remoteclaw 0.1.0-next.da482d8 → 0.1.0-next.db8a792

package/dist/configure-ifuEamRQ.js

@@ -0,0 +1,889 @@
+import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
+import { Ht as resolveGatewayPort, Nt as CONFIG_PATH, _ as defaultRuntime, ot as shortenHomePath, rt as resolveUserPath } from "./entry.js";
+import { i as loadConfig, l as writeConfigFile, o as readConfigFileSnapshot } from "./config-DfcqHTH-.js";
+import { n as listChannelPlugins, t as getChannelPlugin } from "./plugins-DdMgSc_b.js";
+import { t as formatCliCommand } from "./command-format-KkslAzwV.js";
+import { c as upsertAuthProfile } from "./auth-C-XX0Tdt.js";
+import { a as findTailscaleBinary } from "./tailscale-DngZHD9L.js";
+import { n as withProgress } from "./progress-C-hTn2yV.js";
+import { n as stylePromptMessage, r as stylePromptTitle, t as stylePromptHint } from "./prompt-style-B1740PBl.js";
+import { t as note$1 } from "./note-DHUJACHE.js";
+import { n as WizardCancelledError, t as createClackPrompter } from "./clack-prompter-DDlR2e34.js";
+import { _ as validateGatewayPasswordInput, f as printWizardHeader, g as summarizeExistingConfig, h as resolveControlUiLinks, i as ensureWorkspaceAndSessions, l as normalizeGatewayTokenInput, m as randomToken, o as guardCancel, p as probeGatewayReachable, t as applyWizardMetadata, v as waitForGatewayReachable } from "./onboard-helpers-B-bBSsyR.js";
+import { r as setupChannels, t as noteChannelStatus } from "./onboard-channels-DVrPP_ie.js";
+import { n as gatewayInstallErrorHint, t as buildGatewayInstallPlan } from "./daemon-install-helpers-BhL2Gh4l.js";
+import { n as GATEWAY_DAEMON_RUNTIME_OPTIONS, t as DEFAULT_GATEWAY_DAEMON_RUNTIME } from "./daemon-runtime-KyXiP2ib.js";
+import { t as resolveGatewayService } from "./service-SRcnA1Am.js";
+import { r as healthCommand } from "./health-1ero5j64.js";
+import { t as ensureControlUiAssetsBuilt } from "./control-ui-assets-DVhkAyhv.js";
+import { n as collectWorkspaceDirs } from "./cleanup-utils-rqUXvR3Z.js";
+import { n as logConfigUpdated } from "./logging-JiRrQn2_.js";
+import { t as ensureSystemdUserLingerInteractive } from "./systemd-linger-CWLgT0Wr.js";
+import { i as TAILSCALE_MISSING_BIN_NOTE_LINES, n as TAILSCALE_DOCS_LINES, r as TAILSCALE_EXPOSURE_OPTIONS, t as validateIPv4AddressInput } from "./ipv4-DsOgHE0B.js";
+import { t as formatHealthCheckFailure } from "./health-format-CwLlmYSK.js";
+import { n as promptRemoteGatewayConfig } from "./onboard-remote-C0THuDTK.js";
+import { confirm, intro, outro, select, text } from "@clack/prompts";
+
+//#region src/commands/configure.shared.ts
+const CONFIGURE_WIZARD_SECTIONS = [
+	"workspace",
+	"model",
+	"gateway",
+	"daemon",
+	"channels",
+	"skills",
+	"health"
+];
+function parseConfigureWizardSections(raw) {
+	const sectionsRaw = Array.isArray(raw) ? raw.map((value) => typeof value === "string" ? value.trim() : "").filter(Boolean) : [];
+	if (sectionsRaw.length === 0) return {
+		sections: [],
+		invalid: []
+	};
+	const invalid = sectionsRaw.filter((s) => !CONFIGURE_WIZARD_SECTIONS.includes(s));
+	return {
+		sections: sectionsRaw.filter((s) => CONFIGURE_WIZARD_SECTIONS.includes(s)),
+		invalid
+	};
+}
+const CONFIGURE_SECTION_OPTIONS = [
+	{
+		value: "workspace",
+		label: "Workspace",
+		hint: "Set workspace + sessions"
+	},
+	{
+		value: "model",
+		label: "Model",
+		hint: "Pick provider + credentials"
+	},
+	{
+		value: "gateway",
+		label: "Gateway",
+		hint: "Port, bind, auth, tailscale"
+	},
+	{
+		value: "daemon",
+		label: "Daemon",
+		hint: "Install/manage the background service"
+	},
+	{
+		value: "channels",
+		label: "Channels",
+		hint: "Link WhatsApp/Telegram/etc and defaults"
+	},
+	{
+		value: "skills",
+		label: "Skills",
+		hint: "Install/enable workspace skills"
+	},
+	{
+		value: "health",
+		label: "Health check",
+		hint: "Run gateway + channel checks"
+	}
+];
+const intro$1 = (message) => intro(stylePromptTitle(message) ?? message);
+const outro$1 = (message) => outro(stylePromptTitle(message) ?? message);
+const text$1 = (params) => text({
+	...params,
+	message: stylePromptMessage(params.message)
+});
+const confirm$1 = (params) => confirm({
+	...params,
+	message: stylePromptMessage(params.message)
+});
+const select$1 = (params) => select({
+	...params,
+	message: stylePromptMessage(params.message),
+	options: params.options.map((opt) => opt.hint === void 0 ? opt : {
+		...opt,
+		hint: stylePromptHint(opt.hint)
+	})
+});
+
+//#endregion
+//#region src/commands/configure.channels.ts
+async function removeChannelConfigWizard(cfg, runtime) {
+	let next = { ...cfg };
+	const listConfiguredChannels = () => listChannelPlugins().map((plugin) => plugin.meta).filter((meta) => next.channels?.[meta.id] !== void 0);
+	while (true) {
+		const configured = listConfiguredChannels();
+		if (configured.length === 0) {
+			note$1(["No channel config found in remoteclaw.json.", `Tip: \`${formatCliCommand("remoteclaw channels status")}\` shows what is configured and enabled.`].join("\n"), "Remove channel");
+			return next;
+		}
+		const channel = guardCancel(await select$1({
+			message: "Remove which channel config?",
+			options: [...configured.map((meta) => ({
+				value: meta.id,
+				label: meta.label,
+				hint: "Deletes tokens + settings from config (credentials stay on disk)"
+			})), {
+				value: "done",
+				label: "Done"
+			}]
+		}), runtime);
+		if (channel === "done") return next;
+		const label = getChannelPlugin(channel)?.meta.label ?? channel;
+		if (!guardCancel(await confirm$1({
+			message: `Delete ${label} configuration from ${shortenHomePath(CONFIG_PATH)}?`,
+			initialValue: false
+		}), runtime)) continue;
+		const nextChannels = { ...next.channels };
+		delete nextChannels[channel];
+		next = {
+			...next,
+			channels: Object.keys(nextChannels).length ? nextChannels : void 0
+		};
+		note$1([`${label} removed from config.`, "Note: credentials/sessions on disk are unchanged."].join("\n"), "Channel removed");
+	}
+}
+
+//#endregion
+//#region src/commands/configure.daemon.ts
+async function maybeInstallDaemon(params) {
+	const service = resolveGatewayService();
+	const loaded = await service.isLoaded({ env: process.env });
+	let shouldCheckLinger = false;
+	let shouldInstall = true;
+	let daemonRuntime = params.daemonRuntime ?? DEFAULT_GATEWAY_DAEMON_RUNTIME;
+	if (loaded) {
+		const action = guardCancel(await select$1({
+			message: "Gateway service already installed",
+			options: [
+				{
+					value: "restart",
+					label: "Restart"
+				},
+				{
+					value: "reinstall",
+					label: "Reinstall"
+				},
+				{
+					value: "skip",
+					label: "Skip"
+				}
+			]
+		}), params.runtime);
+		if (action === "restart") {
+			await withProgress({
+				label: "Gateway service",
+				indeterminate: true,
+				delayMs: 0
+			}, async (progress) => {
+				progress.setLabel("Restarting Gateway service…");
+				await service.restart({
+					env: process.env,
+					stdout: process.stdout
+				});
+				progress.setLabel("Gateway service restarted.");
+			});
+			shouldCheckLinger = true;
+			shouldInstall = false;
+		}
+		if (action === "skip") return;
+		if (action === "reinstall") await withProgress({
+			label: "Gateway service",
+			indeterminate: true,
+			delayMs: 0
+		}, async (progress) => {
+			progress.setLabel("Uninstalling Gateway service…");
+			await service.uninstall({
+				env: process.env,
+				stdout: process.stdout
+			});
+			progress.setLabel("Gateway service uninstalled.");
+		});
+	}
+	if (shouldInstall) {
+		let installError = null;
+		if (!params.daemonRuntime) if (GATEWAY_DAEMON_RUNTIME_OPTIONS.length === 1) daemonRuntime = GATEWAY_DAEMON_RUNTIME_OPTIONS[0]?.value ?? DEFAULT_GATEWAY_DAEMON_RUNTIME;
+		else daemonRuntime = guardCancel(await select$1({
+			message: "Gateway service runtime",
+			options: GATEWAY_DAEMON_RUNTIME_OPTIONS,
+			initialValue: DEFAULT_GATEWAY_DAEMON_RUNTIME
+		}), params.runtime);
+		await withProgress({
+			label: "Gateway service",
+			indeterminate: true,
+			delayMs: 0
+		}, async (progress) => {
+			progress.setLabel("Preparing Gateway service…");
+			const cfg = loadConfig();
+			const { programArguments, workingDirectory, environment } = await buildGatewayInstallPlan({
+				env: process.env,
+				port: params.port,
+				token: params.gatewayToken,
+				runtime: daemonRuntime,
+				warn: (message, title) => note$1(message, title),
+				config: cfg
+			});
+			progress.setLabel("Installing Gateway service…");
+			try {
+				await service.install({
+					env: process.env,
+					stdout: process.stdout,
+					programArguments,
+					workingDirectory,
+					environment
+				});
+				progress.setLabel("Gateway service installed.");
+			} catch (err) {
+				installError = err instanceof Error ? err.message : String(err);
+				progress.setLabel("Gateway service install failed.");
+			}
+		});
+		if (installError) {
+			note$1("Gateway service install failed: " + installError, "Gateway");
+			note$1(gatewayInstallErrorHint(), "Gateway");
+			return;
+		}
+		shouldCheckLinger = true;
+	}
+	if (shouldCheckLinger) await ensureSystemdUserLingerInteractive({
+		runtime: params.runtime,
+		prompter: {
+			confirm: async (p) => guardCancel(await confirm$1(p), params.runtime),
+			note: note$1
+		},
+		reason: "Linux installs use a systemd user service. Without lingering, systemd stops the user session on logout/idle and kills the Gateway.",
+		requireConfirm: true
+	});
+}
+
+//#endregion
+//#region src/commands/configure.gateway-auth.ts
+/** Reject undefined, empty, and common JS string-coercion artifacts for token auth. */
+function sanitizeTokenValue(value) {
+	if (typeof value !== "string") return;
+	const trimmed = value.trim();
+	if (!trimmed || trimmed === "undefined" || trimmed === "null") return;
+	return trimmed;
+}
+function buildGatewayAuthConfig(params) {
+	const allowTailscale = params.existing?.allowTailscale;
+	const base = {};
+	if (typeof allowTailscale === "boolean") base.allowTailscale = allowTailscale;
+	if (params.mode === "token") {
+		const token = sanitizeTokenValue(params.token) ?? randomToken();
+		return {
+			...base,
+			mode: "token",
+			token
+		};
+	}
+	if (params.mode === "password") {
+		const password = params.password?.trim();
+		return {
+			...base,
+			mode: "password",
+			...password && { password }
+		};
+	}
+	if (params.mode === "trusted-proxy") {
+		if (!params.trustedProxy) throw new Error("trustedProxy config is required when mode is trusted-proxy");
+		return {
+			...base,
+			mode: "trusted-proxy",
+			trustedProxy: params.trustedProxy
+		};
+	}
+	return base;
+}
+async function promptAuthConfig(cfg, _runtime, prompter) {
+	const selectedRuntime = await prompter.select({
+		message: "Which agent runtime?",
+		options: [
+			{
+				value: "claude",
+				label: "Claude Code (claude)"
+			},
+			{
+				value: "gemini",
+				label: "Gemini CLI (gemini)"
+			},
+			{
+				value: "codex",
+				label: "Codex CLI (codex exec)"
+			},
+			{
+				value: "opencode",
+				label: "OpenCode (opencode)"
+			}
+		],
+		initialValue: "claude"
+	});
+	const promptApiKey = async (message) => {
+		return (await prompter.text({
+			message,
+			initialValue: ""
+		})).trim();
+	};
+	if (selectedRuntime === "claude") {
+		const key = await promptApiKey("Anthropic API key (or leave empty to skip)");
+		if (key) upsertAuthProfile({
+			profileId: "anthropic:default",
+			credential: {
+				type: "api_key",
+				provider: "anthropic",
+				key
+			}
+		});
+	} else if (selectedRuntime === "gemini") {
+		const key = await promptApiKey("Gemini API key (or leave empty to skip)");
+		if (key) upsertAuthProfile({
+			profileId: "google:default",
+			credential: {
+				type: "api_key",
+				provider: "google",
+				key
+			}
+		});
+	} else if (selectedRuntime === "codex") {
+		const key = await promptApiKey("Codex API key (or leave empty to skip)");
+		if (key) upsertAuthProfile({
+			profileId: "codex:default",
+			credential: {
+				type: "api_key",
+				provider: "codex",
+				key
+			}
+		});
+	} else if (selectedRuntime === "opencode") {
+		const key = await promptApiKey("API key (or leave empty to skip)");
+		if (key) upsertAuthProfile({
+			profileId: "opencode:default",
+			credential: {
+				type: "api_key",
+				provider: "opencode",
+				key
+			}
+		});
+	}
+	return {
+		...cfg,
+		agents: {
+			...cfg.agents,
+			defaults: {
+				...cfg.agents?.defaults,
+				runtime: selectedRuntime
+			}
+		}
+	};
+}
+
+//#endregion
+//#region src/commands/configure.gateway.ts
+async function promptGatewayConfig(cfg, runtime) {
+	const portRaw = guardCancel(await text$1({
+		message: "Gateway port",
+		initialValue: String(resolveGatewayPort(cfg)),
+		validate: (value) => Number.isFinite(Number(value)) ? void 0 : "Invalid port"
+	}), runtime);
+	const port = Number.parseInt(String(portRaw), 10);
+	let bind = guardCancel(await select$1({
+		message: "Gateway bind mode",
+		options: [
+			{
+				value: "loopback",
+				label: "Loopback (Local only)",
+				hint: "Bind to 127.0.0.1 - secure, local-only access"
+			},
+			{
+				value: "tailnet",
+				label: "Tailnet (Tailscale IP)",
+				hint: "Bind to your Tailscale IP only (100.x.x.x)"
+			},
+			{
+				value: "auto",
+				label: "Auto (Loopback → LAN)",
+				hint: "Prefer loopback; fall back to all interfaces if unavailable"
+			},
+			{
+				value: "lan",
+				label: "LAN (All interfaces)",
+				hint: "Bind to 0.0.0.0 - accessible from anywhere on your network"
+			},
+			{
+				value: "custom",
+				label: "Custom IP",
+				hint: "Specify a specific IP address, with 0.0.0.0 fallback if unavailable"
+			}
+		]
+	}), runtime);
+	let customBindHost;
+	if (bind === "custom") {
+		const input = guardCancel(await text$1({
+			message: "Custom IP address",
+			placeholder: "192.168.1.100",
+			validate: validateIPv4AddressInput
+		}), runtime);
+		customBindHost = typeof input === "string" ? input : void 0;
+	}
+	let authMode = guardCancel(await select$1({
+		message: "Gateway auth",
+		options: [
+			{
+				value: "token",
+				label: "Token",
+				hint: "Recommended default"
+			},
+			{
+				value: "password",
+				label: "Password"
+			},
+			{
+				value: "trusted-proxy",
+				label: "Trusted Proxy",
+				hint: "Behind reverse proxy (Pomerium, Caddy, Traefik, etc.)"
+			}
+		],
+		initialValue: "token"
+	}), runtime);
+	let tailscaleMode = guardCancel(await select$1({
+		message: "Tailscale exposure",
+		options: [...TAILSCALE_EXPOSURE_OPTIONS]
+	}), runtime);
+	if (tailscaleMode !== "off") {
+		if (!await findTailscaleBinary()) note$1(TAILSCALE_MISSING_BIN_NOTE_LINES.join("\n"), "Tailscale Warning");
+	}
+	let tailscaleResetOnExit = false;
+	if (tailscaleMode !== "off") {
+		note$1(TAILSCALE_DOCS_LINES.join("\n"), "Tailscale");
+		tailscaleResetOnExit = Boolean(guardCancel(await confirm$1({
+			message: "Reset Tailscale serve/funnel on exit?",
+			initialValue: false
+		}), runtime));
+	}
+	if (tailscaleMode !== "off" && bind !== "loopback") {
+		note$1("Tailscale requires bind=loopback. Adjusting bind to loopback.", "Note");
+		bind = "loopback";
+	}
+	if (tailscaleMode === "funnel" && authMode !== "password") {
+		note$1("Tailscale funnel requires password auth.", "Note");
+		authMode = "password";
+	}
+	if (authMode === "trusted-proxy" && tailscaleMode !== "off") {
+		note$1("Trusted proxy auth is incompatible with Tailscale serve/funnel. Disabling Tailscale.", "Note");
+		tailscaleMode = "off";
+		tailscaleResetOnExit = false;
+	}
+	let gatewayToken;
+	let gatewayPassword;
+	let trustedProxyConfig;
+	let trustedProxies;
+	let next = cfg;
+	if (authMode === "token") gatewayToken = normalizeGatewayTokenInput(guardCancel(await text$1({
+		message: "Gateway token (blank to generate)",
+		initialValue: randomToken()
+	}), runtime)) || randomToken();
+	if (authMode === "password") {
+		const password = guardCancel(await text$1({
+			message: "Gateway password",
+			validate: validateGatewayPasswordInput
+		}), runtime);
+		gatewayPassword = String(password ?? "").trim();
+	}
+	if (authMode === "trusted-proxy") {
+		note$1([
+			"Trusted proxy mode: RemoteClaw trusts user identity from a reverse proxy.",
+			"The proxy must authenticate users and pass identity via headers.",
+			"Only requests from specified proxy IPs will be trusted.",
+			"",
+			"Common use cases: Pomerium, Caddy + OAuth, Traefik + forward auth",
+			"Docs: https://docs.remoteclaw.org/gateway/trusted-proxy-auth"
+		].join("\n"), "Trusted Proxy Auth");
+		const userHeader = guardCancel(await text$1({
+			message: "Header containing user identity",
+			placeholder: "x-forwarded-user",
+			initialValue: "x-forwarded-user",
+			validate: (value) => value?.trim() ? void 0 : "User header is required"
+		}), runtime);
+		const requiredHeadersRaw = guardCancel(await text$1({
+			message: "Required headers (comma-separated, optional)",
+			placeholder: "x-forwarded-proto,x-forwarded-host"
+		}), runtime);
+		const requiredHeaders = requiredHeadersRaw ? String(requiredHeadersRaw).split(",").map((h) => h.trim()).filter(Boolean) : [];
+		const allowUsersRaw = guardCancel(await text$1({
+			message: "Allowed users (comma-separated, blank = all authenticated users)",
+			placeholder: "nick@example.com,admin@company.com"
+		}), runtime);
+		const allowUsers = allowUsersRaw ? String(allowUsersRaw).split(",").map((u) => u.trim()).filter(Boolean) : [];
+		const trustedProxiesRaw = guardCancel(await text$1({
+			message: "Trusted proxy IPs (comma-separated)",
+			placeholder: "10.0.1.10,192.168.1.5",
+			validate: (value) => {
+				if (!value || String(value).trim() === "") return "At least one trusted proxy IP is required";
+			}
+		}), runtime);
+		trustedProxies = String(trustedProxiesRaw).split(",").map((ip) => ip.trim()).filter(Boolean);
+		trustedProxyConfig = {
+			userHeader: String(userHeader).trim(),
+			requiredHeaders: requiredHeaders.length > 0 ? requiredHeaders : void 0,
+			allowUsers: allowUsers.length > 0 ? allowUsers : void 0
+		};
+	}
+	const authConfig = buildGatewayAuthConfig({
+		existing: next.gateway?.auth,
+		mode: authMode,
+		token: gatewayToken,
+		password: gatewayPassword,
+		trustedProxy: trustedProxyConfig
+	});
+	next = {
+		...next,
+		gateway: {
+			...next.gateway,
+			mode: "local",
+			port,
+			bind,
+			auth: authConfig,
+			...customBindHost && { customBindHost },
+			...trustedProxies && { trustedProxies },
+			tailscale: {
+				...next.gateway?.tailscale,
+				mode: tailscaleMode,
+				resetOnExit: tailscaleResetOnExit
+			}
+		}
+	};
+	return {
+		config: next,
+		port,
+		token: gatewayToken
+	};
+}
+
+//#endregion
+//#region src/commands/configure.wizard.ts
+async function runGatewayHealthCheck(params) {
+	const localLinks = resolveControlUiLinks({
+		bind: params.cfg.gateway?.bind ?? "loopback",
+		port: params.port,
+		customBindHost: params.cfg.gateway?.customBindHost,
+		basePath: void 0
+	});
+	const remoteUrl = params.cfg.gateway?.remote?.url?.trim();
+	await waitForGatewayReachable({
+		url: params.cfg.gateway?.mode === "remote" && remoteUrl ? remoteUrl : localLinks.wsUrl,
+		token: params.cfg.gateway?.auth?.token ?? process.env.REMOTECLAW_GATEWAY_TOKEN,
+		password: params.cfg.gateway?.auth?.password ?? process.env.REMOTECLAW_GATEWAY_PASSWORD,
+		deadlineMs: 15e3
+	});
+	try {
+		await healthCommand({
+			json: false,
+			timeoutMs: 1e4
+		}, params.runtime);
+	} catch (err) {
+		params.runtime.error(formatHealthCheckFailure(err));
+		note$1([
+			"Docs:",
+			"https://docs.remoteclaw.org/gateway/health",
+			"https://docs.remoteclaw.org/gateway/troubleshooting"
+		].join("\n"), "Health check help");
+	}
+}
+async function promptConfigureSection(runtime, hasSelection) {
+	return guardCancel(await select$1({
+		message: "Select sections to configure",
+		options: [...CONFIGURE_SECTION_OPTIONS, {
+			value: "__continue",
+			label: "Continue",
+			hint: hasSelection ? "Done" : "Skip for now"
+		}],
+		initialValue: CONFIGURE_SECTION_OPTIONS[0]?.value
+	}), runtime);
+}
+async function promptChannelMode(runtime) {
+	return guardCancel(await select$1({
+		message: "Channels",
+		options: [{
+			value: "configure",
+			label: "Configure/link",
+			hint: "Add/update channels; disable unselected accounts"
+		}, {
+			value: "remove",
+			label: "Remove channel config",
+			hint: "Delete channel tokens/settings from remoteclaw.json"
+		}],
+		initialValue: "configure"
+	}), runtime);
+}
+async function runConfigureWizard(opts, runtime = defaultRuntime) {
+	try {
+		printWizardHeader(runtime);
+		intro$1(opts.command === "update" ? "RemoteClaw update wizard" : "RemoteClaw configure");
+		const prompter = createClackPrompter();
+		const snapshot = await readConfigFileSnapshot();
+		const baseConfig = snapshot.valid ? snapshot.config : {};
+		if (snapshot.exists) {
+			const title = snapshot.valid ? "Existing config detected" : "Invalid config";
+			note$1(summarizeExistingConfig(baseConfig), title);
+			if (!snapshot.valid && snapshot.issues.length > 0) note$1([
+				...snapshot.issues.map((iss) => `- ${iss.path}: ${iss.message}`),
+				"",
+				"Docs: https://docs.remoteclaw.org/gateway/configuration"
+			].join("\n"), "Config issues");
+			if (!snapshot.valid) {
+				outro$1(`Config invalid. Run \`${formatCliCommand("remoteclaw doctor")}\` to repair it, then re-run configure.`);
+				runtime.exit(1);
+				return;
+			}
+		}
+		const localUrl = "ws://127.0.0.1:18789";
+		const localProbe = await probeGatewayReachable({
+			url: localUrl,
+			token: baseConfig.gateway?.auth?.token ?? process.env.REMOTECLAW_GATEWAY_TOKEN,
+			password: baseConfig.gateway?.auth?.password ?? process.env.REMOTECLAW_GATEWAY_PASSWORD
+		});
+		const remoteUrl = baseConfig.gateway?.remote?.url?.trim() ?? "";
+		const remoteProbe = remoteUrl ? await probeGatewayReachable({
+			url: remoteUrl,
+			token: baseConfig.gateway?.remote?.token
+		}) : null;
+		const mode = guardCancel(await select$1({
+			message: "Where will the Gateway run?",
+			options: [{
+				value: "local",
+				label: "Local (this machine)",
+				hint: localProbe.ok ? `Gateway reachable (${localUrl})` : `No gateway detected (${localUrl})`
+			}, {
+				value: "remote",
+				label: "Remote (info-only)",
+				hint: !remoteUrl ? "No remote URL configured yet" : remoteProbe?.ok ? `Gateway reachable (${remoteUrl})` : `Configured but unreachable (${remoteUrl})`
+			}]
+		}), runtime);
+		if (mode === "remote") {
+			let remoteConfig = await promptRemoteGatewayConfig(baseConfig, prompter);
+			remoteConfig = applyWizardMetadata(remoteConfig, {
+				command: opts.command,
+				mode
+			});
+			await writeConfigFile(remoteConfig);
+			logConfigUpdated(runtime);
+			outro$1("Remote gateway configured.");
+			return;
+		}
+		let nextConfig = { ...baseConfig };
+		let didSetGatewayMode = false;
+		if (nextConfig.gateway?.mode !== "local") {
+			nextConfig = {
+				...nextConfig,
+				gateway: {
+					...nextConfig.gateway,
+					mode: "local"
+				}
+			};
+			didSetGatewayMode = true;
+		}
+		let workspaceDir = collectWorkspaceDirs(nextConfig)[0] ?? collectWorkspaceDirs(baseConfig)[0] ?? "";
+		let gatewayPort = resolveGatewayPort(baseConfig);
+		let gatewayToken = nextConfig.gateway?.auth?.token ?? baseConfig.gateway?.auth?.token ?? process.env.REMOTECLAW_GATEWAY_TOKEN;
+		const persistConfig = async () => {
+			nextConfig = applyWizardMetadata(nextConfig, {
+				command: opts.command,
+				mode
+			});
+			await writeConfigFile(nextConfig);
+			logConfigUpdated(runtime);
+		};
+		const configureWorkspace = async () => {
+			const workspaceInput = guardCancel(await text$1({
+				message: "Workspace directory",
+				initialValue: workspaceDir
+			}), runtime);
+			const rawInput = String(workspaceInput ?? "").trim();
+			if (!rawInput) {
+				runtime.error("Workspace directory is required.");
+				return;
+			}
+			workspaceDir = resolveUserPath(rawInput);
+			const existingList = nextConfig.agents?.list ?? [];
+			const updatedList = existingList.find((a) => a.id === "main") ? existingList.map((a) => a.id === "main" ? {
+				...a,
+				workspace: workspaceDir
+			} : a) : [{
+				id: "main",
+				workspace: workspaceDir
+			}, ...existingList];
+			nextConfig = {
+				...nextConfig,
+				agents: {
+					...nextConfig.agents,
+					list: updatedList
+				}
+			};
+			await ensureWorkspaceAndSessions(workspaceDir, runtime);
+		};
+		const configureChannelsSection = async () => {
+			await noteChannelStatus({
+				cfg: nextConfig,
+				prompter
+			});
+			if (await promptChannelMode(runtime) === "configure") nextConfig = await setupChannels(nextConfig, runtime, prompter, {
+				allowDisable: true,
+				allowSignalInstall: true,
+				skipConfirm: true,
+				skipStatusNote: true
+			});
+			else nextConfig = await removeChannelConfigWizard(nextConfig, runtime);
+		};
+		const promptDaemonPort = async () => {
+			const portInput = guardCancel(await text$1({
+				message: "Gateway port for service install",
+				initialValue: String(gatewayPort),
+				validate: (value) => Number.isFinite(Number(value)) ? void 0 : "Invalid port"
+			}), runtime);
+			gatewayPort = Number.parseInt(String(portInput), 10);
+		};
+		if (opts.sections) {
+			const selected = opts.sections;
+			if (!selected || selected.length === 0) {
+				outro$1("No changes selected.");
+				return;
+			}
+			if (selected.includes("workspace")) await configureWorkspace();
+			if (selected.includes("model")) nextConfig = await promptAuthConfig(nextConfig, runtime, prompter);
+			if (selected.includes("gateway")) {
+				const gateway = await promptGatewayConfig(nextConfig, runtime);
+				nextConfig = gateway.config;
+				gatewayPort = gateway.port;
+				gatewayToken = gateway.token;
+			}
+			if (selected.includes("channels")) await configureChannelsSection();
+			await persistConfig();
+			if (selected.includes("daemon")) {
+				if (!selected.includes("gateway")) await promptDaemonPort();
+				await maybeInstallDaemon({
+					runtime,
+					port: gatewayPort,
+					gatewayToken
+				});
+			}
+			if (selected.includes("health")) await runGatewayHealthCheck({
+				cfg: nextConfig,
+				runtime,
+				port: gatewayPort
+			});
+		} else {
+			let ranSection = false;
+			let didConfigureGateway = false;
+			while (true) {
+				const choice = await promptConfigureSection(runtime, ranSection);
+				if (choice === "__continue") break;
+				ranSection = true;
+				if (choice === "workspace") {
+					await configureWorkspace();
+					await persistConfig();
+				}
+				if (choice === "model") {
+					nextConfig = await promptAuthConfig(nextConfig, runtime, prompter);
+					await persistConfig();
+				}
+				if (choice === "gateway") {
+					const gateway = await promptGatewayConfig(nextConfig, runtime);
+					nextConfig = gateway.config;
+					gatewayPort = gateway.port;
+					gatewayToken = gateway.token;
+					didConfigureGateway = true;
+					await persistConfig();
+				}
+				if (choice === "channels") {
+					await configureChannelsSection();
+					await persistConfig();
+				}
+				if (choice === "daemon") {
+					if (!didConfigureGateway) await promptDaemonPort();
+					await maybeInstallDaemon({
+						runtime,
+						port: gatewayPort,
+						gatewayToken
+					});
+				}
+				if (choice === "health") await runGatewayHealthCheck({
+					cfg: nextConfig,
+					runtime,
+					port: gatewayPort
+				});
+			}
+			if (!ranSection) {
+				if (didSetGatewayMode) {
+					await persistConfig();
+					outro$1("Gateway mode set to local.");
+					return;
+				}
+				outro$1("No changes selected.");
+				return;
+			}
+		}
+		const controlUiAssets = await ensureControlUiAssetsBuilt(runtime);
+		if (!controlUiAssets.ok && controlUiAssets.message) runtime.error(controlUiAssets.message);
+		const links = resolveControlUiLinks({
+			bind: nextConfig.gateway?.bind ?? "loopback",
+			port: gatewayPort,
+			customBindHost: nextConfig.gateway?.customBindHost,
+			basePath: nextConfig.gateway?.controlUi?.basePath
+		});
+		const newPassword = nextConfig.gateway?.auth?.password ?? process.env.REMOTECLAW_GATEWAY_PASSWORD;
+		const oldPassword = baseConfig.gateway?.auth?.password ?? process.env.REMOTECLAW_GATEWAY_PASSWORD;
+		const token = nextConfig.gateway?.auth?.token ?? process.env.REMOTECLAW_GATEWAY_TOKEN;
+		let gatewayProbe = await probeGatewayReachable({
+			url: links.wsUrl,
+			token,
+			password: newPassword
+		});
+		if (!gatewayProbe.ok && newPassword !== oldPassword && oldPassword) gatewayProbe = await probeGatewayReachable({
+			url: links.wsUrl,
+			token,
+			password: oldPassword
+		});
+		const gatewayStatusLine = gatewayProbe.ok ? "Gateway: reachable" : `Gateway: not detected${gatewayProbe.detail ? ` (${gatewayProbe.detail})` : ""}`;
+		note$1([
+			`Web UI: ${links.httpUrl}`,
+			`Gateway WS: ${links.wsUrl}`,
+			gatewayStatusLine,
+			"Docs: https://docs.remoteclaw.org/web/control-ui"
+		].join("\n"), "Control UI");
+		outro$1("Configure complete.");
+	} catch (err) {
+		if (err instanceof WizardCancelledError) {
+			runtime.exit(1);
+			return;
+		}
+		throw err;
+	}
+}
+
+//#endregion
+//#region src/commands/configure.commands.ts
+async function configureCommand(runtime = defaultRuntime) {
+	await runConfigureWizard({ command: "configure" }, runtime);
+}
+async function configureCommandWithSections(sections, runtime = defaultRuntime) {
+	await runConfigureWizard({
+		command: "configure",
+		sections
+	}, runtime);
+}
+async function configureCommandFromSectionsArg(rawSections, runtime = defaultRuntime) {
+	const { sections, invalid } = parseConfigureWizardSections(rawSections);
+	if (sections.length === 0) {
+		await configureCommand(runtime);
+		return;
+	}
+	if (invalid.length > 0) {
+		runtime.error(`Invalid --section: ${invalid.join(", ")}. Expected one of: ${CONFIGURE_WIZARD_SECTIONS.join(", ")}.`);
+		runtime.exit(1);
+		return;
+	}
+	await configureCommandWithSections(sections, runtime);
+}
+
+//#endregion
+//#region src/commands/configure.ts
+var configure_exports = /* @__PURE__ */ __exportAll({ configureCommandFromSectionsArg: () => configureCommandFromSectionsArg });
+
+//#endregion
+export { configureCommandFromSectionsArg as n, CONFIGURE_WIZARD_SECTIONS as r, configure_exports as t };