@namzu/cli 29.0.1 → 30.0.0

package/dist/tui/browser-notices.d.ts

@@ -0,0 +1,33 @@
+/**
+ * What the terminal says about the browser: the handoff notice when a page
+ * needs the operator, the site-rule line on the review screen, and
+ * `/browser`. Pure: App supplies the session's browser and prints the text.
+ */
+import type { ToolHandoff } from '@namzu/sdk';
+import { type BrowserControl, type BrowserStatus } from '../browser/control.js';
+/**
+ * The notice for a turn the browser paused, or `undefined` for a handoff
+ * from another tool. With a window, the operator does it there; without
+ * one (headless), `namzu browser login` opens one.
+ */
+export declare function describeBrowserHandoff(handoff: ToolHandoff, browser: Pick<BrowserStatus, 'headless' | 'profile'> | undefined): string | undefined;
+/**
+ * One line per browser call in a review: which site rule decided it, under
+ * which profile and engine. `site rule: https://github.com → ask · profile work · windows-cdp`.
+ */
+export declare function browserSiteNotes(toolCalls: readonly {
+    readonly name: string;
+    readonly input: unknown;
+}[], browser: Pick<BrowserStatus, 'sites' | 'profile' | 'engine'> | undefined): string[];
+export declare const BROWSER_SLASH_USAGE: string;
+/**
+ * `/browser [status] | profile [<name>]`. Returns the text to print, and the
+ * profile to remember when it switched one (so a rebuilt session keeps it).
+ */
+export declare function runBrowserSlash(control: BrowserControl | undefined, args: readonly string[], options: {
+    readonly busy: boolean;
+}): Promise<{
+    readonly text: string;
+    readonly profile?: string;
+}>;
+//# sourceMappingURL=browser-notices.d.ts.map

package/dist/tui/browser-notices.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-notices.d.ts","sourceRoot":"","sources":["../../src/tui/browser-notices.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAE7C,OAAO,EACN,KAAK,cAAc,EACnB,KAAK,aAAa,EAElB,MAAM,uBAAuB,CAAA;AAmB9B;;;;GAIG;AACH,wBAAgB,sBAAsB,CACrC,OAAO,EAAE,WAAW,EACpB,OAAO,EAAE,IAAI,CAAC,aAAa,EAAE,UAAU,GAAG,SAAS,CAAC,GAAG,SAAS,GAC9D,MAAM,GAAG,SAAS,CAapB;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAC/B,SAAS,EAAE,SAAS;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;CAAE,EAAE,EACxE,OAAO,EAAE,IAAI,CAAC,aAAa,EAAE,OAAO,GAAG,SAAS,GAAG,QAAQ,CAAC,GAAG,SAAS,GACtE,MAAM,EAAE,CAaV;AAED,eAAO,MAAM,mBAAmB,QAGpB,CAAA;AAEZ;;;GAGG;AACH,wBAAsB,eAAe,CACpC,OAAO,EAAE,cAAc,GAAG,SAAS,EACnC,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,OAAO,EAAE;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;CAAE,GACjC,OAAO,CAAC;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CA8B/D"}

package/dist/tui/browser-notices.js

@@ -0,0 +1,102 @@
+/**
+ * What the terminal says about the browser: the handoff notice when a page
+ * needs the operator, the site-rule line on the review screen, and
+ * `/browser`. Pure: App supplies the session's browser and prints the text.
+ */
+import { describeBrowserStatus, } from '../browser/control.js';
+import { browserCallOrigin, browserSiteRuleFor } from '../permissions/browser-sites.js';
+import { terminalDisplayText } from './terminal-display.js';
+function clean(value, max = 240) {
+    const flat = terminalDisplayText((value ?? '').replace(/\s+/g, ' ').trim());
+    return flat.length > max ? `${flat.slice(0, max - 1)}…` : flat;
+}
+/** What the operator does at the window, by the host's reason. */
+const AT_THE_WINDOW = {
+    'sign-in': 'sign in to',
+    'two-factor': 'finish signing in to',
+    'http-auth': 'sign in to',
+    captcha: 'complete the check on',
+    'bot-block': 'get past the check on',
+    'credential-field': 'type the password or code on',
+};
+/**
+ * The notice for a turn the browser paused, or `undefined` for a handoff
+ * from another tool. With a window, the operator does it there; without
+ * one (headless), `namzu browser login` opens one.
+ */
+export function describeBrowserHandoff(handoff, browser) {
+    const detail = handoff.detail ?? {};
+    if (detail.tool !== 'browser')
+        return undefined;
+    const origin = clean(detail.origin, 200) || 'the site';
+    const profile = clean(detail.profile ?? browser?.profile, 64) || 'default';
+    const what = clean(handoff.reason);
+    const command = clean(detail.loginCommand, 400) || `namzu browser login ${profile} ${origin}`;
+    const lead = `The browser needs you: ${what}.`;
+    if (browser && !browser.headless) {
+        const verb = AT_THE_WINDOW[detail.cause ?? ''] ?? 'sign in to';
+        return `${lead}\n${verb.charAt(0).toUpperCase()}${verb.slice(1)} ${origin} in the browser window (profile ${profile}), then press Enter to continue · Esc to stop.`;
+    }
+    return `${lead}\nThis browser has no window, so namzu closed it to free the profile. In another terminal run:\n  ${command}\nsign in in the window it opens, close it, then press Enter here to continue · Esc to stop.`;
+}
+/**
+ * One line per browser call in a review: which site rule decided it, under
+ * which profile and engine. `site rule: https://github.com → ask · profile work · windows-cdp`.
+ */
+export function browserSiteNotes(toolCalls, browser) {
+    if (!browser)
+        return [];
+    const notes = [];
+    for (const call of toolCalls) {
+        const origin = browserCallOrigin(call.name, call.input);
+        if (origin === undefined)
+            continue;
+        const rule = browserSiteRuleFor(browser.sites, origin);
+        const via = rule.site === origin ? '' : rule.site === '*' ? ' (any other site)' : ` (${rule.site})`;
+        const note = `site rule: ${origin}${via} → ${rule.level} · profile ${browser.profile} · ${browser.engine}`;
+        if (!notes.includes(note))
+            notes.push(note);
+    }
+    return notes;
+}
+export const BROWSER_SLASH_USAGE = [
+    '/browser                 which browser, profile and site rules this session uses',
+    '/browser profile <name>  use another profile from the next browser call on',
+].join('\n');
+/**
+ * `/browser [status] | profile [<name>]`. Returns the text to print, and the
+ * profile to remember when it switched one (so a rebuilt session keeps it).
+ */
+export async function runBrowserSlash(control, args, options) {
+    if (!control) {
+        return {
+            text: 'This session has no browser. It is on by default in the interactive terminal; check `browser.enabled` in your config and `namzu doctor` (browser.installed, browser.engine).',
+        };
+    }
+    const [verb, name, ...rest] = args;
+    if (verb === undefined || (verb === 'status' && name === undefined)) {
+        return { text: describeBrowserStatus(control.status()) };
+    }
+    if (verb === 'profile' && rest.length === 0) {
+        if (name === undefined) {
+            return {
+                text: `Profile: ${control.status().profile}. Switch with /browser profile <name>; list profiles with \`namzu browser list\`.`,
+            };
+        }
+        if (options.busy) {
+            return { text: 'The profile cannot change while a turn is running. Try again when it ends.' };
+        }
+        try {
+            const status = await control.switchProfile(name);
+            return {
+                text: `The browser uses profile ${status.profile} from the next browser call on, in this session. Sign in to a site once with \`namzu browser login ${status.profile} <url>\`.`,
+                profile: status.profile,
+            };
+        }
+        catch (error) {
+            return { text: error instanceof Error ? error.message : String(error) };
+        }
+    }
+    return { text: `Usage:\n${BROWSER_SLASH_USAGE}` };
+}
+//# sourceMappingURL=browser-notices.js.map

package/dist/tui/browser-notices.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-notices.js","sourceRoot":"","sources":["../../src/tui/browser-notices.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,EAGN,qBAAqB,GACrB,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAA;AACvF,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAA;AAE3D,SAAS,KAAK,CAAC,KAAyB,EAAE,GAAG,GAAG,GAAG;IAClD,MAAM,IAAI,GAAG,mBAAmB,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;IAC3E,OAAO,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAA;AAC/D,CAAC;AAED,kEAAkE;AAClE,MAAM,aAAa,GAA2B;IAC7C,SAAS,EAAE,YAAY;IACvB,YAAY,EAAE,sBAAsB;IACpC,WAAW,EAAE,YAAY;IACzB,OAAO,EAAE,uBAAuB;IAChC,WAAW,EAAE,uBAAuB;IACpC,kBAAkB,EAAE,8BAA8B;CAClD,CAAA;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CACrC,OAAoB,EACpB,OAAgE;IAEhE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,EAAE,CAAA;IACnC,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IAC/C,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,UAAU,CAAA;IACtD,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,IAAI,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,SAAS,CAAA;IAC1E,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IAClC,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,GAAG,CAAC,IAAI,uBAAuB,OAAO,IAAI,MAAM,EAAE,CAAA;IAC7F,MAAM,IAAI,GAAG,0BAA0B,IAAI,GAAG,CAAA;IAC9C,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,YAAY,CAAA;QAC9D,OAAO,GAAG,IAAI,KAAK,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,MAAM,mCAAmC,OAAO,gDAAgD,CAAA;IACpK,CAAC;IACD,OAAO,GAAG,IAAI,qGAAqG,OAAO,8FAA8F,CAAA;AACzN,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAC/B,SAAwE,EACxE,OAAwE;IAExE,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAA;IACvB,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAA;QACvD,IAAI,MAAM,KAAK,SAAS;YAAE,SAAQ;QAClC,MAAM,IAAI,GAAG,kBAAkB,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;QACtD,MAAM,GAAG,GACR,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,IAAI,GAAG,CAAA;QACxF,MAAM,IAAI,GAAG,cAAc,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,cAAc,OAAO,CAAC,OAAO,MAAM,OAAO,CAAC,MAAM,EAAE,CAAA;QAC1G,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC5C,CAAC;IACD,OAAO,KAAK,CAAA;AACb,CAAC;AAED,MAAM,CAAC,MAAM,mBAAmB,GAAG;IAClC,kFAAkF;IAClF,4EAA4E;CAC5E,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AAEZ;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACpC,OAAmC,EACnC,IAAuB,EACvB,OAAmC;IAEnC,IAAI,CAAC,OAAO,EAAE,CAAC;QACd,OAAO;YACN,IAAI,EAAE,8KAA8K;SACpL,CAAA;IACF,CAAC;IACD,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAA;IAClC,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS,CAAC,EAAE,CAAC;QACrE,OAAO,EAAE,IAAI,EAAE,qBAAqB,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,CAAA;IACzD,CAAC;IACD,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7C,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO;gBACN,IAAI,EAAE,YAAY,OAAO,CAAC,MAAM,EAAE,CAAC,OAAO,mFAAmF;aAC7H,CAAA;QACF,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YAClB,OAAO,EAAE,IAAI,EAAE,4EAA4E,EAAE,CAAA;QAC9F,CAAC;QACD,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,CAAA;YAChD,OAAO;gBACN,IAAI,EAAE,4BAA4B,MAAM,CAAC,OAAO,sGAAsG,MAAM,CAAC,OAAO,WAAW;gBAC/K,OAAO,EAAE,MAAM,CAAC,OAAO;aACvB,CAAA;QACF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,OAAO,EAAE,IAAI,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAA;QACxE,CAAC;IACF,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,WAAW,mBAAmB,EAAE,EAAE,CAAA;AAClD,CAAC"}

package/dist/tui/open-browser.d.ts

@@ -12,6 +12,20 @@
  * path under the system directory so a same-named executable earlier on `PATH`
  * cannot answer instead.
  *
+ * ## WSL: the Windows browser
+ *
+ * Under WSL the desktop the user looks at is Windows', and `xdg-open` reaches
+ * a Linux browser at best (usually nothing). With interop on, the address goes
+ * to Windows' own protocol handler through `powershell.exe`, named by absolute
+ * path, running a CONSTANT script (`Start-Process -FilePath
+ * $env:NAMZU_OPEN_URL`) sent as `-EncodedCommand`: the address reaches it only
+ * as an environment variable named in `WSLENV`, so nothing parses it as code
+ * — the same shape as the WSL toast in `notifications/desktop/windows-toast.ts`.
+ * This is what the `open` package does on WSL too, minus its six dependencies
+ * and its quoting of the address into the script text. `cmd.exe /c start` is
+ * not used, for the reason above; `explorer.exe` is not used because it exits
+ * 1 even when it opened the page.
+ *
  * ## Best effort, reported honestly
  *
  * Returns whether a launcher was even STARTED, not whether a browser appeared
@@ -20,5 +34,19 @@
  * stop reading". On a machine with no graphical session there is nothing to
  * start and this says so, which is the case the paste path exists for.
  */
-export declare function openInBrowser(url: string): boolean;
+/** Where Windows keeps PowerShell, under a WSL mount root (`/mnt/` by default). */
+export declare function wslPowershell(mountRoot?: string): string;
+/** PowerShell under the default mount root. */
+export declare const WSL_POWERSHELL: string;
+/** The whole WSL script. The address is data in the environment, never text here. */
+export declare const WSL_OPEN_SCRIPT: string;
+/** The machine, injectable so a test can describe one it is not running on. */
+export interface BrowserHost {
+    readonly platform?: NodeJS.Platform;
+    readonly env?: NodeJS.ProcessEnv;
+    readonly exists?: (path: string) => boolean;
+    /** Reads `/etc/wsl.conf`, for where the Windows drives are mounted. */
+    readonly readFile?: (path: string) => string | undefined;
+}
+export declare function openInBrowser(url: string, host?: BrowserHost): boolean;
 //# sourceMappingURL=open-browser.d.ts.map

package/dist/tui/open-browser.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"open-browser.d.ts","sourceRoot":"","sources":["../../src/tui/open-browser.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAwBH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CA6BlD"}
+{"version":3,"file":"open-browser.d.ts","sourceRoot":"","sources":["../../src/tui/open-browser.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AA+BH,mFAAmF;AACnF,wBAAgB,aAAa,CAAC,SAAS,GAAE,MAA+B,GAAG,MAAM,CAEhF;AAED,+CAA+C;AAC/C,eAAO,MAAM,cAAc,QAAkB,CAAA;AAE7C,qFAAqF;AACrF,eAAO,MAAM,eAAe,QAGhB,CAAA;AAEZ,+EAA+E;AAC/E,MAAM,WAAW,WAAW;IAC3B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAA;IACnC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAA;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAA;IAC3C,uEAAuE;IACvE,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAA;CACxD;AAwDD,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,GAAE,WAAgB,GAAG,OAAO,CA0B1E"}

package/dist/tui/open-browser.js

@@ -12,6 +12,20 @@
  * path under the system directory so a same-named executable earlier on `PATH`
  * cannot answer instead.
  *
+ * ## WSL: the Windows browser
+ *
+ * Under WSL the desktop the user looks at is Windows', and `xdg-open` reaches
+ * a Linux browser at best (usually nothing). With interop on, the address goes
+ * to Windows' own protocol handler through `powershell.exe`, named by absolute
+ * path, running a CONSTANT script (`Start-Process -FilePath
+ * $env:NAMZU_OPEN_URL`) sent as `-EncodedCommand`: the address reaches it only
+ * as an environment variable named in `WSLENV`, so nothing parses it as code
+ * — the same shape as the WSL toast in `notifications/desktop/windows-toast.ts`.
+ * This is what the `open` package does on WSL too, minus its six dependencies
+ * and its quoting of the address into the script text. `cmd.exe /c start` is
+ * not used, for the reason above; `explorer.exe` is not used because it exits
+ * 1 even when it opened the page.
+ *
  * ## Best effort, reported honestly
  *
  * Returns whether a launcher was even STARTED, not whether a browser appeared
@@ -21,12 +35,13 @@
  * start and this says so, which is the case the paste path exists for.
  */
 import { spawn } from 'node:child_process';
-import { constants, accessSync } from 'node:fs';
+import { constants, accessSync, existsSync } from 'node:fs';
 import { platform } from 'node:os';
 import { delimiter, isAbsolute, join } from 'node:path';
+import { DEFAULT_WSL_MOUNT_ROOT, detectWsl, readWslMountRoot, wslSystem32, } from '../context/environment.js';
 /** Resolve a launcher before claiming that one started. */
-function executableOnPath(name) {
-    for (const directory of (process.env.PATH ?? '').split(delimiter)) {
+function executableOnPath(name, env) {
+    for (const directory of (env.PATH ?? '').split(delimiter)) {
         // An empty or relative PATH member delegates executable authority to the
         // project cwd. Opening an OAuth URL must never run a project-owned helper.
         if (!directory || !isAbsolute(directory))
@@ -42,23 +57,80 @@ function executableOnPath(name) {
     }
     return null;
 }
-export function openInBrowser(url) {
+/** Where Windows keeps PowerShell, under a WSL mount root (`/mnt/` by default). */
+export function wslPowershell(mountRoot = DEFAULT_WSL_MOUNT_ROOT) {
+    return `${wslSystem32(mountRoot)}/WindowsPowerShell/v1.0/powershell.exe`;
+}
+/** PowerShell under the default mount root. */
+export const WSL_POWERSHELL = wslPowershell();
+/** The whole WSL script. The address is data in the environment, never text here. */
+export const WSL_OPEN_SCRIPT = [
+    "$ErrorActionPreference = 'Stop'",
+    'Start-Process -FilePath $env:NAMZU_OPEN_URL',
+].join('\n');
+/** Windows' protocol handler through interop, or `null` when this is not a WSL that can reach it. */
+function wslLaunch(url, env, host) {
+    const exists = host.exists ?? existsSync;
+    // `/etc/wsl.conf` can move the drives (`[automount] root = /win/`), and
+    // PowerShell and the directory it starts in move with them.
+    const mountRoot = host.readFile ? readWslMountRoot(host.readFile) : readWslMountRoot();
+    const wsl = detectWsl(env, { exists, list: () => [], mountRoot });
+    if (!wsl?.interop)
+        return null;
+    const powershell = wslPowershell(mountRoot);
+    if (!exists(powershell))
+        return null;
+    const passed = (env.WSLENV ?? '')
+        .split(':')
+        .filter((name) => name && !name.startsWith('NAMZU_OPEN_URL'));
+    return {
+        command: powershell,
+        args: [
+            '-NoProfile',
+            '-NonInteractive',
+            '-ExecutionPolicy',
+            'Bypass',
+            '-EncodedCommand',
+            Buffer.from(WSL_OPEN_SCRIPT, 'utf16le').toString('base64'),
+        ],
+        env: { ...env, NAMZU_OPEN_URL: url, WSLENV: [...passed, 'NAMZU_OPEN_URL'].join(':') },
+        // A Windows program started from a Linux directory warns about UNC
+        // paths; the drive PowerShell lives on is a Windows directory.
+        cwd: `${mountRoot}c`,
+    };
+}
+function launchFor(url, host) {
+    const currentPlatform = host.platform ?? platform();
+    const env = host.env ?? process.env;
+    if (currentPlatform === 'win32') {
+        return {
+            command: join(env.SystemRoot ?? 'C:\\Windows', 'System32', 'rundll32.exe'),
+            args: ['url.dll,FileProtocolHandler', url],
+        };
+    }
+    if (currentPlatform === 'linux') {
+        const wsl = wslLaunch(url, env, host);
+        if (wsl)
+            return wsl;
+    }
+    const command = executableOnPath(currentPlatform === 'darwin' ? 'open' : 'xdg-open', env);
+    return command ? { command, args: [url] } : null;
+}
+export function openInBrowser(url, host = {}) {
     // Refuse anything that is not a web address. This is handed to the
     // machine's protocol handler, and `file:` or a custom scheme reaching it
     // would be this function opening something nobody named.
     if (!/^https?:\/\//i.test(url))
         return false;
-    const currentPlatform = platform();
-    const command = currentPlatform === 'win32'
-        ? join(process.env.SystemRoot ?? 'C:\\Windows', 'System32', 'rundll32.exe')
-        : executableOnPath(currentPlatform === 'darwin' ? 'open' : 'xdg-open');
-    if (!command)
+    const launch = launchFor(url, host);
+    if (!launch)
         return false;
-    const args = currentPlatform === 'win32' ? ['url.dll,FileProtocolHandler', url] : [url];
     try {
-        const child = spawn(command, args, {
+        const child = spawn(launch.command, [...launch.args], {
             stdio: 'ignore',
             detached: true,
+            ...(launch.env ? { env: launch.env } : {}),
+            ...(launch.cwd ? { cwd: launch.cwd } : {}),
         });
         // A missing launcher — no `xdg-open` in a container — arrives as an
         // async error event, long after this function returned. Swallowing it

package/dist/tui/open-browser.js.map

@@ -1 +1 @@
-{"version":3,"file":"open-browser.js","sourceRoot":"","sources":["../../src/tui/open-browser.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAA;AAC1C,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AAC/C,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAClC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEvD,2DAA2D;AAC3D,SAAS,gBAAgB,CAAC,IAAY;IACrC,KAAK,MAAM,SAAS,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QACnE,yEAAyE;QACzE,2EAA2E;QAC3E,IAAI,CAAC,SAAS,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,SAAQ;QAClD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;QACvC,IAAI,CAAC;YACJ,UAAU,CAAC,SAAS,EAAE,SAAS,CAAC,IAAI,CAAC,CAAA;YACrC,OAAO,SAAS,CAAA;QACjB,CAAC;QAAC,MAAM,CAAC;YACR,+DAA+D;QAChE,CAAC;IACF,CAAC;IACD,OAAO,IAAI,CAAA;AACZ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,GAAW;IACxC,mEAAmE;IACnE,yEAAyE;IACzE,yDAAyD;IACzD,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAA;IAE5C,MAAM,eAAe,GAAG,QAAQ,EAAE,CAAA;IAClC,MAAM,OAAO,GACZ,eAAe,KAAK,OAAO;QAC1B,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,aAAa,EAAE,UAAU,EAAE,cAAc,CAAC;QAC3E,CAAC,CAAC,gBAAgB,CAAC,eAAe,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAA;IACxE,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAA;IAC1B,MAAM,IAAI,GAAG,eAAe,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;IAEvF,IAAI,CAAC;QACJ,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE;YAClC,KAAK,EAAE,QAAQ;YACf,QAAQ,EAAE,IAAI;SACd,CAAC,CAAA;QACF,oEAAoE;QACpE,sEAAsE;QACtE,uEAAuE;QACvE,+DAA+D;QAC/D,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QAC3B,KAAK,CAAC,KAAK,EAAE,CAAA;QACb,OAAO,IAAI,CAAA;IACZ,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,KAAK,CAAA;IACb,CAAC;AACF,CAAC"}
+{"version":3,"file":"open-browser.js","sourceRoot":"","sources":["../../src/tui/open-browser.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAA;AAC1C,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AAC3D,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAClC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEvD,OAAO,EACN,sBAAsB,EACtB,SAAS,EACT,gBAAgB,EAChB,WAAW,GACX,MAAM,2BAA2B,CAAA;AAElC,2DAA2D;AAC3D,SAAS,gBAAgB,CAAC,IAAY,EAAE,GAAsB;IAC7D,KAAK,MAAM,SAAS,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3D,yEAAyE;QACzE,2EAA2E;QAC3E,IAAI,CAAC,SAAS,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,SAAQ;QAClD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;QACvC,IAAI,CAAC;YACJ,UAAU,CAAC,SAAS,EAAE,SAAS,CAAC,IAAI,CAAC,CAAA;YACrC,OAAO,SAAS,CAAA;QACjB,CAAC;QAAC,MAAM,CAAC;YACR,+DAA+D;QAChE,CAAC;IACF,CAAC;IACD,OAAO,IAAI,CAAA;AACZ,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,aAAa,CAAC,YAAoB,sBAAsB;IACvE,OAAO,GAAG,WAAW,CAAC,SAAS,CAAC,wCAAwC,CAAA;AACzE,CAAC;AAED,+CAA+C;AAC/C,MAAM,CAAC,MAAM,cAAc,GAAG,aAAa,EAAE,CAAA;AAE7C,qFAAqF;AACrF,MAAM,CAAC,MAAM,eAAe,GAAG;IAC9B,iCAAiC;IACjC,6CAA6C;CAC7C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AAkBZ,qGAAqG;AACrG,SAAS,SAAS,CAAC,GAAW,EAAE,GAAsB,EAAE,IAAiB;IACxE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,UAAU,CAAA;IACxC,wEAAwE;IACxE,4DAA4D;IAC5D,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAA;IACtF,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,CAAC,CAAA;IACjE,IAAI,CAAC,GAAG,EAAE,OAAO;QAAE,OAAO,IAAI,CAAA;IAC9B,MAAM,UAAU,GAAG,aAAa,CAAC,SAAS,CAAC,CAAA;IAC3C,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAA;IACpC,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC;SAC/B,KAAK,CAAC,GAAG,CAAC;SACV,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC,CAAA;IAC9D,OAAO;QACN,OAAO,EAAE,UAAU;QACnB,IAAI,EAAE;YACL,YAAY;YACZ,iBAAiB;YACjB,kBAAkB;YAClB,QAAQ;YACR,iBAAiB;YACjB,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;SAC1D;QACD,GAAG,EAAE,EAAE,GAAG,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,GAAG,MAAM,EAAE,gBAAgB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;QACrF,mEAAmE;QACnE,+DAA+D;QAC/D,GAAG,EAAE,GAAG,SAAS,GAAG;KACpB,CAAA;AACF,CAAC;AAED,SAAS,SAAS,CAAC,GAAW,EAAE,IAAiB;IAChD,MAAM,eAAe,GAAG,IAAI,CAAC,QAAQ,IAAI,QAAQ,EAAE,CAAA;IACnD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAA;IACnC,IAAI,eAAe,KAAK,OAAO,EAAE,CAAC;QACjC,OAAO;YACN,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,UAAU,IAAI,aAAa,EAAE,UAAU,EAAE,cAAc,CAAC;YAC1E,IAAI,EAAE,CAAC,6BAA6B,EAAE,GAAG,CAAC;SAC1C,CAAA;IACF,CAAC;IACD,IAAI,eAAe,KAAK,OAAO,EAAE,CAAC;QACjC,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;QACrC,IAAI,GAAG;YAAE,OAAO,GAAG,CAAA;IACpB,CAAC;IACD,MAAM,OAAO,GAAG,gBAAgB,CAAC,eAAe,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,EAAE,GAAG,CAAC,CAAA;IACzF,OAAO,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;AACjD,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,GAAW,EAAE,OAAoB,EAAE;IAChE,mEAAmE;IACnE,yEAAyE;IACzE,yDAAyD;IACzD,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAA;IAE5C,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;IACnC,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAA;IAEzB,IAAI,CAAC;QACJ,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE;YACrD,KAAK,EAAE,QAAQ;YACf,QAAQ,EAAE,IAAI;YACd,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1C,CAAC,CAAA;QACF,oEAAoE;QACpE,sEAAsE;QACtE,uEAAuE;QACvE,+DAA+D;QAC/D,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QAC3B,KAAK,CAAC,KAAK,EAAE,CAAA;QACb,OAAO,IAAI,CAAA;IACZ,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,KAAK,CAAA;IACb,CAAC;AACF,CAAC"}

package/dist/tui/permission-review.d.ts

@@ -89,7 +89,16 @@ export declare function buildPermissionReview(calls: readonly PermissionReviewCa
  * is the one case that opens exact-first: the formatter is stale, and a
  * reader should see that rather than a projection that happens to be right.
  */
-export declare function buildPermissionSummary(review: string): PermissionReviewSummary;
+/** What the screen can learn, beyond the envelope, to make a call readable. */
+export interface PermissionSummaryContext {
+    /**
+     * The control a `computer_use` `ui_act` ref names in the latest UI
+     * snapshot (`Button "Beş" (e30)`), from the session's tool. Absent, the
+     * ref alone is shown.
+     */
+    readonly describeUiRef?: (ref: string) => string | undefined;
+}
+export declare function buildPermissionSummary(review: string, context?: PermissionSummaryContext): PermissionReviewSummary;
 /**
  * Project and wrap exact review text into PHYSICAL terminal rows.
  *

package/dist/tui/permission-review.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"permission-review.d.ts","sourceRoot":"","sources":["../../src/tui/permission-review.ts"],"names":[],"mappings":"AAEA;;;;;;;GAOG;AACH,eAAO,MAAM,2BAA2B,OAAQ,CAAA;AAEhD,qEAAqE;AACrE,eAAO,MAAM,2BAA2B,IAAI,CAAA;AAE5C;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAGjF;AAED;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CACnC,SAAS,EAAE,SAAS;IACnB,QAAQ,CAAC,UAAU,CAAC,EAAE;QACrB,QAAQ,CAAC,aAAa,CAAC,EAAE,IAAI,CAAA;QAC7B,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;KACzC,CAAA;CACD,EAAE,GACD,OAAO,CAKT;AAED,MAAM,WAAW,oBAAoB;IACpC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;IACvB,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAA;CAC/B;AAED,MAAM,MAAM,sBAAsB,GAC/B;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACpE;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,WAAW,GAAG,iBAAiB,CAAA;CAAE,CAAA;AAE3E,MAAM,WAAW,uBAAuB;IACvC,sFAAsF;IACtF,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,6DAA6D;IAC7D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,uEAAuE;IACvE,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;CAC1B;AASD,6EAA6E;AAC7E,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,WAAW,GAAG,iBAAiB,GAAG,MAAM,CAIvF;AAED,uEAAuE;AACvE,MAAM,WAAW,mBAAmB;IACnC,wDAAwD;IACxD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,8DAA8D;IAC9D,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAA;CAC9B;AAKD;;;;;;;;;;GAUG;AACH,wBAAgB,qBAAqB,CACpC,KAAK,EAAE,SAAS,oBAAoB,EAAE,EACtC,QAAQ,SAA8B,GACpC,sBAAsB,CAqJxB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,uBAAuB,CA+E9E;AAsWD;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CACnC,MAAM,EAAE,MAAM,EACd,eAAe,EAAE,MAAM,GAAG,SAAS,GACjC,SAAS,mBAAmB,EAAE,CA6BhC"}
+{"version":3,"file":"permission-review.d.ts","sourceRoot":"","sources":["../../src/tui/permission-review.ts"],"names":[],"mappings":"AAEA;;;;;;;GAOG;AACH,eAAO,MAAM,2BAA2B,OAAQ,CAAA;AAEhD,qEAAqE;AACrE,eAAO,MAAM,2BAA2B,IAAI,CAAA;AAE5C;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAGjF;AAED;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CACnC,SAAS,EAAE,SAAS;IACnB,QAAQ,CAAC,UAAU,CAAC,EAAE;QACrB,QAAQ,CAAC,aAAa,CAAC,EAAE,IAAI,CAAA;QAC7B,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;KACzC,CAAA;CACD,EAAE,GACD,OAAO,CAKT;AAED,MAAM,WAAW,oBAAoB;IACpC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;IACvB,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAA;CAC/B;AAED,MAAM,MAAM,sBAAsB,GAC/B;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACpE;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,WAAW,GAAG,iBAAiB,CAAA;CAAE,CAAA;AAE3E,MAAM,WAAW,uBAAuB;IACvC,sFAAsF;IACtF,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,6DAA6D;IAC7D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,uEAAuE;IACvE,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;CAC1B;AASD,6EAA6E;AAC7E,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,WAAW,GAAG,iBAAiB,GAAG,MAAM,CAIvF;AAED,uEAAuE;AACvE,MAAM,WAAW,mBAAmB;IACnC,wDAAwD;IACxD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,8DAA8D;IAC9D,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAA;CAC9B;AAKD;;;;;;;;;;GAUG;AACH,wBAAgB,qBAAqB,CACpC,KAAK,EAAE,SAAS,oBAAoB,EAAE,EACtC,QAAQ,SAA8B,GACpC,sBAAsB,CAqJxB;AAED;;;;;;;;;;;;;GAaG;AACH,+EAA+E;AAC/E,MAAM,WAAW,wBAAwB;IACxC;;;;OAIG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAA;CAC5D;AAED,wBAAgB,sBAAsB,CACrC,MAAM,EAAE,MAAM,EACd,OAAO,GAAE,wBAA6B,GACpC,uBAAuB,CA+EzB;AA+kBD;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CACnC,MAAM,EAAE,MAAM,EACd,eAAe,EAAE,MAAM,GAAG,SAAS,GACjC,SAAS,mBAAmB,EAAE,CA6BhC"}