@cmmd-center/forge 0.10.4 → 0.10.6

package/dist/bin.mjs

@@ -22,7 +22,7 @@ import { createCipheriv, createDecipheriv, createHash, createHmac, createPublicK
 import * as FS$1 from "node:fs";
 import fs, { accessSync, chmodSync, constants, createReadStream, existsSync, mkdirSync, mkdtempSync, promises, readFile, readFileSync, readdir, readdirSync, realpathSync, rmSync, statSync, writeFileSync } from "node:fs";
 import * as NodeOS from "node:os";
-import os, { homedir, networkInterfaces, tmpdir } from "node:os";
+import $U, { homedir, networkInterfaces, tmpdir } from "node:os";
 import * as Path$1 from "node:path";
 import path, { basename, delimiter, dirname, extname, isAbsolute, join, posix, relative, resolve, sep } from "node:path";
 import { pathToFileURL } from "node:url";
@@ -16520,7 +16520,7 @@ function makeNetServiceShape(createServer = Net.createServer) {
 }
 //#endregion
 //#region ../../packages/shared/src/releaseInfo.generated.ts
-const FORGE_RELEASE_VERSION = "0.10.3";
+const FORGE_RELEASE_VERSION = "0.10.4";
 //#endregion
 //#region ../../packages/shared/src/hostProcess.ts
 /**
@@ -18157,6 +18157,7 @@ const ExecutionEnvironmentDescriptor = Struct({
 	platform: ExecutionEnvironmentPlatform,
 	serverVersion: TrimmedNonEmptyString,
 	buildCommit: optional$4(TrimmedNonEmptyString),
+	deviceRuntimeId: optional$4(TrimmedNonEmptyString),
 	capabilities: ExecutionEnvironmentCapabilities
 });
 Literals([
@@ -21906,6 +21907,7 @@ const DEFAULT_CLIENT_SETTINGS = decodeSync(Struct({
 	confirmThreadArchive: Boolean$1.pipe(withDecodingDefault(succeed(true))),
 	confirmThreadDelete: Boolean$1.pipe(withDecodingDefault(succeed(true))),
 	showInteractionModeToggle: Boolean$1.pipe(withDecodingDefault(succeed(false))),
+	composerCollapseOnBlur: Boolean$1.pipe(withDecodingDefault(succeed(true))),
 	diffWordWrap: Boolean$1.pipe(withDecodingDefault(succeed(true))),
 	previewAutoOpen: Boolean$1.pipe(withDecodingDefault(succeed(false))),
 	previewRememberLastUrl: Boolean$1.pipe(withDecodingDefault(succeed(true))),
@@ -49730,7 +49732,7 @@ function _supportsColor(haveStream, { streamIsTTY, sniffFlags = true } = {}) {
 	const min = forceColor || 0;
 	if (env.TERM === "dumb") return min;
 	if (process$1.platform === "win32") {
-		const osRelease = os.release().split(".");
+		const osRelease = $U.release().split(".");
 		if (Number(osRelease[0]) >= 10 && Number(osRelease[2]) >= 10586) return Number(osRelease[2]) >= 14931 ? 3 : 2;
 		return 1;
 	}
@@ -52173,7 +52175,7 @@ var require_ProcessDetector = /* @__PURE__ */ __commonJSMin(((exports) => {
 	exports.processDetector = void 0;
 	const api_1 = (init_esm$1(), __toCommonJS(esm_exports$1));
 	const semconv_1 = require_semconv$1();
-	const os$4 = __require("os");
+	const os$3 = __require("os");
 	/**
 	* ProcessDetector will be used to detect the resources related current process running
 	* and being instrumented from the NodeJS Process module.
@@ -52195,7 +52197,7 @@ var require_ProcessDetector = /* @__PURE__ */ __commonJSMin(((exports) => {
 			};
 			if (process.argv.length > 1) attributes[semconv_1.ATTR_PROCESS_COMMAND] = process.argv[1];
 			try {
-				const userInfo = os$4.userInfo();
+				const userInfo = os$3.userInfo();
 				attributes[semconv_1.ATTR_PROCESS_OWNER] = userInfo.username;
 			} catch (e) {
 				api_1.diag.debug(`error obtaining process owner: ${e}`);
@@ -65118,7 +65120,7 @@ function normalizeNumberish(value) {
 }
 //#endregion
 //#region package.json
-var version$1 = "0.10.4";
+var version$1 = "0.10.6";
 //#endregion
 //#region src/sentry.ts
 const SERVER_APP_NAME = "forge-server";
@@ -67886,6 +67888,15 @@ function parsePersistedServerObservabilitySettings(raw) {
 * @module ServerConfig
 */
 const DEFAULT_PORT = 13773;
+/**
+* Where a managed cloud runtime keeps the user's checkouts when
+* FORGE_CLOUD_PROJECTS_ROOT is not set. CMMD seeds every sprite checkout under
+* /projects (forge-guest-layout.ts on the CMMD side) and passes that value in
+* the Service env, so this default only matters for a server started without
+* it. It used to be a path under the Fly-era mounted volume; on a sprite the
+* two repos disagreed and every local-checkout turn was refused (FOR-36484).
+*/
+const DEFAULT_CLOUD_PROJECTS_ROOT = "/projects";
 const RuntimeMode = Literals(["web", "desktop"]);
 Literals(["browser", "headless"]);
 const deriveServerPaths = fn$1(function* (baseDir, _devUrl, _mode) {
@@ -68011,7 +68022,7 @@ var ServerConfig = class ServerConfig extends Service$1()("forge/config/ServerCo
 			forgeCodexHomePath: void 0,
 			forgeClaudeConfigPath: void 0,
 			forgeApexBaseUrl: void 0,
-			cloudProjectsRoot: "/data/Projects",
+			cloudProjectsRoot: DEFAULT_CLOUD_PROJECTS_ROOT,
 			...overrides
 		};
 	}));
@@ -73756,7 +73767,7 @@ var require_node_gyp_build = /* @__PURE__ */ __commonJSMin(((exports, module) =>
 	var fs$6 = __require("fs");
 	var path$5 = __require("path");
 	var url$1 = __require("url");
-	var os$3 = __require("os");
+	var os$2 = __require("os");
 	var runtimeRequire = typeof __webpack_require__ === "function" ? __non_webpack_require__ : __require;
 	var vars = process.config && process.config.variables || {};
 	var prebuildsOnly = !!process.env.PREBUILDS_ONLY;
@@ -73764,8 +73775,8 @@ var require_node_gyp_build = /* @__PURE__ */ __commonJSMin(((exports, module) =>
 	var abi = versions.modules;
 	if (versions.deno || process.isBun) abi = "unsupported";
 	var runtime = isElectron() ? "electron" : isNwjs() ? "node-webkit" : "node";
-	var arch = process.env.npm_config_arch || os$3.arch();
-	var platform = process.env.npm_config_platform || os$3.platform();
+	var arch = process.env.npm_config_arch || os$2.arch();
+	var platform = process.env.npm_config_platform || os$2.platform();
 	var libc = process.env.LIBC || (isMusl(platform) ? "musl" : "glibc");
 	var armv = process.env.ARM_VERSION || (arch === "arm64" ? "8" : vars.arm_version) || "";
 	var uv = (versions.uv || "").split(".")[0];
@@ -91423,7 +91434,7 @@ const launchDetached = (launch) => gen(function* () {
 });
 const OpenLive = effect(Open, gen(function* () {
 	const open = yield* tryPromise({
-		try: () => import("./open-FIgTDosf.mjs"),
+		try: () => import("./open-D8mGyWmt.mjs"),
 		catch: (cause) => new OpenError$1({
 			message: "failed to load browser opener",
 			cause
@@ -97136,7 +97147,7 @@ const resolveAutoBootstrapWelcomeTargets = gen(function* () {
 /**
 * Cloud-mode project recovery — runs only on cloud execution runtimes.
 * Scans `cloudProjectsRoot` (default
-* /data/Projects) for git-repo subdirectories and registers any not yet in
+* /projects) for git-repo subdirectories and registers any not yet in
 * the orchestration engine. This is the cloud-mode replacement for the
 * gated `autoBootstrapProjectFromCwd` path: managed runtimes whose volume
 * already holds cloned repos surface them in the sidebar after restart.
@@ -149395,13 +149406,40 @@ var CodexAppServerManager = class extends EventEmitter$1 {
 		if (!providerConversationId) return;
 		return context.collabReceiverTurns.get(providerConversationId);
 	}
+	/**
+	* The child threads one thread item says the turn spawned.
+	*
+	* Two item shapes name a child, and which one arrives depends on the Codex
+	* build. `CollabAgentToolCallThreadItem` lists `receiverThreadIds`, which
+	* "in case of spawn operation ... corresponds to the newly spawned agent".
+	* `SubAgentActivityThreadItem` names a single `agentThreadId` and is what a
+	* `spawn_agent` call reports on codex-cli 0.152/0.153: measured on the
+	* packaged desktop on 2026-09-06, the spawn arrived as `SubAgentActivity`
+	* (`kind: started`) and the only collab tool call that followed was the
+	* `wait`, whose `receiverThreadIds` was empty. Reading only the collab item
+	* left the child unmapped, so its spend was published as a second turn row
+	* under the child's own turn id instead of a subagent row under the parent's.
+	*
+	* `SubAgentActivityThreadItem` has no `model` field, so a `completed` report
+	* for a child a collab call already named must not blank the model out; the
+	* caller's `model ?? known` merge is what keeps it.
+	*/
+	readSpawnedThreadIds(item, itemType) {
+		if (itemType === "subAgentActivity") {
+			const agentThreadId = this.readString(item, "agentThreadId");
+			return agentThreadId ? [agentThreadId] : [];
+		}
+		if (itemType !== "collabAgentToolCall") return [];
+		return this.readArray(item, "receiverThreadIds")?.map((value) => typeof value === "string" ? value : null).filter((value) => value !== null) ?? [];
+	}
 	rememberCollabReceiverTurns(context, params, parentTurnId) {
 		if (!parentTurnId) return;
 		const payload = this.readObject(params);
 		const item = this.readObject(payload, "item") ?? payload;
-		if ((this.readString(item, "type") ?? this.readString(item, "kind")) !== "collabAgentToolCall") return;
+		const itemType = this.readString(item, "type") ?? this.readString(item, "kind");
+		const receiverThreadIds = this.readSpawnedThreadIds(item, itemType);
+		if (receiverThreadIds.length === 0) return;
 		const model = this.readString(item, "model");
-		const receiverThreadIds = this.readArray(item, "receiverThreadIds")?.map((value) => typeof value === "string" ? value : null).filter((value) => value !== null) ?? [];
 		for (const receiverThreadId of receiverThreadIds) {
 			const known = context.collabReceiverTurns.get(receiverThreadId)?.model;
 			const resolved = model ?? known;
@@ -149417,8 +149455,8 @@ var CodexAppServerManager = class extends EventEmitter$1 {
 	* Codex reports a child thread's tokens on the parent's own connection:
 	* `ThreadTokenUsageUpdatedNotification` requires `threadId` and `turnId` and
 	* names the child thread for a child, and `Thread.parentThreadId` is "only
-	* set if this thread is a subagent" (codex 0.144.6 app-server protocol
-	* schema). Every other child notification is suppressed so it cannot replace
+	* set if this thread is a subagent" (still true of the codex-cli 0.153
+	* app-server protocol schema). Every other child notification is suppressed so it cannot replace
 	* the parent turn; this one is not, because the tokens belong on the ledger.
 	* The method is Forge's own rather than the protocol's, because the payload
 	* carries what the Usage row needs rather than what the notification held.
@@ -187273,7 +187311,7 @@ var Vce = {
 function Ve() {
 	return Vce;
 }
-var Us = os.homedir(), lk = os.tmpdir(), { env: Vc } = process$1, Yce = (e) => {
+var Us = $U.homedir(), lk = $U.tmpdir(), { env: Vc } = process$1, Yce = (e) => {
 	let t = path.join(Us, "Library");
 	return {
 		data: path.join(t, "Application Support", e),
@@ -197473,12 +197511,12 @@ function qZ(e, t) {
 	}
 	return n;
 }
-var os$2 = "https://code.claude.com/docs/en", kKe = [
+var os$1 = "https://code.claude.com/docs/en", kKe = [
 	{
 		matches: (e) => e.path === "permissions.defaultMode" && e.code === "invalid_value",
 		tip: {
 			suggestion: "Valid modes: \"acceptEdits\" (ask before file changes), \"plan\" (analysis only), \"bypassPermissions\" (auto-accept all), or \"default\" (standard behavior)",
-			docLink: `${os$2}/iam#permission-modes`
+			docLink: `${os$1}/iam#permission-modes`
 		}
 	},
 	{
@@ -197493,7 +197531,7 @@ var os$2 = "https://code.claude.com/docs/en", kKe = [
 		matches: (e) => e.path.startsWith("env.") && e.code === "invalid_type",
 		tip: {
 			suggestion: "Environment variables must be strings. Wrap numbers and booleans in quotes. Example: \"DEBUG\": \"true\", \"PORT\": \"3000\"",
-			docLink: `${os$2}/settings#environment-variables`
+			docLink: `${os$1}/settings#environment-variables`
 		}
 	},
 	{
@@ -197504,14 +197542,14 @@ var os$2 = "https://code.claude.com/docs/en", kKe = [
 		matches: (e) => e.path.startsWith("hooks.") && e.code === "invalid_key",
 		tip: {
 			suggestion: "Not a recognized hook event. Common events: PreToolUse, PostToolUse, UserPromptSubmit, SessionStart, SessionEnd, Stop. Check spelling and capitalization.",
-			docLink: `${os$2}/hooks`
+			docLink: `${os$1}/hooks`
 		}
 	},
 	{
 		matches: (e) => /\.hooks\.\d+\.command$/.test(e.path) && e.code === "invalid_type" && e.received === "undefined",
 		tip: {
 			suggestion: "Command hooks require `command`. For exec form (no shell), set `command` to the executable and `args` to its arguments: {\"type\": \"command\", \"command\": \"echo\", \"args\": [\"hi\"]}. For shell form, set `command` to the full shell string: {\"type\": \"command\", \"command\": \"echo hi\"}.",
-			docLink: `${os$2}/hooks#exec-form-and-shell-form`
+			docLink: `${os$1}/hooks#exec-form-and-shell-form`
 		}
 	},
 	{
@@ -197526,7 +197564,7 @@ var os$2 = "https://code.claude.com/docs/en", kKe = [
 		matches: (e) => e.code === "unrecognized_keys",
 		tip: {
 			suggestion: "Check for typos or refer to the documentation for valid fields",
-			docLink: `${os$2}/settings`
+			docLink: `${os$1}/settings`
 		}
 	},
 	{
@@ -197541,13 +197579,13 @@ var os$2 = "https://code.claude.com/docs/en", kKe = [
 		matches: (e) => e.path === "permissions.additionalDirectories" && e.code === "invalid_type",
 		tip: {
 			suggestion: "Must be an array of directory paths. Example: [\"~/projects\", \"/tmp/workspace\"]. You can also use --add-dir flag or /add-dir command",
-			docLink: `${os$2}/iam#working-directories`
+			docLink: `${os$1}/iam#working-directories`
 		}
 	}
 ], AKe = {
-	permissions: `${os$2}/iam#configuring-permissions`,
-	env: `${os$2}/settings#environment-variables`,
-	hooks: `${os$2}/hooks`
+	permissions: `${os$1}/iam#configuring-permissions`,
+	env: `${os$1}/settings#environment-variables`,
+	hooks: `${os$1}/hooks`
 };
 function GZ(e) {
 	let t = kKe.find((r) => r.matches(e));
@@ -207214,11 +207252,14 @@ function mapCodexThreadTokenUsageEvent(event, canonicalThreadId, payload) {
 *
 * The source is the live app-server protocol, not a rollout read: Codex sends
 * `thread/tokenUsage/updated` for a child thread on the parent's own
-* connection (0.144.6 schema: `ThreadTokenUsageUpdatedNotification` requires
-* `threadId` and `turnId`, `Thread.parentThreadId` is set only for a subagent,
-* and `CollabAgentToolCallThreadItem` names `receiverThreadIds` and the
-* spawned agent's `model`), and `codexAppServerManager` already tracked those
-* child threads to route their notifications onto the parent turn.
+* connection (`ThreadTokenUsageUpdatedNotification` requires `threadId` and
+* `turnId`, and `Thread.parentThreadId` is set only for a subagent), and
+* `codexAppServerManager` already tracked those child threads to route their
+* notifications onto the parent turn. It learns a child from whichever item
+* the running Codex build uses to announce a spawn: the
+* `receiverThreadIds` of a `CollabAgentToolCallThreadItem`, which also names
+* the spawned agent's `model`, or the `agentThreadId` of a
+* `SubAgentActivityThreadItem`, which names no model.
 *
 * The row carries no context-meter snapshot and no `turnUsage`: the parent's
 * own row is never re-summed with its children. It carries the call's delta
@@ -208100,7 +208141,8 @@ const CODE_BY_UPSTREAM_REASON$1 = {
 	credential_expired_refreshing: "CREDENTIAL_EXPIRED_REFRESHING",
 	credential_reconnect_required: "CREDENTIAL_RECONNECT_REQUIRED",
 	credential_not_connected: "CREDENTIAL_RECONNECT_REQUIRED",
-	credential_generation_not_applied: "CREDENTIAL_GENERATION_NOT_APPLIED"
+	credential_generation_not_applied: "CREDENTIAL_GENERATION_NOT_APPLIED",
+	runtime_unavailable: "RUNTIME_UNAVAILABLE"
 };
 const CLAUDE_NATIVE_CREDENTIAL_UNUSABLE_COPY = "The delivered Claude credential is unavailable or unusable in this runtime.";
 /**
@@ -208163,10 +208205,17 @@ function claudeNativeCredentialUnusableMessage() {
 * CMMD writes this marker when it activates a personal Claude subscription
 * inside a running sprite. Activation always happens after boot, so a
 * boot-time env var alone cannot reflect it (FOR-36249).
+*
+* CMMD names the file in the Service env (FORGE_PERSONAL_CLAUDE_MARKER_PATH).
+* Without that, the marker sits directly under FORGE_HOME, which is the same
+* guest home CMMD derives every sprite path from. A server with neither has no
+* sprite home to look in, and a desktop never has a marker, so it reads none.
 */
-const PERSONAL_CLAUDE_IN_VM_MARKER_PATH = "/data/.forge-personal-claude-in-vm";
+const PERSONAL_CLAUDE_IN_VM_MARKER_NAME = ".forge-personal-claude-in-vm";
 function markerPath(env) {
-	return env.FORGE_PERSONAL_CLAUDE_MARKER_PATH || PERSONAL_CLAUDE_IN_VM_MARKER_PATH;
+	if (env.FORGE_PERSONAL_CLAUDE_MARKER_PATH) return env.FORGE_PERSONAL_CLAUDE_MARKER_PATH;
+	if (env.FORGE_HOME) return join(env.FORGE_HOME, PERSONAL_CLAUDE_IN_VM_MARKER_NAME);
+	return null;
 }
 /**
 * True when this runtime should offer the personal Claude subscription lane.
@@ -208179,8 +208228,10 @@ function markerPath(env) {
 */
 function personalClaudeInVmEnabled(env = process.env) {
 	if (env.FORGE_PERSONAL_CLAUDE_IN_VM === "true") return true;
+	const marker = markerPath(env);
+	if (!marker) return false;
 	try {
-		return existsSync(markerPath(env));
+		return existsSync(marker);
 	} catch {
 		return false;
 	}
@@ -226760,7 +226811,8 @@ const CLAUDE_READINESS_COPY = {
 	failed: "Claude native runtime setup could not be applied. Reconnect Claude in Settings.",
 	invalid: "Claude native runtime readiness is no longer valid. Reconnect Claude in Settings.",
 	unavailable: "Claude native runtime readiness could not be verified.",
-	generationMismatch: "Claude native runtime generation does not match CMMD readiness."
+	generationMismatch: "Claude native runtime generation does not match CMMD readiness.",
+	environmentUnavailable: "This Environment is not running, so Claude cannot run on it. Restart the Environment, then try again."
 };
 var ClaudeRuntimeReadinessError = class extends Error {
 	constructor(safeIssue, retryable = false, retryProfile = "default") {
@@ -226830,6 +226882,7 @@ async function withReadinessRetry(attempt) {
 */
 function readinessReasonIssue(readiness) {
 	const code = claudeReadinessReasonCode(readiness.reason);
+	if (code === "RUNTIME_UNAVAILABLE") return CLAUDE_READINESS_COPY.environmentUnavailable;
 	if (code === "CREDENTIAL_RECONNECT_REQUIRED") return CLAUDE_READINESS_COPY.invalid;
 	if (code === "CREDENTIAL_GENERATION_NOT_APPLIED") return CLAUDE_READINESS_COPY.applying;
 	if (code !== "CREDENTIAL_EXPIRED_REFRESHING") return null;
@@ -226840,6 +226893,10 @@ function readinessReasonIssue(readiness) {
 function isCredentialRefreshInFlight(readiness) {
 	return claudeReadinessReasonCode(readiness.reason) === "CREDENTIAL_EXPIRED_REFRESHING";
 }
+/** True when CMMD says the runtime itself cannot take a delivery (CMMD-36473). */
+function isRuntimeUnavailable(readiness) {
+	return claudeReadinessReasonCode(readiness.reason) === "RUNTIME_UNAVAILABLE";
+}
 function readinessFailureIssue(readiness) {
 	const reasonIssue = readinessReasonIssue(readiness);
 	if (reasonIssue !== null) return reasonIssue;
@@ -226879,11 +226936,12 @@ function verifiedClaudeDeliveryBinding(readiness, authority) {
 function appliedClaudeGeneration(readiness) {
 	if (readiness.connected !== true || readiness.deliveryStatus !== "applied" || readiness.nativeExecutable !== true || typeof readiness.generationId !== "string" || readiness.generationId.trim().length === 0) {
 		const refreshing = isCredentialRefreshInFlight(readiness);
-		throw new ClaudeRuntimeReadinessError(readinessFailureIssue(readiness), refreshing || [
+		const retryable = !isRuntimeUnavailable(readiness) && (refreshing || [
 			"pending",
 			"claimed",
 			"activating"
-		].includes(readiness.deliveryStatus), refreshing ? "credentialRefresh" : "default");
+		].includes(readiness.deliveryStatus));
+		throw new ClaudeRuntimeReadinessError(readinessFailureIssue(readiness), retryable, refreshing ? "credentialRefresh" : "default");
 	}
 	return readiness.generationId;
 }
@@ -228037,15 +228095,15 @@ const collectOutput = fn$1("collectOutput")(function* (input, stream, maxOutputB
 /**
 * Adds a `safe.directory` exception to a git child environment.
 *
-* Forge runs git against workspaces on a mounted volume (`/data/Projects/...` on
-* Fly). A volume mount replaces the build-time ownership of its mountpoint, so a
+* Forge runs git against workspaces on a mounted volume (`<cloudProjectsRoot>/...`
+* on Fly). A volume mount replaces the build-time ownership of its mountpoint, so a
 * repository there can be owned by a uid other than the server's, and git then
 * refuses EVERY command against it with "detected dubious ownership" — the
 * FORGE-2T failure in `CheckpointStore.captureCheckpoint`.
 *
 * The exception has to be `*`, verified against git 2.43:
 * - git compares `safe.directory` entries literally, so a prefix such as
-*   `/data/Projects/*` does not match the repository at all.
+*   `/projects/*` does not match the repository at all.
 * - the value must name the DISCOVERED REPOSITORY ROOT, which is an ancestor of
 *   `cwd` whenever a command runs from a subdirectory. Resolving that root means
 *   asking git, which is the command being refused.
@@ -262514,7 +262572,7 @@ var import_multicast_dns = /* @__PURE__ */ __toESM((/* @__PURE__ */ __commonJSMi
 	var dgram = __require("dgram");
 	var thunky = require_thunky();
 	var events = __require("events");
-	var os$1 = __require("os");
+	var os = __require("os");
 	var noop = function() {};
 	module.exports = function(opts) {
 		if (!opts) opts = {};
@@ -262645,14 +262703,14 @@ var import_multicast_dns = /* @__PURE__ */ __toESM((/* @__PURE__ */ __commonJSMi
 		return that;
 	};
 	function defaultInterface() {
-		var networks = os$1.networkInterfaces();
+		var networks = os.networkInterfaces();
 		var names = Object.keys(networks);
 		for (var i = 0; i < names.length; i++) {
 			var net = networks[names[i]];
 			for (var j = 0; j < net.length; j++) {
 				var iface = net[j];
 				if (isIPv4(iface.family) && !iface.internal) {
-					if (os$1.platform() === "darwin" && names[i] === "en0") return iface.address;
+					if (os.platform() === "darwin" && names[i] === "en0") return iface.address;
 					return "0.0.0.0";
 				}
 			}
@@ -262660,7 +262718,7 @@ var import_multicast_dns = /* @__PURE__ */ __toESM((/* @__PURE__ */ __commonJSMi
 		return "127.0.0.1";
 	}
 	function allInterfaces() {
-		var networks = os$1.networkInterfaces();
+		var networks = os.networkInterfaces();
 		var names = Object.keys(networks);
 		var res = [];
 		for (var i = 0; i < names.length; i++) {
@@ -290889,7 +290947,7 @@ const ServerLoggerLive = gen(function* () {
 * Observed live on a Forge Cloud sprite (2026-07-25): the browser opens
 * `wss://<sprite>.sprites.app/ws?routeKey=…&runtimeTicket=<JWT>`, and the HTTP
 * instrumentation records `url.full` / `url.query` verbatim. The ticket then
-* lands in `/data/userdata/logs/server.trace.ndjson` at mode 644 — readable by
+* lands in `<FORGE_HOME>/userdata/logs/server.trace.ndjson` at mode 644 — readable by
 * the same user the agent runs as — and the URL also crosses fly.io's edge,
 * where infrastructure we do not control may log it.
 *
@@ -291181,7 +291239,7 @@ function resolveBuildCommitFromEnv(env) {
 * environment descriptor down instead of reporting an honest "unknown".
 */
 function readBakedBuildCommit() {
-	return "986939d02dd54d5adfd34ed23f2d67fece201f9a";
+	return "5f0060a9696edd41f61f06cbf24450a5994fed33";
 }
 async function resolveServerBuildCommit(input) {
 	if (isFullCommitSha(input.baked)) return input.baked;
@@ -291270,6 +291328,25 @@ function runtimeTopology(serverConfig) {
 	if (serverConfig.mode === "desktop") return "desktop-local";
 	return "local-web";
 }
+/**
+* The CMMD device runtime id to publish on this server's descriptor.
+*
+* A client cannot work this out for itself. Its only other source is page
+* storage, which holds this machine's id when the page runs inside the desktop
+* shell and a freshly minted browser id otherwise, so opening the same local
+* server at `127.0.0.1` in Safari made the desktop look like a remote runtime
+* (FOR-36439). The server was told the id at boot, so the server says it.
+*
+* The cloud shell is excluded on purpose. It is a control plane, not an
+* execution runtime, and its own provider list is empty; publishing a runtime
+* id there would let the SPA resolve some target as "the server I am talking
+* to" and read models off a surface that runs nothing. Everything else with no
+* registration (dev checkouts, plain `forge serve`) already answers undefined.
+*/
+function resolveDescriptorDeviceRuntimeId(config) {
+	if (config.forgeCloudShellMode === true) return void 0;
+	return resolveRuntimeReplicationRuntimeId(config);
+}
 function executionEnvironmentCapabilities(serverConfig) {
 	const isCloudShell = serverConfig.forgeCloudShellMode === true;
 	const isRuntime = serverConfig.forgeCmmdRuntimeMode === true && !isCloudShell;
@@ -291343,6 +291420,7 @@ const ServerEnvironmentLive = effect(ServerEnvironment, fn$1("makeServerEnvironm
 		env: process.env,
 		readGitCommit: resolveForgeGitCommit
 	}));
+	const deviceRuntimeId = resolveDescriptorDeviceRuntimeId(serverConfig);
 	const buildDescriptor = gen(function* () {
 		const displayNameOverride = yield* get$5(displayNameOverrideRef);
 		const os = platformOs();
@@ -291355,6 +291433,7 @@ const ServerEnvironmentLive = effect(ServerEnvironment, fn$1("makeServerEnvironm
 			},
 			serverVersion: version$1,
 			...buildCommit !== void 0 ? { buildCommit } : {},
+			...deviceRuntimeId !== void 0 ? { deviceRuntimeId } : {},
 			capabilities: {
 				...executionEnvironmentCapabilities(serverConfig),
 				posthogPublicKey: posthog.posthogPublicKey,
@@ -299149,16 +299228,6 @@ function describeDispatchCause(cause) {
 	if (deepest === void 0 || deepest.length <= DISPATCH_CAUSE_DETAIL_LIMIT) return deepest;
 	return `${deepest.slice(0, DISPATCH_CAUSE_DETAIL_LIMIT)}...`;
 }
-/**
-* Where automation-created projects live when the caller does not say.
-*
-* This is the documented default of the `cloudProjectsRoot` setting
-* (FORGE_CLOUD_PROJECTS_ROOT, see cli.ts) and exists only for direct callers
-* such as tests. Every HTTP route passes the CONFIGURED value instead: reading
-* the default here is what made a runtime configured with any other root create
-* its automation projects in a directory nothing else read.
-*/
-const DEFAULT_CLOUD_PROJECTS_ROOT = "/data/Projects";
 const respondToOrchestrationHttpError = (error) => gen(function* () {
 	if (error._tag === "OrchestrationGetSnapshotError") {
 		yield* logError("orchestration http route failed", {
@@ -314070,7 +314139,7 @@ const resolveServerConfig = (flags, cliLogLevel, options) => gen(function* () {
 		forgeCodexHomePath: env.forgeCodexHomePath,
 		forgeClaudeConfigPath: env.forgeClaudeConfigPath,
 		forgeApexBaseUrl: env.forgeApexBaseUrl,
-		cloudProjectsRoot: env.cloudProjectsRoot ?? "/data/Projects"
+		cloudProjectsRoot: env.cloudProjectsRoot ?? "/projects"
 	};
 	if (config.forgeCloudShellMode === true && (!config.forgeCloudOwnerAssertionPublicKey?.trim() || !config.forgeCloudOwnerAssertionKeyId?.trim())) return yield* die$1(/* @__PURE__ */ new Error("FORGE_CMMD_CLOUD_OWNER_ASSERTION_PUBLIC_KEY and FORGE_CMMD_CLOUD_OWNER_ASSERTION_KEY_ID are required in cloud-shell mode; runtime ticket keys are not accepted for Cloud owner assertions."));
 	if (config.forgeCloudShellMode === true && !isEd25519PublicKey(config.forgeCloudOwnerAssertionPublicKey ?? "")) return yield* die$1(/* @__PURE__ */ new Error("FORGE_CMMD_CLOUD_OWNER_ASSERTION_PUBLIC_KEY must be a valid Ed25519 public key in cloud-shell mode."));
@@ -314488,7 +314557,7 @@ const connectLoginCommand = make$34("login", {
 			})).json();
 		},
 		openBrowser: async (url) => {
-			const open = (await import("./open-FIgTDosf.mjs")).default;
+			const open = (await import("./open-D8mGyWmt.mjs")).default;
 			await open(url);
 			return true;
 		},