@polderlabs/bizar-omp 0.7.9 → 0.8.0

package/dist/omp/compatibility.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"compatibility.d.ts","sourceRoot":"","sources":["../../src/omp/compatibility.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,aAAa;aAAK,OAAO,EAAE,QAAQ;aAAE,MAAM,EAAE,0CAA0C;CAAW,CAAC;AAChH,eAAO,MAAM,sBAAsB,YAAI,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAU,CAAC;AACrJ,eAAO,MAAM,aAAa,aAAa,CAAC;AAExC,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAG9D;AAED,kEAAkE;AAClE,eAAO,MAAM,4BAA4B,QAGxC,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,6BAA6B,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAItE;AAED,MAAM,WAAW,gBAAgB;IAAG,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAAE;AAC3F,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,gBAAgB,CAUlE;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAKjE;AAED,MAAM,WAAW,YAAY;IAAG,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,sBAAsB,EAAE,OAAO,CAAC;IAAC,gBAAgB,EAAE,OAAO,CAAC;CAAE;AACvI,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,YAAY;;0BA/Cf,QAAQ;yBAAU,0CAA0C;;;;;;EA+CqM"}
+{"version":3,"file":"compatibility.d.ts","sourceRoot":"","sources":["../../src/omp/compatibility.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,aAAa;aAAK,OAAO,EAAE,QAAQ;aAAE,MAAM,EAAE,0CAA0C;CAAW,CAAC;AAChH,eAAO,MAAM,sBAAsB,YAAI,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAU,CAAC;AACzK,eAAO,MAAM,aAAa,aAAa,CAAC;AAExC,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAG9D;AAED,kEAAkE;AAClE,eAAO,MAAM,4BAA4B,QAGxC,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,6BAA6B,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAItE;AAED,MAAM,WAAW,gBAAgB;IAAG,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAAE;AAC3F,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,gBAAgB,CAUlE;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAKjE;AAED,MAAM,WAAW,YAAY;IAAG,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,sBAAsB,EAAE,OAAO,CAAC;IAAC,gBAAgB,EAAE,OAAO,CAAC;CAAE;AACvI,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,YAAY;;0BA/Cf,QAAQ;yBAAU,0CAA0C;;;;;;EA+CqM"}

package/dist/omp/compatibility.js

@@ -1,5 +1,5 @@
-export const SUPPORTED_OMP = { version: "18.4.2", commit: "4620bb8338e0ecace7ea237da9d5088d16068617" };
-export const QUALIFIED_OMP_VERSIONS = ["18.2.4", "18.2.5", "18.2.6", "18.2.7", "18.2.8", "18.2.11", "18.3.0", "18.3.2", "18.4.1", "18.4.2"];
+export const SUPPORTED_OMP = { version: "18.4.8", commit: "717f97f4d22b3d65c4a4eef6a744255d46f4d1a6" };
+export const QUALIFIED_OMP_VERSIONS = ["18.2.4", "18.2.5", "18.2.6", "18.2.7", "18.2.8", "18.2.11", "18.3.0", "18.3.2", "18.4.1", "18.4.2", "18.4.4", "18.4.8"];
 export const SUPPORTED_BUN = ">=1.3.14";
 export function isQualifiedOmpVersion(version) {
     const normalized = version.trim().replace(/^omp\//, "");

package/dist/omp/compatibility.js.map

@@ -1 +1 @@
-{"version":3,"file":"compatibility.js","sourceRoot":"","sources":["../../src/omp/compatibility.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,aAAa,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,0CAA0C,EAAW,CAAC;AAChH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAU,CAAC;AACrJ,MAAM,CAAC,MAAM,aAAa,GAAG,UAAU,CAAC;AAExC,MAAM,UAAU,qBAAqB,CAAC,OAAe;IACnD,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACxD,OAAO,sBAAsB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC;AAC5E,CAAC;AAED,kEAAkE;AAClE,MAAM,CAAC,MAAM,4BAA4B,GAAG,sBAAsB,CAAC,MAAM,CACvE,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,EAChF,sBAAsB,CAAC,CAAC,CAAC,IAAI,OAAO,CACrC,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,6BAA6B,CAAC,OAAe;IAC3D,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACxD,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAC;IACtD,OAAO,aAAa,CAAC,UAAU,EAAE,4BAA4B,CAAC,GAAG,CAAC,CAAC;AACrE,CAAC;AAGD,MAAM,UAAU,iBAAiB,CAAC,MAAc;IAC9C,MAAM,MAAM,GAAqB,EAAE,CAAC;IACpC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACpF,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QACxC,IAAI,CAAC,gCAAgC,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG;YAAE,SAAS;QACxE,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,MAAM,CAAC,SAAS,GAAG,GAAG,CAAC;aAC3C,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC;IACrD,CAAC;IACD,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC;IAClD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,KAAa;IACvD,MAAM,KAAK,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC9F,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;IAAC,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IAC9C,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAAC,MAAM,UAAU,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QAAC,IAAI,UAAU;YAAE,OAAO,UAAU,CAAC;IAAC,CAAC;IACvI,OAAO,CAAC,CAAC;AACX,CAAC;AAGD,MAAM,UAAU,mBAAmB,CAAC,KAAmB,IAAI,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,GAAG,EAAE,aAAa,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,sBAAsB,IAAI,KAAK,CAAC,gBAAgB,EAAE,UAAU,EAAE,oFAAoF,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"compatibility.js","sourceRoot":"","sources":["../../src/omp/compatibility.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,aAAa,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,0CAA0C,EAAW,CAAC;AAChH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAU,CAAC;AACzK,MAAM,CAAC,MAAM,aAAa,GAAG,UAAU,CAAC;AAExC,MAAM,UAAU,qBAAqB,CAAC,OAAe;IACnD,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACxD,OAAO,sBAAsB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC;AAC5E,CAAC;AAED,kEAAkE;AAClE,MAAM,CAAC,MAAM,4BAA4B,GAAG,sBAAsB,CAAC,MAAM,CACvE,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,EAChF,sBAAsB,CAAC,CAAC,CAAC,IAAI,OAAO,CACrC,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,6BAA6B,CAAC,OAAe;IAC3D,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACxD,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAC;IACtD,OAAO,aAAa,CAAC,UAAU,EAAE,4BAA4B,CAAC,GAAG,CAAC,CAAC;AACrE,CAAC;AAGD,MAAM,UAAU,iBAAiB,CAAC,MAAc;IAC9C,MAAM,MAAM,GAAqB,EAAE,CAAC;IACpC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACpF,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QACxC,IAAI,CAAC,gCAAgC,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG;YAAE,SAAS;QACxE,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,MAAM,CAAC,SAAS,GAAG,GAAG,CAAC;aAC3C,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC;IACrD,CAAC;IACD,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC;IAClD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,KAAa;IACvD,MAAM,KAAK,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC9F,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;IAAC,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IAC9C,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAAC,MAAM,UAAU,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QAAC,IAAI,UAAU;YAAE,OAAO,UAAU,CAAC;IAAC,CAAC;IACvI,OAAO,CAAC,CAAC;AACX,CAAC;AAGD,MAAM,UAAU,mBAAmB,CAAC,KAAmB,IAAI,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,GAAG,EAAE,aAAa,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,sBAAsB,IAAI,KAAK,CAAC,gBAAgB,EAAE,UAAU,EAAE,oFAAoF,EAAE,CAAC,CAAC,CAAC"}

package/dist/omp/daemon-service.d.ts

@@ -1,3 +1,4 @@
+import { type OmbSessionInfo } from "./omb-sessions.js";
 export interface DaemonServiceOptions {
     /** Environment that supplies the state dir and the tmux/omp binaries. */
     env?: NodeJS.ProcessEnv;
@@ -18,6 +19,9 @@ export interface DaemonService {
 }
 export declare const DASHBOARD_MAX_BODY_BYTES: number;
 export declare const DASHBOARD_BODY_TIMEOUT_MS = 10000;
+/** A mobile delete is allowed only after one authoritative fresh scan proves
+ * the exact host-owned generation is fully stopped and no longer observable. */
+export declare function isSafeMobileSessionRemoval(session: Pick<OmbSessionInfo, "authorityKnown" | "hosted" | "state" | "attached" | "uncertainLiveness" | "processObserved">): boolean;
 /**
  * Long-running half of the daemon: an authenticated HTTP boundary on
  * 127.0.0.1 plus a scan loop that keeps the on-disk snapshot fresh. Spawned

package/dist/omp/daemon-service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"daemon-service.d.ts","sourceRoot":"","sources":["../../src/omp/daemon-service.ts"],"names":[],"mappings":"AAiCA,MAAM,WAAW,oBAAoB;IACnC,yEAAyE;IACzE,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,2DAA2D;IAC3D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,+CAA+C;IAC/C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iFAAiF;IACjF,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gDAAgD;IAChD,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9B;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACrB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAGD,eAAO,MAAM,wBAAwB,QAAY,CAAC;AAClD,eAAO,MAAM,yBAAyB,QAAS,CAAC;AA+ShD;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,GAAE,oBAAyB,GAAG,aAAa,CAymBpF"}
+{"version":3,"file":"daemon-service.d.ts","sourceRoot":"","sources":["../../src/omp/daemon-service.ts"],"names":[],"mappings":"AAQA,OAAO,EAAyF,KAAK,cAAc,EAAE,MAAM,mBAAmB,CAAC;AA6B/I,MAAM,WAAW,oBAAoB;IACnC,yEAAyE;IACzE,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,2DAA2D;IAC3D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,+CAA+C;IAC/C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iFAAiF;IACjF,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gDAAgD;IAChD,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9B;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACrB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAID,eAAO,MAAM,wBAAwB,QAAY,CAAC;AAClD,eAAO,MAAM,yBAAyB,QAAS,CAAC;AAmBhD;gFACgF;AAChF,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,IAAI,CAAC,cAAc,EAAE,gBAAgB,GAAG,QAAQ,GAAG,OAAO,GAAG,UAAU,GAAG,mBAAmB,GAAG,iBAAiB,CAAC,GAAG,OAAO,CAE/K;AA0WD;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,GAAE,oBAAyB,GAAG,aAAa,CAs4BpF"}

package/dist/omp/daemon-service.js

@@ -1,9 +1,11 @@
 import { createServer } from "node:http";
 import { spawn } from "node:child_process";
+import { fileURLToPath } from "node:url";
 import { deferred } from "./daemon.js";
 import { randomBytes } from "node:crypto";
-import { mkdirSync, statSync } from "node:fs";
-import { resolve } from "node:path";
+import { mkdirSync, realpathSync, statSync } from "node:fs";
+import { readdir } from "node:fs/promises";
+import { basename, isAbsolute, relative, resolve, sep } from "node:path";
 import { listOmbSessions, ombSessionDisplayName, ombSessionJournalPath, readOmbSessionMessages } from "./omb-sessions.js";
 import { ombSessionName } from "./tmux.js";
 import { DAEMON_PROTOCOL_VERSION, DaemonError, daemonStateDir, writeSnapshot } from "./daemon.js";
@@ -11,8 +13,11 @@ import { captureOmbSessionConsole, createOmbSession, deleteOmbSession, forgetOmb
 import { DASHBOARD_PATH, dashboardPageHtml } from "./dashboard-html.js";
 import { OMB_APPROVAL_MODES, OMB_THINKING_LEVELS, loadOmbSettings, saveOmbSettings } from "./omb-settings.js";
 import { startTray, stopTray } from "./tray.js";
+import { acquireMobileSessionLease, listClaimsDetailed } from "../cli/mobile-claim.js";
+import { expandDirectoryPath } from "../cli/directory-selector.js";
 import { deleteCustomOmpProvider, listCustomOmpProviders, OMP_PROVIDER_APIS, saveCustomOmpProvider, } from "./omp-provider-config.js";
 const SCAN_INTERVAL_MS = 5_000;
+const MOBILE_HOST_ENTRY = fileURLToPath(new URL("../../mobile/packages/host/dist/cli/main.js", import.meta.url));
 export const DASHBOARD_MAX_BODY_BYTES = 64 * 1024;
 export const DASHBOARD_BODY_TIMEOUT_MS = 10_000;
 /** One-time dashboard access codes live a short while and are never reused. */
@@ -25,6 +30,86 @@ class DashboardRequestError extends Error {
         this.status = status;
     }
 }
+const MOBILE_PROJECT_ID_TTL_MS = 10 * 60_000;
+const MOBILE_PROJECT_LIMIT = 512;
+const MOBILE_PROJECT_CHOICES_LIMIT = MOBILE_PROJECT_LIMIT * 4;
+const MOBILE_PROJECT_DEPTH = 5;
+const IGNORED_PROJECT_DIRECTORIES = new Set([".git", "node_modules", ".cache", ".turbo", ".next", ".venv", "venv"]);
+/** A mobile delete is allowed only after one authoritative fresh scan proves
+ * the exact host-owned generation is fully stopped and no longer observable. */
+export function isSafeMobileSessionRemoval(session) {
+    return session.authorityKnown && session.hosted && session.state === "stopped" && !session.attached && !session.uncertainLiveness && session.processObserved !== true;
+}
+/** Discover only directories the local OMB Hub already treats as project choices. */
+async function discoverMobileProjectDirectories(cwd, projectsFolder, sessions) {
+    const candidates = new Map();
+    const add = (path, suggestedLabel) => {
+        try {
+            if (!isDirectory(path))
+                return;
+            const canonical = realpathSync(path);
+            if (!candidates.has(canonical))
+                candidates.set(canonical, suggestedLabel ?? "");
+        }
+        catch { /* A project removed after the hub scan is omitted. */ }
+    };
+    const current = (() => { try {
+        return realpathSync(cwd);
+    }
+    catch {
+        return resolve(cwd);
+    } })();
+    add(current);
+    const rootPath = projectsFolder.trim() ? expandDirectoryPath(projectsFolder, cwd) : "";
+    let canonicalRoot = "";
+    if (rootPath) {
+        add(rootPath, "Projects folder");
+        try {
+            canonicalRoot = realpathSync(rootPath);
+        }
+        catch {
+            canonicalRoot = "";
+        }
+        if (canonicalRoot) {
+            const visit = async (directory, depth) => {
+                if (depth >= MOBILE_PROJECT_DEPTH || candidates.size >= MOBILE_PROJECT_LIMIT)
+                    return;
+                let entries;
+                try {
+                    entries = await readdir(directory, { withFileTypes: true });
+                }
+                catch {
+                    return;
+                }
+                for (const entry of entries.sort((a, b) => a.name.localeCompare(b.name))) {
+                    if (!entry.isDirectory() || entry.name.startsWith(".") || IGNORED_PROJECT_DIRECTORIES.has(entry.name))
+                        continue;
+                    const path = resolve(directory, entry.name);
+                    const label = relative(canonicalRoot, path).replaceAll("\\", "/");
+                    add(path, label);
+                    if (candidates.size >= MOBILE_PROJECT_LIMIT)
+                        break;
+                    await visit(path, depth + 1);
+                }
+            };
+            await visit(canonicalRoot, 0);
+        }
+    }
+    for (const session of sessions) {
+        if (session.cwd !== "?")
+            add(session.cwd, session.project);
+        if (candidates.size >= MOBILE_PROJECT_LIMIT)
+            break;
+    }
+    return [...candidates.entries()].slice(0, MOBILE_PROJECT_LIMIT).map(([path, suggested]) => {
+        const currentProject = path === current;
+        const fromRoot = canonicalRoot === "" ? "" : relative(canonicalRoot, path);
+        const insideRoot = canonicalRoot !== "" && (fromRoot === "" || (fromRoot !== ".." && !fromRoot.startsWith(`..${sep}`) && !isAbsolute(fromRoot)));
+        const relativeLabel = insideRoot && path !== canonicalRoot ? relative(canonicalRoot, path).replaceAll("\\", "/") : "";
+        const label = (currentProject ? `${basename(path)} (current)` : relativeLabel || suggested || basename(path)).replace(/[\u0000-\u001f\u007f]/g, "�").slice(0, 120);
+        return { cwd: path, label, current: currentProject };
+    });
+}
 /**
  * Session fields the browser needs. The scan records the pane command, the pid,
  * and the native-session flag for the hub, but none of them reach the page: the
@@ -309,6 +394,18 @@ function dashboardSession(session) {
         displayName: session.displayName ?? ombSessionDisplayName(session),
     };
 }
+function mobileHubSettings(settings) {
+    return {
+        version: settings.version,
+        projectsFolderConfigured: settings.projectsFolder.trim() !== "",
+        agentsScope: settings.agentsScope,
+        sessionFilter: settings.sessionFilter,
+        autoAttachLatest: settings.autoAttachLatest,
+        mouseScrolling: settings.mouseScrolling,
+        showStoppedSessions: settings.showStoppedSessions,
+        trayEnabled: settings.trayEnabled,
+    };
+}
 /**
  * Long-running half of the daemon: an authenticated HTTP boundary on
  * 127.0.0.1 plus a scan loop that keeps the on-disk snapshot fresh. Spawned
@@ -327,6 +424,11 @@ export function startDaemonService(options = {}) {
     let scanInFlight;
     let lastScanAt;
     let lastScanError;
+    let mobileHost;
+    let mobileOutput = "";
+    let mobilePair;
+    let mobileExit;
+    const mobileProjectChoices = new Map();
     const ready = deferred();
     async function scan(force = false) {
         if (scanInFlight) {
@@ -358,25 +460,46 @@ export function startDaemonService(options = {}) {
         }
     }
     async function requireCurrentSession(name, body) {
-        if (!sessions.some(candidate => candidate.name === name))
-            throw new DashboardRequestError(404, "unknown session");
         const generation = typeof body.generation === "string" ? body.generation : "";
         if (!generation)
             throw new DashboardRequestError(400, "generation is required");
         let fresh;
         try {
-            fresh = await listOmbSessions(process.cwd(), env, { includeStopped: true, requireMultiplexer: true });
+            fresh = await listOmbSessions(process.cwd(), env, { includeStopped: true, includeAllStopped: true, requireMultiplexer: true });
         }
         catch {
             throw new DashboardRequestError(503, "session authority is unavailable");
         }
-        const current = fresh.find(candidate => candidate.name === name);
-        if (!current || current.generation !== generation)
+        const matches = fresh.filter(candidate => candidate.name === name);
+        if (matches.length === 0)
+            throw new DashboardRequestError(404, "unknown session");
+        if (matches.length !== 1 || matches[0]?.generation !== generation)
             throw new DashboardRequestError(409, "session changed externally");
+        const current = matches[0];
         if (!current.authorityKnown)
             throw new DashboardRequestError(503, "session authority is unavailable");
         return current;
     }
+    async function withUnclaimedSession(name, generation, action) {
+        let lease;
+        try {
+            lease = acquireMobileSessionLease(name, env);
+        }
+        catch {
+            throw new DashboardRequestError(409, "session ownership is changing");
+        }
+        try {
+            const claims = listClaimsDetailed(env);
+            if (claims.unreadable.length > 0 || claims.claims.some(claim => claim.session === name)) {
+                throw new DashboardRequestError(409, "session is claimed for mobile ownership");
+            }
+            const current = await requireCurrentSession(name, { generation });
+            return await action(current);
+        }
+        finally {
+            lease.release();
+        }
+    }
     // Dashboard access codes: the bearer token must never land in browser
     // history, so `omb dashboard` mints a code, the page trades that code for the
     // token once, and the token is kept in sessionStorage only.
@@ -519,6 +642,286 @@ export function startDaemonService(options = {}) {
             res.end('{"error":"unauthorized"}\n');
             return;
         }
+        if (path === "/mobile/pair" && req.method === "POST") {
+            const reuseMobileHost = Boolean(mobileHost && !mobileExit && mobilePair);
+            if (!mobileHost || mobileHost.exitCode !== null || mobileHost.signalCode !== null) {
+                mobilePair = undefined;
+                mobileOutput = "";
+                mobileExit = undefined;
+                const entry = env.BIZAROMP_MOBILE_ENTRY || MOBILE_HOST_ENTRY;
+                mobileHost = spawn(process.execPath, [entry, "pair", "--json"], {
+                    cwd: process.cwd(),
+                    env: { ...env, BIZAR_OMB_DAEMON_PORT: String(service.port), BIZAR_OMB_DAEMON_TOKEN: token },
+                    stdio: ["pipe", "pipe", "pipe"],
+                });
+                mobileHost.on("error", error => { mobileExit = { code: 1, signal: null }; log(`mobile host failed to start: ${error.message}`); });
+                mobileHost.stdout?.setEncoding("utf8");
+                mobileHost.stderr?.setEncoding("utf8");
+                mobileHost.stdout?.on("data", (chunk) => {
+                    mobileOutput = (mobileOutput + String(chunk)).slice(-64 * 1024);
+                    const start = Math.max(mobileOutput.lastIndexOf("{\n  \"deepLink\""), mobileOutput.lastIndexOf("{\"deepLink\""));
+                    if (start >= 0) {
+                        try {
+                            const prettyEnd = mobileOutput.indexOf("\n}", start);
+                            const lineEnd = mobileOutput.indexOf("\n", start);
+                            const end = prettyEnd >= 0 ? prettyEnd + 2 : lineEnd;
+                            if (end >= 0)
+                                mobilePair = JSON.parse(mobileOutput.slice(start, end));
+                        }
+                        catch { /* wait for complete JSON */ }
+                    }
+                });
+                mobileHost.stderr?.on("data", (chunk) => { log(`mobile host: ${String(chunk).trim().slice(0, 1000)}`); });
+                mobileHost.on("exit", (code, signal) => { mobileExit = { code, signal }; });
+            }
+            else if (reuseMobileHost) {
+                // Every explicit `omb mobile pair` gets a fresh one-time token. The
+                // host renews only its pairing window over this private pipe; restarting
+                // it here would tear down authenticated sockets and re-provision a
+                // Quick Tunnel with a different public hostname.
+                mobilePair = undefined;
+                mobileOutput = "";
+                if (!mobileHost.stdin?.write("pair\n")) {
+                    json(res, 503, { error: "mobile host could not renew its pairing window" });
+                    return;
+                }
+            }
+            const deadline = Date.now() + 60_000;
+            while (!mobilePair && !mobileExit && Date.now() < deadline)
+                await new Promise(resolve => setTimeout(resolve, 50));
+            if (!mobilePair) {
+                json(res, 503, { error: mobileExit ? `mobile host exited (${mobileExit.code ?? mobileExit.signal})` : "mobile pairing startup timed out" });
+                return;
+            }
+            json(res, 200, mobilePair);
+            return;
+        }
+        if (path === "/mobile/status" && req.method === "GET") {
+            json(res, 200, {
+                running: Boolean(mobileHost && !mobileExit),
+                pid: mobileHost?.pid ?? null,
+                hostId: typeof mobilePair?.hostId === "string" ? mobilePair.hostId : null,
+                endpoint: typeof mobilePair?.endpoint === "string" ? mobilePair.endpoint : null,
+                hostKeyFingerprint: typeof mobilePair?.hostKeyFingerprint === "string" ? mobilePair.hostKeyFingerprint : null,
+                pairingExpiresAt: typeof mobilePair?.expiresAt === "number" ? mobilePair.expiresAt : null,
+            });
+            return;
+        }
+        if (path === "/mobile/projects" && req.method === "GET") {
+            let knownSessions;
+            try {
+                knownSessions = await listOmbSessions(process.cwd(), env, { includeStopped: true, includeAllStopped: true, requireMultiplexer: true });
+            }
+            catch {
+                json(res, 503, { authorityKnown: false, reason: "session authority is unavailable", projects: [] });
+                return;
+            }
+            const settings = loadOmbSettings(env);
+            const discovered = await discoverMobileProjectDirectories(process.cwd(), settings.projectsFolder, knownSessions);
+            const now = Date.now();
+            for (const [id, choice] of mobileProjectChoices)
+                if (choice.expiresAt <= now)
+                    mobileProjectChoices.delete(id);
+            const projects = discovered.map(project => {
+                while (mobileProjectChoices.size >= MOBILE_PROJECT_CHOICES_LIMIT) {
+                    const oldest = mobileProjectChoices.keys().next().value;
+                    if (oldest === undefined)
+                        break;
+                    mobileProjectChoices.delete(oldest);
+                }
+                const id = randomBytes(24).toString("base64url");
+                mobileProjectChoices.set(id, { ...project, expiresAt: now + MOBILE_PROJECT_ID_TTL_MS });
+                return { id, label: project.label, current: project.current };
+            });
+            json(res, 200, { authorityKnown: true, projectsFolderConfigured: Boolean(settings.projectsFolder.trim()), projects });
+            return;
+        }
+        if (path === "/mobile/settings" && req.method === "GET") {
+            json(res, 200, mobileHubSettings(loadOmbSettings(env)));
+            return;
+        }
+        if (path === "/mobile/settings" && req.method === "PATCH") {
+            const body = await readBody(req);
+            const version = body.version;
+            const allowedKeys = new Set(["version", "agentsScope", "sessionFilter", "autoAttachLatest", "mouseScrolling", "showStoppedSessions", "trayEnabled"]);
+            const keys = Object.keys(body);
+            if (keys.some(key => !allowedKeys.has(key)) || typeof version !== "number" || !Number.isSafeInteger(version) || version < 0 || keys.length < 2) {
+                json(res, 400, { error: "invalid OMB Hub settings update" });
+                return;
+            }
+            const previous = loadOmbSettings(env);
+            const next = { ...previous };
+            if (body.agentsScope !== undefined) {
+                if (body.agentsScope !== "cwd" && body.agentsScope !== "all") {
+                    json(res, 400, { error: "agentsScope is invalid" });
+                    return;
+                }
+                next.agentsScope = body.agentsScope;
+            }
+            if (body.sessionFilter !== undefined) {
+                if (body.sessionFilter !== "active" && body.sessionFilter !== "stopped" && body.sessionFilter !== "all") {
+                    json(res, 400, { error: "sessionFilter is invalid" });
+                    return;
+                }
+                next.sessionFilter = body.sessionFilter;
+            }
+            for (const key of ["autoAttachLatest", "mouseScrolling", "showStoppedSessions", "trayEnabled"]) {
+                if (body[key] !== undefined && typeof body[key] !== "boolean") {
+                    json(res, 400, { error: `${key} must be a boolean` });
+                    return;
+                }
+                if (typeof body[key] === "boolean")
+                    next[key] = body[key];
+            }
+            if (previous.version !== version) {
+                json(res, 409, { error: "settings changed externally", settings: mobileHubSettings(previous) });
+                return;
+            }
+            let saved;
+            try {
+                saved = saveOmbSettings(next, env);
+            }
+            catch (error) {
+                if (error instanceof Error && error.message === "settings changed externally") {
+                    json(res, 409, { error: "settings changed externally", settings: mobileHubSettings(loadOmbSettings(env)) });
+                    return;
+                }
+                throw error;
+            }
+            if (previous.mouseScrolling !== next.mouseScrolling) {
+                await Promise.all(sessions.filter(session => session.hosted !== false && session.state !== "stopped")
+                    .map(session => setOmbSessionMouse(session.name, next.mouseScrolling, session.cwd === "?" ? process.cwd() : session.cwd, env)));
+            }
+            if (previous.trayEnabled !== next.trayEnabled) {
+                if (next.trayEnabled)
+                    await startTray(env);
+                else
+                    await stopTray(env);
+            }
+            await scan(true);
+            json(res, 200, { ok: true, settings: mobileHubSettings(saved) });
+            return;
+        }
+        if (path === "/mobile/sessions/create" && req.method === "POST") {
+            const body = await readBody(req);
+            const projectId = typeof body.projectId === "string" ? body.projectId : "";
+            const task = typeof body.task === "string" ? body.task.trim() : "";
+            const requestedId = typeof body.sessionId === "string" ? body.sessionId.trim() : "";
+            if (!/^[A-Za-z0-9_-]{32}$/.test(projectId) || ("cwd" in body) || task.length > 20_000 || (body.sessionId !== undefined && (typeof body.sessionId !== "string" || requestedId.length > 120 || !/^[A-Za-z0-9 _.-]*$/.test(requestedId)))) {
+                json(res, 400, { error: "invalid OMB session creation request" });
+                return;
+            }
+            const choice = mobileProjectChoices.get(projectId);
+            mobileProjectChoices.delete(projectId);
+            if (!choice || choice.expiresAt <= Date.now()) {
+                json(res, 409, { error: "project choice expired; refresh the project list" });
+                return;
+            }
+            let currentCwd;
+            try {
+                currentCwd = realpathSync(choice.cwd);
+            }
+            catch {
+                json(res, 409, { error: "selected project is no longer available" });
+                return;
+            }
+            if (currentCwd !== choice.cwd || !isDirectory(currentCwd)) {
+                json(res, 409, { error: "selected project changed; refresh the project list" });
+                return;
+            }
+            const sessionId = requestedId || `mobile-${Date.now().toString(36)}-${randomBytes(5).toString("hex")}`;
+            const sessionName = ombSessionName(currentCwd, sessionId, env.PI_PROFILE);
+            let fresh;
+            try {
+                fresh = await listOmbSessions(process.cwd(), env, { includeStopped: true, includeAllStopped: true, requireMultiplexer: true });
+            }
+            catch {
+                json(res, 503, { error: "session authority is unavailable" });
+                return;
+            }
+            if (fresh.some(session => session.name === sessionName)) {
+                json(res, 409, { error: "a session with that name already exists" });
+                return;
+            }
+            const settings = loadOmbSettings(env);
+            const args = [];
+            if (settings.defaultModel)
+                args.push("--model", settings.defaultModel);
+            if (settings.defaultThinking)
+                args.push("--thinking", settings.defaultThinking);
+            if (settings.defaultApprovalMode)
+                args.push("--approval-mode", settings.defaultApprovalMode);
+            if (task)
+                args.push(task);
+            const created = await createOmbSession(currentCwd, args, env, sessionId);
+            if (created.code !== 0) {
+                json(res, 409, { error: "OMP could not start the OMB session" });
+                return;
+            }
+            await scan(true);
+            json(res, 200, { ok: true });
+            return;
+        }
+        if (path === "/mobile/stop" && req.method === "POST") {
+            if (mobileHost && !mobileExit)
+                mobileHost.kill("SIGTERM");
+            json(res, 200, { ok: true });
+            return;
+        }
+        if (path === "/mobile/sessions/rename" && req.method === "POST") {
+            const body = await readBody(req);
+            const name = typeof body.name === "string" ? body.name : "";
+            const generation = typeof body.generation === "string" ? body.generation : "";
+            const newId = typeof body.newId === "string" ? body.newId.trim() : "";
+            if (!/^[A-Za-z0-9-]{1,64}$/.test(name) || !/^[a-f0-9]{32}$/.test(generation) || !newId || newId.length > 120 || /[\\/\u0000-\u001f\u007f]/.test(newId)) {
+                json(res, 400, { error: "invalid OMB session identity or label" });
+                return;
+            }
+            const outcome = await withUnclaimedSession(name, generation, async (current) => {
+                if (!current.hosted || current.state === "unknown" || current.uncertainLiveness) {
+                    throw new DashboardRequestError(409, "session cannot be renamed in its current state");
+                }
+                const projectCwd = current.cwd === "?" ? process.cwd() : current.cwd;
+                const nextName = ombSessionName(projectCwd, newId, env.PI_PROFILE);
+                const code = await renameOmbSession(name, nextName, projectCwd, env);
+                if (code !== 0)
+                    throw new DashboardRequestError(409, "session could not be renamed");
+                return { ok: true };
+            });
+            await scan(true);
+            json(res, 200, outcome);
+            return;
+        }
+        if (path === "/mobile/sessions/delete" && req.method === "POST") {
+            const body = await readBody(req);
+            const name = typeof body.name === "string" ? body.name : "";
+            const generation = typeof body.generation === "string" ? body.generation : "";
+            if (!/^[A-Za-z0-9-]{1,64}$/.test(name) || !/^[a-f0-9]{32}$/.test(generation)) {
+                json(res, 400, { error: "invalid OMB session identity" });
+                return;
+            }
+            const outcome = await withUnclaimedSession(name, generation, async (current) => {
+                // Mobile removal is destructive.  It is only safe for a fresh,
+                // host-owned row whose multiplexer and process observations prove that
+                // the exact generation is stopped and unattached.  In particular,
+                // hosted rows must not be treated as removable merely because their
+                // liveness is not uncertain: an active hosted OMP session can still be
+                // the one writer for a native session.
+                if (!isSafeMobileSessionRemoval(current)) {
+                    throw new DashboardRequestError(409, "session liveness is not safe to remove");
+                }
+                const projectCwd = current.cwd === "?" ? process.cwd() : current.cwd;
+                const code = current.hosted
+                    ? await deleteOmbSession(name, projectCwd, env)
+                    : forgetOmbSession(name, env);
+                if (code !== 0)
+                    throw new DashboardRequestError(409, "session removal could not be confirmed");
+                return { ok: true };
+            });
+            await scan(true);
+            json(res, 200, outcome);
+            return;
+        }
         if (path === "/dash/code" && req.method === "POST") {
             json(res, 200, { code: mintDashCode(), path: DASHBOARD_PATH, port: service.port, expiresInMs: DASH_CODE_TTL_MS });
             return;
@@ -933,7 +1336,8 @@ export function startDaemonService(options = {}) {
             const name = decodeURIComponent(deleteMatch[1]);
             const body = await readBody(req);
             const current = await requireCurrentSession(name, body);
-            const code = current.hosted === false ? forgetOmbSession(name, env) : await deleteOmbSession(name, process.cwd(), env);
+            const projectCwd = current.cwd === "?" ? process.cwd() : current.cwd;
+            const code = current.hosted === false ? forgetOmbSession(name, env) : await deleteOmbSession(name, projectCwd, env);
             await scan(true);
             json(res, code === 0 ? 200 : 500, { code });
             return;
@@ -964,6 +1368,12 @@ export function startDaemonService(options = {}) {
         close: async () => {
             if (scanTimer)
                 clearInterval(scanTimer);
+            if (mobileHost && !mobileExit) {
+                mobileHost.kill("SIGTERM");
+                await Promise.race([new Promise(resolve => mobileHost?.once("exit", () => resolve())), new Promise(resolve => setTimeout(resolve, 5_000))]);
+                if (!mobileExit)
+                    mobileHost.kill("SIGKILL");
+            }
             // Run every SSE cleanup so poll/keepalive timers drop the response
             // reference immediately — otherwise the timers themselves keep the
             // socket (and therefore server.close()) alive past shutdown.