@fased/fased 0.1.18 → 0.1.20

package/dist/{server-node-events-CYM7X9Ka.js → server-node-events-Df_2uVcT.js}

@@ -2,7 +2,7 @@ import { D as pruneLegacyStoreKeys, E as loadSessionEntry, Kl as normalizeChanne
 import "./agent-paths-BI1hx-tF.js";
 import "./send-D7X0_iFp.js";
 import "./send-BFEd4vCM.js";
-import { Ea as deliverOutboundPayloads, Li as agentCommand, Wi as resolveOutboundTarget, er as enqueueSystemEvent, na as buildOutboundSessionContext, qi as createOutboundSendDeps, ur as requestHeartbeatNow } from "./model-catalog--SvucuO6.js";
+import { Ea as deliverOutboundPayloads, Li as agentCommand, Wi as resolveOutboundTarget, er as enqueueSystemEvent, na as buildOutboundSessionContext, qi as createOutboundSendDeps, ur as requestHeartbeatNow } from "./model-catalog-ex4Cpln_.js";
 import "./github-copilot-token-A9DiaCB0.js";
 import { A as defaultRuntime, H as normalizeMainKey } from "./entry.js";
 import "./reply-prefix-TUhpEtvr.js";
@@ -45,7 +45,7 @@ import "./send-C-su1wPZ.js";
 import "./outbound-attachment-Bh4FmcYg.js";
 import "./fetch-BVvWzHT_.js";
 import "./delivery-queue-55Cityuq.js";
-import "./deps-5vuaH16V.js";
+import "./deps-BWo3ls9h.js";
 import "./frontmatter-D2UNJikU.js";
 import "./skills-Dis31awJ.js";
 import "./skills-remote-CIAB0AXm.js";
@@ -73,9 +73,9 @@ import "./cli-utils-XevKf-tr.js";
 import "./help-format-B2DRdx98.js";
 import "./progress-DkVYFLij.js";
 import "./replies-FXlmpJVO.js";
-import "./prompt-style-DxKPs6E0.js";
+import "./prompt-style-Rmj3c-Ir.js";
 import "./pairing-labels-BCM1S2e_.js";
-import { a as registerApnsToken, l as formatForLog, n as parseMessageWithAttachments, t as normalizeRpcAttachmentsToChatAttachments } from "./attachment-normalize-Cw5usv34.js";
+import { a as registerApnsToken, l as formatForLog, n as parseMessageWithAttachments, t as normalizeRpcAttachmentsToChatAttachments } from "./attachment-normalize-DB19KLbl.js";
 import { randomUUID } from "node:crypto";
 
 //#region src/gateway/server-node-events.ts

package/dist/{status-DNSq7M4m.js → status-CdI_oSZ4.js}

@@ -1,5 +1,5 @@
 import { A as resolveDefaultAgentWorkspaceDir, Dn as loadConfig, F as createSubsystemLogger, d as resolveDefaultAgentId, u as resolveAgentWorkspaceDir } from "./agent-scope-DHrLr5OF.js";
-import { Nt as loadFasedAgentPlugins, la as createPluginLoaderLogger } from "./reply-C-KlztgC.js";
+import { Nt as loadFasedAgentPlugins, la as createPluginLoaderLogger } from "./reply-B034LmuD.js";
 
 //#region src/plugins/status.ts
 const log = createSubsystemLogger("plugins");

package/dist/{status-Cbvyhx9d.js → status-CqIzNbBd.js}

@@ -1,5 +1,5 @@
 import { Gu as resolveDefaultAgentId, Wu as resolveAgentWorkspaceDir, Xt as loadConfig, a as createSubsystemLogger, ud as resolveDefaultAgentWorkspaceDir } from "./env-C77feXxI.js";
-import { Oi as createPluginLoaderLogger, c as loadFasedAgentPlugins } from "./model-catalog--SvucuO6.js";
+import { Oi as createPluginLoaderLogger, c as loadFasedAgentPlugins } from "./model-catalog-ex4Cpln_.js";
 
 //#region src/plugins/status.ts
 const log = createSubsystemLogger("plugins");

package/dist/{status-DX0Q8QQg.js → status-DrXKyHMz.js}

@@ -1,7 +1,7 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
 import { A as resolveSessionModelRef, Bt as resolveFreshSessionTotalTokens, C as listAgentsForGateway, Cu as formatCliCommand, Gl as listChannelPlugins, Gt as resolveMainSessionKey, L as resolveContextTokensForModel, Qt as readConfigFileSnapshot, Rr as resolveConfiguredModelRef, Wu as resolveAgentWorkspaceDir, X as loadSessionStore, Xt as loadConfig, Yc as VERSION, fd as resolveFasedAgentPackageRoot, hd as runExec, x as classifySessionKey } from "./env-C77feXxI.js";
 import { H as theme, V as isRich, j as info } from "./agent-paths-BI1hx-tF.js";
-import { E as resolveControlUiLinks, Gr as summarizeRestartSentinel, Jt as buildChannelSummary, Ri as resolveStrictAgenticRuntimeMode, So as getTailnetHostname, Wa as normalizeControlUiBasePath, Wr as readRestartSentinel, Xt as formatChannelAllowFrom, Yt as buildChannelAccountSnapshot, _r as loadProviderUsageSummary, rr as peekSystemEvents, vr as formatUsageReportLines, wo as readTailscaleStatusJson } from "./model-catalog--SvucuO6.js";
+import { E as resolveControlUiLinks, Gr as summarizeRestartSentinel, Jt as buildChannelSummary, Ri as resolveStrictAgenticRuntimeMode, So as getTailnetHostname, Wa as normalizeControlUiBasePath, Wr as readRestartSentinel, Xt as formatChannelAllowFrom, Yt as buildChannelAccountSnapshot, _r as loadProviderUsageSummary, rr as peekSystemEvents, vr as formatUsageReportLines, wo as readTailscaleStatusJson } from "./model-catalog-ex4Cpln_.js";
 import { n as DEFAULT_MODEL, r as DEFAULT_PROVIDER, t as DEFAULT_CONTEXT_TOKENS } from "./defaults-BDW-7D7s.js";
 import { gt as resolveGatewayPort, it as parseAgentSessionKey, v as resolveStorePath } from "./entry.js";
 import { t as getMemorySearchManager } from "./memory-2keYbXkc.js";
@@ -18,9 +18,9 @@ import { s as resolveGatewayLogPaths, t as resolveGatewayService } from "./servi
 import { t as formatRuntimeStatusWithDetails } from "./runtime-status-Ol8emLbF.js";
 import { t as readLastGatewayErrorLine } from "./diagnostics-CqDqfqR_.js";
 import { t as renderTable } from "./table-C0Mj2A8W.js";
-import { o as probeGateway, r as resolveGatewayProbeAuth$1, t as runSecurityAudit } from "./audit-xX6RNayR.js";
-import { t as formatHealthChannelLines, u as getLastGatewayStartupTraceSnapshot } from "./health-CK5_7SB-.js";
-import { t as resolveHeartbeatSummaryForAgent } from "./heartbeat-runner-C_SzC_tK.js";
+import { o as probeGateway, r as resolveGatewayProbeAuth$1, t as runSecurityAudit } from "./audit-C5YXYuIL.js";
+import { t as formatHealthChannelLines, u as getLastGatewayStartupTraceSnapshot } from "./health-DW5NMpNI.js";
+import { t as resolveHeartbeatSummaryForAgent } from "./heartbeat-runner-BnDruNG2.js";
 import { d as formatUpdateChannelLabel, h as resolveEffectiveUpdateChannel, i as formatGitInstallLabel, m as normalizeUpdateChannel, n as compareSemverStrings, t as checkUpdateStatus } from "./update-check-B8tvVfAm.js";
 import { t as resolveNodeService } from "./node-service-Bst0DpMM.js";
 import { t as collectChannelStatusIssues } from "./channels-status-issues-BSIStb_F.js";

package/dist/{status-DfxoXWmn.js → status-ne0p_x1W.js}

@@ -1,7 +1,7 @@
 import { u as resolveGatewayPort } from "./paths-C9FmTW1x.js";
 import { H as isRich, M as info, U as theme } from "./agent-paths-DmOVZE7g.js";
 import { $ as listAgentsForGateway, Dn as loadConfig, Et as loadSessionStore, Nu as listChannelPlugins, Sn as resolveMainSessionKey, Z as classifySessionKey, _n as resolveFreshSessionTotalTokens, bl as VERSION, dd as formatCliCommand, eu as runExec, hi as resolveConfiguredModelRef, kn as readConfigFileSnapshot, ot as resolveSessionModelRef, po as resolveFasedAgentPackageRoot, pt as resolveContextTokensForModel, u as resolveAgentWorkspaceDir } from "./agent-scope-DHrLr5OF.js";
-import { $o as getTailnetHostname, B as buildChannelAccountSnapshot, Br as loadProviderUsageSummary, Qt as resolveControlUiLinks, V as formatChannelAllowFrom, Vr as formatUsageReportLines, gt as resolveStrictAgenticRuntimeMode, hi as summarizeRestartSentinel, mi as readRestartSentinel, ra as peekSystemEvents, ts as readTailscaleStatusJson, xo as normalizeControlUiBasePath, z as buildChannelSummary } from "./reply-C-KlztgC.js";
+import { $o as getTailnetHostname, B as buildChannelAccountSnapshot, Br as loadProviderUsageSummary, Qt as resolveControlUiLinks, V as formatChannelAllowFrom, Vr as formatUsageReportLines, gt as resolveStrictAgenticRuntimeMode, hi as summarizeRestartSentinel, mi as readRestartSentinel, ra as peekSystemEvents, ts as readTailscaleStatusJson, xo as normalizeControlUiBasePath, z as buildChannelSummary } from "./reply-B034LmuD.js";
 import { w as parseAgentSessionKey } from "./session-key-LmCHAJTQ.js";
 import { n as DEFAULT_MODEL, r as DEFAULT_PROVIDER, t as DEFAULT_CONTEXT_TOKENS } from "./defaults-CzImVi0V.js";
 import { g as resolveStorePath } from "./chat-envelope-D_wSv26N.js";
@@ -19,9 +19,9 @@ import { s as resolveGatewayLogPaths, t as resolveGatewayService } from "./servi
 import { t as formatRuntimeStatusWithDetails } from "./runtime-status-S9nJA1dv.js";
 import { t as readLastGatewayErrorLine } from "./diagnostics-BkyuWtqz.js";
 import { t as renderTable } from "./table-DQLeG14F.js";
-import { o as probeGateway, r as resolveGatewayProbeAuth$1, t as runSecurityAudit } from "./audit-B2R6WwpA.js";
-import { l as getLastGatewayStartupTraceSnapshot, t as formatHealthChannelLines } from "./health-DkKBhl0x.js";
-import { t as resolveHeartbeatSummaryForAgent } from "./heartbeat-runner-B9_owa4e.js";
+import { o as probeGateway, r as resolveGatewayProbeAuth$1, t as runSecurityAudit } from "./audit-DPnCY1UL.js";
+import { l as getLastGatewayStartupTraceSnapshot, t as formatHealthChannelLines } from "./health-kF4U3o3b.js";
+import { t as resolveHeartbeatSummaryForAgent } from "./heartbeat-runner-CJP5uO8S.js";
 import { d as formatUpdateChannelLabel, h as resolveEffectiveUpdateChannel, i as formatGitInstallLabel, m as normalizeUpdateChannel, n as compareSemverStrings, t as checkUpdateStatus } from "./update-check-xTT04LKM.js";
 import { t as resolveNodeService } from "./node-service-DhGH8GuH.js";
 import { t as collectChannelStatusIssues } from "./channels-status-issues-DYs3uRFt.js";

package/dist/{systemd-linger-9E60sw1j.js → systemd-linger-BTw_D-6k.js}

@@ -1,6 +1,6 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
 import { f as enableSystemdUserLinger, p as readSystemdUserLingerStatus, r as isSystemdUserServiceAvailable } from "./systemd-CmxDYXvt.js";
-import { n as note } from "./note-DrwZGnSu.js";
+import { n as note } from "./note-DwkETqd-.js";
 
 //#region src/commands/systemd-linger.ts
 var systemd_linger_exports = /* @__PURE__ */ __exportAll({

package/dist/{systemd-linger-BYFLOJbt.js → systemd-linger-BlmGMvvA.js}

@@ -1,6 +1,6 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
 import { f as enableSystemdUserLinger, p as readSystemdUserLingerStatus, r as isSystemdUserServiceAvailable } from "./systemd-B8OPQXFR.js";
-import { n as note } from "./note-CLUeye9D.js";
+import { n as note } from "./note-rV2vspIo.js";
 
 //#region src/commands/systemd-linger.ts
 var systemd_linger_exports = /* @__PURE__ */ __exportAll({

package/dist/{tui-BTgZ8oh1.js → tui-CF9NTWgo.js}

@@ -1,6 +1,6 @@
 import { Dn as loadConfig, bl as VERSION, d as resolveDefaultAgentId, df as GATEWAY_CLIENT_CAPS, ld as stripAnsi$1, lp as listThinkingLevelLabels, mf as GATEWAY_CLIENT_NAMES, pf as GATEWAY_CLIENT_MODES, sp as formatThinkingLevels, ud as visibleWidth } from "./agent-scope-DHrLr5OF.js";
 import { E as resolveResponseUsageMode, a as listChatCommands, o as listChatCommandsForConfig, w as normalizeUsageDisplay } from "./commands-registry-BRvZQ1jh.js";
-import { Z as formatRawAssistantErrorForUi, cr as resolveToolDisplay, sr as formatToolDetail } from "./reply-C-KlztgC.js";
+import { Z as formatRawAssistantErrorForUi, cr as resolveToolDisplay, sr as formatToolDetail } from "./reply-B034LmuD.js";
 import { c as normalizeMainKey, r as buildAgentMainSessionKey, s as normalizeAgentId, w as parseAgentSessionKey } from "./session-key-LmCHAJTQ.js";
 import { i as stripLeadingInboundMetadata } from "./chat-envelope-D_wSv26N.js";
 import { t as redactSensitiveUrl } from "./redact-sensitive-url-B0RJQqO7.js";

package/dist/{tui-DCimzH-j.js → tui-CLXEsHbW.js}

@@ -1,5 +1,5 @@
 import { Cf as GATEWAY_CLIENT_MODES, Gu as resolveDefaultAgentId, Hc as formatThinkingLevels, Su as visibleWidth, Wc as listThinkingLevelLabels, Xt as loadConfig, Yc as VERSION, wf as GATEWAY_CLIENT_NAMES, xf as GATEWAY_CLIENT_CAPS, xu as stripAnsi$1 } from "./env-C77feXxI.js";
-import { Ti as resolveToolDisplay, kn as formatRawAssistantErrorForUi, wi as formatToolDetail } from "./model-catalog--SvucuO6.js";
+import { Ti as resolveToolDisplay, kn as formatRawAssistantErrorForUi, wi as formatToolDetail } from "./model-catalog-ex4Cpln_.js";
 import { H as normalizeMainKey, L as buildAgentMainSessionKey, V as normalizeAgentId, it as parseAgentSessionKey, o as stripLeadingInboundMetadata } from "./entry.js";
 import { t as redactSensitiveUrl } from "./redact-sensitive-url-BW03TVj8.js";
 import { a as listChatCommands, o as listChatCommandsForConfig, x as resolveResponseUsageMode, y as normalizeUsageDisplay } from "./commands-registry-DFSYQtVC.js";

package/dist/{tui-cli-DJ8WiWCz.js → tui-cli-Bo8T0iEO.js}

@@ -2,7 +2,7 @@ import "./paths-C9FmTW1x.js";
 import { U as theme } from "./agent-paths-DmOVZE7g.js";
 import "./agent-scope-DHrLr5OF.js";
 import "./commands-registry-BRvZQ1jh.js";
-import "./reply-C-KlztgC.js";
+import "./reply-B034LmuD.js";
 import { d as defaultRuntime } from "./errors-Dx3S3Nrp.js";
 import "./send-C5_fB8YQ.js";
 import "./send-jxmRy65D.js";
@@ -37,7 +37,7 @@ import "./ssrf-Blf4NrHS.js";
 import "./outbound-attachment-CsXJwFsg.js";
 import "./fetch-CnCPOuq7.js";
 import "./delivery-queue-DKRjVFlq.js";
-import "./deps-DXHMO1Yj.js";
+import "./deps-BKAIBkcE.js";
 import "./memory-DDpj0IVA.js";
 import "./memory-search-BwYkW6_V.js";
 import "./manager-BmONwMiP.js";
@@ -74,9 +74,9 @@ import "./progress-DZRfIFVb.js";
 import "./replies-Do40G8fO.js";
 import "./skills-remote-BghdrdFV.js";
 import "./skill-commands-QW8zKXC_.js";
-import "./prompt-style-Wxki8rmI.js";
+import "./prompt-style-CWAacuMq.js";
 import "./pairing-labels-D2yOKhoV.js";
-import { t as runTui } from "./tui-BTgZ8oh1.js";
+import { t as runTui } from "./tui-CF9NTWgo.js";
 
 //#region src/cli/tui-cli.ts
 function registerTuiCli(program) {

package/dist/{tui-cli-BzoEecpB.js → tui-cli-DIHJPDjw.js}

@@ -2,7 +2,7 @@ import "./env-C77feXxI.js";
 import { H as theme } from "./agent-paths-BI1hx-tF.js";
 import "./send-D7X0_iFp.js";
 import "./send-BFEd4vCM.js";
-import "./model-catalog--SvucuO6.js";
+import "./model-catalog-ex4Cpln_.js";
 import "./github-copilot-token-A9DiaCB0.js";
 import { A as defaultRuntime } from "./entry.js";
 import "./reply-prefix-TUhpEtvr.js";
@@ -45,7 +45,7 @@ import "./send-C-su1wPZ.js";
 import "./outbound-attachment-Bh4FmcYg.js";
 import "./fetch-BVvWzHT_.js";
 import "./delivery-queue-55Cityuq.js";
-import "./deps-5vuaH16V.js";
+import "./deps-BWo3ls9h.js";
 import "./frontmatter-D2UNJikU.js";
 import "./skills-Dis31awJ.js";
 import "./skills-remote-CIAB0AXm.js";
@@ -72,9 +72,9 @@ import "./cli-utils-XevKf-tr.js";
 import "./help-format-B2DRdx98.js";
 import "./progress-DkVYFLij.js";
 import "./replies-FXlmpJVO.js";
-import "./prompt-style-DxKPs6E0.js";
+import "./prompt-style-Rmj3c-Ir.js";
 import "./pairing-labels-BCM1S2e_.js";
-import { t as runTui } from "./tui-DCimzH-j.js";
+import { t as runTui } from "./tui-CLXEsHbW.js";
 
 //#region src/cli/tui-cli.ts
 function registerTuiCli(program) {

package/dist/{update-cli-vLZ2i1bC.js → update-cli-RA5GdCSl.js}

@@ -2,7 +2,7 @@ import { _ as resolveStateDir, u as resolveGatewayPort } from "./paths-C9FmTW1x.
 import { U as theme, v as pathExists } from "./agent-paths-DmOVZE7g.js";
 import { $l as runCommandWithTimeout, Mn as writeConfigFile, co as parseSemver, dd as formatCliCommand, fd as replaceCliName, kn as readConfigFileSnapshot, pd as resolveCliName, po as resolveFasedAgentPackageRoot } from "./agent-scope-DHrLr5OF.js";
 import "./commands-registry-BRvZQ1jh.js";
-import { gi as trimLogTail } from "./reply-C-KlztgC.js";
+import { gi as trimLogTail } from "./reply-B034LmuD.js";
 import { d as defaultRuntime } from "./errors-Dx3S3Nrp.js";
 import "./send-C5_fB8YQ.js";
 import "./send-jxmRy65D.js";
@@ -37,7 +37,7 @@ import "./ssrf-Blf4NrHS.js";
 import "./outbound-attachment-CsXJwFsg.js";
 import "./fetch-CnCPOuq7.js";
 import "./delivery-queue-DKRjVFlq.js";
-import "./deps-DXHMO1Yj.js";
+import "./deps-BKAIBkcE.js";
 import "./memory-DDpj0IVA.js";
 import "./memory-search-BwYkW6_V.js";
 import "./manager-BmONwMiP.js";
@@ -75,35 +75,35 @@ import "./progress-DZRfIFVb.js";
 import "./replies-Do40G8fO.js";
 import "./skills-remote-BghdrdFV.js";
 import "./skill-commands-QW8zKXC_.js";
-import { a as stylePromptMessage } from "./prompt-style-Wxki8rmI.js";
+import { i as stylePromptMessage } from "./prompt-style-CWAacuMq.js";
 import "./pairing-labels-D2yOKhoV.js";
-import "./program-context-CRYL81pY.js";
+import "./program-context-CaLlkx1k.js";
 import "./skills-status-BWP08hYK.js";
 import { n as inheritOptionFromParent } from "./command-options-DEPpN8NK.js";
-import { r as installCompletion } from "./completion-cli-Cszwcu14.js";
+import { r as installCompletion } from "./completion-cli-RlpZaXwm.js";
 import "./managed-up-BykEd-7K.js";
 import "./daemon-install-helpers-xM3QqMXu.js";
 import "./systemd-CmxDYXvt.js";
 import { t as resolveGatewayService } from "./service-Bsg622jp.js";
 import "./service-audit-BRLbvcxT.js";
 import "./shared-Cg_Qr7wd.js";
-import { a as terminateStaleGatewayPids, i as renderRestartDiagnostics, o as waitForGatewayHealthyRestart, r as runDaemonRestart, s as runDaemonInstall } from "./daemon-cli-D99T8qck.js";
+import { a as terminateStaleGatewayPids, i as renderRestartDiagnostics, o as waitForGatewayHealthyRestart, r as runDaemonRestart, s as runDaemonInstall } from "./daemon-cli-cyqRsnTF.js";
 import "./diagnostics-BkyuWtqz.js";
 import { t as renderTable } from "./table-DQLeG14F.js";
-import "./health-DkKBhl0x.js";
-import "./heartbeat-runner-B9_owa4e.js";
+import "./health-kF4U3o3b.js";
+import "./heartbeat-runner-CJP5uO8S.js";
 import { a as resolveNpmChannelTag, c as DEFAULT_PACKAGE_CHANNEL, d as formatUpdateChannelLabel, g as resolveUpdateChannelDisplay, h as resolveEffectiveUpdateChannel, m as normalizeUpdateChannel, n as compareSemverStrings, r as fetchNpmTagVersion, s as DEFAULT_GIT_CHANNEL, t as checkUpdateStatus, u as channelToNpmTag } from "./update-check-xTT04LKM.js";
 import "./logging-Dv2wthF_.js";
 import "./installs-DDbnXe4x.js";
 import { n as updateNpmInstalledPlugins, t as syncPluginsForUpdateChannel } from "./update-Dew6hqdf.js";
 import "./channels-status-issues-DYs3uRFt.js";
 import { i as resolveUpdateAvailability, n as formatUpdateOneLiner, t as formatUpdateAvailableHint } from "./status.update-BPiwyBsT.js";
-import { a as globalInstallArgs, c as readPackageVersion, i as detectGlobalInstallManagerForRoot, n as cleanupGlobalRenameDirs, o as resolveGlobalPackageRoot, r as detectGlobalInstallManagerByPresence, s as readPackageName, t as runGatewayUpdate } from "./update-runner-DA8lIKi7.js";
-import "./note-DrwZGnSu.js";
-import "./doctor-config-flow-Cd9O0xNE.js";
-import "./systemd-linger-9E60sw1j.js";
+import { a as globalInstallArgs, c as readPackageVersion, i as detectGlobalInstallManagerForRoot, n as cleanupGlobalRenameDirs, o as resolveGlobalPackageRoot, r as detectGlobalInstallManagerByPresence, s as readPackageName, t as runGatewayUpdate } from "./update-runner-CUbpiOBD.js";
+import "./note-DwkETqd-.js";
+import "./doctor-config-flow-Ceaz-Gkk.js";
+import "./systemd-linger-BTw_D-6k.js";
 import "./health-format-BGbDYfmf.js";
-import { a as ensureCompletionCacheExists, i as checkShellCompletionStatus, n as doctorCommand, r as runPostUpdateDoctorRepair, t as selectStyled } from "./prompt-select-styled-Ixt2Vxqr.js";
+import { a as ensureCompletionCacheExists, i as checkShellCompletionStatus, n as doctorCommand, r as runPostUpdateDoctorRepair, t as selectStyled } from "./prompt-select-styled-DVwrrZSb.js";
 import os from "node:os";
 import path from "node:path";
 import fs from "node:fs/promises";

package/dist/{update-cli-DLE13jlu.js → update-cli-pAvK-b3V.js}

@@ -2,7 +2,7 @@ import { Cu as formatCliCommand, Qt as readConfigFileSnapshot, Tu as resolveCliN
 import { H as theme, _ as pathExists } from "./agent-paths-BI1hx-tF.js";
 import "./send-D7X0_iFp.js";
 import "./send-BFEd4vCM.js";
-import { Kr as trimLogTail } from "./model-catalog--SvucuO6.js";
+import { Kr as trimLogTail } from "./model-catalog-ex4Cpln_.js";
 import "./github-copilot-token-A9DiaCB0.js";
 import { A as defaultRuntime, Ct as resolveStateDir, gt as resolveGatewayPort } from "./entry.js";
 import "./reply-prefix-TUhpEtvr.js";
@@ -45,7 +45,7 @@ import "./send-C-su1wPZ.js";
 import "./outbound-attachment-Bh4FmcYg.js";
 import "./fetch-BVvWzHT_.js";
 import "./delivery-queue-55Cityuq.js";
-import "./deps-5vuaH16V.js";
+import "./deps-BWo3ls9h.js";
 import "./frontmatter-D2UNJikU.js";
 import "./skills-Dis31awJ.js";
 import "./skills-remote-CIAB0AXm.js";
@@ -73,13 +73,13 @@ import "./cli-utils-XevKf-tr.js";
 import { t as formatHelpExamples } from "./help-format-B2DRdx98.js";
 import "./progress-DkVYFLij.js";
 import "./replies-FXlmpJVO.js";
-import { a as stylePromptMessage } from "./prompt-style-DxKPs6E0.js";
+import { i as stylePromptMessage } from "./prompt-style-Rmj3c-Ir.js";
 import "./pairing-labels-BCM1S2e_.js";
 import "./skills-status-Uo2v4O19.js";
 import { n as inheritOptionFromParent } from "./command-options-j8s8APBQ.js";
-import { r as installCompletion } from "./completion-cli-cirX46xi.js";
-import "./register.subclis-D76pTHAo.js";
-import "./command-registry-DH2g-1VS.js";
+import { r as installCompletion } from "./completion-cli-Btcmy2ZS.js";
+import "./register.subclis-C3yGp0vO.js";
+import "./command-registry-Bs12xiCA.js";
 import "./program-context-CDFrVtWb.js";
 import "./managed-up-DhYefvn4.js";
 import "./daemon-install-helpers-BB0qUcut.js";
@@ -87,23 +87,23 @@ import "./systemd-B8OPQXFR.js";
 import { t as resolveGatewayService } from "./service-2JBjv-ge.js";
 import "./service-audit-COK5O0cM.js";
 import "./shared-CACaO8zY.js";
-import { a as terminateStaleGatewayPids, i as renderRestartDiagnostics, o as waitForGatewayHealthyRestart, r as runDaemonRestart, s as runDaemonInstall } from "./daemon-cli-DwEfnmS3.js";
+import { a as terminateStaleGatewayPids, i as renderRestartDiagnostics, o as waitForGatewayHealthyRestart, r as runDaemonRestart, s as runDaemonInstall } from "./daemon-cli-DiuXEPjO.js";
 import "./diagnostics-CqDqfqR_.js";
 import { t as renderTable } from "./table-C0Mj2A8W.js";
-import "./health-CK5_7SB-.js";
-import "./heartbeat-runner-C_SzC_tK.js";
+import "./health-DW5NMpNI.js";
+import "./heartbeat-runner-BnDruNG2.js";
 import { a as resolveNpmChannelTag, c as DEFAULT_PACKAGE_CHANNEL, d as formatUpdateChannelLabel, g as resolveUpdateChannelDisplay, h as resolveEffectiveUpdateChannel, m as normalizeUpdateChannel, n as compareSemverStrings, r as fetchNpmTagVersion, s as DEFAULT_GIT_CHANNEL, t as checkUpdateStatus, u as channelToNpmTag } from "./update-check-B8tvVfAm.js";
 import "./logging-DZ32I_SP.js";
 import "./installs-Cha8QIzO.js";
 import { n as updateNpmInstalledPlugins, t as syncPluginsForUpdateChannel } from "./update-D4rhRm3D.js";
 import "./channels-status-issues-BSIStb_F.js";
 import { i as resolveUpdateAvailability, n as formatUpdateOneLiner, t as formatUpdateAvailableHint } from "./status.update-BZhzEFaJ.js";
-import { a as globalInstallArgs, c as readPackageVersion, i as detectGlobalInstallManagerForRoot, n as cleanupGlobalRenameDirs, o as resolveGlobalPackageRoot, r as detectGlobalInstallManagerByPresence, s as readPackageName, t as runGatewayUpdate } from "./update-runner-YRzVDxMy.js";
-import "./note-CLUeye9D.js";
-import "./doctor-config-flow-4WutpMTV.js";
-import "./systemd-linger-BYFLOJbt.js";
+import { a as globalInstallArgs, c as readPackageVersion, i as detectGlobalInstallManagerForRoot, n as cleanupGlobalRenameDirs, o as resolveGlobalPackageRoot, r as detectGlobalInstallManagerByPresence, s as readPackageName, t as runGatewayUpdate } from "./update-runner-kVl9uX8I.js";
+import "./note-rV2vspIo.js";
+import "./doctor-config-flow-B-I0osH5.js";
+import "./systemd-linger-BlmGMvvA.js";
 import "./health-format-DEsFwYbP.js";
-import { a as ensureCompletionCacheExists, i as checkShellCompletionStatus, n as doctorCommand, r as runPostUpdateDoctorRepair, t as selectStyled } from "./prompt-select-styled-BzqepcY0.js";
+import { a as ensureCompletionCacheExists, i as checkShellCompletionStatus, n as doctorCommand, r as runPostUpdateDoctorRepair, t as selectStyled } from "./prompt-select-styled-Cj_SHqRt.js";
 import { spawn, spawnSync } from "node:child_process";
 import os from "node:os";
 import path from "node:path";

package/dist/{update-runner-DA8lIKi7.js → update-runner-CUbpiOBD.js}

@@ -1,6 +1,6 @@
 import { v as pathExists } from "./agent-paths-DmOVZE7g.js";
 import { $l as runCommandWithTimeout } from "./agent-scope-DHrLr5OF.js";
-import { To as resolveControlUiDistIndexPathForRoot, gi as trimLogTail, wo as resolveControlUiDistIndexHealth } from "./reply-C-KlztgC.js";
+import { To as resolveControlUiDistIndexPathForRoot, gi as trimLogTail, wo as resolveControlUiDistIndexHealth } from "./reply-B034LmuD.js";
 import { c as DEFAULT_PACKAGE_CHANNEL, f as isBetaTag, l as DEV_BRANCH, n as compareSemverStrings, o as detectPackageManager$1, p as isStableTag, s as DEFAULT_GIT_CHANNEL, u as channelToNpmTag } from "./update-check-xTT04LKM.js";
 import os from "node:os";
 import path from "node:path";

package/dist/{update-runner-YRzVDxMy.js → update-runner-kVl9uX8I.js}

@@ -1,6 +1,6 @@
 import { md as runCommandWithTimeout } from "./env-C77feXxI.js";
 import { _ as pathExists } from "./agent-paths-BI1hx-tF.js";
-import { Ja as resolveControlUiDistIndexPathForRoot, Kr as trimLogTail, qa as resolveControlUiDistIndexHealth } from "./model-catalog--SvucuO6.js";
+import { Ja as resolveControlUiDistIndexPathForRoot, Kr as trimLogTail, qa as resolveControlUiDistIndexHealth } from "./model-catalog-ex4Cpln_.js";
 import { c as DEFAULT_PACKAGE_CHANNEL, f as isBetaTag, l as DEV_BRANCH, n as compareSemverStrings, o as detectPackageManager$1, p as isStableTag, s as DEFAULT_GIT_CHANNEL, u as channelToNpmTag } from "./update-check-B8tvVfAm.js";
 import os from "node:os";
 import path from "node:path";

package/dist/{web-CdUefYwV.js → web-BSGV69pb.js}

@@ -2,7 +2,7 @@ import "./paths-C9FmTW1x.js";
 import "./agent-paths-DmOVZE7g.js";
 import { Gu as WA_WEB_AUTH_DIR, Xu as pickWebChannel, nd as webAuthExists, qu as logWebSelfId } from "./agent-scope-DHrLr5OF.js";
 import "./commands-registry-BRvZQ1jh.js";
-import "./reply-C-KlztgC.js";
+import "./reply-B034LmuD.js";
 import "./errors-Dx3S3Nrp.js";
 import "./send-C5_fB8YQ.js";
 import "./send-jxmRy65D.js";
@@ -37,7 +37,7 @@ import "./ssrf-Blf4NrHS.js";
 import "./outbound-attachment-CsXJwFsg.js";
 import "./fetch-CnCPOuq7.js";
 import "./delivery-queue-DKRjVFlq.js";
-import "./deps-DXHMO1Yj.js";
+import "./deps-BKAIBkcE.js";
 import "./memory-DDpj0IVA.js";
 import "./memory-search-BwYkW6_V.js";
 import "./manager-BmONwMiP.js";
@@ -74,9 +74,9 @@ import "./progress-DZRfIFVb.js";
 import "./replies-Do40G8fO.js";
 import "./skills-remote-BghdrdFV.js";
 import "./skill-commands-QW8zKXC_.js";
-import "./prompt-style-Wxki8rmI.js";
+import "./prompt-style-CWAacuMq.js";
 import "./pairing-labels-D2yOKhoV.js";
-import { n as monitorWebInbox, t as monitorWebChannel } from "./channel-web-DRJ_lg4d.js";
+import { n as monitorWebInbox, t as monitorWebChannel } from "./channel-web-BYwefJub.js";
 import { n as sendMessageWhatsApp } from "./outbound-DIee7LFn.js";
 import { i as waitForWaConnection, t as createWaSocket } from "./session-hHLfAOAa.js";
 import { t as loginWeb } from "./login-C4GMmboz.js";

package/dist/{web-D7U7yJI6.js → web-CFtLg8L6.js}

@@ -2,7 +2,7 @@ import { $ as recordSessionMetaFromInbound, $o as clamp, As as getChildLogger, D
 import "./github-copilot-token-CNsqwfnE.js";
 import "./send-CFSRf7De.js";
 import "./send-gtmn6YeH.js";
-import { A as formatDurationPrecise, C as resolveInboundDebounceMs, D as getReplyFromConfig, E as createDedupeCache, J as hasControlCommand, O as normalizeGroupActivation, R as registerUnhandledRejectionHandler, S as createInboundDebouncer, T as resolveEnvelopeFormatOptions, X as buildMentionRegexes, Y as shouldComputeCommandAuthorized, Z as normalizeMentionText, _ as resolveDmGroupAccessWithCommandGate, b as dispatchReplyWithBufferedBlockDispatcher, c as buildPairingReply, d as buildHistoryContextFromEntries, f as recordPendingHistoryEntryIfEnabled, g as readStoreAllowFromForDmPolicy, h as warnMissingProviderGroupPolicyFallbackOnce, j as enqueueSystemEvent, k as parseActivationCommand, l as resolveMentionGating, m as resolveOpenProviderRuntimeGroupPolicy, o as computeBackoff, p as resolveDefaultGroupPolicy, s as sleepWithAbort, u as DEFAULT_GROUP_HISTORY_LIMIT, v as resolveDmGroupAccessWithLists, w as formatInboundEnvelope, y as shouldAckReactionForWhatsApp } from "./pi-embedded-BS0sTNPV.js";
+import { A as formatDurationPrecise, C as resolveInboundDebounceMs, D as getReplyFromConfig, E as createDedupeCache, J as hasControlCommand, O as normalizeGroupActivation, R as registerUnhandledRejectionHandler, S as createInboundDebouncer, T as resolveEnvelopeFormatOptions, X as buildMentionRegexes, Y as shouldComputeCommandAuthorized, Z as normalizeMentionText, _ as resolveDmGroupAccessWithCommandGate, b as dispatchReplyWithBufferedBlockDispatcher, c as buildPairingReply, d as buildHistoryContextFromEntries, f as recordPendingHistoryEntryIfEnabled, g as readStoreAllowFromForDmPolicy, h as warnMissingProviderGroupPolicyFallbackOnce, j as enqueueSystemEvent, k as parseActivationCommand, l as resolveMentionGating, m as resolveOpenProviderRuntimeGroupPolicy, o as computeBackoff, p as resolveDefaultGroupPolicy, s as sleepWithAbort, u as DEFAULT_GROUP_HISTORY_LIMIT, v as resolveDmGroupAccessWithLists, w as formatInboundEnvelope, y as shouldAckReactionForWhatsApp } from "./pi-embedded-CeuBUTjd.js";
 import { c as resolveIdentityNamePrefix, l as resolveMessagePrefix, t as createReplyPrefixOptions } from "./reply-prefix-Bitnsmpd.js";
 import "./diagnostic-_BiQ6GgD.js";
 import "./diagnostic-session-state-CL_QxyRg.js";
@@ -10,7 +10,7 @@ import { t as redactIdentifier } from "./redact-identifier-CA9VAhZA.js";
 import { J as toLocationContext, q as formatLocationText, tt as upsertChannelPairingRequest } from "./send-C3B8eaL_.js";
 import { m as getAgentScopedMediaLocalRoots, n as loadWebMedia } from "./media-B1OiuFFn.js";
 import "./pi-model-discovery-DsJSYjlQ.js";
-import "./paths-DuymR5Rg.js";
+import "./paths-Bzz-O3FX.js";
 import "./ssrf-9SwDSKOO.js";
 import { n as redactSensitiveUrlLikeString } from "./redact-sensitive-url-DAsCH1Zm.js";
 import "./path-alias-guards-B_y00xGw.js";

package/dist/{web-BqBwrpRI.js → web-CRHqblTb.js}

@@ -2,7 +2,7 @@ import { au as logWebSelfId, cu as pickWebChannel, mu as webAuthExists, ru as WA
 import "./agent-paths-BI1hx-tF.js";
 import "./send-D7X0_iFp.js";
 import "./send-BFEd4vCM.js";
-import "./model-catalog--SvucuO6.js";
+import "./model-catalog-ex4Cpln_.js";
 import "./github-copilot-token-A9DiaCB0.js";
 import "./reply-prefix-TUhpEtvr.js";
 import "./memory-2keYbXkc.js";
@@ -44,7 +44,7 @@ import "./send-C-su1wPZ.js";
 import "./outbound-attachment-Bh4FmcYg.js";
 import "./fetch-BVvWzHT_.js";
 import "./delivery-queue-55Cityuq.js";
-import "./deps-5vuaH16V.js";
+import "./deps-BWo3ls9h.js";
 import "./frontmatter-D2UNJikU.js";
 import "./skills-Dis31awJ.js";
 import "./skills-remote-CIAB0AXm.js";
@@ -71,11 +71,11 @@ import "./cli-utils-XevKf-tr.js";
 import "./help-format-B2DRdx98.js";
 import "./progress-DkVYFLij.js";
 import "./replies-FXlmpJVO.js";
-import "./prompt-style-DxKPs6E0.js";
+import "./prompt-style-Rmj3c-Ir.js";
 import "./pairing-labels-BCM1S2e_.js";
 import { n as sendMessageWhatsApp } from "./outbound-J0QDqY1V.js";
 import { i as waitForWaConnection, t as createWaSocket } from "./session-CU97gi8v.js";
-import { n as monitorWebInbox, t as monitorWebChannel } from "./channel-web-B_R-iuZ6.js";
+import { n as monitorWebInbox, t as monitorWebChannel } from "./channel-web-Do7PfpgZ.js";
 import { t as loginWeb } from "./login-CuawnITW.js";
 
 export { WA_WEB_AUTH_DIR, createWaSocket, logWebSelfId, loginWeb, monitorWebChannel, monitorWebInbox, pickWebChannel, sendMessageWhatsApp, waitForWaConnection, webAuthExists };

package/dist/{web-gqp_WLnj.js → web-D7NnzaWN.js}

@@ -2,7 +2,7 @@ import { $ as loadSessionStore, $a as DEFAULT_MAIN_KEY, Es as shouldLogVerbose,
 import "./github-copilot-token-DYrFvncE.js";
 import "./send-vR6HwT94.js";
 import "./send-BQMxv218.js";
-import { A as formatDurationPrecise, C as resolveInboundDebounceMs, D as getReplyFromConfig, E as createDedupeCache, J as hasControlCommand, O as normalizeGroupActivation, R as registerUnhandledRejectionHandler, S as createInboundDebouncer, T as resolveEnvelopeFormatOptions, X as buildMentionRegexes, Y as shouldComputeCommandAuthorized, Z as normalizeMentionText, _ as resolveDmGroupAccessWithCommandGate, b as dispatchReplyWithBufferedBlockDispatcher, c as buildPairingReply, d as buildHistoryContextFromEntries, f as recordPendingHistoryEntryIfEnabled, g as readStoreAllowFromForDmPolicy, h as warnMissingProviderGroupPolicyFallbackOnce, j as enqueueSystemEvent, k as parseActivationCommand, l as resolveMentionGating, m as resolveOpenProviderRuntimeGroupPolicy, o as computeBackoff, p as resolveDefaultGroupPolicy, s as sleepWithAbort, u as DEFAULT_GROUP_HISTORY_LIMIT, v as resolveDmGroupAccessWithLists, w as formatInboundEnvelope, y as shouldAckReactionForWhatsApp } from "./pi-embedded-IQzv6URS.js";
+import { A as formatDurationPrecise, C as resolveInboundDebounceMs, D as getReplyFromConfig, E as createDedupeCache, J as hasControlCommand, O as normalizeGroupActivation, R as registerUnhandledRejectionHandler, S as createInboundDebouncer, T as resolveEnvelopeFormatOptions, X as buildMentionRegexes, Y as shouldComputeCommandAuthorized, Z as normalizeMentionText, _ as resolveDmGroupAccessWithCommandGate, b as dispatchReplyWithBufferedBlockDispatcher, c as buildPairingReply, d as buildHistoryContextFromEntries, f as recordPendingHistoryEntryIfEnabled, g as readStoreAllowFromForDmPolicy, h as warnMissingProviderGroupPolicyFallbackOnce, j as enqueueSystemEvent, k as parseActivationCommand, l as resolveMentionGating, m as resolveOpenProviderRuntimeGroupPolicy, o as computeBackoff, p as resolveDefaultGroupPolicy, s as sleepWithAbort, u as DEFAULT_GROUP_HISTORY_LIMIT, v as resolveDmGroupAccessWithLists, w as formatInboundEnvelope, y as shouldAckReactionForWhatsApp } from "./pi-embedded-Bnuo5tPq.js";
 import "./diagnostic-D6XQAXl4.js";
 import "./diagnostic-session-state-CexmAKza.js";
 import { t as redactIdentifier } from "./redact-identifier-Cy6Tnhkn.js";

package/dist/{web-DgtV30_7.js → web-R6Wrr8ru.js}

@@ -1,6 +1,6 @@
 import "./github-copilot-token-Dy7Y_jbI.js";
 import { As as shouldLogVerbose, Ba as resolveGroupSessionKey, Ci as webAuthExists, Co as DEFAULT_MAIN_KEY, Cs as toWhatsappJid, D as readSessionUpdatedAt, E as loadSessionStore, Eo as buildGroupHistoryKey, Ia as resolveChannelGroupPolicy, Is as getChildLogger, La as resolveChannelGroupRequireMention, O as recordSessionMetaFromInbound, Oo as normalizeAgentId, Os as logVerbose, _i as pickWebChannel, as as clamp, di as resolveWhatsAppAccount, fi as WA_WEB_AUTH_DIR, fs as isSelfChatMode, ft as resolveStorePath, gs as resolveJidToE164, k as updateLastRoute, mi as logWebSelfId, ms as normalizeE164, n as createSubsystemLogger, ns as formatCliCommand, pi as getWebAuthAgeMs, ps as jidToE164, qo as defaultRuntime, vt as loadConfig, wo as buildAgentMainSessionKey, xs as sleep, yi as readWebSelfId } from "./paths-OUJyk-5R.js";
-import { $ as parseActivationCommand, C as createInboundDebouncer, D as createDedupeCache, E as resolveEnvelopeFormatOptions, G as shouldComputeCommandAuthorized, J as registerUnhandledRejectionHandler, K as buildMentionRegexes, O as getReplyFromConfig, Q as normalizeGroupActivation, T as formatInboundEnvelope, W as hasControlCommand, _ as resolveDmGroupAccessWithCommandGate, b as shouldAckReactionForWhatsApp, c as buildPairingReply, d as buildHistoryContextFromEntries, et as formatDurationPrecise, f as recordPendingHistoryEntryIfEnabled, g as readStoreAllowFromForDmPolicy, h as warnMissingProviderGroupPolicyFallbackOnce, l as resolveMentionGating, m as resolveOpenProviderRuntimeGroupPolicy, o as computeBackoff, p as resolveDefaultGroupPolicy, q as normalizeMentionText, s as sleepWithAbort, tt as enqueueSystemEvent, u as DEFAULT_GROUP_HISTORY_LIMIT, v as resolveDmGroupAccessWithLists, w as resolveInboundDebounceMs, x as dispatchReplyWithBufferedBlockDispatcher } from "./auth-DtTjcdsn.js";
+import { $ as parseActivationCommand, C as createInboundDebouncer, D as createDedupeCache, E as resolveEnvelopeFormatOptions, G as shouldComputeCommandAuthorized, J as registerUnhandledRejectionHandler, K as buildMentionRegexes, O as getReplyFromConfig, Q as normalizeGroupActivation, T as formatInboundEnvelope, W as hasControlCommand, _ as resolveDmGroupAccessWithCommandGate, b as shouldAckReactionForWhatsApp, c as buildPairingReply, d as buildHistoryContextFromEntries, et as formatDurationPrecise, f as recordPendingHistoryEntryIfEnabled, g as readStoreAllowFromForDmPolicy, h as warnMissingProviderGroupPolicyFallbackOnce, l as resolveMentionGating, m as resolveOpenProviderRuntimeGroupPolicy, o as computeBackoff, p as resolveDefaultGroupPolicy, q as normalizeMentionText, s as sleepWithAbort, tt as enqueueSystemEvent, u as DEFAULT_GROUP_HISTORY_LIMIT, v as resolveDmGroupAccessWithLists, w as resolveInboundDebounceMs, x as dispatchReplyWithBufferedBlockDispatcher } from "./auth-BbQxXxtt.js";
 import "./send-D96gGRQz.js";
 import "./send-BFoI9HuU.js";
 import "./skill-commands-DvoCSQnx.js";

package/dist/{web-search-providers.runtime-Dr2M7_ZH.js → web-search-providers.runtime-BQw2Sxko.js}

@@ -1,5 +1,5 @@
 import { p as getActivePluginRegistry } from "./env-C77feXxI.js";
-import { c as loadFasedAgentPlugins, qn as createWebSearchProviderToolDefinition } from "./model-catalog--SvucuO6.js";
+import { c as loadFasedAgentPlugins, qn as createWebSearchProviderToolDefinition } from "./model-catalog-ex4Cpln_.js";
 
 //#region src/plugins/web-search-providers.shared.ts
 function compareWebSearchProvidersAlphabetically(left, right) {

package/dist/{web-search-providers.runtime-JauoxBKh.js → web-search-providers.runtime-E9CDTKMh.js}

@@ -1,5 +1,5 @@
 import { U as getActivePluginRegistry } from "./agent-scope-DHrLr5OF.js";
-import { Nt as loadFasedAgentPlugins, gr as createWebSearchProviderToolDefinition } from "./reply-C-KlztgC.js";
+import { Nt as loadFasedAgentPlugins, gr as createWebSearchProviderToolDefinition } from "./reply-B034LmuD.js";
 
 //#region src/plugins/web-search-providers.shared.ts
 function compareWebSearchProvidersAlphabetically(left, right) {

package/docs/gateway/tailscale.md

@@ -27,6 +27,50 @@ network. The intended pattern is loopback-first: keep the gateway on
 - keep `gateway.bind: "loopback"` unless you need a direct tailnet bind
 - use `funnel` only when you truly need public ingress
 
+## Other VPNs and Mullvad
+
+For Fased hosted setup, do not run another VPN beside Tailscale while verifying
+dashboard and SSH access. Shut down Mullvad, Proton VPN, NordVPN, corporate VPN
+clients, browser VPNs, and device-level VPN apps before you start the hosted
+installer or before you confirm Tailscale SSH. Other VPNs often change firewall
+rules, DNS behavior, or routes in ways that break MagicDNS, `tailscale ping`,
+or `ssh app@YOUR_VPS_TAILSCALE_NAME`.
+
+If you need Mullvad privacy while using Tailscale, use Tailscale's paid
+**Mullvad VPN add-on**. In Tailscale docs this is called **Mullvad exit nodes**:
+Mullvad servers appear as Tailscale exit nodes in your tailnet. This is not a
+Fased plugin and not a local package to install.
+
+What it supports:
+
+- **Supported VPN provider:** Mullvad only.
+- **Not covered:** Proton VPN, NordVPN, corporate VPNs, browser VPNs, or other
+  VPN providers.
+- **Where to enable:** Tailscale admin console.
+- **Where to choose a region/server:** the Tailscale client, after the device is
+  granted Mullvad access.
+
+Basic setup:
+
+1. Open the Tailscale admin console.
+2. Go to **Settings > General**.
+3. Scroll to **Mullvad VPN** and select **Configure**.
+4. Complete the checkout flow for Mullvad licenses.
+5. Add the devices that should use Mullvad exit nodes, or manage access through
+   the tailnet policy file with the `mullvad` node attribute.
+6. On the local computer, open the Tailscale client and select a Mullvad exit
+   node.
+
+For current Mullvad regions and servers, use the Mullvad server list linked
+from Tailscale's Mullvad exit-node documentation. If your location is not
+available there, the Tailscale add-on will not make it available in Fased.
+
+References:
+
+- Tailscale: [Can I use Tailscale alongside other VPNs?](https://tailscale.com/docs/reference/faq/other-vpns)
+- Tailscale: [Mullvad exit nodes](https://tailscale.com/docs/features/exit-nodes/mullvad-exit-nodes)
+- Mullvad: [Servers](https://mullvad.net/servers)
+
 ## First-time setup
 
 For a hosted VPS, use the normal hosted installer. It starts Tailscale on the

package/docs/install/index.md

@@ -152,9 +152,15 @@ recovery options and VPS provider console access working.
     That is the computer where you will open the dashboard and run SSH checks.
     Before you start the remote VPS installer, shut down local VPNs such as
     Mullvad, Proton VPN, NordVPN, corporate VPN clients, and browser/device VPN
-    apps. Other VPNs can override DNS, firewall rules, or the `100.64.0.0/10`
-    address range that Tailscale uses. Re-enable them only after Tailscale SSH
-    and the dashboard work, and use split tunneling if that VPN must stay on.
+    apps. For Fased hosted setup, do not run another VPN beside Tailscale while
+    verifying dashboard and SSH access. Other VPNs can override DNS, firewall
+    rules, or the `100.64.0.0/10` address range that Tailscale uses.
+
+    If you need Mullvad-style privacy while using Tailscale, use Tailscale's
+    paid Mullvad VPN add-on instead of running the Mullvad app beside
+    Tailscale. That add-on supports Mullvad only; it does not cover Proton,
+    NordVPN, corporate VPN clients, or other VPN providers. See
+    [Other VPNs and Mullvad](/gateway/tailscale#other-vpns-and-mullvad).
 
     <Tabs>
       <Tab title="Windows">
@@ -325,8 +331,14 @@ recovery options and VPS provider console access working.
     cannot connect to local `tailscaled`, the local Tailscale service is not
     running; start it and sign in before continuing. A separate VPN on your own
     computer can interfere with Tailscale DNS or routing. Turn the other VPN off
-    for the cleanest setup. If it must stay on, use the `100.x.x.x` Tailscale IP
-    instead of the hostname.
+    for hosted setup. If it must stay on later, use the `100.x.x.x` Tailscale IP
+    instead of the hostname and configure split tunneling in that VPN.
+
+    If the VPN you want is Mullvad, prefer Tailscale's paid Mullvad VPN add-on
+    instead of running the Mullvad desktop/mobile VPN app beside Tailscale. The
+    add-on is enabled in the Tailscale admin console, then granted to devices;
+    it supports Mullvad only. See
+    [Other VPNs and Mullvad](/gateway/tailscale#other-vpns-and-mullvad).
 
     If `tailscale ping 100.x.x.x` works but
     `ssh app@YOUR_VPS_TAILSCALE_NAME` fails with a hostname/DNS error,
@@ -605,6 +617,15 @@ Use this order for a new install:
 Successful installation means Fased is installed. It does not replace the
 setup checks for chat apps, services, wallets, mining, or network roles.
 
+For a hosted VPS, keep your local computer signed into Tailscale whenever you
+need the hosted dashboard or `ssh app@YOUR_VPS_TAILSCALE_NAME`. If the
+dashboard or SSH stops working after you re-enable another VPN, turn that VPN
+off and test `tailscale status`, `tailscale ping`, and the `100.x.x.x`
+Tailscale IP. For Mullvad, use Tailscale's paid Mullvad VPN add-on/Mullvad exit
+nodes instead of running the Mullvad VPN app beside Tailscale. The add-on is
+Mullvad-only; other VPN providers still need their own split-tunnel or firewall
+workaround.
+
 ## Troubleshooting: `fased` not found
 
 <Accordion title="PATH diagnosis and fix">