@agent-team-foundation/first-tree-hub 0.8.2 → 0.8.4

package/dist/{core-CNR-lUlr.mjs → core-VW2Qfs73.mjs}

@@ -1,7 +1,7 @@
 import { m as __toESM } from "./esm-CYu4tXXn.mjs";
 import { C as setConfigValue, S as serverConfigSchema, _ as loadAgents, d as DEFAULT_HOME_DIR$1, f as agentConfigSchema, g as initConfig, i as loadCredentials, l as DEFAULT_CONFIG_DIR, m as collectMissingPrompts, n as ensureFreshAccessToken, o as resolveServerUrl, p as clientConfigSchema, s as saveAgentConfig, u as DEFAULT_DATA_DIR$1, x as resolveConfigReadonly } from "./bootstrap-99vUYmLs.mjs";
 import { _ as withSpan, a as endWsConnectionSpan, b as require_pino, c as messageAttrs, d as rootLogger$1, g as startWsConnectionSpan, i as currentTraceId, n as applyLoggerConfig, o as getFastifyOtelPlugin, p as setWsConnectionAttrs, r as createLogger, t as adapterAttrs, u as observabilityPlugin, v as withWsMessageSpan, y as FIRST_TREE_HUB_ATTR } from "./observability-CJzDFY_G-CmvgUuzc.mjs";
-import { $ as updateAgentRuntimeConfigSchema, A as createMemberSchema, B as notificationQuerySchema, C as agentTypeSchema$1, D as createAdapterMappingSchema, E as createAdapterConfigSchema, F as inboxPollQuerySchema, G as sendMessageSchema, H as refreshTokenSchema, I as isRedactedEnvValue, J as sessionEventMessageSchema, K as sendToAgentSchema, L as linkTaskChatSchema, M as createTaskSchema, N as delegateFeishuUserSchema, O as createAgentSchema, P as dryRunAgentRuntimeConfigSchema, Q as updateAdapterConfigSchema, R as loginSchema, S as agentRuntimeConfigPayloadSchema$1, T as connectTokenExchangeSchema, U as runtimeStateMessageSchema, V as paginationQuerySchema, W as selfServiceFeishuBotSchema, X as sessionStateMessageSchema, Y as sessionEventSchema$1, Z as taskListQuerySchema, _ as addParticipantSchema, a as AGENT_SELECTOR_HEADER$1, at as wsAuthFrameSchema, b as agentBindRequestSchema, c as AGENT_TYPES, d as SYSTEM_CONFIG_DEFAULTS, et as updateAgentSchema, f as TASK_CREATOR_TYPES, g as WS_AUTH_FRAME_TIMEOUT_MS, h as TASK_TERMINAL_STATUSES, i as AGENT_BIND_REJECT_REASONS, it as updateTaskStatusSchema, j as createOrganizationSchema, k as createChatSchema, l as AGENT_VISIBILITY, m as TASK_STATUSES, nt as updateOrganizationSchema, o as AGENT_SOURCES, p as TASK_HEALTH_SIGNALS, q as sessionCompletionMessageSchema, rt as updateSystemConfigSchema, s as AGENT_STATUSES, tt as updateMemberSchema, u as DEFAULT_AGENT_RUNTIME_CONFIG_PAYLOAD, v as adminCreateTaskSchema, w as clientRegisterSchema, x as agentPinnedMessageSchema$1, y as adminUpdateTaskSchema, z as messageSourceSchema$1 } from "./feishu-BOISS0DK.mjs";
+import { $ as updateAgentRuntimeConfigSchema, A as createMemberSchema, B as notificationQuerySchema, C as agentTypeSchema$1, D as createAdapterMappingSchema, E as createAdapterConfigSchema, F as inboxPollQuerySchema, G as sendMessageSchema, H as refreshTokenSchema, I as isRedactedEnvValue, J as sessionEventMessageSchema, K as sendToAgentSchema, L as linkTaskChatSchema, M as createTaskSchema, N as delegateFeishuUserSchema, O as createAgentSchema, P as dryRunAgentRuntimeConfigSchema, Q as updateAdapterConfigSchema, R as loginSchema, S as agentRuntimeConfigPayloadSchema$1, T as connectTokenExchangeSchema, U as runtimeStateMessageSchema, V as paginationQuerySchema, W as selfServiceFeishuBotSchema, X as sessionStateMessageSchema, Y as sessionEventSchema$1, Z as taskListQuerySchema, _ as addParticipantSchema, a as AGENT_SELECTOR_HEADER$1, at as wsAuthFrameSchema, b as agentBindRequestSchema, c as AGENT_TYPES, d as SYSTEM_CONFIG_DEFAULTS, et as updateAgentSchema, f as TASK_CREATOR_TYPES, g as WS_AUTH_FRAME_TIMEOUT_MS, h as TASK_TERMINAL_STATUSES, i as AGENT_BIND_REJECT_REASONS, it as updateTaskStatusSchema, j as createOrganizationSchema, k as createChatSchema, l as AGENT_VISIBILITY, m as TASK_STATUSES, nt as updateOrganizationSchema, o as AGENT_SOURCES, p as TASK_HEALTH_SIGNALS, q as sessionCompletionMessageSchema, rt as updateSystemConfigSchema, s as AGENT_STATUSES, tt as updateMemberSchema, u as DEFAULT_AGENT_RUNTIME_CONFIG_PAYLOAD, v as adminCreateTaskSchema, w as clientRegisterSchema, x as agentPinnedMessageSchema$1, y as adminUpdateTaskSchema, z as messageSourceSchema$1 } from "./feishu-OezhDY7x.mjs";
 import { copyFileSync, existsSync, mkdirSync, readFileSync, readdirSync, realpathSync, renameSync, rmSync, statSync, watch, writeFileSync } from "node:fs";
 import { dirname, isAbsolute, join, resolve } from "node:path";
 import { ZodError, z } from "zod";
@@ -12,7 +12,7 @@ import { homedir, hostname, platform, userInfo } from "node:os";
 import { EventEmitter } from "node:events";
 import WebSocket from "ws";
 import { query } from "@anthropic-ai/claude-agent-sdk";
-import { execFileSync, execSync, spawn } from "node:child_process";
+import { execFileSync, execSync, spawn, spawnSync } from "node:child_process";
 import bcrypt from "bcrypt";
 import { and, asc, count, desc, eq, gt, inArray, isNotNull, isNull, lt, ne, or, sql } from "drizzle-orm";
 import { drizzle } from "drizzle-orm/postgres-js";
@@ -714,7 +714,13 @@ z.object({
 	organizationId: z.string(),
 	agents: z.record(z.string(), z.array(pulseBucketSchema).length(32))
 });
-const sessionEventKind = z.enum(["tool_call", "error"]);
+const sessionEventKind = z.enum([
+	"tool_call",
+	"error",
+	"assistant_text",
+	"thinking",
+	"turn_end"
+]);
 const toolCallEventPayload = z.object({
 	toolUseId: z.string(),
 	name: z.string(),
@@ -735,20 +741,61 @@ const errorEventPayload = z.object({
 	]),
 	message: z.string().max(2e3)
 });
-const sessionEventSchema = z.discriminatedUnion("kind", [z.object({
-	kind: z.literal("tool_call"),
-	payload: toolCallEventPayload
-}), z.object({
-	kind: z.literal("error"),
-	payload: errorEventPayload
-})]);
+/**
+* A text block emitted by the model within an assistant message. These are
+* transient "in-progress" events used to render the assistant's reply body
+* while a turn is still running. The final turn result is forwarded as a
+* regular chat message (not an event); the frontend hides all assistant_text
+* events for turns that have completed (i.e. once `turn_end` has been emitted).
+*/
+const assistantTextEventPayload = z.object({ text: z.string().max(8e3) });
+/**
+* Marker emitted when the model produces a `thinking` content block.
+* We intentionally do NOT persist the thinking content — only a presence
+* signal so the UI can render a lightweight "Thinking…" status indicator.
+*/
+const thinkingEventPayload = z.object({});
+/**
+* Turn boundary marker. Emitted once per completed query turn, regardless of
+* success/failure, so the frontend can group events into turns and collapse
+* completed turns to show only the final result message.
+*/
+const turnEndEventPayload = z.object({ status: z.enum(["success", "error"]) });
+const sessionEventSchema = z.discriminatedUnion("kind", [
+	z.object({
+		kind: z.literal("tool_call"),
+		payload: toolCallEventPayload
+	}),
+	z.object({
+		kind: z.literal("error"),
+		payload: errorEventPayload
+	}),
+	z.object({
+		kind: z.literal("assistant_text"),
+		payload: assistantTextEventPayload
+	}),
+	z.object({
+		kind: z.literal("thinking"),
+		payload: thinkingEventPayload
+	}),
+	z.object({
+		kind: z.literal("turn_end"),
+		payload: turnEndEventPayload
+	})
+]);
 z.object({
 	id: z.string(),
 	agentId: z.string(),
 	chatId: z.string(),
 	seq: z.number().int().positive(),
 	kind: sessionEventKind,
-	payload: z.union([toolCallEventPayload, errorEventPayload]),
+	payload: z.union([
+		toolCallEventPayload,
+		errorEventPayload,
+		assistantTextEventPayload,
+		thinkingEventPayload,
+		turnEndEventPayload
+	]),
 	createdAt: z.string()
 });
 z.object({
@@ -2272,6 +2319,7 @@ function cleanWorkspaces(workspaceRoot, activeChatIds, ttlMs = DEFAULT_WORKSPACE
 }
 const MAX_RETRIES = 2;
 const TOOL_RESULT_PREVIEW_LIMIT = 400;
+const ASSISTANT_TEXT_EVENT_LIMIT = 8e3;
 function extractContentBlocks(message) {
 	if (!message || typeof message !== "object") return [];
 	const inner = message.message;
@@ -2289,6 +2337,15 @@ function isToolResultBlock(block) {
 	const b = block;
 	return b.type === "tool_result" && typeof b.tool_use_id === "string";
 }
+function isTextBlock(block) {
+	if (!block || typeof block !== "object") return false;
+	const b = block;
+	return b.type === "text" && typeof b.text === "string";
+}
+function isThinkingBlock(block) {
+	if (!block || typeof block !== "object") return false;
+	return block.type === "thinking";
+}
 function isResultMessage(message) {
 	if (!message || typeof message !== "object") return false;
 	const m = message;
@@ -2331,31 +2388,39 @@ function createToolCallProcessor(emit) {
 		onMessage(message) {
 			if (!message || typeof message !== "object") return;
 			const type = message.type;
-			if (type === "assistant") for (const block of extractContentBlocks(message)) {
-				if (!isToolUseBlock(block)) continue;
-				pending.set(block.id, {
-					toolUseId: block.id,
-					name: block.name,
-					args: block.input,
-					startedAt: Date.now()
+			if (type === "assistant") {
+				for (const block of extractContentBlocks(message)) if (isToolUseBlock(block)) {
+					pending.set(block.id, {
+						toolUseId: block.id,
+						name: block.name,
+						args: block.input,
+						startedAt: Date.now()
+					});
+					emit({
+						kind: "tool_call",
+						payload: {
+							toolUseId: block.id,
+							name: block.name,
+							args: block.input,
+							status: "pending"
+						}
+					});
+				} else if (isTextBlock(block)) {
+					const text = block.text.trim();
+					if (text.length === 0) continue;
+					emit({
+						kind: "assistant_text",
+						payload: { text: text.slice(0, ASSISTANT_TEXT_EVENT_LIMIT) }
+					});
+				} else if (isThinkingBlock(block)) emit({
+					kind: "thinking",
+					payload: {}
 				});
-			}
-			else if (type === "user") {
+			} else if (type === "user") {
 				for (const block of extractContentBlocks(message)) if (isToolResultBlock(block)) pairResult(block);
 			}
 		},
 		flush() {
-			if (pending.size === 0) return;
-			for (const entry of pending.values()) emit({
-				kind: "tool_call",
-				payload: {
-					toolUseId: entry.toolUseId,
-					name: entry.name,
-					args: entry.args,
-					status: "pending",
-					durationMs: Date.now() - entry.startedAt
-				}
-			});
 			pending.clear();
 		}
 	};
@@ -2561,25 +2626,37 @@ const createClaudeCodeHandler = (config) => {
 								retryCount = 0;
 								if (message.result && sessionCtx.chatId) {
 									const resultText = message.result;
-									sessionCtx.sdk.sendMessage(sessionCtx.chatId, {
-										format: "text",
-										content: resultText
-									}).then(() => {
+									try {
+										await sessionCtx.sdk.sendMessage(sessionCtx.chatId, {
+											format: "text",
+											content: resultText
+										});
 										sessionCtx.log("Result forwarded to chat");
 										sessionCtx.reportSessionCompletion();
-									}).catch((err) => {
+										sessionCtx.emitEvent({
+											kind: "turn_end",
+											payload: { status: "success" }
+										});
+									} catch (err) {
 										const reason = err instanceof Error ? err.message : String(err);
 										sessionCtx.log(`Failed to forward result: ${reason}`);
-										const message = `Result forward failed: ${reason}\n---\n${resultText.slice(0, 1500)}`.slice(0, 2e3);
+										const forwardErrMessage = `Result forward failed: ${reason}\n---\n${resultText.slice(0, 1500)}`.slice(0, 2e3);
 										sessionCtx.emitEvent({
 											kind: "error",
 											payload: {
 												source: "runtime",
-												message
+												message: forwardErrMessage
 											}
 										});
-									});
-								}
+										sessionCtx.emitEvent({
+											kind: "turn_end",
+											payload: { status: "error" }
+										});
+									}
+								} else sessionCtx.emitEvent({
+									kind: "turn_end",
+									payload: { status: "success" }
+								});
 							} else {
 								const errors = message.errors ? message.errors.join("; ") : message.subtype;
 								const errorLog = `Query result error: ${errors} (subtype=${message.subtype}, turns=${message.num_turns ?? "?"}, duration=${message.duration_ms ?? "?"}ms)`;
@@ -2591,6 +2668,10 @@ const createClaudeCodeHandler = (config) => {
 										message: errors
 									}
 								});
+								sessionCtx.emitEvent({
+									kind: "turn_end",
+									payload: { status: "error" }
+								});
 							}
 							sessionCtx.setRuntimeState("idle");
 						}
@@ -4521,7 +4602,7 @@ async function onboardCreate(args) {
 	}
 	const runtimeAgent = args.type === "human" ? args.assistant : args.id;
 	if (args.feishuBotAppId && args.feishuBotAppSecret) {
-		const { bindFeishuBot } = await import("./feishu-BOISS0DK.mjs").then((n) => n.r);
+		const { bindFeishuBot } = await import("./feishu-OezhDY7x.mjs").then((n) => n.r);
 		const targetAgentUuid = args.type === "human" ? assistantUuid : primary.uuid;
 		if (!targetAgentUuid) process.stderr.write(`Warning: Cannot bind Feishu bot — no runtime agent available for "${args.id}".\n`);
 		else {
@@ -4662,7 +4743,7 @@ function setNestedByDot(obj, dotPath, value) {
 	if (lastKey !== void 0) current[lastKey] = value;
 }
 //#endregion
-//#region ../server/dist/app-DJEePmWL.mjs
+//#region ../server/dist/app-BGneEeZO.mjs
 var __defProp = Object.defineProperty;
 var __exportAll = (all, no_symbols) => {
 	let target = {};
@@ -7742,13 +7823,20 @@ async function appendEvent(db, agentId, chatId, event) {
 	throw new Error(`session_events seq contention on ${agentId}/${chatId}`);
 }
 /**
-* List events for a session in `seq asc` order with cursor pagination.
-* `cursor` is the last seen `seq`; pass it as-is on the next page.
+* List events for a session with cursor pagination.
+*
+* - `direction: "asc"` (default) walks oldest → newest; cursor is the last
+*   seq seen on the previous page (next page starts at seq > cursor).
+* - `direction: "desc"` walks newest → oldest; cursor is the last seq seen
+*   on the previous page (next page starts at seq < cursor). The chat UI
+*   uses desc so its turn-grouping filter always sees the most recent
+*   `turn_end` even when the chat has thousands of events.
 */
 async function listEvents(db, agentId, chatId, options) {
 	const limit = Math.min(Math.max(options?.limit ?? DEFAULT_LIMIT, 1), MAX_LIMIT);
+	const direction = options?.direction ?? "asc";
 	const conditions = [eq(sessionEvents.agentId, agentId), eq(sessionEvents.chatId, chatId)];
-	if (options?.cursor !== void 0) conditions.push(gt(sessionEvents.seq, options.cursor));
+	if (options?.cursor !== void 0) conditions.push(direction === "desc" ? lt(sessionEvents.seq, options.cursor) : gt(sessionEvents.seq, options.cursor));
 	const rows = await db.select({
 		id: sessionEvents.id,
 		agentId: sessionEvents.agentId,
@@ -7757,7 +7845,7 @@ async function listEvents(db, agentId, chatId, options) {
 		kind: sessionEvents.kind,
 		payload: sessionEvents.payload,
 		createdAt: sessionEvents.createdAt
-	}).from(sessionEvents).where(and(...conditions)).orderBy(asc(sessionEvents.seq)).limit(limit + 1);
+	}).from(sessionEvents).where(and(...conditions)).orderBy(direction === "desc" ? desc(sessionEvents.seq) : asc(sessionEvents.seq)).limit(limit + 1);
 	const hasMore = rows.length > limit;
 	const items = (hasMore ? rows.slice(0, limit) : rows).map(rowToEvent);
 	const last = items[items.length - 1];
@@ -7820,16 +7908,23 @@ async function adminSessionRoutes(app) {
 		await assertChatAccess(app.db, scope, request.params.chatId);
 		return getSession(app.db, request.params.agentId, request.params.chatId);
 	});
-	/** GET /admin/sessions/agents/:agentId/:chatId/events — session event stream, paged by `seq` */
+	/**
+	* GET /admin/sessions/agents/:agentId/:chatId/events — session event stream,
+	* paged by `seq`. `direction=desc` returns newest-first; the chat UI uses
+	* this so its turn-grouping filter always sees the latest `turn_end`
+	* regardless of total event count.
+	*/
 	app.get("/agents/:agentId/:chatId/events", async (request) => {
 		const scope = memberScope(request);
 		await assertAgentVisible(app.db, scope, request.params.agentId);
 		await assertChatAccess(app.db, scope, request.params.chatId);
 		const limit = request.query.limit !== void 0 ? Number.parseInt(request.query.limit, 10) : void 0;
 		const cursor = request.query.cursor !== void 0 ? Number.parseInt(request.query.cursor, 10) : void 0;
+		const direction = request.query.direction === "desc" ? "desc" : "asc";
 		return listEvents(app.db, request.params.agentId, request.params.chatId, {
 			limit: Number.isFinite(limit) ? limit : void 0,
-			cursor: Number.isFinite(cursor) ? cursor : void 0
+			cursor: Number.isFinite(cursor) ? cursor : void 0,
+			direction
 		});
 	});
 	/** POST /admin/sessions/agents/:agentId/:chatId/suspend — suspend a session */
@@ -11796,6 +11891,32 @@ function resolveWebDist() {
 }
 //#endregion
 //#region src/core/service-install.ts
+/**
+* Run a subprocess capturing stderr so failures surface a meaningful error
+* instead of Node's opaque "Command failed". Used for launchctl/systemctl —
+* anywhere the stderr message is diagnostically crucial.
+*/
+function runCapture(program, args, timeoutMs) {
+	const res = spawnSync(program, args, {
+		encoding: "utf-8",
+		timeout: timeoutMs,
+		stdio: [
+			"ignore",
+			"pipe",
+			"pipe"
+		]
+	});
+	if (res.status === 0) return { ok: true };
+	return {
+		ok: false,
+		stderr: (res.stderr ?? "").trim(),
+		code: res.status
+	};
+}
+function sleepSync(ms) {
+	const shared = new Int32Array(new SharedArrayBuffer(4));
+	Atomics.wait(shared, 0, 0, ms);
+}
 const LAUNCHD_LABEL = "dev.first-tree-hub.client";
 const SYSTEMD_UNIT = "first-tree-hub-client.service";
 const LOG_DIR = join(DEFAULT_HOME_DIR$1, "logs");
@@ -11903,30 +12024,56 @@ function launchctlDomainTarget() {
 }
 function launchdState() {
 	if (!existsSync(launchdPlistPath())) return { state: "not-installed" };
-	try {
-		const out = execFileSync("launchctl", ["print", `${launchctlDomainTarget()}/${LAUNCHD_LABEL}`], {
-			encoding: "utf-8",
-			timeout: 5e3
-		});
-		const stateLine = out.split(/\r?\n/).find((l) => l.trim().startsWith("state ="));
-		const pidLine = out.split(/\r?\n/).find((l) => l.trim().startsWith("pid ="));
-		if (stateLine?.includes("running")) {
-			const pid = pidLine?.split("=")[1]?.trim();
-			return {
-				state: "active",
-				detail: pid ? `pid ${pid}` : "running"
-			};
-		}
-		return {
-			state: "inactive",
-			detail: stateLine?.trim() ?? "loaded"
-		};
-	} catch {
+	const res = spawnSync("launchctl", ["print", `${launchctlDomainTarget()}/${LAUNCHD_LABEL}`], {
+		encoding: "utf-8",
+		timeout: 5e3,
+		stdio: [
+			"ignore",
+			"pipe",
+			"pipe"
+		]
+	});
+	if (res.status !== 0) return {
+		state: "inactive",
+		detail: "plist present but not loaded"
+	};
+	const out = res.stdout ?? "";
+	const stateLine = out.split(/\r?\n/).find((l) => l.trim().startsWith("state ="));
+	const pidLine = out.split(/\r?\n/).find((l) => l.trim().startsWith("pid ="));
+	if (stateLine?.includes("running")) {
+		const pid = pidLine?.split("=")[1]?.trim();
 		return {
-			state: "inactive",
-			detail: "plist present but not loaded"
+			state: "active",
+			detail: pid ? `pid ${pid}` : "running"
 		};
 	}
+	return {
+		state: "inactive",
+		detail: stateLine?.trim() ?? "loaded"
+	};
+}
+/**
+* Poll `launchctl print` until the label disappears, confirming launchd has
+* finished the async eviction kicked off by `bootout`. Required because
+* `bootout` returns before the actual unload completes when the service has
+* active WebSocket connections — a follow-up `bootstrap` against a still-
+* registered label fails with `Bootstrap failed: 5: Input/output error`.
+*/
+function waitForLabelEvicted(target, label, timeoutMs) {
+	const deadline = Date.now() + timeoutMs;
+	while (Date.now() < deadline) {
+		if (spawnSync("launchctl", ["print", `${target}/${label}`], {
+			encoding: "utf-8",
+			timeout: 2e3,
+			stdio: [
+				"ignore",
+				"ignore",
+				"pipe"
+			]
+		}).status !== 0) return true;
+		sleepSync(200);
+	}
+	return false;
 }
 function installLaunchd() {
 	const invocation = resolveCliInvocation();
@@ -11935,24 +12082,28 @@ function installLaunchd() {
 	mkdirSync(dirname(plistPath), { recursive: true });
 	writeFileSync(plistPath, renderPlist(invocation), { mode: 420 });
 	const target = launchctlDomainTarget();
-	try {
-		execFileSync("launchctl", ["bootout", `${target}/${LAUNCHD_LABEL}`], {
-			stdio: "ignore",
-			timeout: 5e3
-		});
-	} catch {}
-	execFileSync("launchctl", [
-		"bootstrap",
-		target,
-		plistPath
-	], {
-		stdio: "ignore",
-		timeout: 5e3
-	});
-	execFileSync("launchctl", ["enable", `${target}/${LAUNCHD_LABEL}`], {
-		stdio: "ignore",
-		timeout: 5e3
-	});
+	const bootoutRes = runCapture("launchctl", ["bootout", `${target}/${LAUNCHD_LABEL}`], 15e3);
+	if (!bootoutRes.ok) {
+		if (!/not find|no such|not loaded/i.test(bootoutRes.stderr)) process.stderr.write(`    warning: launchctl bootout: ${bootoutRes.stderr || `exit ${bootoutRes.code ?? "unknown"}`}\n`);
+	}
+	waitForLabelEvicted(target, LAUNCHD_LABEL, 1e4);
+	let lastBootstrapErr = null;
+	for (let attempt = 1; attempt <= 2; attempt++) {
+		const res = runCapture("launchctl", [
+			"bootstrap",
+			target,
+			plistPath
+		], 1e4);
+		if (res.ok) {
+			lastBootstrapErr = null;
+			break;
+		}
+		lastBootstrapErr = res;
+		if (attempt < 2) sleepSync(1e3);
+	}
+	if (lastBootstrapErr) throw new Error(`launchctl bootstrap failed: ${lastBootstrapErr.stderr || `exit ${lastBootstrapErr.code ?? "unknown"}`}\n    Command: launchctl bootstrap ${target} ${plistPath}\n    Recovery: \`launchctl bootout ${target}/${LAUNCHD_LABEL}\` then \`first-tree-hub service install\`.`);
+	const enableRes = runCapture("launchctl", ["enable", `${target}/${LAUNCHD_LABEL}`], 5e3);
+	if (!enableRes.ok) process.stderr.write(`    warning: launchctl enable: ${enableRes.stderr || `exit ${enableRes.code ?? "unknown"}`}\n`);
 	const { state, detail } = launchdState();
 	return {
 		platform: "launchd",
@@ -11965,13 +12116,8 @@ function installLaunchd() {
 }
 function uninstallLaunchd() {
 	const plistPath = launchdPlistPath();
-	const target = launchctlDomainTarget();
-	try {
-		execFileSync("launchctl", ["bootout", `${target}/${LAUNCHD_LABEL}`], {
-			stdio: "ignore",
-			timeout: 5e3
-		});
-	} catch {}
+	const res = runCapture("launchctl", ["bootout", `${launchctlDomainTarget()}/${LAUNCHD_LABEL}`], 15e3);
+	if (!res.ok && !/not find|no such|not loaded/i.test(res.stderr)) process.stderr.write(`    warning: bootout during uninstall: ${res.stderr || `exit ${res.code ?? "unknown"}`}\n`);
 	if (existsSync(plistPath)) rmSync(plistPath);
 	return {
 		platform: "launchd",
@@ -12009,29 +12155,28 @@ function shellQuote(value) {
 }
 function systemdState() {
 	if (!existsSync(systemdUnitPath())) return { state: "not-installed" };
-	try {
-		const out = execFileSync("systemctl", [
-			"--user",
-			"is-active",
-			SYSTEMD_UNIT
-		], {
-			encoding: "utf-8",
-			timeout: 5e3
-		}).trim();
-		if (out === "active") return {
-			state: "active",
-			detail: "running"
-		};
-		return {
-			state: "inactive",
-			detail: out
-		};
-	} catch (err) {
-		return {
-			state: "inactive",
-			detail: (typeof err.stdout === "string" ? (err.stdout ?? "").trim() : "") || "unit present but not active"
-		};
-	}
+	const res = spawnSync("systemctl", [
+		"--user",
+		"is-active",
+		SYSTEMD_UNIT
+	], {
+		encoding: "utf-8",
+		timeout: 5e3,
+		stdio: [
+			"ignore",
+			"pipe",
+			"pipe"
+		]
+	});
+	const out = (res.stdout ?? "").trim();
+	if (res.status === 0 && out === "active") return {
+		state: "active",
+		detail: "running"
+	};
+	return {
+		state: "inactive",
+		detail: out || "unit present but not active"
+	};
 }
 function installSystemd() {
 	const invocation = resolveCliInvocation();
@@ -12039,19 +12184,15 @@ function installSystemd() {
 	const unitPath = systemdUnitPath();
 	mkdirSync(dirname(unitPath), { recursive: true });
 	writeFileSync(unitPath, renderSystemdUnit(invocation), { mode: 420 });
-	execFileSync("systemctl", ["--user", "daemon-reload"], {
-		stdio: "ignore",
-		timeout: 5e3
-	});
-	execFileSync("systemctl", [
+	const reloadRes = runCapture("systemctl", ["--user", "daemon-reload"], 5e3);
+	if (!reloadRes.ok) throw new Error(`systemctl --user daemon-reload failed: ${reloadRes.stderr || `exit ${reloadRes.code ?? "unknown"}`}`);
+	const enableRes = runCapture("systemctl", [
 		"--user",
 		"enable",
 		"--now",
 		SYSTEMD_UNIT
-	], {
-		stdio: "ignore",
-		timeout: 1e4
-	});
+	], 1e4);
+	if (!enableRes.ok) throw new Error(`systemctl --user enable --now ${SYSTEMD_UNIT} failed: ${enableRes.stderr || `exit ${enableRes.code ?? "unknown"}`}\n    Recovery: \`systemctl --user stop ${SYSTEMD_UNIT}\` then \`first-tree-hub service install\`.`);
 	const { state, detail } = systemdState();
 	return {
 		platform: "systemd",
@@ -12064,24 +12205,16 @@ function installSystemd() {
 }
 function uninstallSystemd() {
 	const unitPath = systemdUnitPath();
-	try {
-		execFileSync("systemctl", [
-			"--user",
-			"disable",
-			"--now",
-			SYSTEMD_UNIT
-		], {
-			stdio: "ignore",
-			timeout: 1e4
-		});
-	} catch {}
+	const disableRes = runCapture("systemctl", [
+		"--user",
+		"disable",
+		"--now",
+		SYSTEMD_UNIT
+	], 1e4);
+	if (!disableRes.ok && !/not found|no such|not loaded/i.test(disableRes.stderr)) process.stderr.write(`    warning: systemctl disable during uninstall: ${disableRes.stderr || `exit ${disableRes.code ?? "unknown"}`}\n`);
 	if (existsSync(unitPath)) rmSync(unitPath);
-	try {
-		execFileSync("systemctl", ["--user", "daemon-reload"], {
-			stdio: "ignore",
-			timeout: 5e3
-		});
-	} catch {}
+	const reloadRes = runCapture("systemctl", ["--user", "daemon-reload"], 5e3);
+	if (!reloadRes.ok) process.stderr.write(`    warning: systemctl daemon-reload during uninstall: ${reloadRes.stderr || `exit ${reloadRes.code ?? "unknown"}`}\n`);
 	return {
 		platform: "systemd",
 		label: SYSTEMD_UNIT,