@kl-c/matrixos 0.3.4 → 0.3.5

package/dist/cli/index.js

@@ -2163,7 +2163,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@kl-c/matrixos",
-    version: "0.3.4",
+    version: "0.3.5",
     description: "MaTrixOS \u2014 Agentic OS for OpenCode. Personalizable, communicating, self-improving, resilient.",
     main: "./dist/index.js",
     types: "dist/index.d.ts",
@@ -66376,8 +66376,18 @@ var init_model_fallback = __esm(() => {
 });
 
 // packages/omo-opencode/src/cli/config-manager/generate-omo-config.ts
+function randomPassphrase() {
+  const chars = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789";
+  let out = "";
+  for (let i2 = 0;i2 < 32; i2++)
+    out += chars.charAt(Math.floor(Math.random() * chars.length));
+  return out;
+}
 function generateOmoConfig(installConfig) {
   const config = generateModelConfig(installConfig);
+  config.dashboard = {
+    gatewayPassphrase: randomPassphrase()
+  };
   if (installConfig.gatewayTelegram) {
     config.gateway = {
       enabled: true,
@@ -69995,6 +70005,7 @@ var init_tui_install_prompts = __esm(() => {
 });
 
 // packages/omo-opencode/src/cli/tui-installer.ts
+import { readFileSync as readFileSync17 } from "fs";
 async function runTuiInstaller(args, version) {
   if (!process.stdin.isTTY || !process.stdout.isTTY) {
     console.error("Error: Interactive installer requires a TTY. Use --non-interactive or set environment variables directly.");
@@ -70075,6 +70086,14 @@ async function runTuiInstaller(args, version) {
       return 1;
     }
     spinner2.stop(`Config written to ${import_picocolors4.default.cyan(omoResult.configPath)}`);
+    try {
+      const written = parseJsonc(readFileSync17(omoResult.configPath, "utf-8"));
+      const dash = written.dashboard;
+      if (typeof dash?.gatewayPassphrase === "string") {
+        log4.success(`Dashboard gateway passphrase: ${import_picocolors4.default.bold(dash.gatewayPassphrase)}`);
+        log4.info(`Save it \u2014 needed to set Telegram/Discord tokens in the dashboard at http://127.0.0.1:9123`);
+      }
+    } catch {}
     if (config.gatewayTelegram && config.gatewayTelegramToken) {
       try {
         const envPath = writeGatewayEnv(config.gatewayTelegramToken);
@@ -154560,7 +154579,7 @@ var require_filesystem = __commonJS((exports2, module2) => {
   var LDD_PATH = "/usr/bin/ldd";
   var SELF_PATH = "/proc/self/exe";
   var MAX_LENGTH = 2048;
-  var readFileSync47 = (path18) => {
+  var readFileSync48 = (path18) => {
     const fd = fs18.openSync(path18, "r");
     const buffer = Buffer.alloc(MAX_LENGTH);
     const bytesRead = fs18.readSync(fd, buffer, 0, MAX_LENGTH, 0);
@@ -154583,7 +154602,7 @@ var require_filesystem = __commonJS((exports2, module2) => {
   module2.exports = {
     LDD_PATH,
     SELF_PATH,
-    readFileSync: readFileSync47,
+    readFileSync: readFileSync48,
     readFile
   };
 });
@@ -154626,7 +154645,7 @@ var require_elf = __commonJS((exports2, module2) => {
 var require_detect_libc = __commonJS((exports2, module2) => {
   var childProcess = __require("child_process");
   var { isLinux, getReport } = require_process();
-  var { LDD_PATH, SELF_PATH, readFile, readFileSync: readFileSync47 } = require_filesystem();
+  var { LDD_PATH, SELF_PATH, readFile, readFileSync: readFileSync48 } = require_filesystem();
   var { interpreterPath } = require_elf();
   var cachedFamilyInterpreter;
   var cachedFamilyFilesystem;
@@ -154717,7 +154736,7 @@ var require_detect_libc = __commonJS((exports2, module2) => {
     }
     cachedFamilyFilesystem = null;
     try {
-      const lddContent = readFileSync47(LDD_PATH);
+      const lddContent = readFileSync48(LDD_PATH);
       cachedFamilyFilesystem = getFamilyFromLddContent(lddContent);
     } catch (e) {}
     return cachedFamilyFilesystem;
@@ -154740,7 +154759,7 @@ var require_detect_libc = __commonJS((exports2, module2) => {
     }
     cachedFamilyInterpreter = null;
     try {
-      const selfContent = readFileSync47(SELF_PATH);
+      const selfContent = readFileSync48(SELF_PATH);
       const path18 = interpreterPath(selfContent);
       cachedFamilyInterpreter = familyFromInterpreterPath(path18);
     } catch (e) {}
@@ -154802,7 +154821,7 @@ var require_detect_libc = __commonJS((exports2, module2) => {
     }
     cachedVersionFilesystem = null;
     try {
-      const lddContent = readFileSync47(LDD_PATH);
+      const lddContent = readFileSync48(LDD_PATH);
       const versionMatch = lddContent.match(RE_GLIBC_VERSION);
       if (versionMatch) {
         cachedVersionFilesystem = versionMatch[1];
@@ -164963,7 +164982,7 @@ __export(exports_generate, {
   executeGenerateCommand: () => executeGenerateCommand,
   ProfileNotFoundError: () => ProfileNotFoundError
 });
-import { existsSync as existsSync72, readFileSync as readFileSync58, realpathSync as realpathSync10 } from "fs";
+import { existsSync as existsSync72, readFileSync as readFileSync59, realpathSync as realpathSync10 } from "fs";
 import { dirname as dirname29, isAbsolute as isAbsolute6, join as join77, resolve as resolve16 } from "path";
 function profilesDirFor(opts) {
   if (opts.profilesDir)
@@ -165061,7 +165080,7 @@ var init_generate = __esm(() => {
   init_src5();
   init_src5();
   REPO_ROOT = resolve16(dirname29(new URL(import.meta.url).pathname), "..", "..", "..", "..", "..");
-  defaultFS2 = { existsSync: existsSync72, readFileSync: readFileSync58, realpathSync: realpathSync10 };
+  defaultFS2 = { existsSync: existsSync72, readFileSync: readFileSync59, realpathSync: realpathSync10 };
   ProfileNotFoundError = class ProfileNotFoundError extends Error {
     profileName;
     constructor(profileName) {
@@ -165315,7 +165334,7 @@ var exports_profile_resolve = {};
 __export(exports_profile_resolve, {
   executeProfileResolveCommand: () => executeProfileResolveCommand
 });
-import { existsSync as existsSync74, readdirSync as readdirSync16, readFileSync as readFileSync59 } from "fs";
+import { existsSync as existsSync74, readdirSync as readdirSync16, readFileSync as readFileSync60 } from "fs";
 import { join as join80, resolve as resolve17, dirname as dirname30 } from "path";
 function executeProfileResolveCommand(args) {
   if (args.options.help) {
@@ -165362,7 +165381,7 @@ function executeProfileResolveCommand(args) {
   for (const file3 of profileFiles) {
     try {
       const filePath = join80(profilesDir, file3);
-      const raw = JSON.parse(readFileSync59(filePath, "utf-8"));
+      const raw = JSON.parse(readFileSync60(filePath, "utf-8"));
       const profile2 = ProfileSchema.parse(raw);
       registry2[profile2.name] = profile2;
     } catch {}
@@ -165424,7 +165443,7 @@ __export(exports_export, {
   getShell: () => getShell,
   executeExportCommand: () => executeExportCommand
 });
-import { existsSync as existsSync75, readFileSync as readFileSync60, writeFileSync as writeFileSync26, copyFileSync as copyFileSync8, realpathSync as realpathSync11, mkdirSync as mkdirSync27 } from "fs";
+import { existsSync as existsSync75, readFileSync as readFileSync61, writeFileSync as writeFileSync26, copyFileSync as copyFileSync8, realpathSync as realpathSync11, mkdirSync as mkdirSync27 } from "fs";
 import { isAbsolute as isAbsolute7, join as join81, resolve as resolve18, dirname as dirname31 } from "path";
 import { spawnSync as spawnSync4 } from "child_process";
 function setShell(shell) {
@@ -165548,7 +165567,7 @@ var init_export = __esm(() => {
   activeShell = defaultShell;
   defaultExportFS = {
     existsSync: existsSync75,
-    readFileSync: readFileSync60,
+    readFileSync: readFileSync61,
     writeFileSync: writeFileSync26,
     copyFileSync: copyFileSync8,
     realpathSync: realpathSync11,
@@ -165576,7 +165595,7 @@ __export(exports_project_context, {
   createProject: () => createProject,
   archiveProject: () => archiveProject
 });
-import { existsSync as existsSync76, mkdirSync as mkdirSync28, readFileSync as readFileSync61, writeFileSync as writeFileSync27, rmSync as rmSync8 } from "fs";
+import { existsSync as existsSync76, mkdirSync as mkdirSync28, readFileSync as readFileSync62, writeFileSync as writeFileSync27, rmSync as rmSync8 } from "fs";
 import { join as join82 } from "path";
 function getMatrixOsDir(cwd = process.cwd()) {
   return join82(cwd, ".matrixos");
@@ -165595,7 +165614,7 @@ function loadState(cwd) {
   if (!existsSync76(path29))
     return {};
   try {
-    return JSON.parse(readFileSync61(path29, "utf-8"));
+    return JSON.parse(readFileSync62(path29, "utf-8"));
   } catch {
     return {};
   }
@@ -165611,7 +165630,7 @@ function loadProjectMeta(slug, cwd) {
   if (!existsSync76(path29))
     return null;
   try {
-    return JSON.parse(readFileSync61(path29, "utf-8"));
+    return JSON.parse(readFileSync62(path29, "utf-8"));
   } catch {
     return null;
   }
@@ -165737,7 +165756,7 @@ __export(exports_project_memory, {
   isProjectEpisode: () => isProjectEpisode,
   addKbDocument: () => addKbDocument
 });
-import { existsSync as existsSync77, mkdirSync as mkdirSync29, readFileSync as readFileSync62, readdirSync as readdirSync17, writeFileSync as writeFileSync28 } from "fs";
+import { existsSync as existsSync77, mkdirSync as mkdirSync29, readFileSync as readFileSync63, readdirSync as readdirSync17, writeFileSync as writeFileSync28 } from "fs";
 import { join as join83 } from "path";
 function tagWithProject(metadata = {}, projectSlug, cwd) {
   const active = projectSlug ?? getActiveProject(cwd)?.slug;
@@ -165761,7 +165780,7 @@ function listKbDocuments(projectSlug, cwd) {
       continue;
     const path29 = join83(kbDir, entry.name);
     try {
-      docs.push({ path: path29, content: readFileSync62(path29, "utf-8") });
+      docs.push({ path: path29, content: readFileSync63(path29, "utf-8") });
     } catch {}
   }
   return docs;
@@ -166183,12 +166202,12 @@ __export(exports_gateway_start, {
   buildTelegramConfig: () => buildTelegramConfig,
   buildGatewayConfig: () => buildGatewayConfig
 });
-import { readFileSync as readFileSync63, existsSync as existsSync78 } from "fs";
+import { readFileSync as readFileSync64, existsSync as existsSync78 } from "fs";
 import { resolve as resolve19 } from "path";
 function loadGatewayEnv(path29 = ENV_PATH) {
   if (!existsSync78(path29))
     return {};
-  const text = readFileSync63(path29, "utf8");
+  const text = readFileSync64(path29, "utf8");
   const out = {};
   for (const raw of text.split(/\r?\n/)) {
     const line = raw.trim();
@@ -166658,7 +166677,7 @@ var init_deployment = __esm(() => {
 });
 
 // packages/omo-opencode/src/audit/self-audit.ts
-import { existsSync as existsSync80, mkdirSync as mkdirSync30, readdirSync as readdirSync18, readFileSync as readFileSync64, writeFileSync as writeFileSync29 } from "fs";
+import { existsSync as existsSync80, mkdirSync as mkdirSync30, readdirSync as readdirSync18, readFileSync as readFileSync65, writeFileSync as writeFileSync29 } from "fs";
 import { join as join84 } from "path";
 function getAuditDir(cwd = process.cwd()) {
   return join84(cwd, ".matrixos", "audits");
@@ -169312,7 +169331,7 @@ var BOULDER_STATE_PATH = `${BOULDER_DIR}/${BOULDER_FILE}`;
 var NOTEPAD_DIR = "notepads";
 var NOTEPAD_BASE_PATH = `${BOULDER_DIR}/${NOTEPAD_DIR}`;
 // packages/boulder-state/src/top-level-task.ts
-import { existsSync as existsSync32, readFileSync as readFileSync19 } from "fs";
+import { existsSync as existsSync32, readFileSync as readFileSync20 } from "fs";
 var TODO_HEADING_PATTERN = /^##\s+TODOs\b/i;
 var FINAL_VERIFICATION_HEADING_PATTERN = /^##\s+Final Verification Wave\b/i;
 var SECOND_LEVEL_HEADING_PATTERN = /^##\s+/;
@@ -169339,7 +169358,7 @@ function readCurrentTopLevelTask(planPath) {
     return null;
   }
   try {
-    const content = readFileSync19(planPath, "utf-8");
+    const content = readFileSync20(planPath, "utf-8");
     const lines = content.split(/\r?\n/);
     let section = "other";
     for (const line of lines) {
@@ -169391,7 +169410,7 @@ function resolveBoulderPlanPathForWork(directory, work) {
   return resolveBoulderPlanPath(directory, work);
 }
 // packages/boulder-state/src/storage/plan-progress.ts
-import { existsSync as existsSync34, readFileSync as readFileSync20, readdirSync as readdirSync5, statSync as statSync5 } from "fs";
+import { existsSync as existsSync34, readFileSync as readFileSync21, readdirSync as readdirSync5, statSync as statSync5 } from "fs";
 var TODO_HEADING_PATTERN2 = /^##\s+TODOs\b/i;
 var FINAL_VERIFICATION_HEADING_PATTERN2 = /^##\s+Final Verification Wave\b/i;
 var SECOND_LEVEL_HEADING_PATTERN2 = /^##\s+/;
@@ -169404,7 +169423,7 @@ function getPlanProgress(planPath) {
     return { total: 0, completed: 0, isComplete: false };
   }
   try {
-    const content = readFileSync20(planPath, "utf-8");
+    const content = readFileSync21(planPath, "utf-8");
     const lines = content.split(/\r?\n/);
     const hasStructuredSections = lines.some((line) => TODO_HEADING_PATTERN2.test(line) || FINAL_VERIFICATION_HEADING_PATTERN2.test(line));
     if (hasStructuredSections) {
@@ -169520,14 +169539,14 @@ function selectMirrorWork(state) {
   return sorted[0] ?? null;
 }
 // packages/boulder-state/src/storage/read-state.ts
-import { existsSync as existsSync35, readFileSync as readFileSync21 } from "fs";
+import { existsSync as existsSync35, readFileSync as readFileSync22 } from "fs";
 function readBoulderState(directory) {
   const filePath = getBoulderFilePath(directory);
   if (!existsSync35(filePath)) {
     return null;
   }
   try {
-    const content = readFileSync21(filePath, "utf-8");
+    const content = readFileSync22(filePath, "utf-8");
     const parsed = JSON.parse(content);
     if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
       return null;
@@ -169593,7 +169612,7 @@ init_state();
 // packages/omo-opencode/src/features/run-continuation-state/constants.ts
 var CONTINUATION_MARKER_DIR = ".omo/run-continuation";
 // packages/omo-opencode/src/features/run-continuation-state/storage.ts
-import { existsSync as existsSync36, mkdirSync as mkdirSync12, readFileSync as readFileSync22, rmSync as rmSync2, writeFileSync as writeFileSync9 } from "fs";
+import { existsSync as existsSync36, mkdirSync as mkdirSync12, readFileSync as readFileSync23, rmSync as rmSync2, writeFileSync as writeFileSync9 } from "fs";
 import { join as join31 } from "path";
 function getMarkerPath(directory, sessionID) {
   return join31(directory, CONTINUATION_MARKER_DIR, `${sessionID}.json`);
@@ -169603,7 +169622,7 @@ function readContinuationMarker(directory, sessionID) {
   if (!existsSync36(markerPath))
     return null;
   try {
-    const raw = readFileSync22(markerPath, "utf-8");
+    const raw = readFileSync23(markerPath, "utf-8");
     const parsed = JSON.parse(raw);
     if (!parsed || typeof parsed !== "object" || Array.isArray(parsed))
       return null;
@@ -169668,7 +169687,7 @@ async function isSessionInBoulderLineage(input) {
 // packages/omo-opencode/src/hooks/the-operator/session-last-agent.ts
 init_shared();
 init_compaction_marker();
-import { readFileSync as readFileSync23, readdirSync as readdirSync6 } from "fs";
+import { readFileSync as readFileSync24, readdirSync as readdirSync6 } from "fs";
 import { join as join32 } from "path";
 var defaultSessionLastAgentDeps = {
   getMessageDir,
@@ -169729,7 +169748,7 @@ async function getLastAgentFromSession(sessionID, client3, deps = {}) {
   try {
     const messages = readdirSync6(messageDir).filter((fileName) => fileName.endsWith(".json")).map((fileName) => {
       try {
-        const content = readFileSync23(join32(messageDir, fileName), "utf-8");
+        const content = readFileSync24(join32(messageDir, fileName), "utf-8");
         const parsed = JSON.parse(content);
         return {
           fileName,
@@ -169772,7 +169791,7 @@ init_agent_display_names();
 
 // packages/omo-opencode/src/hooks/ralph-loop/storage.ts
 init_frontmatter2();
-import { existsSync as existsSync37, readFileSync as readFileSync24, writeFileSync as writeFileSync10, unlinkSync as unlinkSync6, mkdirSync as mkdirSync13 } from "fs";
+import { existsSync as existsSync37, readFileSync as readFileSync25, writeFileSync as writeFileSync10, unlinkSync as unlinkSync6, mkdirSync as mkdirSync13 } from "fs";
 import { dirname as dirname13, join as join33 } from "path";
 
 // packages/omo-opencode/src/hooks/ralph-loop/constants.ts
@@ -169790,7 +169809,7 @@ function readState(directory, customPath) {
     return null;
   }
   try {
-    const content = readFileSync24(filePath, "utf-8");
+    const content = readFileSync25(filePath, "utf-8");
     const { data, body } = parseFrontmatter(content);
     const active = data.active;
     const iteration = data.iteration;
@@ -170365,7 +170384,7 @@ function createTimestampedStdoutController(stdout2 = process.stdout) {
 // packages/telemetry-core/src/activity-state.ts
 init_atomic_write();
 init_xdg_data_dir();
-import { existsSync as existsSync38, mkdirSync as mkdirSync14, readFileSync as readFileSync25 } from "fs";
+import { existsSync as existsSync38, mkdirSync as mkdirSync14, readFileSync as readFileSync26 } from "fs";
 import { basename as basename6, join as join34 } from "path";
 var POSTHOG_ACTIVITY_STATE_FILE = "posthog-activity.json";
 function resolveTelemetryStateDir(product, options = {}) {
@@ -170409,7 +170428,7 @@ function readPostHogActivityState(stateDir, diagnostics) {
     return {};
   }
   try {
-    const stateContent = readFileSync25(stateFilePath, "utf-8");
+    const stateContent = readFileSync26(stateFilePath, "utf-8");
     const stateJson = JSON.parse(stateContent);
     if (!isPostHogActivityState(stateJson)) {
       return {};
@@ -177532,7 +177551,7 @@ init_constants5();
 
 // packages/omo-opencode/src/cli/doctor/checks/system.ts
 init_constants5();
-import { existsSync as existsSync49, readFileSync as readFileSync35 } from "fs";
+import { existsSync as existsSync49, readFileSync as readFileSync36 } from "fs";
 
 // packages/omo-opencode/src/cli/doctor/checks/system-binary.ts
 init_extract_semver();
@@ -177729,7 +177748,7 @@ function compareVersions3(current, minimum) {
 
 // packages/omo-opencode/src/cli/doctor/checks/system-plugin.ts
 init_shared();
-import { existsSync as existsSync47, readFileSync as readFileSync33 } from "fs";
+import { existsSync as existsSync47, readFileSync as readFileSync34 } from "fs";
 function detectConfigPath() {
   const paths2 = getOpenCodeConfigPaths({ binary: "opencode", version: null });
   if (existsSync47(paths2.configJsonc))
@@ -177780,7 +177799,7 @@ function getPluginInfo() {
     };
   }
   try {
-    const content = readFileSync33(configPath, "utf-8");
+    const content = readFileSync34(configPath, "utf-8");
     const parsedConfig = parseJsonc(content);
     const pluginEntry = findPluginEntry2(parsedConfig.plugin ?? []);
     if (!pluginEntry) {
@@ -177824,7 +177843,7 @@ init_auto_update_checker();
 init_package_json_locator();
 init_constants5();
 init_shared();
-import { existsSync as existsSync48, readFileSync as readFileSync34, readdirSync as readdirSync8 } from "fs";
+import { existsSync as existsSync48, readFileSync as readFileSync35, readdirSync as readdirSync8 } from "fs";
 import { createRequire as createRequire2 } from "module";
 import { homedir as homedir13 } from "os";
 import { join as join42 } from "path";
@@ -177855,7 +177874,7 @@ function readPackageJson(filePath) {
   if (!existsSync48(filePath))
     return null;
   try {
-    const content = readFileSync34(filePath, "utf-8");
+    const content = readFileSync35(filePath, "utf-8");
     return parseJsonc(content);
   } catch (error51) {
     if (!(error51 instanceof Error)) {
@@ -177989,7 +178008,7 @@ var defaultDeps6 = {
   getLatestPluginVersion,
   getSuggestedInstallTag,
   configExists: existsSync49,
-  readConfigFile: (path14) => readFileSync35(path14, "utf-8"),
+  readConfigFile: (path14) => readFileSync36(path14, "utf-8"),
   parseConfigContent: (content) => parseJsonc(content)
 };
 var BUN_POSTINSTALL_HELPER_PACKAGE_NAME = "@code-yeongyu/comment-checker";
@@ -178134,7 +178153,7 @@ async function checkSystem(deps = defaultDeps6) {
 
 // packages/omo-opencode/src/config/validate.ts
 init_src();
-import { readFileSync as readFileSync36 } from "fs";
+import { readFileSync as readFileSync37 } from "fs";
 import { homedir as homedir14 } from "os";
 import { dirname as dirname19, relative as relative5 } from "path";
 init_shared();
@@ -178179,7 +178198,7 @@ function schemaMessages(configPath, rawConfig) {
 }
 function parseLayerConfig(configPath) {
   try {
-    const content = readFileSync36(configPath, "utf-8");
+    const content = readFileSync37(configPath, "utf-8");
     const rawConfig = parseJsonc(content);
     if (!isPlainRecord(rawConfig)) {
       return {
@@ -178251,7 +178270,7 @@ init_constants5();
 
 // packages/omo-opencode/src/cli/doctor/checks/model-resolution-cache.ts
 init_shared();
-import { existsSync as existsSync50, readFileSync as readFileSync37 } from "fs";
+import { existsSync as existsSync50, readFileSync as readFileSync38 } from "fs";
 import { homedir as homedir15 } from "os";
 import { join as join43 } from "path";
 function getUserConfigDir2() {
@@ -178270,7 +178289,7 @@ function loadCustomProviderNames() {
     if (!existsSync50(configPath))
       continue;
     try {
-      const content = readFileSync37(configPath, "utf-8");
+      const content = readFileSync38(configPath, "utf-8");
       const data = parseJsonc(content);
       if (data?.provider && typeof data.provider === "object") {
         return Object.keys(data.provider);
@@ -178294,7 +178313,7 @@ function loadAvailableModelsFromCache() {
     return { providers: [], modelCount: 0, cacheExists: false };
   }
   try {
-    const content = readFileSync37(cacheFile, "utf-8");
+    const content = readFileSync38(cacheFile, "utf-8");
     const data = parseJsonc(content);
     const cacheProviders = Object.keys(data);
     let modelCount = 0;
@@ -178322,7 +178341,7 @@ init_constants5();
 // packages/omo-opencode/src/cli/doctor/checks/model-resolution-config.ts
 init_shared();
 init_plugin_identity();
-import { readFileSync as readFileSync38 } from "fs";
+import { readFileSync as readFileSync39 } from "fs";
 import { join as join44 } from "path";
 var PROJECT_CONFIG_DIR = join44(process.cwd(), ".opencode");
 function loadOmoConfig() {
@@ -178332,7 +178351,7 @@ function loadOmoConfig() {
   });
   if (projectDetected.format !== "none") {
     try {
-      const content = readFileSync38(projectDetected.path, "utf-8");
+      const content = readFileSync39(projectDetected.path, "utf-8");
       return parseJsonc(content);
     } catch (error51) {
       if (error51 instanceof Error) {
@@ -178348,7 +178367,7 @@ function loadOmoConfig() {
   });
   if (userDetected.format !== "none") {
     try {
-      const content = readFileSync38(userDetected.path, "utf-8");
+      const content = readFileSync39(userDetected.path, "utf-8");
       return parseJsonc(content);
     } catch (error51) {
       if (error51 instanceof Error) {
@@ -178929,13 +178948,13 @@ async function getGhCliInfo(dependencies = {}) {
 }
 
 // packages/omo-opencode/src/cli/doctor/checks/tools-lsp.ts
-import { readFileSync as readFileSync40 } from "fs";
+import { readFileSync as readFileSync41 } from "fs";
 import { join as join48 } from "path";
 
 // packages/omo-opencode/src/mcp/lsp.ts
 init_zod();
 init_opencode_config_dir();
-import { existsSync as existsSync52, readFileSync as readFileSync39 } from "fs";
+import { existsSync as existsSync52, readFileSync as readFileSync40 } from "fs";
 import { delimiter as delimiter3, dirname as dirname21, resolve as resolve10 } from "path";
 import { fileURLToPath as fileURLToPath6 } from "url";
 
@@ -179079,7 +179098,7 @@ function findBootstrapRoot(candidates, pathExists) {
 }
 function readDaemonPackageVersion(root) {
   try {
-    const packageJson = JSON.parse(readFileSync39(resolve10(root, PACKAGE_REL, "package.json"), "utf-8"));
+    const packageJson = JSON.parse(readFileSync40(resolve10(root, PACKAGE_REL, "package.json"), "utf-8"));
     return DaemonPackageSchema.parse(packageJson).version;
   } catch (error51) {
     if (!(error51 instanceof Error))
@@ -179156,7 +179175,7 @@ function readOmoConfig(configDirectory) {
     return null;
   }
   try {
-    const content = readFileSync40(detected.path, "utf-8");
+    const content = readFileSync41(detected.path, "utf-8");
     return parseJsonc(content);
   } catch (error51) {
     if (!(error51 instanceof Error)) {
@@ -179186,7 +179205,7 @@ function getInstalledLspServers(options = {}) {
 
 // packages/omo-opencode/src/cli/doctor/checks/tools-mcp.ts
 init_shared();
-import { existsSync as existsSync53, readFileSync as readFileSync41 } from "fs";
+import { existsSync as existsSync53, readFileSync as readFileSync42 } from "fs";
 import { homedir as homedir18 } from "os";
 import { join as join49 } from "path";
 var BUILTIN_MCP_SERVERS = ["websearch", "context7", "grep_app", "lsp"];
@@ -179203,7 +179222,7 @@ function loadUserMcpConfig() {
     if (!existsSync53(configPath))
       continue;
     try {
-      const content = readFileSync41(configPath, "utf-8");
+      const content = readFileSync42(configPath, "utf-8");
       const config5 = parseJsonc(content);
       if (config5.mcpServers) {
         Object.assign(servers, config5.mcpServers);
@@ -179338,7 +179357,7 @@ async function checkTools() {
 }
 
 // packages/omo-opencode/src/cli/doctor/checks/telemetry.ts
-import { existsSync as existsSync54, readFileSync as readFileSync42 } from "fs";
+import { existsSync as existsSync54, readFileSync as readFileSync43 } from "fs";
 init_constants5();
 function isTelemetryState(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value);
@@ -179349,7 +179368,7 @@ function readLastActiveDay(stateFilePath) {
   }
   let parsed;
   try {
-    parsed = JSON.parse(readFileSync42(stateFilePath, "utf-8"));
+    parsed = JSON.parse(readFileSync43(stateFilePath, "utf-8"));
   } catch (error51) {
     if (error51 instanceof Error) {
       return "unreadable";
@@ -179425,7 +179444,7 @@ function expandHomeDirectory(directoryPath) {
 init_constants5();
 init_shared();
 init_plugin_identity();
-import { readFileSync as readFileSync43, promises as fs15 } from "fs";
+import { readFileSync as readFileSync44, promises as fs15 } from "fs";
 import path15 from "path";
 async function checkTeamMode() {
   const config5 = loadTeamModeConfig();
@@ -179462,7 +179481,7 @@ function loadTeamModeConfig() {
   if (!configPath)
     return { team_mode: undefined };
   try {
-    return parseJsonc(readFileSync43(configPath, "utf-8"));
+    return parseJsonc(readFileSync44(configPath, "utf-8"));
   } catch (error51) {
     if (error51 instanceof Error) {
       return { team_mode: undefined };
@@ -179903,7 +179922,7 @@ import {
   existsSync as existsSync57,
   mkdirSync as mkdirSync16,
   readdirSync as readdirSync9,
-  readFileSync as readFileSync45,
+  readFileSync as readFileSync46,
   renameSync as renameSync7,
   unlinkSync as unlinkSync9,
   writeFileSync as writeFileSync14
@@ -179936,7 +179955,7 @@ function getOpenCodeCliConfigDir(env2 = process.env) {
 }
 
 // packages/mcp-client-core/src/mcp-oauth/storage-index.ts
-import { chmodSync as chmodSync5, existsSync as existsSync56, readFileSync as readFileSync44, renameSync as renameSync6, writeFileSync as writeFileSync13 } from "fs";
+import { chmodSync as chmodSync5, existsSync as existsSync56, readFileSync as readFileSync45, renameSync as renameSync6, writeFileSync as writeFileSync13 } from "fs";
 import { join as join51 } from "path";
 var INDEX_FILE_NAME = "index.json";
 function isTokenIndex(value) {
@@ -179952,7 +179971,7 @@ function readTokenIndex(storageDir) {
   if (!existsSync56(indexPath))
     return {};
   try {
-    const parsed = JSON.parse(readFileSync44(indexPath, "utf-8"));
+    const parsed = JSON.parse(readFileSync45(indexPath, "utf-8"));
     return isTokenIndex(parsed) ? parsed : {};
   } catch (readError) {
     if (!(readError instanceof Error))
@@ -180062,7 +180081,7 @@ function readTokenFile(filePath) {
   if (!existsSync57(filePath))
     return null;
   try {
-    const parsed = JSON.parse(readFileSync45(filePath, "utf-8"));
+    const parsed = JSON.parse(readFileSync46(filePath, "utf-8"));
     return isOAuthTokenData(parsed) ? parsed : null;
   } catch (readError) {
     if (!(readError instanceof Error))
@@ -180075,7 +180094,7 @@ function readLegacyStore() {
   if (!existsSync57(filePath))
     return null;
   try {
-    const parsed = JSON.parse(readFileSync45(filePath, "utf-8"));
+    const parsed = JSON.parse(readFileSync46(filePath, "utf-8"));
     if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed))
       return null;
     const result = {};
@@ -180888,7 +180907,7 @@ function createEmbeddingPort() {
 // packages/learning-loop/src/codebase-scanner.ts
 var import_picomatch = __toESM(require_picomatch2(), 1);
 import { createHash as createHash5 } from "crypto";
-import { readdirSync as readdirSync10, readFileSync as readFileSync47, statSync as statSync7, existsSync as existsSync59 } from "fs";
+import { readdirSync as readdirSync10, readFileSync as readFileSync48, statSync as statSync7, existsSync as existsSync59 } from "fs";
 import { join as join53, relative as relative6, extname as extname3 } from "path";
 var EXT_TO_LANG = {
   ts: "typescript",
@@ -180956,7 +180975,7 @@ function defaultFs() {
       return readdirSync10(path18);
     },
     readFile(path18) {
-      return readFileSync47(path18, "utf-8");
+      return readFileSync48(path18, "utf-8");
     },
     stat(path18) {
       const s = statSync7(path18);
@@ -181309,7 +181328,7 @@ function formatSearchResults(result) {
 }
 
 // packages/learning-loop/src/improvement.ts
-import { existsSync as existsSync60, mkdirSync as mkdirSync18, readFileSync as readFileSync48, writeFileSync as writeFileSync16 } from "fs";
+import { existsSync as existsSync60, mkdirSync as mkdirSync18, readFileSync as readFileSync49, writeFileSync as writeFileSync16 } from "fs";
 import { join as join54, basename as basename10 } from "path";
 function createImprovementStore(improvementsDir) {
   if (!existsSync60(improvementsDir)) {
@@ -181336,7 +181355,7 @@ function createImprovementStore(improvementsDir) {
   function get(id) {
     const filePath = join54(improvementsDir, `${id}.json`);
     try {
-      const raw = readFileSync48(filePath, "utf-8");
+      const raw = readFileSync49(filePath, "utf-8");
       return JSON.parse(raw);
     } catch {
       return null;
@@ -183463,9 +183482,9 @@ playwright-cli close
 // packages/skills-loader-core/src/features/builtin-skills/skill-file-loader.ts
 init_shared_skills();
 init_src();
-import { readFileSync as readFileSync51 } from "fs";
+import { readFileSync as readFileSync52 } from "fs";
 import { join as join64 } from "path";
-function createSharedSkillTemplateLoader(readFile3 = readFileSync51, skillsRootPath = sharedSkillsRootPath()) {
+function createSharedSkillTemplateLoader(readFile3 = readFileSync52, skillsRootPath = sharedSkillsRootPath()) {
   const cache = new Map;
   return (skillName) => {
     const cached2 = cache.get(skillName);
@@ -185825,7 +185844,7 @@ import {
   existsSync as existsSync67,
   mkdirSync as mkdirSync21,
   copyFileSync as copyFileSync4,
-  readFileSync as readFileSync52,
+  readFileSync as readFileSync53,
   writeFileSync as writeFileSync19,
   readdirSync as readdirSync11,
   statSync as statSync8,
@@ -185842,7 +185861,7 @@ async function snapshotCli(options = {}) {
     const realFs = {
       existsSync: existsSync67,
       mkdirSync: mkdirSync21,
-      readFileSync: readFileSync52,
+      readFileSync: readFileSync53,
       writeFileSync: writeFileSync19,
       copyFileSync: copyFileSync4,
       readdirSync: readdirSync11,
@@ -185908,7 +185927,7 @@ import {
   existsSync as existsSync68,
   mkdirSync as mkdirSync22,
   copyFileSync as copyFileSync5,
-  readFileSync as readFileSync53,
+  readFileSync as readFileSync54,
   writeFileSync as writeFileSync20,
   readdirSync as readdirSync12,
   statSync as statSync9,
@@ -185921,7 +185940,7 @@ async function restoreCli(options) {
   const realFs = {
     existsSync: existsSync68,
     mkdirSync: mkdirSync22,
-    readFileSync: readFileSync53,
+    readFileSync: readFileSync54,
     writeFileSync: writeFileSync20,
     copyFileSync: copyFileSync5,
     readdirSync: readdirSync12,
@@ -185936,7 +185955,7 @@ async function restoreCli(options) {
   try {
     restoreSnapshot(options.state, { snapshotDir, fs: realFs });
     const manifestPath = path19.join(snapshotDir, options.state, "manifest.json");
-    const raw = readFileSync53(manifestPath).toString("utf-8");
+    const raw = readFileSync54(manifestPath).toString("utf-8");
     const parsed = JSON.parse(raw);
     const fileCount = typeof parsed === "object" && parsed !== null && "files" in parsed && Array.isArray(parsed.files) ? parsed.files.length : 0;
     if (options.json) {
@@ -185960,7 +185979,7 @@ import {
   existsSync as existsSync69,
   mkdirSync as mkdirSync23,
   copyFileSync as copyFileSync6,
-  readFileSync as readFileSync54,
+  readFileSync as readFileSync55,
   writeFileSync as writeFileSync21,
   readdirSync as readdirSync13,
   statSync as statSync10,
@@ -185983,7 +186002,7 @@ async function snapshotListCli(options) {
   const realFs = {
     existsSync: existsSync69,
     mkdirSync: mkdirSync23,
-    readFileSync: readFileSync54,
+    readFileSync: readFileSync55,
     writeFileSync: writeFileSync21,
     copyFileSync: copyFileSync6,
     readdirSync: readdirSync13,
@@ -186014,7 +186033,7 @@ import {
   existsSync as existsSync70,
   mkdirSync as mkdirSync24,
   copyFileSync as copyFileSync7,
-  readFileSync as readFileSync55,
+  readFileSync as readFileSync56,
   writeFileSync as writeFileSync22,
   readdirSync as readdirSync14,
   statSync as statSync11,
@@ -186027,7 +186046,7 @@ async function snapshotPruneCli(options = {}) {
   const realFs = {
     existsSync: existsSync70,
     mkdirSync: mkdirSync24,
-    readFileSync: readFileSync55,
+    readFileSync: readFileSync56,
     writeFileSync: writeFileSync22,
     copyFileSync: copyFileSync7,
     readdirSync: readdirSync14,
@@ -186548,7 +186567,7 @@ async function traceCli(sessionId, options = {}) {
 
 // packages/omo-opencode/src/cli/dashboard.ts
 import * as path25 from "path";
-import { readFileSync as readFileSync57 } from "fs";
+import { readFileSync as readFileSync58 } from "fs";
 
 // packages/omo-opencode/src/features/dashboard/data-provider.ts
 import * as os12 from "os";
@@ -187332,7 +187351,7 @@ function loadGatewayPassphrase() {
   try {
     const configDir = getConfigDir();
     const configPath = path25.join(configDir, "matrixos.jsonc");
-    const raw = readFileSync57(configPath, "utf-8");
+    const raw = readFileSync58(configPath, "utf-8");
     const config5 = parseJsonc(raw);
     const dashboard2 = config5.dashboard;
     return typeof dashboard2?.gatewayPassphrase === "string" ? dashboard2.gatewayPassphrase : undefined;
@@ -187665,7 +187684,7 @@ function configureRuntimeCommands(program2) {
     const exitCode = await architectRollback({ ...options, id });
     process.exit(exitCode);
   });
-  program2.command("dashboard").description("Start the MaTrixOS web dashboard (port 9123)").option("-p, --port <number>", "HTTP port", "9123").option("--host <addr>", "Bind address", "0.0.0.0").option("--daemon", "Run in background (no Ctrl+C)").action(async (options) => {
+  program2.command("dashboard").description("Start the MaTrixOS web dashboard (port 9123)").option("-p, --port <number>", "HTTP port", "9123").option("--host <addr>", "Bind address", "127.0.0.1").option("--daemon", "Run in background (no Ctrl+C)").action(async (options) => {
     const exitCode = await dashboardCli({
       port: parseInt(options.port ?? "9123", 10),
       host: options.host,
@@ -187928,8 +187947,8 @@ project.command("search <query>").description("Search the active project KB and
 });
 project.command("add-doc <slug> <file>").description("Copy a document into the project KB").action(async (slug, filePath) => {
   const { addKbDocument: addKbDocument2 } = await Promise.resolve().then(() => (init_project_memory(), exports_project_memory));
-  const { readFileSync: readFileSync65 } = await import("fs");
-  const content = readFileSync65(filePath, "utf-8");
+  const { readFileSync: readFileSync66 } = await import("fs");
+  const content = readFileSync66(filePath, "utf-8");
   const dest = addKbDocument2(slug, filePath, content);
   process.stdout.write(JSON.stringify({ ok: true, dest }, null, 2) + `
 `);