@agent-team-foundation/first-tree-hub 0.7.0 → 0.7.2

package/dist/cli/index.mjs

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { C as setConfigValue, S as serverConfigSchema, _ as loadAgents, b as resetConfigMeta, c as saveCredentials, f as agentConfigSchema, g as initConfig, h as getConfigValue, l as DEFAULT_CONFIG_DIR, n as ensureFreshAccessToken, o as resolveServerUrl, p as clientConfigSchema, r as ensureFreshAdminToken, s as saveAgentConfig, u as DEFAULT_DATA_DIR, v as readConfigFile, y as resetConfig } from "../bootstrap-CRDR6NwE.mjs";
-import { A as SdkError, D as createOwner, E as ClientRuntime, M as cleanWorkspaces, T as stopPostgres, _ as checkServerHealth, a as formatCheckReport, b as printResults, c as onboardCreate, d as checkAgentConfigs, f as checkClientConfig, g as checkServerConfig, h as checkNodeVersion, i as promptMissingFields, j as SessionRegistry, k as FirstTreeHubSDK, l as saveOnboardState, m as checkDocker, n as isInteractive, o as loadOnboardState, p as checkDatabase, r as promptAddAgent, s as onboardCheck, t as startServer, u as runMigrations, v as checkServerReachable, y as checkWebSocket } from "../core-4nvleGlC.mjs";
+import { A as stopPostgres, C as checkServerReachable, F as SdkError, I as SessionRegistry, L as cleanWorkspaces, M as createOwner, P as FirstTreeHubSDK, S as checkServerHealth, T as printResults, _ as checkClientConfig, a as uninstallClientService, b as checkNodeVersion, c as promptAddAgent, d as loadOnboardState, f as onboardCheck, g as checkAgentConfigs, h as runMigrations, j as ClientRuntime, l as promptMissingFields, m as saveOnboardState, n as installClientService, o as startServer, p as onboardCreate, r as isServiceSupported, s as isInteractive, t as getClientServiceStatus, u as formatCheckReport, v as checkDatabase, w as checkWebSocket, x as checkServerConfig, y as checkDocker } from "../core-6-paFwyo.mjs";
 import { n as bindFeishuUser, t as bindFeishuBot } from "../feishu-CJ08ntOD.mjs";
 import { createRequire } from "node:module";
 import { Command } from "commander";
@@ -798,7 +798,7 @@ async function authenticateInteractive(url) {
 	return await loginRes.json();
 }
 function registerConnectCommand(parent) {
-	parent.command("connect <server-url>").description("Connect to a Hub server — configure, authenticate, and start client").option("--token <token>", "Connect token (from Hub web console) — skips interactive login").action(async (serverUrl, options) => {
+	parent.command("connect <server-url>").description("Connect to a Hub server — configure, authenticate, and install the background service").option("--token <token>", "Connect token (from Hub web console) — skips interactive login").option("--no-service", "Skip background service install (runs inline until Ctrl+C)").action(async (serverUrl, options) => {
 		try {
 			const url = serverUrl.replace(/\/+$/, "");
 			setConfigValue(join(DEFAULT_CONFIG_DIR, "client.yaml"), "server.url", url);
@@ -814,12 +814,23 @@ function registerConnectCommand(parent) {
 				schema: clientConfigSchema,
 				role: "client"
 			});
+			process.stderr.write(`  \u2713 Connected as this computer (id: ${config.client.id})\n`);
+			if (options.service !== false && isServiceSupported()) {
+				const info = installClientService();
+				process.stderr.write(`  \u2713 Installed as a background service (${info.platform}) — you can close this terminal\n\n`);
+				process.stderr.write(`    Unit:  ${info.unitPath}\n`);
+				process.stderr.write(`    Logs:  ${info.logDir}\n`);
+				if (info.state === "active" && info.detail) process.stderr.write(`    State: running (${info.detail})\n`);
+				process.stderr.write("\n");
+				return;
+			}
+			if (options.service === false) process.stderr.write("  (--no-service) running inline — Ctrl+C to stop\n");
+			else process.stderr.write(`  Background service not supported on ${process.platform}; running inline.\n`);
 			const agentsDir = join(DEFAULT_CONFIG_DIR, "agents");
 			const agents = loadAgents({
 				schema: agentConfigSchema,
 				agentsDir
 			});
-			process.stderr.write(`\n  Starting client (id: ${config.client.id})...\n`);
 			const runtime = new ClientRuntime(config.server.url, config.client.id);
 			for (const [name, agentConfig] of agents) runtime.addAgent(name, agentConfig);
 			await runtime.start();
@@ -923,6 +934,48 @@ function registerClientCommands(program) {
 			process.stderr.write("  No agents directory found.\n");
 		}
 	});
+	const service = client.command("service").description("Install/uninstall the background service that keeps this computer online");
+	service.command("install").description("Install as a background service — auto-starts on login/boot").action(() => {
+		if (!isServiceSupported()) {
+			process.stderr.write(`  Background service is not supported on ${process.platform}.\n  Run \`first-tree-hub client start\` manually to keep the computer online.
+`);
+			process.exit(1);
+		}
+		try {
+			const info = installClientService();
+			process.stderr.write(`\n  \u2713 Installed as a background service (${info.platform}).\n`);
+			process.stderr.write(`    Unit:  ${info.unitPath}\n`);
+			process.stderr.write(`    Logs:  ${info.logDir}\n`);
+			if (info.state === "active") process.stderr.write(`    State: running${info.detail ? ` (${info.detail})` : ""}\n`);
+			else process.stderr.write(`    State: ${info.state}${info.detail ? ` (${info.detail})` : ""}\n`);
+			process.stderr.write("\n  You can close this terminal — the computer stays online.\n");
+		} catch (error) {
+			fail("SERVICE_INSTALL_ERROR", error instanceof Error ? error.message : String(error));
+		}
+	});
+	service.command("status").description("Show background service state").action(() => {
+		const info = getClientServiceStatus();
+		if (info.platform === "unsupported") {
+			process.stderr.write(`  Not supported on ${process.platform}.\n`);
+			return;
+		}
+		process.stderr.write(`\n  ${info.platform}: ${info.label}\n`);
+		process.stderr.write(`  Unit:  ${info.unitPath}\n`);
+		process.stderr.write(`  Logs:  ${info.logDir}\n`);
+		process.stderr.write(`  State: ${info.state}${info.detail ? ` (${info.detail})` : ""}\n\n`);
+	});
+	service.command("uninstall").description("Stop and remove the background service").action(() => {
+		if (!isServiceSupported()) {
+			process.stderr.write(`  Not supported on ${process.platform}.\n`);
+			return;
+		}
+		try {
+			const info = uninstallClientService();
+			process.stderr.write(`\n  \u2713 Uninstalled background service (${info.platform}).\n\n`);
+		} catch (error) {
+			fail("SERVICE_UNINSTALL_ERROR", error instanceof Error ? error.message : String(error));
+		}
+	});
 	client.command("hub-list").description("List clients on the Hub server").option("--server <url>", "Hub server URL").action(async (options) => {
 		try {
 			const serverUrl = resolveServerUrl(options.server);

package/dist/{core-4nvleGlC.mjs → core-6-paFwyo.mjs}

@@ -1,11 +1,11 @@
 import { C as setConfigValue, S as serverConfigSchema, _ as loadAgents, d as DEFAULT_HOME_DIR$1, f as agentConfigSchema, g as initConfig, i as loadCredentials, l as DEFAULT_CONFIG_DIR, m as collectMissingPrompts, n as ensureFreshAccessToken, o as resolveServerUrl, p as clientConfigSchema, s as saveAgentConfig, u as DEFAULT_DATA_DIR$1, x as resolveConfigReadonly } from "./bootstrap-CRDR6NwE.mjs";
 import { $ as updateAgentSchema, A as createOrganizationSchema, B as paginationQuerySchema, C as clientRegisterSchema, D as createAgentSchema, E as createAdapterMappingSchema, F as isRedactedEnvValue, G as sendToAgentSchema, H as runtimeStateMessageSchema, I as linkTaskChatSchema, J as sessionEventSchema$1, K as sessionCompletionMessageSchema, L as loginSchema, M as delegateFeishuUserSchema, N as dryRunAgentRuntimeConfigSchema, O as createChatSchema, P as inboxPollQuerySchema, Q as updateAgentRuntimeConfigSchema, R as messageSourceSchema$1, S as agentTypeSchema$1, T as createAdapterConfigSchema, U as selfServiceFeishuBotSchema, V as refreshTokenSchema, W as sendMessageSchema, X as taskListQuerySchema, Y as sessionStateMessageSchema, Z as updateAdapterConfigSchema, _ as addParticipantSchema, a as AGENT_SELECTOR_HEADER$1, b as agentBindRequestSchema, c as AGENT_TYPES, d as SYSTEM_CONFIG_DEFAULTS, et as updateMemberSchema, f as TASK_CREATOR_TYPES, g as WS_AUTH_FRAME_TIMEOUT_MS, h as TASK_TERMINAL_STATUSES, i as AGENT_BIND_REJECT_REASONS, it as wsAuthFrameSchema, j as createTaskSchema, k as createMemberSchema, l as AGENT_VISIBILITY, m as TASK_STATUSES, nt as updateSystemConfigSchema, o as AGENT_SOURCES, p as TASK_HEALTH_SIGNALS, q as sessionEventMessageSchema, rt as updateTaskStatusSchema, s as AGENT_STATUSES, tt as updateOrganizationSchema, u as DEFAULT_AGENT_RUNTIME_CONFIG_PAYLOAD, v as adminCreateTaskSchema, w as connectTokenExchangeSchema, x as agentRuntimeConfigPayloadSchema$1, y as adminUpdateTaskSchema, z as notificationQuerySchema } from "./feishu-CJ08ntOD.mjs";
-import { copyFileSync, existsSync, mkdirSync, readFileSync, readdirSync, renameSync, rmSync, statSync, watch, writeFileSync } from "node:fs";
-import { dirname, join, resolve } from "node:path";
+import { copyFileSync, existsSync, mkdirSync, readFileSync, readdirSync, realpathSync, renameSync, rmSync, statSync, watch, writeFileSync } from "node:fs";
+import { dirname, isAbsolute, join, resolve } from "node:path";
 import { ZodError, z } from "zod";
 import "yaml";
 import { createCipheriv, createDecipheriv, createHash, createHmac, randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
-import { homedir, hostname, platform } from "node:os";
+import { homedir, hostname, platform, userInfo } from "node:os";
 import { EventEmitter } from "node:events";
 import WebSocket from "ws";
 import { query } from "@anthropic-ai/claude-agent-sdk";
@@ -1106,7 +1106,6 @@ var ClientConnection = class extends EventEmitter {
 			return;
 		}
 		if (type === "auth:rejected" || type === "auth:expired") {
-			this.registered = false;
 			if (type === "auth:expired") this.emit("auth:expired");
 			this.ws?.close(4401, type);
 			return;
@@ -1494,6 +1493,451 @@ echo "long message body" | first-tree-hub agent send <agentId>
 For content with quotes, \`$\`, backticks, or newlines, prefer stdin to avoid shell escaping issues.
 `;
 }
+const DEFAULT_CLONE_TIMEOUT_MS = 300 * 1e3;
+const FETCH_REFSPEC = "+refs/heads/*:refs/remotes/origin/*";
+const SESSION_BRANCH_PREFIX = "hub-session";
+function hashUrl(url) {
+	return createHash("sha256").update(url).digest("hex").slice(0, 32);
+}
+function shortHash(input) {
+	return createHash("sha256").update(input).digest("hex").slice(0, 8);
+}
+function deriveSessionBranchName(sessionKey, url) {
+	return `${SESSION_BRANCH_PREFIX}-${shortHash(sessionKey)}-${shortHash(url)}`;
+}
+/**
+* A value is SHA-like when it's a 7–40 character hex string. Used to decide
+* whether `ref` should be resolved via the remote namespace (branch name) or
+* used as-is (commit hash).
+*/
+function looksLikeCommitSha(ref) {
+	return /^[0-9a-f]{7,40}$/i.test(ref);
+}
+function createGitMirrorManager(opts) {
+	const mirrorsRoot = join(opts.dataDir, "git-mirrors");
+	const cloneTimeoutMs = opts.cloneTimeoutMs ?? Number(process.env.FIRST_TREE_HUB_GIT_CLONE_TIMEOUT_MS ?? DEFAULT_CLONE_TIMEOUT_MS);
+	const log = opts.log ?? (() => {});
+	const urlLocks = /* @__PURE__ */ new Map();
+	function withUrlLock(url, op) {
+		const key = hashUrl(url);
+		const next = (urlLocks.get(key) ?? Promise.resolve()).then(op, op);
+		urlLocks.set(key, next);
+		next.then(() => {
+			if (urlLocks.get(key) === next) urlLocks.delete(key);
+		}, () => {
+			if (urlLocks.get(key) === next) urlLocks.delete(key);
+		});
+		return next;
+	}
+	function mirrorDir(url) {
+		return join(mirrorsRoot, hashUrl(url));
+	}
+	async function git(args, cwd, timeoutMs, env) {
+		const start = Date.now();
+		return await new Promise((resolveExec, rejectExec) => {
+			const proc = spawn("git", args, {
+				cwd: cwd ?? void 0,
+				env: env ?? process.env,
+				stdio: [
+					"ignore",
+					"pipe",
+					"pipe"
+				]
+			});
+			let stdout = "";
+			let stderr = "";
+			proc.stdout.on("data", (d) => {
+				stdout += String(d);
+			});
+			proc.stderr.on("data", (d) => {
+				stderr += String(d);
+			});
+			const timer = setTimeout(() => {
+				proc.kill("SIGKILL");
+				rejectExec(new GitMirrorTimeoutError(`git ${args.join(" ")} timed out after ${timeoutMs}ms`));
+			}, timeoutMs);
+			proc.on("error", (err) => {
+				clearTimeout(timer);
+				rejectExec(err);
+			});
+			proc.on("close", (code) => {
+				clearTimeout(timer);
+				const elapsedMs = Date.now() - start;
+				if (code === 0) resolveExec({
+					stdout,
+					stderr,
+					elapsedMs
+				});
+				else rejectExec(new GitMirrorError(`git ${args.join(" ")} exited with code ${code}: ${stderr.slice(0, 1024)}`));
+			});
+		});
+	}
+	async function gitOk(args, cwd, timeoutMs) {
+		try {
+			await git(args, cwd, timeoutMs);
+			return true;
+		} catch {
+			return false;
+		}
+	}
+	/**
+	* Bring the mirror's config to the invariant expected by this module:
+	* fetch refspec = `+refs/heads/*:refs/remotes/origin/*`, `remote.origin.mirror`
+	* absent, `refs/remotes/origin/HEAD` resolvable.
+	*
+	* Called from `ensureMirror` on every invocation — both the fresh-clone path
+	* (ensures our own bootstrap wrote the right values) and the pre-existing
+	* mirror path (repairs drift from the legacy `--mirror` config).
+	*/
+	async function assertMirrorConfig(mirrorPath, url) {
+		let migrated = false;
+		let currentFetch = "";
+		try {
+			const { stdout } = await git([
+				"config",
+				"--get-all",
+				"remote.origin.fetch"
+			], mirrorPath, 1e4);
+			currentFetch = stdout.trim();
+		} catch {
+			currentFetch = "";
+		}
+		if (currentFetch !== FETCH_REFSPEC) {
+			await git([
+				"config",
+				"--replace-all",
+				"remote.origin.fetch",
+				FETCH_REFSPEC
+			], mirrorPath, 1e4);
+			migrated = true;
+		}
+		if (await gitOk([
+			"config",
+			"--get",
+			"remote.origin.mirror"
+		], mirrorPath, 1e4)) {
+			await git([
+				"config",
+				"--unset-all",
+				"remote.origin.mirror"
+			], mirrorPath, 1e4);
+			migrated = true;
+		}
+		try {
+			const { stdout } = await git([
+				"config",
+				"--get",
+				"remote.origin.url"
+			], mirrorPath, 1e4);
+			if (stdout.trim() !== url) {
+				await git([
+					"config",
+					"--replace-all",
+					"remote.origin.url",
+					url
+				], mirrorPath, 1e4);
+				migrated = true;
+			}
+		} catch {
+			await git([
+				"remote",
+				"add",
+				"origin",
+				url
+			], mirrorPath, 1e4);
+			migrated = true;
+		}
+		if (migrated) {
+			await git([
+				"fetch",
+				"--prune",
+				"origin"
+			], mirrorPath, cloneTimeoutMs);
+			await gitOk([
+				"remote",
+				"set-head",
+				"origin",
+				"--auto"
+			], mirrorPath, 3e4);
+			log("mirrorConfigMigrated", { gitUrl: url });
+		}
+		return { migrated };
+	}
+	/**
+	* Bootstrap a fresh mirror at `mirrorPath`. Uses `git init --bare` +
+	* manual remote setup rather than `git clone --mirror` / `git clone --bare`,
+	* so we never transiently have the mirror configured to force-write
+	* `refs/heads/*` on fetch.
+	*/
+	async function bootstrapMirror(mirrorPath, url) {
+		mkdirSync(dirname(mirrorPath), { recursive: true });
+		await git([
+			"init",
+			"--bare",
+			mirrorPath
+		], null, cloneTimeoutMs);
+		await git([
+			"remote",
+			"add",
+			"origin",
+			url
+		], mirrorPath, 1e4);
+		await git([
+			"config",
+			"--replace-all",
+			"remote.origin.fetch",
+			FETCH_REFSPEC
+		], mirrorPath, 1e4);
+		await git([
+			"fetch",
+			"--prune",
+			"origin"
+		], mirrorPath, cloneTimeoutMs);
+		await gitOk([
+			"remote",
+			"set-head",
+			"origin",
+			"--auto"
+		], mirrorPath, 3e4);
+	}
+	async function branchExists(mirrorPath, branchName) {
+		return await gitOk([
+			"rev-parse",
+			"--verify",
+			"--quiet",
+			`refs/heads/${branchName}`
+		], mirrorPath, 1e4);
+	}
+	/**
+	* Resolve the commit-ish to base a new session branch on.
+	*
+	* - explicit SHA → use as-is
+	* - explicit branch name → prefer `refs/remotes/origin/<ref>`, fall back to
+	*   a literal SHA resolution in case the caller handed us a short commit
+	* - `ref` absent → `refs/remotes/origin/HEAD`
+	*/
+	async function resolveBase(mirrorPath, ref) {
+		if (!ref) {
+			if (await gitOk([
+				"rev-parse",
+				"--verify",
+				"--quiet",
+				"refs/remotes/origin/HEAD"
+			], mirrorPath, 1e4)) return "refs/remotes/origin/HEAD";
+			throw new GitMirrorError("Cannot resolve default branch: refs/remotes/origin/HEAD is missing. Re-run with an explicit `ref`.");
+		}
+		if (looksLikeCommitSha(ref)) {
+			if (await gitOk([
+				"cat-file",
+				"-e",
+				ref
+			], mirrorPath, 1e4)) return ref;
+		}
+		const remoteRef = `refs/remotes/origin/${ref}`;
+		if (await gitOk([
+			"rev-parse",
+			"--verify",
+			"--quiet",
+			remoteRef
+		], mirrorPath, 1e4)) return remoteRef;
+		return ref;
+	}
+	return {
+		get mirrorsRoot() {
+			return mirrorsRoot;
+		},
+		ensureMirror(url) {
+			return withUrlLock(url, async () => {
+				mkdirSync(mirrorsRoot, { recursive: true });
+				const path = mirrorDir(url);
+				if (existsSync(join(path, "HEAD"))) {
+					const { migrated } = await assertMirrorConfig(path, url);
+					if (migrated) {}
+					return {
+						mirrorPath: path,
+						elapsedMs: 0,
+						cloned: false
+					};
+				}
+				const start = Date.now();
+				try {
+					await bootstrapMirror(path, url);
+					const elapsedMs = Date.now() - start;
+					log("ensureMirror", {
+						gitUrl: url,
+						elapsedMs,
+						cloned: true
+					});
+					return {
+						mirrorPath: path,
+						elapsedMs,
+						cloned: true
+					};
+				} catch (err) {
+					if (err instanceof GitMirrorTimeoutError) log("mirrorCloneTimeout", {
+						gitUrl: url,
+						timeoutMs: cloneTimeoutMs,
+						elapsedMs: cloneTimeoutMs
+					});
+					if (existsSync(path)) rmSync(path, {
+						recursive: true,
+						force: true
+					});
+					throw err;
+				}
+			});
+		},
+		fetchMirror(url) {
+			return withUrlLock(url, async () => {
+				const path = mirrorDir(url);
+				if (!existsSync(join(path, "HEAD"))) throw new GitMirrorError(`Cannot fetch — no mirror exists for "${url}"`);
+				try {
+					const { elapsedMs } = await git([
+						"fetch",
+						"--prune",
+						"origin"
+					], path, cloneTimeoutMs);
+					return { elapsedMs };
+				} catch (err) {
+					log("mirrorFetchFailed", {
+						gitUrl: url,
+						errorCode: err instanceof GitMirrorError ? "git-failed" : "unknown",
+						stderr: err instanceof Error ? err.message.slice(0, 1024) : String(err).slice(0, 1024)
+					});
+					throw err;
+				}
+			});
+		},
+		createWorktree({ url, ref, targetPath, sessionKey }) {
+			return withUrlLock(url, async () => {
+				const mirror = mirrorDir(url);
+				if (!existsSync(join(mirror, "HEAD"))) throw new GitMirrorError(`Cannot create worktree — no mirror exists for "${url}"`);
+				const absTarget = resolve(targetPath);
+				const branchName = deriveSessionBranchName(sessionKey, url);
+				if (existsSync(absTarget) && !isHubManagedWorktree(absTarget)) {
+					log("worktreeCreateConflict", {
+						gitUrl: url,
+						targetPath: absTarget,
+						occupantKind: classifyOccupant(absTarget)
+					});
+					throw new GitMirrorWorktreeConflictError(`Worktree target "${absTarget}" is already occupied by ${classifyOccupant(absTarget)} — aborting (D13)`);
+				}
+				const pathExists = existsSync(absTarget);
+				const hasBranch = await branchExists(mirror, branchName);
+				mkdirSync(dirname(absTarget), { recursive: true });
+				if (pathExists && hasBranch) {} else if (pathExists && !hasBranch) throw new GitMirrorError(`Worktree directory "${absTarget}" exists as a Hub worktree but the expected session branch "${branchName}" is missing in the mirror — manual cleanup required`);
+				else if (!pathExists && hasBranch) await git([
+					"worktree",
+					"add",
+					absTarget,
+					branchName
+				], mirror, cloneTimeoutMs);
+				else await git([
+					"worktree",
+					"add",
+					"-b",
+					branchName,
+					absTarget,
+					await resolveBase(mirror, ref)
+				], mirror, cloneTimeoutMs);
+				return {
+					worktreePath: absTarget,
+					headCommit: (await git(["rev-parse", "HEAD"], absTarget, 3e4)).stdout.trim(),
+					branchName
+				};
+			});
+		},
+		removeWorktree({ url, path, branchName }) {
+			return withUrlLock(url, async () => {
+				const absTarget = resolve(path);
+				const mirror = mirrorDir(url);
+				if (!isBareRepo(mirror)) {
+					if (existsSync(absTarget)) rmSync(absTarget, {
+						recursive: true,
+						force: true
+					});
+					return;
+				}
+				if (existsSync(absTarget)) await gitOk([
+					"worktree",
+					"remove",
+					"--force",
+					absTarget
+				], mirror, 3e4);
+				else await gitOk(["worktree", "prune"], mirror, 3e4);
+				if (existsSync(absTarget)) rmSync(absTarget, {
+					recursive: true,
+					force: true
+				});
+				if (await branchExists(mirror, branchName)) await gitOk([
+					"branch",
+					"-D",
+					branchName
+				], mirror, 1e4);
+			});
+		},
+		async gcMirrors(stillReferencedUrls) {
+			if (!existsSync(mirrorsRoot)) return { removed: [] };
+			const wantedHashes = new Set([...stillReferencedUrls].map(hashUrl));
+			const removed = [];
+			for (const entry of readdirSync(mirrorsRoot)) {
+				if (wantedHashes.has(entry)) continue;
+				const path = join(mirrorsRoot, entry);
+				if (!isBareRepo(path)) continue;
+				rmSync(path, {
+					recursive: true,
+					force: true
+				});
+				removed.push(entry);
+			}
+			return { removed };
+		}
+	};
+}
+function isBareRepo(p) {
+	return existsSync(join(p, "HEAD")) && existsSync(join(p, "objects"));
+}
+function isHubManagedWorktree(p) {
+	const gitMarker = join(p, ".git");
+	if (!existsSync(gitMarker)) return false;
+	try {
+		return statSync(gitMarker).isFile();
+	} catch {
+		return false;
+	}
+}
+function classifyOccupant(p) {
+	try {
+		const stat = statSync(p);
+		if (stat.isSymbolicLink()) return "symlink";
+		if (stat.isDirectory()) {
+			if (existsSync(join(p, ".git"))) return "git-repo";
+			return "directory";
+		}
+		if (stat.isFile()) return "file";
+		return "other";
+	} catch {
+		return "unknown";
+	}
+}
+var GitMirrorError = class extends Error {
+	constructor(message) {
+		super(message);
+		this.name = "GitMirrorError";
+	}
+};
+var GitMirrorTimeoutError = class extends GitMirrorError {
+	constructor(message) {
+		super(message);
+		this.name = "GitMirrorTimeoutError";
+	}
+};
+var GitMirrorWorktreeConflictError = class extends GitMirrorError {
+	constructor(message) {
+		super(message);
+		this.name = "GitMirrorWorktreeConflictError";
+	}
+};
 /**
 * InputController — push-based async iterable bridge.
 *
@@ -1742,7 +2186,7 @@ const createClaudeCodeHandler = (config) => {
 	let appliedConfigVersion = 0;
 	let appliedModel = "";
 	let appliedPayload = null;
-	/** Worktree paths materialised for this session — removed on shutdown. */
+	/** Worktrees materialised for this session — each entry removed on shutdown. */
 	const ownedWorktrees = [];
 	function toSDKUserMessage(message, sessionId) {
 		const rawContent = typeof message.content === "string" ? message.content : JSON.stringify(message.content);
@@ -1966,28 +2410,37 @@ const createClaudeCodeHandler = (config) => {
 			await gitMirrorManager.fetchMirror(repo.url);
 			if (existsSync(targetPath) && isHubWorktreeMarker(targetPath)) {
 				sessionCtx.log(`Git: reusing existing worktree at ${localPath}`);
-				ownedWorktrees.push(targetPath);
+				ownedWorktrees.push({
+					url: repo.url,
+					path: targetPath,
+					branchName: deriveSessionBranchName(sessionCtx.chatId, repo.url)
+				});
 				continue;
 			}
-			const { headCommit } = await gitMirrorManager.createWorktree({
+			const { headCommit, branchName } = await gitMirrorManager.createWorktree({
 				url: repo.url,
 				ref: repo.ref,
-				targetPath
+				targetPath,
+				sessionKey: sessionCtx.chatId
 			});
-			ownedWorktrees.push(targetPath);
-			sessionCtx.log(`Git: worktree at ${localPath} @ ${headCommit.slice(0, 7)}`);
+			ownedWorktrees.push({
+				url: repo.url,
+				path: targetPath,
+				branchName
+			});
+			sessionCtx.log(`Git: worktree at ${localPath} @ ${headCommit.slice(0, 7)} on ${branchName}`);
 		}
 	}
 	/** Tear down all worktrees this session owns; best-effort. */
 	async function cleanupGitWorktrees(sessionCtx) {
 		if (!gitMirrorManager) return;
 		while (ownedWorktrees.length > 0) {
-			const path = ownedWorktrees.pop();
-			if (!path) continue;
+			const entry = ownedWorktrees.pop();
+			if (!entry) continue;
 			try {
-				await gitMirrorManager.removeWorktree(path);
+				await gitMirrorManager.removeWorktree(entry);
 			} catch (err) {
-				sessionCtx.log(`Git: removeWorktree(${path}) failed — ${err instanceof Error ? err.message : String(err)}`);
+				sessionCtx.log(`Git: removeWorktree(${entry.path}) failed — ${err instanceof Error ? err.message : String(err)}`);
 			}
 		}
 	}
@@ -2201,226 +2654,6 @@ function createAgentConfigCache(opts) {
 		}
 	};
 }
-const DEFAULT_CLONE_TIMEOUT_MS = 300 * 1e3;
-function hashUrl(url) {
-	return createHash("sha256").update(url).digest("hex").slice(0, 32);
-}
-function createGitMirrorManager(opts) {
-	const mirrorsRoot = join(opts.dataDir, "git-mirrors");
-	const cloneTimeoutMs = opts.cloneTimeoutMs ?? Number(process.env.FIRST_TREE_HUB_GIT_CLONE_TIMEOUT_MS ?? DEFAULT_CLONE_TIMEOUT_MS);
-	const log = opts.log ?? (() => {});
-	function mirrorDir(url) {
-		return join(mirrorsRoot, hashUrl(url));
-	}
-	async function git(args, cwd, timeoutMs, env) {
-		const start = Date.now();
-		return await new Promise((resolveExec, rejectExec) => {
-			const proc = spawn("git", args, {
-				cwd: cwd ?? void 0,
-				env: env ?? process.env,
-				stdio: [
-					"ignore",
-					"pipe",
-					"pipe"
-				]
-			});
-			let stdout = "";
-			let stderr = "";
-			proc.stdout.on("data", (d) => {
-				stdout += String(d);
-			});
-			proc.stderr.on("data", (d) => {
-				stderr += String(d);
-			});
-			const timer = setTimeout(() => {
-				proc.kill("SIGKILL");
-				rejectExec(new GitMirrorTimeoutError(`git ${args.join(" ")} timed out after ${timeoutMs}ms`));
-			}, timeoutMs);
-			proc.on("error", (err) => {
-				clearTimeout(timer);
-				rejectExec(err);
-			});
-			proc.on("close", (code) => {
-				clearTimeout(timer);
-				const elapsedMs = Date.now() - start;
-				if (code === 0) resolveExec({
-					stdout,
-					stderr,
-					elapsedMs
-				});
-				else rejectExec(new GitMirrorError(`git ${args.join(" ")} exited with code ${code}: ${stderr.slice(0, 1024)}`));
-			});
-		});
-	}
-	return {
-		get mirrorsRoot() {
-			return mirrorsRoot;
-		},
-		async ensureMirror(url) {
-			mkdirSync(mirrorsRoot, { recursive: true });
-			const path = mirrorDir(url);
-			if (existsSync(join(path, "HEAD"))) return {
-				mirrorPath: path,
-				elapsedMs: 0,
-				cloned: false
-			};
-			try {
-				const { elapsedMs } = await git([
-					"clone",
-					"--mirror",
-					url,
-					path
-				], null, cloneTimeoutMs);
-				log("ensureMirror", {
-					gitUrl: url,
-					elapsedMs,
-					cloned: true
-				});
-				return {
-					mirrorPath: path,
-					elapsedMs,
-					cloned: true
-				};
-			} catch (err) {
-				if (err instanceof GitMirrorTimeoutError) log("mirrorCloneTimeout", {
-					gitUrl: url,
-					timeoutMs: cloneTimeoutMs,
-					elapsedMs: cloneTimeoutMs
-				});
-				if (existsSync(path)) rmSync(path, {
-					recursive: true,
-					force: true
-				});
-				throw err;
-			}
-		},
-		async fetchMirror(url) {
-			const path = mirrorDir(url);
-			if (!existsSync(join(path, "HEAD"))) throw new GitMirrorError(`Cannot fetch — no mirror exists for "${url}"`);
-			try {
-				const { elapsedMs } = await git(["fetch", "--prune"], path, cloneTimeoutMs);
-				return { elapsedMs };
-			} catch (err) {
-				log("mirrorFetchFailed", {
-					gitUrl: url,
-					errorCode: err instanceof GitMirrorError ? "git-failed" : "unknown",
-					stderr: err instanceof Error ? err.message.slice(0, 1024) : String(err).slice(0, 1024)
-				});
-				throw err;
-			}
-		},
-		async createWorktree({ url, ref, targetPath }) {
-			const mirror = mirrorDir(url);
-			if (!existsSync(join(mirror, "HEAD"))) throw new GitMirrorError(`Cannot create worktree — no mirror exists for "${url}"`);
-			const absTarget = resolve(targetPath);
-			if (existsSync(absTarget) && !isHubManagedWorktree(absTarget)) {
-				log("worktreeCreateConflict", {
-					gitUrl: url,
-					targetPath: absTarget,
-					occupantKind: classifyOccupant(absTarget)
-				});
-				throw new GitMirrorWorktreeConflictError(`Worktree target "${absTarget}" is already occupied by ${classifyOccupant(absTarget)} — aborting (D13)`);
-			}
-			mkdirSync(dirname(absTarget), { recursive: true });
-			const args = [
-				"worktree",
-				"add",
-				"--detach",
-				absTarget
-			];
-			if (ref) args.push(ref);
-			await git(args, mirror, cloneTimeoutMs);
-			return {
-				worktreePath: absTarget,
-				headCommit: (await git(["rev-parse", "HEAD"], absTarget, 3e4)).stdout.trim()
-			};
-		},
-		async removeWorktree(path) {
-			const absTarget = resolve(path);
-			if (!existsSync(absTarget)) return;
-			if (!existsSync(mirrorsRoot)) return;
-			let removed = false;
-			for (const entry of readdirSync(mirrorsRoot)) {
-				const mirror = join(mirrorsRoot, entry);
-				if (!isBareRepo(mirror)) continue;
-				try {
-					await git([
-						"worktree",
-						"remove",
-						"--force",
-						absTarget
-					], mirror, 3e4);
-					removed = true;
-					break;
-				} catch {}
-			}
-			if (!removed && existsSync(absTarget)) rmSync(absTarget, {
-				recursive: true,
-				force: true
-			});
-		},
-		async gcMirrors(stillReferencedUrls) {
-			if (!existsSync(mirrorsRoot)) return { removed: [] };
-			const wantedHashes = new Set([...stillReferencedUrls].map(hashUrl));
-			const removed = [];
-			for (const entry of readdirSync(mirrorsRoot)) {
-				if (wantedHashes.has(entry)) continue;
-				const path = join(mirrorsRoot, entry);
-				if (!isBareRepo(path)) continue;
-				rmSync(path, {
-					recursive: true,
-					force: true
-				});
-				removed.push(entry);
-			}
-			return { removed };
-		}
-	};
-}
-function isBareRepo(p) {
-	return existsSync(join(p, "HEAD")) && existsSync(join(p, "objects"));
-}
-function isHubManagedWorktree(p) {
-	const gitMarker = join(p, ".git");
-	if (!existsSync(gitMarker)) return false;
-	try {
-		return statSync(gitMarker).isFile();
-	} catch {
-		return false;
-	}
-}
-function classifyOccupant(p) {
-	try {
-		const stat = statSync(p);
-		if (stat.isSymbolicLink()) return "symlink";
-		if (stat.isDirectory()) {
-			if (existsSync(join(p, ".git"))) return "git-repo";
-			return "directory";
-		}
-		if (stat.isFile()) return "file";
-		return "other";
-	} catch {
-		return "unknown";
-	}
-}
-var GitMirrorError = class extends Error {
-	constructor(message) {
-		super(message);
-		this.name = "GitMirrorError";
-	}
-};
-var GitMirrorTimeoutError = class extends GitMirrorError {
-	constructor(message) {
-		super(message);
-		this.name = "GitMirrorTimeoutError";
-	}
-};
-var GitMirrorWorktreeConflictError = class extends GitMirrorError {
-	constructor(message) {
-		super(message);
-		this.name = "GitMirrorWorktreeConflictError";
-	}
-};
 /**
 * Deduplicator — bounded set of recently seen IDs.
 *
@@ -4114,7 +4347,7 @@ function setNestedByDot(obj, dotPath, value) {
 	if (lastKey !== void 0) current[lastKey] = value;
 }
 //#endregion
-//#region ../server/dist/app-nJ9jSQtv.mjs
+//#region ../server/dist/app-CWKBBGod.mjs
 var __defProp = Object.defineProperty;
 var __exportAll = (all, no_symbols) => {
 	let target = {};
@@ -4649,8 +4882,17 @@ function parseId$1(raw) {
 	return id;
 }
 async function adminAdapterMappingRoutes(app) {
-	app.get("/", async () => {
-		return (await app.db.select().from(adapterAgentMappings).orderBy(desc(adapterAgentMappings.createdAt))).map((r) => ({
+	app.get("/", async (request) => {
+		const scope = memberScope(request);
+		return (await app.db.select({
+			id: adapterAgentMappings.id,
+			platform: adapterAgentMappings.platform,
+			externalUserId: adapterAgentMappings.externalUserId,
+			agentId: adapterAgentMappings.agentId,
+			boundVia: adapterAgentMappings.boundVia,
+			displayName: adapterAgentMappings.displayName,
+			createdAt: adapterAgentMappings.createdAt
+		}).from(adapterAgentMappings).innerJoin(agents, eq(agents.uuid, adapterAgentMappings.agentId)).where(eq(agents.organizationId, scope.organizationId)).orderBy(desc(adapterAgentMappings.createdAt))).map((r) => ({
 			id: r.id,
 			platform: r.platform,
 			externalUserId: r.externalUserId,
@@ -5077,8 +5319,23 @@ async function createAgent(db, data) {
 	const name = data.name ?? null;
 	if (name?.startsWith(RESERVED_AGENT_NAME_PREFIX)) throw new BadRequestError(`Agent name "${name}" is reserved — names starting with "${RESERVED_AGENT_NAME_PREFIX}" are Hub-internal`);
 	const inboxId = `inbox_${uuid}`;
-	const orgId = data.organizationId ?? await resolveDefaultOrgId(db);
-	const managerId = data.managerId ?? await resolveFallbackManagerId(db, orgId);
+	let orgId;
+	let managerId;
+	if (data.managerId && data.organizationId) {
+		orgId = data.organizationId;
+		managerId = data.managerId;
+	} else if (data.managerId) {
+		const [manager] = await db.select({
+			id: members.id,
+			organizationId: members.organizationId
+		}).from(members).where(eq(members.id, data.managerId)).limit(1);
+		if (!manager) throw new BadRequestError(`Manager "${data.managerId}" not found`);
+		orgId = manager.organizationId;
+		managerId = manager.id;
+	} else {
+		orgId = data.organizationId ?? await resolveDefaultOrgId(db);
+		managerId = await resolveFallbackManagerId(db, orgId);
+	}
 	const clientId = await resolveAgentClient(db, {
 		clientId: data.clientId,
 		managerId,
@@ -11044,4 +11301,353 @@ function resolveWebDist() {
 	} catch {}
 }
 //#endregion
-export { SdkError as A, ensurePostgres as C, createOwner as D, ClientRuntime as E, cleanWorkspaces as M, hasUser as O, status as S, stopPostgres as T, checkServerHealth as _, formatCheckReport as a, printResults as b, onboardCreate as c, checkAgentConfigs as d, checkClientConfig as f, checkServerConfig as g, checkNodeVersion as h, promptMissingFields as i, SessionRegistry as j, FirstTreeHubSDK as k, saveOnboardState as l, checkDocker as m, isInteractive as n, loadOnboardState as o, checkDatabase as p, promptAddAgent as r, onboardCheck as s, startServer as t, runMigrations as u, checkServerReachable as v, isDockerAvailable as w, blank as x, checkWebSocket as y };
+//#region src/core/service-install.ts
+const LAUNCHD_LABEL = "dev.first-tree-hub.client";
+const SYSTEMD_UNIT = "first-tree-hub-client.service";
+const LOG_DIR = join(DEFAULT_HOME_DIR$1, "logs");
+function whichBin(name) {
+	try {
+		return execFileSync(process.platform === "win32" ? "where" : "which", [name], {
+			encoding: "utf-8",
+			timeout: 3e3
+		}).split(/\r?\n/).map((s) => s.trim()).filter(Boolean)[0] ?? null;
+	} catch {
+		return null;
+	}
+}
+/**
+* Resolve how the service should launch the CLI.
+*
+* Prefers the installed `first-tree-hub` bin on PATH (usually a shim under
+* /usr/local/bin or ~/.npm-global/bin). Falls back to invoking the current
+* Node interpreter against the running script (handles `pnpm dev`, tsx, and
+* dev-only global installs).
+*/
+function resolveCliInvocation() {
+	const bin = whichBin("first-tree-hub");
+	if (bin && isAbsolute(bin)) try {
+		return {
+			kind: "bin",
+			program: realpathSync(bin)
+		};
+	} catch {
+		return {
+			kind: "bin",
+			program: bin
+		};
+	}
+	const script = process.argv[1];
+	if (!script) throw new Error("Cannot resolve CLI entry point (process.argv[1] is empty).");
+	const scriptAbs = isAbsolute(script) ? script : join(process.cwd(), script);
+	return {
+		kind: "node",
+		program: process.execPath,
+		args: [scriptAbs]
+	};
+}
+function ensureLogDir() {
+	mkdirSync(LOG_DIR, {
+		recursive: true,
+		mode: 448
+	});
+}
+function launchdPlistPath() {
+	return join(homedir(), "Library", "LaunchAgents", `${LAUNCHD_LABEL}.plist`);
+}
+function renderPlist(invocation) {
+	const argsXml = (invocation.kind === "bin" ? [
+		invocation.program,
+		"client",
+		"start",
+		"--no-interactive"
+	] : [
+		invocation.program,
+		...invocation.args,
+		"client",
+		"start",
+		"--no-interactive"
+	]).map((a) => `    <string>${escapeXml(a)}</string>`).join("\n");
+	const outLog = join(LOG_DIR, "client.out.log");
+	const errLog = join(LOG_DIR, "client.err.log");
+	return `<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTD/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+  <key>Label</key>
+  <string>${LAUNCHD_LABEL}</string>
+  <key>ProgramArguments</key>
+  <array>
+${argsXml}
+  </array>
+  <key>EnvironmentVariables</key>
+  <dict>
+    <key>PATH</key>
+    <string>/usr/local/bin:/opt/homebrew/bin:/usr/bin:/bin</string>
+  </dict>
+  <key>RunAtLoad</key>
+  <true/>
+  <key>KeepAlive</key>
+  <dict>
+    <key>SuccessfulExit</key>
+    <false/>
+  </dict>
+  <key>ThrottleInterval</key>
+  <integer>10</integer>
+  <key>StandardOutPath</key>
+  <string>${escapeXml(outLog)}</string>
+  <key>StandardErrorPath</key>
+  <string>${escapeXml(errLog)}</string>
+</dict>
+</plist>
+`;
+}
+function escapeXml(value) {
+	return value.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
+}
+function launchctlDomainTarget() {
+	return `gui/${userInfo().uid}`;
+}
+function launchdState() {
+	if (!existsSync(launchdPlistPath())) return { state: "not-installed" };
+	try {
+		const out = execFileSync("launchctl", ["print", `${launchctlDomainTarget()}/${LAUNCHD_LABEL}`], {
+			encoding: "utf-8",
+			timeout: 5e3
+		});
+		const stateLine = out.split(/\r?\n/).find((l) => l.trim().startsWith("state ="));
+		const pidLine = out.split(/\r?\n/).find((l) => l.trim().startsWith("pid ="));
+		if (stateLine?.includes("running")) {
+			const pid = pidLine?.split("=")[1]?.trim();
+			return {
+				state: "active",
+				detail: pid ? `pid ${pid}` : "running"
+			};
+		}
+		return {
+			state: "inactive",
+			detail: stateLine?.trim() ?? "loaded"
+		};
+	} catch {
+		return {
+			state: "inactive",
+			detail: "plist present but not loaded"
+		};
+	}
+}
+function installLaunchd() {
+	const invocation = resolveCliInvocation();
+	ensureLogDir();
+	const plistPath = launchdPlistPath();
+	mkdirSync(dirname(plistPath), { recursive: true });
+	writeFileSync(plistPath, renderPlist(invocation), { mode: 420 });
+	const target = launchctlDomainTarget();
+	try {
+		execFileSync("launchctl", ["bootout", `${target}/${LAUNCHD_LABEL}`], {
+			stdio: "ignore",
+			timeout: 5e3
+		});
+	} catch {}
+	execFileSync("launchctl", [
+		"bootstrap",
+		target,
+		plistPath
+	], {
+		stdio: "ignore",
+		timeout: 5e3
+	});
+	execFileSync("launchctl", ["enable", `${target}/${LAUNCHD_LABEL}`], {
+		stdio: "ignore",
+		timeout: 5e3
+	});
+	const { state, detail } = launchdState();
+	return {
+		platform: "launchd",
+		label: LAUNCHD_LABEL,
+		unitPath: plistPath,
+		logDir: LOG_DIR,
+		state,
+		detail
+	};
+}
+function uninstallLaunchd() {
+	const plistPath = launchdPlistPath();
+	const target = launchctlDomainTarget();
+	try {
+		execFileSync("launchctl", ["bootout", `${target}/${LAUNCHD_LABEL}`], {
+			stdio: "ignore",
+			timeout: 5e3
+		});
+	} catch {}
+	if (existsSync(plistPath)) rmSync(plistPath);
+	return {
+		platform: "launchd",
+		label: LAUNCHD_LABEL,
+		unitPath: plistPath,
+		logDir: LOG_DIR,
+		state: "not-installed"
+	};
+}
+function systemdUnitPath() {
+	return join(process.env.XDG_CONFIG_HOME ?? join(homedir(), ".config"), "systemd", "user", SYSTEMD_UNIT);
+}
+function renderSystemdUnit(invocation) {
+	return `[Unit]
+Description=First Tree Hub Client
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+Type=simple
+ExecStart=${invocation.kind === "bin" ? `${shellQuote(invocation.program)} client start --no-interactive` : `${shellQuote(invocation.program)} ${invocation.args.map(shellQuote).join(" ")} client start --no-interactive`}
+Restart=always
+RestartSec=10
+StandardOutput=append:${join(LOG_DIR, "client.out.log")}
+StandardError=append:${join(LOG_DIR, "client.err.log")}
+Environment=PATH=/usr/local/bin:/usr/bin:/bin
+
+[Install]
+WantedBy=default.target
+`;
+}
+function shellQuote(value) {
+	if (/^[A-Za-z0-9_\-./:=]+$/.test(value)) return value;
+	return `"${value.replace(/\\/g, "\\\\").replace(/"/g, "\\\"")}"`;
+}
+function systemdState() {
+	if (!existsSync(systemdUnitPath())) return { state: "not-installed" };
+	try {
+		const out = execFileSync("systemctl", [
+			"--user",
+			"is-active",
+			SYSTEMD_UNIT
+		], {
+			encoding: "utf-8",
+			timeout: 5e3
+		}).trim();
+		if (out === "active") return {
+			state: "active",
+			detail: "running"
+		};
+		return {
+			state: "inactive",
+			detail: out
+		};
+	} catch (err) {
+		return {
+			state: "inactive",
+			detail: (typeof err.stdout === "string" ? (err.stdout ?? "").trim() : "") || "unit present but not active"
+		};
+	}
+}
+function installSystemd() {
+	const invocation = resolveCliInvocation();
+	ensureLogDir();
+	const unitPath = systemdUnitPath();
+	mkdirSync(dirname(unitPath), { recursive: true });
+	writeFileSync(unitPath, renderSystemdUnit(invocation), { mode: 420 });
+	execFileSync("systemctl", ["--user", "daemon-reload"], {
+		stdio: "ignore",
+		timeout: 5e3
+	});
+	execFileSync("systemctl", [
+		"--user",
+		"enable",
+		"--now",
+		SYSTEMD_UNIT
+	], {
+		stdio: "ignore",
+		timeout: 1e4
+	});
+	const { state, detail } = systemdState();
+	return {
+		platform: "systemd",
+		label: SYSTEMD_UNIT,
+		unitPath,
+		logDir: LOG_DIR,
+		state,
+		detail
+	};
+}
+function uninstallSystemd() {
+	const unitPath = systemdUnitPath();
+	try {
+		execFileSync("systemctl", [
+			"--user",
+			"disable",
+			"--now",
+			SYSTEMD_UNIT
+		], {
+			stdio: "ignore",
+			timeout: 1e4
+		});
+	} catch {}
+	if (existsSync(unitPath)) rmSync(unitPath);
+	try {
+		execFileSync("systemctl", ["--user", "daemon-reload"], {
+			stdio: "ignore",
+			timeout: 5e3
+		});
+	} catch {}
+	return {
+		platform: "systemd",
+		label: SYSTEMD_UNIT,
+		unitPath,
+		logDir: LOG_DIR,
+		state: "not-installed"
+	};
+}
+/** Is background-service install supported on the current platform? */
+function isServiceSupported() {
+	return process.platform === "darwin" || process.platform === "linux";
+}
+/**
+* Install the background service for the current platform.
+*
+* @throws {Error} if the platform is not supported or the service manager fails.
+*/
+function installClientService() {
+	if (process.platform === "darwin") return installLaunchd();
+	if (process.platform === "linux") return installSystemd();
+	throw new Error(`Background service install is not supported on ${process.platform}. Run \`first-tree-hub client start\` manually to keep the computer online.`);
+}
+/** Report the current service state without modifying anything. */
+function getClientServiceStatus() {
+	if (process.platform === "darwin") {
+		const { state, detail } = launchdState();
+		return {
+			platform: "launchd",
+			label: LAUNCHD_LABEL,
+			unitPath: launchdPlistPath(),
+			logDir: LOG_DIR,
+			state,
+			detail
+		};
+	}
+	if (process.platform === "linux") {
+		const { state, detail } = systemdState();
+		return {
+			platform: "systemd",
+			label: SYSTEMD_UNIT,
+			unitPath: systemdUnitPath(),
+			logDir: LOG_DIR,
+			state,
+			detail
+		};
+	}
+	return {
+		platform: "unsupported",
+		label: "",
+		unitPath: "",
+		logDir: LOG_DIR,
+		state: "not-installed",
+		detail: `platform ${process.platform} not supported`
+	};
+}
+/** Uninstall the background service. No-op if not installed. */
+function uninstallClientService() {
+	if (process.platform === "darwin") return uninstallLaunchd();
+	if (process.platform === "linux") return uninstallSystemd();
+	return getClientServiceStatus();
+}
+//#endregion
+export { stopPostgres as A, checkServerReachable as C, status as D, blank as E, SdkError as F, SessionRegistry as I, cleanWorkspaces as L, createOwner as M, hasUser as N, ensurePostgres as O, FirstTreeHubSDK as P, checkServerHealth as S, printResults as T, checkClientConfig as _, uninstallClientService as a, checkNodeVersion as b, promptAddAgent as c, loadOnboardState as d, onboardCheck as f, checkAgentConfigs as g, runMigrations as h, resolveCliInvocation as i, ClientRuntime as j, isDockerAvailable as k, promptMissingFields as l, saveOnboardState as m, installClientService as n, startServer as o, onboardCreate as p, isServiceSupported as r, isInteractive as s, getClientServiceStatus as t, formatCheckReport as u, checkDatabase as v, checkWebSocket as w, checkServerConfig as x, checkDocker as y };

package/dist/index.mjs

@@ -1,4 +1,4 @@
 import { a as resolveAccessToken, n as ensureFreshAccessToken, o as resolveServerUrl, r as ensureFreshAdminToken } from "./bootstrap-CRDR6NwE.mjs";
-import { A as SdkError, C as ensurePostgres, D as createOwner, E as ClientRuntime, O as hasUser, S as status, T as stopPostgres, _ as checkServerHealth, a as formatCheckReport, b as printResults, c as onboardCreate, d as checkAgentConfigs, f as checkClientConfig, g as checkServerConfig, h as checkNodeVersion, i as promptMissingFields, k as FirstTreeHubSDK, m as checkDocker, n as isInteractive, p as checkDatabase, r as promptAddAgent, s as onboardCheck, t as startServer, u as runMigrations, v as checkServerReachable, w as isDockerAvailable, x as blank, y as checkWebSocket } from "./core-4nvleGlC.mjs";
+import { A as stopPostgres, C as checkServerReachable, D as status, E as blank, F as SdkError, M as createOwner, N as hasUser, O as ensurePostgres, P as FirstTreeHubSDK, S as checkServerHealth, T as printResults, _ as checkClientConfig, a as uninstallClientService, b as checkNodeVersion, c as promptAddAgent, f as onboardCheck, g as checkAgentConfigs, h as runMigrations, i as resolveCliInvocation, j as ClientRuntime, k as isDockerAvailable, l as promptMissingFields, n as installClientService, o as startServer, p as onboardCreate, r as isServiceSupported, s as isInteractive, t as getClientServiceStatus, u as formatCheckReport, v as checkDatabase, w as checkWebSocket, x as checkServerConfig, y as checkDocker } from "./core-6-paFwyo.mjs";
 import { n as bindFeishuUser, t as bindFeishuBot } from "./feishu-CJ08ntOD.mjs";
-export { ClientRuntime, FirstTreeHubSDK, SdkError, bindFeishuBot, bindFeishuUser, blank, checkAgentConfigs, checkClientConfig, checkDatabase, checkDocker, checkNodeVersion, checkServerConfig, checkServerHealth, checkServerReachable, checkWebSocket, createOwner, ensureFreshAccessToken, ensureFreshAdminToken, ensurePostgres, formatCheckReport, hasUser, isDockerAvailable, isInteractive, onboardCheck, onboardCreate, printResults, promptAddAgent, promptMissingFields, resolveAccessToken, resolveServerUrl, runMigrations, startServer, status, stopPostgres };
+export { ClientRuntime, FirstTreeHubSDK, SdkError, bindFeishuBot, bindFeishuUser, blank, checkAgentConfigs, checkClientConfig, checkDatabase, checkDocker, checkNodeVersion, checkServerConfig, checkServerHealth, checkServerReachable, checkWebSocket, createOwner, ensureFreshAccessToken, ensureFreshAdminToken, ensurePostgres, formatCheckReport, getClientServiceStatus, hasUser, installClientService, isDockerAvailable, isInteractive, isServiceSupported, onboardCheck, onboardCreate, printResults, promptAddAgent, promptMissingFields, resolveAccessToken, resolveCliInvocation, resolveServerUrl, runMigrations, startServer, status, stopPostgres, uninstallClientService };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-team-foundation/first-tree-hub",
-  "version": "0.7.0",
+  "version": "0.7.2",
   "type": "module",
   "description": "First Tree Hub — unified CLI for server, client, and agent management",
   "exports": {