howtofixcli 0.7.13 → 0.7.15

package/dist/main.js

@@ -1,541 +1,100 @@
 #!/usr/bin/env node
-import { helpText, parseArgs } from "./args.js";
-import { APP_TITLE, APP_VERSION } from "./brand.js";
-import { installCrashHandlers } from "./fatal.js";
-import { reportError } from "./errors.js";
-import { AGENT_DIR, pinAgentDir } from "./paths.js";
-import { jsonLine } from "./json-events.js";
-import { spendCapMessage, unpricedBudgetMessage } from "./spend-cap.js";
-/**
- * The working directory to run in, or a reason the process cannot start.
- *
- * `process.cwd()` throws `ENOENT` when the directory it was started in has been
- * deleted — a real case (the scratch dir is cleaned up mid-session) and an
- * uncaught crash with a stack trace, since the throw happens while building the
- * session options. Report it as a sentence instead.
- */
-function workingDirectory() {
-    try {
-        return { cwd: process.cwd() };
-    }
-    catch {
-        return {
-            error: "the current directory no longer exists (it was deleted while the shell stayed in it). " +
-                "cd to a directory that exists, or pass one on the command line.",
-        };
-    }
-}
-/**
- * A closed stdout (`howtofix --version | head -1`) makes every later write throw
- * `EPIPE`, which the top-level handler used to report as a crash with a stack
- * trace. A pipe that went away is not an error the user needs to see.
- */
-function exitQuietlyOnEpipe() {
-    process.stdout.on("error", (error) => {
-        if (error.code === "EPIPE")
-            process.exit(0);
-        throw error;
-    });
-}
-async function main() {
-    exitQuietlyOnEpipe();
-    pinAgentDir();
-    const startedAt = performance.now();
-    const here = workingDirectory();
-    if ("error" in here) {
-        console.error(`${APP_TITLE}: ${here.error}`);
-        process.exitCode = 1;
-        return;
-    }
-    const cwd = here.cwd;
-    // A Node too old to be supported fails deep inside a dependency instead of here.
-    // `undici` 8 reaches `zlib.createZstdDecompress` at module load, and that function
-    // only exists from Node 22.19 — so on Node 20 the user gets
-    // `TypeError: Cannot read properties of undefined (reading 'bind')` with a stack
-    // trace pointing at `undici/lib/interceptor/decompress.js`, which explains nothing
-    // and names no fix. `engines` in `package.json` is not enough on its own: npm's
-    // `engine-strict` is false by default, so the install succeeds with a warning the
-    // user never sees.
-    //
-    // `--help` and `--version` are deliberately still served. They exit before `undici`
-    // is ever loaded, so they cannot hit the bug, and the user who most needs to read the
-    // help is the one on the runtime the CLI cannot run — refusing to answer leaves them
-    // with a command that looks broken and no way to learn why. Everything else is
-    // refused, because a session that cannot start the agent is not a usable CLI and
-    // failing here is what turns a stack trace inside a dependency into a sentence.
-    //
-    // Gated behind an env var so the check itself is what breaks under test, not the
-    // runtime: `HXF_FAKE_NODE` lets a check drive this branch on a modern Node. The
-    // same value feeds the message, so a test sees the version it asked about rather
-    // than the one it happens to be running on.
-    //
-    // The exit code says whether the ENVIRONMENT is supported, not whether output was
-    // produced: an old Node exits non-zero even for `--help`, so a script reading the
-    // code is not told the runtime is fine.
-    const reportedVersion = process.env.HXF_FAKE_NODE ?? process.versions.node;
-    const [major, minor] = reportedVersion.split(".").map((part) => Number.parseInt(part, 10));
-    if (!Number.isFinite(major) || major < 22 || (major === 22 && Number.isFinite(minor) && minor < 19)) {
-        // Same sentence on both streams, and stderr carries it in the informational case
-        // too: `--version` is often parsed by a script, and a warning on stdout would
-        // corrupt the value it is reading.
-        console.error(`${APP_TITLE}: Node ${reportedVersion} is too old. Node 22.19 or newer is required ` +
-            `(run "node --version" to check yours), because undici needs zstd, which Node added in 22.19. ` +
-            `Upgrade Node and run this again.`);
-        process.exitCode = 1;
-        const argv = process.argv.slice(2);
-        // The two flags that work on any runtime, served from here so the account repair
-        // below — which makes an HTTP call, and therefore loads undici — is never reached
-        // on a runtime that cannot load it.
-        if (argv.some((token) => token === "-h" || token === "--help")) {
-            console.log(helpText());
-            return;
-        }
-        if (argv.some((token) => token === "-v" || token === "--version")) {
-            console.log(`${APP_TITLE} ${APP_VERSION}`);
-            return;
-        }
-        return;
-    }
-    // Questions about the installation, answered without a session, a model, or
-    // any of the repairs below. They run first on purpose: `howtofix models` used
-    // to rewrite settings.json and print two notices about it before listing a
-    // single model, which reads like the command did something it did not.
-    const subArgv = process.argv.slice(2);
-    if (subArgv[0] === "doctor" || subArgv[0] === "models" || subArgv[0] === "sessions") {
-        const context = subArgv[0];
-        try {
-            const commands = await import("./commands.js");
-            if (context === "doctor")
-                process.exitCode = await commands.runDoctor();
-            else if (context === "models")
-                process.exitCode = commands.runModels();
-            else
-                process.exitCode = commands.runSessions(subArgv.slice(1));
-        }
-        catch (error) {
-            reportError(APP_TITLE, context, error);
-            process.exitCode = 1;
-        }
-        return;
-    }
-    // Arguments are read and checked before the start-up repairs. A typo must not
-    // rewrite settings.json, print a hint about a file the user never mentioned,
-    // or reach the network: the answer to "you forgot the prompt" is one line.
-    let earlyArgs;
-    try {
-        earlyArgs = parseArgs(process.argv.slice(2));
-    }
-    catch (error) {
-        const message = error instanceof Error ? error.message : String(error);
-        console.error(`${APP_TITLE}: ${message}\n${helpText()}`);
-        process.exitCode = 2;
-        return;
-    }
-    if (earlyArgs.print && !earlyArgs.prompt) {
-        console.error(`${APP_TITLE}: --print needs a prompt`);
-        process.exitCode = 2;
-        return;
-    }
-    // Repair a howtofix gateway entry that predates `compat.supportsDeveloperRole`.
-    // The gateway refuses the `developer` role that the SDK selects for every
-    // reasoning model, so such an entry fails every prompt silently — the spinner
-    // turns and nothing is ever reported. `/connect` writes the flag, but only for
-    // models it adds, so an account connected earlier stays broken until something
-    // repairs the file. The repair is silent: it runs on every start and only says
-    // anything when it actually changed something. Imported lazily to keep
-    // `--version` and `--help` free of the model stack.
-    const { repairGatewayModels, ensureGatewaySettings, repairModelFacts, syncGatewayModelsOnStart, checkAccount } = await import("./howtofix-account.js");
-    const { readCliCredential, renewCliCredentialIfNeeded } = await import("./cli-credentials.js");
-    const { AGENT_DIR: stateDir } = await import("./paths.js");
-    const repaired = repairGatewayModels(stateDir);
-    if (repaired > 0) {
-        console.error(`${APP_TITLE}: repaired ${repaired} howtofix model(s) that the gateway would have rejected`);
-    }
-    // Repair the numbers a synced model never got: a real context window and the
-    // reasoning flag that enables thinking. Both used to be guesses — 128k for
-    // every model, and no capability at all — so a model with a 1M window read as
-    // almost full and a reasoning model showed no thinking levels. The catalogue is
-    // cached next to the agent state, so this is a file read on a normal start and
-    // a fetch only when the cache is missing or stale.
-    const facts = await repairModelFacts(stateDir);
-    if (facts.changed > 0) {
-        console.error(`${APP_TITLE}: filled in the context window and reasoning flag for ${facts.changed} model(s) from the model catalogue`);
-    }
-    else if (facts.message) {
-        // A catalogue that could not be read is not a failure — the models keep the
-        // conservative defaults — but it is worth one line, because otherwise the
-        // wrong numbers look like the model's own.
-        console.error(`${APP_TITLE}: model catalogue unavailable (${facts.message}); context windows stay at their conservative defaults`);
-    }
-    // The SDK's HTTP idle timeout defaults to 5 minutes, so a provider that goes
-    // quiet mid-request leaves a spinner and nothing else for that long. 90s lets
-    // the SDK's own retry recover while the user is still watching. Written only
-    // when the key is missing, so a value the user set is kept.
-    if (ensureGatewaySettings(stateDir)) {
-        console.error(`${APP_TITLE}: set httpIdleTimeoutMs in settings.json so a stalled provider recovers instead of hanging`);
-    }
-    // The account's model list follows its tier, and `models.json` is a snapshot:
-    // after a tier change the file still offered what the account could reach on
-    // the day it was written, and the only refresh was a manual `/sync`. Pull the
-    // list once per start when a sign-in exists and add whatever is new — the
-    // gateway filters by the account's own group, so a free account can never
-    // collect a VIP model this way. Silent unless something was added, and never
-    // fatal: an unreachable gateway must not stop the CLI from starting.
-    try {
-        const stored = readCliCredential(stateDir);
-        if (stored) {
-            const renewed = await renewCliCredentialIfNeeded(stateDir, stored);
-            const account = await checkAccount(renewed.credential.accessToken);
-            if (account.ok) {
-                const synced = await syncGatewayModelsOnStart(stateDir, account.models);
-                if (synced.added > 0) {
-                    console.error(`${APP_TITLE}: added ${synced.added} model(s) this account can now reach`);
-                }
-            }
-        }
-    }
-    catch {
-        // A start-time re-sync that fails costs the previous list, which still
-        // works; `/sync` remains the manual way to try again.
-    }
-    const args = earlyArgs;
-    // These two exit before a session exists, so they must not load the SDK.
-    if (args.help) {
-        console.log(helpText());
-        return;
-    }
-    if (args.version) {
-        console.log(`${APP_TITLE} ${APP_VERSION}`);
-        // A build whose signing key does not match the panel's would fail every
-        // sign-in with a 401 that reads like a server fault. Say it here, where it
-        // costs nothing, rather than leaving it to be discovered in the login flow.
-        const { cliSigningKeyMatchesPanel, cliSigningKeyFingerprint } = await import("./cli-auth.js");
-        if (!cliSigningKeyMatchesPanel()) {
-            console.error(`${APP_TITLE}: this build's CLI signing key (${cliSigningKeyFingerprint()}) does not match ` +
-                `the key the panel verifies against, so sign-in will be refused.`);
-            process.exitCode = 1;
-        }
-        return;
-    }
-    // The sandbox re-executes this process once, before any session exists. The
-    // guard in the environment is what stops the child from wrapping itself again.
-    if (args.sandbox && !process.env.HOWTOFIX_SANDBOXED) {
-        const { detectSandbox, enterSandbox, describeSandbox } = await import("./sandbox.js");
-        const kind = detectSandbox();
-        if (!kind) {
-            console.error(`${APP_TITLE}: --sandbox needs a working bubblewrap (Linux) or sandbox-exec (macOS). ` +
-                `Neither could be used here — on Linux this usually means unprivileged user namespaces are disabled.`);
-            process.exitCode = 1;
-            return;
-        }
-        console.error(describeSandbox(kind));
-        process.exitCode = enterSandbox(kind, { cwd, agentDir: AGENT_DIR, argv: [process.execPath, ...process.argv.slice(1)] });
-        return;
-    }
-    // Route through a proxy before the first request goes out. Here rather than at
-    // the top of `main` because this is the first line that cannot exit early:
-    // `--version` and `--help` have already returned above, and loading the proxy
-    // agent for a command that makes no request is a cost with no purpose. The
-    // update check and the sign-in exchange both go through it, and they run
-    // before any session exists — a proxy installed after them would be a setting
-    // that works only sometimes.
-    const { installProxy } = await import("./proxy.js");
-    installProxy(AGENT_DIR);
-    // `--update` installs the newest release; `--check-update` only looks. Both
-    // exit without a session, so neither loads the model stack.
-    if (args.update || args.checkUpdate) {
-        const { PACKAGE_NAME, checkForUpdate, installUpdate, isInstalledCopy } = await import("./update.js");
-        const check = await checkForUpdate(APP_VERSION);
-        if (!check.latest) {
-            // Not reaching the registry is a failure only when an install was asked
-            // for; a plain check that could not run has nothing to report.
-            console.error(`${APP_TITLE}: ${check.message}`);
-            process.exitCode = args.update ? 1 : 0;
-            return;
-        }
-        console.log(check.message);
-        if (args.checkUpdate || !check.available)
-            return;
-        if (!isInstalledCopy()) {
-            console.error(`${APP_TITLE}: this copy was not installed by npm, so npm cannot replace it. ` +
-                `install it with: npm install -g ${PACKAGE_NAME}`);
-            process.exitCode = 1;
-            return;
-        }
-        const result = await installUpdate({ version: check.latest });
-        console.log(result.message);
-        if (!result.ok)
-            process.exitCode = 1;
-        return;
-    }
-    // `howtofix preset <new|check|pack>` authors a preset and exits. It runs before
-    // anything loads the SDK, because authoring has nothing to do with a model and
-    // a preset author on a machine without credentials should still be able to
-    // validate what they wrote.
-    const presetArgv = process.argv.slice(2);
-    if (presetArgv[0] === "preset") {
-        const { runPresetCommand } = await import("./preset-command.js");
-        process.exitCode = runPresetCommand(presetArgv.slice(1));
-        return;
-    }
-    const { expandFileReferences } = await import("./at-file.js");
-    const { isApprovalMode, setApprovalMode, setDangerousBypass, isDangerousBypass } = await import("./permissions.js");
-    const { openSession } = await import("./session.js");
-    // Print mode has no dialogs, so anything that would ask must not block. The
-    // interactive default is `full-auto` too: an approval prompt that fires on
-    // every write is friction the user has to configure away, and a critical
-    // command is denied in every mode regardless.
-    setApprovalMode(args.approval && isApprovalMode(args.approval) ? args.approval : "full-auto");
-    // `--dangerously-skip-permissions` lifts the last two refusals print mode can
-    // still hit: a critical command and the loop guard. A stored preference does
-    // the same for someone who never passes flags — the flag wins when it is
-    // given, so a one-off run cannot be overridden by a file.
-    const { readWorkbenchSettings } = await import("./settings.js");
-    if (args.dangerouslySkipPermissions || readWorkbenchSettings(stateDir).skipPermissions)
-        setDangerousBypass(true);
-    // A bypass nobody can see is the dangerous kind: it removes the refusals a
-    // user relies on and leaves no trace of why. Say it is on, every run.
-    if (isDangerousBypass()) {
-        console.error(`${APP_TITLE}: permission checks are OFF — critical commands (filesystem wipes, ` +
-            `fork bombs, host shutdown) and the repeated-call guard are NOT enforced for this run. ` +
-            `Turn it off with /settings, or by removing skipPermissions from settings.json.`);
-    }
-    const open = (options) => openSession({
-        cwd,
-        model: args.model,
-        thinking: args.thinking,
-        continueSession: options.continueSession ?? false,
-        noSession: options.noSession ?? false,
-        sessionPath: options.sessionPath,
-        // The caller chooses the session, not the prompt. `--print` is the only
-        // route that runs without a terminal, and the prompt must say so or a
-        // skill that asks a question becomes a dead end that still exits 0.
-        interactive: !args.print,
-    });
-    const opened = await open({
-        continueSession: args.continueSession,
-        sessionPath: args.sessionPath,
-        noSession: args.noSession || args.print,
-    });
-    // The note reports how the session was opened, so a refusal below must not
-    // swallow it: print writes it here, ahead of any guard; the TUI carries it
-    // into the feed as `options.note`.
-    if (args.print && opened.note)
-        console.error(opened.note);
-    // A budget on an unpriced model can never fire, so refuse instead of
-    // pretending to guard — in *both* modes, now that the workbench enforces the
-    // cap too: a TUI drawing a cap over a model that reports $0 a turn would be
-    // the exact lie this refusal exists to prevent. See `priced` on
-    // `OpenedSession`.
-    if (args.maxBudgetUsd !== undefined && !opened.priced) {
-        console.error(`${APP_TITLE}: ${unpricedBudgetMessage(opened.modelLabel, stateDir)}`);
-        await opened.dispose();
-        process.exitCode = 2;
-        return;
-    }
-    if (args.print) {
-        // `--print` has no slash router, but the TUI routes every "/" prompt to one
-        // (submit → runSlash) and never lets those reach the model. Without this
-        // guard the same prompt is forwarded verbatim — `/connect sk-...` pasted
-        // into a script sends the credential to the provider and records it in the
-        // transcript, and the command silently does not run. Skills are exempt:
-        // the TUI forwards those as prompts too (runSlash → skillInvocation).
-        const trimmedPrompt = args.prompt.trimStart();
-        if (trimmedPrompt.startsWith("/")) {
-            const name = trimmedPrompt.slice(1).split(/\s+/)[0] ?? "";
-            const { skillInvocation } = await import("./skills.js");
-            const skillNames = opened.session.resourceLoader.getSkills().skills.map((skill) => skill.name);
-            const isSkill = skillInvocation(trimmedPrompt, skillNames) !== undefined;
-            if (!isSkill) {
-                const { slashCommands } = await import("./ui.js");
-                if (slashCommands(opened.session).some((command) => command.name === name)) {
-                    console.error(`${APP_TITLE}: /${name} runs in the TUI only — --print sends prompts straight to the model. ` +
-                        `Run \`howtofix\` without --print for interactive commands.`);
-                    await opened.dispose();
-                    process.exitCode = 2;
-                    return;
-                }
-            }
-        }
-        const stream = args.outputFormat === "stream-json";
-        const json = args.outputFormat === "json";
-        // Both machine formats end with a result record; only `stream-json` writes
-        // the events along the way.
-        const machine = stream || json;
-        // A `system`-shaped header first, so a consumer learns the model and the
-        // session id before any event that refers to them — the same courtesy the
-        // SDK's own JSON mode pays. Only the streaming format has events to head.
-        if (stream) {
-            const header = {
-                type: "system",
-                subtype: "init",
-                cwd,
-                session_id: opened.session.sessionId,
-                model: opened.modelLabel,
-                output_format: args.outputFormat,
-                max_budget_usd: args.maxBudgetUsd ?? null,
-                dangerously_skip_permissions: args.dangerouslySkipPermissions,
-                cli_version: APP_VERSION,
-            };
-            process.stdout.write(`${JSON.stringify(header)}\n`);
-        }
-        let unsubscribe;
-        let budgetHit;
-        const checkBudget = () => {
-            if (args.maxBudgetUsd === undefined || budgetHit !== undefined)
-                return;
-            const spent = opened.session.getSessionStats().cost;
-            if (spent > args.maxBudgetUsd) {
-                budgetHit = { spent };
-                void opened.session.abort();
-            }
-        };
-        try {
-            // Both machine formats and text need the same budget signal, and the only
-            // reliable one is the event stream: usage is updated as events arrive, so
-            // a timer that samples the total can miss the update entirely and let the
-            // run overspend. Subscribe in every mode; only `stream-json` writes the
-            // lines out.
-            unsubscribe = opened.session.subscribe((event) => {
-                if (stream) {
-                    const line = jsonLine(event);
-                    if (line !== undefined)
-                        process.stdout.write(line);
-                }
-                checkBudget();
-            });
-            await opened.session.prompt(expandFileReferences(args.prompt, cwd));
-            const text = opened.session.getLastAssistantText() ?? "";
-            if (budgetHit) {
-                console.error(`${APP_TITLE}: ${spendCapMessage(budgetHit.spent, args.maxBudgetUsd)}`);
-                // A consumer reading the stream needs a terminal record on this path
-                // too: without it the run just stops mid-stream and looks truncated.
-                if (machine) {
-                    const stats = opened.session.getSessionStats();
-                    process.stdout.write(`${JSON.stringify({
-                        type: "result",
-                        subtype: "error_max_budget_usd",
-                        is_error: true,
-                        result: text,
-                        session_id: opened.session.sessionId,
-                        duration_ms: Math.round(performance.now() - startedAt),
-                        num_turns: stats.assistantMessages,
-                        total_cost_usd: stats.cost,
-                        usage: {
-                            input_tokens: stats.tokens.input,
-                            output_tokens: stats.tokens.output,
-                            cache_read_input_tokens: stats.tokens.cacheRead,
-                            cache_creation_input_tokens: stats.tokens.cacheWrite,
-                        },
-                    })}\n`);
-                }
-                process.exitCode = 1;
-                return;
-            }
-            if (machine) {
-                const stats = opened.session.getSessionStats();
-                const last = opened.session.state.messages.at(-1);
-                process.stdout.write(`${JSON.stringify({
-                    type: "result",
-                    subtype: "success",
-                    is_error: false,
-                    result: text,
-                    session_id: opened.session.sessionId,
-                    duration_ms: Math.round(performance.now() - startedAt),
-                    num_turns: stats.assistantMessages,
-                    total_cost_usd: stats.cost,
-                    usage: {
-                        input_tokens: stats.tokens.input,
-                        output_tokens: stats.tokens.output,
-                        cache_read_input_tokens: stats.tokens.cacheRead,
-                        cache_creation_input_tokens: stats.tokens.cacheWrite,
-                    },
-                    stop_reason: last?.role === "assistant" ? last.stopReason : undefined,
-                })}\n`);
-            }
-            else {
-                process.stdout.write(text.endsWith("\n") ? text : `${text}\n`);
-            }
-            // The SDK contract: a final assistant response that ended in `error` or
-            // `aborted` produces a nonzero exit status, so scripts can branch on it.
-            const last = opened.session.state.messages.at(-1);
-            if (last?.role === "assistant") {
-                if (last.stopReason === "error" || last.stopReason === "aborted")
-                    process.exitCode = 1;
-                else if (last.errorMessage)
-                    process.exitCode = 1;
-                // A failed turn used to exit 1 with no output at all, which is
-                // indistinguishable from a crash. Say what the provider said.
-                if (process.exitCode === 1 && last.errorMessage) {
-                    console.error(`${APP_TITLE}: ${last.errorMessage}`);
-                    // Same gap as the TUI: the gateway's own sentence, and the fix for it.
-                    // Imported here rather than at the top so a run that never fails does
-                    // not pay to parse it.
-                    const { diagnoseGatewayFailure } = await import("./gateway-errors.js");
-                    const fix = diagnoseGatewayFailure(last.errorMessage);
-                    if (fix !== undefined)
-                        console.error(`${APP_TITLE}: ${fix}`);
-                }
-                // Same reasoning as the budget path: a JSON consumer needs the terminal
-                // record even when the run failed.
-                if (machine && process.exitCode === 1) {
-                    const stats = opened.session.getSessionStats();
-                    process.stdout.write(`${JSON.stringify({
-                        type: "result",
-                        subtype: last.stopReason === "aborted" ? "error_aborted" : "error_during_execution",
-                        is_error: true,
-                        result: text,
-                        session_id: opened.session.sessionId,
-                        duration_ms: Math.round(performance.now() - startedAt),
-                        num_turns: stats.assistantMessages,
-                        total_cost_usd: stats.cost,
-                        usage: {
-                            input_tokens: stats.tokens.input,
-                            output_tokens: stats.tokens.output,
-                            cache_read_input_tokens: stats.tokens.cacheRead,
-                            cache_creation_input_tokens: stats.tokens.cacheWrite,
-                        },
-                        stop_reason: last.stopReason,
-                    })}\n`);
-                }
-            }
-        }
-        finally {
-            unsubscribe?.();
-            await opened.dispose();
-        }
-        return;
-    }
-    if (!process.stdin.isTTY || !process.stdout.isTTY) {
-        console.error(`${APP_TITLE}: interactive mode needs a terminal. use --print for pipes.`);
-        await opened.dispose();
-        process.exitCode = 2;
-        return;
-    }
-    const { runWorkbench } = await import("./ui.js");
-    // Only a copy npm owns can be replaced by npm, and only when the user has not
-    // turned it off. The check itself is handed to the workbench so it runs after
-    // the UI is up rather than before it.
-    const { autoUpdateEnabled, isInstalledCopy } = await import("./update.js");
-    const canSelfUpdate = isInstalledCopy() && autoUpdateEnabled(`${stateDir}/settings.json`);
-    await runWorkbench({
-        cwd,
-        modelLabel: opened.modelLabel,
-        session: opened.session,
-        // The `/rtk` command toggles the flag the tool-result extension reads; the setter
-        // lives beside that flag so the two cannot drift apart.
-        setCompressToolOutput: opened.setCompressToolOutput,
-        initialPrompt: args.prompt || undefined,
-        note: opened.note,
-        // The cap the print path enforces over one run, handed to a UI that has to
-        // enforce it over many: same flag, same dollars, different lifetime.
-        maxBudgetUsd: args.maxBudgetUsd,
-        update: canSelfUpdate ? { current: APP_VERSION, install: true } : undefined,
-        reopen: open,
-    });
-}
-installCrashHandlers(APP_TITLE);
-main().catch((error) => {
-    reportError(APP_TITLE, undefined, error);
-    process.exitCode = 1;
-});
+import{b as U,c as I}from"./chunk-6FUWMLWO.js";import{b as N}from"./chunk-YW7NORH3.js";import{a as R,b as O}from"./chunk-AGGIYXN7.js";import{D as j,K as F}from"./chunk-V656XVXV.js";import"./chunk-UTYFLLSM.js";import{a as r,b as x}from"./chunk-Y7YM5R75.js";import"./chunk-WOT6VMZA.js";var W={rpc:!0,acp:!0},B={off:!0,minimal:!0,low:!0,medium:!0,high:!0,xhigh:!0,max:!0},L={suggest:!0,"auto-edit":!0,"full-auto":!0},D={text:!0,json:!0,"stream-json":!0};function he(c){let e=Number(c);if(!Number.isFinite(e)||e<=0)throw new Error(`--max-budget-usd needs a positive number of dollars, got '${c}'`);return e}function v(c,e,l){let d=c[e];if(d?.includes("="))return d.slice(d.indexOf("=")+1);let p=c[e+1];if(!p||p.startsWith("-"))throw new Error(`${l} needs a value`);return c.splice(e+1,1),p}function G(c){let e={print:!1,continueSession:!1,noSession:!1,help:!1,version:!1,update:!1,checkUpdate:!1,outputFormat:"text",dangerouslySkipPermissions:!1,sandbox:!1,prompt:""},l=[],d=[...c];for(let p=0;p<d.length;p++){let s=d[p]??"";if(s==="--"){l.push(...d.slice(p+1));break}if(s==="-h"||s==="--help")e.help=!0;else if(s==="-v"||s==="--version")e.version=!0;else if(s==="-p"||s==="--print")e.print=!0;else if(s==="-c"||s==="--continue")e.continueSession=!0;else if(s==="--no-session")e.noSession=!0;else if(s==="--sandbox")e.sandbox=!0;else if(s==="--update")e.update=!0;else if(s==="--check-update")e.checkUpdate=!0;else if(s==="-r"||s==="--resume")e.continueSession=!0;else if(s==="--session"||s.startsWith("--session="))e.sessionPath=v(d,p,"--session");else if(s==="-m"||s==="--model"||s.startsWith("--model="))e.model=v(d,p,"--model");else if(s==="--thinking"||s.startsWith("--thinking="))e.thinking=v(d,p,"--thinking");else if(s==="--approval"||s.startsWith("--approval="))e.approval=v(d,p,"--approval");else if(s==="--output-format"||s.startsWith("--output-format="))e.outputFormat=v(d,p,"--output-format");else if(s==="--max-budget-usd"||s.startsWith("--max-budget-usd="))e.maxBudgetUsd=he(v(d,p,"--max-budget-usd"));else if(s==="--mode"||s.startsWith("--mode=")){let h=v(d,p,"--mode");if(!W[h])throw new Error(`--mode must be one of: ${Object.keys(W).join(", ")}`);e.mode=h}else if(s==="--acp")e.mode="acp";else if(s==="--dangerously-skip-permissions")e.dangerouslySkipPermissions=!0;else{if(s.startsWith("-"))throw new Error(`unknown option ${s}`);l.push(s)}}if(e.thinking&&!B[e.thinking])throw new Error(`thinking must be one of: ${Object.keys(B).join(", ")}`);if(e.approval&&!L[e.approval])throw new Error(`approval must be one of: ${Object.keys(L).join(", ")}`);if(!D[e.outputFormat])throw new Error(`output-format must be one of: ${Object.keys(D).join(", ")}`);if(e.outputFormat!=="text"&&!e.print)throw new Error(`--output-format ${e.outputFormat} is a machine contract; it needs --print`);if(e.dangerouslySkipPermissions&&!e.print)throw new Error("--dangerously-skip-permissions is for unattended runs; it needs --print. interactively, pick an approval mode instead (/approval, or --approval)");if(e.prompt=l.join(" ").trim(),e.update&&e.checkUpdate)throw new Error("--update installs; --check-update only looks. pick one");if((e.update||e.checkUpdate)&&(e.print||e.continueSession||e.sessionPath||e.prompt))throw new Error("--update and --check-update act on the installation, not a session; they take no prompt");if(e.continueSession&&e.noSession)throw new Error("--continue and --no-session cannot be combined");if(e.sessionPath&&e.noSession)throw new Error("--session and --no-session cannot be combined");if(e.sessionPath&&e.continueSession)throw new Error("--session and --continue cannot be combined");if(e.print&&(e.continueSession||e.sessionPath))throw new Error("--print runs one prompt in a throwaway session; it cannot be combined with --continue or --session");if(e.mode&&(e.print||e.prompt))throw new Error(`--mode ${e.mode} is a protocol server: prompts arrive over the protocol, not the command line`);if(e.mode&&(e.continueSession||e.sessionPath))throw new Error(`--mode ${e.mode} opens its own sessions; it cannot be combined with --continue or --session`);if(e.sessionPath&&!e.sessionPath.endsWith(".jsonl"))throw new Error(`--session expects a session file, got '${e.sessionPath}'`);return e}function P(){return`${r} ${x}
+coding agent. layout is a workbench, not a chat log.
+
+usage:
+  howtofix [options] [prompt]
+  howtofix -p "explain this repo"
+  howtofix acp                       serve the Agent Client Protocol on stdio
+  howtofix --mode rpc                serve JSON-line commands on stdio
+  howtofix preset new|check|pack     author a preset
+  howtofix doctor|models|sessions    inspect the installation
+  howtofix sessions --search <text> find a session by what was said in it
+  howtofix sessions --export <n>    print session n from the list as markdown
+
+options:
+  -p, --print          run one prompt and print the answer
+  -c, --continue       resume the latest session in this folder
+  -r, --resume         alias for --continue
+      --session <file> run inside a specific saved session file
+      --no-session     do not write a session file
+  -m, --model <id>     provider/model, or a fuzzy model id
+      --thinking <lv>  off | minimal | low | medium | high | xhigh | max
+      --approval <m>   suggest | auto-edit | full-auto
+      --output-format <f>  text | json | stream-json
+                       text for a person; json writes the final result only;
+                       stream-json writes every event as it happens
+      --max-budget-usd <n> stop the run once it has spent n dollars
+      --mode <m>       rpc | acp: serve a protocol on stdin/stdout, no terminal
+      --acp            same as --mode acp
+      --sandbox        run the whole session inside a filesystem sandbox:
+                       the project is writable, the rest is read-only.
+                       needs bubblewrap (Linux) or sandbox-exec (macOS)
+      --dangerously-skip-permissions
+                       run everything, including commands otherwise refused.
+                       unattended runs only; pairs with --print
+      --update         install the newest release and exit
+      --check-update   say whether a newer release exists
+  -h, --help
+  -v, --version
+
+keys:
+  enter                send
+  shift+enter          new line
+  ctrl+c               stop the run, or quit when idle
+  ctrl+d               quit
+  ctrl+l               jump to the latest line
+  ctrl+o               clear the screen (history is kept)
+  ctrl+t               raise the thinking level (wraps to off)
+  ctrl+shift+t         lower the thinking level
+  esc                  clear the draft
+  ctrl+v               paste from the clipboard
+  pgup / pgdn          scroll the transcript a page
+  home / end           jump to the top / back to the latest line
+  wheel                scroll the transcript
+
+commands:
+  /init /model /providers /thinking /approval /login /connect /logout /new
+  /resume /compact /name /stats /rtk /diff /commit /undo /rewind /review /tools /export
+  /copy /agents /goal /plan /workflow /session /help /quit /exit
+  /dcp /context /decompress /sweep
+  /update /usage /sync
+  /skills /preset /settings /proxy /roblox
+/roblox login|logout|status|tunnel manages the Roblox connection: sign in with Roblox
+(no API key), see what is connected, and link this machine to the hosted workspace.
+
+/stats shows session tokens, cost, and the prompt-cache hit rate; a high read
+total alone hides re-billed context, so the rate is what tells you the truth.
+/rtk compresses long tool output (logs, diffs, greps) before the model reads it.
+Off by default: /rtk on to save tokens when skimming, /rtk off to keep every line.
+Nothing is invented by it \u2014 it drops redundant lines and says how many it dropped,
+and never touches a failed command or one already truncated.
+
+/preset lists skills bundled with this build and skills from the registry, by
+category; picking one downloads it into the project and loads it as a skill.
+An integration preset installs disabled: its skills and MCP server stay dormant
+until /preset enable <name>, and /preset disable <name> takes the server back
+out of the live session. /roblox reports that state for RoToolbox in one line.
+/skills lists what is loaded now.
+
+/proxy <url> routes requests through a proxy, /proxy off stops, /proxy env uses
+HTTPS_PROXY / HTTP_PROXY / ALL_PROXY; /proxy alone shows what is set.
+
+/agents <id> <message> messages a parked agent; /agents <id> shows one.
+
+a line starting with ! runs in the project shell.
+
+an npm install checks for a newer release at startup and can install it itself;
+/update does it on demand. config and sessions live in ~/.howtofix/agent.
+/connect signs in to howtofix.id in your browser, and falls back to a pasted
+token; /login takes another provider's key.
+`}function fe(c,e=!1){let{message:l}=R(c);if(!e)return l;let d=c instanceof Error?c.stack:void 0;return d&&d.includes(`
+`)?`${l}
+${d}`:l}function H(c,e){let l=e?.debug??process.env.HOWTOFIX_DEBUG==="1",d=e?.exit??(s=>process.exit(s)),p=s=>{console.error(`${c}: ${fe(s,l)}`),d(1)};process.on("uncaughtException",p),process.on("unhandledRejection",p)}function ge(){try{return{cwd:process.cwd()}}catch{return{error:"the current directory no longer exists (it was deleted while the shell stayed in it). cd to a directory that exists, or pass one on the command line."}}}function we(){process.stdout.on("error",c=>{throw c.code==="EPIPE"&&process.exit(0),c})}async function ke(){we(),F();let c=performance.now(),e=ge();if("error"in e){console.error(`${r}: ${e.error}`),process.exitCode=1;return}let l=e.cwd,d=process.env.HXF_FAKE_NODE??process.versions.node,[p,s]=d.split(".").map(o=>Number.parseInt(o,10));if(!Number.isFinite(p)||p<22||p===22&&Number.isFinite(s)&&s<19){console.error(`${r}: Node ${d} is too old. Node 22.19 or newer is required (run "node --version" to check yours), because undici needs zstd, which Node added in 22.19. Upgrade Node and run this again.`),process.exitCode=1;let o=process.argv.slice(2);if(o.some(a=>a==="-h"||a==="--help")){console.log(P());return}if(o.some(a=>a==="-v"||a==="--version")){console.log(`${r} ${x}`);return}return}let h=process.argv.slice(2);if(h[0]==="doctor"||h[0]==="models"||h[0]==="sessions"){let o=h[0];try{let a=await import("./chunk-EIBOS5KO.js");o==="doctor"?process.exitCode=await a.runDoctor():o==="models"?process.exitCode=a.runModels():process.exitCode=a.runSessions(h.slice(1))}catch(a){O(r,o,a),process.exitCode=1}return}let X=h[0]==="acp"?["--acp",...h.slice(1)]:h,S;try{S=G(X)}catch(o){let a=o instanceof Error?o.message:String(o);console.error(`${r}: ${a}
+${P()}`),process.exitCode=2;return}if(S.print&&!S.prompt){console.error(`${r}: --print needs a prompt`),process.exitCode=2;return}let{repairGatewayModels:J,ensureGatewaySettings:V,repairModelFacts:q,syncGatewayModelsOnStart:K,checkAccount:Y,fetchGatewayPrices:z}=await import("./chunk-UNK5HRQR.js"),{readCliCredential:Q,renewCliCredentialIfNeeded:Z}=await import("./chunk-CPJKKHGH.js"),{AGENT_DIR:w}=await import("./chunk-GXB7RZHH.js"),A=J(w);A>0&&console.error(`${r}: repaired ${A} howtofix model(s) that the gateway would have rejected`);let _,C;try{let o=Q(w);if(o){let b=(await Z(w,o)).credential.accessToken,[m,f]=await Promise.all([z(b),Y(b)]);m.size>0&&(_=m),f.ok&&(C=f.models)}}catch{}let $=await q(w,_?{prices:_}:void 0);if($.changed>0?console.error(`${r}: filled in the context window, reasoning flag and price for ${$.changed} model(s)`):$.message&&console.error(`${r}: model catalogue unavailable (${$.message}); context windows stay at their conservative defaults`),V(w)&&console.error(`${r}: set httpIdleTimeoutMs in settings.json so a stalled provider recovers instead of hanging`),C)try{let o=await K(w,C,_);o.added>0&&console.error(`${r}: added ${o.added} model(s) this account can now reach`)}catch{}let t=S;if(t.help){console.log(P());return}if(t.version){console.log(`${r} ${x}`);let{cliSigningKeyMatchesPanel:o,cliSigningKeyFingerprint:a}=await import("./chunk-LOOFOBTS.js");o()||(console.error(`${r}: this build's CLI signing key (${a()}) does not match the key the panel verifies against, so sign-in will be refused.`),process.exitCode=1);return}if(t.sandbox&&!process.env.HOWTOFIX_SANDBOXED){let{detectSandbox:o,enterSandbox:a,describeSandbox:b}=await import("./chunk-N345KWWK.js"),m=o();if(!m){console.error(`${r}: --sandbox needs a working bubblewrap (Linux) or sandbox-exec (macOS). Neither could be used here \u2014 on Linux this usually means unprivileged user namespaces are disabled.`),process.exitCode=1;return}console.error(b(m)),process.exitCode=a(m,{cwd:l,agentDir:j,argv:[process.execPath,...process.argv.slice(1)]});return}let{installProxy:ee}=await import("./chunk-WKUJ7CFO.js");if(ee(j),t.update||t.checkUpdate){let{PACKAGE_NAME:o,checkForUpdate:a,installUpdate:b,isInstalledCopy:m}=await import("./chunk-7CHDNTH6.js"),f=await a(x);if(!f.latest){console.error(`${r}: ${f.message}`),process.exitCode=t.update?1:0;return}if(console.log(f.message),t.checkUpdate||!f.available)return;if(!m()){console.error(`${r}: this copy was not installed by npm, so npm cannot replace it. install it with: npm install -g ${o}`),process.exitCode=1;return}let y=await b({version:f.latest});console.log(y.message),y.ok||(process.exitCode=1);return}let T=process.argv.slice(2);if(T[0]==="preset"){let{runPresetCommand:o}=await import("./chunk-FPXVDP32.js");process.exitCode=o(T.slice(1));return}let{expandFileReferences:se}=await import("./chunk-TSEKPGK4.js"),{isApprovalMode:te,setApprovalMode:oe,setDangerousBypass:ne,isDangerousBypass:re}=await import("./chunk-56SEAGAQ.js"),{openSession:ie}=await import("./chunk-HT3MFLAV.js");oe(t.approval&&te(t.approval)?t.approval:"full-auto");let{readWorkbenchSettings:ae}=await import("./chunk-V3R4FYTJ.js");if((t.dangerouslySkipPermissions||ae(w).skipPermissions)&&ne(!0),re()&&console.error(`${r}: permission checks are OFF \u2014 critical commands (filesystem wipes, fork bombs, host shutdown) and the repeated-call guard are NOT enforced for this run. Turn it off with /settings, or by removing skipPermissions from settings.json.`),t.mode){let{serveProtocol:o}=await import("./chunk-V2RPZMLK.js");await o(t.mode,{cwd:l,model:t.model,thinking:t.thinking});return}let M=o=>ie({cwd:l,model:t.model,thinking:t.thinking,continueSession:o.continueSession??!1,noSession:o.noSession??!1,sessionPath:o.sessionPath,interactive:!t.print}),n=await M({continueSession:t.continueSession,sessionPath:t.sessionPath,noSession:t.noSession||t.print});if(t.print&&n.note&&console.error(n.note),t.maxBudgetUsd!==void 0&&!n.priced){console.error(`${r}: ${I(n.modelLabel,w)}`),await n.dispose(),process.exitCode=2;return}if(t.print){let o=t.prompt.trimStart();if(o.startsWith("/")){let u=o.slice(1).split(/\s+/)[0]??"",{skillInvocation:g}=await import("./chunk-ILDDDLRC.js"),i=n.session.resourceLoader.getSkills().skills.map(E=>E.name);if(!(g(o,i)!==void 0)){let{slashCommands:E}=await import("./chunk-SX5VE6XA.js");if(E(n.session).some(me=>me.name===u)){console.error(`${r}: /${u} runs in the TUI only \u2014 --print sends prompts straight to the model. Run \`howtofix\` without --print for interactive commands.`),await n.dispose(),process.exitCode=2;return}}}let a=t.outputFormat==="stream-json",b=t.outputFormat==="json",m=a||b;if(a){let u={type:"system",subtype:"init",cwd:l,session_id:n.session.sessionId,model:n.modelLabel,output_format:t.outputFormat,max_budget_usd:t.maxBudgetUsd??null,dangerously_skip_permissions:t.dangerouslySkipPermissions,cli_version:x};process.stdout.write(`${JSON.stringify(u)}
+`)}let f,y,ue=()=>{if(t.maxBudgetUsd===void 0||y!==void 0)return;let u=n.session.getSessionStats().cost;u>t.maxBudgetUsd&&(y={spent:u},n.session.abort())};try{f=n.session.subscribe(i=>{if(a){let k=N(i);k!==void 0&&process.stdout.write(k)}ue()}),await n.session.prompt(se(t.prompt,l));let u=n.session.getLastAssistantText()??"";if(y){if(console.error(`${r}: ${U(y.spent,t.maxBudgetUsd)}`),m){let i=n.session.getSessionStats();process.stdout.write(`${JSON.stringify({type:"result",subtype:"error_max_budget_usd",is_error:!0,result:u,session_id:n.session.sessionId,duration_ms:Math.round(performance.now()-c),num_turns:i.assistantMessages,total_cost_usd:i.cost,usage:{input_tokens:i.tokens.input,output_tokens:i.tokens.output,cache_read_input_tokens:i.tokens.cacheRead,cache_creation_input_tokens:i.tokens.cacheWrite}})}
+`)}process.exitCode=1;return}if(m){let i=n.session.getSessionStats(),k=n.session.state.messages.at(-1);process.stdout.write(`${JSON.stringify({type:"result",subtype:"success",is_error:!1,result:u,session_id:n.session.sessionId,duration_ms:Math.round(performance.now()-c),num_turns:i.assistantMessages,total_cost_usd:i.cost,usage:{input_tokens:i.tokens.input,output_tokens:i.tokens.output,cache_read_input_tokens:i.tokens.cacheRead,cache_creation_input_tokens:i.tokens.cacheWrite},stop_reason:k?.role==="assistant"?k.stopReason:void 0})}
+`)}else process.stdout.write(u.endsWith(`
+`)?u:`${u}
+`);let g=n.session.state.messages.at(-1);if(g?.role==="assistant"){if((g.stopReason==="error"||g.stopReason==="aborted"||g.errorMessage)&&(process.exitCode=1),process.exitCode===1&&g.errorMessage){console.error(`${r}: ${g.errorMessage}`);let{diagnoseGatewayFailure:i}=await import("./chunk-VLMQSD25.js"),k=i(g.errorMessage);k!==void 0&&console.error(`${r}: ${k}`)}if(m&&process.exitCode===1){let i=n.session.getSessionStats();process.stdout.write(`${JSON.stringify({type:"result",subtype:g.stopReason==="aborted"?"error_aborted":"error_during_execution",is_error:!0,result:u,session_id:n.session.sessionId,duration_ms:Math.round(performance.now()-c),num_turns:i.assistantMessages,total_cost_usd:i.cost,usage:{input_tokens:i.tokens.input,output_tokens:i.tokens.output,cache_read_input_tokens:i.tokens.cacheRead,cache_creation_input_tokens:i.tokens.cacheWrite},stop_reason:g.stopReason})}
+`)}}}finally{f?.(),await n.dispose()}return}if(!process.stdin.isTTY||!process.stdout.isTTY){console.error(`${r}: interactive mode needs a terminal. use --print for pipes.`),await n.dispose(),process.exitCode=2;return}let{runWorkbench:ce}=await import("./chunk-SX5VE6XA.js"),{autoUpdateEnabled:de,isInstalledCopy:pe}=await import("./chunk-7CHDNTH6.js"),le=pe()&&de(`${w}/settings.json`);await ce({cwd:l,modelLabel:n.modelLabel,session:n.session,setCompressToolOutput:n.setCompressToolOutput,initialPrompt:t.prompt||void 0,note:n.note,maxBudgetUsd:t.maxBudgetUsd,update:le?{current:x,install:!0}:void 0,reopen:M})}H(r);ke().catch(c=>{O(r,void 0,c),process.exitCode=1});