@westbayberry/dg 2.3.2 → 2.3.4

package/dist/setup/install-method.js

@@ -0,0 +1,36 @@
+import { realpathSync } from "node:fs";
+function normalize(path) {
+    return path.replace(/\\/g, "/");
+}
+// Resolve how dg was installed from the realpath of its own entry script, so a
+// self-upgrade dispatches to the package manager that actually owns the binary.
+// dg is published to npm and installed globally, so the npm-family global
+// layouts are auto-handled; bun/volta and anything not under node_modules return
+// null and the caller prints the manual command rather than guessing wrong (an
+// npm install onto a non-npm-owned prefix fails with EACCES/ENOENT).
+export function detectInstallMethod(packageName, version, argv1 = process.argv[1]) {
+    if (!argv1) {
+        return null;
+    }
+    let real = argv1;
+    try {
+        real = realpathSync(argv1);
+    }
+    catch {
+        real = argv1;
+    }
+    const path = normalize(real);
+    if (!path.includes("/node_modules/")) {
+        return null;
+    }
+    const spec = `${packageName}@${version}`;
+    const pnpmHome = process.env.PNPM_HOME;
+    if (/\/(pnpm|pnpm-global)\//.test(path) || (pnpmHome && path.startsWith(normalize(pnpmHome)))) {
+        return { manager: "pnpm", args: ["add", "-g", spec] };
+    }
+    // bun/volta manage their own toolchain dirs; an npm -g there would be wrong.
+    if (/\/\.bun\//.test(path) || /\/\.volta\//.test(path)) {
+        return null;
+    }
+    return { manager: "npm", args: ["install", "-g", spec] };
+}

package/dist/setup/plan.js

@@ -6,12 +6,14 @@ import { randomBytes } from "node:crypto";
 import { homedir } from "node:os";
 import { createTheme } from "../presentation/theme.js";
 import { AGENTS, AGENT_IDS, agentLabel, resolveAgentHookContext, reverseAgentHookEntry } from "../agents/registry.js";
+import { removeAgentRouting, routingInstalled } from "../agents/routing.js";
+import { escapeDoubleQuotedSh, escapeDoubleQuotedFish } from "../util/sh-escape.js";
 import { GATE_ENABLE_HINT, readNetworkGatePosture } from "../agents/gate-posture.js";
-import { acquireLockSync, findStaleSessionsSync, preserveCorruptCleanupRegistrySync, resolveDgPaths, sweepStaleSessionsSync, CLEANUP_REGISTRY_LOCK } from "../state/index.js";
+import { acquireLockSync, findStaleSessionsSync, LockBusyError, preserveCorruptCleanupRegistrySync, resolveDgPaths, sweepStaleSessionsSync, CLEANUP_REGISTRY_LOCK } from "../state/index.js";
 import { currentNodeVersion, isSupportedNode } from "../runtime/node-version.js";
 import { dgVersion } from "../commands/version.js";
 import { compareVersions, readLatestVersion } from "../commands/update.js";
-import { AuthError, authStatus, displayTier, readAuthState } from "../auth/store.js";
+import { AuthError, authPath, authStatus, clearAuthState, displayTier, readAuthState } from "../auth/store.js";
 import { ConfigError, DEFAULT_CONFIG, loadUserConfig } from "../config/settings.js";
 import { describeCooldownSettings } from "../policy/cooldown.js";
 import { resolveRealBinary } from "../launcher/resolve-real-binary.js";
@@ -82,7 +84,7 @@ const DOCTOR_FIX_BY_NAME = {
     "shell-rc": "dg setup",
     "python-hook-drift": "dg uninstall, or re-run dg setup, to remove the stale pip hook",
     path: "reload your shell after setup",
-    "commit-guard": "dg guard-commit",
+    "commit-guard": "dg commit-guard",
     "stale-sessions": "clears on the next protected run",
     auth: "dg login"
 };
@@ -195,44 +197,45 @@ export function applySetupPlanWithLock(plan, now = new Date()) {
         lock.release();
     }
 }
-// Shims written by a dg that predates the self-cleaning template carry no
-// auto-cleanup, so a plain `npm uninstall -g` leaves them stranded forever.
-// Rewriting the installed shims and reinstalling the standalone uninstaller on
-// the first run after a version bump propagates the current template to setups
-// created by older releases.
 export function refreshSetupOnUpgrade(env = process.env) {
     const paths = resolveDgPaths(env);
     const shimDir = join(paths.homeDir, ".dg", "shims");
     if (!isShimFile(join(shimDir, "npm"))) {
-        return false;
+        return "skipped";
     }
     const failClosed = readShimFailClosed(env);
+    let lock;
     try {
-        const lock = acquireLockSync(paths, SETUP_UNINSTALL_LOCK, {
+        lock = acquireLockSync(paths, SETUP_UNINSTALL_LOCK, {
             staleMs: SETUP_UNINSTALL_LOCK_STALE_MS
         });
-        try {
-            for (const command of SHIM_COMMANDS) {
-                const shimPath = join(shimDir, command);
-                if (!isShimFile(shimPath)) {
-                    continue;
-                }
-                writeFileSync(shimPath, shimSource(command, { failClosed }), {
-                    encoding: "utf8",
-                    mode: 0o755
-                });
-                chmodSync(shimPath, 0o755);
+    }
+    catch (error) {
+        // A busy lock is transient — report it so the caller can retry on the next
+        // run instead of recording the version as refreshed and skipping forever.
+        return error instanceof LockBusyError ? "lock-busy" : "skipped";
+    }
+    try {
+        for (const command of SHIM_COMMANDS) {
+            const shimPath = join(shimDir, command);
+            if (!isShimFile(shimPath)) {
+                continue;
             }
-            installStandaloneUninstaller(paths.homeDir);
-        }
-        finally {
-            lock.release();
+            writeFileSync(shimPath, shimSource(command, { failClosed }), {
+                encoding: "utf8",
+                mode: 0o755
+            });
+            chmodSync(shimPath, 0o755);
         }
+        installStandaloneUninstaller(paths.homeDir);
     }
     catch {
-        return false;
+        return "skipped";
+    }
+    finally {
+        lock.release();
     }
-    return true;
+    return "applied";
 }
 export function uninstallSetup(options) {
     const paths = resolveDgPaths(options.env ?? process.env);
@@ -273,6 +276,23 @@ export function uninstallSetup(options) {
         }
         sweepLegacyRcBlocks(paths.homeDir, removed, warnings);
         sweepLegacyPythonHooks(paths.homeDir, removed, warnings);
+        // Service-mode `dg agents on` writes fetch-routing (HTTPS_PROXY /
+        // NODE_EXTRA_CA_CERTS into the agent's settings, a [shell_environment_policy]
+        // block for codex) that is NOT tracked in the cleanup registry. Reverse it
+        // here, BEFORE the state dir (which holds the prior-value backup) is removed,
+        // so uninstall can't strand an agent pointed at a now-dead proxy.
+        const uninstallEnv = options.env ?? process.env;
+        for (const agent of AGENT_IDS) {
+            try {
+                if (routingInstalled(agent, paths.homeDir, uninstallEnv)) {
+                    removeAgentRouting(agent, paths.homeDir, uninstallEnv);
+                    removed.push(`agent routing (${agentLabel(agent)})`);
+                }
+            }
+            catch (err) {
+                warnings.push(`could not remove ${agentLabel(agent)} routing: ${err.message}`);
+            }
+        }
         if (!options.all && !registryRead.malformed && options.keepConfig) {
             writeRegistryWithLock(paths, {
                 version: 1,
@@ -285,6 +305,9 @@ export function uninstallSetup(options) {
         if (!options.keepConfig && hadStateDirBeforeLock) {
             removeDirectory(paths.stateDir, removed, missing);
         }
+        if (!options.all && !options.keepConfig && clearAuthState(uninstallEnv)) {
+            removed.push(authPath(paths));
+        }
         if (options.all) {
             removeDirectory(paths.configDir, removed, missing);
         }
@@ -371,13 +394,7 @@ export function doctorReport(options = {}) {
         status: "pass",
         message: `Real binary resolver skips ${shimDir} and dg shim sentinel files`
     });
-    checks.push({
-        name: "package-manager-discovery",
-        status: "pass",
-        message: `Classifiers are registered for ${SHIM_COMMANDS.join(", ")}; gated managers remain ${packageManagerNames()
-            .filter((name) => !SHIM_COMMANDS.includes(name))
-            .join(", ")}`
-    });
+    checks.push(packageManagerDiscoveryCheck(env));
     checks.push(...unavailableDoctorChecks());
     checks.push(serviceCheck(env));
     checks.push(agentGateCheck(env, paths.homeDir));
@@ -489,12 +506,14 @@ function describeFetchError(error, timeoutMs) {
 }
 const DOCTOR_STATUS_ROLE = {
     pass: "pass",
+    info: "accent",
     warn: "warn",
     fail: "block",
     unavailable: "muted"
 };
 const DOCTOR_STATUS_GLYPH = {
     pass: "✓",
+    info: "ℹ",
     warn: "⚠",
     fail: "✘",
     unavailable: "·"
@@ -504,7 +523,7 @@ const DOCTOR_GROUP_ORDER = [
     { key: "setup", title: "Setup" },
     { key: "account", title: "Account" }
 ];
-export function renderDoctorReport(report, theme = createTheme(false), verbose = false) {
+export function renderDoctorReport(report, theme = createTheme(false), verbose = false, platform = process.platform) {
     const failures = report.checks.filter((check) => check.status === "fail").length;
     const warnings = report.checks.filter((check) => check.status === "warn").length;
     const role = failures > 0 ? "block" : warnings > 0 ? "warn" : "pass";
@@ -534,14 +553,19 @@ export function renderDoctorReport(report, theme = createTheme(false), verbose =
             const allWarn = setupCore.every((name) => nonPass.some((check) => check.name === name && check.status === "warn"));
             if (allWarn) {
                 nonPass = nonPass.filter((check) => !setupCore.includes(check.name) && !(check.name === "config" && check.status === "warn"));
-                const notSetUp = "not set up — bare npm/pip installs aren't protected";
+                const onWindows = platform === "win32";
+                const notSetUp = onWindows
+                    ? "dg setup is unavailable on Windows — run scanned installs through prefix mode: dg npm install <pkg>"
+                    : "not set up — bare npm/pip installs aren't protected";
+                const setupFix = onWindows ? undefined : "dg setup";
                 if (nonPass.length === 0) {
-                    lines.push(rollupInlineLine(title, "warn", "⚠", notSetUp, "dg setup", theme));
+                    lines.push(rollupInlineLine(title, "warn", "⚠", notSetUp, setupFix, theme));
                     continue;
                 }
                 const worst = worstCheck(nonPass);
                 lines.push(`  ${theme.paint(DOCTOR_STATUS_ROLE[worst.status], `${DOCTOR_STATUS_GLYPH[worst.status]} ${title}`)}`);
-                lines.push(`  ${theme.paint("warn", "⚠")} ${notSetUp}  ${theme.paint("muted", "→ dg setup")}`);
+                const notSetUpFix = setupFix ? `  ${theme.paint("muted", `→ ${setupFix}`)}` : "";
+                lines.push(`  ${theme.paint("warn", "⚠")} ${notSetUp}${notSetUpFix}`);
                 const width = nameWidth(nonPass);
                 for (const check of nonPass) {
                     lines.push(doctorLine(check, width, theme));
@@ -584,6 +608,7 @@ function nameWidth(checks) {
 }
 const DOCTOR_STATUS_SEVERITY = {
     pass: 0,
+    info: 1,
     unavailable: 1,
     warn: 2,
     fail: 3
@@ -679,8 +704,12 @@ export function shimSource(command, options = {}) {
     const failOpenTail = [
         `dg_home=$(dirname "$shim_dir")`,
         `if [ -f "$dg_home/uninstall.mjs" ] && command -v node >/dev/null 2>&1; then`,
-        `  ( sleep 10`,
-        `    if [ ! -x "${dg}" ] && ! PATH="$dg_path" command -v dg >/dev/null 2>&1; then`,
+        `  ( sleep 60`,
+        // Only self-clean when dg is DURABLY gone: re-check after the wait, and skip
+        // if a fresh `.upgrading` sentinel marks a self-upgrade in flight (a slow
+        // `npm install -g` makes dg unavailable for the window). The 15-min freshness
+        // bound means a stale sentinel can't disable cleanup forever.
+        `    if [ ! -x "${dg}" ] && ! PATH="$dg_path" command -v dg >/dev/null 2>&1 && [ -z "$(find "$dg_home/.upgrading" -mmin -15 2>/dev/null)" ]; then`,
         `      node "$dg_home/uninstall.mjs" --quiet >/dev/null 2>&1`,
         `    fi`,
         `  ) >/dev/null 2>&1 &`,
@@ -695,12 +724,6 @@ export function shimSource(command, options = {}) {
     ];
     return [...head, ...(options.failClosed ? failClosedTail : failOpenTail)].join("\n");
 }
-function escapeDoubleQuotedSh(value) {
-    return value.replace(/[\\"$`]/g, "\\$&");
-}
-function escapeDoubleQuotedFish(value) {
-    return value.replace(/[\\"$]/g, "\\$&");
-}
 function dgEntrypoint() {
     const argv1 = process.argv[1];
     return argv1 ? resolve(argv1) : "dg";
@@ -775,7 +798,7 @@ function stripRcBlockDetailed(existing) {
     const repairedLines = [];
     for (;;) {
         const lines = content.split("\n");
-        const begin = lines.indexOf(RC_BEGIN);
+        const begin = lines.findIndex((line) => line.replace(/\r$/, "") === RC_BEGIN);
         if (begin === -1) {
             break;
         }
@@ -790,10 +813,13 @@ function stripRcBlockDetailed(existing) {
     return { content, repairedLines };
 }
 function rcPairPattern(begin, end) {
-    return new RegExp(`${escapeRegex(begin)}\\n(?:(?!${escapeRegex(begin)})[\\s\\S])*?${escapeRegex(end)}\\n?`, "g");
+    // Tolerate CRLF: a block written on (or edited to) Windows line endings must
+    // still be matched, or it duplicates on re-setup and survives uninstall.
+    return new RegExp(`${escapeRegex(begin)}\\r?\\n(?:(?!${escapeRegex(begin)})[\\s\\S])*?${escapeRegex(end)}\\r?\\n?`, "g");
 }
 function isDgWrittenRcLine(line) {
-    return line === RC_END || line.startsWith("# dg-") || line.includes(RC_SHIM_HELPER) || line.includes(`${sep}.dg${sep}shims`);
+    const trimmed = line.replace(/\r$/, "");
+    return trimmed === RC_END || trimmed.startsWith("# dg-") || trimmed.includes(RC_SHIM_HELPER) || trimmed.includes(`${sep}.dg${sep}shims`);
 }
 function sweepLegacyRcBlocks(homeDir, removed, warnings) {
     for (const rel of LEGACY_RC_CANDIDATES) {
@@ -942,6 +968,15 @@ function configCheck(paths, env) {
         accessSync(paths.configDir, constants.R_OK);
         const config = loadUserConfig(env);
         if (config.api.baseUrl !== DEFAULT_CONFIG.api.baseUrl) {
+            // A loopback endpoint is the local dev stack, not a tamper signal — never
+            // alarm on it.
+            if (isLoopbackApiHost(config.api.baseUrl)) {
+                return {
+                    name: "config",
+                    status: "pass",
+                    message: `using a local dev API endpoint: ${config.api.baseUrl}`
+                };
+            }
             // The verdict API is the firewall's source of truth. A non-default
             // endpoint is legitimate for enterprise self-host, but a silent repoint
             // is also how an attacker would make every verdict come back clean, so
@@ -967,6 +1002,15 @@ function configCheck(paths, env) {
         };
     }
 }
+function isLoopbackApiHost(baseUrl) {
+    try {
+        const host = new URL(baseUrl).hostname.toLowerCase();
+        return host === "localhost" || host === "127.0.0.1" || host === "::1" || host === "0.0.0.0";
+    }
+    catch {
+        return false;
+    }
+}
 function unavailableDoctorChecks() {
     const unavailable = [
         ["path-cache", "Shell command path cache checks are guidance only. After setup, run 'hash -r' for bash or 'rehash' for zsh."],
@@ -1059,7 +1103,7 @@ function serviceCheck(env) {
         return {
             name: "service",
             status: "warn",
-            message: state.lastError ?? "Service mode is running without a persistent proxy"
+            message: state.lastError ?? "Service mode is running but its local proxy is not listening"
         };
     }
     return {
@@ -1102,8 +1146,8 @@ function agentGateCheck(env, home) {
     }
     return {
         name: "agent-gate",
-        status: "warn",
-        message: `${hooked.join(", ")} hooked but the fetch-time network gate is OFF — static pre-screen only; absolute-path, manifest-only, dynamic, and unsupported-manager installs are NOT screened`,
+        status: "info",
+        message: `${hooked.join(", ")} hooked — static pre-screen is on. Fetch-time screening of dynamic, absolute-path, and unsupported-manager installs is available with service mode`,
         fix: GATE_ENABLE_HINT
     };
 }
@@ -1232,6 +1276,23 @@ export function currentShellActivation(env = process.env) {
     const rcDisplay = rcPath.startsWith(homeDir) ? `~${rcPath.slice(homeDir.length)}` : rcPath;
     return activationCommand(shell, rcDisplay);
 }
+function packageManagerDiscoveryCheck(env) {
+    const unprotectedManagers = packageManagerNames().filter((name) => !SHIM_COMMANDS.includes(name));
+    const onPath = unprotectedManagers.filter((name) => resolveRealBinary({ name, env }).path);
+    if (onPath.length === 0) {
+        return {
+            name: "package-manager-discovery",
+            status: "pass",
+            message: `Interception is wired for ${SHIM_COMMANDS.join(", ")}; no unsupported installer (${unprotectedManagers.join(", ")}) is on PATH`
+        };
+    }
+    return {
+        name: "package-manager-discovery",
+        status: "info",
+        message: `${onPath.join(", ")} on PATH ${onPath.length === 1 ? "runs" : "run"} unprotected — dg does not intercept ${onPath.length === 1 ? "it" : "them"} this release; ${SHIM_COMMANDS.join(", ")} are protected`,
+        fix: "install through a supported manager (dg npm/pnpm/yarn/pip/uv/cargo ...) to keep firewall coverage"
+    };
+}
 function realBinaryResolutionCheck(env) {
     const installed = SHIM_COMMANDS.filter((command) => resolveRealBinary({ name: command, env }).path);
     const absent = SHIM_COMMANDS.filter((command) => !resolveRealBinary({ name: command, env }).path);
@@ -1251,8 +1312,9 @@ function authCheck(env) {
             : `Authenticated from ${status.source} token ${status.tokenPreview}`;
         return {
             name: "auth",
-            status: status.authenticated ? "pass" : "warn",
-            message: status.authenticated ? connected : "not signed in"
+            status: status.authenticated ? "pass" : "info",
+            message: status.authenticated ? connected : "not signed in — optional; unlocks verdict details and your dashboard",
+            ...(status.authenticated ? {} : { fix: "dg login" })
         };
     }
     catch (error) {
@@ -1421,7 +1483,7 @@ function commitGuardCheck(registry, env) {
         return {
             name: "commit-guard",
             status: "pass",
-            message: "No commit guard installed (optional; run dg guard-commit inside a repo)"
+            message: "No commit guard installed (optional; run dg commit-guard inside a repo)"
         };
     }
     const missing = hooks.filter((entry) => !hookOwnedByDg(entry));
@@ -1430,7 +1492,7 @@ function commitGuardCheck(registry, env) {
             name: "commit-guard",
             status: "warn",
             message: `Commit guard hook missing or replaced at: ${missing.map((entry) => entry.path).join(", ")}`,
-            fix: "re-run dg guard-commit in that repo, or dg guard-commit off to forget it"
+            fix: "re-run dg commit-guard in that repo, or dg commit-guard off to forget it"
         };
     }
     const broken = hooks.filter((entry) => {
@@ -1442,7 +1504,7 @@ function commitGuardCheck(registry, env) {
             name: "commit-guard",
             status: "warn",
             message: `Commit guard at ${broken.map((entry) => entry.path).join(", ")} points at a dg binary that is not runnable, so commits there fail open with a notice`,
-            fix: "reinstall dg, then re-run dg guard-commit"
+            fix: "reinstall dg, then re-run dg commit-guard"
         };
     }
     return {

package/dist/setup/uninstall-standalone.js

@@ -5,7 +5,12 @@ import { LockBusyError, resolveDgPaths } from "../state/index.js";
 function run() {
     const quiet = process.argv.includes("--quiet");
     try {
-        const result = uninstallSetup({ keepConfig: false, all: true });
+        // A plain `npm uninstall -g` triggers this courtesy cleanup; it must be LESS
+        // destructive than an explicit `dg uninstall`. Remove the activation footprint
+        // (shims/rc/hooks via the registry) but keep config, auth, state, and cache so
+        // a reinstall keeps the user logged in. The explicit removal below is narrowed
+        // to the shim dir only.
+        const result = uninstallSetup({ keepConfig: true, all: false });
         if (!quiet) {
             process.stderr.write(`Dependency Guardian cleaned up ${result.removed.length} leftover item(s) after the package was removed.\n`);
         }
@@ -16,7 +21,7 @@ function run() {
         }
     }
     try {
-        rmSync(join(resolveDgPaths().homeDir, ".dg"), { recursive: true, force: true });
+        rmSync(join(resolveDgPaths().homeDir, ".dg", "shims"), { recursive: true, force: true });
     }
     catch {
         return;

package/dist/setup-ui/gate.js

@@ -8,25 +8,18 @@ export function setupApplied(env = process.env) {
 export function securityNotesMarkerPath(env = process.env) {
     return join(resolveDgPaths(env).stateDir, "security-notes-shown");
 }
-export function wizardSkippedMarkerPath(env = process.env) {
-    return join(resolveDgPaths(env).stateDir, "setup-wizard-skipped");
-}
 export function securityNotesShown(env = process.env) {
     return existsSync(securityNotesMarkerPath(env));
 }
 export function markSecurityNotesShown(env = process.env, now = new Date()) {
     writeMarker(securityNotesMarkerPath(env), now);
 }
-export function markWizardSkipped(env = process.env, now = new Date()) {
-    writeMarker(wizardSkippedMarkerPath(env), now);
-}
 export function shouldOfferSetupWizard(env = process.env, stdin = process.stdin, stderr = process.stderr) {
     return (process.platform !== "win32" &&
         Boolean(stdin.isTTY) &&
         Boolean(stderr.isTTY) &&
         !isCiEnv(env) &&
-        !setupApplied(env) &&
-        !existsSync(wizardSkippedMarkerPath(env)));
+        !setupApplied(env));
 }
 function writeMarker(path, now) {
     try {

package/dist/setup-ui/offer.js

@@ -1,7 +1,8 @@
 import { resolvePresentation } from "../presentation/mode.js";
+import { createTheme } from "../presentation/theme.js";
 import { MACHINE_OUTPUT_FLAGS } from "../runtime/first-run.js";
 import { buildSetupPlan } from "../setup/plan.js";
-import { shouldOfferSetupWizard } from "./gate.js";
+import { setupApplied, shouldOfferSetupWizard } from "./gate.js";
 const SKIP_COMMANDS = new Set([
     "help",
     "--help",
@@ -14,6 +15,7 @@ const SKIP_COMMANDS = new Set([
     "login",
     "logout",
     "setup",
+    "doctor",
     "update",
     "upgrade",
     "uninstall"
@@ -25,18 +27,23 @@ export async function maybeOfferSetupWizard(args, options = {}) {
     if (command && SKIP_COMMANDS.has(command)) {
         return NOT_RUN;
     }
-    if (args.some((arg) => MACHINE_OUTPUT_FLAGS.has(arg))) {
-        return NOT_RUN;
-    }
     if (!shouldOfferSetupWizard(env, options.stdin ?? process.stdin, options.stderr ?? process.stderr)) {
         return NOT_RUN;
     }
     const rich = options.richMode ?? resolvePresentation().mode === "rich";
-    if (!rich) {
-        return NOT_RUN;
+    if (!rich || args.some((arg) => MACHINE_OUTPUT_FLAGS.has(arg))) {
+        const theme = createTheme(resolvePresentation().color);
+        return {
+            handled: true,
+            result: {
+                exitCode: 1,
+                stdout: "",
+                stderr: `  ${theme.paint("muted", "Setup not finished — dg is unavailable until setup completes. Run")} ${theme.paint("accent", "dg setup")} ${theme.paint("muted", "to finish.")}\n`
+            }
+        };
     }
     const plan = buildSetupPlan({ shell: "auto" });
     const runWizard = options.runWizard ?? (await import("./wizard.js")).runSetupWizard;
     const result = await runWizard(plan, { env, autoActivate: args.length === 0 });
-    return { handled: args.length === 0, result };
+    return { handled: args.length === 0 || !setupApplied(env), result };
 }

package/dist/setup-ui/selector.js

@@ -23,5 +23,5 @@ export const Selector = ({ options, onSelect, onCancel }) => {
             }
         }
     });
-    return (_jsxs(Box, { flexDirection: "column", children: [options.map((option, i) => (_jsxs(Text, { ...(i === cursor ? { color: "cyan" } : {}), children: [i === cursor ? "❯" : " ", " ", i + 1, ". ", option.label] }, i))), _jsx(Text, { children: " " }), _jsx(Text, { dimColor: true, children: "Enter to confirm \u00B7 arrows or number keys to choose \u00B7 Esc to skip" })] }));
+    return (_jsxs(Box, { flexDirection: "column", children: [options.map((option, i) => (_jsxs(Text, { ...(i === cursor ? { color: "cyan" } : {}), children: [i === cursor ? "❯" : " ", " ", i + 1, ". ", option.label] }, i))), _jsx(Text, { children: " " }), _jsx(Text, { dimColor: true, children: "Enter to confirm \u00B7 Esc to skip" })] }));
 };