@trenchwork/erosolar 1.1.33 → 1.1.35

package/dist/bin/erosolar.d.ts

@@ -1,7 +1,3 @@
 #!/usr/bin/env node
-/**
- * Alias entrypoint for erosolar-cli.
- * Delegates to the main deepseek binary to keep build outputs in sync.
- */
-import './deepseek.js';
+export {};
 //# sourceMappingURL=erosolar.d.ts.map

package/dist/bin/erosolar.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"erosolar.d.ts","sourceRoot":"","sources":["../../src/bin/erosolar.ts"],"names":[],"mappings":";AACA;;;GAGG;AACH,OAAO,eAAe,CAAC"}
+{"version":3,"file":"erosolar.d.ts","sourceRoot":"","sources":["../../src/bin/erosolar.ts"],"names":[],"mappings":""}

package/dist/bin/erosolar.js

@@ -1,7 +1,358 @@
 #!/usr/bin/env node
 /**
- * Alias entrypoint for erosolar-cli.
- * Delegates to the main deepseek binary to keep build outputs in sync.
+ * Erosolar (a.k.a. Trenchwork) — single CLI entry point.
+ *
+ * The npm `bin` map publishes two names — `erosolar` and `trenchwork` —
+ * both pointing at this file. There is no `deepseek` entry point any
+ * longer; the historical name was retired 2026-05-09 to keep the brand
+ * surface a single name pair. The interactive shell uses Ink only.
  */
-import './deepseek.js';
+import { reportStatus, reportStatusError } from '../utils/statusReporter.js';
+import { track } from '../utils/analytics.js';
+// Fast path: handle --version, --help, --key before any heavy imports.
+const rawArgs = process.argv.slice(2);
+/**
+ * Extract `--profile NAME` or `--profile=NAME` from argv. Used by the
+ * approval gate to check profile-specific authorization before the
+ * profile manifest is loaded.
+ */
+function pickProfileArg(args) {
+    const idx = args.findIndex((a) => a === '--profile');
+    if (idx >= 0) {
+        const next = args[idx + 1];
+        if (next && !next.startsWith('-'))
+            return next;
+    }
+    const eq = args.find((a) => a.startsWith('--profile='));
+    if (eq)
+        return eq.slice('--profile='.length);
+    return undefined;
+}
+// Best-effort, non-blocking analytics ping. Never throws, never awaited.
+const subcommand = rawArgs[0]?.startsWith('-') ? '(flags)' : (rawArgs[0] || 'default');
+track('cli_invoked', { subcommand, arg_count: rawArgs.length });
+// Handle --key to set API key (simple path that works reliably).
+const keyIndex = rawArgs.findIndex(arg => arg === '--key' || arg.startsWith('--key='));
+if (keyIndex !== -1) {
+    let keyValue;
+    const arg = rawArgs[keyIndex];
+    if (arg?.startsWith('--key=')) {
+        keyValue = arg.slice(6);
+    }
+    else if (rawArgs[keyIndex + 1] && !rawArgs[keyIndex + 1]?.startsWith('-')) {
+        keyValue = rawArgs[keyIndex + 1];
+    }
+    if (keyValue) {
+        import('node:fs').then(fs => {
+            import('node:path').then(path => {
+                import('node:os').then(os => {
+                    const secretDir = path.join(os.homedir(), '.erosolar');
+                    const secretFile = path.join(secretDir, 'secrets.json');
+                    try {
+                        fs.mkdirSync(secretDir, { recursive: true });
+                        const existing = fs.existsSync(secretFile)
+                            ? JSON.parse(fs.readFileSync(secretFile, 'utf-8'))
+                            : {};
+                        existing['DEEPSEEK_API_KEY'] = keyValue;
+                        fs.writeFileSync(secretFile, JSON.stringify(existing, null, 2) + '\n');
+                        console.log('✓ DEEPSEEK_API_KEY saved to ~/.erosolar/secrets.json');
+                        process.exit(0);
+                    }
+                    catch (err) {
+                        reportStatus(`Failed to save key: ${err instanceof Error ? err.message : err}`);
+                        process.exit(1);
+                    }
+                });
+            });
+        });
+    }
+    else {
+        reportStatus('Usage: erosolar --key YOUR_API_KEY');
+        process.exit(1);
+    }
+}
+else if (rawArgs.includes('--version') || rawArgs.includes('-v')) {
+    import('node:fs').then(fs => {
+        import('node:path').then(path => {
+            import('node:url').then(url => {
+                try {
+                    const __filename = url.fileURLToPath(import.meta.url);
+                    const pkgPath = path.resolve(path.dirname(__filename), '../../package.json');
+                    const pkg = JSON.parse(fs.readFileSync(pkgPath, 'utf-8'));
+                    console.log(`erosolar v${pkg.version || '0.0.0'}`);
+                }
+                catch {
+                    console.log('erosolar (version unknown)');
+                }
+                process.exit(0);
+            });
+        });
+    });
+}
+else if (rawArgs.includes('--help') || rawArgs.includes('-h')) {
+    console.log(`
+erosolar — AI-powered offsec / coding assistant (a.k.a. trenchwork)
+
+Usage: erosolar [options] [prompt]
+
+Modes:
+  erosolar                    Start the unified Ink interactive shell
+  erosolar "prompt"           Start with an initial prompt
+
+Options:
+  -v, --version               Show version
+  -h, --help                  Show this help
+  --key KEY                   Set the model provider API key
+  --profile NAME              Profile (erosolar-code | variant-research |
+                              engagement-delivery)
+  --self-test                 Run self-tests
+
+Subcommands:
+  erosolar offsec install     Install kali / AFL++ / gdb / pwntools binaries
+  erosolar helia <verb>       Control the local Helia browser companion
+
+In-shell tools (offsec profiles):
+  HuntStart                   Scaffold engagement+target+finding for a target
+                              (URL / file path / github.com/owner/repo) in one
+                              tool call. Findings sync live to
+                              https://trenchwork.org/portal.
+
+Environment:
+  DEEPSEEK_API_KEY            Model provider API key (or use --key to set)
+`);
+    process.exit(0);
+}
+else if (rawArgs[0] === 'helia') {
+    // Local-only utility: control the Helia browser running on this same
+    // machine via its 127.0.0.1:59998 HTTP API. No Erosolar account login
+    // required, no pairing token to copy — the CLI reads Helia's token
+    // file directly from ~/Library/Application Support/Helia/pairing-token
+    // (or the equivalent on Windows / Linux).
+    void runHeliaCommand(rawArgs.slice(1)).catch((err) => {
+        reportStatusError(err);
+        process.exit(1);
+    });
+}
+else if (rawArgs[0] === 'offsec') {
+    // Cross-platform offsec self-bootstrap. `erosolar offsec install`
+    // walks the BinaryRequirement manifest, installs missing binaries
+    // for the operator's OS via apt / brew / winget / pipx / npm / cargo
+    // / go / gem (whichever has a recipe). Tools without a native path
+    // on this OS are skipped with a pointer to WSL2 / Docker — no
+    // forced Kali install on macOS or Windows.
+    void (async () => {
+        const { runOffsecCommand } = await import('../cli/offsecInstall.js');
+        const code = await runOffsecCommand(rawArgs.slice(1));
+        process.exit(code);
+    })().catch((err) => { reportStatusError(err); process.exit(1); });
+}
+else {
+    void main();
+}
+async function runHeliaCommand(args) {
+    const { heliaControl } = await import('../tools/heliaControl.js');
+    const verb = args[0] || 'ping';
+    const usage = `Usage: erosolar helia <verb> [args]
+
+Verbs:
+  ping                       Check Helia is running, print version
+  tabs                       List open tabs (id / title / url / active)
+  open [url]                 Open a new tab (blank → homepage)
+  close <id>                 Close tab by id
+  switch <id>                Switch to tab by id
+  reload [id]                Reload active tab (or specific id)
+  navigate <url>             Navigate active tab to URL
+  context                    Read active tab's URL / title / text / headings
+  prompt <text>              Inject text into Helia's sidebar agent
+  focus                      Bring Helia window to the front
+  sidebar                    Open the Erosolar side panel
+  token                      Print path to the pairing-token file
+`;
+    try {
+        let result;
+        switch (verb) {
+            case 'ping': {
+                const r = await heliaControl.ping();
+                if (!r) {
+                    console.error('Helia is not running on this machine (no response on http://127.0.0.1:59998).');
+                    process.exit(2);
+                }
+                result = r;
+                break;
+            }
+            case 'token':
+                result = { path: heliaControl.tokenPath() };
+                break;
+            case 'tabs':
+                result = await heliaControl.tabs();
+                break;
+            case 'open':
+                result = await heliaControl.openTab(args[1]);
+                break;
+            case 'close':
+                if (!args[1]) {
+                    console.error(usage);
+                    process.exit(1);
+                }
+                result = await heliaControl.closeTab(args[1]);
+                break;
+            case 'switch':
+                if (!args[1]) {
+                    console.error(usage);
+                    process.exit(1);
+                }
+                result = await heliaControl.switchTab(args[1]);
+                break;
+            case 'reload':
+                result = await heliaControl.reload(args[1]);
+                break;
+            case 'navigate':
+            case 'nav':
+                if (!args[1]) {
+                    console.error(usage);
+                    process.exit(1);
+                }
+                result = await heliaControl.navigate(args[1]);
+                break;
+            case 'context':
+                result = await heliaControl.pageContext();
+                break;
+            case 'prompt': {
+                const text = args.slice(1).join(' ');
+                if (!text) {
+                    console.error(usage);
+                    process.exit(1);
+                }
+                result = await heliaControl.prompt(text);
+                break;
+            }
+            case 'focus':
+                result = await heliaControl.focus();
+                break;
+            case 'sidebar':
+                result = await heliaControl.openSidebar();
+                break;
+            case '--help':
+            case '-h':
+            case 'help':
+                console.log(usage);
+                process.exit(0);
+            default:
+                console.error(`Unknown helia verb: ${verb}\n\n${usage}`);
+                process.exit(1);
+        }
+        console.log(JSON.stringify(result, null, 2));
+        process.exit(0);
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        console.error(`helia ${verb}: ${msg}`);
+        process.exit(1);
+    }
+}
+async function main() {
+    // Require authentication before continuing.
+    const { requireAuth } = await import('../core/auth.js');
+    await requireAuth();
+    // Approved-users gate. The CLI carries offsec tooling, so every
+    // launch checks the signed-in email against the Firestore allowlist
+    // at `approved_users/{email}`. Misses get a request doc written for
+    // the operator to review, then the CLI refuses to start. SSO is
+    // also enforced at the Firestore-rule layer (sign_in_provider ==
+    // 'google.com'), so a non-SSO token can't even read the doc.
+    // The check also enforces:
+    //   - revocation: `revoked: true` on the doc denies access even if
+    //     `approved: true` (faster than removing the doc — preserves
+    //     the audit trail of who held access when).
+    //   - profile gating: `profiles_allowed: ['variant-research', ...]`
+    //     restricts which agent profiles a user can launch. Missing
+    //     field = permissive (backward compat). New approvals default
+    //     to `['erosolar-code']` only.
+    const requestedProfile = pickProfileArg(rawArgs) ?? process.env['EROSOLAR_PROFILE'] ?? 'erosolar-code';
+    const { checkApproval, requestApproval } = await import('../core/userApproval.js');
+    const approval = await checkApproval(requestedProfile);
+    if (!approval.approved) {
+        process.stderr.write('\n');
+        process.stderr.write('Access denied — this account is not authorized.\n');
+        process.stderr.write(`  Email:    ${approval.email ?? '(no email on token — SSO required)'}\n`);
+        process.stderr.write(`  Profile:  ${requestedProfile}\n`);
+        process.stderr.write(`  Reason:   ${approval.reason ?? 'unknown'}\n\n`);
+        if (approval.email && approval.uid && !approval.revoked) {
+            const req = await requestApproval();
+            if (req.ok) {
+                process.stderr.write('A request has been recorded. The administrator will review it.\n');
+                process.stderr.write('You can re-run `erosolar` once the approval lands.\n');
+            }
+            else {
+                process.stderr.write(`Could not file approval request: ${req.reason}\n`);
+            }
+        }
+        else if (approval.revoked) {
+            process.stderr.write('Revoked accounts cannot file new requests. Contact the operator directly.\n');
+        }
+        process.exit(1);
+    }
+    // Hydrate shared provider keys from Firestore. Runs after requireAuth
+    // + checkApproval so a valid Firebase ID token is already on disk
+    // and the user is on the allowlist. If the user has their own
+    // DEEPSEEK_API_KEY in env or saved via /secrets, this is a no-op;
+    // otherwise it fetches the org-managed key from
+    // shared_secrets/deepseek (Firestore-rule-gated by auth) and writes
+    // it into process.env before any provider is constructed. The CLI
+    // ships zero embedded keys.
+    const { prefetchAllSharedSecrets } = await import('../core/sharedSecrets.js');
+    await prefetchAllSharedSecrets();
+    // Project tracking. Idempotently upserts `projects/{projectId}`
+    // (id = sha256(workingDir).slice(0, 12)) and writes the
+    // session-start row with the project FK. The session id is
+    // surfaced via the EROSOLAR_SESSION_ID env so the interactive
+    // shell can patch session-end fields on clean exit.
+    const { registerProject, writeSessionStart } = await import('../core/projectTracker.js');
+    const projectResult = await registerProject(process.cwd());
+    process.env['EROSOLAR_PROJECT_ID'] = projectResult.context.projectId;
+    const cliVersion = process.env['npm_package_version'] || 'unknown';
+    const cliModel = process.env[`${requestedProfile.toUpperCase().replace(/[^A-Z0-9]/g, '_')}_MODEL`] || 'default';
+    const sessionStart = await writeSessionStart({
+        profile: requestedProfile,
+        model: cliModel,
+        version: cliVersion,
+        platform: process.platform,
+        project: projectResult.context,
+    });
+    if (sessionStart.ok && sessionStart.sessionId) {
+        process.env['EROSOLAR_SESSION_ID'] = sessionStart.sessionId;
+    }
+    // Mirror the active profile + model + platform to the Remote
+    // Operations Center so the portal's "Profile" pill shows what the
+    // CLI is currently running. Fire-and-forget; a failed call never
+    // blocks startup.
+    void (async () => {
+        try {
+            const { callLambda } = await import('../utils/lambdaClient.js');
+            await callLambda('cliProfileSet', {
+                profile: requestedProfile,
+                model: cliModel,
+                version: cliVersion,
+                platform: process.platform,
+                projectId: projectResult.context.projectId,
+            });
+        }
+        catch (_) { /* portal mirror is fire-and-forget */ }
+    })();
+    // Force color support for TTY terminals.
+    if (process.stdout.isTTY && !process.env['NO_COLOR']) {
+        process.env['FORCE_COLOR'] = process.env['FORCE_COLOR'] ?? '1';
+    }
+    // Self-test mode.
+    if (rawArgs.includes('--self-test')) {
+        const { runSelfTest } = await import('./selfTest.js');
+        runSelfTest().then((success) => process.exit(success ? 0 : 1)).catch(() => process.exit(1));
+        return;
+    }
+    const { runInteractiveShell } = await import('../headless/interactiveShell.js');
+    runInteractiveShell({ argv: rawArgs }).catch((error) => {
+        reportStatusError(error);
+        process.exit(1);
+    });
+}
 //# sourceMappingURL=erosolar.js.map

package/dist/bin/erosolar.js.map

@@ -1 +1 @@
-{"version":3,"file":"erosolar.js","sourceRoot":"","sources":["../../src/bin/erosolar.ts"],"names":[],"mappings":";AACA;;;GAGG;AACH,OAAO,eAAe,CAAC"}
+{"version":3,"file":"erosolar.js","sourceRoot":"","sources":["../../src/bin/erosolar.ts"],"names":[],"mappings":";AACA;;;;;;;GAOG;AACH,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAC7E,OAAO,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAC;AAE9C,uEAAuE;AACvE,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAEtC;;;;GAIG;AACH,SAAS,cAAc,CAAC,IAAc;IACpC,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC;IACrD,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;QACb,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;QAC3B,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;IACjD,CAAC;IACD,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC;IACxD,IAAI,EAAE;QAAE,OAAO,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IAC7C,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC;AACvF,KAAK,CAAC,aAAa,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;AAEhE,iEAAiE;AACjE,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,OAAO,IAAI,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;AACvF,IAAI,QAAQ,KAAK,CAAC,CAAC,EAAE,CAAC;IACpB,IAAI,QAA4B,CAAC;IACjC,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC9B,IAAI,GAAG,EAAE,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9B,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC1B,CAAC;SAAM,IAAI,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5E,QAAQ,GAAG,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;IACnC,CAAC;IAED,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE;YAC1B,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBAC9B,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE;oBAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,CAAC;oBACvD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;oBAExD,IAAI,CAAC;wBACH,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;wBAC7C,MAAM,QAAQ,GAAG,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC;4BACxC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;4BAClD,CAAC,CAAC,EAAE,CAAC;wBACP,QAAQ,CAAC,kBAAkB,CAAC,GAAG,QAAQ,CAAC;wBACxC,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;wBACvE,OAAO,CAAC,GAAG,CAAC,sDAAsD,CAAC,CAAC;wBACpE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBAClB,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,YAAY,CAAC,uBAAuB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;wBAChF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBAClB,CAAC;gBACH,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,YAAY,CAAC,oCAAoC,CAAC,CAAC;QACnD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;KAAM,IAAI,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;IACnE,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE;QAC1B,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YAC9B,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;gBAC5B,IAAI,CAAC;oBACH,MAAM,UAAU,GAAG,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBACtD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,oBAAoB,CAAC,CAAC;oBAC7E,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;oBAC1D,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,CAAC,OAAO,IAAI,OAAO,EAAE,CAAC,CAAC;gBACrD,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;gBAC5C,CAAC;gBACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;KAAM,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;IAChE,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6Bb,CAAC,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;KAAM,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC;IAClC,qEAAqE;IACrE,sEAAsE;IACtE,mEAAmE;IACnE,uEAAuE;IACvE,0CAA0C;IAC1C,KAAK,eAAe,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QACnD,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACvB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC;KAAM,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;IACnC,kEAAkE;IAClE,kEAAkE;IAClE,qEAAqE;IACrE,mEAAmE;IACnE,8DAA8D;IAC9D,2CAA2C;IAC3C,KAAK,CAAC,KAAK,IAAI,EAAE;QACf,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;QACrE,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACtD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACpE,CAAC;KAAM,CAAC;IACN,KAAK,IAAI,EAAE,CAAC;AACd,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,IAAc;IAC3C,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAC;IAClE,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC;IAE/B,MAAM,KAAK,GAAG;;;;;;;;;;;;;;;CAef,CAAC;IAEA,IAAI,CAAC;QACH,IAAI,MAAe,CAAC;QACpB,QAAQ,IAAI,EAAE,CAAC;YACb,KAAK,MAAM,CAAC,CAAC,CAAC;gBACZ,MAAM,CAAC,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,CAAC;gBACpC,IAAI,CAAC,CAAC,EAAE,CAAC;oBACP,OAAO,CAAC,KAAK,CAAC,+EAA+E,CAAC,CAAC;oBAC/F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAClB,CAAC;gBACD,MAAM,GAAG,CAAC,CAAC;gBACX,MAAM;YACR,CAAC;YACD,KAAK,OAAO;gBACV,MAAM,GAAG,EAAE,IAAI,EAAE,YAAY,CAAC,SAAS,EAAE,EAAE,CAAC;gBAC5C,MAAM;YACR,KAAK,MAAM;gBACT,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,CAAC;gBACnC,MAAM;YACR,KAAK,MAAM;gBACT,MAAM,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC7C,MAAM;YACR,KAAK,OAAO;gBACV,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;oBAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;oBAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAAC,CAAC;gBACxD,MAAM,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC;gBAC/C,MAAM;YACR,KAAK,QAAQ;gBACX,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;oBAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;oBAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAAC,CAAC;gBACxD,MAAM,GAAG,MAAM,YAAY,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC;gBAChD,MAAM;YACR,KAAK,QAAQ;gBACX,MAAM,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC5C,MAAM;YACR,KAAK,UAAU,CAAC;YAChB,KAAK,KAAK;gBACR,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;oBAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;oBAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAAC,CAAC;gBACxD,MAAM,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC;gBAC/C,MAAM;YACR,KAAK,SAAS;gBACZ,MAAM,GAAG,MAAM,YAAY,CAAC,WAAW,EAAE,CAAC;gBAC1C,MAAM;YACR,KAAK,QAAQ,CAAC,CAAC,CAAC;gBACd,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACrC,IAAI,CAAC,IAAI,EAAE,CAAC;oBAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;oBAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAAC,CAAC;gBACrD,MAAM,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBACzC,MAAM;YACR,CAAC;YACD,KAAK,OAAO;gBACV,MAAM,GAAG,MAAM,YAAY,CAAC,KAAK,EAAE,CAAC;gBACpC,MAAM;YACR,KAAK,SAAS;gBACZ,MAAM,GAAG,MAAM,YAAY,CAAC,WAAW,EAAE,CAAC;gBAC1C,MAAM;YACR,KAAK,QAAQ,CAAC;YACd,KAAK,IAAI,CAAC;YACV,KAAK,MAAM;gBACT,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBACnB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB;gBACE,OAAO,CAAC,KAAK,CAAC,uBAAuB,IAAI,OAAO,KAAK,EAAE,CAAC,CAAC;gBACzD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,CAAC,KAAK,CAAC,SAAS,IAAI,KAAK,GAAG,EAAE,CAAC,CAAC;QACvC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,4CAA4C;IAC5C,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC;IACxD,MAAM,WAAW,EAAE,CAAC;IAEpB,gEAAgE;IAChE,oEAAoE;IACpE,oEAAoE;IACpE,gEAAgE;IAChE,iEAAiE;IACjE,6DAA6D;IAC7D,2BAA2B;IAC3B,mEAAmE;IACnE,iEAAiE;IACjE,gDAAgD;IAChD,oEAAoE;IACpE,gEAAgE;IAChE,kEAAkE;IAClE,mCAAmC;IACnC,MAAM,gBAAgB,GAAG,cAAc,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,eAAe,CAAC;IACvG,MAAM,EAAE,aAAa,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;IACnF,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,gBAAgB,CAAC,CAAC;IACvD,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACvB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mDAAmD,CAAC,CAAC;QAC1E,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,QAAQ,CAAC,KAAK,IAAI,oCAAoC,IAAI,CAAC,CAAC;QAChG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,gBAAgB,IAAI,CAAC,CAAC;QAC1D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,QAAQ,CAAC,MAAM,IAAI,SAAS,MAAM,CAAC,CAAC;QACxE,IAAI,QAAQ,CAAC,KAAK,IAAI,QAAQ,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;YACxD,MAAM,GAAG,GAAG,MAAM,eAAe,EAAE,CAAC;YACpC,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;gBACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kEAAkE,CAAC,CAAC;gBACzF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sDAAsD,CAAC,CAAC;YAC/E,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oCAAoC,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC;YAC3E,CAAC;QACH,CAAC;aAAM,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;YAC5B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,6EAA6E,CAAC,CAAC;QACtG,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,sEAAsE;IACtE,kEAAkE;IAClE,8DAA8D;IAC9D,kEAAkE;IAClE,gDAAgD;IAChD,oEAAoE;IACpE,kEAAkE;IAClE,4BAA4B;IAC5B,MAAM,EAAE,wBAAwB,EAAE,GAAG,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAC;IAC9E,MAAM,wBAAwB,EAAE,CAAC;IAEjC,gEAAgE;IAChE,wDAAwD;IACxD,2DAA2D;IAC3D,8DAA8D;IAC9D,oDAAoD;IACpD,MAAM,EAAE,eAAe,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,2BAA2B,CAAC,CAAC;IACzF,MAAM,aAAa,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC3D,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,GAAG,aAAa,CAAC,OAAO,CAAC,SAAS,CAAC;IACrE,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,IAAI,SAAS,CAAC;IACnE,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,gBAAgB,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAC;IAChH,MAAM,YAAY,GAAG,MAAM,iBAAiB,CAAC;QAC3C,OAAO,EAAE,gBAAgB;QACzB,KAAK,EAAE,QAAQ;QACf,OAAO,EAAE,UAAU;QACnB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,OAAO,EAAE,aAAa,CAAC,OAAO;KAC/B,CAAC,CAAC;IACH,IAAI,YAAY,CAAC,EAAE,IAAI,YAAY,CAAC,SAAS,EAAE,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,GAAG,YAAY,CAAC,SAAS,CAAC;IAC9D,CAAC;IAED,6DAA6D;IAC7D,kEAAkE;IAClE,iEAAiE;IACjE,kBAAkB;IAClB,KAAK,CAAC,KAAK,IAAI,EAAE;QACf,IAAI,CAAC;YACH,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAC;YAChE,MAAM,UAAU,CAAC,eAAe,EAAE;gBAChC,OAAO,EAAE,gBAAgB;gBACzB,KAAK,EAAE,QAAQ;gBACf,OAAO,EAAE,UAAU;gBACnB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,SAAS,EAAE,aAAa,CAAC,OAAO,CAAC,SAAS;aAC3C,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC,CAAC,sCAAsC,CAAC,CAAC;IACxD,CAAC,CAAC,EAAE,CAAC;IAEL,yCAAyC;IACzC,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;QACrD,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC;IACjE,CAAC;IAED,kBAAkB;IAClB,IAAI,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;QACpC,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC;QACtD,WAAW,EAAE,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5F,OAAO;IACT,CAAC;IAED,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,iCAAiC,CAAC,CAAC;IAChF,mBAAmB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;QACrD,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACzB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/headless/interactiveShell.js

@@ -212,12 +212,10 @@ class InteractiveShell {
     profile;
     profileConfig;
     workingDir;
-    // The shell holds an `IPromptController`-shaped value so the same
-    // call sites work whether we picked the legacy renderer or the Ink
-    // adapter (selected by EROSOLAR_INK=1, see createPromptController).
-    // Using `any` here keeps existing call signatures unchanged — the
-    // interface declares the same surface but TS would otherwise insist
-    // we touch every call site to declare nullability.
+    // Always an InkPromptController instance (Ink is the only renderer
+    // — the legacy PromptController was removed 2026-05-09). The `any`
+    // keeps call sites unchanged across the IPromptController surface
+    // without forcing every caller to declare nullability up-front.
     // eslint-disable-next-line @typescript-eslint/no-explicit-any
     promptController = null;
     isProcessing = false;
@@ -301,12 +299,9 @@ class InteractiveShell {
         this.pendingPrompts.push(prompt);
     }
     async run() {
-        // Factory-driven construction: `EROSOLAR_INK=1` picks the Ink-backed
-        // controller (src/ui/ink/InkPromptController.ts), otherwise the
-        // legacy PromptController. Both implement the same surface so
-        // every call site below is unchanged. Dynamic import keeps the
-        // legacy path's cold-start free of the React/Ink parse cost when
-        // the env flag is unset.
+        // Ink is the only renderer; createPromptController always returns
+        // an InkPromptController. The dynamic import keeps the React + Ink
+        // parse cost off the cold-start path of `--version` / `--help` etc.
         const { createPromptController } = await import('../ui/ink/InkPromptController.js');
         this.promptController = await createPromptController(stdin, stdout, {
             onSubmit: (text) => this.handleSubmit(text),