context-lens 0.7.2 → 0.8.0

package/dist/cli-utils.d.ts

@@ -1,4 +1,4 @@
-import type { ToolConfig } from "./types.js";
+import type { MitmConfig, ToolConfig } from "./types.js";
 declare const KNOWN_REDACT_PRESETS: readonly ["secrets", "pii", "strict"];
 type RedactPreset = (typeof KNOWN_REDACT_PRESETS)[number];
 export interface ParsedCliArgs {
@@ -20,14 +20,15 @@ export declare function resolveCommandAlias(commandName: string): string;
 export declare function parseCliArgs(args: string[]): ParsedCliArgs;
 export declare function formatHelpText(): string;
 export declare const CLI_CONSTANTS: {
-    readonly PROXY_URL: "http://localhost:4040";
-    readonly MITM_PORT: 8080;
-    readonly MITM_PROXY_URL: "http://localhost:8080";
+    readonly PROXY_URL: string;
+    readonly PROXY_PORT: number;
+    readonly UI_PORT: number;
+    readonly UI_URL: string;
     readonly PI_AGENT_DIR_PREFIX: "/tmp/context-lens-pi-agent-";
     readonly BRYTI_DATA_DIR_PREFIX: "/tmp/context-lens-bryti-";
     readonly COMMAND_ALIASES: Record<string, string>;
     readonly KNOWN_PRIVACY_LEVELS: readonly ["minimal", "standard", "full"];
-    readonly MITM_ADDON_PATH: string;
 };
+export declare function getMitmConfig(): MitmConfig;
 export {};
 //# sourceMappingURL=cli-utils.d.ts.map

package/dist/cli-utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli-utils.d.ts","sourceRoot":"","sources":["../src/cli-utils.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAqB7C,QAAA,MAAM,oBAAoB,uCAAwC,CAAC;AACnE,KAAK,YAAY,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;AAM1D,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,OAAO,CAAC;IAClB,WAAW,EAAE,OAAO,CAAC;IACrB,MAAM,EAAE,OAAO,CAAC;IAChB,IAAI,EAAE,OAAO,CAAC;IACd,aAAa,EAAE,OAAO,CAAC;IACvB,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAqHD,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,UAAU,CAY1D;AAED,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAE/D;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,aAAa,CA0J1D;AAED,wBAAgB,cAAc,IAAI,MAAM,CAyEvC;AAGD,eAAO,MAAM,aAAa;;;;;;;;;CAUhB,CAAC"}
+{"version":3,"file":"cli-utils.d.ts","sourceRoot":"","sources":["../src/cli-utils.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AA2BzD,QAAA,MAAM,oBAAoB,uCAAwC,CAAC;AACnE,KAAK,YAAY,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;AAM1D,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,OAAO,CAAC;IAClB,WAAW,EAAE,OAAO,CAAC;IACrB,MAAM,EAAE,OAAO,CAAC;IAChB,IAAI,EAAE,OAAO,CAAC;IACd,aAAa,EAAE,OAAO,CAAC;IACvB,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AA2GD,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,UAAU,CAY1D;AAED,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAE/D;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,aAAa,CA0J1D;AAED,wBAAgB,cAAc,IAAI,MAAM,CAyEvC;AAGD,eAAO,MAAM,aAAa;;;;;;;;;CAShB,CAAC;AACX,wBAAgB,aAAa,IAAI,UAAU,CAU1C"}

package/dist/cli-utils.js

@@ -1,12 +1,15 @@
 import { dirname, join } from "node:path";
 import { fileURLToPath } from "node:url";
+import { loadConfig } from "./config.js";
 import { VERSION } from "./version.generated.js";
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = dirname(__filename);
 // Known tool config: env vars for the child process, extra CLI args, server env vars, and whether mitmproxy is needed
-const PROXY_URL = "http://localhost:4040";
-const MITM_PORT = 8080;
-const MITM_PROXY_URL = `http://localhost:${MITM_PORT}`;
+const config = loadConfig();
+const PROXY_PORT = Number.isNaN(config.proxy.port) ? 4040 : config.proxy.port;
+const PROXY_URL = `http://localhost:${PROXY_PORT}`;
+const UI_PORT = Number.isNaN(config.ui.port) ? 4041 : config.ui.port;
+const UI_URL = `http://localhost:${UI_PORT}`;
 const PI_AGENT_DIR_PREFIX = "/tmp/context-lens-pi-agent-";
 const BRYTI_DATA_DIR_PREFIX = "/tmp/context-lens-bryti-";
 const COMMAND_ALIASES = {
@@ -38,10 +41,7 @@ const TOOL_CONFIG = {
         // We use mitmproxy as a forward HTTPS proxy to intercept traffic.
         // The mitmproxy addon captures requests and POSTs them to the
         // analysis server's ingest API.
-        childEnv: {
-            https_proxy: MITM_PROXY_URL,
-            SSL_CERT_FILE: "", // filled in by cli.ts with mitmproxy CA cert path
-        },
+        childEnv: {},
         extraArgs: [],
         serverEnv: {},
         needsMitm: true,
@@ -54,11 +54,7 @@ const TOOL_CONFIG = {
         //
         // Cline is a Node.js process. Node ignores SSL_CERT_FILE and requires
         // NODE_EXTRA_CA_CERTS to trust the mitmproxy CA certificate.
-        childEnv: {
-            https_proxy: MITM_PROXY_URL,
-            SSL_CERT_FILE: "", // for any native/curl components
-            NODE_EXTRA_CA_CERTS: "", // filled in by cli.ts with mitmproxy CA cert path
-        },
+        childEnv: {},
         extraArgs: [],
         serverEnv: {},
         needsMitm: true,
@@ -90,10 +86,7 @@ const TOOL_CONFIG = {
         // and cannot be redirected via base URL env vars alone when using multiple
         // providers simultaneously. We use mitmproxy as a forward HTTPS proxy so
         // all provider traffic is captured regardless of which model is active.
-        childEnv: {
-            https_proxy: MITM_PROXY_URL,
-            SSL_CERT_FILE: "", // filled in by cli.ts with mitmproxy CA cert path
-        },
+        childEnv: {},
         extraArgs: [],
         serverEnv: {},
         needsMitm: true,
@@ -329,10 +322,10 @@ export function formatHelpText() {
         "  -h, --help             Show this help text",
         "  -v, --version          Show version",
         "  --privacy <level>      Set privacy level: minimal|standard|full",
-        "  --no-open              Don't auto-open http://localhost:4041",
+        `  --no-open              Don't auto-open ${UI_URL}`,
         "  --no-ui                Run proxy only (no analysis/web UI server)",
         "  --no-update-check      Skip npm update check for this run",
-        "  --mitm                 Use mitmproxy for interception instead of base URL override (pi only)",
+        "  --mitm                 Use mitmproxy for interception instead of base URL override (only recommend forcing for Pi)",
         "  --redact[=preset]      Strip sensitive data before capture (experimental). Preset: secrets|pii|strict (default: secrets)",
         "  --rehydrate            With --redact: restore original values in responses (off by default)",
         "",
@@ -372,13 +365,23 @@ export function formatHelpText() {
 // Exported for tests (and to keep cli.ts smaller).
 export const CLI_CONSTANTS = {
     PROXY_URL,
-    MITM_PORT,
-    MITM_PROXY_URL,
+    PROXY_PORT,
+    UI_PORT,
+    UI_URL,
     PI_AGENT_DIR_PREFIX,
     BRYTI_DATA_DIR_PREFIX,
     COMMAND_ALIASES,
     KNOWN_PRIVACY_LEVELS,
-    // Resolved relative to compiled output (dist/ or dist-test/), matching cli.ts behavior.
-    MITM_ADDON_PATH: join(__dirname, "..", "mitm_addon.py"),
 };
+export function getMitmConfig() {
+    const port = Number.isNaN(config.mitm.port) ? 8080 : config.mitm.port;
+    return {
+        port,
+        proxyUrl: `http://localhost:${port}`,
+        extraArgs: config.mitm.extraArgs,
+        addonPath: join(__dirname, "..", "mitm_addon.py"),
+        lensSource: config.mitm.lensSource,
+        lensSessionId: config.mitm.lensSessionId,
+    };
+}
 //# sourceMappingURL=cli-utils.js.map

package/dist/cli-utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli-utils.js","sourceRoot":"","sources":["../src/cli-utils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAGzC,OAAO,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AAEjD,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;AAEtC,sHAAsH;AACtH,MAAM,SAAS,GAAG,uBAAuB,CAAC;AAC1C,MAAM,SAAS,GAAG,IAAI,CAAC;AACvB,MAAM,cAAc,GAAG,oBAAoB,SAAS,EAAE,CAAC;AACvD,MAAM,mBAAmB,GAAG,6BAA6B,CAAC;AAC1D,MAAM,qBAAqB,GAAG,0BAA0B,CAAC;AACzD,MAAM,eAAe,GAA2B;IAC9C,EAAE,EAAE,QAAQ;IACZ,EAAE,EAAE,OAAO;IACX,EAAE,EAAE,QAAQ;IACZ,EAAE,EAAE,UAAU;CACf,CAAC;AACF,MAAM,oBAAoB,GAAG,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,CAAU,CAAC;AAGtE,MAAM,oBAAoB,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,QAAQ,CAAU,CAAC;AAGnE,SAAS,cAAc,CAAC,KAAa;IACnC,OAAQ,oBAA0C,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACrE,CAAC;AAiBD,SAAS,cAAc,CAAC,KAAa;IACnC,OAAQ,oBAA0C,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,WAAW,GAA+B;IAC9C,MAAM,EAAE;QACN,QAAQ,EAAE,EAAE,kBAAkB,EAAE,GAAG,SAAS,SAAS,EAAE;QACvD,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,KAAK;KACjB;IACD,KAAK,EAAE;QACL,6DAA6D;QAC7D,uEAAuE;QACvE,wEAAwE;QACxE,EAAE;QACF,kEAAkE;QAClE,8DAA8D;QAC9D,gCAAgC;QAChC,QAAQ,EAAE;YACR,WAAW,EAAE,cAAc;YAC3B,aAAa,EAAE,EAAE,EAAE,kDAAkD;SACtE;QACD,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,IAAI;KAChB;IACD,KAAK,EAAE;QACL,qEAAqE;QACrE,0EAA0E;QAC1E,oEAAoE;QACpE,qEAAqE;QACrE,EAAE;QACF,sEAAsE;QACtE,6DAA6D;QAC7D,QAAQ,EAAE;YACR,WAAW,EAAE,cAAc;YAC3B,aAAa,EAAE,EAAE,EAAE,iCAAiC;YACpD,mBAAmB,EAAE,EAAE,EAAE,kDAAkD;SAC5E;QACD,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,IAAI;KAChB;IACD,OAAO,EAAE;QACP,mEAAmE;QACnE,oEAAoE;QACpE,oDAAoD;QACpD,EAAE;QACF,0DAA0D;QAC1D,kEAAkE;QAClE,yDAAyD;QACzD,QAAQ,EAAE,EAAE,eAAe,EAAE,GAAG,SAAS,UAAU,EAAE;QACrD,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,EAAE,mBAAmB,EAAE,+BAA+B,EAAE;QACnE,SAAS,EAAE,KAAK;KACjB;IACD,KAAK,EAAE;QACL,QAAQ,EAAE;YACR,kBAAkB,EAAE,GAAG,SAAS,QAAQ;YACxC,eAAe,EAAE,GAAG,SAAS,QAAQ;SACtC;QACD,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,KAAK;KACjB;IACD,QAAQ,EAAE;QACR,wEAAwE;QACxE,2EAA2E;QAC3E,yEAAyE;QACzE,wEAAwE;QACxE,QAAQ,EAAE;YACR,WAAW,EAAE,cAAc;YAC3B,aAAa,EAAE,EAAE,EAAE,kDAAkD;SACtE;QACD,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,IAAI;KAChB;IACD,MAAM,EAAE;QACN,QAAQ,EAAE;YACR,sBAAsB,EAAE,GAAG,SAAS,UAAU,EAAE,oBAAoB;YACpE,sBAAsB,EAAE,GAAG,SAAS,UAAU,EAAE,sBAAsB;YACtE,oBAAoB,EAAE,GAAG,SAAS,SAAS,EAAE,0BAA0B;SACxE;QACD,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,KAAK;KACjB;IACD,EAAE,EAAE;QACF,0EAA0E;QAC1E,2DAA2D;QAC3D,QAAQ,EAAE;YACR,mBAAmB,EAAE,mBAAmB;SACzC;QACD,SAAS,EAAE,EAAE;QACb,qEAAqE;QACrE,uEAAuE;QACvE,SAAS,EAAE,EAAE,kCAAkC,EAAE,GAAG,EAAE;QACtD,SAAS,EAAE,KAAK;KACjB;IACD,KAAK,EAAE;QACL,yEAAyE;QACzE,0EAA0E;QAC1E,yEAAyE;QACzE,0EAA0E;QAC1E,QAAQ,EAAE;YACR,cAAc,EAAE,qBAAqB;SACtC;QACD,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,KAAK;KACjB;CACF,CAAC;AAEF,MAAM,UAAU,aAAa,CAAC,QAAgB;IAC5C,OAAO,CACL,WAAW,CAAC,QAAQ,CAAC,IAAI;QACvB,QAAQ,EAAE;YACR,kBAAkB,EAAE,GAAG,SAAS,IAAI,QAAQ,EAAE;YAC9C,eAAe,EAAE,GAAG,SAAS,IAAI,QAAQ,EAAE;SAC5C;QACD,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,KAAK;KACjB,CACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,WAAmB;IACrD,OAAO,eAAe,CAAC,WAAW,CAAC,IAAI,WAAW,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAc;IACzC,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,YAAgC,CAAC;IACrC,IAAI,YAAsC,CAAC;IAC3C,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,iBAAiB,GAAG,KAAK,CAAC;IAC9B,IAAI,iBAAiB,GAAG,CAAC,CAAC,CAAC;IAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACjB,iBAAiB,GAAG,IAAI,CAAC;YACzB,iBAAiB,GAAG,CAAC,GAAG,CAAC,CAAC;YAC1B,MAAM;QACR,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,iBAAiB,GAAG,CAAC,CAAC;YACtB,MAAM;QACR,CAAC;QACD,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACrC,QAAQ,GAAG,IAAI,CAAC;YAChB,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,WAAW,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACxC,WAAW,GAAG,IAAI,CAAC;YACnB,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,WAAW,EAAE,CAAC;YACxB,MAAM,GAAG,IAAI,CAAC;YACd,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,IAAI,GAAG,IAAI,CAAC;YACZ,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,mBAAmB,EAAE,CAAC;YAChC,aAAa,GAAG,IAAI,CAAC;YACrB,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;YACrB,OAAO,GAAG,IAAI,CAAC;YACf,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,UAAU,EAAE,CAAC;YACvB,YAAY,GAAG,SAAS,CAAC;YACzB,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,aAAa,EAAE,CAAC;YAC1B,SAAS,GAAG,IAAI,CAAC;YACjB,SAAS;QACX,CAAC;QACD,IAAI,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAChC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACnC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC3B,OAAO;oBACL,QAAQ;oBACR,WAAW;oBACX,MAAM;oBACN,IAAI;oBACJ,aAAa;oBACb,OAAO;oBACP,gBAAgB,EAAE,EAAE;oBACpB,KAAK,EAAE,iCAAiC,KAAK,sBAAsB,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;iBACrG,CAAC;YACJ,CAAC;YACD,YAAY,GAAG,KAAK,CAAC;YACrB,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,WAAW,EAAE,CAAC;YACxB,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBACzB,OAAO;oBACL,QAAQ;oBACR,WAAW;oBACX,MAAM;oBACN,IAAI;oBACJ,aAAa;oBACb,OAAO;oBACP,gBAAgB,EAAE,EAAE;oBACpB,KAAK,EACH,8EAA8E;iBACjF,CAAC;YACJ,CAAC;YACD,YAAY,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC3B,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QACD,IAAI,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YACjC,YAAY,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACpC,SAAS;QACX,CAAC;QACD,OAAO;YACL,QAAQ;YACR,WAAW;YACX,MAAM;YACN,IAAI;YACJ,aAAa;YACb,OAAO;YACP,gBAAgB,EAAE,EAAE;YACpB,KAAK,EAAE,0BAA0B,GAAG,yCAAyC;SAC9E,CAAC;IACJ,CAAC;IAED,IAAI,YAAY,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC,EAAE,CAAC;QAClD,OAAO;YACL,QAAQ;YACR,WAAW;YACX,MAAM;YACN,IAAI;YACJ,aAAa;YACb,OAAO;YACP,gBAAgB,EAAE,EAAE;YACpB,KAAK,EAAE,iCAAiC,YAAY,sBAAsB,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;SAC5G,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GACd,iBAAiB,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/D,MAAM,WAAW,GAAG,UAAU,CAAC,CAAC,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7E,MAAM,gBAAgB,GACpB,iBAAiB,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,iBAAiB,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAElE,IAAI,iBAAiB,IAAI,CAAC,UAAU,IAAI,CAAC,QAAQ,IAAI,CAAC,WAAW,EAAE,CAAC;QAClE,OAAO;YACL,QAAQ;YACR,WAAW;YACX,MAAM;YACN,IAAI;YACJ,aAAa;YACb,OAAO;YACP,YAAY;YACZ,YAAY;YACZ,SAAS;YACT,gBAAgB,EAAE,EAAE;YACpB,KAAK,EAAE,sCAAsC;SAC9C,CAAC;IACJ,CAAC;IAED,OAAO;QACL,QAAQ;QACR,WAAW;QACX,MAAM;QACN,IAAI;QACJ,aAAa;QACb,OAAO;QACP,YAAY;QACZ,YAAY;QACZ,SAAS;QACT,WAAW;QACX,gBAAgB;KACjB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,OAAO;QACL,iBAAiB,OAAO,EAAE;QAC1B,EAAE;QACF,QAAQ;QACR,6DAA6D;QAC7D,wDAAwD;QACxD,kEAAkE;QAClE,uBAAuB;QACvB,qBAAqB;QACrB,yDAAyD;QACzD,iDAAiD;QACjD,EAAE;QACF,WAAW;QACX,uBAAuB;QACvB,sBAAsB;QACtB,sBAAsB;QACtB,wBAAwB;QACxB,yBAAyB;QACzB,mBAAmB;QACnB,sBAAsB;QACtB,gEAAgE;QAChE,sCAAsC;QACtC,uBAAuB;QACvB,qBAAqB;QACrB,yCAAyC;QACzC,gEAAgE;QAChE,wDAAwD;QACxD,kEAAkE;QAClE,EAAE;QACF,iBAAiB;QACjB,8CAA8C;QAC9C,uCAAuC;QACvC,mEAAmE;QACnE,gEAAgE;QAChE,qEAAqE;QACrE,6DAA6D;QAC7D,gGAAgG;QAChG,4HAA4H;QAC5H,+FAA+F;QAC/F,EAAE;QACF,kBAAkB;QAClB,gBAAgB;QAChB,eAAe;QACf,gBAAgB;QAChB,kBAAkB;QAClB,EAAE;QACF,6CAA6C;QAC7C,+BAA+B;QAC/B,EAAE;QACF,wBAAwB;QACxB,oFAAoF;QACpF,0DAA0D;QAC1D,uDAAuD;QACvD,EAAE;QACF,QAAQ;QACR,6EAA6E;QAC7E,kIAAkI;QAClI,mGAAmG;QACnG,sIAAsI;QACtI,qHAAqH;QACrH,8CAA8C;QAC9C,2DAA2D;QAC3D,kEAAkE;QAClE,EAAE;QACF,kBAAkB;QAClB,sEAAsE;QACtE,uDAAuD;QACvD,6DAA6D;QAC7D,qEAAqE;QACrE,oEAAoE;QACpE,+DAA+D;KAChE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,mDAAmD;AACnD,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,SAAS;IACT,SAAS;IACT,cAAc;IACd,mBAAmB;IACnB,qBAAqB;IACrB,eAAe;IACf,oBAAoB;IACpB,wFAAwF;IACxF,eAAe,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,eAAe,CAAC;CAC/C,CAAC"}
+{"version":3,"file":"cli-utils.js","sourceRoot":"","sources":["../src/cli-utils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AAEjD,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;AAEtC,sHAAsH;AACtH,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;AAE5B,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;AAC9E,MAAM,SAAS,GAAG,oBAAoB,UAAU,EAAE,CAAC;AAEnD,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC;AACrE,MAAM,MAAM,GAAG,oBAAoB,OAAO,EAAE,CAAC;AAE7C,MAAM,mBAAmB,GAAG,6BAA6B,CAAC;AAC1D,MAAM,qBAAqB,GAAG,0BAA0B,CAAC;AACzD,MAAM,eAAe,GAA2B;IAC9C,EAAE,EAAE,QAAQ;IACZ,EAAE,EAAE,OAAO;IACX,EAAE,EAAE,QAAQ;IACZ,EAAE,EAAE,UAAU;CACf,CAAC;AAEF,MAAM,oBAAoB,GAAG,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,CAAU,CAAC;AAGtE,MAAM,oBAAoB,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,QAAQ,CAAU,CAAC;AAGnE,SAAS,cAAc,CAAC,KAAa;IACnC,OAAQ,oBAA0C,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACrE,CAAC;AAiBD,SAAS,cAAc,CAAC,KAAa;IACnC,OAAQ,oBAA0C,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,WAAW,GAA+B;IAC9C,MAAM,EAAE;QACN,QAAQ,EAAE,EAAE,kBAAkB,EAAE,GAAG,SAAS,SAAS,EAAE;QACvD,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,KAAK;KACjB;IACD,KAAK,EAAE;QACL,6DAA6D;QAC7D,uEAAuE;QACvE,wEAAwE;QACxE,EAAE;QACF,kEAAkE;QAClE,8DAA8D;QAC9D,gCAAgC;QAChC,QAAQ,EAAE,EAAE;QACZ,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,IAAI;KAChB;IACD,KAAK,EAAE;QACL,qEAAqE;QACrE,0EAA0E;QAC1E,oEAAoE;QACpE,qEAAqE;QACrE,EAAE;QACF,sEAAsE;QACtE,6DAA6D;QAC7D,QAAQ,EAAE,EAAE;QACZ,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,IAAI;KAChB;IACD,OAAO,EAAE;QACP,mEAAmE;QACnE,oEAAoE;QACpE,oDAAoD;QACpD,EAAE;QACF,0DAA0D;QAC1D,kEAAkE;QAClE,yDAAyD;QACzD,QAAQ,EAAE,EAAE,eAAe,EAAE,GAAG,SAAS,UAAU,EAAE;QACrD,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,EAAE,mBAAmB,EAAE,+BAA+B,EAAE;QACnE,SAAS,EAAE,KAAK;KACjB;IACD,KAAK,EAAE;QACL,QAAQ,EAAE;YACR,kBAAkB,EAAE,GAAG,SAAS,QAAQ;YACxC,eAAe,EAAE,GAAG,SAAS,QAAQ;SACtC;QACD,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,KAAK;KACjB;IACD,QAAQ,EAAE;QACR,wEAAwE;QACxE,2EAA2E;QAC3E,yEAAyE;QACzE,wEAAwE;QACxE,QAAQ,EAAE,EAAE;QACZ,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,IAAI;KAChB;IACD,MAAM,EAAE;QACN,QAAQ,EAAE;YACR,sBAAsB,EAAE,GAAG,SAAS,UAAU,EAAE,oBAAoB;YACpE,sBAAsB,EAAE,GAAG,SAAS,UAAU,EAAE,sBAAsB;YACtE,oBAAoB,EAAE,GAAG,SAAS,SAAS,EAAE,0BAA0B;SACxE;QACD,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,KAAK;KACjB;IACD,EAAE,EAAE;QACF,0EAA0E;QAC1E,2DAA2D;QAC3D,QAAQ,EAAE;YACR,mBAAmB,EAAE,mBAAmB;SACzC;QACD,SAAS,EAAE,EAAE;QACb,qEAAqE;QACrE,uEAAuE;QACvE,SAAS,EAAE,EAAE,kCAAkC,EAAE,GAAG,EAAE;QACtD,SAAS,EAAE,KAAK;KACjB;IACD,KAAK,EAAE;QACL,yEAAyE;QACzE,0EAA0E;QAC1E,yEAAyE;QACzE,0EAA0E;QAC1E,QAAQ,EAAE;YACR,cAAc,EAAE,qBAAqB;SACtC;QACD,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,KAAK;KACjB;CACF,CAAC;AAEF,MAAM,UAAU,aAAa,CAAC,QAAgB;IAC5C,OAAO,CACL,WAAW,CAAC,QAAQ,CAAC,IAAI;QACvB,QAAQ,EAAE;YACR,kBAAkB,EAAE,GAAG,SAAS,IAAI,QAAQ,EAAE;YAC9C,eAAe,EAAE,GAAG,SAAS,IAAI,QAAQ,EAAE;SAC5C;QACD,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,KAAK;KACjB,CACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,WAAmB;IACrD,OAAO,eAAe,CAAC,WAAW,CAAC,IAAI,WAAW,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAc;IACzC,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,YAAgC,CAAC;IACrC,IAAI,YAAsC,CAAC;IAC3C,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,iBAAiB,GAAG,KAAK,CAAC;IAC9B,IAAI,iBAAiB,GAAG,CAAC,CAAC,CAAC;IAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACjB,iBAAiB,GAAG,IAAI,CAAC;YACzB,iBAAiB,GAAG,CAAC,GAAG,CAAC,CAAC;YAC1B,MAAM;QACR,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,iBAAiB,GAAG,CAAC,CAAC;YACtB,MAAM;QACR,CAAC;QACD,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACrC,QAAQ,GAAG,IAAI,CAAC;YAChB,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,WAAW,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACxC,WAAW,GAAG,IAAI,CAAC;YACnB,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,WAAW,EAAE,CAAC;YACxB,MAAM,GAAG,IAAI,CAAC;YACd,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,IAAI,GAAG,IAAI,CAAC;YACZ,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,mBAAmB,EAAE,CAAC;YAChC,aAAa,GAAG,IAAI,CAAC;YACrB,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;YACrB,OAAO,GAAG,IAAI,CAAC;YACf,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,UAAU,EAAE,CAAC;YACvB,YAAY,GAAG,SAAS,CAAC;YACzB,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,aAAa,EAAE,CAAC;YAC1B,SAAS,GAAG,IAAI,CAAC;YACjB,SAAS;QACX,CAAC;QACD,IAAI,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAChC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACnC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC3B,OAAO;oBACL,QAAQ;oBACR,WAAW;oBACX,MAAM;oBACN,IAAI;oBACJ,aAAa;oBACb,OAAO;oBACP,gBAAgB,EAAE,EAAE;oBACpB,KAAK,EAAE,iCAAiC,KAAK,sBAAsB,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;iBACrG,CAAC;YACJ,CAAC;YACD,YAAY,GAAG,KAAK,CAAC;YACrB,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,WAAW,EAAE,CAAC;YACxB,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBACzB,OAAO;oBACL,QAAQ;oBACR,WAAW;oBACX,MAAM;oBACN,IAAI;oBACJ,aAAa;oBACb,OAAO;oBACP,gBAAgB,EAAE,EAAE;oBACpB,KAAK,EACH,8EAA8E;iBACjF,CAAC;YACJ,CAAC;YACD,YAAY,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC3B,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QACD,IAAI,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YACjC,YAAY,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACpC,SAAS;QACX,CAAC;QACD,OAAO;YACL,QAAQ;YACR,WAAW;YACX,MAAM;YACN,IAAI;YACJ,aAAa;YACb,OAAO;YACP,gBAAgB,EAAE,EAAE;YACpB,KAAK,EAAE,0BAA0B,GAAG,yCAAyC;SAC9E,CAAC;IACJ,CAAC;IAED,IAAI,YAAY,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC,EAAE,CAAC;QAClD,OAAO;YACL,QAAQ;YACR,WAAW;YACX,MAAM;YACN,IAAI;YACJ,aAAa;YACb,OAAO;YACP,gBAAgB,EAAE,EAAE;YACpB,KAAK,EAAE,iCAAiC,YAAY,sBAAsB,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;SAC5G,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GACd,iBAAiB,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/D,MAAM,WAAW,GAAG,UAAU,CAAC,CAAC,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7E,MAAM,gBAAgB,GACpB,iBAAiB,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,iBAAiB,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAElE,IAAI,iBAAiB,IAAI,CAAC,UAAU,IAAI,CAAC,QAAQ,IAAI,CAAC,WAAW,EAAE,CAAC;QAClE,OAAO;YACL,QAAQ;YACR,WAAW;YACX,MAAM;YACN,IAAI;YACJ,aAAa;YACb,OAAO;YACP,YAAY;YACZ,YAAY;YACZ,SAAS;YACT,gBAAgB,EAAE,EAAE;YACpB,KAAK,EAAE,sCAAsC;SAC9C,CAAC;IACJ,CAAC;IAED,OAAO;QACL,QAAQ;QACR,WAAW;QACX,MAAM;QACN,IAAI;QACJ,aAAa;QACb,OAAO;QACP,YAAY;QACZ,YAAY;QACZ,SAAS;QACT,WAAW;QACX,gBAAgB;KACjB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,OAAO;QACL,iBAAiB,OAAO,EAAE;QAC1B,EAAE;QACF,QAAQ;QACR,6DAA6D;QAC7D,wDAAwD;QACxD,kEAAkE;QAClE,uBAAuB;QACvB,qBAAqB;QACrB,yDAAyD;QACzD,iDAAiD;QACjD,EAAE;QACF,WAAW;QACX,uBAAuB;QACvB,sBAAsB;QACtB,sBAAsB;QACtB,wBAAwB;QACxB,yBAAyB;QACzB,mBAAmB;QACnB,sBAAsB;QACtB,gEAAgE;QAChE,sCAAsC;QACtC,uBAAuB;QACvB,qBAAqB;QACrB,yCAAyC;QACzC,gEAAgE;QAChE,wDAAwD;QACxD,kEAAkE;QAClE,EAAE;QACF,iBAAiB;QACjB,8CAA8C;QAC9C,uCAAuC;QACvC,mEAAmE;QACnE,4CAA4C,MAAM,EAAE;QACpD,qEAAqE;QACrE,6DAA6D;QAC7D,sHAAsH;QACtH,4HAA4H;QAC5H,+FAA+F;QAC/F,EAAE;QACF,kBAAkB;QAClB,gBAAgB;QAChB,eAAe;QACf,gBAAgB;QAChB,kBAAkB;QAClB,EAAE;QACF,6CAA6C;QAC7C,+BAA+B;QAC/B,EAAE;QACF,wBAAwB;QACxB,oFAAoF;QACpF,0DAA0D;QAC1D,uDAAuD;QACvD,EAAE;QACF,QAAQ;QACR,6EAA6E;QAC7E,kIAAkI;QAClI,mGAAmG;QACnG,sIAAsI;QACtI,qHAAqH;QACrH,8CAA8C;QAC9C,2DAA2D;QAC3D,kEAAkE;QAClE,EAAE;QACF,kBAAkB;QAClB,sEAAsE;QACtE,uDAAuD;QACvD,6DAA6D;QAC7D,qEAAqE;QACrE,oEAAoE;QACpE,+DAA+D;KAChE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,mDAAmD;AACnD,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,SAAS;IACT,UAAU;IACV,OAAO;IACP,MAAM;IACN,mBAAmB;IACnB,qBAAqB;IACrB,eAAe;IACf,oBAAoB;CACZ,CAAC;AACX,MAAM,UAAU,aAAa;IAC3B,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;IACtE,OAAO;QACL,IAAI;QACJ,QAAQ,EAAE,oBAAoB,IAAI,EAAE;QACpC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS;QAChC,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,eAAe,CAAC;QACjD,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU;QAClC,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa;KACzC,CAAC;AACJ,CAAC"}

package/dist/cli.js

@@ -8,13 +8,27 @@ import net from "node:net";
 import { homedir, platform, tmpdir } from "node:os";
 import { dirname, isAbsolute, join, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
-import { CLI_CONSTANTS, formatHelpText, getToolConfig, parseCliArgs, } from "./cli-utils.js";
+import { CLI_CONSTANTS, formatHelpText, getMitmConfig, getToolConfig, parseCliArgs, } from "./cli-utils.js";
 import { loadConfig } from "./config.js";
 import { VERSION } from "./version.generated.js";
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = dirname(__filename);
 // Known tool config: env vars for the child process, extra CLI args, server env vars, and whether mitmproxy is needed
 // Note: actual tool config lives in cli-utils.ts so it can be unit-tested without importing this entrypoint.
+function resolveLensSource(setting, commandName) {
+    if (setting === "commandName")
+        return commandName;
+    if (setting === "auto")
+        return "";
+    return setting; // fixed string
+}
+function resolveLensSessionId(setting) {
+    if (setting === "random")
+        return randomBytes(4).toString("hex");
+    if (setting === "none")
+        return "";
+    return setting; // fixed string
+}
 const LOCKFILE = "/tmp/context-lens.lock";
 const rawArgs = process.argv.slice(2);
 const parsedArgs = parseCliArgs(rawArgs);
@@ -32,17 +46,24 @@ if (parsedArgs.showVersion) {
 }
 // Load user config — CLI flags take precedence over config file values
 const userConfig = loadConfig();
-const privacyLevel = parsedArgs.privacyLevel ?? userConfig.privacy.level;
-if (privacyLevel !== undefined) {
-    process.env.CONTEXT_LENS_PRIVACY = privacyLevel;
-}
-const redactPreset = parsedArgs.redactPreset ?? userConfig.proxy.redact;
-if (redactPreset !== undefined) {
-    process.env.CONTEXT_LENS_REDACT = redactPreset;
+const envKeyToValue = {
+    CONTEXT_LENS_PROXY_PORT: String(CLI_CONSTANTS.PROXY_PORT),
+    CONTEXT_LENS_ANALYSIS_PORT: String(CLI_CONSTANTS.UI_PORT),
+    CONTEXT_LENS_ANALYSIS_URL: CLI_CONSTANTS.UI_URL,
+    CONTEXT_LENS_INGEST_URL: CLI_CONSTANTS.UI_URL + "/api/ingest",
+};
+for (const [key, value] of Object.entries(envKeyToValue)) {
+    if (!process.env[key])
+        process.env[key] = value;
 }
-const rehydrate = parsedArgs.rehydrate ?? userConfig.proxy.rehydrate;
-if (rehydrate) {
-    process.env.CONTEXT_LENS_REHYDRATE = "1";
+const envOverrides = {
+    CONTEXT_LENS_PRIVACY: parsedArgs.privacyLevel ?? userConfig.privacy.level,
+    CONTEXT_LENS_REDACT: parsedArgs.redactPreset ?? userConfig.proxy.redact,
+    CONTEXT_LENS_REHYDRATE: (parsedArgs.rehydrate ?? userConfig.proxy.rehydrate) ? "1" : undefined,
+};
+for (const [key, value] of Object.entries(envOverrides)) {
+    if (value !== undefined)
+        process.env[key] = value;
 }
 if (!parsedArgs.noUpdateCheck &&
     process.env.CONTEXT_LENS_NO_UPDATE_CHECK !== "1") {
@@ -60,7 +81,15 @@ else if (parsedArgs.commandName === "stop") {
 else if (parsedArgs.commandName === "background") {
     void runBackgroundCommand(parsedArgs.commandArguments, parsedArgs.noUi).then((exitCode) => process.exit(exitCode));
 }
-else if (!parsedArgs.commandName) {
+else if (!parsedArgs.commandName && !parsedArgs.useMitm) {
+    // Warn if PI_CODING_AGENT_DIR is set in the environment but no command was
+    // given. The user likely expected this to launch pi — point them to the
+    // correct invocation before dropping into standalone mode.
+    if (process.env.PI_CODING_AGENT_DIR) {
+        console.error("Warning: PI_CODING_AGENT_DIR is set but no command was given.");
+        console.error("To capture pi traffic, run: context-lens pi [pi-args...]");
+        console.error("Starting standalone mode (proxy + analysis server) instead.");
+    }
     if (parsedArgs.noUi) {
         // Standalone mode (no UI): start proxy only
         const proxyPath = join(__dirname, "proxy", "server.js");
@@ -86,7 +115,7 @@ else if (!parsedArgs.commandName) {
             stdio: "inherit",
             env: {
                 ...process.env,
-                CONTEXT_LENS_ANALYSIS_URL: "http://localhost:4041",
+                CONTEXT_LENS_ANALYSIS_URL: CLI_CONSTANTS.UI_URL,
             },
         });
         const analysis = spawn("node", [analysisPath], {
@@ -109,31 +138,38 @@ else if (!parsedArgs.commandName) {
     }
 }
 else {
-    const commandName = parsedArgs.commandName;
+    const commandName = parsedArgs.commandName ?? "";
     const commandArguments = parsedArgs.commandArguments;
     const noOpen = parsedArgs.noOpen || userConfig.ui.noOpen;
     const noUi = parsedArgs.noUi;
     const useMitm = parsedArgs.useMitm;
-    // Get tool-specific config, with optional mitmproxy override for pi
+    const mitmConfig = getMitmConfig();
     let toolConfig = getToolConfig(commandName);
-    if (useMitm && commandName === "pi") {
+    if (useMitm || toolConfig.needsMitm) {
+        // if mitm is specified on the CLI or the tool always requires mitm we replace the normal reverse_proxy/forced provider urls with forward proxy redirection.
         toolConfig = {
             ...toolConfig,
             childEnv: {
-                https_proxy: `http://localhost:${CLI_CONSTANTS.MITM_PORT}`,
-                SSL_CERT_FILE: "", // filled in below with mitmproxy CA cert path
+                https_proxy: mitmConfig.proxyUrl,
+                NPM_CONFIG_HTTPS_PROXY: mitmConfig.proxyUrl,
+                WSS_PROXY: mitmConfig.proxyUrl,
+                NODE_USE_ENV_PROXY: "1",
+                //these are all filled in with the CA cert path
+                SSL_CERT_FILE: "[CA_CERT_PATH]",
+                NODE_EXTRA_CA_CERTS: "[CA_CERT_PATH]",
+                REQUESTS_CA_BUNDLE: "[CA_CERT_PATH]",
             },
             needsMitm: true,
         };
     }
     if (noUi && toolConfig.needsMitm) {
-        console.error("Error: --no-ui is not supported for this command because mitm capture requires the analysis ingest API on :4041.");
+        console.error(`Error: --no-ui is not supported for this command because mitm capture requires the analysis ingest API on :${CLI_CONSTANTS.UI_PORT}.`);
         process.exit(1);
     }
     // Check if proxy is already running
     function isProxyRunning() {
         return new Promise((resolve) => {
-            const socket = net.connect({ port: 4040, host: "localhost" }, () => {
+            const socket = net.connect({ port: CLI_CONSTANTS.PROXY_PORT, host: "localhost" }, () => {
                 socket.end();
                 resolve(true);
             });
@@ -210,7 +246,7 @@ else {
     // Check if analysis server is already running
     function isAnalysisRunning() {
         return new Promise((resolve) => {
-            const socket = net.connect({ port: 4041, host: "localhost" }, () => {
+            const socket = net.connect({ port: CLI_CONSTANTS.UI_PORT, host: "localhost" }, () => {
                 socket.end();
                 resolve(true);
             });
@@ -247,7 +283,7 @@ else {
             ...toolConfig.serverEnv,
             ...process.env,
             CONTEXT_LENS_CLI: "1",
-            CONTEXT_LENS_ANALYSIS_URL: "http://localhost:4041",
+            CONTEXT_LENS_ANALYSIS_URL: CLI_CONSTANTS.UI_URL,
         };
         // Start proxy
         if (proxyAlreadyRunning) {
@@ -332,7 +368,7 @@ else {
         // Open browser after a short delay (only when starting new servers)
         if (!noOpen && requiresAnalysis) {
             setTimeout(() => {
-                openBrowser("http://localhost:4041");
+                openBrowser(CLI_CONSTANTS.UI_URL);
             }, 1000);
         }
         // If both were already ready (mixed scenario), check now
@@ -345,22 +381,49 @@ else {
             startChild();
             return;
         }
-        const addonPath = CLI_CONSTANTS.MITM_ADDON_PATH;
+        // Pre-flight: check if the mitm port is already in use.
+        // Without this, mitmproxy exits silently and the poll loop connects
+        // to whatever is already on that port, falsely reporting success.
+        const probe = net.connect({ port: mitmConfig.port, host: "localhost" }, () => {
+            probe.end();
+            console.error(`\nError: port ${mitmConfig.port} is already in use (mitmproxy cannot bind).`);
+            console.error(`Set a different port in ~/.context-lens/config.toml:\n\n  [mitm]\n  port = 8082\n`);
+            cleanup(1);
+        });
+        probe.on("error", () => {
+            // Port is free, proceed
+            startMitm();
+        });
+        probe.setTimeout(500, () => {
+            probe.destroy();
+            startMitm();
+        });
+    }
+    function startMitm() {
+        const addonPath = mitmConfig.addonPath;
         console.log("🔒 Starting mitmproxy (forward proxy for HTTPS interception)...");
         mitmProcess = spawn("mitmdump", [
             "-s",
             addonPath,
             "--quiet",
             "--listen-port",
-            String(CLI_CONSTANTS.MITM_PORT),
+            String(mitmConfig.port),
+            ...mitmConfig.extraArgs,
         ], {
             stdio: ["ignore", "pipe", "pipe"],
             env: {
                 ...process.env,
-                CONTEXT_LENS_SOURCE: commandName,
-                CONTEXT_LENS_SESSION_ID: randomBytes(4).toString("hex"),
+                CONTEXT_LENS_SOURCE: resolveLensSource(mitmConfig.lensSource, commandName),
+                CONTEXT_LENS_SESSION_ID: resolveLensSessionId(mitmConfig.lensSessionId),
             },
         });
+        // Capture stderr so binding errors ("address already in use") are visible.
+        let mitmStderr = "";
+        if (mitmProcess.stderr) {
+            mitmProcess.stderr.on("data", (chunk) => {
+                mitmStderr += chunk.toString();
+            });
+        }
         mitmProcess.on("error", (err) => {
             console.error("Failed to start mitmproxy:", err.message);
             console.error("Install it: pipx install mitmproxy");
@@ -368,18 +431,24 @@ else {
         });
         mitmProcess.on("exit", (code) => {
             if (!mitmReady) {
-                console.error("mitmproxy exited unexpectedly");
+                const detail = mitmStderr.trim();
+                if (detail) {
+                    console.error(`mitmproxy failed to start:\n${detail}`);
+                }
+                else {
+                    console.error("mitmproxy exited unexpectedly");
+                }
                 cleanup(code || 1);
             }
         });
         // Poll until mitmproxy is accepting connections
         const pollMitm = setInterval(() => {
-            const socket = net.connect({ port: CLI_CONSTANTS.MITM_PORT, host: "localhost" }, () => {
+            const socket = net.connect({ port: mitmConfig.port, host: "localhost" }, () => {
                 socket.end();
                 if (!mitmReady) {
                     mitmReady = true;
                     clearInterval(pollMitm);
-                    console.log(`🔒 mitmproxy listening on port ${CLI_CONSTANTS.MITM_PORT}`);
+                    console.log(`🔒 mitmproxy listening on port ${mitmConfig.port}`);
                     startChild();
                 }
             });
@@ -391,7 +460,9 @@ else {
     function startChild() {
         // Inject extra args (e.g. codex -c chatgpt_base_url=...) before user args
         const allArgs = [...toolConfig.extraArgs, ...commandArguments];
-        console.log(`\n🚀 Launching: ${commandName} ${allArgs.join(" ")}\n`);
+        if (commandName) {
+            console.log(`\n🚀 Launching: ${commandName} ${allArgs.join(" ")}\n`);
+        }
         const childEnv = {
             ...process.env,
             ...toolConfig.childEnv,
@@ -421,7 +492,7 @@ else {
                 if (typeof val !== "string")
                     continue;
                 // Match any value that points at our proxy and ends with /<source> or /<source>/
-                const proxyBase = `http://localhost:4040/`;
+                const proxyBase = `${CLI_CONSTANTS.PROXY_URL}/`;
                 if (!val.startsWith(proxyBase))
                     continue;
                 const hadTrailingSlash = val.endsWith("/");
@@ -434,15 +505,14 @@ else {
             }
         }
         // Fill in mitmproxy CA cert path for tools that need HTTPS interception.
-        // SSL_CERT_FILE is used by OpenSSL/curl (native binaries).
-        // NODE_EXTRA_CA_CERTS is used by Node.js processes (e.g. Cline).
+        // Any childEnv value set to "[CA_CERT_PATH]" is replaced with the actual path.
         if (toolConfig.needsMitm) {
             const certPath = join(homedir(), ".mitmproxy", "mitmproxy-ca-cert.pem");
             if (fs.existsSync(certPath)) {
-                if (childEnv.SSL_CERT_FILE === "")
-                    childEnv.SSL_CERT_FILE = certPath;
-                if (childEnv.NODE_EXTRA_CA_CERTS === "")
-                    childEnv.NODE_EXTRA_CA_CERTS = certPath;
+                for (const key of Object.keys(childEnv)) {
+                    if (childEnv[key] === "[CA_CERT_PATH]")
+                        childEnv[key] = certPath;
+                }
                 // On macOS, Codex is compiled with rustls + native-roots, which reads
                 // the system Keychain and ignores SSL_CERT_FILE entirely. If the cert
                 // is not trusted in the Keychain, Codex cannot connect through mitmproxy.
@@ -457,6 +527,13 @@ else {
         if (commandName === "pi" && !useMitm) {
             childEnv.PI_CODING_AGENT_DIR = preparePiAgentDir(childEnv.PI_CODING_AGENT_DIR, sessionTag);
         }
+        if (!commandName) {
+            //we only get here when the user wants mitm but didn't specify a command
+            console.log("Press Ctrl+C to stop.");
+            process.on("SIGINT", () => cleanup(0));
+            process.on("SIGTERM", () => cleanup(0));
+            return;
+        }
         // For bryti: if dist/cli.js exists in cwd, use it directly (dev mode).
         // Otherwise fall back to the globally installed bryti binary.
         let spawnCommand = commandName;
@@ -475,8 +552,14 @@ else {
         childProcess.on("error", (err) => {
             if (err.code === "ENOENT") {
                 console.error(`\nFailed to start '${commandName}': command not found.`);
-                console.error("Try a known tool (claude, codex, gemini, aider, pi) or use:");
-                console.error("  context-lens -- <your-command> [args...]");
+                if (commandName === "pi") {
+                    console.error("Install pi: npm install -g @mariozechner/pi-coding-agent");
+                    console.error("Or run from its directory: context-lens -- node dist/cli.js");
+                }
+                else {
+                    console.error("Try a known tool (claude, codex, gemini, aider, pi) or use:");
+                    console.error("  context-lens -- <your-command> [args...]");
+                }
                 cleanup(127);
                 return;
             }
@@ -493,7 +576,7 @@ else {
             setTimeout(() => {
                 if (cleanupDidRun)
                     return;
-                const req = http.get("http://localhost:4041/api/requests?summary=true", { timeout: 2000 }, (res) => {
+                const req = http.get(`${CLI_CONSTANTS.UI_URL}/api/requests?summary=true`, { timeout: 2000 }, (res) => {
                     let body = "";
                     res.setEncoding("utf8");
                     res.on("data", (chunk) => {
@@ -506,10 +589,10 @@ else {
                                 data.conversations.length === 0) {
                                 console.error("\n⚠️  No API traffic captured yet. If the tool is running, it may not be routing through the proxy.");
                                 if (toolConfig.needsMitm) {
-                                    console.error(`   Check that ${commandName} is routing through mitmproxy (https_proxy=http://localhost:8080).\n`);
+                                    console.error(`   Check that ${commandName} is routing through mitmproxy (https_proxy=${mitmConfig.proxyUrl}).\n`);
                                 }
                                 else {
-                                    console.error(`   Check that ${commandName} is using the proxy URL (http://localhost:4040).\n`);
+                                    console.error(`   Check that ${commandName} is using the proxy URL (${CLI_CONSTANTS.PROXY_URL}).\n`);
                                 }
                             }
                         }
@@ -1036,7 +1119,7 @@ async function backgroundStart(noUi) {
     const proxyEnv = {
         ...process.env,
         CONTEXT_LENS_CLI: "1",
-        ...(noUi ? {} : { CONTEXT_LENS_ANALYSIS_URL: "http://localhost:4041" }),
+        ...(noUi ? {} : { CONTEXT_LENS_ANALYSIS_URL: CLI_CONSTANTS.UI_URL }),
     };
     const proxy = spawn("node", [proxyPath], {
         stdio: "ignore",
@@ -1077,9 +1160,9 @@ async function backgroundStart(noUi) {
         startedAt: new Date().toISOString(),
     });
     console.log("Background services started.");
-    console.log(`  proxy: http://localhost:4040 (pid ${proxyPid})`);
+    console.log(`  proxy: ${CLI_CONSTANTS.PROXY_URL} (pid ${proxyPid})`);
     if (analysisPid != null) {
-        console.log(`  analysis/web UI: http://localhost:4041 (pid ${analysisPid})`);
+        console.log(`  analysis/web UI: ${CLI_CONSTANTS.UI_URL} (pid ${analysisPid})`);
     }
     else {
         console.log("  analysis/web UI: disabled (--no-ui)");
@@ -1222,10 +1305,10 @@ async function runDoctor() {
     }
     console.log(`Context Lens doctor v${VERSION}`);
     report("node", true, process.version);
-    const proxyListening = await isPortListening(4040);
-    report("proxy port :4040", true, proxyListening ? "already running" : "available/not running");
-    const analysisListening = await isPortListening(4041);
-    report("analysis port :4041", true, analysisListening ? "already running" : "available/not running");
+    const proxyListening = await isPortListening(CLI_CONSTANTS.PROXY_PORT);
+    report(`proxy port :${CLI_CONSTANTS.PROXY_PORT}`, true, proxyListening ? "already running" : "available/not running");
+    const analysisListening = await isPortListening(CLI_CONSTANTS.UI_PORT);
+    report(`analysis port :${CLI_CONSTANTS.UI_PORT}`, true, analysisListening ? "already running" : "available/not running");
     // mitmproxy is only needed for Codex subscription mode, so report as
     // informational rather than a hard failure.
     const mitmdumpPath = findBinaryOnPath("mitmdump");