@centralu/darwin-arm64 0.1.0-beta.12 → 0.1.0-beta.13

package/Centralu.app/Contents/Resources/resources/host/main.mjs

@@ -42881,12 +42881,12 @@ new Anthropic({ apiKey, dangerouslyAllowBrowser: true });
 import { parseArgs } from "node:util";
 import { randomBytes as randomBytes6 } from "node:crypto";
 import { homedir as homedir11 } from "node:os";
-import { dirname as dirname11, join as join31 } from "node:path";
+import { dirname as dirname11, join as join30 } from "node:path";
 import { appendFileSync as appendFileSync2, mkdirSync as mkdirSync10, writeSync as writeSync3 } from "node:fs";
 
 // packages/protocol/src/brand.ts
 var APP_NAME = "Centralu";
-var APP_VERSION = "0.1.0-beta.12";
+var APP_VERSION = "0.1.0-beta.13";
 var APP_SLUG = "centralu";
 var CLIENT_INFO = { name: APP_SLUG, title: APP_NAME, version: APP_VERSION };
 var DATA_DIR = ".centralu";
@@ -58125,7 +58125,7 @@ function parseUiPreferences(raw) {
 // packages/protocol/src/machines.ts
 var MACHINE_ID_RE = /^[a-z][a-z0-9-]{0,31}$/;
 var MachineId = external_exports.string().regex(MACHINE_ID_RE, "Not a machine id");
-var MachineStatus = external_exports.enum(["connecting", "connected", "unreachable", "not_running", "versions_differ", "refused"]);
+var MachineStatus = external_exports.enum(["connecting", "connected", "unreachable", "not_running", "versions_differ", "refused", "starting"]);
 var MachineSide = external_exports.object({
   version: external_exports.string(),
   protocolVersion: external_exports.number().int(),
@@ -58170,7 +58170,14 @@ var MachineInfo = external_exports.object({
    * remote machine (phase 2) need them to match (docs/agent-host.md §4.7).
    */
   localPort: external_exports.number().int().nullable().default(null),
-  sameLocalPort: external_exports.boolean().default(false)
+  sameLocalPort: external_exports.boolean().default(false),
+  /**
+   * The hub started the host there, because it found none running (plan §10.9, decision 7), and how:
+   * `detached` lives on whatever happens to the link; `link_bound` runs in the link's own ssh session,
+   * because that machine blocks starting a process through WMI, and ends when the link does (`note`
+   * says why). Null when the host was already running. Additive; an older hub sends nothing
+   */
+  hostStarted: external_exports.object({ how: external_exports.enum(["detached", "link_bound"]).catch("detached"), at: external_exports.number(), note: external_exports.string().nullable().default(null) }).nullable().catch(null).default(null)
 });
 
 // packages/protocol/src/events.ts
@@ -60747,6 +60754,14 @@ var RpcMethods = {
    * question comes again. Refused when the protocols differ.
    */
   "machines.acceptVersions": { params: external_exports.object({ machineId: MachineId }), result: MachineInfo },
+  /**
+   * Stops this host the way a signal would: agents, terminals, command runs and app processes
+   * stopped in order, the store closed, then exit. For `centralu serve --stop` (docs/agent-host.md
+   * §4.7): on Windows a launcher can only be killed, and killing it ends the host without its
+   * shutdown. Answers before the host starts to leave. Refused by a host under the app's keeper,
+   * which the app stops (and which would only start the host again).
+   */
+  "host.stop": { params: external_exports.object({}), result: external_exports.object({ ok: external_exports.literal(true) }) },
   /**
    * The trash (#204). Only the person reaches these: the RPC is the UI's channel, and neither the agents' tools nor
    * the apps' broker has a trash or purge verb. `agents.deleteSession` is the way in.
@@ -62354,15 +62369,15 @@ function buildViewCsp(csp) {
   const frame = sanitizeDomains(csp?.frameDomains);
   const base2 = sanitizeDomains(csp?.baseUriDomains);
   const r = resource.kept.join(" ");
-  const join32 = (...parts) => parts.filter(Boolean).join(" ");
+  const join31 = (...parts) => parts.filter(Boolean).join(" ");
   const policy = [
     "default-src 'none'",
-    `script-src ${join32("'unsafe-inline'", r)}`,
-    `style-src ${join32("'unsafe-inline'", r)}`,
-    `img-src ${join32("data: blob:", r)}`,
-    `font-src ${join32("data:", r)}`,
-    `media-src ${join32("data: blob:", r)}`,
-    `worker-src ${join32("blob:", r)}`,
+    `script-src ${join31("'unsafe-inline'", r)}`,
+    `style-src ${join31("'unsafe-inline'", r)}`,
+    `img-src ${join31("data: blob:", r)}`,
+    `font-src ${join31("data:", r)}`,
+    `media-src ${join31("data: blob:", r)}`,
+    `worker-src ${join31("blob:", r)}`,
     `connect-src ${connect2.kept.length ? connect2.kept.join(" ") : "'none'"}`,
     `frame-src ${frame.kept.length ? frame.kept.join(" ") : "'none'"}`,
     "form-action 'none'",
@@ -62891,6 +62906,7 @@ import { devNull } from "node:os";
 import { promisify } from "node:util";
 
 // packages/agent-host/src/tool-launch.ts
+import { execFileSync as execFileSync2 } from "node:child_process";
 import { existsSync as existsSync3, readFileSync } from "node:fs";
 import { win32 as win323 } from "node:path";
 
@@ -62987,7 +63003,14 @@ var realDeps = () => ({
   platform: process.platform,
   read: (path) => readFileSync(path, "utf8"),
   exists: existsSync3,
-  node: process.execPath
+  node: process.execPath,
+  runJs: (script) => {
+    try {
+      return execFileSync2(process.execPath, [script], { encoding: "utf8", timeout: 1e4, windowsHide: true });
+    } catch {
+      return null;
+    }
+  }
 });
 function launchFor(path, deps = realDeps()) {
   const plain = { command: path, args: [] };
@@ -62998,10 +63021,10 @@ function launchFor(path, deps = realDeps()) {
   } catch {
     return plain;
   }
+  const dir = win323.dirname(path);
   const relative10 = shimTarget(text2);
-  if (!relative10) return plain;
-  const target = win323.resolve(win323.dirname(path), relative10);
-  if (!deps.exists(target)) return plain;
+  const target = relative10 ? win323.resolve(dir, relative10) : nodeShimEntry(text2, dir, deps);
+  if (!target || !deps.exists(target)) return plain;
   if (/\.(c|m)?js$/i.test(target)) return { command: deps.node, args: [target] };
   if (/\.exe$/i.test(target)) return { command: target, args: [] };
   return plain;
@@ -63014,6 +63037,20 @@ function shimTarget(text2) {
   }
   return null;
 }
+function nodeShimEntry(text2, dir, deps) {
+  const started = /^\s*"%NODE_EXE%"\s+"%(\w+)%"\s+%\*\s*$/m.exec(text2)?.[1];
+  if (!started) return null;
+  const set3 = (name) => new RegExp(`^\\s*SET\\s+"${name}=%~dp0\\\\?([^"%]+)"`, "im").exec(text2)?.[1]?.trim() ?? null;
+  const relative10 = set3(started);
+  if (!relative10) return null;
+  const base2 = win323.resolve(dir, relative10);
+  const prefixJs = set3("NPM_PREFIX_JS");
+  if (!prefixJs || !deps.runJs) return base2;
+  const prefix = deps.runJs(win323.resolve(dir, prefixJs))?.trim().split(/\r?\n/).pop()?.trim();
+  if (!prefix || !win323.isAbsolute(prefix)) return base2;
+  const inPrefix = win323.join(prefix, "node_modules", "npm", "bin", win323.basename(base2));
+  return deps.exists(inPrefix) ? inPrefix : base2;
+}
 function resolveCommand(command, env = process.env, deps = realDeps()) {
   if (deps.platform !== "win32") return { command, args: [] };
   if (/[\\/]/.test(command)) return launchFor(command, deps);
@@ -63103,6 +63140,31 @@ async function runGit(cwd, args, opts = {}) {
   return stdout;
 }
 
+// packages/agent-host/src/os.ts
+import { homedir as homedir3 } from "node:os";
+import { posix as posix2, win32 as win324 } from "node:path";
+var HOST_PLATFORM = process.platform;
+function hasPs(platform = HOST_PLATFORM) {
+  return platform !== "win32";
+}
+function clonesFiles(platform = HOST_PLATFORM) {
+  return platform === "darwin";
+}
+function locksRunningPrograms(platform = HOST_PLATFORM) {
+  return platform === "win32";
+}
+function pathsOf(platform = HOST_PLATFORM) {
+  return platform === "win32" ? win324 : posix2;
+}
+function installedCopyPath(platform = HOST_PLATFORM, env = process.env, home = homedir3()) {
+  if (platform === "darwin") return `/Applications/${APP_NAME}.app`;
+  if (platform === "win32") {
+    const local = env.LOCALAPPDATA || win324.join(home, "AppData", "Local");
+    return win324.join(local, "Programs", APP_NAME);
+  }
+  return posix2.join(home, ".local/share/applications", `${APP_SLUG}.desktop`);
+}
+
 // packages/agent-host/src/dev-services/fs.ts
 var MAX_TEXT = 2e6;
 var MAX_IMAGE_PREVIEW = IMAGE_PREVIEW_MAX_BYTES;
@@ -63276,7 +63338,7 @@ async function copyTree(src, dst, clone2 = cloneTree) {
   cpSync(src, dst, { recursive: true, verbatimSymlinks: true });
 }
 async function cloneTree(src, dst) {
-  if (process.platform !== "darwin") return false;
+  if (!clonesFiles()) return false;
   return new Promise((done) => {
     const p = spawn("/bin/cp", ["-Rc", src, dst], { stdio: "ignore" });
     p.on("error", () => done(false));
@@ -78556,7 +78618,7 @@ var SseError = class extends Error {
 };
 
 // packages/agent-host/src/dev-services/kill-tree.ts
-import { execFile as execFile2, execFileSync as execFileSync2 } from "node:child_process";
+import { execFile as execFile2, execFileSync as execFileSync3 } from "node:child_process";
 import { join as join6 } from "node:path";
 import { promisify as promisify2 } from "node:util";
 var KILL_GRACE_MS = 3e3;
@@ -78614,16 +78676,19 @@ function survivorTargets(rows, first, self2) {
 }
 function snapshot() {
   try {
-    return parsePs(execFileSync2("ps", ["-A", "-o", "pid=,ppid=,pgid="], { encoding: "utf8", timeout: 2e3 }));
+    return parsePs(execFileSync3("ps", ["-A", "-o", "pid=,ppid=,pgid="], { encoding: "utf8", timeout: 2e3 }));
   } catch {
     return [];
   }
 }
+function hasProcessGroups(platform = process.platform) {
+  return platform !== "win32";
+}
 var REAL_OS = {
   platform: process.platform,
   taskkill: (pid) => {
     const exe = join6(process.env.SystemRoot ?? "C:\\Windows", "System32", "taskkill.exe");
-    execFileSync2(exe, ["/PID", String(pid), "/T", "/F"], { stdio: "ignore", timeout: 5e3, windowsHide: true });
+    execFileSync3(exe, ["/PID", String(pid), "/T", "/F"], { stdio: "ignore", timeout: 5e3, windowsHide: true });
   }
 };
 function shootWindows(handle, os2) {
@@ -79009,7 +79074,7 @@ var AppProcess = class _AppProcess {
        * has no groups to gain, and its tree is ended with `taskkill /T` (kill-tree.ts). Attached and
        * hidden, the app shares the host's windowless console.
        */
-      detached: process.platform !== "win32",
+      detached: hasProcessGroups(),
       windowsHide: true
     });
     const proc = new _AppProcess(child, child.stdio[3] ?? null, log, spec.probeTimeoutMs, spawnedAt);
@@ -79076,7 +79141,7 @@ var AppProcess = class _AppProcess {
         this.signalOwnGroup();
       }
       this.fd3?.destroy();
-      const leftovers = process.platform === "win32" && !this.alive ? this.collectLeftovers() : null;
+      const leftovers = !hasProcessGroups() && !this.alive ? this.collectLeftovers() : null;
       this.leftovers = leftovers;
       if (leftovers && opts.awaitTree) await leftovers;
       if (leftovers && !opts.awaitTree) void leftovers.finally(() => this.log.close());
@@ -99264,7 +99329,7 @@ function orchestratorMemory(reader, sessionId) {
 }
 
 // packages/agent-host/src/sessions/manager.ts
-import { homedir as homedir4 } from "node:os";
+import { homedir as homedir5 } from "node:os";
 import { basename as basename2, isAbsolute as isAbsolute6, join as join20, relative as relative7, resolve as resolve4, sep as sep7 } from "node:path";
 import { existsSync as existsSync14, statSync as statSync9 } from "node:fs";
 import { exec as exec3 } from "node:child_process";
@@ -102482,8 +102547,8 @@ async function sweepAttachments(maxBytes = ATTACHMENTS_MAX_BYTES) {
 // packages/agent-host/src/dev-services/message-image.ts
 import { constants as constants5 } from "node:fs";
 import { open as open2, realpath as realpath3 } from "node:fs/promises";
-import { homedir as homedir3 } from "node:os";
-import { posix as posix2, sep as sep6, win32 as win324 } from "node:path";
+import { homedir as homedir4 } from "node:os";
+import { posix as posix3, sep as sep6, win32 as win325 } from "node:path";
 import { fileURLToPath as fileURLToPath4 } from "node:url";
 var OPEN_FLAGS = constants5.O_RDONLY | constants5.O_NONBLOCK | (constants5.O_NOFOLLOW ?? 0);
 var MESSAGE_IMAGE_KINDS = "PNG, JPEG, GIF or WebP";
@@ -102518,7 +102583,7 @@ function mentions(text2, written) {
   }
   return false;
 }
-function resolveWrittenPath(written, cwd, home = homedir3(), p = sep6 === "\\" ? win324 : posix2) {
+function resolveWrittenPath(written, cwd, home = homedir4(), p = sep6 === "\\" ? win325 : posix3) {
   const windows = p.sep === "\\";
   let abs;
   if (/^file:/i.test(written)) {
@@ -102693,7 +102758,7 @@ var EXTERNAL_LIST_LIMIT = 200;
 var builderKey = (ref) => `${ref.projectId ?? "_user"}/${ref.appId}`;
 var APP_BUILDERS_KEY = "apps.builders";
 var SessionManager = class _SessionManager {
-  constructor(store2, adapters2, emit, endpoint, worktreeRoot = join20(homedir4(), DATA_DIR, "worktrees"), keeperOpts = {}) {
+  constructor(store2, adapters2, emit, endpoint, worktreeRoot = join20(homedir5(), DATA_DIR, "worktrees"), keeperOpts = {}) {
     this.store = store2;
     this.adapters = adapters2;
     this.emit = emit;
@@ -106989,11 +107054,10 @@ import { promisify as promisify5 } from "node:util";
 // packages/agent-host/src/cli-version.ts
 import { execFile as execFile4 } from "node:child_process";
 import { readFileSync as readFileSync10, realpathSync as realpathSync5 } from "node:fs";
-import { posix as posix3, win32 as win326 } from "node:path";
 import { promisify as promisify4 } from "node:util";
 var exec4 = promisify4(execFile4);
 var realDeps2 = () => ({
-  platform: process.platform,
+  platform: HOST_PLATFORM,
   which: (name) => whichTool(name),
   launch: (path) => launchFor(path),
   realpath: (path) => realpathSync5(path),
@@ -107002,7 +107066,7 @@ var realDeps2 = () => ({
 });
 var PACKAGE_DEPTH = 3;
 function npmPackageVersion(file2, packageName, deps) {
-  const path = deps.platform === "win32" ? win326 : posix3;
+  const path = pathsOf(deps.platform);
   let real2 = file2;
   try {
     real2 = deps.realpath(file2);
@@ -107028,7 +107092,7 @@ async function installedCliVersion(name, packageName, deps = realDeps2()) {
   const file2 = launch.args[0] ?? launch.command;
   const fromNpm = npmPackageVersion(file2, packageName, deps);
   if (fromNpm) return fromNpm;
-  const path = deps.platform === "win32" ? win326 : posix3;
+  const path = pathsOf(deps.platform);
   let real2 = file2;
   try {
     real2 = deps.realpath(file2);
@@ -107036,7 +107100,7 @@ async function installedCliVersion(name, packageName, deps = realDeps2()) {
   }
   const named = /^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/.exec(path.basename(real2).replace(/\.exe$/i, ""));
   if (named) return named[0];
-  if (deps.platform === "win32") return null;
+  if (locksRunningPrograms(deps.platform)) return null;
   try {
     return parseCliVersion(await deps.run(launch.command, [...launch.args, "--version"]));
   } catch {
@@ -107108,6 +107172,9 @@ function claudeKey(exe, stat6, fs2 = realExeFs) {
   const raw = version2 ? `${version2}-${stat6.size}` : `${stat6.size}-${Math.floor(stat6.mtimeMs)}`;
   return raw.replace(/[^A-Za-z0-9._-]/g, "_");
 }
+function windowsStart(platform = process.platform) {
+  return platform === "win32";
+}
 var ClaudeLinks = class {
   constructor(opts) {
     this.opts = opts;
@@ -107121,7 +107188,7 @@ var ClaudeLinks = class {
   /** The key new sessions start from: the last one prepared */
   current = null;
   get enabled() {
-    return this.opts.platform === "win32";
+    return windowsStart(this.opts.platform);
   }
   base() {
     return join25(this.opts.root(), "tools", "claude");
@@ -107514,7 +107581,6 @@ var LocalAgentProcess = class _LocalAgentProcess extends EventEmitter3 {
   exitReported = false;
   spawnedAt = Date.now();
   static spawn(spec, os2) {
-    const platform = os2?.platform ?? process.platform;
     const child = spawn4(spec.command, spec.args, {
       cwd: spec.cwd,
       env: spec.env,
@@ -107523,7 +107589,7 @@ var LocalAgentProcess = class _LocalAgentProcess extends EventEmitter3 {
        * A group of its own, which its helpers join. Not on Windows: there `detached` means a process
        * with no console, whose every console child opens a visible window (app-process.ts).
        */
-      detached: platform !== "win32",
+      detached: hasProcessGroups(os2?.platform),
       windowsHide: true
     });
     const p = new _LocalAgentProcess(child, os2);
@@ -107549,8 +107615,9 @@ var LocalAgentProcess = class _LocalAgentProcess extends EventEmitter3 {
   get ended() {
     return this.child.exitCode !== null || this.child.signalCode !== null;
   }
-  get platform() {
-    return this.os?.platform ?? process.platform;
+  /** Whether the CLI got a group of its own (`hasProcessGroups`) */
+  get grouped() {
+    return hasProcessGroups(this.os?.platform);
   }
   handle() {
     return { pid: this.child.pid, kill: (s) => void this.child.kill(s) };
@@ -107562,7 +107629,7 @@ var LocalAgentProcess = class _LocalAgentProcess extends EventEmitter3 {
   kill(signal = "SIGTERM") {
     if (this.ended || this.child.pid === void 0) return false;
     this.killed = true;
-    if (this.platform === "win32" || signal === "SIGKILL") killTree(this.handle(), "SIGKILL", this.os);
+    if (!this.grouped || signal === "SIGKILL") killTree(this.handle(), "SIGKILL", this.os);
     else if (signal === "SIGTERM") stopTree(this.handle(), KILL_GRACE_MS, () => !this.ended, this.os);
     else {
       try {
@@ -107588,7 +107655,7 @@ var LocalAgentProcess = class _LocalAgentProcess extends EventEmitter3 {
   sweep() {
     const pid = this.child.pid;
     if (pid === void 0) return;
-    if (this.platform !== "win32") return stopGroup(pid, KILL_GRACE_MS);
+    if (this.grouped) return stopGroup(pid, KILL_GRACE_MS);
     const root3 = { pid, spawnedAt: this.spawnedAt, exitedAt: Date.now() };
     void collectOrphansWindows(root3, this.os?.listProcesses ? { listProcesses: this.os.listProcesses, taskkill: this.os.taskkill } : void 0).then((ended) => {
       if (ended.length > 0) console.error(`[agent] ended ${ended.length} process(es) pid ${pid} left running: ${ended.join(", ")}`);
@@ -109199,18 +109266,19 @@ var ClaudeAdapter = class _ClaudeAdapter {
   tool = "claude";
   launch;
   constructor(options = {}) {
-    const platform = options.platform ?? process.platform;
+    const platform = options.platform;
+    const windows = windowsStart(platform);
     const executable = options.executable ?? (() => toolExecutable("claude"));
     this.launch = {
-      platform,
+      windows,
       executable,
       links: new ClaudeLinks({ platform, root: options.dataRoot ?? dataRoot, fs: options.fs }),
-      gate: new StartGate(options.startGapMs ?? (platform === "win32" ? WINDOWS_START_GAP_MS : 0)),
+      gate: new StartGate(options.startGapMs ?? (windows ? WINDOWS_START_GAP_MS : 0)),
       retryDelay: options.retryDelay ?? (() => 3e3 + Math.floor(Math.random() * 3e3)),
       closing: /* @__PURE__ */ new Set(),
       exitGraceMs: options.exitGraceMs ?? 1500
     };
-    if (platform === "win32") {
+    if (windows) {
       this.launch.links.keep(executable());
       this.launch.links.sweep();
     }
@@ -109266,7 +109334,7 @@ var ClaudeAdapter = class _ClaudeAdapter {
     const path = whichTool("claude");
     try {
       let launch = launchFor(path ?? "claude");
-      const exe = this.launch.platform === "win32" ? this.launch.executable() : null;
+      const exe = this.launch.windows ? this.launch.executable() : null;
       if (exe && /\.exe$/i.test(exe)) {
         try {
           launch = { command: this.launch.links.prepare(exe).path, args: [] };
@@ -109343,7 +109411,7 @@ var ClaudeAdapter = class _ClaudeAdapter {
    * nothing waits: the SDK sends them SIGTERM on the host's exit, which they handle.
    */
   async settle() {
-    if (this.launch.platform !== "win32" || this.launch.closing.size === 0) return;
+    if (!this.launch.windows || this.launch.closing.size === 0) return;
     let timer;
     await Promise.race([
       Promise.allSettled([...this.launch.closing]),
@@ -109373,7 +109441,7 @@ function bridgePath() {
 
 // packages/agent-host/src/adapters/codex/index.ts
 import { existsSync as existsSync17, realpathSync as realpathSync6 } from "node:fs";
-import { homedir as homedir9 } from "node:os";
+import { homedir as homedir10 } from "node:os";
 import { dirname as dirname9, join as join27, resolve as resolve9 } from "node:path";
 import { promisify as promisify6 } from "node:util";
 
@@ -109525,10 +109593,10 @@ var CodexClient = class {
 import { createReadStream as createReadStream2 } from "node:fs";
 import { readdir as readdir6 } from "node:fs/promises";
 import { createInterface as createInterface2 } from "node:readline";
-import { homedir as homedir5 } from "node:os";
+import { homedir as homedir6 } from "node:os";
 import { join as join26 } from "node:path";
 var MIN_SUMMARY_CHARS = 200;
-async function findRolloutPath(threadId, sessionsDir = join26(homedir5(), ".codex", "sessions")) {
+async function findRolloutPath(threadId, sessionsDir = join26(homedir6(), ".codex", "sessions")) {
   try {
     const suffix = `-${threadId}.jsonl`;
     const names = await readdir6(sessionsDir, { recursive: true });
@@ -109761,7 +109829,7 @@ async function imageEventFromDisk(sessionId, path, maxBytes = IMAGE_MAX_BYTES) {
 }
 
 // packages/agent-host/src/adapters/codex/usage-client.ts
-import { homedir as homedir6 } from "node:os";
+import { homedir as homedir7 } from "node:os";
 
 // packages/agent-host/src/adapters/codex/usage.ts
 var str6 = (v) => typeof v === "string" && v ? v : null;
@@ -109809,7 +109877,7 @@ async function readCodexUsage(command) {
     { onNotification: () => {
     }, onServerRequest: (r) => client.respond(r.id, {}), onExit: () => {
     } },
-    { cwd: homedir6(), command }
+    { cwd: homedir7(), command }
   );
   try {
     await client.request("initialize", {
@@ -109830,7 +109898,7 @@ async function readCodexUsage(command) {
 }
 
 // packages/agent-host/src/adapters/codex/models.ts
-import { homedir as homedir7 } from "node:os";
+import { homedir as homedir8 } from "node:os";
 var MAX_PAGES = 20;
 async function collectModels(fetchPage) {
   const out = [];
@@ -109848,7 +109916,7 @@ async function listCodexModels(command) {
     { onNotification: () => {
     }, onServerRequest: (r) => client.respond(r.id, {}), onExit: () => {
     } },
-    { cwd: homedir7(), command }
+    { cwd: homedir8(), command }
   );
   try {
     await client.request("initialize", {
@@ -109908,7 +109976,7 @@ function toModelOptions(data) {
 }
 
 // packages/agent-host/src/adapters/codex/notices.ts
-import { homedir as homedir8 } from "node:os";
+import { homedir as homedir9 } from "node:os";
 var LABELS = {
   configWarning: "config warning",
   warning: "warning",
@@ -109923,7 +109991,7 @@ var IGNORED_HEAD = /^Codex is ignoring \d+ unrecognized configuration settings?\
 var HYDRATION = /^Full-history hydration is deprecated\b/;
 var API_METHOD = /`?\b(thread|turn|review)\/[a-z]/;
 function tilde(path) {
-  const home = homedir8();
+  const home = homedir9();
   return home && path.startsWith(`${home}/`) ? `~${path.slice(home.length)}` : path;
 }
 function ignoredSettings(text2) {
@@ -111601,7 +111669,7 @@ function threadIdOf(res) {
 }
 function codexHome() {
   const custom2 = process.env.CODEX_HOME?.trim();
-  return custom2 ? custom2 : join27(homedir9(), ".codex");
+  return custom2 ? custom2 : join27(homedir10(), ".codex");
 }
 var CODEX_VERBOSITIES = ["low", "medium", "high"];
 var CodexAdapter = class {
@@ -112000,7 +112068,7 @@ async function cwdsOf(pids) {
   }
 }
 async function findStrays(roots, selfPid = process.pid, held3 = []) {
-  if (process.platform === "win32" || roots.length === 0) return [];
+  if (!hasPs() || roots.length === 0) return [];
   const rows = await psRows();
   const candidates = rows.filter((r) => r.pid > 1 && noTty(r.tty)).map((r) => r.pid);
   const cwdOf = await cwdsOf(candidates);
@@ -112113,7 +112181,7 @@ var toInfo = (h) => ({
 function sessionIdsOf(panels) {
   return panels.flatMap((p) => p.kind === "session" ? [p.sessionId] : []);
 }
-function createRpcHandler(mgr2, adapters2, { terminals: terminals2, updates: updates2, commands, externalApps: externalApps2, views: views2, inlineViews: inlineViews2, heldPids, themes: themes2, agentVersions: agentVersions2, machines } = {}) {
+function createRpcHandler(mgr2, adapters2, { terminals: terminals2, updates: updates2, commands, externalApps: externalApps2, views: views2, inlineViews: inlineViews2, heldPids, themes: themes2, agentVersions: agentVersions2, machines, stopHost } = {}) {
   const requireThemes = () => {
     if (!themes2) throw Object.assign(new Error("Theme files are unavailable"), { code: "internal" });
     return themes2;
@@ -112706,7 +112774,14 @@ function createRpcHandler(mgr2, adapters2, { terminals: terminals2, updates: upd
     "updates.setAutoApply": async (p) => requireUpdates().setAutoApply(RpcMethods["updates.setAutoApply"].params.parse(p).enabled),
     // Answers once the install has started, not once it has finished — see the note on
     // `updates.apply` in the protocol. The rest arrives as `update_status` events.
-    "updates.apply": async () => requireUpdates().apply()
+    "updates.apply": async () => requireUpdates().apply(),
+    "host.stop": async () => {
+      if (!stopHost) {
+        throw Object.assign(new Error("This host runs under the Centralu app, which stops it: quit the app instead"), { code: "internal" });
+      }
+      setTimeout(stopHost, 50);
+      return { ok: true };
+    }
   };
   return async (method, params) => {
     const name = method;
@@ -113243,15 +113318,14 @@ var CommandRunner = class {
 // packages/agent-host/src/updates.ts
 import { execFile as execFile8 } from "node:child_process";
 import { existsSync as existsSync19 } from "node:fs";
-import { homedir as homedir10 } from "node:os";
-import { join as join29 } from "node:path";
 var REGISTRY_URL = `https://registry.npmjs.org/${APP_SLUG}/latest`;
 var CHECK_INTERVAL_MS = 6 * 60 * 60 * 1e3;
 var SCHEDULED_TIMEOUT_MS = 3e3;
 var FORCED_TIMEOUT_MS = 8e3;
 var INSTALL_TIMEOUT_MS = 5 * 60 * 1e3;
-function installedCopyPath() {
-  return process.platform === "darwin" ? `/Applications/${APP_NAME}.app` : join29(homedir10(), ".local/share/applications", `${APP_SLUG}.desktop`);
+function existingInstalledCopy() {
+  const path = installedCopyPath();
+  return existsSync19(path) ? path : null;
 }
 async function fetchLatestFromRegistry(timeoutMs) {
   try {
@@ -113265,12 +113339,23 @@ async function fetchLatestFromRegistry(timeoutMs) {
     return { ok: false, reason: "Could not reach the registry \u2014 check the network" };
   }
 }
-function runCommand(file2, args) {
-  return new Promise((resolve10, reject) => {
-    execFile8(file2, args, { timeout: INSTALL_TIMEOUT_MS }, (err, _stdout, stderr) => {
-      if (!err) return resolve10();
-      const detail = String(stderr).trim().split("\n").filter(Boolean).pop();
-      reject(new Error(detail || err.message));
+function commandFor(file2, args, resolve10 = (f) => resolveCommand(f)) {
+  const launch = resolve10(file2);
+  return { file: launch.command, args: [...launch.args, ...args] };
+}
+function failureDetail(file2, stderr) {
+  const lines = stderr.split(/\r?\n/).map((l) => l.trim()).filter((l) => l && !/complete log of this run/i.test(l));
+  return (file2 === "npm" ? lines.at(-1) : lines[0]) ?? null;
+}
+function runCommand(file2, args, resolve10) {
+  const cmd = commandFor(file2, args, resolve10);
+  return new Promise((done, reject) => {
+    execFile8(cmd.file, cmd.args, { timeout: INSTALL_TIMEOUT_MS, windowsHide: true }, (err, _stdout, stderr) => {
+      if (!err) return done();
+      if (err.code === "ENOENT") {
+        return reject(new Error(`${file2} was not found on PATH (${err.message})`));
+      }
+      reject(new Error(failureDetail(file2, String(stderr)) || err.message));
     });
   });
 }
@@ -113280,6 +113365,7 @@ var UpdateService = class {
     this.deps = {
       fetchLatest: deps.fetchLatest ?? fetchLatestFromRegistry,
       run: deps.run ?? runCommand,
+      installedCopy: deps.installedCopy ?? existingInstalledCopy,
       now: deps.now ?? Date.now,
       // If no place to persist it is given, treat auto-update as on — the same default that main.ts
       // passes in.
@@ -113444,12 +113530,17 @@ var UpdateService = class {
     return this.current();
   }
   async runApply(version2) {
+    let packageInstalled = false;
+    const copy = this.deps.installedCopy();
     try {
       await this.deps.run("npm", ["i", "-g", `${APP_SLUG}@${version2}`]);
-      if (existsSync19(installedCopyPath())) await this.deps.run(APP_SLUG, ["install"]);
+      packageInstalled = true;
+      if (copy) await this.deps.run(APP_SLUG, ["install"]);
       this.status = { ...this.status, phase: "restart_required", error: null };
     } catch (e) {
-      this.status = { ...this.status, phase: "failed", error: e.message };
+      const reason = e.message;
+      const error51 = packageInstalled ? `npm installed ${version2}, but the copy at ${copy} was not replaced (${reason}). Quit ${APP_NAME}, then run "${APP_SLUG} install" in a terminal.` : reason;
+      this.status = { ...this.status, phase: "failed", error: error51 };
     }
     this.emit();
   }
@@ -113682,9 +113773,9 @@ var AgentVersionService = class {
 };
 
 // packages/agent-host/src/dev-services/instance-lock.ts
-import { execFileSync as execFileSync3 } from "node:child_process";
+import { execFileSync as execFileSync4 } from "node:child_process";
 import { readFileSync as readFileSync12, unlinkSync as unlinkSync3, writeFileSync as writeFileSync7 } from "node:fs";
-import { dirname as dirname10, join as join30 } from "node:path";
+import { dirname as dirname10, join as join29 } from "node:path";
 import Database2 from "better-sqlite3";
 var OWNERSHIP_FILE = "host-ownership.sqlite";
 var held = /* @__PURE__ */ new Set();
@@ -113698,9 +113789,9 @@ function alive(pid) {
   }
 }
 function processStartTime(pid) {
-  if (process.platform === "win32") return null;
+  if (!hasPs()) return null;
   try {
-    const out = execFileSync3("ps", ["-o", "lstart=", "-p", String(pid)], {
+    const out = execFileSync4("ps", ["-o", "lstart=", "-p", String(pid)], {
       encoding: "utf8",
       timeout: 2e3,
       stdio: ["ignore", "pipe", "ignore"],
@@ -113730,10 +113821,10 @@ function stillHeld(holder, startOf) {
   const now = startOf(holder.pid);
   return now === null || now === holder.started;
 }
-function acquireInstanceLock(dbPath2, startOf = processStartTime, legacyFile = process.platform !== "win32") {
+function acquireInstanceLock(dbPath2, startOf = processStartTime, legacyFile = hasPs()) {
   if (dbPath2 === ":memory:") return { ok: true, release: () => {
   } };
-  const lockPath = join30(dirname10(dbPath2), "host.lock");
+  const lockPath = join29(dirname10(dbPath2), "host.lock");
   const readHolder = () => {
     try {
       return parseHolder(readFileSync12(lockPath, "utf8"));
@@ -113741,7 +113832,7 @@ function acquireInstanceLock(dbPath2, startOf = processStartTime, legacyFile = p
       return null;
     }
   };
-  const owner = takeOwnership(join30(dirname10(dbPath2), OWNERSHIP_FILE));
+  const owner = takeOwnership(join29(dirname10(dbPath2), OWNERSHIP_FILE));
   if (!owner) {
     const holder2 = readHolder();
     return { ok: false, heldByPid: holder2 && Number.isInteger(holder2.pid) && holder2.pid > 0 ? holder2.pid : null, lockPath };
@@ -114443,6 +114534,8 @@ var LinkedMachine = class {
   error = null;
   versions = null;
   lastConnectedAt = null;
+  /** The host this link started there, if it did (owner decision 7, plan §10.9) */
+  hostStarted = null;
   endpoint = null;
   client = null;
   /** Sessions of the remote the hub shows / hides, by the remote's id. Events of any other session are not passed on */
@@ -114476,7 +114569,8 @@ var LinkedMachine = class {
       versions: this.versions,
       lastConnectedAt: this.lastConnectedAt,
       localPort: this.endpoint && this.endpoint.localPort > 0 ? this.endpoint.localPort : null,
-      sameLocalPort: this.endpoint ? this.endpoint.localPort === this.endpoint.line.port : false
+      sameLocalPort: this.endpoint ? this.endpoint.localPort === this.endpoint.line.port : false,
+      hostStarted: this.hostStarted
     };
   }
   // ── RoutedMachine ───────────────────────────────────────────────────────────────────────
@@ -114538,17 +114632,27 @@ var LinkedMachine = class {
     this.client?.close();
     this.client = null;
     this.setStatus("connecting", null);
-    let endpoint;
-    try {
-      endpoint = await this.tunnel.open();
-    } catch (err) {
+    let endpoint = await this.openTunnel();
+    if (!endpoint) return;
+    if (!endpoint.line.hostRunning && this.tunnel.startHost) {
+      this.setStatus("starting", null);
+      this.deps.log?.(`[links] ${this.name}: no Centralu host is running there; starting one (centralu serve --detach)`);
+      let started;
+      try {
+        started = await this.tunnel.startHost();
+      } catch (err) {
+        if (this.stopped) return;
+        this.setStatus("not_running", `Centralu could not be started on ${this.name}: ${err.message}`);
+        return this.retryLater();
+      }
       if (this.stopped) return;
-      this.setStatus("unreachable", err.message);
-      return this.retryLater();
-    }
-    if (this.stopped) {
-      await this.tunnel.close();
-      return;
+      this.hostStarted = { ...started, at: Date.now() };
+      this.deps.log?.(
+        started.how === "detached" ? `[links] ${this.name}: started its host; it keeps running after this link ends` : `[links] ${this.name}: its host runs only while this link is up: ${started.note ?? "it cannot be started in the background there"}`
+      );
+      this.setStatus("starting", null);
+      endpoint = await this.openTunnel();
+      if (!endpoint) return;
     }
     this.endpoint = endpoint;
     if (!endpoint.line.hostRunning) {
@@ -114559,6 +114663,23 @@ var LinkedMachine = class {
     if (!mayConnect(versions)) return;
     this.connectClient(endpoint);
   }
+  /** The tunnel's `open`, or null after reporting why not (and when the link was stopped meanwhile) */
+  async openTunnel() {
+    let endpoint;
+    try {
+      endpoint = await this.tunnel.open();
+    } catch (err) {
+      if (this.stopped) return null;
+      this.setStatus("unreachable", err.message);
+      this.retryLater();
+      return null;
+    }
+    if (this.stopped) {
+      await this.tunnel.close();
+      return null;
+    }
+    return endpoint;
+  }
   /** Records the versions, and holds the link at `versions_differ` when they do not allow connecting */
   check(remote) {
     const pending = compareVersions(this.deps.hub, remote, false);
@@ -114943,6 +115064,8 @@ var ROUTES = {
   "machines.add": HUB,
   "machines.remove": HUB,
   "machines.reconnect": HUB,
+  // Stopping a remote host is `centralu serve --stop` over ssh, never a call through the link
+  "host.stop": HUB,
   "machines.acceptVersions": HUB,
   // ── Callbacks of the hub's own agents ───────────────────────────────────────────────────
   "orchestrator.tools": INTERNAL,
@@ -115175,6 +115298,7 @@ function parseConnectionLine(stdout) {
       if (typeof o.port !== "number" || typeof o.token !== "string" || typeof o.protocolVersion !== "number") {
         throw new Error("The remote answered with an incomplete connection line");
       }
+      const install = parseInstall(o.install);
       return {
         v: 1,
         port: o.port,
@@ -115182,12 +115306,38 @@ function parseConnectionLine(stdout) {
         version: typeof o.version === "string" ? o.version : "unknown",
         protocolVersion: o.protocolVersion,
         dataDir: typeof o.dataDir === "string" ? o.dataDir : "",
-        hostRunning: o.hostRunning === true
+        hostRunning: o.hostRunning === true,
+        ...install ? { install } : {}
       };
     }
   }
   throw new Error("The remote did not print a connection line; its Centralu may predate `centralu serve` (update it there: npm i -g centralu)");
 }
+function parseInstall(raw) {
+  if (!raw || typeof raw !== "object") return null;
+  const o = raw;
+  const pointer = (v) => {
+    const p = v;
+    return p && typeof p.version === "string" && typeof p.node === "string" ? { version: p.version, node: p.node } : null;
+  };
+  return { managed: o.managed === true, current: pointer(o.current), previous: pointer(o.previous), node: typeof o.node === "string" ? o.node : null };
+}
+function parseDetachLine(stdout) {
+  const lines = stdout.split("\n").map((l) => l.trim()).filter(Boolean);
+  for (let i = lines.length - 1; i >= 0; i--) {
+    let raw;
+    try {
+      raw = JSON.parse(lines[i]);
+    } catch {
+      continue;
+    }
+    const d2 = raw?.detach;
+    if (!d2 || typeof d2 !== "object") continue;
+    if (d2.ok === true) return { ok: true, line: parseConnectionLine(lines[i]), how: typeof d2.how === "string" ? d2.how : null };
+    return { ok: false, reason: typeof d2.reason === "string" ? d2.reason : "failed", message: typeof d2.message === "string" ? d2.message : "centralu serve --detach failed" };
+  }
+  throw new Error("The remote did not say whether it started");
+}
 var WSL_DISTRO_RE = /^[A-Za-z0-9._-]{1,64}$/;
 function powershell(script) {
   const full = `[Console]::OutputEncoding=[Text.Encoding]::UTF8
@@ -115202,18 +115352,27 @@ function wslKeepAlive(spec) {
 }
 var NOT_FOUND2 = "CENTRALU-NOT-FOUND";
 function connectionCommand(spec) {
+  return remoteCommand(spec, "serve --connection");
+}
+function detachCommand(spec) {
+  return remoteCommand(spec, "serve --detach");
+}
+function serveCommand(spec) {
+  return remoteCommand(spec, "serve");
+}
+function remoteCommand(spec, args) {
   const custom2 = spec.command?.trim() || null;
   if (spec.shell === "powershell") {
-    if (custom2) return powershell(`${custom2} serve --connection`);
+    if (custom2) return powershell(`${custom2} ${args}`);
     return powershell(
-      `if (Get-Command centralu -ErrorAction SilentlyContinue) { & centralu serve --connection } else { $l = Join-Path $env:USERPROFILE '.centralu\\bin\\centralu.cmd'; if (Test-Path $l) { & $l serve --connection } else { '${NOT_FOUND2}' } }`
+      `if (Get-Command centralu -ErrorAction SilentlyContinue) { & centralu ${args} } else { $l = Join-Path $env:USERPROFILE '.centralu\\bin\\centralu.cmd'; if (Test-Path $l) { & $l ${args} } else { '${NOT_FOUND2}' } }`
     );
   }
-  const lookup = `if command -v centralu >/dev/null 2>&1; then exec centralu serve --connection; elif [ -x "$HOME/.centralu/bin/centralu" ]; then exec "$HOME/.centralu/bin/centralu" serve --connection; else echo ${NOT_FOUND2}; exit 127; fi`;
-  if (spec.shell === "posix") return custom2 ? `${custom2} serve --connection` : `sh -c '${lookup}'`;
+  const lookup = `if command -v centralu >/dev/null 2>&1; then exec centralu ${args}; elif [ -x "$HOME/.centralu/bin/centralu" ]; then exec "$HOME/.centralu/bin/centralu" ${args}; else echo ${NOT_FOUND2}; exit 127; fi`;
+  if (spec.shell === "posix") return custom2 ? `${custom2} ${args}` : `sh -c '${lookup}'`;
   const distro = spec.wslDistro ?? "";
   if (!WSL_DISTRO_RE.test(distro)) throw new Error(`Not a WSL distro name: ${distro || "(none)"}`);
-  const script = custom2 ? `${custom2} serve --connection` : `PATH=$(printf %s "$PATH" | tr : '\\n' | grep -v '^/mnt/' | paste -sd: -); ${lookup}`;
+  const script = custom2 ? `${custom2} ${args}` : `PATH=$(printf %s "$PATH" | tr : '\\n' | grep -v '^/mnt/' | paste -sd: -); ${lookup}`;
   const b64 = Buffer.from(script, "utf8").toString("base64");
   return powershell(`wsl.exe -d '${distro}' -- bash -lc 'echo ${b64} | base64 -d | bash -l'`);
 }
@@ -115228,6 +115387,8 @@ var SshTunnel = class {
   asking = /* @__PURE__ */ new Set();
   downListeners = [];
   closing = false;
+  /** The remote cannot start a host outside a session (WMI blocked): the forward runs it (`startHost`) */
+  linkBound = false;
   async open() {
     await this.stopChild();
     this.closing = false;
@@ -115236,23 +115397,75 @@ var SshTunnel = class {
       throw err;
     });
     this.ifClosed();
-    if (!line.hostRunning) {
+    if (!line.hostRunning && !this.linkBound) {
       return { url: "", token: line.token, line, localPort: 0 };
     }
+    const hosting = !line.hostRunning;
     let localPort = await portFree(line.port) ? line.port : await freePort();
     try {
-      await this.forward(localPort, line.port);
+      await this.forward(localPort, line.port, hosting);
     } catch (err) {
       if (localPort !== line.port) throw err;
       this.ifClosed();
       localPort = await freePort();
-      await this.forward(localPort, line.port);
+      await this.forward(localPort, line.port, hosting);
     }
     if (this.closing) {
       await this.stopChild();
       this.ifClosed();
     }
-    return { url: `ws://127.0.0.1:${localPort}`, token: line.token, line, localPort };
+    const served = hosting ? await this.untilServing() : line;
+    return { url: `ws://127.0.0.1:${localPort}`, token: served.token, line: served, localPort };
+  }
+  /**
+   * Starts the remote's host with `centralu serve --detach` (plan §10.4, owner decision 7): it then
+   * runs outside any ssh session and outlives this link. When the remote says WMI process creation
+   * is blocked there (decision 3), every `open` from then on runs `centralu serve` as the forward's
+   * own remote command instead, so the host lives as long as the link.
+   */
+  async startHost() {
+    this.ifClosed();
+    const remote = this.opts.remote ?? { shell: "posix" };
+    const r = await this.run([...this.config(), "-T", "-o", "BatchMode=yes", "-o", "ConnectTimeout=15", "--", this.opts.target, detachCommand(remote)]);
+    this.ifClosed();
+    if (r.code === 255) throw new Error(`ssh could not reach ${this.opts.target}: ${lastLine(r.stderr) || "no answer"}`);
+    if (r.stdout.includes(NOT_FOUND2) || r.code === 127 && !remote.command) {
+      throw new Error(`Centralu is not installed on ${this.opts.target} (run \`npm i -g centralu\` there, then \`centralu serve\` once)`);
+    }
+    let answer;
+    try {
+      answer = parseDetachLine(r.stdout);
+    } catch (err) {
+      if (/unknown option for serve: --detach/.test(r.stderr)) {
+        throw new Error(`Centralu on ${this.opts.target} is too old to be started from here: run \`centralu serve\` there, or update it (npm i -g centralu)`);
+      }
+      const why = lastLine(r.stderr);
+      throw new Error(`${err.message}${why ? `: ${why}` : r.code ? ` (exit ${r.code})` : ""}`);
+    }
+    if (answer.ok) {
+      this.linkBound = false;
+      return { how: "detached", note: null };
+    }
+    if (answer.reason === "wmi_blocked") {
+      this.linkBound = true;
+      return { how: "link_bound", note: answer.message };
+    }
+    throw new Error(answer.message);
+  }
+  /** The connection line again until the link-bound host answers, or the forward that runs it ends */
+  async untilServing() {
+    const deadline = Date.now() + (this.opts.startTimeoutMs ?? 3e4);
+    for (; ; ) {
+      this.ifClosed();
+      if (!this.child) throw new Error(`The ssh session that runs Centralu on ${this.opts.target} ended before it served`);
+      const line = await this.connectionLine();
+      if (line.hostRunning) return line;
+      if (Date.now() > deadline) {
+        await this.stopChild();
+        throw new Error(`Centralu on ${this.opts.target} did not start serving in time`);
+      }
+      await new Promise((r) => setTimeout(r, 500));
+    }
   }
   onDown(listener) {
     this.downListeners.push(listener);
@@ -115296,12 +115509,11 @@ var SshTunnel = class {
       throw new Error(`${err.message}${why ? `: ${why}` : r.code ? ` (exit ${r.code})` : ""}`);
     }
   }
-  forward(localPort, remotePort) {
+  forward(localPort, remotePort, hosting = false) {
     this.ifClosed();
-    const keepAlive = wslKeepAlive(this.opts.remote);
+    const keepAlive = hosting ? serveCommand(this.opts.remote ?? { shell: "posix" }) : wslKeepAlive(this.opts.remote);
     const args = [
       ...this.config(),
-      // A forward alone runs nothing; for WSL it runs the keep-alive instead (`wslKeepAlive`)
       ...keepAlive ? ["-T"] : ["-N"],
       "-o",
       "BatchMode=yes",
@@ -115427,13 +115639,15 @@ function storeMirror(store2) {
 }
 
 // packages/agent-host/src/main.ts
-var BUILD = true ? "6d18a3e" : "dev";
+var BUILD = true ? "b974cd2" : "dev";
 var underKeeper = process.env.CC_KEEPER === "1";
 var keeperSource = process.env.CC_HOST_SOURCE;
 var frontDoor = process.env.CC_FRONT_DOOR;
+var startedByServe = process.env.CC_SERVE === "1";
 delete process.env.CC_KEEPER;
 delete process.env.CC_HOST_SOURCE;
 delete process.env.CC_FRONT_DOOR;
+delete process.env.CC_SERVE;
 var { values } = parseArgs({
   options: {
     port: { type: "string", default: "5175" },
@@ -115455,12 +115669,12 @@ var httpSecret = keeperToken ? deriveHttpSecret(keeperToken) : randomBytes6(32).
 var dbPath = values.memory ? ":memory:" : values.db ?? defaultDbPath();
 function defaultDbPath() {
   const isDev = process.env.CC_DEV === "1";
-  const dir = join31(homedir11(), isDev ? DATA_DIR_DEV : DATA_DIR);
-  const legacy = join31(homedir11(), isDev ? DATA_DIR_LEGACY.dev : DATA_DIR_LEGACY.prod);
+  const dir = join30(homedir11(), isDev ? DATA_DIR_DEV : DATA_DIR);
+  const legacy = join30(homedir11(), isDev ? DATA_DIR_LEGACY.dev : DATA_DIR_LEGACY.prod);
   movedNote = migrateLegacyDataDir(legacy, dir) ? `[agent-host] data folder moved: ${legacy} -> ${dir}` : null;
   mkdirSync10(dir, { recursive: true });
   process.env.CC_DATA_DIR = dir;
-  return join31(dir, "store.db");
+  return join30(dir, "store.db");
 }
 var stopLog = dbPath === ":memory:" ? () => {
 } : teeStderrToFile(hostLogPath(dirname11(dbPath)));
@@ -115541,7 +115755,7 @@ var mgr = new SessionManager(
   },
   () => bridgeAddress(frontDoor, port, token),
   // Worktrees are created next to the data folder — dev and the packaged app never touch each other's worktrees
-  join31(dirname11(dbPath), "worktrees"),
+  join30(dirname11(dbPath), "worktrees"),
   held2 ? { processes: held2.processes, keptSessions: held2.kept.sessionIds } : {}
 );
 var appChanges = broadcastAppChanges((e) => server.broadcast(e));
@@ -115578,7 +115792,7 @@ if (held2) {
 }
 var AUTO_UPDATE_CHECK_KEY = "updates.auto";
 var AUTO_APPLY_UPDATES_KEY = "updates.autoApply";
-var themes = new ThemeFiles(join31(dataRoot(), "themes"), () => {
+var themes = new ThemeFiles(join30(dataRoot(), "themes"), () => {
   try {
     server.broadcast({ type: "themes_changed" });
   } catch {
@@ -115651,6 +115865,13 @@ if (underKeeper) {
     console.error(`[agent-host] could not restore the app views handed over: ${err.stack ?? err}`);
   }
 }
+var stopNow = null;
+var stopAsked = false;
+var stopFromRequest = () => {
+  console.error("[agent-host] asked to stop (centralu serve --stop)");
+  if (stopNow) stopNow();
+  else stopAsked = true;
+};
 var links = new Links({
   hub: { version: APP_VERSION, protocolVersion: PROTOCOL_VERSION, dev: BUILD === "dev" },
   broadcast: (e) => server.broadcast(e),
@@ -115672,7 +115893,8 @@ var router = new Router({
     views,
     inlineViews,
     heldPids: held2?.heldPids,
-    machines: links
+    machines: links,
+    stopHost: startedByServe && !underKeeper ? () => stopFromRequest() : void 0
   }),
   machines: () => links.all()
 });
@@ -115726,7 +115948,7 @@ var stopActivity = underKeeper ? startActivityReport(
 `)
 ) : () => {
 };
-var crashLog = join31(dirname11(dbPath), "host-errors.log");
+var crashLog = join30(dirname11(dbPath), "host-errors.log");
 function record2(kind, err) {
   const e = err;
   const line = `[${(/* @__PURE__ */ new Date()).toISOString()}] ${kind}: ${e?.stack ?? String(err)}
@@ -115795,6 +116017,8 @@ process.on("SIGTERM", () => void shutdown(onSignalMode, onSignalMode === "detach
 process.off("SIGINT", holdSignal);
 process.off("SIGTERM", holdSignal);
 if (pendingSignal) void shutdown(onSignalMode, onSignalMode === "detach");
+stopNow = () => void shutdown("stop", false);
+if (stopAsked) stopNow();
 held2?.children.on("stop", () => void shutdown("stop", false));
 if (control) {
   onDrain(control, {