@memohai/cloud-runtime 0.1.0 → 2026.9.12-1

package/dist/cli.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-// @memohai/cloud-runtime 0.1.0 — bundles @memohai/runtime 0.17.0 (memoh 9bcf9aaa-dirty)
+// @memohai/cloud-runtime 2026.9.12-1 — bundles @memohai/runtime 0.19.0 (memoh cc440cea)
 import { createRequire as __memohCreateRequire } from 'node:module'
 const require = __memohCreateRequire(import.meta.url)
 var __create = Object.create;
@@ -1382,14 +1382,14 @@ var require_receiver = __commonJS({
        * @return {(Error|RangeError)} The error
        * @private
        */
-      createError(ErrorCtor, message, prefix, statusCode, errorCode) {
+      createError(ErrorCtor, message, prefix, statusCode, errorCode2) {
         this._loop = false;
         this._errored = true;
         const err = new ErrorCtor(
           prefix ? `Invalid WebSocket frame: ${message}` : message
         );
         Error.captureStackTrace(err, this.createError);
-        err.code = errorCode;
+        err.code = errorCode2;
         err[kStatusCode] = statusCode;
         return err;
       }
@@ -2129,7 +2129,7 @@ var require_extension = __commonJS({
       if (dest[name] === void 0) dest[name] = [elem];
       else dest[name].push(elem);
     }
-    function parse(header) {
+    function parse2(header) {
       const offers = /* @__PURE__ */ Object.create(null);
       let params = /* @__PURE__ */ Object.create(null);
       let mustUnescape = false;
@@ -2269,7 +2269,7 @@ var require_extension = __commonJS({
         }).join(", ");
       }).join(", ");
     }
-    module.exports = { format, parse };
+    module.exports = { format, parse: parse2 };
   }
 });
 
@@ -2303,7 +2303,7 @@ var require_websocket = __commonJS({
     var {
       EventTarget: { addEventListener, removeEventListener }
     } = require_event_target();
-    var { format, parse } = require_extension();
+    var { format, parse: parse2 } = require_extension();
     var { toBuffer } = require_buffer_util();
     var kAborted = /* @__PURE__ */ Symbol("kAborted");
     var protocolVersions = [8, 13];
@@ -2980,7 +2980,7 @@ var require_websocket = __commonJS({
           }
           let extensions;
           try {
-            extensions = parse(secWebSocketExtensions);
+            extensions = parse2(secWebSocketExtensions);
           } catch (err) {
             const message = "Invalid Sec-WebSocket-Extensions header";
             abortHandshake(websocket, socket, message);
@@ -3231,7 +3231,7 @@ var require_stream = __commonJS({
       };
       duplex._final = function(callback) {
         if (ws.readyState === ws.CONNECTING) {
-          ws.once("open", function open2() {
+          ws.once("open", function open3() {
             duplex._final(callback);
           });
           return;
@@ -3252,7 +3252,7 @@ var require_stream = __commonJS({
       };
       duplex._write = function(chunk, encoding, callback) {
         if (ws.readyState === ws.CONNECTING) {
-          ws.once("open", function open2() {
+          ws.once("open", function open3() {
             duplex._write(chunk, encoding, callback);
           });
           return;
@@ -3272,7 +3272,7 @@ var require_subprotocol = __commonJS({
   "../memoh/node_modules/.pnpm/ws@8.21.0/node_modules/ws/lib/subprotocol.js"(exports, module) {
     "use strict";
     var { tokenChars } = require_validation();
-    function parse(header) {
+    function parse2(header) {
       const protocols = /* @__PURE__ */ new Set();
       let start = -1;
       let end = -1;
@@ -3308,7 +3308,7 @@ var require_subprotocol = __commonJS({
       protocols.add(protocol);
       return protocols;
     }
-    module.exports = { parse };
+    module.exports = { parse: parse2 };
   }
 });
 
@@ -4255,7 +4255,7 @@ var require_call_credentials = __commonJS({
           if (isCurrentOauth2Client(googleCredentials)) {
             getHeaders = googleCredentials.getRequestHeaders(options.service_url);
           } else {
-            getHeaders = new Promise((resolve2, reject) => {
+            getHeaders = new Promise((resolve5, reject) => {
               googleCredentials.getRequestMetadata(options.service_url, (err, headers) => {
                 if (err) {
                   reject(err);
@@ -4265,7 +4265,7 @@ var require_call_credentials = __commonJS({
                   reject(new Error("Headers not set by metadata plugin"));
                   return;
                 }
-                resolve2(headers);
+                resolve5(headers);
               });
             });
           }
@@ -4318,10 +4318,10 @@ var require_call_credentials = __commonJS({
         this.metadataGenerator = metadataGenerator;
       }
       generateMetadata(options) {
-        return new Promise((resolve2, reject) => {
+        return new Promise((resolve5, reject) => {
           this.metadataGenerator(options, (err, metadata) => {
             if (metadata !== void 0) {
-              resolve2(metadata);
+              resolve5(metadata);
             } else {
               reject(err);
             }
@@ -4637,7 +4637,7 @@ var require_channel_credentials = __commonJS({
     };
     function getConnectionOptions(secureContext, verifyOptions, channelTarget, options) {
       var _a, _b;
-      const connectionOptions = {
+      const connectionOptions2 = {
         secureContext
       };
       let realTarget = channelTarget;
@@ -4650,44 +4650,44 @@ var require_channel_credentials = __commonJS({
       const targetPath = (0, resolver_1.getDefaultAuthority)(realTarget);
       const hostPort = (0, uri_parser_1.splitHostPort)(targetPath);
       const remoteHost = (_a = hostPort === null || hostPort === void 0 ? void 0 : hostPort.host) !== null && _a !== void 0 ? _a : targetPath;
-      connectionOptions.host = remoteHost;
+      connectionOptions2.host = remoteHost;
       if (verifyOptions.checkServerIdentity) {
-        connectionOptions.checkServerIdentity = verifyOptions.checkServerIdentity;
+        connectionOptions2.checkServerIdentity = verifyOptions.checkServerIdentity;
       }
       if (verifyOptions.rejectUnauthorized !== void 0) {
-        connectionOptions.rejectUnauthorized = verifyOptions.rejectUnauthorized;
+        connectionOptions2.rejectUnauthorized = verifyOptions.rejectUnauthorized;
       }
-      connectionOptions.ALPNProtocols = ["h2"];
+      connectionOptions2.ALPNProtocols = ["h2"];
       if (options["grpc.ssl_target_name_override"]) {
         const sslTargetNameOverride = options["grpc.ssl_target_name_override"];
-        const originalCheckServerIdentity = (_b = connectionOptions.checkServerIdentity) !== null && _b !== void 0 ? _b : tls_1.checkServerIdentity;
-        connectionOptions.checkServerIdentity = (host, cert) => {
+        const originalCheckServerIdentity = (_b = connectionOptions2.checkServerIdentity) !== null && _b !== void 0 ? _b : tls_1.checkServerIdentity;
+        connectionOptions2.checkServerIdentity = (host, cert) => {
           return originalCheckServerIdentity(sslTargetNameOverride, cert);
         };
-        connectionOptions.servername = sslTargetNameOverride;
+        connectionOptions2.servername = sslTargetNameOverride;
       } else {
-        connectionOptions.servername = remoteHost;
+        connectionOptions2.servername = remoteHost;
       }
       if (options["grpc-node.tls_enable_trace"]) {
-        connectionOptions.enableTrace = true;
+        connectionOptions2.enableTrace = true;
       }
-      return connectionOptions;
+      return connectionOptions2;
     }
     var SecureConnectorImpl = class {
-      constructor(connectionOptions, callCredentials) {
-        this.connectionOptions = connectionOptions;
+      constructor(connectionOptions2, callCredentials) {
+        this.connectionOptions = connectionOptions2;
         this.callCredentials = callCredentials;
       }
       connect(socket) {
         const tlsConnectOptions = Object.assign({ socket }, this.connectionOptions);
-        return new Promise((resolve2, reject) => {
+        return new Promise((resolve5, reject) => {
           const tlsSocket = (0, tls_1.connect)(tlsConnectOptions, () => {
             var _a;
             if (((_a = this.connectionOptions.rejectUnauthorized) !== null && _a !== void 0 ? _a : true) && !tlsSocket.authorized) {
               reject(tlsSocket.authorizationError);
               return;
             }
-            resolve2({
+            resolve5({
               socket: tlsSocket,
               secure: true
             });
@@ -4726,8 +4726,8 @@ var require_channel_credentials = __commonJS({
         }
       }
       _createSecureConnector(channelTarget, options, callCredentials) {
-        const connectionOptions = getConnectionOptions(this.secureContext, this.verifyOptions, channelTarget, options);
-        return new SecureConnectorImpl(connectionOptions, callCredentials !== null && callCredentials !== void 0 ? callCredentials : call_credentials_1.CallCredentials.createEmpty());
+        const connectionOptions2 = getConnectionOptions(this.secureContext, this.verifyOptions, channelTarget, options);
+        return new SecureConnectorImpl(connectionOptions2, callCredentials !== null && callCredentials !== void 0 ? callCredentials : call_credentials_1.CallCredentials.createEmpty());
       }
     };
     var CertificateProviderChannelCredentialsImpl = class _CertificateProviderChannelCredentialsImpl extends ChannelCredentials {
@@ -4806,8 +4806,8 @@ var require_channel_credentials = __commonJS({
         if (this.hasReceivedUpdates()) {
           return Promise.resolve(this.getLatestSecureContext());
         } else {
-          return new Promise((resolve2) => {
-            this.secureContextWatchers.push(resolve2);
+          return new Promise((resolve5) => {
+            this.secureContextWatchers.push(resolve5);
           });
         }
       }
@@ -4840,7 +4840,7 @@ var require_channel_credentials = __commonJS({
         this.callCredentials = callCredentials;
       }
       connect(socket) {
-        return new Promise((resolve2, reject) => {
+        return new Promise((resolve5, reject) => {
           const secureContext = this.parent.getLatestSecureContext();
           if (!secureContext) {
             reject(new Error("Failed to load credentials"));
@@ -4865,7 +4865,7 @@ var require_channel_credentials = __commonJS({
               reject(tlsSocket.authorizationError);
               return;
             }
-            resolve2({
+            resolve5({
               socket: tlsSocket,
               secure: true
             });
@@ -5736,7 +5736,7 @@ var require_resolving_load_balancer = __commonJS({
       "SERVICE",
       "EMPTY"
     ];
-    function hasMatchingName(service, method, methodConfig, matchLevel) {
+    function hasMatchingName(service2, method, methodConfig, matchLevel) {
       for (const name of methodConfig.name) {
         switch (matchLevel) {
           case "EMPTY":
@@ -5745,21 +5745,21 @@ var require_resolving_load_balancer = __commonJS({
             }
             break;
           case "SERVICE":
-            if (name.service === service && !name.method) {
+            if (name.service === service2 && !name.method) {
               return true;
             }
             break;
           case "SERVICE_AND_METHOD":
-            if (name.service === service && name.method === method) {
+            if (name.service === service2 && name.method === method) {
               return true;
             }
         }
       }
       return false;
     }
-    function findMatchingConfig(service, method, methodConfigs, matchLevel) {
+    function findMatchingConfig(service2, method, methodConfigs, matchLevel) {
       for (const config of methodConfigs) {
-        if (hasMatchingName(service, method, config, matchLevel)) {
+        if (hasMatchingName(service2, method, config, matchLevel)) {
           return config;
         }
       }
@@ -5770,11 +5770,11 @@ var require_resolving_load_balancer = __commonJS({
         invoke(methodName, metadata) {
           var _a, _b;
           const splitName = methodName.split("/").filter((x) => x.length > 0);
-          const service = (_a = splitName[0]) !== null && _a !== void 0 ? _a : "";
+          const service2 = (_a = splitName[0]) !== null && _a !== void 0 ? _a : "";
           const method = (_b = splitName[1]) !== null && _b !== void 0 ? _b : "";
           if (serviceConfig && serviceConfig.methodConfig) {
             for (const matchLevel of NAME_MATCH_LEVEL_ORDER) {
-              const matchingConfig = findMatchingConfig(service, method, serviceConfig.methodConfig, matchLevel);
+              const matchingConfig = findMatchingConfig(service2, method, serviceConfig.methodConfig, matchLevel);
               if (matchingConfig) {
                 return {
                   methodConfig: matchingConfig,
@@ -8032,7 +8032,7 @@ var require_make_client = __commonJS({
       const result = {};
       for (const serviceFqn in packageDef) {
         if (Object.prototype.hasOwnProperty.call(packageDef, serviceFqn)) {
-          const service = packageDef[serviceFqn];
+          const service2 = packageDef[serviceFqn];
           const nameComponents = serviceFqn.split(".");
           if (nameComponents.some((comp) => isPrototypePolluted(comp))) {
             continue;
@@ -8045,10 +8045,10 @@ var require_make_client = __commonJS({
             }
             current = current[packageName];
           }
-          if (isProtobufTypeDefinition(service)) {
-            current[serviceName] = service;
+          if (isProtobufTypeDefinition(service2)) {
+            current[serviceName] = service2;
           } else {
-            current[serviceName] = makeClientConstructor(service, serviceName, {});
+            current[serviceName] = makeClientConstructor(service2, serviceName, {});
           }
         }
       }
@@ -8441,7 +8441,7 @@ var require_aspromise = __commonJS({
       var params = new Array(arguments.length - 1), offset = 0, index = 2, pending = true;
       while (index < arguments.length)
         params[offset++] = arguments[index++];
-      return new Promise(function executor(resolve2, reject) {
+      return new Promise(function executor(resolve5, reject) {
         params[offset] = function callback(err) {
           if (pending) {
             pending = false;
@@ -8451,7 +8451,7 @@ var require_aspromise = __commonJS({
               var params2 = new Array(arguments.length - 1), offset2 = 0;
               while (offset2 < params2.length)
                 params2[offset2++] = arguments[offset2];
-              resolve2.apply(null, params2);
+              resolve5.apply(null, params2);
             }
           }
         };
@@ -10956,13 +10956,13 @@ var require_path = __commonJS({
   "../memoh/node_modules/.pnpm/@protobufjs+path@1.1.2/node_modules/@protobufjs/path/index.js"(exports) {
     "use strict";
     var path = exports;
-    var isAbsolute3 = (
+    var isAbsolute4 = (
       /**
        * Tests if the specified path is absolute.
        * @param {string} path Path to test
        * @returns {boolean} `true` if path is absolute
        */
-      path.isAbsolute = function isAbsolute4(path2) {
+      path.isAbsolute = function isAbsolute5(path2) {
         return /^(?:\/|\w+:)/.test(path2);
       }
     );
@@ -10974,7 +10974,7 @@ var require_path = __commonJS({
        */
       path.normalize = function normalize2(path2) {
         path2 = path2.replace(/\\/g, "/").replace(/\/{2,}/g, "/");
-        var parts = path2.split("/"), absolute = isAbsolute3(path2), prefix = "";
+        var parts = path2.split("/"), absolute = isAbsolute4(path2), prefix = "";
         if (absolute)
           prefix = parts.shift() + "/";
         for (var i = 0; i < parts.length; ) {
@@ -10993,10 +10993,10 @@ var require_path = __commonJS({
         return prefix + parts.join("/");
       }
     );
-    path.resolve = function resolve2(originPath, includePath, alreadyNormalized) {
+    path.resolve = function resolve5(originPath, includePath, alreadyNormalized) {
       if (!alreadyNormalized)
         includePath = normalize(includePath);
-      if (isAbsolute3(includePath))
+      if (isAbsolute4(includePath))
         return includePath;
       if (!alreadyNormalized)
         originPath = normalize(originPath);
@@ -11350,7 +11350,7 @@ var require_mapfield = __commonJS({
         keepComments ? this.comment : void 0
       ]);
     };
-    MapField.prototype.resolve = function resolve2() {
+    MapField.prototype.resolve = function resolve5() {
       if (this.resolved)
         return this;
       if (types.mapKey[this.keyType] === void 0)
@@ -11427,7 +11427,7 @@ var require_method = __commonJS({
         this.parsedOptions
       ]);
     };
-    Method.prototype.resolve = function resolve2() {
+    Method.prototype.resolve = function resolve5() {
       if (this.resolved)
         return this;
       this.resolvedRequestType = this.parent.lookupType(this.requestType);
@@ -11454,17 +11454,17 @@ var require_service2 = __commonJS({
     }
     Service.fromJSON = function fromJSON(name, json, depth) {
       depth = util.checkDepth(depth);
-      var service = new Service(name, json.options);
+      var service2 = new Service(name, json.options);
       if (json.methods)
         for (var names = Object.keys(json.methods), i = 0; i < names.length; ++i)
-          service.add(Method.fromJSON(names[i], json.methods[names[i]]));
+          service2.add(Method.fromJSON(names[i], json.methods[names[i]]));
       if (json.nested)
-        service.addJSON(json.nested, depth);
+        service2.addJSON(json.nested, depth);
       if (json.edition)
-        service._edition = json.edition;
-      service.comment = json.comment;
-      service._defaultEdition = "proto3";
-      return service;
+        service2._edition = json.edition;
+      service2.comment = json.comment;
+      service2._defaultEdition = "proto3";
+      return service2;
     };
     Service.prototype.toJSON = function toJSON(toJSONOptions) {
       var inherited = Namespace.prototype.toJSON.call(this, toJSONOptions);
@@ -11488,9 +11488,9 @@ var require_service2 = __commonJS({
         return this._methodsArray || (this._methodsArray = util.toArray(this.methods));
       }
     });
-    function clearCache(service) {
-      service._methodsArray = null;
-      return service;
+    function clearCache(service2) {
+      service2._methodsArray = null;
+      return service2;
     }
     Service.prototype.get = function get(name) {
       return Object.prototype.hasOwnProperty.call(this.methods, name) ? this.methods[name] : Namespace.prototype.get.call(this, name);
@@ -12382,7 +12382,7 @@ var require_root = __commonJS({
     var OneOf = require_oneof();
     var util = require_util();
     var Type;
-    var parse;
+    var parse2;
     var common;
     function Root(options) {
       Namespace.call(this, "", options);
@@ -12446,8 +12446,8 @@ var require_root = __commonJS({
           if (!util.isString(source))
             self2.setOptions(source.options).addJSON(source.nested);
           else {
-            parse.filename = filename2;
-            var parsed = parse(source, self2, options), resolved2, i2 = 0;
+            parse2.filename = filename2;
+            var parsed = parse2(source, self2, options), resolved2, i2 = 0;
             if (parsed.imports) {
               for (; i2 < parsed.imports.length; ++i2)
                 if (resolved2 = getBundledFileName(parsed.imports[i2]) || self2.resolvePath(filename2, parsed.imports[i2]))
@@ -12620,7 +12620,7 @@ var require_root = __commonJS({
     };
     Root._configure = function(Type_, parse_, common_) {
       Type = Type_;
-      parse = parse_;
+      parse2 = parse_;
       common = common_;
     };
   }
@@ -13040,7 +13040,7 @@ var require_field = __commonJS({
         keepComments ? this.comment : void 0
       ]);
     };
-    Field.prototype.resolve = function resolve2() {
+    Field.prototype.resolve = function resolve5() {
       if (this.resolved)
         return this;
       if ((this.typeDefault = types.defaults[this.type]) === void 0) {
@@ -13313,7 +13313,7 @@ var require_object = __commonJS({
       this.parent = null;
       this.resolved = false;
     };
-    ReflectionObject.prototype.resolve = function resolve2() {
+    ReflectionObject.prototype.resolve = function resolve5() {
       if (this.resolved)
         return this;
       if (this.root instanceof Root)
@@ -13893,9 +13893,9 @@ var require_tokenize = __commonJS({
 var require_parse = __commonJS({
   "../memoh/node_modules/.pnpm/protobufjs@7.6.5/node_modules/protobufjs/src/parse.js"(exports, module) {
     "use strict";
-    module.exports = parse;
-    parse.filename = null;
-    parse.defaults = { keepCase: false };
+    module.exports = parse2;
+    parse2.filename = null;
+    parse2.defaults = { keepCase: false };
     var tokenize = require_tokenize();
     var Root = require_root();
     var Type = require_type();
@@ -13917,13 +13917,13 @@ var require_parse = __commonJS({
     var numberRe = util.patterns.numberRe;
     var nameRe = /^[a-zA-Z_][a-zA-Z_0-9]*$/;
     var typeRefRe = util.patterns.typeRefRe;
-    function parse(source, root, options) {
+    function parse2(source, root, options) {
       if (!(root instanceof Root)) {
         options = root;
         root = new Root();
       }
       if (!options)
-        options = parse.defaults;
+        options = parse2.defaults;
       var preferTrailingComment = options.preferTrailingComment || false;
       var tn = tokenize(source, options.alternateCommentMode || false), next = tn.next, push = tn.push, peek = tn.peek, skip = tn.skip, cmnt = tn.cmnt;
       var head = true, pkg, imports, weakImports, edition = "proto2";
@@ -13943,9 +13943,9 @@ var require_parse = __commonJS({
         });
       }
       function illegal(token2, name, insideTryCatch) {
-        var filename = parse.filename;
+        var filename = parse2.filename;
         if (!insideTryCatch)
-          parse.filename = null;
+          parse2.filename = null;
         return Error("illegal " + (name || "token") + " '" + token2 + "' (" + (filename ? filename + ", " : "") + "line " + tn.line + ")");
       }
       function readString() {
@@ -14145,7 +14145,7 @@ var require_parse = __commonJS({
           if (typeof obj.comment !== "string") {
             obj.comment = cmnt();
           }
-          obj.filename = parse.filename;
+          obj.filename = parse2.filename;
         }
         if (skip("{", true)) {
           var token2;
@@ -14271,7 +14271,7 @@ var require_parse = __commonJS({
         var type = new Type(name);
         type.group = true;
         var field = new Field(fieldName, id, name, rule);
-        field.filename = parse.filename;
+        field.filename = parse2.filename;
         ifBlock(type, function parseGroup_block(token2) {
           switch (token2) {
             case "option":
@@ -14510,19 +14510,19 @@ var require_parse = __commonJS({
           throw Error("max depth exceeded");
         if (!nameRe.test(token2 = next()))
           throw illegal(token2, "service name");
-        var service = new Service(token2);
-        ifBlock(service, function parseService_block(token3) {
-          if (parseCommon(service, token3, depth)) {
+        var service2 = new Service(token2);
+        ifBlock(service2, function parseService_block(token3) {
+          if (parseCommon(service2, token3, depth)) {
             return;
           }
           if (token3 === "rpc")
-            parseMethod(service, token3);
+            parseMethod(service2, token3);
           else
             throw illegal(token3);
         });
-        parent.add(service);
+        parent.add(service2);
         if (parent === ptr) {
-          topLevelObjects.push(service);
+          topLevelObjects.push(service2);
         }
       }
       function parseMethod(parent, token2) {
@@ -14619,7 +14619,7 @@ var require_parse = __commonJS({
         }
       }
       resolveFileFeatures();
-      parse.filename = null;
+      parse2.filename = null;
       return {
         "package": pkg,
         "imports": imports,
@@ -16706,13 +16706,13 @@ var require_descriptor2 = __commonJS({
     Service.fromDescriptor = function fromDescriptor(descriptor, edition, nested) {
       if (typeof descriptor.length === "number")
         descriptor = exports.ServiceDescriptorProto.decode(descriptor);
-      var service = new Service(descriptor.name && descriptor.name.length ? descriptor.name : "Service" + unnamedServiceIndex++, fromDescriptorOptions(descriptor.options, exports.ServiceOptions));
+      var service2 = new Service(descriptor.name && descriptor.name.length ? descriptor.name : "Service" + unnamedServiceIndex++, fromDescriptorOptions(descriptor.options, exports.ServiceOptions));
       if (!nested)
-        service._edition = edition;
+        service2._edition = edition;
       if (descriptor.method)
         for (var i = 0; i < descriptor.method.length; ++i)
-          service.add(Method.fromDescriptor(descriptor.method[i]));
-      return service;
+          service2.add(Method.fromDescriptor(descriptor.method[i]));
+      return service2;
     };
     Service.prototype.toDescriptor = function toDescriptor() {
       var methods = [];
@@ -17496,9 +17496,9 @@ var require_src2 = __commonJS({
         options: mapMethodOptions(method.parsedOptions)
       };
     }
-    function createServiceDefinition(service, name, options, fileDescriptors) {
+    function createServiceDefinition(service2, name, options, fileDescriptors) {
       const def = {};
-      for (const method of service.methodsArray) {
+      for (const method of service2.methodsArray) {
         def[method.name] = createMethodDefinition(method, name, options, fileDescriptors);
       }
       return def;
@@ -18284,18 +18284,18 @@ var require_compression_filter = __commonJS({
         this.maxRecvMessageLength = maxRecvMessageLength;
       }
       compressMessage(message) {
-        return new Promise((resolve2, reject) => {
+        return new Promise((resolve5, reject) => {
           zlib.deflate(message, (err, output) => {
             if (err) {
               reject(err);
             } else {
-              resolve2(output);
+              resolve5(output);
             }
           });
         });
       }
       decompressMessage(message) {
-        return new Promise((resolve2, reject) => {
+        return new Promise((resolve5, reject) => {
           let totalLength = 0;
           const messageParts = [];
           const decompresser = zlib.createInflate();
@@ -18317,7 +18317,7 @@ var require_compression_filter = __commonJS({
             }
           });
           decompresser.on("end", () => {
-            resolve2(Buffer.concat(messageParts));
+            resolve5(Buffer.concat(messageParts));
           });
           decompresser.write(message);
           decompresser.end();
@@ -18330,18 +18330,18 @@ var require_compression_filter = __commonJS({
         this.maxRecvMessageLength = maxRecvMessageLength;
       }
       compressMessage(message) {
-        return new Promise((resolve2, reject) => {
+        return new Promise((resolve5, reject) => {
           zlib.gzip(message, (err, output) => {
             if (err) {
               reject(err);
             } else {
-              resolve2(output);
+              resolve5(output);
             }
           });
         });
       }
       decompressMessage(message) {
-        return new Promise((resolve2, reject) => {
+        return new Promise((resolve5, reject) => {
           let totalLength = 0;
           const messageParts = [];
           const decompresser = zlib.createGunzip();
@@ -18363,7 +18363,7 @@ var require_compression_filter = __commonJS({
             }
           });
           decompresser.on("end", () => {
-            resolve2(Buffer.concat(messageParts));
+            resolve5(Buffer.concat(messageParts));
           });
           decompresser.write(message);
           decompresser.end();
@@ -19698,7 +19698,7 @@ var require_http_proxy = __commonJS({
       options.headers = headers;
       const proxyAddressString = (0, subchannel_address_1.subchannelAddressToString)(address);
       trace("Using proxy " + proxyAddressString + " to connect to " + options.path);
-      return new Promise((resolve2, reject) => {
+      return new Promise((resolve5, reject) => {
         const request = http.request(options);
         request.once("connect", (res, socket, head) => {
           request.removeAllListeners();
@@ -19709,7 +19709,7 @@ var require_http_proxy = __commonJS({
               socket.unshift(head);
             }
             trace("Successfully established a plaintext connection to " + options.path + " through proxy " + proxyAddressString);
-            resolve2(socket);
+            resolve5(socket);
           } else {
             (0, logging_1.log)(constants_1.LogVerbosity.ERROR, "Failed to connect to " + options.path + " through proxy " + proxyAddressString + " with status " + res.statusCode);
             reject();
@@ -20289,12 +20289,12 @@ var require_transport = __commonJS({
           this.trace("session closed");
           this.handleDisconnect();
         });
-        session.once("goaway", (errorCode, lastStreamID, opaqueData) => {
+        session.once("goaway", (errorCode2, lastStreamID, opaqueData) => {
           let tooManyPings = false;
-          if (errorCode === http2.constants.NGHTTP2_ENHANCE_YOUR_CALM && opaqueData && opaqueData.equals(tooManyPingsData)) {
+          if (errorCode2 === http2.constants.NGHTTP2_ENHANCE_YOUR_CALM && opaqueData && opaqueData.equals(tooManyPingsData)) {
             tooManyPings = true;
           }
-          this.trace("connection closed by GOAWAY with code " + errorCode + " and data " + (opaqueData === null || opaqueData === void 0 ? void 0 : opaqueData.toString()));
+          this.trace("connection closed by GOAWAY with code " + errorCode2 + " and data " + (opaqueData === null || opaqueData === void 0 ? void 0 : opaqueData.toString()));
           this.reportDisconnectToOwner(tooManyPings);
         });
         session.once("error", (error) => {
@@ -20609,7 +20609,7 @@ var require_transport = __commonJS({
         if (secureConnectResult.socket.closed) {
           return Promise.reject("Connection closed before starting HTTP/2 handshake");
         }
-        return new Promise((resolve2, reject) => {
+        return new Promise((resolve5, reject) => {
           var _a, _b, _c, _d, _e, _f, _g, _h;
           let remoteName = null;
           let realTarget = this.channelTarget;
@@ -20678,7 +20678,7 @@ var require_transport = __commonJS({
             session.removeAllListeners();
             secureConnectResult.socket.removeListener("close", closeHandler);
             secureConnectResult.socket.removeListener("error", errorHandler);
-            resolve2(new Http2Transport(session, address, options, remoteName));
+            resolve5(new Http2Transport(session, address, options, remoteName));
             this.session = null;
           });
           session.once("close", closeHandler);
@@ -20692,7 +20692,7 @@ var require_transport = __commonJS({
           if (proxiedSocket) {
             return proxiedSocket;
           } else {
-            return new Promise((resolve2, reject) => {
+            return new Promise((resolve5, reject) => {
               const closeCallback = () => {
                 reject(new Error("Socket closed"));
               };
@@ -20702,7 +20702,7 @@ var require_transport = __commonJS({
               const socket = net.connect(address, () => {
                 socket.removeListener("close", closeCallback);
                 socket.removeListener("error", errorCallback);
-                resolve2(socket);
+                resolve5(socket);
               });
               socket.once("close", closeCallback);
               socket.once("error", errorCallback);
@@ -24004,7 +24004,7 @@ var require_server_interceptors = __commonJS({
           } else {
             decompresser = zlib.createGunzip();
           }
-          return new Promise((resolve2, reject) => {
+          return new Promise((resolve5, reject) => {
             let totalLength = 0;
             const messageParts = [];
             decompresser.on("error", (error) => {
@@ -24025,7 +24025,7 @@ var require_server_interceptors = __commonJS({
               }
             });
             decompresser.on("end", () => {
-              resolve2(Buffer.concat(messageParts));
+              resolve5(Buffer.concat(messageParts));
             });
             decompresser.write(messageContents);
             decompresser.end();
@@ -24485,16 +24485,16 @@ var require_server = __commonJS({
         addProtoService() {
           throw new Error("Not implemented. Use addService() instead");
         }
-        addService(service, implementation) {
-          if (service === null || typeof service !== "object" || implementation === null || typeof implementation !== "object") {
+        addService(service2, implementation) {
+          if (service2 === null || typeof service2 !== "object" || implementation === null || typeof implementation !== "object") {
             throw new Error("addService() requires two objects as arguments");
           }
-          const serviceKeys = Object.keys(service);
+          const serviceKeys = Object.keys(service2);
           if (serviceKeys.length === 0) {
             throw new Error("Cannot add an empty service to a server");
           }
           serviceKeys.forEach((name) => {
-            const attrs = service[name];
+            const attrs = service2[name];
             let methodType;
             if (attrs.requestStream) {
               if (attrs.responseStream) {
@@ -24525,13 +24525,13 @@ var require_server = __commonJS({
             }
           });
         }
-        removeService(service) {
-          if (service === null || typeof service !== "object") {
+        removeService(service2) {
+          if (service2 === null || typeof service2 !== "object") {
             throw new Error("removeService() requires object as argument");
           }
-          const serviceKeys = Object.keys(service);
+          const serviceKeys = Object.keys(service2);
           serviceKeys.forEach((name) => {
-            const attrs = service[name];
+            const attrs = service2[name];
             this.unregister(attrs.path);
           });
         }
@@ -24615,10 +24615,10 @@ var require_server = __commonJS({
         bindOneAddress(address, boundPortObject) {
           this.trace("Attempting to bind " + (0, subchannel_address_1.subchannelAddressToString)(address));
           const http2Server = this.createHttp2Server(boundPortObject.credentials);
-          return new Promise((resolve2, reject) => {
+          return new Promise((resolve5, reject) => {
             const onError = (err) => {
               this.trace("Failed to bind " + (0, subchannel_address_1.subchannelAddressToString)(address) + " with error " + err.message);
-              resolve2({
+              resolve5({
                 port: "port" in address ? address.port : 1,
                 error: err.message
               });
@@ -24646,7 +24646,7 @@ var require_server = __commonJS({
               });
               boundPortObject.listeningServers.add(http2Server);
               this.trace("Successfully bound " + (0, subchannel_address_1.subchannelAddressToString)(boundSubchannelAddress));
-              resolve2({
+              resolve5({
                 port: "port" in boundSubchannelAddress ? boundSubchannelAddress.port : 1
               });
               http2Server.removeListener("error", onError);
@@ -24699,7 +24699,7 @@ var require_server = __commonJS({
           }
         }
         resolvePort(port) {
-          return new Promise((resolve2, reject) => {
+          return new Promise((resolve5, reject) => {
             let seenResolution = false;
             const resolverListener = (endpointList, attributes, serviceConfig, resolutionNote) => {
               if (seenResolution) {
@@ -24715,7 +24715,7 @@ var require_server = __commonJS({
                 reject(new Error(`No addresses resolved for port ${port}`));
                 return true;
               }
-              resolve2(addressList);
+              resolve5(addressList);
               return true;
             };
             const resolver = (0, resolver_1.createResolver)(port, resolverListener, this.options);
@@ -27894,9 +27894,9 @@ var require_src3 = __commonJS({
 });
 
 // src/build-info.ts
-var cloudRuntimeVersion = true ? "0.1.0" : unknownStamp;
-var upstreamRuntimeVersion = true ? "0.17.0" : unknownStamp;
-var upstreamRuntimeCommit = true ? "9bcf9aaa-dirty" : unknownStamp;
+var cloudRuntimeVersion = true ? "2026.9.12-1" : unknownStamp;
+var upstreamRuntimeVersion = true ? "0.19.0" : unknownStamp;
+var upstreamRuntimeCommit = true ? "cc440cea" : unknownStamp;
 function versionReport() {
   return [
     `@memohai/cloud-runtime ${cloudRuntimeVersion}`,
@@ -27908,6 +27908,9 @@ function versionReport() {
 var cloudDefaultServerUrl = "https://app.memoh.net/api/memoh";
 var serverUrlEnvVar = "MEMOH_RUNTIME_SERVER";
 function applyCloudDefaults(args2, env) {
+  if (!args2.some((arg) => arg === "--key" || arg.startsWith("--key=")) && !env.MEMOH_RUNTIME_KEY?.trim()) {
+    return;
+  }
   if (args2.some((arg) => arg === "--server" || arg.startsWith("--server="))) {
     return;
   }
@@ -27916,11 +27919,28 @@ function applyCloudDefaults(args2, env) {
   }
   env[serverUrlEnvVar] = cloudDefaultServerUrl;
 }
-function cloudUsage() {
+function cloudUsage(args2 = []) {
+  const command = args2[0];
+  if (command === "service") {
+    return "Usage: memoh-cloud-runtime service <install|start|stop|restart|status|uninstall>\nInstall registers a stopped service. Use enroll first; status supports --json.";
+  }
+  if (command === "enroll") {
+    return `Usage: memoh-cloud-runtime enroll --key <key> [--server <url>] [--team-id <uuid>] [--replace]
+Or use enroll --config <file>. Saves enrollment for future runs.
+--server defaults to ${cloudDefaultServerUrl} (or $MEMOH_RUNTIME_SERVER).`;
+  }
+  if (command === "run") {
+    return `Usage: memoh-cloud-runtime run [--key <key> [--server <url>] | --config <file>] [--log <file>]
+Reads saved enrollment when no new connection is supplied. Never saves or changes a service.
+--server defaults to ${cloudDefaultServerUrl} when a new key is supplied.`;
+  }
   return [
-    "Usage: memoh-cloud-runtime --key <key> [--team-id <uuid>] [--server <url>] [--insecure-localhost]",
+    "Usage: memoh-cloud-runtime <enroll|run|service|version>",
+    "       memoh-cloud-runtime --key <key> [--team-id <uuid>] [--server <url>] [--insecure-localhost]",
     "",
     "Connects this machine to Memoh Cloud as a remote runtime.",
+    "Use <command> --help for enrollment and user-service commands.",
+    "Running without connection flags reads the saved enrollment.",
     "",
     `  --server   defaults to ${cloudDefaultServerUrl}`,
     "             (or $MEMOH_RUNTIME_SERVER when exported)",
@@ -27932,33 +27952,227 @@ function cloudUsage() {
 
 // src/bootstrap.ts
 var args = process.argv.slice(2);
-if (args.includes("--help") || args.includes("-h")) {
-  console.error(cloudUsage());
+if (args[0] === "help" || args.includes("--help") || args.includes("-h")) {
+  console.error(cloudUsage(args));
   process.exit(0);
 }
-if (args.includes("--version") || args.includes("-v")) {
+if (args[0] === "version" || args.includes("--version") || args.includes("-v")) {
   console.log(versionReport());
   process.exit(0);
 }
 applyCloudDefaults(args, process.env);
 
-// ../memoh/packages/runtime/src/cli.ts
+// ../memoh/packages/runtime/src/cli-main.ts
+import { access as access5, appendFile, mkdir as mkdir4 } from "node:fs/promises";
+import { homedir as homedir2 } from "node:os";
+import { dirname as dirname6, join as join6, resolve as resolve4 } from "node:path";
+import { fileURLToPath as fileURLToPath2 } from "node:url";
+import { parseArgs } from "node:util";
+
+// ../memoh/packages/runtime/src/daemon/index.ts
+import { access as access2, stat } from "node:fs/promises";
+import { constants as constants2 } from "node:fs";
+import { isAbsolute as isAbsolute2, join as join3 } from "node:path";
+import { setTimeout as sleep2 } from "node:timers/promises";
+
+// ../memoh/packages/runtime/src/daemon/launchd.ts
+import { access, rm as rm2 } from "node:fs/promises";
+import { setTimeout as sleep } from "node:timers/promises";
+
+// ../memoh/packages/runtime/src/runtime-config.ts
+import { lstat as lstat2 } from "node:fs/promises";
 import { homedir } from "node:os";
+import { dirname as dirname2, join as join2, resolve as resolve2 } from "node:path";
 
-// ../memoh/packages/runtime/src/session.ts
-import { arch, hostname, platform } from "node:os";
-import { realpath as realpath2 } from "node:fs/promises";
+// ../memoh/packages/runtime/src/secure-files.ts
+import { execFile as execFile2 } from "node:child_process";
+import { promisify as promisify2 } from "node:util";
+import { randomUUID } from "node:crypto";
+import { constants } from "node:fs";
+import { chmod, lstat, mkdir, open, realpath, rename, rm } from "node:fs/promises";
+import { userInfo } from "node:os";
+import { dirname, join, parse, resolve } from "node:path";
 
-// ../memoh/node_modules/.pnpm/ws@8.21.0/node_modules/ws/wrapper.mjs
-var import_stream = __toESM(require_stream(), 1);
-var import_extension = __toESM(require_extension(), 1);
-var import_permessage_deflate = __toESM(require_permessage_deflate(), 1);
-var import_receiver = __toESM(require_receiver(), 1);
-var import_sender = __toESM(require_sender(), 1);
-var import_subprotocol = __toESM(require_subprotocol(), 1);
-var import_websocket = __toESM(require_websocket(), 1);
-var import_websocket_server = __toESM(require_websocket_server(), 1);
-var wrapper_default = import_websocket.default;
+// ../memoh/packages/runtime/src/windows-file-security.ts
+import { execFile } from "node:child_process";
+import { promisify } from "node:util";
+
+// ../memoh/packages/runtime/src/windows-powershell.ts
+function windowsPowerShellEnv(env = process.env) {
+  return Object.fromEntries(Object.entries(env).filter(([key]) => key.toUpperCase() !== "PSMODULEPATH"));
+}
+
+// ../memoh/packages/runtime/src/windows-file-security.ts
+async function powershell(script) {
+  await promisify(execFile)("powershell.exe", ["-NoProfile", "-NonInteractive", "-EncodedCommand", Buffer.from(script, "utf16le").toString("base64")], { timeout: 3e4, windowsHide: true, env: windowsPowerShellEnv() });
+}
+async function checkWindowsAccess(path, privateFile) {
+  await powershell(`
+$ErrorActionPreference = 'Stop'
+$path = '${path.replaceAll("'", "''")}'
+$sid = [Security.Principal.WindowsIdentity]::GetCurrent().User.Value
+$trusted = @($sid, 'S-1-5-18', 'S-1-5-32-544', 'S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464')
+$item = Get-Item -LiteralPath $path -Force
+$leaf = $true
+while ($null -ne $item) {
+  if ($item.Attributes -band [IO.FileAttributes]::ReparsePoint) { throw 'Runtime path cannot be a reparse point' }
+  $acl = Get-Acl -LiteralPath $item.FullName
+  if ($trusted -notcontains $acl.GetOwner([Security.Principal.SecurityIdentifier]).Value) { throw 'Runtime path has an untrusted owner' }
+  foreach ($rule in $acl.GetAccessRules($true, $true, [Security.Principal.SecurityIdentifier])) {
+    if ($rule.AccessControlType -ne 'Allow' -or $trusted -contains $rule.IdentityReference.Value -or ($rule.PropagationFlags -band [Security.AccessControl.PropagationFlags]::InheritOnly)) { continue }
+    $unsafe = [Security.AccessControl.FileSystemRights]::Delete -bor [Security.AccessControl.FileSystemRights]::DeleteSubdirectoriesAndFiles -bor [Security.AccessControl.FileSystemRights]::ChangePermissions -bor [Security.AccessControl.FileSystemRights]::TakeOwnership
+    if ($leaf) {
+      $unsafe = $unsafe -bor [Security.AccessControl.FileSystemRights]::Write -bor [Security.AccessControl.FileSystemRights]::Delete
+      if (${privateFile ? "$true" : "$false"}) { $unsafe = $unsafe -bor [Security.AccessControl.FileSystemRights]::ReadData }
+    }
+    if ($rule.FileSystemRights -band $unsafe) { throw 'Runtime path grants unsafe access to another account' }
+  }
+  $leaf = $false
+  if ($item -is [IO.FileInfo]) { $item = $item.Directory } else { $item = $item.Parent }
+}
+`);
+}
+async function protectWindowsFile(path) {
+  await protectWindowsPath(path, false);
+}
+async function protectWindowsDirectory(path) {
+  await protectWindowsPath(path, true);
+}
+async function protectWindowsPath(path, directory) {
+  const inheritance = directory ? "'ContainerInherit,ObjectInherit', 'None', " : "";
+  await powershell(`
+$ErrorActionPreference = 'Stop'
+$sid = [Security.Principal.WindowsIdentity]::GetCurrent().User
+$acl = New-Object Security.AccessControl.${directory ? "DirectorySecurity" : "FileSecurity"}
+$acl.SetOwner($sid)
+$acl.SetAccessRuleProtection($true, $false)
+foreach ($identity in @($sid.Value, 'S-1-5-18', 'S-1-5-32-544')) {
+  $principal = New-Object Security.Principal.SecurityIdentifier($identity)
+  $rule = New-Object Security.AccessControl.FileSystemAccessRule($principal, 'FullControl', ${inheritance}'Allow')
+  $acl.AddAccessRule($rule)
+}
+# The .NET API persists the modified owner/DACL without requesting SACL access.
+[IO.${directory ? "Directory" : "File"}]::SetAccessControl('${path.replaceAll("'", "''")}', $acl)
+`);
+}
+
+// ../memoh/packages/runtime/src/secure-files.ts
+var directoryWriteRights = ["write", "append", "delete", "add_file", "add_subdirectory", "writeattr", "writeextattr", "writesecurity", "chown", "delete_child"];
+var fileWriteRights = ["write", "append", "delete", "writeattr", "writeextattr", "writesecurity", "chown"];
+var privateFileRights = ["read", ...fileWriteRights];
+async function checkDirectory(path) {
+  const absolute = resolve(path);
+  if (process.platform === "win32") {
+    const info = await lstat(absolute);
+    if (!info.isDirectory() || info.isSymbolicLink()) throw new Error(`unsafe runtime directory: ${absolute}`);
+    return checkWindowsAccess(absolute, false);
+  }
+  const checked = /* @__PURE__ */ new Set();
+  await inspectDirectory(absolute, checked);
+  if (process.platform === "darwin" && await grantsOthers([...checked], directoryWriteRights)) {
+    throw new Error(`runtime directory chain has a writable extended ACL: ${absolute}`);
+  }
+}
+async function grantsOthers(paths, rights) {
+  const { stdout } = await promisify2(execFile2)("/bin/ls", ["-lde", ...paths]);
+  const self2 = userInfo().username;
+  for (const line of stdout.split("\n").filter((line2) => /^\s*\d+:/.test(line2))) {
+    const entry = line.match(/^\s*\d+:\s+(user|group):(.+?)\s+(?:inherited\s+)?(allow|deny)\s+(\S+)\s*$/);
+    if (!entry) throw new Error(`could not verify macOS ACL entry for runtime path: ${paths.join(", ")}`);
+    const [, kind, principal, access6, granted] = entry;
+    if (access6 === "deny") continue;
+    if (kind === "user" && principal === self2) continue;
+    if (granted.split(",").some((right) => rights.includes(right))) return true;
+  }
+  return false;
+}
+async function inspectDirectory(absolute, checked) {
+  if (checked.has(absolute)) return;
+  checked.add(absolute);
+  const parent = dirname(absolute);
+  if (parent !== absolute) await inspectDirectory(parent, checked);
+  const info = await lstat(absolute);
+  if (info.isSymbolicLink() && info.uid === 0) {
+    return inspectDirectory(await realpath(absolute), checked);
+  }
+  if (!info.isDirectory() || info.isSymbolicLink()) throw new Error(`unsafe runtime directory: ${absolute}`);
+  const uid = process.getuid();
+  const trustedOwner = info.uid === uid || info.uid === 0;
+  const stickyRoot = info.uid === 0 && (info.mode & 512) !== 0;
+  if (!trustedOwner || (info.mode & 18) !== 0 && !stickyRoot) {
+    throw new Error(`runtime directory must be owned by you or root and not writable by other users: ${absolute}`);
+  }
+}
+async function ensureDirectory(path) {
+  const absolute = resolve(path);
+  try {
+    await checkDirectory(absolute);
+  } catch (error) {
+    if (errorCode(error) !== "ENOENT") throw error;
+    const parent = dirname(absolute);
+    if (parent === absolute || absolute === parse(absolute).root) throw error;
+    await ensureDirectory(parent);
+    try {
+      await mkdir(absolute, { mode: 448 });
+    } catch (error2) {
+      if (errorCode(error2) !== "EEXIST") throw error2;
+    }
+    await checkDirectory(absolute);
+  }
+}
+async function readPrivateFile(path) {
+  await checkDirectory(dirname(path));
+  const info = await lstat(path);
+  if (!info.isFile() || info.isSymbolicLink() || process.platform !== "win32" && (info.uid !== process.getuid() || (info.mode & 63) !== 0)) {
+    throw new Error(`runtime file must be a private regular file owned by you: ${path}`);
+  }
+  if (process.platform === "darwin" && await grantsOthers([path], privateFileRights)) {
+    throw new Error(`runtime file has an unsafe extended ACL: ${path}`);
+  }
+  if (process.platform === "win32") await checkWindowsAccess(path, true);
+  const handle = await open(path, constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0));
+  try {
+    const opened = await handle.stat();
+    if (opened.dev !== info.dev || opened.ino !== info.ino) throw new Error(`runtime file changed while opening: ${path}`);
+    return await handle.readFile("utf8");
+  } finally {
+    await handle.close();
+  }
+}
+async function writeFileAtomic(path, content, mode) {
+  await ensureDirectory(dirname(path));
+  const staging = join(dirname(path), `.${randomUUID()}.tmp`);
+  await mkdir(staging, { mode: 448 });
+  const temporary = join(staging, "content");
+  try {
+    if (process.platform === "darwin") await promisify2(execFile2)("/bin/chmod", ["-N", staging]);
+    if (process.platform === "win32") await protectWindowsDirectory(staging);
+    const handle = await open(temporary, "wx", mode);
+    try {
+      if (process.platform === "darwin") await promisify2(execFile2)("/bin/chmod", ["-N", temporary]);
+      if (process.platform === "win32") await protectWindowsFile(temporary);
+      await handle.writeFile(content);
+      await handle.sync();
+    } finally {
+      await handle.close();
+    }
+    await chmod(temporary, mode);
+    await rename(temporary, path);
+    if (process.platform !== "win32") {
+      const directory = await open(dirname(path), constants.O_RDONLY);
+      try {
+        await directory.sync();
+      } finally {
+        await directory.close();
+      }
+    }
+  } finally {
+    await rm(staging, { recursive: true, force: true });
+  }
+}
+function errorCode(error) {
+  return error && typeof error === "object" && "code" in error ? String(error.code) : void 0;
+}
 
 // ../memoh/packages/runtime/src/config.ts
 import { isAbsolute } from "node:path";
@@ -28017,10 +28231,620 @@ function validateConfig(config) {
   }
 }
 
+// ../memoh/packages/runtime/src/server-url.ts
+function normalizeRuntimeServerUrl(serverUrl) {
+  const url = new URL(serverUrl.trim());
+  if (url.protocol === "ws:") {
+    url.protocol = "http:";
+  } else if (url.protocol === "wss:") {
+    url.protocol = "https:";
+  }
+  url.pathname = url.pathname.replace(/\/+$/, "") || "/";
+  url.search = "";
+  url.hash = "";
+  return url.href;
+}
+function runtimeConnectUrl(serverUrl) {
+  const url = new URL(serverUrl);
+  if (url.protocol === "http:") {
+    url.protocol = "ws:";
+  } else if (url.protocol === "https:") {
+    url.protocol = "wss:";
+  }
+  const basePath = url.pathname.replace(/\/+$/, "");
+  url.pathname = `${basePath}/runtimes/connect`;
+  url.search = "";
+  url.hash = "";
+  return url;
+}
+function assertSecureRuntimeUrl(url, insecureLocalhost = false) {
+  if (url.username || url.password) {
+    throw new Error("runtime connection URL must not contain credentials");
+  }
+  if (url.protocol === "wss:") {
+    return;
+  }
+  const hostname2 = url.hostname.replace(/^\[|\]$/g, "");
+  const local = hostname2 === "127.0.0.1" || hostname2 === "localhost" || hostname2 === "::1";
+  if (url.protocol === "ws:" && insecureLocalhost && local) {
+    return;
+  }
+  throw new Error("runtime connections require wss://; use --insecure-localhost only for localhost development");
+}
+
+// ../memoh/packages/runtime/src/runtime-config.ts
+var runtimeEnrollmentSchemaVersion = 1;
+function resolveRuntimePaths(options = {}) {
+  const home = resolve2(options.home ?? homedir());
+  const runtimeHome = join2(home, ".memoh", "runtime");
+  const configPath = join2(home, ".memoh", "runtime.json");
+  const serviceDir = join2(runtimeHome, "service");
+  return {
+    home,
+    runtimeHome,
+    configPath,
+    logsDir: join2(runtimeHome, "logs"),
+    serviceDir,
+    launchdPlistPath: join2(home, "Library", "LaunchAgents", "ai.memoh.runtime.plist"),
+    systemdUnitPath: join2(serviceDir, "memoh-runtime.service"),
+    windowsTaskXMLPath: join2(serviceDir, "memoh-runtime-task.xml")
+  };
+}
+function normalizeRuntimeEnrollment(input, workspaceBase = homedir()) {
+  const rawServerUrl = input.serverUrl.trim();
+  const key = input.key.trim();
+  const teamId = input.teamId === void 0 ? void 0 : normalizeRuntimeTeamId(input.teamId);
+  const insecureLocalhost = input.insecureLocalhost === true;
+  validateConfig({
+    serverUrl: rawServerUrl,
+    key,
+    teamId,
+    workspaceBase,
+    insecureLocalhost
+  });
+  assertSecureRuntimeUrl(runtimeConnectUrl(rawServerUrl), insecureLocalhost);
+  const serverUrl = normalizeRuntimeServerUrl(rawServerUrl);
+  return {
+    schemaVersion: runtimeEnrollmentSchemaVersion,
+    serverUrl,
+    key,
+    teamId,
+    insecureLocalhost
+  };
+}
+async function readRuntimeEnrollment(path, workspaceBase = homedir()) {
+  let raw;
+  try {
+    raw = await readPrivateFile(path);
+  } catch (error) {
+    if (nodeErrorCode(error) === "ENOENT") {
+      throw new Error(`runtime configuration was not found at ${path}`);
+    }
+    throw new Error(`runtime configuration could not be read safely at ${path}`);
+  }
+  let parsed;
+  try {
+    parsed = JSON.parse(raw);
+  } catch {
+    throw new Error(`runtime configuration at ${path} is not valid JSON`);
+  }
+  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+    throw new Error(`runtime configuration at ${path} must be an object`);
+  }
+  const record = parsed;
+  if (record.schemaVersion !== runtimeEnrollmentSchemaVersion) {
+    throw new Error(`runtime configuration at ${path} has an unsupported schema version`);
+  }
+  if (typeof record.serverUrl !== "string" || typeof record.key !== "string") {
+    throw new Error(`runtime configuration at ${path} is missing serverUrl or key`);
+  }
+  if (record.teamId !== void 0 && typeof record.teamId !== "string") {
+    throw new Error(`runtime configuration at ${path} has an invalid teamId`);
+  }
+  if (record.insecureLocalhost !== void 0 && typeof record.insecureLocalhost !== "boolean") {
+    throw new Error(`runtime configuration at ${path} has an invalid insecureLocalhost value`);
+  }
+  try {
+    return normalizeRuntimeEnrollment({
+      serverUrl: record.serverUrl,
+      key: record.key,
+      teamId: record.teamId,
+      insecureLocalhost: record.insecureLocalhost
+    }, workspaceBase);
+  } catch (error) {
+    const message = error instanceof Error ? error.message : String(error);
+    throw new Error(`runtime configuration at ${path} is invalid: ${message}`);
+  }
+}
+async function readRuntimeEnrollmentIfExists(path, workspaceBase = homedir()) {
+  try {
+    await lstat2(path);
+  } catch (error) {
+    if (nodeErrorCode(error) === "ENOENT") return void 0;
+    throw error;
+  }
+  return readRuntimeEnrollment(path, workspaceBase);
+}
+async function writeRuntimeEnrollment(path, enrollment) {
+  const normalized = normalizeRuntimeEnrollment(enrollment);
+  await ensureDirectory(dirname2(path));
+  await writeFileAtomic(path, `${JSON.stringify(normalized, null, 2)}
+`, 384);
+}
+function sameEnrollment(left, right) {
+  return left.serverUrl === right.serverUrl && left.key === right.key && left.teamId === right.teamId && left.insecureLocalhost === right.insecureLocalhost;
+}
+function parseBooleanEnvironment(value, name) {
+  const normalized = value?.trim().toLowerCase();
+  if (!normalized) return void 0;
+  if (["1", "true", "yes", "on"].includes(normalized)) return true;
+  if (["0", "false", "no", "off"].includes(normalized)) return false;
+  throw new Error(`${name} must be true or false`);
+}
+function nodeErrorCode(error) {
+  return error && typeof error === "object" && "code" in error ? String(error.code) : void 0;
+}
+
+// ../memoh/packages/runtime/src/daemon/types.ts
+import { spawn } from "node:child_process";
+var maxCommandOutputBytes = 64 * 1024;
+var spawnCommand = (command, args2, options = {}) => new Promise((resolve5, reject) => {
+  const child = spawn(command, args2, {
+    env: options.env,
+    shell: false,
+    stdio: ["ignore", "pipe", "pipe"],
+    windowsHide: true
+  });
+  let stdout = "";
+  let stderr = "";
+  child.stdout.setEncoding("utf8");
+  child.stderr.setEncoding("utf8");
+  child.stdout.on("data", (chunk) => {
+    if (stdout.length < maxCommandOutputBytes) stdout += chunk.slice(0, maxCommandOutputBytes - stdout.length);
+  });
+  child.stderr.on("data", (chunk) => {
+    if (stderr.length < maxCommandOutputBytes) stderr += chunk.slice(0, maxCommandOutputBytes - stderr.length);
+  });
+  const timer = setTimeout(() => {
+    child.kill();
+    reject(new Error(`${command} timed out`));
+  }, 3e4);
+  timer.unref();
+  child.once("error", (error) => {
+    clearTimeout(timer);
+    reject(error);
+  });
+  child.once("close", (code) => {
+    clearTimeout(timer);
+    resolve5({ code: code ?? 1, stdout, stderr });
+  });
+});
+async function requireCommand(runner, command, args2, options = {}) {
+  const result = await runner(command, args2, { env: options.env });
+  const allowed = options.allowedExitCodes ?? [0];
+  if (!allowed.includes(result.code)) {
+    const detail = result.stderr.trim() || result.stdout.trim() || `exit code ${result.code}`;
+    throw new Error(`${command} ${args2.join(" ")} failed: ${detail}`);
+  }
+  return result;
+}
+function serviceExecutablePath(nodePath, environmentPath, platform2 = process.platform) {
+  const separator = platform2 === "win32" ? ";" : ":";
+  const nodeDirectory = nodePath.replace(/[\\/][^\\/]+$/, "");
+  const defaults = platform2 === "darwin" ? ["/opt/homebrew/bin", "/usr/local/bin", "/usr/bin", "/bin", "/usr/sbin", "/sbin"] : ["/usr/local/bin", "/usr/bin", "/bin"];
+  const values = [nodeDirectory, ...environmentPath?.split(separator) ?? [], ...defaults].map((value) => value.trim()).filter((value) => value && !value.includes("\0") && !value.includes("\n") && !value.includes("\r"));
+  return [...new Set(values)].join(separator);
+}
+
+// ../memoh/packages/runtime/src/daemon/launchd.ts
+var launchdLabel = "ai.memoh.runtime";
+var bootstrapAttempts = 5;
+var defaultBootstrapRetryDelayMs = 300;
+var bootoutWaitAttempts = 50;
+function renderLaunchdPlist(spec) {
+  return `<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+  <key>Label</key>
+  <string>${xmlEscape(launchdLabel)}</string>
+  <key>ProgramArguments</key>
+  <array>
+    <string>${xmlEscape(spec.nodePath)}</string>
+    <string>${xmlEscape(spec.entryPath)}</string>
+    <string>run</string>
+    <string>--config</string>
+    <string>${xmlEscape(spec.configPath)}</string>
+  </array>
+  <key>EnvironmentVariables</key>
+  <dict>
+    <key>PATH</key>
+    <string>${xmlEscape(spec.servicePath)}</string>
+  </dict>
+  <key>WorkingDirectory</key>
+  <string>${xmlEscape(spec.workingDirectory)}</string>
+  <key>RunAtLoad</key>
+  <true/>
+  <key>KeepAlive</key>
+  <true/>
+  <key>ThrottleInterval</key>
+  <integer>5</integer>
+  <key>StandardOutPath</key>
+  <string>${xmlEscape(`${spec.logsDir}/runtime.log`)}</string>
+  <key>StandardErrorPath</key>
+  <string>${xmlEscape(`${spec.logsDir}/runtime-error.log`)}</string>
+</dict>
+</plist>
+`;
+}
+function createLaunchdServiceManager(paths, runner, uid, options = {}) {
+  const launchctl = "/bin/launchctl";
+  const domain = `gui/${uid}`;
+  const target = `${domain}/${launchdLabel}`;
+  const retryDelayMs = options.bootstrapRetryDelayMs ?? defaultBootstrapRetryDelayMs;
+  const loaded = async () => (await runner(launchctl, ["print", target])).code === 0;
+  const bootstrap = async () => {
+    for (let attempt = 1; ; attempt++) {
+      try {
+        await requireCommand(runner, launchctl, ["bootstrap", domain, paths.launchdPlistPath]);
+        return;
+      } catch (error) {
+        if (attempt >= bootstrapAttempts) throw error;
+        await sleep(retryDelayMs);
+      }
+    }
+  };
+  const bootstrapIfUnloaded = async () => {
+    if (await loaded()) return;
+    await bootstrap();
+  };
+  const bootout = async () => {
+    await requireCommand(runner, launchctl, ["bootout", target], { allowedExitCodes: [0, 3] });
+    for (let attempt = 0; attempt < bootoutWaitAttempts && await loaded(); attempt++) {
+      await sleep(retryDelayMs / 3);
+    }
+    if (await loaded()) throw new Error("launchd job did not stop before the deadline");
+  };
+  return {
+    backend: "launchd-user",
+    async register(spec) {
+      await ensureDirectory(spec.logsDir);
+      await writeFileAtomic(paths.launchdPlistPath, renderLaunchdPlist(spec), 384);
+      await requireCommand(runner, "/usr/bin/plutil", ["-lint", paths.launchdPlistPath]);
+    },
+    async start() {
+      await bootstrapIfUnloaded();
+    },
+    async stop() {
+      await bootout();
+    },
+    async status() {
+      const result = await runner(launchctl, ["print", target]);
+      if (result.code === 0) {
+        return {
+          backend: "launchd-user",
+          state: /\bstate\s*=\s*running\b/.test(result.stdout) ? "running" : "stopped"
+        };
+      }
+      try {
+        await access(paths.launchdPlistPath);
+        return { backend: "launchd-user", state: "stopped" };
+      } catch {
+        return { backend: "launchd-user", state: "not-installed" };
+      }
+    },
+    async uninstall() {
+      await bootout();
+      await rm2(paths.launchdPlistPath, { force: true });
+    }
+  };
+}
+function xmlEscape(value) {
+  if (value.includes("\0")) throw new Error("launchd service value contains a null byte");
+  return value.replaceAll("&", "&amp;").replaceAll("<", "&lt;").replaceAll(">", "&gt;").replaceAll('"', "&quot;").replaceAll("'", "&apos;");
+}
+
+// ../memoh/packages/runtime/src/daemon/systemd.ts
+import { rm as rm3 } from "node:fs/promises";
+var unitName = "memoh-runtime.service";
+function renderSystemdUnit(spec) {
+  return `[Unit]
+Description=Memoh Runtime
+
+[Service]
+Type=simple
+Environment=${systemdQuote(`PATH=${spec.servicePath}`, false)}
+ExecStart=${systemdQuote(spec.nodePath, false)} ${systemdQuote(spec.entryPath)} run --config ${systemdQuote(spec.configPath)}
+WorkingDirectory=${systemdPath(spec.workingDirectory)}
+UMask=0077
+Restart=always
+RestartSec=5
+TimeoutStopSec=30
+
+[Install]
+WantedBy=default.target
+`;
+}
+function createSystemdServiceManager(paths, runner) {
+  const systemctl = "systemctl";
+  const baseArgs = ["--user"];
+  const run2 = (args2, allowedExitCodes) => requireCommand(runner, systemctl, [...baseArgs, ...args2], { allowedExitCodes });
+  return {
+    backend: "systemd-user",
+    async register(spec) {
+      await writeFileAtomic(paths.systemdUnitPath, renderSystemdUnit(spec), 384);
+      await requireCommand(runner, "systemd-analyze", ["--user", "verify", paths.systemdUnitPath]);
+      await run2(["daemon-reload"]);
+      await run2(["enable", paths.systemdUnitPath]);
+    },
+    async start() {
+      await run2(["start", unitName]);
+    },
+    async stop() {
+      await run2(["stop", unitName], [0, 5]);
+    },
+    async status() {
+      const result = await runner(systemctl, [...baseArgs, "show", unitName, "--property=LoadState,ActiveState,SubState,MainPID"]);
+      const fields = Object.fromEntries(result.stdout.trim().split("\n").map((line) => line.split("=")));
+      if (fields.LoadState === "not-found") return { backend: "systemd-user", state: "not-installed" };
+      if (result.code !== 0 || fields.LoadState !== "loaded") {
+        return { backend: "systemd-user", state: "unknown", detail: result.stderr.trim() || fields.LoadState };
+      }
+      const pid = Number(fields.MainPID);
+      return {
+        backend: "systemd-user",
+        state: fields.ActiveState === "active" && fields.SubState === "running" && pid > 0 ? "running" : ["inactive", "failed"].includes(fields.ActiveState) ? "stopped" : "unknown",
+        pid: pid > 0 ? pid : void 0,
+        detail: fields.SubState
+      };
+    },
+    async uninstall() {
+      await run2(["disable", "--now", unitName], [0, 1, 5]);
+      try {
+        await rm3(paths.systemdUnitPath, { force: true });
+      } catch (error) {
+        if (nodeErrorCode(error) !== "ENOENT") throw error;
+      }
+      await run2(["daemon-reload"]);
+      await run2(["reset-failed", unitName], [0, 1, 5]);
+    }
+  };
+}
+function systemdQuote(value, expandDollar = true) {
+  if (expandDollar) value = value.replaceAll("$", () => "$$");
+  if (value.includes("\0") || value.includes("\n") || value.includes("\r")) {
+    throw new Error("systemd service value contains unsupported control characters");
+  }
+  return `"${value.replaceAll("\\", "\\\\").replaceAll('"', '\\"').replaceAll("%", "%%")}"`;
+}
+function systemdPath(value) {
+  if (!value.startsWith("/") || value.trim() !== value || /[\\\0\n\r]/.test(value)) throw new Error("invalid systemd working directory");
+  return value.replaceAll("%", "%%");
+}
+
+// ../memoh/packages/runtime/src/daemon/windows.ts
+import { rm as rm4 } from "node:fs/promises";
+function renderWindowsTaskXML(spec, userId) {
+  const argumentsValue = [
+    windowsQuoteArgument(spec.entryPath),
+    "run",
+    "--config",
+    windowsQuoteArgument(spec.configPath),
+    "--log",
+    windowsQuoteArgument(`${spec.logsDir}\\runtime.log`)
+  ].join(" ");
+  return `<?xml version="1.0" encoding="UTF-16"?>
+<Task version="1.4" xmlns="http://schemas.microsoft.com/windows/2004/02/mit/task">
+  <RegistrationInfo>
+    <Description>Memoh Runtime</Description>
+  </RegistrationInfo>
+  <Triggers>
+    <LogonTrigger>
+      <Enabled>true</Enabled>
+      <UserId>${xmlEscape2(userId)}</UserId>
+    </LogonTrigger>
+  </Triggers>
+  <Principals>
+    <Principal id="Author">
+      <UserId>${xmlEscape2(userId)}</UserId>
+      <LogonType>InteractiveToken</LogonType>
+      <RunLevel>LeastPrivilege</RunLevel>
+    </Principal>
+  </Principals>
+  <Settings>
+    <MultipleInstancesPolicy>IgnoreNew</MultipleInstancesPolicy>
+    <DisallowStartIfOnBatteries>false</DisallowStartIfOnBatteries>
+    <StopIfGoingOnBatteries>false</StopIfGoingOnBatteries>
+    <AllowHardTerminate>true</AllowHardTerminate>
+    <StartWhenAvailable>true</StartWhenAvailable>
+    <RunOnlyIfNetworkAvailable>false</RunOnlyIfNetworkAvailable>
+    <AllowStartOnDemand>true</AllowStartOnDemand>
+    <Enabled>true</Enabled>
+    <Hidden>false</Hidden>
+    <RunOnlyIfIdle>false</RunOnlyIfIdle>
+    <WakeToRun>false</WakeToRun>
+    <ExecutionTimeLimit>PT0S</ExecutionTimeLimit>
+    <RestartOnFailure>
+      <Interval>PT1M</Interval>
+      <Count>255</Count>
+    </RestartOnFailure>
+  </Settings>
+  <Actions Context="Author">
+    <Exec>
+      <Command>${xmlEscape2(spec.nodePath)}</Command>
+      <Arguments>${xmlEscape2(argumentsValue)}</Arguments>
+      <WorkingDirectory>${xmlEscape2(spec.workingDirectory)}</WorkingDirectory>
+    </Exec>
+  </Actions>
+</Task>
+`;
+}
+function createWindowsTaskServiceManager(paths, runner) {
+  const schtasks = "schtasks.exe";
+  let identity;
+  const userID = () => identity ??= currentWindowsUserID(runner);
+  const taskName = async () => `\\Memoh\\Runtime-${await userID()}`;
+  const inspect = async () => {
+    const sid = await userID();
+    const result = await requireCommand(runner, "powershell.exe", [
+      "-NoProfile",
+      "-NonInteractive",
+      "-Command",
+      `$ErrorActionPreference = 'Stop'; $task = Get-ScheduledTask | Where-Object { $_.TaskPath -eq '\\Memoh\\' -and $_.TaskName -eq 'Runtime-${sid}' }; if ($null -eq $task) { 'not-installed' } else { $owner = $task.Principal.UserId; if ($owner -notmatch '^S-1-') { $owner = ([System.Security.Principal.NTAccount]::new($owner)).Translate([System.Security.Principal.SecurityIdentifier]).Value }; if ($owner -ne '${sid}') { throw 'Runtime task belongs to another account' }; $task.State.ToString() }`
+    ], { env: windowsPowerShellEnv() });
+    const state = result.stdout.trim().toLowerCase();
+    if (!["not-installed", "running", "ready", "disabled", "queued", "unknown"].includes(state)) {
+      throw new Error("could not determine the Windows runtime task state");
+    }
+    return state;
+  };
+  const run2 = async (args2, allowedExitCodes) => requireCommand(runner, schtasks, [...args2, "/tn", await taskName()], { allowedExitCodes });
+  const stop = async () => {
+    if (["running", "queued", "unknown"].includes(await inspect())) await run2(["/end"]);
+  };
+  const start = async () => {
+    if (await inspect() === "not-installed") throw new Error("Windows runtime task is not installed");
+    await run2(["/run"]);
+  };
+  return {
+    backend: "windows-task-scheduler",
+    async register(spec) {
+      const userId = await userID();
+      await inspect();
+      await ensureDirectory(spec.logsDir);
+      const xml = renderWindowsTaskXML(spec, userId);
+      const utf16 = Buffer.concat([Buffer.from([255, 254]), Buffer.from(xml, "utf16le")]);
+      await writeFileAtomic(paths.windowsTaskXMLPath, utf16, 384);
+      await run2(["/create", "/xml", paths.windowsTaskXMLPath, "/f"]);
+    },
+    start,
+    stop,
+    async status() {
+      try {
+        const state = await inspect();
+        return {
+          backend: "windows-task-scheduler",
+          state: state === "running" ? "running" : state === "not-installed" ? "not-installed" : ["ready", "disabled"].includes(state) ? "stopped" : "unknown"
+        };
+      } catch {
+        return { backend: "windows-task-scheduler", state: "unknown" };
+      }
+    },
+    async uninstall() {
+      if (await inspect() !== "not-installed") {
+        await stop();
+        await run2(["/delete", "/f"]);
+      }
+      await rm4(paths.windowsTaskXMLPath, { force: true });
+    }
+  };
+}
+async function currentWindowsUserID(runner) {
+  const result = await requireCommand(runner, "whoami.exe", ["/user", "/fo", "csv", "/nh"]);
+  const fields = [...result.stdout.matchAll(/"([^"]*)"/g)].map((match) => match[1]);
+  const sid = fields.find((field) => /^S-1-(?:[0-9]+-)*[0-9]+$/i.test(field));
+  if (sid) return sid;
+  throw new Error("could not determine the current Windows account");
+}
+function windowsQuoteArgument(value) {
+  if (value.includes("\0") || value.includes('"')) {
+    throw new Error("Windows service path contains unsupported characters");
+  }
+  return `"${value}"`;
+}
+function xmlEscape2(value) {
+  return value.replaceAll("&", "&amp;").replaceAll("<", "&lt;").replaceAll(">", "&gt;").replaceAll('"', "&quot;").replaceAll("'", "&apos;");
+}
+
+// ../memoh/packages/runtime/src/daemon/index.ts
+function createRuntimeServiceManager(options) {
+  switch (options.platform) {
+    case "darwin":
+      if (options.uid === void 0) throw new Error("launchd service installation requires a user ID");
+      return createLaunchdServiceManager(options.paths, options.runner, options.uid);
+    case "linux":
+      return createSystemdServiceManager(options.paths, options.runner);
+    case "win32":
+      return createWindowsTaskServiceManager(options.paths, options.runner);
+    default:
+      throw new Error(`background services are not supported on ${options.platform}`);
+  }
+}
+async function findNodeExecutable(envPath, platform2) {
+  for (const directory of envPath?.split(platform2 === "win32" ? ";" : ":") ?? []) {
+    if (!isAbsolute2(directory)) continue;
+    const path = join3(directory, platform2 === "win32" ? "node.exe" : "node");
+    try {
+      if (!(await stat(path)).isFile()) continue;
+      await access2(path, platform2 === "win32" ? constants2.R_OK : constants2.X_OK);
+      return path;
+    } catch {
+    }
+  }
+  throw new Error("Node was not found in PATH; install Node and rerun service install");
+}
+async function waitForService(manager, target) {
+  const deadline = Date.now() + 15e3;
+  let observations = 0;
+  do {
+    const { state } = await manager.status();
+    const matched = state === target || target === "stopped" && state === "not-installed";
+    observations = matched ? observations + 1 : 0;
+    if (observations >= (target === "running" ? 2 : 1)) return;
+    await sleep2(250);
+  } while (Date.now() < deadline);
+  throw new Error(`runtime service did not reach ${target}; inspect the service logs`);
+}
+
+// ../memoh/packages/runtime/src/enrollment-lock.ts
+import { mkdir as mkdir2, rm as rm5 } from "node:fs/promises";
+import { dirname as dirname3, join as join4 } from "node:path";
+import { setTimeout as sleep3 } from "node:timers/promises";
+async function withEnrollmentLock(configPath, action, timeoutMs = 3e4) {
+  await ensureDirectory(dirname3(configPath));
+  const lockPath = `${configPath}.lock`;
+  const deadline = Date.now() + timeoutMs;
+  for (; ; ) {
+    try {
+      await mkdir2(lockPath, { mode: 448 });
+      break;
+    } catch (error) {
+      if (errorCode(error) !== "EEXIST") throw error;
+      if (Date.now() >= deadline) {
+        throw new Error(`another enrollment operation holds ${lockPath}; inspect owner.json and remove the lock only after confirming that process has exited`);
+      }
+      await sleep3(100);
+    }
+  }
+  try {
+    if (process.platform === "win32") await protectWindowsDirectory(lockPath);
+    await writeFileAtomic(join4(lockPath, "owner.json"), `${JSON.stringify({ pid: process.pid })}
+`, 384);
+    return await action();
+  } finally {
+    await rm5(lockPath, { recursive: true, force: true });
+  }
+}
+
+// ../memoh/packages/runtime/src/session.ts
+import { arch, hostname, platform } from "node:os";
+import { realpath as realpath3 } from "node:fs/promises";
+
+// ../memoh/node_modules/.pnpm/ws@8.21.0/node_modules/ws/wrapper.mjs
+var import_stream = __toESM(require_stream(), 1);
+var import_extension = __toESM(require_extension(), 1);
+var import_permessage_deflate = __toESM(require_permessage_deflate(), 1);
+var import_receiver = __toESM(require_receiver(), 1);
+var import_sender = __toESM(require_sender(), 1);
+var import_subprotocol = __toESM(require_subprotocol(), 1);
+var import_websocket = __toESM(require_websocket(), 1);
+var import_websocket_server = __toESM(require_websocket_server(), 1);
+var wrapper_default = import_websocket.default;
+
 // ../memoh/packages/runtime/src/pipe/grpc-websocket.ts
 function bridgeWebSocketToGrpc(websocket, grpc) {
   const stream = (0, import_stream.default)(websocket, { encoding: void 0 });
-  return new Promise((resolve2, reject) => {
+  return new Promise((resolve5, reject) => {
     let settled = false;
     const finish = (error) => {
       if (settled) {
@@ -28035,7 +28859,7 @@ function bridgeWebSocketToGrpc(websocket, grpc) {
       if (error) {
         reject(error);
       } else {
-        resolve2();
+        resolve5();
       }
     };
     websocket.once("close", () => finish());
@@ -28062,11 +28886,11 @@ function bridgeWebSocketToGrpc(websocket, grpc) {
 // ../memoh/packages/runtime/src/service.ts
 var import_grpc_js6 = __toESM(require_src3(), 1);
 var import_proto_loader = __toESM(require_src2(), 1);
-import { access as access2 } from "node:fs/promises";
+import { access as access4 } from "node:fs/promises";
 import { fileURLToPath } from "node:url";
 
 // ../memoh/packages/runtime/src/children.ts
-import { execFile } from "node:child_process";
+import { execFile as execFile3 } from "node:child_process";
 
 // ../memoh/packages/runtime/src/core/shell.ts
 import { win32 } from "node:path";
@@ -28225,10 +29049,10 @@ async function terminateWindowsProcessTree(pid) {
     return;
   }
   const executable = windowsSystemExecutable("taskkill.exe");
-  await new Promise((resolve2, reject) => {
-    execFile(executable, ["/pid", String(pid), "/t", "/f"], { windowsHide: true }, (error) => {
+  await new Promise((resolve5, reject) => {
+    execFile3(executable, ["/pid", String(pid), "/t", "/f"], { windowsHide: true }, (error) => {
       if (!error || !processExists(pid)) {
-        resolve2();
+        resolve5();
       } else {
         reject(error);
       }
@@ -28247,7 +29071,7 @@ async function waitForChildExit(child, timeout) {
   if (child.exitCode !== null || child.signalCode !== null) {
     return true;
   }
-  return new Promise((resolve2) => {
+  return new Promise((resolve5) => {
     let settled = false;
     const finish = (exited) => {
       if (settled) {
@@ -28256,7 +29080,7 @@ async function waitForChildExit(child, timeout) {
       settled = true;
       clearTimeout(timer);
       child.off("exit", onExit);
-      resolve2(exited);
+      resolve5(exited);
     };
     const onExit = () => finish(true);
     const timer = setTimeout(() => finish(child.exitCode !== null || child.signalCode !== null), timeout);
@@ -28287,7 +29111,7 @@ async function waitForProcessGroupExit(pgid, timeout) {
     if (!processGroupExists(pgid)) {
       return true;
     }
-    await new Promise((resolve2) => setTimeout(resolve2, 25));
+    await new Promise((resolve5) => setTimeout(resolve5, 25));
   }
   return !processGroupExists(pgid);
 }
@@ -28303,7 +29127,7 @@ function safeError(error) {
 
 // ../memoh/packages/runtime/src/core/exec.ts
 var import_grpc_js3 = __toESM(require_src3(), 1);
-import { spawn } from "node:child_process";
+import { spawn as spawn2 } from "node:child_process";
 import { constants as osConstants } from "node:os";
 
 // ../memoh/packages/runtime/src/rpc.ts
@@ -28319,7 +29143,7 @@ function mapNodeError(error, operation) {
   if (isServiceError(error)) {
     return error;
   }
-  const code = nodeErrorCode(error);
+  const code = nodeErrorCode2(error);
   switch (code) {
     case "ENOENT":
       return rpcError(import_grpc_js.status.NOT_FOUND, `${operation}: not found`);
@@ -28335,7 +29159,7 @@ function mapNodeError(error, operation) {
       return rpcError(import_grpc_js.status.INTERNAL, `${operation} failed`);
   }
 }
-function nodeErrorCode(error) {
+function nodeErrorCode2(error) {
   return typeof error === "object" && error !== null && "code" in error ? String(error.code) : void 0;
 }
 function isServiceError(error) {
@@ -28577,7 +29401,7 @@ var WorkspaceExecService = class {
     });
     assertExecAdmissionActive(call, admissionActive);
     const shell = shellSpawnSpec(command);
-    const child = spawn(shell.command, shell.args, {
+    const child = spawn2(shell.command, shell.args, {
       cwd: workDirectory,
       env: environment,
       detached: shell.detached,
@@ -28589,8 +29413,8 @@ var WorkspaceExecService = class {
     const registration = this.children.register(child);
     void registration.catch(() => void 0);
     try {
-      await new Promise((resolve2, reject) => {
-        child.once("spawn", resolve2);
+      await new Promise((resolve5, reject) => {
+        child.once("spawn", resolve5);
         child.once("error", reject);
       });
       await registration;
@@ -28603,8 +29427,8 @@ var WorkspaceExecService = class {
       throw rpcError(import_grpc_js3.status.CANCELLED, "exec was cancelled before process admission completed");
     }
     child.stdin.on("error", () => void 0);
-    const closed = new Promise((resolve2) => {
-      child.once("close", (code, signal) => resolve2({ code, signal }));
+    const closed = new Promise((resolve5) => {
+      child.once("close", (code, signal) => resolve5({ code, signal }));
     });
     const stdoutDone = pipeOutput(child.stdout, call, stdoutStream, () => void this.children.terminate(child));
     const stderrDone = pipeOutput(child.stderr, call, stderrStream, () => void this.children.terminate(child));
@@ -28643,12 +29467,12 @@ function assertExecAdmissionActive(call, admissionActive) {
   }
 }
 function pipeOutput(source, call, stream, onFailure) {
-  return new Promise((resolve2) => {
+  return new Promise((resolve5) => {
     let finished = false;
     const finish = () => {
       if (!finished) {
         finished = true;
-        resolve2();
+        resolve5();
       }
     };
     source.on("data", (chunk) => {
@@ -28718,19 +29542,19 @@ function scheduleLongTimeout(milliseconds, callback) {
 
 // ../memoh/packages/runtime/src/core/fs.ts
 var import_grpc_js4 = __toESM(require_src3(), 1);
-import { constants } from "node:fs";
+import { constants as constants3 } from "node:fs";
 import { randomBytes } from "node:crypto";
 import {
-  lstat,
-  open,
+  lstat as lstat3,
+  open as open2,
   readdir,
   rename as renamePath,
-  rm,
+  rm as rm6,
   rmdir,
-  stat,
+  stat as stat2,
   unlink
 } from "node:fs/promises";
-import { basename, dirname, join, relative, sep } from "node:path";
+import { basename, dirname as dirname4, join as join5, relative, sep } from "node:path";
 var binaryProbeBytes = 8 * 1024;
 var readMaxLines = 2e3;
 var listMaxEntries = 200;
@@ -28744,7 +29568,7 @@ var WorkspaceFileService = class {
     const requested = requiredPath(request.path);
     const target = await this.paths.resolve(requested);
     await this.paths.revalidate(target);
-    const handle = await openNoFollow(target, constants.O_RDONLY, 0).catch((error) => {
+    const handle = await openNoFollow(target, constants3.O_RDONLY, 0).catch((error) => {
       throw mapNodeError(error, "open");
     });
     try {
@@ -28789,13 +29613,13 @@ var WorkspaceFileService = class {
   async writeFile(request) {
     const requested = requiredPath(request.path);
     const target = await this.paths.prepareWrite(requested);
-    const temporary = join(
-      dirname(target),
+    const temporary = join5(
+      dirname4(target),
       `.${basename(target)}.tmp-${randomBytes(8).toString("hex")}`
     );
     const handle = await openNoFollow(
       temporary,
-      constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL,
+      constants3.O_WRONLY | constants3.O_CREAT | constants3.O_EXCL,
       384
     ).catch((error) => {
       throw mapNodeError(error, "open");
@@ -28809,7 +29633,7 @@ var WorkspaceFileService = class {
       throw mapNodeError(error, "write");
     } finally {
       await handle.close().catch(() => void 0);
-      await rm(temporary, { force: true }).catch(() => void 0);
+      await rm6(temporary, { force: true }).catch(() => void 0);
     }
     return {};
   }
@@ -28840,7 +29664,7 @@ var WorkspaceFileService = class {
     const target = await this.paths.resolve(requiredPath(request.path));
     await this.paths.revalidate(target);
     try {
-      const info = await stat(target);
+      const info = await stat2(target);
       return { entry: fileEntry(basename(target), info) };
     } catch (error) {
       throw mapNodeError(error, "stat");
@@ -28870,7 +29694,7 @@ var WorkspaceFileService = class {
       followFinalSymlink: false
     });
     try {
-      const info = await lstat(target);
+      const info = await lstat3(target);
       if (info.isSymbolicLink()) {
         await unlink(target);
         return {};
@@ -28879,12 +29703,12 @@ var WorkspaceFileService = class {
       if (info.isDirectory() && !request.recursive) {
         await rmdir(target);
       } else if (info.isDirectory()) {
-        await rm(target, { recursive: true, force: true });
+        await rm6(target, { recursive: true, force: true });
       } else {
         await unlink(target);
       }
     } catch (error) {
-      if (nodeErrorCode(error) !== "ENOENT" && !(isServiceError(error) && error.code === import_grpc_js4.status.NOT_FOUND)) {
+      if (nodeErrorCode2(error) !== "ENOENT" && !(isServiceError(error) && error.code === import_grpc_js4.status.NOT_FOUND)) {
         throw mapNodeError(error, "delete");
       }
     }
@@ -28893,7 +29717,7 @@ var WorkspaceFileService = class {
   async openReadRaw(requestedPath) {
     const target = await this.paths.resolve(requiredPath(requestedPath));
     await this.paths.revalidate(target);
-    return openNoFollow(target, constants.O_RDONLY, 0).catch((error) => {
+    return openNoFollow(target, constants3.O_RDONLY, 0).catch((error) => {
       throw mapNodeError(error, "open");
     });
   }
@@ -28902,7 +29726,7 @@ var WorkspaceFileService = class {
     await this.paths.revalidate(target, { allowMissing: true });
     return openNoFollow(
       target,
-      constants.O_WRONLY | constants.O_CREAT | constants.O_TRUNC,
+      constants3.O_WRONLY | constants3.O_CREAT | constants3.O_TRUNC,
       384
     ).catch((error) => {
       throw mapNodeError(error, "open");
@@ -28918,9 +29742,9 @@ var WorkspaceFileService = class {
     children.sort((left, right) => compareGoFilenames(left.name, right.name));
     const entries = [];
     for (const child of children) {
-      const target = join(directory, child.name);
+      const target = join5(directory, child.name);
       try {
-        const info = await lstat(target);
+        const info = await lstat3(target);
         entries.push(fileEntry(child.name, info));
       } catch {
       }
@@ -28938,9 +29762,9 @@ var WorkspaceFileService = class {
       }
       children.sort((left, right) => compareGoFilenames(left.name, right.name));
       for (const child of children) {
-        const target = join(current, child.name);
+        const target = join5(current, child.name);
         try {
-          const info = await lstat(target);
+          const info = await lstat3(target);
           const name = relative(directory, target).split(sep).join("/");
           entries.push(fileEntry(name, info));
           if (info.isDirectory() && !info.isSymbolicLink()) {
@@ -28962,8 +29786,8 @@ function requiredPath(value, field = "path") {
   return value;
 }
 function openNoFollow(path, flags, mode) {
-  const noFollow = process.platform === "win32" ? 0 : constants.O_NOFOLLOW;
-  return open(path, flags | noFollow, mode);
+  const noFollow = process.platform === "win32" ? 0 : constants3.O_NOFOLLOW;
+  return open2(path, flags | noFollow, mode);
 }
 function fileEntry(path, info) {
   return {
@@ -29033,15 +29857,15 @@ function formatMode(mode, directory = false, symbolicLink = false) {
     prefix = "-";
   }
   const permissions = [
-    [constants.S_IRUSR, "r"],
-    [constants.S_IWUSR, "w"],
-    [constants.S_IXUSR, "x"],
-    [constants.S_IRGRP, "r"],
-    [constants.S_IWGRP, "w"],
-    [constants.S_IXGRP, "x"],
-    [constants.S_IROTH, "r"],
-    [constants.S_IWOTH, "w"],
-    [constants.S_IXOTH, "x"]
+    [constants3.S_IRUSR, "r"],
+    [constants3.S_IWUSR, "w"],
+    [constants3.S_IXUSR, "x"],
+    [constants3.S_IRGRP, "r"],
+    [constants3.S_IWGRP, "w"],
+    [constants3.S_IXGRP, "x"],
+    [constants3.S_IROTH, "r"],
+    [constants3.S_IWOTH, "w"],
+    [constants3.S_IXOTH, "x"]
   ];
   return prefix + permissions.map(([bit, value]) => mode & bit ? value : "-").join("");
 }
@@ -29119,20 +29943,20 @@ function decodeLine(line) {
 
 // ../memoh/packages/runtime/src/core/paths.ts
 var import_grpc_js5 = __toESM(require_src3(), 1);
-import { constants as constants2 } from "node:fs";
-import { access, lstat as lstat2, mkdir, realpath, stat as stat2 } from "node:fs/promises";
-import { dirname as dirname2, isAbsolute as isAbsolute2, resolve, sep as sep2 } from "node:path";
+import { constants as constants4 } from "node:fs";
+import { access as access3, lstat as lstat4, mkdir as mkdir3, realpath as realpath2, stat as stat3 } from "node:fs/promises";
+import { dirname as dirname5, isAbsolute as isAbsolute3, resolve as resolve3, sep as sep2 } from "node:path";
 var HostPathResolver = class _HostPathResolver {
   defaultDirectory;
   constructor(defaultDirectory) {
     this.defaultDirectory = defaultDirectory;
   }
   static async create(defaultDirectory) {
-    if (!defaultDirectory.trim() || !isAbsolute2(defaultDirectory)) {
+    if (!defaultDirectory.trim() || !isAbsolute3(defaultDirectory)) {
       throw new Error("default directory must be an absolute path");
     }
-    const canonical = await realpath(resolve(defaultDirectory));
-    const info = await stat2(canonical);
+    const canonical = await realpath2(resolve3(defaultDirectory));
+    const info = await stat3(canonical);
     if (!info.isDirectory()) {
       throw new Error("default directory must be a directory");
     }
@@ -29151,20 +29975,20 @@ var HostPathResolver = class _HostPathResolver {
     if (missingSegments.length > 0 && !options.allowMissing) {
       throw rpcError(import_grpc_js5.status.NOT_FOUND, "path does not exist");
     }
-    let canonicalAncestor = await realpath(ancestor).catch((error) => {
+    let canonicalAncestor = await realpath2(ancestor).catch((error) => {
       throw mapNodeError(error, "realpath");
     });
     if (missingSegments.length === 0 && options.followFinalSymlink === false) {
-      const info = await lstat2(candidate).catch((error) => {
+      const info = await lstat4(candidate).catch((error) => {
         throw mapNodeError(error, "lstat");
       });
       if (info.isSymbolicLink()) {
         canonicalAncestor = candidate;
       }
     }
-    const resolvedPath = resolve(canonicalAncestor, ...missingSegments);
+    const resolvedPath = resolve3(canonicalAncestor, ...missingSegments);
     if (missingSegments.length === 0) {
-      const target = await stat2(resolvedPath).catch((error) => {
+      const target = await stat3(resolvedPath).catch((error) => {
         throw mapNodeError(error, "stat");
       });
       if (options.requireDirectory && !target.isDirectory()) {
@@ -29179,7 +30003,7 @@ var HostPathResolver = class _HostPathResolver {
   }
   async prepareWrite(requestedPath) {
     const initial = await this.resolve(requestedPath, { allowMissing: true });
-    await this.ensureDirectory(dirname2(initial));
+    await this.ensureDirectory(dirname5(initial));
     const checked = await this.resolve(initial, { allowMissing: true });
     if (checked !== initial) {
       throw rpcError(import_grpc_js5.status.PERMISSION_DENIED, "path changed while it was being checked");
@@ -29196,9 +30020,9 @@ var HostPathResolver = class _HostPathResolver {
   async ensureDirectory(requestedPath) {
     const target = await this.resolve(requestedPath, { allowMissing: true });
     try {
-      await mkdir(target, { recursive: true, mode: 488 });
+      await mkdir3(target, { recursive: true, mode: 488 });
     } catch (error) {
-      if (nodeErrorCode(error) !== "EEXIST") {
+      if (nodeErrorCode2(error) !== "EEXIST") {
         throw mapNodeError(error, "mkdir");
       }
     }
@@ -29210,15 +30034,15 @@ var HostPathResolver = class _HostPathResolver {
       return this.defaultDirectory;
     }
     if (bridgePath.startsWith("~/")) {
-      return resolve(this.defaultDirectory, bridgePath.slice(2));
+      return resolve3(this.defaultDirectory, bridgePath.slice(2));
     }
     if (bridgePath.startsWith("/data/")) {
-      return resolve(this.defaultDirectory, bridgePath.slice("/data/".length));
+      return resolve3(this.defaultDirectory, bridgePath.slice("/data/".length));
     }
-    if (isAbsolute2(value)) {
-      return resolve(value);
+    if (isAbsolute3(value)) {
+      return resolve3(value);
     }
-    return resolve(this.defaultDirectory, value);
+    return resolve3(this.defaultDirectory, value);
   }
 };
 async function nearestExistingAncestor(candidate) {
@@ -29226,13 +30050,13 @@ async function nearestExistingAncestor(candidate) {
   let current = candidate;
   for (; ; ) {
     try {
-      await access(current, constants2.F_OK);
+      await access3(current, constants4.F_OK);
       return { ancestor: current, missingSegments };
     } catch (error) {
-      if (nodeErrorCode(error) !== "ENOENT" && nodeErrorCode(error) !== "ENOTDIR") {
+      if (nodeErrorCode2(error) !== "ENOENT" && nodeErrorCode2(error) !== "ENOTDIR") {
         throw mapNodeError(error, "access");
       }
-      const parent = dirname2(current);
+      const parent = dirname5(current);
       if (parent === current) {
         throw mapNodeError(error, "access");
       }
@@ -29284,15 +30108,15 @@ async function startRuntimeGrpcServer(options) {
         }
         connections.clear();
         await children.close();
-        await new Promise((resolve2) => {
+        await new Promise((resolve5) => {
           const timer = setTimeout(() => {
             server.forceShutdown();
-            resolve2();
+            resolve5();
           }, 2e3);
           timer.unref();
           server.tryShutdown(() => {
             clearTimeout(timer);
-            resolve2();
+            resolve5();
           });
         });
       })();
@@ -29470,14 +30294,14 @@ function waitForDrainOrCancellation(call) {
   if (call.cancelled) {
     return Promise.resolve();
   }
-  return new Promise((resolve2) => {
+  return new Promise((resolve5) => {
     let settled = false;
     const finish = () => {
       if (!settled) {
         settled = true;
         call.off("drain", onDrain);
         call.off("cancelled", onCancelled);
-        resolve2();
+        resolve5();
       }
     };
     const onDrain = () => finish();
@@ -29503,7 +30327,7 @@ async function locateBridgeProto() {
   ];
   for (const candidate of candidates) {
     try {
-      await access2(candidate);
+      await access4(candidate);
       return candidate;
     } catch {
     }
@@ -29514,10 +30338,10 @@ async function locateBridgeProto() {
 // ../memoh/packages/runtime/package.json
 var package_default = {
   name: "@memohai/runtime",
-  version: "0.17.0",
+  version: "0.19.0",
   repository: {
     type: "git",
-    url: "git+https://github.com/memohai/Memoh.git",
+    url: "git+https://github.com/felinics/Memoh.git",
     directory: "packages/runtime"
   },
   description: "Embeddable Memoh Remote Runtime SDK and CLI",
@@ -29565,33 +30389,6 @@ var runtimeTeamIDHeader = "X-Team-ID";
 var runtimeMetadataMaxBytes = 8 * 1024;
 var runtimeHandshakeErrorMaxBytes = 8 * 1024;
 var runtimeHandshakeErrorReadTimeoutMs = 2e3;
-function runtimeConnectUrl(serverUrl) {
-  const url = new URL(serverUrl);
-  if (url.protocol === "http:") {
-    url.protocol = "ws:";
-  } else if (url.protocol === "https:") {
-    url.protocol = "wss:";
-  }
-  const basePath = url.pathname.replace(/\/+$/, "");
-  url.pathname = `${basePath}/runtimes/connect`;
-  url.search = "";
-  url.hash = "";
-  return url;
-}
-function assertSecureRuntimeUrl(url, insecureLocalhost = false) {
-  if (url.username || url.password) {
-    throw new Error("runtime connection URL must not contain credentials");
-  }
-  if (url.protocol === "wss:") {
-    return;
-  }
-  const hostname2 = url.hostname.replace(/^\[|\]$/g, "");
-  const local = hostname2 === "127.0.0.1" || hostname2 === "localhost" || hostname2 === "::1";
-  if (url.protocol === "ws:" && insecureLocalhost && local) {
-    return;
-  }
-  throw new Error("runtime connections require wss://; use --insecure-localhost only for localhost development");
-}
 function createHandshakeMetadata(workspaceBase, version = runtimeClientVersion, machine = {
   hostname: hostname(),
   os: platform(),
@@ -29665,7 +30462,7 @@ var RuntimeSession = class {
     try {
       const url = runtimeConnectUrl(this.config.serverUrl);
       assertSecureRuntimeUrl(url, this.config.insecureLocalhost);
-      const workspaceBase = await realpath2(this.config.workspaceBase);
+      const workspaceBase = await realpath3(this.config.workspaceBase);
       let retry = 1e3;
       let lastError;
       while (!this.stopped && !controller.signal.aborted) {
@@ -29750,7 +30547,7 @@ var RuntimeSession = class {
   }
 };
 function waitForOpen(websocket) {
-  return new Promise((resolve2, reject) => {
+  return new Promise((resolve5, reject) => {
     const cleanup = () => {
       websocket.off("open", onOpen);
       websocket.off("error", onError);
@@ -29759,7 +30556,7 @@ function waitForOpen(websocket) {
     };
     const onOpen = () => {
       cleanup();
-      resolve2();
+      resolve5();
     };
     const onError = (error) => {
       cleanup();
@@ -29783,7 +30580,7 @@ function waitForOpen(websocket) {
   });
 }
 function readHandshakeError(response) {
-  return new Promise((resolve2) => {
+  return new Promise((resolve5) => {
     const chunks = [];
     let size = 0;
     let settled = false;
@@ -29800,7 +30597,7 @@ function readHandshakeError(response) {
       settled = true;
       cleanup();
       response.resume();
-      resolve2(
+      resolve5(
         Buffer.concat(chunks).toString("utf8").replace(/\s+/g, " ").trim()
       );
     };
@@ -29853,10 +30650,10 @@ function abortableDelay(milliseconds, signal) {
   if (signal?.aborted) {
     return Promise.resolve();
   }
-  return new Promise((resolve2) => {
+  return new Promise((resolve5) => {
     const finish = () => {
       signal?.removeEventListener("abort", onAbort);
-      resolve2();
+      resolve5();
     };
     const timer = setTimeout(finish, milliseconds);
     const onAbort = () => {
@@ -29878,60 +30675,223 @@ function sanitizeError(error, key) {
   return message.replaceAll(key, "<redacted>").replace(/mrk_[0-9a-f]{64}/g, "<redacted>").slice(0, 1024);
 }
 
-// ../memoh/packages/runtime/src/cli.ts
-async function main(args2) {
-  if (args2.includes("--help") || args2.includes("-h")) {
-    usage(0);
+// ../memoh/packages/runtime/src/cli-main.ts
+var connectionOptions = {
+  server: { type: "string" },
+  key: { type: "string" },
+  "team-id": { type: "string" },
+  config: { type: "string" },
+  "insecure-localhost": { type: "boolean" },
+  help: { type: "boolean", short: "h" }
+};
+async function runCLI(args2, overrides = {}) {
+  const entryPath = overrides.entryPath ?? fileURLToPath2(import.meta.url);
+  const context = {
+    platform: process.platform,
+    env: process.env,
+    home: homedir2(),
+    entryPath,
+    uid: process.getuid?.(),
+    runner: spawnCommand,
+    createSession: (config, options) => new RuntimeSession(config, options),
+    stdout: (message) => console.log(message),
+    stderr: (message) => console.error(message),
+    ...overrides
+  };
+  const [command, ...rest] = args2;
+  if (["help", "--help", "-h"].includes(command)) {
+    context.stdout("Usage: memoh-runtime <enroll|run|service|version>\nUse <command> --help for details.");
+    return 0;
   }
-  if (args2.includes("--workspace-base")) {
-    throw new Error("--workspace-base is no longer supported; Remote Runtime uses the current user home directory");
+  if (command === "version" || command === "--version") {
+    context.stdout(runtimeClientVersion);
+    return 0;
   }
-  const serverUrl = valueAfter(args2, "--server") ?? process.env.MEMOH_RUNTIME_SERVER;
-  const key = valueAfter(args2, "--key") ?? process.env.MEMOH_RUNTIME_KEY;
-  const teamId = (valueAfter(args2, "--team-id") ?? process.env.MEMOH_RUNTIME_TEAM_ID)?.trim() || void 0;
-  if (!serverUrl || !key) {
-    throw new Error("--server and --key are required (or set MEMOH_RUNTIME_SERVER and MEMOH_RUNTIME_KEY)");
+  if (command === "enroll") return enroll(rest, context);
+  if (command === "service") return service(rest, context);
+  if (command === "run") return run(rest, context);
+  if (!command || command.startsWith("-")) return run(args2, context);
+  throw new Error(`unknown command: ${command}`);
+}
+async function run(args2, context) {
+  const { values } = parseArgs({ args: args2, options: { ...connectionOptions, log: { type: "string" } }, strict: true });
+  if (values.help) {
+    context.stdout("Usage: memoh-runtime run [--server <url> --key <key> | --config <file>] [--log <file>]\nReads saved enrollment when no connection is supplied. Never saves or changes a service.");
+    return 0;
   }
-  const workspaceBase = homedir();
+  const log = createLogFile(stringValue(values.log), context.stderr);
   const controller = new AbortController();
   const stop = () => controller.abort();
   process.once("SIGINT", stop);
   process.once("SIGTERM", stop);
   try {
-    const session = new RuntimeSession({
-      serverUrl,
-      key,
-      teamId,
-      workspaceBase,
-      insecureLocalhost: args2.includes("--insecure-localhost")
-    }, {
-      onStatus: (status7, error) => console.log(error ? `${status7}: ${error}` : status7),
-      warn: (message) => console.warn(message)
-    });
-    await session.start(controller.signal);
+    const enrollment = await resolveEnrollment(values, context);
+    await context.createSession({ ...enrollment, workspaceBase: context.home }, {
+      onStatus: (status7, error) => {
+        const line = error ? `${status7}: ${error}` : status7;
+        context.stdout(line);
+        log.write(line);
+      },
+      warn: (message) => {
+        context.stderr(message);
+        log.write(message);
+      }
+    }).start(controller.signal);
+  } catch (error) {
+    log.write(`error: ${formatCLIError(error)}`);
+    throw error;
   } finally {
     process.off("SIGINT", stop);
     process.off("SIGTERM", stop);
+    await log.flush();
+  }
+  return 0;
+}
+function createLogFile(path, warn) {
+  let queue = Promise.resolve();
+  let reported = false;
+  return {
+    write(line) {
+      if (!path) return;
+      queue = queue.then(async () => {
+        try {
+          await mkdir4(dirname6(path), { recursive: true, mode: 448 });
+          await appendFile(path, `${(/* @__PURE__ */ new Date()).toISOString()} ${line}
+`, { mode: 384 });
+        } catch (error) {
+          if (!reported) {
+            reported = true;
+            warn(`could not write log file ${path}: ${formatCLIError(error)}`);
+          }
+        }
+      });
+    },
+    flush: () => queue
+  };
+}
+async function enroll(args2, context) {
+  const { values } = parseArgs({ args: args2, strict: true, options: { ...connectionOptions, replace: { type: "boolean" } } });
+  if (values.help) {
+    context.stdout("Usage: memoh-runtime enroll [--server <url> --key <key> | --config <file>] [--replace]\nSaves the enrollment used by future runs. A running service changes only after an explicit restart.");
+    return 0;
   }
+  assertManagedPaths(context);
+  const paths = resolveRuntimePaths({ home: context.home });
+  const enrollment = await resolveEnrollment(values, context);
+  await withEnrollmentLock(paths.configPath, async () => {
+    if (!values.replace) {
+      let current;
+      try {
+        current = await readRuntimeEnrollmentIfExists(paths.configPath, context.home);
+      } catch (error) {
+        throw new Error(`${formatCLIError(error)}; pass --replace to overwrite it`);
+      }
+      if (current && !sameEnrollment(current, enrollment)) throw new Error("saved enrollment differs; pass --replace to replace it");
+    }
+    await writeRuntimeEnrollment(paths.configPath, enrollment);
+  });
+  context.stdout(`saved enrollment to ${paths.configPath}; restart a running service to apply it`);
+  return 0;
 }
-function valueAfter(args2, name) {
-  const index = args2.indexOf(name);
-  if (index < 0) {
-    return void 0;
+async function service(args2, context) {
+  const [action, ...rest] = args2;
+  if (!action || ["help", "--help", "-h"].includes(action)) {
+    context.stdout("Usage: memoh-runtime service <install|start|stop|restart|status|uninstall>\nInstall registers a stopped service. Enrollment is managed separately with enroll.");
+    return 0;
   }
-  const value = args2[index + 1];
-  if (!value || value.startsWith("--")) {
-    throw new Error(`${name} requires a value`);
+  if (!["install", "start", "stop", "restart", "status", "uninstall"].includes(action)) throw new Error(`unknown service command: ${action}`);
+  const { values } = parseArgs({ args: rest, strict: true, options: {
+    help: { type: "boolean", short: "h" },
+    ...action === "status" ? { json: { type: "boolean" } } : {}
+  } });
+  if (values.help) {
+    context.stdout(`Usage: memoh-runtime service ${action}${action === "status" ? " [--json]" : ""}`);
+    return 0;
   }
-  return value;
+  assertManagedPaths(context);
+  const paths = resolveRuntimePaths({ home: context.home });
+  const manager = createRuntimeServiceManager({ platform: context.platform, paths, runner: context.runner, uid: context.uid });
+  if (action === "status") {
+    const status7 = await manager.status();
+    context.stdout(values.json ? JSON.stringify(status7) : `Memoh Runtime service: ${status7.state} (${status7.backend})${status7.detail ? `: ${status7.detail}` : ""}`);
+    return status7.state === "running" ? 0 : 1;
+  }
+  switch (action) {
+    case "install": {
+      const nodePath = await findNodeExecutable(context.env.PATH, context.platform);
+      await access5(context.entryPath);
+      await access5(join6(dirname6(context.entryPath), "bridge.proto"));
+      await manager.stop();
+      await waitForService(manager, "stopped");
+      await manager.register({
+        nodePath,
+        entryPath: context.entryPath,
+        configPath: paths.configPath,
+        logsDir: paths.logsDir,
+        workingDirectory: context.home,
+        servicePath: serviceExecutablePath(nodePath, context.env.PATH, context.platform)
+      });
+      break;
+    }
+    case "stop":
+      await manager.stop();
+      await waitForService(manager, "stopped");
+      break;
+    case "uninstall":
+      await manager.uninstall();
+      await waitForService(manager, "not-installed");
+      break;
+    case "start":
+    case "restart":
+      await readRuntimeEnrollment(paths.configPath, context.home);
+      if (action === "restart") {
+        await manager.stop();
+        await waitForService(manager, "stopped");
+      }
+      await manager.start();
+      await waitForService(manager, "running");
+      break;
+  }
+  context.stdout(action === "install" ? "installed Memoh Runtime service (stopped); run service start to connect" : action === "uninstall" ? "uninstalled Memoh Runtime service; saved enrollment was retained" : action === "stop" ? "stopped Memoh Runtime service; it starts again at the next login unless you run service uninstall" : `${action === "restart" ? "restarted" : "started"} Memoh Runtime service`);
+  return 0;
+}
+async function resolveEnrollment(values, context) {
+  const explicitConfig = stringValue(values.config);
+  if (explicitConfig) {
+    if (["server", "key", "team-id", "insecure-localhost"].some((key2) => values[key2] !== void 0)) throw new Error("--config cannot be combined with connection flags");
+    return readRuntimeEnrollment(resolve4(explicitConfig), context.home);
+  }
+  const serverUrl = stringValue(values.server) ?? context.env.MEMOH_RUNTIME_SERVER;
+  const key = stringValue(values.key) ?? context.env.MEMOH_RUNTIME_KEY;
+  if (serverUrl || key) {
+    if (!serverUrl || !key) throw new Error("--server and --key must be provided together");
+    return normalizeRuntimeEnrollment({
+      serverUrl,
+      key,
+      teamId: stringValue(values["team-id"]) ?? context.env.MEMOH_RUNTIME_TEAM_ID,
+      insecureLocalhost: values["insecure-localhost"] === true || parseBooleanEnvironment(context.env.MEMOH_RUNTIME_INSECURE_LOCALHOST, "MEMOH_RUNTIME_INSECURE_LOCALHOST") === true
+    }, context.home);
+  }
+  if (["team-id", "insecure-localhost"].some((key2) => values[key2] !== void 0)) throw new Error("connection options require --server and --key");
+  const input = context.env.MEMOH_RUNTIME_CONFIG ?? resolveRuntimePaths({ home: context.home }).configPath;
+  return readRuntimeEnrollment(resolve4(input), context.home);
+}
+function assertManagedPaths(context) {
+  if (context.env.MEMOH_RUNTIME_HOME) throw new Error("MEMOH_RUNTIME_HOME is not supported for managed enrollment or services; use the fixed user runtime directory");
+}
+function stringValue(value) {
+  return typeof value === "string" ? value : void 0;
 }
-function usage(exitCode) {
-  console.error("Usage: memoh-runtime --server <url> --key <key> [--team-id <uuid>] [--insecure-localhost]");
-  process.exit(exitCode);
+function formatCLIError(error) {
+  return error instanceof Error ? error.message : String(error);
 }
-main(process.argv.slice(2)).catch((error) => {
-  console.error(error instanceof Error ? error.message : String(error));
-  process.exit(1);
+
+// ../memoh/packages/runtime/src/cli.ts
+runCLI(process.argv.slice(2)).then((code) => {
+  process.exitCode = code;
+}).catch((error) => {
+  console.error(formatCLIError(error));
+  process.exitCode = 1;
 });
 /*! Bundled license information: