@chibitek/chibi 0.1.155 → 0.1.158

package/dist-server/openmausbot.js

@@ -24992,7 +24992,6 @@ function idsFromModelsPayload(payload) {
     if (typeof id !== "string" || !MODEL_ID.test(id)) return [];
     const low = id.toLowerCase();
     if (low.includes("embed") || low.includes("bge-") || low.includes("nomic")) return [];
-    if (isOllamaCloudModel(record5)) return [];
     return [id];
   });
 }
@@ -25099,7 +25098,7 @@ async function probeLocalInjects(env = process.env, fetchImpl = fetch) {
         id: encodeInjectId(host.id, model),
         host: host.id,
         model,
-        label: `${model} (${host.label})`,
+        label: isOllamaCloudModel(model) ? `${model} (${host.label}, plan-billed)` : `${model} (${host.label})`,
         loaded: loaded.has(model),
         ...contextWindow ? { contextWindow } : {}
       });
@@ -30445,6 +30444,7 @@ var init_claude = __esm({
             active.delete(threadId);
             session.turn = null;
             retryState.delete(threadId);
+            if (t2.authFailed) closeSession(threadId, "sign-in required");
             emit({ ...base3(threadId, t2.turnId), type: "turn.completed", ok, stopReason, cost, ...usage ? { usage } : {} });
             if (session.child.exitCode === null && !session.closing) armIdle(threadId);
           };
@@ -30634,6 +30634,11 @@ var init_claude = __esm({
                 if (o.origin?.kind === "task-notification") break;
                 {
                   const t2 = session.turn;
+                  const resultError = [o.result, ...Array.isArray(o.errors) ? o.errors : []].filter((value) => typeof value === "string").join("\n");
+                  if (o.is_error === true && !t2?.authFailed && claudeAuthFailure({ error: o.error ?? "api_error" }, resultError)) {
+                    if (t2) t2.authFailed = true;
+                    emit({ ...base3(threadId, currentTurnId()), type: "runtime.error", message: resultError, setup: true, failure: "auth_failed" });
+                  }
                   const usage = o.usage ? {
                     input: (o.usage.input_tokens || 0) + (o.usage.cache_read_input_tokens || 0) + (o.usage.cache_creation_input_tokens || 0),
                     output: o.usage.output_tokens || 0,
@@ -30641,7 +30646,7 @@ var init_claude = __esm({
                   } : void 0;
                   const earlier = t2?.carried;
                   const result = {
-                    ok: o.is_error !== true,
+                    ok: o.is_error !== true && !t2?.authFailed,
                     stopReason: t2?.authFailed ? "auth_required" : t2?.refreshConflict && o.is_error === true ? "credential_refresh_conflict" : claudeResultStopReason(o),
                     cost: sumCost(earlier?.cost ?? null, o.total_cost_usd ?? null),
                     usage: sumUsage(earlier?.usage, usage)
@@ -58743,6 +58748,82 @@ var init_browser_engine = __esm({
   }
 });
 
+// server/cli-help.ts
+var USAGE = `chibi \u2014 your team of AI bots, ready in a few steps
+
+  chibi                               set up once, then open your workspace
+  chibi setup [--data-dir DIR]
+  chibi start [the same options as serve]
+  chibi serve [--port 8799] [--data-dir DIR] [--label NAME]
+                    [--public-url https://host] [--tailscale | --tunnel | --domain HOST] [--no-pair]
+  chibi pair  [--label NAME] [--client] [--phone ios|android]
+                    [--public-url https://host]
+  chibi sessions [revoke ID]
+  chibi status
+  chibi login [--email you@example.com]
+  chibi logout
+  chibi command --bot ID|--group ID --thread ID --text "/goal status" [--port 8799]
+  chibi goal --bot ID --thread ID --text "--tokens 100000 objective"
+  chibi access list | add EMAIL [--chat-only] | remove EMAIL
+  chibi service install [--domain HOST | --tunnel | --tailscale] [--port N] [--data-dir DIR] | uninstall
+  chibi browser install [--with-deps] | status
+  chibi fleet init --domain HOST [--operator USER] | create NAME --admin EMAIL [--member EMAIL] [--brand FILE]
+                    [--anthropic-key-file FILE] [--cap USD] [--license-key KEY] [--memory 1G]
+                  | list | users NAME add|remove EMAIL [--chat-only] | suspend NAME | resume NAME
+                  | delete NAME --yes [--keep-data] | upgrade   (all take --dry-run)
+                  | agent [--socket PATH] [--group USER]   (root; installed by init --operator)
+
+setup   choose AI access and optional phone access; keep existing bots and chats
+start   same as chibi: use your saved settings and open the workspace
+serve   starts the server without prompts and prints a pairing link + QR code
+pair    mints a pairing code against a running server (--client: chat only)
+sessions lists paired devices; "sessions revoke ID" signs one out
+status  what the server says about itself
+login   signs this machine in to an Atomic account (an emailed code)
+        and reserves its public address for --tunnel
+logout  releases that address and signs out
+access  who may sign in with an emailed code at /pair: an address or
+        @domain; --chat-only gives chat and approvals without settings.
+        Takes effect at once, no restart.
+service keep the server running across reboots: writes a systemd unit
+        (Linux) or a launchd agent (macOS) for the same serve options and
+        prints the commands that install it. Install the package
+        permanently first (npm install -g @chibitek/chibi).
+browser install: the bots' browser engine (agent-browser, pinned) into the
+        data dir, and Chrome for Testing into the user's browser cache.
+        --with-deps also installs
+        the Linux libraries Chrome needs (run as root once). Then run
+        browser install as the user running serve, from that user's home.
+        status: what the current user and data directory have.
+fleet   many client workspaces on one Linux server, each its own account,
+        service, data folder, brand, sign-in list and keys at NAME.HOST
+        behind the system Caddy. Plans are printed unless run as root;
+        --dry-run always prints. Install the package permanently first.
+        init --operator USER also installs the fleet agent, a root service
+        on a Unix socket only USER may open, so the workspace running as
+        USER manages the others from Settings \u2192 Workspaces.
+
+--tailscale  serve over your tailnet: Tailscale terminates HTTPS and the
+             link uses this machine's MagicDNS name (needs Tailscale signed in
+             and HTTPS certificates enabled for the tailnet)
+--tunnel     serve at a public HTTPS address through a Cloudflare tunnel
+             from a hosted control plane (set OMB_CONTROL_PLANE_URL; Atomic
+             ships none). Run \`chibi login\` once on this machine first.
+--domain     serve at https://HOST on your own domain: a pinned Caddy is
+             downloaded once and run alongside the server, and gets the
+             certificate itself. Point the domain's DNS at this machine and
+             open ports 80 and 443.
+
+--no-open   do not open a browser window
+--no-pair   skip phone setup and do not print a pairing code
+--local     start locally this time, ignoring saved remote-access settings
+--quiet     skip the welcome banner (it never shows when output is piped;
+            NO_COLOR=1 shows it without color)
+
+Install once with \`npm install -g @chibitek/chibi\`, then type \`chibi\`.
+Or run without a global install: \`npx @chibitek/chibi\`. Node 24+ is required.
+`;
+
 // server/cli.ts
 var import_qrcode_terminal = __toESM(require_main(), 1);
 import { spawn as spawn10 } from "node:child_process";
@@ -60737,6 +60818,32 @@ function runServiceCommand(input, io2) {
   return 0;
 }
 
+// server/port-in-use.ts
+import { connect } from "node:net";
+function portInUse(port) {
+  return new Promise((done) => {
+    const socket = connect({ host: "127.0.0.1", port });
+    socket.setTimeout(1e3);
+    socket.once("connect", () => {
+      socket.destroy();
+      done(true);
+    });
+    socket.once("timeout", () => {
+      socket.destroy();
+      done(false);
+    });
+    socket.once("error", () => done(false));
+  });
+}
+async function reportBusyPort(port, dataDirFlag) {
+  for (const candidate of [port, Number(process.env.OMB_WEBHOOK_PORT || port + 1)]) {
+    if (!await portInUse(candidate)) continue;
+    console.error(`Port ${candidate} is already in use by another app. Choose a free port, for example: chibi start --port ${port + 20}${dataDirFlag}`);
+    return true;
+  }
+  return false;
+}
+
 // shared/chibi-mark.ts
 var CHIBI_GRID = [
   "A...............",
@@ -62433,7 +62540,7 @@ function describeTunnelState(state2, address) {
 
 // server/cli.ts
 var HERE2 = dirname13(fileURLToPath3(import.meta.url));
-var COMMANDS = ["setup", "start", "serve", "pair", "sessions", "status", "login", "logout", "access", "service", "browser", "fleet", "help", "--help", "-h"];
+var COMMANDS = ["command", "goal", "setup", "start", "serve", "pair", "sessions", "status", "login", "logout", "access", "service", "browser", "fleet", "help", "--help", "-h"];
 function parseArgs2(argv, env = process.env) {
   const implicitStart = !argv.length || argv[0].startsWith("--") && argv[0] !== "--help";
   const [command = "start", ...rest] = implicitStart ? ["start", ...argv] : argv;
@@ -62461,7 +62568,11 @@ function parseArgs2(argv, env = process.env) {
       return v3;
     };
     try {
-      if (arg === "--port") options.port = Number(value());
+      if ((options.command === "command" || options.command === "goal") && arg === "--bot") options.botId = value();
+      else if ((options.command === "command" || options.command === "goal") && arg === "--group") options.groupId = value();
+      else if ((options.command === "command" || options.command === "goal") && arg === "--thread") options.threadId = value();
+      else if ((options.command === "command" || options.command === "goal") && arg === "--text") options.commandText = value();
+      else if (arg === "--port") options.port = Number(value());
       else if (arg === "--data-dir") options.dataDir = resolve13(value());
       else if (arg === "--label") options.label = value();
       else if (arg === "--public-url") options.publicUrl = value().replace(/\/+$/, "");
@@ -62517,6 +62628,7 @@ function parseArgs2(argv, env = process.env) {
   if (!Number.isInteger(options.port) || options.port < 1 || options.port > 65535) return { error: "--port must be 1-65535" };
   if (options.publicUrl && !/^https?:\/\//.test(options.publicUrl)) return { error: "--public-url must start with http:// or https://" };
   if (options.tailscale && options.tunnel) return { error: "choose one of --tailscale (your tailnet) and --tunnel (a public address)" };
+  if ((options.command === "command" || options.command === "goal") && (Boolean(options.botId) === Boolean(options.groupId) || !options.threadId || !options.commandText)) return { error: "command and goal require exactly one of --bot ID or --group ID, plus --thread ID --text TEXT" };
   if (options.command === "access" && !options.accessAction) return { error: "access needs one of: list, add EMAIL [--chat-only], remove EMAIL" };
   if (options.command === "service" && !options.serviceAction) return { error: "service needs one of: install [the same options as serve], uninstall" };
   if (options.domain && (options.tailscale || options.tunnel || options.publicUrl)) return { error: "--domain already gives the server its address; drop --tailscale, --tunnel and --public-url" };
@@ -62530,78 +62642,6 @@ function parseArgs2(argv, env = process.env) {
   }
   return options;
 }
-var USAGE = `chibi \u2014 your team of AI bots, ready in a few steps
-
-  chibi                               set up once, then open your workspace
-  chibi setup [--data-dir DIR]
-  chibi start [the same options as serve]
-  chibi serve [--port 8799] [--data-dir DIR] [--label NAME]
-                    [--public-url https://host] [--tailscale | --tunnel | --domain HOST] [--no-pair]
-  chibi pair  [--label NAME] [--client] [--phone ios|android]
-                    [--public-url https://host]
-  chibi sessions [revoke ID]
-  chibi status
-  chibi login [--email you@example.com]
-  chibi logout
-  chibi access list | add EMAIL [--chat-only] | remove EMAIL
-  chibi service install [--domain HOST | --tunnel | --tailscale] [--port N] [--data-dir DIR] | uninstall
-  chibi browser install [--with-deps] | status
-  chibi fleet init --domain HOST [--operator USER] | create NAME --admin EMAIL [--member EMAIL] [--brand FILE]
-                    [--anthropic-key-file FILE] [--cap USD] [--license-key KEY] [--memory 1G]
-                  | list | users NAME add|remove EMAIL [--chat-only] | suspend NAME | resume NAME
-                  | delete NAME --yes [--keep-data] | upgrade   (all take --dry-run)
-                  | agent [--socket PATH] [--group USER]   (root; installed by init --operator)
-
-setup   choose AI access and optional phone access; keep existing bots and chats
-start   same as chibi: use your saved settings and open the workspace
-serve   starts the server without prompts and prints a pairing link + QR code
-pair    mints a pairing code against a running server (--client: chat only)
-sessions lists paired devices; "sessions revoke ID" signs one out
-status  what the server says about itself
-login   signs this machine in to an Atomic account (an emailed code)
-        and reserves its public address for --tunnel
-logout  releases that address and signs out
-access  who may sign in with an emailed code at /pair: an address or
-        @domain; --chat-only gives chat and approvals without settings.
-        Takes effect at once, no restart.
-service keep the server running across reboots: writes a systemd unit
-        (Linux) or a launchd agent (macOS) for the same serve options and
-        prints the commands that install it. Install the package
-        permanently first (npm install -g @chibitek/chibi).
-browser install: the bots' browser engine (agent-browser, pinned) into the
-        data dir, and Chrome for Testing into the user's browser cache.
-        --with-deps also installs
-        the Linux libraries Chrome needs (run as root once). Then run
-        browser install as the user running serve, from that user's home.
-        status: what the current user and data directory have.
-fleet   many client workspaces on one Linux server, each its own account,
-        service, data folder, brand, sign-in list and keys at NAME.HOST
-        behind the system Caddy. Plans are printed unless run as root;
-        --dry-run always prints. Install the package permanently first.
-        init --operator USER also installs the fleet agent, a root service
-        on a Unix socket only USER may open, so the workspace running as
-        USER manages the others from Settings \u2192 Workspaces.
-
---tailscale  serve over your tailnet: Tailscale terminates HTTPS and the
-             link uses this machine's MagicDNS name (needs Tailscale signed in
-             and HTTPS certificates enabled for the tailnet)
---tunnel     serve at a public HTTPS address through a Cloudflare tunnel
-             from a hosted control plane (set OMB_CONTROL_PLANE_URL; Atomic
-             ships none). Run \`chibi login\` once on this machine first.
---domain     serve at https://HOST on your own domain: a pinned Caddy is
-             downloaded once and run alongside the server, and gets the
-             certificate itself. Point the domain's DNS at this machine and
-             open ports 80 and 443.
-
---no-open   do not open a browser window
---no-pair   skip phone setup and do not print a pairing code
---local     start locally this time, ignoring saved remote-access settings
---quiet     skip the welcome banner (it never shows when output is piped;
-            NO_COLOR=1 shows it without color)
-
-Install once with \`npm install -g @chibitek/chibi\`, then type \`chibi\`.
-Or run without a global install: \`npx @chibitek/chibi\`. Node 24+ is required.
-`;
 function defaultIo() {
   return {
     log: (line) => console.log(line),
@@ -63106,6 +63146,7 @@ async function runServe(options, log = console.log) {
     console.error(`something already answers on http://127.0.0.1:${options.port}; use \`chibi pair\` against it, or --port for a second server`);
     return 1;
   }
+  if (await reportBusyPort(options.port, options.dataDir === join53(homedir29(), ".atomic-app") ? "" : ` --data-dir ${options.dataDir}`)) return 1;
   let publicUrl = options.publicUrl;
   let tailscale = null;
   if (options.tailscale) {
@@ -63373,10 +63414,9 @@ async function runOnboardingCommand(options, io2 = defaultIo(), startServer = ru
       saveCliStartup2(options.dataDir, startupPreferences(launch));
     }
     if (options.command === "setup") {
-      io2.log("\nAll set. Start with: chibi (or npx @chibitek/chibi without a global install).");
-      if (options.dataDir !== join53(homedir29(), ".atomic-app") || options.port !== 8799) {
-        io2.log(`Use the same --data-dir (${options.dataDir}) and --port (${options.port}) options when starting.`);
-      }
+      const flags = [options.dataDir !== join53(homedir29(), ".atomic-app") && ` --data-dir ${options.dataDir}`, options.port !== 8799 && ` --port ${options.port}`].filter(Boolean).join("");
+      io2.log(`
+All set. Start with: chibi${flags ? ` start${flags}` : ""} (or npx @chibitek/chibi without a global install).`);
       return 0;
     }
     if (saved) io2.log("\nWelcome back. Using your saved AI connection.");
@@ -63412,6 +63452,25 @@ ${welcomeBanner(options)}
 `);
   }
   switch (options.command) {
+    case "command":
+    case "goal": {
+      const text4 = options.command === "goal" ? `/goal ${options.commandText}` : options.commandText;
+      const roomGoal = options.groupId ? /^\/goal(?:\s+([\s\S]*))?$/.exec(text4 ?? "") : null;
+      if (roomGoal && (!roomGoal[1]?.trim() || (roomGoal[1].startsWith("--") || /^(status|pause|resume|stop|help)(?:\s|$)/.test(roomGoal[1])))) {
+        console.error("Room goals accept an objective. Personal goal controls and budgets require --bot.");
+        return 2;
+      }
+      const result = await api(options.port, `/api/${options.groupId ? "groups" : "bots"}/${encodeURIComponent(options.groupId ?? options.botId)}/messages`, {
+        method: "POST",
+        body: JSON.stringify({ threadId: options.threadId, text: roomGoal ? roomGoal[1] : text4, ...roomGoal ? { mode: "goal" } : {}, sendId: randomBytes4(16).toString("hex") })
+      });
+      if (result.status >= 400) {
+        console.error(result.body.error ?? `Server returned ${result.status}`);
+        return 1;
+      }
+      console.log(options.json ? JSON.stringify(result.body) : result.body.goalSummary ?? JSON.stringify(result.body));
+      return 0;
+    }
     case "setup":
     case "start":
       return runOnboardingCommand(options);

package/dist-server/pair-cli.js

@@ -24992,7 +24992,6 @@ function idsFromModelsPayload(payload) {
     if (typeof id !== "string" || !MODEL_ID.test(id)) return [];
     const low = id.toLowerCase();
     if (low.includes("embed") || low.includes("bge-") || low.includes("nomic")) return [];
-    if (isOllamaCloudModel(record5)) return [];
     return [id];
   });
 }
@@ -25099,7 +25098,7 @@ async function probeLocalInjects(env = process.env, fetchImpl = fetch) {
         id: encodeInjectId(host.id, model),
         host: host.id,
         model,
-        label: `${model} (${host.label})`,
+        label: isOllamaCloudModel(model) ? `${model} (${host.label}, plan-billed)` : `${model} (${host.label})`,
         loaded: loaded.has(model),
         ...contextWindow ? { contextWindow } : {}
       });
@@ -30445,6 +30444,7 @@ var init_claude = __esm({
             active.delete(threadId);
             session.turn = null;
             retryState.delete(threadId);
+            if (t2.authFailed) closeSession(threadId, "sign-in required");
             emit({ ...base3(threadId, t2.turnId), type: "turn.completed", ok, stopReason, cost, ...usage ? { usage } : {} });
             if (session.child.exitCode === null && !session.closing) armIdle(threadId);
           };
@@ -30634,6 +30634,11 @@ var init_claude = __esm({
                 if (o.origin?.kind === "task-notification") break;
                 {
                   const t2 = session.turn;
+                  const resultError = [o.result, ...Array.isArray(o.errors) ? o.errors : []].filter((value) => typeof value === "string").join("\n");
+                  if (o.is_error === true && !t2?.authFailed && claudeAuthFailure({ error: o.error ?? "api_error" }, resultError)) {
+                    if (t2) t2.authFailed = true;
+                    emit({ ...base3(threadId, currentTurnId()), type: "runtime.error", message: resultError, setup: true, failure: "auth_failed" });
+                  }
                   const usage = o.usage ? {
                     input: (o.usage.input_tokens || 0) + (o.usage.cache_read_input_tokens || 0) + (o.usage.cache_creation_input_tokens || 0),
                     output: o.usage.output_tokens || 0,
@@ -30641,7 +30646,7 @@ var init_claude = __esm({
                   } : void 0;
                   const earlier = t2?.carried;
                   const result = {
-                    ok: o.is_error !== true,
+                    ok: o.is_error !== true && !t2?.authFailed,
                     stopReason: t2?.authFailed ? "auth_required" : t2?.refreshConflict && o.is_error === true ? "credential_refresh_conflict" : claudeResultStopReason(o),
                     cost: sumCost(earlier?.cost ?? null, o.total_cost_usd ?? null),
                     usage: sumUsage(earlier?.usage, usage)
@@ -58743,6 +58748,82 @@ var init_browser_engine = __esm({
   }
 });
 
+// server/cli-help.ts
+var USAGE = `chibi \u2014 your team of AI bots, ready in a few steps
+
+  chibi                               set up once, then open your workspace
+  chibi setup [--data-dir DIR]
+  chibi start [the same options as serve]
+  chibi serve [--port 8799] [--data-dir DIR] [--label NAME]
+                    [--public-url https://host] [--tailscale | --tunnel | --domain HOST] [--no-pair]
+  chibi pair  [--label NAME] [--client] [--phone ios|android]
+                    [--public-url https://host]
+  chibi sessions [revoke ID]
+  chibi status
+  chibi login [--email you@example.com]
+  chibi logout
+  chibi command --bot ID|--group ID --thread ID --text "/goal status" [--port 8799]
+  chibi goal --bot ID --thread ID --text "--tokens 100000 objective"
+  chibi access list | add EMAIL [--chat-only] | remove EMAIL
+  chibi service install [--domain HOST | --tunnel | --tailscale] [--port N] [--data-dir DIR] | uninstall
+  chibi browser install [--with-deps] | status
+  chibi fleet init --domain HOST [--operator USER] | create NAME --admin EMAIL [--member EMAIL] [--brand FILE]
+                    [--anthropic-key-file FILE] [--cap USD] [--license-key KEY] [--memory 1G]
+                  | list | users NAME add|remove EMAIL [--chat-only] | suspend NAME | resume NAME
+                  | delete NAME --yes [--keep-data] | upgrade   (all take --dry-run)
+                  | agent [--socket PATH] [--group USER]   (root; installed by init --operator)
+
+setup   choose AI access and optional phone access; keep existing bots and chats
+start   same as chibi: use your saved settings and open the workspace
+serve   starts the server without prompts and prints a pairing link + QR code
+pair    mints a pairing code against a running server (--client: chat only)
+sessions lists paired devices; "sessions revoke ID" signs one out
+status  what the server says about itself
+login   signs this machine in to an Atomic account (an emailed code)
+        and reserves its public address for --tunnel
+logout  releases that address and signs out
+access  who may sign in with an emailed code at /pair: an address or
+        @domain; --chat-only gives chat and approvals without settings.
+        Takes effect at once, no restart.
+service keep the server running across reboots: writes a systemd unit
+        (Linux) or a launchd agent (macOS) for the same serve options and
+        prints the commands that install it. Install the package
+        permanently first (npm install -g @chibitek/chibi).
+browser install: the bots' browser engine (agent-browser, pinned) into the
+        data dir, and Chrome for Testing into the user's browser cache.
+        --with-deps also installs
+        the Linux libraries Chrome needs (run as root once). Then run
+        browser install as the user running serve, from that user's home.
+        status: what the current user and data directory have.
+fleet   many client workspaces on one Linux server, each its own account,
+        service, data folder, brand, sign-in list and keys at NAME.HOST
+        behind the system Caddy. Plans are printed unless run as root;
+        --dry-run always prints. Install the package permanently first.
+        init --operator USER also installs the fleet agent, a root service
+        on a Unix socket only USER may open, so the workspace running as
+        USER manages the others from Settings \u2192 Workspaces.
+
+--tailscale  serve over your tailnet: Tailscale terminates HTTPS and the
+             link uses this machine's MagicDNS name (needs Tailscale signed in
+             and HTTPS certificates enabled for the tailnet)
+--tunnel     serve at a public HTTPS address through a Cloudflare tunnel
+             from a hosted control plane (set OMB_CONTROL_PLANE_URL; Atomic
+             ships none). Run \`chibi login\` once on this machine first.
+--domain     serve at https://HOST on your own domain: a pinned Caddy is
+             downloaded once and run alongside the server, and gets the
+             certificate itself. Point the domain's DNS at this machine and
+             open ports 80 and 443.
+
+--no-open   do not open a browser window
+--no-pair   skip phone setup and do not print a pairing code
+--local     start locally this time, ignoring saved remote-access settings
+--quiet     skip the welcome banner (it never shows when output is piped;
+            NO_COLOR=1 shows it without color)
+
+Install once with \`npm install -g @chibitek/chibi\`, then type \`chibi\`.
+Or run without a global install: \`npx @chibitek/chibi\`. Node 24+ is required.
+`;
+
 // server/cli.ts
 var import_qrcode_terminal = __toESM(require_main(), 1);
 import { spawn as spawn10 } from "node:child_process";
@@ -60737,6 +60818,32 @@ function runServiceCommand(input, io2) {
   return 0;
 }
 
+// server/port-in-use.ts
+import { connect } from "node:net";
+function portInUse(port) {
+  return new Promise((done) => {
+    const socket = connect({ host: "127.0.0.1", port });
+    socket.setTimeout(1e3);
+    socket.once("connect", () => {
+      socket.destroy();
+      done(true);
+    });
+    socket.once("timeout", () => {
+      socket.destroy();
+      done(false);
+    });
+    socket.once("error", () => done(false));
+  });
+}
+async function reportBusyPort(port, dataDirFlag) {
+  for (const candidate of [port, Number(process.env.OMB_WEBHOOK_PORT || port + 1)]) {
+    if (!await portInUse(candidate)) continue;
+    console.error(`Port ${candidate} is already in use by another app. Choose a free port, for example: chibi start --port ${port + 20}${dataDirFlag}`);
+    return true;
+  }
+  return false;
+}
+
 // shared/chibi-mark.ts
 var CHIBI_GRID = [
   "A...............",
@@ -62433,7 +62540,7 @@ function describeTunnelState(state2, address) {
 
 // server/cli.ts
 var HERE2 = dirname13(fileURLToPath3(import.meta.url));
-var COMMANDS = ["setup", "start", "serve", "pair", "sessions", "status", "login", "logout", "access", "service", "browser", "fleet", "help", "--help", "-h"];
+var COMMANDS = ["command", "goal", "setup", "start", "serve", "pair", "sessions", "status", "login", "logout", "access", "service", "browser", "fleet", "help", "--help", "-h"];
 function parseArgs2(argv, env = process.env) {
   const implicitStart = !argv.length || argv[0].startsWith("--") && argv[0] !== "--help";
   const [command = "start", ...rest] = implicitStart ? ["start", ...argv] : argv;
@@ -62461,7 +62568,11 @@ function parseArgs2(argv, env = process.env) {
       return v3;
     };
     try {
-      if (arg === "--port") options.port = Number(value());
+      if ((options.command === "command" || options.command === "goal") && arg === "--bot") options.botId = value();
+      else if ((options.command === "command" || options.command === "goal") && arg === "--group") options.groupId = value();
+      else if ((options.command === "command" || options.command === "goal") && arg === "--thread") options.threadId = value();
+      else if ((options.command === "command" || options.command === "goal") && arg === "--text") options.commandText = value();
+      else if (arg === "--port") options.port = Number(value());
       else if (arg === "--data-dir") options.dataDir = resolve13(value());
       else if (arg === "--label") options.label = value();
       else if (arg === "--public-url") options.publicUrl = value().replace(/\/+$/, "");
@@ -62517,6 +62628,7 @@ function parseArgs2(argv, env = process.env) {
   if (!Number.isInteger(options.port) || options.port < 1 || options.port > 65535) return { error: "--port must be 1-65535" };
   if (options.publicUrl && !/^https?:\/\//.test(options.publicUrl)) return { error: "--public-url must start with http:// or https://" };
   if (options.tailscale && options.tunnel) return { error: "choose one of --tailscale (your tailnet) and --tunnel (a public address)" };
+  if ((options.command === "command" || options.command === "goal") && (Boolean(options.botId) === Boolean(options.groupId) || !options.threadId || !options.commandText)) return { error: "command and goal require exactly one of --bot ID or --group ID, plus --thread ID --text TEXT" };
   if (options.command === "access" && !options.accessAction) return { error: "access needs one of: list, add EMAIL [--chat-only], remove EMAIL" };
   if (options.command === "service" && !options.serviceAction) return { error: "service needs one of: install [the same options as serve], uninstall" };
   if (options.domain && (options.tailscale || options.tunnel || options.publicUrl)) return { error: "--domain already gives the server its address; drop --tailscale, --tunnel and --public-url" };
@@ -62530,78 +62642,6 @@ function parseArgs2(argv, env = process.env) {
   }
   return options;
 }
-var USAGE = `chibi \u2014 your team of AI bots, ready in a few steps
-
-  chibi                               set up once, then open your workspace
-  chibi setup [--data-dir DIR]
-  chibi start [the same options as serve]
-  chibi serve [--port 8799] [--data-dir DIR] [--label NAME]
-                    [--public-url https://host] [--tailscale | --tunnel | --domain HOST] [--no-pair]
-  chibi pair  [--label NAME] [--client] [--phone ios|android]
-                    [--public-url https://host]
-  chibi sessions [revoke ID]
-  chibi status
-  chibi login [--email you@example.com]
-  chibi logout
-  chibi access list | add EMAIL [--chat-only] | remove EMAIL
-  chibi service install [--domain HOST | --tunnel | --tailscale] [--port N] [--data-dir DIR] | uninstall
-  chibi browser install [--with-deps] | status
-  chibi fleet init --domain HOST [--operator USER] | create NAME --admin EMAIL [--member EMAIL] [--brand FILE]
-                    [--anthropic-key-file FILE] [--cap USD] [--license-key KEY] [--memory 1G]
-                  | list | users NAME add|remove EMAIL [--chat-only] | suspend NAME | resume NAME
-                  | delete NAME --yes [--keep-data] | upgrade   (all take --dry-run)
-                  | agent [--socket PATH] [--group USER]   (root; installed by init --operator)
-
-setup   choose AI access and optional phone access; keep existing bots and chats
-start   same as chibi: use your saved settings and open the workspace
-serve   starts the server without prompts and prints a pairing link + QR code
-pair    mints a pairing code against a running server (--client: chat only)
-sessions lists paired devices; "sessions revoke ID" signs one out
-status  what the server says about itself
-login   signs this machine in to an Atomic account (an emailed code)
-        and reserves its public address for --tunnel
-logout  releases that address and signs out
-access  who may sign in with an emailed code at /pair: an address or
-        @domain; --chat-only gives chat and approvals without settings.
-        Takes effect at once, no restart.
-service keep the server running across reboots: writes a systemd unit
-        (Linux) or a launchd agent (macOS) for the same serve options and
-        prints the commands that install it. Install the package
-        permanently first (npm install -g @chibitek/chibi).
-browser install: the bots' browser engine (agent-browser, pinned) into the
-        data dir, and Chrome for Testing into the user's browser cache.
-        --with-deps also installs
-        the Linux libraries Chrome needs (run as root once). Then run
-        browser install as the user running serve, from that user's home.
-        status: what the current user and data directory have.
-fleet   many client workspaces on one Linux server, each its own account,
-        service, data folder, brand, sign-in list and keys at NAME.HOST
-        behind the system Caddy. Plans are printed unless run as root;
-        --dry-run always prints. Install the package permanently first.
-        init --operator USER also installs the fleet agent, a root service
-        on a Unix socket only USER may open, so the workspace running as
-        USER manages the others from Settings \u2192 Workspaces.
-
---tailscale  serve over your tailnet: Tailscale terminates HTTPS and the
-             link uses this machine's MagicDNS name (needs Tailscale signed in
-             and HTTPS certificates enabled for the tailnet)
---tunnel     serve at a public HTTPS address through a Cloudflare tunnel
-             from a hosted control plane (set OMB_CONTROL_PLANE_URL; Atomic
-             ships none). Run \`chibi login\` once on this machine first.
---domain     serve at https://HOST on your own domain: a pinned Caddy is
-             downloaded once and run alongside the server, and gets the
-             certificate itself. Point the domain's DNS at this machine and
-             open ports 80 and 443.
-
---no-open   do not open a browser window
---no-pair   skip phone setup and do not print a pairing code
---local     start locally this time, ignoring saved remote-access settings
---quiet     skip the welcome banner (it never shows when output is piped;
-            NO_COLOR=1 shows it without color)
-
-Install once with \`npm install -g @chibitek/chibi\`, then type \`chibi\`.
-Or run without a global install: \`npx @chibitek/chibi\`. Node 24+ is required.
-`;
 function defaultIo() {
   return {
     log: (line) => console.log(line),
@@ -63106,6 +63146,7 @@ async function runServe(options, log = console.log) {
     console.error(`something already answers on http://127.0.0.1:${options.port}; use \`chibi pair\` against it, or --port for a second server`);
     return 1;
   }
+  if (await reportBusyPort(options.port, options.dataDir === join53(homedir29(), ".atomic-app") ? "" : ` --data-dir ${options.dataDir}`)) return 1;
   let publicUrl = options.publicUrl;
   let tailscale = null;
   if (options.tailscale) {
@@ -63373,10 +63414,9 @@ async function runOnboardingCommand(options, io2 = defaultIo(), startServer = ru
       saveCliStartup2(options.dataDir, startupPreferences(launch));
     }
     if (options.command === "setup") {
-      io2.log("\nAll set. Start with: chibi (or npx @chibitek/chibi without a global install).");
-      if (options.dataDir !== join53(homedir29(), ".atomic-app") || options.port !== 8799) {
-        io2.log(`Use the same --data-dir (${options.dataDir}) and --port (${options.port}) options when starting.`);
-      }
+      const flags = [options.dataDir !== join53(homedir29(), ".atomic-app") && ` --data-dir ${options.dataDir}`, options.port !== 8799 && ` --port ${options.port}`].filter(Boolean).join("");
+      io2.log(`
+All set. Start with: chibi${flags ? ` start${flags}` : ""} (or npx @chibitek/chibi without a global install).`);
       return 0;
     }
     if (saved) io2.log("\nWelcome back. Using your saved AI connection.");
@@ -63412,6 +63452,25 @@ ${welcomeBanner(options)}
 `);
   }
   switch (options.command) {
+    case "command":
+    case "goal": {
+      const text4 = options.command === "goal" ? `/goal ${options.commandText}` : options.commandText;
+      const roomGoal = options.groupId ? /^\/goal(?:\s+([\s\S]*))?$/.exec(text4 ?? "") : null;
+      if (roomGoal && (!roomGoal[1]?.trim() || (roomGoal[1].startsWith("--") || /^(status|pause|resume|stop|help)(?:\s|$)/.test(roomGoal[1])))) {
+        console.error("Room goals accept an objective. Personal goal controls and budgets require --bot.");
+        return 2;
+      }
+      const result = await api(options.port, `/api/${options.groupId ? "groups" : "bots"}/${encodeURIComponent(options.groupId ?? options.botId)}/messages`, {
+        method: "POST",
+        body: JSON.stringify({ threadId: options.threadId, text: roomGoal ? roomGoal[1] : text4, ...roomGoal ? { mode: "goal" } : {}, sendId: randomBytes4(16).toString("hex") })
+      });
+      if (result.status >= 400) {
+        console.error(result.body.error ?? `Server returned ${result.status}`);
+        return 1;
+      }
+      console.log(options.json ? JSON.stringify(result.body) : result.body.goalSummary ?? JSON.stringify(result.body));
+      return 0;
+    }
     case "setup":
     case "start":
       return runOnboardingCommand(options);