@miraland-labs/conduit-bridge 0.9.1 → 0.9.2

package/README.md

@@ -2,79 +2,76 @@
 
 Local Bridge CLI for [Conduit](https://github.com/miralandlabs/conduit). Connects a computer to one organization, claims work, and drives a local agent.
 
-**Current npm:** `0.9.1` — **disconnect/disengage**, join org prompt when `--organization` is omitted, multi-driver lanes (`drivers online|offline`), shared concurrent slots **1–4**, worktrees, optional `--ensure-checkout`.
+**Current npm:** `0.9.2` — **ops** helpers for macOS / Linux / Windows, LaunchAgent/systemd **PATH** for `~/.local/bin`, disconnect/disengage, multi-driver lanes, shared slots **1–4**, worktrees, optional `--ensure-checkout`.
 
 ## Prerequisites
 
 - Node.js 20+
-- One or more supported agent CLIs on PATH (common: install several on one Mac):
-  - **Claude Code** — `claude` (Conduit pump or Anthropic login)
-  - **Codex** — `codex` (Conduit pump or ChatGPT/OpenAI login). Since the July 2026 ChatGPT desktop merge, Bridge also finds the CLI bundled inside ChatGPT.app when `codex` is not on PATH (macOS)
-  - **OpenCode** — `opencode` (Conduit pump or local provider login)
-  - **Cursor Agent** — `agent` (local fuel; set with `drivers fuel cursor local` or machine `fuel local`)
+- One or more supported agent CLIs:
+  - **Claude Code** — `claude`
+  - **Codex** — `codex`
+  - **OpenCode** — `opencode`
+  - **Cursor Agent** — `agent` (local fuel)
   - **Kiro CLI** — `kiro-cli` (local fuel)
   - **Antigravity** — `agy` (local fuel)
-- macOS or Linux for `install-service` (Windows: keep a terminal runner open)
 
-## Install / run
+## Easy path (all platforms)
+
+One config file + the same `ops` commands on macOS, Linux, and Windows:
 
 ```bash
-npx @miraland-labs/conduit-bridge join --url <https://your-conduit> --organization <slug>
-# If --organization is omitted, the CLI asks: Join which org?
+# 1) Config once
+mkdir -p ~/.config/conduit
+# Windows: mkdir %USERPROFILE%\.config\conduit
+npx @miraland-labs/conduit-bridge@latest init-ops
+cp ~/conduit/ops/env.example ~/.config/conduit/ops.env
+# edit ops.env  (URL, WORKSPACE, optional REPO, DRIVERS, ROLES)
+
+# 2) Connect → approve in browser → install
+npx @miraland-labs/conduit-bridge@latest ops connect
+npx @miraland-labs/conduit-bridge@latest ops install
+npx @miraland-labs/conduit-bridge@latest ops status
 ```
 
-Disengage (leave the organization; then you can join the same or another org):
+Later:
 
 ```bash
-npx @miraland-labs/conduit-bridge disconnect
-# Or non-interactive: disconnect --yes
+npx @miraland-labs/conduit-bridge@latest ops online cursor
+npx @miraland-labs/conduit-bridge@latest ops offline cursor
+npx @miraland-labs/conduit-bridge@latest ops disconnect
 ```
 
-After approval, seed detects installed CLIs as **offline lanes**. Bring one or more online (subscription failover / concurrent lanes):
+Optional local shortcuts after `init-ops` (same verbs):
 
-```bash
-npx @miraland-labs/conduit-bridge drivers              # list lanes
-npx @miraland-labs/conduit-bridge drivers online claude-code
-npx @miraland-labs/conduit-bridge drivers online claude-code codex   # both can run at once
-npx @miraland-labs/conduit-bridge drivers offline claude-code         # finish in-flight; no new claims
-npx @miraland-labs/conduit-bridge runner --workspace /path/to/repo
-```
+| Platform | Examples |
+| --- | --- |
+| macOS / Linux | `~/conduit/ops/connect.sh`, `install.sh`, … |
+| Windows | `%USERPROFILE%\conduit\ops\connect.cmd`, `install.cmd`, … |
 
-Legacy single-driver process override (does not change saved online set):
+**Windows note:** `ops install` brings lanes online and prints a `runner --workspace …` command to keep open (no LaunchAgent). macOS/Linux install a background service.
 
-```bash
-npx @miraland-labs/conduit-bridge runner --agent claude-code --workspace /path/to/repo
-```
+`ops.env` keys: `CONDUIT_URL`, `CONDUIT_ORG` (optional), `CONDUIT_WORKSPACE`, `CONDUIT_REPO` (optional), `CONDUIT_DRIVERS` (default `cursor`), `CONDUIT_ROLES` (default `implement research`). Values expand `$HOME`, `%USERPROFILE%`, and `~`.
 
-Persist (macOS/Linux) — one LaunchAgent; honors the drivers online set:
+## Advanced CLI
 
 ```bash
-npx @miraland-labs/conduit-bridge install-service --workspace /path/to/repo
-# optional: bring a lane online at install time
-npx @miraland-labs/conduit-bridge install-service --agent claude-code --workspace /path/to/repo
+npx @miraland-labs/conduit-bridge join --url <https://your-conduit> --organization <slug>
+npx @miraland-labs/conduit-bridge drivers online cursor
+npx @miraland-labs/conduit-bridge install-service --workspace /path/to/repo --ensure-checkout https://github.com/org/repo.git
+npx @miraland-labs/conduit-bridge disconnect --yes
 ```
 
-Reinstall after upgrading from Bridge versions before 0.8 if the old unit baked a single `--agent`.
-
-For a Start-created GitHub repo that is not checked out yet, point `--workspace` at the intended path and add `--ensure-checkout <https://github.com/…>` so Bridge clones with the machine’s Git credentials before the first heartbeat (never the control-plane PAT).
-
-**Capacity:** Connect-approved `lease_capacity` (1–4) is a **shared pool** for all online lanes on that computer. Claude alone may use all 4 slots; Claude + Codex share those 4 — never 4×N.
+**Capacity:** Connect-approved `lease_capacity` (1–4) is a **shared pool** for all online lanes on that computer.
 
 ## Grant enforcement
 
-Every driver enforces the assignment's granted actions with its CLI's native mechanism — never just the prompt:
-
 | Driver | Fuel | Mechanism |
 | --- | --- | --- |
-| `claude-code` | pump or local | `--allowedTools` / `--disallowedTools` per grant; bounded verification commands |
-| `codex` | pump or local | sandbox `read-only` / `workspace-write`; network enabled only with `pr_create`; resumes by thread id |
-| `opencode` | pump or local | `plan`/`build` agents; per-run `opencode.json` bash deny list (shared `deniedCommands`); `--session` resume; `--format json` |
-| `cursor` | local only | per-run `.cursor/cli.json` `permissions` allow/deny (no `--force`); read-only runs in `--mode plan` |
-| `kiro` | local only | `--trust-tools=fs_read,fs_write,execute_bash` allowlist; `--no-interactive`; `--resume-id`. Tool-level only — no per-command scoping, so a bash grant trusts `execute_bash` wholesale (Antigravity-tier) |
-| `antigravity` | local only | `-p --mode plan` (read-only) / `--mode accept-edits --sandbox` (write). Mode-level, coarser than per-tool; plain-text output; resume not surfaced |
-
-Every driver refuses to start when grants map to nothing, fails closed on missing logins, and shares one denied-command list (merge, force-push, deploy, kubectl, terraform).
-
-**Verification status:**
-- `claude-code`, `codex`, `cursor`, `opencode`, `antigravity` — verified end-to-end against their real CLIs (agy 1.1.3: `-p --mode` args, Google login, plain-text output confirmed through the driver).
-- `kiro` — flag surface and login preflight verified against kiro-cli 2.13.0 (`chat --no-interactive --trust-tools --resume-id`; tool names; `whoami`-based login check that avoids the browser-login hang). A full run is **pending a `KIRO_API_KEY`** — kiro-cli requires auth to execute and cannot be exercised offline.
+| `claude-code` | pump or local | `--allowedTools` / `--disallowedTools` per grant |
+| `codex` | pump or local | sandbox `read-only` / `workspace-write` |
+| `opencode` | pump or local | per-run `opencode.json` bash deny list |
+| `cursor` | local only | per-run `.cursor/cli.json` permissions |
+| `kiro` | local only | `--trust-tools` allowlist |
+| `antigravity` | local only | `-p --mode plan` / `accept-edits` |
+
+Cursor/Kiro/Antigravity require local fuel (`ops install` sets this for you).

package/dist/cli.js

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import { parseArgs } from "node:util";
 import { resolve, dirname, join as pathJoin } from "node:path";
-import { hostname, userInfo } from "node:os";
+import { hostname, homedir, platform, userInfo } from "node:os";
 import { spawn } from "node:child_process";
 import { createInterface } from "node:readline/promises";
-import { readFileSync } from "node:fs";
+import { chmodSync, cpSync, existsSync, mkdirSync, readFileSync, readdirSync } from "node:fs";
 import { stdin as input, stdout as output } from "node:process";
 import { fileURLToPath } from "node:url";
 import { ConduitClient, ConduitRequestError } from "./client.js";
@@ -17,6 +17,7 @@ import { buildWorkspaceBrief } from "./brief.js";
 import { ensureCheckout } from "./checkout.js";
 import { pumpExecutionSlots, renewLeases } from "./execution.js";
 import { installRunnerService, uninstallRunnerService } from "./service.js";
+import { OPS_VERBS, runOps } from "./ops.js";
 const [command] = process.argv.slice(2);
 /** Read our own package version so every runner start logs exactly which build is live. */
 function bridgeVersion() {
@@ -317,6 +318,56 @@ async function uninstallService() {
     const result = await uninstallRunnerService();
     console.log(`Removed Conduit runner service (${result.platform}): ${result.path}`);
 }
+/** Copy cross-platform ops launchers to ~/conduit/ops (default). Env stays in ~/.config. */
+async function initOps() {
+    const targetArg = process.argv[3];
+    const target = resolve(targetArg ?? pathJoin(homedir(), "conduit", "ops"));
+    const packageRoot = pathJoin(dirname(fileURLToPath(import.meta.url)), "..");
+    const source = pathJoin(packageRoot, "ops");
+    if (!existsSync(source)) {
+        throw new Error(`Ops kit missing from package at ${source}. Reinstall @miraland-labs/conduit-bridge.`);
+    }
+    mkdirSync(target, { recursive: true });
+    for (const name of readdirSync(source)) {
+        cpSync(pathJoin(source, name), pathJoin(target, name));
+        if (name.endsWith(".sh") || name === "conduit-ops")
+            chmodSync(pathJoin(target, name), 0o755);
+    }
+    const configDir = pathJoin(homedir(), ".config", "conduit");
+    const envPath = pathJoin(configDir, "ops.env");
+    const host = platform();
+    console.log(`Ops launchers installed at ${target}`);
+    console.log(`Config file (separate): ${envPath}`);
+    console.log("");
+    console.log("Works the same on macOS, Linux, and Windows via:");
+    console.log(`  ${bridgeUsage("ops", "<connect|install|online|offline|status|disconnect|uninstall>")}`);
+    console.log("");
+    console.log("1. Edit env once:");
+    console.log(`   Create folder: ${configDir}`);
+    console.log(`   Copy ${pathJoin(target, "env.example")} → ${envPath}`);
+    console.log(`   # edit ${envPath}`);
+    console.log("2. Connect (approve in browser):");
+    if (host === "win32") {
+        console.log(`   ${pathJoin(target, "connect.cmd")}`);
+        console.log("   # or: npx @miraland-labs/conduit-bridge@latest ops connect");
+        console.log("3. Install / start runner:");
+        console.log(`   ${pathJoin(target, "install.cmd")}`);
+    }
+    else {
+        console.log(`   ${pathJoin(target, "connect.sh")}`);
+        console.log("   # or: npx @miraland-labs/conduit-bridge@latest ops connect");
+        console.log("3. Install runner:");
+        console.log(`   ${pathJoin(target, "install.sh")}`);
+    }
+    console.log("Later: status · online · offline · disconnect (same names .sh / .cmd)");
+}
+async function opsCommand() {
+    const verb = process.argv[3];
+    if (!verb || !OPS_VERBS.includes(verb)) {
+        throw new Error(`Usage: ${bridgeUsage("ops", "<connect|install|online|offline|status|disconnect|uninstall>", "[driver…]")}`);
+    }
+    await runOps(verb, process.argv.slice(4));
+}
 async function fuelCommand() {
     const mode = process.argv[3];
     if (mode !== "local" && mode !== "conduit") {
@@ -520,8 +571,12 @@ try {
         await installService();
     else if (command === "uninstall-service")
         await uninstallService();
+    else if (command === "init-ops")
+        await initOps();
+    else if (command === "ops")
+        await opsCommand();
     else
-        throw new Error(`Usage: ${BRIDGE_NPX} <join|disconnect|connect|fuel|drivers|mcp|runner|install-service|uninstall-service>`);
+        throw new Error(`Usage: ${BRIDGE_NPX} <join|disconnect|connect|fuel|drivers|mcp|runner|install-service|uninstall-service|init-ops|ops>`);
 }
 catch (error) {
     console.error(error instanceof Error ? redactSecrets(error.message) : "Conduit command failed");

package/dist/driver.js

@@ -3,6 +3,15 @@ import { existsSync } from "node:fs";
 import { mkdir, readFile, rm, writeFile } from "node:fs/promises";
 import { join } from "node:path";
 import { z } from "zod";
+function deliveryLanguageRule(language) {
+    if (language === "zh") {
+        return "- Write every human-facing delivery packet string (outcome, changes, verification, assumptions, risks, limitations, criterion text) in Chinese (Simplified). Keep JSON keys and enum token values in English.";
+    }
+    if (language === "en") {
+        return "- Write every human-facing delivery packet string (outcome, changes, verification, assumptions, risks, limitations, criterion text) in English. Keep JSON keys and enum token values in English.";
+    }
+    return null;
+}
 export const evidenceKinds = ["change", "test", "preview", "research", "documentation"];
 export const agentReportTemplate = '{"outcome": "one-paragraph summary", "changes": ["path — what changed"], "verification": ["command — result"], "acceptance_results": [{"criterion": "exact criterion text", "status": "met|not_met|unknown"}], "evidence": [{"kind": "change|test|preview|research|documentation", "name": "concise evidence name", "uri": "external URL if one exists", "digest": "optional digest", "details": ["observable result"], "acceptance_criteria": ["exact criterion text supported by this evidence"]}], "assumptions": [], "risks": [], "limitations": [], "head_commit": "full sha of your final commit, omit if none"}';
 /**
@@ -131,7 +140,8 @@ export function buildAssignmentPrompt(context) {
         ...(context.grants.includes("branch_create") ? branchCreateCommands : []),
         ...(context.grants.includes("pr_create") ? prCreateCommands : []),
     ];
-    lines.push("", "RULES", "- Stay within the change scope and boundaries.", 
+    const languageRule = deliveryLanguageRule(packageContext?.working_language ?? spec.working_language);
+    lines.push("", "RULES", "- Stay within the change scope and boundaries.", ...(languageRule ? [languageRule] : []), 
     // Name the executable commands. The shell allow-list is exact, so an agent that guesses at
     // `bash scripts/validate-pack.sh`, `python3 ...` or `echo` gets every call rejected and concludes
     // it has no shell at all — observed twice on live Daily Signal runs, both times while the

package/dist/execution.js

@@ -67,6 +67,7 @@ const workPackageSchema = z.object({
     }).optional(),
     decisions: z.array(z.object({ question: z.string(), decision: z.string() })).optional(),
     rework_feedback: z.string().nullable().optional(),
+    working_language: z.enum(["en", "zh"]).optional(),
 }).nullable().optional();
 export async function renewLeases(client, config) {
     for (const active of Object.values(config.activeAttempts)) {

package/dist/ops.js

@@ -0,0 +1,199 @@
+/**
+ * Cross-platform operator helpers (macOS / Linux / Windows).
+ * Invoked as: npx @miraland-labs/conduit-bridge ops <connect|install|…>
+ */
+import { spawnSync } from "node:child_process";
+import { existsSync, readFileSync } from "node:fs";
+import { homedir, platform } from "node:os";
+import { join, resolve } from "node:path";
+export const OPS_VERBS = [
+    "connect", "install", "online", "offline", "status", "disconnect", "uninstall",
+];
+const LOCAL_FUEL_DRIVERS = new Set(["cursor", "kiro", "antigravity"]);
+export function defaultOpsEnvPath(home = homedir()) {
+    return join(home, ".config", "conduit", "ops.env");
+}
+/** Expand $HOME, %USERPROFILE%, and leading ~ for cross-platform env values. */
+export function expandOpsValue(value, home = homedir()) {
+    let next = value.trim();
+    if ((next.startsWith('"') && next.endsWith('"')) || (next.startsWith("'") && next.endsWith("'"))) {
+        next = next.slice(1, -1);
+    }
+    next = next.replace(/%USERPROFILE%/gi, home).replace(/%HOME%/gi, home);
+    next = next.replace(/\$HOME\b/g, home).replace(/\$\{HOME\}/g, home);
+    if (next.startsWith("~/") || next === "~")
+        next = join(home, next.slice(2));
+    return next;
+}
+export function parseOpsEnvFile(text, home = homedir()) {
+    const out = {};
+    for (const raw of text.split(/\r?\n/)) {
+        const line = raw.trim();
+        if (!line || line.startsWith("#"))
+            continue;
+        const eq = line.indexOf("=");
+        if (eq <= 0)
+            continue;
+        const key = line.slice(0, eq).trim();
+        if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(key))
+            continue;
+        out[key] = expandOpsValue(line.slice(eq + 1), home);
+    }
+    return out;
+}
+export function loadOpsEnv(home = homedir(), cwd = process.cwd()) {
+    const candidates = [
+        process.env.CONDUIT_OPS_ENV,
+        join(cwd, ".conduit-ops.env"),
+        defaultOpsEnvPath(home),
+    ].filter((path) => Boolean(path));
+    let loadedFrom = null;
+    let fileValues = {};
+    for (const path of candidates) {
+        if (!existsSync(path))
+            continue;
+        fileValues = parseOpsEnvFile(readFileSync(path, "utf8"), home);
+        loadedFrom = path;
+        break;
+    }
+    const pick = (key, fallback) => {
+        const fromEnv = process.env[key];
+        if (fromEnv !== undefined && fromEnv !== "")
+            return expandOpsValue(fromEnv, home);
+        if (fileValues[key])
+            return fileValues[key];
+        return fallback;
+    };
+    return {
+        CONDUIT_URL: pick("CONDUIT_URL", ""),
+        CONDUIT_ORG: pick("CONDUIT_ORG", ""),
+        CONDUIT_WORKSPACE: pick("CONDUIT_WORKSPACE", ""),
+        CONDUIT_REPO: pick("CONDUIT_REPO", ""),
+        CONDUIT_DRIVERS: pick("CONDUIT_DRIVERS", "cursor"),
+        CONDUIT_ROLES: pick("CONDUIT_ROLES", "implement research"),
+        loadedFrom,
+    };
+}
+export function requireOpsEnv(env) {
+    if (env.loadedFrom || env.CONDUIT_URL || env.CONDUIT_WORKSPACE)
+        return;
+    const path = defaultOpsEnvPath();
+    throw new Error(`Missing ops env. Create it once:\n` +
+        `  Create folder: ${join(homedir(), ".config", "conduit")}\n` +
+        `  Copy env.example to: ${path}\n` +
+        `  Edit that file, then retry.`);
+}
+export function splitOpsList(value) {
+    return value.split(/[,\s]+/).map((item) => item.trim()).filter(Boolean);
+}
+export function resolveDrivers(env, argv) {
+    const fromArgs = argv.map((item) => item.trim()).filter(Boolean);
+    const drivers = fromArgs.length ? fromArgs : splitOpsList(env.CONDUIT_DRIVERS);
+    if (!drivers.length)
+        throw new Error("No drivers. Set CONDUIT_DRIVERS or pass ids.");
+    return drivers;
+}
+/** Quote args for a copy-pasteable shell/cmd line (paths with spaces). */
+export function shellQuoteArgs(args) {
+    return args.map((arg) => {
+        if (!/[^\w@%+=:,./\\-]/i.test(arg))
+            return arg;
+        return `"${arg.replaceAll('"', '\\"')}"`;
+    }).join(" ");
+}
+function defaultRunBridge(args, options = {}) {
+    // Re-enter this package's CLI in a child so ops stays a thin orchestrator.
+    const cli = process.argv[1];
+    const node = process.execPath;
+    const result = spawnSync(node, [cli, ...args], { stdio: "inherit", env: process.env });
+    if (result.error) {
+        if (options.allowFail)
+            return;
+        throw result.error;
+    }
+    if (result.status !== 0) {
+        if (options.allowFail)
+            return;
+        process.exit(result.status ?? 1);
+    }
+}
+export async function runOps(verb, argv = [], deps = {}) {
+    const runBridge = deps.runBridge ?? defaultRunBridge;
+    const host = deps.host ?? platform();
+    const env = deps.env ?? loadOpsEnv();
+    if (verb === "disconnect") {
+        runBridge(["uninstall-service"], { allowFail: true });
+        runBridge(["disconnect", "--yes"]);
+        console.log("Disconnected. Run: npx @miraland-labs/conduit-bridge@latest ops connect");
+        return;
+    }
+    if (verb === "uninstall") {
+        runBridge(["uninstall-service"]);
+        return;
+    }
+    if (verb === "status") {
+        if (env.loadedFrom) {
+            console.log(`Env: ${env.loadedFrom}`);
+            console.log(`URL: ${env.CONDUIT_URL || "(unset)"}`);
+            console.log(`Workspace: ${env.CONDUIT_WORKSPACE || "(unset)"}`);
+            console.log(`Repo: ${env.CONDUIT_REPO || "(none)"}`);
+            console.log(`Drivers: ${env.CONDUIT_DRIVERS}`);
+            console.log(`Roles: ${env.CONDUIT_ROLES}`);
+            console.log("");
+        }
+        else {
+            console.log("No ops.env loaded (showing drivers only).\n");
+        }
+        runBridge(["drivers"]);
+        return;
+    }
+    // Lane toggles only need Bridge config + optional driver ids — not a full ops.env.
+    if (verb === "online" || verb === "offline") {
+        const drivers = resolveDrivers(env, argv);
+        runBridge(["drivers", verb, ...drivers]);
+        return;
+    }
+    requireOpsEnv(env);
+    if (verb === "connect") {
+        if (!env.CONDUIT_URL)
+            throw new Error(`Set CONDUIT_URL in ${defaultOpsEnvPath()}`);
+        const args = ["join", "--url", env.CONDUIT_URL];
+        if (env.CONDUIT_ORG)
+            args.push("--organization", env.CONDUIT_ORG);
+        for (const role of splitOpsList(env.CONDUIT_ROLES))
+            args.push("--capability", role);
+        console.log(`Connecting to ${env.CONDUIT_URL} (roles: ${env.CONDUIT_ROLES})`);
+        console.log("Approve this computer in Connect when the browser opens.");
+        runBridge(args);
+        return;
+    }
+    if (verb === "install") {
+        if (!env.CONDUIT_WORKSPACE)
+            throw new Error(`Set CONDUIT_WORKSPACE in ${defaultOpsEnvPath()}`);
+        const workspace = resolve(expandOpsValue(env.CONDUIT_WORKSPACE));
+        const drivers = resolveDrivers(env, argv);
+        for (const id of drivers) {
+            if (LOCAL_FUEL_DRIVERS.has(id))
+                runBridge(["drivers", "fuel", id, "local"]);
+        }
+        runBridge(["drivers", "online", ...drivers]);
+        if (host === "win32") {
+            const runnerArgs = ["runner", "--workspace", workspace];
+            if (env.CONDUIT_REPO)
+                runnerArgs.push("--ensure-checkout", env.CONDUIT_REPO);
+            console.log("Windows: background install-service is not available.");
+            console.log("Keep a terminal open and run:");
+            console.log(`  npx @miraland-labs/conduit-bridge@latest ${shellQuoteArgs(runnerArgs)}`);
+            console.log(`Drivers online: ${drivers.join(", ")}`);
+            return;
+        }
+        const installArgs = ["install-service", "--workspace", workspace];
+        if (env.CONDUIT_REPO)
+            installArgs.push("--ensure-checkout", env.CONDUIT_REPO);
+        console.log(`Installing runner for ${workspace} (drivers: ${drivers.join(", ")})`);
+        runBridge(installArgs);
+        console.log("Done. Check with: npx @miraland-labs/conduit-bridge@latest ops status");
+        return;
+    }
+    throw new Error(`Unknown ops verb: ${verb}`);
+}

package/dist/service.js

@@ -34,7 +34,24 @@ export function runnerProgramArguments(options = {}) {
         args.push("--agent-timeout-minutes", options.agentTimeoutMinutes);
     return args;
 }
-export function launchdPlist(programArguments, stdoutPath) {
+/**
+ * PATH for LaunchAgent/systemd so agent CLIs in ~/.local/bin and Homebrew resolve
+ * without the operator hand-editing the unit.
+ */
+export function runnerServicePath(home = homedir(), nodeBin = dirname(process.execPath)) {
+    const parts = [
+        nodeBin,
+        join(home, ".local", "bin"),
+        "/opt/homebrew/bin",
+        "/usr/local/bin",
+        "/usr/bin",
+        "/bin",
+        "/usr/sbin",
+        "/sbin",
+    ];
+    return [...new Set(parts.filter(Boolean))].join(":");
+}
+export function launchdPlist(programArguments, stdoutPath, pathEnv = runnerServicePath()) {
     const argsXml = programArguments.map((arg) => `    <string>${escapeXml(arg)}</string>`).join("\n");
     return `<?xml version="1.0" encoding="UTF-8"?>
 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
@@ -46,6 +63,11 @@ export function launchdPlist(programArguments, stdoutPath) {
   <array>
 ${argsXml}
   </array>
+  <key>EnvironmentVariables</key>
+  <dict>
+    <key>PATH</key>
+    <string>${escapeXml(pathEnv)}</string>
+  </dict>
   <key>RunAtLoad</key>
   <true/>
   <key>KeepAlive</key>
@@ -58,7 +80,7 @@ ${argsXml}
 </plist>
 `;
 }
-export function systemdUserUnit(programArguments, workingDirectory) {
+export function systemdUserUnit(programArguments, workingDirectory, pathEnv = runnerServicePath()) {
     const execStart = programArguments.map(escapeSystemd).join(" ");
     return `[Unit]
 Description=Conduit Bridge runner
@@ -68,6 +90,7 @@ Wants=network-online.target
 [Service]
 Type=simple
 WorkingDirectory=${workingDirectory}
+Environment=PATH=${escapeSystemd(pathEnv)}
 ExecStart=${execStart}
 Restart=always
 RestartSec=5

package/ops/conduit-ops

@@ -0,0 +1,10 @@
+#!/usr/bin/env bash
+# Usage: ./conduit-ops <connect|install|online|offline|status|disconnect|uninstall> [args…]
+set -euo pipefail
+if [[ $# -lt 1 ]]; then
+  echo "Usage: $0 <connect|install|online|offline|status|disconnect|uninstall> [args…]" >&2
+  exit 1
+fi
+verb=$1
+shift
+exec npx --yes @miraland-labs/conduit-bridge@latest ops "$verb" "$@"

package/ops/conduit-ops.cmd

@@ -0,0 +1,8 @@
+@echo off
+REM Usage: conduit-ops.cmd <connect|install|online|offline|status|disconnect|uninstall> [args…]
+if "%~1"=="" (
+  echo Usage: %~nx0 ^<connect^|install^|online^|offline^|status^|disconnect^|uninstall^> [args…]
+  exit /b 1
+)
+npx --yes @miraland-labs/conduit-bridge@latest ops %*
+if errorlevel 1 exit /b %errorlevel%

package/ops/connect.cmd

@@ -0,0 +1,4 @@
+@echo off
+REM Windows launcher. macOS/Linux: use connect.sh
+npx --yes @miraland-labs/conduit-bridge@latest ops connect %*
+if errorlevel 1 exit /b %errorlevel%

package/ops/connect.sh

@@ -0,0 +1,4 @@
+#!/usr/bin/env bash
+# Cross-platform launcher (macOS/Linux). Windows: use connect.cmd
+set -euo pipefail
+exec npx --yes @miraland-labs/conduit-bridge@latest ops connect "$@"

package/ops/disconnect.cmd

@@ -0,0 +1,4 @@
+@echo off
+REM Windows launcher. macOS/Linux: use disconnect.sh
+npx --yes @miraland-labs/conduit-bridge@latest ops disconnect %*
+if errorlevel 1 exit /b %errorlevel%

package/ops/disconnect.sh

@@ -0,0 +1,4 @@
+#!/usr/bin/env bash
+# Cross-platform launcher (macOS/Linux). Windows: use disconnect.cmd
+set -euo pipefail
+exec npx --yes @miraland-labs/conduit-bridge@latest ops disconnect "$@"

package/ops/env.example

@@ -0,0 +1,13 @@
+# Configuration (not scripts). Copy to ~/.config/conduit/ops.env and edit once.
+# Same file works on macOS, Linux, and Windows ($HOME / %USERPROFILE% / ~ are expanded).
+#
+# Cross-platform commands (any OS):
+#   npx @miraland-labs/conduit-bridge@latest ops connect
+#   npx @miraland-labs/conduit-bridge@latest ops install
+# Local shortcuts after init-ops: ~/conduit/ops/*.sh (Mac/Linux) or *.cmd (Windows)
+CONDUIT_URL=https://api.conduit.miraland.io
+# CONDUIT_ORG=your-org-slug
+CONDUIT_WORKSPACE=$HOME/agentic/promote-pr402
+# CONDUIT_REPO=https://github.com/miralandlabs/promote-pr402.git
+CONDUIT_DRIVERS=cursor
+CONDUIT_ROLES=implement research

package/ops/install.cmd

@@ -0,0 +1,4 @@
+@echo off
+REM Windows launcher. macOS/Linux: use install.sh
+npx --yes @miraland-labs/conduit-bridge@latest ops install %*
+if errorlevel 1 exit /b %errorlevel%

package/ops/install.sh

@@ -0,0 +1,4 @@
+#!/usr/bin/env bash
+# Cross-platform launcher (macOS/Linux). Windows: use install.cmd
+set -euo pipefail
+exec npx --yes @miraland-labs/conduit-bridge@latest ops install "$@"

package/ops/offline.cmd

@@ -0,0 +1,4 @@
+@echo off
+REM Windows launcher. macOS/Linux: use offline.sh
+npx --yes @miraland-labs/conduit-bridge@latest ops offline %*
+if errorlevel 1 exit /b %errorlevel%

package/ops/offline.sh

@@ -0,0 +1,4 @@
+#!/usr/bin/env bash
+# Cross-platform launcher (macOS/Linux). Windows: use offline.cmd
+set -euo pipefail
+exec npx --yes @miraland-labs/conduit-bridge@latest ops offline "$@"

package/ops/online.cmd

@@ -0,0 +1,4 @@
+@echo off
+REM Windows launcher. macOS/Linux: use online.sh
+npx --yes @miraland-labs/conduit-bridge@latest ops online %*
+if errorlevel 1 exit /b %errorlevel%

package/ops/online.sh

@@ -0,0 +1,4 @@
+#!/usr/bin/env bash
+# Cross-platform launcher (macOS/Linux). Windows: use online.cmd
+set -euo pipefail
+exec npx --yes @miraland-labs/conduit-bridge@latest ops online "$@"

package/ops/status.cmd

@@ -0,0 +1,4 @@
+@echo off
+REM Windows launcher. macOS/Linux: use status.sh
+npx --yes @miraland-labs/conduit-bridge@latest ops status %*
+if errorlevel 1 exit /b %errorlevel%

package/ops/status.sh

@@ -0,0 +1,4 @@
+#!/usr/bin/env bash
+# Cross-platform launcher (macOS/Linux). Windows: use status.cmd
+set -euo pipefail
+exec npx --yes @miraland-labs/conduit-bridge@latest ops status "$@"

package/ops/uninstall.cmd

@@ -0,0 +1,4 @@
+@echo off
+REM Windows launcher. macOS/Linux: use uninstall.sh
+npx --yes @miraland-labs/conduit-bridge@latest ops uninstall %*
+if errorlevel 1 exit /b %errorlevel%

package/ops/uninstall.sh

@@ -0,0 +1,4 @@
+#!/usr/bin/env bash
+# Cross-platform launcher (macOS/Linux). Windows: use uninstall.cmd
+set -euo pipefail
+exec npx --yes @miraland-labs/conduit-bridge@latest ops uninstall "$@"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@miraland-labs/conduit-bridge",
-  "version": "0.9.1",
+  "version": "0.9.2",
   "description": "Conduit Bridge CLI — join, connect, disconnect, multi-driver lanes, and run Claude Code / Codex / Cursor / OpenCode / Kiro / Antigravity agents for a Conduit organization",
   "type": "module",
   "bin": {
@@ -8,6 +8,7 @@
   },
   "files": [
     "dist",
+    "ops",
     "README.md"
   ],
   "engines": {