mu-agent 0.1.10 → 0.1.14

package/judge/dist/setup.js

@@ -200,6 +200,13 @@ function backupStamp(now) {
   const two = (value) => String(value).padStart(2, "0");
   return `${now.getFullYear()}-${two(now.getMonth() + 1)}-${two(now.getDate())}T${two(now.getHours())}-${two(now.getMinutes())}-${two(now.getSeconds())}`;
 }
+var holdsNothing = (file) => {
+  try {
+    return /^\s*(\{\s*\})?\s*$/.test(readFileSync(file, "utf8"));
+  } catch {
+    return false;
+  }
+};
 var Backups = class {
   root;
   stamp;
@@ -209,9 +216,13 @@ var Backups = class {
     this.root = join2(home2, "backups");
     this.stamp = backupStamp(now);
   }
-  /** Copies `file` the first time it is about to change in this run. A file that does not exist has nothing to keep. */
+  /**
+   * Copies `file` the first time it is about to change in this run. A file that does not exist, or holds nothing (empty,
+   * or the `{}` pi writes to auth.json when it first starts), has nothing to keep: a first setup makes no backup folder
+   * and does not say it kept the previous files.
+   */
   save(file) {
-    if (this.saved.has(file) || !existsSync2(file)) return;
+    if (this.saved.has(file) || !existsSync2(file) || holdsNothing(file)) return;
     const folder = this.folder();
     const copy = join2(folder, basename(file));
     copyFileSync(file, copy);
@@ -328,6 +339,16 @@ function tiersOf(config) {
 function withTiers(config, tiers) {
   return { ...config, tiers: [...tiers] };
 }
+function judgeOff(config) {
+  return isRecord(config?.modes) && config.modes.default === "off";
+}
+function withJudge(config, on) {
+  const { default: _default, ...modes } = isRecord(config.modes) ? config.modes : {};
+  if (!on) return { ...config, modes: { default: "off", ...modes } };
+  if (!judgeOff(config)) return config;
+  const { modes: _modes, ...rest } = config;
+  return Object.keys(modes).length > 0 ? { ...rest, modes } : rest;
+}
 function readTextFile(path) {
   try {
     return readFileSync(path, "utf8");
@@ -378,14 +399,17 @@ function piAccess(runtime, agentDir2) {
     storeKey: async (provider, key) => {
       await runtime.refresh({ allowNetwork: false, providers: [provider] });
       if (!runtime.getProvider(provider)) {
-        throw new Error(`pi has no provider ${provider}${runtime.getError() ? `: ${runtime.getError()}` : ""}`);
+        throw new Error(
+          `mu has no provider named ${provider}${runtime.getError() ? `: ${runtime.getError()}` : ""}`
+        );
       }
       let asked = false;
       try {
         await runtime.login(provider, "api_key", {
           // pi's key login asks one question, the key. Anything else is not answered, and nothing is guessed.
           prompt: async (prompt) => {
-            if (asked || prompt.type !== "secret") throw new Error(`pi asked ${provider} for more than a key`);
+            if (asked || prompt.type !== "secret")
+              throw new Error(`the sign-in for ${provider} asked for more than a key`);
             asked = true;
             return key;
           },
@@ -459,11 +483,31 @@ function askSecret(input, output, question) {
     input.resume();
   });
 }
+var columnsOf = (char) => /[\u1100-\u115f\u2e80-\ua4cf\uac00-\ud7a3\uf900-\ufaff\ufe30-\ufe4f\uff00-\uff60\uffe0-\uffe6]/u.test(char) ? 2 : 1;
+var widthOf = (text) => Array.from(text).reduce((sum, char) => sum + columnsOf(char), 0);
+function wrapToWidth(text, width) {
+  if (!width || width < 20) return text;
+  return text.split("\n").map((line) => {
+    if (widthOf(line) <= width) return line;
+    const indent = " ".repeat(/^\s*(?:\d+\)\s+)?/.exec(line)?.[0].length ?? 0);
+    const out = [];
+    let current = "";
+    for (const word of line.trimEnd().split(/(?<=\S) (?=\S)/)) {
+      const next = current ? `${current} ${word}` : word;
+      if (current && widthOf(next) > width) {
+        out.push(current);
+        current = `${indent}${word.trimStart()}`;
+      } else current = next;
+    }
+    out.push(current);
+    return out.join("\n");
+  }).join("\n");
+}
 function terminalPrompter(input = process.stdin, output = process.stdout, errors = process.stderr) {
   return {
-    say: (text) => output.write(`${text}
+    say: (text) => output.write(`${wrapToWidth(text, output.isTTY ? output.columns : void 0)}
 `),
-    warn: (text) => errors.write(`${text}
+    warn: (text) => errors.write(`${wrapToWidth(text, errors.isTTY ? errors.columns : void 0)}
 `),
     ask: (question) => askLine(input, output, question),
     secret: (question) => askSecret(input, output, question)
@@ -885,6 +929,12 @@ var SETUP_SERVICES = [
     keyOptional: true
   }
 ];
+var FIRST_IN_ENGLISH = ["openai", "anthropic", "google", "xai", "openrouter", "opencode"];
+function servicesInOrder(language) {
+  if (language === "zh") return SETUP_SERVICES;
+  const first = FIRST_IN_ENGLISH.flatMap((id) => SETUP_SERVICES.filter((service) => service.id === id));
+  return [...first, ...SETUP_SERVICES.filter((service) => !FIRST_IN_ENGLISH.includes(service.id))];
+}
 function serviceById(id) {
   return SETUP_SERVICES.find((service) => service.id === id);
 }
@@ -893,6 +943,9 @@ function cleanKey(raw) {
   if (key.length >= 2 && (key[0] === '"' || key[0] === "'") && key.at(-1) === key[0]) key = key.slice(1, -1).trim();
   return key;
 }
+function isClaudeSubscriptionToken(key) {
+  return cleanKey(key).startsWith("sk-ant-oat");
+}
 function servicesForKey(key) {
   const clean = cleanKey(key);
   return clean ? SETUP_SERVICES.filter((service) => service.keyShape?.test(clean)) : [];
@@ -939,7 +992,7 @@ function namedModel(service) {
 
 // packages/kyrn-judge/src/setup/wizard.ts
 var SETUP_DECLINED_FILE = "setup-declined";
-var SETUP_EXIT = { done: 0, failed: 1, usage: 2, start: 3, cancelled: 130 };
+var SETUP_EXIT = { done: 0, failed: 1, usage: 2, start: 3, signIn: 4, cancelled: 130 };
 var SETUP_VALUE_FLAGS = [
   "--service",
   "--model",
@@ -970,6 +1023,10 @@ var JEV_TIERS = /* @__PURE__ */ new Set([
 ]);
 var OPENCODE_KEY = "OPENCODE_API_KEY";
 var JEV_PAGE = "https://typesafe.ai";
+var CLAUDE_TOKEN = {
+  zh: "\u8FD9\u662F Claude \u8BA2\u9605\u4EE4\u724C\uFF08claude setup-token \u751F\u6210\u7684\uFF09\uFF0C\u4E0D\u662F API \u5BC6\u94A5\u3002Anthropic \u4E0D\u5141\u8BB8\u5176\u4ED6\u5E94\u7528\u4F7F\u7528 Claude \u8BA2\u9605\uFF0C\u6240\u4EE5 mu \u7528\u4E0D\u4E86\u5B83\u3002\u8BF7\u6539\u7528 Anthropic API \u5BC6\u94A5\uFF08sk-ant-api\u2026\uFF09\uFF0C\u5728\u8FD9\u91CC\u521B\u5EFA\uFF1Ahttps://platform.claude.com/settings/keys",
+  en: "That's a Claude subscription token (from claude setup-token), not an API key. Anthropic doesn't allow other apps to use a Claude subscription, so mu can't use it. Use an Anthropic API key (sk-ant-api\u2026) instead; create one at https://platform.claude.com/settings/keys"
+};
 var BRANDED = /* @__PURE__ */ new Set(["openai", "anthropic", "openrouter", "google", "xai"]);
 var OTHER = {
   zh: "\u5176\u4ED6 OpenAI \u6216 Anthropic \u517C\u5BB9\u7684\u670D\u52A1",
@@ -1003,11 +1060,11 @@ function parseSetupArgs(argv) {
     return { error: { zh: "--api \u53EA\u80FD\u662F openai \u6216 anthropic", en: "--api must be openai or anthropic" } };
   }
   const judge = values.get("--judge");
-  if (judge !== void 0 && !["jev", "opencode", "free", "model", "none"].includes(judge)) {
+  if (judge !== void 0 && !["jev", "opencode", "free", "model", "off", "none"].includes(judge)) {
     return {
       error: {
-        zh: "--judge \u53EA\u80FD\u662F jev\u3001opencode\u3001free\u3001model \u6216 none",
-        en: "--judge must be jev, opencode, free, model or none"
+        zh: "--judge \u53EA\u80FD\u662F jev\u3001opencode\u3001free\u3001model\u3001off \u6216 none",
+        en: "--judge must be jev, opencode, free, model, off or none"
       }
     };
   }
@@ -1050,13 +1107,14 @@ function setupUsage(language) {
       "\u4E3A\u4EC0\u4E48\u811A\u672C\u8981\u4ECE\u6807\u51C6\u8F93\u5165\u7ED9\u5BC6\u94A5\uFF1A\u5199\u5728\u547D\u4EE4\u884C\u4E0A\u7684\u5BC6\u94A5\u4F1A\u7559\u5728 shell \u7684\u5386\u53F2\u8BB0\u5F55\u91CC\uFF0C",
       "\u8FD9\u53F0\u7535\u8111\u4E0A\u80FD\u5217\u51FA\u8FDB\u7A0B\u7684\u7A0B\u5E8F\u4E5F\u90FD\u770B\u5F97\u5230\u5B83\u3002mu setup <\u5BC6\u94A5> \u53EA\u662F\u4E3A\u4E86\u4E0A\u624B\u5FEB\uFF1B\u80FD\u5728\u63D0\u793A\u91CC\u7C98\u8D34\u5C31\u7C98\u8D34\u3002",
       "",
-      "  --judge jev     Jev \u5BC6\u94A5\uFF08TypeSafe\uFF09\u5199\u5728\u6807\u51C6\u8F93\u5165\u7684\u7B2C\u4E8C\u884C\uFF1B\u5DF2\u7ECF\u8BBE\u7F6E\u4E86 TYPESAFE_API_KEY \u5C31\u4E0D\u7528",
+      "  --judge jev       Jev \u5BC6\u94A5\uFF08TypeSafe\uFF09\u5199\u5728\u6807\u51C6\u8F93\u5165\u7684\u7B2C\u4E8C\u884C\uFF1B\u5DF2\u7ECF\u8BBE\u7F6E\u4E86 TYPESAFE_API_KEY \u5C31\u4E0D\u7528",
       "  --judge opencode  OpenCode Zen \u4E0A\u7684 Jev\uFF0C\u7528 OpenCode \u7684\u5BC6\u94A5\uFF08--service opencode \u6216 OPENCODE_API_KEY\uFF09",
-      "  --judge free    OpenCode Zen \u4E0A\u9650\u65F6\u514D\u8D39\u7684 Jev\uFF0C\u4E0D\u7528\u5BC6\u94A5\uFF08\u6CA1\u6709\u5BC6\u94A5\u65F6\u672C\u6765\u5C31\u7528\u5B83\uFF09",
-      "  --judge model   \u7528\u521A\u8BBE\u7F6E\u7684\u6A21\u578B\u5F53\u5224\u5B9A\u5668\uFF08\u66F4\u6162\uFF0C\u6BCF\u6B21\u5224\u65AD\u90FD\u82B1 token\uFF09",
-      "  --judge none    \u4E0D\u6539\u5224\u5B9A\u5668\uFF1B\u4E0D\u5199 --judge \u65F6\u4E5F\u4E0D\u6539",
-      "  --api, --name   \u670D\u52A1 other \u7684\u63A5\u53E3\uFF08openai \u6216 anthropic\uFF09\u548C\u5B83\u5728 mu \u91CC\u7684\u540D\u5B57",
-      "  --yes           \u4E0D\u63D0\u95EE\uFF1B\u66FF\u6362\u5DF2\u6709\u7684\u8BBE\u7F6E\uFF08\u8BA2\u9605\u767B\u5F55\u3001\u540C\u540D\u670D\u52A1\u7684\u5730\u5740\u3001Jev \u5BC6\u94A5\uFF09",
+      "  --judge free      OpenCode Zen \u4E0A\u9650\u65F6\u514D\u8D39\u7684 Jev\uFF0C\u4E0D\u7528\u5BC6\u94A5\uFF08\u6CA1\u6709\u5BC6\u94A5\u65F6\u672C\u6765\u5C31\u7528\u5B83\uFF09",
+      "  --judge model     \u7528\u521A\u8BBE\u7F6E\u7684\u6A21\u578B\u5F53\u5224\u5B9A\u5668\uFF08\u66F4\u6162\uFF0C\u6BCF\u6B21\u5224\u65AD\u90FD\u82B1 token\uFF09",
+      "  --judge off       \u4E0D\u7528\u5224\u5B9A\u5668\uFF1A\u6240\u6709\u5224\u5B9A\u70B9\u5173\u95ED\uFF0C\u4EC0\u4E48\u90FD\u4E0D\u53D1\u7ED9\u5224\u5B9A\u5668",
+      "  --judge none      \u4E0D\u6539\u5224\u5B9A\u5668\uFF1B\u4E0D\u5199 --judge \u65F6\u4E5F\u4E0D\u6539",
+      "  --api, --name     \u670D\u52A1 other \u7684\u63A5\u53E3\uFF08openai \u6216 anthropic\uFF09\u548C\u5B83\u5728 mu \u91CC\u7684\u540D\u5B57",
+      "  --yes             \u4E0D\u63D0\u95EE\uFF1B\u66FF\u6362\u5DF2\u6709\u7684\u8BBE\u7F6E\uFF08\u8BA2\u9605\u767B\u5F55\u3001\u540C\u540D\u670D\u52A1\u7684\u5730\u5740\u3001Jev \u5BC6\u94A5\uFF09",
       "",
       "\u4F1A\u6539\u52A8\u7684\u6587\u4EF6\uFF1A~/.mu/agent \u91CC\u7684 auth.json\uFF08\u5BC6\u94A5\uFF09\u3001models.json\u3001settings.json\u3001mu.json\uFF0C",
       "\u4EE5\u53CA mu \u8BFB\u53D6\u7684 .env\uFF08Jev \u5BC6\u94A5\uFF09\u3002\u6BCF\u4E2A\u6587\u4EF6\u6539\u52A8\u524D\u90FD\u4F1A\u5148\u590D\u5236\u5230 ~/.mu/backups/<\u65F6\u95F4>/\u3002"
@@ -1075,14 +1133,15 @@ function setupUsage(language) {
     "computer that lists processes can read it. `mu setup <key>` is a shortcut for getting started; paste the key",
     "at the prompt when you can.",
     "",
-    "  --judge jev     read the Jev key (TypeSafe) from stdin's second line, unless TYPESAFE_API_KEY is already set",
+    "  --judge jev       read the Jev key (TypeSafe) from stdin's second line, unless TYPESAFE_API_KEY is already set",
     "  --judge opencode  use Jev on OpenCode Zen with an OpenCode key (--service opencode or OPENCODE_API_KEY)",
-    "  --judge free    use the free Jev on OpenCode Zen (limited time, no key; the default while no key is set)",
-    "  --judge model   use the model you just set up as the judge (slower, and every verdict costs tokens)",
-    "  --judge none    leave the judge unchanged (the same as omitting --judge)",
-    "  --api, --name   for the service `other`: its API (openai or anthropic) and its name in mu",
-    "  --yes           don't ask; replace what's already set up (a subscription sign-in, a provider's address,",
-    "                  the Jev key)",
+    "  --judge free      use the free Jev on OpenCode Zen (limited time, no key; the default while no key is set)",
+    "  --judge model     use the model you just set up as the judge (slower, and every verdict costs tokens)",
+    "  --judge off       no judge: every decision point is off, and nothing is sent to a judge",
+    "  --judge none      leave the judge unchanged (the same as omitting --judge)",
+    "  --api, --name     for the service `other`: its API (openai or anthropic) and its name in mu",
+    "  --yes             don't ask; replace what's already set up (a subscription sign-in, a provider's",
+    "                    address, the Jev key)",
     "",
     "Files it changes: auth.json (keys), models.json, settings.json and mu.json in ~/.mu/agent, and the .env",
     "mu reads (the Jev key). Each one is backed up to ~/.mu/backups/<time>/ before it changes."
@@ -1093,7 +1152,7 @@ function label(service, language) {
 }
 function serviceList(language) {
   const width = Math.max(...SETUP_SERVICES.map((service) => service.id.length));
-  return SETUP_SERVICES.map((service) => `  ${service.id.padEnd(width)}  ${label(service, language)}`).join("\n");
+  return servicesInOrder(language).map((service) => `  ${service.id.padEnd(width)}  ${label(service, language)}`).join("\n");
 }
 function providerIdFor(baseUrl) {
   let host;
@@ -1202,10 +1261,14 @@ var Setup = class {
       if (key || allowEmpty) return key;
     }
   }
-  pasteKey() {
-    return this.secret(
-      this.t({ zh: "\u7C98\u8D34 API \u5BC6\u94A5\uFF08\u4E0D\u4F1A\u663E\u793A\u51FA\u6765\uFF09\uFF1A", en: "Paste the API key (it won't be shown): " })
-    );
+  async pasteKey() {
+    for (; ; ) {
+      const key = await this.secret(
+        this.t({ zh: "\u7C98\u8D34 API \u5BC6\u94A5\uFF08\u4E0D\u4F1A\u663E\u793A\u51FA\u6765\uFF09\uFF1A", en: "Paste the API key (it won't be shown): " })
+      );
+      if (!isClaudeSubscriptionToken(key)) return key;
+      this.io.warn(this.t(CLAUDE_TOKEN));
+    }
   }
   async choose(question, choices) {
     this.io.say(question);
@@ -1245,6 +1308,7 @@ var Setup = class {
       key = modelKey;
       this.jevFromStdin = jevKey;
     }
+    if (key !== void 0 && isClaudeSubscriptionToken(key)) throw this.fail(CLAUDE_TOKEN, SETUP_EXIT.usage);
     if (this.scripted && key === void 0 && args.service === void 0) {
       throw this.fail(
         deps.interactive ? { zh: "\u6CA1\u6709\u5BC6\u94A5\uFF0C\u4E5F\u6CA1\u6709 --service", en: "no key or --service given" } : {
@@ -1265,7 +1329,7 @@ var Setup = class {
     const start = await this.start(key === void 0 ? void 0 : cleanKey(key));
     if (start === "subscription") {
       const code2 = await this.write(void 0, void 0, await this.judge(void 0));
-      return code2 === SETUP_EXIT.done ? this.offerSession() : code2;
+      return code2 === SETUP_EXIT.done ? this.offerSession(true) : code2;
     }
     const target = await this.checked(start.service, start.key);
     this.modelKey = target.key;
@@ -1321,8 +1385,8 @@ var Setup = class {
         { label: this.t({ zh: "\u4ECE\u5217\u8868\u91CC\u9009\u4E00\u4E2A\u670D\u52A1", en: "Choose a service from the list" }), value: "list" },
         {
           label: this.t({
-            zh: "\u7528\u8BA2\u9605\u8D26\u53F7\u767B\u5F55\uFF1AChatGPT\u3001Claude\u3001Grok \u6216 Google",
-            en: "Sign in with a subscription: ChatGPT, Claude, Grok or Google"
+            zh: "\u7528\u8BA2\u9605\u8D26\u53F7\u767B\u5F55\uFF1AChatGPT\u3001Grok \u6216 Google",
+            en: "Sign in with a subscription: ChatGPT, Grok or Google"
           }),
           value: "subscription"
         }
@@ -1332,13 +1396,13 @@ var Setup = class {
       const auth = this.path(join3(this.deps.paths.agentDir, "auth.json"));
       this.io.say(
         this.t({
-          zh: `\u8BA2\u9605\u8D26\u53F7\u5728 mu \u91CC\u9762\u767B\u5F55\uFF1A\u542F\u52A8 mu\uFF0C\u8F93\u5165 /login\uFF0C\u9009 ChatGPT\uFF08OpenAI Codex\uFF09\u3001Claude\u3001Grok \u6216 Google\uFF0C\u6309\u63D0\u793A\u5728\u6D4F\u89C8\u5668\u91CC\u5B8C\u6210\u3002\u767B\u5F55\u4FE1\u606F\u4FDD\u5B58\u5728 ${auth}\u3002`,
-          en: `Subscriptions sign in from inside mu: start mu, type /login, choose ChatGPT (OpenAI Codex), Claude, Grok or Google, and finish in the browser. The sign-in is saved in ${auth}.`
+          zh: `\u8BA2\u9605\u8D26\u53F7\u5728 mu \u91CC\u7528 /login \u767B\u5F55\uFF1A\u9009 Sign in with an account\uFF0C\u518D\u9009 OpenAI\uFF08ChatGPT\uFF09\u3001xAI\uFF08Grok\uFF09\u6216 Google \u7684\u4E00\u9879\uFF0C\u6309\u63D0\u793A\u5728\u6D4F\u89C8\u5668\u91CC\u5B8C\u6210\u3002setup \u63A5\u7740\u542F\u52A8 mu \u65F6\uFF0C/login \u5DF2\u7ECF\u6253\u5F00\u3002\u767B\u5F55\u4FE1\u606F\u4FDD\u5B58\u5728 ${auth}\u3002`,
+          en: `You sign in to a subscription inside mu, with /login: choose Sign in with an account, then OpenAI for ChatGPT, xAI for Grok, or one of the Google sign-ins, and finish in the browser. When setup starts mu, /login is already open. The sign-in is saved in ${auth}.`
         })
       );
       return "subscription";
     }
-    if (route === "list") return this.keyFor(await this.pickService(SETUP_SERVICES), void 0);
+    if (route === "list") return this.keyFor(await this.pickService(servicesInOrder(this.language)), void 0);
     const pasted = await this.pasteKey();
     return { service: await this.serviceOf(pasted), key: pasted };
   }
@@ -1385,7 +1449,7 @@ var Setup = class {
       );
     }
     return this.pickService(
-      SETUP_SERVICES.filter((service) => !service.keyless),
+      servicesInOrder(this.language).filter((service) => !service.keyless),
       this.t({
         zh: "mu \u8BA4\u4E0D\u51FA\u8FD9\u4E2A\u5BC6\u94A5\u3002\u5B83\u662F\u54EA\u4E2A\u670D\u52A1\u7684\uFF1F",
         en: "mu doesn't recognize this key. Which service is it for?"
@@ -1607,7 +1671,7 @@ var Setup = class {
       if (this.scripted) {
         throw this.fail({
           zh: `${this.name(service)} \u5DF2\u7ECF\u7528\u8BA2\u9605\u8D26\u53F7\u767B\u5F55\u4E86\u3002\u8981\u6539\u5B58\u5BC6\u94A5\uFF0C\u52A0\u4E0A --yes`,
-          en: `${this.name(service)} is signed in with a subscription. To use a key instead, add --yes`
+          en: `You're signed in to ${this.name(service)} with a subscription. To use a key instead, add --yes`
         });
       }
       const replace = await this.confirm(
@@ -1796,8 +1860,8 @@ var Setup = class {
     }
     choices.push({
       label: this.t({
-        zh: "\u6682\u65F6\u4E0D\u8981\uFF1Amu \u5C31\u50CF pi \u4E00\u6837\u5DE5\u4F5C\uFF0C\u6CA1\u6709\u5224\u5B9A\u5668\u56DE\u7B54",
-        en: "Not now: mu works like plain pi, with no judge"
+        zh: "\u6682\u65F6\u4E0D\u8981\uFF1A\u4E0D\u95EE\u5224\u5B9A\u5668\uFF0C\u4EC0\u4E48\u90FD\u4E0D\u53D1\u7ED9\u5B83\uFF0Cmu \u6309\u9ED8\u8BA4\u89C4\u5219\u5DE5\u4F5C",
+        en: "Not now: no judge is asked and nothing is sent to one; mu uses its fallbacks"
       }),
       value: "none"
     });
@@ -1826,6 +1890,8 @@ var Setup = class {
         return { kind: "opencode" };
       case "free":
         return { kind: "free" };
+      case "off":
+        return { kind: "none" };
       case "jev": {
         const key = this.jevFromStdin;
         if (!key) {
@@ -1971,14 +2037,15 @@ var Setup = class {
           );
         }
       }
-      if (judge && judge.kind !== "none") this.writeJudge(judge, target, model, backups, saved, notes);
+      if (judge?.kind === "none") this.writeNoJudge(backups, saved, notes);
+      else if (judge) this.writeJudge(judge, target, model, backups, saved, notes);
     } catch (error) {
       if (error instanceof Stop) throw error;
       let reason = error instanceof Error ? error.message : String(error);
       for (const secret of [target?.key, judge?.kind === "jev" ? judge.key : void 0]) {
         if (secret) reason = reason.replaceAll(secret, "\u2026");
       }
-      this.io.warn(this.t({ zh: `mu setup\uFF1A\u4FDD\u5B58\u65F6\u51FA\u9519\uFF1A${reason}`, en: `mu setup: saving failed: ${reason}` }));
+      this.io.warn(this.t({ zh: `mu setup\uFF1A\u4FDD\u5B58\u65F6\u51FA\u9519\uFF1A${reason}`, en: `mu setup: couldn't save: ${reason}` }));
       if (saved.length > 0) {
         this.io.warn(this.t({ zh: "\u51FA\u9519\u524D\u5DF2\u7ECF\u4FDD\u5B58\u7684\uFF1A", en: "Saved before the error:" }));
         for (const entry of saved) this.io.warn(entry);
@@ -2012,6 +2079,25 @@ var Setup = class {
   savedLine(path, what) {
     return `  ${this.path(path).padEnd(30)} ${what}`;
   }
+  /** "Not now": no decision point asks a judge (the default mode "off"), so nothing goes to one. */
+  writeNoJudge(backups, saved, notes) {
+    const configPath = judgeConfigPath(this.deps.paths.agentDir);
+    const config = readJsonFile(configPath);
+    if (config.state === "unreadable") {
+      notes.push(
+        this.t({
+          zh: `${this.path(configPath)} \u4E0D\u662F\u7EAF JSON\uFF0C\u6CA1\u6709\u6539\u5B83\u3002\u8BF7\u624B\u52A8\u52A0\u4E0A "modes": { "default": "off" }`,
+          en: `${this.path(configPath)} isn't plain JSON, so it was left unchanged. Add "modes": { "default": "off" } by hand.`
+        })
+      );
+      return;
+    }
+    const current = config.state === "ok" ? config.value : void 0;
+    if (judgeOff(current)) return;
+    backups.save(configPath);
+    writeJsonFile(configPath, withJudge(current ?? {}, false));
+    saved.push(this.savedLine(configPath, this.t({ zh: "\u5224\u5B9A\u5668\uFF1A\u5173\u95ED", en: "judge: off" })));
+  }
   writeJudge(judge, target, model, backups, saved, notes) {
     const { env, paths } = this.deps;
     const configPath = judgeConfigPath(paths.agentDir);
@@ -2024,6 +2110,7 @@ var Setup = class {
     else if (judge.kind === "free") {
       if (!tiersOf(current).some((tier) => tier === "jev" || tier === "jev-opencode-free")) tiers = ["jev"];
     } else if (!tiersOf(current).some((tier) => JEV_TIERS.has(tier))) tiers = ["jev"];
+    const turnOn = judgeOff(current);
     if (tiers && config.state === "unreadable") {
       notes.push(
         this.t({
@@ -2031,11 +2118,13 @@ var Setup = class {
           en: `${this.path(configPath)} isn't plain JSON, so it was left unchanged. Add "tiers": ${JSON.stringify(tiers)} by hand.`
         })
       );
-    } else if (tiers) {
+    } else if (tiers || turnOn) {
       backups.save(configPath);
-      writeJsonFile(configPath, withTiers(current ?? {}, tiers));
+      const next = tiers ? withTiers(current ?? {}, tiers) : current ?? {};
+      writeJsonFile(configPath, turnOn ? withJudge(next, true) : next);
+      const named2 = tiers ?? tiersOf(current);
       saved.push(
-        this.savedLine(configPath, this.t({ zh: `\u5224\u5B9A\u5668 ${tiers.join(", ")}`, en: `judge: ${tiers.join(", ")}` }))
+        this.savedLine(configPath, this.t({ zh: `\u5224\u5B9A\u5668 ${named2.join(", ")}`, en: `judge: ${named2.join(", ")}` }))
       );
     }
     if (judge.kind === "jev") {
@@ -2081,14 +2170,19 @@ var Setup = class {
       target ? this.t({
         zh: "\u5728 mu \u91CC\u7528 /model \u6362\u6A21\u578B\uFF1B\u968F\u65F6\u53EF\u4EE5\u518D\u8FD0\u884C mu setup\u3002",
         en: "Switch models inside mu with /model, and run mu setup again any time."
-      }) : this.t({ zh: "\u542F\u52A8 mu \u540E\u8F93\u5165 /login \u767B\u5F55\u3002", en: "Start mu and type /login to sign in." })
+      }) : this.t({ zh: "\u63A5\u4E0B\u6765\u5728 mu \u91CC\u7528 /login \u767B\u5F55\u3002", en: "Next, sign in with /login in mu." })
     );
   }
-  /** On its own, a finished setup offers a session; on a first start the launcher goes on into one anyway. */
-  async offerSession() {
-    if (this.args.firstRun || this.scripted) return SETUP_EXIT.done;
+  /**
+   * On its own, a finished setup offers a session; on a first start the launcher goes on into one anyway. After a
+   * subscription was chosen (`signIn`), that session opens on /login: SETUP_EXIT.signIn.
+   */
+  async offerSession(signIn = false) {
+    if (this.scripted) return SETUP_EXIT.done;
+    if (this.args.firstRun) return signIn ? SETUP_EXIT.signIn : SETUP_EXIT.done;
     const start = await this.confirm(this.t({ zh: "\u73B0\u5728\u542F\u52A8 mu \u5417\uFF1F[Y/n] ", en: "Start mu now? [Y/n] " }), true);
-    return start ? SETUP_EXIT.start : SETUP_EXIT.done;
+    if (!start) return SETUP_EXIT.done;
+    return signIn ? SETUP_EXIT.signIn : SETUP_EXIT.start;
   }
 };
 function existingProviders(models) {