botmux 2.94.0 → 2.96.0

package/dist/worker.js

@@ -15,7 +15,7 @@
 import { randomBytes } from 'node:crypto';
 import { mkdirSync, writeFileSync, unlinkSync, existsSync, statSync, readdirSync, readlinkSync, readFileSync, watch as fsWatch, createWriteStream } from 'node:fs';
 import { atomicWriteFileSync } from './utils/atomic-write.js';
-import { isAbsolute, join } from 'node:path';
+import { isAbsolute, join, basename } from 'node:path';
 import { drainTranscript, joinAssistantText, trailingAssistantText, findJsonlContainingFingerprint, findJsonlsContainingExactContent, findLatestJsonl, extractLastAssistantTurn, extractTurnStartText, splitTranscriptEventsByCutoff } from './services/claude-transcript.js';
 import { BridgeTurnQueue, makeFingerprint, normaliseForFingerprint } from './services/bridge-turn-queue.js';
 import { shouldSuppressBridgeEmit } from './services/bridge-fallback-gate.js';
@@ -34,6 +34,7 @@ import { findTraexRolloutBySessionId, findTraexRolloutByPid } from './services/t
 import { cocoEventsPathForSession, drainCocoEvents, findCocoSessionByPid } from './services/coco-transcript.js';
 import { currentHermesStateOffset, drainHermesStateDb } from './services/hermes-transcript.js';
 import { currentMtrSessionOffset, drainMtrSession, findLatestMtrSessionByDirectory, findMtrSessionById } from './services/mtr-transcript.js';
+import { drainPiTranscript, findPiTranscriptByPid, findPiTranscriptBySessionId } from './services/pi-transcript.js';
 import { drainCursorTranscript, findCursorChatIdByPid, findCursorTranscriptByChatId, findCursorTranscriptByPid } from './services/cursor-transcript.js';
 import { shouldObserveCursorChatId, shouldPersistObservedCursorChatId } from './services/cursor-resume-policy.js';
 import { baselineJsonlCursor } from './services/jsonl-cursor.js';
@@ -41,12 +42,13 @@ import { dirname } from 'node:path';
 import { createServer as createHttpServer } from 'node:http';
 import { WebSocketServer, WebSocket } from 'ws';
 import { listenWebTerminalWithFallback } from './utils/web-terminal-listen.js';
+import { TERMINAL_FAVICON_DATA_URI } from './utils/terminal-favicon.js';
 import { t, setDefaultLocale } from './i18n/index.js';
 import { TerminalRenderer } from './utils/terminal-renderer.js';
 import { DEFAULT_RENDER_COLS, DEFAULT_RENDER_ROWS, MAX_RENDER_COLS, MAX_RENDER_ROWS, MIN_RENDER_COLS, MIN_RENDER_ROWS, clamp, resolveRenderDimensions, } from './utils/render-dimensions.js';
 import { createCliAdapterSync, locateOnPath } from './adapters/cli/registry.js';
 import { buildWrappedLaunch, parseWrapperCli, isTtadkWrapper } from './setup/cli-selection.js';
-import { findLaunchedCliPid, scheduleWrapperRealCliPid } from './core/session-discovery.js';
+import { findLaunchedCliPid, scheduleWrapperRealCliPid, readComm, isBareShellComm, bareShellLaunchKind } from './core/session-discovery.js';
 import { claudeJsonlPathForSession, resolveJsonlFromPid, findOpenClaudeSessionIds, DEFAULT_CLAUDE_DATA_DIR } from './adapters/cli/claude-code.js';
 import { mtrSessionIdForBotmuxSession } from './adapters/cli/mtr.js';
 import { HerdrBackend } from './adapters/backend/herdr-backend.js';
@@ -134,6 +136,24 @@ const authedClients = new WeakSet();
 /** Per-WS-client tmux/zellij attach PTYs. */
 const clientPtys = new Map();
 const writeToken = randomBytes(16).toString('hex');
+/**
+ * Resolve terminal write permission for one request, honoring a platform-injected
+ * `X-Botmux-Role` header. The central platform fronts `/s/*` and sets the role
+ * (owner | teammate | guest) after authenticating the viewer, stripping any
+ * client-supplied header; it reaches the worker via dashboard /s bridge →
+ * terminal-proxy → here. When the header is present we trust it (platform-fronted
+ * access): only `owner` may drive the terminal; everything else (teammate / guest
+ * / anything else) is read-only. When the header is absent (local direct access,
+ * no platform in front), fall back to the legacy write-token query param.
+ */
+function resolveTerminalWrite(req, tokenMatches) {
+    const role = req.headers['x-botmux-role'];
+    if (typeof role === 'string' && role) {
+        const hasWrite = role === 'owner';
+        return { hasWrite, platformReadonly: !hasWrite };
+    }
+    return { hasWrite: tokenMatches, platformReadonly: false };
+}
 /** Lazily-written locked-mode zellij config for per-WS web-terminal attach
  *  clients: cleared keybinds + locked mode so every keystroke passes straight
  *  to the focused (codex) pane, never intercepted as a zellij shortcut. */
@@ -153,7 +173,7 @@ function ensureZellijAttachConfig() {
 }
 let sessionId = '';
 let lastInitConfig = null;
-const CLI_DISPLAY_NAMES = { 'claude-code': 'Claude', seed: 'Seed', relay: 'Relay', aiden: 'Aiden', coco: 'CoCo', codex: 'Codex', 'codex-app': 'Codex App', cursor: 'Cursor', gemini: 'Gemini', opencode: 'OpenCode', antigravity: 'Antigravity', mtr: 'MTR', hermes: 'Hermes', mira: 'Mira', mir: 'Mir CLI', traex: 'TRAE', pi: 'Pi', copilot: 'Copilot', 'oh-my-pi': 'Oh My Pi' };
+const CLI_DISPLAY_NAMES = { 'claude-code': 'Claude', seed: 'Seed', relay: 'Relay', aiden: 'Aiden', coco: 'CoCo', codex: 'Codex', 'codex-app': 'Codex App', cursor: 'Cursor', gemini: 'Gemini', opencode: 'OpenCode', antigravity: 'Antigravity', mtr: 'MTR', hermes: 'Hermes', mira: 'Mira', mir: 'Mir CLI', traex: 'TRAE', pi: 'Pi', copilot: 'Copilot', 'oh-my-pi': 'Oh My Pi', kimi: 'Kimi' };
 function cliName() { return CLI_DISPLAY_NAMES[lastInitConfig?.cliId ?? ''] ?? 'CLI'; }
 let isPromptReady = false;
 /** Mutex for async flushPending — prevents concurrent flush loops. */
@@ -164,6 +184,19 @@ let isFlushing = false;
  *  when the CLI restarts. Consumed inside flushPending right before the first
  *  user prompt is drained, so the commands always precede it (see runStartupCommands). */
 let hasRunStartupCommands = false;
+/** Per-spawn latch: set once the launch-failure detector has decided the pane
+ *  leaf is a bare shell (the CLI never launched — e.g. a user rcfile that
+ *  `exec`-trampolines into another shell pre-empted the wrapper's `exec <cli>`).
+ *  Once set, flushPending refuses to type prompts into the bare shell (which
+ *  would just produce `zsh: parse error`) and the user gets one diagnostic
+ *  instead. Reset per spawn in spawnCli. */
+let bareShellLaunchBlocked = false;
+/** Per-spawn one-shot: has the bare-shell launch check already run for this
+ *  spawn? Gates detectBareShellLaunch() to the FIRST flush only (the
+ *  "about to type the first prompt" moment), independent of the startup-commands
+ *  one-shot so it also covers a reattach onto a pane that degraded to a bare
+ *  shell. Reset per spawn in spawnCli. */
+let bareShellChecked = false;
 /** Ready-gate (Claude-family): holds the first prompt until the SessionStart
  *  hook fires a true-ready signal, so a cjadk-style startup selector's ❯ (which
  *  falsely matches readyPattern) can't eat the first message. Recreated + armed
@@ -1693,7 +1726,7 @@ function codexBridgeFallbackActive() {
     // True for transcript-backed CLIs whose final output can be harvested
     // when the model forgets to call `botmux send`.
     const id = lastInitConfig?.cliId;
-    if (id === 'codex' || id === 'traex' || id === 'coco' || id === 'hermes' || id === 'mtr')
+    if (id === 'codex' || id === 'traex' || id === 'coco' || id === 'hermes' || id === 'mtr' || id === 'pi')
         return true;
     // Cursor only harvests its transcript in adopt mode: a botmux-spawned
     // cursor session carries the botmux skill and replies via `botmux send`,
@@ -1714,6 +1747,9 @@ function structuredBridgeIsHermes() {
 function structuredBridgeIsMtr() {
     return lastInitConfig?.cliId === 'mtr';
 }
+function structuredBridgeIsPi() {
+    return lastInitConfig?.cliId === 'pi';
+}
 function codexBridgeIsCursor() {
     return lastInitConfig?.cliId === 'cursor';
 }
@@ -1722,6 +1758,8 @@ function structuredBridgeIngestPath(path, offset) {
         return drainCodexRollout(path, offset);
     if (codexBridgeIsCursor())
         return drainCursorTranscript(path, offset);
+    if (structuredBridgeIsPi())
+        return drainPiTranscript(path, offset);
     if (structuredBridgeIsHermes()) {
         const result = drainHermesStateDb(offset);
         return { events: result.events, newOffset: result.newOffset, pendingTail: '' };
@@ -1809,6 +1847,7 @@ function codexBridgeStartTimer() {
                 // sid, so the lookup is just a path computation + existence check.
                 const isCoco = lastInitConfig?.cliId === 'coco';
                 const isTraex = lastInitConfig?.cliId === 'traex';
+                const isPi = lastInitConfig?.cliId === 'pi';
                 let path;
                 if (codexBridgePendingSessionId) {
                     if (isCoco) {
@@ -1816,6 +1855,9 @@ function codexBridgeStartTimer() {
                         if (path && !existsSync(path))
                             path = undefined;
                     }
+                    else if (isPi) {
+                        path = findPiTranscriptBySessionId(codexBridgePendingSessionId, lastInitConfig?.workingDir);
+                    }
                     else if (isTraex) {
                         path = findTraexRolloutBySessionId(codexBridgePendingSessionId);
                     }
@@ -1829,6 +1871,11 @@ function codexBridgeStartTimer() {
                         if (probed && existsSync(probed.eventsPath))
                             path = probed.eventsPath;
                     }
+                    else if (isPi) {
+                        const probed = findPiTranscriptByPid(codexAdoptPendingPid);
+                        if (probed)
+                            path = probed.path;
+                    }
                     else if (isTraex) {
                         const probed = findTraexRolloutByPid(codexAdoptPendingPid);
                         if (probed)
@@ -2075,7 +2122,9 @@ function codexBridgeNotifyCliSessionId(cliSessionId) {
     }
     const path = lastInitConfig?.cliId === 'traex'
         ? findTraexRolloutBySessionId(cliSessionId)
-        : findCodexRolloutBySessionId(cliSessionId);
+        : lastInitConfig?.cliId === 'pi'
+            ? findPiTranscriptBySessionId(cliSessionId, lastInitConfig?.workingDir)
+            : findCodexRolloutBySessionId(cliSessionId);
     if (path) {
         codexBridgePendingSessionId = undefined;
         codexBridgeAttach(path, 'fresh-empty');
@@ -3264,6 +3313,69 @@ function scheduleSubmitFailureNotify(msg, recheck, transcriptLabel, bridgeTurnId
         });
     }, SUBMIT_DEFERRED_RECHECK_MS);
 }
+/**
+ * Launch-failure guard. Right before the FIRST prompt is typed, confirm the
+ * pane's leaf process is the agent CLI — not a bare interactive shell. The
+ * failure this catches: a user's login `$SHELL` (e.g. bash) whose rcfile
+ * `exec`-trampolines into another shell (`[ -t 1 ] && exec zsh`). botmux's
+ * tmux wrapper launches `<shell> -i -c '… exec /usr/bin/env <cli>'`; the `-i`
+ * sources the rcfile, the `exec zsh` replaces the shell BEFORE the `-c` body
+ * runs, and the pane is left at a bare shell. Typing the multi-line prompt into
+ * it just yields `zsh: parse error near '\n'` and the user is stuck (the exact
+ * bug this guards). Instead of typing into the shell we surface ONE actionable
+ * diagnostic and latch the session so no further prompt is mis-typed.
+ *
+ * Why this is the right moment / low false-positive: the first prompt is held
+ * until the CLI signals ready OR the 15s/45s first-prompt timeout fires, so by
+ * the time we get here a healthy CLI has long since `exec`'d (leaf comm =
+ * codex/node/…) — only a trampolined/failed launch is still a bare shell. We
+ * skip wrapperCli/adopt (their leaf is legitimately a launcher/observed pane)
+ * and the pty/herdr backends (which `exec` the CLI directly — getChildPid is the
+ * CLI itself, never a shell).
+ *
+ * Returns true when a bare-shell launch was detected (caller must NOT flush).
+ */
+function detectBareShellLaunch() {
+    if (bareShellLaunchBlocked)
+        return true;
+    if (lastInitConfig?.adoptMode)
+        return false; // observing an existing pane, not launching
+    if (lastInitConfig?.wrapperCli)
+        return false; // launcher legitimately wraps the CLI (transient shell shim)
+    const pid = backend?.getChildPid?.();
+    if (!pid)
+        return false;
+    const comm = readComm(pid);
+    if (!isBareShellComm(comm))
+        return false; // CLI (rust/go/node) is running — healthy launch
+    // Bare shell is the pane leaf → the CLI never launched. Tier the message on
+    // whether the leaf shell differs from the one botmux launched with: a
+    // mismatch is the unmistakable signature of an rcfile `exec`-trampoline.
+    const launchShell = (lastInitConfig?.launchShell || process.env.SHELL || '').trim();
+    const expectedShell = launchShell ? basename(launchShell) : '';
+    const trampolined = bareShellLaunchKind(comm, expectedShell) === 'trampoline';
+    bareShellLaunchBlocked = true;
+    log(`Bare-shell launch detected: pane leaf comm=${comm}, expected launch shell=${expectedShell || '?'}, ` +
+        `cli=${lastInitConfig?.cliId}; suppressing first-prompt write (${trampolined ? 'rc trampoline' : 'CLI did not start'})`);
+    const cli = cliName();
+    let message;
+    if (trampolined) {
+        message =
+            `⚠️ 会话没能启动：pane 里现在是裸 \`${comm}\`，${cli} 没真正跑起来——所以我没把你的消息打进去（否则会被当 shell 命令执行，报 \`parse error\`）。\n\n` +
+                `最可能原因：botmux 用 \`${expectedShell}\` 启动 CLI，但 pane 落到了 \`${comm}\`。通常是 rc 文件（如 \`~/.${expectedShell}rc\`）里有 \`exec ${comm}\` 这类跳转——\`${expectedShell} -i\` 会 source rc，于是 shell 被顶替，CLI 的启动命令没机会跑。\n\n` +
+                `两种修法（任选其一，改完重启 daemon 再发一条消息）：\n` +
+                `① 给那行加守卫，只在手动开终端时切：\`[ -z "$BASH_EXECUTION_STRING" ] && [ -t 1 ] && exec ${comm}\`（注意 PATH/nvm 等导出放在它之前）\n` +
+                `② 给这个 bot 配 \`launchShell: ${comm}\`（dashboard 机器人配置，或 \`/config launchShell ${comm}\`），直接用 \`${comm}\` 启动绕开 \`${expectedShell}\` 的 rc——但要确保 PATH/nvm 在 \`${comm}\` 的 rc 里。`;
+    }
+    else {
+        message =
+            `⚠️ 会话没能启动：pane 里还停在 \`${comm}\`，${cli} 没真正跑起来——我没把消息打进去（否则会被当 shell 命令执行）。\n\n` +
+                `可能原因：rc 文件启动过慢/报错，或 \`${cli}\` 的可执行文件不在 PATH 上（CLI 没找到）。\n` +
+                `建议：在 web 终端里手动敲一下启动命令看报什么错；确认 CLI 二进制能在 PATH 上找到；或精简 rc 启动逻辑后重启 daemon 再试。`;
+    }
+    send({ type: 'user_notify', turnId: currentBotmuxTurnId, message });
+    return true;
+}
 /**
  * Drain the pending message queue sequentially.
  * Async with isFlushing mutex: awaits each writeInput, then immediately
@@ -3277,6 +3389,8 @@ async function flushPending() {
         return;
     if (pendingMessages.length === 0)
         return; // nothing to flush — keep isPromptReady
+    if (bareShellLaunchBlocked)
+        return; // launch failed into a bare shell — don't type prompts into it
     // Ready-gate: hold the FIRST prompt until the SessionStart hook fires a true-
     // ready signal. A cjadk-style startup selector's ❯ falsely matches readyPattern
     // and would otherwise eat this message. releaseReadyGate() re-invokes us once
@@ -3326,6 +3440,21 @@ async function flushPending() {
         idleDetector?.reset();
     }
     try {
+        // Launch-failure guard, run ONCE per spawn on the first flush, BEFORE startup
+        // commands or any user prompt: if the pane leaf is a bare shell (the CLI never
+        // launched — e.g. a user rcfile that `exec`-trampolines into another shell, or
+        // a reattached persistent pane that has dropped back to a shell), don't type
+        // anything into it (it would just be `zsh: parse error`); surface one
+        // diagnostic and bail. Gated by its own one-shot (NOT hasRunStartupCommands)
+        // so it also covers reattach, where startup commands are intentionally
+        // skipped. Must precede runStartupCommands so a bot with startupCommands
+        // doesn't get them typed into the bare shell first.
+        if (!bareShellChecked) {
+            bareShellChecked = true;
+            if (detectBareShellLaunch()) {
+                return; // finally{} releases the mutex; pendingMessages stay queued, untouched
+            }
+        }
         // One-shot per spawn: type the bot's startup commands (e.g. `/effort
         // ultracode`) into the CLI before the first user prompt drains. Both ready
         // paths funnel through flushPending — the ready-gate settle for Claude-family
@@ -3693,16 +3822,38 @@ function setupAdoptTranscriptBridges(cfg) {
             codexBridgeStartTimer();
         }
     }
+    else if (cfg.cliId === 'pi') {
+        const adoptStartMs = Date.now();
+        codexAdoptStartMs = adoptStartMs;
+        codexBridgeQueue.setLocalTurns(true, adoptStartMs);
+        let path;
+        if (cfg.cliSessionId)
+            path = findPiTranscriptBySessionId(cfg.cliSessionId, cfg.adoptCwd ?? cfg.workingDir);
+        if (!path && cfg.adoptCliPid) {
+            const probed = findPiTranscriptByPid(cfg.adoptCliPid);
+            if (probed)
+                path = probed.path;
+        }
+        if (path) {
+            codexBridgeAttach(path, 'split-live');
+        }
+        else {
+            if (cfg.cliSessionId)
+                codexBridgePendingSessionId = cfg.cliSessionId;
+            codexAdoptPendingPid = cfg.adoptCliPid;
+            codexBridgeStartTimer();
+        }
+    }
 }
 function adoptIdleAdapter(cfg) {
     return cfg.bridgeJsonlPath
         ? createCliAdapterSync('claude-code', undefined)
-        : cfg.cliId === 'codex' || cfg.cliId === 'traex' || cfg.cliId === 'coco' || cfg.cliId === 'mtr'
+        : cfg.cliId === 'codex' || cfg.cliId === 'traex' || cfg.cliId === 'coco' || cfg.cliId === 'mtr' || cfg.cliId === 'pi'
             ? createCliAdapterSync(cfg.cliId, undefined)
             : { completionPattern: undefined, readyPattern: undefined };
 }
 function setupAdoptInputAdapter(cfg) {
-    if (cfg.cliId === 'codex' || cfg.cliId === 'traex') {
+    if (cfg.cliId === 'codex' || cfg.cliId === 'traex' || cfg.cliId === 'pi') {
         cliAdapter = createCliAdapterSync(cfg.cliId, cfg.cliPathOverride);
     }
     else if (cfg.cliId === 'mtr') {
@@ -3998,6 +4149,13 @@ function spawnCli(cfg) {
     // arm it. spawnCli is synchronous up to backend spawn, so this lands before
     // any flushPending consumes the flag.
     hasRunStartupCommands = !shouldRunStartupCommandsOnSpawn({ willReattachPersistent });
+    // Re-arm the bare-shell launch detector for this spawn (fresh OR reattach). It
+    // runs once on the first flush and only fires when the pane leaf is actually a
+    // bare shell, so a healthy reattach (leaf = the live CLI) self-excludes while a
+    // reattach onto a pane that has degraded to a bare shell still gets the
+    // diagnostic instead of having the prompt typed into it.
+    bareShellLaunchBlocked = false;
+    bareShellChecked = false;
     // ── Resume pre-flight check + two-tier fallback ──────────────────────────
     // Tier 1 (adapter probe): adapter.checkResumeTargetExists returns false
     // → skip --resume, spawn FRESH.
@@ -4365,6 +4523,7 @@ function spawnCli(cfg) {
         rows: PTY_ROWS,
         env: childEnv,
         injectEnv: perBotInjectKeys.length ? perBotInjectEnv : undefined,
+        launchShell: lastInitConfig?.launchShell,
     });
     // Write CLI PID marker so agent-facing subcommands (`botmux send`, etc.)
     // can verify they were spawned inside a botmux session by walking the
@@ -4565,6 +4724,22 @@ function spawnCli(cfg) {
             codexBridgeStartTimer();
         }
     }
+    else if (cfg.cliId === 'pi') {
+        const piSessionId = effectiveCliSessionId ?? effectiveAdapterSessionId;
+        if (piSessionId) {
+            const transcriptPath = findPiTranscriptBySessionId(piSessionId, cfg.workingDir);
+            if (transcriptPath) {
+                codexBridgeAttach(transcriptPath, effectiveResume ? 'baseline-existing' : 'fresh-empty');
+            }
+            else {
+                codexBridgePendingSessionId = piSessionId;
+                codexBridgeStartTimer();
+            }
+        }
+        else {
+            codexBridgeStartTimer();
+        }
+    }
     // Arm the ready-gate for FRESH Claude-family spawns (which inject the
     // SessionStart hook via --settings; see claude-code.ts buildArgs). Until
     // `botmux session-ready` fires (daemon → 'session_ready' IPC → releaseReadyGate)
@@ -4765,9 +4940,12 @@ function startWebServer(host, preferredPort) {
                 res.end('Bad Request');
                 return;
             }
-            const hasWrite = url.searchParams.get('token') === writeToken;
+            const tokenMatches = url.searchParams.get('token') === writeToken;
+            const { hasWrite, platformReadonly } = resolveTerminalWrite(req, tokenMatches);
+            const loginHdr = req.headers['x-botmux-login-url'];
+            const loginUrl = typeof loginHdr === 'string' && /^https?:\/\/[^"'<>\s]+$/.test(loginHdr) ? loginHdr : '';
             res.writeHead(200, { 'Content-Type': 'text/html; charset=utf-8' });
-            res.end(getTerminalHtml(hasWrite));
+            res.end(getTerminalHtml(hasWrite, platformReadonly, loginUrl));
         });
         wss = new WebSocketServer({ server: httpServer });
         wss.on('connection', (ws, req) => {
@@ -4780,7 +4958,8 @@ function startWebServer(host, preferredPort) {
                 ws.close(1008, 'Bad Request');
                 return;
             }
-            const hasWrite = url.searchParams.get('token') === writeToken;
+            const tokenMatches = url.searchParams.get('token') === writeToken;
+            const { hasWrite } = resolveTerminalWrite(req, tokenMatches);
             if (hasWrite)
                 authedClients.add(ws);
             log(`WS client connected (total: ${wsClients.size}, write: ${hasWrite})`);
@@ -5026,7 +5205,7 @@ function startWebServer(host, preferredPort) {
             .then(resolve, reject);
     });
 }
-function getTerminalHtml(hasWrite) {
+function getTerminalHtml(hasWrite, platformReadonly = false, loginUrl = '') {
     const label = sessionId.substring(0, 8);
     return `<!DOCTYPE html>
 <html>
@@ -5034,6 +5213,7 @@ function getTerminalHtml(hasWrite) {
 <meta charset="utf-8">
 <meta id="vp" name="viewport" content="width=device-width,initial-scale=1,viewport-fit=cover">
 <title>${cliName()} - ${label}</title>
+<link rel="icon" type="image/png" href="${TERMINAL_FAVICON_DATA_URI}">
 <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/@xterm/xterm@5/css/xterm.min.css">
 <style>
 *{margin:0;padding:0;box-sizing:border-box}
@@ -5073,11 +5253,17 @@ body.touch #terminal .xterm-screen *{
   background:rgba(247,118,142,0.12);border:1px solid rgba(247,118,142,0.35);border-radius:4px;
   backdrop-filter:blur(4px);-webkit-backdrop-filter:blur(4px)}
 #readonly-banner.show{display:inline-block}
+#login-banner{display:none;position:fixed;top:8px;left:50%;transform:translateX(-50%);z-index:50;
+  padding:4px 10px;font:12px monospace;color:#e0af68;white-space:nowrap;text-decoration:none;cursor:pointer;
+  background:rgba(224,175,104,0.12);border:1px solid rgba(224,175,104,0.35);border-radius:4px;
+  backdrop-filter:blur(4px);-webkit-backdrop-filter:blur(4px)}
+#login-banner.show{display:inline-block}
 </style>
 </head>
 <body>
 <div id="terminal"></div>
 <div id="readonly-banner">只读模式 · 无写入权限</div>
+${loginUrl ? `<a id="login-banner" href="${loginUrl}" target="_top" rel="noopener">owner 登录后可操作 →</a>` : '<div id="login-banner">owner 登录后可操作</div>'}
 <div id="toolbar">
   <button data-k="esc">Esc</button>
   <button data-k="ctrlc">^C</button>
@@ -5099,7 +5285,11 @@ body.touch #terminal .xterm-screen *{
 var isTouch='ontouchstart'in window||navigator.maxTouchPoints>0;
 if(isTouch){document.getElementById('vp').content='width=1100,viewport-fit=cover';document.body.classList.add('touch');}
 var hasToken=${hasWrite};
-if(!hasToken){var _rb=document.getElementById('readonly-banner');_rb.classList.add('show');_rb.addEventListener('click',function(){_rb.classList.remove('show')});}
+var platformReadonly=${platformReadonly};
+if(!hasToken){
+  if(platformReadonly){var _lb=document.getElementById('login-banner');_lb.classList.add('show');}
+  else{var _rb=document.getElementById('readonly-banner');_rb.classList.add('show');_rb.addEventListener('click',function(){_rb.classList.remove('show')});}
+}
 
 var term=new Terminal({
   theme:{background:'#1a1b26',foreground:'#a9b1d6',cursor:'#c0caf5',
@@ -5395,6 +5585,15 @@ process.on('message', async (raw) => {
                     adoptMode: msg.adoptMode === true,
                     passesInitialPromptViaArgs: cliAdapter?.passesInitialPromptViaArgs === true,
                 });
+                if (msg.prompt && cliAdapter?.passesInitialPromptViaArgs && !deferInitialPrompt && codexBridgeFallbackActive()) {
+                    // Args-baked first prompts (notably Pi) never pass through the normal
+                    // 'message' IPC path, so the structured bridge would otherwise see the
+                    // transcript final answer with no pending turn to attribute it to.
+                    // Mark it here before the CLI starts processing; late-attach is fine
+                    // because CodexBridgeQueue is path-agnostic until ingest discovers the
+                    // transcript file.
+                    codexBridgeMarkPendingTurn(msg.prompt, msg.turnId);
+                }
                 if (msg.prompt && (!cliAdapter?.passesInitialPromptViaArgs || deferInitialPrompt)) {
                     pendingMessages.push({ content: msg.prompt, turnId: msg.turnId });
                 }