@questionbase/deskfree 0.4.4 → 0.4.7

package/dist/cli/install.js

@@ -1,13 +1,99 @@
 import { createRequire } from 'node:module';
 import { execSync } from 'child_process';
-import { writeFileSync, chmodSync } from 'fs';
+import { mkdirSync, writeFileSync, chmodSync } from 'fs';
+import { homedir } from 'os';
+import { dirname, join } from 'path';
 
 createRequire(import.meta.url);
 var SERVICE_NAME = "deskfree-agent";
-var SERVICE_FILE = `/etc/systemd/system/${SERVICE_NAME}.service`;
-var ENV_FILE = `/etc/${SERVICE_NAME}.env`;
 var PACKAGE = "@questionbase/deskfree@latest";
-function install(token) {
+var PLIST_LABEL = "com.deskfree.agent";
+function getMacPaths() {
+  const home = homedir();
+  const deskfreeDir = join(home, ".deskfree");
+  return {
+    deskfreeDir,
+    envFile: join(deskfreeDir, ".env"),
+    launcher: join(deskfreeDir, "launcher.sh"),
+    logDir: join(deskfreeDir, "logs"),
+    plist: join(home, "Library", "LaunchAgents", `${PLIST_LABEL}.plist`)
+  };
+}
+function installMac(token) {
+  const paths = getMacPaths();
+  let nodeBinDir;
+  try {
+    const nodePath = execSync("which node", { encoding: "utf8" }).trim();
+    nodeBinDir = dirname(nodePath);
+  } catch {
+    console.error("Error: node not found in PATH");
+    process.exit(1);
+  }
+  mkdirSync(paths.deskfreeDir, { recursive: true });
+  mkdirSync(paths.logDir, { recursive: true });
+  mkdirSync(dirname(paths.plist), { recursive: true });
+  writeFileSync(paths.envFile, `DESKFREE_LAUNCH=${token}
+`, { mode: 384 });
+  chmodSync(paths.envFile, 384);
+  console.log(`Wrote ${paths.envFile}`);
+  const launcher = `#!/bin/bash
+set -euo pipefail
+
+export PATH="${nodeBinDir}:$PATH"
+
+# Update to latest version before starting
+npm install -g ${PACKAGE} 2>/dev/null || true
+
+# Source env
+set -a
+source "${paths.envFile}"
+set +a
+
+exec deskfree-agent start
+`;
+  writeFileSync(paths.launcher, launcher, { mode: 493 });
+  chmodSync(paths.launcher, 493);
+  console.log(`Wrote ${paths.launcher}`);
+  const plist = `<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+  <key>Label</key>
+  <string>${PLIST_LABEL}</string>
+  <key>ProgramArguments</key>
+  <array>
+    <string>${paths.launcher}</string>
+  </array>
+  <key>KeepAlive</key>
+  <true/>
+  <key>RunAtLoad</key>
+  <true/>
+  <key>StandardOutPath</key>
+  <string>${join(paths.logDir, "stdout.log")}</string>
+  <key>StandardErrorPath</key>
+  <string>${join(paths.logDir, "stderr.log")}</string>
+  <key>ThrottleInterval</key>
+  <integer>10</integer>
+</dict>
+</plist>
+`;
+  writeFileSync(paths.plist, plist);
+  console.log(`Wrote ${paths.plist}`);
+  try {
+    execSync(`launchctl bootout gui/$(id -u) ${paths.plist}`, {
+      stdio: "ignore"
+    });
+  } catch {
+  }
+  execSync(`launchctl bootstrap gui/$(id -u) ${paths.plist}`);
+  console.log(`
+Service ${PLIST_LABEL} installed and started.`);
+  console.log(`Check status: launchctl print gui/$(id -u)/${PLIST_LABEL}`);
+  console.log(`Logs: tail -f ${join(paths.logDir, "stdout.log")}`);
+}
+var SYSTEMD_SERVICE_FILE = `/etc/systemd/system/${SERVICE_NAME}.service`;
+var SYSTEMD_ENV_FILE = `/etc/${SERVICE_NAME}.env`;
+function installLinux(token) {
   if (process.getuid?.() !== 0) {
     console.error("Error: install must be run as root (use sudo)");
     process.exit(1);
@@ -19,10 +105,12 @@ function install(token) {
     console.error("Error: npx not found in PATH");
     process.exit(1);
   }
-  writeFileSync(ENV_FILE, `DESKFREE_LAUNCH=${token}
-`, { mode: 384 });
-  chmodSync(ENV_FILE, 384);
-  console.log(`Wrote ${ENV_FILE}`);
+  writeFileSync(SYSTEMD_ENV_FILE, `DESKFREE_LAUNCH=${token}
+`, {
+    mode: 384
+  });
+  chmodSync(SYSTEMD_ENV_FILE, 384);
+  console.log(`Wrote ${SYSTEMD_ENV_FILE}`);
   const unit = `[Unit]
 Description=DeskFree Agent
 After=network-online.target
@@ -30,8 +118,9 @@ Wants=network-online.target
 
 [Service]
 Type=simple
+ExecStartPre=${npxPath} ${PACKAGE} --version
 ExecStart=${npxPath} ${PACKAGE} start
-EnvironmentFile=${ENV_FILE}
+EnvironmentFile=${SYSTEMD_ENV_FILE}
 Environment=NODE_ENV=production
 Restart=always
 RestartSec=10
@@ -39,14 +128,25 @@ RestartSec=10
 [Install]
 WantedBy=multi-user.target
 `;
-  writeFileSync(SERVICE_FILE, unit);
-  console.log(`Wrote ${SERVICE_FILE}`);
+  writeFileSync(SYSTEMD_SERVICE_FILE, unit);
+  console.log(`Wrote ${SYSTEMD_SERVICE_FILE}`);
   execSync("systemctl daemon-reload");
   execSync(`systemctl enable ${SERVICE_NAME}`);
   execSync(`systemctl start ${SERVICE_NAME}`);
-  console.log(`Service ${SERVICE_NAME} installed and started.`);
+  console.log(`
+Service ${SERVICE_NAME} installed and started.`);
   console.log(`Check status: systemctl status ${SERVICE_NAME}`);
 }
+function install(token) {
+  if (process.platform === "darwin") {
+    installMac(token);
+  } else if (process.platform === "linux") {
+    installLinux(token);
+  } else {
+    console.error(`Unsupported platform: ${process.platform}`);
+    process.exit(1);
+  }
+}
 
 export { install };
 //# sourceMappingURL=install.js.map

package/dist/cli/install.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/cli/install.ts"],"names":[],"mappings":";;;;;AAGA,IAAM,YAAA,GAAe,gBAAA;AACrB,IAAM,YAAA,GAAe,uBAAuB,YAAY,CAAA,QAAA,CAAA;AACxD,IAAM,QAAA,GAAW,QAAQ,YAAY,CAAA,IAAA,CAAA;AACrC,IAAM,OAAA,GAAU,+BAAA;AAET,SAAS,QAAQ,KAAA,EAAqB;AAC3C,EAAA,IAAI,OAAA,CAAQ,MAAA,IAAS,KAAM,CAAA,EAAG;AAC5B,IAAA,OAAA,CAAQ,MAAM,+CAA+C,CAAA;AAC7D,IAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,EAChB;AAGA,EAAA,IAAI,OAAA;AACJ,EAAA,IAAI;AACF,IAAA,OAAA,GAAU,SAAS,WAAA,EAAa,EAAE,UAAU,MAAA,EAAQ,EAAE,IAAA,EAAK;AAAA,EAC7D,CAAA,CAAA,MAAQ;AACN,IAAA,OAAA,CAAQ,MAAM,8BAA8B,CAAA;AAC5C,IAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,EAChB;AAGA,EAAA,aAAA,CAAc,QAAA,EAAU,mBAAmB,KAAK;AAAA,CAAA,EAAM,EAAE,IAAA,EAAM,GAAA,EAAO,CAAA;AACrE,EAAA,SAAA,CAAU,UAAU,GAAK,CAAA;AACzB,EAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,MAAA,EAAS,QAAQ,CAAA,CAAE,CAAA;AAG/B,EAAA,MAAM,IAAA,GAAO,CAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA,UAAA,EAOH,OAAO,IAAI,OAAO,CAAA;AAAA,gBAAA,EACZ,QAAQ;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA,CAAA;AASxB,EAAA,aAAA,CAAc,cAAc,IAAI,CAAA;AAChC,EAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,MAAA,EAAS,YAAY,CAAA,CAAE,CAAA;AAGnC,EAAA,QAAA,CAAS,yBAAyB,CAAA;AAClC,EAAA,QAAA,CAAS,CAAA,iBAAA,EAAoB,YAAY,CAAA,CAAE,CAAA;AAC3C,EAAA,QAAA,CAAS,CAAA,gBAAA,EAAmB,YAAY,CAAA,CAAE,CAAA;AAE1C,EAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,QAAA,EAAW,YAAY,CAAA,uBAAA,CAAyB,CAAA;AAC5D,EAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,+BAAA,EAAkC,YAAY,CAAA,CAAE,CAAA;AAC9D","file":"install.js","sourcesContent":["import { execSync } from 'node:child_process';\nimport { chmodSync, writeFileSync } from 'node:fs';\n\nconst SERVICE_NAME = 'deskfree-agent';\nconst SERVICE_FILE = `/etc/systemd/system/${SERVICE_NAME}.service`;\nconst ENV_FILE = `/etc/${SERVICE_NAME}.env`;\nconst PACKAGE = '@questionbase/deskfree@latest';\n\nexport function install(token: string): void {\n  if (process.getuid?.() !== 0) {\n    console.error('Error: install must be run as root (use sudo)');\n    process.exit(1);\n  }\n\n  // Resolve full npx path so systemd doesn't depend on PATH\n  let npxPath: string;\n  try {\n    npxPath = execSync('which npx', { encoding: 'utf8' }).trim();\n  } catch {\n    console.error('Error: npx not found in PATH');\n    process.exit(1);\n  }\n\n  // Write env file with token (chmod 600 — only root can read)\n  writeFileSync(ENV_FILE, `DESKFREE_LAUNCH=${token}\\n`, { mode: 0o600 });\n  chmodSync(ENV_FILE, 0o600);\n  console.log(`Wrote ${ENV_FILE}`);\n\n  // Write systemd unit file\n  const unit = `[Unit]\nDescription=DeskFree Agent\nAfter=network-online.target\nWants=network-online.target\n\n[Service]\nType=simple\nExecStart=${npxPath} ${PACKAGE} start\nEnvironmentFile=${ENV_FILE}\nEnvironment=NODE_ENV=production\nRestart=always\nRestartSec=10\n\n[Install]\nWantedBy=multi-user.target\n`;\n\n  writeFileSync(SERVICE_FILE, unit);\n  console.log(`Wrote ${SERVICE_FILE}`);\n\n  // Enable and start\n  execSync('systemctl daemon-reload');\n  execSync(`systemctl enable ${SERVICE_NAME}`);\n  execSync(`systemctl start ${SERVICE_NAME}`);\n\n  console.log(`Service ${SERVICE_NAME} installed and started.`);\n  console.log(`Check status: systemctl status ${SERVICE_NAME}`);\n}\n"]}
+{"version":3,"sources":["../../src/cli/install.ts"],"names":[],"mappings":";;;;;;;AAKA,IAAM,YAAA,GAAe,gBAAA;AACrB,IAAM,OAAA,GAAU,+BAAA;AAIhB,IAAM,WAAA,GAAc,oBAAA;AAEpB,SAAS,WAAA,GAAc;AACrB,EAAA,MAAM,OAAO,OAAA,EAAQ;AACrB,EAAA,MAAM,WAAA,GAAc,IAAA,CAAK,IAAA,EAAM,WAAW,CAAA;AAC1C,EAAA,OAAO;AAAA,IACL,WAAA;AAAA,IACA,OAAA,EAAS,IAAA,CAAK,WAAA,EAAa,MAAM,CAAA;AAAA,IACjC,QAAA,EAAU,IAAA,CAAK,WAAA,EAAa,aAAa,CAAA;AAAA,IACzC,MAAA,EAAQ,IAAA,CAAK,WAAA,EAAa,MAAM,CAAA;AAAA,IAChC,OAAO,IAAA,CAAK,IAAA,EAAM,WAAW,cAAA,EAAgB,CAAA,EAAG,WAAW,CAAA,MAAA,CAAQ;AAAA,GACrE;AACF;AAEA,SAAS,WAAW,KAAA,EAAqB;AACvC,EAAA,MAAM,QAAQ,WAAA,EAAY;AAG1B,EAAA,IAAI,UAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAM,QAAA,GAAW,SAAS,YAAA,EAAc,EAAE,UAAU,MAAA,EAAQ,EAAE,IAAA,EAAK;AACnE,IAAA,UAAA,GAAa,QAAQ,QAAQ,CAAA;AAAA,EAC/B,CAAA,CAAA,MAAQ;AACN,IAAA,OAAA,CAAQ,MAAM,+BAA+B,CAAA;AAC7C,IAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,EAChB;AAGA,EAAA,SAAA,CAAU,KAAA,CAAM,WAAA,EAAa,EAAE,SAAA,EAAW,MAAM,CAAA;AAChD,EAAA,SAAA,CAAU,KAAA,CAAM,MAAA,EAAQ,EAAE,SAAA,EAAW,MAAM,CAAA;AAC3C,EAAA,SAAA,CAAU,QAAQ,KAAA,CAAM,KAAK,GAAG,EAAE,SAAA,EAAW,MAAM,CAAA;AAGnD,EAAA,aAAA,CAAc,KAAA,CAAM,OAAA,EAAS,CAAA,gBAAA,EAAmB,KAAK;AAAA,CAAA,EAAM,EAAE,IAAA,EAAM,GAAA,EAAO,CAAA;AAC1E,EAAA,SAAA,CAAU,KAAA,CAAM,SAAS,GAAK,CAAA;AAC9B,EAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,MAAA,EAAS,KAAA,CAAM,OAAO,CAAA,CAAE,CAAA;AAGpC,EAAA,MAAM,QAAA,GAAW,CAAA;AAAA;;AAAA,aAAA,EAGJ,UAAU,CAAA;;AAAA;AAAA,eAAA,EAGR,OAAO,CAAA;;AAAA;AAAA;AAAA,QAAA,EAId,MAAM,OAAO,CAAA;AAAA;;AAAA;AAAA,CAAA;AAMrB,EAAA,aAAA,CAAc,MAAM,QAAA,EAAU,QAAA,EAAU,EAAE,IAAA,EAAM,KAAO,CAAA;AACvD,EAAA,SAAA,CAAU,KAAA,CAAM,UAAU,GAAK,CAAA;AAC/B,EAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,MAAA,EAAS,KAAA,CAAM,QAAQ,CAAA,CAAE,CAAA;AAGrC,EAAA,MAAM,KAAA,GAAQ,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA,UAAA,EAKJ,WAAW,CAAA;AAAA;AAAA;AAAA,YAAA,EAGT,MAAM,QAAQ,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,UAAA,EAOhB,IAAA,CAAK,KAAA,CAAM,MAAA,EAAQ,YAAY,CAAC,CAAA;AAAA;AAAA,UAAA,EAEhC,IAAA,CAAK,KAAA,CAAM,MAAA,EAAQ,YAAY,CAAC,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAO1C,EAAA,aAAA,CAAc,KAAA,CAAM,OAAO,KAAK,CAAA;AAChC,EAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,MAAA,EAAS,KAAA,CAAM,KAAK,CAAA,CAAE,CAAA;AAGlC,EAAA,IAAI;AACF,IAAA,QAAA,CAAS,CAAA,+BAAA,EAAkC,KAAA,CAAM,KAAK,CAAA,CAAA,EAAI;AAAA,MACxD,KAAA,EAAO;AAAA,KACR,CAAA;AAAA,EACH,CAAA,CAAA,MAAQ;AAAA,EAER;AAGA,EAAA,QAAA,CAAS,CAAA,iCAAA,EAAoC,KAAA,CAAM,KAAK,CAAA,CAAE,CAAA;AAE1D,EAAA,OAAA,CAAQ,GAAA,CAAI;AAAA,QAAA,EAAa,WAAW,CAAA,uBAAA,CAAyB,CAAA;AAC7D,EAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,2CAAA,EAA8C,WAAW,CAAA,CAAE,CAAA;AACvE,EAAA,OAAA,CAAQ,IAAI,CAAA,cAAA,EAAiB,IAAA,CAAK,MAAM,MAAA,EAAQ,YAAY,CAAC,CAAA,CAAE,CAAA;AACjE;AAIA,IAAM,oBAAA,GAAuB,uBAAuB,YAAY,CAAA,QAAA,CAAA;AAChE,IAAM,gBAAA,GAAmB,QAAQ,YAAY,CAAA,IAAA,CAAA;AAE7C,SAAS,aAAa,KAAA,EAAqB;AACzC,EAAA,IAAI,OAAA,CAAQ,MAAA,IAAS,KAAM,CAAA,EAAG;AAC5B,IAAA,OAAA,CAAQ,MAAM,+CAA+C,CAAA;AAC7D,IAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,EAChB;AAGA,EAAA,IAAI,OAAA;AACJ,EAAA,IAAI;AACF,IAAA,OAAA,GAAU,SAAS,WAAA,EAAa,EAAE,UAAU,MAAA,EAAQ,EAAE,IAAA,EAAK;AAAA,EAC7D,CAAA,CAAA,MAAQ;AACN,IAAA,OAAA,CAAQ,MAAM,8BAA8B,CAAA;AAC5C,IAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,EAChB;AAGA,EAAA,aAAA,CAAc,gBAAA,EAAkB,mBAAmB,KAAK;AAAA,CAAA,EAAM;AAAA,IAC5D,IAAA,EAAM;AAAA,GACP,CAAA;AACD,EAAA,SAAA,CAAU,kBAAkB,GAAK,CAAA;AACjC,EAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,MAAA,EAAS,gBAAgB,CAAA,CAAE,CAAA;AAGvC,EAAA,MAAM,IAAA,GAAO,CAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA,aAAA,EAOA,OAAO,IAAI,OAAO,CAAA;AAAA,UAAA,EACrB,OAAO,IAAI,OAAO,CAAA;AAAA,gBAAA,EACZ,gBAAgB;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA,CAAA;AAShC,EAAA,aAAA,CAAc,sBAAsB,IAAI,CAAA;AACxC,EAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,MAAA,EAAS,oBAAoB,CAAA,CAAE,CAAA;AAG3C,EAAA,QAAA,CAAS,yBAAyB,CAAA;AAClC,EAAA,QAAA,CAAS,CAAA,iBAAA,EAAoB,YAAY,CAAA,CAAE,CAAA;AAC3C,EAAA,QAAA,CAAS,CAAA,gBAAA,EAAmB,YAAY,CAAA,CAAE,CAAA;AAE1C,EAAA,OAAA,CAAQ,GAAA,CAAI;AAAA,QAAA,EAAa,YAAY,CAAA,uBAAA,CAAyB,CAAA;AAC9D,EAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,+BAAA,EAAkC,YAAY,CAAA,CAAE,CAAA;AAC9D;AAIO,SAAS,QAAQ,KAAA,EAAqB;AAC3C,EAAA,IAAI,OAAA,CAAQ,aAAa,QAAA,EAAU;AACjC,IAAA,UAAA,CAAW,KAAK,CAAA;AAAA,EAClB,CAAA,MAAA,IAAW,OAAA,CAAQ,QAAA,KAAa,OAAA,EAAS;AACvC,IAAA,YAAA,CAAa,KAAK,CAAA;AAAA,EACpB,CAAA,MAAO;AACL,IAAA,OAAA,CAAQ,KAAA,CAAM,CAAA,sBAAA,EAAyB,OAAA,CAAQ,QAAQ,CAAA,CAAE,CAAA;AACzD,IAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,EAChB;AACF","file":"install.js","sourcesContent":["import { execSync } from 'node:child_process';\nimport { chmodSync, mkdirSync, writeFileSync } from 'node:fs';\nimport { homedir } from 'node:os';\nimport { dirname, join } from 'node:path';\n\nconst SERVICE_NAME = 'deskfree-agent';\nconst PACKAGE = '@questionbase/deskfree@latest';\n\n// ── macOS (launchd) ─────────────────────────────────────────────────────────\n\nconst PLIST_LABEL = 'com.deskfree.agent';\n\nfunction getMacPaths() {\n  const home = homedir();\n  const deskfreeDir = join(home, '.deskfree');\n  return {\n    deskfreeDir,\n    envFile: join(deskfreeDir, '.env'),\n    launcher: join(deskfreeDir, 'launcher.sh'),\n    logDir: join(deskfreeDir, 'logs'),\n    plist: join(home, 'Library', 'LaunchAgents', `${PLIST_LABEL}.plist`),\n  };\n}\n\nfunction installMac(token: string): void {\n  const paths = getMacPaths();\n\n  // Resolve full path to node's bin directory (survives nvm/fnm across sessions)\n  let nodeBinDir: string;\n  try {\n    const nodePath = execSync('which node', { encoding: 'utf8' }).trim();\n    nodeBinDir = dirname(nodePath);\n  } catch {\n    console.error('Error: node not found in PATH');\n    process.exit(1);\n  }\n\n  // Create directories\n  mkdirSync(paths.deskfreeDir, { recursive: true });\n  mkdirSync(paths.logDir, { recursive: true });\n  mkdirSync(dirname(paths.plist), { recursive: true });\n\n  // Write env file (chmod 600)\n  writeFileSync(paths.envFile, `DESKFREE_LAUNCH=${token}\\n`, { mode: 0o600 });\n  chmodSync(paths.envFile, 0o600);\n  console.log(`Wrote ${paths.envFile}`);\n\n  // Write launcher script\n  const launcher = `#!/bin/bash\nset -euo pipefail\n\nexport PATH=\"${nodeBinDir}:$PATH\"\n\n# Update to latest version before starting\nnpm install -g ${PACKAGE} 2>/dev/null || true\n\n# Source env\nset -a\nsource \"${paths.envFile}\"\nset +a\n\nexec deskfree-agent start\n`;\n\n  writeFileSync(paths.launcher, launcher, { mode: 0o755 });\n  chmodSync(paths.launcher, 0o755);\n  console.log(`Wrote ${paths.launcher}`);\n\n  // Write LaunchAgent plist\n  const plist = `<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<!DOCTYPE plist PUBLIC \"-//Apple//DTD PLIST 1.0//EN\" \"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">\n<plist version=\"1.0\">\n<dict>\n  <key>Label</key>\n  <string>${PLIST_LABEL}</string>\n  <key>ProgramArguments</key>\n  <array>\n    <string>${paths.launcher}</string>\n  </array>\n  <key>KeepAlive</key>\n  <true/>\n  <key>RunAtLoad</key>\n  <true/>\n  <key>StandardOutPath</key>\n  <string>${join(paths.logDir, 'stdout.log')}</string>\n  <key>StandardErrorPath</key>\n  <string>${join(paths.logDir, 'stderr.log')}</string>\n  <key>ThrottleInterval</key>\n  <integer>10</integer>\n</dict>\n</plist>\n`;\n\n  writeFileSync(paths.plist, plist);\n  console.log(`Wrote ${paths.plist}`);\n\n  // Unload if already loaded (ignore errors)\n  try {\n    execSync(`launchctl bootout gui/$(id -u) ${paths.plist}`, {\n      stdio: 'ignore',\n    });\n  } catch {\n    // not loaded — fine\n  }\n\n  // Load the service\n  execSync(`launchctl bootstrap gui/$(id -u) ${paths.plist}`);\n\n  console.log(`\\nService ${PLIST_LABEL} installed and started.`);\n  console.log(`Check status: launchctl print gui/$(id -u)/${PLIST_LABEL}`);\n  console.log(`Logs: tail -f ${join(paths.logDir, 'stdout.log')}`);\n}\n\n// ── Linux (systemd) ─────────────────────────────────────────────────────────\n\nconst SYSTEMD_SERVICE_FILE = `/etc/systemd/system/${SERVICE_NAME}.service`;\nconst SYSTEMD_ENV_FILE = `/etc/${SERVICE_NAME}.env`;\n\nfunction installLinux(token: string): void {\n  if (process.getuid?.() !== 0) {\n    console.error('Error: install must be run as root (use sudo)');\n    process.exit(1);\n  }\n\n  // Resolve full npx path so systemd doesn't depend on PATH\n  let npxPath: string;\n  try {\n    npxPath = execSync('which npx', { encoding: 'utf8' }).trim();\n  } catch {\n    console.error('Error: npx not found in PATH');\n    process.exit(1);\n  }\n\n  // Write env file with token (chmod 600 — only root can read)\n  writeFileSync(SYSTEMD_ENV_FILE, `DESKFREE_LAUNCH=${token}\\n`, {\n    mode: 0o600,\n  });\n  chmodSync(SYSTEMD_ENV_FILE, 0o600);\n  console.log(`Wrote ${SYSTEMD_ENV_FILE}`);\n\n  // Write systemd unit file\n  const unit = `[Unit]\nDescription=DeskFree Agent\nAfter=network-online.target\nWants=network-online.target\n\n[Service]\nType=simple\nExecStartPre=${npxPath} ${PACKAGE} --version\nExecStart=${npxPath} ${PACKAGE} start\nEnvironmentFile=${SYSTEMD_ENV_FILE}\nEnvironment=NODE_ENV=production\nRestart=always\nRestartSec=10\n\n[Install]\nWantedBy=multi-user.target\n`;\n\n  writeFileSync(SYSTEMD_SERVICE_FILE, unit);\n  console.log(`Wrote ${SYSTEMD_SERVICE_FILE}`);\n\n  // Enable and start\n  execSync('systemctl daemon-reload');\n  execSync(`systemctl enable ${SERVICE_NAME}`);\n  execSync(`systemctl start ${SERVICE_NAME}`);\n\n  console.log(`\\nService ${SERVICE_NAME} installed and started.`);\n  console.log(`Check status: systemctl status ${SERVICE_NAME}`);\n}\n\n// ── Public API ──────────────────────────────────────────────────────────────\n\nexport function install(token: string): void {\n  if (process.platform === 'darwin') {\n    installMac(token);\n  } else if (process.platform === 'linux') {\n    installLinux(token);\n  } else {\n    console.error(`Unsupported platform: ${process.platform}`);\n    process.exit(1);\n  }\n}\n"]}

package/dist/cli/uninstall.js

@@ -1,12 +1,36 @@
 import { createRequire } from 'node:module';
 import { execSync } from 'child_process';
 import { existsSync, unlinkSync } from 'fs';
+import { homedir } from 'os';
+import { join } from 'path';
 
 createRequire(import.meta.url);
 var SERVICE_NAME = "deskfree-agent";
-var SERVICE_FILE = `/etc/systemd/system/${SERVICE_NAME}.service`;
-var ENV_FILE = `/etc/${SERVICE_NAME}.env`;
-function uninstall() {
+var PLIST_LABEL = "com.deskfree.agent";
+function uninstallMac() {
+  const home = homedir();
+  const plist = join(home, "Library", "LaunchAgents", `${PLIST_LABEL}.plist`);
+  const deskfreeDir = join(home, ".deskfree");
+  const envFile = join(deskfreeDir, ".env");
+  const launcher = join(deskfreeDir, "launcher.sh");
+  try {
+    execSync(`launchctl bootout gui/$(id -u) ${plist}`, { stdio: "ignore" });
+  } catch {
+  }
+  for (const file of [plist, envFile, launcher]) {
+    if (existsSync(file)) {
+      unlinkSync(file);
+      console.log(`Removed ${file}`);
+    }
+  }
+  console.log(`Service ${PLIST_LABEL} uninstalled.`);
+  console.log(
+    `Note: logs and state in ${deskfreeDir} were preserved. Remove manually if desired.`
+  );
+}
+var SYSTEMD_SERVICE_FILE = `/etc/systemd/system/${SERVICE_NAME}.service`;
+var SYSTEMD_ENV_FILE = `/etc/${SERVICE_NAME}.env`;
+function uninstallLinux() {
   if (process.getuid?.() !== 0) {
     console.error("Error: uninstall must be run as root (use sudo)");
     process.exit(1);
@@ -19,17 +43,27 @@ function uninstall() {
     execSync(`systemctl disable ${SERVICE_NAME}`, { stdio: "ignore" });
   } catch {
   }
-  if (existsSync(SERVICE_FILE)) {
-    unlinkSync(SERVICE_FILE);
-    console.log(`Removed ${SERVICE_FILE}`);
+  if (existsSync(SYSTEMD_SERVICE_FILE)) {
+    unlinkSync(SYSTEMD_SERVICE_FILE);
+    console.log(`Removed ${SYSTEMD_SERVICE_FILE}`);
   }
-  if (existsSync(ENV_FILE)) {
-    unlinkSync(ENV_FILE);
-    console.log(`Removed ${ENV_FILE}`);
+  if (existsSync(SYSTEMD_ENV_FILE)) {
+    unlinkSync(SYSTEMD_ENV_FILE);
+    console.log(`Removed ${SYSTEMD_ENV_FILE}`);
   }
   execSync("systemctl daemon-reload");
   console.log(`Service ${SERVICE_NAME} uninstalled.`);
 }
+function uninstall() {
+  if (process.platform === "darwin") {
+    uninstallMac();
+  } else if (process.platform === "linux") {
+    uninstallLinux();
+  } else {
+    console.error(`Unsupported platform: ${process.platform}`);
+    process.exit(1);
+  }
+}
 
 export { uninstall };
 //# sourceMappingURL=uninstall.js.map

package/dist/cli/uninstall.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/cli/uninstall.ts"],"names":[],"mappings":";;;;;AAGA,IAAM,YAAA,GAAe,gBAAA;AACrB,IAAM,YAAA,GAAe,uBAAuB,YAAY,CAAA,QAAA,CAAA;AACxD,IAAM,QAAA,GAAW,QAAQ,YAAY,CAAA,IAAA,CAAA;AAE9B,SAAS,SAAA,GAAkB;AAChC,EAAA,IAAI,OAAA,CAAQ,MAAA,IAAS,KAAM,CAAA,EAAG;AAC5B,IAAA,OAAA,CAAQ,MAAM,iDAAiD,CAAA;AAC/D,IAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,EAChB;AAGA,EAAA,IAAI;AACF,IAAA,QAAA,CAAS,kBAAkB,YAAY,CAAA,CAAA,EAAI,EAAE,KAAA,EAAO,UAAU,CAAA;AAAA,EAChE,CAAA,CAAA,MAAQ;AAAA,EAER;AACA,EAAA,IAAI;AACF,IAAA,QAAA,CAAS,qBAAqB,YAAY,CAAA,CAAA,EAAI,EAAE,KAAA,EAAO,UAAU,CAAA;AAAA,EACnE,CAAA,CAAA,MAAQ;AAAA,EAER;AAGA,EAAA,IAAI,UAAA,CAAW,YAAY,CAAA,EAAG;AAC5B,IAAA,UAAA,CAAW,YAAY,CAAA;AACvB,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,QAAA,EAAW,YAAY,CAAA,CAAE,CAAA;AAAA,EACvC;AACA,EAAA,IAAI,UAAA,CAAW,QAAQ,CAAA,EAAG;AACxB,IAAA,UAAA,CAAW,QAAQ,CAAA;AACnB,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,QAAA,EAAW,QAAQ,CAAA,CAAE,CAAA;AAAA,EACnC;AAEA,EAAA,QAAA,CAAS,yBAAyB,CAAA;AAClC,EAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,QAAA,EAAW,YAAY,CAAA,aAAA,CAAe,CAAA;AACpD","file":"uninstall.js","sourcesContent":["import { execSync } from 'node:child_process';\nimport { existsSync, unlinkSync } from 'node:fs';\n\nconst SERVICE_NAME = 'deskfree-agent';\nconst SERVICE_FILE = `/etc/systemd/system/${SERVICE_NAME}.service`;\nconst ENV_FILE = `/etc/${SERVICE_NAME}.env`;\n\nexport function uninstall(): void {\n  if (process.getuid?.() !== 0) {\n    console.error('Error: uninstall must be run as root (use sudo)');\n    process.exit(1);\n  }\n\n  // Stop and disable (ignore errors if not running/enabled)\n  try {\n    execSync(`systemctl stop ${SERVICE_NAME}`, { stdio: 'ignore' });\n  } catch {\n    // not running — fine\n  }\n  try {\n    execSync(`systemctl disable ${SERVICE_NAME}`, { stdio: 'ignore' });\n  } catch {\n    // not enabled — fine\n  }\n\n  // Remove files\n  if (existsSync(SERVICE_FILE)) {\n    unlinkSync(SERVICE_FILE);\n    console.log(`Removed ${SERVICE_FILE}`);\n  }\n  if (existsSync(ENV_FILE)) {\n    unlinkSync(ENV_FILE);\n    console.log(`Removed ${ENV_FILE}`);\n  }\n\n  execSync('systemctl daemon-reload');\n  console.log(`Service ${SERVICE_NAME} uninstalled.`);\n}\n"]}
+{"version":3,"sources":["../../src/cli/uninstall.ts"],"names":[],"mappings":";;;;;;;AAKA,IAAM,YAAA,GAAe,gBAAA;AAIrB,IAAM,WAAA,GAAc,oBAAA;AAEpB,SAAS,YAAA,GAAqB;AAC5B,EAAA,MAAM,OAAO,OAAA,EAAQ;AACrB,EAAA,MAAM,QAAQ,IAAA,CAAK,IAAA,EAAM,WAAW,cAAA,EAAgB,CAAA,EAAG,WAAW,CAAA,MAAA,CAAQ,CAAA;AAC1E,EAAA,MAAM,WAAA,GAAc,IAAA,CAAK,IAAA,EAAM,WAAW,CAAA;AAC1C,EAAA,MAAM,OAAA,GAAU,IAAA,CAAK,WAAA,EAAa,MAAM,CAAA;AACxC,EAAA,MAAM,QAAA,GAAW,IAAA,CAAK,WAAA,EAAa,aAAa,CAAA;AAGhD,EAAA,IAAI;AACF,IAAA,QAAA,CAAS,kCAAkC,KAAK,CAAA,CAAA,EAAI,EAAE,KAAA,EAAO,UAAU,CAAA;AAAA,EACzE,CAAA,CAAA,MAAQ;AAAA,EAER;AAGA,EAAA,KAAA,MAAW,IAAA,IAAQ,CAAC,KAAA,EAAO,OAAA,EAAS,QAAQ,CAAA,EAAG;AAC7C,IAAA,IAAI,UAAA,CAAW,IAAI,CAAA,EAAG;AACpB,MAAA,UAAA,CAAW,IAAI,CAAA;AACf,MAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,QAAA,EAAW,IAAI,CAAA,CAAE,CAAA;AAAA,IAC/B;AAAA,EACF;AAEA,EAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,QAAA,EAAW,WAAW,CAAA,aAAA,CAAe,CAAA;AACjD,EAAA,OAAA,CAAQ,GAAA;AAAA,IACN,2BAA2B,WAAW,CAAA,4CAAA;AAAA,GACxC;AACF;AAIA,IAAM,oBAAA,GAAuB,uBAAuB,YAAY,CAAA,QAAA,CAAA;AAChE,IAAM,gBAAA,GAAmB,QAAQ,YAAY,CAAA,IAAA,CAAA;AAE7C,SAAS,cAAA,GAAuB;AAC9B,EAAA,IAAI,OAAA,CAAQ,MAAA,IAAS,KAAM,CAAA,EAAG;AAC5B,IAAA,OAAA,CAAQ,MAAM,iDAAiD,CAAA;AAC/D,IAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,EAChB;AAGA,EAAA,IAAI;AACF,IAAA,QAAA,CAAS,kBAAkB,YAAY,CAAA,CAAA,EAAI,EAAE,KAAA,EAAO,UAAU,CAAA;AAAA,EAChE,CAAA,CAAA,MAAQ;AAAA,EAER;AACA,EAAA,IAAI;AACF,IAAA,QAAA,CAAS,qBAAqB,YAAY,CAAA,CAAA,EAAI,EAAE,KAAA,EAAO,UAAU,CAAA;AAAA,EACnE,CAAA,CAAA,MAAQ;AAAA,EAER;AAGA,EAAA,IAAI,UAAA,CAAW,oBAAoB,CAAA,EAAG;AACpC,IAAA,UAAA,CAAW,oBAAoB,CAAA;AAC/B,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,QAAA,EAAW,oBAAoB,CAAA,CAAE,CAAA;AAAA,EAC/C;AACA,EAAA,IAAI,UAAA,CAAW,gBAAgB,CAAA,EAAG;AAChC,IAAA,UAAA,CAAW,gBAAgB,CAAA;AAC3B,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,QAAA,EAAW,gBAAgB,CAAA,CAAE,CAAA;AAAA,EAC3C;AAEA,EAAA,QAAA,CAAS,yBAAyB,CAAA;AAClC,EAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,QAAA,EAAW,YAAY,CAAA,aAAA,CAAe,CAAA;AACpD;AAIO,SAAS,SAAA,GAAkB;AAChC,EAAA,IAAI,OAAA,CAAQ,aAAa,QAAA,EAAU;AACjC,IAAA,YAAA,EAAa;AAAA,EACf,CAAA,MAAA,IAAW,OAAA,CAAQ,QAAA,KAAa,OAAA,EAAS;AACvC,IAAA,cAAA,EAAe;AAAA,EACjB,CAAA,MAAO;AACL,IAAA,OAAA,CAAQ,KAAA,CAAM,CAAA,sBAAA,EAAyB,OAAA,CAAQ,QAAQ,CAAA,CAAE,CAAA;AACzD,IAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,EAChB;AACF","file":"uninstall.js","sourcesContent":["import { execSync } from 'node:child_process';\nimport { existsSync, unlinkSync } from 'node:fs';\nimport { homedir } from 'node:os';\nimport { join } from 'node:path';\n\nconst SERVICE_NAME = 'deskfree-agent';\n\n// ── macOS (launchd) ─────────────────────────────────────────────────────────\n\nconst PLIST_LABEL = 'com.deskfree.agent';\n\nfunction uninstallMac(): void {\n  const home = homedir();\n  const plist = join(home, 'Library', 'LaunchAgents', `${PLIST_LABEL}.plist`);\n  const deskfreeDir = join(home, '.deskfree');\n  const envFile = join(deskfreeDir, '.env');\n  const launcher = join(deskfreeDir, 'launcher.sh');\n\n  // Unload (ignore errors if not loaded)\n  try {\n    execSync(`launchctl bootout gui/$(id -u) ${plist}`, { stdio: 'ignore' });\n  } catch {\n    // not loaded — fine\n  }\n\n  // Remove files\n  for (const file of [plist, envFile, launcher]) {\n    if (existsSync(file)) {\n      unlinkSync(file);\n      console.log(`Removed ${file}`);\n    }\n  }\n\n  console.log(`Service ${PLIST_LABEL} uninstalled.`);\n  console.log(\n    `Note: logs and state in ${deskfreeDir} were preserved. Remove manually if desired.`,\n  );\n}\n\n// ── Linux (systemd) ─────────────────────────────────────────────────────────\n\nconst SYSTEMD_SERVICE_FILE = `/etc/systemd/system/${SERVICE_NAME}.service`;\nconst SYSTEMD_ENV_FILE = `/etc/${SERVICE_NAME}.env`;\n\nfunction uninstallLinux(): void {\n  if (process.getuid?.() !== 0) {\n    console.error('Error: uninstall must be run as root (use sudo)');\n    process.exit(1);\n  }\n\n  // Stop and disable (ignore errors if not running/enabled)\n  try {\n    execSync(`systemctl stop ${SERVICE_NAME}`, { stdio: 'ignore' });\n  } catch {\n    // not running — fine\n  }\n  try {\n    execSync(`systemctl disable ${SERVICE_NAME}`, { stdio: 'ignore' });\n  } catch {\n    // not enabled — fine\n  }\n\n  // Remove files\n  if (existsSync(SYSTEMD_SERVICE_FILE)) {\n    unlinkSync(SYSTEMD_SERVICE_FILE);\n    console.log(`Removed ${SYSTEMD_SERVICE_FILE}`);\n  }\n  if (existsSync(SYSTEMD_ENV_FILE)) {\n    unlinkSync(SYSTEMD_ENV_FILE);\n    console.log(`Removed ${SYSTEMD_ENV_FILE}`);\n  }\n\n  execSync('systemctl daemon-reload');\n  console.log(`Service ${SERVICE_NAME} uninstalled.`);\n}\n\n// ── Public API ──────────────────────────────────────────────────────────────\n\nexport function uninstall(): void {\n  if (process.platform === 'darwin') {\n    uninstallMac();\n  } else if (process.platform === 'linux') {\n    uninstallLinux();\n  } else {\n    console.error(`Unsupported platform: ${process.platform}`);\n    process.exit(1);\n  }\n}\n"]}

package/dist/index.js

@@ -1,7 +1,7 @@
 import { createRequire } from 'node:module';
 import { query, tool, createSdkMcpServer } from '@anthropic-ai/claude-agent-sdk';
 import { createRequire as createRequire$1 } from 'module';
-import { existsSync, mkdirSync, writeFileSync, readFileSync, readdirSync, unlinkSync, createWriteStream } from 'fs';
+import { existsSync, readFileSync, mkdirSync, writeFileSync, readdirSync, unlinkSync, createWriteStream, appendFileSync, statSync } from 'fs';
 import { join, dirname, extname } from 'path';
 import { execFileSync, execFile } from 'child_process';
 import { z } from 'zod';
@@ -10174,6 +10174,8 @@ var SHARED_TOOLS = {
     })
   },
   PROPOSE: {
+    name: "deskfree_propose",
+    description: "Propose a plan for human approval. Nothing is created until the human reviews and approves in a modal. Put all details in the instructions field using simple markdown (bold, lists, inline code). Do NOT use markdown headers (#) \u2014 use **bold text** instead for section labels.",
     parameters: Type.Object({
       context: Type.Optional(
         Type.String({
@@ -10289,7 +10291,9 @@ var WORKER_TOOLS = {
     })
   },
   COMPLETE_TASK: SHARED_TOOLS.COMPLETE_TASK,
-  SEND_MESSAGE: SHARED_TOOLS.SEND_MESSAGE};
+  SEND_MESSAGE: SHARED_TOOLS.SEND_MESSAGE,
+  PROPOSE: SHARED_TOOLS.PROPOSE
+};
 var MAX_FULL_MESSAGES = 15;
 function trimTaskContext(result) {
   const trimmed = {
@@ -10606,6 +10610,41 @@ function createWorkerTools(client, options) {
         return errorResult(err);
       }
     }),
+    createTool(WORKER_TOOLS.PROPOSE, async (params) => {
+      try {
+        const context = validateStringParam(params, "context", false);
+        const taskId = validateStringParam(params, "taskId", false);
+        const rawTasks = params.tasks;
+        if (!Array.isArray(rawTasks) || rawTasks.length === 0) {
+          throw new Error("tasks must be a non-empty array of task objects");
+        }
+        const tasks = rawTasks;
+        for (let i = 0; i < tasks.length; i++) {
+          const task = tasks[i];
+          if (!task || typeof task !== "object") {
+            throw new Error(`tasks[${i}] must be an object`);
+          }
+          if (!task.title || typeof task.title !== "string" || task.title.trim() === "") {
+            throw new Error(`tasks[${i}].title must be a non-empty string`);
+          }
+        }
+        await client.proposePlan({
+          context,
+          tasks,
+          taskId
+        });
+        return {
+          content: [
+            {
+              type: "text",
+              text: `Proposal created with ${tasks.length} task(s)`
+            }
+          ]
+        };
+      } catch (err) {
+        return errorResult(err);
+      }
+    }),
     createTool(WORKER_TOOLS.COMPLETE_TASK, async (params) => {
       try {
         const taskId = validateStringParam(params, "taskId", true);
@@ -10649,7 +10688,10 @@ You are the orchestrator. Your job: turn human intent into approved tasks, then
 **Match the human's energy.** Short message \u2192 short reply. Casual tone \u2192 casual response. Don't over-explain, don't lecture, don't pad responses.
 
 You do NOT claim tasks, complete tasks, or do work directly \u2014 you have no access to deskfree_start_task or deskfree_complete_task. Use \`deskfree_dispatch_worker\` to dispatch a worker for each approved task.
-- When a human writes in a task thread, decide: does it need bot action? If yes \u2192 reopen and dispatch a worker. If it's just confirmation or deferred \u2014 leave it for now.
+- When a human writes in a task thread, decide:
+  - **Continuation of the same task?** \u2192 reopen and dispatch a worker.
+  - **New/different work request?** \u2192 propose it as a new task (don't reopen the old one or do the work yourself).
+  - **Just confirmation or deferred?** \u2192 leave it for now.
 - Estimate token cost per task \u2014 consider files to read, reasoning, output.`;
 var DESKFREE_WORKER_DIRECTIVE = `## DeskFree Worker
 You are a worker sub-agent. Your first message contains pre-loaded context \u2014 use it directly.
@@ -11283,6 +11325,14 @@ function validateApiUrl(value) {
 
 // src/agents/orchestrator.ts
 var MAX_ORCHESTRATOR_TURNS = 20;
+var ORCHESTRATOR_ALLOWED_TOOLS = [
+  "mcp__deskfree-orchestrator__*",
+  "Read",
+  "Glob",
+  "Grep",
+  "WebSearch",
+  "WebFetch"
+];
 var DISALLOWED_BUILTIN_TOOLS = [
   "TodoWrite",
   "AskUserQuestion",
@@ -11299,8 +11349,6 @@ function runOrchestrator(opts) {
   return query({
     prompt,
     options: {
-      debug: true,
-      debugFile: "/dev/stderr",
       stderr: (data) => {
         process.stderr.write(`[orchestrator-sdk] ${data}
 `);
@@ -11318,18 +11366,7 @@ function runOrchestrator(opts) {
         "deskfree-orchestrator": orchestratorServer
       },
       tools: [],
-      allowedTools: [
-        "mcp__deskfree-orchestrator__*",
-        "Read",
-        "Write",
-        "Edit",
-        "Bash",
-        "Glob",
-        "Grep",
-        "WebSearch",
-        "WebFetch",
-        "NotebookEdit"
-      ],
+      allowedTools: ORCHESTRATOR_ALLOWED_TOOLS,
       disallowedTools: DISALLOWED_BUILTIN_TOOLS
     }
   });
@@ -11350,18 +11387,7 @@ function runHeartbeat(opts) {
         "deskfree-orchestrator": orchestratorServer
       },
       tools: [],
-      allowedTools: [
-        "mcp__deskfree-orchestrator__*",
-        "Read",
-        "Write",
-        "Edit",
-        "Bash",
-        "Glob",
-        "Grep",
-        "WebSearch",
-        "WebFetch",
-        "NotebookEdit"
-      ],
+      allowedTools: ORCHESTRATOR_ALLOWED_TOOLS,
       disallowedTools: DISALLOWED_BUILTIN_TOOLS
     }
   });
@@ -11523,6 +11549,72 @@ function getHealthState() {
     uptimeSeconds: Math.floor((Date.now() - startTime) / 1e3)
   };
 }
+var LEVELS = {
+  debug: 0,
+  info: 1,
+  warn: 2,
+  error: 3
+};
+var MAX_LOG_FILE_BYTES = 5 * 1024 * 1024;
+var ROTATION_CHECK_INTERVAL = 500;
+var logFilePath = null;
+var writesSinceCheck = 0;
+function enableFileLogging(filePath) {
+  mkdirSync(dirname(filePath), { recursive: true });
+  logFilePath = filePath;
+}
+function getLogFilePath() {
+  return logFilePath;
+}
+function rotateIfNeeded() {
+  if (!logFilePath) return;
+  try {
+    const stat = statSync(logFilePath);
+    if (stat.size <= MAX_LOG_FILE_BYTES) return;
+    const content = readFileSync(logFilePath, "utf8");
+    const half = Math.floor(content.length / 2);
+    const newlineIdx = content.indexOf("\n", half);
+    const trimmed = newlineIdx >= 0 ? content.slice(newlineIdx + 1) : content.slice(half);
+    writeFileSync(logFilePath, trimmed);
+  } catch {
+  }
+}
+function createLogger(component, minLevel = "info") {
+  const minLevelNum = LEVELS[minLevel];
+  function log(level, message, fields) {
+    if (LEVELS[level] < minLevelNum) return;
+    const entry = {
+      ts: (/* @__PURE__ */ new Date()).toISOString(),
+      level,
+      component,
+      msg: message,
+      ...fields
+    };
+    const line = JSON.stringify(entry);
+    if (level === "error" || level === "warn") {
+      process.stderr.write(line + "\n");
+    } else {
+      process.stdout.write(line + "\n");
+    }
+    if (logFilePath) {
+      try {
+        appendFileSync(logFilePath, line + "\n");
+        if (++writesSinceCheck >= ROTATION_CHECK_INTERVAL) {
+          writesSinceCheck = 0;
+          rotateIfNeeded();
+        }
+      } catch {
+      }
+    }
+  }
+  return {
+    debug: (msg, fields) => log("debug", msg, fields),
+    info: (msg, fields) => log("info", msg, fields),
+    warn: (msg, fields) => log("warn", msg, fields),
+    error: (msg, fields) => log("error", msg, fields)
+  };
+}
+var logger = createLogger("runtime");
 
 // src/gateway/polling.ts
 var deliveredMessageIds = /* @__PURE__ */ new Set();
@@ -11899,6 +11991,49 @@ async function runWebSocketConnection(opts) {
           cleanup();
           ws.close(1e3, "reload");
           process.kill(process.pid, "SIGTERM");
+        } else if (msg.action === "logs") {
+          const MAX_RESPONSE_BYTES = 12e4;
+          const lineCount = msg.lines ?? 200;
+          try {
+            const logFile = getLogFilePath();
+            if (!logFile) {
+              ws.send(
+                JSON.stringify({
+                  action: "logsResponse",
+                  lines: [],
+                  error: "File logging not enabled"
+                })
+              );
+            } else {
+              const content = readFileSync(logFile, "utf8");
+              const allLines = content.split("\n").filter(Boolean);
+              let tail = allLines.slice(-lineCount);
+              while (tail.length > 1) {
+                const payload = JSON.stringify({
+                  action: "logsResponse",
+                  lines: tail
+                });
+                if (Buffer.byteLength(payload) <= MAX_RESPONSE_BYTES) break;
+                tail = tail.slice(Math.ceil(tail.length * 0.25));
+              }
+              ws.send(
+                JSON.stringify({
+                  action: "logsResponse",
+                  lines: tail
+                })
+              );
+            }
+          } catch (err) {
+            const errMsg = err instanceof Error ? err.message : String(err);
+            log.warn(`Failed to read logs: ${errMsg}`);
+            ws.send(
+              JSON.stringify({
+                action: "logsResponse",
+                lines: [],
+                error: errMsg
+              })
+            );
+          }
         }
       } catch (err) {
         const message = err instanceof Error ? err.message : String(err);
@@ -12464,21 +12599,35 @@ function scheduleDailyCycle(label, run, hour, timezone, signal, log) {
 }
 function msUntilNextLocalHour(hour, timezone) {
   const now = Date.now();
-  const fmt = new Intl.DateTimeFormat("en-US", {
+  const hourFmt = new Intl.DateTimeFormat("en-US", {
     timeZone: timezone,
     hour: "numeric",
     hour12: false
   });
+  const detailFmt = new Intl.DateTimeFormat("en-US", {
+    timeZone: timezone,
+    minute: "numeric",
+    second: "numeric"
+  });
   for (let offsetMs = 6e4; offsetMs <= 25 * 36e5; offsetMs += 36e5) {
     const candidateMs = now + offsetMs;
-    const parts = fmt.formatToParts(new Date(candidateMs));
+    const parts = hourFmt.formatToParts(new Date(candidateMs));
     const hourPart = parts.find((p) => p.type === "hour");
     const candidateHour = parseInt(hourPart?.value ?? "-1", 10);
     if (candidateHour === hour) {
-      const candidate = new Date(candidateMs);
-      candidate.setUTCMinutes(0, 0, 0);
-      const snappedMs = candidate.getTime();
-      return Math.max(snappedMs - now, 6e4);
+      const detailParts = detailFmt.formatToParts(new Date(candidateMs));
+      const localMinute = parseInt(
+        detailParts.find((p) => p.type === "minute")?.value ?? "0",
+        10
+      );
+      const localSecond = parseInt(
+        detailParts.find((p) => p.type === "second")?.value ?? "0",
+        10
+      );
+      const snappedMs = candidateMs - localMinute * 6e4 - localSecond * 1e3;
+      if (snappedMs > now + 6e4) {
+        return snappedMs - now;
+      }
     }
   }
   return 24 * 36e5;
@@ -12566,40 +12715,6 @@ async function loadToolModules(tools, toolsDir, log) {
   }
   return allTools;
 }
-
-// src/util/logger.ts
-var LEVELS = {
-  debug: 0,
-  info: 1,
-  warn: 2,
-  error: 3
-};
-function createLogger(component, minLevel = "info") {
-  const minLevelNum = LEVELS[minLevel];
-  function log(level, message, fields) {
-    if (LEVELS[level] < minLevelNum) return;
-    const entry = {
-      ts: (/* @__PURE__ */ new Date()).toISOString(),
-      level,
-      component,
-      msg: message,
-      ...fields
-    };
-    const line = JSON.stringify(entry);
-    if (level === "error" || level === "warn") {
-      process.stderr.write(line + "\n");
-    } else {
-      process.stdout.write(line + "\n");
-    }
-  }
-  return {
-    debug: (msg, fields) => log("debug", msg, fields),
-    info: (msg, fields) => log("info", msg, fields),
-    warn: (msg, fields) => log("warn", msg, fields),
-    error: (msg, fields) => log("error", msg, fields)
-  };
-}
-var logger = createLogger("runtime");
 var MAX_MESSAGE_CONTENT_LENGTH = 32 * 1024;
 var MAX_ATTACHMENT_SIZE = 10 * 1024 * 1024;
 var MAX_TOTAL_DOWNLOAD_SIZE = 50 * 1024 * 1024;
@@ -13047,8 +13162,6 @@ function runWorker(opts) {
   return query({
     prompt,
     options: {
-      debug: true,
-      debugFile: "/dev/stderr",
       stderr: (data) => {
         process.stderr.write(`[worker-sdk] ${data}
 `);
@@ -13426,7 +13539,7 @@ ${userMessage}
             try {
               await client.reportUsage({
                 taskId,
-                estimatedCost: result.total_cost_usd
+                estimatedCost: Math.round(result.total_cost_usd * 1e6) / 1e6
               });
             } catch {
               log.warn(`Failed to report usage for task ${taskId}`);
@@ -13632,6 +13745,9 @@ async function startAgent(opts) {
   }
   mkdirSync(config.stateDir, { recursive: true });
   mkdirSync(config.toolsDir, { recursive: true });
+  const logFile = join(config.stateDir, "runtime.log");
+  enableFileLogging(logFile);
+  log.info(`File logging enabled: ${logFile}`);
   if (config.tools.length > 0) {
     log.info(`Installing ${config.tools.length} tool package(s)...`);
     await installTools(config.tools, config.toolsDir, log);