@pixelzx/genesis 2026.5.10-6 → 2026.5.14

package/dist/sessions-resolve-C9OvN0xm.js

@@ -1,174 +0,0 @@
-import { c as normalizeOptionalString } from "./string-coerce-C1IzJjqi.js";
-import { gn as errorShape, hn as ErrorCodes, vn as parseSessionLabel } from "./protocol-D7tGgtdQ.js";
-import { t as loadCombinedSessionStoreForGateway } from "./combined-store-gateway-CN-iK1Ct.js";
-import { t as loadSessionStore } from "./store-load-BI8dE5fY.js";
-import { o as updateSessionStore } from "./store-Z5M6AxEz.js";
-import "./sessions-rtgiO_I5.js";
-import { c as resolveDeletedAgentIdFromSessionKey, d as resolveGatewaySessionStoreTarget, o as migrateAndPruneGatewaySessionStoreKey, r as listSessionsFromStore } from "./session-utils-R4i-HQDD.js";
-//#region src/gateway/sessions-resolve.ts
-function resolveSessionVisibilityFilterOptions(p) {
-	return {
-		includeGlobal: p.includeGlobal === true,
-		includeUnknown: p.includeUnknown === true,
-		spawnedBy: p.spawnedBy,
-		agentId: p.agentId
-	};
-}
-function noSessionFoundResult(key) {
-	return {
-		ok: false,
-		error: errorShape(ErrorCodes.INVALID_REQUEST, `No session found: ${key}`)
-	};
-}
-/** Rejects sessions whose owning agent no longer exists in config (#65524). */
-function validateSessionAgentExists(cfg, key) {
-	const deletedAgentId = resolveDeletedAgentIdFromSessionKey(cfg, key);
-	if (deletedAgentId === null) return null;
-	return {
-		ok: false,
-		error: errorShape(ErrorCodes.INVALID_REQUEST, `Agent "${deletedAgentId}" no longer exists in configuration`)
-	};
-}
-function isResolvedSessionKeyVisible(params) {
-	if (typeof params.p.spawnedBy !== "string" || params.p.spawnedBy.trim().length === 0) return true;
-	return listSessionsFromStore({
-		cfg: params.cfg,
-		storePath: params.storePath,
-		store: params.store,
-		opts: resolveSessionVisibilityFilterOptions(params.p)
-	}).sessions.some((session) => session.key === params.key);
-}
-async function resolveSessionKeyFromResolveParams(params) {
-	const { cfg, p } = params;
-	const key = normalizeOptionalString(p.key) ?? "";
-	const hasKey = key.length > 0;
-	const sessionId = normalizeOptionalString(p.sessionId) ?? "";
-	const hasSessionId = sessionId.length > 0;
-	const selectionCount = [
-		hasKey,
-		hasSessionId,
-		(normalizeOptionalString(p.label) ?? "").length > 0
-	].filter(Boolean).length;
-	if (selectionCount > 1) return {
-		ok: false,
-		error: errorShape(ErrorCodes.INVALID_REQUEST, "Provide either key, sessionId, or label (not multiple)")
-	};
-	if (selectionCount === 0) return {
-		ok: false,
-		error: errorShape(ErrorCodes.INVALID_REQUEST, "Either key, sessionId, or label is required")
-	};
-	if (hasKey) {
-		const target = resolveGatewaySessionStoreTarget({
-			cfg,
-			key
-		});
-		const store = loadSessionStore(target.storePath);
-		if (store[target.canonicalKey]) {
-			if (!isResolvedSessionKeyVisible({
-				cfg,
-				p,
-				storePath: target.storePath,
-				store,
-				key: target.canonicalKey
-			})) return noSessionFoundResult(key);
-			const agentCheck = validateSessionAgentExists(cfg, target.canonicalKey);
-			if (agentCheck) return agentCheck;
-			return {
-				ok: true,
-				key: target.canonicalKey
-			};
-		}
-		const legacyKey = target.storeKeys.find((candidate) => store[candidate]);
-		if (!legacyKey) return noSessionFoundResult(key);
-		await updateSessionStore(target.storePath, (s) => {
-			const { primaryKey } = migrateAndPruneGatewaySessionStoreKey({
-				cfg,
-				key,
-				store: s
-			});
-			if (!s[primaryKey] && s[legacyKey]) s[primaryKey] = s[legacyKey];
-		});
-		if (!isResolvedSessionKeyVisible({
-			cfg,
-			p,
-			storePath: target.storePath,
-			store: loadSessionStore(target.storePath),
-			key: target.canonicalKey
-		})) return noSessionFoundResult(key);
-		const agentCheckLegacy = validateSessionAgentExists(cfg, target.canonicalKey);
-		if (agentCheckLegacy) return agentCheckLegacy;
-		return {
-			ok: true,
-			key: target.canonicalKey
-		};
-	}
-	if (hasSessionId) {
-		const { storePath, store } = loadCombinedSessionStoreForGateway(cfg);
-		const matches = listSessionsFromStore({
-			cfg,
-			storePath,
-			store,
-			opts: {
-				includeGlobal: p.includeGlobal === true,
-				includeUnknown: p.includeUnknown === true,
-				spawnedBy: p.spawnedBy,
-				agentId: p.agentId
-			}
-		}).sessions.filter((session) => session.sessionId === sessionId || session.key === sessionId);
-		if (matches.length === 0) return {
-			ok: false,
-			error: errorShape(ErrorCodes.INVALID_REQUEST, `No session found: ${sessionId}`)
-		};
-		if (matches.length > 1) {
-			const keys = matches.map((session) => session.key).join(", ");
-			return {
-				ok: false,
-				error: errorShape(ErrorCodes.INVALID_REQUEST, `Multiple sessions found for sessionId: ${sessionId} (${keys})`)
-			};
-		}
-		const agentCheckSessionId = validateSessionAgentExists(cfg, matches[0].key);
-		if (agentCheckSessionId) return agentCheckSessionId;
-		return {
-			ok: true,
-			key: matches[0].key
-		};
-	}
-	const parsedLabel = parseSessionLabel(p.label);
-	if (!parsedLabel.ok) return {
-		ok: false,
-		error: errorShape(ErrorCodes.INVALID_REQUEST, parsedLabel.error)
-	};
-	const { storePath, store } = loadCombinedSessionStoreForGateway(cfg);
-	const list = listSessionsFromStore({
-		cfg,
-		storePath,
-		store,
-		opts: {
-			includeGlobal: p.includeGlobal === true,
-			includeUnknown: p.includeUnknown === true,
-			label: parsedLabel.label,
-			agentId: p.agentId,
-			spawnedBy: p.spawnedBy,
-			limit: 2
-		}
-	});
-	if (list.sessions.length === 0) return {
-		ok: false,
-		error: errorShape(ErrorCodes.INVALID_REQUEST, `No session found with label: ${parsedLabel.label}`)
-	};
-	if (list.sessions.length > 1) {
-		const keys = list.sessions.map((s) => s.key).join(", ");
-		return {
-			ok: false,
-			error: errorShape(ErrorCodes.INVALID_REQUEST, `Multiple sessions found with label: ${parsedLabel.label} (${keys})`)
-		};
-	}
-	const agentCheckLabel = validateSessionAgentExists(cfg, list.sessions[0].key);
-	if (agentCheckLabel) return agentCheckLabel;
-	return {
-		ok: true,
-		key: list.sessions[0].key
-	};
-}
-//#endregion
-export { resolveSessionKeyFromResolveParams as t };

package/dist/sessions.runtime-UTiDYDgG.js

@@ -1,2 +0,0 @@
-import { a as performGatewaySessionReset, i as emitSessionUnboundLifecycleEvent, n as cleanupSessionBeforeMutation, r as emitGatewaySessionEndPluginHook, t as archiveSessionTranscriptsForSessionDetailed } from "./session-reset-service-cYmNWDfY.js";
-export { archiveSessionTranscriptsForSessionDetailed, cleanupSessionBeforeMutation, emitGatewaySessionEndPluginHook, emitSessionUnboundLifecycleEvent, performGatewaySessionReset };

package/dist/setup-B6pSihNi.js

@@ -1,505 +0,0 @@
-import { i as formatErrorMessage } from "./errors-Jbvi20TW.js";
-import { m as resolveUserPath } from "./utils-DaGfogP-.js";
-import { n as defaultRuntime } from "./runtime-CQ7eH0le.js";
-import { t as formatCliCommand } from "./command-format-DAeUlu7u.js";
-import { u as resolveGatewayPort } from "./paths-DmR9mjUX.js";
-import { u as normalizeSecretInputString } from "./types.secrets-ews2W8BF.js";
-import { u as readConfigFileSnapshot, y as writeConfigFile } from "./io-DK8qz7fQ.js";
-import "./config-978YFBb1.js";
-import { t as WizardCancelledError } from "./prompts-Sujn_7Nr.js";
-import { t as resolveSetupSecretInputString } from "./setup.secret-input-D36j9iDd.js";
-import chalk from "chalk";
-//#region src/wizard/setup.security-note.ts
-const SECURITY_NOTE_TITLE = "Security disclaimer";
-const heading = (text) => chalk.bold(text);
-const SECURITY_NOTE_MESSAGE = [
-	"Genesis is a hobby project and still in beta. Expect sharp edges.",
-	"By default, Genesis is a personal agent: one trusted operator boundary.",
-	"This bot can read files and run actions if tools are enabled.",
-	"A bad prompt can trick it into doing unsafe things.",
-	"",
-	"Genesis is not a hostile multi-tenant boundary by default.",
-	"If multiple users can message one tool-enabled agent, they share that delegated tool authority.",
-	"",
-	"If you’re not comfortable with security hardening and access control, don’t run Genesis.",
-	"Ask someone experienced to help before enabling tools or exposing it to the internet.",
-	"",
-	heading("Recommended baseline"),
-	"- Pairing/allowlists + mention gating.",
-	"- Multi-user/shared inbox: split trust boundaries (separate gateway/credentials, ideally separate OS users/hosts).",
-	"- Sandbox + least-privilege tools.",
-	"- Shared inboxes: isolate DM sessions (session.dmScope: per-channel-peer) and keep tool access minimal.",
-	"- Keep secrets out of the agent’s reachable filesystem.",
-	"- Use the strongest available model for any bot with tools or untrusted inboxes.",
-	"",
-	heading("Run regularly"),
-	formatCliCommand("genesis security audit --deep"),
-	formatCliCommand("genesis security audit --fix"),
-	"",
-	heading("Learn more"),
-	"- https://docs.genesis.ai/gateway/security"
-].join("\n");
-//#endregion
-//#region src/wizard/setup.ts
-let authChoiceModulePromise;
-let configLoggingModulePromise;
-let modelPickerModulePromise;
-let pluginStatusModulePromise;
-function loadAuthChoiceModule() {
-	authChoiceModulePromise ??= import("./auth-choice-DsDCp7H_.js");
-	return authChoiceModulePromise;
-}
-function loadConfigLoggingModule() {
-	configLoggingModulePromise ??= import("./logging-B5YvYvzs.js");
-	return configLoggingModulePromise;
-}
-function loadModelPickerModule() {
-	modelPickerModulePromise ??= import("./model-picker-BbLNa_ce.js");
-	return modelPickerModulePromise;
-}
-function loadPluginStatusModule() {
-	pluginStatusModulePromise ??= import("./status-DG8fdVsW.js");
-	return pluginStatusModulePromise;
-}
-async function resolveAuthChoiceModelSelectionPolicy(params) {
-	const preferredProvider = await params.resolvePreferredProviderForAuthChoice({
-		choice: params.authChoice,
-		config: params.config,
-		workspaceDir: params.workspaceDir,
-		env: params.env
-	});
-	const { resolvePluginProviders, resolveProviderPluginChoice } = await import("./provider-auth-choice.runtime-Ck7KjQvQ.js");
-	const providers = resolvePluginProviders({
-		config: params.config,
-		workspaceDir: params.workspaceDir,
-		env: params.env,
-		mode: "setup"
-	});
-	const resolvedChoice = resolveProviderPluginChoice({
-		providers,
-		choice: params.authChoice
-	});
-	const matchedProvider = resolvedChoice?.provider ?? (() => {
-		const preferredId = preferredProvider?.trim();
-		if (!preferredId) return;
-		return providers.find((provider) => typeof provider.id === "string" && provider.id.trim() === preferredId);
-	})();
-	const setupPolicy = resolvedChoice?.wizard?.modelSelection ?? matchedProvider?.wizard?.setup?.modelSelection;
-	return {
-		preferredProvider,
-		promptWhenAuthChoiceProvided: setupPolicy?.promptWhenAuthChoiceProvided === true,
-		allowKeepCurrent: setupPolicy?.allowKeepCurrent ?? true
-	};
-}
-async function requireRiskAcknowledgement(params) {
-	if (params.opts.acceptRisk === true) return;
-	await params.prompter.note(SECURITY_NOTE_MESSAGE, SECURITY_NOTE_TITLE);
-	if (!await params.prompter.confirm({
-		message: "I understand this is personal-by-default and shared/multi-user use requires lock-down. Continue?",
-		initialValue: false
-	})) throw new WizardCancelledError("risk not accepted");
-}
-async function runSetupWizard(opts, runtime = defaultRuntime, prompter) {
-	const onboardHelpers = await import("./onboard-helpers-Clk6YSB9.js");
-	onboardHelpers.printWizardHeader(runtime);
-	await prompter.intro("Genesis setup");
-	await requireRiskAcknowledgement({
-		opts,
-		prompter
-	});
-	const snapshot = await readConfigFileSnapshot();
-	let baseConfig = snapshot.valid ? snapshot.exists ? snapshot.sourceConfig ?? snapshot.config : {} : {};
-	if (snapshot.exists && !snapshot.valid) {
-		await prompter.note(onboardHelpers.summarizeExistingConfig(baseConfig), "Invalid config");
-		if (snapshot.issues.length > 0) await prompter.note([
-			...snapshot.issues.map((iss) => `- ${iss.path}: ${iss.message}`),
-			"",
-			"Docs: https://docs.genesis.ai/gateway/configuration"
-		].join("\n"), "Config issues");
-		await prompter.outro(`Config invalid. Run \`${formatCliCommand("genesis doctor")}\` to repair it, then re-run setup.`);
-		runtime.exit(1);
-		return;
-	}
-	const compatibilityNotices = snapshot.exists && snapshot.valid ? await loadPluginStatusModule().then(({ buildPluginCompatibilityNotices }) => buildPluginCompatibilityNotices({ config: baseConfig })) : [];
-	if (compatibilityNotices.length > 0) {
-		const { formatPluginCompatibilityNotice } = await loadPluginStatusModule();
-		await prompter.note([
-			`Detected ${compatibilityNotices.length} plugin compatibility notice${compatibilityNotices.length === 1 ? "" : "s"} in the current config.`,
-			...compatibilityNotices.slice(0, 4).map((notice) => `- ${formatPluginCompatibilityNotice(notice)}`),
-			...compatibilityNotices.length > 4 ? [`- ... +${compatibilityNotices.length - 4} more`] : [],
-			"",
-			`Review: ${formatCliCommand("genesis doctor")}`,
-			`Inspect: ${formatCliCommand("genesis plugins inspect --all")}`
-		].join("\n"), "Plugin compatibility");
-	}
-	const quickstartHint = `Configure details later via ${formatCliCommand("genesis configure")}.`;
-	const manualHint = "Configure port, network, Tailscale, and auth options.";
-	const explicitFlowRaw = opts.flow?.trim();
-	const normalizedExplicitFlow = explicitFlowRaw === "manual" ? "advanced" : explicitFlowRaw;
-	if (normalizedExplicitFlow && normalizedExplicitFlow !== "quickstart" && normalizedExplicitFlow !== "advanced") {
-		runtime.error("Invalid --flow (use quickstart, manual, or advanced).");
-		runtime.exit(1);
-		return;
-	}
-	let flow = (normalizedExplicitFlow === "quickstart" || normalizedExplicitFlow === "advanced" ? normalizedExplicitFlow : void 0) ?? await prompter.select({
-		message: "Setup mode",
-		options: [{
-			value: "quickstart",
-			label: "QuickStart",
-			hint: quickstartHint
-		}, {
-			value: "advanced",
-			label: "Manual",
-			hint: manualHint
-		}],
-		initialValue: "quickstart"
-	});
-	if (opts.mode === "remote" && flow === "quickstart") {
-		await prompter.note("QuickStart only supports local gateways. Switching to Manual mode.", "QuickStart");
-		flow = "advanced";
-	}
-	if (snapshot.exists) {
-		await prompter.note(onboardHelpers.summarizeExistingConfig(baseConfig), "Existing config detected");
-		if (await prompter.select({
-			message: "Config handling",
-			options: [
-				{
-					value: "keep",
-					label: "Use existing values"
-				},
-				{
-					value: "modify",
-					label: "Update values"
-				},
-				{
-					value: "reset",
-					label: "Reset"
-				}
-			]
-		}) === "reset") {
-			const workspaceDefault = baseConfig.agents?.defaults?.workspace ?? onboardHelpers.DEFAULT_WORKSPACE;
-			const resetScope = await prompter.select({
-				message: "Reset scope",
-				options: [
-					{
-						value: "config",
-						label: "Config only"
-					},
-					{
-						value: "config+creds+sessions",
-						label: "Config + creds + sessions"
-					},
-					{
-						value: "full",
-						label: "Full reset (config + creds + sessions + workspace)"
-					}
-				]
-			});
-			await onboardHelpers.handleReset(resetScope, resolveUserPath(workspaceDefault), runtime);
-			baseConfig = {};
-		}
-	}
-	const quickstartGateway = (() => {
-		const hasExisting = typeof baseConfig.gateway?.port === "number" || baseConfig.gateway?.bind !== void 0 || baseConfig.gateway?.auth?.mode !== void 0 || baseConfig.gateway?.auth?.token !== void 0 || baseConfig.gateway?.auth?.password !== void 0 || baseConfig.gateway?.customBindHost !== void 0 || baseConfig.gateway?.tailscale?.mode !== void 0;
-		const bindRaw = baseConfig.gateway?.bind;
-		const bind = bindRaw === "loopback" || bindRaw === "lan" || bindRaw === "auto" || bindRaw === "custom" || bindRaw === "tailnet" ? bindRaw : "loopback";
-		let authMode = "token";
-		if (baseConfig.gateway?.auth?.mode === "token" || baseConfig.gateway?.auth?.mode === "password") authMode = baseConfig.gateway.auth.mode;
-		else if (baseConfig.gateway?.auth?.token) authMode = "token";
-		else if (baseConfig.gateway?.auth?.password) authMode = "password";
-		const tailscaleRaw = baseConfig.gateway?.tailscale?.mode;
-		const tailscaleMode = tailscaleRaw === "off" || tailscaleRaw === "serve" || tailscaleRaw === "funnel" ? tailscaleRaw : "off";
-		return {
-			hasExisting,
-			port: resolveGatewayPort(baseConfig),
-			bind,
-			authMode,
-			tailscaleMode,
-			token: baseConfig.gateway?.auth?.token,
-			password: baseConfig.gateway?.auth?.password,
-			customBindHost: baseConfig.gateway?.customBindHost,
-			tailscaleResetOnExit: baseConfig.gateway?.tailscale?.resetOnExit ?? false
-		};
-	})();
-	if (flow === "quickstart") {
-		const formatBind = (value) => {
-			if (value === "loopback") return "Loopback (127.0.0.1)";
-			if (value === "lan") return "LAN";
-			if (value === "custom") return "Custom IP";
-			if (value === "tailnet") return "Tailnet (Tailscale IP)";
-			return "Auto";
-		};
-		const formatAuth = (value) => {
-			if (value === "token") return "Token (default)";
-			return "Password";
-		};
-		const formatTailscale = (value) => {
-			if (value === "off") return "Off";
-			if (value === "serve") return "Serve";
-			return "Funnel";
-		};
-		const quickstartLines = quickstartGateway.hasExisting ? [
-			"Keeping your current gateway settings:",
-			`Gateway port: ${quickstartGateway.port}`,
-			`Gateway bind: ${formatBind(quickstartGateway.bind)}`,
-			...quickstartGateway.bind === "custom" && quickstartGateway.customBindHost ? [`Gateway custom IP: ${quickstartGateway.customBindHost}`] : [],
-			`Gateway auth: ${formatAuth(quickstartGateway.authMode)}`,
-			`Tailscale exposure: ${formatTailscale(quickstartGateway.tailscaleMode)}`,
-			"Direct to chat channels."
-		] : [
-			`Gateway port: ${quickstartGateway.port}`,
-			"Gateway bind: Loopback (127.0.0.1)",
-			"Gateway auth: Token (default)",
-			"Tailscale exposure: Off",
-			"Direct to chat channels."
-		];
-		await prompter.note(quickstartLines.join("\n"), "QuickStart");
-	}
-	const localPort = resolveGatewayPort(baseConfig);
-	const localUrl = `ws://127.0.0.1:${localPort}`;
-	const remoteUrl = baseConfig.gateway?.remote?.url?.trim() ?? "";
-	let localProbe = { ok: false };
-	let remoteProbe = null;
-	if (opts.mode === void 0 && flow !== "quickstart") {
-		let localGatewayToken = process.env.GENESIS_GATEWAY_TOKEN;
-		try {
-			const resolvedGatewayToken = await resolveSetupSecretInputString({
-				config: baseConfig,
-				value: baseConfig.gateway?.auth?.token,
-				path: "gateway.auth.token",
-				env: process.env
-			});
-			if (resolvedGatewayToken) localGatewayToken = resolvedGatewayToken;
-		} catch (error) {
-			await prompter.note(["Could not resolve gateway.auth.token SecretRef for setup probe.", formatErrorMessage(error)].join("\n"), "Gateway auth");
-		}
-		let localGatewayPassword = process.env.GENESIS_GATEWAY_PASSWORD;
-		try {
-			const resolvedGatewayPassword = await resolveSetupSecretInputString({
-				config: baseConfig,
-				value: baseConfig.gateway?.auth?.password,
-				path: "gateway.auth.password",
-				env: process.env
-			});
-			if (resolvedGatewayPassword) localGatewayPassword = resolvedGatewayPassword;
-		} catch (error) {
-			await prompter.note(["Could not resolve gateway.auth.password SecretRef for setup probe.", formatErrorMessage(error)].join("\n"), "Gateway auth");
-		}
-		let remoteGatewayToken = normalizeSecretInputString(baseConfig.gateway?.remote?.token);
-		try {
-			const resolvedRemoteGatewayToken = await resolveSetupSecretInputString({
-				config: baseConfig,
-				value: baseConfig.gateway?.remote?.token,
-				path: "gateway.remote.token",
-				env: process.env
-			});
-			if (resolvedRemoteGatewayToken) remoteGatewayToken = resolvedRemoteGatewayToken;
-		} catch (error) {
-			await prompter.note(["Could not resolve gateway.remote.token SecretRef for setup probe.", formatErrorMessage(error)].join("\n"), "Gateway auth");
-		}
-		[localProbe, remoteProbe] = await Promise.all([onboardHelpers.probeGatewayReachable({
-			url: localUrl,
-			token: localGatewayToken,
-			password: localGatewayPassword
-		}), remoteUrl ? onboardHelpers.probeGatewayReachable({
-			url: remoteUrl,
-			token: remoteGatewayToken
-		}) : Promise.resolve(null)]);
-	}
-	const mode = opts.mode ?? (flow === "quickstart" ? "local" : await prompter.select({
-		message: "What do you want to set up?",
-		options: [{
-			value: "local",
-			label: "Local gateway (this machine)",
-			hint: localProbe.ok ? `Gateway reachable (${localUrl})` : `No gateway detected (${localUrl})`
-		}, {
-			value: "remote",
-			label: "Remote gateway (info-only)",
-			hint: !remoteUrl ? "No remote URL configured yet" : remoteProbe?.ok ? `Gateway reachable (${remoteUrl})` : `Configured but unreachable (${remoteUrl})`
-		}]
-	}));
-	if (mode === "remote") {
-		const { promptRemoteGatewayConfig } = await import("./onboard-remote-DBP9N9uh.js");
-		const { applySkipBootstrapConfig } = await import("./onboard-config-ExGYhkcH.js");
-		const { logConfigUpdated } = await loadConfigLoggingModule();
-		let nextConfig = await promptRemoteGatewayConfig(baseConfig, prompter, { secretInputMode: opts.secretInputMode });
-		if (opts.skipBootstrap) nextConfig = applySkipBootstrapConfig(nextConfig);
-		nextConfig = onboardHelpers.applyWizardMetadata(nextConfig, {
-			command: "onboard",
-			mode
-		});
-		await writeConfigFile(nextConfig);
-		logConfigUpdated(runtime);
-		await prompter.outro("Remote gateway configured.");
-		return;
-	}
-	const workspaceDir = resolveUserPath((opts.workspace ?? (flow === "quickstart" ? baseConfig.agents?.defaults?.workspace ?? onboardHelpers.DEFAULT_WORKSPACE : await prompter.text({
-		message: "Workspace directory",
-		initialValue: baseConfig.agents?.defaults?.workspace ?? onboardHelpers.DEFAULT_WORKSPACE
-	}))).trim() || onboardHelpers.DEFAULT_WORKSPACE);
-	const { applyLocalSetupWorkspaceConfig, applySkipBootstrapConfig } = await import("./onboard-config-ExGYhkcH.js");
-	let nextConfig = applyLocalSetupWorkspaceConfig(baseConfig, workspaceDir);
-	if (opts.skipBootstrap) nextConfig = applySkipBootstrapConfig(nextConfig);
-	const authChoiceFromPrompt = opts.authChoice === void 0;
-	let authChoice = opts.authChoice;
-	let authStore;
-	let promptAuthChoiceGrouped;
-	if (authChoiceFromPrompt) {
-		const { ensureAuthProfileStore } = await import("./agents/auth-profiles.runtime.js");
-		({promptAuthChoiceGrouped} = await import("./auth-choice-prompt-By5vT6aI.js"));
-		authStore = ensureAuthProfileStore(void 0, { allowKeychainPrompt: false });
-	}
-	while (true) {
-		if (authChoiceFromPrompt) authChoice = await promptAuthChoiceGrouped({
-			prompter,
-			store: authStore,
-			includeSkip: true,
-			config: nextConfig,
-			workspaceDir
-		});
-		if (authChoice === void 0) throw new WizardCancelledError("auth choice is required");
-		if (authChoice === "custom-api-key") {
-			const { promptCustomApiConfig } = await import("./onboard-custom-vRcCYxwi.js");
-			nextConfig = (await promptCustomApiConfig({
-				prompter,
-				runtime,
-				config: nextConfig,
-				secretInputMode: opts.secretInputMode
-			})).config;
-			break;
-		}
-		if (authChoice === "skip") {
-			if (authChoiceFromPrompt) {
-				const { applyPrimaryModel, promptDefaultModel } = await loadModelPickerModule();
-				const modelSelection = await promptDefaultModel({
-					config: nextConfig,
-					prompter,
-					allowKeep: true,
-					ignoreAllowlist: true,
-					includeProviderPluginSetups: true,
-					workspaceDir,
-					runtime
-				});
-				if (modelSelection.config) nextConfig = modelSelection.config;
-				if (modelSelection.model) nextConfig = applyPrimaryModel(nextConfig, modelSelection.model);
-				const { warnIfModelConfigLooksOff } = await loadAuthChoiceModule();
-				await warnIfModelConfigLooksOff(nextConfig, prompter);
-			}
-			break;
-		}
-		const [{ applyAuthChoice, resolvePreferredProviderForAuthChoice, warnIfModelConfigLooksOff }, { applyPrimaryModel, promptDefaultModel }] = await Promise.all([loadAuthChoiceModule(), loadModelPickerModule()]);
-		const authResult = await applyAuthChoice({
-			authChoice,
-			config: nextConfig,
-			prompter,
-			runtime,
-			setDefaultModel: true,
-			opts: {
-				tokenProvider: opts.tokenProvider,
-				token: opts.authChoice === "apiKey" && opts.token ? opts.token : void 0
-			}
-		});
-		nextConfig = authResult.config;
-		if (authResult.retrySelection) {
-			if (authChoiceFromPrompt) continue;
-			break;
-		}
-		if (authResult.agentModelOverride) nextConfig = applyPrimaryModel(nextConfig, authResult.agentModelOverride);
-		const authChoiceModelSelectionPolicy = await resolveAuthChoiceModelSelectionPolicy({
-			authChoice,
-			config: nextConfig,
-			workspaceDir,
-			resolvePreferredProviderForAuthChoice
-		});
-		if (authChoiceFromPrompt || authChoiceModelSelectionPolicy?.promptWhenAuthChoiceProvided) {
-			const modelSelection = await promptDefaultModel({
-				config: nextConfig,
-				prompter,
-				allowKeep: authChoiceModelSelectionPolicy?.allowKeepCurrent ?? true,
-				ignoreAllowlist: true,
-				includeProviderPluginSetups: true,
-				preferredProvider: authChoiceModelSelectionPolicy?.preferredProvider,
-				workspaceDir,
-				runtime
-			});
-			if (modelSelection.config) nextConfig = modelSelection.config;
-			if (modelSelection.model) nextConfig = applyPrimaryModel(nextConfig, modelSelection.model);
-		}
-		await warnIfModelConfigLooksOff(nextConfig, prompter);
-		break;
-	}
-	const { configureGatewayForSetup } = await import("./setup.gateway-config-CYweAHjs.js");
-	const gateway = await configureGatewayForSetup({
-		flow,
-		baseConfig,
-		nextConfig,
-		localPort,
-		quickstartGateway,
-		secretInputMode: opts.secretInputMode,
-		prompter,
-		runtime
-	});
-	nextConfig = gateway.nextConfig;
-	const settings = gateway.settings;
-	if (opts.skipChannels ?? opts.skipProviders) await prompter.note("Skipping channel setup.", "Channels");
-	else {
-		const { listChannelPlugins } = await import("./plugins-3wTxVV8B.js");
-		const { setupChannels } = await import("./onboard-channels-BOQR4n72.js");
-		const quickstartAllowFromChannels = flow === "quickstart" ? listChannelPlugins().filter((plugin) => plugin.meta.quickstartAllowFrom).map((plugin) => plugin.id) : [];
-		nextConfig = await setupChannels(nextConfig, runtime, prompter, {
-			allowSignalInstall: true,
-			deferStatusUntilSelection: flow === "quickstart",
-			forceAllowFromChannels: quickstartAllowFromChannels,
-			skipDmPolicyPrompt: flow === "quickstart",
-			skipConfirm: flow === "quickstart",
-			quickstartDefaults: flow === "quickstart",
-			secretInputMode: opts.secretInputMode
-		});
-	}
-	await writeConfigFile(nextConfig);
-	const { logConfigUpdated } = await loadConfigLoggingModule();
-	logConfigUpdated(runtime);
-	await onboardHelpers.ensureWorkspaceAndSessions(workspaceDir, runtime, { skipBootstrap: Boolean(nextConfig.agents?.defaults?.skipBootstrap) });
-	if (opts.skipSearch) await prompter.note("Skipping search setup.", "Search");
-	else {
-		const { setupSearch } = await import("./onboard-search-N3DqZKY7.js");
-		nextConfig = await setupSearch(nextConfig, runtime, prompter, {
-			quickstartDefaults: flow === "quickstart",
-			secretInputMode: opts.secretInputMode
-		});
-	}
-	if (opts.skipSkills) await prompter.note("Skipping skills setup.", "Skills");
-	else {
-		const { setupSkills } = await import("./onboard-skills-C2y9_grG.js");
-		nextConfig = await setupSkills(nextConfig, workspaceDir, runtime, prompter);
-	}
-	if (flow !== "quickstart") {
-		const { setupPluginConfig } = await import("./setup.plugin-config-DttZRu78.js");
-		nextConfig = await setupPluginConfig({
-			config: nextConfig,
-			prompter,
-			workspaceDir
-		});
-	}
-	const { setupInternalHooks } = await import("./onboard-hooks-B18GGrai.js");
-	nextConfig = await setupInternalHooks(nextConfig, runtime, prompter);
-	nextConfig = onboardHelpers.applyWizardMetadata(nextConfig, {
-		command: "onboard",
-		mode
-	});
-	await writeConfigFile(nextConfig);
-	const { finalizeSetupWizard } = await import("./setup.finalize-DIHLSogt.js");
-	const { launchedTui } = await finalizeSetupWizard({
-		flow,
-		opts,
-		baseConfig,
-		nextConfig,
-		workspaceDir,
-		settings,
-		prompter,
-		runtime
-	});
-	if (launchedTui) return;
-}
-//#endregion
-export { runSetupWizard as t };