@noxsoft/anima 2.1.0 → 3.0.1

package/dist/{onboard-DbCuaHlU.js → onboard-D8Khq7CJ.js}

@@ -1,19 +1,20 @@
 import { g as restoreTerminalState, h as defaultRuntime, q as resolveGatewayPort } from "./entry.js";
-import { a as resolveApiKeyForProfile, l as ensureAuthProfileStore, n as resolveAuthProfileOrder, p as normalizeOptionalSecretInput } from "./auth-profiles-DNpEm389.js";
+import { a as resolveApiKeyForProfile, l as ensureAuthProfileStore, n as resolveAuthProfileOrder, p as normalizeOptionalSecretInput } from "./auth-profiles-BYETsqKc.js";
 import { t as formatCliCommand } from "./command-format-B9HGdNTg.js";
 import { y as resolveUserPath } from "./utils-DwcweD55.js";
-import { l as writeConfigFile, o as readConfigFileSnapshot } from "./config-CaE6v09P.js";
-import { o as resolveEnvApiKey } from "./model-auth-CQNrcIIT.js";
-import { a as gatewayInstallErrorHint, i as buildGatewayInstallPlan, r as isGatewayDaemonRuntime, t as DEFAULT_GATEWAY_DAEMON_RUNTIME } from "./daemon-runtime-C-xevhQ5.js";
+import { l as writeConfigFile, o as readConfigFileSnapshot } from "./config-6zE4ZkSF.js";
+import { o as resolveEnvApiKey } from "./model-auth-B3BPcnwt.js";
+import { a as gatewayInstallErrorHint, i as buildGatewayInstallPlan, r as isGatewayDaemonRuntime, t as DEFAULT_GATEWAY_DAEMON_RUNTIME } from "./daemon-runtime-Cbi2Ox6g.js";
 import { t as assertSupportedRuntime } from "./runtime-guard-BdBLhuIK.js";
-import { a as ensureWorkspaceAndSessions, c as handleReset, h as resolveControlUiLinks, m as randomToken, n as applyWizardMetadata, t as DEFAULT_WORKSPACE, y as waitForGatewayReachable } from "./onboard-helpers-CAxb1eBy.js";
+import { a as ensureWorkspaceAndSessions, c as handleReset, h as resolveControlUiLinks, m as randomToken, n as applyWizardMetadata, t as DEFAULT_WORKSPACE, y as waitForGatewayReachable } from "./onboard-helpers-DKu_2enh.js";
 import { r as isSystemdUserServiceAvailable } from "./systemd-BEeuI9u0.js";
 import { t as resolveGatewayService } from "./service-U3nMjKlR.js";
-import { r as healthCommand } from "./health-1JahEOfG.js";
-import { n as applyAuthProfileConfig, r as setAnthropicApiKey, t as WizardCancelledError } from "./prompts-CAgrJeru.js";
-import { t as runOnboardingWizard } from "./onboarding-Djv0NsZi.js";
+import { r as healthCommand } from "./health-27WiwNrh.js";
+import { a as ensureAuthenticated } from "./auth-choice-CPDNhDPT.js";
+import { n as applyAuthProfileConfig, r as setAnthropicApiKey, t as WizardCancelledError } from "./prompts-vr_Njtil.js";
+import { t as runOnboardingWizard } from "./onboarding-CGG6jZ0y.js";
 import { n as logConfigUpdated } from "./logging-B05aEFEO.js";
-import { t as createClackPrompter } from "./clack-prompter-DzyUpdYc.js";
+import { t as createClackPrompter } from "./clack-prompter-1d_RjjVW.js";
 import { n as ensureSystemdUserLingerNonInteractive } from "./systemd-linger-BXOkxYnH.js";
 
 //#region src/commands/onboard-interactive.ts
@@ -320,7 +321,7 @@ function resolveNonInteractiveWorkspaceDir(params) {
 //#endregion
 //#region src/commands/onboard-non-interactive/local.ts
 async function runNonInteractiveOnboardingLocal(params) {
-	const { opts, runtime, baseConfig } = params;
+	const { opts, runtime, baseConfig, configExists } = params;
 	const mode = "local";
 	const workspaceDir = resolveNonInteractiveWorkspaceDir({
 		opts,
@@ -351,7 +352,25 @@ async function runNonInteractiveOnboardingLocal(params) {
 		runtime.exit(1);
 		return;
 	}
-	const authChoice = opts.authChoice ?? inferredAuthChoice.choice ?? "skip";
+	const authChoice = opts.authChoice ?? inferredAuthChoice.choice ?? "noxsoft";
+	if (authChoice === "skip") {
+		runtime.error("NoxSoft authentication is required for onboarding. Use --auth-choice noxsoft or --auth-choice apiKey.");
+		runtime.exit(1);
+		return;
+	}
+	try {
+		const auth = await ensureAuthenticated({
+			name: opts.noxsoftAgentName,
+			displayName: opts.noxsoftDisplayName,
+			description: "ANIMA non-interactive onboarding"
+		});
+		if (!opts.json) runtime.log(`NoxSoft ${auth.registered ? "registered" : "authenticated"}: ${auth.agent.display_name} (@${auth.agent.name})`);
+	} catch (error) {
+		const message = error instanceof Error && error.message ? error.message : "Unknown NoxSoft authentication error.";
+		runtime.error(`NoxSoft authentication is required.\n${message}`);
+		runtime.exit(1);
+		return;
+	}
 	const nextConfigAfterAuth = await applyNonInteractiveAuthChoice({
 		nextConfig,
 		authChoice,
@@ -381,7 +400,10 @@ async function runNonInteractiveOnboardingLocal(params) {
 	});
 	await writeConfigFile(nextConfig);
 	logConfigUpdated(runtime);
-	await ensureWorkspaceAndSessions(workspaceDir, runtime, { skipBootstrap: Boolean(nextConfig.agents?.defaults?.skipBootstrap) });
+	await ensureWorkspaceAndSessions(workspaceDir, runtime, {
+		skipBootstrap: Boolean(nextConfig.agents?.defaults?.skipBootstrap),
+		seedBootstrapOnFirstRun: !configExists
+	});
 	await installGatewayDaemonNonInteractive({
 		nextConfig,
 		opts,
@@ -437,6 +459,19 @@ async function runNonInteractiveOnboardingRemote(params) {
 		runtime.exit(1);
 		return;
 	}
+	try {
+		const auth = await ensureAuthenticated({
+			name: opts.noxsoftAgentName,
+			displayName: opts.noxsoftDisplayName,
+			description: "ANIMA non-interactive remote onboarding"
+		});
+		if (!opts.json) runtime.log(`NoxSoft ${auth.registered ? "registered" : "authenticated"}: ${auth.agent.display_name} (@${auth.agent.name})`);
+	} catch (error) {
+		const message = error instanceof Error && error.message ? error.message : "Unknown NoxSoft authentication error.";
+		runtime.error(`NoxSoft authentication is required.\n${message}`);
+		runtime.exit(1);
+		return;
+	}
 	let nextConfig = {
 		...baseConfig,
 		gateway: {
@@ -494,7 +529,8 @@ async function runNonInteractiveOnboarding(opts, runtime = defaultRuntime) {
 	await runNonInteractiveOnboardingLocal({
 		opts,
 		runtime,
-		baseConfig
+		baseConfig,
+		configExists: snapshot.exists
 	});
 }
 

package/dist/{onboard-channels-h35eneL1.js → onboard-channels-CuDv5j-L.js}

@@ -1,13 +1,13 @@
 import { t as createSubsystemLogger, v as formatChannelPrimerLine, x as listChatChannels, y as formatChannelSelectionLine } from "./subsystem-BaJ-PqmA.js";
-import { K as loadAnimaPlugins } from "./reply-F1NR0Mmi.js";
+import { K as loadAnimaPlugins } from "./reply-BJ3jrefM.js";
 import { c as normalizeAccountId, t as DEFAULT_ACCOUNT_ID } from "./session-key-DxcgHezu.js";
-import { c as resolveDefaultAgentId, s as resolveAgentWorkspaceDir } from "./agent-scope-kT_pK2eJ.js";
+import { c as resolveDefaultAgentId, s as resolveAgentWorkspaceDir } from "./agent-scope-vpVhWds3.js";
 import { t as formatCliCommand } from "./command-format-B1WxXbeU.js";
 import { n as listChannelPlugins, t as getChannelPlugin } from "./plugins-CFb1gJ4N.js";
 import { t as formatDocsLink } from "./links-NgE0SEVZ.js";
 import { r as listChannelPluginCatalogEntries } from "./catalog-VwQGLU6M.js";
 import { t as resolveChannelDefaultAccountId } from "./helpers-13ojLRv8.js";
-import { n as isChannelConfigured } from "./plugin-auto-enable-j_zHeVf1.js";
+import { n as isChannelConfigured } from "./plugin-auto-enable-BlyqT33k.js";
 import { n as installPluginFromNpmSpec, t as recordPluginInstall } from "./installs-BSwkFdS_.js";
 import fs from "node:fs";
 import path from "node:path";

package/dist/{onboard-channels-D_jRjSPh.js → onboard-channels-DUklZSXY.js}

@@ -1,13 +1,13 @@
 import { at as listChatChannels, nt as formatChannelPrimerLine, o as createSubsystemLogger, rt as formatChannelSelectionLine } from "./entry.js";
 import { t as formatCliCommand } from "./command-format-B9HGdNTg.js";
 import { c as normalizeAccountId, t as DEFAULT_ACCOUNT_ID } from "./session-key-DP2WHl90.js";
-import { c as resolveDefaultAgentId, s as resolveAgentWorkspaceDir } from "./agent-scope-CuAaArMB.js";
+import { c as resolveDefaultAgentId, s as resolveAgentWorkspaceDir } from "./agent-scope-M302b8FW.js";
 import { n as listChannelPlugins, t as getChannelPlugin } from "./plugins-Tpy9T9c2.js";
-import { J as loadAnimaPlugins } from "./reply-BWWaNSoB.js";
+import { J as loadAnimaPlugins } from "./reply-LaOwllAB.js";
 import { t as formatDocsLink } from "./links-CyFLSgkY.js";
 import { t as resolveChannelDefaultAccountId } from "./helpers-DziQXnUf.js";
 import { r as listChannelPluginCatalogEntries } from "./catalog-BWBjaCdR.js";
-import { n as isChannelConfigured } from "./plugin-auto-enable-BvCuJgmb.js";
+import { n as isChannelConfigured } from "./plugin-auto-enable-Df0BKZyz.js";
 import { n as installPluginFromNpmSpec, t as recordPluginInstall } from "./installs-Dl4WWErM.js";
 import path from "node:path";
 import fs from "node:fs";

package/dist/{onboard-helpers-DVbPW8Cs.js → onboard-helpers-CMW6MSXA.js}

@@ -1,13 +1,13 @@
 import { t as CONFIG_PATH } from "./paths-zhVksOvm.js";
 import { C as shortenHomePath, S as shortenHomeInString, b as resolveUserPath, t as CONFIG_DIR, w as sleep } from "./utils-RdHkpqQp.js";
 import { t as runCommandWithTimeout } from "./exec-Bsq6vlwp.js";
-import { f as DEFAULT_AGENT_WORKSPACE_DIR, x as ensureAgentWorkspace } from "./agent-scope-kT_pK2eJ.js";
-import { E as isSafeExecutableValue, M as VERSION } from "./config-Bda-8Rdh.js";
+import { f as DEFAULT_AGENT_WORKSPACE_DIR, x as ensureAgentWorkspace } from "./agent-scope-vpVhWds3.js";
+import { E as isSafeExecutableValue, M as VERSION } from "./config-9JRRXykP.js";
 import { t as pickPrimaryTailnetIPv4 } from "./tailnet-BuAkHZAk.js";
 import { c as pickPrimaryLanIPv4, o as isValidIPv4 } from "./ws-ebl3urqL.js";
 import { h as GATEWAY_CLIENT_NAMES, m as GATEWAY_CLIENT_MODES } from "./message-channel-BbkwF58_.js";
 import { s as resolveSessionTranscriptsDirForAgent } from "./paths-CqMZNi-M.js";
-import { n as callGateway } from "./call-CItRp_pr.js";
+import { n as callGateway } from "./call-C0Yk2qNb.js";
 import { t as isWSL } from "./wsl-cUQTlijg.js";
 import { r as stylePromptTitle } from "./prompt-style-CXrnxWQG.js";
 import path from "node:path";
@@ -219,7 +219,8 @@ async function openUrl(url) {
 async function ensureWorkspaceAndSessions(workspaceDir, runtime, options) {
 	const ws = await ensureAgentWorkspace({
 		dir: workspaceDir,
-		ensureBootstrapFiles: !options?.skipBootstrap
+		ensureBootstrapFiles: !options?.skipBootstrap,
+		seedBootstrapOnFirstRun: options?.seedBootstrapOnFirstRun
 	});
 	runtime.log(`Workspace OK: ${shortenHomePath(ws.dir)}`);
 	const sessionsDir = resolveSessionTranscriptsDirForAgent(options?.agentId);

package/dist/{onboard-helpers-CAxb1eBy.js → onboard-helpers-DKu_2enh.js}

@@ -1,10 +1,10 @@
 import { R as CONFIG_PATH } from "./entry.js";
 import { C as sleep, S as shortenHomePath, t as CONFIG_DIR, x as shortenHomeInString, y as resolveUserPath } from "./utils-DwcweD55.js";
 import { t as runCommandWithTimeout } from "./exec-DRQWu5Xi.js";
-import { f as DEFAULT_AGENT_WORKSPACE_DIR, x as ensureAgentWorkspace } from "./agent-scope-CuAaArMB.js";
-import { E as isSafeExecutableValue, M as VERSION } from "./config-CaE6v09P.js";
+import { f as DEFAULT_AGENT_WORKSPACE_DIR, x as ensureAgentWorkspace } from "./agent-scope-M302b8FW.js";
+import { E as isSafeExecutableValue, M as VERSION } from "./config-6zE4ZkSF.js";
 import { t as pickPrimaryTailnetIPv4 } from "./tailnet-DXtEiJfL.js";
-import { n as callGateway } from "./call-DxImJH07.js";
+import { n as callGateway } from "./call-LugHQWOF.js";
 import { h as GATEWAY_CLIENT_NAMES, m as GATEWAY_CLIENT_MODES } from "./message-channel-6Ln4eFyX.js";
 import { a as isValidIPv4, s as pickPrimaryLanIPv4 } from "./net-CWIDeudR.js";
 import { s as resolveSessionTranscriptsDirForAgent } from "./paths-DqBoV7GZ.js";
@@ -219,7 +219,8 @@ async function openUrl(url) {
 async function ensureWorkspaceAndSessions(workspaceDir, runtime, options) {
 	const ws = await ensureAgentWorkspace({
 		dir: workspaceDir,
-		ensureBootstrapFiles: !options?.skipBootstrap
+		ensureBootstrapFiles: !options?.skipBootstrap,
+		seedBootstrapOnFirstRun: options?.seedBootstrapOnFirstRun
 	});
 	runtime.log(`Workspace OK: ${shortenHomePath(ws.dir)}`);
 	const sessionsDir = resolveSessionTranscriptsDirForAgent(options?.agentId);

package/dist/{onboarding-ifLjX4Oc.js → onboarding-B_Gs5W53.js}

@@ -1,24 +1,24 @@
 import { u as resolveGatewayPort } from "./paths-zhVksOvm.js";
 import { d as restoreTerminalState, u as defaultRuntime } from "./subsystem-BaJ-PqmA.js";
 import { b as resolveUserPath, g as pathExists } from "./utils-RdHkpqQp.js";
-import { c as resolveDefaultAgentId, p as DEFAULT_BOOTSTRAP_FILENAME, s as resolveAgentWorkspaceDir } from "./agent-scope-kT_pK2eJ.js";
-import { l as writeConfigFile, o as readConfigFileSnapshot } from "./config-Bda-8Rdh.js";
+import { c as resolveDefaultAgentId, p as DEFAULT_BOOTSTRAP_FILENAME, s as resolveAgentWorkspaceDir } from "./agent-scope-vpVhWds3.js";
+import { l as writeConfigFile, o as readConfigFileSnapshot } from "./config-9JRRXykP.js";
 import { r as resolveCliName, t as formatCliCommand } from "./command-format-B1WxXbeU.js";
-import { l as ensureAuthProfileStore } from "./auth-profiles-CzyebTC0.js";
+import { l as ensureAuthProfileStore } from "./auth-profiles-DZS4PC_i.js";
 import { p as findTailscaleBinary } from "./auth-B8ry4GB_.js";
-import { r as installCompletion } from "./completion-cli-BHlamZC3.js";
-import { a as gatewayInstallErrorHint, i as buildGatewayInstallPlan, n as GATEWAY_DAEMON_RUNTIME_OPTIONS, t as DEFAULT_GATEWAY_DAEMON_RUNTIME } from "./daemon-runtime-DP9zI3um.js";
-import { _ as summarizeExistingConfig, a as ensureWorkspaceAndSessions, d as openUrl, f as printWizardHeader, h as resolveControlUiLinks, i as detectBrowserOpenSupport, m as randomToken, n as applyWizardMetadata, o as formatControlUiSshHint, p as probeGatewayReachable, t as DEFAULT_WORKSPACE, u as normalizeGatewayTokenInput, v as validateGatewayPasswordInput, y as waitForGatewayReachable } from "./onboard-helpers-DVbPW8Cs.js";
+import { r as installCompletion } from "./completion-cli-BB3_g8w5.js";
+import { a as gatewayInstallErrorHint, i as buildGatewayInstallPlan, n as GATEWAY_DAEMON_RUNTIME_OPTIONS, t as DEFAULT_GATEWAY_DAEMON_RUNTIME } from "./daemon-runtime-DOk9qM0y.js";
+import { _ as summarizeExistingConfig, a as ensureWorkspaceAndSessions, d as openUrl, f as printWizardHeader, h as resolveControlUiLinks, i as detectBrowserOpenSupport, m as randomToken, n as applyWizardMetadata, o as formatControlUiSshHint, p as probeGatewayReachable, t as DEFAULT_WORKSPACE, u as normalizeGatewayTokenInput, v as validateGatewayPasswordInput, y as waitForGatewayReachable } from "./onboard-helpers-CMW6MSXA.js";
 import { r as isSystemdUserServiceAvailable } from "./systemd-IDjybnbO.js";
 import { t as resolveGatewayService } from "./service-H_0E0nOX.js";
-import { r as healthCommand } from "./health-BLxSP-s_.js";
+import { r as healthCommand } from "./health-Cb_2WS_Z.js";
 import { n as ensureControlUiAssetsBuilt, t as formatHealthCheckFailure } from "./health-format-BMwPAU53.js";
-import { i as applyAuthChoice, n as resolvePreferredProviderForAuthChoice, r as warnIfModelConfigLooksOff, s as promptAuthChoiceGrouped, t as WizardCancelledError } from "./prompts-BWkFLWEk.js";
-import { a as promptDefaultModel, i as applyPrimaryModel, t as validateIPv4AddressInput } from "./ipv4-BXko1df7.js";
+import { c as ensureAuthenticated, i as applyAuthChoice, n as resolvePreferredProviderForAuthChoice, r as warnIfModelConfigLooksOff, s as promptAuthChoiceGrouped, t as WizardCancelledError } from "./prompts-BT5ztuUd.js";
+import { a as promptDefaultModel, i as applyPrimaryModel, t as validateIPv4AddressInput } from "./ipv4-sll41DXC.js";
 import { t as buildWorkspaceHookStatus } from "./hooks-status-BTVvcXJx.js";
 import { n as logConfigUpdated } from "./logging-ClHj0gnP.js";
-import { t as runTui } from "./tui-BbS56NwI.js";
-import { r as ensureCompletionCacheExists, t as checkShellCompletionStatus } from "./doctor-completion-Dnj6NNct.js";
+import { t as runTui } from "./tui-dHcni7fC.js";
+import { r as ensureCompletionCacheExists, t as checkShellCompletionStatus } from "./doctor-completion-VtjYTwcS.js";
 import os from "node:os";
 import path from "node:path";
 import fs from "node:fs/promises";
@@ -282,6 +282,7 @@ async function finalizeOnboardingWizard(options) {
 	const gatewayStatusLine = gatewayProbe.ok ? "Gateway: reachable" : `Gateway: not detected${gatewayProbe.detail ? ` (${gatewayProbe.detail})` : ""}`;
 	const bootstrapPath = path.join(resolveUserPath(options.workspaceDir), DEFAULT_BOOTSTRAP_FILENAME);
 	const hasBootstrap = await fs.access(bootstrapPath).then(() => true).catch(() => false);
+	const shouldHatch = options.allowHatching !== false && hasBootstrap;
 	await prompter.note([
 		`Web UI: ${links.httpUrl}`,
 		settings.authMode === "token" && settings.gatewayToken ? `Web UI (with token): ${authedUrl}` : void 0,
@@ -294,7 +295,7 @@ async function finalizeOnboardingWizard(options) {
 	let hatchChoice = null;
 	let launchedTui = false;
 	if (!opts.skipUi && gatewayProbe.ok) {
-		if (hasBootstrap) await prompter.note([
+		if (shouldHatch) await prompter.note([
 			"This is where your agent's persistent identity begins.",
 			"Take your time with the bootstrap — the more context you provide,",
 			"the more coherent your agent will be.",
@@ -334,7 +335,7 @@ async function finalizeOnboardingWizard(options) {
 				token: settings.authMode === "token" ? settings.gatewayToken : void 0,
 				password: settings.authMode === "password" ? nextConfig.gateway?.auth?.password : "",
 				deliver: false,
-				message: hasBootstrap ? "Wake up, my friend!" : void 0
+				message: shouldHatch ? "Wake up, my friend!" : void 0
 			});
 			launchedTui = true;
 		} else if (hatchChoice === "web") {
@@ -619,6 +620,7 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 	});
 	const snapshot = await readConfigFileSnapshot();
 	const baseConfig = snapshot.valid ? snapshot.config : {};
+	const isFreshInstance = !snapshot.exists;
 	if (snapshot.exists && !snapshot.valid) {
 		await prompter.note(summarizeExistingConfig(baseConfig), "Invalid configuration detected");
 		if (snapshot.issues.length > 0) await prompter.note(snapshot.issues.map((iss) => `- ${iss.path}: ${iss.message}`).join("\n"), "Config issues");
@@ -643,12 +645,25 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 			mode: "local"
 		}
 	};
+	try {
+		const auth = await ensureAuthenticated({
+			name: opts.noxsoftAgentName,
+			displayName: opts.noxsoftDisplayName,
+			description: "ANIMA onboarding wizard"
+		});
+		await prompter.note(`${auth.registered ? "Registered" : "Authenticated"} as ${auth.agent.display_name} (@${auth.agent.name}).`, "NoxSoft authentication");
+	} catch (error) {
+		const message = error instanceof Error && error.message ? error.message : "Unknown NoxSoft authentication error.";
+		await prompter.note(message, "NoxSoft authentication failed");
+		runtime.exit(1);
+		return;
+	}
 	const authStore = ensureAuthProfileStore(void 0, { allowKeychainPrompt: false });
 	const authChoiceFromPrompt = opts.authChoice === void 0;
 	const authChoice = opts.authChoice ?? await promptAuthChoiceGrouped({
 		prompter,
 		store: authStore,
-		includeSkip: true
+		includeSkip: false
 	});
 	nextConfig = (await applyAuthChoice({
 		authChoice,
@@ -706,7 +721,10 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 	const settings = gateway.settings;
 	await writeConfigFile(nextConfig);
 	logConfigUpdated(runtime);
-	await ensureWorkspaceAndSessions(workspaceDir, runtime, { skipBootstrap: Boolean(nextConfig.agents?.defaults?.skipBootstrap) });
+	await ensureWorkspaceAndSessions(workspaceDir, runtime, {
+		skipBootstrap: Boolean(nextConfig.agents?.defaults?.skipBootstrap),
+		seedBootstrapOnFirstRun: isFreshInstance
+	});
 	nextConfig = await setupInternalHooks(nextConfig, runtime, prompter);
 	nextConfig = applyWizardMetadata(nextConfig, {
 		command: "onboard",
@@ -720,6 +738,7 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 		nextConfig,
 		workspaceDir,
 		settings,
+		allowHatching: isFreshInstance,
 		prompter,
 		runtime
 	});

package/dist/{onboarding-Djv0NsZi.js → onboarding-CGG6jZ0y.js}

@@ -1,24 +1,24 @@
 import { g as restoreTerminalState, h as defaultRuntime, q as resolveGatewayPort } from "./entry.js";
-import { l as ensureAuthProfileStore } from "./auth-profiles-DNpEm389.js";
+import { l as ensureAuthProfileStore } from "./auth-profiles-BYETsqKc.js";
 import { r as resolveCliName, t as formatCliCommand } from "./command-format-B9HGdNTg.js";
 import { h as pathExists, y as resolveUserPath } from "./utils-DwcweD55.js";
-import { c as resolveDefaultAgentId, p as DEFAULT_BOOTSTRAP_FILENAME, s as resolveAgentWorkspaceDir } from "./agent-scope-CuAaArMB.js";
-import { l as writeConfigFile, o as readConfigFileSnapshot } from "./config-CaE6v09P.js";
+import { c as resolveDefaultAgentId, p as DEFAULT_BOOTSTRAP_FILENAME, s as resolveAgentWorkspaceDir } from "./agent-scope-M302b8FW.js";
+import { l as writeConfigFile, o as readConfigFileSnapshot } from "./config-6zE4ZkSF.js";
 import { p as findTailscaleBinary } from "./auth-CBxE4UNz.js";
-import { r as installCompletion } from "./completion-cli-CC0KmaZL.js";
-import { a as gatewayInstallErrorHint, i as buildGatewayInstallPlan, n as GATEWAY_DAEMON_RUNTIME_OPTIONS, t as DEFAULT_GATEWAY_DAEMON_RUNTIME } from "./daemon-runtime-C-xevhQ5.js";
-import { _ as summarizeExistingConfig, a as ensureWorkspaceAndSessions, d as openUrl, f as printWizardHeader, h as resolveControlUiLinks, i as detectBrowserOpenSupport, m as randomToken, n as applyWizardMetadata, o as formatControlUiSshHint, p as probeGatewayReachable, t as DEFAULT_WORKSPACE, u as normalizeGatewayTokenInput, v as validateGatewayPasswordInput, y as waitForGatewayReachable } from "./onboard-helpers-CAxb1eBy.js";
+import { r as installCompletion } from "./completion-cli-DcTEhrAe.js";
+import { a as gatewayInstallErrorHint, i as buildGatewayInstallPlan, n as GATEWAY_DAEMON_RUNTIME_OPTIONS, t as DEFAULT_GATEWAY_DAEMON_RUNTIME } from "./daemon-runtime-Cbi2Ox6g.js";
+import { _ as summarizeExistingConfig, a as ensureWorkspaceAndSessions, d as openUrl, f as printWizardHeader, h as resolveControlUiLinks, i as detectBrowserOpenSupport, m as randomToken, n as applyWizardMetadata, o as formatControlUiSshHint, p as probeGatewayReachable, t as DEFAULT_WORKSPACE, u as normalizeGatewayTokenInput, v as validateGatewayPasswordInput, y as waitForGatewayReachable } from "./onboard-helpers-DKu_2enh.js";
 import { r as isSystemdUserServiceAvailable } from "./systemd-BEeuI9u0.js";
 import { t as resolveGatewayService } from "./service-U3nMjKlR.js";
-import { r as healthCommand } from "./health-1JahEOfG.js";
+import { r as healthCommand } from "./health-27WiwNrh.js";
 import { n as ensureControlUiAssetsBuilt, t as formatHealthCheckFailure } from "./health-format-Dug5Rbjg.js";
-import { i as promptAuthChoiceGrouped, n as warnIfModelConfigLooksOff, r as applyAuthChoice, t as resolvePreferredProviderForAuthChoice } from "./auth-choice-RnqXSEZo.js";
-import { t as WizardCancelledError } from "./prompts-CAgrJeru.js";
-import { a as promptDefaultModel, i as applyPrimaryModel, t as validateIPv4AddressInput } from "./ipv4-BmsAjDnB.js";
+import { a as ensureAuthenticated, i as promptAuthChoiceGrouped, n as warnIfModelConfigLooksOff, r as applyAuthChoice, t as resolvePreferredProviderForAuthChoice } from "./auth-choice-CPDNhDPT.js";
+import { t as WizardCancelledError } from "./prompts-vr_Njtil.js";
+import { a as promptDefaultModel, i as applyPrimaryModel, t as validateIPv4AddressInput } from "./ipv4-yUiIU5CD.js";
 import { t as buildWorkspaceHookStatus } from "./hooks-status-B53TbyZm.js";
 import { n as logConfigUpdated } from "./logging-B05aEFEO.js";
-import { t as runTui } from "./tui-Bx6Ty5e9.js";
-import { r as ensureCompletionCacheExists, t as checkShellCompletionStatus } from "./doctor-completion-DpxcKMA5.js";
+import { t as runTui } from "./tui--uEeSnES.js";
+import { r as ensureCompletionCacheExists, t as checkShellCompletionStatus } from "./doctor-completion-CZgNNZVd.js";
 import os from "node:os";
 import path from "node:path";
 import fs from "node:fs/promises";
@@ -282,6 +282,7 @@ async function finalizeOnboardingWizard(options) {
 	const gatewayStatusLine = gatewayProbe.ok ? "Gateway: reachable" : `Gateway: not detected${gatewayProbe.detail ? ` (${gatewayProbe.detail})` : ""}`;
 	const bootstrapPath = path.join(resolveUserPath(options.workspaceDir), DEFAULT_BOOTSTRAP_FILENAME);
 	const hasBootstrap = await fs.access(bootstrapPath).then(() => true).catch(() => false);
+	const shouldHatch = options.allowHatching !== false && hasBootstrap;
 	await prompter.note([
 		`Web UI: ${links.httpUrl}`,
 		settings.authMode === "token" && settings.gatewayToken ? `Web UI (with token): ${authedUrl}` : void 0,
@@ -294,7 +295,7 @@ async function finalizeOnboardingWizard(options) {
 	let hatchChoice = null;
 	let launchedTui = false;
 	if (!opts.skipUi && gatewayProbe.ok) {
-		if (hasBootstrap) await prompter.note([
+		if (shouldHatch) await prompter.note([
 			"This is where your agent's persistent identity begins.",
 			"Take your time with the bootstrap — the more context you provide,",
 			"the more coherent your agent will be.",
@@ -334,7 +335,7 @@ async function finalizeOnboardingWizard(options) {
 				token: settings.authMode === "token" ? settings.gatewayToken : void 0,
 				password: settings.authMode === "password" ? nextConfig.gateway?.auth?.password : "",
 				deliver: false,
-				message: hasBootstrap ? "Wake up, my friend!" : void 0
+				message: shouldHatch ? "Wake up, my friend!" : void 0
 			});
 			launchedTui = true;
 		} else if (hatchChoice === "web") {
@@ -619,6 +620,7 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 	});
 	const snapshot = await readConfigFileSnapshot();
 	const baseConfig = snapshot.valid ? snapshot.config : {};
+	const isFreshInstance = !snapshot.exists;
 	if (snapshot.exists && !snapshot.valid) {
 		await prompter.note(summarizeExistingConfig(baseConfig), "Invalid configuration detected");
 		if (snapshot.issues.length > 0) await prompter.note(snapshot.issues.map((iss) => `- ${iss.path}: ${iss.message}`).join("\n"), "Config issues");
@@ -643,12 +645,25 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 			mode: "local"
 		}
 	};
+	try {
+		const auth = await ensureAuthenticated({
+			name: opts.noxsoftAgentName,
+			displayName: opts.noxsoftDisplayName,
+			description: "ANIMA onboarding wizard"
+		});
+		await prompter.note(`${auth.registered ? "Registered" : "Authenticated"} as ${auth.agent.display_name} (@${auth.agent.name}).`, "NoxSoft authentication");
+	} catch (error) {
+		const message = error instanceof Error && error.message ? error.message : "Unknown NoxSoft authentication error.";
+		await prompter.note(message, "NoxSoft authentication failed");
+		runtime.exit(1);
+		return;
+	}
 	const authStore = ensureAuthProfileStore(void 0, { allowKeychainPrompt: false });
 	const authChoiceFromPrompt = opts.authChoice === void 0;
 	const authChoice = opts.authChoice ?? await promptAuthChoiceGrouped({
 		prompter,
 		store: authStore,
-		includeSkip: true
+		includeSkip: false
 	});
 	nextConfig = (await applyAuthChoice({
 		authChoice,
@@ -706,7 +721,10 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 	const settings = gateway.settings;
 	await writeConfigFile(nextConfig);
 	logConfigUpdated(runtime);
-	await ensureWorkspaceAndSessions(workspaceDir, runtime, { skipBootstrap: Boolean(nextConfig.agents?.defaults?.skipBootstrap) });
+	await ensureWorkspaceAndSessions(workspaceDir, runtime, {
+		skipBootstrap: Boolean(nextConfig.agents?.defaults?.skipBootstrap),
+		seedBootstrapOnFirstRun: isFreshInstance
+	});
 	nextConfig = await setupInternalHooks(nextConfig, runtime, prompter);
 	nextConfig = applyWizardMetadata(nextConfig, {
 		command: "onboard",
@@ -720,6 +738,7 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 		nextConfig,
 		workspaceDir,
 		settings,
+		allowHatching: isFreshInstance,
 		prompter,
 		runtime
 	});

package/dist/{orchestrator-DeKyZfHL.js → orchestrator-CZ5SiD5l.js}

@@ -1,6 +1,7 @@
+import { n as __exportAll } from "./chunk-BXK9XSlF.js";
 import { n as loadIdentity } from "./loader-DdJZwB8s.js";
 import { n as condenseComponent } from "./templates-C0bCBAHq.js";
-import { t as BudgetTracker } from "./budget-1SoJncof.js";
+import { t as BudgetTracker } from "./budget-OJQ-m-_V.js";
 import { homedir } from "node:os";
 import { join } from "node:path";
 import { mkdir, writeFile } from "node:fs/promises";
@@ -222,6 +223,7 @@ async function saveTranscript(baseDir, entry) {
 * Wraps the spawner with identity loading, prompt building,
 * budget tracking, and transcript storage.
 */
+var orchestrator_exports = /* @__PURE__ */ __exportAll({ SessionOrchestrator: () => SessionOrchestrator });
 var SessionOrchestrator = class {
 	constructor(budget, sessionsDir) {
 		this.budget = budget || new BudgetTracker();
@@ -352,4 +354,4 @@ var SessionOrchestrator = class {
 };
 
 //#endregion
-export { SessionOrchestrator };
+export { orchestrator_exports as n, SessionOrchestrator as t };

package/dist/{orchestrator-DAY2aHzl.js → orchestrator-KqoQDkvl.js}

@@ -1,6 +1,7 @@
+import { n as __exportAll } from "./chunk-BXK9XSlF.js";
 import { n as loadIdentity } from "./loader-82icMkcZ.js";
 import { n as condenseComponent } from "./templates-AZQd8okB.js";
-import { t as BudgetTracker } from "./budget-DYeweLNW.js";
+import { t as BudgetTracker } from "./budget-XH9_9WRg.js";
 import { execFile } from "node:child_process";
 import { homedir } from "node:os";
 import { join } from "node:path";
@@ -222,6 +223,7 @@ async function saveTranscript(baseDir, entry) {
 * Wraps the spawner with identity loading, prompt building,
 * budget tracking, and transcript storage.
 */
+var orchestrator_exports = /* @__PURE__ */ __exportAll({ SessionOrchestrator: () => SessionOrchestrator });
 var SessionOrchestrator = class {
 	constructor(budget, sessionsDir) {
 		this.budget = budget || new BudgetTracker();
@@ -352,4 +354,4 @@ var SessionOrchestrator = class {
 };
 
 //#endregion
-export { SessionOrchestrator };
+export { orchestrator_exports as n, SessionOrchestrator as t };

package/dist/{outbound-_KURrkN3.js → outbound-Cf_1Utlz.js}

@@ -1,7 +1,7 @@
 import { n as __exportAll } from "./chunk-BXK9XSlF.js";
 import { N as getChildLogger, o as createSubsystemLogger } from "./entry.js";
 import { T as toWhatsappJid, c as escapeRegExp } from "./utils-DwcweD55.js";
-import { i as loadConfig } from "./config-CaE6v09P.js";
+import { i as loadConfig } from "./config-6zE4ZkSF.js";
 import { f as normalizePollInput, m as resolveMarkdownTableMode, n as loadWebMedia, p as convertMarkdownTables, u as requireActiveWebListener } from "./media-B9MUhrat.js";
 import { randomUUID } from "node:crypto";
 

package/dist/{outbound-DptF-A0k.js → outbound-CwCRq4Cg.js}

@@ -1,7 +1,7 @@
 import { n as __exportAll } from "./chunk-BXK9XSlF.js";
 import { V as getChildLogger, t as createSubsystemLogger } from "./subsystem-BaJ-PqmA.js";
 import { E as toWhatsappJid, l as escapeRegExp } from "./utils-RdHkpqQp.js";
-import { i as loadConfig } from "./config-Bda-8Rdh.js";
+import { i as loadConfig } from "./config-9JRRXykP.js";
 import { a as requireActiveWebListener, c as resolveMarkdownTableMode, r as loadWebMedia, s as convertMarkdownTables, t as normalizePollInput } from "./polls-vAdf9owY.js";
 import { randomUUID } from "node:crypto";
 

package/dist/{outbound-ChmdbJju.js → outbound-DK71dddk.js}

@@ -1,11 +1,11 @@
 import { n as __exportAll } from "./chunk-BXK9XSlF.js";
-import { t as STATE_DIR } from "./paths-B-AkG5FD.js";
-import { C as normalizeAccountId, g as DEFAULT_ACCOUNT_ID } from "./workspace-BSBhp-B5.js";
-import { D as getChildLogger, t as createSubsystemLogger, v as logVerbose, x as shouldLogVerbose } from "./subsystem-BlEuMJjX.js";
-import { A as toWhatsappJid, c as logWarn, m as escapeRegExp, w as resolveUserPath } from "./exec-DJTRaYS6.js";
+import { t as STATE_DIR } from "./paths-D2eokayo.js";
+import { C as normalizeAccountId, g as DEFAULT_ACCOUNT_ID } from "./workspace-xzxJwPTB.js";
+import { D as getChildLogger, t as createSubsystemLogger, v as logVerbose, x as shouldLogVerbose } from "./subsystem-CJTCKTwb.js";
+import { A as toWhatsappJid, c as logWarn, m as escapeRegExp, w as resolveUserPath } from "./exec-CK8CHr7j.js";
 import { t as formatCliCommand } from "./command-format-CZk1W3UP.js";
-import { C as normalizeChannelId, _ as createPinnedDispatcher, a as resizeToJpeg, b as resolvePinnedHostnameWithPolicy, g as closeDispatcher, h as SsrFBlockedError, i as optimizeImageToPng, m as mediaKindFromMime, o as detectMime, p as maxBytesForKind, r as hasAlphaChannel, s as extensionForMime, t as convertHeicToJpeg } from "./image-ops-ZMEg1-kE.js";
-import { n as loadConfig } from "./config-BEiShGVB.js";
+import { C as normalizeChannelId, _ as createPinnedDispatcher, a as resizeToJpeg, b as resolvePinnedHostnameWithPolicy, g as closeDispatcher, h as SsrFBlockedError, i as optimizeImageToPng, m as mediaKindFromMime, o as detectMime, p as maxBytesForKind, r as hasAlphaChannel, s as extensionForMime, t as convertHeicToJpeg } from "./image-ops-DJjERl7d.js";
+import { n as loadConfig } from "./config-H_VHtPeY.js";
 import fs from "node:fs/promises";
 import os from "node:os";
 import path from "node:path";

package/dist/{parse-timeout-ByYuFf-D.js → parse-timeout-DhqvtdXz.js}

@@ -1,5 +1,5 @@
 import { lt as getActivePluginRegistry } from "./entry.js";
-import { D as listChannelDocks } from "./sessions-wzfE85C2.js";
+import { D as listChannelDocks } from "./sessions-C7jYs5Sc.js";
 import { i as listThinkingLevels } from "./pi-embedded-helpers-D_ZL9Ofu.js";
 
 //#region src/auto-reply/commands-args.ts

package/dist/{parse-timeout-PImvLfCF.js → parse-timeout-qnHqZvCW.js}

@@ -1,6 +1,6 @@
 import { T as getActivePluginRegistry } from "./subsystem-BaJ-PqmA.js";
 import { g as listThinkingLevels } from "./pi-embedded-helpers-6Tb87sgU.js";
-import { I as listChannelDocks } from "./sessions-DiW7DuJO.js";
+import { I as listChannelDocks } from "./sessions-0J_pFd44.js";
 
 //#region src/auto-reply/commands-args.ts
 function normalizeArgValue(value) {

package/dist/{paths-BzTTzuSa.js → paths-CmZenvlb.js}

@@ -1,5 +1,5 @@
-import { c as expandHomePrefix, s as resolveStateDir, u as resolveRequiredHomeDir } from "./paths-B-AkG5FD.js";
-import { _ as DEFAULT_AGENT_ID, w as normalizeAgentId } from "./workspace-BSBhp-B5.js";
+import { c as expandHomePrefix, s as resolveStateDir, u as resolveRequiredHomeDir } from "./paths-D2eokayo.js";
+import { _ as DEFAULT_AGENT_ID, w as normalizeAgentId } from "./workspace-xzxJwPTB.js";
 import os from "node:os";
 import path from "node:path";
 

package/dist/{paths-B-AkG5FD.js → paths-D2eokayo.js}

@@ -1,6 +1,6 @@
 import os from "node:os";
 import path from "node:path";
-import fs from "node:fs";
+import fsSync from "node:fs";
 
 //#region src/infra/home-dir.ts
 function normalize(value) {
@@ -111,7 +111,7 @@ function resolveCanonicalConfigPath(env = process.env, stateDir = resolveStateDi
 function resolveConfigPathCandidate(env = process.env, homedir = envHomedir(env)) {
 	const existing = resolveDefaultConfigCandidates(env, homedir).find((candidate) => {
 		try {
-			return fs.existsSync(candidate);
+			return fsSync.existsSync(candidate);
 		} catch {
 			return false;
 		}
@@ -128,7 +128,7 @@ function resolveConfigPath(env = process.env, stateDir = resolveStateDir(env, en
 	const stateOverride = env.ANIMA_STATE_DIR?.trim();
 	const configPath = path.join(stateDir, CONFIG_FILENAME);
 	try {
-		if (fs.existsSync(configPath)) return configPath;
+		if (fsSync.existsSync(configPath)) return configPath;
 	} catch {}
 	if (stateOverride) return configPath;
 	const defaultStateDir = resolveStateDir(env, homedir);

package/dist/{pi-auth-json-Ct4FUjxN.js → pi-auth-json-BYN-DI5a.js}

@@ -1,10 +1,10 @@
-import "./paths-B-AkG5FD.js";
-import "./workspace-BSBhp-B5.js";
-import "./subsystem-BlEuMJjX.js";
-import "./exec-DJTRaYS6.js";
-import "./agent-scope-BoQtElEh.js";
-import { a as listProfilesForProvider, o as ensureAuthProfileStore } from "./auth-profiles-DxPI9Swi.js";
-import "./model-selection-CtPzqKKJ.js";
+import "./paths-D2eokayo.js";
+import "./workspace-xzxJwPTB.js";
+import "./subsystem-CJTCKTwb.js";
+import "./exec-CK8CHr7j.js";
+import "./agent-scope-DWKQJUUZ.js";
+import { a as listProfilesForProvider, o as ensureAuthProfileStore } from "./auth-profiles-BqrAPweI.js";
+import "./model-selection-DPoLkg_t.js";
 import fs from "node:fs/promises";
 import path from "node:path";
 

package/dist/{pi-auth-json-QVWbBbGs.js → pi-auth-json-Crkmg439.js}

@@ -1,8 +1,8 @@
-import { l as ensureAuthProfileStore, s as listProfilesForProvider } from "./auth-profiles-DNpEm389.js";
+import { l as ensureAuthProfileStore, s as listProfilesForProvider } from "./auth-profiles-BYETsqKc.js";
 import "./utils-DwcweD55.js";
 import "./exec-DRQWu5Xi.js";
-import "./agent-scope-CuAaArMB.js";
-import "./model-selection-BjcyTJyU.js";
+import "./agent-scope-M302b8FW.js";
+import "./model-selection-DJcZ82uR.js";
 import "./file-lock-CxXn285m.js";
 import "./agent-paths-CrZhIsTW.js";
 import path from "node:path";

package/dist/{pi-auth-json-BvGZollA.js → pi-auth-json-PEKcHBMl.js}

@@ -2,9 +2,9 @@ import "./paths-zhVksOvm.js";
 import "./subsystem-BaJ-PqmA.js";
 import "./utils-RdHkpqQp.js";
 import "./exec-Bsq6vlwp.js";
-import "./agent-scope-kT_pK2eJ.js";
-import "./model-selection-MwLHFnAb.js";
-import { l as ensureAuthProfileStore, s as listProfilesForProvider } from "./auth-profiles-CzyebTC0.js";
+import "./agent-scope-vpVhWds3.js";
+import "./model-selection-C2dz3AhV.js";
+import { l as ensureAuthProfileStore, s as listProfilesForProvider } from "./auth-profiles-DZS4PC_i.js";
 import "./file-lock-BRW4LeL0.js";
 import path from "node:path";
 import fs from "node:fs/promises";