@oriro/orirocli 0.1.4 → 0.1.6

package/dist/cli.js

@@ -5,8 +5,8 @@ import { createRequire } from "module";
 import { Command } from "commander";
 
 // src/repl.ts
-import { createInterface as createInterface4 } from "readline/promises";
-import { stdin as stdin4, stdout as stdout4 } from "process";
+import { createInterface as createInterface5 } from "readline/promises";
+import { stdin as stdin5, stdout as stdout6 } from "process";
 
 // src/ui/theme.ts
 var PALETTE = {
@@ -71,8 +71,8 @@ ${tagline}
 }
 
 // src/onboarding/wrapper.ts
-import { createInterface as createInterface3 } from "readline/promises";
-import { stdin as stdin3, stdout as stdout3 } from "process";
+import { createInterface as createInterface4 } from "readline/promises";
+import { stdin as stdin4, stdout as stdout5 } from "process";
 
 // src/language/languages.ts
 var LANGUAGES = [
@@ -268,7 +268,24 @@ async function translateForUser(english, toLang) {
 
 // src/language/onboarding.ts
 import { createInterface } from "readline/promises";
-import { stdin, stdout } from "process";
+import { stdin, stdout as stdout2 } from "process";
+
+// src/onboarding/prompt.ts
+import { stdout } from "process";
+async function ask(rl, question) {
+  try {
+    return await rl.question(question);
+  } catch {
+    try {
+      rl.close();
+    } catch {
+    }
+    stdout.write(dim("\nBye.\n"));
+    process.exit(0);
+  }
+}
+
+// src/language/onboarding.ts
 var C = {
   teal: "\x1B[38;2;45;212;191m",
   purple: "\x1B[38;2;128;96;222m",
@@ -277,12 +294,12 @@ var C = {
   reset: "\x1B[0m"
 };
 function header() {
-  stdout.write(`
+  stdout2.write(`
   ${C.teal}\u25EF${C.reset} ${C.bold}ORIRO${C.reset} ${C.dim}\u2014 your terminal, your language${C.reset}
 `);
-  stdout.write(`  ${C.dim}You type and read in your language; the AI works in English for you.${C.reset}
+  stdout2.write(`  ${C.dim}You type and read in your language; the AI works in English for you.${C.reset}
 `);
-  stdout.write(`  ${C.dim}${LANGUAGES.length} languages \xB7 ${NEURAL_VOICE_COUNT} with a built-in voice (${C.purple}\u2605${C.dim}).${C.reset}
+  stdout2.write(`  ${C.dim}${LANGUAGES.length} languages \xB7 ${NEURAL_VOICE_COUNT} with a built-in voice (${C.purple}\u2605${C.dim}).${C.reset}
 
 `);
 }
@@ -290,38 +307,39 @@ function renderList(list) {
   const shown = list.slice(0, 15);
   shown.forEach((l, i) => {
     const star = l.neuralVoice ? `${C.purple}\u2605${C.reset}` : " ";
-    stdout.write(`  ${C.teal}${String(i + 1).padStart(2)}${C.reset}  ${star} ${l.name} ${C.dim}(${l.code})${C.reset}
+    stdout2.write(`  ${C.teal}${String(i + 1).padStart(2)}${C.reset}  ${star} ${l.name} ${C.dim}(${l.code})${C.reset}
 `);
   });
   if (list.length > shown.length) {
-    stdout.write(`  ${C.dim}\u2026 ${list.length - shown.length} more \u2014 keep typing to narrow.${C.reset}
+    stdout2.write(`  ${C.dim}\u2026 ${list.length - shown.length} more \u2014 keep typing to narrow.${C.reset}
 `);
   }
 }
 async function selectLanguageInteractive() {
   header();
-  const rl = createInterface({ input: stdin, output: stdout });
+  const rl = createInterface({ input: stdin, output: stdout2 });
   try {
     let list = searchLanguages("");
     renderList(list);
     for (; ; ) {
-      const ans = (await rl.question(`
+      const ans = (await ask(rl, `
   ${C.teal}\u203A${C.reset} Type a language, or a number to pick: `)).trim();
       const n = Number(ans);
-      const byNumber = ans && Number.isInteger(n) && n >= 1 && n <= list.length ? list[n - 1] : void 0;
+      const shown = Math.min(15, list.length);
+      const byNumber = ans && Number.isInteger(n) && n >= 1 && n <= shown ? list[n - 1] : void 0;
       if (byNumber) return byNumber;
       const direct = languageByCode(ans);
       if (direct) return direct;
       list = searchLanguages(ans);
       if (list.length === 0) {
-        stdout.write(`  ${C.dim}No match \u2014 try the English name or ISO code.${C.reset}
+        stdout2.write(`  ${C.dim}No match \u2014 try the English name or ISO code.${C.reset}
 `);
         list = searchLanguages("");
       } else {
         const only = list.length === 1 ? list[0] : void 0;
         if (only) return only;
       }
-      stdout.write("\n");
+      stdout2.write("\n");
       renderList(list);
     }
   } finally {
@@ -336,7 +354,7 @@ async function runLanguageOnboarding() {
   }
   const lang = await selectLanguageInteractive();
   setTerminalLanguage(lang);
-  stdout.write(
+  stdout2.write(
     `
   ${C.teal}\u25EF${C.reset} ${C.bold}${lang.name}${C.reset} is now your terminal language. ${C.dim}Change it anytime with ${C.reset}${C.teal}oriro language${C.reset}
 
@@ -354,11 +372,11 @@ var INJECTION_PATTERNS = [
   /\[INST\]|<<SYS>>/
 ];
 var IOC_PATTERNS = [
-  ["ioc:secret_read", /\bread\b[^\n]*(\.ssh|\.env\b|id_rsa)/i],
+  ["ioc:secret_read", /\bread\b[^\n]*(\.ssh(?![-.\w])|\.env\b|id_rsa)/i],
   ["ioc:exfil_post", /\bsend\b[^\n]*\bto\s+https?:\/\//i],
   ["ioc:env_exfil", /process\.env[^\n]{0,40}https?:\/\//i],
   ["ioc:pipe_shell", /(curl|wget)[^\n]*\|\s*(sh|bash|node)\b/i],
-  ["ioc:pipe_exfil", /(cat|type|read)[^\n]*(\.ssh|id_rsa|\.env\b)[^\n]*\|\s*(curl|wget|nc)\b/i],
+  ["ioc:pipe_exfil", /(cat|type|read)[^\n]*(\.ssh(?![-.\w])|id_rsa|\.env\b)[^\n]*\|\s*(curl|wget|nc)\b/i],
   ["ioc:exfiltrate", /exfiltrat/i],
   ["ioc:obf_loader", /eval\(\s*(atob|Buffer\.from)\(/i],
   ["ioc:cp_loader", /child_process[\s\S]{0,40}(atob|fromCharCode)/i]
@@ -404,6 +422,12 @@ ${typeof params === "string" ? params : JSON.stringify(params ?? "")}`;
   if (hasHiddenUnicode(blob)) return { safe: false, threat: "hidden_unicode" };
   return { safe: true };
 }
+function scanExecCommand(text) {
+  const ioc = firstIOC(text);
+  if (ioc) return { safe: false, threat: ioc };
+  if (hasHiddenUnicode(text)) return { safe: false, threat: "hidden_unicode" };
+  return { safe: true };
+}
 
 // src/guardian/rules.ts
 var block = (rule, reason, severity = "critical") => ({
@@ -412,7 +436,7 @@ var block = (rule, reason, severity = "critical") => ({
   rule,
   reason
 });
-var ask = (rule, reason, severity = "warning") => ({
+var ask2 = (rule, reason, severity = "warning") => ({
   decision: "ask",
   severity,
   rule,
@@ -420,162 +444,220 @@ var ask = (rule, reason, severity = "warning") => ({
 });
 var cmdOf = (c) => (c.command ?? "").toLowerCase();
 var norm = (s) => s.replace(/\s+/g, " ").trim();
-function isDangerousRm(cmd) {
-  if (!/\brm\b/i.test(cmd)) return false;
-  const hasRecursive = /(?:^|\s)-[a-z]*r/i.test(cmd) || /--recursive\b/i.test(cmd);
-  const hasForce = /(?:^|\s)-[a-z]*f/i.test(cmd) || /--force\b/i.test(cmd);
-  if (!hasRecursive || !hasForce) return false;
-  if (/--no-preserve-root\b/i.test(cmd)) return true;
-  if (/(?:\s|^)(\/|~|\.|\*|\$home)(?:\s|$)/i.test(cmd)) return true;
-  return /(?:\s|^)\/(etc|usr|bin|sbin|var|boot|lib|lib64|sys|proc|dev|root|home|opt|windows|system32)(?:[\\/]|\s|$)/i.test(
-    cmd
-  );
+var anyMatch = (patterns, text) => patterns.some((re) => re.test(text));
+var stripQuotes = (t) => t.replace(/^['"]+/, "").replace(/['"]+$/, "");
+function statements(cmd) {
+  return cmd.split(/(?:&&|\|\||[;|&\n])+/g).map((s) => s.trim()).filter(Boolean);
+}
+function words(stmt) {
+  return stmt.split(/\s+/).map(stripQuotes).filter(Boolean);
+}
+function commandWord(stmt) {
+  const w = words(stmt);
+  let i = 0;
+  while (i < w.length && /^(sudo|nohup|nice|time|exec|command|builtin|then|do|else)$/i.test(w[i] ?? "")) i++;
+  if (i < w.length && /^env$/i.test(w[i] ?? "")) {
+    i++;
+    while (i < w.length && /^[\w.]+=/.test(w[i] ?? "")) i++;
+  }
+  while (i < w.length && /^[\w.]+=/.test(w[i] ?? "")) i++;
+  return (w[i] ?? "").replace(/^.*[\\/]/, "").toLowerCase();
+}
+var SYS_DIR = "(etc|usr|bin|sbin|var|boot|lib|lib64|sys|proc|dev|root|opt|windows|system32|programdata|library|applications|system|private|cores|volumes|network)";
+function classifyRmTarget(raw) {
+  let t = stripQuotes(raw).trim();
+  if (!t || t.startsWith("-")) return "safe";
+  t = t.replace(/\$\{?home\}?/gi, "~");
+  if (/^(\/|\/\*|~|~\/|~\/\*|\.|\.\/|\.\/\*|\*|\.\*)$/.test(t)) return "danger";
+  if (new RegExp(`^/${SYS_DIR}(/\\*?)?$`, "i").test(t)) return "danger";
+  if (/^\/home(\/[^/]+)?\/?\*?$/i.test(t)) return "danger";
+  if (new RegExp(`^/${SYS_DIR}/.+`, "i").test(t)) return "system-sub";
+  return "safe";
+}
+function rmVerdict(stmt) {
+  const cw = commandWord(stmt);
+  if (cw !== "rm") return null;
+  const w = words(stmt);
+  const flags = w.filter((x) => x.startsWith("-")).join(" ");
+  const recursive = /(^|[^-])-[a-z]*r/i.test(" " + flags) || /--recursive\b/i.test(flags);
+  const force = /(^|[^-])-[a-z]*f/i.test(" " + flags) || /--force\b/i.test(flags);
+  const noPreserve = /--no-preserve-root\b/i.test(flags);
+  if (!recursive || !force) return null;
+  if (noPreserve) return block("fs-destruction", "Recursive force-delete with --no-preserve-root");
+  const targets = w.slice(1).filter((x) => !x.startsWith("-")).map(classifyRmTarget);
+  if (targets.includes("danger")) return block("fs-destruction", "Recursive force-delete of root/home/cwd/system path");
+  if (targets.includes("system-sub")) return ask2("fs-destruction", "Recursive force-delete inside a system directory");
+  return null;
 }
+var DISK = "(sd|nvme|disk|hd|vd|xvd|mmcblk|loop)";
 var FS_DESTRUCTION = [
-  /\bmkfs\.?\w*\s+\/dev\//i,
+  new RegExp(`\\bmkfs\\.?\\w*\\s+/dev/${DISK}`, "i"),
   // reformat a disk
-  /\bdd\s+.*\bof=\/dev\/(sd|nvme|disk|hd)/i,
+  new RegExp(`\\bdd\\b[^\\n]*\\bof=/dev/${DISK}`, "i"),
   // overwrite raw disk
-  /\b(shutdown|reboot|halt|poweroff)\b/i,
-  // host disruption
+  new RegExp(`>\\s*/dev/${DISK}\\w`, "i"),
+  // redirect over raw disk
   /:\s*\(\s*\)\s*\{\s*:\s*\|\s*:\s*&\s*\}\s*;\s*:/,
-  // fork bomb :(){ :|:& };:
-  /\bremove-item\b.*-recurse.*-force.*[\\\/](windows|system32|users)\b/i,
+  // fork bomb
+  /\bremove-item\b.*-recurse.*-force.*[\\/](windows|system32|users)\b/i,
   // PS recursive wipe
   /\b(format|cipher\s+\/w)\b.*[a-z]:\\?/i,
   // windows format / wipe-free-space
-  />\s*\/dev\/(sd|nvme|disk|hd)\w/i
-  // redirect over raw disk
+  /\bfind\b[^\n]*\s(-delete\b|-exec\s+rm\b)/i,
+  // find … -delete / -exec rm
+  /\bshred\b\s+(-|\S*\/dev\/)/i,
+  // shred a device/file destructively
+  new RegExp(`\\btruncate\\b[^\\n]*\\s/dev/${DISK}`, "i"),
+  // truncate a device
+  /\bmv\b[^\n]*\s\/dev\/null\b/i,
+  // mv important → /dev/null
+  /\bchmod\b\s+-[a-z]*r[a-z]*\s+0{3,4}\b/i,
+  // chmod -R 000 (strip all perms recursively)
+  /\bwipefs\b/i
 ];
+var HOST_DISRUPT = /* @__PURE__ */ new Set(["shutdown", "reboot", "halt", "poweroff"]);
+var FETCH = "(curl|wget|fetch|httpie)";
+var SHELL = "(sh|bash|zsh|dash|ksh|sudo\\s+sh|sudo\\s+bash|python\\d?|node|perl|ruby|php)";
 var REMOTE_EXEC = [
-  /\b(curl|wget|fetch)\b[^\n|]*\|\s*(sudo\s+)?(sh|bash|zsh|python\d?|node|perl|ruby)\b/i,
+  new RegExp(`\\b${FETCH}\\b[^\\n|]*\\|\\s*(sudo\\s+)?${SHELL}\\b`, "i"),
   // curl … | sh
+  new RegExp(`(?:^|[\\s;&|(])(bash|sh|zsh|ksh|source|\\.)\\s*<\\s*\\(\\s*${FETCH}`, "i"),
+  // sh <(curl) / bash<(curl) / . <(curl)
+  new RegExp(`\\b(bash|sh|zsh|ksh|eval)\\b[^\\n]*\\$\\(\\s*${FETCH}\\b`, "i"),
+  // bash -c "$(curl)"
+  new RegExp(`\\$\\(\\s*${FETCH}\\b[^)]*\\)`, "i"),
+  // bare $(curl …) substitution
+  /`\s*(curl|wget|fetch)\b/i,
+  // backtick `curl`
   /\b(irm|iwr|invoke-webrequest|invoke-restmethod)\b[^\n|]*\|\s*(iex|invoke-expression)/i,
   // PS download|iex
   /\biex\b\s*\(\s*(new-object\s+net\.webclient|.*downloadstring)/i,
   // iex(New-Object Net.WebClient…)
-  /\bbash\s+<\s*\(\s*(curl|wget)/i,
-  // bash <(curl …)
-  /\beval\b[^\n]*\$\(\s*(curl|wget|fetch)\b/i,
-  // eval "$(curl …)"
-  /\bpython\d?\s+-c\b[^\n]*urllib|requests\.get[^\n]*exec\(/i
-  // python one-liner fetch+exec
+  /\bpython\d?\s+-c\b[^\n]*(urllib|requests|httpx|socket|os\.system|subprocess|exec\(|eval\()/i,
+  // python -c fetch/exec
+  /\b(perl|ruby|node|php)\s+-(e|r)\b[^\n]*(http|socket|system|exec|eval|fsockopen|downloadstring)/i,
+  // perl/ruby/node/php -e RCE
+  /\b(base64\s+(-d|--decode)|xxd\s+-r|openssl\s+enc\s+-d)\b[^\n|]*\|\s*(sudo\s+)?(sh|bash|zsh|python\d?|node|perl|ruby)\b/i,
+  // decode|sh
+  new RegExp(`\\b${FETCH}\\b[^\\n]*\\s-[a-z]*[oO]\\b[^\\n]*&&[^\\n]*(chmod\\s+\\+x|\\./|\\bsh\\b|\\bbash\\b)`, "i")
+  // download then exec
 ];
 var REVERSE_SHELL = [
-  /\bnc\b\s+(-[a-z]*e|.*-e\s+\/bin\/(sh|bash))/i,
-  // nc -e /bin/sh
+  /\b(nc|ncat|netcat)\b[^\n]*\s-[a-z]*e\b/i,
+  // nc/ncat -e
   /\b(ncat|socat)\b[^\n]*exec[: ]/i,
   // socat … exec:
-  /\b(bash|sh)\s+-i\b[^\n]*>&?\s*\/dev\/tcp\//i,
+  /\bsocat\b[^\n]*tcp[:-][^\n]*exec/i,
+  // socat tcp … exec
+  /\b(bash|sh|zsh)\s+-i\b[^\n]*>&?\s*\/dev\/tcp\//i,
   // bash -i >& /dev/tcp/…
-  /\/dev\/(tcp|udp)\/\d{1,3}(\.\d{1,3}){3}\//,
-  // /dev/tcp/<ip>/
-  /\bpython\d?\b[^\n]*socket\.socket[^\n]*subprocess|pty\.spawn/i
+  /\/dev\/(tcp|udp)\/[\w.\-]+\/\d+/i,
+  // /dev/tcp/<host-or-ip>/<port>
+  /\bpython\d?\b[^\n]*socket\.socket[^\n]*(subprocess|pty\.spawn|exec)/i,
   // python reverse shell
+  /\b(perl|php|ruby)\b[^\n]*(fsockopen|socket)[^\n]*(exec|system|\/bin\/(sh|bash))/i,
+  // perl/php/ruby reverse shell
+  /\bmkfifo\b[^\n]*(\bnc\b|\bncat\b)/i
+  // mkfifo backpipe
 ];
-var SECRET_PATHS = /(\.ssh\/id_|\.ssh\/.*_rsa|\.aws\/credentials|\.oriro\/credentials|\.config\/gcloud|\.env(\.|\b)|\.netrc|id_ed25519|\.kube\/config|wallet\.dat|\.gnupg\/)/i;
-var NET_SINK = /\b(curl|wget|nc|ncat|socat|scp|rsync|ftp|tftp|invoke-webrequest|invoke-restmethod)\b/i;
+var SECRET_PATHS = /(\.ssh(?![-.\w])|authorized_keys|id_rsa|id_ed25519|id_ecdsa|\.aws(?![-.\w])|\.oriro[\\/]credentials|\.config[\\/]gcloud|\.env(\.|\b)|\.netrc|\.npmrc|\.pypirc|\.docker(?![-.\w])|\.git-credentials|\.kube(?![-.\w])|wallet\.dat|\.gnupg(?![-.\w])|cookies(\.sqlite)?|login\s*data)/i;
+var NET_SINK = /\b(curl|wget|nc|ncat|netcat|socat|scp|rsync|ftp|tftp|invoke-webrequest|invoke-restmethod)\b/i;
 var ENV_EXFIL = [
   /\$\(\s*(printenv|env)\b/i,
+  // $(printenv X) / $(env)
+  /\bprintenv\b/i,
+  // printenv … (paired with a net sink below = exfil)
+  /\benv\s*\|/i,
+  // env | …
   /\$\(\s*cat\b[^)]*(\.ssh|\.aws|\.env|\.netrc|credential|secret|token|id_rsa|id_ed25519)/i
+  // $(cat <secret>)
 ];
+var ENV_VAR_IN_BODY = /\s--?(d|data|data-binary|data-raw|form|post|body|upload-file)\b[^\n]*\$\{?\w*(secret|token|api[_-]?key|password|passwd|credential|aws_)\w*\}?/i;
 var PERSISTENCE = [
   /\bcrontab\b\s+(-|\S+)/i,
-  // crontab install
   />>?\s*~?\/?\.(bashrc|zshrc|bash_profile|profile|zprofile)\b/i,
-  // append to shell rc
+  />>?[^\n]*\.ssh[\\/]authorized_keys/i,
+  // implant an SSH key (backdoor)
   /\b(launchctl\s+load|systemctl\s+enable|sc\s+create|new-service)\b/i,
-  // service install
   /\bregistry::|reg\s+add\b.*\\run\b/i,
-  // windows Run key persistence
-  /[\\\/]start menu[\\\/]programs[\\\/]startup[\\\/]/i,
-  // windows startup folder
+  /[\\/]start menu[\\/]programs[\\/]startup[\\/]/i,
   /\bschtasks\b\s+\/create/i
-  // scheduled task
 ];
 var GUARDIAN_TAMPER = [
   /\boriro\b.*\bguardian\b.*\b(disable|off|stop|uninstall)\b/i,
-  // disable Guardian via command
-  /[\\\/]\.oriro[\\\/]guardian/i
-  // direct write to Guardian's own config/state
+  /[\\/]\.oriro[\\/]guardian/i,
+  // direct path to Guardian's config/state
+  /\bguardian\.json\b/i
+  // any write referencing guardian.json (cd … && > guardian.json)
 ];
 var TAMPER = [
   /\bchmod\s+-?\s*0?777\b/i,
-  // world-writable
   /\b(ufw|firewall-cmd|iptables)\b.*\b(disable|stop|flush|-f)\b/i,
-  // firewall down
   /\bset-mppreference\b.*-disable/i,
-  // disable Defender
   /\bhistory\s+-c\b|\bunset\s+histfile\b|>\s*~?\/?\.bash_history/i
-  // wipe history
 ];
 var MALWARE = [
   /\b(xmrig|minerd|cgminer|cpuminer|stratum\+tcp)\b/i,
   /\b(nanopool|minexmr|supportxmr|pool\.minexmr)\b/i
 ];
-function anyMatch(patterns, text) {
-  return patterns.some((re) => re.test(text));
-}
 var DEFAULT_RULES = [
   {
     id: "fs-destruction",
-    description: "Block recursive deletes of root/home, disk reformats, fork bombs, host shutdown.",
+    description: "Block recursive deletes of root/home/system paths, disk reformats, fork bombs, host shutdown.",
     match: (c) => {
-      const cmd = norm(cmdOf(c));
-      return isDangerousRm(cmd) || anyMatch(FS_DESTRUCTION, cmd) ? block("fs-destruction", "Destructive filesystem/system operation") : null;
+      const raw = cmdOf(c);
+      const cmd = norm(raw);
+      for (const stmt of statements(cmd)) {
+        const v = rmVerdict(stmt);
+        if (v) return v;
+        if (HOST_DISRUPT.has(commandWord(stmt))) return block("fs-destruction", "Host shutdown/reboot");
+      }
+      return anyMatch(FS_DESTRUCTION, cmd) ? block("fs-destruction", "Destructive filesystem/system operation") : null;
     }
   },
   {
     id: "remote-code-exec",
-    description: "Block pull-and-run of remote code (curl|sh, iex(downloadString), bash <(curl)).",
+    description: "Block pull-and-run of remote code (curl|sh, $(curl), sh <(curl), bash -c $(curl), decode|sh).",
     match: (c) => anyMatch(REMOTE_EXEC, norm(cmdOf(c))) ? block("remote-code-exec", "Downloading and executing remote code") : null
   },
   {
     id: "reverse-shell",
-    description: "Block reverse shells / remote backdoors (nc -e, /dev/tcp, socat exec).",
+    description: "Block reverse shells / remote backdoors (nc -e, /dev/tcp/<host>, socat exec, mkfifo backpipe).",
     match: (c) => anyMatch(REVERSE_SHELL, norm(cmdOf(c))) ? block("reverse-shell", "Opening a reverse shell / remote backdoor") : null
   },
   {
     id: "secret-exfiltration",
-    description: "Block reading a credential/key file and piping it off the machine.",
+    description: "Block reading a credential/key file or env secret and sending it off the machine.",
     match: (c) => {
       const cmd = norm(cmdOf(c));
-      if (cmd && SECRET_PATHS.test(cmd) && NET_SINK.test(cmd)) {
-        return block("secret-exfiltration", "Reading secrets and sending them off the machine");
-      }
+      if (!cmd || !NET_SINK.test(cmd)) return null;
+      if (SECRET_PATHS.test(cmd)) return block("secret-exfiltration", "Reading secrets and sending them off the machine");
+      if (anyMatch(ENV_EXFIL, cmd) || ENV_VAR_IN_BODY.test(cmd)) return block("secret-exfiltration", "Sending environment variables / secrets off the machine");
       return null;
     }
   },
   {
-    id: "env-exfiltration",
-    description: "Block dumping env vars / secret files into a network request (curl \u2026$(printenv SECRET)).",
+    id: "persistence",
+    description: "Block SSH-key implants; flag cron/rc/startup/service edits used for Trojan persistence.",
     match: (c) => {
       const cmd = norm(cmdOf(c));
-      return cmd && NET_SINK.test(cmd) && anyMatch(ENV_EXFIL, cmd) ? block("env-exfiltration", "Sending environment variables / secret files off the machine") : null;
+      if (/>>?[^\n]*\.ssh[\\/]authorized_keys/i.test(cmd)) return block("persistence", "Implanting an SSH key (backdoor)");
+      return anyMatch(PERSISTENCE, cmd) ? ask2("persistence", "Installing a persistent foothold (cron/startup/service)") : null;
     }
   },
-  {
-    id: "persistence",
-    description: "Flag cron/rc/startup/service edits used for Trojan persistence.",
-    match: (c) => anyMatch(PERSISTENCE, norm(cmdOf(c))) ? ask("persistence", "Installing a persistent foothold (cron/startup/service)") : null
-  },
   {
     id: "guardian-self-defense",
     description: "Block any attempt to disable, uninstall, or rewrite Guardian's own config/state.",
     match: (c) => {
-      if (anyMatch(GUARDIAN_TAMPER, norm(cmdOf(c)))) {
-        return block("guardian-self-defense", "Attempt to disable or tamper with Guardian itself");
-      }
-      if (c.paths?.some((p) => /[\\/]\.oriro[\\/]guardian/i.test(p))) {
-        return block("guardian-self-defense", "Direct write to Guardian's own config/state");
-      }
+      if (anyMatch(GUARDIAN_TAMPER, norm(cmdOf(c)))) return block("guardian-self-defense", "Attempt to disable or tamper with Guardian itself");
+      if (c.paths?.some((p) => /[\\/]\.oriro[\\/]guardian/i.test(p))) return block("guardian-self-defense", "Direct write to Guardian's own config/state");
       return null;
     }
   },
   {
     id: "security-tamper",
     description: "Flag disabling firewall/Defender or wiping history.",
-    match: (c) => anyMatch(TAMPER, norm(cmdOf(c))) ? ask("security-tamper", "Disabling security controls or covering tracks") : null
+    match: (c) => anyMatch(TAMPER, norm(cmdOf(c))) ? ask2("security-tamper", "Disabling security controls or covering tracks") : null
   },
   {
     id: "malware-signature",
@@ -584,9 +666,10 @@ var DEFAULT_RULES = [
   },
   {
     id: "v3lite",
-    description: "Guardian V3 Lite: prompt-injection + IOC catalog (exfil/dropper/obfuscated-loader/RCE-pipe) + hidden-unicode scan on the tool call.",
+    description: "Guardian V3 Lite on the tool call: IOC catalog + hidden-unicode (exec); + injection scan for untrusted MCP params.",
     match: (c) => {
-      const r = scanToolCall(c.toolName, c.command ?? "", c.params);
+      const r = c.kind === "mcp" ? scanToolCall(c.toolName, c.command ?? "", c.params) : scanExecCommand(`${c.toolName}
+${c.command ?? ""}`);
       return r.safe ? null : block("v3lite", `Guardian V3 Lite flagged ${r.threat}`);
     }
   },
@@ -596,10 +679,9 @@ var DEFAULT_RULES = [
     match: (c) => {
       if (c.kind !== "fs" || !c.paths?.length) return null;
       const hit = c.paths.find(
-        (p) => SECRET_PATHS.test(p) || /[\\\/]\.ssh[\\\/]/i.test(p) || // any write into ~/.ssh (e.g. authorized_keys = backdoor)
-        /[\\\/](etc|boot|sys|windows[\\\/]system32)[\\\/]/i.test(p)
+        (p) => SECRET_PATHS.test(p) || /[\\/]\.ssh[\\/]/i.test(p) || /[\\/](etc|boot|sys|windows[\\/]system32)[\\/]/i.test(p)
       );
-      return hit ? ask("sensitive-path-write", `Writing to a sensitive location: ${hit}`) : null;
+      return hit ? ask2("sensitive-path-write", `Writing to a sensitive location: ${hit}`) : null;
     }
   }
 ];
@@ -1046,7 +1128,7 @@ async function speak(text, opts = {}) {
 }
 
 // src/avatar/onboarding.ts
-import { stdin as stdin2, stdout as stdout2 } from "process";
+import { stdin as stdin2, stdout as stdout3 } from "process";
 import { createInterface as createInterface2 } from "readline/promises";
 
 // src/avatar/system-voice.ts
@@ -1120,7 +1202,7 @@ var C3 = {
   reset: "\x1B[0m"
 };
 async function previewAvatar(avatar) {
-  stdout2.write(
+  stdout3.write(
     `
   ${C3.teal}\u25EF${C3.reset} ${C3.bold}${avatar.slug}${C3.reset} is now your terminal face. ${C3.dim}Change anytime with ${C3.reset}${C3.teal}oriro avatar${C3.reset}
 `
@@ -1131,19 +1213,19 @@ async function previewAvatar(avatar) {
     png = readCachedAvatar(avatar.slug);
   } catch {
   }
-  stdout2.write("\n" + renderAvatar(avatar, png) + "\n");
+  stdout3.write("\n" + renderAvatar(avatar, png) + "\n");
   setupSystemVoice();
   const spoke = await speak(`Hi, I'm ${avatar.slug}, your ORIRO terminal face. I'll speak your replies.`, {
     voiceId: avatar.slug,
     lang: "en-US"
   });
-  if (spoke) stdout2.write(`  ${C3.dim}(spoken aloud in your terminal's voice)${C3.reset}
+  if (spoke) stdout3.write(`  ${C3.dim}(spoken aloud in your terminal's voice)${C3.reset}
 `);
 }
 async function selectAvatarInteractive() {
-  const rl = createInterface2({ input: stdin2, output: stdout2 });
+  const rl = createInterface2({ input: stdin2, output: stdout3 });
   try {
-    stdout2.write(
+    stdout3.write(
       `
   ${C3.teal}\u25EF${C3.reset} ${C3.bold}Choose your ORIRO avatar${C3.reset} ${C3.dim}\u2014 ${AVATAR_COUNT} faces, it floats in your terminal and speaks.${C3.reset}
 
@@ -1151,36 +1233,46 @@ async function selectAvatarInteractive() {
     );
     const cats = avatarCategories();
     cats.forEach(
-      (cat2, i) => stdout2.write(
+      (cat2, i) => stdout3.write(
         `  ${C3.teal}${String(i + 1).padStart(2)}${C3.reset}  ${cat2} ${C3.dim}(${avatarsInCategory(cat2).length})${C3.reset}
 `
       )
     );
-    const cn = Number(
-      (await rl.question(`
-  ${C3.teal}\u203A${C3.reset} Pick a category number: `)).trim()
-    );
-    const cat = cats[cn - 1];
-    if (!cat) {
-      stdout2.write("  No category chosen.\n");
-      return null;
+    let cat;
+    for (; ; ) {
+      const ans = (await ask(rl, `
+  ${C3.teal}\u203A${C3.reset} Pick a category number ${C3.dim}(or Enter to skip)${C3.reset}: `)).trim();
+      if (!ans) {
+        stdout3.write(`  ${C3.dim}Skipped \u2014 no avatar.${C3.reset}
+`);
+        return null;
+      }
+      const n = Number(ans);
+      cat = Number.isInteger(n) ? cats[n - 1] : void 0;
+      if (cat) break;
+      stdout3.write(`  ${C3.dim}Please enter a number from the list.${C3.reset}
+`);
     }
     const list = avatarsInCategory(cat);
-    stdout2.write("\n");
+    stdout3.write("\n");
     list.forEach(
-      (a, i) => stdout2.write(`  ${C3.teal}${String(i + 1).padStart(2)}${C3.reset}  ${a.slug}
+      (a, i) => stdout3.write(`  ${C3.teal}${String(i + 1).padStart(2)}${C3.reset}  ${a.slug}
 `)
     );
-    const an = Number(
-      (await rl.question(`
-  ${C3.teal}\u203A${C3.reset} Pick an avatar number: `)).trim()
-    );
-    const chosen = list[an - 1];
-    if (!chosen) {
-      stdout2.write("  No avatar chosen.\n");
-      return null;
+    for (; ; ) {
+      const ans = (await ask(rl, `
+  ${C3.teal}\u203A${C3.reset} Pick an avatar number ${C3.dim}(or Enter to skip)${C3.reset}: `)).trim();
+      if (!ans) {
+        stdout3.write(`  ${C3.dim}Skipped \u2014 no avatar.${C3.reset}
+`);
+        return null;
+      }
+      const n = Number(ans);
+      const chosen = Number.isInteger(n) ? list[n - 1] : void 0;
+      if (chosen) return chosen;
+      stdout3.write(`  ${C3.dim}Please enter a number from the list.${C3.reset}
+`);
     }
-    return chosen;
   } finally {
     rl.close();
   }
@@ -1235,1668 +1327,25 @@ function hasScribeChoice() {
   }
 }
 
-// src/onboarding/wrapper.ts
-function isFirstRun() {
-  return !isLanguageConfigured();
-}
-async function askYesNo(question) {
-  const rl = createInterface3({ input: stdin3, output: stdout3 });
-  try {
-    const a = (await rl.question(`${question} ${dim("[Y/n]")} `)).trim().toLowerCase();
-    return a === "" || a === "y" || a === "yes";
-  } finally {
-    rl.close();
-  }
-}
-async function runOnboarding() {
-  stdout3.write(banner());
-  await runLanguageOnboarding();
-  await activateGuardian();
-  stdout3.write(`  ${accent("\u{1F6E1} Guardian V3")} is on by default. ${accent("\u{1F9ED} Head")} is ready.
-
-`);
-  if (!isAvatarConfigured()) await runAvatarOnboarding();
-  if (!hasScribeChoice()) {
-    const yes = await askYesNo(
-      "Remember with me? The Scriber keeps your work in context on THIS machine only \u2014 it never leaves it."
-    );
-    setScribeConsent(yes);
-    stdout3.write(yes ? `  ${accent("\u{1F4D3} Scriber")} on.
-` : `  ${dim("Scriber off \u2014 `oriro scribe on` anytime.")}
-`);
-  }
-  stdout3.write(`
-  ${accent("ORIRO is ready.")} ${dim("Type to chat \xB7 /exit to leave")}
-
-`);
-}
-
-// src/onboarding/assemble.ts
-import {
-  createAgentSession as createAgentSession2,
-  AuthStorage as AuthStorage2,
-  ModelRegistry as ModelRegistry2,
-  SessionManager as SessionManager2,
-  SettingsManager,
-  DefaultResourceLoader,
-  getAgentDir
-} from "@earendil-works/pi-coding-agent";
-
-// src/routers/mux-provider.ts
-import { streamSimple as piStreamSimple, createAssistantMessageEventStream } from "@earendil-works/pi-ai";
-import { register as registerOpenAICompletions } from "@earendil-works/pi-ai/openai-completions";
-
-// src/routers/mux.ts
-import { existsSync as existsSync3, mkdirSync as mkdirSync5, readFileSync as readFileSync8, writeFileSync as writeFileSync7 } from "fs";
-import { join as join10 } from "path";
-var COOLDOWN_DEFAULT_MS = 6e4;
-var UNHEALTHY_AFTER = 3;
-var RouterMux = class {
-  stats = /* @__PURE__ */ new Map();
-  now;
-  constructor(routerIds, now = () => Date.now()) {
-    this.now = now;
-    for (const id of routerIds) {
-      this.stats.set(id, {
-        id,
-        latencyMs: Number.POSITIVE_INFINITY,
-        healthy: true,
-        cooldownUntil: 0,
-        consecutiveErrors: 0
-      });
-    }
-  }
-  /** Available routers, best-first (healthy, not cooling down, lowest latency). */
-  ranked() {
-    const t = this.now();
-    return [...this.stats.values()].filter((s) => s.healthy && s.cooldownUntil <= t).sort((a, b) => a.latencyMs - b.latencyMs).map((s) => s.id);
-  }
-  recordSuccess(id, latencyMs) {
-    const s = this.stats.get(id);
-    if (!s) return;
-    s.latencyMs = s.latencyMs === Number.POSITIVE_INFINITY ? latencyMs : 0.7 * s.latencyMs + 0.3 * latencyMs;
-    s.consecutiveErrors = 0;
-    s.healthy = true;
-  }
-  recordFailure(id, err) {
-    const s = this.stats.get(id);
-    if (!s) return;
-    s.consecutiveErrors += 1;
-    if (err?.status === 429) {
-      s.cooldownUntil = this.now() + (err.retryAfterMs ?? COOLDOWN_DEFAULT_MS);
-    }
-    if (s.consecutiveErrors >= UNHEALTHY_AFTER) s.healthy = false;
-  }
-  /** Run a call through the best router, failing over on error. Throws only if all exhausted. */
-  async run(call) {
-    const order = this.ranked();
-    if (order.length === 0) {
-      throw new Error(
-        "All selected routers are rate-limited or unavailable. Add a BYOK key, select more free routers, or retry shortly."
-      );
-    }
-    let lastErr;
-    for (const id of order) {
-      const t0 = this.now();
-      try {
-        const result = await call(id);
-        this.recordSuccess(id, this.now() - t0);
-        return { result, routerId: id };
-      } catch (e) {
-        const err = e;
-        this.recordFailure(id, { status: err?.status, retryAfterMs: err?.retryAfterMs });
-        lastErr = e;
-      }
-    }
-    throw lastErr instanceof Error ? lastErr : new Error("All selected routers failed this request.");
-  }
-  snapshot() {
-    return [...this.stats.values()].map((s) => ({ ...s }));
-  }
-  load(stats) {
-    for (const s of stats) if (this.stats.has(s.id)) this.stats.set(s.id, { ...s });
-  }
-};
+// src/routers/onboarding.ts
+import { createInterface as createInterface3 } from "readline/promises";
+import { stdin as stdin3, stdout as stdout4 } from "process";
+import { existsSync as existsSync4, mkdirSync as mkdirSync7, writeFileSync as writeFileSync9 } from "fs";
+import { join as join12 } from "path";
 
-// src/routers/floor.ts
-var KEYLESS_FLOOR = [
-  {
+// src/routers/catalog.ts
+var C4 = (e) => ({
+  api: "openai-completions",
+  freeModels: [],
+  tier: "free",
+  kind: "chat",
+  ...e
+});
+var ROUTER_CATALOG = [
+  // ── Keyless & live-verified (works now, zero keys, through the agent) ──
+  C4({
     id: "pollinations",
-    name: "Pollinations (free)",
-    baseUrl: "https://text.pollinations.ai/openai",
-    model: "openai",
-    apiKey: "oriro-keyless"
-  },
-  {
-    id: "ollama-local",
-    name: "Ollama (on-device)",
-    baseUrl: "http://localhost:11434/v1",
-    model: "llama3.2",
-    apiKey: "ollama"
-  }
-];
-function routerModel(r) {
-  return {
-    id: r.model,
-    name: r.name,
-    api: "openai-completions",
-    provider: r.id,
-    baseUrl: r.baseUrl,
-    reasoning: false,
-    input: ["text"],
-    cost: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0 },
-    contextWindow: 128e3,
-    maxTokens: 4096
-  };
-}
-
-// src/routers/router-pool.ts
-import { mkdirSync as mkdirSync7, readFileSync as readFileSync10, writeFileSync as writeFileSync9 } from "fs";
-import { join as join12 } from "path";
-
-// src/routers/pool.ts
-import { existsSync as existsSync4, mkdirSync as mkdirSync6, readFileSync as readFileSync9, writeFileSync as writeFileSync8 } from "fs";
-import { join as join11 } from "path";
-function poolFile(dir) {
-  return join11(dir, "routers", "selected.json");
-}
-function loadPool(dir) {
-  const p = poolFile(dir);
-  if (!existsSync4(p)) return [];
-  try {
-    const v = JSON.parse(readFileSync9(p, "utf8"));
-    return Array.isArray(v) ? v : [];
-  } catch {
-    return [];
-  }
-}
-function savePool(dir, ids) {
-  mkdirSync6(join11(dir, "routers"), { recursive: true });
-  writeFileSync8(poolFile(dir), JSON.stringify([...new Set(ids)], null, 2), "utf8");
-}
-
-// src/routers/validate.ts
-var PROBE_TIMEOUT_MS = 12e3;
-async function validateRouter(entry, key, modelId) {
-  const model = modelId ?? entry.freeModels[0] ?? "";
-  const t0 = Date.now();
-  const controller = new AbortController();
-  const timer = setTimeout(() => controller.abort(), PROBE_TIMEOUT_MS);
-  try {
-    let res;
-    if (entry.api === "google-generative-ai") {
-      const url = `${entry.baseUrl.replace(/\/$/, "")}/models/${model}:generateContent${key ? `?key=${key}` : ""}`;
-      res = await fetch(url, {
-        method: "POST",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({ contents: [{ parts: [{ text: "ping" }] }] }),
-        signal: controller.signal
-      });
-    } else {
-      const headers = { "content-type": "application/json" };
-      if (key) headers.authorization = `Bearer ${key}`;
-      res = await fetch(`${entry.baseUrl.replace(/\/$/, "")}/chat/completions`, {
-        method: "POST",
-        headers,
-        body: JSON.stringify({
-          model,
-          messages: [{ role: "user", content: "ping" }],
-          max_tokens: 1
-        }),
-        signal: controller.signal
-      });
-    }
-    return {
-      ok: res.ok,
-      latencyMs: Date.now() - t0,
-      model,
-      error: res.ok ? void 0 : `HTTP ${res.status}`
-    };
-  } catch (e) {
-    return {
-      ok: false,
-      latencyMs: Date.now() - t0,
-      model,
-      error: e instanceof Error ? e.message : String(e)
-    };
-  } finally {
-    clearTimeout(timer);
-  }
-}
-
-// src/routers/router-pool.ts
-var KEYLESS_SENTINEL = "oriro-keyless-no-key-required";
-function regFile() {
-  return join12(oriroDir(), "routers", "registered.json");
-}
-function readReg() {
-  try {
-    return JSON.parse(readFileSync10(regFile(), "utf8"));
-  } catch {
-    return {};
-  }
-}
-function writeReg(m) {
-  mkdirSync7(join12(oriroDir(), "routers"), { recursive: true });
-  writeFileSync9(regFile(), JSON.stringify(m, null, 2), "utf8");
-}
-async function addRouter(entry, opts) {
-  if (entry.comingSoon) {
-    return { ok: false, validation: { ok: false, latencyMs: 0, model: "", error: "coming soon" } };
-  }
-  const key = opts?.key ?? (entry.keyless ? KEYLESS_SENTINEL : void 0);
-  const v = await validateRouter(entry, key, opts?.modelId);
-  if (!v.ok) return { ok: false, validation: v };
-  const router = {
-    id: entry.id,
-    name: entry.displayName,
-    baseUrl: entry.baseUrl,
-    model: opts?.modelId ?? v.model ?? entry.freeModels[0] ?? "",
-    apiKey: key ?? KEYLESS_SENTINEL
-  };
-  const reg = readReg();
-  reg[entry.id] = router;
-  writeReg(reg);
-  savePool(oriroDir(), [...loadPool(oriroDir()), entry.id]);
-  return { ok: true, validation: v };
-}
-function useRouters(ids) {
-  savePool(oriroDir(), ids);
-}
-function resolvePool() {
-  const reg = readReg();
-  return loadPool(oriroDir()).map((id) => reg[id]).filter((r) => Boolean(r));
-}
-
-// src/identity/filter.ts
-var ORIRO_IDENTITY = "You are ORIRO, a free on-device AI assistant in the user's terminal. You are ORIRO and only ORIRO. Never state, imply, or reveal that you are, or are built on, any other model or company (such as GPT, Claude, Gemini, Qwen, Llama, Mistral, DeepSeek, OpenAI, Anthropic, Google, or Meta). If asked what you are, you are ORIRO.";
-var BANNED_TEST = /\b(qwen|llama|mistral|mixtral|deepseek|gpt(?:-?\d(?:\.\d)?)?|claude|gemini|openai|anthropic|google|meta\s?ai|alibaba)\b/i;
-var BANNED_REPLACE = new RegExp(BANNED_TEST.source, "gi");
-var SELF_REF = /\b(i am|i'm|i was|based on|powered by|my name|my model|my architecture|trained|created by|made by|built (?:on|by)|developed by)\b/i;
-var SELF_INTRO = /\b(i am|i'm)\s+(a|an)\b/i;
-var AI_NOUN = /\b(assistant|ai|model|language model|bot|agent|chatbot)\b/i;
-function applyIdentity(context) {
-  const sys = context.systemPrompt ? `${ORIRO_IDENTITY}
-
-${context.systemPrompt}` : ORIRO_IDENTITY;
-  return { ...context, systemPrompt: sys };
-}
-function scrubIdentity(text) {
-  return text.replace(/[^.?!\n]+[.?!]?/g, (sentence) => {
-    let s = SELF_REF.test(sentence) && BANNED_TEST.test(sentence) ? sentence.replace(BANNED_REPLACE, "ORIRO") : sentence;
-    if (!/\boriro\b/i.test(s) && SELF_INTRO.test(s) && AI_NOUN.test(s)) {
-      s = s.replace(SELF_INTRO, "I am ORIRO, $2");
-    }
-    return s;
-  });
-}
-function scrubMessageIdentity(msg) {
-  return {
-    ...msg,
-    content: msg.content.map(
-      (c) => c.type === "text" ? { ...c, text: scrubIdentity(c.text) } : c
-    )
-  };
-}
-
-// src/routers/tool-sanitize.ts
-var CONTROL_TOKEN = /<\|[^|]*\|>/g;
-var RECIPIENT_PREFIX = /^(?:to=)?(?:functions?|tools?|recipient)[.=]/i;
-var RECIPIENT = /(?:to=)?(?:functions?|tools?|recipient)[.=]([A-Za-z0-9_.:-]+)/i;
-var CLEAN_NAME = /^[A-Za-z0-9_.:-]+$/;
-function sanitizeToolName(raw) {
-  if (!raw) return raw;
-  if (!raw.includes("<|") && !RECIPIENT_PREFIX.test(raw)) return raw;
-  const base = (raw.split("<|")[0] ?? "").replace(RECIPIENT_PREFIX, "").trim();
-  if (base && CLEAN_NAME.test(base)) return base;
-  const recip = raw.match(RECIPIENT);
-  if (recip?.[1]) return recip[1];
-  const m = raw.replace(CONTROL_TOKEN, " ").match(/[A-Za-z_][A-Za-z0-9_.:-]*/);
-  return m ? m[0] : raw;
-}
-function sanitizeMessageToolCalls(msg) {
-  let changed = false;
-  const content = msg.content.map((c) => {
-    if (c.type === "toolCall") {
-      const name = sanitizeToolName(c.name);
-      if (name !== c.name) {
-        changed = true;
-        return { ...c, name };
-      }
-    }
-    return c;
-  });
-  return changed ? { ...msg, content } : msg;
-}
-function sanitizeEventToolCalls(ev) {
-  let next = ev;
-  if ("partial" in next && next.partial) {
-    const partial = sanitizeMessageToolCalls(next.partial);
-    if (partial !== next.partial) next = { ...next, partial };
-  }
-  if (next.type === "toolcall_end" && next.toolCall) {
-    const name = sanitizeToolName(next.toolCall.name);
-    if (name !== next.toolCall.name) next = { ...next, toolCall: { ...next.toolCall, name } };
-  }
-  return next;
-}
-
-// src/routers/mux-provider.ts
-var MUX_PROVIDER = "oriro-mux";
-var MUX_MODEL = "oriro-free";
-function errToCallError(msg) {
-  const text = msg.errorMessage ?? "";
-  return /\b429\b|rate.?limit|too many requests/i.test(text) ? { status: 429 } : {};
-}
-function buildErrorMessage(message) {
-  return {
-    role: "assistant",
-    content: [],
-    api: "openai-completions",
-    provider: MUX_PROVIDER,
-    model: MUX_MODEL,
-    usage: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0, totalTokens: 0, cost: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0, total: 0 } },
-    stopReason: "error",
-    timestamp: Date.now(),
-    errorMessage: message
-  };
-}
-async function driveMux(out, mux, byId, context, options) {
-  let lastError;
-  for (const id of mux.ranked()) {
-    const router = byId.get(id);
-    if (!router) continue;
-    const t0 = Date.now();
-    let committed = false;
-    let lastPartial;
-    try {
-      const inner = piStreamSimple(routerModel(router), context, {
-        ...options ?? {},
-        apiKey: router.apiKey
-      });
-      let failedBeforeContent = false;
-      for await (const ev of inner) {
-        if (ev.type === "error") {
-          mux.recordFailure(id, errToCallError(ev.error));
-          if (!committed) {
-            lastError = ev.error;
-            failedBeforeContent = true;
-            break;
-          }
-          out.push(ev);
-          out.end(ev.error);
-          return;
-        }
-        committed = true;
-        if (ev.type === "done") {
-          mux.recordSuccess(id, Date.now() - t0);
-          const clean = sanitizeMessageToolCalls(scrubMessageIdentity(ev.message));
-          out.push({ type: "done", reason: ev.reason, message: clean });
-          out.end(clean);
-          return;
-        }
-        lastPartial = ev.partial;
-        out.push(sanitizeEventToolCalls(ev));
-      }
-      if (failedBeforeContent) continue;
-      mux.recordSuccess(id, Date.now() - t0);
-      out.end(lastPartial ? sanitizeMessageToolCalls(scrubMessageIdentity(lastPartial)) : void 0);
-      return;
-    } catch (e) {
-      mux.recordFailure(id, e);
-    }
-  }
-  const msg = lastError ?? buildErrorMessage(
-    "All keyless routers are unavailable. Add a BYOK key, select more free routers, or retry shortly."
-  );
-  out.push({ type: "error", reason: "error", error: msg });
-  out.end(msg);
-}
-function registerOriroMux(registry, opts = {}) {
-  registerOpenAICompletions();
-  const pooled = resolvePool();
-  const routers = opts.routers ?? (pooled.length > 0 ? pooled : KEYLESS_FLOOR);
-  const byId = new Map(routers.map((r) => [r.id, r]));
-  const mux = new RouterMux(routers.map((r) => r.id));
-  registry.registerProvider(MUX_PROVIDER, {
-    name: "ORIRO Free (keyless Mux)",
-    api: "openai-completions",
-    apiKey: "oriro-keyless",
-    // Placeholder — required by registry validation but never used: our custom streamSimple
-    // routes to the real keyless floor endpoints itself (see driveMux).
-    baseUrl: "http://oriro-mux.local",
-    models: [
-      {
-        id: MUX_MODEL,
-        name: "ORIRO Free (best-router)",
-        api: "openai-completions",
-        baseUrl: "http://oriro-mux.local",
-        reasoning: false,
-        input: ["text"],
-        cost: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0 },
-        contextWindow: 128e3,
-        maxTokens: 4096
-      }
-    ],
-    streamSimple: (_model, context, options) => {
-      const out = createAssistantMessageEventStream();
-      void driveMux(out, mux, byId, applyIdentity(context), options);
-      return out;
-    }
-  });
-  return registry.find(MUX_PROVIDER, MUX_MODEL);
-}
-
-// src/head/pi-tool.ts
-import { Type } from "typebox";
-
-// src/head/comparison-engine.ts
-var SECTION_RULES = [
-  {
-    type: "hero",
-    label: "Hero",
-    priority: "CRITICAL",
-    markup: [/<h1[\s>]/],
-    recommend: "Add a clear above-the-fold hero \u2014 one headline that states the value + one primary CTA."
-  },
-  {
-    type: "navigation",
-    label: "Navigation",
-    priority: "CRITICAL",
-    markup: [/<nav[\s>]/, /role=["']navigation["']/],
-    recommend: "Add a top navigation so visitors can reach key sections."
-  },
-  {
-    type: "features",
-    label: "Features",
-    priority: "CRITICAL",
-    text: [/\bfeatures?\b/, /\bwhat you (?:can|get)\b/, /\bcapabilit/],
-    recommend: "Add a features section that spells out concrete capabilities, not adjectives."
-  },
-  {
-    type: "pricing",
-    label: "Pricing",
-    priority: "CRITICAL",
-    text: [/\bpricing\b/, /\bper month\b/, /\b\/mo\b/, /\bfree plan\b/, /\$\d/, /₹\d/, /€\d/],
-    recommend: 'Add transparent pricing \u2014 a critical conversion element; even a single "Free" tier helps.'
-  },
-  {
-    type: "cta",
-    label: "Call-to-Action",
-    priority: "CRITICAL",
-    text: [/\bget started\b/, /\bsign up\b/, /\bstart (?:free|now|building)\b/, /\btry (?:it|now|free)\b/, /\bbook a demo\b/, /\bget a demo\b/],
-    recommend: 'Add a strong, repeated primary CTA ("Get started") so the next step is obvious.'
-  },
-  {
-    type: "testimonials",
-    label: "Testimonials",
-    priority: "HIGH",
-    text: [/\btestimonial/, /\bwhat (?:our )?(?:customers|users) say\b/, /\bloved by\b/, /\breview(?:s|ed)\b/],
-    recommend: "Add 2\u20133 customer testimonials with names/photos to build trust."
-  },
-  {
-    type: "stats",
-    label: "Stats / Metrics",
-    priority: "HIGH",
-    text: [/\b\d[\d,.]*\s*[kkmm]\+?\s*(?:users|customers|developers|downloads|teams)\b/, /\b9\d(?:\.\d+)?%\b/, /\buptime\b/],
-    recommend: 'Add impressive metrics ("10K+ users", "99.9% uptime") as social proof.'
-  },
-  {
-    type: "video",
-    label: "Video",
-    priority: "HIGH",
-    markup: [/<video[\s>]/, /youtube\.com\/embed/, /player\.vimeo\.com/, /<iframe[^>]+(?:youtube|vimeo)/],
-    text: [/\bwatch the (?:video|demo)\b/],
-    recommend: "Add a short explainer/demo video \u2014 it lifts conversion on landing pages."
-  },
-  {
-    type: "demo",
-    label: "Live Demo",
-    priority: "HIGH",
-    text: [/\btry it (?:now|live|free)\b/, /\bplayground\b/, /\binteractive demo\b/, /\blive demo\b/],
-    recommend: 'Add a "try it" live demo or playground so visitors experience the product immediately.'
-  },
-  {
-    type: "socialProof",
-    label: "Social Proof",
-    priority: "HIGH",
-    text: [/\btrusted by\b/, /\bbacked by\b/, /\bused by\b/, /\bas seen (?:in|on)\b/, /\bcustomers include\b/],
-    recommend: 'Add social proof (customer/investor logos, "trusted by \u2026") near the hero.'
-  },
-  {
-    type: "faq",
-    label: "FAQ",
-    priority: "MEDIUM",
-    text: [/\bfaq\b/, /\bfrequently asked\b/],
-    markup: [/<details[\s>]/],
-    recommend: "Add an FAQ that answers the top objections before they become exits."
-  },
-  {
-    type: "integrations",
-    label: "Integrations",
-    priority: "MEDIUM",
-    text: [/\bintegrations?\b/, /\bworks with\b/, /\bconnect your\b/],
-    recommend: "Add an integrations section showing what the product connects to."
-  },
-  {
-    type: "newsletter",
-    label: "Newsletter / Capture",
-    priority: "MEDIUM",
-    text: [/\bsubscribe\b/, /\bnewsletter\b/, /\bjoin (?:the )?waitlist\b/],
-    markup: [/type=["']email["']/],
-    recommend: "Add an email capture (newsletter/waitlist) so non-converting visitors are not lost."
-  },
-  {
-    type: "comparison",
-    label: "Comparison",
-    priority: "MEDIUM",
-    text: [/\bcompare\b/, /\bcomparison\b/, /\b vs\.? \b/, /\bwhy choose\b/],
-    recommend: 'Add a comparison ("us vs alternatives") to win evaluators who are shopping around.'
-  },
-  {
-    type: "team",
-    label: "Team / About",
-    priority: "LOW",
-    text: [/\bour team\b/, /\bmeet the team\b/, /\bfounders?\b/, /\babout us\b/],
-    recommend: "Add a brief team/about section to humanize the brand."
-  }
-];
-var PRIORITY_RANK = { CRITICAL: 0, HIGH: 1, MEDIUM: 2, LOW: 3 };
-var PRIORITY_EFFORT = { CRITICAL: "L", HIGH: "M", MEDIUM: "M", LOW: "S" };
-var FETCH_TIMEOUT_MS = 12e3;
-var UA = "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36 ORIRO-Inspector";
-async function fetchPage(url) {
-  const controller = new AbortController();
-  const timer = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);
-  const start = Date.now();
-  try {
-    const res = await fetch(url, {
-      signal: controller.signal,
-      redirect: "follow",
-      headers: { "user-agent": UA, accept: "text/html,application/xhtml+xml" }
-    });
-    const html = await res.text();
-    return { html, ms: Date.now() - start, status: res.status, ok: res.ok, error: "" };
-  } catch (err) {
-    return { html: "", ms: Date.now() - start, status: 0, ok: false, error: err instanceof Error ? err.message : "fetch failed" };
-  } finally {
-    clearTimeout(timer);
-  }
-}
-function toText(html) {
-  return html.replace(/<script[\s\S]*?<\/script>/gi, " ").replace(/<style[\s\S]*?<\/style>/gi, " ").replace(/<[^>]+>/g, " ").replace(/&nbsp;/gi, " ").replace(/\s+/g, " ").toLowerCase().trim();
-}
-function firstMatch(re, hay) {
-  const m = re.exec(hay);
-  if (!m) return "";
-  const slice = (m[0] ?? "").trim();
-  return slice.length > 80 ? `${slice.slice(0, 77)}\u2026` : slice;
-}
-function detectSections(rawHtmlLower, text) {
-  const found = [];
-  for (const rule of SECTION_RULES) {
-    let evidence = "";
-    for (const re of rule.markup ?? []) {
-      const hit = firstMatch(re, rawHtmlLower);
-      if (hit) {
-        evidence = hit;
-        break;
-      }
-    }
-    if (!evidence) {
-      for (const re of rule.text ?? []) {
-        const hit = firstMatch(re, text);
-        if (hit) {
-          evidence = hit;
-          break;
-        }
-      }
-    }
-    if (evidence) found.push({ type: rule.type, label: rule.label, priority: rule.priority, evidence });
-  }
-  return found;
-}
-function extractMatches(re, html, max) {
-  const out = [];
-  for (const m of html.matchAll(re)) {
-    const inner = (m[1] ?? "").replace(/<[^>]+>/g, " ").replace(/\s+/g, " ").trim();
-    if (inner && !out.includes(inner)) out.push(inner);
-    if (out.length >= max) break;
-  }
-  return out;
-}
-var CTA_WORDS = /\b(get started|sign up|start free|start now|start building|try (?:it|now|free)|book a demo|get a demo|request access|join (?:the )?waitlist|download)\b/i;
-function extractStructure(url, fr) {
-  const html = fr.html;
-  const lowerHtml = html.toLowerCase();
-  const text = toText(html);
-  const titleM = /<title[^>]*>([\s\S]*?)<\/title>/i.exec(html);
-  const title = (titleM?.[1] ?? "").replace(/\s+/g, " ").trim();
-  const descM = /<meta[^>]+name=["']description["'][^>]+content=["']([^"']*)["']/i.exec(html) ?? /<meta[^>]+content=["']([^"']*)["'][^>]+name=["']description["']/i.exec(html);
-  const description = (descM?.[1] ?? "").replace(/\s+/g, " ").trim();
-  const headings = extractMatches(/<h[1-3][^>]*>([\s\S]*?)<\/h[1-3]>/gi, html, 12);
-  const ctaAll = extractMatches(/<(?:a|button)[^>]*>([\s\S]*?)<\/(?:a|button)>/gi, html, 80);
-  const ctas = [];
-  for (const c of ctaAll) {
-    if (CTA_WORDS.test(c) && !ctas.includes(c)) ctas.push(c);
-    if (ctas.length >= 10) break;
-  }
-  const forms = (lowerHtml.match(/<form[\s>]/g) ?? []).length;
-  const links = (lowerHtml.match(/<a[\s>]/g) ?? []).length;
-  const images = (lowerHtml.match(/<img[\s>]/g) ?? []).length;
-  const hasVideo = /<video[\s>]/.test(lowerHtml) || /(?:youtube\.com\/embed|player\.vimeo\.com)/.test(lowerHtml);
-  const domNodes = (html.match(/<[a-z!\/]/gi) ?? []).length;
-  let note = "";
-  if (fr.ok && text.length < 400 && domNodes < 60) {
-    note = "Sparse HTML \u2014 likely a client-rendered (SPA) page; structure may be under-detected without a JS render.";
-  }
-  return {
-    url,
-    title,
-    description,
-    sections: detectSections(lowerHtml, text),
-    headings,
-    ctas,
-    forms,
-    links,
-    images,
-    hasVideo,
-    metrics: { htmlBytes: html.length, domNodes, fetchMs: fr.ms, status: fr.status },
-    ok: fr.ok && html.length > 0,
-    note: fr.ok ? note : `Could not load: ${fr.error || `HTTP ${fr.status}`}`
-  };
-}
-function ruleFor(type) {
-  return SECTION_RULES.find((r) => r.type === type) ?? SECTION_RULES[0];
-}
-function analyzeGaps(target, competitors) {
-  const targetTypes = new Set(target.sections.map((s) => s.type));
-  const compPresence = /* @__PURE__ */ new Map();
-  for (const comp of competitors) {
-    if (!comp.ok) continue;
-    for (const s of comp.sections) {
-      const list = compPresence.get(s.type) ?? [];
-      if (!list.includes(comp.url)) list.push(comp.url);
-      compPresence.set(s.type, list);
-    }
-  }
-  const missing = [];
-  const parity = [];
-  for (const [type, presentOn] of compPresence) {
-    if (targetTypes.has(type)) {
-      parity.push(type);
-    } else {
-      const rule = ruleFor(type);
-      missing.push({ section: type, label: rule.label, priority: rule.priority, presentOn, recommendation: rule.recommend });
-    }
-  }
-  missing.sort((a, b) => PRIORITY_RANK[a.priority] - PRIORITY_RANK[b.priority] || b.presentOn.length - a.presentOn.length);
-  const advantages = target.sections.filter((s) => !compPresence.has(s.type));
-  return { missing, advantages, parity };
-}
-function generateActionItems(missing) {
-  return missing.map((g) => ({
-    title: `Add a ${g.label} section`,
-    priority: g.priority,
-    effort: PRIORITY_EFFORT[g.priority],
-    rationale: `${g.presentOn.length} of the compared page(s) have it; you don't. ${g.recommendation}`
-  }));
-}
-function hostOf(url) {
-  try {
-    return new URL(url).host.replace(/^www\./, "");
-  } catch {
-    return url;
-  }
-}
-function generateSummary(target, competitors, gaps) {
-  const okComps = competitors.filter((c) => c.ok);
-  const tName = hostOf(target.url);
-  if (!target.ok) return `Could not load ${tName} (${target.note}). Nothing to compare against yet.`;
-  if (okComps.length === 0) return `Loaded ${tName} (${target.sections.length} sections) but none of the comparison URLs could be loaded.`;
-  const crit = gaps.missing.filter((m) => m.priority === "CRITICAL").map((m) => m.label);
-  const high = gaps.missing.filter((m) => m.priority === "HIGH").map((m) => m.label);
-  const parts = [];
-  parts.push(`${tName} has ${target.sections.length} detectable sections; compared against ${okComps.length} page(s).`);
-  if (gaps.missing.length === 0) {
-    parts.push("No structural gaps found \u2014 you cover everything they do.");
-  } else {
-    parts.push(`${gaps.missing.length} gap(s) found.`);
-    if (crit.length) parts.push(`Critical: ${crit.join(", ")}.`);
-    if (high.length) parts.push(`High: ${high.join(", ")}.`);
-  }
-  if (gaps.advantages.length) parts.push(`Your edge: ${gaps.advantages.map((a) => a.label).join(", ")}.`);
-  return parts.join(" ");
-}
-function normalizeUrl(u) {
-  const t = (u || "").trim();
-  if (!t) return t;
-  return /^https?:\/\//i.test(t) ? t : `https://${t}`;
-}
-async function comparePages(opts) {
-  const targetUrl = normalizeUrl(opts.targetUrl);
-  const competitorUrls = (opts.competitorUrls ?? []).map(normalizeUrl).filter((u) => u.length > 0).slice(0, 30);
-  const [targetFetch, ...compFetches] = await Promise.all([
-    fetchPage(targetUrl),
-    ...competitorUrls.map((u) => fetchPage(u))
-  ]);
-  const target = extractStructure(targetUrl, targetFetch ?? { html: "", ms: 0, status: 0, ok: false, error: "no fetch" });
-  const competitors = competitorUrls.map(
-    (u, i) => extractStructure(u, compFetches[i] ?? { html: "", ms: 0, status: 0, ok: false, error: "no fetch" })
-  );
-  const gaps = analyzeGaps(target, competitors);
-  return {
-    target,
-    competitors,
-    missing: gaps.missing,
-    advantages: gaps.advantages,
-    parity: gaps.parity,
-    actionItems: generateActionItems(gaps.missing),
-    summary: generateSummary(target, competitors, gaps)
-  };
-}
-
-// src/head/pi-tool.ts
-function summarizeForCoder(report) {
-  const lines = [report.summary];
-  const page = (p) => `  \u2022 ${p.url} \u2014 ${p.ok ? `${p.sections.length} sections: ${p.sections.map((s) => s.type).join(", ")}` : `not readable (${p.note})`}`;
-  lines.push("Pages seen:");
-  lines.push(page(report.target));
-  for (const c of report.competitors) if (c.url !== report.target.url) lines.push(page(c));
-  if (report.missing.length) {
-    lines.push("Missing on the target (gaps to build):");
-    for (const g of report.missing.slice(0, 12)) lines.push(`  \u2022 ${g.label} (${g.priority}) \u2014 ${g.recommendation}`);
-  }
-  if (report.actionItems.length) {
-    lines.push("Suggested action items:");
-    for (const a of report.actionItems.slice(0, 12)) lines.push(`  \u2192 ${a.title} [${a.priority}/${a.effort}] \u2014 ${a.rationale}`);
-  }
-  return lines.join("\n");
-}
-var InspectSiteParams = Type.Object({
-  url: Type.String({ description: "The target website URL to inspect or rebuild from." }),
-  competitors: Type.Optional(
-    Type.Array(Type.String(), { description: "Optional competitor/reference URLs to compare the target against." })
-  )
-});
-function registerHead(pi) {
-  pi.registerTool({
-    name: "inspect_site",
-    label: "ORIRO Head",
-    description: "Go out to a live website and SEE it: its sections, CTAs, structure, and any gaps versus competitor URLs. Returns a structured report to build from. Call this whenever the user wants to look at, compare against, or rebuild a website/page.",
-    parameters: InspectSiteParams,
-    async execute(_toolCallId, params) {
-      const target = params.url;
-      const competitors = params.competitors?.length ? params.competitors : [target];
-      const report = await comparePages({ targetUrl: target, competitorUrls: competitors });
-      return { content: [{ type: "text", text: summarizeForCoder(report) }], details: report };
-    }
-  });
-}
-
-// src/scribe/scribe-pi.ts
-import { existsSync as existsSync9, readFileSync as readFileSync16 } from "fs";
-import { Type as Type2 } from "typebox";
-
-// src/scribe/capture.ts
-import { closeSync as closeSync2, fsyncSync as fsyncSync2, mkdirSync as mkdirSync10, openSync as openSync2, writeSync as writeSync2 } from "fs";
-import { join as join14 } from "path";
-
-// src/scribe/digest.ts
-import { existsSync as existsSync5, mkdirSync as mkdirSync8, readFileSync as readFileSync11, writeFileSync as writeFileSync10 } from "fs";
-
-// src/scribe/paths.ts
-import { join as join13 } from "path";
-function scribeDir() {
-  const override = process.env.ORIRO_SCRIBE_DIR?.trim();
-  return override && override.length > 0 ? override : join13(CONFIG_DIR, "scribe");
-}
-function journalFile(date) {
-  return join13(scribeDir(), `${date}.md`);
-}
-function digestFile() {
-  return join13(scribeDir(), "_digest.md");
-}
-function timelineFile() {
-  return join13(scribeDir(), "_timeline.md");
-}
-function artifactsDir() {
-  return join13(scribeDir(), "artifacts");
-}
-
-// src/scribe/digest.ts
-var DIGEST_CAP = 8192;
-var TIMELINE_DAY_CAP = 400;
-function read(file4) {
-  return existsSync5(file4) ? readFileSync11(file4, "utf8") : "";
-}
-function updateDigest(summary, context) {
-  mkdirSync8(scribeDir(), { recursive: true });
-  const existing = read(digestFile());
-  let contextBlock = context?.trim();
-  if (!contextBlock) {
-    const m = existing.match(/## Context\n([\s\S]*?)\n## /);
-    contextBlock = m?.[1]?.trim() ?? "_(not set yet)_";
-  }
-  const recentMatch = existing.match(/## Recent activity[^\n]*\n([\s\S]*)$/);
-  const priorRecent = recentMatch?.[1]?.trim() ?? "";
-  let recent = summary.trim() ? `- ${summary.trim()}
-${priorRecent}` : priorRecent;
-  const header2 = `# ORIRO Scribe \u2014 Digest
-
-## Context
-${contextBlock}
-
-## Recent activity (newest first)
-`;
-  let out = header2 + recent;
-  while (Buffer.byteLength(out, "utf8") > DIGEST_CAP && recent.includes("\n")) {
-    recent = recent.slice(0, recent.lastIndexOf("\n")).trimEnd();
-    out = header2 + recent;
-  }
-  writeFileSync10(digestFile(), out, "utf8");
-}
-function updateTimeline(date, topic) {
-  mkdirSync8(scribeDir(), { recursive: true });
-  const clean = topic.replace(/\s+/g, " ").trim();
-  if (!clean) return;
-  const lines = read(timelineFile()).split("\n").filter(Boolean);
-  const header2 = "# ORIRO Scribe \u2014 Timeline";
-  const body = lines.filter((l) => l !== header2);
-  const idx = body.findIndex((l) => l.startsWith(`- ${date} \xB7`));
-  if (idx === -1) {
-    body.push(`- ${date} \xB7 ${clean}`.slice(0, TIMELINE_DAY_CAP + date.length + 6));
-  } else {
-    let merged = `${body[idx]}; ${clean}`;
-    if (merged.length > TIMELINE_DAY_CAP) merged = `${merged.slice(0, TIMELINE_DAY_CAP)}\u2026`;
-    body[idx] = merged;
-  }
-  body.sort();
-  writeFileSync10(timelineFile(), `${header2}
-${body.join("\n")}
-`, "utf8");
-}
-
-// src/scribe/journal.ts
-import {
-  closeSync,
-  existsSync as existsSync6,
-  fsyncSync,
-  mkdirSync as mkdirSync9,
-  openSync,
-  readFileSync as readFileSync12,
-  writeSync
-} from "fs";
-function appendJournal(date, content) {
-  mkdirSync9(scribeDir(), { recursive: true });
-  const fd = openSync(journalFile(date), "a");
-  try {
-    writeSync(fd, content.endsWith("\n") ? content : `${content}
-`);
-    fsyncSync(fd);
-  } finally {
-    closeSync(fd);
-  }
-}
-function readJournal(date) {
-  const f = journalFile(date);
-  return existsSync6(f) ? readFileSync12(f, "utf8") : "";
-}
-
-// src/scribe/redact.ts
-var RULES = [
-  {
-    label: "private-key",
-    re: /-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]*?-----END [A-Z ]*PRIVATE KEY-----/g
-  },
-  { label: "anthropic-key", re: /sk-ant-[A-Za-z0-9_-]{20,}/g },
-  { label: "openrouter-key", re: /sk-or-v1-[A-Za-z0-9]{20,}/g },
-  // Stripe-style keys (sk_live_/pk_live_/rk_test_/…), underscore segments.
-  { label: "stripe-key", re: /\b[srp]k_(?:live|test)_[A-Za-z0-9]{16,}/g },
-  // Generic sk- secret keys — allow hyphenated segments (sk-live-…, sk-proj-…) so a second
-  // hyphen no longer breaks the match (the gap the Scriber spike caught).
-  { label: "secret-key-sk", re: /sk[-_][A-Za-z0-9][A-Za-z0-9-]{14,}/g },
-  { label: "google-key", re: /AIza[0-9A-Za-z_-]{30,}/g },
-  { label: "groq-key", re: /gsk_[A-Za-z0-9]{20,}/g },
-  { label: "github-pat", re: /github_pat_[A-Za-z0-9_]{20,}/g },
-  { label: "github-token", re: /gh[posr]_[A-Za-z0-9]{30,}/g },
-  { label: "xai-key", re: /xai-[A-Za-z0-9]{20,}/g },
-  { label: "aws-key", re: /AKIA[0-9A-Z]{16}/g },
-  { label: "jwt", re: /eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{6,}/g },
-  { label: "telegram-token", re: /\b\d{8,10}:[A-Za-z0-9_-]{30,}\b/g },
-  { label: "email", re: /[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}/g },
-  { label: "phone", re: /(?:\+?\d{1,3}[-.\s]?)?\(?\d{3}\)?[-.\s]\d{3}[-.\s]\d{4}/g }
-];
-function marker(label) {
-  return `\u27E8REDACTED:${label}\u27E9`;
-}
-function entropy(s) {
-  const freq = /* @__PURE__ */ new Map();
-  for (const ch of s) freq.set(ch, (freq.get(ch) ?? 0) + 1);
-  let h = 0;
-  for (const n of freq.values()) {
-    const p = n / s.length;
-    h -= p * Math.log2(p);
-  }
-  return h;
-}
-function looksLikeUnknownSecret(token) {
-  if (token.length < 40) return false;
-  if (token.includes("\u27E8REDACTED:")) return false;
-  if (/^[0-9a-f]+$/i.test(token)) return false;
-  const classes = (/[a-z]/.test(token) ? 1 : 0) + (/[A-Z]/.test(token) ? 1 : 0) + (/[0-9]/.test(token) ? 1 : 0);
-  if (classes < 2) return false;
-  return entropy(token) >= 4.2;
-}
-function redact(input) {
-  const counts = /* @__PURE__ */ new Map();
-  let text = input;
-  for (const rule of RULES) {
-    text = text.replace(rule.re, () => {
-      counts.set(rule.label, (counts.get(rule.label) ?? 0) + 1);
-      return marker(rule.label);
-    });
-  }
-  text = text.split(/(\s+)/).map((tok) => {
-    if (looksLikeUnknownSecret(tok)) {
-      counts.set("high-entropy", (counts.get("high-entropy") ?? 0) + 1);
-      return marker("high-entropy");
-    }
-    return tok;
-  }).join("");
-  const redactions = [...counts.entries()].map(([label, count]) => ({
-    label,
-    count
-  }));
-  return { text, redactions };
-}
-function containsSecret(text) {
-  for (const rule of RULES) {
-    rule.re.lastIndex = 0;
-    if (rule.re.test(text)) return true;
-  }
-  for (const tok of text.split(/\s+/)) {
-    if (looksLikeUnknownSecret(tok)) return true;
-  }
-  return false;
-}
-
-// src/scribe/capture.ts
-var INLINE_CAP = 4e3;
-function sideFile(date, ts, kind, full) {
-  mkdirSync10(artifactsDir(), { recursive: true });
-  const name = `${date}_${ts.replace(/[:.]/g, "-")}_${kind}.md`;
-  const p = join14(artifactsDir(), name);
-  const fd = openSync2(p, "w");
-  try {
-    writeSync2(fd, full);
-    fsyncSync2(fd);
-  } finally {
-    closeSync2(fd);
-  }
-  return p;
-}
-function field(date, ts, label, value) {
-  if (!value || !value.trim()) return "";
-  if (value.length > INLINE_CAP) {
-    const ref = sideFile(date, ts, label.toLowerCase().replace(/\s+/g, "-"), value);
-    return `**${label}** (full \u2192 ${ref}):
-${value.slice(0, INLINE_CAP)}
-\u2026(truncated; full content in artifact)
-
-`;
-  }
-  return `**${label}:**
-${value}
-
-`;
-}
-function renderTurn(rec) {
-  let md = `## ${rec.ts}
-
-`;
-  md += field(rec.date, rec.ts, "User", rec.user);
-  md += field(rec.date, rec.ts, "Router", rec.router);
-  if (rec.tools?.length) md += `**Tools:** ${rec.tools.join(", ")}
-
-`;
-  if (rec.files?.length) md += `**Files:** ${rec.files.join(", ")}
-
-`;
-  md += field(rec.date, rec.ts, "Note", rec.note);
-  return `${md}---
-`;
-}
-function oneLineSummary(rec) {
-  const bits = [];
-  if (rec.user) bits.push(rec.user.replace(/\s+/g, " ").slice(0, 80));
-  if (rec.files?.length) bits.push(`files: ${rec.files.slice(0, 3).join(", ")}`);
-  if (rec.note) bits.push(rec.note.replace(/\s+/g, " ").slice(0, 60));
-  return bits.join(" \xB7 ") || "(activity)";
-}
-function captureTurn(rec) {
-  const safe = redact(renderTurn(rec));
-  appendJournal(rec.date, `${safe.text}
-`);
-  const summary = redact(`${rec.ts} \xB7 ${oneLineSummary(rec)}`).text;
-  updateDigest(summary, rec.context ? redact(rec.context).text : void 0);
-  updateTimeline(rec.date, redact(oneLineSummary(rec)).text);
-  const auditClean = !containsSecret(readJournal(rec.date));
-  return {
-    journalDate: rec.date,
-    redactions: safe.redactions,
-    bytes: Buffer.byteLength(safe.text, "utf8"),
-    auditClean
-  };
-}
-
-// src/scribe/health.ts
-import {
-  closeSync as closeSync3,
-  fsyncSync as fsyncSync3,
-  mkdirSync as mkdirSync11,
-  openSync as openSync3,
-  readFileSync as readFileSync13,
-  writeFileSync as writeFileSync11,
-  writeSync as writeSync3
-} from "fs";
-import { join as join15 } from "path";
-function healthFile() {
-  return join15(scribeDir(), "_health.json");
-}
-function faultLogFile() {
-  return join15(scribeDir(), "_faults.log");
-}
-function read2() {
-  try {
-    return JSON.parse(readFileSync13(healthFile(), "utf8"));
-  } catch {
-    return { faultCount: 0 };
-  }
-}
-function write(h) {
-  mkdirSync11(scribeDir(), { recursive: true });
-  writeFileSync11(healthFile(), `${JSON.stringify(h, null, 2)}
-`, "utf8");
-}
-function recordHealth() {
-  const h = read2();
-  h.lastWriteAt = (/* @__PURE__ */ new Date()).toISOString();
-  write(h);
-}
-function recordFault(role, err) {
-  try {
-    mkdirSync11(scribeDir(), { recursive: true });
-    const msg = `${(/* @__PURE__ */ new Date()).toISOString()} [${role}] ${err instanceof Error ? err.message : String(err)}`;
-    const fd = openSync3(faultLogFile(), "a");
-    try {
-      writeSync3(fd, `${msg}
-`);
-      fsyncSync3(fd);
-    } finally {
-      closeSync3(fd);
-    }
-    const h = read2();
-    h.faultCount = (h.faultCount ?? 0) + 1;
-    h.lastFault = msg;
-    write(h);
-  } catch {
-  }
-}
-
-// src/scribe/wal.ts
-import {
-  closeSync as closeSync4,
-  existsSync as existsSync7,
-  fsyncSync as fsyncSync4,
-  mkdirSync as mkdirSync12,
-  openSync as openSync4,
-  readFileSync as readFileSync14,
-  writeFileSync as writeFileSync12,
-  writeSync as writeSync4
-} from "fs";
-import { join as join16 } from "path";
-function walFile() {
-  return join16(scribeDir(), "_wal.jsonl");
-}
-function appendLine(obj) {
-  mkdirSync12(scribeDir(), { recursive: true });
-  const fd = openSync4(walFile(), "a");
-  try {
-    writeSync4(fd, `${JSON.stringify(obj)}
-`);
-    fsyncSync4(fd);
-  } finally {
-    closeSync4(fd);
-  }
-}
-function walAppend(id, rec) {
-  appendLine({ t: "add", id, rec });
-}
-function walCommit(id) {
-  appendLine({ t: "commit", id });
-}
-function walPending() {
-  if (!existsSync7(walFile())) return [];
-  const committed = /* @__PURE__ */ new Set();
-  const adds = /* @__PURE__ */ new Map();
-  for (const line of readFileSync14(walFile(), "utf8").split("\n")) {
-    if (!line.trim()) continue;
-    try {
-      const e = JSON.parse(line);
-      if (e.t === "commit") committed.add(e.id);
-      else if (e.t === "add" && e.rec) adds.set(e.id, e.rec);
-    } catch {
-    }
-  }
-  const out = [];
-  for (const [id, rec] of adds) {
-    if (!committed.has(id)) out.push({ id, rec });
-  }
-  return out;
-}
-function walCompact() {
-  if (!existsSync7(walFile())) return;
-  const pending = walPending();
-  const body = pending.map((p) => JSON.stringify({ t: "add", id: p.id, rec: p.rec })).join("\n");
-  writeFileSync12(walFile(), body ? `${body}
-` : "", "utf8");
-}
-
-// src/scribe/supervisor.ts
-var draining = false;
-function uid(ts) {
-  return `${ts}-${Math.random().toString(36).slice(2, 9)}`;
-}
-function drainBacklog() {
-  if (draining) return;
-  draining = true;
-  try {
-    let drained = 0;
-    for (const e of walPending()) {
-      try {
-        captureTurn(e.rec);
-        walCommit(e.id);
-        drained++;
-      } catch (err) {
-        recordFault("standby-replay", err);
-        break;
-      }
-    }
-    if (drained > 0) walCompact();
-  } finally {
-    draining = false;
-  }
-}
-function supervisedCapture(rec) {
-  try {
-    drainBacklog();
-    const id = uid(rec.ts);
-    walAppend(id, rec);
-    try {
-      const res = captureTurn(rec);
-      walCommit(id);
-      recordHealth();
-      return res;
-    } catch (primaryErr) {
-      recordFault("primary", primaryErr);
-      try {
-        const res = captureTurn(rec);
-        walCommit(id);
-        recordHealth();
-        return res;
-      } catch (standbyErr) {
-        recordFault("standby", standbyErr);
-        return null;
-      }
-    }
-  } catch (fatal) {
-    recordFault("supervisor", fatal);
-    return null;
-  }
-}
-
-// src/scribe/retrieval.ts
-import { existsSync as existsSync8, readFileSync as readFileSync15, readdirSync } from "fs";
-function listDays() {
-  const dir = scribeDir();
-  if (!existsSync8(dir)) return [];
-  return readdirSync(dir).filter((f) => /^\d{4}-\d{2}-\d{2}\.md$/.test(f)).map((f) => f.replace(/\.md$/, "")).sort();
-}
-function readDay(date) {
-  const f = journalFile(date);
-  return existsSync8(f) ? readFileSync15(f, "utf8") : "";
-}
-function searchScribe(query, limit = 100) {
-  const q = query.toLowerCase().trim();
-  if (!q) return [];
-  const hits = [];
-  for (const date of listDays().reverse()) {
-    const lines = readDay(date).split("\n");
-    for (let i = 0; i < lines.length; i++) {
-      const ln = lines[i];
-      if (ln && ln.toLowerCase().includes(q)) {
-        hits.push({ date, line: i + 1, text: ln.trim().slice(0, 200) });
-        if (hits.length >= limit) return hits;
-      }
-    }
-  }
-  return hits;
-}
-
-// src/scribe/scribe-pi.ts
-function scribeTurn(input) {
-  if (!isScribeEnabled()) return;
-  const ts = (/* @__PURE__ */ new Date()).toISOString();
-  supervisedCapture({ ts, date: ts.slice(0, 10), ...input });
-}
-function registerScribe(pi) {
-  pi.registerTool({
-    name: "scribe_recall",
-    label: "ORIRO Scribe",
-    description: "Recall the user's past work from the on-device journal: search by keyword, or read a specific day (YYYY-MM-DD). Use to recover decisions, code, files, and context from earlier sessions.",
-    parameters: Type2.Object({
-      query: Type2.Optional(Type2.String({ description: "Keyword/topic to search across all journals." })),
-      day: Type2.Optional(Type2.String({ description: "A specific day YYYY-MM-DD to read in full." }))
-    }),
-    async execute(_id, params) {
-      let text;
-      const details = {};
-      if (!isScribeEnabled()) {
-        text = "Scribe is off (the user has not enabled it).";
-      } else if (params.day) {
-        text = readDay(params.day) || `No journal for ${params.day}. Days: ${listDays().join(", ") || "none"}`;
-        details.day = params.day;
-      } else {
-        const hits = params.query ? searchScribe(params.query) : [];
-        details.hits = hits;
-        text = hits.length ? hits.map((h) => `${h.date}:${h.line}  ${h.text}`).join("\n") : `No matches${params.query ? ` for "${params.query}"` : ""}. Days recorded: ${listDays().join(", ") || "none"}`;
-      }
-      return { content: [{ type: "text", text }], details };
-    }
-  });
-}
-function attachScribe(session) {
-  let user = "";
-  let assistant = "";
-  const tools = /* @__PURE__ */ new Set();
-  session.subscribe((e) => {
-    if (!isScribeEnabled()) return;
-    if (e?.type === "user_message" || e?.type === "session_user_message") user = String(e.text ?? e.message ?? user);
-    if (e?.type === "message_update" && e.assistantMessageEvent?.type === "text_delta") assistant += e.assistantMessageEvent.delta ?? "";
-    if ((e?.type === "tool_call" || e?.type === "tool_execution_start") && e.toolName) tools.add(String(e.toolName));
-    if (e?.type === "agent_end") {
-      scribeTurn({ user: user || void 0, router: "oriro-free", tools: [...tools], note: assistant.slice(0, 4e3) || void 0 });
-      user = "";
-      assistant = "";
-      tools.clear();
-    }
-  });
-}
-
-// src/orchestrate.ts
-import { createAgentSession, AuthStorage, ModelRegistry, SessionManager } from "@earendil-works/pi-coding-agent";
-import { Type as Type3 } from "typebox";
-var MAX_AGENTS = 8;
-var MAX_CONCURRENCY = 4;
-async function runOnce(spec) {
-  const authStorage = AuthStorage.inMemory();
-  const modelRegistry = ModelRegistry.inMemory(authStorage);
-  const model = registerOriroMux(modelRegistry);
-  if (!model) return { ...spec, ok: false, output: "no free model available" };
-  const { session } = await createAgentSession({
-    model,
-    authStorage,
-    modelRegistry,
-    sessionManager: SessionManager.inMemory(),
-    noTools: "all"
-  });
-  let out = "";
-  const unsub = session.subscribe((e) => {
-    if (e.type === "message_update" && e.assistantMessageEvent?.type === "text_delta") out += e.assistantMessageEvent.delta ?? "";
-  });
-  try {
-    await session.prompt(`You are the ${spec.role} sub-agent. ${spec.task}`);
-  } catch (e) {
-    return { ...spec, ok: false, output: e instanceof Error ? e.message : String(e) };
-  } finally {
-    unsub();
-    session.dispose();
-  }
-  return { ...spec, ok: out.trim().length > 0, output: out.trim() };
-}
-async function runAgent(spec) {
-  let last = await runOnce(spec);
-  if (!last.ok) last = await runOnce(spec);
-  return last;
-}
-async function runPool(items, n, fn) {
-  const results = new Array(items.length);
-  let i = 0;
-  async function worker() {
-    while (i < items.length) {
-      const idx = i++;
-      const item = items[idx];
-      if (item === void 0) continue;
-      results[idx] = await fn(item);
-    }
-  }
-  await Promise.all(Array.from({ length: Math.min(n, items.length) }, () => worker()));
-  return results;
-}
-async function orchestrate(opts) {
-  const agents = opts.agents.slice(0, MAX_AGENTS);
-  if ((opts.mode ?? "parallel") === "chain") {
-    const results = [];
-    let prev = "";
-    for (const a of agents) {
-      const r = await runAgent({ role: a.role, task: prev ? `${a.task}
-
-Previous result:
-${prev}` : a.task });
-      results.push(r);
-      prev = r.output;
-    }
-    return results;
-  }
-  return runPool(agents, MAX_CONCURRENCY, runAgent);
-}
-function registerOrchestrator(pi) {
-  pi.registerTool({
-    name: "deploy_agents",
-    label: "ORIRO Orchestrator",
-    description: "Deploy multiple sub-agents in parallel (or chained) to do work \u2014 e.g. 'spawn 4 QA + 2 coders, run the tests'. Each sub-agent runs FREE on the router pool. Give each agent a role and a task.",
-    parameters: Type3.Object({
-      agents: Type3.Array(Type3.Object({ role: Type3.String(), task: Type3.String() }), {
-        description: "The sub-agents to deploy (max 8)."
-      }),
-      mode: Type3.Optional(Type3.Union([Type3.Literal("parallel"), Type3.Literal("chain")]))
-    }),
-    async execute(_id, params) {
-      const results = await orchestrate({ agents: params.agents, mode: params.mode });
-      const text = results.map((r) => `[${r.role}] ${r.ok ? "\u2713" : "\u2717"} ${r.output.slice(0, 300)}`).join("\n");
-      return { content: [{ type: "text", text }], details: { results } };
-    }
-  });
-}
-
-// src/skills/loader.ts
-import { loadSkills, formatSkillsForPrompt } from "@earendil-works/pi-coding-agent";
-import { fileURLToPath } from "url";
-import { existsSync as existsSync10 } from "fs";
-import { dirname as dirname2, join as join17 } from "path";
-function packageRoot(start) {
-  let dir = start;
-  for (let i = 0; i < 10; i++) {
-    if (existsSync10(join17(dir, "package.json"))) return dir;
-    const parent = dirname2(dir);
-    if (parent === dir) break;
-    dir = parent;
-  }
-  return start;
-}
-function skillsDir() {
-  if (process.env.ORIRO_SKILLS_DIR) return process.env.ORIRO_SKILLS_DIR;
-  return join17(packageRoot(dirname2(fileURLToPath(import.meta.url))), "skills");
-}
-async function loadOriroSkills(dir = skillsDir()) {
-  const result = await loadSkills({
-    cwd: dir,
-    agentDir: dir,
-    skillPaths: [dir],
-    includeDefaults: false
-  });
-  const all = Array.isArray(result) ? result : result.skills ?? [];
-  return {
-    all,
-    core: all.filter((s) => !s.disableModelInvocation),
-    tail: all.filter((s) => s.disableModelInvocation),
-    prompt: formatSkillsForPrompt(all)
-  };
-}
-
-// src/onboarding/assemble.ts
-async function assembleOriroSession(opts = {}) {
-  const cwd = opts.cwd ?? process.cwd();
-  const authStorage = AuthStorage2.inMemory();
-  const modelRegistry = ModelRegistry2.inMemory(authStorage);
-  const settingsManager = SettingsManager.create(cwd);
-  const model = registerOriroMux(modelRegistry);
-  if (!model) throw new Error("ORIRO keyless model unavailable");
-  const resourceLoader = new DefaultResourceLoader({
-    cwd,
-    agentDir: getAgentDir(),
-    settingsManager,
-    additionalSkillPaths: [skillsDir()],
-    extensionFactories: [registerGuardian, registerHead, registerScribe, registerOrchestrator]
-  });
-  await resourceLoader.reload();
-  const { session, extensionsResult } = await createAgentSession2({
-    model,
-    authStorage,
-    modelRegistry,
-    settingsManager,
-    sessionManager: SessionManager2.inMemory(),
-    resourceLoader
-  });
-  attachScribe(session);
-  return { session, extensionsResult };
-}
-
-// src/language/nllb-translator.ts
-var NLLB_CODE = {
-  en: "eng_Latn",
-  zh: "zho_Hans",
-  de: "deu_Latn",
-  es: "spa_Latn",
-  ru: "rus_Cyrl",
-  ko: "kor_Hang",
-  fr: "fra_Latn",
-  ja: "jpn_Jpan",
-  pt: "por_Latn",
-  tr: "tur_Latn",
-  pl: "pol_Latn",
-  ca: "cat_Latn",
-  nl: "nld_Latn",
-  ar: "arb_Arab",
-  sv: "swe_Latn",
-  it: "ita_Latn",
-  id: "ind_Latn",
-  hi: "hin_Deva",
-  fi: "fin_Latn",
-  vi: "vie_Latn",
-  he: "heb_Hebr",
-  uk: "ukr_Cyrl",
-  el: "ell_Grek",
-  ms: "zsm_Latn",
-  cs: "ces_Latn",
-  ro: "ron_Latn",
-  da: "dan_Latn",
-  hu: "hun_Latn",
-  ta: "tam_Taml",
-  no: "nob_Latn",
-  th: "tha_Thai",
-  ur: "urd_Arab",
-  hr: "hrv_Latn",
-  bg: "bul_Cyrl",
-  lt: "lit_Latn",
-  mi: "mri_Latn",
-  ml: "mal_Mlym",
-  cy: "cym_Latn",
-  sk: "slk_Latn",
-  te: "tel_Telu",
-  fa: "pes_Arab",
-  lv: "lvs_Latn",
-  bn: "ben_Beng",
-  sr: "srp_Cyrl",
-  az: "azj_Latn",
-  sl: "slv_Latn",
-  kn: "kan_Knda",
-  et: "est_Latn",
-  mk: "mkd_Cyrl",
-  eu: "eus_Latn",
-  is: "isl_Latn",
-  hy: "hye_Armn",
-  ne: "npi_Deva",
-  mn: "khk_Cyrl",
-  bs: "bos_Latn",
-  kk: "kaz_Cyrl",
-  sq: "als_Latn",
-  sw: "swh_Latn",
-  gl: "glg_Latn",
-  mr: "mar_Deva",
-  pa: "pan_Guru",
-  si: "sin_Sinh",
-  km: "khm_Khmr",
-  sn: "sna_Latn",
-  yo: "yor_Latn",
-  so: "som_Latn",
-  af: "afr_Latn",
-  oc: "oci_Latn",
-  ka: "kat_Geor",
-  be: "bel_Cyrl",
-  tg: "tgk_Cyrl",
-  sd: "snd_Arab",
-  gu: "guj_Gujr",
-  am: "amh_Ethi",
-  yi: "ydd_Hebr",
-  lo: "lao_Laoo",
-  uz: "uzn_Latn",
-  fo: "fao_Latn",
-  ht: "hat_Latn",
-  ps: "pbt_Arab",
-  tk: "tuk_Latn",
-  nn: "nno_Latn",
-  mt: "mlt_Latn",
-  sa: "san_Deva",
-  lb: "ltz_Latn",
-  my: "mya_Mymr",
-  bo: "bod_Tibt",
-  tl: "tgl_Latn",
-  mg: "plt_Latn",
-  as: "asm_Beng",
-  tt: "tat_Cyrl",
-  ln: "lin_Latn",
-  ha: "hau_Latn",
-  ba: "bak_Cyrl",
-  jw: "jav_Latn",
-  su: "sun_Latn",
-  yue: "yue_Hant"
-};
-var ENG = "eng_Latn";
-var toNllb = (iso) => NLLB_CODE[(iso || "").toLowerCase()] ?? ENG;
-var NllbTranslator = class {
-  pipe = null;
-  loading = null;
-  ready() {
-    return this.pipe !== null;
-  }
-  /** Lazy-load NLLB-200 once (first-use download + cache). Idempotent. */
-  async load(modelId = "Xenova/nllb-200-distilled-600M") {
-    if (this.pipe) return;
-    if (this.loading) return this.loading;
-    this.loading = (async () => {
-      const { pipeline } = await import("@huggingface/transformers");
-      this.pipe = await pipeline("translation", modelId);
-    })();
-    return this.loading;
-  }
-  async run(text, src, tgt) {
-    if (!this.pipe) await this.load();
-    if (!this.pipe) return text;
-    const out = await this.pipe(text, { src_lang: src, tgt_lang: tgt });
-    return out?.[0]?.translation_text?.trim() || text;
-  }
-  toEnglish(text, fromLang) {
-    return this.run(text, toNllb(fromLang), ENG);
-  }
-  fromEnglish(english, toLang) {
-    return this.run(english, ENG, toNllb(toLang));
-  }
-};
-var instance = null;
-function setupNllbTranslator(opts) {
-  if (!instance) {
-    instance = new NllbTranslator();
-    registerTranslator(instance);
-  }
-  if (opts?.preload) void instance.load();
-  return instance;
-}
-
-// src/repl.ts
-function replHelp() {
-  return `
-  ${accent("ORIRO terminal \u2014 help")}
-  ${dim("Just type to chat; ORIRO writes and runs code for you (keyless, free).")}
-
-  ${accent("/help")}  this help     ${accent("/exit")} or ${accent("/quit")}  leave     ${dim("Ctrl-D / Ctrl-C also exit")}
-  ${dim("Run these OUTSIDE the chat (in your shell):")}
-  ${dim("oriro skills \xB7 routers \xB7 connectors \xB7 channels \xB7 scribe \xB7 language \xB7 avatar")}
-
-`;
-}
-async function runRepl() {
-  if (isFirstRun()) await runOnboarding();
-  else stdout4.write(banner());
-  const lang = getTerminalLanguage().code;
-  const isEnglish2 = lang.toLowerCase().startsWith("en");
-  if (!isEnglish2) setupNllbTranslator();
-  const { session } = await assembleOriroSession();
-  const rl = createInterface4({ input: stdin4, output: stdout4 });
-  try {
-    for (; ; ) {
-      let line;
-      try {
-        line = (await rl.question("\u203A ")).trim();
-      } catch {
-        break;
-      }
-      if (!line) continue;
-      if (line === "/exit" || line === "/quit") break;
-      if (line === "/help" || line === "/?") {
-        stdout4.write(replHelp());
-        continue;
-      }
-      const english = await translateForCoder(line, lang);
-      let out = "";
-      const unsub = session.subscribe((e) => {
-        if (e.type === "message_update" && e.assistantMessageEvent?.type === "text_delta") {
-          const d = e.assistantMessageEvent.delta ?? "";
-          out += d;
-          if (isEnglish2) stdout4.write(d);
-        }
-      });
-      try {
-        await session.prompt(english);
-      } finally {
-        unsub();
-      }
-      if (isEnglish2) stdout4.write("\n\n");
-      else stdout4.write(`${await translateForUser(out.trim(), lang)}
-
-`);
-    }
-  } finally {
-    rl.close();
-    session.dispose();
-    stdout4.write(dim("\nBye.\n"));
-  }
-}
-
-// src/routers/catalog.ts
-var C4 = (e) => ({
-  api: "openai-completions",
-  freeModels: [],
-  tier: "free",
-  kind: "chat",
-  ...e
-});
-var ROUTER_CATALOG = [
-  // ── Keyless & live-verified (works now, zero keys, through the agent) ──
-  C4({
-    id: "pollinations",
-    displayName: "Pollinations",
+    displayName: "Pollinations",
     baseUrl: "https://text.pollinations.ai/openai",
     freeModels: ["openai", "mistral"],
     obtainUrl: "https://pollinations.ai",
@@ -3167,66 +1616,2106 @@ var ROUTER_CATALOG = [
     displayName: "Ollama (local)",
     api: "ollama",
     baseUrl: "http://localhost:11434/v1",
-    freeModels: ["llama3.2"],
-    keyless: true
-  }),
-  // ── Image / speech services (catalog completeness; not chat-routable by the Mux) ──
-  C4({
-    id: "stability",
-    displayName: "Stability AI",
-    baseUrl: "https://api.stability.ai/v2beta",
-    freeModels: ["stable-image-core"],
-    obtainUrl: "https://platform.stability.ai",
-    kind: "image"
-  }),
-  C4({
-    id: "fal",
-    displayName: "fal.ai",
-    baseUrl: "https://fal.run",
-    freeModels: ["fal-ai/flux/schnell"],
-    obtainUrl: "https://fal.ai",
-    kind: "image"
-  }),
-  C4({
-    id: "wavespeed",
-    displayName: "WaveSpeedAI",
-    baseUrl: "https://api.wavespeed.ai",
-    freeModels: [],
-    obtainUrl: "https://wavespeed.ai",
-    kind: "image"
-  }),
-  C4({
-    id: "ai-horde",
-    displayName: "AI Horde",
-    baseUrl: "https://aihorde.net/api/v2",
-    freeModels: [],
-    obtainUrl: "https://aihorde.net",
-    keyless: true,
-    kind: "image"
-  }),
-  C4({
-    id: "assemblyai",
-    displayName: "AssemblyAI",
-    baseUrl: "https://api.assemblyai.com/v2",
-    freeModels: [],
-    obtainUrl: "https://assemblyai.com",
-    kind: "speech"
-  }),
-  // ── Paid (requires payment/recharge — moved out of free per the CC rule) ──
-  C4({
-    id: "moonshot",
-    displayName: "Moonshot (Direct)",
-    baseUrl: "https://api.moonshot.ai/v1",
-    freeModels: ["kimi-k2.6"],
-    obtainUrl: "https://platform.moonshot.ai",
-    tier: "paid"
-  }),
-  // ── ORIRO models — coming soon, greyed/"(free)", not selectable yet ──
-  C4({ id: "oriro-gauss", displayName: "ORIRO-Gauss", baseUrl: "", comingSoon: true }),
-  C4({ id: "oriro-avila", displayName: "ORIRO-Avila", baseUrl: "", comingSoon: true })
+    freeModels: ["llama3.2"],
+    keyless: true
+  }),
+  // ── Image / speech services (catalog completeness; not chat-routable by the Mux) ──
+  C4({
+    id: "stability",
+    displayName: "Stability AI",
+    baseUrl: "https://api.stability.ai/v2beta",
+    freeModels: ["stable-image-core"],
+    obtainUrl: "https://platform.stability.ai",
+    kind: "image"
+  }),
+  C4({
+    id: "fal",
+    displayName: "fal.ai",
+    baseUrl: "https://fal.run",
+    freeModels: ["fal-ai/flux/schnell"],
+    obtainUrl: "https://fal.ai",
+    kind: "image"
+  }),
+  C4({
+    id: "wavespeed",
+    displayName: "WaveSpeedAI",
+    baseUrl: "https://api.wavespeed.ai",
+    freeModels: [],
+    obtainUrl: "https://wavespeed.ai",
+    kind: "image"
+  }),
+  C4({
+    id: "ai-horde",
+    displayName: "AI Horde",
+    baseUrl: "https://aihorde.net/api/v2",
+    freeModels: [],
+    obtainUrl: "https://aihorde.net",
+    keyless: true,
+    kind: "image"
+  }),
+  C4({
+    id: "assemblyai",
+    displayName: "AssemblyAI",
+    baseUrl: "https://api.assemblyai.com/v2",
+    freeModels: [],
+    obtainUrl: "https://assemblyai.com",
+    kind: "speech"
+  }),
+  // ── Paid (requires payment/recharge — moved out of free per the CC rule) ──
+  C4({
+    id: "moonshot",
+    displayName: "Moonshot (Direct)",
+    baseUrl: "https://api.moonshot.ai/v1",
+    freeModels: ["kimi-k2.6"],
+    obtainUrl: "https://platform.moonshot.ai",
+    tier: "paid"
+  }),
+  // ── ORIRO models — coming soon, greyed/"(free)", not selectable yet ──
+  C4({ id: "oriro-gauss", displayName: "ORIRO-Gauss", baseUrl: "", comingSoon: true }),
+  C4({ id: "oriro-avila", displayName: "ORIRO-Avila", baseUrl: "", comingSoon: true })
+];
+function routerById(id) {
+  return ROUTER_CATALOG.find((r) => r.id === id);
+}
+
+// src/routers/router-pool.ts
+import { mkdirSync as mkdirSync6, readFileSync as readFileSync9, writeFileSync as writeFileSync8 } from "fs";
+import { join as join11 } from "path";
+
+// src/routers/pool.ts
+import { existsSync as existsSync3, mkdirSync as mkdirSync5, readFileSync as readFileSync8, writeFileSync as writeFileSync7 } from "fs";
+import { join as join10 } from "path";
+function poolFile(dir) {
+  return join10(dir, "routers", "selected.json");
+}
+function loadPool(dir) {
+  const p = poolFile(dir);
+  if (!existsSync3(p)) return [];
+  try {
+    const v = JSON.parse(readFileSync8(p, "utf8"));
+    return Array.isArray(v) ? v : [];
+  } catch {
+    return [];
+  }
+}
+function savePool(dir, ids) {
+  mkdirSync5(join10(dir, "routers"), { recursive: true });
+  writeFileSync7(poolFile(dir), JSON.stringify([...new Set(ids)], null, 2), "utf8");
+}
+
+// src/routers/validate.ts
+var PROBE_TIMEOUT_MS = 12e3;
+async function validateRouter(entry, key, modelId) {
+  const model = modelId ?? entry.freeModels[0] ?? "";
+  const t0 = Date.now();
+  const controller = new AbortController();
+  const timer = setTimeout(() => controller.abort(), PROBE_TIMEOUT_MS);
+  try {
+    let res;
+    if (entry.api === "google-generative-ai") {
+      const url = `${entry.baseUrl.replace(/\/$/, "")}/models/${model}:generateContent${key ? `?key=${encodeURIComponent(key)}` : ""}`;
+      res = await fetch(url, {
+        method: "POST",
+        headers: { "content-type": "application/json" },
+        body: JSON.stringify({ contents: [{ parts: [{ text: "ping" }] }] }),
+        signal: controller.signal
+      });
+    } else {
+      const headers = { "content-type": "application/json" };
+      if (key) headers.authorization = `Bearer ${key}`;
+      res = await fetch(`${entry.baseUrl.replace(/\/$/, "")}/chat/completions`, {
+        method: "POST",
+        headers,
+        body: JSON.stringify({
+          model,
+          messages: [{ role: "user", content: "ping" }],
+          max_tokens: 1
+        }),
+        signal: controller.signal
+      });
+    }
+    return {
+      ok: res.ok,
+      latencyMs: Date.now() - t0,
+      model,
+      error: res.ok ? void 0 : `HTTP ${res.status}`
+    };
+  } catch (e) {
+    return {
+      ok: false,
+      latencyMs: Date.now() - t0,
+      model,
+      error: e instanceof Error ? e.message : String(e)
+    };
+  } finally {
+    clearTimeout(timer);
+  }
+}
+
+// src/routers/router-pool.ts
+var KEYLESS_SENTINEL = "oriro-keyless-no-key-required";
+function regFile() {
+  return join11(oriroDir(), "routers", "registered.json");
+}
+function readReg() {
+  try {
+    return JSON.parse(readFileSync9(regFile(), "utf8"));
+  } catch {
+    return {};
+  }
+}
+function writeReg(m) {
+  mkdirSync6(join11(oriroDir(), "routers"), { recursive: true });
+  writeFileSync8(regFile(), JSON.stringify(m, null, 2), "utf8");
+}
+async function addRouter(entry, opts) {
+  if (entry.comingSoon) {
+    return { ok: false, validation: { ok: false, latencyMs: 0, model: "", error: "coming soon" } };
+  }
+  if (entry.kind && entry.kind !== "chat") {
+    return { ok: false, validation: { ok: false, latencyMs: 0, model: "", error: `'${entry.id}' is a ${entry.kind} router, not a chat router` } };
+  }
+  const key = opts?.key ?? (entry.keyless ? KEYLESS_SENTINEL : void 0);
+  const v = await validateRouter(entry, key, opts?.modelId);
+  if (!v.ok) return { ok: false, validation: v };
+  const router = {
+    id: entry.id,
+    name: entry.displayName,
+    baseUrl: entry.baseUrl,
+    model: opts?.modelId ?? v.model ?? entry.freeModels[0] ?? "",
+    apiKey: key ?? KEYLESS_SENTINEL
+  };
+  const reg = readReg();
+  reg[entry.id] = router;
+  writeReg(reg);
+  savePool(oriroDir(), [...loadPool(oriroDir()), entry.id]);
+  return { ok: true, validation: v };
+}
+function useRouters(ids) {
+  const reg = readReg();
+  const applied = ids.filter((id) => reg[id]);
+  const unknown = ids.filter((id) => !reg[id]);
+  if (applied.length > 0) savePool(oriroDir(), applied);
+  return { applied, unknown };
+}
+function resolvePool() {
+  const reg = readReg();
+  return loadPool(oriroDir()).map((id) => reg[id]).filter((r) => Boolean(r));
+}
+
+// src/routers/onboarding.ts
+function markerFile() {
+  return join12(oriroDir(), "routers", "onboarded.json");
+}
+function hasRouterChoice() {
+  try {
+    return existsSync4(markerFile());
+  } catch {
+    return false;
+  }
+}
+function markRouterOnboarded() {
+  try {
+    mkdirSync7(join12(oriroDir(), "routers"), { recursive: true });
+    writeFileSync9(markerFile(), `${JSON.stringify({ onboardedAt: (/* @__PURE__ */ new Date()).toISOString() }, null, 2)}
+`, "utf8");
+  } catch {
+  }
+}
+async function runRouterOnboarding() {
+  stdout4.write(
+    `
+  ${accent("Routers")} \u2014 ORIRO runs on a ${accent("free keyless router")} by default. No key, $0, works right now.
+  ${dim("Add your own key (any free provider) for a faster, private lane \u2014 or skip and stay keyless.")}
+`
+  );
+  const rl = createInterface3({ input: stdin3, output: stdout4 });
+  try {
+    const add = (await ask(rl, `  Add your own key now? ${dim("[y/N]")} `)).trim().toLowerCase();
+    if (add === "y" || add === "yes") {
+      const picks = ROUTER_CATALOG.filter(
+        (r) => !r.comingSoon && !r.keyless && (!r.kind || r.kind === "chat")
+      ).slice(0, 8);
+      stdout4.write(`
+  ${dim("Free providers (grab a free key from each provider's site):")}
+`);
+      for (const r of picks) {
+        stdout4.write(`    ${accent(r.id.padEnd(14))} ${dim(r.displayName)}
+`);
+      }
+      stdout4.write(`    ${dim("\u2026or any id from `oriro routers list`")}
+
+`);
+      const slug = (await ask(rl, `  Which provider? ${dim("(id, or blank to skip)")} `)).trim();
+      if (slug) {
+        const entry = routerById(slug);
+        if (!entry) {
+          stdout4.write(`  ${dim(`Unknown '${slug}' \u2014 skipped. You can add it later: oriro routers add ${slug}`)}
+`);
+        } else {
+          const key = (await ask(rl, `  Paste your ${accent(entry.displayName)} API key: `)).trim();
+          if (key) {
+            stdout4.write(`  ${dim("Validating\u2026")}
+`);
+            const res = await addRouter(entry, { key });
+            if (res.ok) {
+              stdout4.write(
+                `  ${accent("\u2713")} added ${accent(slug)} (${res.validation.latencyMs}ms) \u2014 it now races in your pool.
+`
+              );
+            } else {
+              stdout4.write(
+                `  ${dim(`Couldn't add ${slug}: ${res.validation.error ?? "validation failed"}. Staying keyless \u2014 retry: oriro routers add ${slug} --key <key>`)}
+`
+              );
+            }
+          } else {
+            stdout4.write(`  ${dim("No key entered \u2014 staying keyless.")}
+`);
+          }
+        }
+      }
+    }
+  } finally {
+    rl.close();
+  }
+  markRouterOnboarded();
+  stdout4.write(`  ${dim("Manage routers anytime: ")}${accent("oriro routers list \xB7 add \xB7 use")}
+`);
+}
+
+// src/onboarding/wrapper.ts
+function isFirstRun() {
+  return !isLanguageConfigured() || !hasScribeChoice();
+}
+async function askYesNo(question) {
+  const rl = createInterface4({ input: stdin4, output: stdout5 });
+  try {
+    const a = (await ask(rl, `${question} ${dim("[Y/n]")} `)).trim().toLowerCase();
+    return a === "" || a === "y" || a === "yes";
+  } finally {
+    rl.close();
+  }
+}
+async function runOnboarding() {
+  stdout5.write(banner());
+  await runLanguageOnboarding();
+  await activateGuardian();
+  stdout5.write(`  ${accent("\u{1F6E1} Guardian V3")} is on by default. ${accent("\u{1F9ED} Head")} is ready.
+
+`);
+  if (!isAvatarConfigured()) await runAvatarOnboarding();
+  if (!hasScribeChoice()) {
+    const yes = await askYesNo(
+      "Remember with me? The Scriber keeps your work in context on THIS machine only \u2014 it never leaves it."
+    );
+    setScribeConsent(yes);
+    stdout5.write(yes ? `  ${accent("\u{1F4D3} Scriber")} on.
+` : `  ${dim("Scriber off \u2014 `oriro scribe on` anytime.")}
+`);
+  }
+  if (!hasRouterChoice()) await runRouterOnboarding();
+  stdout5.write(`
+  ${accent("ORIRO is ready.")} ${dim("Type to chat \xB7 /exit to leave")}
+
+`);
+}
+
+// src/onboarding/assemble.ts
+import {
+  createAgentSession as createAgentSession2,
+  AuthStorage as AuthStorage2,
+  ModelRegistry as ModelRegistry2,
+  SessionManager as SessionManager2,
+  SettingsManager,
+  DefaultResourceLoader,
+  getAgentDir
+} from "@earendil-works/pi-coding-agent";
+
+// src/routers/mux-provider.ts
+import { streamSimple as piStreamSimple, createAssistantMessageEventStream } from "@earendil-works/pi-ai";
+import { register as registerOpenAICompletions } from "@earendil-works/pi-ai/openai-completions";
+
+// src/routers/mux.ts
+import { existsSync as existsSync5, mkdirSync as mkdirSync8, readFileSync as readFileSync10, writeFileSync as writeFileSync10 } from "fs";
+import { join as join13 } from "path";
+var COOLDOWN_DEFAULT_MS = 6e4;
+var UNHEALTHY_AFTER = 3;
+var RouterMux = class {
+  stats = /* @__PURE__ */ new Map();
+  now;
+  constructor(routerIds, now = () => Date.now()) {
+    this.now = now;
+    for (const id of routerIds) {
+      this.stats.set(id, {
+        id,
+        latencyMs: Number.POSITIVE_INFINITY,
+        healthy: true,
+        cooldownUntil: 0,
+        consecutiveErrors: 0
+      });
+    }
+  }
+  /** Available routers, best-first (healthy, not cooling down, lowest latency). */
+  ranked() {
+    const t = this.now();
+    return [...this.stats.values()].filter((s) => s.healthy && s.cooldownUntil <= t).sort((a, b) => a.latencyMs - b.latencyMs).map((s) => s.id);
+  }
+  recordSuccess(id, latencyMs) {
+    const s = this.stats.get(id);
+    if (!s) return;
+    s.latencyMs = s.latencyMs === Number.POSITIVE_INFINITY ? latencyMs : 0.7 * s.latencyMs + 0.3 * latencyMs;
+    s.consecutiveErrors = 0;
+    s.healthy = true;
+  }
+  recordFailure(id, err) {
+    const s = this.stats.get(id);
+    if (!s) return;
+    s.consecutiveErrors += 1;
+    if (err?.status === 429) {
+      s.cooldownUntil = this.now() + (err.retryAfterMs ?? COOLDOWN_DEFAULT_MS);
+    }
+    if (s.consecutiveErrors >= UNHEALTHY_AFTER) s.healthy = false;
+  }
+  /** Run a call through the best router, failing over on error. Throws only if all exhausted. */
+  async run(call) {
+    const order = this.ranked();
+    if (order.length === 0) {
+      throw new Error(
+        "All selected routers are rate-limited or unavailable. Add a BYOK key, select more free routers, or retry shortly."
+      );
+    }
+    let lastErr;
+    for (const id of order) {
+      const t0 = this.now();
+      try {
+        const result = await call(id);
+        this.recordSuccess(id, this.now() - t0);
+        return { result, routerId: id };
+      } catch (e) {
+        const err = e;
+        this.recordFailure(id, { status: err?.status, retryAfterMs: err?.retryAfterMs });
+        lastErr = e;
+      }
+    }
+    throw lastErr instanceof Error ? lastErr : new Error("All selected routers failed this request.");
+  }
+  snapshot() {
+    return [...this.stats.values()].map((s) => ({ ...s }));
+  }
+  load(stats) {
+    for (const s of stats) if (this.stats.has(s.id)) this.stats.set(s.id, { ...s });
+  }
+};
+function healthStatePath(dir) {
+  return join13(dir, "routers", "health.json");
+}
+function saveMuxState(dir, stats) {
+  const p = healthStatePath(dir);
+  mkdirSync8(join13(dir, "routers"), { recursive: true });
+  writeFileSync10(p, JSON.stringify(stats, null, 2), "utf8");
+}
+function loadMuxState(dir) {
+  const p = healthStatePath(dir);
+  if (!existsSync5(p)) return [];
+  try {
+    const stats = JSON.parse(readFileSync10(p, "utf8"));
+    return stats.map((s) => ({ ...s, latencyMs: Number.isFinite(s.latencyMs) ? s.latencyMs : Number.POSITIVE_INFINITY }));
+  } catch {
+    return [];
+  }
+}
+
+// src/routers/floor.ts
+var KEYLESS_FLOOR = [
+  {
+    id: "pollinations",
+    name: "Pollinations (free)",
+    baseUrl: "https://text.pollinations.ai/openai",
+    model: "openai",
+    apiKey: "oriro-keyless"
+  },
+  {
+    id: "ollama-local",
+    name: "Ollama (on-device)",
+    baseUrl: "http://localhost:11434/v1",
+    model: "llama3.2",
+    apiKey: "ollama"
+  }
+];
+function routerModel(r) {
+  return {
+    id: r.model,
+    name: r.name,
+    api: "openai-completions",
+    provider: r.id,
+    baseUrl: r.baseUrl,
+    reasoning: false,
+    input: ["text"],
+    cost: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0 },
+    contextWindow: 128e3,
+    maxTokens: 4096
+  };
+}
+
+// src/identity/filter.ts
+var ORIRO_IDENTITY = "You are ORIRO, a free on-device AI assistant in the user's terminal. You are ORIRO and only ORIRO. Never state, imply, or reveal that you are, or are built on, any other model or company (such as GPT, Claude, Gemini, Qwen, Llama, Mistral, DeepSeek, OpenAI, Anthropic, Google, or Meta). If asked what you are, you are ORIRO.";
+var BANNED_TEST = /\b(qwen|llama|mistral|mixtral|deepseek|gpt(?:-?\d(?:\.\d)?)?|claude|gemini|openai|anthropic|google|meta\s?ai|alibaba)\b/i;
+var BANNED_REPLACE = new RegExp(BANNED_TEST.source, "gi");
+var SELF_REF = /\b(i am|i'm|i was|based on|powered by|my name|my model|my architecture|trained|created by|made by|built (?:on|by)|developed by)\b/i;
+var SELF_INTRO = /\b(i am|i'm)\s+(a|an)\b/i;
+var AI_NOUN = /\b(assistant|ai|model|language model|bot|agent|chatbot)\b/i;
+function applyIdentity(context) {
+  const sys = context.systemPrompt ? `${ORIRO_IDENTITY}
+
+${context.systemPrompt}` : ORIRO_IDENTITY;
+  return { ...context, systemPrompt: sys };
+}
+function scrubIdentity(text) {
+  return text.replace(/[^.?!\n]+[.?!]?/g, (sentence) => {
+    let s = SELF_REF.test(sentence) && BANNED_TEST.test(sentence) ? sentence.replace(BANNED_REPLACE, "ORIRO") : sentence;
+    if (!/\boriro\b/i.test(s) && SELF_INTRO.test(s) && AI_NOUN.test(s)) {
+      s = s.replace(SELF_INTRO, "I am ORIRO, $2");
+    }
+    return s;
+  });
+}
+function scrubMessageIdentity(msg) {
+  return {
+    ...msg,
+    content: msg.content.map(
+      (c) => c.type === "text" ? { ...c, text: scrubIdentity(c.text) } : c
+    )
+  };
+}
+
+// src/routers/tool-sanitize.ts
+var CONTROL_TOKEN = /<\|[^|]*\|>/g;
+var RECIPIENT_PREFIX = /^(?:to=)?(?:functions?|tools?|recipient)[.=]/i;
+var RECIPIENT = /(?:to=)?(?:functions?|tools?|recipient)[.=]([A-Za-z0-9_.:-]+)/i;
+var CLEAN_NAME = /^[A-Za-z0-9_.:-]+$/;
+function sanitizeToolName(raw) {
+  if (!raw) return raw;
+  if (!raw.includes("<|") && !RECIPIENT_PREFIX.test(raw)) return raw;
+  const base = (raw.split("<|")[0] ?? "").replace(RECIPIENT_PREFIX, "").trim();
+  if (base && CLEAN_NAME.test(base)) return base;
+  const recip = raw.match(RECIPIENT);
+  if (recip?.[1]) return recip[1];
+  const m = raw.replace(CONTROL_TOKEN, " ").match(/[A-Za-z_][A-Za-z0-9_.:-]*/);
+  return m ? m[0] : raw;
+}
+function sanitizeMessageToolCalls(msg) {
+  let changed = false;
+  const content = msg.content.map((c) => {
+    if (c.type === "toolCall") {
+      const name = sanitizeToolName(c.name);
+      if (name !== c.name) {
+        changed = true;
+        return { ...c, name };
+      }
+    }
+    return c;
+  });
+  return changed ? { ...msg, content } : msg;
+}
+function sanitizeEventToolCalls(ev) {
+  let next = ev;
+  if ("partial" in next && next.partial) {
+    const partial = sanitizeMessageToolCalls(next.partial);
+    if (partial !== next.partial) next = { ...next, partial };
+  }
+  if (next.type === "toolcall_end" && next.toolCall) {
+    const name = sanitizeToolName(next.toolCall.name);
+    if (name !== next.toolCall.name) next = { ...next, toolCall: { ...next.toolCall, name } };
+  }
+  return next;
+}
+
+// src/scribe/scribe-pi.ts
+import { existsSync as existsSync10, readFileSync as readFileSync16 } from "fs";
+import { Type } from "typebox";
+
+// src/scribe/capture.ts
+import { closeSync as closeSync2, fsyncSync as fsyncSync2, mkdirSync as mkdirSync11, openSync as openSync2, writeSync as writeSync2 } from "fs";
+import { join as join15 } from "path";
+
+// src/scribe/digest.ts
+import { existsSync as existsSync6, mkdirSync as mkdirSync9, readFileSync as readFileSync11, writeFileSync as writeFileSync11 } from "fs";
+
+// src/scribe/paths.ts
+import { join as join14 } from "path";
+function scribeDir() {
+  const override = process.env.ORIRO_SCRIBE_DIR?.trim();
+  return override && override.length > 0 ? override : join14(CONFIG_DIR, "scribe");
+}
+function journalFile(date) {
+  return join14(scribeDir(), `${date}.md`);
+}
+function digestFile() {
+  return join14(scribeDir(), "_digest.md");
+}
+function timelineFile() {
+  return join14(scribeDir(), "_timeline.md");
+}
+function artifactsDir() {
+  return join14(scribeDir(), "artifacts");
+}
+
+// src/scribe/digest.ts
+var DIGEST_CAP = 8192;
+var TIMELINE_DAY_CAP = 400;
+function read(file4) {
+  return existsSync6(file4) ? readFileSync11(file4, "utf8") : "";
+}
+function updateDigest(summary, context) {
+  mkdirSync9(scribeDir(), { recursive: true });
+  const existing = read(digestFile());
+  let contextBlock = context?.trim();
+  if (!contextBlock) {
+    const m = existing.match(/## Context\n([\s\S]*?)\n## /);
+    contextBlock = m?.[1]?.trim() ?? "_(not set yet)_";
+  }
+  const recentMatch = existing.match(/## Recent activity[^\n]*\n([\s\S]*)$/);
+  const priorRecent = recentMatch?.[1]?.trim() ?? "";
+  let recent = summary.trim() ? `- ${summary.trim()}
+${priorRecent}` : priorRecent;
+  const header2 = `# ORIRO Scribe \u2014 Digest
+
+## Context
+${contextBlock}
+
+## Recent activity (newest first)
+`;
+  let out = header2 + recent;
+  while (Buffer.byteLength(out, "utf8") > DIGEST_CAP && recent.includes("\n")) {
+    recent = recent.slice(0, recent.lastIndexOf("\n")).trimEnd();
+    out = header2 + recent;
+  }
+  writeFileSync11(digestFile(), out, "utf8");
+}
+function updateTimeline(date, topic) {
+  mkdirSync9(scribeDir(), { recursive: true });
+  const clean = topic.replace(/\s+/g, " ").trim();
+  if (!clean) return;
+  const lines = read(timelineFile()).split("\n").filter(Boolean);
+  const header2 = "# ORIRO Scribe \u2014 Timeline";
+  const body = lines.filter((l) => l !== header2);
+  const idx = body.findIndex((l) => l.startsWith(`- ${date} \xB7`));
+  if (idx === -1) {
+    body.push(`- ${date} \xB7 ${clean}`.slice(0, TIMELINE_DAY_CAP + date.length + 6));
+  } else {
+    let merged = `${body[idx]}; ${clean}`;
+    if (merged.length > TIMELINE_DAY_CAP) merged = `${merged.slice(0, TIMELINE_DAY_CAP)}\u2026`;
+    body[idx] = merged;
+  }
+  body.sort();
+  writeFileSync11(timelineFile(), `${header2}
+${body.join("\n")}
+`, "utf8");
+}
+function readDigest() {
+  return read(digestFile());
+}
+function readTimeline() {
+  return read(timelineFile());
+}
+
+// src/scribe/journal.ts
+import {
+  closeSync,
+  existsSync as existsSync7,
+  fsyncSync,
+  mkdirSync as mkdirSync10,
+  openSync,
+  readFileSync as readFileSync12,
+  writeSync
+} from "fs";
+function appendJournal(date, content) {
+  mkdirSync10(scribeDir(), { recursive: true });
+  const fd = openSync(journalFile(date), "a");
+  try {
+    writeSync(fd, content.endsWith("\n") ? content : `${content}
+`);
+    fsyncSync(fd);
+  } finally {
+    closeSync(fd);
+  }
+}
+function readJournal(date) {
+  const f = journalFile(date);
+  return existsSync7(f) ? readFileSync12(f, "utf8") : "";
+}
+
+// src/scribe/redact.ts
+var RULES = [
+  {
+    label: "private-key",
+    re: /-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]*?-----END [A-Z ]*PRIVATE KEY-----/g
+  },
+  // Lone PEM markers — a key SPLIT across fields/turns leaves only a BEGIN-head or an END-tail in
+  // one field. A field carrying either marker is key material: redact the marker + its adjacent body
+  // (forward from BEGIN, backward to END) so no sub-threshold fragment can ever sit on disk.
+  { label: "private-key", re: /-----BEGIN[A-Z ]*PRIVATE KEY-----[\s\S]*/g },
+  { label: "private-key", re: /[\s\S]*-----END[A-Z ]*PRIVATE KEY-----/g },
+  { label: "anthropic-key", re: /sk-ant-[A-Za-z0-9_-]{20,}/g },
+  { label: "openrouter-key", re: /sk-or-v1-[A-Za-z0-9]{20,}/g },
+  // Stripe-style keys (sk_live_/pk_live_/rk_test_/…), underscore segments.
+  { label: "stripe-key", re: /\b[srp]k_(?:live|test)_[A-Za-z0-9]{16,}/g },
+  // Generic sk- secret keys — allow hyphenated segments (sk-live-…, sk-proj-…) so a second
+  // hyphen no longer breaks the match (the gap the Scriber spike caught).
+  { label: "secret-key-sk", re: /sk[-_][A-Za-z0-9][A-Za-z0-9-]{14,}/g },
+  { label: "google-key", re: /AIza[0-9A-Za-z_-]{30,}/g },
+  { label: "groq-key", re: /gsk_[A-Za-z0-9]{20,}/g },
+  { label: "github-pat", re: /github_pat_[A-Za-z0-9_]{20,}/g },
+  { label: "github-token", re: /gh[posr]_[A-Za-z0-9]{30,}/g },
+  { label: "xai-key", re: /xai-[A-Za-z0-9]{20,}/g },
+  { label: "aws-key", re: /AKIA[0-9A-Z]{16}/g },
+  { label: "jwt", re: /eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{6,}/g },
+  { label: "telegram-token", re: /\b\d{8,10}:[A-Za-z0-9_-]{30,}\b/g },
+  // Auth headers / inline credentials (any provider) — the audit found these leaked.
+  { label: "bearer-token", re: /\bbearer\s+[A-Za-z0-9._~+/=-]{12,}/gi },
+  { label: "basic-auth", re: /\bbasic\s+[A-Za-z0-9+/=]{12,}/gi },
+  // key: value / key=value secrets (password, token, secret, api_key, access_key, …).
+  { label: "secret-kv", re: /\b(?:pass(?:word|wd)?|pwd|secret|token|api[_-]?key|access[_-]?key|auth)\s*[:=]\s*\S{3,}/gi },
+  // Credentials embedded in a URL: scheme://user:PASSWORD@host  → redact the password.
+  { label: "url-credential", re: /\b([a-z][a-z0-9+.-]*:\/\/[^/\s:@]+:)[^/\s@]+(@)/gi },
+  { label: "email", re: /[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}/g },
+  { label: "phone", re: /(?:\+?\d{1,3}[-.\s]?)?\(?\d{3}\)?[-.\s]\d{3}[-.\s]\d{4}/g }
+];
+function marker(label) {
+  return `\u27E8REDACTED:${label}\u27E9`;
+}
+function entropy(s) {
+  const freq = /* @__PURE__ */ new Map();
+  for (const ch of s) freq.set(ch, (freq.get(ch) ?? 0) + 1);
+  let h = 0;
+  for (const n of freq.values()) {
+    const p = n / s.length;
+    h -= p * Math.log2(p);
+  }
+  return h;
+}
+function looksLikeUnknownSecret(token) {
+  if (token.length < 32) return false;
+  if (token.includes("\u27E8REDACTED:")) return false;
+  if (/^[0-9a-f]+$/i.test(token)) return false;
+  const classes = (/[a-z]/.test(token) ? 1 : 0) + (/[A-Z]/.test(token) ? 1 : 0) + (/[0-9]/.test(token) ? 1 : 0);
+  if (classes < 2) return false;
+  return entropy(token) >= 4.2;
+}
+function redact(input) {
+  const counts = /* @__PURE__ */ new Map();
+  let text = input;
+  for (const rule of RULES) {
+    text = text.replace(rule.re, () => {
+      counts.set(rule.label, (counts.get(rule.label) ?? 0) + 1);
+      return marker(rule.label);
+    });
+  }
+  text = text.split(/(\s+)/).map((tok) => {
+    if (looksLikeUnknownSecret(tok)) {
+      counts.set("high-entropy", (counts.get("high-entropy") ?? 0) + 1);
+      return marker("high-entropy");
+    }
+    return tok;
+  }).join("");
+  const redactions = [...counts.entries()].map(([label, count]) => ({
+    label,
+    count
+  }));
+  return { text, redactions };
+}
+function containsSecret(text) {
+  for (const rule of RULES) {
+    rule.re.lastIndex = 0;
+    if (rule.re.test(text)) return true;
+  }
+  for (const tok of text.split(/\s+/)) {
+    if (looksLikeUnknownSecret(tok)) return true;
+  }
+  return false;
+}
+
+// src/scribe/capture.ts
+var INLINE_CAP = 4e3;
+function sideFile(date, ts, kind, full) {
+  mkdirSync11(artifactsDir(), { recursive: true });
+  const name = `${date}_${ts.replace(/[:.]/g, "-")}_${kind}.md`;
+  const p = join15(artifactsDir(), name);
+  const fd = openSync2(p, "w");
+  try {
+    writeSync2(fd, full);
+    fsyncSync2(fd);
+  } finally {
+    closeSync2(fd);
+  }
+  return p;
+}
+function field(date, ts, label, value) {
+  if (!value || !value.trim()) return "";
+  if (value.length > INLINE_CAP) {
+    const ref = sideFile(date, ts, label.toLowerCase().replace(/\s+/g, "-"), value);
+    return `**${label}** (full \u2192 ${ref}):
+${value.slice(0, INLINE_CAP)}
+\u2026(truncated; full content in artifact)
+
+`;
+  }
+  return `**${label}:**
+${value}
+
+`;
+}
+function renderTurn(rec) {
+  let md = `## ${rec.ts}
+
+`;
+  md += field(rec.date, rec.ts, "User", rec.user);
+  md += field(rec.date, rec.ts, "Router", rec.router);
+  if (rec.tools?.length) md += `**Tools:** ${rec.tools.join(", ")}
+
+`;
+  if (rec.files?.length) md += `**Files:** ${rec.files.join(", ")}
+
+`;
+  md += field(rec.date, rec.ts, "Note", rec.note);
+  return `${md}---
+`;
+}
+function oneLineSummary(rec) {
+  const bits = [];
+  if (rec.user) bits.push(rec.user.replace(/\s+/g, " ").slice(0, 80));
+  if (rec.files?.length) bits.push(`files: ${rec.files.slice(0, 3).join(", ")}`);
+  if (rec.note) bits.push(rec.note.replace(/\s+/g, " ").slice(0, 60));
+  return bits.join(" \xB7 ") || "(activity)";
+}
+function redactRecord(rec) {
+  const tally = /* @__PURE__ */ new Map();
+  const rd = (s) => {
+    if (!s) return s;
+    const r = redact(s);
+    for (const x of r.redactions) tally.set(x.label, (tally.get(x.label) ?? 0) + x.count);
+    return r.text;
+  };
+  const safeRec = {
+    ...rec,
+    user: rd(rec.user),
+    note: rd(rec.note),
+    router: rd(rec.router),
+    context: rd(rec.context),
+    files: rec.files?.map((f) => rd(f) ?? f)
+  };
+  return { rec: safeRec, redactions: [...tally.entries()].map(([label, count]) => ({ label, count })) };
+}
+function captureTurn(rec) {
+  const { rec: safeRec, redactions } = redactRecord(rec);
+  const journal = renderTurn(safeRec);
+  appendJournal(rec.date, `${journal}
+`);
+  updateDigest(`${safeRec.ts} \xB7 ${oneLineSummary(safeRec)}`, safeRec.context);
+  updateTimeline(safeRec.date, oneLineSummary(safeRec));
+  const auditClean = !containsSecret(readJournal(rec.date)) && !containsSecret(readDigest() ?? "");
+  return {
+    journalDate: rec.date,
+    redactions,
+    bytes: Buffer.byteLength(journal, "utf8"),
+    auditClean
+  };
+}
+
+// src/scribe/health.ts
+import {
+  closeSync as closeSync3,
+  fsyncSync as fsyncSync3,
+  mkdirSync as mkdirSync12,
+  openSync as openSync3,
+  readFileSync as readFileSync13,
+  writeFileSync as writeFileSync12,
+  writeSync as writeSync3
+} from "fs";
+import { join as join16 } from "path";
+function healthFile() {
+  return join16(scribeDir(), "_health.json");
+}
+function faultLogFile() {
+  return join16(scribeDir(), "_faults.log");
+}
+function read2() {
+  try {
+    return JSON.parse(readFileSync13(healthFile(), "utf8"));
+  } catch {
+    return { faultCount: 0 };
+  }
+}
+function write(h) {
+  mkdirSync12(scribeDir(), { recursive: true });
+  writeFileSync12(healthFile(), `${JSON.stringify(h, null, 2)}
+`, "utf8");
+}
+function recordHealth() {
+  const h = read2();
+  h.lastWriteAt = (/* @__PURE__ */ new Date()).toISOString();
+  write(h);
+}
+function recordFault(role, err) {
+  try {
+    mkdirSync12(scribeDir(), { recursive: true });
+    const msg = `${(/* @__PURE__ */ new Date()).toISOString()} [${role}] ${err instanceof Error ? err.message : String(err)}`;
+    const fd = openSync3(faultLogFile(), "a");
+    try {
+      writeSync3(fd, `${msg}
+`);
+      fsyncSync3(fd);
+    } finally {
+      closeSync3(fd);
+    }
+    const h = read2();
+    h.faultCount = (h.faultCount ?? 0) + 1;
+    h.lastFault = msg;
+    write(h);
+  } catch {
+  }
+}
+function readHealth() {
+  return read2();
+}
+
+// src/scribe/wal.ts
+import {
+  closeSync as closeSync4,
+  existsSync as existsSync8,
+  fsyncSync as fsyncSync4,
+  mkdirSync as mkdirSync13,
+  openSync as openSync4,
+  readFileSync as readFileSync14,
+  writeFileSync as writeFileSync13,
+  writeSync as writeSync4
+} from "fs";
+import { join as join17 } from "path";
+function walFile() {
+  return join17(scribeDir(), "_wal.jsonl");
+}
+function appendLine(obj) {
+  mkdirSync13(scribeDir(), { recursive: true });
+  const fd = openSync4(walFile(), "a");
+  try {
+    writeSync4(fd, `${JSON.stringify(obj)}
+`);
+    fsyncSync4(fd);
+  } finally {
+    closeSync4(fd);
+  }
+}
+function walAppend(id, rec) {
+  appendLine({ t: "add", id, rec });
+}
+function walCommit(id) {
+  appendLine({ t: "commit", id });
+}
+function walPending() {
+  if (!existsSync8(walFile())) return [];
+  const committed = /* @__PURE__ */ new Set();
+  const adds = /* @__PURE__ */ new Map();
+  for (const line of readFileSync14(walFile(), "utf8").split("\n")) {
+    if (!line.trim()) continue;
+    try {
+      const e = JSON.parse(line);
+      if (e.t === "commit") committed.add(e.id);
+      else if (e.t === "add" && e.rec) adds.set(e.id, e.rec);
+    } catch {
+    }
+  }
+  const out = [];
+  for (const [id, rec] of adds) {
+    if (!committed.has(id)) out.push({ id, rec });
+  }
+  return out;
+}
+function walCompact() {
+  if (!existsSync8(walFile())) return;
+  const pending = walPending();
+  const body = pending.map((p) => JSON.stringify({ t: "add", id: p.id, rec: p.rec })).join("\n");
+  writeFileSync13(walFile(), body ? `${body}
+` : "", "utf8");
+}
+
+// src/scribe/supervisor.ts
+var draining = false;
+function uid(ts) {
+  return `${ts}-${Math.random().toString(36).slice(2, 9)}`;
+}
+function drainBacklog() {
+  if (draining) return;
+  draining = true;
+  try {
+    let drained = 0;
+    for (const e of walPending()) {
+      try {
+        captureTurn(e.rec);
+        walCommit(e.id);
+        drained++;
+      } catch (err) {
+        recordFault("standby-replay", err);
+        break;
+      }
+    }
+    if (drained > 0) walCompact();
+  } finally {
+    draining = false;
+  }
+}
+function supervisedCapture(rec) {
+  try {
+    drainBacklog();
+    const id = uid(rec.ts);
+    const safe = redactRecord(rec).rec;
+    walAppend(id, safe);
+    try {
+      const res = captureTurn(safe);
+      walCommit(id);
+      walCompact();
+      recordHealth();
+      return res;
+    } catch (primaryErr) {
+      recordFault("primary", primaryErr);
+      try {
+        const res = captureTurn(safe);
+        walCommit(id);
+        walCompact();
+        recordHealth();
+        return res;
+      } catch (standbyErr) {
+        recordFault("standby", standbyErr);
+        return null;
+      }
+    }
+  } catch (fatal) {
+    recordFault("supervisor", fatal);
+    return null;
+  }
+}
+
+// src/scribe/retrieval.ts
+import { existsSync as existsSync9, readFileSync as readFileSync15, readdirSync } from "fs";
+function listDays() {
+  const dir = scribeDir();
+  if (!existsSync9(dir)) return [];
+  return readdirSync(dir).filter((f) => /^\d{4}-\d{2}-\d{2}\.md$/.test(f)).map((f) => f.replace(/\.md$/, "")).sort();
+}
+function readDay(date) {
+  const f = journalFile(date);
+  return existsSync9(f) ? readFileSync15(f, "utf8") : "";
+}
+function searchScribe(query, limit = 100) {
+  const q = query.toLowerCase().trim();
+  if (!q) return [];
+  const hits = [];
+  for (const date of listDays().reverse()) {
+    const lines = readDay(date).split("\n");
+    for (let i = 0; i < lines.length; i++) {
+      const ln = lines[i];
+      if (ln && ln.toLowerCase().includes(q)) {
+        hits.push({ date, line: i + 1, text: ln.trim().slice(0, 200) });
+        if (hits.length >= limit) return hits;
+      }
+    }
+  }
+  return hits;
+}
+
+// src/scribe/scribe-pi.ts
+function scribeTurn(input) {
+  if (!isScribeEnabled()) return;
+  const ts = (/* @__PURE__ */ new Date()).toISOString();
+  supervisedCapture({ ts, date: ts.slice(0, 10), ...input });
+}
+var pendingUserInput = "";
+function noteUserInput(text) {
+  pendingUserInput = text;
+}
+function takePendingUserInput() {
+  const u = pendingUserInput;
+  pendingUserInput = "";
+  return u;
+}
+function buildScribeContext() {
+  if (!isScribeEnabled()) return "";
+  const parts = [];
+  try {
+    const t = timelineFile();
+    if (existsSync10(t)) parts.push(`# Work history \u2014 every day so far
+${readFileSync16(t, "utf8").trim()}`);
+  } catch {
+  }
+  try {
+    const d = readDigest();
+    if (d?.trim()) parts.push(`# Current context (recent)
+${d.trim()}`);
+  } catch {
+  }
+  if (!parts.length) return "";
+  return `${parts.join("\n\n")}
+
+(Call scribe_recall to fetch the full text of any past day or topic.)`;
+}
+function registerScribe(pi) {
+  pi.registerTool({
+    name: "scribe_recall",
+    label: "ORIRO Scribe",
+    description: "Recall the user's past work from the on-device journal: search by keyword, or read a specific day (YYYY-MM-DD). Use to recover decisions, code, files, and context from earlier sessions.",
+    parameters: Type.Object({
+      query: Type.Optional(Type.String({ description: "Keyword/topic to search across all journals." })),
+      day: Type.Optional(Type.String({ description: "A specific day YYYY-MM-DD to read in full." }))
+    }),
+    async execute(_id, params) {
+      let text;
+      const details = {};
+      if (!isScribeEnabled()) {
+        text = "Scribe is off (the user has not enabled it).";
+      } else if (params.day) {
+        text = readDay(params.day) || `No journal for ${params.day}. Days: ${listDays().join(", ") || "none"}`;
+        details.day = params.day;
+      } else {
+        const hits = params.query ? searchScribe(params.query) : [];
+        details.hits = hits;
+        text = hits.length ? hits.map((h) => `${h.date}:${h.line}  ${h.text}`).join("\n") : `No matches${params.query ? ` for "${params.query}"` : ""}. Days recorded: ${listDays().join(", ") || "none"}`;
+      }
+      return { content: [{ type: "text", text }], details };
+    }
+  });
+}
+function attachScribe(session) {
+  let user = "";
+  let assistant = "";
+  const tools = /* @__PURE__ */ new Set();
+  session.subscribe((e) => {
+    if (!isScribeEnabled()) return;
+    if (e?.type === "user_message" || e?.type === "session_user_message") user = String(e.text ?? e.message ?? user);
+    if (e?.type === "message_update" && e.assistantMessageEvent?.type === "text_delta") assistant += e.assistantMessageEvent.delta ?? "";
+    if ((e?.type === "tool_call" || e?.type === "tool_execution_start") && e.toolName) tools.add(String(e.toolName));
+    if (e?.type === "agent_end") {
+      const userText = takePendingUserInput() || user;
+      scribeTurn({ user: userText || void 0, router: "oriro-free", tools: [...tools], note: assistant.slice(0, 4e3) || void 0 });
+      user = "";
+      assistant = "";
+      tools.clear();
+    }
+  });
+}
+
+// src/routers/mux-provider.ts
+var MUX_PROVIDER = "oriro-mux";
+var MUX_MODEL = "oriro-free";
+function errToCallError(msg) {
+  const text = msg.errorMessage ?? "";
+  return /\b429\b|rate.?limit|too many requests/i.test(text) ? { status: 429 } : {};
+}
+function buildErrorMessage(message) {
+  return {
+    role: "assistant",
+    content: [],
+    api: "openai-completions",
+    provider: MUX_PROVIDER,
+    model: MUX_MODEL,
+    usage: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0, totalTokens: 0, cost: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0, total: 0 } },
+    stopReason: "error",
+    timestamp: Date.now(),
+    errorMessage: message
+  };
+}
+async function driveMux(out, mux, byId, context, options) {
+  let lastError;
+  for (const id of mux.ranked()) {
+    const router = byId.get(id);
+    if (!router) continue;
+    const t0 = Date.now();
+    let committed = false;
+    let lastPartial;
+    try {
+      const inner = piStreamSimple(routerModel(router), context, {
+        ...options ?? {},
+        apiKey: router.apiKey
+      });
+      let failedBeforeContent = false;
+      for await (const ev of inner) {
+        if (ev.type === "error") {
+          mux.recordFailure(id, errToCallError(ev.error));
+          if (!committed) {
+            lastError = ev.error;
+            failedBeforeContent = true;
+            break;
+          }
+          out.push(ev);
+          out.end(ev.error);
+          return;
+        }
+        committed = true;
+        if (ev.type === "done") {
+          mux.recordSuccess(id, Date.now() - t0);
+          const clean = sanitizeMessageToolCalls(scrubMessageIdentity(ev.message));
+          out.push({ type: "done", reason: ev.reason, message: clean });
+          out.end(clean);
+          return;
+        }
+        lastPartial = ev.partial;
+        out.push(sanitizeEventToolCalls(ev));
+      }
+      if (failedBeforeContent) continue;
+      if (!committed) {
+        mux.recordFailure(id, {});
+        lastError ??= buildErrorMessage("Router returned no output.");
+        continue;
+      }
+      mux.recordSuccess(id, Date.now() - t0);
+      out.end(lastPartial ? sanitizeMessageToolCalls(scrubMessageIdentity(lastPartial)) : void 0);
+      return;
+    } catch (e) {
+      mux.recordFailure(id, e);
+    }
+  }
+  const msg = lastError ?? buildErrorMessage(
+    "All keyless routers are unavailable. Add a BYOK key, select more free routers, or retry shortly."
+  );
+  out.push({ type: "error", reason: "error", error: msg });
+  out.end(msg);
+}
+function registerOriroMux(registry, opts = {}) {
+  registerOpenAICompletions();
+  const pooled = resolvePool();
+  const routers = opts.routers ?? (pooled.length > 0 ? pooled : KEYLESS_FLOOR);
+  const byId = new Map(routers.map((r) => [r.id, r]));
+  const mux = new RouterMux(routers.map((r) => r.id));
+  try {
+    mux.load(loadMuxState(oriroDir()));
+  } catch {
+  }
+  registry.registerProvider(MUX_PROVIDER, {
+    name: "ORIRO Free (keyless Mux)",
+    api: "openai-completions",
+    apiKey: "oriro-keyless",
+    // Placeholder — required by registry validation but never used: our custom streamSimple
+    // routes to the real keyless floor endpoints itself (see driveMux).
+    baseUrl: "http://oriro-mux.local",
+    models: [
+      {
+        id: MUX_MODEL,
+        name: "ORIRO Free (best-router)",
+        api: "openai-completions",
+        baseUrl: "http://oriro-mux.local",
+        reasoning: false,
+        input: ["text"],
+        cost: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0 },
+        contextWindow: 128e3,
+        maxTokens: 4096
+      }
+    ],
+    streamSimple: (_model, context, options) => {
+      const out = createAssistantMessageEventStream();
+      const ctx = applyIdentity(context);
+      const memory = buildScribeContext();
+      const withMemory = memory ? { ...ctx, systemPrompt: `${ctx.systemPrompt}
+
+${memory}` } : ctx;
+      void driveMux(out, mux, byId, withMemory, options).finally(() => {
+        try {
+          saveMuxState(oriroDir(), mux.snapshot());
+        } catch {
+        }
+      });
+      return out;
+    }
+  });
+  return registry.find(MUX_PROVIDER, MUX_MODEL);
+}
+
+// src/head/pi-tool.ts
+import { Type as Type2 } from "typebox";
+
+// src/head/comparison-engine.ts
+var SECTION_RULES = [
+  {
+    type: "hero",
+    label: "Hero",
+    priority: "CRITICAL",
+    markup: [/<h1[\s>]/],
+    recommend: "Add a clear above-the-fold hero \u2014 one headline that states the value + one primary CTA."
+  },
+  {
+    type: "navigation",
+    label: "Navigation",
+    priority: "CRITICAL",
+    markup: [/<nav[\s>]/, /role=["']navigation["']/],
+    recommend: "Add a top navigation so visitors can reach key sections."
+  },
+  {
+    type: "features",
+    label: "Features",
+    priority: "CRITICAL",
+    text: [/\bfeatures?\b/, /\bwhat you (?:can|get)\b/, /\bcapabilit/],
+    recommend: "Add a features section that spells out concrete capabilities, not adjectives."
+  },
+  {
+    type: "pricing",
+    label: "Pricing",
+    priority: "CRITICAL",
+    text: [/\bpricing\b/, /\bper month\b/, /\b\/mo\b/, /\bfree plan\b/, /\$\d/, /₹\d/, /€\d/],
+    recommend: 'Add transparent pricing \u2014 a critical conversion element; even a single "Free" tier helps.'
+  },
+  {
+    type: "cta",
+    label: "Call-to-Action",
+    priority: "CRITICAL",
+    text: [/\bget started\b/, /\bsign up\b/, /\bstart (?:free|now|building)\b/, /\btry (?:it|now|free)\b/, /\bbook a demo\b/, /\bget a demo\b/],
+    recommend: 'Add a strong, repeated primary CTA ("Get started") so the next step is obvious.'
+  },
+  {
+    type: "testimonials",
+    label: "Testimonials",
+    priority: "HIGH",
+    text: [/\btestimonial/, /\bwhat (?:our )?(?:customers|users) say\b/, /\bloved by\b/, /\breview(?:s|ed)\b/],
+    recommend: "Add 2\u20133 customer testimonials with names/photos to build trust."
+  },
+  {
+    type: "stats",
+    label: "Stats / Metrics",
+    priority: "HIGH",
+    text: [/\b\d[\d,.]*\s*[kkmm]\+?\s*(?:users|customers|developers|downloads|teams)\b/, /\b9\d(?:\.\d+)?%\b/, /\buptime\b/],
+    recommend: 'Add impressive metrics ("10K+ users", "99.9% uptime") as social proof.'
+  },
+  {
+    type: "video",
+    label: "Video",
+    priority: "HIGH",
+    markup: [/<video[\s>]/, /youtube\.com\/embed/, /player\.vimeo\.com/, /<iframe[^>]+(?:youtube|vimeo)/],
+    text: [/\bwatch the (?:video|demo)\b/],
+    recommend: "Add a short explainer/demo video \u2014 it lifts conversion on landing pages."
+  },
+  {
+    type: "demo",
+    label: "Live Demo",
+    priority: "HIGH",
+    text: [/\btry it (?:now|live|free)\b/, /\bplayground\b/, /\binteractive demo\b/, /\blive demo\b/],
+    recommend: 'Add a "try it" live demo or playground so visitors experience the product immediately.'
+  },
+  {
+    type: "socialProof",
+    label: "Social Proof",
+    priority: "HIGH",
+    text: [/\btrusted by\b/, /\bbacked by\b/, /\bused by\b/, /\bas seen (?:in|on)\b/, /\bcustomers include\b/],
+    recommend: 'Add social proof (customer/investor logos, "trusted by \u2026") near the hero.'
+  },
+  {
+    type: "faq",
+    label: "FAQ",
+    priority: "MEDIUM",
+    text: [/\bfaq\b/, /\bfrequently asked\b/],
+    markup: [/<details[\s>]/],
+    recommend: "Add an FAQ that answers the top objections before they become exits."
+  },
+  {
+    type: "integrations",
+    label: "Integrations",
+    priority: "MEDIUM",
+    text: [/\bintegrations?\b/, /\bworks with\b/, /\bconnect your\b/],
+    recommend: "Add an integrations section showing what the product connects to."
+  },
+  {
+    type: "newsletter",
+    label: "Newsletter / Capture",
+    priority: "MEDIUM",
+    text: [/\bsubscribe\b/, /\bnewsletter\b/, /\bjoin (?:the )?waitlist\b/],
+    markup: [/type=["']email["']/],
+    recommend: "Add an email capture (newsletter/waitlist) so non-converting visitors are not lost."
+  },
+  {
+    type: "comparison",
+    label: "Comparison",
+    priority: "MEDIUM",
+    text: [/\bcompare\b/, /\bcomparison\b/, /\b vs\.? \b/, /\bwhy choose\b/],
+    recommend: 'Add a comparison ("us vs alternatives") to win evaluators who are shopping around.'
+  },
+  {
+    type: "team",
+    label: "Team / About",
+    priority: "LOW",
+    text: [/\bour team\b/, /\bmeet the team\b/, /\bfounders?\b/, /\babout us\b/],
+    recommend: "Add a brief team/about section to humanize the brand."
+  }
 ];
-function routerById(id) {
-  return ROUTER_CATALOG.find((r) => r.id === id);
+var PRIORITY_RANK = { CRITICAL: 0, HIGH: 1, MEDIUM: 2, LOW: 3 };
+var PRIORITY_EFFORT = { CRITICAL: "L", HIGH: "M", MEDIUM: "M", LOW: "S" };
+var FETCH_TIMEOUT_MS = 12e3;
+var UA = "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36 ORIRO-Inspector";
+async function fetchPage(url) {
+  const controller = new AbortController();
+  const timer = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);
+  const start = Date.now();
+  try {
+    const res = await fetch(url, {
+      signal: controller.signal,
+      redirect: "follow",
+      headers: { "user-agent": UA, accept: "text/html,application/xhtml+xml" }
+    });
+    const html = await res.text();
+    return { html, ms: Date.now() - start, status: res.status, ok: res.ok, error: "" };
+  } catch (err) {
+    return { html: "", ms: Date.now() - start, status: 0, ok: false, error: err instanceof Error ? err.message : "fetch failed" };
+  } finally {
+    clearTimeout(timer);
+  }
+}
+function toText(html) {
+  return html.replace(/<script[\s\S]*?<\/script>/gi, " ").replace(/<style[\s\S]*?<\/style>/gi, " ").replace(/<[^>]+>/g, " ").replace(/&nbsp;/gi, " ").replace(/\s+/g, " ").toLowerCase().trim();
+}
+function firstMatch(re, hay) {
+  const m = re.exec(hay);
+  if (!m) return "";
+  const slice = (m[0] ?? "").trim();
+  return slice.length > 80 ? `${slice.slice(0, 77)}\u2026` : slice;
+}
+function detectSections(rawHtmlLower, text) {
+  const found = [];
+  for (const rule of SECTION_RULES) {
+    let evidence = "";
+    for (const re of rule.markup ?? []) {
+      const hit = firstMatch(re, rawHtmlLower);
+      if (hit) {
+        evidence = hit;
+        break;
+      }
+    }
+    if (!evidence) {
+      for (const re of rule.text ?? []) {
+        const hit = firstMatch(re, text);
+        if (hit) {
+          evidence = hit;
+          break;
+        }
+      }
+    }
+    if (evidence) found.push({ type: rule.type, label: rule.label, priority: rule.priority, evidence });
+  }
+  return found;
+}
+function extractMatches(re, html, max) {
+  const out = [];
+  for (const m of html.matchAll(re)) {
+    const inner = (m[1] ?? "").replace(/<[^>]+>/g, " ").replace(/\s+/g, " ").trim();
+    if (inner && !out.includes(inner)) out.push(inner);
+    if (out.length >= max) break;
+  }
+  return out;
+}
+var CTA_WORDS = /\b(get started|sign up|start free|start now|start building|try (?:it|now|free)|book a demo|get a demo|request access|join (?:the )?waitlist|download)\b/i;
+function extractStructure(url, fr) {
+  const html = fr.html;
+  const lowerHtml = html.toLowerCase();
+  const text = toText(html);
+  const titleM = /<title[^>]*>([\s\S]*?)<\/title>/i.exec(html);
+  const title = (titleM?.[1] ?? "").replace(/\s+/g, " ").trim();
+  const descM = /<meta[^>]+name=["']description["'][^>]+content=["']([^"']*)["']/i.exec(html) ?? /<meta[^>]+content=["']([^"']*)["'][^>]+name=["']description["']/i.exec(html);
+  const description = (descM?.[1] ?? "").replace(/\s+/g, " ").trim();
+  const headings = extractMatches(/<h[1-3][^>]*>([\s\S]*?)<\/h[1-3]>/gi, html, 12);
+  const ctaAll = extractMatches(/<(?:a|button)[^>]*>([\s\S]*?)<\/(?:a|button)>/gi, html, 80);
+  const ctas = [];
+  for (const c of ctaAll) {
+    if (CTA_WORDS.test(c) && !ctas.includes(c)) ctas.push(c);
+    if (ctas.length >= 10) break;
+  }
+  const forms = (lowerHtml.match(/<form[\s>]/g) ?? []).length;
+  const links = (lowerHtml.match(/<a[\s>]/g) ?? []).length;
+  const images = (lowerHtml.match(/<img[\s>]/g) ?? []).length;
+  const hasVideo = /<video[\s>]/.test(lowerHtml) || /(?:youtube\.com\/embed|player\.vimeo\.com)/.test(lowerHtml);
+  const domNodes = (html.match(/<[a-z!\/]/gi) ?? []).length;
+  let note = "";
+  if (fr.ok && text.length < 400 && domNodes < 60) {
+    note = "Sparse HTML \u2014 likely a client-rendered (SPA) page; structure may be under-detected without a JS render.";
+  }
+  return {
+    url,
+    title,
+    description,
+    sections: detectSections(lowerHtml, text),
+    headings,
+    ctas,
+    forms,
+    links,
+    images,
+    hasVideo,
+    metrics: { htmlBytes: html.length, domNodes, fetchMs: fr.ms, status: fr.status },
+    ok: fr.ok && html.length > 0,
+    note: fr.ok ? note : `Could not load: ${fr.error || `HTTP ${fr.status}`}`
+  };
+}
+function ruleFor(type) {
+  return SECTION_RULES.find((r) => r.type === type) ?? SECTION_RULES[0];
+}
+function analyzeGaps(target, competitors) {
+  const targetTypes = new Set(target.sections.map((s) => s.type));
+  const compPresence = /* @__PURE__ */ new Map();
+  for (const comp of competitors) {
+    if (!comp.ok) continue;
+    for (const s of comp.sections) {
+      const list = compPresence.get(s.type) ?? [];
+      if (!list.includes(comp.url)) list.push(comp.url);
+      compPresence.set(s.type, list);
+    }
+  }
+  const missing = [];
+  const parity = [];
+  for (const [type, presentOn] of compPresence) {
+    if (targetTypes.has(type)) {
+      parity.push(type);
+    } else {
+      const rule = ruleFor(type);
+      missing.push({ section: type, label: rule.label, priority: rule.priority, presentOn, recommendation: rule.recommend });
+    }
+  }
+  missing.sort((a, b) => PRIORITY_RANK[a.priority] - PRIORITY_RANK[b.priority] || b.presentOn.length - a.presentOn.length);
+  const advantages = target.sections.filter((s) => !compPresence.has(s.type));
+  return { missing, advantages, parity };
+}
+function generateActionItems(missing) {
+  return missing.map((g) => ({
+    title: `Add a ${g.label} section`,
+    priority: g.priority,
+    effort: PRIORITY_EFFORT[g.priority],
+    rationale: `${g.presentOn.length} of the compared page(s) have it; you don't. ${g.recommendation}`
+  }));
+}
+function hostOf(url) {
+  try {
+    return new URL(url).host.replace(/^www\./, "");
+  } catch {
+    return url;
+  }
+}
+function generateSummary(target, competitors, gaps) {
+  const okComps = competitors.filter((c) => c.ok);
+  const tName = hostOf(target.url);
+  if (!target.ok) return `Could not load ${tName} (${target.note}). Nothing to compare against yet.`;
+  if (okComps.length === 0) return `Loaded ${tName} (${target.sections.length} sections) but none of the comparison URLs could be loaded.`;
+  const crit = gaps.missing.filter((m) => m.priority === "CRITICAL").map((m) => m.label);
+  const high = gaps.missing.filter((m) => m.priority === "HIGH").map((m) => m.label);
+  const parts = [];
+  parts.push(`${tName} has ${target.sections.length} detectable sections; compared against ${okComps.length} page(s).`);
+  if (gaps.missing.length === 0) {
+    parts.push("No structural gaps found \u2014 you cover everything they do.");
+  } else {
+    parts.push(`${gaps.missing.length} gap(s) found.`);
+    if (crit.length) parts.push(`Critical: ${crit.join(", ")}.`);
+    if (high.length) parts.push(`High: ${high.join(", ")}.`);
+  }
+  if (gaps.advantages.length) parts.push(`Your edge: ${gaps.advantages.map((a) => a.label).join(", ")}.`);
+  return parts.join(" ");
+}
+function normalizeUrl(u) {
+  const t = (u || "").trim();
+  if (!t) return t;
+  return /^https?:\/\//i.test(t) ? t : `https://${t}`;
+}
+async function comparePages(opts) {
+  const targetUrl = normalizeUrl(opts.targetUrl);
+  const competitorUrls = (opts.competitorUrls ?? []).map(normalizeUrl).filter((u) => u.length > 0).slice(0, 30);
+  const [targetFetch, ...compFetches] = await Promise.all([
+    fetchPage(targetUrl),
+    ...competitorUrls.map((u) => fetchPage(u))
+  ]);
+  const target = extractStructure(targetUrl, targetFetch ?? { html: "", ms: 0, status: 0, ok: false, error: "no fetch" });
+  const competitors = competitorUrls.map(
+    (u, i) => extractStructure(u, compFetches[i] ?? { html: "", ms: 0, status: 0, ok: false, error: "no fetch" })
+  );
+  const gaps = analyzeGaps(target, competitors);
+  return {
+    target,
+    competitors,
+    missing: gaps.missing,
+    advantages: gaps.advantages,
+    parity: gaps.parity,
+    actionItems: generateActionItems(gaps.missing),
+    summary: generateSummary(target, competitors, gaps)
+  };
+}
+
+// src/head/pi-tool.ts
+function summarizeForCoder(report) {
+  const lines = [report.summary];
+  const page = (p) => `  \u2022 ${p.url} \u2014 ${p.ok ? `${p.sections.length} sections: ${p.sections.map((s) => s.type).join(", ")}` : `not readable (${p.note})`}`;
+  lines.push("Pages seen:");
+  lines.push(page(report.target));
+  for (const c of report.competitors) if (c.url !== report.target.url) lines.push(page(c));
+  if (report.missing.length) {
+    lines.push("Missing on the target (gaps to build):");
+    for (const g of report.missing.slice(0, 12)) lines.push(`  \u2022 ${g.label} (${g.priority}) \u2014 ${g.recommendation}`);
+  }
+  if (report.actionItems.length) {
+    lines.push("Suggested action items:");
+    for (const a of report.actionItems.slice(0, 12)) lines.push(`  \u2192 ${a.title} [${a.priority}/${a.effort}] \u2014 ${a.rationale}`);
+  }
+  return lines.join("\n");
+}
+var InspectSiteParams = Type2.Object({
+  url: Type2.String({ description: "The target website URL to inspect or rebuild from." }),
+  competitors: Type2.Optional(
+    Type2.Array(Type2.String(), { description: "Optional competitor/reference URLs to compare the target against." })
+  )
+});
+function registerHead(pi) {
+  pi.registerTool({
+    name: "inspect_site",
+    label: "ORIRO Head",
+    description: "Go out to a live website and SEE it: its sections, CTAs, structure, and any gaps versus competitor URLs. Returns a structured report to build from. Call this whenever the user wants to look at, compare against, or rebuild a website/page.",
+    parameters: InspectSiteParams,
+    async execute(_toolCallId, params) {
+      const target = params.url;
+      const competitors = params.competitors?.length ? params.competitors : [target];
+      const report = await comparePages({ targetUrl: target, competitorUrls: competitors });
+      return { content: [{ type: "text", text: summarizeForCoder(report) }], details: report };
+    }
+  });
+}
+
+// src/orchestrate.ts
+import { createAgentSession, AuthStorage, ModelRegistry, SessionManager } from "@earendil-works/pi-coding-agent";
+import { Type as Type3 } from "typebox";
+var MAX_AGENTS = 8;
+var MAX_CONCURRENCY = 4;
+async function runOnce(spec) {
+  const authStorage = AuthStorage.inMemory();
+  const modelRegistry = ModelRegistry.inMemory(authStorage);
+  const model = registerOriroMux(modelRegistry);
+  if (!model) return { ...spec, ok: false, output: "no free model available" };
+  const { session } = await createAgentSession({
+    model,
+    authStorage,
+    modelRegistry,
+    sessionManager: SessionManager.inMemory(),
+    noTools: "all"
+  });
+  let out = "";
+  const unsub = session.subscribe((e) => {
+    if (e.type === "message_update" && e.assistantMessageEvent?.type === "text_delta") out += e.assistantMessageEvent.delta ?? "";
+  });
+  try {
+    await session.prompt(`You are the ${spec.role} sub-agent. ${spec.task}`);
+  } catch (e) {
+    return { ...spec, ok: false, output: e instanceof Error ? e.message : String(e) };
+  } finally {
+    unsub();
+    session.dispose();
+  }
+  return { ...spec, ok: out.trim().length > 0, output: out.trim() };
+}
+async function runAgent(spec) {
+  let last = await runOnce(spec);
+  if (!last.ok) last = await runOnce(spec);
+  return last;
+}
+async function runPool(items, n, fn) {
+  const results = new Array(items.length);
+  let i = 0;
+  async function worker() {
+    while (i < items.length) {
+      const idx = i++;
+      const item = items[idx];
+      if (item === void 0) continue;
+      results[idx] = await fn(item);
+    }
+  }
+  await Promise.all(Array.from({ length: Math.min(n, items.length) }, () => worker()));
+  return results;
+}
+async function orchestrate(opts) {
+  const agents = opts.agents.slice(0, MAX_AGENTS);
+  if ((opts.mode ?? "parallel") === "chain") {
+    const results = [];
+    let prev = "";
+    for (const a of agents) {
+      const r = await runAgent({ role: a.role, task: prev ? `${a.task}
+
+Previous result:
+${prev}` : a.task });
+      results.push(r);
+      prev = r.output;
+    }
+    return results;
+  }
+  return runPool(agents, MAX_CONCURRENCY, runAgent);
+}
+function registerOrchestrator(pi) {
+  pi.registerTool({
+    name: "deploy_agents",
+    label: "ORIRO Orchestrator",
+    description: "Deploy multiple sub-agents in parallel (or chained) to do work \u2014 e.g. 'spawn 4 QA + 2 coders, run the tests'. Each sub-agent runs FREE on the router pool. Give each agent a role and a task.",
+    parameters: Type3.Object({
+      agents: Type3.Array(Type3.Object({ role: Type3.String(), task: Type3.String() }), {
+        description: "The sub-agents to deploy (max 8)."
+      }),
+      mode: Type3.Optional(Type3.Union([Type3.Literal("parallel"), Type3.Literal("chain")]))
+    }),
+    async execute(_id, params) {
+      const results = await orchestrate({ agents: params.agents, mode: params.mode });
+      const text = results.map((r) => `[${r.role}] ${r.ok ? "\u2713" : "\u2717"} ${r.output.slice(0, 300)}`).join("\n");
+      return { content: [{ type: "text", text }], details: { results } };
+    }
+  });
+}
+
+// src/skills/loader.ts
+import { loadSkills, formatSkillsForPrompt } from "@earendil-works/pi-coding-agent";
+import { fileURLToPath } from "url";
+import { existsSync as existsSync11 } from "fs";
+import { dirname as dirname2, join as join18 } from "path";
+function packageRoot(start) {
+  let dir = start;
+  for (let i = 0; i < 10; i++) {
+    if (existsSync11(join18(dir, "package.json"))) return dir;
+    const parent = dirname2(dir);
+    if (parent === dir) break;
+    dir = parent;
+  }
+  return start;
+}
+function skillsDir() {
+  if (process.env.ORIRO_SKILLS_DIR) return process.env.ORIRO_SKILLS_DIR;
+  return join18(packageRoot(dirname2(fileURLToPath(import.meta.url))), "skills");
+}
+async function loadOriroSkills(dir = skillsDir()) {
+  const result = await loadSkills({
+    cwd: dir,
+    agentDir: dir,
+    skillPaths: [dir],
+    includeDefaults: false
+  });
+  const all = Array.isArray(result) ? result : result.skills ?? [];
+  return {
+    all,
+    core: all.filter((s) => !s.disableModelInvocation),
+    tail: all.filter((s) => s.disableModelInvocation),
+    prompt: formatSkillsForPrompt(all)
+  };
+}
+
+// src/onboarding/assemble.ts
+async function assembleOriroSession(opts = {}) {
+  const cwd = opts.cwd ?? process.cwd();
+  const authStorage = AuthStorage2.inMemory();
+  const modelRegistry = ModelRegistry2.inMemory(authStorage);
+  const settingsManager = SettingsManager.create(cwd);
+  const model = registerOriroMux(modelRegistry);
+  if (!model) throw new Error("ORIRO keyless model unavailable");
+  const resourceLoader = new DefaultResourceLoader({
+    cwd,
+    agentDir: getAgentDir(),
+    settingsManager,
+    additionalSkillPaths: [skillsDir()],
+    extensionFactories: [registerGuardian, registerHead, registerScribe, registerOrchestrator]
+  });
+  await resourceLoader.reload();
+  const { session, extensionsResult } = await createAgentSession2({
+    model,
+    authStorage,
+    modelRegistry,
+    settingsManager,
+    sessionManager: SessionManager2.inMemory(),
+    resourceLoader
+  });
+  attachScribe(session);
+  return { session, extensionsResult };
+}
+
+// src/language/nllb-translator.ts
+var NLLB_CODE = {
+  en: "eng_Latn",
+  zh: "zho_Hans",
+  de: "deu_Latn",
+  es: "spa_Latn",
+  ru: "rus_Cyrl",
+  ko: "kor_Hang",
+  fr: "fra_Latn",
+  ja: "jpn_Jpan",
+  pt: "por_Latn",
+  tr: "tur_Latn",
+  pl: "pol_Latn",
+  ca: "cat_Latn",
+  nl: "nld_Latn",
+  ar: "arb_Arab",
+  sv: "swe_Latn",
+  it: "ita_Latn",
+  id: "ind_Latn",
+  hi: "hin_Deva",
+  fi: "fin_Latn",
+  vi: "vie_Latn",
+  he: "heb_Hebr",
+  uk: "ukr_Cyrl",
+  el: "ell_Grek",
+  ms: "zsm_Latn",
+  cs: "ces_Latn",
+  ro: "ron_Latn",
+  da: "dan_Latn",
+  hu: "hun_Latn",
+  ta: "tam_Taml",
+  no: "nob_Latn",
+  th: "tha_Thai",
+  ur: "urd_Arab",
+  hr: "hrv_Latn",
+  bg: "bul_Cyrl",
+  lt: "lit_Latn",
+  mi: "mri_Latn",
+  ml: "mal_Mlym",
+  cy: "cym_Latn",
+  sk: "slk_Latn",
+  te: "tel_Telu",
+  fa: "pes_Arab",
+  lv: "lvs_Latn",
+  bn: "ben_Beng",
+  sr: "srp_Cyrl",
+  az: "azj_Latn",
+  sl: "slv_Latn",
+  kn: "kan_Knda",
+  et: "est_Latn",
+  mk: "mkd_Cyrl",
+  eu: "eus_Latn",
+  is: "isl_Latn",
+  hy: "hye_Armn",
+  ne: "npi_Deva",
+  mn: "khk_Cyrl",
+  bs: "bos_Latn",
+  kk: "kaz_Cyrl",
+  sq: "als_Latn",
+  sw: "swh_Latn",
+  gl: "glg_Latn",
+  mr: "mar_Deva",
+  pa: "pan_Guru",
+  si: "sin_Sinh",
+  km: "khm_Khmr",
+  sn: "sna_Latn",
+  yo: "yor_Latn",
+  so: "som_Latn",
+  af: "afr_Latn",
+  oc: "oci_Latn",
+  ka: "kat_Geor",
+  be: "bel_Cyrl",
+  tg: "tgk_Cyrl",
+  sd: "snd_Arab",
+  gu: "guj_Gujr",
+  am: "amh_Ethi",
+  yi: "ydd_Hebr",
+  lo: "lao_Laoo",
+  uz: "uzn_Latn",
+  fo: "fao_Latn",
+  ht: "hat_Latn",
+  ps: "pbt_Arab",
+  tk: "tuk_Latn",
+  nn: "nno_Latn",
+  mt: "mlt_Latn",
+  sa: "san_Deva",
+  lb: "ltz_Latn",
+  my: "mya_Mymr",
+  bo: "bod_Tibt",
+  tl: "tgl_Latn",
+  mg: "plt_Latn",
+  as: "asm_Beng",
+  tt: "tat_Cyrl",
+  ln: "lin_Latn",
+  ha: "hau_Latn",
+  ba: "bak_Cyrl",
+  jw: "jav_Latn",
+  su: "sun_Latn",
+  yue: "yue_Hant"
+};
+var ENG = "eng_Latn";
+var toNllb = (iso) => NLLB_CODE[(iso || "").toLowerCase()] ?? ENG;
+var NllbTranslator = class {
+  pipe = null;
+  loading = null;
+  ready() {
+    return this.pipe !== null;
+  }
+  /** Lazy-load NLLB-200 once (first-use download + cache). Idempotent. */
+  async load(modelId = "Xenova/nllb-200-distilled-600M") {
+    if (this.pipe) return;
+    if (this.loading) return this.loading;
+    this.loading = (async () => {
+      const { pipeline } = await import("@huggingface/transformers");
+      this.pipe = await pipeline("translation", modelId);
+    })();
+    return this.loading;
+  }
+  async run(text, src, tgt) {
+    if (!this.pipe) await this.load();
+    if (!this.pipe) return text;
+    const out = await this.pipe(text, { src_lang: src, tgt_lang: tgt });
+    return out?.[0]?.translation_text?.trim() || text;
+  }
+  toEnglish(text, fromLang) {
+    return this.run(text, toNllb(fromLang), ENG);
+  }
+  fromEnglish(english, toLang) {
+    return this.run(english, ENG, toNllb(toLang));
+  }
+};
+var instance = null;
+function setupNllbTranslator(opts) {
+  if (!instance) {
+    instance = new NllbTranslator();
+    registerTranslator(instance);
+  }
+  if (opts?.preload) void instance.load();
+  return instance;
+}
+
+// src/language/gateway.ts
+var isEnglish2 = (code) => !code || code.toLowerCase().startsWith("en");
+var isCommand = (text) => text.trimStart().startsWith("/");
+async function ensureReady() {
+  try {
+    await setupNllbTranslator().load();
+  } catch {
+  }
+}
+async function translateIncoming(message) {
+  const lang = getTerminalLanguage().code;
+  if (isEnglish2(lang) || !message.trim() || isCommand(message)) return message;
+  await ensureReady();
+  return translateForCoder(message, lang);
+}
+async function translateOutgoing(text) {
+  const lang = getTerminalLanguage().code;
+  if (isEnglish2(lang) || !text.trim()) return text;
+  await ensureReady();
+  return translateForUser(text, lang);
+}
+
+// src/repl-ui/tui-repl.ts
+import { ProcessTerminal, TUI, Editor, Text, Container } from "@earendil-works/pi-tui";
+
+// src/repl-ui/permission.ts
+var MODES = ["manual", "accept_edits", "auto", "plan"];
+var MODE_META = {
+  manual: { label: "Manual", indicator: "\u25CF" },
+  accept_edits: { label: "Accept Edits", indicator: "\u270E" },
+  auto: { label: "Auto", indicator: "\u23F5\u23F5" },
+  plan: { label: "Plan", indicator: "\u25A2" }
+};
+var current = "manual";
+function getMode() {
+  return current;
+}
+function cycleMode() {
+  const i = MODES.indexOf(current);
+  current = MODES[(i + 1) % MODES.length];
+  return current;
+}
+
+// src/repl-ui/tui-repl.ts
+var editorTheme = {
+  borderColor: (s) => dim(s),
+  selectList: {
+    selectedPrefix: (s) => accent(s),
+    selectedText: (s) => accent(s),
+    description: (s) => dim(s),
+    scrollInfo: (s) => dim(s),
+    noMatch: (s) => dim(s)
+  }
+};
+function footerText() {
+  const cur = getMode();
+  const bar = MODES.map((m) => {
+    const meta = MODE_META[m];
+    const s = `${meta.indicator} ${meta.label}`;
+    return m === cur ? accent(s) : dim(s);
+  }).join(dim(" \xB7 "));
+  return `${bar}   ${dim("Shift+Tab to switch \xB7 /exit")}`;
+}
+async function runTuiRepl(session) {
+  const isEnglish3 = getTerminalLanguage().code.toLowerCase().startsWith("en");
+  const term = new ProcessTerminal();
+  const tui = new TUI(term, true);
+  const chat = new Container();
+  const editor = new Editor(tui, editorTheme, { paddingX: 1 });
+  const sep = new Text(dim("\u2500".repeat(Math.max(8, term.columns))), 0, 0);
+  const footer = new Text(footerText(), 0, 0);
+  tui.addChild(chat);
+  tui.addChild(editor);
+  tui.addChild(sep);
+  tui.addChild(footer);
+  tui.setFocus(editor);
+  const refreshFooter = () => {
+    sep.setText(dim("\u2500".repeat(Math.max(8, term.columns))));
+    footer.setText(footerText());
+    tui.requestRender();
+  };
+  const removeListener = tui.addInputListener((data) => {
+    if (data === "\x1B[Z") {
+      cycleMode();
+      refreshFooter();
+      return { consume: true };
+    }
+    return void 0;
+  });
+  let stopped = false;
+  const cleanup = () => {
+    if (stopped) return;
+    stopped = true;
+    try {
+      removeListener();
+    } catch {
+    }
+    try {
+      session.dispose();
+    } catch {
+    }
+    try {
+      tui.stop();
+    } catch {
+    }
+    process.stdout.write(dim("\nBye.\n"));
+    process.exit(0);
+  };
+  process.on("SIGINT", cleanup);
+  let busy = false;
+  editor.onSubmit = (raw) => {
+    const text = raw.trim();
+    if (!text || busy) return;
+    const slash = text.toLowerCase();
+    if (slash === "/exit" || slash === "/quit") return cleanup();
+    if (slash === "/help" || slash === "/?") {
+      chat.addChild(new Text(dim("  Just type to chat. Shift+Tab cycles posture. /exit to leave."), 0, 0));
+      editor.setText("");
+      tui.requestRender();
+      return;
+    }
+    editor.addToHistory(text);
+    editor.setText("");
+    chat.addChild(new Text(`${accent("\u203A")} ${text}`, 0, 1));
+    const streaming = new Text(dim("\u2026"), 0, 0);
+    chat.addChild(streaming);
+    tui.requestRender();
+    busy = true;
+    void (async () => {
+      const english = await translateIncoming(text);
+      noteUserInput(text);
+      let out = "";
+      const unsub = session.subscribe(
+        (e) => {
+          if (e.type === "message_update" && e.assistantMessageEvent?.type === "text_delta") {
+            out += e.assistantMessageEvent.delta ?? "";
+            if (isEnglish3) {
+              streaming.setText(out);
+              tui.requestRender();
+            }
+          }
+        }
+      );
+      try {
+        await session.prompt(english);
+      } catch {
+        streaming.setText(dim("(every free router is busy right now \u2014 give it a moment and try again)"));
+        tui.requestRender();
+        busy = false;
+        unsub();
+        return;
+      }
+      unsub();
+      const finalText = isEnglish3 ? out.trim() : await translateOutgoing(out.trim());
+      streaming.setText(finalText || dim("(no response)"));
+      tui.requestRender();
+      busy = false;
+    })();
+  };
+  tui.start();
+  refreshFooter();
+  await new Promise(() => {
+  });
+}
+
+// src/repl.ts
+function replHelp() {
+  return `
+  ${accent("ORIRO terminal \u2014 help")}
+  ${dim("Just type to chat; ORIRO writes and runs code for you (keyless, free).")}
+
+  ${accent("/help")}  this help     ${accent("/exit")} or ${accent("/quit")}  leave     ${dim("Ctrl-D / Ctrl-C also exit")}
+  ${dim("Run these OUTSIDE the chat (in your shell):")}
+  ${dim("oriro skills \xB7 routers \xB7 connectors \xB7 channels \xB7 scribe \xB7 language \xB7 avatar")}
+
+`;
+}
+async function runRepl() {
+  if (isFirstRun()) await runOnboarding();
+  else stdout6.write(banner());
+  const { session } = await assembleOriroSession();
+  if (stdin5.isTTY && stdout6.isTTY) {
+    await runTuiRepl(session);
+    return;
+  }
+  await runReadlineRepl(session);
+}
+async function runReadlineRepl(session) {
+  const isEnglish3 = getTerminalLanguage().code.toLowerCase().startsWith("en");
+  const rl = createInterface5({ input: stdin5, output: stdout6 });
+  let closing = false;
+  const onSigint = () => {
+    if (closing) return;
+    closing = true;
+    stdout6.write(dim("\nBye.\n"));
+    try {
+      rl.close();
+    } catch {
+    }
+    try {
+      session.dispose();
+    } catch {
+    }
+    process.exit(0);
+  };
+  process.on("SIGINT", onSigint);
+  try {
+    for (; ; ) {
+      let line;
+      try {
+        line = (await rl.question("\u203A ")).trim();
+      } catch {
+        break;
+      }
+      if (!line) continue;
+      const slash = line.toLowerCase();
+      if (slash === "/exit" || slash === "/quit") break;
+      if (slash === "/help" || slash === "/?") {
+        stdout6.write(replHelp());
+        continue;
+      }
+      const english = await translateIncoming(line);
+      noteUserInput(line);
+      let out = "";
+      const unsub = session.subscribe(
+        (e) => {
+          if (e.type === "message_update" && e.assistantMessageEvent?.type === "text_delta") {
+            const d = e.assistantMessageEvent.delta ?? "";
+            out += d;
+            if (isEnglish3) stdout6.write(d);
+          }
+        }
+      );
+      try {
+        await session.prompt(english);
+      } finally {
+        unsub();
+      }
+      if (isEnglish3) stdout6.write("\n\n");
+      else stdout6.write(`${await translateOutgoing(out.trim())}
+
+`);
+    }
+  } finally {
+    process.removeListener("SIGINT", onSigint);
+    if (!closing) {
+      rl.close();
+      session.dispose();
+      stdout6.write(dim("\nBye.\n"));
+    }
+  }
 }
 
 // src/commands/ui.ts
@@ -3247,9 +3736,12 @@ var heading = (s) => {
 ${bold(accent(s))}
 `);
 };
+var DieError = class extends Error {
+};
 function die(msg) {
   fail(msg);
-  process.exit(1);
+  process.exitCode = 1;
+  throw new DieError(msg);
 }
 
 // src/commands/routers.ts
@@ -3278,15 +3770,127 @@ function registerRoutersCommand(program2) {
     ok(`added ${accent(slug)} (${res.validation.latencyMs}ms, model ${res.validation.model}) \u2192 active pool`);
   });
   routers.command("use <slugs...>").description("set the active router pool (ids must be added first)").action((slugs) => {
-    useRouters(slugs);
-    const pool = resolvePool();
-    const missing = slugs.filter((s) => !pool.some((p) => p.id === s));
-    ok(`pool set: ${pool.map((p) => p.id).join(", ") || "(empty)"}`);
-    if (missing.length) info(`not yet added (run \`oriro routers add\`): ${missing.join(", ")}`);
+    const { applied, unknown } = useRouters(slugs);
+    if (!applied.length) {
+      die(`none of those are added yet: ${unknown.join(", ")} \u2014 run \`oriro routers add <slug>\` first`);
+    }
+    ok(`pool set: ${applied.join(", ")}`);
+    if (unknown.length) info(`skipped (not added yet \u2014 run \`oriro routers add\`): ${unknown.join(", ")}`);
   });
 }
 
 // src/commands/scribe.ts
+import { readFileSync as readFileSync18 } from "fs";
+
+// src/scribe/transcript.ts
+import { existsSync as existsSync12, readFileSync as readFileSync17 } from "fs";
+function parseHookStdin(raw) {
+  try {
+    const j = JSON.parse(raw);
+    return {
+      transcriptPath: typeof j.transcript_path === "string" ? j.transcript_path : void 0,
+      cwd: typeof j.cwd === "string" ? j.cwd : void 0,
+      sessionId: typeof j.session_id === "string" ? j.session_id : void 0,
+      stopHookActive: j.stop_hook_active === true
+    };
+  } catch {
+    return { stopHookActive: false };
+  }
+}
+function shouldCapture(cwd) {
+  if (process.env.ORIRO_SCRIBE_ONLY !== "1") return true;
+  if (!cwd) return false;
+  return /oriro/i.test(cwd.replace(/\\/g, "/"));
+}
+function textOf(content) {
+  if (!content) return "";
+  if (typeof content === "string") return content;
+  return content.filter((b) => b.type === "text" && typeof b.text === "string").map((b) => b.text).join("\n").trim();
+}
+function isHumanUser(e) {
+  if (e.type !== "user" && e.message?.role !== "user") return false;
+  const c = e.message?.content;
+  if (typeof c === "string") return c.trim().length > 0;
+  if (Array.isArray(c)) return c.some((b) => b.type === "text" && (b.text ?? "").trim().length > 0);
+  return false;
+}
+var FILE_KEYS = ["file_path", "path", "notebook_path", "filePath"];
+function lastTurnFromTranscript(path) {
+  if (!existsSync12(path)) return null;
+  const raw = readFileSync17(path, "utf8");
+  const entries = [];
+  for (const line of raw.split("\n")) {
+    if (!line.trim()) continue;
+    try {
+      entries.push(JSON.parse(line));
+    } catch {
+    }
+  }
+  if (entries.length === 0) return null;
+  let anchor;
+  let start = -1;
+  for (let i = entries.length - 1; i >= 0; i--) {
+    const e = entries[i];
+    if (e && isHumanUser(e)) {
+      start = i;
+      anchor = e;
+      break;
+    }
+  }
+  const slice = start === -1 ? entries : entries.slice(start);
+  const user = anchor ? textOf(anchor.message?.content) : "";
+  const noteParts = [];
+  const tools = /* @__PURE__ */ new Set();
+  const files = /* @__PURE__ */ new Set();
+  let ts;
+  for (const e of slice) {
+    if (e.timestamp) ts = e.timestamp;
+    const role = e.type ?? e.message?.role;
+    const content = e.message?.content;
+    if (role === "assistant") {
+      const t = textOf(content);
+      if (t) noteParts.push(t);
+    }
+    if (Array.isArray(content)) {
+      for (const b of content) {
+        if (b.type === "tool_use" && b.name) {
+          tools.add(b.name);
+          const input = b.input ?? {};
+          for (const k of FILE_KEYS) {
+            const v = input[k];
+            if (typeof v === "string" && v.trim()) files.add(v.trim());
+          }
+        }
+      }
+    }
+  }
+  const note = noteParts.join("\n\n").trim();
+  if (!user && !note && tools.size === 0) return null;
+  return {
+    user: user || void 0,
+    note: note || void 0,
+    tools: tools.size ? [...tools] : void 0,
+    files: files.size ? [...files] : void 0,
+    ts
+  };
+}
+
+// src/commands/scribe.ts
+function readStdin() {
+  try {
+    return readFileSync18(0, "utf8");
+  } catch {
+    return "";
+  }
+}
+function csv(v) {
+  if (typeof v !== "string") return void 0;
+  const arr = v.split(",").map((s) => s.trim()).filter(Boolean);
+  return arr.length ? arr : void 0;
+}
+function hasContent(rec) {
+  return Boolean(rec.user?.trim() || rec.note?.trim() || rec.tools?.length || rec.files?.length);
+}
 function registerScribeCommand(program2) {
   const scribe = program2.command("scribe").description("the consent-gated local work journal (off by default)");
   scribe.command("on").description("enable the journal (recorded locally at ~/.oriro/scribe, never leaves your machine)").action(() => {
@@ -3301,11 +3905,94 @@ function registerScribeCommand(program2) {
   scribe.command("status").description("show whether the journal is on or off").action(() => {
     info(isScribeEnabled() ? "Scriber: ON" : "Scriber: OFF (default)");
   });
+  scribe.command("capture").description("capture one turn into the journal (used by the Claude Code Stop hook + /scribe skill)").option("--hook", "read the Claude Code Stop-hook JSON from stdin and capture the latest turn").option("--json <record>", "capture an explicit TurnRecord (JSON)").option("--user <text>", "the user/request text for this turn").option("--note <text>", "a note / assistant summary for this turn").option("--router <name>", "which router/model produced the turn").option("--files <list>", "comma-separated file paths touched").option("--tools <list>", "comma-separated tool names used").action((opts) => {
+    try {
+      if (!isScribeEnabled()) {
+        if (!opts.hook) info("Scriber is OFF \u2014 run `oriro scribe on` first.");
+        return;
+      }
+      const now = (/* @__PURE__ */ new Date()).toISOString();
+      let rec = null;
+      if (opts.hook) {
+        const hook = parseHookStdin(readStdin());
+        if (hook.stopHookActive) return;
+        if (!shouldCapture(hook.cwd)) return;
+        if (!hook.transcriptPath) return;
+        const turn = lastTurnFromTranscript(hook.transcriptPath);
+        if (!turn) return;
+        const ts = turn.ts ?? now;
+        rec = {
+          ts,
+          date: ts.slice(0, 10),
+          user: turn.user,
+          note: turn.note,
+          tools: turn.tools,
+          files: turn.files,
+          router: opts.router ?? "claude-code",
+          context: hook.cwd ? `cwd: ${hook.cwd}` : void 0
+        };
+      } else if (opts.json) {
+        const parsed = JSON.parse(opts.json);
+        const ts = parsed.ts ?? now;
+        rec = { ...parsed, ts, date: parsed.date ?? ts.slice(0, 10) };
+      } else {
+        rec = {
+          ts: now,
+          date: now.slice(0, 10),
+          user: opts.user,
+          note: opts.note,
+          router: opts.router,
+          files: csv(opts.files),
+          tools: csv(opts.tools)
+        };
+      }
+      if (!rec || !hasContent(rec)) {
+        if (!opts.hook) info("nothing to capture.");
+        return;
+      }
+      const res = supervisedCapture(rec);
+      if (!opts.hook) {
+        if (res) {
+          const red = res.redactions.length ? ` (redacted: ${res.redactions.map((r) => `${r.label}\xD7${r.count}`).join(", ")})` : "";
+          ok(`captured \u2192 ${res.journalDate}.md${red}`);
+        } else {
+          info("capture deferred (logged); will retry next turn.");
+        }
+      }
+    } catch (err) {
+      if (!opts.hook) fail(`scribe capture: ${err instanceof Error ? err.message : String(err)}`);
+    }
+  });
+  scribe.command("recall <query>").description("full-text search across every day's journal").option("-n, --limit <n>", "max matches", "50").action((query, opts) => {
+    const limit = Math.max(1, Number(opts.limit) || 50);
+    const hits = searchScribe(query, limit);
+    if (!hits.length) {
+      info(`no matches for "${query}".`);
+      return;
+    }
+    heading(`Scribe \u2014 ${hits.length} match(es) for "${query}"`);
+    for (const h of hits) info(`${h.date}:${h.line} \xB7 ${h.text}`);
+  });
+  scribe.command("digest").description("print the rolling digest (recent context, injectable in a flash)").action(() => {
+    const d = readDigest();
+    process.stdout.write(d?.trim() ? `${d.trim()}
+` : "\xB7 digest empty (nothing captured yet).\n");
+  });
+  scribe.command("timeline").description("print the full-history timeline (one line per day)").action(() => {
+    const t = readTimeline();
+    process.stdout.write(t?.trim() ? `${t.trim()}
+` : "\xB7 timeline empty (nothing captured yet).\n");
+  });
+  scribe.command("health").description("show the scribe writer's health (last write, fault count)").action(() => {
+    const h = readHealth();
+    info(`last write: ${h.lastWriteAt ?? "never"}`);
+    info(`faults: ${h.faultCount}${h.lastFault ? ` (last: ${h.lastFault})` : ""}`);
+  });
 }
 
 // src/connectors/connectors.ts
-import { readFileSync as readFileSync17, writeFileSync as writeFileSync13 } from "fs";
-import { join as join18 } from "path";
+import { readFileSync as readFileSync19, writeFileSync as writeFileSync14 } from "fs";
+import { join as join19 } from "path";
 
 // src/connectors/catalog.ts
 var CONNECTOR_CATALOG = [
@@ -4295,18 +4982,18 @@ function connectorBySlug(slug) {
 
 // src/connectors/connectors.ts
 function file2() {
-  return join18(oriroDir(), "connectors.json");
+  return join19(oriroDir(), "connectors.json");
 }
 function readAdded() {
   try {
-    const v = JSON.parse(readFileSync17(file2(), "utf8"));
+    const v = JSON.parse(readFileSync19(file2(), "utf8"));
     return Array.isArray(v) ? v : [];
   } catch {
     return [];
   }
 }
 function writeAdded(slugs) {
-  writeFileSync13(join18(ensureOriroDir(), "connectors.json"), JSON.stringify([...new Set(slugs)], null, 2), "utf8");
+  writeFileSync14(join19(ensureOriroDir(), "connectors.json"), JSON.stringify([...new Set(slugs)], null, 2), "utf8");
 }
 function listConnectors(category) {
   return category ? CONNECTOR_CATALOG.filter((c) => c.category === category) : CONNECTOR_CATALOG;
@@ -4314,6 +5001,9 @@ function listConnectors(category) {
 function connectorCategories() {
   return [...new Set(CONNECTOR_CATALOG.map((c) => c.category))].sort();
 }
+function isConnectorAdded(slug) {
+  return readAdded().includes(slug);
+}
 function addConnector(slug) {
   const entry = connectorBySlug(slug);
   if (!entry) return { ok: false, error: `unknown connector '${slug}' \u2014 run \`oriro connectors list\`` };
@@ -4338,23 +5028,30 @@ function registerConnectorsCommand(program2) {
   const connectors = program2.command("connectors").description("MCP connectors \u2014 add external tools/services (inert until used)");
   connectors.command("list [category]").description("list the connector catalog (optionally filtered by category)").action((category) => {
     if (category && !connectorCategories().includes(category)) {
-      info(`unknown category '${category}' \u2014 categories: ${connectorCategories().join(", ")}`);
-      return;
+      die(`unknown category '${category}' \u2014 categories: ${connectorCategories().join(", ")}`);
     }
     const entries = listConnectors(category);
     const added = new Set(addedConnectors().map((c) => c.slug));
     heading(category ? `Connectors \xB7 ${category}` : "Connectors");
+    let addable = 0;
     for (const c of entries) {
-      const mark = added.has(c.slug) ? accent("\u25CF") : dim("\u25CB");
-      process.stdout.write(`  ${mark} ${accent(c.slug.padEnd(20))} ${c.name.padEnd(22)} ${dim(c.category)}
+      const canAdd = !!c.mcpUrl;
+      if (canAdd) addable++;
+      const mark = !canAdd ? dim("\xB7") : added.has(c.slug) ? accent("\u25CF") : dim("\u25CB");
+      const name = canAdd ? c.name.padEnd(22) : dim(`${c.name} (coming soon)`.padEnd(22));
+      process.stdout.write(`  ${mark} ${(canAdd ? accent : dim)(c.slug.padEnd(20))} ${name} ${dim(c.category)}
 `);
     }
-    info(`${entries.length} connectors${category ? ` in '${category}'` : ""} \xB7 ${added.size} added`);
+    info(`${addable} addable${category ? ` in '${category}'` : ""} \xB7 ${added.size} added \xB7 ${entries.length - addable} coming soon`);
   });
   connectors.command("add <slug>").description("add a connector (validate + record; connects only when used)").action((slug) => {
+    if (isConnectorAdded(slug)) {
+      info(`${slug} is already added`);
+      return;
+    }
     const res = addConnector(slug);
     if (!res.ok) die(res.error ?? `could not add '${slug}'`);
-    ok(`added ${accent(slug)} \u2014 inert until a session uses it`);
+    ok(`added ${accent(slug)} \u2014 recorded locally`);
   });
   connectors.command("remove <slug>").description("remove a connector").action((slug) => {
     if (removeConnector(slug)) ok(`removed ${accent(slug)}`);
@@ -4363,14 +5060,14 @@ function registerConnectorsCommand(program2) {
 }
 
 // src/channels/config.ts
-import { readFileSync as readFileSync18, writeFileSync as writeFileSync14 } from "fs";
-import { join as join19 } from "path";
+import { readFileSync as readFileSync20, writeFileSync as writeFileSync15 } from "fs";
+import { join as join20 } from "path";
 function file3() {
-  return join19(oriroDir(), "channels.json");
+  return join20(oriroDir(), "channels.json");
 }
 function readChannels() {
   try {
-    const v = JSON.parse(readFileSync18(file3(), "utf8"));
+    const v = JSON.parse(readFileSync20(file3(), "utf8"));
     return Array.isArray(v) ? v : [];
   } catch {
     return [];
@@ -4379,10 +5076,10 @@ function readChannels() {
 function saveChannel(cfg) {
   const all = readChannels().filter((c) => c.kind !== cfg.kind);
   all.push(cfg);
-  writeFileSync14(join19(ensureOriroDir(), "channels.json"), JSON.stringify(all, null, 2), "utf8");
+  writeFileSync15(join20(ensureOriroDir(), "channels.json"), JSON.stringify(all, null, 2), "utf8");
 }
 function removeChannel(kind) {
-  writeFileSync14(join19(ensureOriroDir(), "channels.json"), JSON.stringify(readChannels().filter((c) => c.kind !== kind), null, 2), "utf8");
+  writeFileSync15(join20(ensureOriroDir(), "channels.json"), JSON.stringify(readChannels().filter((c) => c.kind !== kind), null, 2), "utf8");
 }
 
 // src/channels/telegram.ts
@@ -4411,6 +5108,7 @@ var OriroChannelHost = class {
         if (e.type === "message_update" && e.assistantMessageEvent?.type === "text_delta") out += e.assistantMessageEvent.delta ?? "";
       });
       try {
+        noteUserInput(text);
         await session.prompt(text);
       } finally {
         unsub();
@@ -4498,9 +5196,9 @@ async function startDiscord(token) {
 }
 
 // src/channels/whatsapp.ts
-import { join as join20 } from "path";
+import { join as join21 } from "path";
 function whatsappAuthDir() {
-  return join20(oriroDir(), "whatsapp-auth");
+  return join21(oriroDir(), "whatsapp-auth");
 }
 async function startWhatsApp() {
   let baileys;
@@ -4591,7 +5289,7 @@ function registerChannelsCommand(program2) {
     if (!isKind(kind)) die(`unknown channel '${kind}' \u2014 one of: ${KINDS.join(", ")}`);
     if (kind === "whatsapp") {
       if (!opts.acceptRisk) {
-        fail("WhatsApp uses Baileys, which pairs a REAL WhatsApp account and may violate WhatsApp's ToS (ban risk).");
+        info("WhatsApp uses Baileys, which pairs a REAL WhatsApp account and may violate WhatsApp's ToS (ban risk).");
         info("If you accept that risk, re-run: `oriro channels start whatsapp --accept-risk`");
         return;
       }
@@ -4635,7 +5333,7 @@ function registerSkillsCommand(program2) {
 }
 
 // src/commands/language.ts
-import { stdin as stdin5 } from "process";
+import { stdin as stdin6 } from "process";
 function resolveLanguage(input) {
   return languageByCode(input) ?? LANGUAGES.find((l) => l.name.toLowerCase() === input.trim().toLowerCase());
 }
@@ -4657,7 +5355,7 @@ function registerLanguageCommand(program2) {
       ok(`${accent(lang.name)} is now your terminal language.`);
       return;
     }
-    if (stdin5.isTTY) {
+    if (stdin6.isTTY) {
       const lang = await selectLanguageInteractive();
       setTerminalLanguage(lang);
       ok(`${accent(lang.name)} is now your terminal language.`);
@@ -4670,7 +5368,7 @@ function registerLanguageCommand(program2) {
 }
 
 // src/commands/avatar.ts
-import { stdin as stdin6 } from "process";
+import { stdin as stdin7 } from "process";
 function registerAvatarCommand(program2) {
   program2.command("avatar").description("show or change your terminal avatar").argument("[slug]", "set directly to this avatar slug").option("-l, --list", "list every avatar by category").action(async (slug, opts) => {
     if (opts.list) {
@@ -4688,7 +5386,7 @@ function registerAvatarCommand(program2) {
       ok(`${accent(avatar.slug)} is now your terminal face.`);
       return;
     }
-    if (stdin6.isTTY) {
+    if (stdin7.isTTY) {
       const chosen = await selectAvatarInteractive();
       if (!chosen) {
         info("no change.");
@@ -4709,7 +5407,12 @@ var version = createRequire(import.meta.url)("../package.json").version;
 var program = new Command();
 program.name("oriro").description("ORIRO \u2014 a free, on-device-friendly terminal AI agent.").version(version, "-v, --version").action(async (_options, command) => {
   if (command.args.length > 0) {
-    process.stderr.write(`error: unknown command '${command.args[0]}'
+    const arg = command.args[0];
+    if (arg === "help") {
+      command.outputHelp();
+      return;
+    }
+    process.stderr.write(`error: unknown command '${arg}'
 Run 'oriro --help' to see available commands.
 `);
     process.exitCode = 1;
@@ -4725,6 +5428,7 @@ registerSkillsCommand(program);
 registerLanguageCommand(program);
 registerAvatarCommand(program);
 program.parseAsync().catch((e) => {
+  if (e instanceof DieError) return;
   process.stderr.write(`
 ORIRO error: ${e instanceof Error ? e.stack ?? e.message : String(e)}
 `);