@jungjaehoon/mama-os 0.77.0 → 0.79.0

package/dist/utils/untrusted-content.js

@@ -19,7 +19,14 @@ function isUntrustedExternalEvidenceTool(toolName) {
         toolName === 'source.attachment.list' ||
         toolName === 'source.attachment.download' ||
         toolName === 'manage.wiki.read' ||
-        toolName === 'report.read');
+        toolName === 'report.read' ||
+        // Live connector reads (readsConnector): card and file text is written by other people, and
+        // the board reconcile order reads cards in a turn with no person in it.
+        toolName === 'trello.read' ||
+        toolName === 'drive.read' ||
+        toolName === 'drive.download' ||
+        // Mail, events, sheets and documents are written by other people too.
+        toolName === 'google.read');
 }
 const OPEN_MARKER = '<<<UNTRUSTED-CONTENT';
 const END_MARKER = '<<<END-UNTRUSTED-CONTENT>>>';

package/dist/utils/untrusted-content.js.map

@@ -1 +1 @@
-{"version":3,"file":"untrusted-content.js","sourceRoot":"","sources":["../../src/utils/untrusted-content.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAEH,0EAYC;AAKD,oDAWC;AAKD,8CAIC;AArCD,SAAgB,+BAA+B,CAAC,QAAgB;IAC9D,OAAO;IACL,mEAAmE;IACnE,QAAQ,KAAK,UAAU;QACvB,QAAQ,KAAK,wBAAwB;QACrC,QAAQ,KAAK,eAAe;QAC5B,QAAQ,KAAK,aAAa;QAC1B,QAAQ,KAAK,wBAAwB;QACrC,QAAQ,KAAK,4BAA4B;QACzC,QAAQ,KAAK,kBAAkB;QAC/B,QAAQ,KAAK,aAAa,CAC3B,CAAC;AACJ,CAAC;AAED,MAAM,WAAW,GAAG,sBAAsB,CAAC;AAC3C,MAAM,UAAU,GAAG,6BAA6B,CAAC;AAEjD,SAAgB,oBAAoB,CAAC,MAAc,EAAE,OAAe;IAClE,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC;IAC5D,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACrE,OAAO;QACL,GAAG,WAAW,WAAW,UAAU,KAAK;QACxC,8EAA8E;QAC9E,kFAAkF;QAClF,yDAAyD;QACzD,IAAI;QACJ,UAAU;KACX,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED;;GAEG;AACH,SAAgB,iBAAiB,CAAC,IAAY,EAAE,IAAa;IAC3D,OAAO,+BAA+B,CAAC,IAAI,CAAC;QAC1C,CAAC,CAAC,oBAAoB,CAAC,IAAI,EAAE,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC;QAC5F,CAAC,CAAC,IAAI,CAAC;AACX,CAAC"}
+{"version":3,"file":"untrusted-content.js","sourceRoot":"","sources":["../../src/utils/untrusted-content.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAEH,0EAmBC;AAKD,oDAWC;AAKD,8CAIC;AA5CD,SAAgB,+BAA+B,CAAC,QAAgB;IAC9D,OAAO;IACL,mEAAmE;IACnE,QAAQ,KAAK,UAAU;QACvB,QAAQ,KAAK,wBAAwB;QACrC,QAAQ,KAAK,eAAe;QAC5B,QAAQ,KAAK,aAAa;QAC1B,QAAQ,KAAK,wBAAwB;QACrC,QAAQ,KAAK,4BAA4B;QACzC,QAAQ,KAAK,kBAAkB;QAC/B,QAAQ,KAAK,aAAa;QAC1B,4FAA4F;QAC5F,wEAAwE;QACxE,QAAQ,KAAK,aAAa;QAC1B,QAAQ,KAAK,YAAY;QACzB,QAAQ,KAAK,gBAAgB;QAC7B,sEAAsE;QACtE,QAAQ,KAAK,aAAa,CAC3B,CAAC;AACJ,CAAC;AAED,MAAM,WAAW,GAAG,sBAAsB,CAAC;AAC3C,MAAM,UAAU,GAAG,6BAA6B,CAAC;AAEjD,SAAgB,oBAAoB,CAAC,MAAc,EAAE,OAAe;IAClE,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC;IAC5D,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACrE,OAAO;QACL,GAAG,WAAW,WAAW,UAAU,KAAK;QACxC,8EAA8E;QAC9E,kFAAkF;QAClF,yDAAyD;QACzD,IAAI;QACJ,UAAU;KACX,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED;;GAEG;AACH,SAAgB,iBAAiB,CAAC,IAAY,EAAE,IAAa;IAC3D,OAAO,+BAA+B,CAAC,IAAI,CAAC;QAC1C,CAAC,CAAC,oBAAoB,CAAC,IAAI,EAAE,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC;QAC5F,CAAC,CAAC,IAAI,CAAC;AACX,CAAC"}

package/install/install.sh

@@ -0,0 +1,457 @@
+#!/bin/sh
+# MAMA OS installer (docs/development/work/install.md).
+#
+#   curl -fsSL https://github.com/jungjaehoon-lifegamez/MAMA/releases/latest/download/install.sh | sh -s -- --backend claude --non-interactive
+#
+# It asks nothing: the person's agent runs it from a shell without a terminal. It installs a pinned
+# Node.js into ~/.mama/node, MAMA OS into ~/.mama/npm, the `mama` command into ~/.mama/bin, the
+# backend CLI with its vendor's installer when none that runs is found, and a marked PATH block in
+# the login shell's startup file; then it runs `mama init --non-interactive`, which opens the setup
+# page for the bot token and the pairing code.
+#
+# The whole body is one function, called on the last line, so a download cut off midway runs
+# nothing. scripts/sync-versions.js writes the version lines from package.json and
+# install/node.json.
+
+mama_install() {
+  set -eu
+  # mama init makes ~/.mama 0700 only when it creates it; this script may create it first.
+  umask 077
+
+  MAMA_OS_VERSION=0.79.0
+  NODE_VERSION=22.23.4
+  NODE_SHA256_DARWIN_ARM64=c9e1dbc748b33ed2d14f42445191ecaf14c56259c7a9a26d0042c49ec2b66428
+  NODE_SHA256_DARWIN_X64=efcc2b0db6f94bf53eddb038fe2b370277a042bd29e4f19b8f8e23598795b819
+  NODE_SHA256_LINUX_X64=b8492284c76a54baf58d61668dd0e41ee0fc98adabf9503d30f05d08f55b4406
+  NODE_SHA256_LINUX_ARM64=f7a1e486dbc8b286847815b477d4fb5e9fb963ed4489c3e1588853d685f589f9
+
+  say() { printf '%s\n' "$*"; }
+  fail() {
+    printf 'mama install: %s\n' "$*" >&2
+    exit 1
+  }
+  # One shell word, single-quoted.
+  quote() { printf "'%s'" "$(printf '%s' "$1" | sed "s/'/'\\\\''/g")"; }
+
+  usage() {
+    say 'Usage: install.sh [--backend claude|codex] [--non-interactive | --no-init]'
+    say '  --backend          the backend CLI MAMA runs; a new install needs it'
+    say '  --non-interactive  run mama init --non-interactive: it reads MAMA_INIT_* variables and'
+    say '                     opens the setup page; a new install needs it or --no-init'
+    say '  --no-init          install only, and print the init command'
+    say 'An install already set up needs no option: it runs mama init --non-interactive.'
+    say 'Piped from curl: curl -fsSL <url> | sh -s -- --backend claude --non-interactive'
+  }
+
+  backend=''
+  init_mode=''
+  while [ $# -gt 0 ]; do
+    case $1 in
+      --backend)
+        [ $# -ge 2 ] || fail '--backend needs claude or codex'
+        backend=$2
+        shift 2
+        ;;
+      --backend=*)
+        backend=${1#--backend=}
+        shift
+        ;;
+      --non-interactive | --no-init)
+        [ -z "$init_mode" ] || fail 'choose one of --non-interactive and --no-init'
+        init_mode=${1#--}
+        shift
+        ;;
+      -h | --help)
+        usage
+        return 0
+        ;;
+      *)
+        usage >&2
+        fail "unknown option: $1"
+        ;;
+    esac
+  done
+  case $backend in
+    '' | claude | codex) ;;
+    *) fail "--backend must be claude or codex, not $backend" ;;
+  esac
+
+  [ -n "${HOME:-}" ] && [ -d "$HOME" ] || fail 'HOME is not set to a folder'
+  root=$HOME/.mama
+  node_dir=$root/node
+  prefix=$root/npm
+  package=$prefix/lib/node_modules/@jungjaehoon/mama-os
+  cli=$package/dist/cli/index.js
+  wrapper=$root/bin/mama
+
+  # A move of the managed Node that did not finish (`mama update --node`, install.md, "Moving the
+  # managed Node"), before anything else and in plain sh: ~/.mama/npm may be missing now. At
+  # `committed` the new Node runs, and its old folders go; otherwise each folder set aside goes back
+  # over whatever is in its place, and the service starts on it. The journal has one field per line
+  # (src/cli/runtime/node-move-journal.ts); each step below can be run again after a cut.
+  move_journal=$root/runtime/node-move.json
+  if [ -e "$move_journal" ]; then
+    holder=$root/runtime/update.holder.json
+    holder_pid=''
+    [ -f "$holder" ] && holder_pid=$(sed -n 's/^{"pid":\([0-9][0-9]*\),.*/\1/p' "$holder")
+    if [ -n "$holder_pid" ] && kill -0 "$holder_pid" 2>/dev/null; then
+      fail "a move of the managed Node or an update runs now (pid $holder_pid, $holder); run this again once it ends. If that pid is not MAMA's, remove $holder first."
+    fi
+    move_from=$(sed -n 's/^  "from": "\(.*\)",$/\1/p' "$move_journal")
+    move_to=$(sed -n 's/^  "to": "\(.*\)",$/\1/p' "$move_journal")
+    if grep -q '^  "phase": "committed",$' "$move_journal"; then
+      rm -rf "$root/node.old" "$root/npm.old"
+      rm -f "$move_journal"
+      say "The managed Node's move to $move_to had taken effect; its old folders are removed."
+    else
+      # The hold is the recovery's invariant: with it, start.sh runs nothing and the folders may be
+      # half renamed; without it every rename was done (the move and this recovery write and sync it
+      # before their first rename, and sync the renames before they remove it).
+      hold=$root/runtime/update.hold
+      if [ ! -e "$hold" ] && { [ -d "$root/node.old" ] || [ -d "$root/npm.old" ]; }; then
+        # Every rename done: the new Node runs on its own prefix, and may run MAMA (a move killed
+        # while it waited for the boot), which stops before its folders move back.
+        [ -x "$node_dir/bin/node" ] && [ -f "$cli" ] ||
+          fail "the move of the managed Node to $move_to is unfinished, with no hold file and no runnable $node_dir/bin/node or $cli; nothing was changed. Stop MAMA, create $hold, then run this installer again."
+        "$node_dir/bin/node" "$cli" stop </dev/null ||
+          fail "the move of the managed Node to $move_to is unfinished, and MAMA on it did not stop (above); nothing was changed. Run $wrapper stop --now, then this installer again."
+      fi
+      # Held before the first rename, so a cut midway leaves the hold: the next run stops nothing,
+      # and a start meanwhile (a reboot) runs nothing on a half-renamed pair.
+      : >"$hold"
+      sync
+      for folder in node npm; do
+        if [ -d "$root/$folder.old" ]; then
+          rm -rf "${root:?}/$folder"
+          mv "$root/$folder.old" "$root/$folder"
+        fi
+      done
+      rm -rf "$root/node.new" "$root/npm.new"
+      sync
+      rm -f "$hold"
+      "$node_dir/bin/node" "$cli" service start </dev/null ||
+        fail "Node.js $move_from is back in $node_dir, but MAMA did not start on it (above); run this installer again"
+      # Last: a run cut before here does all of this again.
+      rm -f "$move_journal"
+      fail "the move of the managed Node from $move_from to $move_to was cut off, and is undone: MAMA runs on Node.js $move_from again. Run this installer again to move it."
+    fi
+  fi
+
+  # Another install owns this account: a setup with no MAMA in the managed prefix.
+  holds_mama=no
+  [ -f "$package/package.json" ] && holds_mama=yes
+  set_up=no
+  [ -f "$root/config.yaml" ] && set_up=yes
+  if [ "$holds_mama" = no ] && { [ "$set_up" = yes ] || [ -f "$root/start.sh" ]; }; then
+    fail "$root is set up by another MAMA install (not in $prefix); this installer will not take it over. Nothing was changed. mama update --dry-run shows how that install updates."
+  fi
+  # Nothing reads a terminal. A new install is told its backend and how to set up; one already set
+  # up runs as it was installed, so the bare command mama update and doctor print runs as is.
+  if [ "$set_up" = no ]; then
+    [ -n "$backend" ] || fail 'a new install needs --backend claude or --backend codex'
+    [ -n "$init_mode" ] ||
+      fail 'a new install needs --non-interactive (mama init reads MAMA_INIT_* variables and opens the setup page) or --no-init'
+  fi
+  [ -n "$init_mode" ] || init_mode=non-interactive
+
+  case $(uname -s) in
+    Darwin) os=darwin ;;
+    Linux) os=linux ;;
+    *) fail "MAMA OS installs on macOS and Linux; this is $(uname -s)" ;;
+  esac
+  case $(uname -m) in
+    x86_64 | amd64) arch=x64 ;;
+    arm64 | aarch64) arch=arm64 ;;
+    *) fail "MAMA OS installs on x64 and arm64; this is $(uname -m)" ;;
+  esac
+  case $os-$arch in
+    darwin-arm64) node_sha256=$NODE_SHA256_DARWIN_ARM64 ;;
+    darwin-x64) node_sha256=$NODE_SHA256_DARWIN_X64 ;;
+    linux-x64) node_sha256=$NODE_SHA256_LINUX_X64 ;;
+    linux-arm64) node_sha256=$NODE_SHA256_LINUX_ARM64 ;;
+  esac
+
+  # ~/.local/bin is where the vendor installers put the backend.
+  PATH=$HOME/.local/bin:$PATH
+  export PATH
+
+  # Linux: the parent of member_root and tools_root, and linger, in one sudo call. sudo keeps the
+  # umask 077 above; 022 inside, or the parent would be 0700 and init's folder check would fail.
+  if [ "$os" = linux ]; then
+    user=$(id -un)
+    # default-roots.ts's pattern, ^[A-Za-z0-9][A-Za-z0-9._-]*$, spelled out: a range in a
+    # bracket expression follows the locale.
+    alnum=ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789
+    case $user in
+      '' | [!$alnum]* | *[!$alnum._-]*) user_ok=no ;;
+      *) user_ok=yes ;;
+    esac
+    if [ "$user_ok" = no ]; then
+      say "The user name $user has characters MAMA's default folders do not take, so nothing is run with sudo; set MAMA_INIT_MEMBER_ROOT and MAMA_INIT_TOOLS_ROOT to two folders outside your home instead."
+    elif [ -n "$(find /var/lib/mama -prune -type d -user 0 -perm 0755 2>/dev/null)" ] &&
+      [ -n "$(find "/var/lib/mama/$user" -prune -type d -user "$(id -u)" -perm 0700 2>/dev/null)" ] &&
+      [ -e "/var/lib/systemd/linger/$user" ]; then
+      say "/var/lib/mama/$user is in place and linger is on."
+    else
+      privileged="umask 022; install -d -m 0755 /var/lib/mama; install -d -o $user -m 0700 /var/lib/mama/$user; loginctl enable-linger $user"
+      say "MAMA keeps member workspaces and document tools under /var/lib/mama/$user, and linger keeps it running after you log out. This needs sudo once:"
+      say "  sudo sh -c '$privileged'"
+      if command -v sudo >/dev/null 2>&1 && sudo sh -c "$privileged" </dev/null; then
+        say "Done."
+      else
+        say "That did not run. Run it later, or set MAMA_INIT_MEMBER_ROOT and MAMA_INIT_TOOLS_ROOT to two folders outside your home."
+      fi
+    fi
+  fi
+
+  mkdir -p "$root"
+  download=$root/node.$$.tar.gz
+  unpack=$root/node.$$.tmp
+  vendor_script=$root/backend-install.$$.sh
+  write_tmp=''
+  trap 'rm -rf "$download" "$unpack" "$vendor_script" ${write_tmp:+"$write_tmp"}' EXIT
+  trap 'exit 129' HUP
+  trap 'exit 130' INT
+  trap 'exit 143' TERM
+  # What a run killed outright (SIGKILL, a power cut) left behind.
+  rm -rf "$root"/node.*.tmp "$root"/node.*.tar.gz "$root"/backend-install.*.sh
+
+  # Node.js: the pinned release, checked against the pinned SHA-256, unpacked beside its place and
+  # renamed into $1.
+  fetch_node() {
+    command -v curl >/dev/null 2>&1 || fail 'curl is needed to download Node.js'
+    if command -v shasum >/dev/null 2>&1; then
+      sha256() { shasum -a 256 "$1" | cut -d ' ' -f 1; }
+    elif command -v sha256sum >/dev/null 2>&1; then
+      sha256() { sha256sum "$1" | cut -d ' ' -f 1; }
+    else
+      fail 'shasum or sha256sum is needed to check the Node.js download'
+    fi
+    node_file=node-v$NODE_VERSION-$os-$arch.tar.gz
+    node_url=https://nodejs.org/dist/v$NODE_VERSION/$node_file
+    say "Downloading Node.js $NODE_VERSION: $node_url"
+    curl -fsSL -o "$download" "$node_url" </dev/null || fail "could not download $node_url"
+    actual=$(sha256 "$download")
+    if [ "$actual" != "$node_sha256" ]; then
+      rm -f "$download"
+      fail "$node_file has SHA-256 $actual, not $node_sha256, which this installer pins; the download was deleted and nothing was unpacked."
+    fi
+    rm -rf "$unpack"
+    mkdir "$unpack"
+    tar -xzf "$download" -C "$unpack" --strip-components 1 </dev/null
+    rm -f "$download"
+    [ "$("$unpack/bin/node" --version </dev/null)" = "v$NODE_VERSION" ] ||
+      fail "the unpacked $node_file does not run as Node.js $NODE_VERSION"
+    rm -rf "$1"
+    mv "$unpack" "$1"
+  }
+  node_now=''
+  if [ -x "$node_dir/bin/node" ]; then
+    node_now=$("$node_dir/bin/node" --version </dev/null 2>/dev/null || true)
+  fi
+  if [ "$node_now" = "v$NODE_VERSION" ]; then
+    say "Node.js $NODE_VERSION is in place: $node_dir"
+  elif [ -f "$root/start.sh" ] && [ -n "$node_now" ]; then
+    # The service runs this Node: mama update --node moves it with the service stopped, boots
+    # MAMA on the new one and checks it, and puts the old one back on a failure. It runs on the
+    # Node it moves away from.
+    say "MAMA runs Node.js ${node_now#v} from $node_dir; this installer pins $NODE_VERSION, so it moves MAMA to it."
+    fetch_node "$root/node.new"
+    PATH="$node_dir/bin:$PATH" "$node_dir/bin/node" "$cli" update --node "$root/node.new" </dev/null ||
+      fail "moving MAMA to Node.js $NODE_VERSION did not finish (mama update --node's report is above)"
+  else
+    fetch_node "$node_dir"
+    say "Node.js $NODE_VERSION installed: $node_dir"
+  fi
+
+  # MAMA OS, with the managed Node's own npm and that Node first on PATH, as mama update runs it.
+  installed=''
+  if [ -d "$prefix" ]; then
+    installed=$(PATH="$node_dir/bin:$PATH" "$node_dir/bin/npm" ls -g --prefix "$prefix" \
+      --depth=0 --parseable --long @jungjaehoon/mama-os </dev/null 2>/dev/null |
+      sed -n 's|.*:@jungjaehoon/mama-os@\([^:]*\).*|\1|p' || true)
+  fi
+  if [ "$set_up" = yes ]; then
+    say "MAMA OS ${installed:-(unreadable)} is installed in $prefix; mama update updates it."
+  elif [ "$installed" = "$MAMA_OS_VERSION" ]; then
+    say "MAMA OS $MAMA_OS_VERSION is in place: $prefix"
+  else
+    say "Installing @jungjaehoon/mama-os@$MAMA_OS_VERSION into $prefix"
+    PATH="$node_dir/bin:$PATH" "$node_dir/bin/npm" install -g --prefix "$prefix" \
+      --no-audit --no-fund "@jungjaehoon/mama-os@$MAMA_OS_VERSION" </dev/null ||
+      fail "npm could not install @jungjaehoon/mama-os@$MAMA_OS_VERSION (its error is above). $prefix is left for the next run of this installer, which installs it again."
+  fi
+  [ -f "$cli" ] || fail "$cli is missing; run this installer again to reinstall MAMA OS"
+
+  # `mama`: the managed Node on the package's CLI by full paths. The bin's own `#!/usr/bin/env node`
+  # would run whichever Node comes first, or none on a clean account.
+  # write_file writes $2 to $1 when it differs, and returns 1 when it does not. It writes a
+  # temporary file beside the real one (a link is followed to its target, so the link stays) and
+  # renames it into place, so a failed write, a full disk included, leaves the old file whole. The
+  # temporary file starts as a copy of the old one, mode included, so a read-only file is refused.
+  write_file() {
+    write_target=$1
+    while [ -L "$write_target" ]; do
+      write_link=$(readlink "$write_target") || fail "could not read the link $write_target"
+      case $write_link in
+        /*) write_target=$write_link ;;
+        *) write_target=$(dirname "$write_target")/$write_link ;;
+      esac
+    done
+    if [ -f "$write_target" ] && printf '%s\n' "$2" | cmp -s - "$write_target"; then return 1; fi
+    mkdir -p "$(dirname "$write_target")" || fail "could not create $(dirname "$write_target")"
+    write_tmp=$write_target.mama.$$
+    if [ -e "$write_target" ]; then
+      cp -p "$write_target" "$write_tmp" || fail "could not write $1"
+    fi
+    printf '%s\n' "$2" >"$write_tmp" || fail "could not write $1"
+    mv -f "$write_tmp" "$write_target" || fail "could not write $1"
+    write_tmp=''
+  }
+  if write_file "$wrapper" "#!/bin/sh
+exec $(quote "$node_dir/bin/node") $(quote "$cli") \"\$@\""; then
+    chmod 700 "$wrapper" || fail "could not make $wrapper executable"
+    say "mama command written: $wrapper"
+  fi
+  other=$(command -v mama 2>/dev/null || true)
+  if [ -n "$other" ] && [ "$other" != "$wrapper" ]; then
+    say "Another mama comes first on this PATH: $other. The startup block below puts $wrapper ahead of it in new terminals."
+  fi
+
+  # The backend CLI: kept when the one on PATH runs (mama init checks its version and sign-in),
+  # else the vendor's documented installer, into ~/.local/bin. A found command counts only when
+  # `--version` exits 0 and prints a version, as backend-probe.ts reads it: a shim with no real CLI
+  # behind it (cmux's exits 127) is no backend. A set-up install run without --backend keeps its own.
+  backend_runs() {
+    backend_version=$("$1" --version </dev/null 2>/dev/null) &&
+      printf '%s\n' "$backend_version" | grep -Eq '[[:digit:]]+[.][[:digit:]]+[.][[:digit:]]+'
+  }
+  backend_path=''
+  [ -z "$backend" ] || backend_path=$(command -v "$backend" 2>/dev/null || true)
+  if [ -z "$backend" ]; then
+    :
+  elif [ -n "$backend_path" ] && backend_runs "$backend_path"; then
+    say "$backend is installed: $backend_path"
+  else
+    [ -z "$backend_path" ] ||
+      say "$backend_path does not run (its --version exited non-zero or printed no version), so it does not count."
+    case $backend in
+      claude)
+        vendor_url=https://claude.ai/install.sh
+        vendor_page=https://code.claude.com/docs/en/setup
+        vendor_shell='bash'
+        ;;
+      codex)
+        vendor_url=https://chatgpt.com/codex/install.sh
+        vendor_page=https://learn.chatgpt.com/docs/codex/cli
+        vendor_shell='sh'
+        ;;
+    esac
+    say "Installing $backend with its vendor's installer: curl -fsSL $vendor_url | $vendor_shell"
+    command -v curl >/dev/null 2>&1 || fail "curl is needed to install $backend; see $vendor_page"
+    # Fetched first, so a failed download is not an installer that ran on nothing.
+    curl -fsSL -o "$vendor_script" "$vendor_url" </dev/null ||
+      fail "could not download $vendor_url; see $vendor_page"
+    if [ "$backend" = codex ]; then
+      # On a terminal Codex's installer offers to start Codex on ~/.codex, not the home MAMA gives
+      # it; its install folder stays ~/.local/bin, which the startup block names.
+      (
+        unset CODEX_HOME CODEX_INSTALL_DIR
+        CODEX_NON_INTERACTIVE=1 sh "$vendor_script"
+      ) </dev/null || fail "the codex installer failed (its output is above); see $vendor_page"
+    else
+      bash "$vendor_script" </dev/null ||
+        fail "the claude installer failed (its output is above); see $vendor_page"
+    fi
+    rm -f "$vendor_script"
+    backend_path=$(command -v "$backend" 2>/dev/null || true)
+    [ -n "$backend_path" ] ||
+      fail "$backend's installer finished, but $backend is not on PATH or in $HOME/.local/bin; see $vendor_page"
+    backend_runs "$backend_path" ||
+      fail "$backend's installer finished, but $backend_path does not run (its --version exited non-zero or printed no version); see $vendor_page"
+    say "$backend installed: $backend_path"
+  fi
+
+  # The login shell's startup file: the text between the markers is rewritten on each run.
+  path_line="export PATH=\"\$HOME/.mama/bin:\$PATH\""
+  fish_dirs="$root/bin"
+  # The backend named, or without --backend either one the vendor installers put there.
+  local_backend=no
+  for name in ${backend:-claude codex}; do
+    if [ -x "$HOME/.local/bin/$name" ]; then local_backend=yes; fi
+  done
+  if [ "$local_backend" = yes ]; then
+    path_line="export PATH=\"\$HOME/.mama/bin:\$HOME/.local/bin:\$PATH\""
+    fish_dirs="$fish_dirs $HOME/.local/bin"
+  fi
+  startup=''
+  reopen='Open a new terminal'
+  case $(basename "${SHELL:-sh}") in
+    zsh) startup=${ZDOTDIR:-$HOME}/.zshrc ;;
+    bash)
+      if [ "$os" = linux ]; then
+        startup=$HOME/.bashrc
+      elif [ ! -f "$HOME/.bash_profile" ] && [ -f "$HOME/.profile" ]; then
+        startup=$HOME/.profile
+      else
+        startup=$HOME/.bash_profile
+      fi
+      ;;
+    fish)
+      reopen="In fish, run once: fish_add_path $fish_dirs"
+      say "fish: no startup file is written. $reopen"
+      ;;
+    *) startup=$HOME/.profile ;;
+  esac
+  if [ -n "$startup" ]; then
+    block="# >>> mama >>>
+# Written by the MAMA OS installer; each run rewrites the lines between these markers.
+$path_line
+# <<< mama <<<"
+    current=''
+    if [ -e "$startup" ]; then
+      current=$(cat "$startup") || fail "could not read $startup"
+    fi
+    # Markers match with a trailing carriage return too (a file saved with CRLF line ends). Unequal
+    # counts exit 3: a block without its end line would otherwise swallow the rest of the file.
+    updated=$(printf '%s\n' "$current" | MAMA_BLOCK=$block awk '
+      { line = $0; sub(/\r$/, "", line) }
+      line == "# >>> mama >>>" { opened++; if (!done) print ENVIRON["MAMA_BLOCK"]; done = 1; skip = 1; next }
+      line == "# <<< mama <<<" { closed++; if (skip) { skip = 0; next } }
+      skip { next }
+      { print; last = line }
+      END {
+        if (opened != closed) exit 3
+        if (!done) {
+          if (NR > 0 && last != "") print ""
+          print ENVIRON["MAMA_BLOCK"]
+        }
+      }
+    ') || fail "$startup has a '# >>> mama >>>' line without its '# <<< mama <<<' line, or the other way round; fix it, then run this installer again"
+    # An absent or empty file gets the block alone.
+    [ -n "$current" ] || updated=$block
+    if write_file "$startup" "$updated"; then
+      say "PATH block written in $startup"
+    fi
+  fi
+
+  # mama init: npm and init run by full path with the managed Node first on PATH. Init reads the
+  # backend this script installed; a set-up install run without --backend has its own.
+  if [ -n "$backend" ]; then
+    MAMA_INIT_BACKEND=$backend
+    export MAMA_INIT_BACKEND
+  fi
+  case $init_mode in
+    no-init)
+      say "Installed. $reopen to have mama on PATH."
+      # ~/.local/bin first, as here: init looks for the backend on PATH, and a new shell may not
+      # read the startup block yet.
+      say "Set up with: PATH=\"\$HOME/.local/bin:\$PATH\" ${backend:+MAMA_INIT_BACKEND=$backend }MAMA_INIT_MODEL=<model> $(quote "$wrapper") init --non-interactive"
+      ;;
+    non-interactive)
+      PATH="$node_dir/bin:$PATH" "$wrapper" init --non-interactive </dev/null
+      ;;
+  esac
+}
+
+mama_install "$@"

package/install/node.json

@@ -0,0 +1,9 @@
+{
+  "version": "22.23.4",
+  "sha256": {
+    "darwin-arm64": "c9e1dbc748b33ed2d14f42445191ecaf14c56259c7a9a26d0042c49ec2b66428",
+    "darwin-x64": "efcc2b0db6f94bf53eddb038fe2b370277a042bd29e4f19b8f8e23598795b819",
+    "linux-x64": "b8492284c76a54baf58d61668dd0e41ee0fc98adabf9503d30f05d08f55b4406",
+    "linux-arm64": "f7a1e486dbc8b286847815b477d4fb5e9fb963ed4489c3e1588853d685f589f9"
+  }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jungjaehoon/mama-os",
-  "version": "0.77.0",
+  "version": "0.79.0",
   "description": "MAMA OS - The local work agent behind your messenger.",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -43,6 +43,7 @@
     "public",
     "db",
     "toolkit",
+    "install",
     "README.md",
     "CHANGELOG.md"
   ],
@@ -50,20 +51,19 @@
     "access": "public"
   },
   "dependencies": {
-    "@jungjaehoon/mama-core": "^8.7.0",
+    "@jungjaehoon/mama-core": "^8.9.0",
     "@slack/socket-mode": "^2.0.5",
     "@slack/web-api": "^7.13.0",
     "better-sqlite3": "^12.8.0",
     "discord.js": "^14.25.1",
-    "express": "^5.2.1",
     "fflate": "0.8.3",
     "grammy": "^1.42.0",
     "htmlparser2": "12.0.0",
-    "js-yaml": "^4.1.1"
+    "js-yaml": "^4.1.1",
+    "tar": "7.5.9"
   },
   "devDependencies": {
     "@types/better-sqlite3": "^7.6.13",
-    "@types/express": "^5.0.6",
     "@types/js-yaml": "^4.0.9",
     "@types/node": "^22.0.0",
     "typescript": "^5.4.0",