kifaru 1.0.180 → 1.0.181

package/dashboard/assurance.html

@@ -1324,9 +1324,30 @@
         <button class="tab" role="tab" data-tab="audit" aria-selected="false">
           <span class="num">4</span> Audit Evidence
         </button>
-        <div class="session-picker" style="margin-left: auto; display: inline-flex; align-items: center; gap: 8px; padding: 6px 0;">
-          <label for="globalSessionSelect" class="eyebrow" style="font-size: 11px; margin: 0; text-transform: uppercase; letter-spacing: 0.05em; color: var(--muted);">Agent Session:</label>
-          <select id="globalSessionSelect" style="background: var(--surface-2, #18202b); color: var(--ink, #e6edf3); border: 1px solid var(--border, #293039); border-radius: 6px; padding: 4px 8px; font-size: 12px; font-family: var(--font-mono, monospace); max-width: 380px; cursor: pointer;">
+        <div
+          class="session-picker"
+          style="margin-left: auto; display: inline-flex; align-items: center; gap: 8px; padding: 6px 0"
+        >
+          <label
+            for="globalSessionSelect"
+            class="eyebrow"
+            style="font-size: 11px; margin: 0; text-transform: uppercase; letter-spacing: 0.05em; color: var(--muted)"
+            >Agent Session:</label
+          >
+          <select
+            id="globalSessionSelect"
+            style="
+              background: var(--surface-2, #18202b);
+              color: var(--ink, #e6edf3);
+              border: 1px solid var(--border, #293039);
+              border-radius: 6px;
+              padding: 4px 8px;
+              font-size: 12px;
+              font-family: var(--font-mono, monospace);
+              max-width: 380px;
+              cursor: pointer;
+            "
+          >
             <option value="auto">⚡ Latest Session (Auto)</option>
             <option value="all">🌐 All Workspace Sessions</option>
           </select>
@@ -1381,12 +1402,12 @@
             <div class="flist" id="topfindings"></div>
           </div>
         </div>
-        <div class="card" id="overviewRecentRunsCard" style="margin-top: 14px; display: none;">
+        <div class="card" id="overviewRecentRunsCard" style="margin-top: 14px; display: none">
           <div class="card-h">
             <h2>Recent agent sessions &amp; runs</h2>
             <span class="sub" id="overviewRunsCount">Durable platform ledger</span>
           </div>
-          <div id="overviewRunsList" style="display:flex; flex-direction:column; gap:8px;"></div>
+          <div id="overviewRunsList" style="display: flex; flex-direction: column; gap: 8px"></div>
         </div>
       </section>
 
@@ -1400,7 +1421,10 @@
           </p>
         </div>
         <div class="card">
-          <div class="run-head" style="display:flex; justify-content:space-between; align-items:flex-start; flex-wrap:wrap; gap:12px;">
+          <div
+            class="run-head"
+            style="display: flex; justify-content: space-between; align-items: flex-start; flex-wrap: wrap; gap: 12px"
+          >
             <div>
               <div class="eyebrow">Target</div>
               <div class="mono" id="runTarget" style="font-size: 14px; font-weight: 600; margin-top: 3px">
@@ -1410,15 +1434,42 @@
                 Run <span class="mono">RUN-7F3A9C</span> · worker <span class="mono">kf-worker-nbo-02</span> ·
                 authorization verified ✓
               </div>
-              <div style="margin-top: 8px; display: flex; align-items: center; gap: 8px; flex-wrap: wrap;">
-                <span class="eyebrow" style="font-size: 10px;">Select Run / Session:</span>
-                <select id="runSelect" style="background: var(--surface-2, #18202b); color: var(--ink, #e6edf3); border: 1px solid var(--border, #293039); border-radius: 6px; padding: 4px 8px; font-size: 12px; font-family: var(--font-mono, monospace); max-width: 480px; cursor: pointer;">
+              <div style="margin-top: 8px; display: flex; align-items: center; gap: 8px; flex-wrap: wrap">
+                <span class="eyebrow" style="font-size: 10px">Select Run / Session:</span>
+                <select
+                  id="runSelect"
+                  style="
+                    background: var(--surface-2, #18202b);
+                    color: var(--ink, #e6edf3);
+                    border: 1px solid var(--border, #293039);
+                    border-radius: 6px;
+                    padding: 4px 8px;
+                    font-size: 12px;
+                    font-family: var(--font-mono, monospace);
+                    max-width: 480px;
+                    cursor: pointer;
+                  "
+                >
                   <option value="auto">⚡ Auto-follow (Latest / In-Flight)</option>
                 </select>
               </div>
             </div>
-            <div style="display:flex; gap:8px; align-items:center;">
-              <a href="/agent" target="_blank" class="btn" style="text-decoration:none; font-size:12px; padding:6px 12px; background:var(--surface-2); border:1px solid var(--border); color:var(--ink-2); border-radius:8px;">Open Agent View ↗</a>
+            <div style="display: flex; gap: 8px; align-items: center">
+              <a
+                href="/agent"
+                target="_blank"
+                class="btn"
+                style="
+                  text-decoration: none;
+                  font-size: 12px;
+                  padding: 6px 12px;
+                  background: var(--surface-2);
+                  border: 1px solid var(--border);
+                  color: var(--ink-2);
+                  border-radius: 8px;
+                "
+                >Open Agent View ↗</a
+              >
               <button class="btn btn-primary" id="runBtn">
                 <svg width="14" height="14" viewBox="0 0 24 24" fill="currentColor"><path d="M8 5v14l11-7z" /></svg
                 ><span id="runBtnLabel">Run assessment</span>
@@ -2309,7 +2360,9 @@ ${f.dpa.map((d) => " - " + d).join("\n")}`
         if (metaEl) {
           const worker = run.workerId || run.source || (run.runtime ? `runtime ${run.runtime}` : "kf-worker-local")
           const auth = isLive ? "turn in flight · active hunting" : "authorization verified ✓"
-          const sessionPart = run.sessionId ? ` · session <span class="mono" style="color:var(--accent); font-weight:600">${run.sessionId}</span>` : ""
+          const sessionPart = run.sessionId
+            ? ` · session <span class="mono" style="color:var(--accent); font-weight:600">${run.sessionId}</span>`
+            : ""
           const wsPart = run.workspaceId ? ` · ws <span class="mono">${run.workspaceId}</span>` : ""
           metaEl.innerHTML = `Run <span class="mono">${run.id}</span>${sessionPart}${wsPart} · worker <span class="mono">${worker}</span> · ${auth}`
         }
@@ -2722,7 +2775,9 @@ ${f.dpa.map((d) => " - " + d).join("\n")}`
             label: `${statusIcon} ${shortTitle} · ${shortId} (${countLabel})`,
           })
         }
-        const currentOpts = Array.from(select.options).map((o) => o.value).join(",")
+        const currentOpts = Array.from(select.options)
+          .map((o) => o.value)
+          .join(",")
         const newOpts = opts.map((o) => o.val).join(",")
         if (currentOpts !== newOpts) {
           select.innerHTML = ""
@@ -2746,16 +2801,22 @@ ${f.dpa.map((d) => " - " + d).join("\n")}`
         const opts = [{ val: "auto", label: "⚡ Auto-follow (Latest / In-Flight)" }]
         for (const r of runs) {
           const status = r.status ?? r.state ?? "unknown"
-          const icon = ["running", "leased", "queued"].includes(status) ? "● [RUNNING]" : ["completed", "succeeded"].includes(status) ? "✓" : "✗"
+          const icon = ["running", "leased", "queued"].includes(status)
+            ? "● [RUNNING]"
+            : ["completed", "succeeded"].includes(status)
+              ? "✓"
+              : "✗"
           const shortId = r.id.length > 20 ? `${r.id.slice(0, 16)}…` : r.id
           const shortTitle = (r.title || r.id).slice(0, 36)
           const sessionSuffix = r.sessionId ? ` [${r.sessionId.slice(0, 10)}…]` : ""
           opts.push({
             val: r.id,
-            label: `${icon} ${shortTitle} · ${shortId}${sessionSuffix}`
+            label: `${icon} ${shortTitle} · ${shortId}${sessionSuffix}`,
           })
         }
-        const currentOpts = Array.from(select.options).map((o) => o.value).join(",")
+        const currentOpts = Array.from(select.options)
+          .map((o) => o.value)
+          .join(",")
         const newOpts = opts.map((o) => o.val).join(",")
         if (currentOpts !== newOpts) {
           select.innerHTML = ""
@@ -2783,13 +2844,15 @@ ${f.dpa.map((d) => " - " + d).join("\n")}`
         }
         card.style.display = "block"
         if (count) count.textContent = `${runs.length} recorded run${runs.length === 1 ? "" : "s"} in workspace`
-        list.innerHTML = runs.slice(0, 8).map((r) => {
-          const status = r.status ?? r.state ?? "unknown"
-          const isLive = ["running", "queued", "leased"].includes(status)
-          const isOk = ["completed", "succeeded"].includes(status)
-          const badgeClass = isLive ? "sevtag sev-low" : isOk ? "statuspill" : "sevtag sev-critical"
-          const timeStr = r.updatedAt ? new Date(r.updatedAt).toLocaleTimeString() : ""
-          return `<div style="display:flex; justify-content:space-between; align-items:center; padding:8px 12px; background:var(--surface-2); border-radius:8px; border:1px solid var(--hair); font-size:12.5px;">
+        list.innerHTML = runs
+          .slice(0, 8)
+          .map((r) => {
+            const status = r.status ?? r.state ?? "unknown"
+            const isLive = ["running", "queued", "leased"].includes(status)
+            const isOk = ["completed", "succeeded"].includes(status)
+            const badgeClass = isLive ? "sevtag sev-low" : isOk ? "statuspill" : "sevtag sev-critical"
+            const timeStr = r.updatedAt ? new Date(r.updatedAt).toLocaleTimeString() : ""
+            return `<div style="display:flex; justify-content:space-between; align-items:center; padding:8px 12px; background:var(--surface-2); border-radius:8px; border:1px solid var(--hair); font-size:12.5px;">
             <div style="display:flex; align-items:center; gap:10px; min-width:0; overflow:hidden;">
               <span class="${badgeClass}">${status.toUpperCase()}</span>
               <span style="font-weight:600; white-space:nowrap; overflow:hidden; text-overflow:ellipsis;">${r.title || r.id}</span>
@@ -2801,7 +2864,8 @@ ${f.dpa.map((d) => " - " + d).join("\n")}`
               <button class="btn btn-sm" onclick="inspectRun('${r.id}')" style="font-size:11px; padding:3px 9px;">Inspect Run &rarr;</button>
             </div>
           </div>`
-        }).join("")
+          })
+          .join("")
       }
 
       async function inspectRun(runId) {
@@ -2967,10 +3031,9 @@ ${f.dpa.map((d) => " - " + d).join("\n")}`
           $("#srcPill").className = "src live"
           $("#srcText").textContent = "Live · platform DB"
           $("#srcPill").title = "Live — click to manage sign-in."
-          const sessionFlag = effectiveSessionId
-            ? ` · session ${effectiveSessionId.slice(0, 16)}…`
-            : " · all sessions"
-          $("#demoFlag").textContent = "● Live — " + total + " findings across " + runs + " runs" + sessionFlag + " · updated " + ago
+          const sessionFlag = effectiveSessionId ? ` · session ${effectiveSessionId.slice(0, 16)}…` : " · all sessions"
+          $("#demoFlag").textContent =
+            "● Live — " + total + " findings across " + runs + " runs" + sessionFlag + " · updated " + ago
           const footFindings = effectiveSessionId
             ? `/api/v1/findings?sessionId=${effectiveSessionId.slice(0, 12)}…`
             : "/api/v1/findings"

package/kifaru-pi.js

@@ -214,7 +214,12 @@ var init_structured_tools = __esm(() => {
   SEVERITY = Type.Union([Type.Literal("info"), Type.Literal("low"), Type.Literal("medium"), Type.Literal("high"), Type.Literal("critical")], { description: "Finding severity band." });
   DISPOSITION = Type.Union([Type.Literal("candidate"), Type.Literal("confirmed"), Type.Literal("refuted"), Type.Literal("inconclusive")], { description: "Confidence in the finding. Candidates never affect client posture until confirmed." });
   STATUS = Type.Union([Type.Literal("succeeded"), Type.Literal("blocked"), Type.Literal("inconclusive"), Type.Literal("failed")], { description: "Terminal state of the stage." });
-  STRUCTURED_TOOL_NAMES = ["submit_finding", "record_evidence", "record_negative_control", "stage_complete"];
+  STRUCTURED_TOOL_NAMES = [
+    "submit_finding",
+    "record_evidence",
+    "record_negative_control",
+    "stage_complete"
+  ];
 });
 // ../core/src/model/model-family.ts
 function getModelFamily(model) {
@@ -2213,6 +2218,125 @@ var init_embedded_skills = __esm(() => {
   init_embedded_skills_generated();
 });
 
+// ../core/src/theme/embedded-theme.ts
+import fs4 from "fs";
+import os4 from "os";
+import path4 from "path";
+function kifaruThemesRoot() {
+  if (process.env.KIFARU_THEMES_DIR)
+    return path4.resolve(process.env.KIFARU_THEMES_DIR);
+  const xdg = process.env.XDG_DATA_HOME || path4.join(os4.homedir(), ".local", "share");
+  return path4.join(xdg, "kifaru", "themes");
+}
+function materializeKifaruThemes(root = kifaruThemesRoot()) {
+  const file = path4.join(root, `${KIFARU_THEME_NAME}.json`);
+  const content = `${JSON.stringify(EMBEDDED_KIFARU_THEME, null, 2)}
+`;
+  try {
+    const existing = fs4.existsSync(file) ? fs4.readFileSync(file, "utf8") : undefined;
+    if (existing !== content) {
+      fs4.mkdirSync(root, { recursive: true });
+      fs4.writeFileSync(file, content);
+    }
+    return root;
+  } catch {
+    return null;
+  }
+}
+var KIFARU_THEME_NAME = "kifaru-dark", EMBEDDED_KIFARU_THEME;
+var init_embedded_theme = __esm(() => {
+  EMBEDDED_KIFARU_THEME = {
+    $schema: "https://raw.githubusercontent.com/earendil-works/pi/main/packages/coding-agent/src/modes/interactive/theme/theme-schema.json",
+    name: KIFARU_THEME_NAME,
+    vars: {
+      accent: "#5a90c2",
+      accentInk: "#82abd6",
+      ink2: "#a7aeb8",
+      muted: "#6e767f",
+      hair: "#222831",
+      border: "#293039",
+      raised: "#1a2027",
+      surface2: "#1c222a",
+      accentSoft: "#18232f",
+      s6: "#305d84",
+      s5: "#4574a3",
+      crit: "#cf5a55",
+      high: "#c58a48",
+      med: "#bda23c",
+      good: "#4aa66a",
+      low: "#5b93cb",
+      info: "#8b929b",
+      critBg: "#33201f",
+      highBg: "#312a1c",
+      medBg: "#2e2915",
+      lowBg: "#16222f",
+      infoBg: "#22262b",
+      goodBg: "#152a1d"
+    },
+    colors: {
+      accent: "accent",
+      border: "border",
+      borderAccent: "accentInk",
+      borderMuted: "hair",
+      success: "good",
+      error: "crit",
+      warning: "high",
+      muted: "ink2",
+      dim: "muted",
+      text: "",
+      thinkingText: "ink2",
+      selectedBg: "surface2",
+      scrollbarTrack: "hair",
+      scrollbarThumb: "muted",
+      userMessageBg: "raised",
+      userMessageText: "",
+      customMessageBg: "accentSoft",
+      customMessageText: "",
+      customMessageLabel: "accent",
+      toolPendingBg: "infoBg",
+      toolSuccessBg: "goodBg",
+      toolErrorBg: "critBg",
+      toolTitle: "accentInk",
+      toolOutput: "",
+      mdHeading: "accentInk",
+      mdLink: "accent",
+      mdLinkUrl: "muted",
+      mdCode: "low",
+      mdCodeBlock: "",
+      mdCodeBlockBorder: "border",
+      mdQuote: "ink2",
+      mdQuoteBorder: "border",
+      mdHr: "hair",
+      mdListBullet: "low",
+      toolDiffAdded: "good",
+      toolDiffRemoved: "crit",
+      toolDiffContext: "muted",
+      syntaxComment: "muted",
+      syntaxKeyword: "accent",
+      syntaxFunction: "accentInk",
+      syntaxVariable: "high",
+      syntaxString: "good",
+      syntaxNumber: "med",
+      syntaxType: "low",
+      syntaxOperator: "accent",
+      syntaxPunctuation: "ink2",
+      thinkingOff: "muted",
+      thinkingMinimal: "s6",
+      thinkingLow: "s5",
+      thinkingMedium: "accent",
+      thinkingHigh: "accentInk",
+      thinkingXhigh: "high",
+      thinkingMax: "crit",
+      bashMode: "med"
+    },
+    export: {
+      pageBg: "#0d1013",
+      cardBg: "#151a1f",
+      infoBg: "#1c222a"
+    }
+  };
+});
+
 // ../core/src/model/router-deps.ts
 function makeLogger(base) {
   const format = (message, extra) => {
@@ -3076,10 +3200,10 @@ function mergeDefs(...defs) {
 function cloneDef(schema) {
   return mergeDefs(schema._zod.def);
 }
-function getElementAtPath(obj, path4) {
-  if (!path4)
+function getElementAtPath(obj, path5) {
+  if (!path5)
     return obj;
-  return path4.reduce((acc, key) => acc?.[key], obj);
+  return path5.reduce((acc, key) => acc?.[key], obj);
 }
 function promiseAllObject(promisesObj) {
   const keys = Object.keys(promisesObj);
@@ -3390,11 +3514,11 @@ function aborted(x, startIndex = 0) {
   }
   return false;
 }
-function prefixIssues(path4, issues) {
+function prefixIssues(path5, issues) {
   return issues.map((iss) => {
     var _a15;
     (_a15 = iss).path ?? (_a15.path = []);
-    iss.path.unshift(path4);
+    iss.path.unshift(path5);
     return iss;
   });
 }
@@ -3632,7 +3756,7 @@ function formatError(error, mapper = (issue2) => issue2.message) {
 }
 function treeifyError(error, mapper = (issue2) => issue2.message) {
   const result = { errors: [] };
-  const processError = (error2, path4 = []) => {
+  const processError = (error2, path5 = []) => {
     var _a15, _b15;
     for (const issue2 of error2.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
@@ -3642,7 +3766,7 @@ function treeifyError(error, mapper = (issue2) => issue2.message) {
       } else if (issue2.code === "invalid_element") {
         processError({ issues: issue2.issues }, issue2.path);
       } else {
-        const fullpath = [...path4, ...issue2.path];
+        const fullpath = [...path5, ...issue2.path];
         if (fullpath.length === 0) {
           result.errors.push(mapper(issue2));
           continue;
@@ -3674,8 +3798,8 @@ function treeifyError(error, mapper = (issue2) => issue2.message) {
 }
 function toDotPath(_path) {
   const segs = [];
-  const path4 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
-  for (const seg of path4) {
+  const path5 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
+  for (const seg of path5) {
     if (typeof seg === "number")
       segs.push(`[${seg}]`);
     else if (typeof seg === "symbol")
@@ -15950,13 +16074,13 @@ function resolveRef(ref, ctx) {
   if (!ref.startsWith("#")) {
     throw new Error("External $ref is not supported, only local refs (#/...) are allowed");
   }
-  const path4 = ref.slice(1).split("/").filter(Boolean);
-  if (path4.length === 0) {
+  const path5 = ref.slice(1).split("/").filter(Boolean);
+  if (path5.length === 0) {
     return ctx.rootSchema;
   }
   const defsKey = ctx.version === "draft-2020-12" ? "$defs" : "definitions";
-  if (path4[0] === defsKey) {
-    const key = path4[1];
+  if (path5[0] === defsKey) {
+    const key = path5[1];
     if (!key || !ctx.defs[key]) {
       throw new Error(`Reference not found: ${ref}`);
     }
@@ -17138,8 +17262,8 @@ class ParseStatus {
   }
 }
 var makeIssue = (params) => {
-  const { data, path: path4, errorMaps, issueData } = params;
-  const fullPath = [...path4, ...issueData.path || []];
+  const { data, path: path5, errorMaps, issueData } = params;
+  const fullPath = [...path5, ...issueData.path || []];
   const fullIssue = {
     ...issueData,
     path: fullPath
@@ -17184,11 +17308,11 @@ var init_errorUtil = __esm(() => {
 
 // ../../node_modules/.bun/zod@4.3.6/node_modules/zod/v3/types.js
 class ParseInputLazyPath {
-  constructor(parent, value, path4, key) {
+  constructor(parent, value, path5, key) {
     this._cachedPath = [];
     this.parent = parent;
     this.data = value;
-    this._path = path4;
+    this._path = path5;
     this._key = key;
   }
   get path() {
@@ -22809,23 +22933,23 @@ var require_auth_config = __commonJS((exports, module) => {
     writeAuthConfig: () => writeAuthConfig
   });
   module.exports = __toCommonJS(auth_config_exports);
-  var fs4 = __toESM2(__require("fs"));
-  var path4 = __toESM2(__require("path"));
+  var fs5 = __toESM2(__require("fs"));
+  var path5 = __toESM2(__require("path"));
   var import_token_util = require_token_util();
   function getAuthConfigPath() {
     const dataDir = (0, import_token_util.getVercelDataDir)();
     if (!dataDir) {
       throw new Error(`Unable to find Vercel CLI data directory. Your platform: ${process.platform}. Supported: darwin, linux, win32.`);
     }
-    return path4.join(dataDir, "auth.json");
+    return path5.join(dataDir, "auth.json");
   }
   function readAuthConfig() {
     try {
       const authPath = getAuthConfigPath();
-      if (!fs4.existsSync(authPath)) {
+      if (!fs5.existsSync(authPath)) {
         return null;
       }
-      const content = fs4.readFileSync(authPath, "utf8");
+      const content = fs5.readFileSync(authPath, "utf8");
       if (!content) {
         return null;
       }
@@ -22836,11 +22960,11 @@ var require_auth_config = __commonJS((exports, module) => {
   }
   function writeAuthConfig(config2) {
     const authPath = getAuthConfigPath();
-    const authDir = path4.dirname(authPath);
-    if (!fs4.existsSync(authDir)) {
-      fs4.mkdirSync(authDir, { mode: 504, recursive: true });
+    const authDir = path5.dirname(authPath);
+    if (!fs5.existsSync(authDir)) {
+      fs5.mkdirSync(authDir, { mode: 504, recursive: true });
     }
-    fs4.writeFileSync(authPath, JSON.stringify(config2, null, 2), { mode: 384 });
+    fs5.writeFileSync(authPath, JSON.stringify(config2, null, 2), { mode: 384 });
   }
   function isValidAccessToken(authConfig, expirationBufferMs = 0) {
     if (!authConfig.token)
@@ -23015,8 +23139,8 @@ var require_token_util = __commonJS((exports, module) => {
     saveToken: () => saveToken
   });
   module.exports = __toCommonJS(token_util_exports);
-  var path4 = __toESM2(__require("path"));
-  var fs4 = __toESM2(__require("fs"));
+  var path5 = __toESM2(__require("path"));
+  var fs5 = __toESM2(__require("fs"));
   var import_token_error = require_token_error();
   var import_token_io = require_token_io();
   var import_auth_config = require_auth_config();
@@ -23028,7 +23152,7 @@ var require_token_util = __commonJS((exports, module) => {
     if (!dataDir) {
       return null;
     }
-    return path4.join(dataDir, vercelFolder);
+    return path5.join(dataDir, vercelFolder);
   }
   async function getVercelToken2(options) {
     const authConfig = (0, import_auth_config.readAuthConfig)();
@@ -23096,11 +23220,11 @@ var require_token_util = __commonJS((exports, module) => {
     if (!dir) {
       throw new import_token_error.VercelOidcTokenError("Unable to find project root directory. Have you linked your project with `vc link?`");
     }
-    const prjPath = path4.join(dir, ".vercel", "project.json");
-    if (!fs4.existsSync(prjPath)) {
+    const prjPath = path5.join(dir, ".vercel", "project.json");
+    if (!fs5.existsSync(prjPath)) {
       throw new import_token_error.VercelOidcTokenError("project.json not found, have you linked your project with `vc link?`");
     }
-    const prj = JSON.parse(fs4.readFileSync(prjPath, "utf8"));
+    const prj = JSON.parse(fs5.readFileSync(prjPath, "utf8"));
     if (typeof prj.projectId !== "string" && typeof prj.orgId !== "string") {
       throw new TypeError("Expected a string-valued projectId property. Try running `vc link` to re-link your project.");
     }
@@ -23111,11 +23235,11 @@ var require_token_util = __commonJS((exports, module) => {
     if (!dir) {
       throw new import_token_error.VercelOidcTokenError("Unable to find user data directory. Please reach out to Vercel support.");
     }
-    const tokenPath = path4.join(dir, "com.vercel.token", `${projectId}.json`);
+    const tokenPath = path5.join(dir, "com.vercel.token", `${projectId}.json`);
     const tokenJson = JSON.stringify(token);
-    fs4.mkdirSync(path4.dirname(tokenPath), { mode: 504, recursive: true });
-    fs4.writeFileSync(tokenPath, tokenJson);
-    fs4.chmodSync(tokenPath, 432);
+    fs5.mkdirSync(path5.dirname(tokenPath), { mode: 504, recursive: true });
+    fs5.writeFileSync(tokenPath, tokenJson);
+    fs5.chmodSync(tokenPath, 432);
     return;
   }
   function loadToken(projectId) {
@@ -23123,11 +23247,11 @@ var require_token_util = __commonJS((exports, module) => {
     if (!dir) {
       throw new import_token_error.VercelOidcTokenError("Unable to find user data directory. Please reach out to Vercel support.");
     }
-    const tokenPath = path4.join(dir, "com.vercel.token", `${projectId}.json`);
-    if (!fs4.existsSync(tokenPath)) {
+    const tokenPath = path5.join(dir, "com.vercel.token", `${projectId}.json`);
+    if (!fs5.existsSync(tokenPath)) {
       return null;
     }
-    const token = JSON.parse(fs4.readFileSync(tokenPath, "utf8"));
+    const token = JSON.parse(fs5.readFileSync(tokenPath, "utf8"));
     assertVercelOidcTokenResponse(token);
     return token;
   }
@@ -33644,6 +33768,7 @@ var init_src = __esm(() => {
   init_skill_loader();
   init_governed_skill_tool();
   init_embedded_skills();
+  init_embedded_theme();
 });
 
 // ../headless-runtime/src/policy-gate.ts
@@ -33984,10 +34109,10 @@ function mergeDefs2(...defs) {
 function cloneDef2(schema) {
   return mergeDefs2(schema._zod.def);
 }
-function getElementAtPath2(obj, path4) {
-  if (!path4)
+function getElementAtPath2(obj, path5) {
+  if (!path5)
     return obj;
-  return path4.reduce((acc, key) => acc?.[key], obj);
+  return path5.reduce((acc, key) => acc?.[key], obj);
 }
 function promiseAllObject2(promisesObj) {
   const keys = Object.keys(promisesObj);
@@ -34276,11 +34401,11 @@ function aborted2(x, startIndex = 0) {
   }
   return false;
 }
-function prefixIssues2(path4, issues) {
+function prefixIssues2(path5, issues) {
   return issues.map((iss) => {
     var _a21;
     (_a21 = iss).path ?? (_a21.path = []);
-    iss.path.unshift(path4);
+    iss.path.unshift(path5);
     return iss;
   });
 }
@@ -34503,7 +34628,7 @@ function treeifyError2(error48, _mapper) {
     return issue3.message;
   };
   const result = { errors: [] };
-  const processError = (error49, path4 = []) => {
+  const processError = (error49, path5 = []) => {
     var _a21, _b16;
     for (const issue3 of error49.issues) {
       if (issue3.code === "invalid_union" && issue3.errors.length) {
@@ -34513,7 +34638,7 @@ function treeifyError2(error48, _mapper) {
       } else if (issue3.code === "invalid_element") {
         processError({ issues: issue3.issues }, issue3.path);
       } else {
-        const fullpath = [...path4, ...issue3.path];
+        const fullpath = [...path5, ...issue3.path];
         if (fullpath.length === 0) {
           result.errors.push(mapper(issue3));
           continue;
@@ -34545,8 +34670,8 @@ function treeifyError2(error48, _mapper) {
 }
 function toDotPath2(_path) {
   const segs = [];
-  const path4 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
-  for (const seg of path4) {
+  const path5 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
+  for (const seg of path5) {
     if (typeof seg === "number")
       segs.push(`[${seg}]`);
     else if (typeof seg === "symbol")
@@ -47927,14 +48052,14 @@ var init_event_sink = __esm(() => {
 });
 
 // ../headless-runtime/src/sqlite-event-store.ts
-import fs4 from "fs";
-import path4 from "path";
+import fs5 from "fs";
+import path5 from "path";
 import { Database } from "bun:sqlite";
 
 class SqliteEventStore {
   db;
   constructor(dbPath) {
-    fs4.mkdirSync(path4.dirname(dbPath), { recursive: true });
+    fs5.mkdirSync(path5.dirname(dbPath), { recursive: true });
     this.db = new Database(dbPath, { create: true });
     this.initialize();
   }
@@ -48223,20 +48348,20 @@ var init_src3 = __esm(() => {
 });
 
 // ../execution-runtime/src/paths.ts
-import os4 from "os";
-import path6 from "path";
+import os5 from "os";
+import path7 from "path";
 function runtimeDataDir(env = process.env, platform = process.platform) {
   const clean = (value) => value?.replace(/[\x00-\x1f]/g, "");
-  const home = env.HOME?.includes("/snap/") ? clean(env.XDG_CONFIG_HOME)?.replace(/\/\.config$/, "") || os4.homedir() : os4.homedir();
-  return platform === "win32" ? path6.join(clean(env.LOCALAPPDATA) || path6.join(home, "AppData", "Local"), "kifaru", "data") : path6.join(clean(env.XDG_DATA_HOME) || path6.join(home, ".local", "share"), "kifaru");
+  const home = env.HOME?.includes("/snap/") ? clean(env.XDG_CONFIG_HOME)?.replace(/\/\.config$/, "") || os5.homedir() : os5.homedir();
+  return platform === "win32" ? path7.join(clean(env.LOCALAPPDATA) || path7.join(home, "AppData", "Local"), "kifaru", "data") : path7.join(clean(env.XDG_DATA_HOME) || path7.join(home, ".local", "share"), "kifaru");
 }
 var init_paths = () => {};
 
 // ../execution-runtime/src/python.ts
 import { createHash } from "crypto";
-import fs6 from "fs/promises";
+import fs7 from "fs/promises";
 import { accessSync, constants as fsConstants } from "fs";
-import path7 from "path";
+import path8 from "path";
 var PythonRuntime;
 var init_python = __esm(() => {
   init_paths();
@@ -48330,10 +48455,10 @@ var init_python = __esm(() => {
             clearTimeout(timer);
           return { exitCode, stdout, stderr };
         },
-        fileExists: (filepath) => fs6.stat(filepath).then(() => true).catch(() => false),
-        readFile: (filepath) => fs6.readFile(filepath, "utf8"),
-        writeFile: (filepath, content) => fs6.writeFile(filepath, content),
-        mkdir: (filepath) => fs6.mkdir(filepath, { recursive: true }).then(() => {
+        fileExists: (filepath) => fs7.stat(filepath).then(() => true).catch(() => false),
+        readFile: (filepath) => fs7.readFile(filepath, "utf8"),
+        writeFile: (filepath, content) => fs7.writeFile(filepath, content),
+        mkdir: (filepath) => fs7.mkdir(filepath, { recursive: true }).then(() => {
           return;
         }),
         platform: process.platform,
@@ -48363,35 +48488,35 @@ var init_python = __esm(() => {
     }
     PythonRuntime.lockHash = lockHash;
     function managedRoot(dataDir = runtimeDataDir()) {
-      return path7.join(dataDir, "python");
+      return path8.join(dataDir, "python");
     }
     PythonRuntime.managedRoot = managedRoot;
     function managedVenvPath(profile, dataDir = runtimeDataDir()) {
-      return path7.join(managedRoot(dataDir), profile);
+      return path8.join(managedRoot(dataDir), profile);
     }
     PythonRuntime.managedVenvPath = managedVenvPath;
     function venvBinDir(venvPath, platform = process.platform) {
-      return platform === "win32" ? path7.join(venvPath, "Scripts") : path7.join(venvPath, "bin");
+      return platform === "win32" ? path8.join(venvPath, "Scripts") : path8.join(venvPath, "bin");
     }
     PythonRuntime.venvBinDir = venvBinDir;
     function venvPythonPath(venvPath, platform = process.platform) {
-      return platform === "win32" ? path7.join(venvPath, "Scripts", "python.exe") : path7.join(venvPath, "bin", "python");
+      return platform === "win32" ? path8.join(venvPath, "Scripts", "python.exe") : path8.join(venvPath, "bin", "python");
     }
     PythonRuntime.venvPythonPath = venvPythonPath;
     function stampPath(profile, dataDir = runtimeDataDir()) {
-      return path7.join(managedVenvPath(profile, dataDir), ".kifaru-python.json");
+      return path8.join(managedVenvPath(profile, dataDir), ".kifaru-python.json");
     }
     PythonRuntime.stampPath = stampPath;
     function prependPathOnce(env, dir) {
-      const parts = (env.PATH ?? "").split(path7.delimiter).filter(Boolean);
-      return { ...env, PATH: [dir, ...parts.filter((part) => part !== dir)].join(path7.delimiter) };
+      const parts = (env.PATH ?? "").split(path8.delimiter).filter(Boolean);
+      return { ...env, PATH: [dir, ...parts.filter((part) => part !== dir)].join(path8.delimiter) };
     }
     PythonRuntime.prependPathOnce = prependPathOnce;
     function candidateVenvs(cwd, env = process.env) {
       return [
         { source: "active_venv", path: env.VIRTUAL_ENV },
-        { source: "workspace_dotvenv", path: path7.join(cwd, ".venv") },
-        { source: "workspace_venv", path: path7.join(cwd, "venv") }
+        { source: "workspace_dotvenv", path: path8.join(cwd, ".venv") },
+        { source: "workspace_venv", path: path8.join(cwd, "venv") }
       ].filter((item) => Boolean(item.path));
     }
     PythonRuntime.candidateVenvs = candidateVenvs;
@@ -48417,11 +48542,11 @@ var init_python = __esm(() => {
         };
       if (settings.explicitPythonBin) {
         const selected = settings.explicitPythonBin;
-        const absolute = path7.isAbsolute(selected);
+        const absolute = path8.isAbsolute(selected);
         return {
           ...base,
           selectedPython: selected,
-          selectedBinDir: path7.dirname(selected),
+          selectedBinDir: path8.dirname(selected),
           source: "explicit",
           projectVenvActive: false,
           available: absolute && await deps2.fileExists(selected),
@@ -48457,7 +48582,7 @@ var init_python = __esm(() => {
       return {
         ...base,
         selectedPython: system,
-        selectedBinDir: system ? path7.dirname(system) : undefined,
+        selectedBinDir: system ? path8.dirname(system) : undefined,
         source: system ? "system" : "missing",
         projectVenvActive: false,
         available: Boolean(system)
@@ -48471,8 +48596,8 @@ var init_python = __esm(() => {
       if (!settings.enabled)
         return [];
       const dirs = new Set;
-      if (settings.explicitPythonBin && path7.isAbsolute(settings.explicitPythonBin)) {
-        dirs.add(path7.dirname(settings.explicitPythonBin));
+      if (settings.explicitPythonBin && path8.isAbsolute(settings.explicitPythonBin)) {
+        dirs.add(path8.dirname(settings.explicitPythonBin));
       }
       for (const candidate of candidateVenvs(input.cwd, env)) {
         if (await deps2.fileExists(venvPythonPath(candidate.path, deps2.platform))) {
@@ -48626,7 +48751,7 @@ var init_python = __esm(() => {
         };
       const installer = uv ? "uv" : "venv-pip";
       try {
-        await deps2.mkdir(path7.dirname(paths.venvPath));
+        await deps2.mkdir(path8.dirname(paths.venvPath));
         await deps2.writeFile(paths.lockPath, requirementsLock(settings.profile));
         if (uv) {
           if (needsVenv) {
@@ -48701,7 +48826,7 @@ ${result.stderr}`.trim().split(/\r?\n/).find((line) => line.trim().length > 0)?.
       }
     }
     async function writeStamp(filepath, stamp, deps2) {
-      await deps2.mkdir(path7.dirname(filepath));
+      await deps2.mkdir(path8.dirname(filepath));
       await deps2.writeFile(filepath, JSON.stringify(stamp, null, 2) + `
 `);
     }
@@ -48712,7 +48837,7 @@ ${result.stderr}`.trim().split(/\r?\n/).find((line) => line.trim().length > 0)?.
         binDir: venvBinDir(venvPath, platform),
         pythonPath: venvPythonPath(venvPath, platform),
         stampPath: stampPath(profile, dataDir),
-        lockPath: path7.join(managedRoot(dataDir), `${profile}.requirements.lock`)
+        lockPath: path8.join(managedRoot(dataDir), `${profile}.requirements.lock`)
       };
     }
     function whichInEnvironment(name21, env, platform) {
@@ -48721,10 +48846,10 @@ ${result.stderr}`.trim().split(/\r?\n/).find((line) => line.trim().length > 0)?.
       if (!pathValue)
         return Bun.which(name21);
       const extensions = platform === "win32" ? (env.PATHEXT ?? ".EXE;.CMD;.BAT;.COM").split(";").filter(Boolean) : [""];
-      const hasExtension = platform === "win32" && path7.win32.extname(name21).length > 0;
+      const hasExtension = platform === "win32" && path8.win32.extname(name21).length > 0;
       for (const dir of pathValue.split(separator).filter(Boolean)) {
         for (const extension of hasExtension ? [""] : extensions) {
-          const candidate = platform === "win32" ? path7.win32.join(dir, name21 + extension.toLowerCase()) : path7.join(dir, name21);
+          const candidate = platform === "win32" ? path8.win32.join(dir, name21 + extension.toLowerCase()) : path8.join(dir, name21);
           try {
             accessSync(candidate, fsConstants.X_OK);
             return candidate;
@@ -48748,8 +48873,8 @@ ${result.stderr}`.trim().split(/\r?\n/).find((line) => line.trim().length > 0)?.
 
 // ../execution-runtime/src/python-helpers.ts
 import { createHash as createHash2 } from "crypto";
-import fs7 from "fs/promises";
-import path8 from "path";
+import fs8 from "fs/promises";
+import path9 from "path";
 var PythonHelpers;
 var init_python_helpers = __esm(() => {
   init_python();
@@ -48997,15 +49122,15 @@ if __name__ == "__main__":
     PythonHelpers.HUNT_MODULE_VERSION = createHash2("sha256").update(PythonHelpers.HUNT_MODULE_SOURCE).digest("hex").slice(0, 12);
     function defaultDeps() {
       return {
-        mkdir: (dir) => fs7.mkdir(dir, { recursive: true }).then(() => {
+        mkdir: (dir) => fs8.mkdir(dir, { recursive: true }).then(() => {
           return;
         }),
-        readFile: (file3) => fs7.readFile(file3, "utf8"),
-        writeFile: (file3, content) => fs7.writeFile(file3, content)
+        readFile: (file3) => fs8.readFile(file3, "utf8"),
+        writeFile: (file3, content) => fs8.writeFile(file3, content)
       };
     }
     function helpersDir(dataDir = runtimeDataDir()) {
-      return path8.join(PythonRuntime.managedRoot(dataDir), "helpers");
+      return path9.join(PythonRuntime.managedRoot(dataDir), "helpers");
     }
     PythonHelpers.helpersDir = helpersDir;
     const ensureTasks = new Map;
@@ -49015,8 +49140,8 @@ if __name__ == "__main__":
       if (cached3)
         return cached3;
       const task = (async () => {
-        const target = path8.join(dir, "hunt.py");
-        const stamp = path8.join(dir, ".hunt-version");
+        const target = path9.join(dir, "hunt.py");
+        const stamp = path9.join(dir, ".hunt-version");
         try {
           const [onDisk, current] = await Promise.all([
             deps2.readFile(target).catch(() => {
@@ -49037,8 +49162,8 @@ if __name__ == "__main__":
     }
     PythonHelpers.ensure = ensure;
     function prependPythonPath(env, dir) {
-      const parts = (env.PYTHONPATH ?? "").split(path8.delimiter).filter(Boolean);
-      return { ...env, PYTHONPATH: [dir, ...parts.filter((part) => part !== dir)].join(path8.delimiter) };
+      const parts = (env.PYTHONPATH ?? "").split(path9.delimiter).filter(Boolean);
+      return { ...env, PYTHONPATH: [dir, ...parts.filter((part) => part !== dir)].join(path9.delimiter) };
     }
     PythonHelpers.prependPythonPath = prependPythonPath;
     async function applyToEnv(env, dataDir = runtimeDataDir(), deps2 = defaultDeps()) {
@@ -49098,8 +49223,8 @@ var init_python_prompt = __esm(() => {
 });
 
 // ../execution-runtime/src/child-environment.ts
-import os5 from "os";
-import path9 from "path";
+import os6 from "os";
+import path10 from "path";
 var MODEL_PROVIDER_CREDENTIAL_ENV_VARS, ChildEnvironment;
 var init_child_environment = __esm(() => {
   MODEL_PROVIDER_CREDENTIAL_ENV_VARS = [
@@ -49157,10 +49282,10 @@ var init_child_environment = __esm(() => {
       const env = { ...input };
       if (process.platform === "win32")
         return env;
-      const home = os5.homedir();
+      const home = os6.homedir();
       const required3 = [
-        path9.join(home, ".local/bin"),
-        path9.join(home, ".local/share/kifaru/bin"),
+        path10.join(home, ".local/bin"),
+        path10.join(home, ".local/share/kifaru/bin"),
         "/usr/local/sbin",
         "/usr/local/bin",
         "/usr/sbin",
@@ -49168,8 +49293,8 @@ var init_child_environment = __esm(() => {
         "/sbin",
         "/bin"
       ];
-      const current = (env.PATH ?? "").split(path9.delimiter).filter(Boolean);
-      env.PATH = [...new Set([...current, ...required3])].join(path9.delimiter);
+      const current = (env.PATH ?? "").split(path10.delimiter).filter(Boolean);
+      env.PATH = [...new Set([...current, ...required3])].join(path10.delimiter);
       return env;
     }
     ChildEnvironment.withExecutablePath = withExecutablePath;
@@ -50037,23 +50162,23 @@ var init_main = __esm(() => {
 });
 
 // ../execution-runtime/src/config.ts
-import fs8 from "fs/promises";
-import os6 from "os";
-import path10 from "path";
+import fs9 from "fs/promises";
+import os7 from "os";
+import path11 from "path";
 async function loadRuntimeOptions(cwd, env = process.env) {
-  const configDir = process.platform === "win32" ? path10.join(env.APPDATA || path10.join(os6.homedir(), "AppData", "Roaming"), "kifaru", "config") : path10.join(env.XDG_CONFIG_HOME || path10.join(os6.homedir(), ".config"), "kifaru");
+  const configDir = process.platform === "win32" ? path11.join(env.APPDATA || path11.join(os7.homedir(), "AppData", "Roaming"), "kifaru", "config") : path11.join(env.XDG_CONFIG_HOME || path11.join(os7.homedir(), ".config"), "kifaru");
   const directories = [];
-  for (let dir = path10.resolve(cwd);; dir = path10.dirname(dir)) {
+  for (let dir = path11.resolve(cwd);; dir = path11.dirname(dir)) {
     directories.unshift(dir);
-    if (path10.dirname(dir) === dir)
+    if (path11.dirname(dir) === dir)
       break;
   }
   const files = [
-    ...CONFIG_FILENAMES.map((name21) => path10.join(configDir, name21)),
-    ...env.KIFARU_CONFIG ? [path10.resolve(cwd, env.KIFARU_CONFIG)] : [],
-    ...directories.flatMap((dir) => CONFIG_FILENAMES.map((name21) => path10.join(dir, name21))),
-    ...directories.flatMap((dir) => CONFIG_FILENAMES.map((name21) => path10.join(dir, ".kifaru", name21))),
-    ...env.KIFARU_CONFIG_DIR ? CONFIG_FILENAMES.map((name21) => path10.join(env.KIFARU_CONFIG_DIR, name21)) : []
+    ...CONFIG_FILENAMES.map((name21) => path11.join(configDir, name21)),
+    ...env.KIFARU_CONFIG ? [path11.resolve(cwd, env.KIFARU_CONFIG)] : [],
+    ...directories.flatMap((dir) => CONFIG_FILENAMES.map((name21) => path11.join(dir, name21))),
+    ...directories.flatMap((dir) => CONFIG_FILENAMES.map((name21) => path11.join(dir, ".kifaru", name21))),
+    ...env.KIFARU_CONFIG_DIR ? CONFIG_FILENAMES.map((name21) => path11.join(env.KIFARU_CONFIG_DIR, name21)) : []
   ];
   const python = {};
   const protectedNames = new Set;
@@ -50086,14 +50211,14 @@ async function loadRuntimeOptions(cwd, env = process.env) {
     }
   };
   for (const file3 of new Set(files)) {
-    const text2 = await fs8.readFile(file3, "utf8").catch((error92) => {
+    const text2 = await fs9.readFile(file3, "utf8").catch((error92) => {
       if (error92.code === "ENOENT")
         return;
       throw error92;
     });
     if (text2 !== undefined)
       merge3(text2, file3);
-    else if (env.KIFARU_CONFIG && file3 === path10.resolve(cwd, env.KIFARU_CONFIG)) {
+    else if (env.KIFARU_CONFIG && file3 === path11.resolve(cwd, env.KIFARU_CONFIG)) {
       throw new Error(`Kifaru runtime configuration not found: ${file3}`);
     }
   }
@@ -50109,7 +50234,7 @@ var init_config = __esm(() => {
 });
 
 // ../execution-runtime/src/inspect.ts
-import path11 from "path";
+import path12 from "path";
 async function inspectExecutionRuntime(cwd, env = process.env, options) {
   const runtime = options ?? await loadRuntimeOptions(cwd, env);
   const environment = await prepareHostEnvironment(env, cwd, false, runtime);
@@ -50124,7 +50249,7 @@ async function inspectExecutionRuntime(cwd, env = process.env, options) {
     managedVenvPath: environment.selection.managedVenvPath,
     discovered,
     missing: expected.filter((command) => !discovered.includes(command)),
-    helperAvailable: await Bun.file(path11.join(helperDir, "hunt.py")).exists(),
+    helperAvailable: await Bun.file(path12.join(helperDir, "hunt.py")).exists(),
     helperDir
   };
 }
@@ -50183,18 +50308,18 @@ var init_agent_selector = __esm(() => {
 });
 
 // src/invoker-resolver.ts
-import fs9 from "fs";
-import os7 from "os";
-import path12 from "path";
+import fs10 from "fs";
+import os8 from "os";
+import path13 from "path";
 function sessionGatewayFile() {
   if (process.env.KIFARU_SESSION_FILE)
     return process.env.KIFARU_SESSION_FILE;
-  const xdg = process.env.XDG_DATA_HOME || path12.join(os7.homedir(), ".local", "share");
-  return path12.join(xdg, "kifaru", "data", "auth", "session.json");
+  const xdg = process.env.XDG_DATA_HOME || path13.join(os8.homedir(), ".local", "share");
+  return path13.join(xdg, "kifaru", "data", "auth", "session.json");
 }
 function loadStoredSession() {
   try {
-    const raw = fs9.readFileSync(sessionGatewayFile(), "utf8");
+    const raw = fs10.readFileSync(sessionGatewayFile(), "utf8");
     const data = JSON.parse(raw);
     if (!data?.accessToken || !data?.gatewayEnv?.api)
       return null;
@@ -50312,27 +50437,27 @@ var init_pi_python_runtime = __esm(() => {
 });
 
 // src/tui-logger.ts
-import fs10 from "fs";
-import os8 from "os";
-import path13 from "path";
+import fs11 from "fs";
+import os9 from "os";
+import path14 from "path";
 function kifaruDataDir() {
   if (process.env.KIFARU_XDG_DATA_HOME)
     return process.env.KIFARU_XDG_DATA_HOME;
-  if (os8.platform() === "win32") {
-    return path13.join(process.env.LOCALAPPDATA || path13.join(os8.homedir(), "AppData", "Local"), "kifaru", "data");
+  if (os9.platform() === "win32") {
+    return path14.join(process.env.LOCALAPPDATA || path14.join(os9.homedir(), "AppData", "Local"), "kifaru", "data");
   }
-  return path13.join(process.env.XDG_DATA_HOME || path13.join(os8.homedir(), ".local", "share"), "kifaru");
+  return path14.join(process.env.XDG_DATA_HOME || path14.join(os9.homedir(), ".local", "share"), "kifaru");
 }
 function resolveLogFilePath() {
   if (process.env.KIFARU_LOG_FILE)
-    return path13.resolve(process.env.KIFARU_LOG_FILE);
-  return path13.join(kifaruDataDir(), "log", "dev.log");
+    return path14.resolve(process.env.KIFARU_LOG_FILE);
+  return path14.join(kifaruDataDir(), "log", "dev.log");
 }
 function ensureLogDir() {
   if (!initialized) {
     activeLogPath = resolveLogFilePath();
     try {
-      fs10.mkdirSync(path13.dirname(activeLogPath), { recursive: true });
+      fs11.mkdirSync(path14.dirname(activeLogPath), { recursive: true });
     } catch {}
     initialized = true;
   }
@@ -50345,7 +50470,7 @@ function writeLog(level, category, message, extra) {
     const extraStr = extra !== undefined ? ` ${typeof extra === "object" ? JSON.stringify(extra) : String(extra)}` : "";
     const line = `${ts} [${level}] [${category}] ${message}${extraStr}
 `;
-    fs10.appendFileSync(file3, line, "utf8");
+    fs11.appendFileSync(file3, line, "utf8");
   } catch {}
 }
 var initialized = false, activeLogPath = "", tuiLog;
@@ -50370,22 +50495,22 @@ var init_tui_logger = __esm(() => {
 });
 
 // src/pi-platform-client.ts
-import fs11 from "fs";
-import path14 from "path";
+import fs12 from "fs";
+import path15 from "path";
 function trimSlash(value) {
   return value.replace(/\/+$/, "");
 }
 function findLocalPlatformToken(searchPaths) {
-  const repoRoot = path14.resolve(import.meta.dir, "../../..");
+  const repoRoot = path15.resolve(import.meta.dir, "../../..");
   const candidates = searchPaths ?? [
-    path14.resolve(process.cwd(), "data/.platform-internal-token"),
-    path14.resolve(repoRoot, "data/.platform-internal-token"),
-    path14.join(process.env.HOME || "", ".local/share/kifaru/.platform-internal-token")
+    path15.resolve(process.cwd(), "data/.platform-internal-token"),
+    path15.resolve(repoRoot, "data/.platform-internal-token"),
+    path15.join(process.env.HOME || "", ".local/share/kifaru/.platform-internal-token")
   ];
   for (const candidate of candidates) {
     try {
-      if (fs11.existsSync(candidate)) {
-        const token = fs11.readFileSync(candidate, "utf8").trim();
+      if (fs12.existsSync(candidate)) {
+        const token = fs12.readFileSync(candidate, "utf8").trim();
         if (token.length >= 32)
           return token;
       }
@@ -50423,8 +50548,8 @@ function createPiPlatformClient(options = {}) {
     return disabledClient;
   }
   tuiLog.info("platform", `Platform ingestion enabled -> ${config3.baseURL}`);
-  async function request(path15, method, body) {
-    const url3 = `${config3.baseURL}/api/v1/${path15}`;
+  async function request(path16, method, body) {
+    const url3 = `${config3.baseURL}/api/v1/${path16}`;
     tuiLog.debug("platform:http", `-> ${method} ${url3}`);
     const response = await fetchImpl(url3, {
       method,
@@ -50492,7 +50617,9 @@ function createPiPlatformClient(options = {}) {
         fingerprint: f.fingerprint || `${f.file}:${f.title}`.slice(0, 512),
         ruleID: f.ruleID || "finding"
       }));
-      const response = await request(`runs/${encodeURIComponent(runID)}/findings`, "POST", { findings: normalizedFindings });
+      const response = await request(`runs/${encodeURIComponent(runID)}/findings`, "POST", {
+        findings: normalizedFindings
+      });
       const parsed = await response.json();
       const created = parsed.result?.created ?? 0;
       const updated = parsed.result?.updated ?? 0;
@@ -57063,7 +57190,7 @@ var init_pi_report_finding_tool = __esm(() => {
 
 // src/pi-dossier-sync.ts
 import { readFile } from "fs/promises";
-import path15 from "path";
+import path16 from "path";
 function targetDossierName(target2) {
   try {
     return new URL(target2.includes("://") ? target2 : `https://${target2}`).hostname.toLowerCase();
@@ -57116,7 +57243,7 @@ async function syncPiDossier(client, context2, cwd, read = readFile) {
     return { ...NOTHING, skipped: "unparseable-target" };
   let raw;
   try {
-    raw = await read(path15.join(cwd, ".kifaru", "dossiers", `${name21}.json`), "utf8");
+    raw = await read(path16.join(cwd, ".kifaru", "dossiers", `${name21}.json`), "utf8");
   } catch (error92) {
     if (error92.code === "ENOENT")
       return { ...NOTHING, skipped: "no-dossier-file" };
@@ -57352,9 +57479,11 @@ ${runtimePrompt(state, cwd)}`
   };
 }
 async function runKifaruPiSdkTui(options = {}) {
+  process.env.PI_SKIP_VERSION_CHECK ||= "1";
   const cwd = options.cwd ?? process.cwd();
   const agentDir = getAgentDir2();
   const kifaruSkillsPath = materializeKifaruSkills();
+  const kifaruThemesPath = materializeKifaruThemes();
   const catalog = options.catalog ?? new ModelCatalogRegistry;
   const initial = splitThinkingRef(options.initialModelRef ?? "azure/FW-DeepSeek-V4-Flash-0731");
   const initialResolution = catalog.resolve(initial.modelRef);
@@ -57409,7 +57538,8 @@ async function runKifaruPiSdkTui(options = {}) {
             shellPath: settingsManager.getShellPath()
           })
         ],
-        ...kifaruSkillsPath ? { additionalSkillPaths: [kifaruSkillsPath] } : {}
+        ...kifaruSkillsPath ? { additionalSkillPaths: [kifaruSkillsPath] } : {},
+        ...kifaruThemesPath ? { additionalThemePaths: [kifaruThemesPath] } : {}
       }
     });
     const hasExistingMessages = sessionManager.buildSessionContext().messages.length > 0;
@@ -57439,7 +57569,8 @@ async function runKifaruPiSdkTui(options = {}) {
     startupDiagnostics: [...runtime.diagnostics],
     modelFallbackMessage: runtime.modelFallbackMessage,
     initialImages: [],
-    initialMessages: []
+    initialMessages: [],
+    ...kifaruThemesPath && !runtime.session.settingsManager.getThemeSetting() ? { initialThemeSetting: KIFARU_THEME_NAME } : {}
   });
   await mode.run();
 }
@@ -57835,8 +57966,8 @@ function forwardSignals(child) {
 }
 
 // src/headless-command.ts
-import fs5 from "fs";
-import path5 from "path";
+import fs6 from "fs";
+import path6 from "path";
 import { parseArgs } from "util";
 var HEADLESS_HELP = `Kifaru headless \u2014 run a local Pi stage and compile a report.
 
@@ -57932,8 +58063,8 @@ function parseHeadlessArgs(args) {
     runId,
     stageInput,
     model: values.model,
-    dbPath: path5.resolve(values.db),
-    outDir: path5.resolve(values.out)
+    dbPath: path6.resolve(values.db),
+    outDir: path6.resolve(values.out)
   };
 }
 async function runHeadlessCommand(args) {
@@ -57958,9 +58089,9 @@ async function runHeadlessCommand(args) {
       workflowKey: options.stageInput.workflowKey,
       fallbackTarget: options.stageInput.target.url
     });
-    fs5.mkdirSync(options.outDir, { recursive: true });
-    const reportPath = path5.join(options.outDir, `${options.runId}.json`);
-    fs5.writeFileSync(reportPath, JSON.stringify(record3, null, 2));
+    fs6.mkdirSync(options.outDir, { recursive: true });
+    const reportPath = path6.join(options.outDir, `${options.runId}.json`);
+    fs6.writeFileSync(reportPath, JSON.stringify(record3, null, 2));
     console.log(`Status: ${outcome2.status}
 Report: ${reportPath}`);
     return outcome2.status === "failed" || outcome2.status === "blocked" ? 1 : 0;
@@ -58082,7 +58213,7 @@ Ctrl+C stops the gateway.`);
 async function handleCli() {
   const args = process.argv.slice(2);
   if (args.includes("--version") || args.includes("-v")) {
-    console.log("1.0.180");
+    console.log("1.0.181");
     process.exit(0);
   }
   if (args[0] === "dashboard") {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "kifaru",
-  "version": "1.0.180",
-  "gitHead": "be4ccf8ddffc4618219792b9f9f7beb8136f9275",
+  "version": "1.0.181",
+  "gitHead": "871ffee5997dbc473d33cdc4039cd4cfa34dfc89",
   "description": "Kifaru security agent on the Pi runtime",
   "type": "module",
   "license": "MIT",
@@ -19,6 +19,9 @@
     ],
     "skills": [
       "./skills"
+    ],
+    "themes": [
+      "./themes"
     ]
   },
   "files": [
@@ -28,6 +31,7 @@
     "LICENSE",
     "skills",
     "extensions",
+    "themes",
     "dashboard"
   ],
   "dependencies": {

package/themes/kifaru-dark.json

@@ -0,0 +1,90 @@
+{
+  "$schema": "https://raw.githubusercontent.com/earendil-works/pi/main/packages/coding-agent/src/modes/interactive/theme/theme-schema.json",
+  "name": "kifaru-dark",
+  "vars": {
+    "accent": "#5a90c2",
+    "accentInk": "#82abd6",
+    "ink2": "#a7aeb8",
+    "muted": "#6e767f",
+    "hair": "#222831",
+    "border": "#293039",
+    "raised": "#1a2027",
+    "surface2": "#1c222a",
+    "accentSoft": "#18232f",
+    "s6": "#305d84",
+    "s5": "#4574a3",
+    "crit": "#cf5a55",
+    "high": "#c58a48",
+    "med": "#bda23c",
+    "good": "#4aa66a",
+    "low": "#5b93cb",
+    "info": "#8b929b",
+    "critBg": "#33201f",
+    "highBg": "#312a1c",
+    "medBg": "#2e2915",
+    "lowBg": "#16222f",
+    "infoBg": "#22262b",
+    "goodBg": "#152a1d"
+  },
+  "colors": {
+    "accent": "accent",
+    "border": "border",
+    "borderAccent": "accentInk",
+    "borderMuted": "hair",
+    "success": "good",
+    "error": "crit",
+    "warning": "high",
+    "muted": "ink2",
+    "dim": "muted",
+    "text": "",
+    "thinkingText": "ink2",
+    "selectedBg": "surface2",
+    "scrollbarTrack": "hair",
+    "scrollbarThumb": "muted",
+    "userMessageBg": "raised",
+    "userMessageText": "",
+    "customMessageBg": "accentSoft",
+    "customMessageText": "",
+    "customMessageLabel": "accent",
+    "toolPendingBg": "infoBg",
+    "toolSuccessBg": "goodBg",
+    "toolErrorBg": "critBg",
+    "toolTitle": "accentInk",
+    "toolOutput": "",
+    "mdHeading": "accentInk",
+    "mdLink": "accent",
+    "mdLinkUrl": "muted",
+    "mdCode": "low",
+    "mdCodeBlock": "",
+    "mdCodeBlockBorder": "border",
+    "mdQuote": "ink2",
+    "mdQuoteBorder": "border",
+    "mdHr": "hair",
+    "mdListBullet": "low",
+    "toolDiffAdded": "good",
+    "toolDiffRemoved": "crit",
+    "toolDiffContext": "muted",
+    "syntaxComment": "muted",
+    "syntaxKeyword": "accent",
+    "syntaxFunction": "accentInk",
+    "syntaxVariable": "high",
+    "syntaxString": "good",
+    "syntaxNumber": "med",
+    "syntaxType": "low",
+    "syntaxOperator": "accent",
+    "syntaxPunctuation": "ink2",
+    "thinkingOff": "muted",
+    "thinkingMinimal": "s6",
+    "thinkingLow": "s5",
+    "thinkingMedium": "accent",
+    "thinkingHigh": "accentInk",
+    "thinkingXhigh": "high",
+    "thinkingMax": "crit",
+    "bashMode": "med"
+  },
+  "export": {
+    "pageBg": "#0d1013",
+    "cardBg": "#151a1f",
+    "infoBg": "#1c222a"
+  }
+}