free-pi-cli 0.5.2 → 0.6.0

package/dist/{main-43bb5vjt.js → main-98djq99p.js}

@@ -6,7 +6,7 @@ import {
 
 // src/main.ts
 import { realpathSync as realpathSync3, writeFileSync as writeFileSync3 } from "node:fs";
-import { dirname as dirname9, join as join10 } from "node:path";
+import { dirname as dirname10, join as join11 } from "node:path";
 
 // src/browser.ts
 import { spawn } from "node:child_process";
@@ -14408,11 +14408,16 @@ var GuestStartRequestSchema = exports_external.object({
   signup_src: exports_external.string().optional(),
   referral_code: exports_external.string().optional()
 });
+var ExperimentVariantSchema = exports_external.enum(["control", "treatment"]);
+var ExperimentAssignmentSchema = exports_external.object({
+  guest_handoff: ExperimentVariantSchema.optional()
+});
 var GuestStartResponseSchema = exports_external.object({
   token: exports_external.string(),
   guest: exports_external.literal(true),
   allowance_usd: exports_external.string(),
-  remaining_usd: exports_external.string()
+  remaining_usd: exports_external.string(),
+  experiments: ExperimentAssignmentSchema.optional()
 });
 var GuestUnavailableResponseSchema = exports_external.object({
   code: exports_external.literal("guest_unavailable"),
@@ -14424,10 +14429,15 @@ var FunnelEventRequestSchema = exports_external.object({
   session_id: exports_external.string().uuid().optional()
 });
 var ReturnBonusTelemetrySchema = exports_external.object({
-  type: exports_external.literal("card_shown")
+  type: exports_external.enum(["card_shown", "credits_back"])
+});
+var ExperimentExposureSchema = exports_external.object({
+  experiment: exports_external.enum(["resume_on_launch"]),
+  event: exports_external.enum(["offer_shown", "offer_accepted"])
 });
 var ReturnBonusSurfaceSchema = exports_external.object({
   show_card: exports_external.boolean(),
+  credits_back: exports_external.boolean(),
   day2_granted: exports_external.boolean(),
   day7_granted: exports_external.boolean()
 });
@@ -14448,9 +14458,15 @@ var MeResponseSchema = exports_external.object({
   refill_at: exports_external.string().optional(),
   lane: UsageLaneSchema.optional(),
   bonus_credits: exports_external.number().optional(),
+  bonus_wallet_credits: exports_external.number().optional(),
+  use_bonus: exports_external.string().optional(),
   guest: exports_external.boolean().optional(),
   guest_prompt_login: exports_external.boolean().optional(),
-  return_bonus: ReturnBonusSurfaceSchema.optional()
+  guest_requests_remaining: exports_external.number().int().optional(),
+  guest_near_wall: exports_external.boolean().optional(),
+  experiments: ExperimentAssignmentSchema.optional(),
+  return_bonus: ReturnBonusSurfaceSchema.optional(),
+  visible_allowance: exports_external.boolean().optional()
 });
 var MeStatsResponseSchema = exports_external.object({
   user_id: exports_external.string(),
@@ -14466,6 +14482,8 @@ var MeStatsResponseSchema = exports_external.object({
   refill_at: exports_external.string(),
   lane: UsageLaneSchema,
   bonus_credits: exports_external.number(),
+  bonus_wallet_credits: exports_external.number().optional(),
+  use_bonus: exports_external.string().optional(),
   request_count_today: exports_external.number(),
   prompt_tokens_today: exports_external.number(),
   completion_tokens_today: exports_external.number(),
@@ -14477,6 +14495,9 @@ var MeStatsResponseSchema = exports_external.object({
   }),
   guest: exports_external.boolean().optional(),
   guest_prompt_login: exports_external.boolean().optional(),
+  guest_requests_remaining: exports_external.number().int().optional(),
+  guest_near_wall: exports_external.boolean().optional(),
+  experiments: ExperimentAssignmentSchema.optional(),
   return_bonus: ReturnBonusSurfaceSchema.optional()
 });
 var AdSlotSchema = exports_external.enum(["banner", "inline"]);
@@ -14530,7 +14551,8 @@ var ClientVersionResponseSchema = exports_external.object({
   model: exports_external.string().optional(),
   notice: exports_external.string().optional(),
   models: exports_external.array(exports_external.object({ id: exports_external.string(), name: exports_external.string(), section: exports_external.string().optional() })).optional(),
-  fusion: exports_external.object({ planner: exports_external.string(), executor: exports_external.string() }).optional()
+  fusion: exports_external.object({ planner: exports_external.string(), executor: exports_external.string() }).optional(),
+  experiments: exports_external.record(exports_external.string(), exports_external.object({ variant: exports_external.enum(["control", "treatment"]) }).passthrough()).optional()
 });
 var SessionResetResponseSchema = exports_external.object({
   released: exports_external.boolean()
@@ -14596,6 +14618,12 @@ var ConfigSchema = exports_external.object({
   providerDataCollection: exports_external.enum(["allow", "deny"]).optional(),
   promptCacheEnabled: exports_external.boolean().default(false),
   emailCaptureEnabled: exports_external.boolean().default(false),
+  lifecycleEmailExperimentEnabled: exports_external.boolean().default(false),
+  lifecycleEmailEnabled: exports_external.boolean().default(false),
+  lifecycleEmailSend: exports_external.boolean().default(false),
+  emailProviderConfigured: exports_external.boolean().default(false),
+  emailFrom: exports_external.string().optional(),
+  emailProviderUrl: exports_external.string().optional(),
   hiveEnabled: exports_external.boolean().default(false),
   providerOrder: exports_external.array(exports_external.string()).optional(),
   tierNewMaxDays: exports_external.number().int().default(30),
@@ -14607,6 +14635,7 @@ var ConfigSchema = exports_external.object({
   fallbackLaneMinHeadroomBps: exports_external.number().int().default(1000),
   queueWaitRetryAfterSeconds: exports_external.number().int().default(0),
   sessionLeaseTtlMinutes: exports_external.number().int().default(30),
+  signedInMaxCliSessions: exports_external.number().int().min(1).default(4),
   minCliVersion: exports_external.string().default("0.0.0"),
   latestCliVersion: exports_external.string().default("0.2.0"),
   abuseWindowMinutes: exports_external.number().int().default(30),
@@ -14623,13 +14652,14 @@ var ConfigSchema = exports_external.object({
   abuseRestrictedHourlyCap: exports_external.number().int().default(5),
   abuseNormalHourlyCap: exports_external.number().int().default(30),
   abuseSignedInNormalHourlyCap: exports_external.number().int().default(0),
+  abuseDay0SkipHourly: exports_external.boolean().default(true),
   abuseFlipAlertThreshold: exports_external.number().int().default(10),
   abuseAdBypassMinRequests: exports_external.number().int().default(20),
   abuseAdBypassRatio: exports_external.number().int().default(10),
   traceMaxInflightWrites: exports_external.number().int().default(32),
   catalogCacheTtlSeconds: exports_external.number().int().default(60),
   eventMaxInflightWrites: exports_external.number().int().default(128),
-  guestEnabled: exports_external.boolean().default(true),
+  guestEnabled: exports_external.boolean().default(false),
   guestAllowanceMicros: exports_external.bigint().default(30000n),
   guestGlobalDailyCapMicros: exports_external.bigint().default(3000000n),
   guestIpSessionsPerDay: exports_external.number().int().default(8),
@@ -14639,10 +14669,12 @@ var ConfigSchema = exports_external.object({
   guestIpHashRetentionDays: exports_external.number().int().default(7),
   returnBonusDay2Credits: exports_external.number().int().default(2000),
   returnBonusDay7Credits: exports_external.number().int().default(1000),
+  returnNudgeEmailEnabled: exports_external.boolean().default(false),
   referralBonusCreditsPerDay: exports_external.number().int().default(5000),
   referralBonusDays: exports_external.number().int().default(30),
   referralMaxActivePerReferrer: exports_external.number().int().default(10),
-  referralGithubMinAgeDays: exports_external.number().int().default(30)
+  referralGithubMinAgeDays: exports_external.number().int().default(30),
+  referralCreditGrantCredits: exports_external.number().int().default(0)
 });
 function envNumber(value) {
   if (value === undefined || value === "")
@@ -14702,6 +14734,12 @@ function loadConfig(env = process.env) {
     providerDataCollection: env.PROVIDER_DATA_COLLECTION || undefined,
     promptCacheEnabled: envBoolean(env.PROMPT_CACHE_ENABLED),
     emailCaptureEnabled: envBoolean(env.EMAIL_CAPTURE_ENABLED),
+    lifecycleEmailExperimentEnabled: envBoolean(env.LIFECYCLE_EMAIL_EXPERIMENT),
+    lifecycleEmailEnabled: envBoolean(env.LIFECYCLE_EMAIL_ENABLED),
+    lifecycleEmailSend: envBoolean(env.LIFECYCLE_EMAIL_SEND),
+    emailProviderConfigured: env.EMAIL_PROVIDER_KEY ? env.EMAIL_PROVIDER_KEY.trim().length > 0 : undefined,
+    emailFrom: env.EMAIL_FROM?.trim() || undefined,
+    emailProviderUrl: env.EMAIL_PROVIDER_URL?.trim() || undefined,
     hiveEnabled: envBoolean(env.HIVE_ENABLED),
     providerOrder: envList(env.PROVIDER_ORDER),
     tierNewMaxDays: envNumber(env.TIER_NEW_MAX_DAYS),
@@ -14713,6 +14751,7 @@ function loadConfig(env = process.env) {
     fallbackLaneMinHeadroomBps: envNumber(env.FALLBACK_LANE_MIN_HEADROOM_BPS),
     queueWaitRetryAfterSeconds: envNumber(env.QUEUE_WAIT_RETRY_AFTER_SECONDS),
     sessionLeaseTtlMinutes: envNumber(env.SESSION_LEASE_TTL_MINUTES),
+    signedInMaxCliSessions: envNumber(env.SIGNED_IN_MAX_CLI_SESSIONS),
     minCliVersion: env.MIN_CLI_VERSION || undefined,
     latestCliVersion: env.LATEST_CLI_VERSION || undefined,
     abuseWindowMinutes: envNumber(env.ABUSE_WINDOW_MINUTES),
@@ -14729,6 +14768,7 @@ function loadConfig(env = process.env) {
     abuseRestrictedHourlyCap: envNumber(env.ABUSE_RESTRICTED_HOURLY_CAP),
     abuseNormalHourlyCap: envNumber(env.ABUSE_NORMAL_HOURLY_CAP),
     abuseSignedInNormalHourlyCap: envNumber(env.ABUSE_SIGNED_IN_NORMAL_HOURLY_CAP),
+    abuseDay0SkipHourly: envBoolean(env.ABUSE_DAY0_SKIP_HOURLY),
     abuseFlipAlertThreshold: envNumber(env.ABUSE_FLIP_ALERT_THRESHOLD),
     abuseAdBypassMinRequests: envNumber(env.ABUSE_AD_BYPASS_MIN_REQUESTS),
     abuseAdBypassRatio: envNumber(env.ABUSE_AD_BYPASS_RATIO),
@@ -14745,10 +14785,12 @@ function loadConfig(env = process.env) {
     guestIpHashRetentionDays: envStrictInt("GUEST_IP_HASH_RETENTION_DAYS", env.GUEST_IP_HASH_RETENTION_DAYS),
     returnBonusDay2Credits: envStrictInt("RETURN_BONUS_DAY2_CREDITS", env.RETURN_BONUS_DAY2_CREDITS),
     returnBonusDay7Credits: envStrictInt("RETURN_BONUS_DAY7_CREDITS", env.RETURN_BONUS_DAY7_CREDITS),
+    returnNudgeEmailEnabled: envBoolean(env.RETURN_NUDGE_EMAIL_ENABLED),
     referralBonusCreditsPerDay: envStrictInt("REFERRAL_BONUS_CREDITS_PER_DAY", env.REFERRAL_BONUS_CREDITS_PER_DAY),
     referralBonusDays: envStrictInt("REFERRAL_BONUS_DAYS", env.REFERRAL_BONUS_DAYS),
     referralMaxActivePerReferrer: envStrictInt("REFERRAL_MAX_ACTIVE_PER_REFERRER", env.REFERRAL_MAX_ACTIVE_PER_REFERRER),
-    referralGithubMinAgeDays: envStrictInt("REFERRAL_GITHUB_MIN_AGE_DAYS", env.REFERRAL_GITHUB_MIN_AGE_DAYS)
+    referralGithubMinAgeDays: envStrictInt("REFERRAL_GITHUB_MIN_AGE_DAYS", env.REFERRAL_GITHUB_MIN_AGE_DAYS),
+    referralCreditGrantCredits: envStrictInt("REFERRAL_CREDIT_GRANT_CREDITS", env.REFERRAL_CREDIT_GRANT_CREDITS)
   });
 }
 // ../shared/src/credits.ts
@@ -14759,6 +14801,43 @@ function usdToCredits(usd) {
 function nextUtcMidnight(now) {
   return new Date(Date.UTC(now.getUTCFullYear(), now.getUTCMonth(), now.getUTCDate() + 1));
 }
+function formatRefillLocal(date5, timeZone) {
+  const opts = {
+    hour: "numeric",
+    minute: "2-digit",
+    hour12: true,
+    timeZoneName: "short"
+  };
+  if (timeZone)
+    opts.timeZone = timeZone;
+  return new Intl.DateTimeFormat("en-US", opts).format(date5);
+}
+function formatVisibleAllowanceLine(input) {
+  const left = input.remaining.toLocaleString("en-US");
+  if (input.guest)
+    return `${left} credits left · sign in for 15,000 a day`;
+  if (input.refillAt && !Number.isNaN(input.refillAt.getTime())) {
+    return `${left} credits left today · resets ${formatRefillLocal(input.refillAt, input.timeZone)}`;
+  }
+  return `${left} credits left today`;
+}
+function formatVisibleAllowanceStatus(input) {
+  const left = input.remaining.toLocaleString("en-US");
+  const bought = typeof input.bonusCredits === "number" && input.bonusCredits > 0 ? ` + ${input.bonusCredits.toLocaleString("en-US")}` : "";
+  if (input.guest)
+    return `${left}${bought} credits left`;
+  if (input.refillAt && !Number.isNaN(input.refillAt.getTime())) {
+    return `${left}${bought} credits left today · resets ${formatRefillLocal(input.refillAt, input.timeZone)}`;
+  }
+  return `${left}${bought} credits left today`;
+}
+function formatLowAllowanceWarning(input) {
+  const left = input.remaining.toLocaleString("en-US");
+  if (input.guest)
+    return `Low on credits: ${left} left${input.suffix ?? ""}`;
+  const reset = input.refillAt && !Number.isNaN(input.refillAt.getTime()) ? ` · resets ${formatRefillLocal(input.refillAt, input.timeZone)}` : "";
+  return `Low on credits: ${left} left today${reset}${input.suffix ?? ""}`;
+}
 function formatRefillEt(date5, timeZone = "America/New_York") {
   const formatted = new Intl.DateTimeFormat("en-US", {
     timeZone,
@@ -14786,11 +14865,13 @@ var LIMIT_NOTICE_LABELS = {
 };
 var EXTRA_CREDITS_URL = "freepi.ai/extra-credits";
 var LIMIT_NOTICE_LOCAL_TIME_AFTER_SECONDS = 90 * 60;
+var REFILL_CLOCK_LIMITS = new Set(["daily_cap", "global_cap", "queue_wait"]);
 function formatLimitNotice(fields, opts = {}) {
   const slow = fields.lane === "slow" && fields.limit === "hourly_ceiling" && fields.hourly_ceiling != null;
   const label = slow ? `You've used today's free allowance, so you're on the slow lane (${fields.hourly_ceiling.toLocaleString("en-US")} requests an hour).` : LIMIT_NOTICE_LABELS[fields.limit] ?? fields.limit.replace(/_/g, " ");
   const parts = [label];
   const retry = fields.retry_after_seconds;
+  const waitBits = [];
   if (retry != null && retry > 0) {
     const useClock = Boolean(opts.localTime) && Boolean(fields.clears_at) && retry >= LIMIT_NOTICE_LOCAL_TIME_AFTER_SECONDS;
     if (useClock) {
@@ -14799,13 +14880,21 @@ function formatLimitNotice(fields, opts = {}) {
         hour: "numeric",
         minute: "2-digit"
       }).format(new Date(fields.clears_at));
-      parts.push(`back at ${formatted}`);
+      waitBits.push(`back at ${formatted}`);
     } else {
-      parts.push(`back in ${Math.max(1, Math.ceil(retry / 60))} min`);
+      waitBits.push(`back in ${Math.max(1, Math.ceil(retry / 60))} min`);
+    }
+  }
+  if (opts.copyStyle === "treatment" && REFILL_CLOCK_LIMITS.has(fields.limit) && fields.clears_at) {
+    const clears = new Date(fields.clears_at);
+    if (!Number.isNaN(clears.getTime())) {
+      waitBits.push(`resets ${formatRefillEt(clears)}`);
     }
   }
+  if (waitBits.length > 0)
+    parts.push(waitBits.join(" · "));
   if (slow) {
-    const wait = parts.length > 1 ? ` ${parts[1][0].toUpperCase()}${parts[1].slice(1)} — or get` : " Get";
+    const wait = waitBits[0] ? ` ${waitBits[0][0].toUpperCase()}${waitBits[0].slice(1)} — or get` : " Get";
     return `${label}${wait} credits at ${EXTRA_CREDITS_URL} to keep going at full speed.`;
   }
   parts.push(`${fields.remaining_credits_today.toLocaleString("en-US")} credits left today`);
@@ -14940,7 +15029,7 @@ var HiveClassifyResponseSchema = exports_external.object({
 // package.json
 var package_default = {
   name: "free-pi-cli",
-  version: "0.5.2",
+  version: "0.6.0",
   description: "Free, ad-supported distribution of the pi coding agent. Inference paid for by ads.",
   license: "MIT",
   type: "module",
@@ -14981,6 +15070,8 @@ free-pi — free AI coding in your terminal; ads pay for the inference.
 Usage:
   free-pi-cli                 start the coding agent (first run: a short guest trial, then GitHub)
   free-pi-cli --session <id>  resume a previous session
+  free-pi-cli --continue      resume the last session in this folder
+  free-pi-cli --new           start a new session
   free-pi-cli --ref <code>    first-run referral code (from freepi.ai/?ref=)
   free-pi-cli --src <channel> first-run campaign attribution (from freepi.ai/?src=)
   free-pi-cli logout          remove the stored sign-in token; the next run signs in again
@@ -15016,6 +15107,10 @@ function parseCliArgs(argv) {
     let i = 0;
     while (i < argv.length) {
       const arg = argv[i];
+      if (arg === "--continue" || arg === "--resume" || arg === "--new") {
+        i += 1;
+        continue;
+      }
       if (arg === "--session" || arg === "--ref" || arg === "--src") {
         i += 1;
         if (argv[i] && !String(argv[i]).startsWith("--"))
@@ -15326,7 +15421,11 @@ async function fetchMe(deps) {
     const res = await authedFetch(deps, "/me");
     if (!res.ok)
       return;
-    return await res.json();
+    const me = await res.json();
+    try {
+      deps.onMe?.(me);
+    } catch {}
+    return me;
   } catch {
     return;
   }
@@ -15494,7 +15593,7 @@ function mapErrorCode(code) {
     case "concurrent":
       return "only one request at a time on the free tier — wait for the current one to finish";
     case "concurrent_session":
-      return "another free-pi session for your account is already active";
+      return "this account is already at its session limit — run /close-other-session or wait for a slot";
     case "context_ceiling":
       return "this conversation is too large for free-pi's context limit";
     case "upstream_error":
@@ -15506,7 +15605,7 @@ function mapErrorCode(code) {
     case "upgrade_required":
       return "your free-pi-cli is out of date — run `npx free-pi-cli@latest`";
     case "hourly_ceiling":
-      return "too many requests this hour on the free tier — wait for the Retry-After window";
+      return "daily allowance still applies — it refills at midnight UTC";
     case "account_review":
       return "this account is under review — contact support";
     case "ads_required":
@@ -15575,9 +15674,23 @@ async function renderMeter(deps, ctx) {
     if (!Number.isNaN(refill.getTime()) && me.lane !== "wait") {
       const left = me.remaining_credits_today;
       const bought = typeof me.bonus_credits === "number" && me.bonus_credits > 0 ? ` + ${me.bonus_credits.toLocaleString("en-US")}` : "";
-      ctx.ui.setStatus(METER_STATUS_KEY, theme.fg("muted", `${left.toLocaleString("en-US")}${bought} credits`));
+      const refill2 = new Date(me.refill_at);
+      const treatment = me.visible_allowance === true;
+      const status = treatment ? formatVisibleAllowanceStatus({
+        remaining: left,
+        bonusCredits: typeof me.bonus_credits === "number" ? me.bonus_credits : undefined,
+        refillAt: refill2,
+        guest: me.guest === true
+      }) : `${left.toLocaleString("en-US")}${bought} credits`;
+      ctx.ui.setStatus(METER_STATUS_KEY, theme.fg("muted", status));
       const low = left > 0 && left <= me.allowance_credits * LOW_CREDIT_FRACTION;
-      ctx.ui.setWidget(METER_WIDGET_ID, low ? [renderWarningLine(`Low on credits: ${left.toLocaleString("en-US")} left today${buyMore(me.buy_url)}`, theme)] : undefined);
+      const warning = treatment ? formatLowAllowanceWarning({
+        remaining: left,
+        refillAt: refill2,
+        guest: me.guest === true,
+        suffix: buyMore(me.buy_url)
+      }) : `Low on credits: ${left.toLocaleString("en-US")} left today${buyMore(me.buy_url)}`;
+      ctx.ui.setWidget(METER_WIDGET_ID, low ? [renderWarningLine(warning, theme)] : undefined);
       return;
     }
   }
@@ -15598,7 +15711,8 @@ function createAdsExtension(opts) {
     getToken: opts.getToken,
     sessionId: opts.sessionId,
     fetchImpl: opts.fetchImpl,
-    getGravityContext: opts.getGravityContext
+    getGravityContext: opts.getGravityContext,
+    onMe: opts.onMe
   };
   const config3 = loadConfig();
   return {
@@ -15651,7 +15765,7 @@ function createAdsExtension(opts) {
 }
 
 // src/pi-launch.ts
-import { dirname as dirname7, join as join9, resolve as resolve3 } from "node:path";
+import { dirname as dirname8, join as join10, resolve as resolve3 } from "node:path";
 import { fileURLToPath as fileURLToPath4 } from "node:url";
 
 // src/provider.ts
@@ -15679,7 +15793,8 @@ function buildProviderConfig(baseUrl, jwt2, sessionId, models, name = PROVIDER_N
     models: models.map((m) => ({
       id: m.id,
       name: m.name,
-      reasoning: false,
+      reasoning: true,
+      compat: { supportsDeveloperRole: false },
       input: ["text"],
       cost: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0 },
       contextWindow: 1048576,
@@ -20328,6 +20443,7 @@ first. Purchased credits cover use beyond it and do not expire.
 ## Commands
 - \`/usage\` — spend and remaining budget today
 - \`/support\` — visit today's advertiser
+- \`/feedback <text>\` — send feedback to the free-pi team
 - \`/tos\` — open the Terms of Service
 - \`/privacy-policy\` — open the Privacy Policy
 - \`/buy-credits\` — get more usage
@@ -20763,14 +20879,20 @@ function parseErrorEnvelope(errorMessage) {
       parsed.lane = "slow";
     if (ceiling !== undefined)
       parsed.hourly_ceiling = ceiling;
+    if (body.prompt === "github_signin")
+      parsed.prompt = "github_signin";
+    if (body.copy_variant === "control" || body.copy_variant === "treatment") {
+      parsed.copy_variant = body.copy_variant;
+    }
     return parsed;
   } catch {
     return;
   }
 }
 function formatLimitEnvelope(env, opts) {
-  if (env.code === "concurrent_session" || typeof env.remaining_credits_today !== "number")
+  if (env.code === "concurrent_session" || env.prompt === "github_signin" || env.copy_variant === "treatment" || typeof env.remaining_credits_today !== "number") {
     return env.message;
+  }
   return formatLimitNotice({
     limit: env.limit ?? env.code,
     retry_after_seconds: env.retry_after_seconds,
@@ -20779,7 +20901,7 @@ function formatLimitEnvelope(env, opts) {
     allowance_credits: env.allowance_credits,
     lane: env.lane,
     hourly_ceiling: env.hourly_ceiling
-  }, { localTime: true, timeZone: opts?.timeZone });
+  }, { localTime: true, timeZone: opts?.timeZone, copyStyle: env.copy_variant });
 }
 function createErrorNoticeExtension(opts = {}) {
   const lastAt = new Map;
@@ -20852,21 +20974,36 @@ function createToolGuardExtension(opts) {
 // src/bug-report.ts
 var BUG_USAGE = "Usage: /bug <what went wrong>";
 var BUG_DESCRIPTION = "Report a bug to free-pi";
+var LOGIN_DESCRIPTION = "Sign in with GitHub to unlock daily credits and a comeback bonus.";
+var FEEDBACK_USAGE = "Usage: /feedback <what you think>";
+var FEEDBACK_DESCRIPTION = "Send feedback to the free-pi team";
+var FEEDBACK_PREFIX = "[feedback] ";
+var FEEDBACK_MAX = 4000 - FEEDBACK_PREFIX.length;
+function parseFeedbackArgs(args) {
+  const text = args.trim();
+  if (!text)
+    return { kind: "usage" };
+  if (text.length > FEEDBACK_MAX)
+    return { kind: "too_long" };
+  return { kind: "send", description: FEEDBACK_PREFIX + text };
+}
 function buildBugRequest(description, ctx) {
   return { description, session_id: ctx.sessionId, cli_version: CLI_VERSION, model: ctx.model };
 }
-function mapBugFailure(status) {
+function mapBugFailure(status, kind = "bug") {
+  const fb = kind === "feedback";
+  const what = fb ? "feedback" : "the bug report";
   if (status === 401)
-    return "Couldn't send the bug report: you're signed out. Restart free-pi-cli to sign in again.";
+    return `Couldn't send ${what}: you're signed out. Restart free-pi-cli to sign in again.`;
   if (status === 429)
-    return "Couldn't send the bug report: you've reached today's limit of 20 reports. Try again tomorrow.";
+    return `Couldn't send ${what}: you've reached today's limit of 20 ${fb ? "reports and feedback messages" : "reports"}. Try again tomorrow.`;
   if (status === 413)
-    return "Couldn't send the bug report: it is too large.";
+    return `Couldn't send ${what}: it is too large.`;
   if (status === 400)
-    return "Couldn't send the bug report: the description is too long (4000 characters max).";
-  return `Couldn't send the bug report (the server returned ${status}). Try again in a moment.`;
+    return fb ? `Couldn't send feedback: it is too long (${FEEDBACK_MAX} characters max).` : "Couldn't send the bug report: the description is too long (4000 characters max).";
+  return `Couldn't send ${what} (the server returned ${status}). Try again in a moment.`;
 }
-async function sendBugReport(opts, body) {
+async function sendBugReport(opts, body, kind = "bug") {
   try {
     const res = await (opts.fetchImpl ?? fetch)(`${opts.baseUrl}/bug-reports`, {
       method: "POST",
@@ -20875,13 +21012,13 @@ async function sendBugReport(opts, body) {
       signal: AbortSignal.timeout(1e4)
     });
     if (!res.ok)
-      return { ok: false, message: mapBugFailure(res.status) };
+      return { ok: false, message: mapBugFailure(res.status, kind) };
     const parsed = BugReportResponseSchema.safeParse(await res.json());
     if (!parsed.success)
-      return { ok: false, message: mapBugFailure(res.status) };
+      return { ok: false, message: mapBugFailure(res.status, kind) };
     return { ok: true, id: parsed.data.id };
   } catch {
-    return { ok: false, message: "Couldn't reach free-pi to send the bug report — check your connection." };
+    return { ok: false, message: `Couldn't reach free-pi to send ${kind === "feedback" ? "feedback" : "the bug report"} — check your connection.` };
   }
 }
 function makeBugHandler(mode, opts) {
@@ -20909,7 +21046,7 @@ function registerBugAutocomplete(pi) {
         const r = await cur.getSuggestions(...a);
         return r && {
           ...r,
-          items: r.items.map((i) => i.value === "bug" && i.label === "bug" ? { ...i, description: BUG_DESCRIPTION } : i)
+          items: r.items.map((i) => i.label === i.value && i.value === "bug" ? { ...i, description: BUG_DESCRIPTION } : i.label === i.value && i.value === "login" ? { ...i, description: LOGIN_DESCRIPTION } : i)
         };
       }
     }));
@@ -20976,9 +21113,26 @@ function mergeAttribution(a, b) {
 
 // src/changelog.ts
 var CHANGELOG_HIGHLIGHTS = [
+  {
+    version: "0.6.0",
+    highlights: [
+      "Send feedback with /feedback <what you think>.",
+      "Turn thinking on with the thinking-level control (Shift+Tab). It starts off.",
+      "Run free-pi in more than one terminal at once.",
+      "Pick up your last session in this folder when you start free-pi (some users).",
+      "The Defense models now show their real model names."
+    ]
+  },
+  {
+    version: "0.5.3",
+    highlights: [
+      "No more startup warning about /login.",
+      "The bundled audit skill is now freepi-security-audit, so it no longer clashes with Cloudflare's security-audit skill."
+    ]
+  },
   {
     version: "0.5.2",
-    highlights: ["/model now lists Defense Flash right under Fusion."]
+    highlights: ["/model now lists the Defense models right under Fusion."]
   },
   {
     version: "0.5.1",
@@ -21259,7 +21413,8 @@ async function startGuestSession(baseUrl, consentVersion, attribution = {}) {
   return {
     token: parsed.token,
     allowance_usd: parsed.allowance_usd,
-    remaining_usd: parsed.remaining_usd
+    remaining_usd: parsed.remaining_usd,
+    guestHandoffVariant: parsed.experiments?.guest_handoff
   };
 }
 async function reportFunnelEvent(baseUrl, event, opts = {}) {
@@ -21290,7 +21445,15 @@ async function pollForToken(baseUrl, sessionId, interval, sleep, opts = {}) {
     }
     let res;
     try {
-      res = await postJson(baseUrl, "/auth/token", { session_id: sessionId });
+      const headers = { "content-type": "application/json" };
+      if (opts.jwt)
+        headers.authorization = `Bearer ${opts.jwt}`;
+      const doFetch = opts.fetchImpl ?? fetch;
+      res = await doFetch(new URL("/auth/token", baseUrl), {
+        method: "POST",
+        headers,
+        body: JSON.stringify({ session_id: sessionId })
+      });
       consecutiveNetworkFailures = 0;
     } catch (err) {
       consecutiveNetworkFailures++;
@@ -21359,10 +21522,22 @@ async function submitUserConsent(baseUrl, jwt2, consentVersion) {
     throw new Error(`consent submission failed: HTTP ${res.status}`);
 }
 
+// src/guest-handoff.ts
+var LOGIN_VALUE_LINE = "sign in free with GitHub: full daily allowance, FREE abliterated DeepSeek, history saved";
+var GUEST_NEAR_WALL_LINE = `A few guest requests left. ${LOGIN_VALUE_LINE}`;
+var SIGNED_IN_CONTINUE_LINE = "Signed in. Your conversation continues — full daily allowance is unlocked.";
+var HEADLESS_FALLBACK_LINE = "No browser or clipboard here — open the URL and enter the code above.";
+function isHandoffTreatment(variant) {
+  return variant === "treatment";
+}
+
 // src/clipboard.ts
 import { spawn as spawn2 } from "node:child_process";
-function copyToClipboard(text, platform = process.platform, spawnImpl = spawn2) {
+import { existsSync as existsSync2 } from "node:fs";
+function copyToClipboard(text, platform = process.platform, spawnImpl = spawn2, env = process.env) {
   try {
+    if (!clipboardAvailable(platform, env))
+      return false;
     const cmd = clipboardCommand(platform);
     if (!cmd)
       return false;
@@ -21375,6 +21550,24 @@ function copyToClipboard(text, platform = process.platform, spawnImpl = spawn2)
     return false;
   }
 }
+function clipboardAvailable(platform = process.platform, env = process.env) {
+  if (platform === "darwin" || platform === "win32")
+    return commandOnPath(clipboardCommand(platform)?.command, env);
+  if (platform !== "linux")
+    return false;
+  if (!env.DISPLAY && !env.WAYLAND_DISPLAY)
+    return false;
+  const cmd = clipboardCommand(platform);
+  return commandOnPath(cmd?.command, env);
+}
+function commandOnPath(command, env) {
+  if (!command)
+    return false;
+  if (command.includes("/"))
+    return existsSync2(command);
+  const path = env.PATH ?? "";
+  return path.split(":").some((dir) => dir.length > 0 && existsSync2(`${dir}/${command}`));
+}
 function clipboardCommand(platform) {
   if (platform === "darwin")
     return { command: "pbcopy", args: [] };
@@ -21436,7 +21629,7 @@ function allowanceIsLow(remaining, allowance) {
     return false;
   return remaining * LOW_ALLOWANCE_DENOMINATOR <= allowance * LOW_ALLOWANCE_NUMERATOR;
 }
-function formatRefillLocal(refillAt, timeZone) {
+function formatRefillLocal2(refillAt, timeZone) {
   const opts = {
     hour: "numeric",
     minute: "2-digit",
@@ -21456,7 +21649,7 @@ function refillAtFromIso(iso, now = new Date) {
   return nextUtcMidnight(now);
 }
 function formatRefillCard(input) {
-  const refill = formatRefillLocal(input.refillAt, input.timeZone);
+  const refill = formatRefillLocal2(input.refillAt, input.timeZone);
   const lines = [
     `${input.allowance.toLocaleString("en-US")} free credits refill at ${refill}.`
   ];
@@ -21485,6 +21678,7 @@ async function fetchRefillStats(baseUrl, jwt2, fetchImpl = fetch) {
       allowanceCredits: body.allowance_credits,
       refillAt: typeof body.refill_at === "string" ? body.refill_at : undefined,
       showCard: body.return_bonus?.show_card === true,
+      creditsBack: body.return_bonus?.credits_back === true,
       guest: body.guest === true
     };
   } catch {
@@ -21515,6 +21709,12 @@ function sessionFromStats(stats) {
     shown: false
   };
 }
+function formatCreditsBackNudge(stats, timeZone) {
+  if (stats.guest || !stats.creditsBack)
+    return;
+  const refill = formatRefillLocal2(refillAtFromIso(stats.refillAt), timeZone);
+  return `Your credits are back. ${stats.allowanceCredits.toLocaleString("en-US")} free credits refill at ${refill}.`;
+}
 function formatLowAllowanceCard(session, remaining, timeZone) {
   if (!session.show || session.shown || session.allowance === undefined)
     return;
@@ -21543,14 +21743,48 @@ function formatExitRefillCard(session, end, timeZone) {
   });
 }
 
+// src/pending-login.ts
+import { mkdir as mkdir4, readFile as readFile3, rm as rm4, writeFile as writeFile3 } from "node:fs/promises";
+import { dirname as dirname5, join as join6 } from "node:path";
+var FINISH_SIGNIN_LINE = "one step to finish signing in";
+function pendingLoginPath(credentialsPath) {
+  return join6(dirname5(credentialsPath), "pending-login.json");
+}
+async function loadPendingLogin(credentialsPath) {
+  try {
+    const raw = await readFile3(pendingLoginPath(credentialsPath), "utf8");
+    const parsed = JSON.parse(raw);
+    if (typeof parsed.session_id !== "string" || typeof parsed.user_code !== "string" || typeof parsed.verification_uri !== "string" || typeof parsed.expires_at !== "number") {
+      return null;
+    }
+    return {
+      session_id: parsed.session_id,
+      user_code: parsed.user_code,
+      verification_uri: parsed.verification_uri,
+      expires_at: parsed.expires_at
+    };
+  } catch {
+    return null;
+  }
+}
+async function savePendingLogin(credentialsPath, pending) {
+  const path = pendingLoginPath(credentialsPath);
+  await mkdir4(dirname5(path), { recursive: true });
+  await writeFile3(path, JSON.stringify(pending), { mode: 384 });
+}
+async function clearPendingLogin(credentialsPath) {
+  await rm4(pendingLoginPath(credentialsPath), { force: true });
+}
+
 // src/login-ux.ts
 var LOGIN_REWARD_LINE = "Sign in with GitHub to get 15,000 free credits a day";
 var LOGIN_WAITING_LINE = "Waiting for GitHub…";
 var LOGIN_TIMEOUT_LINE = "GitHub sign-in timed out. Run /login to try again.";
-function formatDeviceCodePrompt(device) {
+function formatDeviceCodePrompt(device, variant) {
+  const value = isHandoffTreatment(variant) ? LOGIN_VALUE_LINE : LOGIN_REWARD_LINE;
   return [
     "",
-    LOGIN_REWARD_LINE,
+    value,
     LOGIN_BONUS_UNLOCK_LINE,
     "",
     `  Open ${device.verification_uri}`,
@@ -21561,7 +21795,15 @@ function formatDeviceCodePrompt(device) {
 }
 async function runDeviceLogin(deps, attribution = {}) {
   const device = await startDeviceFlow(deps.baseUrl);
-  deps.log(formatDeviceCodePrompt(device));
+  deps.log(formatDeviceCodePrompt(device, deps.variant));
+  if (deps.credentialsPath) {
+    await savePendingLogin(deps.credentialsPath, {
+      session_id: device.session_id,
+      user_code: device.user_code,
+      verification_uri: device.verification_uri,
+      expires_at: (deps.now ?? Date.now)() + (device.expires_in ?? 900) * 1000
+    });
+  }
   const copied = (deps.copy ?? copyToClipboard)(device.user_code);
   if (copied)
     deps.log(`  (code copied to clipboard)
@@ -21579,12 +21821,66 @@ async function runDeviceLogin(deps, attribution = {}) {
       jwt: deps.jwt,
       fetchImpl: deps.fetchImpl
     });
+  } else if (!copied) {
+    deps.log(HEADLESS_FALLBACK_LINE);
   }
   await submitConsent(deps.baseUrl, device.session_id, CONSENT_VERSION, attribution);
   const expiresInMs = (device.expires_in ?? 900) * 1000;
   const deadline = (deps.now ?? Date.now)() + expiresInMs;
-  const token = await pollForToken(deps.baseUrl, device.session_id, device.interval, deps.sleep, { deadline, now: deps.now });
-  return token;
+  try {
+    const token = await pollForToken(deps.baseUrl, device.session_id, device.interval, deps.sleep, { deadline, now: deps.now, jwt: deps.jwt, fetchImpl: deps.fetchImpl });
+    if (deps.credentialsPath)
+      await clearPendingLogin(deps.credentialsPath);
+    return token;
+  } catch (err) {
+    throw err;
+  }
+}
+
+// src/allowance-counter.ts
+var cached2;
+function updateAllowanceCache(input) {
+  if (typeof input.remaining_credits_today !== "number" || typeof input.allowance_credits !== "number") {
+    return cached2;
+  }
+  const refill = typeof input.refill_at === "string" && !Number.isNaN(new Date(input.refill_at).getTime()) ? new Date(input.refill_at) : undefined;
+  cached2 = {
+    remaining: input.remaining_credits_today,
+    allowance: input.allowance_credits,
+    refillAt: refill,
+    bonusCredits: typeof input.bonus_credits === "number" ? input.bonus_credits : undefined,
+    guest: input.guest === true,
+    visible: input.visible_allowance === true
+  };
+  return cached2;
+}
+function allowanceLine(snapshot = cached2, timeZone) {
+  if (!snapshot?.visible)
+    return;
+  return formatVisibleAllowanceLine({
+    remaining: snapshot.remaining,
+    refillAt: snapshot.refillAt,
+    guest: snapshot.guest,
+    timeZone
+  });
+}
+function installModelAllowanceHandler(mode, getLine = () => allowanceLine()) {
+  const m = mode;
+  if (typeof m.handleModelCommand !== "function" || typeof m.showStatus !== "function")
+    return false;
+  const original = m.handleModelCommand.bind(mode);
+  m.handleModelCommand = () => {
+    const line = getLine();
+    if (line)
+      m.showStatus(line);
+    return original();
+  };
+  return true;
+}
+function notifyAllowance(ctx) {
+  const line = allowanceLine();
+  if (line)
+    ctx.ui.notify(line, "info");
 }
 
 // src/commands.ts
@@ -21607,6 +21903,18 @@ async function closeOtherSession(opts, ctx) {
     ctx.ui.notify("Couldn't reach free-pi to reset your session — check your connection.", "error");
   }
 }
+async function sendFeedback(opts, args, ctx) {
+  const parsed = parseFeedbackArgs(args);
+  if (parsed.kind === "usage")
+    return ctx.ui.notify(FEEDBACK_USAGE, "info");
+  if (parsed.kind === "too_long")
+    return ctx.ui.notify(`Couldn't send feedback: it is too long (${FEEDBACK_MAX} characters max).`, "error");
+  const r = await sendBugReport({ baseUrl: opts.baseUrl, getToken: opts.getToken, fetchImpl: opts.fetchImpl }, buildBugRequest(parsed.description, { sessionId: ctx.sessionManager?.getSessionId(), model: ctx.model?.id }), "feedback");
+  if (r.ok)
+    ctx.ui.notify(`Thanks for the feedback (#${r.id}).`, "info");
+  else
+    ctx.ui.notify(r.message, "error");
+}
 function showWhatsNew(ctx) {
   const lines = CHANGELOG_HIGHLIGHTS.slice(0, 3).flatMap((e) => [
     `free-pi ${e.version}:`,
@@ -21671,23 +21979,27 @@ async function openPrivacyPolicy(opts, ctx) {
   (opts.openBrowserImpl ?? openBrowser)(PRIVACY_URL);
   ctx.ui.notify(`Opening the Privacy Policy in your browser: ${PRIVACY_URL}`, "info");
 }
+function resolveHandoffVariant(opts) {
+  return typeof opts.variant === "function" ? opts.variant() : opts.variant;
+}
 async function runLogin(opts, ctx) {
-  ctx.ui.notify("Sign in with GitHub to get 15,000 free credits a day.", "info");
-  ctx.ui.notify(LOGIN_BONUS_UNLOCK_LINE, "info");
   try {
     const attribution = opts.agentDir ? await loadAttribution(getAttributionPath(opts.agentDir)) : {};
+    const variant = resolveHandoffVariant(opts);
     const token = await runDeviceLogin({
       baseUrl: opts.baseUrl,
       openBrowser: opts.openBrowserImpl ?? openBrowser,
       sleep: (ms) => new Promise((r) => setTimeout(r, ms)),
       log: (message) => ctx.ui.notify(message.trim(), "info"),
       jwt: await opts.getToken(),
-      fetchImpl: opts.fetchImpl
+      fetchImpl: opts.fetchImpl,
+      variant,
+      credentialsPath: opts.credentialsPath
     }, attribution);
     if (opts.credentialsPath)
       await saveJwt(opts.credentialsPath, token);
     opts.onLogin?.(token);
-    ctx.ui.notify("Signed in. Restart free-pi-cli to unlock 15,000 free credits a day and a one-time comeback bonus.", "info");
+    ctx.ui.notify(isHandoffTreatment(variant) ? SIGNED_IN_CONTINUE_LINE : "Signed in. Restart free-pi-cli to unlock 15,000 free credits a day and a one-time comeback bonus.", "info");
   } catch (err) {
     if (err instanceof LoginTimeoutError) {
       ctx.ui.notify(LOGIN_TIMEOUT_LINE, "warning");
@@ -21696,6 +22008,22 @@ async function runLogin(opts, ctx) {
     ctx.ui.notify("Couldn't finish GitHub sign-in. Run /login to try again.", "error");
   }
 }
+function installLoginHandler(mode, opts) {
+  const m = mode;
+  mode.handleLoginCommand = () => {
+    const lines = [];
+    const notify = (message, type) => {
+      if (type === "error")
+        return m.showError(message);
+      if (type === "warning")
+        return m.showWarning(message);
+      lines.push(message);
+      m.showStatus(lines.join(`
+`));
+    };
+    return runLogin(opts, { ui: { notify } });
+  };
+}
 async function showUsage(opts, ctx) {
   const r = await fetchUsageText(opts);
   ctx.ui.notify(r.text, r.ok ? "info" : "error");
@@ -21785,23 +22113,34 @@ function loadRea(pi, opts, ctx) {
 }
 function createGuestLoginExtension(opts) {
   let started = false;
+  let nearWallWarned = false;
   const start = (ctx) => {
     started = true;
-    ctx.ui.notify(LOGIN_REWARD_LINE, "info");
+    const variant = resolveHandoffVariant(opts);
+    ctx.ui.notify(isHandoffTreatment(variant) ? LOGIN_VALUE_LINE : LOGIN_REWARD_LINE, "info");
     runLogin(opts, ctx);
   };
   return {
     name: "free-pi-guest-login",
     factory(pi) {
       pi.on("turn_end", (event, ctx) => {
-        if (!opts.isGuest?.() || started)
+        if (!opts.isGuest?.())
           return;
         const msg = event.message;
-        if (msg?.stopReason !== "error")
+        if (!started && msg?.stopReason === "error" && parseErrorEnvelope(msg.errorMessage)?.code === "guest_allowance") {
+          start(ctx);
           return;
-        if (parseErrorEnvelope(msg.errorMessage)?.code !== "guest_allowance")
+        }
+        if (started || nearWallWarned || !isHandoffTreatment(resolveHandoffVariant(opts)))
           return;
-        start(ctx);
+        if (msg?.stopReason === "error")
+          return;
+        Promise.resolve(opts.getToken()).then((jwt2) => fetchMe2(opts.baseUrl, jwt2)).then((me) => {
+          if (nearWallWarned || started || !me?.guest_near_wall)
+            return;
+          nearWallWarned = true;
+          ctx.ui.notify(GUEST_NEAR_WALL_LINE, "warning");
+        }).catch(() => {});
       });
       pi.on("agent_end", (event, ctx) => {
         if (!opts.isGuest?.() || started)
@@ -21831,18 +22170,21 @@ function createFreePiCommandsExtension(opts) {
         description: "Update free-pi-cli to the latest version.",
         handler: (_args, ctx) => runUpdate(ctx)
       });
-      pi.registerCommand("login", {
-        description: "Sign in with GitHub to unlock daily credits and a comeback bonus.",
-        handler: (_args, ctx) => runLogin(opts, ctx)
-      });
       pi.registerCommand("usage", {
         description: "Show credits left today, refill time, and purchased credit.",
         handler: (_args, ctx) => showUsage(opts, ctx)
       });
+      pi.on("model_select", (_event, ctx) => {
+        notifyAllowance(ctx);
+      });
       pi.registerCommand("buy-credits", {
         description: "Buy more usage ($5 or $10 packs, card or USDC) — opens the buy page.",
         handler: (_args, ctx) => buyCredits(opts, ctx)
       });
+      pi.registerCommand("feedback", {
+        description: FEEDBACK_DESCRIPTION,
+        handler: (args, ctx) => sendFeedback(opts, args, ctx)
+      });
       pi.registerCommand("support", {
         description: "Open today's advertiser in your browser to support free-pi.",
         handler: (_args, ctx) => openAdvertiser(opts, ctx)
@@ -21918,7 +22260,7 @@ function truncate2(text, maxWidth) {
     return text.slice(0, maxWidth);
   return `${text.slice(0, maxWidth - 1)}…`;
 }
-function headerLines(theme, modelName, expanded, width = Number.POSITIVE_INFINITY, updateLatest, guest) {
+function headerLines(theme, modelName, expanded, width = Number.POSITIVE_INFINITY, updateLatest, guest, allowanceLine2) {
   const inner = width - 1;
   const fit2 = (plain, styled) => plain.length <= inner ? styled() : theme.fg("dim", truncate2(plain, inner));
   const titleRest = ` · ${modelName} · ctrl+o for help`;
@@ -21934,6 +22276,7 @@ function headerLines(theme, modelName, expanded, width = Number.POSITIVE_INFINIT
     "",
     dim(WELCOME_LINE),
     ...guest ? [dim(GUEST_LINE)] : [],
+    ...allowanceLine2 ? [dim(allowanceLine2)] : [],
     "",
     dim(CONSENT_LINE_1),
     dim(CONSENT_LINE_2),
@@ -21957,7 +22300,7 @@ function createHeaderExtension(opts) {
           let expanded = false;
           return {
             render(width) {
-              return headerLines(theme, opts.modelName, expanded, width, opts.updateLatest, opts.guest);
+              return headerLines(theme, opts.modelName, expanded, width, opts.updateLatest, opts.guest, opts.allowanceLine);
             },
             invalidate() {},
             setExpanded(next) {
@@ -22181,12 +22524,12 @@ function resolveFreePiScope(modelRuntime, providerName, modelIds, env = process.
 import { createHash as createHash3 } from "node:crypto";
 import { execFileSync } from "node:child_process";
 import { lstatSync as lstatSync2, readFileSync as readFileSync3, readlinkSync as readlinkSync2 } from "node:fs";
-import { join as join7 } from "node:path";
+import { join as join8 } from "node:path";
 
 // src/hive-guard.ts
-import { existsSync as existsSync2, lstatSync, readdirSync, readlinkSync, realpathSync } from "node:fs";
+import { existsSync as existsSync3, lstatSync, readdirSync, readlinkSync, realpathSync } from "node:fs";
 import { homedir as homedir3 } from "node:os";
-import { basename, dirname as dirname5, isAbsolute, join as join6, relative, resolve, sep } from "node:path";
+import { basename, dirname as dirname6, isAbsolute, join as join7, relative, resolve, sep } from "node:path";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 var GUARD_INPUT_LIMIT = 1500;
 var CLASSIFY_TIMEOUT_MS = 2500;
@@ -22198,7 +22541,7 @@ var SAFE_READ_TOOLS = ["read", "grep", "find", "ls"];
 var ALWAYS_ASK = ["codemode", "tool_search", FUSION_PLAN_TOOL, WEB_SEARCH_TOOL_NAME, DOCS_LOOKUP_TOOL_NAME];
 var CLASSIFIED = ["bash", "write", "edit"];
 var SECRET_BASENAME = [/^\.env(\..*)?$/, /\.pem$/, /^id_(rsa|dsa|ecdsa|ed25519)/];
-var SECRET_HOME_DIRS = [".ssh", ".aws", join6(".config", "freepi"), ".free-pi"];
+var SECRET_HOME_DIRS = [".ssh", ".aws", join7(".config", "freepi"), ".free-pi"];
 var SECRET_IN_TEXT = /(?:^|[\s"'=:/])\.env(?:\.[\w.-]+)?(?=$|[\s"';|&)])|\.pem\b|\bid_(?:rsa|dsa|ecdsa|ed25519)|\.ssh\b|\.aws\b|\.config\/freepi|\.free-pi\b/;
 var BASH_DENY = [
   [/\brm\s+(?:-\S+\s+)*(?:\/|~|\$HOME)\*?(?:\s|$)/, "destructive command"],
@@ -22221,7 +22564,7 @@ function protectedLinkTargets(root, limit) {
   const note = (link) => {
     let target2;
     try {
-      target2 = resolve(dirname5(link), readlinkSync(link));
+      target2 = resolve(dirname6(link), readlinkSync(link));
     } catch {
       return;
     }
@@ -22231,7 +22574,7 @@ function protectedLinkTargets(root, limit) {
       out.push(real);
   };
   for (const entry of [".git/hooks", ".git/config"]) {
-    const link = join6(root, entry);
+    const link = join7(root, entry);
     try {
       if (lstatSync(link).isSymbolicLink())
         note(link);
@@ -22250,7 +22593,7 @@ function protectedLinkTargets(root, limit) {
     for (const entry of entries) {
       if (++seen > limit)
         return null;
-      const path = join6(dir, entry.name);
+      const path = join7(dir, entry.name);
       if (entry.isSymbolicLink()) {
         if (protectedByName(relative(root, path)))
           note(path);
@@ -22300,7 +22643,7 @@ function resolveLikePi(raw, cwd, home, platform) {
   if (p === "~")
     p = home;
   else if (p.startsWith("~/") || platform === "win32" && p.startsWith("~\\"))
-    p = join6(home, p.slice(2));
+    p = join7(home, p.slice(2));
   if (/^file:\/\//.test(p))
     p = fileURLToPath3(p);
   return resolve(cwd, p);
@@ -22310,14 +22653,14 @@ function realpathDeepest(p) {
   const rest3 = [];
   for (;; ) {
     try {
-      return join6(realpathSync(current), ...rest3.reverse());
+      return join7(realpathSync(current), ...rest3.reverse());
     } catch {
       try {
         lstatSync(current);
         return null;
       } catch {}
     }
-    const parent = dirname5(current);
+    const parent = dirname6(current);
     if (parent === current)
       return null;
     rest3.push(basename(current));
@@ -22332,7 +22675,7 @@ function isSecret(target2, home) {
   if (SECRET_BASENAME.some((re) => re.test(basename(target2))))
     return true;
   return SECRET_HOME_DIRS.some((dir) => {
-    const lexical = join6(home, dir);
+    const lexical = join7(home, dir);
     return isInside(lexical, target2) || isInside(realpathDeepest(lexical) ?? lexical, target2);
   });
 }
@@ -22353,7 +22696,7 @@ function scanForSecret(dir) {
       if (SECRET_BASENAME.some((re) => re.test(entry.name)))
         return "yes";
       if (entry.isDirectory())
-        queue.push(join6(current, entry.name));
+        queue.push(join7(current, entry.name));
     }
   }
   return "no";
@@ -22393,7 +22736,7 @@ function pathVerdict(tool, input, opts, home) {
   const verdict = checkPath(raw, search, opts, home);
   if (verdict)
     return verdict;
-  if (tool === "read" && !existsSync2(resolveLikePi(raw, opts.cwd, home, opts.platform ?? process.platform))) {
+  if (tool === "read" && !existsSync3(resolveLikePi(raw, opts.cwd, home, opts.platform ?? process.platform))) {
     return { ask: "file not found; pi may open a similarly named file" };
   }
   return;
@@ -22528,7 +22871,7 @@ function worktreeSnapshot(g) {
       const status = entry.slice(0, 2);
       if (status[0] === "R" || status[0] === "C")
         i++;
-      files.set(entry.slice(3), `${status}:${fingerprint(join7(root, entry.slice(3)))}`);
+      files.set(entry.slice(3), `${status}:${fingerprint(join8(root, entry.slice(3)))}`);
     }
     return { files, head: runGit(g, "rev-parse", "HEAD")?.trim() };
   } catch (e) {
@@ -22981,7 +23324,7 @@ ${decision.reason}`, ACTION_DIALOG_MS);
 import { spawnSync } from "node:child_process";
 import {
   chmodSync,
-  existsSync as existsSync3,
+  existsSync as existsSync4,
   lstatSync as lstatSync3,
   mkdirSync,
   mkdtempSync,
@@ -22992,7 +23335,7 @@ import {
   writeFileSync
 } from "node:fs";
 import { homedir as homedir4, tmpdir } from "node:os";
-import { dirname as dirname6, join as join8 } from "node:path";
+import { dirname as dirname7, join as join9 } from "node:path";
 var SECRET_NAME_PATTERNS = [
   "\\.env(\\..*)?",
   "[^/]*\\.pem",
@@ -23027,8 +23370,8 @@ var TOOLCHAIN_ROOTS = [
   ".local/share/pnpm",
   "Library/pnpm"
 ];
-function toolchainRoots(home, exists = existsSync3) {
-  return TOOLCHAIN_ROOTS.map((r) => join8(home, r)).filter((p) => exists(p));
+function toolchainRoots(home, exists = existsSync4) {
+  return TOOLCHAIN_ROOTS.map((r) => join9(home, r)).filter((p) => exists(p));
 }
 var ENV_ALLOW = ["PATH", "LANG", "LC_ALL", "LC_CTYPE", "TERM", "COLORTERM", "TZ", "USER", "LOGNAME", "SHELL", "PI_PROVIDER", "PI_MODEL"];
 function under(path, dir) {
@@ -23046,10 +23389,10 @@ function sandboxEnv(base, o) {
   for (const k of ENV_ALLOW)
     if (base[k] !== undefined)
       env[k] = base[k];
-  env.PATH = [...o.developerDir ? [join8(o.developerDir, "usr/bin")] : [], ...o.pathPrefix ?? [], ...(base.PATH ?? "/usr/bin:/bin").split(":")].filter((p) => p.startsWith("/") && !under(p, o.project) && !under(realOrSelf(p), o.project)).join(":");
+  env.PATH = [...o.developerDir ? [join9(o.developerDir, "usr/bin")] : [], ...o.pathPrefix ?? [], ...(base.PATH ?? "/usr/bin:/bin").split(":")].filter((p) => p.startsWith("/") && !under(p, o.project) && !under(realOrSelf(p), o.project)).join(":");
   if (o.developerDir)
     env.DEVELOPER_DIR = o.developerDir;
-  env.HOME = join8(o.scratch, "home");
+  env.HOME = join9(o.scratch, "home");
   env.TMP = env.TEMP = o.scratch;
   env.TMPDIR = `${o.scratch}/`;
   env.BUN_OPTIONS = "--no-env-file";
@@ -23059,7 +23402,7 @@ function sandboxEnv(base, o) {
   env.GIT_CONFIG_COUNT = "1";
   env.GIT_CONFIG_KEY_0 = "credential.helper";
   env.GIT_CONFIG_VALUE_0 = "";
-  env.npm_config_cache = join8(o.scratch, "npm-cache");
+  env.npm_config_cache = join9(o.scratch, "npm-cache");
   env.FREEPI_HIVE_CALL = o.callId;
   return env;
 }
@@ -23105,7 +23448,7 @@ function scanProject(project, limit = SCAN_LIMIT2) {
         scan.overflow = true;
         break;
       }
-      const path = join8(dir, e.name);
+      const path = join9(dir, e.name);
       if (e.isSymbolicLink())
         continue;
       if (e.isDirectory()) {
@@ -23188,7 +23531,7 @@ var MAC_MACH_SERVICES = [
   ["com.apple.system.opendirectoryd.libinfo", "user and group names: id, ls -l, python pwd, git author"]
 ];
 function developerDir(o = {}) {
-  const exists = o.exists ?? existsSync3;
+  const exists = o.exists ?? existsSync4;
   const realpath = o.realpath ?? realpathSync2;
   const run = o.exec ?? defaultExec;
   const candidates2 = [];
@@ -23205,14 +23548,14 @@ function developerDir(o = {}) {
       continue;
     try {
       const real = realpath(c);
-      if (exists(join8(real, "usr/bin/git")))
+      if (exists(join9(real, "usr/bin/git")))
         return real;
     } catch {}
   }
   return null;
 }
 function opensslFiles(o = {}) {
-  const exists = o.exists ?? existsSync3;
+  const exists = o.exists ?? existsSync4;
   const list = o.list ?? ((d) => {
     try {
       return readdirSync2(d);
@@ -23223,18 +23566,18 @@ function opensslFiles(o = {}) {
   const files = [];
   const dirs = [];
   for (const prefix of o.prefixes ?? ["/opt/homebrew", "/usr/local"]) {
-    const etc = join8(prefix, "etc");
+    const etc = join9(prefix, "etc");
     for (const name of list(etc)) {
       if (!/^openssl(@[0-9.]+)?$/.test(name))
         continue;
       for (const f of ["openssl.cnf", "ct_log_list.cnf", "cert.pem"])
-        if (exists(join8(etc, name, f)))
-          files.push(join8(etc, name, f));
-      if (exists(join8(etc, name, "certs")))
-        dirs.push(join8(etc, name, "certs"));
+        if (exists(join9(etc, name, f)))
+          files.push(join9(etc, name, f));
+      if (exists(join9(etc, name, "certs")))
+        dirs.push(join9(etc, name, "certs"));
     }
-    if (exists(join8(etc, "ca-certificates/cert.pem")))
-      files.push(join8(etc, "ca-certificates/cert.pem"));
+    if (exists(join9(etc, "ca-certificates/cert.pem")))
+      files.push(join9(etc, "ca-certificates/cert.pem"));
   }
   return { files, dirs };
 }
@@ -23242,7 +23585,7 @@ var MAC_DEV_READ = ["/dev/null", "/dev/zero", "/dev/random", "/dev/urandom", "/d
 var MAC_DEV_WRITE = ["/dev/null", "/dev/tty", "/dev/zero", "/dev/dtracehelper"];
 function ancestors(p) {
   const out = [];
-  for (let d = dirname6(p);; d = dirname6(d)) {
+  for (let d = dirname7(p);; d = dirname7(d)) {
     out.push(d);
     if (d === "/")
       break;
@@ -23278,9 +23621,9 @@ function buildMacProfile(i) {
     L.push(`(deny file-read* file-write* (literal ${sbString(s)}))`);
   for (const f of i.links)
     L.push(`(deny file-write* (literal ${sbString(f)}))`);
-  const guarded = new Set([i.project, join8(i.project, ".git"), ...i.nodeModules ?? []]);
-  for (const f of [...i.sockets, ...i.links, ...i.nodeModules ?? [], join8(i.project, ".git")]) {
-    for (let d = dirname6(f);d.length >= i.project.length && (d === i.project || d.startsWith(i.project + "/")); d = dirname6(d))
+  const guarded = new Set([i.project, join9(i.project, ".git"), ...i.nodeModules ?? []]);
+  for (const f of [...i.sockets, ...i.links, ...i.nodeModules ?? [], join9(i.project, ".git")]) {
+    for (let d = dirname7(f);d.length >= i.project.length && (d === i.project || d.startsWith(i.project + "/")); d = dirname7(d))
       guarded.add(d);
   }
   for (const d of [...guarded].sort())
@@ -23333,7 +23676,7 @@ var BWRAP_ETC = [
   "resolv.conf"
 ].map((e) => `/etc/${e}`);
 function buildBwrapArgs(i) {
-  const exists = i.exists ?? existsSync3;
+  const exists = i.exists ?? existsSync4;
   const a = ["--unshare-all", "--die-with-parent", "--new-session"];
   const ro = (p) => a.push("--ro-bind", p, p);
   for (const d of BWRAP_SYSTEM_DIRS)
@@ -23349,10 +23692,10 @@ function buildBwrapArgs(i) {
   a.push("--bind", i.scratch, i.scratch);
   for (const d of i.nodeModules)
     ro(d);
-  if (exists(join8(i.project, ".git/hooks")))
-    ro(join8(i.project, ".git/hooks"));
-  if (exists(join8(i.project, ".git/config")))
-    ro(join8(i.project, ".git/config"));
+  if (exists(join9(i.project, ".git/hooks")))
+    ro(join9(i.project, ".git/hooks"));
+  if (exists(join9(i.project, ".git/config")))
+    ro(join9(i.project, ".git/config"));
   for (const f of i.links)
     ro(f);
   for (const s of i.sockets)
@@ -23382,7 +23725,7 @@ function removeTree(path) {
         return;
       chmodSync(p, 448);
       for (const e of readdirSync2(p))
-        walk(join8(p, e));
+        walk(join9(p, e));
     } catch {}
   };
   walk(path);
@@ -23420,16 +23763,16 @@ function createShellSandbox(deps = {}) {
     if (deps.python !== undefined)
       return deps.python;
     const dev = platform === "darwin" ? macHost().developerDir : null;
-    return dev && existsSync3(join8(dev, "usr/bin/python3")) ? join8(dev, "usr/bin/python3") : null;
+    return dev && existsSync4(join9(dev, "usr/bin/python3")) ? join9(dev, "usr/bin/python3") : null;
   };
-  let cached2;
+  let cached3;
   function probe() {
     if (platform === "win32")
       return { supported: false, reason: "Windows has no sandbox" };
     if (platform !== "darwin" && platform !== "linux")
       return { supported: false, reason: `No shell sandbox for ${platform}` };
     const mac3 = platform === "darwin";
-    if (!existsSync3(launcher.sandbox))
+    if (!existsSync4(launcher.sandbox))
       return { supported: false, reason: mac3 ? "sandbox-exec is unavailable" : "bubblewrap is not installed" };
     if (checkLauncher(launcher.sandbox, undefined, stat) !== null)
       return { supported: false, reason: NOT_TRUSTWORTHY };
@@ -23439,7 +23782,7 @@ function createShellSandbox(deps = {}) {
     }
     const args = ["--unshare-all"];
     for (const d of ["/usr", "/bin", "/lib", "/lib64"])
-      if (existsSync3(d))
+      if (existsSync4(d))
         args.push("--ro-bind", d, d);
     args.push("--proc", "/proc", "--dev", "/dev", "/bin/true");
     const r = exec(launcher.sandbox, args, { timeout: 5000 });
@@ -23514,12 +23857,12 @@ function createShellSandbox(deps = {}) {
   return {
     enabled: false,
     capability() {
-      return cached2 ??= probe();
+      return cached3 ??= probe();
     },
     prepare(toolCallId, cwd) {
       dispose(toolCallId);
       decisions.delete(toolCallId);
-      const cap = cached2 ??= probe();
+      const cap = cached3 ??= probe();
       if (!cap.supported)
         return { ready: false, reason: cap.reason };
       let project;
@@ -23538,12 +23881,12 @@ function createShellSandbox(deps = {}) {
         return { ready: false, reason: "a folder in the project cannot be read, so it cannot be checked for sockets and hard links" };
       let scratch;
       try {
-        scratch = mkdtempSync(join8(realpathSync2(tmpdir()), "freepi-hive-"));
+        scratch = mkdtempSync(join9(realpathSync2(tmpdir()), "freepi-hive-"));
         const dir = scratch;
-        mkdirSync(join8(dir, "home"));
-        mkdirSync(join8(dir, "npm-cache"));
-        const emptyFile = join8(dir, "empty");
-        const marker = join8(dir, "call.fd");
+        mkdirSync(join9(dir, "home"));
+        mkdirSync(join9(dir, "npm-cache"));
+        const emptyFile = join9(dir, "empty");
+        const marker = join9(dir, "call.fd");
         writeFileSync(emptyFile, "", { mode: 292 });
         const roots = toolchainRoots(home);
         const mac3 = platform === "darwin";
@@ -23704,6 +24047,20 @@ function projectTrustForCwd(cwd, launch, agentDir, hasTrustRequiringResources =
   return new ProjectTrustStore(agentDir).get(cwd) === true;
 }
 
+// src/session-auth.ts
+function createSessionAuth(initial) {
+  let jwt2 = initial.jwt;
+  let guest = initial.guest;
+  return {
+    getJwt: () => jwt2,
+    isGuest: () => guest,
+    becomeSignedIn(token) {
+      jwt2 = token;
+      guest = false;
+    }
+  };
+}
+
 // src/pi-launch.ts
 function catalogModelsFor(opts) {
   const main = splitCatalogModels(opts.models ?? []).main;
@@ -23735,7 +24092,7 @@ var SDK_TOOLS = [
   "list_mcp_resource_templates",
   "read_mcp_resource"
 ];
-var SKILLS_DIR = resolve3(dirname7(fileURLToPath4(import.meta.url)), "..", "skills");
+var SKILLS_DIR = resolve3(dirname8(fileURLToPath4(import.meta.url)), "..", "skills");
 function resolveModelName(opts) {
   return opts.models?.[0]?.name || opts.model || MODEL_ID;
 }
@@ -23746,6 +24103,7 @@ function buildSettingsManager(opts, models, projectTrusted) {
     defaultTools: [...SAFE_TOOLS, TODO_TOOL_NAME],
     packages: [],
     quietStartup: true,
+    defaultThinkingLevel: "off",
     hideThinkingBlock: true,
     tuiMode: "regular",
     theme: "light/dark",
@@ -23758,42 +24116,50 @@ function settingsForRuntime(opts, rtCwd, launch) {
 function buildRuntimeOptions(opts, sessionId) {
   process.env.PI_CODING_AGENT_DIR = opts.agentDir;
   const models = catalogModelsFor(opts);
+  const auth = opts.sessionAuth ?? createSessionAuth({ jwt: opts.jwt, guest: Boolean(opts.guest) });
+  opts.sessionAuth = auth;
   const providerExtension = {
     name: "free-pi-provider",
     factory: (pi) => {
-      pi.registerProvider(PROVIDER_NAME, buildProviderConfig(opts.baseUrl, opts.jwt, sessionId, models));
+      pi.registerProvider(PROVIDER_NAME, buildProviderConfig(opts.baseUrl, auth.getJwt(), sessionId, models));
       const defense = defenseModelsFor(opts);
       if (defense.length > 0) {
-        pi.registerProvider(DEFENSE_PROVIDER_NAME, buildProviderConfig(opts.baseUrl, opts.jwt, sessionId, defense, DEFENSE_PROVIDER_NAME));
+        pi.registerProvider(DEFENSE_PROVIDER_NAME, buildProviderConfig(opts.baseUrl, auth.getJwt(), sessionId, defense, DEFENSE_PROVIDER_NAME));
       }
+      pi.on("before_provider_headers", (event) => {
+        event.headers.Authorization = `Bearer ${auth.getJwt()}`;
+      });
     }
   };
   let advertiserUrl;
   const adsExtension = createAdsExtension({
     baseUrl: opts.baseUrl,
-    getToken: () => opts.jwt,
+    getToken: () => auth.getJwt(),
     sessionId,
     getGravityContext: opts.getGravityContext,
     onBannerAd: (u) => {
       advertiserUrl = u;
+    },
+    onMe: (me) => {
+      updateAllowanceCache(me);
     }
   });
   const usageToolExtension = createUsageToolExtension({
     baseUrl: opts.baseUrl,
-    getToken: () => opts.jwt
+    getToken: () => auth.getJwt()
   });
   const buyToolExtension = createBuyToolExtension({
     baseUrl: opts.baseUrl,
-    getToken: () => opts.jwt
+    getToken: () => auth.getJwt()
   });
   const docsToolExtension = createDocsToolExtension();
   const webToolsExtension = createWebToolsExtension({
     baseUrl: opts.baseUrl,
-    getToken: () => opts.jwt
+    getToken: () => auth.getJwt()
   });
   const imageToolExtension = createImageToolExtension({
     baseUrl: opts.baseUrl,
-    getToken: () => opts.jwt
+    getToken: () => auth.getJwt()
   });
   const errorNoticeExtension = createErrorNoticeExtension({
     extraNotice: (env) => {
@@ -23804,34 +24170,39 @@ function buildRuntimeOptions(opts, sessionId) {
       if (!card)
         return;
       session.shown = true;
-      reportRefillCardShown({ baseUrl: opts.baseUrl, jwt: opts.jwt });
+      reportRefillCardShown({ baseUrl: opts.baseUrl, jwt: auth.getJwt() });
       return card;
     }
   });
   const toolGuardExtension = createToolGuardExtension({
     baseUrl: opts.baseUrl,
-    getToken: () => opts.jwt,
+    getToken: () => auth.getJwt(),
     allowedTools: ALLOWED_TOOL_NAMES
   });
   const commandsExtension = createFreePiCommandsExtension({
     baseUrl: opts.baseUrl,
-    getToken: () => opts.jwt,
+    getToken: () => auth.getJwt(),
     getAdvertiserUrl: () => advertiserUrl,
     credentialsPath: opts.credentialsPath,
     agentDir: opts.agentDir,
-    isGuest: () => Boolean(opts.guest)
+    isGuest: () => auth.isGuest(),
+    onLogin: (token) => auth.becomeSignedIn(token),
+    variant: () => opts.guestHandoffVariant
   });
   const guestLoginExtension = opts.guest ? createGuestLoginExtension({
     baseUrl: opts.baseUrl,
-    getToken: () => opts.jwt,
+    getToken: () => auth.getJwt(),
     credentialsPath: opts.credentialsPath,
     agentDir: opts.agentDir,
-    isGuest: () => Boolean(opts.guest)
+    isGuest: () => auth.isGuest(),
+    onLogin: (token) => auth.becomeSignedIn(token),
+    variant: () => opts.guestHandoffVariant
   }) : undefined;
   const headerExtension = createHeaderExtension({
     modelName: resolveModelName(opts),
     updateLatest: opts.updateLatest,
-    guest: opts.guest
+    guest: opts.guest,
+    allowanceLine: opts.allowanceLine
   });
   const todoToolExtension = createTodoToolExtension();
   const shellSandbox = opts.shellSandbox ?? createShellSandbox();
@@ -23841,7 +24212,7 @@ function buildRuntimeOptions(opts, sessionId) {
   const toolSearchExtension = { name: "pi-tool-search", factory: createToolSearchExtension() };
   const hiveExtension = createHiveExtension({
     baseUrl: opts.baseUrl,
-    getToken: () => opts.jwt,
+    getToken: () => auth.getJwt(),
     knownTools: ALLOWED_TOOL_NAMES,
     sandbox: shellSandbox
   });
@@ -23881,7 +24252,20 @@ function buildRuntimeOptions(opts, sessionId) {
 function getSessionDir(cwd, agentDir) {
   const resolvedCwd = resolve3(cwd);
   const safePath = `--${resolvedCwd.replace(/^[/\\]/, "").replace(/[/\\:]/g, "-")}--`;
-  return join9(resolve3(agentDir), "sessions", safePath);
+  return join10(resolve3(agentDir), "sessions", safePath);
+}
+async function findLatestSession(cwd, sessionDir, api3 = SessionManager) {
+  const infos = await api3.list(cwd, sessionDir);
+  if (infos.length === 0)
+    return;
+  const latest = [...infos].sort((a, b) => +new Date(b.modified) - +new Date(a.modified))[0];
+  if (!latest)
+    return;
+  return {
+    id: latest.id,
+    modified: latest.modified instanceof Date ? latest.modified : new Date(latest.modified),
+    firstMessage: latest.firstMessage ?? ""
+  };
 }
 async function createSessionManager(cwd, sessionDir, sessionId, api3 = SessionManager) {
   if (sessionId) {
@@ -23907,9 +24291,11 @@ async function launchPi(opts) {
   const cwd = process.cwd();
   const sessionDir = getSessionDir(cwd, opts.agentDir);
   const sm = await createSessionManager(cwd, sessionDir, opts.session);
+  const auth = opts.sessionAuth ?? createSessionAuth({ jwt: opts.jwt, guest: Boolean(opts.guest) });
+  const launchOpts = { ...opts, sessionAuth: auth };
   const sessionId = sm.getSessionId();
   const projectTrusted = await decideProjectTrustInteractive(cwd, opts.agentDir);
-  const { resourceLoaderOptions, tools } = buildRuntimeOptions({ ...opts, projectTrusted }, sessionId);
+  const { resourceLoaderOptions, tools } = buildRuntimeOptions({ ...launchOpts, projectTrusted }, sessionId);
   const launchTrust = { cwd, trusted: projectTrusted };
   const createRuntime = async ({
     cwd: rtCwd,
@@ -23944,7 +24330,17 @@ async function launchPi(opts) {
     initialImages: [],
     initialMessages: []
   });
-  installBugHandler(mode, { baseUrl: opts.baseUrl, getToken: () => opts.jwt });
+  installBugHandler(mode, { baseUrl: opts.baseUrl, getToken: () => auth.getJwt() });
+  installLoginHandler(mode, {
+    baseUrl: opts.baseUrl,
+    getToken: () => auth.getJwt(),
+    credentialsPath: opts.credentialsPath,
+    agentDir: opts.agentDir,
+    isGuest: () => auth.isGuest(),
+    onLogin: (token) => auth.becomeSignedIn(token),
+    variant: () => opts.guestHandoffVariant
+  });
+  installModelAllowanceHandler(mode);
   installFooterRightAlign(mode);
   await mode.run();
   return sm.getSessionId();
@@ -23994,6 +24390,154 @@ function createRealSpawn(io = { platform: process.platform, spawnSyncImpl: spawn
 // src/run.ts
 import { SessionManager as SessionManager2 } from "@earendil-works/pi-coding-agent";
 
+// src/resume-on-launch.ts
+var RESUME_ON_LAUNCH_EXPERIMENT = "resume_on_launch";
+var DEFAULT_RESUME_RECENT_HOURS = 48;
+var RESUME_PROMPT_SUFFIX = " [Y/n] ";
+function userArgv(argv) {
+  if (/(^|[\\/])(node|bun)(\.exe)?$/i.test(argv[0] ?? ""))
+    return argv.slice(2);
+  return argv;
+}
+function parseResumeFlags(argv) {
+  const args = userArgv(argv);
+  let session;
+  let sessionError;
+  let continueLast = false;
+  let startNew = false;
+  let hasPrompt = false;
+  for (let i = 0;i < args.length; i++) {
+    const arg = args[i];
+    if (arg === "--session") {
+      const value = args[i + 1];
+      if (!value || value.startsWith("--")) {
+        sessionError = "Missing value for --session";
+      } else {
+        session = value;
+        i += 1;
+      }
+      continue;
+    }
+    if (arg.startsWith("--session=")) {
+      const value = arg.slice("--session=".length);
+      if (!value)
+        sessionError = "Missing value for --session";
+      else
+        session = value;
+      continue;
+    }
+    if (arg === "--continue" || arg === "--resume") {
+      continueLast = true;
+      continue;
+    }
+    if (arg === "--new") {
+      startNew = true;
+      continue;
+    }
+    if (arg === "--ref" || arg === "--src") {
+      if (args[i + 1] && !String(args[i + 1]).startsWith("--"))
+        i += 1;
+      continue;
+    }
+    if (arg.startsWith("--ref=") || arg.startsWith("--src="))
+      continue;
+    if (!arg.startsWith("-"))
+      hasPrompt = true;
+  }
+  return { session, sessionError, continueLast, startNew, hasPrompt };
+}
+function isRecentSession(modified, recentHours, now) {
+  const ageMs = now.getTime() - modified.getTime();
+  return ageMs >= 0 && ageMs <= recentHours * 3600000;
+}
+function recentHoursFromEnv(env = process.env, serverHours) {
+  const raw = env.FREEPI_RESUME_RECENT_HOURS;
+  if (raw !== undefined && raw !== "") {
+    const n = Number(raw);
+    if (Number.isInteger(n) && n >= 1)
+      return n;
+  }
+  if (typeof serverHours === "number" && Number.isInteger(serverHours) && serverHours >= 1) {
+    return serverHours;
+  }
+  return DEFAULT_RESUME_RECENT_HOURS;
+}
+function formatResumeAge(modified, now) {
+  const deltaSec = Math.max(0, Math.floor((now.getTime() - modified.getTime()) / 1000));
+  if (deltaSec < 60)
+    return "just now";
+  const minutes = Math.floor(deltaSec / 60);
+  if (minutes < 60)
+    return minutes === 1 ? "1 minute ago" : `${minutes} minutes ago`;
+  const hours = Math.floor(minutes / 60);
+  if (hours < 24)
+    return hours === 1 ? "1 hour ago" : `${hours} hours ago`;
+  const days = Math.floor(hours / 24);
+  if (days === 1)
+    return "yesterday";
+  return `${days} days ago`;
+}
+function previewText(firstMessage) {
+  if (!firstMessage)
+    return;
+  const oneLine = firstMessage.replace(/\s+/g, " ").trim();
+  if (!oneLine)
+    return;
+  return oneLine.length > 60 ? `${oneLine.slice(0, 57)}...` : oneLine;
+}
+function formatResumePrompt(session, now = new Date) {
+  const age = formatResumeAge(session.modified, now);
+  const preview = previewText(session.firstMessage);
+  const body = preview ? `Continue last session from ${age}: ${preview}?` : `Continue last session from ${age}?`;
+  return `${body}${RESUME_PROMPT_SUFFIX}`;
+}
+function parseResumeKeypress(raw) {
+  if (raw === "\x03")
+    return null;
+  const ch = raw.slice(0, 1);
+  if (ch === "n" || ch === "N")
+    return false;
+  return true;
+}
+async function promptResume(session, deps) {
+  if (!deps.stdinIsTTY)
+    return false;
+  const prompt = formatResumePrompt(session, deps.now ?? new Date);
+  const raw = await deps.askKey(prompt);
+  const parsed = parseResumeKeypress(raw);
+  if (parsed === null)
+    return "aborted";
+  deps.write(`
+`);
+  return parsed;
+}
+async function readOneKeypress(prompt, stdin = process.stdin, stdout = process.stdout) {
+  stdout.write(prompt);
+  const wasRaw = stdin.isRaw;
+  if (typeof stdin.setRawMode === "function")
+    stdin.setRawMode(true);
+  stdin.resume();
+  return await new Promise((resolve4) => {
+    const onData = (chunk) => {
+      stdin.off("data", onData);
+      if (typeof stdin.setRawMode === "function")
+        stdin.setRawMode(wasRaw ?? false);
+      stdin.pause();
+      resolve4(typeof chunk === "string" ? chunk : chunk.toString("utf8"));
+    };
+    stdin.once("data", onData);
+  });
+}
+async function promptResumeInteractive(session) {
+  return promptResume(session, {
+    stdinIsTTY: process.stdin.isTTY === true,
+    write: (text) => {
+      process.stdout.write(text);
+    },
+    askKey: (prompt) => readOneKeypress(prompt)
+  });
+}
+
 // src/onboarding.ts
 var INTRO_ENV_SKIP = "FREEPI_NO_INTRO";
 var INTRO_TEXT = `
@@ -24021,12 +24565,12 @@ ${INTRO_TEXT}
 }
 
 // src/whats-new.ts
-import { existsSync as existsSync4, mkdirSync as mkdirSync2, readFileSync as readFileSync4, writeFileSync as writeFileSync2 } from "node:fs";
-import { dirname as dirname8 } from "node:path";
+import { existsSync as existsSync5, mkdirSync as mkdirSync2, readFileSync as readFileSync4, writeFileSync as writeFileSync2 } from "node:fs";
+import { dirname as dirname9 } from "node:path";
 function maybeWhatsNew(cliVersion, agentDir) {
   try {
     const path = getLastSeenVersionPath(agentDir);
-    const lastSeen = existsSync4(path) ? readFileSync4(path, "utf-8").trim() : undefined;
+    const lastSeen = existsSync5(path) ? readFileSync4(path, "utf-8").trim() : undefined;
     writeLastSeen(path, cliVersion);
     if (lastSeen === undefined)
       return;
@@ -24042,7 +24586,7 @@ function maybeWhatsNew(cliVersion, agentDir) {
   }
 }
 function writeLastSeen(path, version3) {
-  mkdirSync2(dirname8(path), { recursive: true });
+  mkdirSync2(dirname9(path), { recursive: true });
   writeFileSync2(path, version3, "utf-8");
 }
 
@@ -24068,7 +24612,8 @@ async function loginFlow(deps, argv = []) {
       openBrowser: deps.openBrowser,
       sleep: deps.sleep,
       log: deps.log,
-      jwt: await loadJwt(deps.credentialsPath)
+      jwt: await loadJwt(deps.credentialsPath),
+      credentialsPath: deps.credentialsPath
     }, resolved.attribution ?? {});
     await saveJwt(deps.credentialsPath, token);
     return token;
@@ -24079,28 +24624,52 @@ async function loginFlow(deps, argv = []) {
     throw err;
   }
 }
-function parseSessionArg(argv) {
-  const flagIndex = argv.indexOf("--session");
-  if (flagIndex === -1)
-    return {};
-  const value = argv[flagIndex + 1];
-  if (!value || value.startsWith("--")) {
-    return { error: "Missing value for --session" };
-  }
+function validateSessionId(value) {
   try {
     SessionManager2.inMemory(process.cwd(), { id: value });
+    return;
   } catch (err) {
-    return { error: `Invalid --session value: ${err instanceof Error ? err.message : String(err)}` };
+    return `Invalid --session value: ${err instanceof Error ? err.message : String(err)}`;
   }
-  return { session: value };
+}
+function reportResumeExposure(deps, jwt2, event) {
+  if (deps.reportResumeExposure) {
+    deps.reportResumeExposure(event);
+    return;
+  }
+  fetch(new URL("/telemetry/experiment", deps.baseUrl), {
+    method: "POST",
+    headers: {
+      authorization: `Bearer ${jwt2}`,
+      "content-type": "application/json"
+    },
+    body: JSON.stringify({ experiment: RESUME_ON_LAUNCH_EXPERIMENT, event }),
+    signal: AbortSignal.timeout(3000)
+  }).catch(() => {});
+}
+async function defaultFindLatestSession(cwd, agentDir) {
+  return findLatestSession(cwd, getSessionDir(cwd, agentDir));
 }
 async function run(deps, argv = process.argv) {
-  const sessionArg = parseSessionArg(argv);
-  if (sessionArg.error) {
-    deps.log(sessionArg.error);
+  const resumeFlags = parseResumeFlags(argv);
+  if (resumeFlags.sessionError) {
+    deps.log(resumeFlags.sessionError);
     return 1;
   }
+  if (resumeFlags.session) {
+    const invalid = validateSessionId(resumeFlags.session);
+    if (invalid) {
+      deps.log(invalid);
+      return 1;
+    }
+  }
+  const pending = await loadPendingLogin(deps.credentialsPath);
+  if (pending)
+    deps.log(`
+${FINISH_SIGNIN_LINE}
+`);
   let jwt2 = await loadJwt(deps.credentialsPath);
+  let guestHandoffVariant;
   let consentCurrent = false;
   if (jwt2) {
     try {
@@ -24143,9 +24712,12 @@ async function run(deps, argv = process.argv) {
       const guest = await startGuestSession(deps.baseUrl, CONSENT_VERSION, attribution);
       await saveJwt(deps.credentialsPath, guest.token);
       jwt2 = guest.token;
-      deps.log(`
+      deps.log(isHandoffTreatment(guest.guestHandoffVariant) ? `
+You're on a short guest trial — ads pay for it. ${LOGIN_VALUE_LINE}
+` : `
 You're on a short guest trial — ads pay for it. Sign in with GitHub anytime (/login) to get 15,000 free credits a day and unlock a one-time comeback bonus.
 `);
+      guestHandoffVariant = guest.guestHandoffVariant;
     } catch (err) {
       if (!(err instanceof GuestUnavailableError))
         throw err;
@@ -24156,7 +24728,7 @@ Guest trial is not available right now.
     }
     consentCurrent = true;
   }
-  const versionCheck = await deps.checkClientVersion(deps.baseUrl, CLI_VERSION);
+  const versionCheck = await deps.checkClientVersion(deps.baseUrl, CLI_VERSION, jwt2);
   let updateLatest;
   if (versionCheck.action !== "ok") {
     const outcome = await deps.maybeSelfUpdate(versionCheck.action, versionCheck.latest);
@@ -24182,23 +24754,61 @@ Guest trial is not available right now.
     } catch {}
   }
   const me = await fetchMe2(deps.baseUrl, jwt2).catch(() => null);
+  if (me)
+    updateAllowanceCache(me);
+  guestHandoffVariant = me?.experiments?.guest_handoff ?? guestHandoffVariant;
   const startRefill = await fetchRefillStats(deps.baseUrl, jwt2).catch(() => {
     return;
   });
   const refillSession = sessionFromStats(startRefill);
+  const creditsBack = startRefill ? formatCreditsBackNudge(startRefill) : undefined;
+  if (creditsBack) {
+    deps.log(`
+${creditsBack}`);
+    reportRefillCardShown({ baseUrl: deps.baseUrl, jwt: jwt2 });
+  }
+  let session = resumeFlags.session;
+  const lookupLatest = deps.findLatestSession ?? defaultFindLatestSession;
+  if (!session && resumeFlags.continueLast && !resumeFlags.startNew) {
+    session = (await lookupLatest(process.cwd(), deps.agentDir))?.id;
+    if (!session)
+      deps.log("No earlier session in this folder; starting a new one.");
+  }
+  const experiment = versionCheck.experiments?.[RESUME_ON_LAUNCH_EXPERIMENT];
+  const variant = experiment?.variant === "treatment" ? "treatment" : "control";
+  const recentHours = recentHoursFromEnv(process.env, experiment?.recent_hours);
+  const interactive = deps.stdinIsTTY ?? process.stdin.isTTY === true;
+  if (!session && !resumeFlags.startNew && !resumeFlags.hasPrompt && variant === "treatment" && interactive) {
+    const latest = await lookupLatest(process.cwd(), deps.agentDir);
+    const now = deps.now?.() ?? new Date;
+    if (latest && isRecentSession(latest.modified, recentHours, now)) {
+      reportResumeExposure(deps, jwt2, "offer_shown");
+      const answer = await (deps.promptResume ?? promptResumeInteractive)(latest);
+      if (answer === "aborted") {
+        deps.log("Aborted.");
+        return 1;
+      }
+      if (answer) {
+        reportResumeExposure(deps, jwt2, "offer_accepted");
+        session = latest.id;
+      }
+    }
+  }
   const finalSessionId = await deps.launchPi({
     baseUrl: deps.baseUrl,
     jwt: jwt2,
     agentDir: deps.agentDir,
     credentialsPath: deps.credentialsPath,
-    session: sessionArg.session,
+    session,
     model: versionCheck.model,
     models: versionCheck.models,
     fusion: versionCheck.fusion,
     updateLatest,
     getGravityContext,
     guest: Boolean(me?.guest),
-    refillCard: refillSession
+    refillCard: refillSession,
+    allowanceLine: allowanceLine(),
+    guestHandoffVariant
   });
   const endRefill = await fetchRefillStats(deps.baseUrl, jwt2).catch(() => {
     return;
@@ -24253,17 +24863,18 @@ async function maybeSelfUpdate(action2, latest, deps) {
 }
 
 // src/update-check.ts
-async function checkClientVersion(baseUrl, cliVersion, fetchImpl = fetch) {
+async function checkClientVersion(baseUrl, cliVersion, fetchImpl = fetch, jwt2) {
   try {
     const res = await fetchImpl(new URL("/client-version", baseUrl), {
-      signal: AbortSignal.timeout(3000)
+      signal: AbortSignal.timeout(3000),
+      headers: jwt2 ? { authorization: `Bearer ${jwt2}` } : undefined
     });
     if (!res.ok)
       return { action: "ok" };
     const parsed = ClientVersionResponseSchema.safeParse(await res.json());
     if (!parsed.success)
       return { action: "ok" };
-    const { min, latest, model, models, notice, fusion } = parsed.data;
+    const { min, latest, model, models, notice, fusion, experiments } = parsed.data;
     const extra = {};
     if (model !== undefined)
       extra.model = model;
@@ -24273,6 +24884,8 @@ async function checkClientVersion(baseUrl, cliVersion, fetchImpl = fetch) {
       extra.notice = notice;
     if (fusion !== undefined)
       extra.fusion = fusion;
+    if (experiments !== undefined)
+      extra.experiments = experiments;
     if (compareVersions(cliVersion, min) === -1)
       return { action: "block", latest, ...extra };
     if (compareVersions(cliVersion, latest) === -1)
@@ -24340,8 +24953,8 @@ ${HELP_TEXT}`);
     sleep: (ms) => new Promise((resolve4) => setTimeout(resolve4, ms)),
     launchPi,
     log: (message) => console.log(message),
-    checkClientVersion,
-    startGravityPixel: (jwt2) => startGravityPixel(jwt2, join10(dirname9(agentDir), "gravity")),
+    checkClientVersion: (baseUrl, cliVersion, jwt2) => checkClientVersion(baseUrl, cliVersion, fetch, jwt2),
+    startGravityPixel: (jwt2) => startGravityPixel(jwt2, join11(dirname10(agentDir), "gravity")),
     maybeSelfUpdate: (action2, latest) => maybeSelfUpdate(action2, latest, {
       env: process.env,
       autoUpdateEnabled: () => readAutoUpdate(getConfigPath()),