@chengchenccc/oh-my-agent 0.2.0-rc.1 → 0.2.0-rc.3

package/README.md

@@ -7,7 +7,7 @@ Product Backend → Agent Run → Adapter → spawn oma --mode rpc
 → per-Run Runtime → BackendRunOutcome → stdout → child 退出
 ```
 
-**不是 daemon**：一个 Run = 一个子进程 = 一个 Runtime = 一个 outcome。没有常驻进程、没有 session supervisor、没有 worker pool。
+**不是 daemon**（就 Run 执行模型而言）：一个 Run = 一个子进程 = 一个 Runtime = 一个 outcome。没有常驻的 session supervisor，没有 worker pool。同一个包里的 `core/gateway/` 是另一回事——`oma gateway up -d` 确实会起一个 detached daemon，那是它自己的 pidfile 加 supervisor，与 Run 无关。
 
 ## TUI
 
@@ -38,13 +38,13 @@ Product Backend → Agent Run → Adapter → spawn oma --mode rpc
 
 ## Runtime
 
-`createOmaRuntime()`（`src/core/create-runtime.ts`）构造一个 Runtime = 一个 Run：
+`createOmaRuntime()`（`src/core/runtime/create-runtime.ts`）构造一个 Runtime = 一个 Run：
 
 - `run(input)` 返回唯一 segment，其 `outcome` 是 Run 的唯一终态；
 - `steer(input)` 注入 live loop；`stop()` 中止；
 - `close()` 拆除 MCP clients 与 SessionStore。
 
-Runtime 主体就在本 app 的 `src/core/`：OmaSession（model/tool loop、retry、compaction、插件、todo、tool-result pruning）与 in-memory SessionStore（`core/store/`）。seed 时把 **full Product history + meta + input** 原子写入，Run 结束即销毁。
+Runtime 主体就在本 app 的 `src/core/`：OmaSession（model/tool loop、retry、compaction、插件、todo、tool-result pruning）与 in-memory SessionStore（`core/store/`）。in-memory store 随 Run 销毁，但子进程会把本轮写进自己的 session 文件（`core/session/` 的 JSONL），并通过 outcome 回传 `cliSessionRef`；下一个 Run 用它 resume 那个文件，扁平的历史桥只在没有引用时才用。
 
 ## 运行
 
@@ -53,7 +53,7 @@ bun run --cwd apps/oh-my-agent dev -- -p "hello"    # source CLI (dev)
 bun apps/oh-my-agent/src/cli.ts -p "hello"          # source CLI, direct
 
 bun run --cwd apps/oh-my-agent build                # → dist/cli.js (executable)
-apps/oh-my-agent/dist/cli.js -p "hello"             # built binary
+./dist/cli.js -p "hello"                            # built binary (inside apps/oh-my-agent)
 
 cd apps/oh-my-agent && bun link                     # optional local install
 oma -p "hello"                              # then run from anywhere
@@ -69,9 +69,14 @@ oma                                     # standalone interactive TUI
 src/
   cli.ts                可执行入口（shebang + runCli()）
   main.ts               main()/runCli()：参数解析、模式分发、退出码（无 process.exit）
-  cli/                  print/json 模式、初始输入构建、CLI 测试
+  cli/                  参数解析、初始输入构建、gateway 子命令
   modes/                tui / print / json / rpc 模式
-  core/                 create-runtime.ts（per-Run Runtime 装配）、project-settings.ts（.oma/settings.json）、fake-provider（测试）
+  core/
+    runtime/            create-runtime.ts（per-Run Runtime 装配）
+    session/            session 文件（JSONL）：/resume、--continue 与跨 Run resume 的持久侧
+    settings/           project-settings.ts（.oma/settings.json）
+    loops/ goals/ plans/  三种持续模式的状态机与工具面
+    gateway/            `oma gateway` 的 daemon、supervisor、doctor、artifact
 ```
 
 ## 相关文档

package/dist/cli/args.d.ts

@@ -1,6 +1,6 @@
 import { type GatewayCommand } from "./gateway-commands.js";
 export type CliMode = "print" | "json" | "rpc" | "tui";
-export type PermissionFlag = "ask" | "auto" | "deny" | "off";
+export type PermissionFlag = "ask" | "auto" | "deny" | "off" | "yolo";
 export interface CliArgs {
     mode: CliMode;
     /** True when -p/--mode was given explicitly; a bare positional prompt

package/dist/cli/args.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"args.d.ts","sourceRoot":"","sources":["../../src/cli/args.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiB,KAAK,cAAc,EAAoB,MAAM,uBAAuB,CAAC;AAE7F,MAAM,MAAM,OAAO,GAAG,OAAO,GAAG,MAAM,GAAG,KAAK,GAAG,KAAK,CAAC;AAEvD,MAAM,MAAM,cAAc,GAAG,KAAK,GAAG,MAAM,GAAG,MAAM,GAAG,KAAK,CAAC;AAE7D,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,OAAO,CAAC;IACd;yEACqE;IACrE,YAAY,EAAE,OAAO,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,OAAO,CAAC;IACpB,4EAA4E;IAC5E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iEAAiE;IACjE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,8DAA8D;IAC9D,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,0EAA0E;IAC1E,UAAU,CAAC,EAAE,cAAc,CAAC;IAC5B,2DAA2D;IAC3D,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,yEAAyE;IACzE,OAAO,CAAC,EAAE,cAAc,CAAC;IACzB,sEAAsE;IACtE,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,yCAAyC;IACzC,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB;;;mCAG+B;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,qBAAa,UAAW,SAAQ,KAAK;CAAG;AAkCxC;6DAC6D;AAC7D,wBAAgB,SAAS,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAuG1D"}
+{"version":3,"file":"args.d.ts","sourceRoot":"","sources":["../../src/cli/args.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiB,KAAK,cAAc,EAAoB,MAAM,uBAAuB,CAAC;AAE7F,MAAM,MAAM,OAAO,GAAG,OAAO,GAAG,MAAM,GAAG,KAAK,GAAG,KAAK,CAAC;AAEvD,MAAM,MAAM,cAAc,GAAG,KAAK,GAAG,MAAM,GAAG,MAAM,GAAG,KAAK,GAAG,MAAM,CAAC;AAEtE,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,OAAO,CAAC;IACd;yEACqE;IACrE,YAAY,EAAE,OAAO,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,OAAO,CAAC;IACpB,4EAA4E;IAC5E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iEAAiE;IACjE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,8DAA8D;IAC9D,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,0EAA0E;IAC1E,UAAU,CAAC,EAAE,cAAc,CAAC;IAC5B,2DAA2D;IAC3D,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,yEAAyE;IACzE,OAAO,CAAC,EAAE,cAAc,CAAC;IACzB,sEAAsE;IACtE,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,yCAAyC;IACzC,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB;;;mCAG+B;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,qBAAa,UAAW,SAAQ,KAAK;CAAG;AAkCxC;6DAC6D;AAC7D,wBAAgB,SAAS,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CA6G1D"}

package/dist/cli/args.js

@@ -19,7 +19,7 @@ Usage:
   oma --continue                 resume the most recent session
   oma --session <id> -p "..."    one-shot follow-up on a session
   oma --permission ask -p "..."  gate bash/write/mcp behind approval cards
-  oma --read-only -p "..."       research-only run (no mutating tools)
+  oma --yolo -p "..."            ungated run (OS sandbox forced when present)
   oma --model <provider/model> -p "<prompt>"
                                           pick a model by canonical id
                                           (default: first available model)
@@ -30,7 +30,7 @@ Piped stdin (print/json modes):
   cat error.log | oma -p          (stdin only)
 `;
 const MODES = ["print", "json", "rpc", "tui"];
-const PERMISSIONS = ["ask", "auto", "deny", "off"];
+const PERMISSIONS = ["ask", "auto", "deny", "off", "yolo"];
 /** Parse argv SYNTAX only: whether a run actually has an input (prompt or
  *  piped stdin) is decided in main() after stdin is read. */
 export function parseArgs(argv) {
@@ -111,6 +111,13 @@ export function parseArgs(argv) {
         else if (arg === "--read-only") {
             args.readOnly = true;
         }
+        else if (arg === "--yolo") {
+            // The industry's skip-permissions flag (crush --yolo / CC
+            // --dangerously-skip-permissions): ungated run. Boundaries that do
+            // not depend on judgment (workspace containment, protected files,
+            // secret stripping, egress rules, write freshness) all remain.
+            args.permission = "yolo";
+        }
         else if (arg === "--permission") {
             const value = argv[i + 1];
             if (!value || !PERMISSIONS.includes(value)) {

package/dist/cli/gateway-commands.d.ts

@@ -1,9 +1,14 @@
 /** The gateway domain's verbs. `oma gateway <verb>` is the CLI surface for
  *  backend + web: fetch their artifact, run it, report on it. */
-export declare const GATEWAY_VERBS: readonly ["up", "down", "fetch", "status"];
+export declare const GATEWAY_VERBS: readonly ["up", "down", "fetch", "status", "doctor", "passwd"];
 export type GatewayCommand = (typeof GATEWAY_VERBS)[number];
-export declare const GATEWAY_USAGE = "oma gateway <command>\n\n  up        start backend + web; stays in the foreground (Ctrl-C stops it)\n  up -d     same, but detached: returns once it is healthy\n  down      stop a detached gateway\n  fetch     download, verify and unpack the gateway artifact for a version\n  status    which version is installed, is it running, is it answering\n\n  --version <v>   artifact version for up/fetch (default: oma's own)\n\nNote: 'gateway' is a reserved first word. To send it as a prompt, use\n'oma -p \"gateway ...\"'.";
+export declare const GATEWAY_USAGE = "oma gateway <command>\n\n  up        start backend + web; stays in the foreground (Ctrl-C stops it)\n  up -d     same, but detached: returns once it is healthy\n  down      stop a detached gateway\n  fetch     download, verify and unpack the gateway artifact for a version\n  status    which version is installed, is it running, is it answering\n  doctor    why nothing can run: artifact, tools, catalog, keys, ports, oma bin\n  passwd    replace the login password with a fresh random one\n\n  --version <v>   artifact version for up/fetch (default: oma's own)\n\nNote: 'gateway' is a reserved first word. To send it as a prompt, use\n'oma -p \"gateway ...\"'.";
 export declare function isGatewayCommand(value: string): value is GatewayCommand;
+/** What to tell the operator about logging in. The password is only echoed on
+ *  an interactive terminal: a detached run's stdout is redirected into a log
+ *  file, and a secret must not be filed away there. The pointer is always
+ *  printed, so a missed banner is never a dead end. */
+export declare function credentialLines(home: string, secrets: Record<string, string>, interactive: boolean): string[];
 export interface GatewayCommandOptions {
     home?: string;
     version?: string;
@@ -21,6 +26,13 @@ export declare function runGatewayStatus(opts?: GatewayCommandOptions): Promise<
 /** `oma gateway up`: fetch the version if it is missing, then run the whole gateway in
  *  the foreground (Ctrl-C stops it, children are signalled in reverse order). */
 export declare function runGatewayUp(opts?: GatewayCommandOptions): Promise<number>;
+/** `oma gateway passwd`: rotate the login password. Generated, never read from
+ *  argv — an argument would land in shell history and process listings.
+ *  Takes effect on the next start, because the web component reads it from its
+ *  environment. */
+export declare function runGatewayPasswd(opts?: GatewayCommandOptions): Promise<number>;
+/** `oma gateway doctor`: check the deployment and say how to fix what is wrong. */
+export declare function runGatewayDoctor(opts?: GatewayCommandOptions): Promise<number>;
 /** `oma gateway down`: stop whatever `up -d` started. */
 export declare function runGatewayDown(opts?: GatewayCommandOptions): Promise<number>;
 /** `oma gateway <verb>`: single entry point so the CLI owns one code path. */

package/dist/cli/gateway-commands.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gateway-commands.d.ts","sourceRoot":"","sources":["../../src/cli/gateway-commands.ts"],"names":[],"mappings":"AAqBA;iEACiE;AACjE,eAAO,MAAM,aAAa,4CAA6C,CAAC;AACxE,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;AAE5D,eAAO,MAAM,aAAa,ygBAWF,CAAC;AAEzB,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,cAAc,CAKvE;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,4DAA4D;IAC5D,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9B;AAyBD;qEACqE;AACrE,wBAAsB,eAAe,CAAC,IAAI,GAAE,qBAA0B,GAAG,OAAO,CAAC,MAAM,CAAC,CAmBvF;AAED;qEACqE;AACrE,wBAAsB,gBAAgB,CAAC,IAAI,GAAE,qBAA0B,GAAG,OAAO,CAAC,MAAM,CAAC,CAuDxF;AAED;iFACiF;AACjF,wBAAsB,YAAY,CAAC,IAAI,GAAE,qBAA0B,GAAG,OAAO,CAAC,MAAM,CAAC,CAkCpF;AAED,yDAAyD;AACzD,wBAAsB,cAAc,CAAC,IAAI,GAAE,qBAA0B,GAAG,OAAO,CAAC,MAAM,CAAC,CAUtF;AA0DD,8EAA8E;AAC9E,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,cAAc,EACpB,IAAI,GAAE,qBAA0B,GAC/B,OAAO,CAAC,MAAM,CAAC,CAKjB"}
+{"version":3,"file":"gateway-commands.d.ts","sourceRoot":"","sources":["../../src/cli/gateway-commands.ts"],"names":[],"mappings":"AAwBA;iEACiE;AACjE,eAAO,MAAM,aAAa,gEAAiE,CAAC;AAC5F,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;AAE5D,eAAO,MAAM,aAAa,0pBAaF,CAAC;AAEzB,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,cAAc,CAKvE;AAED;;;uDAGuD;AACvD,wBAAgB,eAAe,CAC7B,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,WAAW,EAAE,OAAO,GACnB,MAAM,EAAE,CAMV;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,4DAA4D;IAC5D,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9B;AAyBD;qEACqE;AACrE,wBAAsB,eAAe,CAAC,IAAI,GAAE,qBAA0B,GAAG,OAAO,CAAC,MAAM,CAAC,CAmBvF;AAED;qEACqE;AACrE,wBAAsB,gBAAgB,CAAC,IAAI,GAAE,qBAA0B,GAAG,OAAO,CAAC,MAAM,CAAC,CAgExF;AAED;iFACiF;AACjF,wBAAsB,YAAY,CAAC,IAAI,GAAE,qBAA0B,GAAG,OAAO,CAAC,MAAM,CAAC,CAoCpF;AAED;;;mBAGmB;AACnB,wBAAsB,gBAAgB,CAAC,IAAI,GAAE,qBAA0B,GAAG,OAAO,CAAC,MAAM,CAAC,CA+BxF;AAmDD,mFAAmF;AACnF,wBAAsB,gBAAgB,CAAC,IAAI,GAAE,qBAA0B,GAAG,OAAO,CAAC,MAAM,CAAC,CAiBxF;AAED,yDAAyD;AACzD,wBAAsB,cAAc,CAAC,IAAI,GAAE,qBAA0B,GAAG,OAAO,CAAC,MAAM,CAAC,CAUtF;AA+DD,8EAA8E;AAC9E,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,cAAc,EACpB,IAAI,GAAE,qBAA0B,GAC/B,OAAO,CAAC,MAAM,CAAC,CAOjB"}

package/dist/cli/gateway-commands.js

@@ -1,12 +1,14 @@
-import { existsSync } from "node:fs";
+import { existsSync, mkdirSync, writeFileSync } from "node:fs";
+import { writeFile } from "node:fs/promises";
 import { join, resolve } from "node:path";
-import { currentVersion, fetchGatewayArtifact, gatewayPaths, installedVersions, omaHome, omaVersion, readSecrets, } from "../core/gateway/artifact.js";
+import { currentVersion, fetchGatewayArtifact, gatewayPaths, generatePassword, installedVersions, omaHome, omaVersion, readSecrets, } from "../core/gateway/artifact.js";
 import { isProcessAlive, readDaemon, startDetachedGateway, stopDetachedGateway, tailDaemonLog, } from "../core/gateway/daemon.js";
+import { diagnoseGateway } from "../core/gateway/doctor.js";
 import { readGatewayManifest } from "../core/gateway/manifest.js";
 import { runGateway } from "../core/gateway/supervisor.js";
 /** The gateway domain's verbs. `oma gateway <verb>` is the CLI surface for
  *  backend + web: fetch their artifact, run it, report on it. */
-export const GATEWAY_VERBS = ["up", "down", "fetch", "status"];
+export const GATEWAY_VERBS = ["up", "down", "fetch", "status", "doctor", "passwd"];
 export const GATEWAY_USAGE = `oma gateway <command>
 
   up        start backend + web; stays in the foreground (Ctrl-C stops it)
@@ -14,6 +16,8 @@ export const GATEWAY_USAGE = `oma gateway <command>
   down      stop a detached gateway
   fetch     download, verify and unpack the gateway artifact for a version
   status    which version is installed, is it running, is it answering
+  doctor    why nothing can run: artifact, tools, catalog, keys, ports, oma bin
+  passwd    replace the login password with a fresh random one
 
   --version <v>   artifact version for up/fetch (default: oma's own)
 
@@ -26,6 +30,18 @@ export function isGatewayCommand(value) {
     }
     return false;
 }
+/** What to tell the operator about logging in. The password is only echoed on
+ *  an interactive terminal: a detached run's stdout is redirected into a log
+ *  file, and a secret must not be filed away there. The pointer is always
+ *  printed, so a missed banner is never a dead end. */
+export function credentialLines(home, secrets, interactive) {
+    const lines = [];
+    const password = secrets.MOCK_PASSWORD;
+    if (password && interactive)
+        lines.push(`login: user-001 / ${password}`);
+    lines.push(`login password: oma gateway status   (or read ${gatewayPaths(home).secrets})`);
+    return lines;
+}
 /** A source checkout runs the gateway from the repo, so the release artifact it
  *  would download is unused. Only stay quiet there: an explicit CLI call still
  *  fetches. `npm_lifecycle_event` is set while a package's postinstall runs. */
@@ -81,6 +97,13 @@ export async function runGatewayStatus(opts = {}) {
     log(`gateway home: ${paths.home}`);
     log(`versions:   ${versions.length > 0 ? versions.join(", ") : "(none installed)"}`);
     log(`current:    ${current ?? "(none)"}`);
+    // Which catalog the gateway's children will read: product runs deliberately
+    // ignore ~/.oma/models.yml (the agent's own bash tool can write there), so a
+    // custom provider only counts when OMA_HOME points at its models.yml.
+    const catalogHome = process.env.OMA_HOME;
+    log(catalogHome
+        ? `catalog:    ${catalogHome}/models.yml via OMA_HOME`
+        : "catalog:    built-in providers only (OMA_HOME unset — a custom models.yml is not read)");
     if (versions.length === 0) {
         log(`install one: oma gateway fetch   (oma ${omaVersion()})`);
         return 1;
@@ -154,8 +177,9 @@ export async function runGatewayUp(opts = {}) {
                 log("");
                 log(`gateway ${handle.manifest.version} is up (${handle.manifest.components.length} processes)`);
                 log(`open http://127.0.0.1:${web?.port ?? 3001}/login`);
-                if (handle.secrets.MOCK_PASSWORD)
-                    log(`login: user-001 / ${handle.secrets.MOCK_PASSWORD}`);
+                for (const line of credentialLines(home, handle.secrets, process.stdout.isTTY === true)) {
+                    log(line);
+                }
                 log("Ctrl-C stops the gateway");
             },
         });
@@ -165,6 +189,103 @@ export async function runGatewayUp(opts = {}) {
         return 1;
     }
 }
+/** `oma gateway passwd`: rotate the login password. Generated, never read from
+ *  argv — an argument would land in shell history and process listings.
+ *  Takes effect on the next start, because the web component reads it from its
+ *  environment. */
+export async function runGatewayPasswd(opts = {}) {
+    const home = opts.home ?? omaHome();
+    const log = loggerFor(opts, "stdout");
+    const secretsPath = gatewayPaths(home).secrets;
+    if (!existsSync(secretsPath)) {
+        log(`no secrets at ${secretsPath} — run 'oma gateway up' once first`);
+        return 1;
+    }
+    const password = generatePassword();
+    const secrets = { ...readSecrets(home), MOCK_PASSWORD: password };
+    await writeFile(secretsPath, `${JSON.stringify(secrets, null, 2)}\n`, { mode: 0o600 });
+    log(`login password replaced: user-001 / ${password}`);
+    // A password set in the console is stored as a hash in the stack's settings
+    // and wins over this file, so the new one has to land there too — otherwise
+    // rotating here would silently not take effect.
+    const pushed = await pushPasswordToRunningGateway(secrets, password);
+    if (pushed) {
+        log("the running gateway took it too (console-set password updated)");
+        return 0;
+    }
+    // Gateway not reachable: leave a reset request instead, so the next start
+    // adopts the secret above. Without this, "rotate while down" is a no-op — the
+    // stored hash outlives the rotation and the new password is refused.
+    const marker = requestPasswordReset(home);
+    if (marker) {
+        log(`the stored password will be dropped on the next start (${marker})`);
+    }
+    else {
+        log("restart to apply: oma gateway down && oma gateway up -d");
+    }
+    return 0;
+}
+/** Marker filename. Owned by the backend
+ *  (`apps/backend/src/features/auth/password.ts` PASSWORD_RESET_MARKER); oma
+ *  cannot import a backend module, so the literal is repeated here on purpose —
+ *  change both together. */
+const PASSWORD_RESET_MARKER = "password-reset";
+/** Ask the backend to drop its stored password by leaving the reset marker in
+ *  the gateway data dir; the backend consumes it on the next boot and the
+ *  secret file becomes authoritative again.
+ *
+ *  Deliberately NOT a database write: the backend owns backend.db (see
+ *  apps/oh-my-agent/AGENTS.md — "backend is the source of truth for product
+ *  state; the runtime is the runtime"). Writing another process's SQLite file
+ *  from the CLI would also race a running gateway. Returns the path written, or
+ *  null when there is no gateway data dir to write to yet. */
+function requestPasswordReset(home) {
+    const dataDir = join(gatewayPaths(home).data, "backend");
+    if (!existsSync(join(gatewayPaths(home).data)))
+        return null;
+    mkdirSync(dataDir, { recursive: true });
+    const marker = join(dataDir, PASSWORD_RESET_MARKER);
+    writeFileSync(marker, `${new Date().toISOString()}\n`);
+    return marker;
+}
+/** Update the console-set password (a hash in the backend's settings) when the
+ *  gateway is reachable. Returns false when it is not: the file value then
+ *  applies after the next start. */
+async function pushPasswordToRunningGateway(secrets, password) {
+    const token = secrets.BACKEND_AUTH_TOKEN;
+    if (!token)
+        return false;
+    try {
+        const res = await fetch(`${process.env.BACKEND_URL ?? "http://127.0.0.1:3000"}/api/auth/password`, {
+            method: "PUT",
+            headers: { "content-type": "application/json", "x-auth-token": token },
+            body: JSON.stringify({ password }),
+            signal: AbortSignal.timeout(2000),
+        });
+        return res.ok;
+    }
+    catch {
+        return false;
+    }
+}
+/** `oma gateway doctor`: check the deployment and say how to fix what is wrong. */
+export async function runGatewayDoctor(opts = {}) {
+    const home = opts.home ?? omaHome();
+    const log = loggerFor(opts, "stdout");
+    const checks = await diagnoseGateway({ home });
+    log(`oma gateway doctor (home: ${home})`);
+    for (const check of checks) {
+        log(`${check.ok ? "✓" : "✗"} ${check.id.padEnd(9)} ${check.detail}`);
+        if (check.fix)
+            log(`  ${check.ok ? "note" : "fix"}: ${check.fix}`);
+    }
+    const failed = checks.filter((check) => !check.ok);
+    log("");
+    log(failed.length === 0
+        ? "no problems found"
+        : `${failed.length} problem(s): ${failed.map((c) => c.id).join(", ")}`);
+    return failed.length === 0 ? 0 : 1;
+}
 /** `oma gateway down`: stop whatever `up -d` started. */
 export async function runGatewayDown(opts = {}) {
     const home = opts.home ?? omaHome();
@@ -206,12 +327,12 @@ async function startGatewayDetached(opts) {
             try {
                 const res = await fetch(healthUrl, { signal: AbortSignal.timeout(2000) });
                 if (res.ok) {
-                    const password = readSecrets(opts.home).MOCK_PASSWORD;
                     opts.log("");
                     opts.log(`gateway ${opts.version} is up in the background (pid ${daemon.pid})`);
                     opts.log(`open http://127.0.0.1:${web?.port ?? 3001}/login`);
-                    if (password)
-                        opts.log(`login: user-001 / ${password}`);
+                    for (const line of credentialLines(opts.home, readSecrets(opts.home), process.stdout.isTTY === true)) {
+                        opts.log(line);
+                    }
                     opts.log("stop it with: oma gateway down");
                     return 0;
                 }
@@ -238,5 +359,9 @@ export async function runGatewayCommand(verb, opts = {}) {
         return runGatewayDown(opts);
     if (verb === "fetch")
         return runGatewayFetch(opts);
+    if (verb === "doctor")
+        return runGatewayDoctor(opts);
+    if (verb === "passwd")
+        return runGatewayPasswd(opts);
     return runGatewayStatus(opts);
 }

package/dist/cli/initial-input.d.ts

@@ -28,8 +28,9 @@ export declare function buildCliRunInput(opts: {
     modelRuntime: ModelRuntime;
     /** Canonical `<provider>/<model>` id; undefined = first available. */
     modelId?: string;
-    /** Standalone permission gate. undefined = ungated (legacy default). */
-    permissionMode?: "ask" | "auto" | "deny";
+    /** Standalone permission gate. undefined = ungated (legacy default);
+     *  "yolo" = ungated + OS bash sandbox forced when available. */
+    permissionMode?: "ask" | "auto" | "deny" | "yolo";
     /** --read-only: advertise no write/edit/bash/eval to the model. */
     readOnly?: boolean;
     /** Clipboard/pasted images riding this prompt (vision input). */

package/dist/cli/initial-input.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"initial-input.d.ts","sourceRoot":"","sources":["../../src/cli/initial-input.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAUrD;;;;;wDAKwD;AACxD,wBAAgB,2BAA2B,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,EAAE,CA+C3E;AAMD;;yCAEyC;AACzC,wBAAsB,cAAc,CAClC,MAAM,GAAE,cAAc,CAAC,UAAU,CAAsB,GACtD,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAsB7B;AAED;;iDAEiD;AACjD,wBAAgB,iBAAiB,CAAC,KAAK,EAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAKpF;AA0BD;;;wBAGwB;AAExB,wBAAsB,gBAAgB,CAAC,IAAI,EAAE;IAC3C,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,YAAY,CAAC;IAC3B,sEAAsE;IACtE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,wEAAwE;IACxE,cAAc,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,MAAM,CAAC;IACzC,mEAAmE;IACnE,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,iEAAiE;IACjE,MAAM,CAAC,EAAE,aAAa,CAAC;QACrB,SAAS,EAAE,WAAW,GAAG,YAAY,GAAG,WAAW,GAAG,YAAY,CAAC;QACnE,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC,CAAC;CACJ,GAAG,OAAO,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAyClC"}
+{"version":3,"file":"initial-input.d.ts","sourceRoot":"","sources":["../../src/cli/initial-input.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAUrD;;;;;wDAKwD;AACxD,wBAAgB,2BAA2B,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,EAAE,CA+C3E;AAMD;;yCAEyC;AACzC,wBAAsB,cAAc,CAClC,MAAM,GAAE,cAAc,CAAC,UAAU,CAAsB,GACtD,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAsB7B;AAED;;iDAEiD;AACjD,wBAAgB,iBAAiB,CAAC,KAAK,EAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAKpF;AA0BD;;;wBAGwB;AAExB,wBAAsB,gBAAgB,CAAC,IAAI,EAAE;IAC3C,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,YAAY,CAAC;IAC3B,sEAAsE;IACtE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;oEACgE;IAChE,cAAc,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;IAClD,mEAAmE;IACnE,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,iEAAiE;IACjE,MAAM,CAAC,EAAE,aAAa,CAAC;QACrB,SAAS,EAAE,WAAW,GAAG,YAAY,GAAG,WAAW,GAAG,YAAY,CAAC;QACnE,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC,CAAC;CACJ,GAAG,OAAO,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAyClC"}

package/dist/core/coordination/registry.d.ts

@@ -73,6 +73,17 @@ export interface CoordinationRegistry {
     isDeliveryAcknowledged(id: string): boolean;
     settleEntry(id: string, patch: Partial<RegistryEntry>): void;
     setCompletionListener(cb: ((entry: RegistryEntry) => void) | null): void;
+    /** Remove THIS callback only. A TUI session installs a listener and must
+     *  remove it on close without clobbering whichever listener a NEWER
+     *  session has since installed (single-slot setCompletionListener(null)
+     *  would). */
+    removeCompletionListener(cb: (entry: RegistryEntry) => void): void;
+    /** Kill every RUNNING entry that owns a kill callback (bash/eval bg
+     *  jobs). Run teardown: the table is about to be dropped, so the children
+     *  must go with it — clearAll() alone frees the bookkeeping and orphans
+     *  the processes. Subagents are excluded (the delegation executor owns
+     *  those) and settled entries have nothing to kill. */
+    stopRunningEntries(scope?: string): number;
     notifyEntryCompletion(entry: RegistryEntry): void;
     /** Drop every entry (Run teardown). */
     clearAll(): void;

package/dist/core/coordination/registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../../src/core/coordination/registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAC9E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhD,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,SAAS,CAAC;AACzE,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,MAAM,GAAG,UAAU,CAAC;AAErD,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,MAAM,EAAE,WAAW,CAAC;IACpB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,IAAI,CAAC;IAC3B,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,IAAI,CAAC;IAClB,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,SAAS,CAAC;IAChB,MAAM,EAAE,WAAW,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAOD;;;;sDAIsD;AACtD,MAAM,WAAW,oBAAoB;IACnC,aAAa,CAAC,KAAK,EAAE,aAAa,GAAG;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IACjF,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS,CAAC;IAChD,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC;IAC7D,kBAAkB,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACnD,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,QAAQ,EAAE,CAAC;IACvC,WAAW,CAAC,IAAI,EAAE;QAChB,GAAG,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;QACxB,KAAK,EAAE,MAAM,CAAC;QACd,SAAS,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IACxD,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACvD,gBAAgB,IAAI,MAAM,CAAC;IAC3B;;sEAEkE;IAClE,qBAAqB,CAAC,GAAG,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,CAAC;IACpD,sBAAsB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC;IAC5C,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC;IAC7D,qBAAqB,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,aAAa,KAAK,IAAI,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;IACzE,qBAAqB,CAAC,KAAK,EAAE,aAAa,GAAG,IAAI,CAAC;IAClD,uCAAuC;IACvC,QAAQ,IAAI,IAAI,CAAC;CAClB;AAED,wBAAgB,0BAA0B,IAAI,oBAAoB,CAwKjE;AAED;;kEAEkE;AAClE,eAAO,MAAM,eAAe,EAAE,oBAAmD,CAAC"}
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../../src/core/coordination/registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAC9E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhD,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,SAAS,CAAC;AACzE,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,MAAM,GAAG,UAAU,CAAC;AAErD,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,MAAM,EAAE,WAAW,CAAC;IACpB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,IAAI,CAAC;IAC3B,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,IAAI,CAAC;IAClB,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,SAAS,CAAC;IAChB,MAAM,EAAE,WAAW,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAOD;;;;sDAIsD;AACtD,MAAM,WAAW,oBAAoB;IACnC,aAAa,CAAC,KAAK,EAAE,aAAa,GAAG;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IACjF,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS,CAAC;IAChD,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC;IAC7D,kBAAkB,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACnD,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,QAAQ,EAAE,CAAC;IACvC,WAAW,CAAC,IAAI,EAAE;QAChB,GAAG,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;QACxB,KAAK,EAAE,MAAM,CAAC;QACd,SAAS,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IACxD,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACvD,gBAAgB,IAAI,MAAM,CAAC;IAC3B;;sEAEkE;IAClE,qBAAqB,CAAC,GAAG,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,CAAC;IACpD,sBAAsB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC;IAC5C,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC;IAC7D,qBAAqB,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,aAAa,KAAK,IAAI,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;IACzE;;;kBAGc;IACd,wBAAwB,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,aAAa,KAAK,IAAI,GAAG,IAAI,CAAC;IACnE;;;;2DAIuD;IACvD,kBAAkB,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC3C,qBAAqB,CAAC,KAAK,EAAE,aAAa,GAAG,IAAI,CAAC;IAClD,uCAAuC;IACvC,QAAQ,IAAI,IAAI,CAAC;CAClB;AAED,wBAAgB,0BAA0B,IAAI,oBAAoB,CA6LjE;AAED;;kEAEkE;AAClE,eAAO,MAAM,eAAe,EAAE,oBAAmD,CAAC"}

package/dist/core/coordination/registry.js

@@ -130,6 +130,27 @@ export function createCoordinationRegistry() {
     function setCompletionListener(cb) {
         completionListener = cb;
     }
+    function removeCompletionListener(cb) {
+        if (completionListener === cb)
+            completionListener = null;
+    }
+    function stopRunningEntries(scope) {
+        let stopped = 0;
+        for (const e of entries.values()) {
+            if (e.status !== "running" || e.kind === "subagent" || !e.kill)
+                continue;
+            if (scope !== undefined && e.scope !== scope)
+                continue;
+            try {
+                e.kill();
+                stopped++;
+            }
+            catch {
+                /* a broken kill never blocks the rest of teardown */
+            }
+        }
+        return stopped;
+    }
     function acknowledgeDeliveries(ids) {
         for (const id of ids)
             ackedDeliveries.add(id);
@@ -154,6 +175,8 @@ export function createCoordinationRegistry() {
         isDeliveryAcknowledged,
         settleEntry,
         setCompletionListener,
+        removeCompletionListener,
+        stopRunningEntries,
         notifyEntryCompletion,
         clearAll,
     };

package/dist/core/gateway/artifact.d.ts

@@ -1,7 +1,6 @@
 import { type GatewayManifest } from "./manifest.js";
 export declare class GatewayArtifactError extends Error {
 }
-export declare const DEFAULT_STACK_REPO = "Chengchcc/my-agent-team";
 export declare function omaHome(env?: NodeJS.ProcessEnv): string;
 /** The launcher's on-disk layout, in one place: code lives under
  *  gateway/versions/<version>/, state under gateway-data/ so an upgrade that swaps
@@ -29,7 +28,7 @@ export declare function releaseLocation(version: string, env?: NodeJS.ProcessEnv
 export declare function sha256File(path: string): Promise<string>;
 /** Parse the SHA256SUMS entry for one file (GNU coreutils format). */
 export declare function parseSums(sums: string, fileName: string): string;
-/** Read the launcher's secrets without generating anything (status paths). */
+export declare function generatePassword(): string;
 export declare function readSecrets(home: string): Record<string, string>;
 /** Read the launcher's secrets, generating any missing one. 0600: they
  *  authenticate the local single-user gateway. */
@@ -39,6 +38,8 @@ export interface FetchOptions {
     version?: string;
     env?: NodeJS.ProcessEnv;
     log?: (line: string) => void;
+    /** No-byte allowance before a download is declared dead (test seam). */
+    stallMs?: number;
 }
 export interface FetchResult {
     version: string;

package/dist/core/gateway/artifact.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"artifact.d.ts","sourceRoot":"","sources":["../../../src/core/gateway/artifact.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,KAAK,eAAe,EAAuB,MAAM,eAAe,CAAC;AAE1E,qBAAa,oBAAqB,SAAQ,KAAK;CAAG;AAElD,eAAO,MAAM,kBAAkB,4BAA4B,CAAC;AAM5D,wBAAgB,OAAO,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAEpE;AAED;;sDAEsD;AACtD,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,2CAA2C;IAC3C,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,wBAAgB,YAAY,CAAC,IAAI,GAAE,MAAkB,GAAG,YAAY,CAUnE;AAED;qDACqD;AACrD,wBAAgB,UAAU,IAAI,MAAM,CAQnC;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;CACd;AAED;oFACoF;AACpF,wBAAgB,eAAe,CAC7B,OAAO,EAAE,MAAM,EACf,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,eAAe,CAMjB;AAED,wBAAsB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAI9D;AAED,sEAAsE;AACtE,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAMhE;AA2CD,8EAA8E;AAC9E,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAgBhE;AAED;kDACkD;AAClD,wBAAsB,aAAa,CACjC,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,SAAS,MAAM,EAAE,GACvB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAgBjC;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9B;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,OAAO,CAAC;IACpB,QAAQ,EAAE,eAAe,CAAC;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;6EAC6E;AAC7E,wBAAsB,oBAAoB,CAAC,IAAI,GAAE,YAAiB,GAAG,OAAO,CAAC,WAAW,CAAC,CAuDxF;AAED,wBAAgB,iBAAiB,CAAC,IAAI,GAAE,MAAkB,GAAG,MAAM,EAAE,CAMpE;AAED,wBAAgB,cAAc,CAAC,IAAI,GAAE,MAAkB,GAAG,MAAM,GAAG,SAAS,CAO3E"}
+{"version":3,"file":"artifact.d.ts","sourceRoot":"","sources":["../../../src/core/gateway/artifact.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,KAAK,eAAe,EAAuB,MAAM,eAAe,CAAC;AAE1E,qBAAa,oBAAqB,SAAQ,KAAK;CAAG;AAQlD,wBAAgB,OAAO,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAEpE;AAED;;sDAEsD;AACtD,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,2CAA2C;IAC3C,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,wBAAgB,YAAY,CAAC,IAAI,GAAE,MAAkB,GAAG,YAAY,CAUnE;AAED;qDACqD;AACrD,wBAAgB,UAAU,IAAI,MAAM,CAQnC;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;CACd;AAED;oFACoF;AACpF,wBAAgB,eAAe,CAC7B,OAAO,EAAE,MAAM,EACf,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,eAAe,CAMjB;AAED,wBAAsB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAI9D;AAED,sEAAsE;AACtE,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAMhE;AAiFD,wBAAgB,gBAAgB,IAAI,MAAM,CAYzC;AASD,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAgBhE;AAED;kDACkD;AAClD,wBAAsB,aAAa,CACjC,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,SAAS,MAAM,EAAE,GACvB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAiBjC;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B,wEAAwE;IACxE,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,OAAO,CAAC;IACpB,QAAQ,EAAE,eAAe,CAAC;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;6EAC6E;AAC7E,wBAAsB,oBAAoB,CAAC,IAAI,GAAE,YAAiB,GAAG,OAAO,CAAC,WAAW,CAAC,CAuDxF;AAED,wBAAgB,iBAAiB,CAAC,IAAI,GAAE,MAAkB,GAAG,MAAM,EAAE,CAMpE;AAED,wBAAgB,cAAc,CAAC,IAAI,GAAE,MAAkB,GAAG,MAAM,GAAG,SAAS,CAO3E"}

package/dist/core/gateway/artifact.js

@@ -5,7 +5,7 @@ import { join, resolve } from "node:path";
 import { readGatewayManifest } from "./manifest.js";
 export class GatewayArtifactError extends Error {
 }
-export const DEFAULT_STACK_REPO = "Chengchcc/my-agent-team";
+const DEFAULT_STACK_REPO = "Chengchcc/my-agent-team";
 /** Written last, after a version is fully unpacked: its presence is what makes
  *  an install idempotent. */
 const INSTALL_MARKER = ".complete";
@@ -56,7 +56,24 @@ export function parseSums(sums, fileName) {
     }
     throw new GatewayArtifactError(`SHA256SUMS has no entry for ${fileName}`);
 }
-async function download(url, dest) {
+/** How long a download may go without delivering a byte before it is called
+ *  dead. A slow-but-moving transfer is fine; a wedged one must not hang an
+ *  install (a postinstall sat for 10 minutes before this existed). */
+const DEFAULT_STALL_MS = 60_000;
+async function withStallTimeout(work, ms, onStall) {
+    let timer;
+    const stall = new Promise((_, reject) => {
+        timer = setTimeout(() => reject(onStall()), ms);
+    });
+    try {
+        return await Promise.race([work, stall]);
+    }
+    finally {
+        if (timer)
+            clearTimeout(timer);
+    }
+}
+async function download(url, dest, stallMs) {
     let res;
     try {
         res = await fetch(url, { redirect: "follow" });
@@ -73,11 +90,17 @@ async function download(url, dest) {
     // also keeps a 60MB artifact out of memory.
     const writer = Bun.file(dest).writer();
     const reader = res.body.getReader();
-    for (;;) {
-        const { done, value } = await reader.read();
-        if (done)
-            break;
-        writer.write(value);
+    try {
+        for (;;) {
+            const { done, value } = await withStallTimeout(reader.read(), stallMs, () => new GatewayArtifactError(`download stalled for ${Math.round(stallMs / 1000)}s at ${url} — check the connection, then retry`));
+            if (done)
+                break;
+            writer.write(value);
+        }
+    }
+    catch (err) {
+        await reader.cancel().catch(() => { });
+        throw err;
     }
     await writer.end();
 }
@@ -99,6 +122,34 @@ async function unpack(tarball, dest) {
     }
 }
 /** Read the launcher's secrets without generating anything (status paths). */
+/** Human-typed login password. Entropy comes from length, not from requiring
+ *  character classes: 22 chars over a 56-symbol alphabet is ~128 bits. The
+ *  alphabet drops look-alikes (l, 1, I, O, 0) and shell-hostile punctuation,
+ *  because the person typing it may be reading it off a terminal on another
+ *  device. */
+const PASSWORD_ALPHABET = "ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz23456789";
+const PASSWORD_LENGTH = 22;
+export function generatePassword() {
+    // Rejection sampling keeps the alphabet uniform (256 % 56 is not zero).
+    const ceiling = Math.floor(256 / PASSWORD_ALPHABET.length) * PASSWORD_ALPHABET.length;
+    let password = "";
+    while (password.length < PASSWORD_LENGTH) {
+        for (const byte of crypto.getRandomValues(new Uint8Array(PASSWORD_LENGTH))) {
+            if (byte >= ceiling)
+                continue;
+            password += PASSWORD_ALPHABET.charAt(byte % PASSWORD_ALPHABET.length);
+            if (password.length === PASSWORD_LENGTH)
+                break;
+        }
+    }
+    return password;
+}
+/** Internal tokens (backend auth, session signing): never typed, so the cheap
+ *  hex encoding is fine. */
+function generateToken() {
+    const bytes = crypto.getRandomValues(new Uint8Array(24));
+    return Array.from(bytes, (b) => b.toString(16).padStart(2, "0")).join("");
+}
 export function readSecrets(home) {
     const path = gatewayPaths(home).secrets;
     if (!existsSync(path))
@@ -127,8 +178,9 @@ export async function ensureSecrets(home, names) {
     for (const name of names) {
         if (existing[name])
             continue;
-        const bytes = crypto.getRandomValues(new Uint8Array(24));
-        existing[name] = Array.from(bytes, (b) => b.toString(16).padStart(2, "0")).join("");
+        // MOCK_PASSWORD is the one a human retypes at the login page; the rest are
+        // machine-to-machine tokens.
+        existing[name] = name === "MOCK_PASSWORD" ? generatePassword() : generateToken();
         generated = true;
     }
     if (generated) {
@@ -163,7 +215,7 @@ export async function fetchGatewayArtifact(opts = {}) {
         if (!sums.ok)
             throw new GatewayArtifactError(`${sumsUrl} -> HTTP ${sums.status}`);
         const expected = parseSums(await sums.text(), `oma-gateway-${version}.tar.zst`);
-        await download(tarballUrl, tarball);
+        await download(tarballUrl, tarball, opts.stallMs ?? DEFAULT_STALL_MS);
         const actual = await sha256File(tarball);
         if (actual !== expected) {
             throw new GatewayArtifactError(`checksum mismatch for ${version}: expected ${expected.slice(0, 12)}…, got ${actual.slice(0, 12)}…`);

package/dist/core/gateway/daemon.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"daemon.d.ts","sourceRoot":"","sources":["../../../src/core/gateway/daemon.ts"],"names":[],"mappings":"AAaA;mDACmD;AACnD,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,8EAA8E;AAC9E,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;CACb;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,CAGrD;AAED,4EAA4E;AAC5E,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS,CASlE;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CASnD;AAED;;;gFAGgF;AAChF,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAexD;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,6EAA6E;IAC7E,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3B,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;6CAE6C;AAC7C,wBAAsB,oBAAoB,CAAC,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,aAAa,CAAC,CA6B7F;AAED;uBACuB;AACvB,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CA4B7F;AAED,kEAAkE;AAClE,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,SAAK,GAAG,MAAM,EAAE,CAKhE"}
+{"version":3,"file":"daemon.d.ts","sourceRoot":"","sources":["../../../src/core/gateway/daemon.ts"],"names":[],"mappings":"AAaA;mDACmD;AACnD,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,8EAA8E;AAC9E,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;CACb;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,CAGrD;AAED,4EAA4E;AAC5E,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS,CASlE;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CASnD;AAED;;;gFAGgF;AAChF,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAexD;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,6EAA6E;IAC7E,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3B,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;6CAE6C;AAC7C,wBAAsB,oBAAoB,CAAC,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,aAAa,CAAC,CA+B7F;AAED;uBACuB;AACvB,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CA4B7F;AAED,kEAAkE;AAClE,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,SAAK,GAAG,MAAM,EAAE,CAKhE"}

package/dist/core/gateway/daemon.js

@@ -68,7 +68,9 @@ export async function startDetachedGateway(opts) {
     const gateway = gatewayPaths(opts.home);
     await mkdir(gateway.root, { recursive: true });
     const paths = daemonPaths(opts.home);
-    const logFd = openSync(paths.log, "a");
+    // 0600: the log carries the supervisor's own output, and nothing that runs
+    // unattended should be world-readable.
+    const logFd = openSync(paths.log, "a", 0o600);
     let pid;
     try {
         const proc = Bun.spawn([...opts.command], {

package/dist/core/gateway/doctor.d.ts

@@ -0,0 +1,21 @@
+/** One diagnosis line: what was checked, what was found, and how to fix it. */
+export interface GatewayCheck {
+    id: string;
+    ok: boolean;
+    detail: string;
+    fix?: string;
+}
+export interface DoctorOptions {
+    home?: string;
+    /** Seam for tests: replaces the `oma --list-models` probe. */
+    probeModels?: () => Promise<{
+        providers: string[];
+    }>;
+    /** Seam for tests: replaces the release HEAD probe. Returns the HTTP status,
+     *  or undefined when the host could not be reached. */
+    probeRelease?: (url: string) => Promise<number | undefined>;
+}
+/** Diagnose why a gateway may not be able to run anything: artifact, tools,
+ *  catalog source, runnable providers, ports, and the per-run oma binary. */
+export declare function diagnoseGateway(opts?: DoctorOptions): Promise<GatewayCheck[]>;
+//# sourceMappingURL=doctor.d.ts.map

package/dist/core/gateway/doctor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../../../src/core/gateway/doctor.ts"],"names":[],"mappings":"AAeA,+EAA+E;AAC/E,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,8DAA8D;IAC9D,WAAW,CAAC,EAAE,MAAM,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;IACrD;2DACuD;IACvD,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CAC7D;AAoED;6EAC6E;AAC7E,wBAAsB,eAAe,CAAC,IAAI,GAAE,aAAkB,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CA2UvF"}