<string, {
+        command: string;
+        enabled?: boolean | undefined;
+        args?: string[] | undefined;
+        env?: Record<string, string> | undefined;
+    } | {
+        url: string;
+        enabled?: boolean | undefined;
+    }> | undefined;
 }>;
 type AgentConfig = z.infer<typeof agent_config_schema>;
 declare function parse_agent_config(raw: unknown): AgentConfig;
 
+interface ToolResult {
+    ok: boolean;
+    output: string;
+    error?: string;
+}
+interface ToolContext {
+    work_dir: string;
+    env: Record<string, string>;
+    signal?: AbortSignal;
+}
+interface Tool {
+    name: string;
+    description: string;
+    parameters: JsonSchemaObject;
+    /** Per-tool executor timeout override in ms; unset tools get the 30s default. */
+    timeout_ms?: number;
+    execute(args: Record<string, unknown>, context: ToolContext): Promise<ToolResult>;
+}
+interface Toolset {
+    name: string;
+    tools: Tool[];
+}
+
+/**
+ * Name-keyed registry of tools and toolsets. Registration rejects duplicate
+ * tool names so conflicting builtins fail loudly at startup.
+ */
+declare class ToolRegistry {
+    private readonly tools;
+    register(tool: Tool): void;
+    register_toolset(toolset: Toolset): void;
+    get(name: string): Tool | undefined;
+    has(name: string): boolean;
+    list(): Tool[];
+    /** Map registered tools onto the provider-facing wire shape. */
+    definitions(): ToolDefinition[];
+}
+
+interface LineChild {
+    write_line(line: string): void;
+    read_line(): Promise<string | undefined>;
+    stop(): void;
+    failed(): string | undefined;
+}
+type LineSpawner = (command: string, args: readonly string[], env?: Record<string, string>) => LineChild;
+
+/**
+ * Discover tools/list for each enabled server and register mcp_<server>_<tool>.
+ * tools_enabled filters them. An empty allowlist never connects.
+ */
+
+interface McpRuntime {
+    spawn?: LineSpawner;
+    fetch_fn?: typeof fetch;
+    env_path?: string;
+}
+
+/**
+ * Plugin surface: user-authored tools and lifecycle hooks loaded at startup.
+ *
+ * A plugin is a plain object exported from a TS/JS module. Hooks observe and
+ * (in the case of before_tool_call) veto tool executions; tools merge into the
+ * agent registry after builtin filtering.
+ */
+
+/** Runtime info handed to every hook call. */
+interface HookContext {
+    work_dir: string;
+    /**
+     * This plugin's own per-run state sub-map. Every hook invocation receives
+     * a ctx exposing only the invoking plugin's bag; the bag is swapped fresh
+     * at each run start. Absent only on hand-built contexts outside the runner.
+     */
+    state?: Map<string, unknown>;
+}
+/** Argument passed to before_tool_call hooks. */
+interface BeforeToolCallInfo {
+    tool_name: string;
+    args: Record<string, unknown>;
+}
+/** Return value that vetoes a tool call; other hooks still run. */
+interface BeforeToolCallResult {
+    block?: boolean;
+    reason?: string;
+}
+/** Argument passed to after_tool_call hooks. */
+interface AfterToolCallInfo extends BeforeToolCallInfo {
+    result_summary: string;
+    /** Structured executor outcome; gate on this, never parse result_summary. */
+    ok: boolean;
+    error?: string;
+}
+interface RunEndInfo {
+    stopped_reason: string;
+    turns_used: number;
+}
+/** Optional lifecycle hooks a plugin may implement. All hooks are awaited. */
+interface PluginHooks {
+    before_tool_call?(info: BeforeToolCallInfo, ctx: HookContext): Promise<BeforeToolCallResult | void> | BeforeToolCallResult | void;
+    after_tool_call?(info: AfterToolCallInfo, ctx: HookContext): Promise<void> | void;
+    on_run_start?(info: {
+        input_chars: number;
+    }, ctx: HookContext): Promise<void> | void;
+    on_run_end?(info: RunEndInfo, ctx: HookContext): Promise<void> | void;
+}
+/** A user plugin: required unique name, optional tools and hooks. */
+interface Plugin {
+    name: string;
+    version?: string;
+    tools?: Tool[];
+    hooks?: PluginHooks;
+}
+
+/** A successfully loaded plugin plus the entry path it came from. */
+interface LoadedPlugin {
+    plugin: Plugin;
+    entry: string;
+}
+/** One failed entry: the specifier and why it failed. */
+interface PluginLoadError {
+    entry: string;
+    error_message: string;
+}
+/**
+ * Load plugins from explicit entry paths (relative to `base_dir` or absolute).
+ * Broken imports, missing exports, and duplicate names become error entries;
+ * nothing is thrown for a bad plugin.
+ */
+declare function load_plugins(entries: readonly string[], base_dir: string): Promise<{
+    plugins: LoadedPlugin[];
+    errors: PluginLoadError[];
+}>;
+/** Joined one-liner per load error, for a single warn log. */
+declare function plugin_errors_summary(errors: readonly PluginLoadError[]): string;
+
 /**
  * Typed event emitter for the agent loop.
  *
@@ -492,8 +628,18 @@ declare class Agent {
     private readonly registry;
     private readonly executor;
     private readonly hook_runner;
-    constructor(config: AgentConfig, plugins?: readonly LoadedPlugin[]);
+    private readonly mcp_runtime;
+    private mcp_sessions;
+    private mcp_attach;
+    constructor(config: AgentConfig, plugins?: readonly LoadedPlugin[], runtime?: {
+        mcp?: McpRuntime;
+    });
     run(options: AgentRunOptions): Promise<AgentRunResult>;
+    /** Close MCP sessions so stdio children do not keep the event loop alive. */
+    close(): void;
+    /** tools/list once, before the model sees definitions. Empty allowlists never connect. */
+    private attach_mcp_once;
+    private do_attach_mcp;
     /** Per-run deps: the built-once ToolContext threads through every tool execution. */
     private loop_deps;
     /** Best-effort on_run_start fan-out; hook errors are logged, never fatal. */
@@ -511,20 +657,8 @@ declare function run_agent(raw_config: unknown, input: string, options?: {
     label?: string;
 }): Promise<AgentRunResult>;
 
-/**
- * Name-keyed registry of tools and toolsets. Registration rejects duplicate
- * tool names so conflicting builtins fail loudly at startup.
- */
-declare class ToolRegistry {
-    private readonly tools;
-    register(tool: Tool): void;
-    register_toolset(toolset: Toolset): void;
-    get(name: string): Tool | undefined;
-    has(name: string): boolean;
-    list(): Tool[];
-    /** Map registered tools onto the provider-facing wire shape. */
-    definitions(): ToolDefinition[];
-}
+/** Write the client entry. The user sets enabled. Godot has nothing to write. */
+declare function catalog_client_entry(name: string, substitutes?: Record<string, string>): Record<string, unknown> | string;
 
 interface ExecutorDefaults {
     work_dir?: string;
@@ -588,4 +722,4 @@ declare class HookedToolRunner {
 
 declare const LICH_VERSION: string;
 
-export { type AfterToolCallInfo, Agent, type AgentConfig, AgentEmitter, type AgentEvent, type AgentEventHandler, type AgentEvents, type AgentRunOptions, type AgentRunResult, type BeforeToolCallInfo, type BeforeToolCallResult, type ChatOptions, type ChatResult, type HookContext, HookedToolRunner, LICH_VERSION, type LoadedPlugin, type LoopOutcome, type LoopParams, type Message, type Plugin, type PluginHooks, type PluginLoadError, type ProviderConfig, ProviderError, type RunEndInfo, type Tool, type ToolCall, type ToolContext, type ToolDefinition, ToolExecutor, ToolRegistry, type ToolResult, type Usage, create_agent, create_agent_with_plugins, load_plugins, parse_agent_config, plugin_errors_summary, register_builtin_tools, run_agent };
+export { type AfterToolCallInfo, Agent, type AgentConfig, AgentEmitter, type AgentEvent, type AgentEventHandler, type AgentEvents, type AgentRunOptions, type AgentRunResult, type BeforeToolCallInfo, type BeforeToolCallResult, type ChatOptions, type ChatResult, type HookContext, HookedToolRunner, LICH_VERSION, type LoadedPlugin, type LoopOutcome, type LoopParams, type Message, type Plugin, type PluginHooks, type PluginLoadError, type ProviderConfig, ProviderError, type RunEndInfo, type Tool, type ToolCall, type ToolContext, type ToolDefinition, ToolExecutor, ToolRegistry, type ToolResult, type Usage, catalog_client_entry, create_agent, create_agent_with_plugins, load_plugins, parse_agent_config, plugin_errors_summary, register_builtin_tools, run_agent };

package/dist/index.js

@@ -1,6 +1,7 @@
 import {
-  LICH_VERSION
-} from "./chunk-6M6OAQGN.js";
+  LICH_VERSION,
+  catalog_client_entry
+} from "./chunk-PZNYVGD4.js";
 import {
   Agent,
   AgentEmitter,
@@ -15,7 +16,7 @@ import {
   plugin_errors_summary,
   register_builtin_tools,
   run_agent
-} from "./chunk-7HLVKVIG.js";
+} from "./chunk-WNFBIX4E.js";
 export {
   Agent,
   AgentEmitter,
@@ -24,6 +25,7 @@ export {
   ProviderError,
   ToolExecutor,
   ToolRegistry,
+  catalog_client_entry,
   create_agent,
   create_agent_with_plugins,
   load_plugins,

package/dist/{tui-LOUJVZ6A.js → tui-MEJGEILU.js}

@@ -1,14 +1,14 @@
 import {
   fill_template,
   load_theme
-} from "./chunk-JC2G3XH2.js";
+} from "./chunk-CVX7LZWC.js";
 import {
   LICH_VERSION
-} from "./chunk-6M6OAQGN.js";
+} from "./chunk-PZNYVGD4.js";
 import {
   create_agent_with_plugins,
   truncate_text
-} from "./chunk-7HLVKVIG.js";
+} from "./chunk-WNFBIX4E.js";
 
 // src/tui.tsx
 import { render } from "ink";
@@ -242,6 +242,9 @@ function CommandBar({ busy, on_submit }) {
   const [recall_ring, set_recall_ring] = useState2([]);
   const [recall_index, set_recall_index] = useState2(void 0);
   const submit_buffer = () => {
+    if (busy === true) {
+      return;
+    }
     const text = buffer.trim();
     set_buffer("");
     set_recall_index(void 0);
@@ -254,6 +257,14 @@ function CommandBar({ busy, on_submit }) {
     if (recall_ring.length === 0) {
       return;
     }
+    if (direction === -1 && recall_index === 0) {
+      set_recall_index(void 0);
+      set_buffer("");
+      return;
+    }
+    if (direction === -1 && recall_index === void 0) {
+      return;
+    }
     const current = recall_index ?? -direction;
     const next = Math.min(Math.max(current + direction, 0), recall_ring.length - 1);
     set_recall_index(next);
@@ -265,11 +276,11 @@ function CommandBar({ busy, on_submit }) {
       return;
     }
     if (key.upArrow === true) {
-      walk_recall(-1);
+      walk_recall(1);
       return;
     }
     if (key.downArrow === true) {
-      walk_recall(1);
+      walk_recall(-1);
       return;
     }
     if (key.backspace === true || key.delete === true) {
@@ -427,12 +438,16 @@ function TuiApp({ agent, theme }) {
 import { jsx as jsx5 } from "react/jsx-runtime";
 async function run_tui(config) {
   const agent = await create_agent_with_plugins(config);
-  const theme = load_theme(config.theme);
-  const instance = render(/* @__PURE__ */ jsx5(TuiApp, { agent, theme }));
-  await instance.waitUntilExit();
-  return 0;
+  try {
+    const theme = load_theme(config.theme);
+    const instance = render(/* @__PURE__ */ jsx5(TuiApp, { agent, theme }));
+    await instance.waitUntilExit();
+    return 0;
+  } finally {
+    agent.close();
+  }
 }
 export {
   run_tui
 };
-//# sourceMappingURL=tui-LOUJVZ6A.js.map
+//# sourceMappingURL=tui-MEJGEILU.js.map