@questionbase/deskfree 0.6.1 → 0.6.3

package/dist/cli/install.d.ts

@@ -1,3 +1,3 @@
-declare function install(token: string, name: string): void;
+declare function install(botId: string, name: string, stage?: string): void;
 
 export { install };

package/dist/cli/install.js

@@ -34,7 +34,7 @@ function getLinuxPaths(name) {
   };
 }
 var PACKAGE = "@questionbase/deskfree@latest";
-function installMac(token, name) {
+function installMac(botId, name, stage) {
   const paths = getMacPaths(name);
   const plistLabel = getPlistLabel(name);
   let nodeBinDir;
@@ -50,13 +50,9 @@ function installMac(token, name) {
   mkdirSync(paths.deskfreeDir, { recursive: true });
   mkdirSync(paths.logDir, { recursive: true });
   mkdirSync(dirname(paths.plist), { recursive: true });
-  writeFileSync(
-    paths.envFile,
-    `DESKFREE_LAUNCH=${token}
-DESKFREE_INSTANCE_NAME=${name}
-`,
-    { mode: 384 }
-  );
+  const envLines = [`BOT=${botId}`, `DESKFREE_INSTANCE_NAME=${name}`];
+  if (stage) envLines.push(`STAGE=${stage}`);
+  writeFileSync(paths.envFile, envLines.join("\n") + "\n", { mode: 384 });
   chmodSync(paths.envFile, 384);
   console.log(`Wrote ${paths.envFile}`);
   const launcher = `#!/bin/bash
@@ -114,7 +110,7 @@ Service ${plistLabel} installed and started.`);
   console.log(`Check status: launchctl print gui/$(id -u)/${plistLabel}`);
   console.log(`Logs: tail -f ${join(paths.logDir, "stdout.log")}`);
 }
-function installLinux(token, name) {
+function installLinux(botId, name, stage) {
   if (process.getuid?.() !== 0) {
     console.error("Error: install must be run as root (use sudo)");
     process.exit(1);
@@ -145,13 +141,9 @@ function installLinux(token, name) {
     `chown ${systemUser}:${systemUser} ${paths.stateDir} ${paths.logDir}`
   );
   console.log(`Created ${paths.stateDir} and ${paths.logDir}`);
-  writeFileSync(
-    paths.envFile,
-    `DESKFREE_LAUNCH=${token}
-DESKFREE_INSTANCE_NAME=${name}
-`,
-    { mode: 384 }
-  );
+  const envLines = [`BOT=${botId}`, `DESKFREE_INSTANCE_NAME=${name}`];
+  if (stage) envLines.push(`STAGE=${stage}`);
+  writeFileSync(paths.envFile, envLines.join("\n") + "\n", { mode: 384 });
   chmodSync(paths.envFile, 384);
   console.log(`Wrote ${paths.envFile}`);
   const unit = `[Unit]
@@ -189,11 +181,11 @@ Service ${serviceName} installed and started.`);
   console.log(`Check status: systemctl status ${serviceName}`);
   console.log(`Logs: tail -f ${paths.logDir}/stdout.log`);
 }
-function install(token, name) {
+function install(botId, name, stage) {
   if (process.platform === "darwin") {
-    installMac(token, name);
+    installMac(botId, name, stage);
   } else if (process.platform === "linux") {
-    installLinux(token, name);
+    installLinux(botId, name, stage);
   } else {
     console.error(`Unsupported platform: ${process.platform}`);
     process.exit(1);

package/dist/cli/install.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/cli/paths.ts","../../src/cli/install.ts"],"names":["join"],"mappings":";;;;;;;AASO,SAAS,cAAc,IAAA,EAAsB;AAClD,EAAA,OAAO,sBAAsB,IAAI,CAAA,CAAA;AACnC;AAEO,SAAS,eAAe,IAAA,EAAsB;AACnD,EAAA,OAAO,YAAY,IAAI,CAAA,CAAA;AACzB;AAEO,SAAS,YAAY,IAAA,EAAc;AACxC,EAAA,MAAM,OAAO,OAAA,EAAQ;AACrB,EAAA,MAAM,WAAA,GAAc,IAAA,CAAK,IAAA,EAAM,WAAA,EAAa,IAAI,CAAA;AAChD,EAAA,MAAM,UAAA,GAAa,cAAc,IAAI,CAAA;AACrC,EAAA,OAAO;AAAA,IACL,WAAA;AAAA,IACA,OAAA,EAAS,IAAA,CAAK,WAAA,EAAa,MAAM,CAAA;AAAA,IACjC,QAAA,EAAU,IAAA,CAAK,WAAA,EAAa,aAAa,CAAA;AAAA,IACzC,MAAA,EAAQ,IAAA,CAAK,WAAA,EAAa,MAAM,CAAA;AAAA,IAChC,OAAO,IAAA,CAAK,IAAA,EAAM,WAAW,cAAA,EAAgB,CAAA,EAAG,UAAU,CAAA,MAAA,CAAQ;AAAA,GACpE;AACF;AAEO,SAAS,cAAc,IAAA,EAAc;AAC1C,EAAA,MAAM,WAAA,GAAc,eAAe,IAAI,CAAA;AACvC,EAAA,OAAO;AAAA,IACL,WAAA;AAAA,IACA,WAAA,EAAa,uBAAuB,WAAW,CAAA,QAAA,CAAA;AAAA,IAC/C,OAAA,EAAS,QAAQ,WAAW,CAAA,IAAA,CAAA;AAAA,IAC5B,QAAA,EAAU,YAAY,WAAW,CAAA,CAAA;AAAA,IACjC,MAAA,EAAQ,YAAY,WAAW,CAAA;AAAA,GACjC;AACF;AC7BA,IAAM,OAAA,GAAU,+BAAA;AAIhB,SAAS,UAAA,CAAW,OAAe,IAAA,EAAoB;AACrD,EAAA,MAAM,KAAA,GAAQ,YAAY,IAAI,CAAA;AAC9B,EAAA,MAAM,UAAA,GAAa,cAAc,IAAI,CAAA;AAGrC,EAAA,IAAI,UAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAM,QAAA,GAAW,SAAS,YAAA,EAAc,EAAE,UAAU,MAAA,EAAQ,EAAE,IAAA,EAAK;AACnE,IAAA,UAAA,GAAa,QAAQ,QAAQ,CAAA;AAAA,EAC/B,CAAA,CAAA,MAAQ;AACN,IAAA,OAAA,CAAQ,MAAM,+BAA+B,CAAA;AAC7C,IAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,EAChB;AAIA,EAAA,MAAM,aAAA,GAAA,CAAiB,OAAA,CAAQ,GAAA,CAAI,MAAM,KAAK,EAAA,EAC3C,KAAA,CAAM,GAAG,CAAA,CACT,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,IAAK,MAAM,UAAU,CAAA;AACtC,EAAA,MAAM,WAAW,CAAC,UAAA,EAAY,GAAG,aAAa,CAAA,CAAE,KAAK,GAAG,CAAA;AAGxD,EAAA,SAAA,CAAU,KAAA,CAAM,WAAA,EAAa,EAAE,SAAA,EAAW,MAAM,CAAA;AAChD,EAAA,SAAA,CAAU,KAAA,CAAM,MAAA,EAAQ,EAAE,SAAA,EAAW,MAAM,CAAA;AAC3C,EAAA,SAAA,CAAU,QAAQ,KAAA,CAAM,KAAK,GAAG,EAAE,SAAA,EAAW,MAAM,CAAA;AAGnD,EAAA,aAAA;AAAA,IACE,KAAA,CAAM,OAAA;AAAA,IACN,mBAAmB,KAAK;AAAA,uBAAA,EAA4B,IAAI;AAAA,CAAA;AAAA,IACxD,EAAE,MAAM,GAAA;AAAM,GAChB;AACA,EAAA,SAAA,CAAU,KAAA,CAAM,SAAS,GAAK,CAAA;AAC9B,EAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,MAAA,EAAS,KAAA,CAAM,OAAO,CAAA,CAAE,CAAA;AAGpC,EAAA,MAAM,QAAA,GAAW,CAAA;AAAA;;AAAA,aAAA,EAGJ,QAAQ,CAAA;;AAAA;AAAA,eAAA,EAGN,OAAO,CAAA;;AAAA;AAAA;AAAA,QAAA,EAId,MAAM,OAAO,CAAA;AAAA;;AAAA;AAAA,CAAA;AAMrB,EAAA,aAAA,CAAc,MAAM,QAAA,EAAU,QAAA,EAAU,EAAE,IAAA,EAAM,KAAO,CAAA;AACvD,EAAA,SAAA,CAAU,KAAA,CAAM,UAAU,GAAK,CAAA;AAC/B,EAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,MAAA,EAAS,KAAA,CAAM,QAAQ,CAAA,CAAE,CAAA;AAGrC,EAAA,MAAM,KAAA,GAAQ,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA,UAAA,EAKJ,UAAU,CAAA;AAAA;AAAA;AAAA,YAAA,EAGR,MAAM,QAAQ,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,UAAA,EAOhBA,IAAAA,CAAK,KAAA,CAAM,MAAA,EAAQ,YAAY,CAAC,CAAA;AAAA;AAAA,UAAA,EAEhCA,IAAAA,CAAK,KAAA,CAAM,MAAA,EAAQ,YAAY,CAAC,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAO1C,EAAA,aAAA,CAAc,KAAA,CAAM,OAAO,KAAK,CAAA;AAChC,EAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,MAAA,EAAS,KAAA,CAAM,KAAK,CAAA,CAAE,CAAA;AAGlC,EAAA,IAAI;AACF,IAAA,QAAA,CAAS,CAAA,+BAAA,EAAkC,KAAA,CAAM,KAAK,CAAA,CAAA,EAAI;AAAA,MACxD,KAAA,EAAO;AAAA,KACR,CAAA;AAAA,EACH,CAAA,CAAA,MAAQ;AAAA,EAER;AAGA,EAAA,QAAA,CAAS,CAAA,iCAAA,EAAoC,KAAA,CAAM,KAAK,CAAA,CAAE,CAAA;AAE1D,EAAA,OAAA,CAAQ,GAAA,CAAI;AAAA,QAAA,EAAa,UAAU,CAAA,uBAAA,CAAyB,CAAA;AAC5D,EAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,2CAAA,EAA8C,UAAU,CAAA,CAAE,CAAA;AACtE,EAAA,OAAA,CAAQ,IAAI,CAAA,cAAA,EAAiBA,IAAAA,CAAK,MAAM,MAAA,EAAQ,YAAY,CAAC,CAAA,CAAE,CAAA;AACjE;AAIA,SAAS,YAAA,CAAa,OAAe,IAAA,EAAoB;AACvD,EAAA,IAAI,OAAA,CAAQ,MAAA,IAAS,KAAM,CAAA,EAAG;AAC5B,IAAA,OAAA,CAAQ,MAAM,+CAA+C,CAAA;AAC7D,IAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,EAChB;AAEA,EAAA,MAAM,KAAA,GAAQ,cAAc,IAAI,CAAA;AAChC,EAAA,MAAM,WAAA,GAAc,eAAe,IAAI,CAAA;AACvC,EAAA,MAAM,UAAA,GAAa,WAAA;AAGnB,EAAA,IAAI,OAAA;AACJ,EAAA,IAAI,UAAA;AACJ,EAAA,IAAI;AACF,IAAA,OAAA,GAAU,SAAS,WAAA,EAAa,EAAE,UAAU,MAAA,EAAQ,EAAE,IAAA,EAAK;AAC3D,IAAA,UAAA,GAAa,QAAQ,OAAO,CAAA;AAAA,EAC9B,CAAA,CAAA,MAAQ;AACN,IAAA,OAAA,CAAQ,MAAM,8BAA8B,CAAA;AAC5C,IAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,EAChB;AAGA,EAAA,IAAI;AACF,IAAA,QAAA,CAAS,MAAM,UAAU,CAAA,CAAA,EAAI,EAAE,KAAA,EAAO,UAAU,CAAA;AAAA,EAClD,CAAA,CAAA,MAAQ;AACN,IAAA,QAAA;AAAA,MACE,+DAA+D,UAAU,CAAA;AAAA,KAC3E;AACA,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,qBAAA,EAAwB,UAAU,CAAA,CAAE,CAAA;AAAA,EAClD;AAGA,EAAA,SAAA,CAAU,KAAA,CAAM,QAAA,EAAU,EAAE,SAAA,EAAW,MAAM,CAAA;AAC7C,EAAA,SAAA,CAAU,KAAA,CAAM,MAAA,EAAQ,EAAE,SAAA,EAAW,MAAM,CAAA;AAC3C,EAAA,QAAA;AAAA,IACE,CAAA,MAAA,EAAS,UAAU,CAAA,CAAA,EAAI,UAAU,IAAI,KAAA,CAAM,QAAQ,CAAA,CAAA,EAAI,KAAA,CAAM,MAAM,CAAA;AAAA,GACrE;AACA,EAAA,OAAA,CAAQ,IAAI,CAAA,QAAA,EAAW,KAAA,CAAM,QAAQ,CAAA,KAAA,EAAQ,KAAA,CAAM,MAAM,CAAA,CAAE,CAAA;AAG3D,EAAA,aAAA;AAAA,IACE,KAAA,CAAM,OAAA;AAAA,IACN,mBAAmB,KAAK;AAAA,uBAAA,EAA4B,IAAI;AAAA,CAAA;AAAA,IACxD,EAAE,MAAM,GAAA;AAAM,GAChB;AACA,EAAA,SAAA,CAAU,KAAA,CAAM,SAAS,GAAK,CAAA;AAC9B,EAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,MAAA,EAAS,KAAA,CAAM,OAAO,CAAA,CAAE,CAAA;AAGpC,EAAA,MAAM,IAAA,GAAO,CAAA;AAAA,4BAAA,EACe,IAAI,CAAA;AAAA;AAAA;;AAAA;AAAA;AAAA,KAAA,EAM3B,UAAU;AAAA,MAAA,EACT,UAAU;AAAA,iBAAA,EACC,MAAM,QAAQ;AAAA,iBAAA,EACd,UAAU,CAAA;AAAA,cAAA,EACb,OAAO,eAAe,OAAO;AAAA,UAAA,EACjC,UAAU,CAAA;AAAA,gBAAA,EACJ,MAAM,OAAO;AAAA;AAAA,+BAAA,EAEE,MAAM,QAAQ;AAAA,+BAAA,EACd,MAAM,QAAQ,CAAA;AAAA;AAAA;AAAA,sBAAA,EAGvB,MAAM,MAAM,CAAA;AAAA,qBAAA,EACb,MAAM,MAAM,CAAA;;AAAA;AAAA;AAAA,CAAA;AAMjC,EAAA,aAAA,CAAc,KAAA,CAAM,aAAa,IAAI,CAAA;AACrC,EAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,MAAA,EAAS,KAAA,CAAM,WAAW,CAAA,CAAE,CAAA;AAGxC,EAAA,QAAA,CAAS,yBAAyB,CAAA;AAClC,EAAA,QAAA,CAAS,CAAA,iBAAA,EAAoB,WAAW,CAAA,CAAE,CAAA;AAC1C,EAAA,QAAA,CAAS,CAAA,gBAAA,EAAmB,WAAW,CAAA,CAAE,CAAA;AAEzC,EAAA,OAAA,CAAQ,GAAA,CAAI;AAAA,QAAA,EAAa,WAAW,CAAA,uBAAA,CAAyB,CAAA;AAC7D,EAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,+BAAA,EAAkC,WAAW,CAAA,CAAE,CAAA;AAC3D,EAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,cAAA,EAAiB,KAAA,CAAM,MAAM,CAAA,WAAA,CAAa,CAAA;AACxD;AAIO,SAAS,OAAA,CAAQ,OAAe,IAAA,EAAoB;AACzD,EAAA,IAAI,OAAA,CAAQ,aAAa,QAAA,EAAU;AACjC,IAAA,UAAA,CAAW,OAAO,IAAI,CAAA;AAAA,EACxB,CAAA,MAAA,IAAW,OAAA,CAAQ,QAAA,KAAa,OAAA,EAAS;AACvC,IAAA,YAAA,CAAa,OAAO,IAAI,CAAA;AAAA,EAC1B,CAAA,MAAO;AACL,IAAA,OAAA,CAAQ,KAAA,CAAM,CAAA,sBAAA,EAAyB,OAAA,CAAQ,QAAQ,CAAA,CAAE,CAAA;AACzD,IAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,EAChB;AACF","file":"install.js","sourcesContent":["import { homedir } from 'node:os';\nimport { join } from 'node:path';\n\nconst DEFAULT_NAME = 'main';\n\nexport function resolveName(name?: string): string {\n  return name ?? DEFAULT_NAME;\n}\n\nexport function getPlistLabel(name: string): string {\n  return `com.deskfree.agent.${name}`;\n}\n\nexport function getServiceName(name: string): string {\n  return `deskfree-${name}`;\n}\n\nexport function getMacPaths(name: string) {\n  const home = homedir();\n  const deskfreeDir = join(home, '.deskfree', name);\n  const plistLabel = getPlistLabel(name);\n  return {\n    deskfreeDir,\n    envFile: join(deskfreeDir, '.env'),\n    launcher: join(deskfreeDir, 'deskfree.sh'),\n    logDir: join(deskfreeDir, 'logs'),\n    plist: join(home, 'Library', 'LaunchAgents', `${plistLabel}.plist`),\n  };\n}\n\nexport function getLinuxPaths(name: string) {\n  const serviceName = getServiceName(name);\n  return {\n    serviceName,\n    serviceFile: `/etc/systemd/system/${serviceName}.service`,\n    envFile: `/etc/${serviceName}.env`,\n    stateDir: `/var/lib/${serviceName}`,\n    logDir: `/var/log/${serviceName}`,\n  };\n}\n\n/** Parse --name <value> from argv, returning [resolvedName, remainingArgs]. */\nexport function parseName(args: string[]): [string, string[]] {\n  const idx = args.indexOf('--name');\n  if (idx === -1) return [DEFAULT_NAME, args];\n  const name = args[idx + 1];\n  if (!name || name.startsWith('-')) {\n    console.error('Error: --name requires a value (e.g. --name kasper)');\n    process.exit(1);\n  }\n  if (!/^[a-z0-9-]+$/i.test(name)) {\n    console.error(\n      'Error: --name must contain only letters, numbers, and hyphens',\n    );\n    process.exit(1);\n  }\n  const remaining = [...args.slice(0, idx), ...args.slice(idx + 2)];\n  return [name, remaining];\n}\n","import {\n  getLinuxPaths,\n  getMacPaths,\n  getPlistLabel,\n  getServiceName,\n} from './paths.js';\nimport { execSync } from 'node:child_process';\nimport { chmodSync, mkdirSync, writeFileSync } from 'node:fs';\nimport { dirname, join } from 'node:path';\n\nconst PACKAGE = '@questionbase/deskfree@latest';\n\n// ── macOS (launchd) ─────────────────────────────────────────────────────────\n\nfunction installMac(token: string, name: string): void {\n  const paths = getMacPaths(name);\n  const plistLabel = getPlistLabel(name);\n\n  // Resolve full path to node's bin directory (survives nvm/fnm across sessions)\n  let nodeBinDir: string;\n  try {\n    const nodePath = execSync('which node', { encoding: 'utf8' }).trim();\n    nodeBinDir = dirname(nodePath);\n  } catch {\n    console.error('Error: node not found in PATH');\n    process.exit(1);\n  }\n\n  // Capture extra PATH dirs from the user's shell so the launcher can find\n  // tools like `claude` that live outside the node bin directory.\n  const extraPathDirs = (process.env['PATH'] ?? '')\n    .split(':')\n    .filter((d) => d && d !== nodeBinDir);\n  const fullPath = [nodeBinDir, ...extraPathDirs].join(':');\n\n  // Create directories\n  mkdirSync(paths.deskfreeDir, { recursive: true });\n  mkdirSync(paths.logDir, { recursive: true });\n  mkdirSync(dirname(paths.plist), { recursive: true });\n\n  // Write env file (chmod 600)\n  writeFileSync(\n    paths.envFile,\n    `DESKFREE_LAUNCH=${token}\\nDESKFREE_INSTANCE_NAME=${name}\\n`,\n    { mode: 0o600 },\n  );\n  chmodSync(paths.envFile, 0o600);\n  console.log(`Wrote ${paths.envFile}`);\n\n  // Write launcher script\n  const launcher = `#!/bin/bash\nset -euo pipefail\n\nexport PATH=\"${fullPath}\"\n\n# Update to latest version before starting\nnpm install -g ${PACKAGE} 2>/dev/null || true\n\n# Source env\nset -a\nsource \"${paths.envFile}\"\nset +a\n\nexec deskfree start\n`;\n\n  writeFileSync(paths.launcher, launcher, { mode: 0o755 });\n  chmodSync(paths.launcher, 0o755);\n  console.log(`Wrote ${paths.launcher}`);\n\n  // Write LaunchAgent plist\n  const plist = `<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<!DOCTYPE plist PUBLIC \"-//Apple//DTD PLIST 1.0//EN\" \"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">\n<plist version=\"1.0\">\n<dict>\n  <key>Label</key>\n  <string>${plistLabel}</string>\n  <key>ProgramArguments</key>\n  <array>\n    <string>${paths.launcher}</string>\n  </array>\n  <key>KeepAlive</key>\n  <true/>\n  <key>RunAtLoad</key>\n  <true/>\n  <key>StandardOutPath</key>\n  <string>${join(paths.logDir, 'stdout.log')}</string>\n  <key>StandardErrorPath</key>\n  <string>${join(paths.logDir, 'stderr.log')}</string>\n  <key>ThrottleInterval</key>\n  <integer>10</integer>\n</dict>\n</plist>\n`;\n\n  writeFileSync(paths.plist, plist);\n  console.log(`Wrote ${paths.plist}`);\n\n  // Unload if already loaded (ignore errors)\n  try {\n    execSync(`launchctl bootout gui/$(id -u) ${paths.plist}`, {\n      stdio: 'ignore',\n    });\n  } catch {\n    // not loaded — fine\n  }\n\n  // Load the service\n  execSync(`launchctl bootstrap gui/$(id -u) ${paths.plist}`);\n\n  console.log(`\\nService ${plistLabel} installed and started.`);\n  console.log(`Check status: launchctl print gui/$(id -u)/${plistLabel}`);\n  console.log(`Logs: tail -f ${join(paths.logDir, 'stdout.log')}`);\n}\n\n// ── Linux (systemd) ─────────────────────────────────────────────────────────\n\nfunction installLinux(token: string, name: string): void {\n  if (process.getuid?.() !== 0) {\n    console.error('Error: install must be run as root (use sudo)');\n    process.exit(1);\n  }\n\n  const paths = getLinuxPaths(name);\n  const serviceName = getServiceName(name);\n  const systemUser = serviceName;\n\n  // Resolve full npm/node bin dir so systemd doesn't depend on PATH\n  let npmPath: string;\n  let nodeBinDir: string;\n  try {\n    npmPath = execSync('which npm', { encoding: 'utf8' }).trim();\n    nodeBinDir = dirname(npmPath);\n  } catch {\n    console.error('Error: npm not found in PATH');\n    process.exit(1);\n  }\n\n  // Create dedicated system user (no login shell, no home dir)\n  try {\n    execSync(`id ${systemUser}`, { stdio: 'ignore' });\n  } catch {\n    execSync(\n      `useradd --system --no-create-home --shell /usr/sbin/nologin ${systemUser}`,\n    );\n    console.log(`Created system user: ${systemUser}`);\n  }\n\n  // Create state and log directories owned by the service user\n  mkdirSync(paths.stateDir, { recursive: true });\n  mkdirSync(paths.logDir, { recursive: true });\n  execSync(\n    `chown ${systemUser}:${systemUser} ${paths.stateDir} ${paths.logDir}`,\n  );\n  console.log(`Created ${paths.stateDir} and ${paths.logDir}`);\n\n  // Write env file with token (chmod 600 — only root can read)\n  writeFileSync(\n    paths.envFile,\n    `DESKFREE_LAUNCH=${token}\\nDESKFREE_INSTANCE_NAME=${name}\\n`,\n    { mode: 0o600 },\n  );\n  chmodSync(paths.envFile, 0o600);\n  console.log(`Wrote ${paths.envFile}`);\n\n  // Write systemd unit file\n  const unit = `[Unit]\nDescription=DeskFree Agent (${name})\nAfter=network-online.target\nWants=network-online.target\n\n[Service]\nType=simple\nUser=${systemUser}\nGroup=${systemUser}\nWorkingDirectory=${paths.stateDir}\nEnvironment=PATH=${nodeBinDir}:/usr/local/bin:/usr/bin:/bin\nExecStartPre=+${npmPath} install -g ${PACKAGE}\nExecStart=${nodeBinDir}/deskfree start\nEnvironmentFile=${paths.envFile}\nEnvironment=NODE_ENV=production\nEnvironment=DESKFREE_STATE_DIR=${paths.stateDir}\nEnvironment=DESKFREE_TOOLS_DIR=${paths.stateDir}/tools\nRestart=always\nRestartSec=10\nStandardOutput=append:${paths.logDir}/stdout.log\nStandardError=append:${paths.logDir}/stderr.log\n\n[Install]\nWantedBy=multi-user.target\n`;\n\n  writeFileSync(paths.serviceFile, unit);\n  console.log(`Wrote ${paths.serviceFile}`);\n\n  // Enable and start\n  execSync('systemctl daemon-reload');\n  execSync(`systemctl enable ${serviceName}`);\n  execSync(`systemctl start ${serviceName}`);\n\n  console.log(`\\nService ${serviceName} installed and started.`);\n  console.log(`Check status: systemctl status ${serviceName}`);\n  console.log(`Logs: tail -f ${paths.logDir}/stdout.log`);\n}\n\n// ── Public API ──────────────────────────────────────────────────────────────\n\nexport function install(token: string, name: string): void {\n  if (process.platform === 'darwin') {\n    installMac(token, name);\n  } else if (process.platform === 'linux') {\n    installLinux(token, name);\n  } else {\n    console.error(`Unsupported platform: ${process.platform}`);\n    process.exit(1);\n  }\n}\n"]}
+{"version":3,"sources":["../../src/cli/paths.ts","../../src/cli/install.ts"],"names":["join"],"mappings":";;;;;;;AASO,SAAS,cAAc,IAAA,EAAsB;AAClD,EAAA,OAAO,sBAAsB,IAAI,CAAA,CAAA;AACnC;AAEO,SAAS,eAAe,IAAA,EAAsB;AACnD,EAAA,OAAO,YAAY,IAAI,CAAA,CAAA;AACzB;AAEO,SAAS,YAAY,IAAA,EAAc;AACxC,EAAA,MAAM,OAAO,OAAA,EAAQ;AACrB,EAAA,MAAM,WAAA,GAAc,IAAA,CAAK,IAAA,EAAM,WAAA,EAAa,IAAI,CAAA;AAChD,EAAA,MAAM,UAAA,GAAa,cAAc,IAAI,CAAA;AACrC,EAAA,OAAO;AAAA,IACL,WAAA;AAAA,IACA,OAAA,EAAS,IAAA,CAAK,WAAA,EAAa,MAAM,CAAA;AAAA,IACjC,QAAA,EAAU,IAAA,CAAK,WAAA,EAAa,aAAa,CAAA;AAAA,IACzC,MAAA,EAAQ,IAAA,CAAK,WAAA,EAAa,MAAM,CAAA;AAAA,IAChC,OAAO,IAAA,CAAK,IAAA,EAAM,WAAW,cAAA,EAAgB,CAAA,EAAG,UAAU,CAAA,MAAA,CAAQ;AAAA,GACpE;AACF;AAEO,SAAS,cAAc,IAAA,EAAc;AAC1C,EAAA,MAAM,WAAA,GAAc,eAAe,IAAI,CAAA;AACvC,EAAA,OAAO;AAAA,IACL,WAAA;AAAA,IACA,WAAA,EAAa,uBAAuB,WAAW,CAAA,QAAA,CAAA;AAAA,IAC/C,OAAA,EAAS,QAAQ,WAAW,CAAA,IAAA,CAAA;AAAA,IAC5B,QAAA,EAAU,YAAY,WAAW,CAAA,CAAA;AAAA,IACjC,MAAA,EAAQ,YAAY,WAAW,CAAA;AAAA,GACjC;AACF;AC7BA,IAAM,OAAA,GAAU,+BAAA;AAIhB,SAAS,UAAA,CAAW,KAAA,EAAe,IAAA,EAAc,KAAA,EAAsB;AACrE,EAAA,MAAM,KAAA,GAAQ,YAAY,IAAI,CAAA;AAC9B,EAAA,MAAM,UAAA,GAAa,cAAc,IAAI,CAAA;AAGrC,EAAA,IAAI,UAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAM,QAAA,GAAW,SAAS,YAAA,EAAc,EAAE,UAAU,MAAA,EAAQ,EAAE,IAAA,EAAK;AACnE,IAAA,UAAA,GAAa,QAAQ,QAAQ,CAAA;AAAA,EAC/B,CAAA,CAAA,MAAQ;AACN,IAAA,OAAA,CAAQ,MAAM,+BAA+B,CAAA;AAC7C,IAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,EAChB;AAIA,EAAA,MAAM,aAAA,GAAA,CAAiB,OAAA,CAAQ,GAAA,CAAI,MAAM,KAAK,EAAA,EAC3C,KAAA,CAAM,GAAG,CAAA,CACT,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,IAAK,MAAM,UAAU,CAAA;AACtC,EAAA,MAAM,WAAW,CAAC,UAAA,EAAY,GAAG,aAAa,CAAA,CAAE,KAAK,GAAG,CAAA;AAGxD,EAAA,SAAA,CAAU,KAAA,CAAM,WAAA,EAAa,EAAE,SAAA,EAAW,MAAM,CAAA;AAChD,EAAA,SAAA,CAAU,KAAA,CAAM,MAAA,EAAQ,EAAE,SAAA,EAAW,MAAM,CAAA;AAC3C,EAAA,SAAA,CAAU,QAAQ,KAAA,CAAM,KAAK,GAAG,EAAE,SAAA,EAAW,MAAM,CAAA;AAGnD,EAAA,MAAM,WAAW,CAAC,CAAA,IAAA,EAAO,KAAK,CAAA,CAAA,EAAI,CAAA,uBAAA,EAA0B,IAAI,CAAA,CAAE,CAAA;AAClE,EAAA,IAAI,KAAA,EAAO,QAAA,CAAS,IAAA,CAAK,CAAA,MAAA,EAAS,KAAK,CAAA,CAAE,CAAA;AACzC,EAAA,aAAA,CAAc,KAAA,CAAM,OAAA,EAAS,QAAA,CAAS,IAAA,CAAK,IAAI,IAAI,IAAA,EAAM,EAAE,IAAA,EAAM,GAAA,EAAO,CAAA;AACxE,EAAA,SAAA,CAAU,KAAA,CAAM,SAAS,GAAK,CAAA;AAC9B,EAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,MAAA,EAAS,KAAA,CAAM,OAAO,CAAA,CAAE,CAAA;AAGpC,EAAA,MAAM,QAAA,GAAW,CAAA;AAAA;;AAAA,aAAA,EAGJ,QAAQ,CAAA;;AAAA;AAAA,eAAA,EAGN,OAAO,CAAA;;AAAA;AAAA;AAAA,QAAA,EAId,MAAM,OAAO,CAAA;AAAA;;AAAA;AAAA,CAAA;AAMrB,EAAA,aAAA,CAAc,MAAM,QAAA,EAAU,QAAA,EAAU,EAAE,IAAA,EAAM,KAAO,CAAA;AACvD,EAAA,SAAA,CAAU,KAAA,CAAM,UAAU,GAAK,CAAA;AAC/B,EAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,MAAA,EAAS,KAAA,CAAM,QAAQ,CAAA,CAAE,CAAA;AAGrC,EAAA,MAAM,KAAA,GAAQ,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA,UAAA,EAKJ,UAAU,CAAA;AAAA;AAAA;AAAA,YAAA,EAGR,MAAM,QAAQ,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,UAAA,EAOhBA,IAAAA,CAAK,KAAA,CAAM,MAAA,EAAQ,YAAY,CAAC,CAAA;AAAA;AAAA,UAAA,EAEhCA,IAAAA,CAAK,KAAA,CAAM,MAAA,EAAQ,YAAY,CAAC,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAO1C,EAAA,aAAA,CAAc,KAAA,CAAM,OAAO,KAAK,CAAA;AAChC,EAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,MAAA,EAAS,KAAA,CAAM,KAAK,CAAA,CAAE,CAAA;AAGlC,EAAA,IAAI;AACF,IAAA,QAAA,CAAS,CAAA,+BAAA,EAAkC,KAAA,CAAM,KAAK,CAAA,CAAA,EAAI;AAAA,MACxD,KAAA,EAAO;AAAA,KACR,CAAA;AAAA,EACH,CAAA,CAAA,MAAQ;AAAA,EAER;AAGA,EAAA,QAAA,CAAS,CAAA,iCAAA,EAAoC,KAAA,CAAM,KAAK,CAAA,CAAE,CAAA;AAE1D,EAAA,OAAA,CAAQ,GAAA,CAAI;AAAA,QAAA,EAAa,UAAU,CAAA,uBAAA,CAAyB,CAAA;AAC5D,EAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,2CAAA,EAA8C,UAAU,CAAA,CAAE,CAAA;AACtE,EAAA,OAAA,CAAQ,IAAI,CAAA,cAAA,EAAiBA,IAAAA,CAAK,MAAM,MAAA,EAAQ,YAAY,CAAC,CAAA,CAAE,CAAA;AACjE;AAIA,SAAS,YAAA,CAAa,KAAA,EAAe,IAAA,EAAc,KAAA,EAAsB;AACvE,EAAA,IAAI,OAAA,CAAQ,MAAA,IAAS,KAAM,CAAA,EAAG;AAC5B,IAAA,OAAA,CAAQ,MAAM,+CAA+C,CAAA;AAC7D,IAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,EAChB;AAEA,EAAA,MAAM,KAAA,GAAQ,cAAc,IAAI,CAAA;AAChC,EAAA,MAAM,WAAA,GAAc,eAAe,IAAI,CAAA;AACvC,EAAA,MAAM,UAAA,GAAa,WAAA;AAGnB,EAAA,IAAI,OAAA;AACJ,EAAA,IAAI,UAAA;AACJ,EAAA,IAAI;AACF,IAAA,OAAA,GAAU,SAAS,WAAA,EAAa,EAAE,UAAU,MAAA,EAAQ,EAAE,IAAA,EAAK;AAC3D,IAAA,UAAA,GAAa,QAAQ,OAAO,CAAA;AAAA,EAC9B,CAAA,CAAA,MAAQ;AACN,IAAA,OAAA,CAAQ,MAAM,8BAA8B,CAAA;AAC5C,IAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,EAChB;AAGA,EAAA,IAAI;AACF,IAAA,QAAA,CAAS,MAAM,UAAU,CAAA,CAAA,EAAI,EAAE,KAAA,EAAO,UAAU,CAAA;AAAA,EAClD,CAAA,CAAA,MAAQ;AACN,IAAA,QAAA;AAAA,MACE,+DAA+D,UAAU,CAAA;AAAA,KAC3E;AACA,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,qBAAA,EAAwB,UAAU,CAAA,CAAE,CAAA;AAAA,EAClD;AAGA,EAAA,SAAA,CAAU,KAAA,CAAM,QAAA,EAAU,EAAE,SAAA,EAAW,MAAM,CAAA;AAC7C,EAAA,SAAA,CAAU,KAAA,CAAM,MAAA,EAAQ,EAAE,SAAA,EAAW,MAAM,CAAA;AAC3C,EAAA,QAAA;AAAA,IACE,CAAA,MAAA,EAAS,UAAU,CAAA,CAAA,EAAI,UAAU,IAAI,KAAA,CAAM,QAAQ,CAAA,CAAA,EAAI,KAAA,CAAM,MAAM,CAAA;AAAA,GACrE;AACA,EAAA,OAAA,CAAQ,IAAI,CAAA,QAAA,EAAW,KAAA,CAAM,QAAQ,CAAA,KAAA,EAAQ,KAAA,CAAM,MAAM,CAAA,CAAE,CAAA;AAG3D,EAAA,MAAM,WAAW,CAAC,CAAA,IAAA,EAAO,KAAK,CAAA,CAAA,EAAI,CAAA,uBAAA,EAA0B,IAAI,CAAA,CAAE,CAAA;AAClE,EAAA,IAAI,KAAA,EAAO,QAAA,CAAS,IAAA,CAAK,CAAA,MAAA,EAAS,KAAK,CAAA,CAAE,CAAA;AACzC,EAAA,aAAA,CAAc,KAAA,CAAM,OAAA,EAAS,QAAA,CAAS,IAAA,CAAK,IAAI,IAAI,IAAA,EAAM,EAAE,IAAA,EAAM,GAAA,EAAO,CAAA;AACxE,EAAA,SAAA,CAAU,KAAA,CAAM,SAAS,GAAK,CAAA;AAC9B,EAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,MAAA,EAAS,KAAA,CAAM,OAAO,CAAA,CAAE,CAAA;AAGpC,EAAA,MAAM,IAAA,GAAO,CAAA;AAAA,4BAAA,EACe,IAAI,CAAA;AAAA;AAAA;;AAAA;AAAA;AAAA,KAAA,EAM3B,UAAU;AAAA,MAAA,EACT,UAAU;AAAA,iBAAA,EACC,MAAM,QAAQ;AAAA,iBAAA,EACd,UAAU,CAAA;AAAA,cAAA,EACb,OAAO,eAAe,OAAO;AAAA,UAAA,EACjC,UAAU,CAAA;AAAA,gBAAA,EACJ,MAAM,OAAO;AAAA;AAAA,+BAAA,EAEE,MAAM,QAAQ;AAAA,+BAAA,EACd,MAAM,QAAQ,CAAA;AAAA;AAAA;AAAA,sBAAA,EAGvB,MAAM,MAAM,CAAA;AAAA,qBAAA,EACb,MAAM,MAAM,CAAA;;AAAA;AAAA;AAAA,CAAA;AAMjC,EAAA,aAAA,CAAc,KAAA,CAAM,aAAa,IAAI,CAAA;AACrC,EAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,MAAA,EAAS,KAAA,CAAM,WAAW,CAAA,CAAE,CAAA;AAGxC,EAAA,QAAA,CAAS,yBAAyB,CAAA;AAClC,EAAA,QAAA,CAAS,CAAA,iBAAA,EAAoB,WAAW,CAAA,CAAE,CAAA;AAC1C,EAAA,QAAA,CAAS,CAAA,gBAAA,EAAmB,WAAW,CAAA,CAAE,CAAA;AAEzC,EAAA,OAAA,CAAQ,GAAA,CAAI;AAAA,QAAA,EAAa,WAAW,CAAA,uBAAA,CAAyB,CAAA;AAC7D,EAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,+BAAA,EAAkC,WAAW,CAAA,CAAE,CAAA;AAC3D,EAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,cAAA,EAAiB,KAAA,CAAM,MAAM,CAAA,WAAA,CAAa,CAAA;AACxD;AAIO,SAAS,OAAA,CAAQ,KAAA,EAAe,IAAA,EAAc,KAAA,EAAsB;AACzE,EAAA,IAAI,OAAA,CAAQ,aAAa,QAAA,EAAU;AACjC,IAAA,UAAA,CAAW,KAAA,EAAO,MAAM,KAAK,CAAA;AAAA,EAC/B,CAAA,MAAA,IAAW,OAAA,CAAQ,QAAA,KAAa,OAAA,EAAS;AACvC,IAAA,YAAA,CAAa,KAAA,EAAO,MAAM,KAAK,CAAA;AAAA,EACjC,CAAA,MAAO;AACL,IAAA,OAAA,CAAQ,KAAA,CAAM,CAAA,sBAAA,EAAyB,OAAA,CAAQ,QAAQ,CAAA,CAAE,CAAA;AACzD,IAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,EAChB;AACF","file":"install.js","sourcesContent":["import { homedir } from 'node:os';\nimport { join } from 'node:path';\n\nconst DEFAULT_NAME = 'main';\n\nexport function resolveName(name?: string): string {\n  return name ?? DEFAULT_NAME;\n}\n\nexport function getPlistLabel(name: string): string {\n  return `com.deskfree.agent.${name}`;\n}\n\nexport function getServiceName(name: string): string {\n  return `deskfree-${name}`;\n}\n\nexport function getMacPaths(name: string) {\n  const home = homedir();\n  const deskfreeDir = join(home, '.deskfree', name);\n  const plistLabel = getPlistLabel(name);\n  return {\n    deskfreeDir,\n    envFile: join(deskfreeDir, '.env'),\n    launcher: join(deskfreeDir, 'deskfree.sh'),\n    logDir: join(deskfreeDir, 'logs'),\n    plist: join(home, 'Library', 'LaunchAgents', `${plistLabel}.plist`),\n  };\n}\n\nexport function getLinuxPaths(name: string) {\n  const serviceName = getServiceName(name);\n  return {\n    serviceName,\n    serviceFile: `/etc/systemd/system/${serviceName}.service`,\n    envFile: `/etc/${serviceName}.env`,\n    stateDir: `/var/lib/${serviceName}`,\n    logDir: `/var/log/${serviceName}`,\n  };\n}\n\n/** Parse --name <value> from argv, returning [resolvedName, remainingArgs]. */\nexport function parseName(args: string[]): [string, string[]] {\n  const idx = args.indexOf('--name');\n  if (idx === -1) return [DEFAULT_NAME, args];\n  const name = args[idx + 1];\n  if (!name || name.startsWith('-')) {\n    console.error('Error: --name requires a value (e.g. --name kasper)');\n    process.exit(1);\n  }\n  if (!/^[a-z0-9-]+$/i.test(name)) {\n    console.error(\n      'Error: --name must contain only letters, numbers, and hyphens',\n    );\n    process.exit(1);\n  }\n  const remaining = [...args.slice(0, idx), ...args.slice(idx + 2)];\n  return [name, remaining];\n}\n","import {\n  getLinuxPaths,\n  getMacPaths,\n  getPlistLabel,\n  getServiceName,\n} from './paths.js';\nimport { execSync } from 'node:child_process';\nimport { chmodSync, mkdirSync, writeFileSync } from 'node:fs';\nimport { dirname, join } from 'node:path';\n\nconst PACKAGE = '@questionbase/deskfree@latest';\n\n// ── macOS (launchd) ─────────────────────────────────────────────────────────\n\nfunction installMac(botId: string, name: string, stage?: string): void {\n  const paths = getMacPaths(name);\n  const plistLabel = getPlistLabel(name);\n\n  // Resolve full path to node's bin directory (survives nvm/fnm across sessions)\n  let nodeBinDir: string;\n  try {\n    const nodePath = execSync('which node', { encoding: 'utf8' }).trim();\n    nodeBinDir = dirname(nodePath);\n  } catch {\n    console.error('Error: node not found in PATH');\n    process.exit(1);\n  }\n\n  // Capture extra PATH dirs from the user's shell so the launcher can find\n  // tools like `claude` that live outside the node bin directory.\n  const extraPathDirs = (process.env['PATH'] ?? '')\n    .split(':')\n    .filter((d) => d && d !== nodeBinDir);\n  const fullPath = [nodeBinDir, ...extraPathDirs].join(':');\n\n  // Create directories\n  mkdirSync(paths.deskfreeDir, { recursive: true });\n  mkdirSync(paths.logDir, { recursive: true });\n  mkdirSync(dirname(paths.plist), { recursive: true });\n\n  // Write env file (chmod 600)\n  const envLines = [`BOT=${botId}`, `DESKFREE_INSTANCE_NAME=${name}`];\n  if (stage) envLines.push(`STAGE=${stage}`);\n  writeFileSync(paths.envFile, envLines.join('\\n') + '\\n', { mode: 0o600 });\n  chmodSync(paths.envFile, 0o600);\n  console.log(`Wrote ${paths.envFile}`);\n\n  // Write launcher script\n  const launcher = `#!/bin/bash\nset -euo pipefail\n\nexport PATH=\"${fullPath}\"\n\n# Update to latest version before starting\nnpm install -g ${PACKAGE} 2>/dev/null || true\n\n# Source env\nset -a\nsource \"${paths.envFile}\"\nset +a\n\nexec deskfree start\n`;\n\n  writeFileSync(paths.launcher, launcher, { mode: 0o755 });\n  chmodSync(paths.launcher, 0o755);\n  console.log(`Wrote ${paths.launcher}`);\n\n  // Write LaunchAgent plist\n  const plist = `<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<!DOCTYPE plist PUBLIC \"-//Apple//DTD PLIST 1.0//EN\" \"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">\n<plist version=\"1.0\">\n<dict>\n  <key>Label</key>\n  <string>${plistLabel}</string>\n  <key>ProgramArguments</key>\n  <array>\n    <string>${paths.launcher}</string>\n  </array>\n  <key>KeepAlive</key>\n  <true/>\n  <key>RunAtLoad</key>\n  <true/>\n  <key>StandardOutPath</key>\n  <string>${join(paths.logDir, 'stdout.log')}</string>\n  <key>StandardErrorPath</key>\n  <string>${join(paths.logDir, 'stderr.log')}</string>\n  <key>ThrottleInterval</key>\n  <integer>10</integer>\n</dict>\n</plist>\n`;\n\n  writeFileSync(paths.plist, plist);\n  console.log(`Wrote ${paths.plist}`);\n\n  // Unload if already loaded (ignore errors)\n  try {\n    execSync(`launchctl bootout gui/$(id -u) ${paths.plist}`, {\n      stdio: 'ignore',\n    });\n  } catch {\n    // not loaded — fine\n  }\n\n  // Load the service\n  execSync(`launchctl bootstrap gui/$(id -u) ${paths.plist}`);\n\n  console.log(`\\nService ${plistLabel} installed and started.`);\n  console.log(`Check status: launchctl print gui/$(id -u)/${plistLabel}`);\n  console.log(`Logs: tail -f ${join(paths.logDir, 'stdout.log')}`);\n}\n\n// ── Linux (systemd) ─────────────────────────────────────────────────────────\n\nfunction installLinux(botId: string, name: string, stage?: string): void {\n  if (process.getuid?.() !== 0) {\n    console.error('Error: install must be run as root (use sudo)');\n    process.exit(1);\n  }\n\n  const paths = getLinuxPaths(name);\n  const serviceName = getServiceName(name);\n  const systemUser = serviceName;\n\n  // Resolve full npm/node bin dir so systemd doesn't depend on PATH\n  let npmPath: string;\n  let nodeBinDir: string;\n  try {\n    npmPath = execSync('which npm', { encoding: 'utf8' }).trim();\n    nodeBinDir = dirname(npmPath);\n  } catch {\n    console.error('Error: npm not found in PATH');\n    process.exit(1);\n  }\n\n  // Create dedicated system user (no login shell, no home dir)\n  try {\n    execSync(`id ${systemUser}`, { stdio: 'ignore' });\n  } catch {\n    execSync(\n      `useradd --system --no-create-home --shell /usr/sbin/nologin ${systemUser}`,\n    );\n    console.log(`Created system user: ${systemUser}`);\n  }\n\n  // Create state and log directories owned by the service user\n  mkdirSync(paths.stateDir, { recursive: true });\n  mkdirSync(paths.logDir, { recursive: true });\n  execSync(\n    `chown ${systemUser}:${systemUser} ${paths.stateDir} ${paths.logDir}`,\n  );\n  console.log(`Created ${paths.stateDir} and ${paths.logDir}`);\n\n  // Write env file (chmod 600 — only root can read)\n  const envLines = [`BOT=${botId}`, `DESKFREE_INSTANCE_NAME=${name}`];\n  if (stage) envLines.push(`STAGE=${stage}`);\n  writeFileSync(paths.envFile, envLines.join('\\n') + '\\n', { mode: 0o600 });\n  chmodSync(paths.envFile, 0o600);\n  console.log(`Wrote ${paths.envFile}`);\n\n  // Write systemd unit file\n  const unit = `[Unit]\nDescription=DeskFree Agent (${name})\nAfter=network-online.target\nWants=network-online.target\n\n[Service]\nType=simple\nUser=${systemUser}\nGroup=${systemUser}\nWorkingDirectory=${paths.stateDir}\nEnvironment=PATH=${nodeBinDir}:/usr/local/bin:/usr/bin:/bin\nExecStartPre=+${npmPath} install -g ${PACKAGE}\nExecStart=${nodeBinDir}/deskfree start\nEnvironmentFile=${paths.envFile}\nEnvironment=NODE_ENV=production\nEnvironment=DESKFREE_STATE_DIR=${paths.stateDir}\nEnvironment=DESKFREE_TOOLS_DIR=${paths.stateDir}/tools\nRestart=always\nRestartSec=10\nStandardOutput=append:${paths.logDir}/stdout.log\nStandardError=append:${paths.logDir}/stderr.log\n\n[Install]\nWantedBy=multi-user.target\n`;\n\n  writeFileSync(paths.serviceFile, unit);\n  console.log(`Wrote ${paths.serviceFile}`);\n\n  // Enable and start\n  execSync('systemctl daemon-reload');\n  execSync(`systemctl enable ${serviceName}`);\n  execSync(`systemctl start ${serviceName}`);\n\n  console.log(`\\nService ${serviceName} installed and started.`);\n  console.log(`Check status: systemctl status ${serviceName}`);\n  console.log(`Logs: tail -f ${paths.logDir}/stdout.log`);\n}\n\n// ── Public API ──────────────────────────────────────────────────────────────\n\nexport function install(botId: string, name: string, stage?: string): void {\n  if (process.platform === 'darwin') {\n    installMac(botId, name, stage);\n  } else if (process.platform === 'linux') {\n    installLinux(botId, name, stage);\n  } else {\n    console.error(`Unsupported platform: ${process.platform}`);\n    process.exit(1);\n  }\n}\n"]}

package/dist/index.d.ts

@@ -1,6 +1,7 @@
 import { PluginLogger, AgentContext, DeskFreeClient, DeskFreeTool, ChatMessage, RuntimeBootstrapConfig } from '@deskfree/core';
 import * as _anthropic_ai_claude_agent_sdk from '@anthropic-ai/claude-agent-sdk';
 import { McpSdkServerConfigWithInstance, SDKMessage, SDKUserMessage, Query, tool } from '@anthropic-ai/claude-agent-sdk';
+import WebSocket from 'ws';
 
 interface StartAgentOptions {
     log?: PluginLogger;
@@ -10,13 +11,14 @@ type DisposeAgent = () => void;
 /**
  * Full agent startup sequence:
  *
- * 1. Load local config (token + apiUrl from env)
- * 2. Create DeskFree client
- * 3. Bootstrap: fetch config from API (wsUrl, model, region, tools)
- * 4. Install enabled tool packages
- * 5. Configure Agent SDK env vars (Bedrock, region, model)
- * 6. Create MCP servers
- * 7. Start health server + WS gateway + heartbeat
+ * 1. Load local config (botId + apiUrl from env)
+ * 2. Connect to DeskFree (WS-first → rotation token)
+ * 3. Create authenticated DeskFree client
+ * 4. Bootstrap: fetch config from API (wsUrl, model, region, tools)
+ * 5. Install enabled tool packages
+ * 6. Configure Agent SDK env vars (Bedrock, region, model)
+ * 7. Create MCP servers
+ * 8. Start health server + WS gateway + heartbeat
  */
 declare function startAgent(opts?: StartAgentOptions): Promise<DisposeAgent>;
 
@@ -283,13 +285,19 @@ interface GatewayConfig {
     getWorkerStatus?: () => WorkerStatus;
     /** Trigger memory consolidation on demand. Returns status string. */
     onConsolidate?: () => Promise<string>;
+    /** Bot ID for WS-first connection */
+    botId: string;
+    /** Deployment stage (e.g. "dev", "alpha") */
+    stage: string;
+    /** Live WebSocket from initial connect (first iteration only) */
+    initialWs: WebSocket;
+    /** Rotation token from initial connect */
+    initialRotationToken: string;
 }
 /**
  * Start the WS gateway — reconnection loop with backoff.
  *
- * Loop: getWsTicket() → connect → listen for notify → poll messages → deliver
- * On disconnect: backoff → reconnect
- * Fallback: interval-based polling when WS is unavailable
+ * Flow: WS connect → init → "go" → run connection → proactive reconnect
  */
 declare function startGateway(config: GatewayConfig): Promise<void>;
 
@@ -318,13 +326,17 @@ declare function loadToolModules(tools: ToolPackageConfig[], toolsDir: string, l
 
 /**
  * Local config: values known before connecting to the API.
- * Only botToken + apiUrl are required. Everything else has sensible defaults.
+ * Only `botId` is required. The API URL is derived from stage + domain.
  */
 interface LocalConfig {
-    /** Bot authentication token (required) */
-    botToken: string;
-    /** DeskFree backend API URL (required) */
+    /** Bot ID (install key, e.g. "BFRH3VXHQR7") */
+    botId: string;
+    /** DeskFree backend API URL */
     apiUrl: string;
+    /** Deployment stage (e.g. "dev", "alpha") */
+    stage: string;
+    /** WebSocket URL (derived from domain or explicit override) */
+    wsUrl: string;
     /** Directory for cursor + media storage */
     stateDir: string;
     /** Directory for dynamic tool installs */
@@ -361,8 +373,6 @@ interface RuntimeConfig extends LocalConfig {
     anthropicApiKey?: string;
     /** Base URL for Ollama-compatible API (only set when provider is 'ollama') */
     baseUrl?: string;
-    /** Bot ID for this runtime instance */
-    botId: string;
     /** Bot's display name (e.g. "Sofia") */
     botName: string;
     /** Deployment type (aws, docker, local) */
@@ -379,8 +389,8 @@ interface RuntimeConfig extends LocalConfig {
 /**
  * Load local config from environment variables.
  *
- * Checks DESKFREE_LAUNCH first — a base64-encoded JSON with { botToken, apiUrl }.
- * Falls back to individual env vars DESKFREE_BOT_TOKEN and DESKFREE_API_URL.
+ * Requires `BOT=BFRH3VXHQR7` (or `DESKFREE_BOT_ID`).
+ * API URL is derived from STAGE + DESKFREE_DOMAIN, or set explicitly via DESKFREE_API_URL.
  */
 declare function loadConfig(): LocalConfig;
 /**