micro-models-agent 2.10.0 → 2.12.0

package/dist/cli/run-result.js

@@ -3,14 +3,13 @@ import { pc } from "../ui/colors";
 import { formatCost } from "../modules/pricing/prices";
 import { formatCacheLine } from "./cache-line";
 import { getDefaultChannel } from "../output";
+// Печать результата one-shot прогона: стоимость/токены/кеш, код выхода.
 /**
- * Render a single-run AgentResult to the terminal (non-JSON mode) and return
- * the process exit code.
+ * Рендерит one-shot AgentResult в терминал (не-JSON режим) и возвращает код выхода.
  *
- * On failure only the error is printed. The model's `text` (which is the last
- * *accepted* message, i.e. possibly stale after an audit/hallucination error)
- * was already streamed live during the run — re-printing it here misleadingly
- * suggests the task succeeded.
+ * При провале печатается только ошибка. `text` модели (последнее *принятое*
+ * сообщение — возможно, протухшее после ошибки аудита/галлюцинаций) уже
+ * стримлено живьём во время прогона: допечатка здесь ложно намекнула бы на успех.
  */
 export function printRunResult(result, flush, channel = getDefaultChannel()) {
     flush();

package/dist/cli/security-commands.js

@@ -1,15 +1,16 @@
 import { bootstrap } from "../core/bootstrap";
 import { saveConfig } from "../config/config";
-import { join, dirname } from "path";
-import { homedir } from "os";
+import { dirname } from "path";
 import { SECURITY_POLICIES, applySecurityPolicy, getSecurityPolicy, } from "../modules/security/security-policies";
 import { globalAuditNotifier } from "../modules/security/audit-notifier";
+import { DEFAULT_SECURITY_CONFIG } from "../config/security";
 import { t } from "../i18n/index";
 import { getDefaultChannel } from "../output";
+import { globalConfigFile } from "../config/paths";
 /**
- * Toggle session-file encryption in place: flips `enabled` (and the two
- * per-file flags) while PRESERVING user-set fields already stored in the
- * config (keyPath etc.). Mutates the passed security object.
+ * Переключает шифрование файлов сессии на месте: флипает `enabled` (и оба
+ * пофайловых флага), СОХРАНЯЯ уже лежащие в конфиге юзер-поля (keyPath и др.).
+ * Мутирует переданный объект security.
  */
 export function toggleSessionEncryption(security, enabled) {
     const enc = (security.sessionEncryption ?? {});
@@ -19,8 +20,8 @@ export function toggleSessionEncryption(security, enabled) {
     security.sessionEncryption = enc;
 }
 /**
- * Toggle audit notifications in place: flips `enabled` only, preserving
- * webhookUrl / filePath / minSeverity / eventTypes set by the user.
+ * Переключает аудит-нотификации на месте: флипает только `enabled`, сохраняя
+ * юзерские webhookUrl / filePath / minSeverity / eventTypes.
  */
 export function toggleAuditNotifier(security, enabled) {
     const notifier = (security.auditNotifier ?? {});
@@ -28,17 +29,17 @@ export function toggleAuditNotifier(security, enabled) {
     security.auditNotifier = notifier;
 }
 /**
- * Create security subcommand
+ * Создаёт субкоманду security.
  */
 export function createSecurityCommand(program) {
     const securityCmd = program.command("security").description(t("cli.security.description"));
-    // security status - show current security configuration
+    // security status — текущий конфиг безопасности.
     securityCmd
         .command("status")
         .description(t("cli.security.status"))
         .action(async () => {
         const { config } = await bootstrap();
-        const security = config.security || {};
+        const security = config.security ?? DEFAULT_SECURITY_CONFIG;
         const bash = security.bash || {};
         const paths = security.paths || {};
         const network = security.network || {};
@@ -48,7 +49,7 @@ export function createSecurityCommand(program) {
         const auditNotifier = security.auditNotifier || {};
         getDefaultChannel().writeLine(t("cli.security.current_policy"));
         getDefaultChannel().writeLine(`  ${t("cli.security.bash_enabled")}: ${bash.blacklist?.length > 0 ? t("cli.yes") : t("cli.no")}`);
-        getDefaultChannel().writeLine(`  ${t("cli.security.path_validation")}: ${paths.denied?.length > 0 ? t("cli.yes") : t("cli.no")}`);
+        getDefaultChannel().writeLine(`  ${t("cli.security.path_validation")}: ${paths.enabled ? t("cli.yes") : t("cli.no")}`);
         getDefaultChannel().writeLine(`  ${t("cli.security.network_validation")}: ${network.deniedDomains?.length > 0 || network.allowedDomains?.length > 0 ? t("cli.yes") : t("cli.no")}`);
         getDefaultChannel().writeLine(`  ${t("cli.security.content_scanning")}: ${contentScan.enabled ? t("cli.yes") : t("cli.no")}`);
         getDefaultChannel().writeLine(`  ${t("cli.security.max_recursion")}: ${security.maxRecursionDepth ?? 3}`);
@@ -57,7 +58,7 @@ export function createSecurityCommand(program) {
         getDefaultChannel().writeLine(`  ${t("cli.security.session_encryption")}: ${sessionEncryption.enabled ? t("cli.yes") : t("cli.no")}`);
         getDefaultChannel().writeLine(`  ${t("cli.security.audit_notifier")}: ${auditNotifier.enabled ? t("cli.yes") : t("cli.no")}`);
     });
-    // security policies - manage security policies
+    // security policies — список политик.
     securityCmd
         .command("policies")
         .description(t("cli.security.policies"))
@@ -74,13 +75,13 @@ export function createSecurityCommand(program) {
             getDefaultChannel().writeLine("");
         }
     });
-    // security set-policy - apply a security policy
+    // security set-policy — применить политику.
     securityCmd
         .command("set-policy")
         .argument("<preset>", t("cli.security.preset"))
         .description(t("cli.security.set_policy"))
         .action(async (preset) => {
-        const configPath = join(homedir(), ".mma", "config.json");
+        const configPath = globalConfigFile();
         const { config: appConfig } = await bootstrap();
         const validPresets = ["strict", "balanced", "permissive"];
         if (!validPresets.includes(preset)) {
@@ -89,61 +90,69 @@ export function createSecurityCommand(program) {
         }
         const policy = getSecurityPolicy(preset);
         const newSecurityConfig = applySecurityPolicy(preset);
-        // Merge with existing config
+        // Мерж с существующим конфигом.
         appConfig.security = newSecurityConfig;
         saveConfig(appConfig, configPath, dirname(configPath));
         getDefaultChannel().writeLine(t("cli.security.policy_applied", { name: policy.name }));
         getDefaultChannel().writeLine(t("cli.security.policy_description", { description: policy.description }));
     });
-    // security enable-encryption - enable session file encryption
+    // security enable-encryption — включить шифрование файлов сессии.
     securityCmd
         .command("enable-encryption")
         .description(t("cli.security.enable_encryption"))
         .action(async () => {
-        const configPath = join(homedir(), ".mma", "config.json");
+        const configPath = globalConfigFile();
         const { config: appConfig } = await bootstrap();
-        const security = (appConfig.security = appConfig.security || {});
+        if (!appConfig.security)
+            appConfig.security = structuredClone(DEFAULT_SECURITY_CONFIG);
+        const security = appConfig.security;
         toggleSessionEncryption(security, true);
         saveConfig(appConfig, configPath, dirname(configPath));
         getDefaultChannel().writeLine(t("cli.security.encryption_enabled"));
     });
-    // security disable-encryption - disable session file encryption
+    // security disable-encryption — выключить шифрование файлов сессии.
     securityCmd
         .command("disable-encryption")
         .description(t("cli.security.disable_encryption"))
         .action(async () => {
-        const configPath = join(homedir(), ".mma", "config.json");
+        const configPath = globalConfigFile();
         const { config: appConfig } = await bootstrap();
-        const security = (appConfig.security = appConfig.security || {});
+        if (!appConfig.security)
+            appConfig.security = structuredClone(DEFAULT_SECURITY_CONFIG);
+        const security = appConfig.security;
         toggleSessionEncryption(security, false);
         saveConfig(appConfig, configPath, dirname(configPath));
         getDefaultChannel().writeLine(t("cli.security.encryption_disabled"));
     });
-    // security enable-audit - enable audit notifications
+    // security enable-audit — включить аудит-нотификации.
     securityCmd
         .command("enable-audit")
         .description(t("cli.security.enable_audit"))
         .action(async () => {
-        const configPath = join(homedir(), ".mma", "config.json");
+        const configPath = globalConfigFile();
         const { config: appConfig } = await bootstrap();
-        const security = (appConfig.security = appConfig.security || {});
+        if (!appConfig.security)
+            appConfig.security = structuredClone(DEFAULT_SECURITY_CONFIG);
+        const security = appConfig.security;
         toggleAuditNotifier(security, true);
         saveConfig(appConfig, configPath, dirname(configPath));
         getDefaultChannel().writeLine(t("cli.security.audit_enabled"));
     });
-    // security disable-audit - disable audit notifications
+    // security disable-audit — выключить аудит-нотификации.
     securityCmd
         .command("disable-audit")
         .description(t("cli.security.disable_audit"))
         .action(async () => {
-        const configPath = join(homedir(), ".mma", "config.json");
+        const configPath = globalConfigFile();
         const { config: appConfig } = await bootstrap();
-        const security = (appConfig.security = appConfig.security || {});
+        if (!appConfig.security)
+            appConfig.security = structuredClone(DEFAULT_SECURITY_CONFIG);
+        const security = appConfig.security;
         toggleAuditNotifier(security, false);
         saveConfig(appConfig, configPath, dirname(configPath));
         getDefaultChannel().writeLine(t("cli.security.audit_disabled"));
     });
-    // security audit-stats - show audit notification statistics
+    // security audit-stats — статистика аудит-нотификаций.
     securityCmd
         .command("audit-stats")
         .description(t("cli.security.audit_stats"))

package/dist/cli/setup-order.js

@@ -1,57 +1,6 @@
-/** Extra commands added to the bash blacklist when the wizard enables it. */
-const SECURITY_BASH_BLOCKLIST = [
-    "rm",
-    "dd",
-    "chmod",
-    "wget",
-    "curl",
-    "scp",
-    "ssh",
-    "nc",
-    "netcat",
-    "sudo",
-    "su",
-    "kill",
-    "pkill",
-    "killall",
-    "shutdown",
-    "reboot",
-];
 /**
- * Apply first-run wizard answers onto a loaded config.
- *
- * The provider is replaced with a **fresh object** rather than mutated in
- * place: `loadConfig` may register a session-scoped `MMA_PROVIDER_*` env
- * override whose `envValue` points at the loaded `config.provider` object.
- * `saveConfig`'s `stripEnvOverrides` then matches that object by identity and
- * would revert the whole provider to the env/default value, silently losing
- * the wizard's provider/URL/key. Replacing the object keeps the override's
- * stale identity intact, so only the env key is stripped and our answers are
- * persisted.
+ * Шим совместимости: логика записи конфига визарда живёт в
+ * `src/modules/setup/apply.ts`, чтобы её делил браузерный визард. Реэкспорт
+ * отсюда сохраняет терминальный путь импорта (и его тесты).
  */
-export function applyAnswersToConfig(config, a) {
-    config.provider = {
-        ...config.provider,
-        type: a.provider,
-        baseUrl: a.apiBase,
-        apiKey: a.apiKey,
-    };
-    config.model = a.model;
-    config.contextWindow = a.contextWindow;
-    config.maxToolIterations = a.maxToolIterations;
-    config.locale = a.locale;
-    if (config.security) {
-        config.security.enabled = true;
-        config.security.bash.enabled = true;
-        config.security.bash.blockDangerousFlags =
-            a.securityFlagsBlock || config.security.bash.blockDangerousFlags;
-        if (a.securityBashBlock) {
-            config.security.bash.blacklist = [
-                ...new Set([...config.security.bash.blacklist, ...SECURITY_BASH_BLOCKLIST]),
-            ];
-        }
-        if (!a.securityPathsDeny)
-            config.security.paths.denied = [];
-    }
-    return config;
-}
+export { applyAnswersToConfig, SECURITY_BASH_BLOCKLIST } from "../modules/setup/apply";

package/dist/cli/setup-prompt.js

@@ -1,3 +1,4 @@
+/** Cooked-режимный промпт визарда: эхо/правка на терминале, мы копим до newline. */
 export class SetupPrompt {
     input;
     output;
@@ -8,7 +9,7 @@ export class SetupPrompt {
     constructor(input = process.stdin, output = process.stdout) {
         this.input = input;
         this.output = output;
-        // Cooked mode: the console handles line editing and echo.
+        // Cooked-режим: правка строки и эхо — на консоли.
         if (typeof this.input.setRawMode === "function")
             this.input.setRawMode(false);
         this.onData = (buf) => this.consume(buf.toString("utf-8"));
@@ -41,7 +42,7 @@ export class SetupPrompt {
         this.buffer = "";
         const cb = this.pending;
         this.pending = null;
-        // A TTY already echoes the Enter as a newline; only piped input needs one.
+        // TTY сам эхует Enter переводом строки; дописываем его только пайпам.
         if (!this.output.isTTY)
             this.output.write("\n");
         cb(answer);

package/dist/cli/setup.js

@@ -1,9 +1,12 @@
+// Визард первого запуска: язык → провайдер → ключ → модель → контекст → security.
 import { pc } from "../ui/colors";
 import { t, setLocale } from "../i18n/index";
 import { Spinner } from "../ui/spinner";
 import { BUILTIN_PROVIDERS, HOSTED_BASE_URLS } from "../modules/providers/presets";
 import { box } from "../ui/box";
 import { getDefaultChannel } from "../output";
+import { SETUP_DEFAULTS, SETUP_LANGUAGES, } from "../modules/setup/answers";
+import { fetchProviderModels, scanLocalServers, testProviderChat, } from "../modules/setup/discovery";
 import { SetupPrompt } from "./setup-prompt";
 async function withSpinner(message, fn) {
     const spinner = new Spinner({ channel: getDefaultChannel() });
@@ -15,12 +18,13 @@ async function withSpinner(message, fn) {
         spinner.stop();
     }
 }
-/** Render a numbered list inside a box. */
+/** Рендерит нумерованный список в рамке. */
 function menuList(items) {
     const lines = items.map((it, i) => ` ${pc.cyan(`[${i + 1}]`)} ${it.label}${it.url ? `  ${pc.dim(it.url)}` : ""}`);
     for (const l of box(lines, { width: 72 }))
         getDefaultChannel().writeLine(l);
 }
+/** Спрашивает строку; пустой ответ — defaultValue. */
 function ask(rl, question, defaultValue) {
     return new Promise((resolve) => {
         const prompt = defaultValue ? `${question} [${defaultValue}]: ` : `${question}: `;
@@ -29,7 +33,7 @@ function ask(rl, question, defaultValue) {
         });
     });
 }
-/** Parse a positive integer answer, falling back to the prompt's default. */
+/** Парсит положительный int-ответ, иначе — дефолт промпта. */
 function askInt(rl, question, defaultValue) {
     return ask(rl, question, String(defaultValue)).then((raw) => {
         const n = parseInt(raw, 10);
@@ -40,113 +44,28 @@ const PROVIDER_TYPES = BUILTIN_PROVIDERS.map((spec) => ({
     value: spec.type,
     label: spec.label,
 }));
-/** UI languages offered by the wizard (labels stay in their own language). */
-const LANGUAGES = [
-    { value: "en", label: "English" },
-    { value: "ru", label: "Русский" },
-];
-const KNOWN_PORTS = [
-    { port: 1234, label: "LM Studio" },
-    { port: 11434, label: "Ollama" },
-    { port: 8080, label: "vLLM / custom" },
-    { port: 4891, label: "GPT4All" },
-];
-async function scanPorts() {
-    const found = [];
-    for (const { port, label } of KNOWN_PORTS) {
-        try {
-            const controller = new AbortController();
-            const timeout = setTimeout(() => controller.abort(), 2000);
-            const resp = await fetch(`http://localhost:${port}/v1/models`, {
-                signal: controller.signal,
-            });
-            clearTimeout(timeout);
-            if (resp.ok) {
-                found.push({ label, url: `http://localhost:${port}/v1` });
-            }
-        }
-        catch {
-            /* port not available */
-        }
-    }
-    return found;
-}
-async function fetchModels(apiBase, apiKey) {
-    try {
-        const url = `${apiBase.replace(/\/+$/, "")}/models`;
-        const controller = new AbortController();
-        const timeout = setTimeout(() => controller.abort(), 5000);
-        const resp = await fetch(url, {
-            headers: {
-                Authorization: `Bearer ${apiKey}`,
-                "Content-Type": "application/json",
-            },
-            signal: controller.signal,
-        });
-        clearTimeout(timeout);
-        if (!resp.ok)
-            return [];
-        const data = (await resp.json());
-        const models = (data.data || data || [])
-            .map((m) => m.id || m.name || m.model || "")
-            .filter(Boolean);
-        return models;
-    }
-    catch {
-        return [];
-    }
-}
-async function testChat(apiBase, apiKey, model) {
-    try {
-        const url = `${apiBase.replace(/\/+$/, "")}/chat/completions`;
-        const controller = new AbortController();
-        const timeout = setTimeout(() => controller.abort(), 10000);
-        const resp = await fetch(url, {
-            method: "POST",
-            headers: {
-                Authorization: `Bearer ${apiKey}`,
-                "Content-Type": "application/json",
-            },
-            body: JSON.stringify({
-                model,
-                messages: [{ role: "user", content: 'Say "ok"' }],
-                max_tokens: 20,
-            }),
-            signal: controller.signal,
-        });
-        clearTimeout(timeout);
-        if (!resp.ok)
-            return false;
-        const data = (await resp.json());
-        const msg = data.choices?.[0]?.message;
-        const text = msg?.content || msg?.reasoning_content || "";
-        return text.length > 0;
-    }
-    catch {
-        return false;
-    }
-}
+/** Прогоняет визард первого запуска (язык → провайдер → … → review). Возвращает ответы. */
 export async function runSetup(externalRl) {
     getDefaultChannel().writeLine(t("setup.title"));
     const rl = externalRl ?? new SetupPrompt();
     const ownRl = !externalRl;
     getDefaultChannel().writeLine(t("setup.language"));
-    menuList(LANGUAGES);
-    const languageChoice = await ask(rl, t("setup.select_language_num", { max: LANGUAGES.length }), "1");
+    menuList([...SETUP_LANGUAGES]);
+    const languageChoice = await ask(rl, t("setup.select_language_num", { max: SETUP_LANGUAGES.length }), "1");
     const typedLang = languageChoice.trim().toLowerCase();
-    const byCode = LANGUAGES.find((l) => l.value === typedLang);
+    const byCode = SETUP_LANGUAGES.find((l) => l.value === typedLang);
     const locale = byCode
         ? byCode.value
-        : LANGUAGES[Math.max(0, Math.min(LANGUAGES.length - 1, (parseInt(languageChoice) || 1) - 1))].value;
+        : SETUP_LANGUAGES[Math.max(0, Math.min(SETUP_LANGUAGES.length - 1, (parseInt(languageChoice, 10) || 1) - 1))].value;
     setLocale(locale);
     getDefaultChannel().writeLine(t("setup.select_provider"));
     menuList(PROVIDER_TYPES);
     const providerChoice = await ask(rl, t("setup.select_provider_num", { max: PROVIDER_TYPES.length }), "1");
-    const providerIdx = Math.max(0, Math.min(PROVIDER_TYPES.length - 1, (parseInt(providerChoice) || 1) - 1));
+    const providerIdx = Math.max(0, Math.min(PROVIDER_TYPES.length - 1, (parseInt(providerChoice, 10) || 1) - 1));
     const provider = PROVIDER_TYPES[providerIdx].value;
     let apiBase = "";
-    if (provider === "openai-compat") {
-        const found = await withSpinner(t("setup.scanning_spinner"), async () => scanPorts());
+    if (provider === "openai-compat" || provider === "lmstudio") {
+        const found = await withSpinner(t("setup.scanning_spinner"), async () => scanLocalServers());
         if (found.length > 0) {
             getDefaultChannel().writeLine(t("setup.found_servers", { count: found.length }));
             menuList([
@@ -154,7 +73,7 @@ export async function runSetup(externalRl) {
                 { label: t("setup.custom_url") },
             ]);
             const choice = await ask(rl, t("setup.select_server", { max: found.length + 1 }), "1");
-            const idx = (parseInt(choice) || 1) - 1;
+            const idx = (parseInt(choice, 10) || 1) - 1;
             if (idx >= found.length) {
                 apiBase = await ask(rl, t("setup.api_base"), "http://localhost:1234/v1");
             }
@@ -170,21 +89,21 @@ export async function runSetup(externalRl) {
     else {
         apiBase = HOSTED_BASE_URLS[provider] ?? "";
     }
-    const defaultKey = provider === "openai-compat" ? "not-needed" : "";
+    const defaultKey = provider === "openai-compat" || provider === "lmstudio" ? "not-needed" : "";
     const apiKey = await ask(rl, t("setup.api_key"), defaultKey);
-    const models = await withSpinner(t("setup.fetching_spinner"), () => fetchModels(apiBase, apiKey));
+    const models = await withSpinner(t("setup.fetching_spinner"), () => fetchProviderModels(apiBase, apiKey));
     let model = "";
     if (models.length > 0) {
         getDefaultChannel().writeLine(t("setup.available_models"));
         menuList(models.slice(0, 10).map((m) => ({ label: m })));
         const choice = await ask(rl, t("setup.select_model", { max: Math.min(models.length, 10) }), "1");
-        const idx = Math.max(0, Math.min(models.length - 1, (parseInt(choice) || 1) - 1));
+        const idx = Math.max(0, Math.min(models.length - 1, (parseInt(choice, 10) || 1) - 1));
         model = models[idx];
     }
     else {
         model = await ask(rl, t("setup.model_name"), "qwen/qwen3.5-9b");
     }
-    const connected = await withSpinner(t("setup.testing_spinner", { model }), () => testChat(apiBase, apiKey, model));
+    const connected = await withSpinner(t("setup.testing_spinner", { model }), () => testProviderChat(apiBase, apiKey, model));
     if (connected) {
         getDefaultChannel().writeLine(pc.green(t("setup.ok")));
     }
@@ -192,24 +111,25 @@ export async function runSetup(externalRl) {
         getDefaultChannel().writeLine(pc.yellow(t("setup.warning")));
     }
     getDefaultChannel().writeLine(t("setup.agent_settings"));
-    const contextWindow = await askInt(rl, t("setup.context_window"), 32768);
-    const maxIterations = await askInt(rl, t("setup.max_iters"), 1000);
+    const contextWindow = await askInt(rl, t("setup.context_window"), SETUP_DEFAULTS.contextWindow);
+    const maxIterations = await askInt(rl, t("setup.max_iters"), SETUP_DEFAULTS.maxToolIterations);
     // Security settings
     getDefaultChannel().writeLine(t("setup.security_header"));
     getDefaultChannel().writeLine(pc.dim(t("setup.security_status_on")));
     const configureSecurity = await ask(rl, t("setup.security_configure"), "n");
     let securityBashBlock = false;
     let securityFlagsBlock = false;
-    let securityPathsDeny = true;
+    let securityPathsRestrict = false;
     if (configureSecurity.toLowerCase() === "y" || configureSecurity.toLowerCase() === "yes") {
         securityBashBlock = (await ask(rl, t("setup.security_bash_block"), "n")).toLowerCase() === "y";
         securityFlagsBlock =
             (await ask(rl, t("setup.security_flags_block"), "n")).toLowerCase() === "y";
-        securityPathsDeny = (await ask(rl, t("setup.security_paths_deny"), "Y")).toLowerCase() !== "n";
+        const pathsAnswer = (await ask(rl, t("setup.security_paths_restrict"), "Y")).toLowerCase();
+        securityPathsRestrict = pathsAnswer !== "n" && pathsAnswer !== "no";
     }
     if (ownRl) {
-        // Detach the prompt reader and pause stdin so the REPL's raw-mode
-        // LineEditor can take over cleanly (no readline/raw-mode state left).
+        // Деттачим ридер промпта и ставим stdin на паузу, чтобы raw-режимный
+        // LineEditor REPL захватил его чисто (без leftover readline/raw-состояния).
         rl.close();
     }
     const answers = {
@@ -222,7 +142,7 @@ export async function runSetup(externalRl) {
         locale,
         securityBashBlock,
         securityFlagsBlock,
-        securityPathsDeny,
+        securityPathsRestrict,
     };
     getDefaultChannel().writeLine(pc.green(pc.bold(t("setup.complete"))));
     const summary = [

package/dist/cli/web-command.js

@@ -0,0 +1,98 @@
+/**
+ * Точка входа `mma web`: bootstrap, старт браузерного UI, жизнь процесса до
+ * SIGINT/SIGTERM, затем чистое завершение.
+ */
+import { existsSync } from "node:fs";
+import { join } from "node:path";
+import { bootstrap } from "../core/bootstrap";
+import { agentsMdPaths } from "../core/bootstrap";
+import { getDefaultChannel } from "../output";
+import { t } from "../i18n/index";
+import { pc } from "../ui/colors";
+import { startWebUi } from "../modules/webui/module";
+import { tryOpenBrowser } from "../modules/webui/server";
+import { globalMmaDir } from "../config/paths";
+import { MMA_ENV } from "../config/env";
+/**
+ * Парсит и валидирует флаг `--port`. `undefined`/пусто → `undefined` (рандомный
+ * порт). Нечисловые и вне диапазона бросают throw, а не молча откатываются на
+ * рандом: `--port abc` не должен маскироваться под рабочий bind.
+ */
+export function parsePort(raw) {
+    if (raw === undefined || raw.trim() === "")
+        return undefined;
+    const n = Number(raw);
+    if (!Number.isInteger(n) || n < 1 || n > 65535) {
+        throw new Error(t("cli.web_invalid_port", { port: raw }));
+    }
+    return n;
+}
+/**
+ * Аргументы bootstrap для `runWeb`. Вынесены, чтобы форвардинг CLI-флагов
+ * (особенно `--no-agents-md`) был юнит-тестируем без подъёма настоящего агента:
+ * Bun-моки модулей процесс-глобальны, спай на `bootstrap` потёк бы.
+ */
+export function webBootstrapArgs(opts) {
+    return [undefined, opts.projectDir, opts.noAgentsMd, true];
+}
+/** Запуск веб-режима: bootstrap → старт UI → ожидание SIGINT/SIGTERM. */
+export async function runWeb(opts) {
+    // Транспорт читает их на старте (server/state): у порта нет поля конфига,
+    // так что CLI-флаг маппится на env, которую сервер уже уважает.
+    if (opts.port !== undefined)
+        process.env[MMA_ENV.WEBUI_PORT] = String(opts.port);
+    if (opts.host)
+        process.env[MMA_ENV.WEBUI_HOST] = opts.host;
+    if (opts.token)
+        process.env[MMA_ENV.WEBUI_TOKEN] = opts.token;
+    if (opts.noOpen)
+        process.env[MMA_ENV.WEBUI_OPEN] = "0";
+    const mmaDir = globalMmaDir();
+    const { hasDomainFiles } = await import("../config/domains");
+    const virgin = !existsSync(join(mmaDir, "config.json")) && !hasDomainFiles(mmaDir);
+    // exitOnComplete=true: в веб-режиме интерактивный промпт stdin не владеет.
+    const { agent, config, sessionManager, execModule, configDir, baseDir, noAgentsMd, indexerModule, memoryStore, skillsModule, pluginManager, toolRegistry, toolCtx, contextProbe, } = await bootstrap(...webBootstrapArgs(opts));
+    if (virgin) {
+        getDefaultChannel().writeLine(pc.yellow(`  ${t("cli.web_setup_required")}`), "stderr");
+    }
+    const web = await startWebUi({
+        agent,
+        config,
+        sessionManager,
+        execModule,
+        memory: memoryStore,
+        skills: skillsModule,
+        plugins: pluginManager,
+        toolRegistry,
+        toolCtx,
+        configDir,
+        baseDir,
+        agentsMd: {
+            disabled: noAgentsMd,
+            files: noAgentsMd ? [] : agentsMdPaths(baseDir, configDir).filter((p) => existsSync(p)),
+        },
+        indexer: indexerModule,
+        contextProbe,
+        host: opts.host,
+        token: opts.token,
+        setupRequired: virgin,
+    });
+    const url = await web.url;
+    // Всегда показываем резолвленный workspace: shell-нарезка `-d` пути (пробелы,
+    // хвостовой бэкслэш) может молча указать не туда, и эта строка — единственное
+    // место, где веб-режим его репортит (зеркало баннера REPL).
+    getDefaultChannel().writeLine(t("cli.web_started", { url, dir: baseDir }));
+    if (!opts.noOpen)
+        tryOpenBrowser(url);
+    await new Promise((resolve) => {
+        const shutdown = () => {
+            process.off("SIGINT", shutdown);
+            process.off("SIGTERM", shutdown);
+            web.stop();
+            agent.shutdown();
+            resolve();
+        };
+        process.on("SIGINT", shutdown);
+        process.on("SIGTERM", shutdown);
+    });
+}

package/dist/config/budget.js

@@ -1,9 +1,9 @@
 import { t } from "../i18n/index";
 const MIN_SHARE = 0.05;
 const MAX_SHARE = 0.9;
-/** system + reserve must leave room for history. */
+/** system + reserve обязаны оставить место под историю. */
 const MAX_COMBINED = 0.95;
-/** Split the context window into its system / reserve / history parts. */
+/** Режет окно контекста на части system / reserve / history. */
 export function budgetBreakdown(config) {
     const window = config.contextWindow;
     const budget = config.contextBudget;
@@ -21,8 +21,8 @@ export function budgetBreakdown(config) {
     };
 }
 /**
- * Validate and apply a share change. Returns an error reason on failure
- * (`"range"` or `"combined"`), or null on success. Callers localize the reason.
+ * Проверяет и применяет смену доли. При неуспехе возвращает причину
+ * (`"range"` или `"combined"`), при успехе — null. Причину локализует вызывающий.
  */
 export function setBudgetShare(config, key, value) {
     if (!Number.isFinite(value) || value < MIN_SHARE || value > MAX_SHARE)
@@ -35,7 +35,7 @@ export function setBudgetShare(config, key, value) {
     budget[key === "system" ? "systemPrompt" : "responseReserve"] = value;
     return null;
 }
-/** Localized budget breakdown lines (shared by `mma context` and `/context`). */
+/** Локализованные строки разбивки бюджета (общие для `mma context` и `/context`). */
 export function budgetBreakdownLines(config) {
     const bd = budgetBreakdown(config);
     const pct = (f) => Math.round(f * 100);