bitfab-cli 0.2.5 → 0.2.9

package/dist/index.js

@@ -3482,7 +3482,7 @@ var require_schemes = __commonJS({
       urnComponent.nss = (uuidComponent.uuid || "").toLowerCase();
       return urnComponent;
     }
-    var http3 = (
+    var http = (
       /** @type {SchemeHandler} */
       {
         scheme: "http",
@@ -3495,7 +3495,7 @@ var require_schemes = __commonJS({
       /** @type {SchemeHandler} */
       {
         scheme: "https",
-        domainHost: http3.domainHost,
+        domainHost: http.domainHost,
         parse: httpParse,
         serialize: httpSerialize
       }
@@ -3539,7 +3539,7 @@ var require_schemes = __commonJS({
     var SCHEMES = (
       /** @type {Record<SchemeName, SchemeHandler>} */
       {
-        http: http3,
+        http,
         https,
         ws,
         wss,
@@ -6805,15 +6805,215 @@ import { cancel as cancel2 } from "@clack/prompts";
 import { execSync as execSync3 } from "child_process";
 import * as p4 from "@clack/prompts";
 
-// ../bitfab-plugin-lib/dist/browserHandoff.js
-import http2 from "http";
+// ../bitfab-plugin-lib/dist/buildInfo.js
+import crypto from "crypto";
+import fs from "fs";
+import os from "os";
+import path from "path";
+import { fileURLToPath } from "url";
+
+// ../bitfab-plugin-lib/dist/chatSessions/index.js
+import { execFileSync } from "child_process";
+import fs5 from "fs";
+import os4 from "os";
+import path4 from "path";
+
+// ../bitfab-plugin-lib/dist/skills.js
+var BITFAB_SKILLS = ["setup", "assistant", "update"];
+
+// ../bitfab-plugin-lib/dist/hooks/skillDetection.js
+var SKILL_PATTERN = new RegExp(`^\\s*\\/bitfab[:-](?<skill>${BITFAB_SKILLS.join("|")})(?=\\s|$)`, "i");
+
+// ../bitfab-plugin-lib/dist/chatSessions/arming.js
+import fs2 from "fs";
+import os2 from "os";
+import path2 from "path";
+
+// ../bitfab-plugin-lib/dist/config.js
+import crypto2 from "crypto";
+import fs3 from "fs";
+import os3 from "os";
+import path3 from "path";
+var DEFAULT_SERVICE_URL = "https://bitfab.ai";
+var GLOBAL_CONFIG_DIR = path3.join(os3.homedir(), ".config", "bitfab");
+var GLOBAL_CONFIG_FILE = path3.join(GLOBAL_CONFIG_DIR, "config.json");
+var GLOBAL_CREDENTIALS_FILE = path3.join(GLOBAL_CONFIG_DIR, "credentials.json");
+var PROJECT_CONFIG_RELATIVE = path3.join(".bitfab", "config.local.json");
+function readJsonFile(filePath) {
+  try {
+    const content = fs3.readFileSync(filePath, "utf-8");
+    return JSON.parse(content);
+  } catch {
+    return null;
+  }
+}
+function findProjectConfigPath(startDir = process.cwd()) {
+  let dir = startDir;
+  while (true) {
+    const candidate = path3.join(dir, PROJECT_CONFIG_RELATIVE);
+    if (fs3.existsSync(candidate)) {
+      return candidate;
+    }
+    const parent = path3.dirname(dir);
+    if (parent === dir) {
+      return null;
+    }
+    dir = parent;
+  }
+}
+function getProjectConfigData() {
+  const filePath = findProjectConfigPath();
+  if (!filePath) {
+    return null;
+  }
+  return readJsonFile(filePath);
+}
+function getConfigData() {
+  return readJsonFile(GLOBAL_CONFIG_FILE) ?? {};
+}
+function getCredentialsData() {
+  return readJsonFile(GLOBAL_CREDENTIALS_FILE) ?? {};
+}
+function getServiceUrl() {
+  if (process.env.BITFAB_SERVICE_URL) {
+    return process.env.BITFAB_SERVICE_URL;
+  }
+  const project = getProjectConfigData();
+  if (project && typeof project.serviceUrl === "string") {
+    return project.serviceUrl;
+  }
+  const config2 = getConfigData();
+  return typeof config2.serviceUrl === "string" ? config2.serviceUrl : DEFAULT_SERVICE_URL;
+}
+function getApiKey() {
+  if (process.env.BITFAB_API_KEY) {
+    return process.env.BITFAB_API_KEY;
+  }
+  const creds = getCredentialsData();
+  return typeof creds.apiKey === "string" ? creds.apiKey : null;
+}
+function getVerbose() {
+  if (process.env.BITFAB_VERBOSE === "true" || process.env.BITFAB_VERBOSE === "1") {
+    return true;
+  }
+  if (process.env.BITFAB_VERBOSE === "false" || process.env.BITFAB_VERBOSE === "0") {
+    return false;
+  }
+  const config2 = getConfigData();
+  return config2.verbose === true;
+}
+function getDebug() {
+  if (process.env.BITFAB_DEBUG === "true" || process.env.BITFAB_DEBUG === "1") {
+    return true;
+  }
+  const config2 = getConfigData();
+  return config2.debug === true;
+}
+function getSessionLogConsentValue() {
+  const config2 = getConfigData();
+  if (config2.sessionLogConsent === true) {
+    return true;
+  }
+  if (config2.sessionLogConsent === false) {
+    return false;
+  }
+  return null;
+}
+function getConfig() {
+  return {
+    serviceUrl: getServiceUrl(),
+    apiKey: getApiKey(),
+    verbose: getVerbose(),
+    debug: getDebug(),
+    sessionLogConsent: getSessionLogConsentValue()
+  };
+}
+function saveCredentials(apiKey) {
+  fs3.mkdirSync(GLOBAL_CONFIG_DIR, { recursive: true });
+  fs3.writeFileSync(GLOBAL_CREDENTIALS_FILE, `${JSON.stringify({ apiKey }, null, 2)}
+`);
+}
+function deleteCredentials() {
+  try {
+    fs3.unlinkSync(GLOBAL_CREDENTIALS_FILE);
+  } catch {
+  }
+}
+function hasCredentials() {
+  return getApiKey() !== null;
+}
+function getOrCreateInstallId() {
+  const config2 = getConfigData();
+  if (typeof config2.installId === "string" && config2.installId.length > 0) {
+    return config2.installId;
+  }
+  const installId = crypto2.randomUUID();
+  try {
+    fs3.mkdirSync(GLOBAL_CONFIG_DIR, { recursive: true });
+    fs3.writeFileSync(GLOBAL_CONFIG_FILE, `${JSON.stringify({ ...config2, installId }, null, 2)}
+`);
+  } catch {
+  }
+  return installId;
+}
+
+// ../bitfab-plugin-lib/dist/chatSessions/transcriptReader.js
+import fs4 from "fs";
+
+// ../bitfab-plugin-lib/dist/clientHeaders.js
+import os5 from "os";
+function buildBitfabClientHeaders(pluginVersion, platform2) {
+  const resolvedOptions = Intl.DateTimeFormat().resolvedOptions();
+  return {
+    "x-bitfab-client-name": platform2.cliBinary,
+    "x-bitfab-client-display-name": platform2.displayName,
+    "x-bitfab-client-version": pluginVersion,
+    "x-bitfab-client-timezone": resolvedOptions.timeZone,
+    "x-bitfab-client-locale": resolvedOptions.locale,
+    "x-bitfab-client-os": os5.platform(),
+    "x-bitfab-client-arch": os5.arch(),
+    "x-bitfab-client-node-version": process.version,
+    "x-bitfab-install-id": getOrCreateInstallId()
+  };
+}
+function buildBitfabRequestHeaders(apiKey, pluginVersion, platform2) {
+  return {
+    "Content-Type": "application/json",
+    Authorization: `Bearer ${apiKey}`,
+    ...buildBitfabClientHeaders(pluginVersion, platform2)
+  };
+}
+
+// ../bitfab-plugin-lib/dist/commands/login.js
+import crypto3 from "crypto";
+
+// ../bitfab-plugin-lib/dist/analytics.js
+async function reportHandoff(apiKey, pluginVersion, platform2, body) {
+  const config2 = getConfig();
+  const headers = buildBitfabRequestHeaders(apiKey, pluginVersion, platform2);
+  try {
+    const response = await fetch(`${config2.serviceUrl}/api/plugin/analytics/handoff`, {
+      method: "POST",
+      headers,
+      body: JSON.stringify(body)
+    });
+    if (config2.debug && !response.ok) {
+      console.error(`reportHandoff: server returned ${response.status} for ${body.flow}`);
+    }
+  } catch (err) {
+    if (config2.debug) {
+      const message = err instanceof Error ? err.message : String(err);
+      console.error(`reportHandoff: request failed for ${body.flow}: ${message}`);
+    }
+  }
+}
 
 // ../bitfab-plugin-lib/dist/browser.js
 import { execSync, spawn } from "child_process";
-import fs from "fs";
-import os from "os";
+import fs6 from "fs";
+import os6 from "os";
 function getChromiumBrowsers() {
-  const platform2 = os.platform();
+  const platform2 = os6.platform();
   if (platform2 === "darwin") {
     return [
       {
@@ -6901,7 +7101,7 @@ function getChromiumBrowsers() {
 function findExistingBinary(paths) {
   for (const candidate of paths) {
     if (candidate.includes("/") || candidate.includes("\\")) {
-      if (fs.existsSync(candidate)) {
+      if (fs6.existsSync(candidate)) {
         return candidate;
       }
     } else {
@@ -6915,10 +7115,10 @@ function findExistingBinary(paths) {
   return null;
 }
 function getDefaultBrowserId() {
-  const platform2 = os.platform();
+  const platform2 = os6.platform();
   try {
     if (platform2 === "darwin") {
-      const plistPath = `${os.homedir()}/Library/Preferences/com.apple.LaunchServices/com.apple.launchservices.secure.plist`;
+      const plistPath = `${os6.homedir()}/Library/Preferences/com.apple.LaunchServices/com.apple.launchservices.secure.plist`;
       const json2 = execSync(`plutil -convert json -o - "${plistPath}"`, {
         stdio: ["ignore", "pipe", "ignore"],
         encoding: "utf-8",
@@ -6959,7 +7159,7 @@ function matchChromiumBrowser(defaultId, browsers) {
 var SCREEN_FRACTION = 0.95;
 function getWorkArea() {
   try {
-    const platform2 = os.platform();
+    const platform2 = os6.platform();
     if (platform2 === "darwin") {
       const out = execSync(`osascript -l JavaScript -e 'ObjC.import("AppKit"); const s = $.NSScreen.mainScreen; const f = s.frame; const v = s.visibleFrame; const topY = f.size.height - (v.origin.y + v.size.height); JSON.stringify([v.origin.x, topY, v.size.width, v.size.height])'`, {
         stdio: ["ignore", "pipe", "ignore"],
@@ -7006,617 +7206,77 @@ function getWorkArea() {
   return null;
 }
 function computeWindowArgs(area) {
-  if (!area) {
-    return [];
-  }
-  const w = Math.floor(area.width * SCREEN_FRACTION);
-  const h = Math.floor(area.height * SCREEN_FRACTION);
-  const x = area.x + Math.floor((area.width - w) / 2);
-  const y = area.y + Math.floor((area.height - h) / 2);
-  return [`--window-size=${w},${h}`, `--window-position=${x},${y}`];
-}
-function getWindowSizeArgs() {
-  return computeWindowArgs(getWorkArea());
-}
-function spawnDetached(command, args) {
-  const child = spawn(command, [...args], { detached: true, stdio: "ignore" });
-  child.on("error", () => {
-  });
-  child.unref();
-}
-function openChromiumApp(binaryPath, url2, sizeArgs) {
-  spawnDetached(binaryPath, [`--app=${url2}`, ...sizeArgs]);
-}
-function openOsDefault(url2) {
-  const platform2 = os.platform();
-  if (platform2 === "darwin") {
-    spawnDetached("open", [url2]);
-  } else if (platform2 === "win32") {
-    spawnDetached("cmd", ["/c", "start", "", url2]);
-  } else {
-    spawnDetached("xdg-open", [url2]);
-  }
-}
-function isCodexOnMacos() {
-  if (process.platform !== "darwin") {
-    return false;
-  }
-  return process.env.CODEX_SANDBOX === "seatbelt" || process.env.CODEX_CI === "1" || process.env.CODEX_THREAD_ID != null;
-}
-function shouldDisableChromelessWindows() {
-  if (process.env.BITFAB_DISABLE_CHROME_APP_WINDOWS === "1") {
-    return true;
-  }
-  return isCodexOnMacos();
-}
-function openChromelessWindow(url2) {
-  if (shouldDisableChromelessWindows()) {
-    openOsDefault(url2);
-    return;
-  }
-  const browsers = getChromiumBrowsers();
-  const defaultId = getDefaultBrowserId();
-  const defaultChromium = matchChromiumBrowser(defaultId, browsers);
-  const sizeArgs = getWindowSizeArgs();
-  if (defaultChromium) {
-    const binary = findExistingBinary(defaultChromium.binaryPaths);
-    if (binary) {
-      openChromiumApp(binary, url2, sizeArgs);
-      return;
-    }
-  }
-  if (defaultId !== null && defaultChromium === null) {
-    openOsDefault(url2);
-    return;
-  }
-  for (const browser of browsers) {
-    const binary = findExistingBinary(browser.binaryPaths);
-    if (binary) {
-      openChromiumApp(binary, url2, sizeArgs);
-      return;
-    }
-  }
-  openOsDefault(url2);
-}
-
-// ../bitfab-plugin-lib/dist/handoffTickets.js
-var DEFAULT_POLL_INTERVAL_MS = 1500;
-async function createHandoffTicket(serviceUrl, kind, opts) {
-  const headers = {
-    "Content-Type": "application/json"
-  };
-  if (opts?.bearer) {
-    headers.Authorization = `Bearer ${opts.bearer}`;
-  }
-  const res = await fetch(`${serviceUrl}/api/plugin/handoff-tickets`, {
-    method: "POST",
-    headers,
-    body: JSON.stringify({
-      kind,
-      pkceChallenge: opts?.pkceChallenge,
-      pkceMethod: opts?.pkceMethod,
-      ttlSeconds: opts?.ttlSeconds
-    })
-  });
-  if (!res.ok) {
-    const body = await res.json().catch(() => ({}));
-    throw new Error(body.error ?? `Failed to create handoff ticket (${res.status})`);
-  }
-  return await res.json();
-}
-async function pollHandoffTicket(serviceUrl, ticketId, opts) {
-  const interval = opts.intervalMs ?? DEFAULT_POLL_INTERVAL_MS;
-  const deadline = Date.now() + opts.timeoutMs;
-  while (Date.now() < deadline) {
-    if (opts.abortSignal?.aborted) {
-      return { expired: true };
-    }
-    const url2 = new URL(`${serviceUrl}/api/plugin/handoff-tickets/${ticketId}`);
-    if (opts.verifier) {
-      url2.searchParams.set("verifier", opts.verifier);
-    }
-    const headers = {};
-    if (opts.bearer) {
-      headers.Authorization = `Bearer ${opts.bearer}`;
-    }
-    try {
-      const res = await fetch(url2.toString(), { headers });
-      if (res.ok) {
-        const body = await res.json();
-        if (body.status === "completed" && body.data) {
-          return { data: body.data };
-        }
-        if (body.status === "expired" || body.status === "cancelled") {
-          return { expired: true };
-        }
-      }
-    } catch {
-    }
-    await new Promise((resolve, reject) => {
-      const timer = setTimeout(resolve, interval);
-      opts.abortSignal?.addEventListener("abort", () => {
-        clearTimeout(timer);
-        reject(new DOMException("Aborted", "AbortError"));
-      }, { once: true });
-    }).catch(() => {
-    });
-  }
-  return { expired: true };
-}
-
-// ../bitfab-plugin-lib/dist/pkce.js
-import crypto from "crypto";
-function generatePkce() {
-  const verifier = crypto.randomBytes(32).toString("base64url");
-  const challenge = crypto.createHash("sha256").update(verifier).digest("base64url");
-  return { verifier, challenge };
-}
-
-// ../bitfab-plugin-lib/dist/handoffTicketChannel.js
-async function startHandoffTicketChannel(opts) {
-  const { verifier, challenge } = generatePkce();
-  const abort = new AbortController();
-  let done = false;
-  let resolveFn = () => {
-  };
-  let rejectFn = () => {
-  };
-  const promise2 = new Promise((resolve, reject) => {
-    resolveFn = (value) => {
-      if (done) {
-        return;
-      }
-      done = true;
-      resolve(value);
-    };
-    rejectFn = (err) => {
-      if (done) {
-        return;
-      }
-      done = true;
-      reject(err);
-    };
-  });
-  let startError = null;
-  let ticket = null;
-  try {
-    ticket = await createHandoffTicket(opts.serviceUrl, opts.kind, {
-      pkceChallenge: challenge,
-      pkceMethod: "S256",
-      bearer: opts.bearer,
-      ttlSeconds: opts.ttlSeconds
-    });
-  } catch (err) {
-    startError = err instanceof Error ? err : new Error(String(err));
-  }
-  const available = ticket !== null;
-  if (ticket) {
-    pollHandoffTicket(opts.serviceUrl, ticket.id, {
-      verifier,
-      bearer: opts.bearer,
-      timeoutMs: opts.timeoutMs,
-      intervalMs: ticket.pollIntervalMs,
-      abortSignal: abort.signal
-    }).then((result) => {
-      if ("expired" in result) {
-        rejectFn(new Error("Handoff ticket expired before completion."));
-        return;
-      }
-      resolveFn(result.data);
-    }).catch((err) => {
-      rejectFn(err instanceof Error ? err : new Error(String(err)));
-    });
-  } else {
-    promise2.catch(() => {
-    });
-  }
-  return {
-    promise: promise2,
-    get done() {
-      return done;
-    },
-    available,
-    startError,
-    ticketId: ticket?.id ?? null,
-    reject: rejectFn,
-    close: () => {
-      abort.abort();
-      rejectFn(new Error("Handoff ticket channel closed."));
-    }
-  };
-}
-
-// ../bitfab-plugin-lib/dist/loopback.js
-import http from "http";
-async function startLoopbackServer(port, routes) {
-  let done = false;
-  let resolveFn = () => {
-  };
-  let rejectFn = () => {
-  };
-  const promise2 = new Promise((resolve, reject) => {
-    resolveFn = (value) => {
-      if (done) {
-        return;
-      }
-      done = true;
-      resolve(value);
-    };
-    rejectFn = (err) => {
-      if (done) {
-        return;
-      }
-      done = true;
-      reject(err);
-    };
-  });
-  const server = http.createServer((req, res) => {
-    res.setHeader("Access-Control-Allow-Origin", "*");
-    res.setHeader("Access-Control-Allow-Methods", "GET, OPTIONS");
-    res.setHeader("Access-Control-Allow-Private-Network", "true");
-    if (req.method === "OPTIONS") {
-      res.writeHead(204);
-      res.end();
-      return;
-    }
-    const url2 = new URL(req.url ?? "/", `http://localhost:${port}`);
-    if (url2.pathname === "/health") {
-      res.writeHead(200, { "Content-Type": "application/json" });
-      res.end(JSON.stringify({ ok: true }));
-      return;
-    }
-    const route = routes.find((r) => r.path === url2.pathname);
-    if (route) {
-      try {
-        route.handle(url2.searchParams, res, resolveFn);
-      } catch (err) {
-        rejectFn(err);
-      }
-      return;
-    }
-    res.writeHead(404);
-    res.end();
-  });
-  let bindError = null;
-  try {
-    await new Promise((resolve, reject) => {
-      const onError = (err) => {
-        server.removeListener("listening", onListening);
-        reject(err);
-      };
-      const onListening = () => {
-        server.removeListener("error", onError);
-        resolve();
-      };
-      server.once("error", onError);
-      server.once("listening", onListening);
-      server.listen(port, "127.0.0.1");
-    });
-  } catch (err) {
-    bindError = err;
-  }
-  const available = bindError === null;
-  if (available) {
-    server.on("error", (err) => {
-      rejectFn(new Error(`Loopback server error: ${err.message}`));
-    });
-  } else {
-    promise2.catch(() => {
-    });
-  }
-  return {
-    promise: promise2,
-    get done() {
-      return done;
-    },
-    available,
-    bindError,
-    resolve: resolveFn,
-    reject: rejectFn,
-    close: () => {
-      if (available) {
-        server.close();
-      }
-    }
-  };
-}
-
-// ../bitfab-plugin-lib/dist/browserHandoff.js
-var DEFAULT_TIMEOUT_MS = 10 * 60 * 1e3;
-var DEFAULT_REDISPLAY_DELAY_MS = 4 * 1e3;
-var DEFAULT_HEARTBEAT_INTERVAL_MS = 30 * 1e3;
-function findOpenPort() {
-  return new Promise((resolve, reject) => {
-    const server = http2.createServer();
-    server.on("error", (err) => {
-      server.close(() => reject(err));
-    });
-    server.listen(0, "127.0.0.1", () => {
-      const addr = server.address();
-      if (addr && typeof addr === "object") {
-        const port = addr.port;
-        server.close(() => resolve(port));
-      } else {
-        reject(new Error("Could not find open port"));
-      }
-    });
-  });
-}
-async function startBrowserHandoff(opts) {
-  const timeoutMs = opts.timeoutMs ?? DEFAULT_TIMEOUT_MS;
-  const forceTicket = process.env.BITFAB_FORCE_TICKET === "1";
-  let port = null;
-  let portBindError = null;
-  if (!forceTicket) {
-    try {
-      port = await findOpenPort();
-    } catch (err) {
-      portBindError = err;
-    }
-  }
-  const loopbackUnavailable = {
-    promise: new Promise(() => {
-    }),
-    get done() {
-      return false;
-    },
-    available: false,
-    bindError: portBindError ?? new Error("BITFAB_FORCE_TICKET=1 disabled loopback"),
-    resolve: () => {
-    },
-    reject: () => {
-    },
-    close: () => {
-    }
-  };
-  const [loopback, ticket] = await Promise.all([
-    forceTicket || port === null ? Promise.resolve(loopbackUnavailable) : startLoopbackServer(port, opts.loopbackRoutes),
-    startHandoffTicketChannel({
-      serviceUrl: opts.serviceUrl,
-      kind: opts.ticketKind,
-      timeoutMs,
-      ttlSeconds: opts.ticketTtlSeconds,
-      bearer: opts.ticketBearer
-    })
-  ]);
-  const browserUrl = opts.buildUrl({
-    port: loopback.available ? port : null,
-    ticketId: ticket.ticketId
-  });
-  return { loopback, ticket, port, browserUrl, timeoutMs };
-}
-function attachBrowserHandoffKeepalive(opts) {
-  const redisplayDelay = opts.redisplayDelayMs ?? DEFAULT_REDISPLAY_DELAY_MS;
-  const heartbeatInterval = opts.heartbeatIntervalMs ?? DEFAULT_HEARTBEAT_INTERVAL_MS;
-  const startedAt = Date.now();
-  const done = () => opts.loopback.done || opts.ticket.done;
-  const redisplayTimer = setTimeout(() => {
-    if (done()) {
-      return;
-    }
-    console.error("");
-    console.error("Still waiting for browser handoff. If the browser didn't open,");
-    console.error("copy this URL into any browser \u2014 this session is still valid:");
-    console.error("");
-    console.error(`  ${opts.browserUrl}`);
-    console.error("");
-  }, redisplayDelay);
-  const heartbeat = process.stdout.isTTY ? null : setInterval(() => {
-    if (done()) {
-      return;
-    }
-    const elapsed = Math.round((Date.now() - startedAt) / 1e3);
-    console.error(`[bitfab] waiting for browser handoff... ${elapsed}s elapsed, session still live`);
-  }, heartbeatInterval);
-  return () => {
-    clearTimeout(redisplayTimer);
-    if (heartbeat) {
-      clearInterval(heartbeat);
-    }
-  };
-}
-
-// ../bitfab-plugin-lib/dist/buildInfo.js
-import crypto2 from "crypto";
-import fs2 from "fs";
-import os2 from "os";
-import path from "path";
-import { fileURLToPath } from "url";
-
-// ../bitfab-plugin-lib/dist/chatSessions/index.js
-import { execFileSync } from "child_process";
-import fs6 from "fs";
-import os5 from "os";
-import path4 from "path";
-
-// ../bitfab-plugin-lib/dist/skills.js
-var BITFAB_SKILLS = ["setup", "assistant", "update"];
-
-// ../bitfab-plugin-lib/dist/hooks/skillDetection.js
-var SKILL_PATTERN = new RegExp(`^\\s*\\/bitfab[:-](?<skill>${BITFAB_SKILLS.join("|")})(?=\\s|$)`, "i");
-
-// ../bitfab-plugin-lib/dist/chatSessions/arming.js
-import fs3 from "fs";
-import os3 from "os";
-import path2 from "path";
-
-// ../bitfab-plugin-lib/dist/config.js
-import crypto3 from "crypto";
-import fs4 from "fs";
-import os4 from "os";
-import path3 from "path";
-var DEFAULT_SERVICE_URL = "https://bitfab.ai";
-var GLOBAL_CONFIG_DIR = path3.join(os4.homedir(), ".config", "bitfab");
-var GLOBAL_CONFIG_FILE = path3.join(GLOBAL_CONFIG_DIR, "config.json");
-var GLOBAL_CREDENTIALS_FILE = path3.join(GLOBAL_CONFIG_DIR, "credentials.json");
-var PROJECT_CONFIG_RELATIVE = path3.join(".bitfab", "config.local.json");
-function readJsonFile(filePath) {
-  try {
-    const content = fs4.readFileSync(filePath, "utf-8");
-    return JSON.parse(content);
-  } catch {
-    return null;
-  }
-}
-function findProjectConfigPath(startDir = process.cwd()) {
-  let dir = startDir;
-  while (true) {
-    const candidate = path3.join(dir, PROJECT_CONFIG_RELATIVE);
-    if (fs4.existsSync(candidate)) {
-      return candidate;
-    }
-    const parent = path3.dirname(dir);
-    if (parent === dir) {
-      return null;
-    }
-    dir = parent;
-  }
-}
-function getProjectConfigData() {
-  const filePath = findProjectConfigPath();
-  if (!filePath) {
-    return null;
+  if (!area) {
+    return [];
   }
-  return readJsonFile(filePath);
+  const w = Math.floor(area.width * SCREEN_FRACTION);
+  const h = Math.floor(area.height * SCREEN_FRACTION);
+  const x = area.x + Math.floor((area.width - w) / 2);
+  const y = area.y + Math.floor((area.height - h) / 2);
+  return [`--window-size=${w},${h}`, `--window-position=${x},${y}`];
 }
-function getConfigData() {
-  return readJsonFile(GLOBAL_CONFIG_FILE) ?? {};
+function getWindowSizeArgs() {
+  return computeWindowArgs(getWorkArea());
 }
-function getCredentialsData() {
-  return readJsonFile(GLOBAL_CREDENTIALS_FILE) ?? {};
+function spawnDetached(command, args) {
+  const child = spawn(command, [...args], { detached: true, stdio: "ignore" });
+  child.on("error", () => {
+  });
+  child.unref();
 }
-function getServiceUrl() {
-  if (process.env.BITFAB_SERVICE_URL) {
-    return process.env.BITFAB_SERVICE_URL;
-  }
-  const project = getProjectConfigData();
-  if (project && typeof project.serviceUrl === "string") {
-    return project.serviceUrl;
-  }
-  const config2 = getConfigData();
-  return typeof config2.serviceUrl === "string" ? config2.serviceUrl : DEFAULT_SERVICE_URL;
+function openChromiumApp(binaryPath, url2, sizeArgs) {
+  spawnDetached(binaryPath, [`--app=${url2}`, ...sizeArgs]);
 }
-function getApiKey() {
-  if (process.env.BITFAB_API_KEY) {
-    return process.env.BITFAB_API_KEY;
+function openOsDefault(url2) {
+  const platform2 = os6.platform();
+  if (platform2 === "darwin") {
+    spawnDetached("open", [url2]);
+  } else if (platform2 === "win32") {
+    spawnDetached("cmd", ["/c", "start", "", url2]);
+  } else {
+    spawnDetached("xdg-open", [url2]);
   }
-  const creds = getCredentialsData();
-  return typeof creds.apiKey === "string" ? creds.apiKey : null;
 }
-function getVerbose() {
-  if (process.env.BITFAB_VERBOSE === "true" || process.env.BITFAB_VERBOSE === "1") {
-    return true;
-  }
-  if (process.env.BITFAB_VERBOSE === "false" || process.env.BITFAB_VERBOSE === "0") {
+function isCodexOnMacos() {
+  if (process.platform !== "darwin") {
     return false;
   }
-  const config2 = getConfigData();
-  return config2.verbose === true;
-}
-function getDebug() {
-  if (process.env.BITFAB_DEBUG === "true" || process.env.BITFAB_DEBUG === "1") {
-    return true;
-  }
-  const config2 = getConfigData();
-  return config2.debug === true;
+  return process.env.CODEX_SANDBOX === "seatbelt" || process.env.CODEX_CI === "1" || process.env.CODEX_THREAD_ID != null;
 }
-function getSessionLogConsentValue() {
-  const config2 = getConfigData();
-  if (config2.sessionLogConsent === true) {
+function shouldDisableChromelessWindows() {
+  if (process.env.BITFAB_DISABLE_CHROME_APP_WINDOWS === "1") {
     return true;
   }
-  if (config2.sessionLogConsent === false) {
-    return false;
-  }
-  return null;
-}
-function getConfig() {
-  return {
-    serviceUrl: getServiceUrl(),
-    apiKey: getApiKey(),
-    verbose: getVerbose(),
-    debug: getDebug(),
-    sessionLogConsent: getSessionLogConsentValue()
-  };
-}
-function saveCredentials(apiKey) {
-  fs4.mkdirSync(GLOBAL_CONFIG_DIR, { recursive: true });
-  fs4.writeFileSync(GLOBAL_CREDENTIALS_FILE, `${JSON.stringify({ apiKey }, null, 2)}
-`);
+  return isCodexOnMacos();
 }
-function deleteCredentials() {
-  try {
-    fs4.unlinkSync(GLOBAL_CREDENTIALS_FILE);
-  } catch {
+function openChromelessWindow(url2) {
+  if (shouldDisableChromelessWindows()) {
+    openOsDefault(url2);
+    return;
   }
-}
-function hasCredentials() {
-  return getApiKey() !== null;
-}
-function getOrCreateInstallId() {
-  const config2 = getConfigData();
-  if (typeof config2.installId === "string" && config2.installId.length > 0) {
-    return config2.installId;
+  const browsers = getChromiumBrowsers();
+  const defaultId = getDefaultBrowserId();
+  const defaultChromium = matchChromiumBrowser(defaultId, browsers);
+  const sizeArgs = getWindowSizeArgs();
+  if (defaultChromium) {
+    const binary = findExistingBinary(defaultChromium.binaryPaths);
+    if (binary) {
+      openChromiumApp(binary, url2, sizeArgs);
+      return;
+    }
   }
-  const installId = crypto3.randomUUID();
-  try {
-    fs4.mkdirSync(GLOBAL_CONFIG_DIR, { recursive: true });
-    fs4.writeFileSync(GLOBAL_CONFIG_FILE, `${JSON.stringify({ ...config2, installId }, null, 2)}
-`);
-  } catch {
+  if (defaultId !== null && defaultChromium === null) {
+    openOsDefault(url2);
+    return;
   }
-  return installId;
-}
-
-// ../bitfab-plugin-lib/dist/chatSessions/transcriptReader.js
-import fs5 from "fs";
-
-// ../bitfab-plugin-lib/dist/clientHeaders.js
-import os6 from "os";
-function buildBitfabClientHeaders(pluginVersion, platform2) {
-  const resolvedOptions = Intl.DateTimeFormat().resolvedOptions();
-  return {
-    "x-bitfab-client-name": platform2.cliBinary,
-    "x-bitfab-client-display-name": platform2.displayName,
-    "x-bitfab-client-version": pluginVersion,
-    "x-bitfab-client-timezone": resolvedOptions.timeZone,
-    "x-bitfab-client-locale": resolvedOptions.locale,
-    "x-bitfab-client-os": os6.platform(),
-    "x-bitfab-client-arch": os6.arch(),
-    "x-bitfab-client-node-version": process.version,
-    "x-bitfab-install-id": getOrCreateInstallId()
-  };
-}
-function buildBitfabRequestHeaders(apiKey, pluginVersion, platform2) {
-  return {
-    "Content-Type": "application/json",
-    Authorization: `Bearer ${apiKey}`,
-    ...buildBitfabClientHeaders(pluginVersion, platform2)
-  };
-}
-
-// ../bitfab-plugin-lib/dist/commands/login.js
-import readline from "readline";
-
-// ../bitfab-plugin-lib/dist/analytics.js
-async function reportHandoff(apiKey, pluginVersion, platform2, body) {
-  const config2 = getConfig();
-  const headers = buildBitfabRequestHeaders(apiKey, pluginVersion, platform2);
-  try {
-    const response = await fetch(`${config2.serviceUrl}/api/plugin/analytics/handoff`, {
-      method: "POST",
-      headers,
-      body: JSON.stringify(body)
-    });
-    if (config2.debug && !response.ok) {
-      console.error(`reportHandoff: server returned ${response.status} for ${body.flow}`);
-    }
-  } catch (err) {
-    if (config2.debug) {
-      const message = err instanceof Error ? err.message : String(err);
-      console.error(`reportHandoff: request failed for ${body.flow}: ${message}`);
+  for (const browser of browsers) {
+    const binary = findExistingBinary(browser.binaryPaths);
+    if (binary) {
+      openChromiumApp(binary, url2, sizeArgs);
+      return;
     }
   }
+  openOsDefault(url2);
 }
 
 // ../bitfab-plugin-lib/dist/frontmostApp.js
@@ -7766,16 +7426,7 @@ function recordFocus() {
 
 // ../bitfab-plugin-lib/dist/commands/login.js
 var LOGIN_TIMEOUT_MS = 10 * 60 * 1e3;
-var PASTE_HINT_DELAY_MS = 8 * 1e3;
-var CALLBACK_HTML = `<html>
-<body style="margin:0;background:#f8fafc;color:#0f172a;font-family:system-ui,-apple-system,sans-serif;display:flex;align-items:center;justify-content:center;height:100vh;overflow:hidden">
-  <div style="text-align:center;max-width:400px">
-    <h1 style="font-size:24px;font-weight:600;margin:0 0 16px 0">Bitfab</h1>
-    <p style="margin:0;color:#059669">Authenticated! You can close this window.</p>
-    <button onclick="window.close()" style="margin-top:16px;padding:8px 16px;background:#0f172a;color:white;border:none;border-radius:8px;font-size:14px;font-weight:500;cursor:pointer">Close Window</button>
-  </div>
-</body>
-</html>`;
+var POLL_INTERVAL_MS = 1500;
 async function verifyToken(serviceUrl, token) {
   try {
     const res = await fetch(`${serviceUrl}/api/plugin/whoami`, {
@@ -7789,141 +7440,86 @@ async function verifyToken(serviceUrl, token) {
     return null;
   }
 }
+async function pollLoginStatus(serviceUrl, loginId, signal) {
+  while (!signal.aborted) {
+    try {
+      const url2 = `${serviceUrl}/api/studio/login-status?loginId=${encodeURIComponent(loginId)}`;
+      const res = await fetch(url2, { signal });
+      if (res.ok) {
+        const body = await res.json();
+        if (body.status === "complete" && body.token) {
+          return body.token;
+        }
+      }
+    } catch {
+      if (signal.aborted) {
+        throw new Error("Login polling aborted");
+      }
+    }
+    await new Promise((resolve) => {
+      const timer = setTimeout(resolve, POLL_INTERVAL_MS);
+      signal.addEventListener("abort", () => {
+        clearTimeout(timer);
+        resolve();
+      }, { once: true });
+    });
+  }
+  throw new Error("Login polling aborted");
+}
 async function runLogin(platform2, pluginVersion, options) {
   const exitOnComplete = options?.exitOnComplete ?? true;
   const config2 = getConfig();
   const restoreFocus = recordFocus();
-  const interactive = process.stdin.isTTY === true;
-  const { loopback, ticket, browserUrl } = await startBrowserHandoff({
-    serviceUrl: config2.serviceUrl,
-    ticketKind: "auth.login",
-    timeoutMs: LOGIN_TIMEOUT_MS,
-    buildUrl: ({ port, ticketId }) => {
-      const urlParams = new URLSearchParams();
-      if (port !== null) {
-        urlParams.set("callbackPort", String(port));
-      }
-      if (ticketId !== null) {
-        urlParams.set("ticket", ticketId);
-      }
-      const base = `${config2.serviceUrl}/plugin/auth/${platform2.authPath}`;
-      const qs = urlParams.toString();
-      return qs ? `${base}?${qs}` : base;
-    },
-    loopbackRoutes: [
-      {
-        path: "/callback",
-        handle: (params, res, resolve) => {
-          const token = params.get("token");
-          if (token) {
-            res.writeHead(200, { "Content-Type": "text/html" });
-            res.end(CALLBACK_HTML);
-            resolve({ token });
-          } else {
-            res.writeHead(400, { "Content-Type": "application/json" });
-            res.end(JSON.stringify({ ok: false, error: "No token received" }));
-          }
-        }
-      }
-    ]
-  });
-  console.log("\nOpening your browser to sign in...");
+  const loginId = crypto3.randomUUID();
+  const redirectUrl = `/studio/close?pluginLogin=true&loginId=${loginId}`;
+  const browserUrl = `${config2.serviceUrl}/studio/sign-in?redirect_url=${encodeURIComponent(redirectUrl)}`;
+  console.log("\nOpening Studio to sign in...");
   console.log(`  ${browserUrl}`);
   console.log("");
   console.log("(If the browser didn't open, visit the URL above manually.)");
   openChromelessWindow(browserUrl);
-  const stopKeepalive = attachBrowserHandoffKeepalive({
-    loopback,
-    ticket,
-    browserUrl
-  });
-  let resolvePaste = () => {
-  };
-  let pasteDone = false;
-  const pastePromise = new Promise((resolve) => {
-    resolvePaste = (value) => {
-      if (pasteDone) {
-        return;
-      }
-      pasteDone = true;
-      resolve(value);
-    };
-  });
-  const rl = interactive ? readline.createInterface({
-    input: process.stdin,
-    output: process.stdout
-  }) : null;
-  const hintTimer = interactive ? setTimeout(() => {
-    if (loopback.done || ticket.done || pasteDone) {
-      return;
-    }
-    console.log("");
-    console.log("Having trouble? If your browser shows a token, paste it here and press Enter:");
-  }, PASTE_HINT_DELAY_MS) : null;
-  rl?.on("line", async (line) => {
-    if (loopback.done || ticket.done || pasteDone) {
-      return;
-    }
-    const trimmed = line.trim();
-    if (!trimmed) {
-      return;
-    }
-    process.stdout.write("Verifying token... ");
-    const who = await verifyToken(config2.serviceUrl, trimmed);
-    if (who) {
-      console.log("ok.");
-      resolvePaste({ token: trimmed });
-    } else {
-      console.log("invalid token. Try again or complete the browser flow.");
-    }
-  });
+  const abortController = new AbortController();
   let loginTimer;
   const timeoutPromise = new Promise((_resolve, reject) => {
-    loginTimer = setTimeout(() => reject(new Error("Authentication timed out after 10 minutes. Run login again.")), LOGIN_TIMEOUT_MS);
-  });
-  function cleanup() {
-    stopKeepalive();
-    if (hintTimer) {
-      clearTimeout(hintTimer);
-    }
+    loginTimer = setTimeout(() => {
+      abortController.abort();
+      reject(new Error("Authentication timed out after 10 minutes. Run login again."));
+    }, LOGIN_TIMEOUT_MS);
+  });
+  const keepaliveTimer = setInterval(() => {
+    process.stdout.write("");
+  }, 3e4);
+  try {
+    const token = await Promise.race([
+      pollLoginStatus(config2.serviceUrl, loginId, abortController.signal),
+      timeoutPromise
+    ]);
     if (loginTimer) {
       clearTimeout(loginTimer);
     }
-    loopback.close();
-    ticket.close();
-    rl?.close();
-  }
-  const racers = [];
-  if (loopback.available) {
-    racers.push(loopback.promise.then((v) => ({ token: v.token, wonBy: "loopback" })));
-  }
-  if (ticket.available) {
-    racers.push(ticket.promise.then((v) => ({ token: v.token, wonBy: "ticket" })));
-  }
-  if (interactive) {
-    racers.push(pastePromise.then((v) => ({ token: v.token, wonBy: "paste" })));
-  }
-  try {
-    const { token, wonBy } = await Promise.race([...racers, timeoutPromise]);
-    cleanup();
+    clearInterval(keepaliveTimer);
     saveCredentials(token);
     const who = await verifyToken(config2.serviceUrl, token);
     const greeting = who?.user.email ? `Logged in as ${who.user.email}.` : "Authentication successful.";
     console.log(`
 ${greeting}`);
-    console.log(`Bitfab MCP tools are now active. (via ${wonBy})`);
+    console.log("Bitfab MCP tools are now active. (via studio)");
     await reportHandoff(token, pluginVersion, platform2, {
       flow: "auth.login",
-      wonBy,
-      loopbackAvailable: loopback.available,
-      ticketAvailable: ticket.available
+      wonBy: "studio",
+      loopbackAvailable: false,
+      ticketAvailable: false
     });
     restoreFocus();
     if (exitOnComplete) {
       process.exit(0);
     }
   } catch (err) {
-    cleanup();
+    if (loginTimer) {
+      clearTimeout(loginTimer);
+    }
+    clearInterval(keepaliveTimer);
+    abortController.abort();
     if (exitOnComplete) {
       console.error(`
 ${err.message}`);
@@ -7953,6 +7549,9 @@ import fs7 from "fs";
 import os8 from "os";
 import path5 from "path";
 
+// ../bitfab-plugin-lib/dist/withStudioSession.js
+import crypto6 from "crypto";
+
 // ../bitfab-plugin-lib/dist/commands/openTracePlan.js
 var OPEN_TRACE_PLAN_TIMEOUT_MS = 30 * 60 * 1e3;
 
@@ -21753,21 +21352,12 @@ var inputFileSchema = external_exports.object({
   verdicts: external_exports.array(external_exports.unknown()).min(1)
 });
 
-// ../bitfab-plugin-lib/dist/commands/startDataset.js
-var START_DATASET_TIMEOUT_MS = 30 * 60 * 1e3;
-
-// ../bitfab-plugin-lib/dist/commands/startTemplatePreview.js
-import { randomUUID } from "crypto";
-
 // ../bitfab-plugin-lib/dist/activePreviewSession.js
 import fs8 from "fs";
 import os9 from "os";
 import path6 from "path";
 var FILE_PATH = path6.join(os9.homedir(), ".config", "bitfab", "active-preview-session.json");
 
-// ../bitfab-plugin-lib/dist/commands/startTemplatePreview.js
-var START_TEMPLATE_PREVIEW_TIMEOUT_MS = 8 * 60 * 60 * 1e3;
-
 // ../bitfab-plugin-lib/dist/updates.js
 import fs9 from "fs";
 import os10 from "os";
@@ -21785,7 +21375,7 @@ import fs10 from "fs";
 import path8 from "path";
 
 // ../bitfab-plugin-lib/dist/commands/waitForTrace.js
-var DEFAULT_TIMEOUT_MS2 = 10 * 60 * 1e3;
+var DEFAULT_TIMEOUT_MS = 10 * 60 * 1e3;
 
 // ../bitfab-plugin-lib/dist/hooks/captureHook.js
 import fs12 from "fs";
@@ -27212,6 +26802,10 @@ function runClaudeInstall() {
   ]);
   if (installOut.includes("already")) {
     s.stop("Plugin already installed");
+    if (isPluginDisabled()) {
+      runClaude(["plugin", "enable", PLUGIN_KEY]);
+      p.log.step("Plugin enabled");
+    }
   } else {
     s.stop("Plugin installed");
   }
@@ -27237,14 +26831,36 @@ function runClaudeAssistant(args, skipPermissions) {
   });
 }
 function runClaudeUpdate(args, skipPermissions) {
-  const cmd = [UPDATE_COMMAND, ...args].join(" ");
-  p.log.info(`Launching ${cmd}...
+  const mode = args[0] === "plugin" || args[0] === "sdk" ? args[0] : "all";
+  if (mode === "plugin" || mode === "all") {
+    const s = p.spinner();
+    s.start("Refreshing bitfab marketplace");
+    runClaude(["plugin", "marketplace", "update", MARKETPLACE]);
+    s.stop("Marketplace refreshed");
+    s.start("Updating bitfab plugin");
+    const out = runClaude(["plugin", "update", PLUGIN_KEY, "--scope", "user"]);
+    if (out.includes("already") || out.includes("up to date")) {
+      s.stop("Plugin already up to date");
+    } else {
+      s.stop("Plugin updated");
+    }
+  }
+  if (mode === "sdk" || mode === "all") {
+    p.log.info(`Launching ${UPDATE_COMMAND} sdk...
 `);
-  const flags = skipPermissions ? ["--dangerously-skip-permissions"] : [];
-  spawnSync("claude", [...flags, UPDATE_COMMAND, ...args], {
-    stdio: "inherit",
-    ...SHELL_OPTS
-  });
+    const flags = skipPermissions ? ["--dangerously-skip-permissions"] : [];
+    spawnSync("claude", [...flags, UPDATE_COMMAND, "sdk"], {
+      stdio: "inherit",
+      ...SHELL_OPTS
+    });
+  }
+}
+function isPluginDisabled() {
+  const listOut = runClaude(["plugin", "list"]);
+  const pattern = new RegExp(
+    `${PLUGIN_KEY.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}\\n.*\\n.*\\n.*disabled`
+  );
+  return pattern.test(listOut);
 }
 function runClaude(args) {
   const result = spawnSync("claude", [...args], {
@@ -27342,14 +26958,37 @@ function runCodexAssistant(args, skipPermissions) {
   });
 }
 function runCodexUpdate(args, skipPermissions) {
-  const cmd = [UPDATE_COMMAND2, ...args].join(" ");
-  p2.log.info(`Launching ${cmd}...
+  const mode = args[0] === "plugin" || args[0] === "sdk" ? args[0] : "all";
+  if (mode === "plugin" || mode === "all") {
+    const s = p2.spinner();
+    s.start("Upgrading bitfab marketplace plugin");
+    const result = spawnSync2(
+      "codex",
+      ["plugin", "marketplace", "upgrade", "bitfab"],
+      { stdio: "pipe", ...SHELL_OPTS2 }
+    );
+    if (result.status !== 0) {
+      s.stop("Marketplace upgrade failed");
+      throw new Error(
+        `codex plugin marketplace upgrade failed${result.status === null ? "" : ` with status ${result.status}`}`
+      );
+    }
+    const out = (result.stdout?.toString() ?? "") + (result.stderr?.toString() ?? "");
+    if (out.includes("already") || out.includes("up to date")) {
+      s.stop("Plugin already up to date");
+    } else {
+      s.stop("Plugin updated");
+    }
+  }
+  if (mode === "sdk" || mode === "all") {
+    p2.log.info(`Launching ${UPDATE_COMMAND2} sdk...
 `);
-  const flags = skipPermissions ? ["--full-auto"] : [];
-  spawnSync2("codex", [...flags, UPDATE_COMMAND2, ...args], {
-    stdio: "inherit",
-    ...SHELL_OPTS2
-  });
+    const flags = skipPermissions ? ["--full-auto"] : [];
+    spawnSync2("codex", [...flags, UPDATE_COMMAND2, "sdk"], {
+      stdio: "inherit",
+      ...SHELL_OPTS2
+    });
+  }
 }
 function enableCodexPlugin(configPath) {
   let content = "";
@@ -27437,8 +27076,15 @@ function runCursorUpdate(args, skipPermissions) {
   if (skipPermissions) {
     p3.log.warn("--skip-permissions is not supported for Cursor");
   }
-  const cmd = [UPDATE_COMMAND3, ...args].join(" ");
-  p3.log.info(`To update, run ${cmd} in Cursor.`);
+  const mode = args[0] === "plugin" || args[0] === "sdk" ? args[0] : "all";
+  const lines = [];
+  if (mode === "plugin" || mode === "all") {
+    lines.push(`Run ${UPDATE_COMMAND3} plugin   (updates the plugin)`);
+  }
+  if (mode === "sdk" || mode === "all") {
+    lines.push(`Run ${UPDATE_COMMAND3} sdk      (updates installed SDKs)`);
+  }
+  p3.note(lines.join("\n"), "Update Bitfab in Cursor");
 }
 function copyToClipboard(text) {
   const cmd = clipboardCommand();
@@ -27557,6 +27203,20 @@ async function pickEditor(detected) {
   }
   return choice;
 }
+async function resolveSkipPermissions(value) {
+  if (value !== void 0) {
+    return value;
+  }
+  const answer = await p4.confirm({
+    message: "Skip permission prompts? (runs the agent autonomously)",
+    initialValue: false
+  });
+  if (p4.isCancel(answer)) {
+    p4.cancel("Cancelled.");
+    process.exit(0);
+  }
+  return answer;
+}
 async function resolveEditor({ editor }) {
   const detected = detectInstalledEditors();
   if (detected.length === 0) {
@@ -27591,15 +27251,18 @@ async function runInstall(opts) {
 }
 async function runSetup(opts) {
   const chosen = await resolveEditor(opts);
-  SETUP_FN[chosen](opts.skipPermissions);
+  const skip = await resolveSkipPermissions(opts.skipPermissions);
+  SETUP_FN[chosen](skip);
 }
 async function runAssistant(opts, args) {
   const chosen = await resolveEditor(opts);
-  ASSISTANT_FN[chosen](args, opts.skipPermissions);
+  const skip = await resolveSkipPermissions(opts.skipPermissions);
+  ASSISTANT_FN[chosen](args, skip);
 }
 async function runUpdate2(opts, args) {
   const chosen = await resolveEditor(opts);
-  UPDATE_FN[chosen](args, opts.skipPermissions);
+  const skip = await resolveSkipPermissions(opts.skipPermissions);
+  UPDATE_FN[chosen](args, skip);
 }
 async function runInit(opts) {
   p4.intro("bitfab");
@@ -27613,7 +27276,8 @@ async function runInit(opts) {
     p4.log.step("Signing in to Bitfab");
     await runLoginCommand({ exitOnComplete: false });
   }
-  SETUP_FN[chosen](opts.skipPermissions);
+  const skip = await resolveSkipPermissions(opts.skipPermissions);
+  SETUP_FN[chosen](skip);
   const detected = detectInstalledEditors();
   const others = detected.filter((e) => e !== chosen);
   if (others.length > 0) {
@@ -27658,12 +27322,13 @@ Commands:
   logout                              Remove stored credentials
   setup [--editor <name>]             Launch /bitfab:setup in the editor
   assistant [--editor <name>] [args]  Launch /bitfab:assistant in the editor
-  update [--editor <name>] [args]     Launch /bitfab:update in the editor
+  update [--editor <name>] [mode]      Update plugin, then launch SDK update (mode: all|plugin|sdk)
   help                                Show this help
 
 Options:
   --editor, -e <name>    Target editor: claude, codex, cursor
-  --skip-permissions     Skip permission prompts in the launched agent
+  --skip-permissions     Skip permission prompts (runs the agent autonomously)
+  --no-skip-permissions  Keep permission prompts (default, skips the interactive question)
 
 Examples:
   bitfab init                              Full setup (detect editor, install, login, setup)
@@ -27675,7 +27340,7 @@ Examples:
 function parseArgs(argv) {
   const [command, ...tail] = argv;
   let editor;
-  let skipPermissions = false;
+  let skipPermissions;
   const rest = [];
   for (let i = 0; i < tail.length; i++) {
     const arg = tail[i];
@@ -27690,6 +27355,8 @@ function parseArgs(argv) {
       editor = arg.slice("--editor=".length);
     } else if (arg === "--skip-permissions") {
       skipPermissions = true;
+    } else if (arg === "--no-skip-permissions") {
+      skipPermissions = false;
     } else if (arg !== void 0) {
       rest.push(arg);
     }
@@ -27742,3 +27409,6 @@ main().catch((err) => {
   cancel2(message);
   process.exit(1);
 });
+export {
+  parseArgs
+};