@namzu/cli 0.5.0 → 0.6.0

package/dist/commands/__tests__/resume.test.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Resuming a conversation, and — mostly — refusing to.
+ *
+ * The rule under test: when the named conversation cannot be resumed, this
+ * REFUSES and names the cause. It never falls back to a fresh session, and it
+ * never resumes with a partial history.
+ *
+ * Both fallbacks would be invisible from outside. The user asked for a specific
+ * conversation, would get something that looks like one, and would find out
+ * several turns later having already acted on it. A half-context is the worse
+ * of the two: it is not a degraded context, it is a different context that lies
+ * about being complete.
+ */
+export {};
+//# sourceMappingURL=resume.test.d.ts.map

package/dist/commands/__tests__/resume.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resume.test.d.ts","sourceRoot":"","sources":["../../../src/commands/__tests__/resume.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG"}

package/dist/commands/__tests__/resume.test.js

@@ -0,0 +1,116 @@
+/**
+ * Resuming a conversation, and — mostly — refusing to.
+ *
+ * The rule under test: when the named conversation cannot be resumed, this
+ * REFUSES and names the cause. It never falls back to a fresh session, and it
+ * never resumes with a partial history.
+ *
+ * Both fallbacks would be invisible from outside. The user asked for a specific
+ * conversation, would get something that looks like one, and would find out
+ * several turns later having already acted on it. A half-context is the worse
+ * of the two: it is not a degraded context, it is a different context that lies
+ * about being complete.
+ */
+import { describe, expect, it, vi } from 'vitest';
+import { listRecent, loadConversation } from '../../integrations/sessions/store.js';
+import { resolveResume } from '../resume.js';
+vi.mock('../../integrations/sessions/store.js', () => ({
+    listRecent: vi.fn(),
+    loadConversation: vi.fn(),
+}));
+const sessions = {};
+const CWD = '/projects/foo';
+function recent(...ids) {
+    vi.mocked(listRecent).mockResolvedValue(ids.map((id, i) => ({
+        id: id,
+        title: id,
+        updatedAt: `2026-08-0${i + 1}T00:00:00Z`,
+        count: 2,
+    })));
+}
+describe('asking for nothing', () => {
+    it('is a fresh run, not an error', async () => {
+        const out = await resolveResume(sessions, { continueLast: false, sessionId: null }, CWD);
+        expect(out.kind).toBe('fresh');
+    });
+});
+describe('--continue', () => {
+    it('takes the most recent conversation', async () => {
+        recent('ses_new', 'ses_old');
+        vi.mocked(loadConversation).mockResolvedValue([
+            { role: 'user', content: 'hi', timestamp: 0 },
+        ]);
+        const out = await resolveResume(sessions, { continueLast: true, sessionId: null }, CWD);
+        expect(out).toMatchObject({ kind: 'resumed', sessionId: 'ses_new' });
+    });
+    it('refuses with its OWN sentence when there is nothing here', async () => {
+        // Not "cannot resume" — the cause is different and so is the fix. Someone
+        // with no conversation here is usually standing in the wrong directory,
+        // so the message has to point at --cwd rather than at a broken store.
+        recent();
+        const out = await resolveResume(sessions, { continueLast: true, sessionId: null }, CWD);
+        expect(out.kind).toBe('error');
+        expect(out).toMatchObject({ message: expect.stringContaining('no previous conversation') });
+        expect(out).toMatchObject({ message: expect.stringContaining(CWD) });
+        expect(out).toMatchObject({ message: expect.stringContaining('--cwd') });
+    });
+});
+describe('--resume <id>', () => {
+    it('takes the conversation it was given, not the most recent', async () => {
+        recent('ses_new', 'ses_wanted');
+        vi.mocked(loadConversation).mockResolvedValue([
+            { role: 'user', content: 'hi', timestamp: 0 },
+        ]);
+        const out = await resolveResume(sessions, { continueLast: false, sessionId: 'ses_wanted' }, CWD);
+        expect(out).toMatchObject({ kind: 'resumed', sessionId: 'ses_wanted' });
+    });
+    it('refuses an id that is not here, and says how many are', async () => {
+        // THE case. Starting fresh would hand back something indistinguishable
+        // from what was asked for.
+        recent('ses_a', 'ses_b');
+        const out = await resolveResume(sessions, { continueLast: false, sessionId: 'ses_gone' }, CWD);
+        expect(out.kind).toBe('error');
+        expect(out).toMatchObject({ message: expect.stringContaining('ses_gone') });
+        expect(out).toMatchObject({ message: expect.stringContaining('2 others') });
+    });
+    it('points at --cwd when the directory has nothing at all', async () => {
+        recent();
+        const out = await resolveResume(sessions, { continueLast: false, sessionId: 'ses_gone' }, CWD);
+        expect(out).toMatchObject({ message: expect.stringContaining('--cwd') });
+    });
+    it('refuses rather than resuming with a partial history', async () => {
+        // The half-context case. Carrying on with an empty transcript would look
+        // exactly like a resumed session to the user and to the model.
+        recent('ses_a');
+        vi.mocked(loadConversation).mockRejectedValue(new Error('transcript is corrupt'));
+        const out = await resolveResume(sessions, { continueLast: false, sessionId: 'ses_a' }, CWD);
+        expect(out.kind).toBe('error');
+        expect(out).toMatchObject({ message: expect.stringContaining('transcript is corrupt') });
+    });
+    it('refuses an empty transcript rather than calling it resumed', async () => {
+        recent('ses_a');
+        vi.mocked(loadConversation).mockResolvedValue([]);
+        const out = await resolveResume(sessions, { continueLast: false, sessionId: 'ses_a' }, CWD);
+        expect(out.kind).toBe('error');
+        expect(out).toMatchObject({ message: expect.stringContaining('no messages') });
+    });
+});
+describe('the two flags together', () => {
+    it('refuses, because they name different conversations', async () => {
+        const out = await resolveResume(sessions, { continueLast: true, sessionId: 'ses_a' }, CWD);
+        expect(out.kind).toBe('error');
+        expect(out).toMatchObject({ message: expect.stringContaining('Pass one') });
+    });
+});
+describe('no store at all', () => {
+    it('refuses instead of quietly starting fresh', async () => {
+        const out = await resolveResume(null, { continueLast: true, sessionId: null }, CWD);
+        expect(out.kind).toBe('error');
+        expect(out).toMatchObject({ message: expect.stringContaining('nothing to resume') });
+    });
+    it('still runs fresh when nothing was asked for', async () => {
+        const out = await resolveResume(null, { continueLast: false, sessionId: null }, CWD);
+        expect(out.kind).toBe('fresh');
+    });
+});
+//# sourceMappingURL=resume.test.js.map

package/dist/commands/__tests__/resume.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resume.test.js","sourceRoot":"","sources":["../../../src/commands/__tests__/resume.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAGjD,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAA;AACnF,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAE5C,EAAE,CAAC,IAAI,CAAC,sCAAsC,EAAE,GAAG,EAAE,CAAC,CAAC;IACtD,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE;IACnB,gBAAgB,EAAE,EAAE,CAAC,EAAE,EAAE;CACzB,CAAC,CAAC,CAAA;AAEH,MAAM,QAAQ,GAAG,EAAiB,CAAA;AAClC,MAAM,GAAG,GAAG,eAAe,CAAA;AAE3B,SAAS,MAAM,CAAC,GAAG,GAAa;IAC/B,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,iBAAiB,CACtC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QACnB,EAAE,EAAE,EAAW;QACf,KAAK,EAAE,EAAE;QACT,SAAS,EAAE,YAAY,CAAC,GAAG,CAAC,YAAY;QACxC,KAAK,EAAE,CAAC;KACR,CAAC,CAAC,CACH,CAAA;AACF,CAAC;AAED,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;QAC7C,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,QAAQ,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,CAAA;QAExF,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAC/B,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE;IAC3B,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;QACnD,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,CAAA;QAC5B,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,iBAAiB,CAAC;YAC7C,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE;SACpC,CAAC,CAAA;QAEX,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,QAAQ,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,CAAA;QAEvF,MAAM,CAAC,GAAG,CAAC,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAA;IACrE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACzE,0EAA0E;QAC1E,wEAAwE;QACxE,sEAAsE;QACtE,MAAM,EAAE,CAAA;QAER,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,QAAQ,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,CAAA;QAEvF,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAC9B,MAAM,CAAC,GAAG,CAAC,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC,0BAA0B,CAAC,EAAE,CAAC,CAAA;QAC3F,MAAM,CAAC,GAAG,CAAC,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACpE,MAAM,CAAC,GAAG,CAAC,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IACzE,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC9B,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,CAAA;QAC/B,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,iBAAiB,CAAC;YAC7C,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE;SACpC,CAAC,CAAA;QAEX,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,QAAQ,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,EAAE,GAAG,CAAC,CAAA;QAEhG,MAAM,CAAC,GAAG,CAAC,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC,CAAA;IACxE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACtE,uEAAuE;QACvE,2BAA2B;QAC3B,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QAExB,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,QAAQ,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,GAAG,CAAC,CAAA;QAE9F,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAC9B,MAAM,CAAC,GAAG,CAAC,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC,UAAU,CAAC,EAAE,CAAC,CAAA;QAC3E,MAAM,CAAC,GAAG,CAAC,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC,UAAU,CAAC,EAAE,CAAC,CAAA;IAC5E,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,EAAE,CAAA;QAER,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,QAAQ,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,GAAG,CAAC,CAAA;QAE9F,MAAM,CAAC,GAAG,CAAC,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IACzE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACpE,yEAAyE;QACzE,+DAA+D;QAC/D,MAAM,CAAC,OAAO,CAAC,CAAA;QACf,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAA;QAEjF,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,QAAQ,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,GAAG,CAAC,CAAA;QAE3F,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAC9B,MAAM,CAAC,GAAG,CAAC,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC,uBAAuB,CAAC,EAAE,CAAC,CAAA;IACzF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC3E,MAAM,CAAC,OAAO,CAAC,CAAA;QACf,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAA;QAEjD,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,QAAQ,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,GAAG,CAAC,CAAA;QAE3F,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAC9B,MAAM,CAAC,GAAG,CAAC,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,CAAC,CAAA;IAC/E,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACvC,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,QAAQ,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,GAAG,CAAC,CAAA;QAE1F,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAC9B,MAAM,CAAC,GAAG,CAAC,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC,UAAU,CAAC,EAAE,CAAC,CAAA;IAC5E,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QAC1D,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,CAAA;QAEnF,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAC9B,MAAM,CAAC,GAAG,CAAC,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAA;IACrF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC5D,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,CAAA;QAEpF,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAC/B,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA"}

package/dist/commands/__tests__/run-flags.test.d.ts

@@ -0,0 +1,11 @@
+/**
+ * `namzu run` accepts what `namzu run-stream` accepts.
+ *
+ * The two are the same headless one-shot and differ only in how they print, so
+ * an option one takes and the other reads aloud to the model is a defect, not a
+ * design. `run` joined every argument into the prompt, which is the exact shape
+ * already fixed once in the streaming sibling — `--cwd` was documented there,
+ * unparsed, and silently ran in the process's own directory.
+ */
+export {};
+//# sourceMappingURL=run-flags.test.d.ts.map

package/dist/commands/__tests__/run-flags.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-flags.test.d.ts","sourceRoot":"","sources":["../../../src/commands/__tests__/run-flags.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG"}

package/dist/commands/__tests__/run-flags.test.js

@@ -0,0 +1,190 @@
+/**
+ * `namzu run` accepts what `namzu run-stream` accepts.
+ *
+ * The two are the same headless one-shot and differ only in how they print, so
+ * an option one takes and the other reads aloud to the model is a defect, not a
+ * design. `run` joined every argument into the prompt, which is the exact shape
+ * already fixed once in the streaming sibling — `--cwd` was documented there,
+ * unparsed, and silently ran in the process's own directory.
+ */
+import { mkdtempSync, rmSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { Readable } from 'node:stream';
+import { describe, expect, it, vi } from 'vitest';
+import { EXIT_USAGE } from '../../exit-codes.js';
+import { composePrompt, runCommand } from '../run.js';
+const seen = { prompt: null, cwd: undefined, provider: undefined, model: undefined };
+vi.mock('../../tui/agent.js', () => ({
+    probeAgentSession: vi.fn(async () => ({
+        preferences: { version: 2, provider: 'mock', subagents: { active: [] } },
+        needsRepickReason: null,
+        detected: [],
+    })),
+    createAgentSession: vi.fn(async (prefs, _detected, opts) => {
+        seen.cwd = opts?.cwd;
+        seen.provider = prefs.provider;
+        seen.model = prefs.model;
+        return {
+            hasProvider: true,
+            providerSummary: 'mock',
+            modelSummary: 'mock-model',
+            toolNames: [],
+            deferredToolCount: 0,
+            errorHint: null,
+            send: (messages) => {
+                seen.prompt = messages[0]?.content ?? null;
+                return (async function* () {
+                    yield { kind: 'done', stopReason: 'end_turn' };
+                })();
+            },
+        };
+    }),
+}));
+function context() {
+    const printed = [];
+    const errors = [];
+    const ctx = {
+        formatter: {
+            name: 'text',
+            print: (d) => printed.push(String(d?.text ?? d)),
+            info: () => { },
+            error: (e) => errors.push(String(e?.message ?? e)),
+        },
+        config: {},
+    };
+    return { ctx, printed, errors };
+}
+async function run(rawArgs) {
+    seen.prompt = null;
+    seen.cwd = undefined;
+    seen.provider = undefined;
+    seen.model = undefined;
+    const { ctx, errors } = context();
+    const code = (await runCommand.handler({ rawArgs, ctx }));
+    return { code, errors };
+}
+describe('namzu run reads its options instead of reciting them', () => {
+    it('works in --cwd and keeps it out of the prompt', async () => {
+        const elsewhere = mkdtempSync(join(tmpdir(), 'namzu-run-cwd-'));
+        try {
+            const { code } = await run(['--cwd', elsewhere, 'fix', 'the', 'test']);
+            expect(code).toBe(0);
+            expect(seen.cwd).toBe(elsewhere);
+            // The whole point: the flag was previously the first two words the
+            // model was asked to act on.
+            expect(seen.prompt).toBe('fix the test');
+        }
+        finally {
+            rmSync(elsewhere, { recursive: true, force: true });
+        }
+    });
+    it('takes --provider and --model over the stored preference', async () => {
+        const { code } = await run(['--provider', 'openai', '--model', 'some-model', 'hello']);
+        expect(code).toBe(0);
+        expect(seen.provider).toBe('openai');
+        expect(seen.model).toBe('some-model');
+        expect(seen.prompt).toBe('hello');
+    });
+    it('refuses an option it does not know, with a usage exit code', async () => {
+        // A shell caller reads `$?`; saying "--temperature 0.5" to the model and
+        // exiting 0 is the failure this replaces.
+        const { code, errors } = await run(['--temperature', '0.5', 'hello']);
+        expect(code).toBe(EXIT_USAGE);
+        expect(errors.join('')).toContain('--temperature');
+        expect(seen.prompt).toBeNull();
+    });
+    it('refuses a --cwd that is not there rather than running in this one', async () => {
+        const { code, errors } = await run(['--cwd', join(tmpdir(), 'namzu-run-no-such'), 'hello']);
+        expect(code).toBe(EXIT_USAGE);
+        expect(errors.join('')).toContain('--cwd does not exist');
+        expect(seen.prompt).toBeNull();
+    });
+    it('lets `--` carry a prompt that begins with a dash', async () => {
+        const { code } = await run(['--', '--force', 'is', 'part', 'of', 'the', 'question']);
+        expect(code).toBe(0);
+        expect(seen.prompt).toBe('--force is part of the question');
+    });
+    it('accepts --yolo and does not put it in the prompt', async () => {
+        // Headless turns never prompt for approval, so there is nothing to skip.
+        // Accepting it silently is what keeps `namzu --yolo run …` working.
+        const { code } = await run(['--yolo', 'hello']);
+        expect(code).toBe(0);
+        expect(seen.prompt).toBe('hello');
+    });
+});
+describe('a pipe and a question are both the prompt', () => {
+    // `cat notes.txt | namzu run "summarise this"` read the three words and
+    // silently dropped the file: piped input was consulted only when there was
+    // no argument prompt. The run succeeded and answered about nothing.
+    it('keeps piped material alongside the question', () => {
+        const prompt = composePrompt('summarise this', 'line one\nline two\n');
+        expect(prompt).toContain('summarise this');
+        expect(prompt).toContain('line one');
+        expect(prompt).toContain('line two');
+    });
+    it('fences the piped material so it cannot read as part of the question', () => {
+        // Without a boundary the last line of a long paste runs into the
+        // instruction, and the model cannot tell the request from the material.
+        const prompt = composePrompt('what is wrong here?', 'const x = 1');
+        expect(prompt).toBe('what is wrong here?\n\n<stdin>\nconst x = 1\n</stdin>');
+    });
+    it('is just the pipe when no question was given', () => {
+        expect(composePrompt('', 'do the thing')).toBe('do the thing');
+    });
+    it('is just the question when nothing was piped', () => {
+        expect(composePrompt('do the thing', '')).toBe('do the thing');
+        // No empty tag block either — a model shown `<stdin></stdin>` is being
+        // told something was attached when nothing was.
+        expect(composePrompt('do the thing', '   \n  ')).toBe('do the thing');
+    });
+    it('is empty when neither was given, so the caller can report it', () => {
+        expect(composePrompt('', '')).toBe('');
+    });
+});
+describe('the pipe reaches the model, not just the composer', () => {
+    // composePrompt is pure and proves the shape. This proves the plumbing:
+    // that piped bytes are actually READ when a prompt argument is present.
+    // They were not — stdin was consulted only when the argument was absent —
+    // and a unit test of the composer alone would pass with that defect intact.
+    function withStdin(text, fn) {
+        const real = Object.getOwnPropertyDescriptor(process, 'stdin');
+        const fake = text === null ? Readable.from([]) : Readable.from([Buffer.from(text)]);
+        Object.defineProperty(process, 'stdin', {
+            configurable: true,
+            get: () => Object.assign(fake, { isTTY: text === null }),
+        });
+        return fn().finally(() => {
+            if (real)
+                Object.defineProperty(process, 'stdin', real);
+        });
+    }
+    it('sends the piped file alongside the question', async () => {
+        await withStdin('the contents of notes.txt', async () => {
+            const { code } = await run(['summarise this']);
+            expect(code).toBe(0);
+            expect(seen.prompt).toContain('summarise this');
+            expect(seen.prompt).toContain('the contents of notes.txt');
+        });
+    });
+    it('reads the pipe as the whole prompt for the `-` sentinel', async () => {
+        await withStdin('the question is in here', async () => {
+            const { code } = await run(['-']);
+            expect(code).toBe(0);
+            expect(seen.prompt).toBe('the question is in here');
+        });
+    });
+});
+describe('a flag that was never read is refused, not swallowed', () => {
+    // `--instance` was parsed into a field nothing anywhere in the repo read.
+    // A host passing it got the persona selection it asked for exactly never,
+    // and was told exactly nothing — which is worse than an absent flag,
+    // because an absent flag says so immediately.
+    it('refuses --instance now that it means nothing', async () => {
+        const { code, errors } = await run(['--instance', 'namzu-2', 'hello']);
+        expect(code).toBe(EXIT_USAGE);
+        expect(errors.join('')).toContain('--instance');
+        expect(seen.prompt).toBeNull();
+    });
+});
+//# sourceMappingURL=run-flags.test.js.map

package/dist/commands/__tests__/run-flags.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-flags.test.js","sourceRoot":"","sources":["../../../src/commands/__tests__/run-flags.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAC7C,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AACtC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAEjD,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAChD,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,WAAW,CAAA;AAGrD,MAAM,IAAI,GAKN,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,CAAA;AAE3E,EAAE,CAAC,IAAI,CAAC,oBAAoB,EAAE,GAAG,EAAE,CAAC,CAAC;IACpC,iBAAiB,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QACrC,WAAW,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE;QACxE,iBAAiB,EAAE,IAAI;QACvB,QAAQ,EAAE,EAAE;KACZ,CAAC,CAAC;IACH,kBAAkB,EAAE,EAAE,CAAC,EAAE,CACxB,KAAK,EACJ,KAA4C,EAC5C,SAAkB,EAClB,IAAuB,EACtB,EAAE;QACH,IAAI,CAAC,GAAG,GAAG,IAAI,EAAE,GAAG,CAAA;QACpB,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAA;QAC9B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAA;QACxB,OAAO;YACN,WAAW,EAAE,IAAI;YACjB,eAAe,EAAE,MAAM;YACvB,YAAY,EAAE,YAAY;YAC1B,SAAS,EAAE,EAAE;YACb,iBAAiB,EAAE,CAAC;YACpB,SAAS,EAAE,IAAI;YACf,IAAI,EAAE,CAAC,QAAoC,EAAE,EAAE;gBAC9C,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,IAAI,CAAA;gBAC1C,OAAO,CAAC,KAAK,SAAS,CAAC;oBACtB,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,CAAA;gBAC/C,CAAC,CAAC,EAAE,CAAA;YACL,CAAC;SACD,CAAA;IACF,CAAC,CACD;CACD,CAAC,CAAC,CAAA;AAEH,SAAS,OAAO;IACf,MAAM,OAAO,GAAa,EAAE,CAAA;IAC5B,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,MAAM,GAAG,GAAG;QACX,SAAS,EAAE;YACV,IAAI,EAAE,MAAe;YACrB,KAAK,EAAE,CAAC,CAAU,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAE,CAAuB,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC;YAChF,IAAI,EAAE,GAAG,EAAE,GAAE,CAAC;YACd,KAAK,EAAE,CAAC,CAAU,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAE,CAA0B,EAAE,OAAO,IAAI,CAAC,CAAC,CAAC;SACrF;QACD,MAAM,EAAE,EAAE;KACmB,CAAA;IAC9B,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,CAAA;AAChC,CAAC;AAED,KAAK,UAAU,GAAG,CAAC,OAAiB;IACnC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAA;IAClB,IAAI,CAAC,GAAG,GAAG,SAAS,CAAA;IACpB,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAA;IACzB,IAAI,CAAC,KAAK,GAAG,SAAS,CAAA;IACtB,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,EAAE,CAAA;IACjC,MAAM,IAAI,GAAG,CAAC,MAAM,UAAU,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,GAAG,EAAW,CAAC,CAAW,CAAA;IAC5E,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAA;AACxB,CAAC;AAED,QAAQ,CAAC,sDAAsD,EAAE,GAAG,EAAE;IACrE,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,gBAAgB,CAAC,CAAC,CAAA;QAC/D,IAAI,CAAC;YACJ,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,GAAG,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAA;YAEtE,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YACpB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;YAChC,mEAAmE;YACnE,6BAA6B;YAC7B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;QACzC,CAAC;gBAAS,CAAC;YACV,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QACpD,CAAC;IACF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,GAAG,CAAC,CAAC,YAAY,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC,CAAA;QAEtF,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACpB,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACpC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;QACrC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAClC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC3E,yEAAyE;QACzE,0CAA0C;QAC1C,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,CAAC,eAAe,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAA;QAErE,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QAC7B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAA;QAClD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAA;IAC/B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;QAClF,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,mBAAmB,CAAC,EAAE,OAAO,CAAC,CAAC,CAAA;QAE3F,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QAC7B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAA;QACzD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAA;IAC/B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC,CAAA;QAEpF,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACpB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAA;IAC5D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QACjE,yEAAyE;QACzE,oEAAoE;QACpE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,GAAG,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAA;QAE/C,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACpB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAClC,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,2CAA2C,EAAE,GAAG,EAAE;IAC1D,wEAAwE;IACxE,2EAA2E;IAC3E,oEAAoE;IACpE,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACtD,MAAM,MAAM,GAAG,aAAa,CAAC,gBAAgB,EAAE,sBAAsB,CAAC,CAAA;QAEtE,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAA;QAC1C,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAA;QACpC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAA;IACrC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qEAAqE,EAAE,GAAG,EAAE;QAC9E,iEAAiE;QACjE,wEAAwE;QACxE,MAAM,MAAM,GAAG,aAAa,CAAC,qBAAqB,EAAE,aAAa,CAAC,CAAA;QAElE,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,uDAAuD,CAAC,CAAA;IAC7E,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACtD,MAAM,CAAC,aAAa,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;IAC/D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACtD,MAAM,CAAC,aAAa,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;QAC9D,uEAAuE;QACvE,gDAAgD;QAChD,MAAM,CAAC,aAAa,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;IACtE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACvE,MAAM,CAAC,aAAa,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACvC,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,mDAAmD,EAAE,GAAG,EAAE;IAClE,wEAAwE;IACxE,wEAAwE;IACxE,0EAA0E;IAC1E,4EAA4E;IAC5E,SAAS,SAAS,CAAC,IAAmB,EAAE,EAAuB;QAC9D,MAAM,IAAI,GAAG,MAAM,CAAC,wBAAwB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QAC9D,MAAM,IAAI,GAAG,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACnF,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE;YACvC,YAAY,EAAE,IAAI;YAClB,GAAG,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,KAAK,IAAI,EAAE,CAAC;SACxD,CAAC,CAAA;QACF,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;YACxB,IAAI,IAAI;gBAAE,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,CAAA;QACxD,CAAC,CAAC,CAAA;IACH,CAAC;IAED,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC5D,MAAM,SAAS,CAAC,2BAA2B,EAAE,KAAK,IAAI,EAAE;YACvD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,GAAG,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAA;YAE9C,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YACpB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAA;YAC/C,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,2BAA2B,CAAC,CAAA;QAC3D,CAAC,CAAC,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,SAAS,CAAC,yBAAyB,EAAE,KAAK,IAAI,EAAE;YACrD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;YAEjC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YACpB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAA;QACpD,CAAC,CAAC,CAAA;IACH,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,sDAAsD,EAAE,GAAG,EAAE;IACrE,0EAA0E;IAC1E,0EAA0E;IAC1E,qEAAqE;IACrE,8CAA8C;IAC9C,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,CAAC,YAAY,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAA;QAEtE,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QAC7B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAA;QAC/C,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAA;IAC/B,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA"}

package/dist/commands/__tests__/run-stream-flags.test.js

@@ -1,6 +1,10 @@
+import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join, resolve } from 'node:path';
 import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest';
 import { openSessions } from '../../integrations/sessions/store.js';
-import { historyCommand, parseRunStreamFlags, runStreamCommand } from '../run-stream.js';
+import { parseRunFlags } from '../run-flags.js';
+import { historyCommand, runStreamCommand, skillsJSONCommand } from '../run-stream.js';
 // Mocked so the directory the store is opened at is observable. Nothing here
 // touches a real `.namzu` store; `resolveConversation` returning null is the
 // "no such session" path, which is what makes the handler terminate.
@@ -10,6 +14,29 @@ vi.mock('../../integrations/sessions/store.js', () => ({
     loadConversation: vi.fn(async () => []),
     appendMessages: vi.fn(async () => undefined),
 }));
+// Stubbed so a turn can be driven to completion without a credential, and so
+// the directory the SESSION is created in is observable. What the session then
+// does with that directory is asserted in `src/tui/__tests__/`.
+const sessionOptions = [];
+vi.mock('../../tui/agent.js', () => ({
+    probeAgentSession: vi.fn(async () => ({
+        preferences: { version: 2, provider: 'anthropic', subagents: { active: [] } },
+        needsRepickReason: null,
+        detected: [],
+    })),
+    createAgentSession: vi.fn(async (_prefs, _detected, opts) => {
+        sessionOptions.push(opts);
+        return {
+            hasProvider: true,
+            providerSummary: 'stub',
+            modelSummary: 'stub',
+            toolNames: [],
+            deferredToolCount: 0,
+            errorHint: null,
+            send: async function* () { },
+        };
+    }),
+}));
 /**
  * `run-stream` folded every argument it did not recognise into `rest`, and
  * `rest.join(' ')` is the PROMPT. `--cwd <path>` was in this command's own help
@@ -22,7 +49,7 @@ vi.mock('../../integrations/sessions/store.js', () => ({
  * to stop treating an option as content; the fix here is the same, plus
  * actually honouring the flag that was advertised.
  */
-const ctx = {};
+const ctx = { config: {} };
 function capture() {
     const lines = [];
     const spy = vi.spyOn(process.stdout, 'write').mockImplementation((chunk) => {
@@ -33,6 +60,7 @@ function capture() {
 }
 beforeEach(() => {
     vi.mocked(openSessions).mockClear();
+    sessionOptions.length = 0;
 });
 afterEach(() => {
     vi.restoreAllMocks();
@@ -71,51 +99,122 @@ describe('run-stream does not turn options into prompt text', () => {
         expect(lines.join('')).toContain('"kind":"done"');
     });
 });
+describe('run-stream works in the directory it was pointed at', () => {
+    it('hands --cwd to the agent session, not only to the session store', async () => {
+        // `--session` keeps the turn off stdin: without a session key the command
+        // reads prior history from a pipe, and in a test runner that pipe never
+        // closes.
+        const elsewhere = mkdtempSync(join(tmpdir(), 'namzu-run-stream-'));
+        try {
+            await run(['--cwd', elsewhere, '--session', 'k', 'read', 'notes.txt']);
+        }
+        finally {
+            rmSync(elsewhere, { recursive: true, force: true });
+        }
+        expect(sessionOptions[0]?.cwd).toBe(elsewhere);
+    });
+    it('refuses a --cwd that is not there instead of quietly using this one', async () => {
+        // The silent fallback is the whole defect: the run proceeds, searches the
+        // wrong tree, finds nothing, and reports that the file does not exist.
+        const lines = await run(['--cwd', join(tmpdir(), 'namzu-no-such-dir'), 'hello']);
+        const joined = lines.join('');
+        expect(joined).toContain('--cwd does not exist');
+        expect(joined).toContain('"kind":"done"');
+        expect(sessionOptions).toEqual([]);
+    });
+});
 describe('the flag parser itself', () => {
     // Asserted here rather than through the handler: a valid prompt sends the
     // handler on to stdin and a provider probe, so the first version of this
     // case hung for five seconds and failed on a timeout rather than on the
     // behaviour. A pure function deserves to be called.
     it('lets `--` carry a prompt that begins with a dash', () => {
-        const flags = parseRunStreamFlags(['--', '--this-is-the-prompt']);
+        const flags = parseRunFlags(['--', '--this-is-the-prompt']);
         expect(flags.rest).toEqual(['--this-is-the-prompt']);
         expect(flags.unknown).toEqual([]);
     });
     it('stops interpreting options after `--`', () => {
-        const flags = parseRunStreamFlags(['--session', 'abc', '--', '--model', 'not-a-flag']);
+        const flags = parseRunFlags(['--session', 'abc', '--', '--model', 'not-a-flag']);
         expect(flags.session).toBe('abc');
         expect(flags.model).toBeNull();
         expect(flags.rest).toEqual(['--model', 'not-a-flag']);
     });
     it('reads --cwd in both spellings', () => {
-        expect(parseRunStreamFlags(['--cwd', '/a', 'hi']).cwd).toBe('/a');
-        expect(parseRunStreamFlags(['--cwd=/b', 'hi']).cwd).toBe('/b');
-        expect(parseRunStreamFlags(['--cwd', '/a', 'hi']).rest).toEqual(['hi']);
+        expect(parseRunFlags(['--cwd', '/a', 'hi']).cwd).toBe('/a');
+        expect(parseRunFlags(['--cwd=/b', 'hi']).cwd).toBe('/b');
+        expect(parseRunFlags(['--cwd', '/a', 'hi']).rest).toEqual(['hi']);
     });
     it('leaves a lone dash alone, since that is not an option', () => {
-        expect(parseRunStreamFlags(['-', 'hi']).unknown).toEqual([]);
-        expect(parseRunStreamFlags(['-', 'hi']).rest).toEqual(['-', 'hi']);
+        expect(parseRunFlags(['-', 'hi']).unknown).toEqual([]);
+        expect(parseRunFlags(['-', 'hi']).rest).toEqual(['-', 'hi']);
     });
 });
+describe('skills-json lists the directory it was pointed at', () => {
+    // A host that lists skills for one checkout and then runs a turn in that
+    // same checkout has to be told about the same skills both times. It was
+    // not: this command read the process directory whatever `--cwd` said, so
+    // it could offer a skill that `run-stream --cwd <there>` then could not
+    // find, and hide one that was actually available.
+    function skillIn(root, name) {
+        mkdirSync(join(root, 'skills', name), { recursive: true });
+        writeFileSync(join(root, 'skills', name, 'SKILL.md'), `---\nname: ${name}\ndescription: only in this checkout\n---\n\nbody\n`);
+    }
+    it('discovers the project skills under --cwd', async () => {
+        const elsewhere = mkdtempSync(join(tmpdir(), 'namzu-skills-'));
+        skillIn(elsewhere, 'only-over-there');
+        const { lines, restore } = capture();
+        try {
+            await skillsJSONCommand.handler({ rawArgs: ['--cwd', elsewhere], ctx });
+        }
+        finally {
+            restore();
+            rmSync(elsewhere, { recursive: true, force: true });
+        }
+        const names = JSON.parse(lines.join('').trim()).map((s) => s.name);
+        expect(names).toContain('only-over-there');
+    });
+    // There is deliberately no paired "and not from anywhere else" case: with
+    // the flag ignored the command read `packages/cli`, which has no skills
+    // directory, so a negative assertion passes with the defect still in place
+    // and would only look like coverage.
+});
 describe('history reads the directory it was pointed at', () => {
     it('opens the store at --cwd, not at the process directory', async () => {
         // Parsing the flag is not the fix; USING it is. An assertion that the
         // command merely survives `--cwd` would pass with the wiring reverted —
         // `[]` is printed either way — which would leave the flag parsed and
         // still undriven, the exact shape being repaired here.
+        //
+        // A real directory, because `--cwd` is now resolved and checked before
+        // the store is opened: a path that is not there cannot be told apart
+        // from a session with no messages, so it never reaches the store.
+        const elsewhere = mkdtempSync(join(tmpdir(), 'namzu-history-'));
         const { lines, restore } = capture();
         try {
             await historyCommand.handler({
-                rawArgs: ['--cwd', '/tmp/elsewhere', '--session', 'some-key'],
+                rawArgs: ['--cwd', elsewhere, '--session', 'some-key'],
                 ctx,
             });
         }
         finally {
             restore();
+            rmSync(elsewhere, { recursive: true, force: true });
         }
-        expect(openSessions).toHaveBeenCalledWith('/tmp/elsewhere');
+        expect(openSessions).toHaveBeenCalledWith(elsewhere);
         expect(lines.join('').trim()).toBe('[]');
     });
+    it('resolves a relative --cwd against the process directory', async () => {
+        // A host that passes `.` or `../sibling` gets the directory it meant,
+        // and the agent downstream gets an absolute path it cannot misread.
+        const { restore } = capture();
+        try {
+            await historyCommand.handler({ rawArgs: ['--cwd', '.', '--session', 'k'], ctx });
+        }
+        finally {
+            restore();
+        }
+        expect(openSessions).toHaveBeenCalledWith(resolve(process.cwd(), '.'));
+    });
     it('falls back to the process directory when --cwd is absent', async () => {
         const { restore } = capture();
         try {
@@ -127,4 +226,55 @@ describe('history reads the directory it was pointed at', () => {
         expect(openSessions).toHaveBeenCalledWith(process.cwd());
     });
 });
+describe('run-stream honours the permission surface, not just parses it', () => {
+    // It accepted `--permission-mode` and never used it, and it never compiled
+    // the `[permissions]` table at all — so an operator who wrote rules, or who
+    // typed `--permission-mode strict` precisely because they did not trust the
+    // run, got an unrestricted one that looked like it had obeyed. A safety
+    // control that parses and does nothing is worse than one that is missing,
+    // because the absence is visible and the silence is not.
+    const withConfig = {
+        config: { permissions: { bash: 'deny' } },
+    };
+    async function runWith(rawArgs, context = withConfig) {
+        const { lines, restore } = capture();
+        try {
+            await runStreamCommand.handler({ rawArgs, ctx: context });
+        }
+        finally {
+            restore();
+        }
+        return lines;
+    }
+    it('compiles the operator table into the session', async () => {
+        await runWith(['--session', 'k', 'hello']);
+        expect(sessionOptions[0]?.rules).toEqual([{ type: 'deny_by_name', toolNames: ['bash'] }]);
+    });
+    it('passes --permission-mode through instead of ignoring it', async () => {
+        await runWith(['--session', 'k', '--permission-mode', 'strict', 'hello']);
+        expect(sessionOptions[0]?.permissionMode).toBe('strict');
+    });
+    it('refuses a mode it does not know rather than running unrestricted', async () => {
+        const lines = await runWith(['--session', 'k', '--permission-mode', 'yolo', 'hello']);
+        expect(lines.join('')).toContain('--permission-mode must be one of');
+        expect(sessionOptions).toEqual([]);
+    });
+    it('defaults to auto when nothing was asked for, and says so by acting on it', async () => {
+        await runWith(['--session', 'k', 'hello']);
+        expect(sessionOptions[0]?.permissionMode).toBe('auto');
+    });
+    it('reports an unreadable rule in band, where a host can see it', async () => {
+        const bad = {
+            config: { permissions: { bash: { 'git push*': 'maybe' } } },
+        };
+        const lines = await runWith(['--session', 'k', 'hello'], bad);
+        // Parsed, not substring-matched: the line is JSON, so the quotes around
+        // the pattern are escaped in the raw text and a naive contains() would
+        // pass or fail for reasons unrelated to what the host actually reads.
+        const messages = lines
+            .map((l) => JSON.parse(l))
+            .map((e) => e.message ?? '');
+        expect(messages.some((m) => m.includes('permissions.bash."git push*"'))).toBe(true);
+    });
+});
 //# sourceMappingURL=run-stream-flags.test.js.map