@alook/cli 0.0.135 → 0.0.136

package/dist/index.js

@@ -14561,8 +14561,7 @@ var DaemonPushMessageSchema = exports_external.discriminatedUnion("type", [
   exports_external.object({ type: exports_external.literal("daemon.evict"), workspaceId: exports_external.string() }),
   exports_external.object({ type: exports_external.literal("daemon.update"), version: exports_external.string() }),
   exports_external.object({ type: exports_external.literal("daemon.rescan") }),
-  exports_external.object({ type: exports_external.literal("daemon.kill"), workspaceId: exports_external.string(), agentId: exports_external.string().min(1), taskId: exports_external.string(), targetTaskId: exports_external.string() }),
-  exports_external.object({ type: exports_external.literal("daemon.workspace_added"), workspaceId: exports_external.string(), workspaceName: exports_external.string(), token: exports_external.string() })
+  exports_external.object({ type: exports_external.literal("daemon.kill"), workspaceId: exports_external.string(), agentId: exports_external.string().min(1), taskId: exports_external.string(), targetTaskId: exports_external.string() })
 ]);
 var RegisterResponseSchema = exports_external.object({
   runtimes: exports_external.array(exports_external.object({ id: exports_external.string() }))
@@ -14592,9 +14591,6 @@ var RegisterDaemonRequestSchema = exports_external.object({
   workspaces_root: exports_external.string().optional().default(""),
   runtimes: exports_external.array(DaemonRuntimeItemSchema).min(1)
 });
-var BindWorkspaceRequestSchema = exports_external.object({
-  workspace_id: exports_external.string().min(1)
-});
 var DeregisterRequestSchema = exports_external.object({
   daemon_id: exports_external.string().min(1)
 });
@@ -14860,7 +14856,7 @@ var UpdateMemberRequestSchema = exports_external.object({
 });
 var CreateWorkspaceRequestSchema = exports_external.object({
   name: exports_external.string().min(1, "name is required"),
-  slug: exports_external.string().min(1, "slug is required")
+  slug: exports_external.string().optional().default("")
 });
 var UpdateWorkspaceRequestSchema = exports_external.object({
   name: exports_external.string().min(1, "name is required").max(100).trim().optional(),
@@ -16358,6 +16354,7 @@ var workspace = sqliteTable("workspace", {
   id: text("id").primaryKey().$defaultFn(() => "sp_" + nanoid3()),
   name: text("name").notNull(),
   slug: text("slug").unique().notNull(),
+  onboarded: integer2("onboarded").notNull().default(0),
   createdAt: text("created_at").notNull().$defaultFn(() => new Date().toISOString()),
   updatedAt: text("updated_at").notNull().$defaultFn(() => new Date().toISOString())
 });
@@ -16971,6 +16968,9 @@ function cmdPrefix() {
 
 // lib/activate.ts
 import { hostname as hostname4 } from "os";
+import { spawn as spawn6 } from "child_process";
+import { openSync as openSync2, closeSync as closeSync2, mkdirSync as mkdirSync9 } from "fs";
+import { dirname as dirname4 } from "path";
 
 // lib/config.ts
 import { readFileSync, writeFileSync, mkdirSync } from "fs";
@@ -17000,13 +17000,9 @@ function loadCLIConfigForProfile(profile) {
     session_token: cfg.session_token,
     watched_workspaces: cfg.watched_workspaces || []
   };
-  const legacy = cfg.machine_token;
-  if (legacy && !result.watched_workspaces.some((w) => w.token === legacy)) {
-    result.watched_workspaces.push({ id: null, name: null, token: legacy, status: "registered", agent_ids: [] });
-  }
   for (const ws of result.watched_workspaces) {
     if (!ws.status)
-      ws.status = ws.id ? "active" : "registered";
+      ws.status = ws.id ? "active" : "deleted";
   }
   return result;
 }
@@ -17309,556 +17305,176 @@ function releaseDaemonPid(profile) {
   removePidFileIfMatches(process.pid, profile);
 }
 
-// lib/runtimes.ts
-import { execSync } from "child_process";
-function isCommandAvailable(cmd) {
-  try {
-    const check2 = process.platform === "win32" ? `where ${cmd}` : `which ${cmd}`;
-    execSync(check2, { stdio: "ignore" });
-    return true;
-  } catch {
-    return false;
+// daemon/client.ts
+class DaemonClient {
+  baseURL;
+  constructor(baseURL) {
+    this.baseURL = baseURL;
   }
-}
-function detectRuntimes() {
-  const found = [];
-  for (const type of ["claude", "codex", "opencode"]) {
-    if (isCommandAvailable(type)) {
-      let version3 = "";
+  async request(method, path, token, body) {
+    const headers = {
+      "Content-Type": "application/json",
+      Authorization: `Bearer ${token}`
+    };
+    const MAX_RETRIES = 3;
+    const BASE_DELAY_MS = 500;
+    let lastError;
+    for (let attempt = 0;attempt <= MAX_RETRIES; attempt++) {
       try {
-        version3 = execSync(`${type} --version`, { encoding: "utf-8" }).trim();
-      } catch {}
-      found.push({ type, version: version3 });
+        const res = await fetch(this.baseURL + path, {
+          method,
+          headers,
+          body: body ? JSON.stringify(body) : undefined
+        });
+        if (!res.ok)
+          throw new Error(`HTTP ${res.status}: ${await res.text()}`);
+        if (res.status === 204)
+          return;
+        return res.json();
+      } catch (e) {
+        if (e instanceof TypeError) {
+          lastError = e;
+          if (attempt < MAX_RETRIES) {
+            await new Promise((r) => setTimeout(r, BASE_DELAY_MS * 2 ** attempt));
+            continue;
+          }
+        }
+        throw e;
+      }
     }
+    throw lastError;
   }
-  return found;
-}
-
-// lib/activate.ts
-async function activateAndSave(opts) {
-  const { token, serverUrl, profile } = opts;
-  console.log("Scanning for AI runtimes...");
-  const runtimes = detectRuntimes();
-  if (runtimes.length === 0) {
-    console.error("Error: no runtimes found. Install claude, codex, or opencode first.");
-    process.exit(1);
+  async register(token, body) {
+    const raw = await this.request("POST", "/api/daemon/register", token, body);
+    return RegisterResponseSchema.parse(raw);
   }
-  console.log(`Found: ${runtimes.map((r) => r.type).join(", ")}`);
-  const host = hostname4();
-  console.log("Registering machine...");
-  let activateResp;
-  try {
-    const res = await fetch(`${serverUrl}/api/machine-tokens/activate`, {
-      method: "POST",
-      headers: { "Content-Type": "application/json" },
-      body: JSON.stringify({ token, hostname: host, runtimes })
+  heartbeat(token, daemonId) {
+    return this.request("POST", "/api/daemon/heartbeat", token, {
+      daemon_id: daemonId
     });
-    if (!res.ok) {
-      const text2 = await res.text();
-      console.error(`Error: registration failed (${res.status}): ${text2}`);
-      process.exit(1);
-    }
-    activateResp = await res.json();
-  } catch (err) {
-    console.error(`Error: failed to activate: ${err instanceof Error ? err.message : err}`);
-    process.exit(1);
   }
-  const existing = loadCLIConfigForProfile(profile);
-  const watched = existing.watched_workspaces || [];
-  if (!watched.some((w) => w.token === token)) {
-    watched.push({ id: null, name: null, token, status: "registered", agent_ids: [] });
+  sweep(token, daemonId) {
+    return this.request("POST", "/api/daemon/sweep", token, {
+      daemon_id: daemonId
+    });
   }
-  saveCLIConfigForProfile(profile, {
-    server_url: serverUrl,
-    watched_workspaces: watched
-  });
-  const daemonPid = readDaemonPid(profile);
-  if (daemonPid && isProcessAlive(daemonPid)) {
-    try {
-      process.kill(daemonPid, "SIGHUP");
-      console.log(`
-Daemon (pid ${daemonPid}) notified — machine registered, awaiting workspace binding.`);
-    } catch {
-      console.log(`
-Daemon is running but could not be notified. Restart it to pick up the new token.`);
+  deregister(token, daemonId) {
+    return this.request("POST", "/api/daemon/deregister", token, {
+      daemon_id: daemonId
+    });
+  }
+  async poll(token, daemonId, maxTasks, cliVersion) {
+    const raw = await this.request("POST", "/api/daemon/tasks/poll", token, { daemon_id: daemonId, max_tasks: maxTasks, ...cliVersion && { cli_version: cliVersion } });
+    const resp = PollResponseSchema.parse(raw);
+    return {
+      tasks: resp.tasks,
+      evicted: resp.evicted ?? false,
+      pending_update: resp.pending_update,
+      pending_rescan: resp.pending_rescan,
+      file_requests: resp.file_requests,
+      meetings: resp.meetings
+    };
+  }
+  startTask(token, taskId) {
+    return this.request("POST", `/api/daemon/tasks/${taskId}/start`, token);
+  }
+  completeTask(token, taskId, body) {
+    return this.request("POST", `/api/daemon/tasks/${taskId}/complete`, token, body);
+  }
+  failTask(token, taskId, error51) {
+    return this.request("POST", `/api/daemon/tasks/${taskId}/fail`, token, {
+      error: error51
+    });
+  }
+  supersedeTask(token, taskId) {
+    return this.request("POST", `/api/daemon/tasks/${taskId}/supersede`, token);
+  }
+  async getArtifactMeta(token, artifactId, workspaceId) {
+    return this.request("GET", `/api/artifacts/${artifactId}?workspace_id=${encodeURIComponent(workspaceId)}`, token);
+  }
+  async downloadArtifact(token, artifactId, workspaceId) {
+    const MAX_RETRIES = 3;
+    const BASE_DELAY_MS = 500;
+    let lastError;
+    for (let attempt = 0;attempt <= MAX_RETRIES; attempt++) {
+      try {
+        const res = await fetch(`${this.baseURL}/api/artifacts/${artifactId}/content?workspace_id=${encodeURIComponent(workspaceId)}`, { headers: { Authorization: `Bearer ${token}` } });
+        if (!res.ok) {
+          throw new Error(`artifact download failed: HTTP ${res.status}`);
+        }
+        return res.arrayBuffer();
+      } catch (e) {
+        if (e instanceof TypeError) {
+          lastError = e;
+          if (attempt < MAX_RETRIES) {
+            await new Promise((r) => setTimeout(r, BASE_DELAY_MS * 2 ** attempt));
+            continue;
+          }
+        }
+        throw e;
+      }
     }
-  } else {
-    const startCmd = isDev() ? `${cmdPrefix()} daemon start --foreground` : `${cmdPrefix()} daemon start`;
-    console.log();
-    console.log(`Run '${startCmd}' to start the daemon.`);
+    throw lastError;
+  }
+  reportMessages(token, taskId, messages) {
+    return this.request("POST", `/api/daemon/tasks/${taskId}/messages`, token, { messages });
+  }
+  reportFileData(token, body) {
+    return this.request("POST", "/api/daemon/workspace/report", token, body);
+  }
+  syncSkills(token, body) {
+    return this.request("POST", "/api/daemon/skills/sync", token, body);
   }
-  return {
-    daemonId: activateResp.daemon_id,
-    tokenStatus: activateResp.token_status
-  };
 }
 
-// commands/register.ts
-function registerCommand() {
-  const cmd = new Command("register").description("Register CLI with your Alook account").requiredOption("--token <token>", "API token (starts with al_)").option("--server <url>", "Server URL").option("--profile <name>", "Profile name").action(async (opts, command) => {
-    const token = opts.token;
-    const profile = opts.profile || command.parent?.opts().profile;
-    const serverUrl = opts.server || command.parent?.opts().server || getServerUrl();
-    if (!token) {
-      console.error(`Error: --token is required
-Usage: ${cmdPrefix()} register --token <token>`);
-      process.exit(1);
-    }
-    if (!token.startsWith("al_")) {
-      console.error("Error: invalid token format: must start with 'al_'");
-      process.exit(1);
-    }
-    const client = new APIClient(serverUrl, token);
-    let me;
-    try {
-      me = await client.getJSON("/api/me");
-    } catch (err) {
-      console.error(`Error: failed to verify token: ${err instanceof Error ? err.message : err}`);
-      process.exit(1);
+// daemon/health.ts
+import { createServer } from "http";
+var DEFAULT_HEALTH_PORT = Number(process.env.ALOOK_HEALTH_PORT) || 19514;
+function createHealthServer(port = DEFAULT_HEALTH_PORT) {
+  let runtimeCount = 0;
+  const startTime = Date.now();
+  const server = createServer((req, res) => {
+    if (req.url === "/health") {
+      const uptimeSec = Math.floor((Date.now() - startTime) / 1000);
+      res.writeHead(200, { "Content-Type": "application/json" });
+      res.end(JSON.stringify({
+        status: "ok",
+        uptime: `${uptimeSec}s`,
+        runtimes: runtimeCount
+      }));
+    } else {
+      res.writeHead(404);
+      res.end();
     }
-    const result = await activateAndSave({ token, serverUrl, profile });
-    console.log(`
-Registered as ${me.email}`);
-    console.log(`Machine: ${result.daemonId} (status: ${result.tokenStatus})`);
-    console.log(`Workspace binding will happen when you launch a company.`);
   });
-  return cmd;
+  server.listen(port, "127.0.0.1");
+  return {
+    server,
+    setRuntimeCount(n) {
+      runtimeCount = n;
+    }
+  };
 }
 
-// commands/login.ts
-import { Command as Command2 } from "commander";
-import { fork, spawn } from "child_process";
-import { fileURLToPath as fileURLToPath2 } from "url";
-var DEVICE_CLIENT_ID = process.env.ALOOK_DEVICE_CLIENT_ID || "alook-cli";
-function openBrowser(url2) {
-  try {
-    const cmd = process.platform === "darwin" ? "open" : process.platform === "linux" ? "xdg-open" : process.platform === "win32" ? "start" : null;
-    if (cmd) {
-      const args = process.platform === "win32" ? ["", url2] : [url2];
-      spawn(cmd, args, { stdio: "ignore", detached: true }).unref();
-    }
-  } catch {}
+// daemon/agent/claude.ts
+import { spawn } from "child_process";
+import { createInterface } from "readline";
+
+// daemon/kill-tree.ts
+import { execSync } from "child_process";
+var log3 = createLogger2({ module: "kill-tree" });
+function killGraceMs() {
+  return Number(process.env.ALOOK_KILL_GRACE_MS) || 2000;
 }
-function sleep(ms) {
-  return new Promise((resolve) => setTimeout(resolve, ms));
-}
-function syncWorkspacesToConfig(serverWorkspaces, profile, sessionToken) {
-  const cfg = loadCLIConfigForProfile(profile);
-  const watched = cfg.watched_workspaces || [];
-  const serverIds = new Set(serverWorkspaces.map((w) => w.id));
-  for (const sw of serverWorkspaces) {
-    const existing = watched.find((w) => w.id === sw.id);
-    if (existing) {
-      existing.status = "active";
-      existing.name = sw.name;
-    } else {
-      watched.push({ id: sw.id, name: sw.name, token: "", status: "active", agent_ids: [] });
-    }
-  }
-  for (const w of watched) {
-    if (w.id && !serverIds.has(w.id) && w.status !== "registered") {
-      w.status = "deleted";
-    }
-  }
-  saveCLIConfigForProfile(profile, {
-    server_url: cfg.server_url,
-    session_token: sessionToken ?? cfg.session_token,
-    watched_workspaces: watched
-  });
-}
-async function pollAndActivate(opts) {
-  const { deviceCode, expiresIn, serverUrl, profile } = opts;
-  let interval = opts.interval;
-  const expiresAt = Date.now() + expiresIn * 1000;
-  let tokenResp;
-  while (Date.now() < expiresAt) {
-    await sleep(interval);
-    try {
-      const res = await fetch(`${serverUrl}/api/auth/device/token`, {
-        method: "POST",
-        headers: { "Content-Type": "application/json" },
-        body: JSON.stringify({
-          grant_type: "urn:ietf:params:oauth:grant-type:device_code",
-          device_code: deviceCode,
-          client_id: DEVICE_CLIENT_ID
-        })
-      });
-      if (res.ok) {
-        tokenResp = await res.json();
-        break;
-      }
-      const errBody = await res.json();
-      if (errBody.error === "slow_down") {
-        interval += 5000;
-      } else if (errBody.error === "authorization_pending") {} else if (errBody.error === "expired_token") {
-        console.error("Error: device code expired. Please run login again.");
-        process.exit(1);
-      } else if (errBody.error === "access_denied") {
-        console.error("Error: authorization was denied.");
-        process.exit(1);
-      } else {
-        console.error(`Error: unexpected error: ${errBody.error_description || errBody.error}`);
-        process.exit(1);
-      }
-    } catch {
-      console.error("Error: network request failed during polling.");
-      process.exit(1);
-    }
-  }
-  if (!tokenResp) {
-    console.error("Error: device code expired (timed out). Please run login again.");
-    process.exit(1);
-  }
-  const sessionToken = tokenResp.access_token;
-  const client = new APIClient(serverUrl, sessionToken);
-  let email3 = "";
-  try {
-    const me = await client.getJSON("/api/me");
-    email3 = me.email;
-  } catch {}
-  let serverWorkspaces = [];
-  try {
-    serverWorkspaces = await client.getJSON("/api/workspaces");
-  } catch {}
-  syncWorkspacesToConfig(serverWorkspaces, profile, sessionToken);
-  const existingWorkspaceId = serverWorkspaces.length > 0 ? serverWorkspaces[0].id : "";
-  const mtUrl = existingWorkspaceId ? `/api/machine-tokens?workspace_id=${existingWorkspaceId}` : "/api/machine-tokens";
-  let machineToken2;
-  try {
-    const mtResp = await client.postJSON(mtUrl);
-    machineToken2 = mtResp.token;
-  } catch {
-    process.exit(1);
-  }
-  const result = await activateAndSave({ token: machineToken2, serverUrl, profile });
-  if (email3) {
-    console.log(`
-Logged in as ${email3}`);
-  }
-  console.log(`Machine: ${result.daemonId} (status: ${result.tokenStatus})`);
-  console.log(`Workspace binding will happen when you launch a company.`);
-}
-if (process.argv.includes("--__login-poll")) {
-  const idx = process.argv.indexOf("--__login-poll");
-  let data;
-  try {
-    data = JSON.parse(process.argv[idx + 1]);
-  } catch {
-    console.error("Error: invalid poll data");
-    process.exit(1);
-  }
-  pollAndActivate(data).catch(() => process.exit(1));
-}
-async function checkExistingAuth(serverUrl, profile) {
-  const config2 = loadCLIConfigForProfile(profile);
-  const sessionToken = config2.session_token;
-  const workspaces = config2.watched_workspaces || [];
-  const ws = workspaces[0];
-  const authToken = sessionToken || ws?.token;
-  if (!authToken) {
-    return { valid: false };
-  }
-  try {
-    const res = await fetch(`${serverUrl}/api/workspaces`, {
-      headers: { Authorization: `Bearer ${authToken}` }
-    });
-    if (!res.ok) {
-      return { valid: false };
-    }
-    const serverWorkspaces = await res.json();
-    const hasValidWorkspace = workspaces.some((w) => w.id && w.status !== "deleted");
-    if (!hasValidWorkspace && serverWorkspaces.length > 0) {
-      syncWorkspacesToConfig(serverWorkspaces, profile);
-    }
-    let email3;
-    try {
-      const meRes = await fetch(`${serverUrl}/api/me`, {
-        headers: { Authorization: `Bearer ${authToken}` }
-      });
-      if (meRes.ok) {
-        const me = await meRes.json();
-        email3 = me.email;
-      }
-    } catch {}
-    const workspaceName = (serverWorkspaces.length > 0 ? serverWorkspaces[0].name : undefined) || ws?.name || undefined;
-    return { valid: true, email: email3, workspaceName };
-  } catch {
-    return { valid: false };
-  }
-}
-function loginCommand() {
-  const cmd = new Command2("login").description("Log in to Alook via browser (device code flow)").option("--server <url>", "Server URL").option("--profile <name>", "Profile name").option("--force", "Re-authenticate even if already logged in").action(async (opts, command) => {
-    const profile = opts.profile || command.parent?.opts().profile;
-    const serverUrl = opts.server || command.parent?.opts().server || getServerUrl();
-    if (!opts.force) {
-      const existing = await checkExistingAuth(serverUrl, profile);
-      if (existing.valid) {
-        const parts = ["Already logged in"];
-        if (existing.email)
-          parts[0] += ` as ${existing.email}`;
-        if (existing.workspaceName)
-          parts[0] += ` (workspace: ${existing.workspaceName})`;
-        parts[0] += ".";
-        console.log(parts[0]);
-        return;
-      }
-    }
-    console.log("Requesting device code...");
-    let deviceResp;
-    try {
-      const res = await fetch(`${serverUrl}/api/auth/device/code`, {
-        method: "POST",
-        headers: { "Content-Type": "application/json" },
-        body: JSON.stringify({ client_id: DEVICE_CLIENT_ID })
-      });
-      if (!res.ok) {
-        const text2 = await res.text();
-        console.error(`Error: failed to get device code (${res.status}): ${text2}`);
-        process.exit(1);
-      }
-      deviceResp = await res.json();
-    } catch (err) {
-      console.error(`Error: failed to request device code: ${err instanceof Error ? err.message : err}`);
-      process.exit(1);
-    }
-    const verificationUrl = deviceResp.verification_uri_complete || deviceResp.verification_uri;
-    console.log();
-    console.log(`  Open this URL in your browser:`);
-    console.log(`  ${verificationUrl}`);
-    console.log();
-    console.log(`  Enter code: ${deviceResp.user_code}`);
-    console.log();
-    if (!process.stdout.isTTY) {
-      const pollData = JSON.stringify({
-        deviceCode: deviceResp.device_code,
-        interval: (deviceResp.interval || 5) * 1000,
-        expiresIn: deviceResp.expires_in,
-        serverUrl,
-        profile
-      });
-      const thisFile = fileURLToPath2(import.meta.url);
-      const child = fork(thisFile, ["--__login-poll", pollData], {
-        detached: true,
-        stdio: "ignore"
-      });
-      child.unref();
-      console.log("  Polling for authorization in the background (timeout: 5min).");
-      console.log(`  Once approved, run \`${cmdPrefix()} status\` to verify.`);
-      return;
-    }
-    openBrowser(verificationUrl);
-    console.log("  (Browser opened automatically)");
-    console.log();
-    console.log("Waiting for authorization...");
-    await pollAndActivate({
-      deviceCode: deviceResp.device_code,
-      interval: (deviceResp.interval || 5) * 1000,
-      expiresIn: deviceResp.expires_in,
-      serverUrl,
-      profile
-    });
-  });
-  return cmd;
-}
-
-// commands/status.ts
-import { Command as Command3 } from "commander";
-function statusCommand() {
-  const cmd = new Command3("status").description("Show registration status").action((_opts, command) => {
-    const profile = command.parent?.opts().profile;
-    const cfg = loadCLIConfigForProfile(profile);
-    const ws = cfg.watched_workspaces?.[0];
-    if (!ws?.token) {
-      console.log("Not registered");
-      console.log(`Run '${cmdPrefix()} register --token <token>' to register.`);
-      return;
-    }
-    console.log("Status: Registered");
-    console.log(`Server: ${cfg.server_url}`);
-    console.log(`Workspace: ${ws.name} (${ws.id})`);
-  });
-  return cmd;
-}
-
-// commands/daemon.ts
-import { Command as Command4 } from "commander";
-import { spawn as spawn7 } from "child_process";
-import { openSync as openSync2, closeSync as closeSync2, mkdirSync as mkdirSync9 } from "fs";
-import { dirname as dirname4 } from "path";
-
-// daemon/client.ts
-class DaemonClient {
-  baseURL;
-  constructor(baseURL) {
-    this.baseURL = baseURL;
-  }
-  async request(method, path, token, body) {
-    const headers = {
-      "Content-Type": "application/json",
-      Authorization: `Bearer ${token}`
-    };
-    const MAX_RETRIES = 3;
-    const BASE_DELAY_MS = 500;
-    let lastError;
-    for (let attempt = 0;attempt <= MAX_RETRIES; attempt++) {
-      try {
-        const res = await fetch(this.baseURL + path, {
-          method,
-          headers,
-          body: body ? JSON.stringify(body) : undefined
-        });
-        if (!res.ok)
-          throw new Error(`HTTP ${res.status}: ${await res.text()}`);
-        if (res.status === 204)
-          return;
-        return res.json();
-      } catch (e) {
-        if (e instanceof TypeError) {
-          lastError = e;
-          if (attempt < MAX_RETRIES) {
-            await new Promise((r) => setTimeout(r, BASE_DELAY_MS * 2 ** attempt));
-            continue;
-          }
-        }
-        throw e;
-      }
-    }
-    throw lastError;
-  }
-  async register(token, body) {
-    const raw = await this.request("POST", "/api/daemon/register", token, body);
-    return RegisterResponseSchema.parse(raw);
-  }
-  heartbeat(token, daemonId) {
-    return this.request("POST", "/api/daemon/heartbeat", token, {
-      daemon_id: daemonId
-    });
-  }
-  sweep(token, daemonId) {
-    return this.request("POST", "/api/daemon/sweep", token, {
-      daemon_id: daemonId
-    });
-  }
-  deregister(token, daemonId) {
-    return this.request("POST", "/api/daemon/deregister", token, {
-      daemon_id: daemonId
-    });
-  }
-  async poll(token, daemonId, maxTasks, cliVersion) {
-    const raw = await this.request("POST", "/api/daemon/tasks/poll", token, { daemon_id: daemonId, max_tasks: maxTasks, ...cliVersion && { cli_version: cliVersion } });
-    const resp = PollResponseSchema.parse(raw);
-    return {
-      tasks: resp.tasks,
-      evicted: resp.evicted ?? false,
-      pending_update: resp.pending_update,
-      pending_rescan: resp.pending_rescan,
-      file_requests: resp.file_requests,
-      meetings: resp.meetings
-    };
-  }
-  startTask(token, taskId) {
-    return this.request("POST", `/api/daemon/tasks/${taskId}/start`, token);
-  }
-  completeTask(token, taskId, body) {
-    return this.request("POST", `/api/daemon/tasks/${taskId}/complete`, token, body);
-  }
-  failTask(token, taskId, error51) {
-    return this.request("POST", `/api/daemon/tasks/${taskId}/fail`, token, {
-      error: error51
-    });
-  }
-  supersedeTask(token, taskId) {
-    return this.request("POST", `/api/daemon/tasks/${taskId}/supersede`, token);
-  }
-  async getArtifactMeta(token, artifactId, workspaceId) {
-    return this.request("GET", `/api/artifacts/${artifactId}?workspace_id=${encodeURIComponent(workspaceId)}`, token);
-  }
-  async downloadArtifact(token, artifactId, workspaceId) {
-    const MAX_RETRIES = 3;
-    const BASE_DELAY_MS = 500;
-    let lastError;
-    for (let attempt = 0;attempt <= MAX_RETRIES; attempt++) {
-      try {
-        const res = await fetch(`${this.baseURL}/api/artifacts/${artifactId}/content?workspace_id=${encodeURIComponent(workspaceId)}`, { headers: { Authorization: `Bearer ${token}` } });
-        if (!res.ok) {
-          throw new Error(`artifact download failed: HTTP ${res.status}`);
-        }
-        return res.arrayBuffer();
-      } catch (e) {
-        if (e instanceof TypeError) {
-          lastError = e;
-          if (attempt < MAX_RETRIES) {
-            await new Promise((r) => setTimeout(r, BASE_DELAY_MS * 2 ** attempt));
-            continue;
-          }
-        }
-        throw e;
-      }
-    }
-    throw lastError;
-  }
-  reportMessages(token, taskId, messages) {
-    return this.request("POST", `/api/daemon/tasks/${taskId}/messages`, token, { messages });
-  }
-  reportFileData(token, body) {
-    return this.request("POST", "/api/daemon/workspace/report", token, body);
-  }
-  syncSkills(token, body) {
-    return this.request("POST", "/api/daemon/skills/sync", token, body);
-  }
-  async checkStandby(token, body) {
-    return this.request("POST", "/api/daemon/register", token, body);
-  }
-}
-
-// daemon/health.ts
-import { createServer } from "http";
-var DEFAULT_HEALTH_PORT = Number(process.env.ALOOK_HEALTH_PORT) || 19514;
-function createHealthServer(port = DEFAULT_HEALTH_PORT) {
-  let runtimeCount = 0;
-  const startTime = Date.now();
-  const server = createServer((req, res) => {
-    if (req.url === "/health") {
-      const uptimeSec = Math.floor((Date.now() - startTime) / 1000);
-      res.writeHead(200, { "Content-Type": "application/json" });
-      res.end(JSON.stringify({
-        status: "ok",
-        uptime: `${uptimeSec}s`,
-        runtimes: runtimeCount
-      }));
-    } else {
-      res.writeHead(404);
-      res.end();
-    }
-  });
-  server.listen(port, "127.0.0.1");
-  return {
-    server,
-    setRuntimeCount(n) {
-      runtimeCount = n;
-    }
-  };
-}
-
-// daemon/agent/claude.ts
-import { spawn as spawn2 } from "child_process";
-import { createInterface } from "readline";
-
-// daemon/kill-tree.ts
-import { execSync as execSync2 } from "child_process";
-var log3 = createLogger2({ module: "kill-tree" });
-function killGraceMs() {
-  return Number(process.env.ALOOK_KILL_GRACE_MS) || 2000;
-}
-var POLL_MS = 100;
-var isPosix = process.platform !== "win32";
-function isAlive(pid) {
-  try {
-    process.kill(pid, 0);
-    return true;
-  } catch (e) {
-    return e?.code === "EPERM";
-  }
+var POLL_MS = 100;
+var isPosix = process.platform !== "win32";
+function isAlive(pid) {
+  try {
+    process.kill(pid, 0);
+    return true;
+  } catch (e) {
+    return e?.code === "EPERM";
+  }
 }
 function signalTree(pid, signal) {
   if (isPosix) {
@@ -17873,7 +17489,7 @@ function signalTree(pid, signal) {
   }
   if (!isPosix) {
     try {
-      execSync2(`taskkill /PID ${pid} /T /F`, { stdio: "ignore" });
+      execSync(`taskkill /PID ${pid} /T /F`, { stdio: "ignore" });
       return;
     } catch {}
     return;
@@ -17931,7 +17547,7 @@ class ClaudeBackend {
     if (options.resumeSessionId) {
       args.push("--resume", options.resumeSessionId);
     }
-    const proc = spawn2(this.cliPath, args, {
+    const proc = spawn(this.cliPath, args, {
       cwd: options.cwd,
       stdio: ["pipe", "pipe", "pipe"],
       env: { ...process.env, ...options.env },
@@ -18170,7 +17786,7 @@ function handleControlRequest(proc, event) {
 }
 
 // daemon/agent/codex.ts
-import { spawn as spawn3 } from "child_process";
+import { spawn as spawn2 } from "child_process";
 import { createInterface as createInterface2 } from "readline";
 var RAW_DETECTION_METHODS = new Set([
   "turn/started",
@@ -18202,7 +17818,7 @@ class CodexBackend {
     this.cliPath = cliPath;
   }
   execute(prompt, options) {
-    const proc = spawn3(this.cliPath, ["app-server", "--listen", "stdio://", "--config", "sandbox_mode=danger-full-access"], {
+    const proc = spawn2(this.cliPath, ["app-server", "--listen", "stdio://", "--config", "sandbox_mode=danger-full-access"], {
       cwd: options.cwd,
       stdio: ["pipe", "pipe", "pipe"],
       env: { ...process.env, ...options.env },
@@ -18676,7 +18292,7 @@ class CodexBackend {
 }
 
 // daemon/agent/opencode.ts
-import { spawn as spawn4 } from "child_process";
+import { spawn as spawn3 } from "child_process";
 import { createInterface as createInterface3 } from "readline";
 class OpenCodeBackend {
   cliPath;
@@ -18693,7 +18309,7 @@ class OpenCodeBackend {
       args.push("--session", options.resumeSessionId);
     }
     args.push(prompt);
-    const proc = spawn4(this.cliPath, args, {
+    const proc = spawn3(this.cliPath, args, {
       cwd: options.cwd,
       stdio: ["ignore", "pipe", "pipe"],
       env: { ...process.env, ...options.env, OPENCODE_PERMISSION: '{"*":"allow"}' },
@@ -18934,7 +18550,7 @@ class OpenCodeBackend {
 }
 
 // daemon/agent/index.ts
-import { execSync as execSync3 } from "child_process";
+import { execSync as execSync2 } from "child_process";
 function createBackend(provider, cliPath) {
   switch (provider) {
     case "claude":
@@ -18949,7 +18565,7 @@ function createBackend(provider, cliPath) {
 }
 async function detectVersion2(cliPath) {
   try {
-    return execSync3(`${cliPath} --version`, { encoding: "utf-8" }).trim();
+    return execSync2(`${cliPath} --version`, { encoding: "utf-8" }).trim();
   } catch {
     return "unknown";
   }
@@ -19509,7 +19125,7 @@ function localISOString(now = new Date) {
 function lockPathFor(timelineDir, filename) {
   return join7(timelineDir, `.${filename}.lock`);
 }
-function sleep2(ms) {
+function sleep(ms) {
   return new Promise((resolve) => setTimeout(resolve, ms));
 }
 async function initEntryAsync(timelineDir, entry) {
@@ -19519,7 +19135,7 @@ async function initEntryAsync(timelineDir, entry) {
   try {
     let acquired = acquireLock(lockPath);
     if (!acquired) {
-      await sleep2(200);
+      await sleep(200);
       acquired = acquireLock(lockPath);
     }
     if (!acquired) {
@@ -20329,7 +19945,7 @@ class DaemonWsClient {
 import { readFileSync as readFileSync7, writeFileSync as writeFileSync6, unlinkSync as unlinkSync4 } from "fs";
 
 // lib/update.ts
-import { spawn as spawn5 } from "child_process";
+import { spawn as spawn4 } from "child_process";
 function fetchLatestVersion() {
   return fetch("https://registry.npmjs.org/@alook/cli/latest").then((res) => {
     if (!res.ok)
@@ -20340,7 +19956,7 @@ function fetchLatestVersion() {
 function runNpmUpdate(targetVersion) {
   return new Promise((resolve) => {
     const chunks = [];
-    const child = spawn5("npm", ["install", "-g", `@alook/cli@${targetVersion}`], {
+    const child = spawn4("npm", ["install", "-g", `@alook/cli@${targetVersion}`], {
       stdio: ["ignore", "pipe", "pipe"]
     });
     child.stdout?.on("data", (d) => chunks.push(d));
@@ -20878,7 +20494,7 @@ function stopSkillScanner() {
 }
 
 // lib/shell-env.ts
-import { execSync as execSync4 } from "child_process";
+import { execSync as execSync3 } from "child_process";
 var PASSTHROUGH_VARS = ["ALOOK_PROJECT_ROOT", "ALOOK_SERVER_URL", "ALOOK_CMD_PREFIX", "ALOOK_HEALTH_PORT"];
 function resolveLoginShellEnv() {
   if (isWindows) {
@@ -20886,7 +20502,7 @@ function resolveLoginShellEnv() {
   }
   const shell = process.env.SHELL || "/bin/zsh";
   try {
-    const output = execSync4(`${shell} -ilc 'env'`, {
+    const output = execSync3(`${shell} -ilc 'env'`, {
       encoding: "utf-8",
       timeout: 5000,
       stdio: ["ignore", "pipe", "ignore"]
@@ -20913,17 +20529,17 @@ function resolveLoginShellEnv() {
 // daemon/daemon.ts
 import { existsSync as existsSync3, mkdirSync as mkdirSync8, openSync, closeSync, readdirSync as readdirSync3, statSync as statSync4, unlinkSync as unlinkSync5 } from "fs";
 import { readdir as readdir2, readFile as readFile2, unlink, stat as fsStat } from "fs/promises";
-import { execSync as execSync5, spawn as spawn6 } from "child_process";
-import { fileURLToPath as fileURLToPath3 } from "url";
+import { execSync as execSync4, spawn as spawn5 } from "child_process";
+import { fileURLToPath as fileURLToPath2 } from "url";
 import { dirname as dirname3, join as join11 } from "path";
 var log10 = createLogger2({ module: "daemon" });
-var _dir = dirname3(fileURLToPath3(import.meta.url));
+var _dir = dirname3(fileURLToPath2(import.meta.url));
 var sessionRunnerPath = existsSync3(join11(_dir, "session-runner.js")) ? join11(_dir, "session-runner.js") : join11(_dir, "session-runner.ts");
 var meetingRunnerPath = existsSync3(join11(_dir, "meeting-runner.js")) ? join11(_dir, "meeting-runner.js") : join11(_dir, "meeting-runner.ts");
-function isCommandAvailable2(cmd) {
+function isCommandAvailable(cmd) {
   try {
     const check2 = process.platform === "win32" ? `where ${cmd}` : `which ${cmd}`;
-    execSync5(check2, { stdio: "ignore" });
+    execSync4(check2, { stdio: "ignore" });
     return true;
   } catch {
     return false;
@@ -21098,13 +20714,11 @@ async function startDaemon(profile, serverUrl) {
   }
   const cliConfig = loadCLIConfigForProfile(profile);
   const allEntries = cliConfig.watched_workspaces || [];
-  const workspaces = allEntries.filter((ws) => ws.status !== "registered" && !!ws.id);
-  const registeredEntries = allEntries.filter((ws) => ws.status === "registered" && !ws.id);
-  const standbyToken = registeredEntries[0]?.token ?? null;
-  if (workspaces.length === 0 && standbyToken) {
-    log10.info("No workspaces configured — daemon starting in standby mode with machine token. Awaiting workspace binding.");
-  } else if (workspaces.length === 0) {
-    log10.info("No workspaces configured — daemon starting in standby mode. Register a workspace to begin.");
+  const workspaces = allEntries.filter((ws) => ws.status !== "deleted" && !!ws.id);
+  if (workspaces.length === 0) {
+    log10.error("No workspaces configured. Register a workspace first.");
+    process.exit(1);
+    return;
   }
   const hasPerWorkspaceTokens = workspaces.every((ws) => !!ws.token);
   if (!hasPerWorkspaceTokens) {
@@ -21122,7 +20736,7 @@ async function startDaemon(profile, serverUrl) {
     ["codex", config2.codexPath],
     ["opencode", config2.opencodePath]
   ]) {
-    if (isCommandAvailable2(path2)) {
+    if (isCommandAvailable(path2)) {
       const version3 = await detectVersion2(path2);
       providers.push({ type, path: path2, version: version3 });
     }
@@ -21135,7 +20749,7 @@ async function startDaemon(profile, serverUrl) {
   log10.info(`Detected providers: ${providers.map((p) => `${p.type}@${p.version}`).join(", ")}`);
   const workspaceStates = [];
   const runtimeIndex = new Map;
-  let hadWorkspaces = workspaces.length > 0;
+  const hadWorkspaces = true;
   for (const ws of workspaces) {
     const runtimes = providers.map((p) => ({
       type: p.type,
@@ -21202,63 +20816,19 @@ async function startDaemon(profile, serverUrl) {
   function evictWorkspace(workspaceId) {
     const idx = workspaceStates.findIndex((ws2) => ws2.workspaceId === workspaceId);
     if (idx === -1)
-      return;
-    const ws = workspaceStates[idx];
-    for (const rid of ws.runtimeIds) {
-      runtimeIndex.delete(rid);
-    }
-    workspaceStates.splice(idx, 1);
-    health.setRuntimeCount(workspaceStates.reduce((sum, w) => sum + w.runtimeIds.length, 0));
-    try {
-      const cfg = loadCLIConfigForProfile(profile);
-      cfg.watched_workspaces = (cfg.watched_workspaces || []).filter((w) => w.id !== workspaceId);
-      saveCLIConfigForProfile(profile, cfg);
-    } catch {}
-    log10.info(`Workspace ${workspaceId} deleted server-side — removed from config`);
-  }
-  async function handleWorkspaceAdded(workspaceId, workspaceName, token) {
-    if (workspaceStates.some((ws) => ws.workspaceId === workspaceId)) {
-      log10.info(`Workspace ${workspaceId} already registered — ignoring workspace_added`);
-      return;
-    }
-    log10.info(`Workspace ${workspaceId} bound — registering...`);
-    const runtimes = providers.map((p) => ({ type: p.type, version: p.version }));
-    try {
-      const resp = await client.register(token, {
-        workspace_id: workspaceId,
-        daemon_id: config2.daemonId,
-        device_name: config2.deviceName,
-        cli_version: config2.cliVersion,
-        workspaces_root: config2.workspacesRoot,
-        runtimes
-      });
-      const runtimeIds = resp.runtimes.map((r) => r.id);
-      workspaceStates.push({ workspaceId, token, runtimeIds });
-      for (let i = 0;i < runtimeIds.length; i++) {
-        runtimeIndex.set(runtimeIds[i], {
-          id: runtimeIds[i],
-          workspaceId,
-          provider: providers[i].type
-        });
-      }
-      hadWorkspaces = true;
-      health.setRuntimeCount(workspaceStates.reduce((sum, w) => sum + w.runtimeIds.length, 0));
-      try {
-        const cfg = loadCLIConfigForProfile(profile);
-        const watched = cfg.watched_workspaces || [];
-        const registeredIdx = watched.findIndex((w) => w.token === token && w.status === "registered" && !w.id);
-        if (registeredIdx !== -1) {
-          watched[registeredIdx] = { id: workspaceId, name: workspaceName, token, status: "active", agent_ids: [] };
-        } else if (!watched.some((w) => w.id === workspaceId)) {
-          watched.push({ id: workspaceId, name: workspaceName, token, status: "active" });
-        }
-        cfg.watched_workspaces = watched;
-        saveCLIConfigForProfile(profile, cfg);
-      } catch {}
-      log10.info(`Workspace ${workspaceId} added via WS push — ${runtimeIds.length} runtime(s)`);
-    } catch (e) {
-      log10.error(`Failed to register workspace ${workspaceId} from WS push`, e);
+      return;
+    const ws = workspaceStates[idx];
+    for (const rid of ws.runtimeIds) {
+      runtimeIndex.delete(rid);
     }
+    workspaceStates.splice(idx, 1);
+    health.setRuntimeCount(workspaceStates.reduce((sum, w) => sum + w.runtimeIds.length, 0));
+    try {
+      const cfg = loadCLIConfigForProfile(profile);
+      cfg.watched_workspaces = (cfg.watched_workspaces || []).filter((w) => w.id !== workspaceId);
+      saveCLIConfigForProfile(profile, cfg);
+    } catch {}
+    log10.info(`Workspace ${workspaceId} deleted server-side — removed from config`);
   }
   const pollCycle = async () => {
     let remaining = config2.maxConcurrentTasks - activeTasks.size;
@@ -21448,69 +21018,24 @@ async function startDaemon(profile, serverUrl) {
         }
         break;
       }
-      case "daemon.workspace_added": {
-        handleWorkspaceAdded(msg.workspaceId, msg.workspaceName, msg.token);
-        break;
-      }
     }
   }
-  const wsToken = firstToken || standbyToken;
+  const wsToken = firstToken;
   let wsClient = wsToken ? new DaemonWsClient({
     serverURL: config2.serverURL,
     daemonId: config2.daemonId,
     machineToken: wsToken,
     onMessage: handleWsPush,
     onConnected: () => {
-      if (workspaceStates.length > 0) {
-        log10.info("WS connected — switching to low-frequency poll");
-        updatePollInterval(config2.wsPollInterval);
-      } else {
-        log10.info("WS connected in standby mode — awaiting workspace binding");
-      }
+      log10.info("WS connected — switching to low-frequency poll");
+      updatePollInterval(config2.wsPollInterval);
     },
     onDisconnected: () => {
-      if (workspaceStates.length > 0) {
-        log10.info("WS disconnected — reverting to high-frequency poll");
-        updatePollInterval(config2.pollInterval);
-      }
+      log10.info("WS disconnected — reverting to high-frequency poll");
+      updatePollInterval(config2.pollInterval);
     }
   }) : null;
   wsClient?.connect();
-  const STANDBY_POLL_MS = 30000;
-  let standbyPollTimer = null;
-  if (standbyToken && workspaceStates.length === 0) {
-    const standbyPollTick = async () => {
-      if (workspaceStates.length > 0) {
-        if (standbyPollTimer) {
-          clearInterval(standbyPollTimer);
-          standbyPollTimer = null;
-        }
-        return;
-      }
-      try {
-        const runtimes = providers.map((p) => ({ type: p.type, version: p.version }));
-        const resp = await client.checkStandby(standbyToken, {
-          daemon_id: config2.daemonId,
-          device_name: config2.deviceName,
-          cli_version: config2.cliVersion,
-          workspaces_root: config2.workspacesRoot,
-          runtimes
-        });
-        if (!resp.standby && resp.runtimes.length > 0 && resp.workspaceId) {
-          log10.info(`Standby poll: workspace ${resp.workspaceId} discovered via fallback`);
-          await handleWorkspaceAdded(resp.workspaceId, "", standbyToken);
-          if (standbyPollTimer) {
-            clearInterval(standbyPollTimer);
-            standbyPollTimer = null;
-          }
-        }
-      } catch (e) {
-        log10.debug("standby poll failed", { err: e instanceof Error ? e.message : String(e) });
-      }
-    };
-    standbyPollTick();
-    standbyPollTimer = setInterval(standbyPollTick, STANDBY_POLL_MS);
-  }
   const sweepTick = async () => {
     for (const ws of workspaceStates) {
       client.sweep(ws.token, config2.daemonId).catch((e) => {
@@ -21548,8 +21073,6 @@ async function startDaemon(profile, serverUrl) {
     clearInterval(pollTimer);
     clearInterval(heartbeatTimer);
     clearInterval(sweepTimer);
-    if (standbyPollTimer)
-      clearInterval(standbyPollTimer);
     stopSkillScanner();
     wsClient?.close();
     const shutdownMs = restartRequested ? 30000 : Number(process.env.ALOOK_SHUTDOWN_TIMEOUT_MS) || 5000;
@@ -21576,7 +21099,7 @@ async function startDaemon(profile, serverUrl) {
         } catch (e) {
           log10.error(`Failed to open daemon log file ${logPath}`, e);
         }
-        const child = spawn6(process.execPath, args, {
+        const child = spawn5(process.execPath, args, {
           detached: true,
           stdio: logFd != null ? ["ignore", logFd, logFd] : ["ignore", "ignore", "ignore"],
           env: resolveLoginShellEnv()
@@ -21598,7 +21121,7 @@ async function startDaemon(profile, serverUrl) {
     log10.info("SIGHUP received — reloading config...");
     try {
       const freshConfig = loadCLIConfigForProfile(profile);
-      const freshWorkspaces = (freshConfig.watched_workspaces || []).filter((ws) => ws.status !== "registered" && !!ws.id);
+      const freshWorkspaces = (freshConfig.watched_workspaces || []).filter((ws) => ws.status !== "deleted" && !!ws.id);
       const existingIds = new Set(workspaceStates.map((ws) => ws.workspaceId));
       const newWorkspaces = freshWorkspaces.filter((ws) => ws.token && !existingIds.has(ws.id));
       for (const ws of newWorkspaces) {
@@ -21628,7 +21151,6 @@ async function startDaemon(profile, serverUrl) {
         }
       }
       if (newWorkspaces.length > 0) {
-        hadWorkspaces = true;
         health.setRuntimeCount(workspaceStates.reduce((sum, w) => sum + w.runtimeIds.length, 0));
         if (!wsClient && workspaceStates.length > 0) {
           const token = workspaceStates[0].token;
@@ -21671,7 +21193,7 @@ function spawnSessionRunner(input) {
   } catch (e) {
     log10.error(`Failed to open log file ${logFilePath}`, e);
   }
-  const child = spawn6(process.execPath, [sessionRunnerPath, encoded], {
+  const child = spawn5(process.execPath, [sessionRunnerPath, encoded], {
     detached: true,
     stdio: fd != null ? ["ignore", fd, fd] : ["ignore", "ignore", "ignore"]
   });
@@ -21691,7 +21213,7 @@ function spawnMeetingRunner(input) {
   } catch (e) {
     log10.error(`Failed to open meeting log file ${logFilePath}`, e);
   }
-  const child = spawn6(process.execPath, [meetingRunnerPath, encoded], {
+  const child = spawn5(process.execPath, [meetingRunnerPath, encoded], {
     detached: true,
     stdio: fd != null ? ["ignore", fd, fd] : ["ignore", "ignore", "ignore"]
   });
@@ -21968,66 +21490,499 @@ async function handleTask(client, config2, runtimeIndex, task, token, activeTask
       }
     }
   }
-  const cliPath = provider === "claude" ? config2.claudePath : provider === "codex" ? config2.codexPath : config2.opencodePath;
-  const configModel = provider === "claude" ? config2.claudeModel : provider === "codex" ? config2.codexModel : config2.opencodeModel;
-  const agentModel = task.agent?.runtimeConfig?.model;
-  const model = typeof agentModel === "string" && agentModel ? agentModel : configModel;
-  const input = {
-    task,
-    provider,
-    cliPath,
-    model,
-    serverURL: config2.serverURL,
-    token,
-    workspacesRoot: config2.workspacesRoot,
-    agentTimeout: config2.agentTimeout,
-    messageInactivityTimeout: config2.messageInactivityTimeout,
-    ...promptOverride && { promptOverride }
-  };
-  const child = spawnSessionRunner(input);
-  child.on("close", async (code) => {
-    activeTasks.delete(task.id);
-    if (code !== 0) {
-      const agentBaseDir = join11(config2.workspacesRoot, task.workspaceId, task.agentId, "workdir");
-      const killIntent = readKillIntent(agentBaseDir, task.id);
-      if (killIntent) {
-        log10.info(`Task ${task.id} exited (${killIntent.reason}) — expected, skipping failTask`);
-        clearKillIntent(agentBaseDir, task.id);
+  const cliPath = provider === "claude" ? config2.claudePath : provider === "codex" ? config2.codexPath : config2.opencodePath;
+  const configModel = provider === "claude" ? config2.claudeModel : provider === "codex" ? config2.codexModel : config2.opencodeModel;
+  const agentModel = task.agent?.runtimeConfig?.model;
+  const model = typeof agentModel === "string" && agentModel ? agentModel : configModel;
+  const input = {
+    task,
+    provider,
+    cliPath,
+    model,
+    serverURL: config2.serverURL,
+    token,
+    workspacesRoot: config2.workspacesRoot,
+    agentTimeout: config2.agentTimeout,
+    messageInactivityTimeout: config2.messageInactivityTimeout,
+    ...promptOverride && { promptOverride }
+  };
+  const child = spawnSessionRunner(input);
+  child.on("close", async (code) => {
+    activeTasks.delete(task.id);
+    if (code !== 0) {
+      const agentBaseDir = join11(config2.workspacesRoot, task.workspaceId, task.agentId, "workdir");
+      const killIntent = readKillIntent(agentBaseDir, task.id);
+      if (killIntent) {
+        log10.info(`Task ${task.id} exited (${killIntent.reason}) — expected, skipping failTask`);
+        clearKillIntent(agentBaseDir, task.id);
+        return;
+      }
+      const errorMsg = code === null ? "killed by signal" : `session-runner exited with code ${code}`;
+      try {
+        await client.failTask(token, task.id, errorMsg);
+        log10.warn(`session-runner crashed (${errorMsg}, task ${task.id})`);
+        const timelineDir = join11(agentBaseDir, ".context_timeline");
+        updateEntry(timelineDir, task.id, (entry) => {
+          entry.pid = null;
+          entry.status = "failed";
+          entry.errmsg = errorMsg;
+        });
+      } catch (e) {
+        if (isClientError3(e)) {
+          log10.info(`Task ${task.id} exited (already terminal) — session-runner handled cleanup`);
+          return;
+        }
+        log10.error(`Failed to report crash for task ${task.id}`, e);
+        try {
+          await writeMarkerFile(config2.workspacesRoot, {
+            taskId: task.id,
+            type: "fail",
+            payload: { error: errorMsg },
+            token,
+            serverURL: config2.serverURL,
+            createdAt: new Date().toISOString()
+          });
+        } catch {}
+      }
+    }
+  });
+  log10.info(`Task ${task.id} dispatched to session-runner (pid=${child.pid})`);
+}
+
+// lib/runtimes.ts
+import { execSync as execSync5 } from "child_process";
+function isCommandAvailable2(cmd) {
+  try {
+    const check2 = process.platform === "win32" ? `where ${cmd}` : `which ${cmd}`;
+    execSync5(check2, { stdio: "ignore" });
+    return true;
+  } catch {
+    return false;
+  }
+}
+function detectRuntimes() {
+  const found = [];
+  for (const type of ["claude", "codex", "opencode"]) {
+    if (isCommandAvailable2(type)) {
+      let version3 = "";
+      try {
+        version3 = execSync5(`${type} --version`, { encoding: "utf-8" }).trim();
+      } catch {}
+      found.push({ type, version: version3 });
+    }
+  }
+  return found;
+}
+
+// lib/activate.ts
+async function activateAndSave(opts) {
+  const { token, serverUrl, profile } = opts;
+  console.log("Scanning for AI runtimes...");
+  const runtimes = detectRuntimes();
+  if (runtimes.length === 0) {
+    console.error("Error: no runtimes found. Install claude, codex, or opencode first.");
+    process.exit(1);
+  }
+  console.log(`Found: ${runtimes.map((r) => r.type).join(", ")}`);
+  const host = hostname4();
+  console.log("Registering machine...");
+  let activateResp;
+  try {
+    const res = await fetch(`${serverUrl}/api/machine-tokens/activate`, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({ token, hostname: host, runtimes })
+    });
+    if (!res.ok) {
+      const text2 = await res.text();
+      console.error(`Error: registration failed (${res.status}): ${text2}`);
+      process.exit(1);
+    }
+    activateResp = await res.json();
+  } catch (err) {
+    console.error(`Error: failed to activate: ${err instanceof Error ? err.message : err}`);
+    process.exit(1);
+  }
+  const client = new APIClient(serverUrl, token);
+  let workspaces;
+  try {
+    workspaces = await client.getJSON("/api/workspaces");
+  } catch (err) {
+    console.error(`Error: failed to fetch workspaces: ${err instanceof Error ? err.message : err}`);
+    process.exit(1);
+  }
+  if (!workspaces.length) {
+    console.error("Error: no workspaces found for this user");
+    process.exit(1);
+  }
+  const ws = workspaces.find((w) => w.id === activateResp.workspace_id) || workspaces[0];
+  const wsClient = new APIClient(serverUrl, token, ws.id);
+  let agentIds = [];
+  try {
+    const agents = await wsClient.getJSON(`/api/agents?workspace_id=${ws.id}`);
+    agentIds = agents.map((a) => a.id);
+  } catch {}
+  const existing = loadCLIConfigForProfile(profile);
+  const watched = existing.watched_workspaces || [];
+  const idx = watched.findIndex((w) => w.id === ws.id);
+  if (idx >= 0) {
+    watched[idx] = { id: ws.id, name: ws.name, token, status: "active", agent_ids: agentIds };
+  } else {
+    watched.push({ id: ws.id, name: ws.name, token, status: "active", agent_ids: agentIds });
+  }
+  saveCLIConfigForProfile(profile, {
+    server_url: serverUrl,
+    watched_workspaces: watched
+  });
+  const daemonPid = readDaemonPid(profile);
+  if (daemonPid && isProcessAlive(daemonPid)) {
+    try {
+      process.kill(daemonPid, "SIGHUP");
+      console.log(`
+Daemon (pid ${daemonPid}) notified — workspace will be active shortly.`);
+    } catch {
+      console.log(`
+Daemon is running but could not be notified. Restart it to pick up the new workspace.`);
+    }
+  } else if (isDev() && process.stdout.isTTY) {
+    console.log(`
+Starting daemon in foreground...`);
+    await startDaemon(profile, serverUrl);
+  } else {
+    console.log(`
+Starting daemon...`);
+    try {
+      const entry = process.argv[1];
+      const args = [entry];
+      if (profile)
+        args.push("--profile", profile);
+      args.push("daemon", "start", "--foreground");
+      const logPath = daemonLogFilePath();
+      mkdirSync9(dirname4(logPath), { recursive: true, mode: 448 });
+      const logFd = openSync2(logPath, "a", 384);
+      const child = spawn6(process.execPath, args, {
+        detached: true,
+        stdio: ["ignore", logFd, logFd],
+        env: resolveLoginShellEnv()
+      });
+      child.unref();
+      closeSync2(logFd);
+      console.log("Daemon started in background.");
+      console.log(`Logs: ${logPath}`);
+    } catch {
+      console.log(`Failed to auto-start daemon. Run '${cmdPrefix()} daemon start' manually.`);
+    }
+  }
+  return {
+    workspaceId: ws.id,
+    workspaceName: ws.name,
+    runtimeProviders: activateResp.runtimes.map((r) => r.provider)
+  };
+}
+
+// commands/register.ts
+function registerCommand() {
+  const cmd = new Command("register").description("Register CLI with your Alook account").requiredOption("--token <token>", "API token (starts with al_)").option("--server <url>", "Server URL").option("--profile <name>", "Profile name").action(async (opts, command) => {
+    const token = opts.token;
+    const profile = opts.profile || command.parent?.opts().profile;
+    const serverUrl = opts.server || command.parent?.opts().server || getServerUrl();
+    if (!token) {
+      console.error(`Error: --token is required
+Usage: ${cmdPrefix()} register --token <token>`);
+      process.exit(1);
+    }
+    if (!token.startsWith("al_")) {
+      console.error("Error: invalid token format: must start with 'al_'");
+      process.exit(1);
+    }
+    const client = new APIClient(serverUrl, token);
+    let me;
+    try {
+      me = await client.getJSON("/api/me");
+    } catch (err) {
+      console.error(`Error: failed to verify token: ${err instanceof Error ? err.message : err}`);
+      process.exit(1);
+    }
+    const result = await activateAndSave({ token, serverUrl, profile });
+    console.log(`
+Registered as ${me.email}`);
+    console.log(`Workspace: ${result.workspaceName} (${result.workspaceId})`);
+    console.log(`Runtimes: ${result.runtimeProviders.join(", ")}`);
+  });
+  return cmd;
+}
+
+// commands/login.ts
+import { Command as Command2 } from "commander";
+import { fork, spawn as spawn7 } from "child_process";
+import { fileURLToPath as fileURLToPath3 } from "url";
+var DEVICE_CLIENT_ID = process.env.ALOOK_DEVICE_CLIENT_ID || "alook-cli";
+function openBrowser(url2) {
+  try {
+    const cmd = process.platform === "darwin" ? "open" : process.platform === "linux" ? "xdg-open" : process.platform === "win32" ? "start" : null;
+    if (cmd) {
+      const args = process.platform === "win32" ? ["", url2] : [url2];
+      spawn7(cmd, args, { stdio: "ignore", detached: true }).unref();
+    }
+  } catch {}
+}
+function sleep2(ms) {
+  return new Promise((resolve2) => setTimeout(resolve2, ms));
+}
+function syncWorkspacesToConfig(serverWorkspaces, profile, sessionToken) {
+  const cfg = loadCLIConfigForProfile(profile);
+  const watched = cfg.watched_workspaces || [];
+  const serverIds = new Set(serverWorkspaces.map((w) => w.id));
+  for (const sw of serverWorkspaces) {
+    const existing = watched.find((w) => w.id === sw.id);
+    if (existing) {
+      existing.status = "active";
+      existing.name = sw.name;
+    } else {
+      watched.push({ id: sw.id, name: sw.name, token: "", status: "active", agent_ids: [] });
+    }
+  }
+  for (const w of watched) {
+    if (w.id && !serverIds.has(w.id)) {
+      w.status = "deleted";
+    }
+  }
+  saveCLIConfigForProfile(profile, {
+    server_url: cfg.server_url,
+    session_token: sessionToken ?? cfg.session_token,
+    watched_workspaces: watched
+  });
+}
+async function pollAndActivate(opts) {
+  const { deviceCode, expiresIn, serverUrl, profile } = opts;
+  let interval = opts.interval;
+  const expiresAt = Date.now() + expiresIn * 1000;
+  let tokenResp;
+  while (Date.now() < expiresAt) {
+    await sleep2(interval);
+    try {
+      const res = await fetch(`${serverUrl}/api/auth/device/token`, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({
+          grant_type: "urn:ietf:params:oauth:grant-type:device_code",
+          device_code: deviceCode,
+          client_id: DEVICE_CLIENT_ID
+        })
+      });
+      if (res.ok) {
+        tokenResp = await res.json();
+        break;
+      }
+      const errBody = await res.json();
+      if (errBody.error === "slow_down") {
+        interval += 5000;
+      } else if (errBody.error === "authorization_pending") {} else if (errBody.error === "expired_token") {
+        console.error("Error: device code expired. Please run login again.");
+        process.exit(1);
+      } else if (errBody.error === "access_denied") {
+        console.error("Error: authorization was denied.");
+        process.exit(1);
+      } else {
+        console.error(`Error: unexpected error: ${errBody.error_description || errBody.error}`);
+        process.exit(1);
+      }
+    } catch {
+      console.error("Error: network request failed during polling.");
+      process.exit(1);
+    }
+  }
+  if (!tokenResp) {
+    console.error("Error: device code expired (timed out). Please run login again.");
+    process.exit(1);
+  }
+  const sessionToken = tokenResp.access_token;
+  const client = new APIClient(serverUrl, sessionToken);
+  let email3 = "";
+  try {
+    const me = await client.getJSON("/api/me");
+    email3 = me.email;
+  } catch {}
+  let serverWorkspaces = [];
+  try {
+    serverWorkspaces = await client.getJSON("/api/workspaces");
+  } catch {}
+  syncWorkspacesToConfig(serverWorkspaces, profile, sessionToken);
+  let workspaceId = serverWorkspaces.length > 0 ? serverWorkspaces[0].id : "";
+  if (!workspaceId) {
+    try {
+      const newWs = await client.postJSON("/api/workspaces", {
+        name: "Personal",
+        slug: email3.split("@")[0]?.toLowerCase().replace(/[^a-z0-9-]/g, "-").slice(0, 48) || "personal"
+      });
+      workspaceId = newWs.id;
+    } catch (err) {
+      console.error(`Error: failed to create workspace: ${err instanceof Error ? err.message : err}`);
+      process.exit(1);
+    }
+  }
+  let machineToken2;
+  try {
+    const mtResp = await client.postJSON(`/api/machine-tokens?workspace_id=${workspaceId}`);
+    machineToken2 = mtResp.token;
+  } catch {
+    process.exit(1);
+  }
+  const result = await activateAndSave({ token: machineToken2, serverUrl, profile });
+  if (email3) {
+    console.log(`
+Logged in as ${email3}`);
+  }
+  console.log(`Workspace: ${result.workspaceName} (${result.workspaceId})`);
+  console.log(`Runtimes: ${result.runtimeProviders.join(", ")}`);
+}
+if (process.argv.includes("--__login-poll")) {
+  const idx = process.argv.indexOf("--__login-poll");
+  let data;
+  try {
+    data = JSON.parse(process.argv[idx + 1]);
+  } catch {
+    console.error("Error: invalid poll data");
+    process.exit(1);
+  }
+  pollAndActivate(data).catch(() => process.exit(1));
+}
+async function checkExistingAuth(serverUrl, profile) {
+  const config2 = loadCLIConfigForProfile(profile);
+  const sessionToken = config2.session_token;
+  const workspaces = config2.watched_workspaces || [];
+  const ws = workspaces[0];
+  const authToken = sessionToken || ws?.token;
+  if (!authToken) {
+    return { valid: false };
+  }
+  try {
+    const res = await fetch(`${serverUrl}/api/workspaces`, {
+      headers: { Authorization: `Bearer ${authToken}` }
+    });
+    if (!res.ok) {
+      return { valid: false };
+    }
+    const serverWorkspaces = await res.json();
+    const hasValidWorkspace = workspaces.some((w) => w.id && w.status !== "deleted");
+    if (!hasValidWorkspace && serverWorkspaces.length > 0) {
+      syncWorkspacesToConfig(serverWorkspaces, profile);
+    }
+    let email3;
+    try {
+      const meRes = await fetch(`${serverUrl}/api/me`, {
+        headers: { Authorization: `Bearer ${authToken}` }
+      });
+      if (meRes.ok) {
+        const me = await meRes.json();
+        email3 = me.email;
+      }
+    } catch {}
+    const workspaceName = (serverWorkspaces.length > 0 ? serverWorkspaces[0].name : undefined) || ws?.name || undefined;
+    return { valid: true, email: email3, workspaceName };
+  } catch {
+    return { valid: false };
+  }
+}
+function loginCommand() {
+  const cmd = new Command2("login").description("Log in to Alook via browser (device code flow)").option("--server <url>", "Server URL").option("--profile <name>", "Profile name").option("--force", "Re-authenticate even if already logged in").action(async (opts, command) => {
+    const profile = opts.profile || command.parent?.opts().profile;
+    const serverUrl = opts.server || command.parent?.opts().server || getServerUrl();
+    if (!opts.force) {
+      const existing = await checkExistingAuth(serverUrl, profile);
+      if (existing.valid) {
+        const parts = ["Already logged in"];
+        if (existing.email)
+          parts[0] += ` as ${existing.email}`;
+        if (existing.workspaceName)
+          parts[0] += ` (workspace: ${existing.workspaceName})`;
+        parts[0] += ".";
+        console.log(parts[0]);
         return;
       }
-      const errorMsg = code === null ? "killed by signal" : `session-runner exited with code ${code}`;
-      try {
-        await client.failTask(token, task.id, errorMsg);
-        log10.warn(`session-runner crashed (${errorMsg}, task ${task.id})`);
-        const timelineDir = join11(agentBaseDir, ".context_timeline");
-        updateEntry(timelineDir, task.id, (entry) => {
-          entry.pid = null;
-          entry.status = "failed";
-          entry.errmsg = errorMsg;
-        });
-      } catch (e) {
-        if (isClientError3(e)) {
-          log10.info(`Task ${task.id} exited (already terminal) — session-runner handled cleanup`);
-          return;
-        }
-        log10.error(`Failed to report crash for task ${task.id}`, e);
-        try {
-          await writeMarkerFile(config2.workspacesRoot, {
-            taskId: task.id,
-            type: "fail",
-            payload: { error: errorMsg },
-            token,
-            serverURL: config2.serverURL,
-            createdAt: new Date().toISOString()
-          });
-        } catch {}
+    }
+    console.log("Requesting device code...");
+    let deviceResp;
+    try {
+      const res = await fetch(`${serverUrl}/api/auth/device/code`, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({ client_id: DEVICE_CLIENT_ID })
+      });
+      if (!res.ok) {
+        const text2 = await res.text();
+        console.error(`Error: failed to get device code (${res.status}): ${text2}`);
+        process.exit(1);
       }
+      deviceResp = await res.json();
+    } catch (err) {
+      console.error(`Error: failed to request device code: ${err instanceof Error ? err.message : err}`);
+      process.exit(1);
+    }
+    const verificationUrl = deviceResp.verification_uri_complete || deviceResp.verification_uri;
+    console.log();
+    console.log(`  Open this URL in your browser:`);
+    console.log(`  ${verificationUrl}`);
+    console.log();
+    console.log(`  Enter code: ${deviceResp.user_code}`);
+    console.log();
+    if (!process.stdout.isTTY) {
+      const pollData = JSON.stringify({
+        deviceCode: deviceResp.device_code,
+        interval: (deviceResp.interval || 5) * 1000,
+        expiresIn: deviceResp.expires_in,
+        serverUrl,
+        profile
+      });
+      const thisFile = fileURLToPath3(import.meta.url);
+      const child = fork(thisFile, ["--__login-poll", pollData], {
+        detached: true,
+        stdio: "ignore"
+      });
+      child.unref();
+      console.log("  Polling for authorization in the background (timeout: 5min).");
+      console.log(`  Once approved, run \`${cmdPrefix()} status\` to verify.`);
+      return;
+    }
+    openBrowser(verificationUrl);
+    console.log("  (Browser opened automatically)");
+    console.log();
+    console.log("Waiting for authorization...");
+    await pollAndActivate({
+      deviceCode: deviceResp.device_code,
+      interval: (deviceResp.interval || 5) * 1000,
+      expiresIn: deviceResp.expires_in,
+      serverUrl,
+      profile
+    });
+  });
+  return cmd;
+}
+
+// commands/status.ts
+import { Command as Command3 } from "commander";
+function statusCommand() {
+  const cmd = new Command3("status").description("Show registration status").action((_opts, command) => {
+    const profile = command.parent?.opts().profile;
+    const cfg = loadCLIConfigForProfile(profile);
+    const ws = cfg.watched_workspaces?.[0];
+    if (!ws?.token) {
+      console.log("Not registered");
+      console.log(`Run '${cmdPrefix()} register --token <token>' to register.`);
+      return;
     }
+    console.log("Status: Registered");
+    console.log(`Server: ${cfg.server_url}`);
+    console.log(`Workspace: ${ws.name} (${ws.id})`);
   });
-  log10.info(`Task ${task.id} dispatched to session-runner (pid=${child.pid})`);
+  return cmd;
 }
 
 // commands/daemon.ts
+import { Command as Command4 } from "commander";
+import { spawn as spawn8 } from "child_process";
+import { openSync as openSync3, closeSync as closeSync3, mkdirSync as mkdirSync10 } from "fs";
+import { dirname as dirname5 } from "path";
 var PID_POLL_INTERVAL_MS = 200;
 var PID_POLL_TIMEOUT_MS = 2000;
 var STOP_POLL_INTERVAL_MS = 200;
@@ -22062,15 +22017,15 @@ async function startInBackground(profile, serverUrl) {
     return;
   }
   const logPath = daemonLogFilePath();
-  mkdirSync9(dirname4(logPath), { recursive: true, mode: 448 });
-  const logFd = openSync2(logPath, "a", 384);
-  const child = spawn7(process.execPath, buildChildArgs(profile, serverUrl), {
+  mkdirSync10(dirname5(logPath), { recursive: true, mode: 448 });
+  const logFd = openSync3(logPath, "a", 384);
+  const child = spawn8(process.execPath, buildChildArgs(profile, serverUrl), {
     detached: true,
     stdio: ["ignore", logFd, logFd],
     env: resolveLoginShellEnv()
   });
   child.unref();
-  closeSync2(logFd);
+  closeSync3(logFd);
   const pid = await waitForPidFile(profile);
   if (pid != null) {
     console.log(`Daemon started (pid=${pid})`);
@@ -22183,7 +22138,7 @@ function configCommand() {
 
 // commands/email.ts
 import { Command as Command6 } from "commander";
-import { writeFileSync as writeFileSync8, mkdirSync as mkdirSync10, readFileSync as readFileSync11 } from "fs";
+import { writeFileSync as writeFileSync8, mkdirSync as mkdirSync11, readFileSync as readFileSync11 } from "fs";
 import { join as join12 } from "path";
 import PostalMime from "postal-mime";
 
@@ -22400,11 +22355,11 @@ function emailCommand() {
         printJSON(emails2);
         return;
       }
-      mkdirSync10(emailDir_base, { recursive: true });
+      mkdirSync11(emailDir_base, { recursive: true });
       const downloadedPaths = [];
       for (const email3 of emails2) {
         const emailDir = join12(emailDir_base, email3.id);
-        mkdirSync10(emailDir, { recursive: true });
+        mkdirSync11(emailDir, { recursive: true });
         const metadata = {
           id: email3.id,
           from: email3.from_email,
@@ -22443,7 +22398,7 @@ function emailCommand() {
         }
         if (parsed.attachments && parsed.attachments.length > 0) {
           const attDir = join12(emailDir, "attachments");
-          mkdirSync10(attDir, { recursive: true });
+          mkdirSync11(attDir, { recursive: true });
           const usedFilenames = new Set;
           for (let i = 0;i < parsed.attachments.length; i++) {
             const att = parsed.attachments[i];
@@ -23332,21 +23287,11 @@ function workspaceCommand() {
       console.error("Error: JSON must contain a 'members' array with at least one member");
       process.exit(1);
     }
+    const parentOpts = getRootOpts(command);
     let targetWorkspaceId = resolvedWorkspaceId;
     if (!targetWorkspaceId) {
       const resolved = await resolveWorkspaceId(client, opts.name || config2.name);
       targetWorkspaceId = resolved.workspaceId;
-      const parentOpts = getRootOpts(command);
-      const cfg = loadCLIConfigForProfile(parentOpts.profile);
-      const registeredWs = cfg.watched_workspaces?.find((w) => w.status === "registered" && !w.id);
-      if (registeredWs) {
-        try {
-          await client.postJSON("/api/machine-tokens/bind-workspace", { workspace_id: targetWorkspaceId });
-          console.log("Machine token bound to workspace. Waiting for runtime registration...");
-        } catch (err) {
-          console.warn(`Warning: bind-workspace failed: ${err instanceof Error ? err.message : err}`);
-        }
-      }
       let runtimes2 = [];
       const wsClient = new APIClient(serverUrl, token, targetWorkspaceId);
       for (let attempt = 0;attempt < 15; attempt++) {