@rosthq/cli 0.6.8 → 0.7.1

package/dist/index.js

@@ -472,13 +472,13 @@ function __disposeResources(env) {
   }
   return next();
 }
-function __rewriteRelativeImportExtension(path4, preserveJsx) {
-  if (typeof path4 === "string" && /^\.\.?\//.test(path4)) {
-    return path4.replace(/\.(tsx)$|((?:\.d)?)((?:\.[^./]+?)?)\.([cm]?)ts$/i, function(m, tsx, d, ext, cm) {
+function __rewriteRelativeImportExtension(path5, preserveJsx) {
+  if (typeof path5 === "string" && /^\.\.?\//.test(path5)) {
+    return path5.replace(/\.(tsx)$|((?:\.d)?)((?:\.[^./]+?)?)\.([cm]?)ts$/i, function(m, tsx, d, ext, cm) {
       return tsx ? preserveJsx ? ".jsx" : ".js" : d && (!ext || !cm) ? m : d + ext + "." + cm.toLowerCase() + "js";
     });
   }
-  return path4;
+  return path5;
 }
 var extendStatics, __assign, __createBinding, __setModuleDefault, ownKeys, _SuppressedError, tslib_es6_default;
 var init_tslib_es6 = __esm({
@@ -13257,7 +13257,7 @@ var require_main3 = __commonJS({
 });
 
 // src/index.ts
-import { realpathSync } from "node:fs";
+import { realpathSync as realpathSync2 } from "node:fs";
 import { fileURLToPath as fileURLToPath3, pathToFileURL } from "node:url";
 
 // ../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/classic/external.js
@@ -14026,10 +14026,10 @@ function mergeDefs(...defs) {
 function cloneDef(schema) {
   return mergeDefs(schema._zod.def);
 }
-function getElementAtPath(obj, path4) {
-  if (!path4)
+function getElementAtPath(obj, path5) {
+  if (!path5)
     return obj;
-  return path4.reduce((acc, key) => acc?.[key], obj);
+  return path5.reduce((acc, key) => acc?.[key], obj);
 }
 function promiseAllObject(promisesObj) {
   const keys = Object.keys(promisesObj);
@@ -14438,11 +14438,11 @@ function explicitlyAborted(x, startIndex = 0) {
   }
   return false;
 }
-function prefixIssues(path4, issues) {
+function prefixIssues(path5, issues) {
   return issues.map((iss) => {
     var _a3;
     (_a3 = iss).path ?? (_a3.path = []);
-    iss.path.unshift(path4);
+    iss.path.unshift(path5);
     return iss;
   });
 }
@@ -14589,16 +14589,16 @@ function flattenError(error51, mapper = (issue2) => issue2.message) {
 }
 function formatError(error51, mapper = (issue2) => issue2.message) {
   const fieldErrors = { _errors: [] };
-  const processError = (error52, path4 = []) => {
+  const processError = (error52, path5 = []) => {
     for (const issue2 of error52.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path4, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path5, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path4, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path5, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path4, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path5, ...issue2.path]);
       } else {
-        const fullpath = [...path4, ...issue2.path];
+        const fullpath = [...path5, ...issue2.path];
         if (fullpath.length === 0) {
           fieldErrors._errors.push(mapper(issue2));
         } else {
@@ -14625,17 +14625,17 @@ function formatError(error51, mapper = (issue2) => issue2.message) {
 }
 function treeifyError(error51, mapper = (issue2) => issue2.message) {
   const result = { errors: [] };
-  const processError = (error52, path4 = []) => {
+  const processError = (error52, path5 = []) => {
     var _a3, _b;
     for (const issue2 of error52.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path4, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path5, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path4, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path5, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path4, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path5, ...issue2.path]);
       } else {
-        const fullpath = [...path4, ...issue2.path];
+        const fullpath = [...path5, ...issue2.path];
         if (fullpath.length === 0) {
           result.errors.push(mapper(issue2));
           continue;
@@ -14667,8 +14667,8 @@ function treeifyError(error51, mapper = (issue2) => issue2.message) {
 }
 function toDotPath(_path) {
   const segs = [];
-  const path4 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
-  for (const seg of path4) {
+  const path5 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
+  for (const seg of path5) {
     if (typeof seg === "number")
       segs.push(`[${seg}]`);
     else if (typeof seg === "symbol")
@@ -27360,13 +27360,13 @@ function resolveRef(ref, ctx) {
   if (!ref.startsWith("#")) {
     throw new Error("External $ref is not supported, only local refs (#/...) are allowed");
   }
-  const path4 = ref.slice(1).split("/").filter(Boolean);
-  if (path4.length === 0) {
+  const path5 = ref.slice(1).split("/").filter(Boolean);
+  if (path5.length === 0) {
     return ctx.rootSchema;
   }
   const defsKey = ctx.version === "draft-2020-12" ? "$defs" : "definitions";
-  if (path4[0] === defsKey) {
-    const key = path4[1];
+  if (path5[0] === defsKey) {
+    const key = path5[1];
     if (!key || !ctx.defs[key]) {
       throw new Error(`Reference not found: ${ref}`);
     }
@@ -27828,7 +27828,7 @@ var CommandClient = class {
     this.fetchImpl = options.fetchImpl ?? fetch;
   }
   async execute(commandId, body = {}, options = {}) {
-    const path4 = `/api/commands/${encodeURIComponent(commandId)}`;
+    const path5 = `/api/commands/${encodeURIComponent(commandId)}`;
     const headers = {
       authorization: `Bearer ${this.token}`,
       "content-type": "application/json"
@@ -27836,7 +27836,7 @@ var CommandClient = class {
     if (options.targetSeatId !== void 0 && options.targetSeatId.length > 0) {
       headers["x-rost-seat"] = options.targetSeatId;
     }
-    const response = await this.fetchImpl(`${this.appUrl}${path4}`, {
+    const response = await this.fetchImpl(`${this.appUrl}${path5}`, {
       method: "POST",
       headers,
       body: JSON.stringify(body)
@@ -27849,7 +27849,7 @@ var CommandClient = class {
       const snippet = redactSecrets(text.replace(/\s+/g, " ").trim()).slice(0, 200);
       throw new CommandClientError(
         response.status,
-        `server returned HTTP ${response.status} (non-JSON) from ${path4}` + (snippet ? ` \u2014 ${snippet}` : "") + " \u2014 the deployment may be unhealthy"
+        `server returned HTTP ${response.status} (non-JSON) from ${path5}` + (snippet ? ` \u2014 ${snippet}` : "") + " \u2014 the deployment may be unhealthy"
       );
     }
     const parsed = commandResponseSchema.parse(raw);
@@ -33056,8 +33056,8 @@ var IcebergError = class extends Error {
     return this.status === 419;
   }
 };
-function buildUrl(baseUrl, path4, query) {
-  const url2 = new URL(path4, baseUrl);
+function buildUrl(baseUrl, path5, query) {
+  const url2 = new URL(path5, baseUrl);
   if (query) {
     for (const [key, value] of Object.entries(query)) {
       if (value !== void 0) {
@@ -33087,12 +33087,12 @@ function createFetchClient(options) {
   return {
     async request({
       method,
-      path: path4,
+      path: path5,
       query,
       body,
       headers
     }) {
-      const url2 = buildUrl(options.baseUrl, path4, query);
+      const url2 = buildUrl(options.baseUrl, path5, query);
       const authHeaders = await buildAuthHeaders(options.auth);
       const res = await fetchFn(url2, {
         method,
@@ -33954,7 +33954,7 @@ var StorageFileApi = class extends BaseApiClient {
   * @param path The relative file path. Should be of the format `folder/subfolder/filename.png`. The bucket must already exist before attempting to upload.
   * @param fileBody The body of the file to be stored in the bucket.
   */
-  async uploadOrUpdate(method, path4, fileBody, fileOptions) {
+  async uploadOrUpdate(method, path5, fileBody, fileOptions) {
     var _this = this;
     return _this.handleOperation(async () => {
       let body;
@@ -33978,7 +33978,7 @@ var StorageFileApi = class extends BaseApiClient {
         if ((typeof ReadableStream !== "undefined" && body instanceof ReadableStream || body && typeof body === "object" && "pipe" in body && typeof body.pipe === "function") && !options.duplex) options.duplex = "half";
       }
       if (fileOptions === null || fileOptions === void 0 ? void 0 : fileOptions.headers) for (const [key, value] of Object.entries(fileOptions.headers)) headers = setHeader(headers, key, value);
-      const cleanPath = _this._removeEmptyFolders(path4);
+      const cleanPath = _this._removeEmptyFolders(path5);
       const _path = _this._getFinalPath(cleanPath);
       const data = await (method == "PUT" ? put : post)(_this.fetch, `${_this.url}/object/${_path}`, body, _objectSpread22({ headers }, (options === null || options === void 0 ? void 0 : options.duplex) ? { duplex: options.duplex } : {}));
       return {
@@ -34055,8 +34055,8 @@ var StorageFileApi = class extends BaseApiClient {
   * - Refer to the [Storage guide](/docs/guides/storage/security/access-control) on how access control works
   * - For React Native, using either `Blob`, `File` or `FormData` does not work as intended. Upload file using `ArrayBuffer` from base64 file data instead, see example below.
   */
-  async upload(path4, fileBody, fileOptions) {
-    return this.uploadOrUpdate("POST", path4, fileBody, fileOptions);
+  async upload(path5, fileBody, fileOptions) {
+    return this.uploadOrUpdate("POST", path5, fileBody, fileOptions);
   }
   /**
   * Upload a file with a token generated from `createSignedUploadUrl`.
@@ -34096,9 +34096,9 @@ var StorageFileApi = class extends BaseApiClient {
   *   - `objects` table permissions: none
   * - Refer to the [Storage guide](/docs/guides/storage/security/access-control) on how access control works
   */
-  async uploadToSignedUrl(path4, token, fileBody, fileOptions) {
+  async uploadToSignedUrl(path5, token, fileBody, fileOptions) {
     var _this3 = this;
-    const cleanPath = _this3._removeEmptyFolders(path4);
+    const cleanPath = _this3._removeEmptyFolders(path5);
     const _path = _this3._getFinalPath(cleanPath);
     const url2 = new URL(_this3.url + `/object/upload/sign/${_path}`);
     url2.searchParams.set("token", token);
@@ -34167,10 +34167,10 @@ var StorageFileApi = class extends BaseApiClient {
   *   - `objects` table permissions: `insert`
   * - Refer to the [Storage guide](/docs/guides/storage/security/access-control) on how access control works
   */
-  async createSignedUploadUrl(path4, options) {
+  async createSignedUploadUrl(path5, options) {
     var _this4 = this;
     return _this4.handleOperation(async () => {
-      let _path = _this4._getFinalPath(path4);
+      let _path = _this4._getFinalPath(path5);
       const headers = _objectSpread22({}, _this4.headers);
       if (options === null || options === void 0 ? void 0 : options.upsert) headers["x-upsert"] = "true";
       const data = await post(_this4.fetch, `${_this4.url}/object/upload/sign/${_path}`, {}, { headers });
@@ -34179,7 +34179,7 @@ var StorageFileApi = class extends BaseApiClient {
       if (!token) throw new StorageError("No token returned by API");
       return {
         signedUrl: url2.toString(),
-        path: path4,
+        path: path5,
         token
       };
     });
@@ -34239,8 +34239,8 @@ var StorageFileApi = class extends BaseApiClient {
   * - Refer to the [Storage guide](/docs/guides/storage/security/access-control) on how access control works
   * - For React Native, using either `Blob`, `File` or `FormData` does not work as intended. Update file using `ArrayBuffer` from base64 file data instead, see example below.
   */
-  async update(path4, fileBody, fileOptions) {
-    return this.uploadOrUpdate("PUT", path4, fileBody, fileOptions);
+  async update(path5, fileBody, fileOptions) {
+    return this.uploadOrUpdate("PUT", path5, fileBody, fileOptions);
   }
   /**
   * Moves an existing file to a new path in the same bucket.
@@ -34391,10 +34391,10 @@ var StorageFileApi = class extends BaseApiClient {
   *   - `objects` table permissions: `select`
   * - Refer to the [Storage guide](/docs/guides/storage/security/access-control) on how access control works
   */
-  async createSignedUrl(path4, expiresIn, options) {
+  async createSignedUrl(path5, expiresIn, options) {
     var _this8 = this;
     return _this8.handleOperation(async () => {
-      let _path = _this8._getFinalPath(path4);
+      let _path = _this8._getFinalPath(path5);
       const hasTransform = typeof (options === null || options === void 0 ? void 0 : options.transform) === "object" && options.transform !== null && Object.keys(options.transform).length > 0;
       let data = await post(_this8.fetch, `${_this8.url}/object/sign/${_path}`, _objectSpread22({ expiresIn }, hasTransform ? { transform: options.transform } : {}), { headers: _this8.headers });
       const query = new URLSearchParams();
@@ -34530,13 +34530,13 @@ var StorageFileApi = class extends BaseApiClient {
   *   - `objects` table permissions: `select`
   * - Refer to the [Storage guide](/docs/guides/storage/security/access-control) on how access control works
   */
-  download(path4, options, parameters) {
+  download(path5, options, parameters) {
     const renderPath = typeof (options === null || options === void 0 ? void 0 : options.transform) === "object" && options.transform !== null && Object.keys(options.transform).length > 0 ? "render/image/authenticated" : "object";
     const query = new URLSearchParams();
     if (options === null || options === void 0 ? void 0 : options.transform) this.applyTransformOptsToQuery(query, options.transform);
     if ((options === null || options === void 0 ? void 0 : options.cacheNonce) != null) query.set("cacheNonce", String(options.cacheNonce));
     const queryString = query.toString();
-    const _path = this._getFinalPath(path4);
+    const _path = this._getFinalPath(path5);
     const downloadFn = () => get(this.fetch, `${this.url}/${renderPath}/${_path}${queryString ? `?${queryString}` : ""}`, {
       headers: this.headers,
       noResolveJson: true
@@ -34567,9 +34567,9 @@ var StorageFileApi = class extends BaseApiClient {
   * }
   * ```
   */
-  async info(path4) {
+  async info(path5) {
     var _this10 = this;
-    const _path = _this10._getFinalPath(path4);
+    const _path = _this10._getFinalPath(path5);
     return _this10.handleOperation(async () => {
       return recursiveToCamel(await get(_this10.fetch, `${_this10.url}/object/info/${_path}`, { headers: _this10.headers }));
     });
@@ -34590,9 +34590,9 @@ var StorageFileApi = class extends BaseApiClient {
   *   .exists('folder/avatar1.png')
   * ```
   */
-  async exists(path4) {
+  async exists(path5) {
     var _this11 = this;
-    const _path = _this11._getFinalPath(path4);
+    const _path = _this11._getFinalPath(path5);
     try {
       await head(_this11.fetch, `${_this11.url}/object/${_path}`, { headers: _this11.headers });
       return {
@@ -34671,8 +34671,8 @@ var StorageFileApi = class extends BaseApiClient {
   *   - `objects` table permissions: none
   * - Refer to the [Storage guide](/docs/guides/storage/security/access-control) on how access control works
   */
-  getPublicUrl(path4, options) {
-    const _path = this._getFinalPath(path4);
+  getPublicUrl(path5, options) {
+    const _path = this._getFinalPath(path5);
     const query = new URLSearchParams();
     if (options === null || options === void 0 ? void 0 : options.download) query.set("download", options.download === true ? "" : options.download);
     if (options === null || options === void 0 ? void 0 : options.transform) this.applyTransformOptsToQuery(query, options.transform);
@@ -34811,10 +34811,10 @@ var StorageFileApi = class extends BaseApiClient {
   *   - `objects` table permissions: `select`
   * - Refer to the [Storage guide](/docs/guides/storage/security/access-control) on how access control works
   */
-  async list(path4, options, parameters) {
+  async list(path5, options, parameters) {
     var _this13 = this;
     return _this13.handleOperation(async () => {
-      const body = _objectSpread22(_objectSpread22(_objectSpread22({}, DEFAULT_SEARCH_OPTIONS), options), {}, { prefix: path4 || "" });
+      const body = _objectSpread22(_objectSpread22(_objectSpread22({}, DEFAULT_SEARCH_OPTIONS), options), {}, { prefix: path5 || "" });
       return await post(_this13.fetch, `${_this13.url}/object/list/${_this13.bucketId}`, body, { headers: _this13.headers }, parameters);
     });
   }
@@ -34879,11 +34879,11 @@ var StorageFileApi = class extends BaseApiClient {
     if (typeof Buffer !== "undefined") return Buffer.from(data).toString("base64");
     return btoa(data);
   }
-  _getFinalPath(path4) {
-    return `${this.bucketId}/${path4.replace(/^\/+/, "")}`;
+  _getFinalPath(path5) {
+    return `${this.bucketId}/${path5.replace(/^\/+/, "")}`;
   }
-  _removeEmptyFolders(path4) {
-    return path4.replace(/^\/|\/$/g, "").replace(/\/+/g, "/");
+  _removeEmptyFolders(path5) {
+    return path5.replace(/^\/|\/$/g, "").replace(/\/+/g, "/");
   }
   /** Modifies the `query`, appending values the from `transform` */
   applyTransformOptsToQuery(query, transform2) {
@@ -37273,17 +37273,30 @@ import { constants as fsConstants } from "node:fs";
 import { mkdir, readFile, rm, stat, writeFile } from "node:fs/promises";
 import { homedir } from "node:os";
 import path from "node:path";
-import { promisify as promisify2 } from "node:util";
-var execFile2 = promisify2(execFileCallback);
 var sessionSchema = external_exports.object({
   accessToken: external_exports.string().min(1),
   refreshToken: external_exports.string().min(1).optional(),
   expiresAt: external_exports.string().datetime({ offset: true }).optional()
 }).strict();
+var runExecFile = (file2, args, options) => new Promise((resolve2, reject) => {
+  const child = execFileCallback(file2, [...args], (error51, stdout, stderr) => {
+    if (error51) {
+      reject(error51);
+      return;
+    }
+    resolve2({ stdout, stderr });
+  });
+  const { stdin } = child;
+  if (stdin) {
+    stdin.on("error", () => {
+    });
+    stdin.end(options?.input ?? "");
+  }
+});
 var serviceName = `${cliBrand.binName}-cli`;
 var accountName = "session";
 var KeychainTokenStore = class {
-  constructor(run2 = execFile2) {
+  constructor(run2 = runExecFile) {
     this.run = run2;
   }
   run;
@@ -37304,16 +37317,14 @@ var KeychainTokenStore = class {
   }
   async write(session) {
     sessionSchema.parse(session);
-    await this.run("security", [
-      "add-generic-password",
-      "-U",
-      "-s",
-      serviceName,
-      "-a",
-      accountName,
-      "-w",
-      JSON.stringify(session)
-    ]);
+    const secret = JSON.stringify(session);
+    await this.run(
+      "security",
+      ["add-generic-password", "-U", "-s", serviceName, "-a", accountName, "-w"],
+      { input: `${secret}
+${secret}
+` }
+    );
   }
   async clear() {
     try {
@@ -37326,6 +37337,122 @@ var KeychainTokenStore = class {
     return "macOS Keychain";
   }
 };
+var DarwinTokenStore = class extends KeychainTokenStore {
+  constructor(run2 = runExecFile, filePath) {
+    super(run2);
+    this.filePath = filePath;
+  }
+  filePath;
+  backend = null;
+  fileStore = null;
+  async read() {
+    return await this.selectBackend() === "file" ? this.file().read() : super.read();
+  }
+  async write(session) {
+    if (await this.selectBackend() === "file") {
+      await this.file().write(session);
+      return;
+    }
+    await super.write(session);
+  }
+  async clear() {
+    if (await this.selectBackend() === "file") {
+      await this.file().clear();
+      return;
+    }
+    await super.clear();
+  }
+  describe() {
+    return this.backend === "file" ? "owner-only file store (no usable macOS keychain)" : super.describe();
+  }
+  file() {
+    return this.fileStore ??= new FileTokenStore(this.filePath);
+  }
+  async selectBackend() {
+    if (this.backend) {
+      return this.backend;
+    }
+    try {
+      await this.run("security", ["find-generic-password", "-s", serviceName, "-a", accountName, "-w"]);
+      this.backend = "keychain";
+    } catch (error51) {
+      this.backend = isKeychainUnusableError(error51) ? "file" : "keychain";
+    }
+    return this.backend;
+  }
+};
+var WindowsCredentialTokenStore = class {
+  constructor(run2 = runExecFile) {
+    this.run = run2;
+  }
+  run;
+  async read() {
+    try {
+      const { stdout } = await this.run("powershell", powershellArgs(windowsReadScript(windowsCredentialTarget)));
+      const trimmed = stdout.trim();
+      if (trimmed === "") {
+        return null;
+      }
+      return sessionSchema.parse(JSON.parse(trimmed));
+    } catch {
+      return null;
+    }
+  }
+  async write(session) {
+    sessionSchema.parse(session);
+    await this.run(
+      "powershell",
+      powershellArgs(windowsWriteScript(windowsCredentialTarget)),
+      { input: JSON.stringify(session) }
+    );
+  }
+  async clear() {
+    try {
+      await this.run("powershell", powershellArgs(windowsClearScript(windowsCredentialTarget)));
+    } catch {
+      return;
+    }
+  }
+  describe() {
+    return "Windows Credential Manager";
+  }
+};
+var SecretServiceTokenStore = class {
+  constructor(run2 = runExecFile) {
+    this.run = run2;
+  }
+  run;
+  async read() {
+    try {
+      const { stdout } = await this.run("secret-tool", ["lookup", "service", serviceName, "account", accountName]);
+      const trimmed = stdout.trim();
+      if (trimmed === "") {
+        return null;
+      }
+      return sessionSchema.parse(JSON.parse(trimmed));
+    } catch {
+      return null;
+    }
+  }
+  async write(session) {
+    sessionSchema.parse(session);
+    await this.run(
+      "secret-tool",
+      ["store", `--label=${cliBrand.name} CLI session`, "service", serviceName, "account", accountName],
+      { input: JSON.stringify(session) }
+    );
+  }
+  async clear() {
+    try {
+      await this.run("secret-tool", ["clear", "service", serviceName, "account", accountName]);
+    } catch {
+      return;
+    }
+  }
+  describe() {
+    return "Secret Service";
+  }
+};
 var FileTokenStore = class {
   constructor(filePath = defaultTokenPath()) {
     this.filePath = filePath;
@@ -37366,6 +37493,7 @@ var FileTokenStore = class {
 function createTokenStore(options = {}) {
   const env = options.env ?? process.env;
   const allowFileStoreKey = brandEnvKey2("CLI_ALLOW_FILE_TOKEN_STORE");
+  const tokenPath = env[brandEnvKey2("CLI_TOKEN_PATH")];
   if (env[allowFileStoreKey] === "1") {
     const warning = [
       "WARNING: using the development-only plain-file CLI token store.",
@@ -37373,17 +37501,23 @@ function createTokenStore(options = {}) {
     ].join(" ");
     (options.stderr ?? process.stderr).write(`${warning}
 `);
-    return new FileTokenStore(env[brandEnvKey2("CLI_TOKEN_PATH")]);
+    return new FileTokenStore(tokenPath);
   }
   const platform = options.platform ?? process.platform;
   if (platform === "darwin") {
-    return new KeychainTokenStore(options.execFile);
+    return new DarwinTokenStore(options.execFile, tokenPath);
+  }
+  if (platform === "win32") {
+    return new WindowsCredentialTokenStore(options.execFile);
+  }
+  if (platform === "linux" && env[brandEnvKey2("CLI_USE_SECRET_SERVICE")] === "1") {
+    return new SecretServiceTokenStore(options.execFile);
   }
   throw new Error(
     [
-      "No OS credential store is available (the CLI uses the macOS Keychain by default; there is no Windows or Linux keychain integration).",
-      `For headless Linux, CI runners, or any no-keychain host, export ${allowFileStoreKey}=1 (set it for every invocation) to opt into the development-only plain-file token store.`,
-      "It is not encrypted: it writes an owner-only file (directory 0700, file 0600) holding only CLI session tokens \u2014 never tenant secrets, API keys, or vault refs."
+      "No OS credential store is available (the CLI uses the macOS Keychain by default, Windows Credential Manager on Windows, and the Linux Secret Service when enabled).",
+      `For headless Linux, export ${brandEnvKey2("CLI_USE_SECRET_SERVICE")}=1 to use the Secret Service, or ${allowFileStoreKey}=1 (set it for every invocation) to opt into the development-only plain-file token store.`,
+      "The file store is not encrypted: it writes an owner-only file (directory 0700, file 0600) holding only CLI session tokens \u2014 never tenant secrets, API keys, or vault refs."
     ].join(" ")
   );
 }
@@ -37393,6 +37527,105 @@ function defaultTokenPath() {
 function brandEnvKey2(suffix) {
   return `${cliBrand.envPrefix}_${suffix}`;
 }
+function isKeychainUnusableError(error51) {
+  if (isKeychainItemMissing(error51)) {
+    return false;
+  }
+  return true;
+}
+function isKeychainItemMissing(error51) {
+  if (!error51 || typeof error51 !== "object") {
+    return false;
+  }
+  if (error51.code === 44) {
+    return true;
+  }
+  return /could not be found|SecKeychainSearchCopyNext/i.test(errorText(error51));
+}
+function errorText(error51) {
+  if (!error51 || typeof error51 !== "object") {
+    return String(error51 ?? "");
+  }
+  const record2 = error51;
+  const parts = [];
+  for (const key of ["message", "stderr", "stdout"]) {
+    const value = record2[key];
+    if (typeof value === "string") {
+      parts.push(value);
+    }
+  }
+  return parts.join("\n");
+}
+var windowsCredentialTarget = `${serviceName}/${accountName}`;
+function powershellArgs(script) {
+  return ["-NoProfile", "-NonInteractive", "-ExecutionPolicy", "Bypass", "-Command", script];
+}
+function psQuote(value) {
+  return `'${value.replace(/'/g, "''")}'`;
+}
+var WINDOWS_CRED_MODULE = [
+  "$ErrorActionPreference = 'Stop'",
+  "Add-Type -TypeDefinition @'",
+  "using System;",
+  "using System.Runtime.InteropServices;",
+  "public static class RostCred {",
+  "  [StructLayout(LayoutKind.Sequential, CharSet = CharSet.Unicode)]",
+  "  public struct CREDENTIAL {",
+  "    public uint Flags; public uint Type;",
+  "    [MarshalAs(UnmanagedType.LPWStr)] public string TargetName;",
+  "    [MarshalAs(UnmanagedType.LPWStr)] public string Comment;",
+  "    public System.Runtime.InteropServices.ComTypes.FILETIME LastWritten;",
+  "    public uint CredentialBlobSize; public IntPtr CredentialBlob;",
+  "    public uint Persist; public uint AttributeCount; public IntPtr Attributes;",
+  "    [MarshalAs(UnmanagedType.LPWStr)] public string TargetAlias;",
+  "    [MarshalAs(UnmanagedType.LPWStr)] public string UserName;",
+  "  }",
+  '  [DllImport("advapi32.dll", CharSet = CharSet.Unicode, SetLastError = true)]',
+  "  public static extern bool CredWriteW(ref CREDENTIAL cred, uint flags);",
+  '  [DllImport("advapi32.dll", CharSet = CharSet.Unicode, SetLastError = true)]',
+  "  public static extern bool CredReadW(string target, uint type, uint flags, out IntPtr cred);",
+  '  [DllImport("advapi32.dll")] public static extern void CredFree(IntPtr cred);',
+  '  [DllImport("advapi32.dll", CharSet = CharSet.Unicode, SetLastError = true)]',
+  "  public static extern bool CredDeleteW(string target, uint type, uint flags);",
+  "}",
+  "'@"
+].join("\n");
+function windowsWriteScript(target) {
+  return [
+    WINDOWS_CRED_MODULE,
+    "$secret = [Console]::In.ReadToEnd()",
+    "$bytes = [System.Text.Encoding]::Unicode.GetBytes($secret)",
+    "$blob = [Runtime.InteropServices.Marshal]::AllocHGlobal($bytes.Length)",
+    "[Runtime.InteropServices.Marshal]::Copy($bytes, 0, $blob, $bytes.Length)",
+    "$cred = New-Object RostCred+CREDENTIAL",
+    "$cred.Type = 1",
+    `$cred.TargetName = ${psQuote(target)}`,
+    "$cred.UserName = 'session'",
+    "$cred.CredentialBlobSize = $bytes.Length",
+    "$cred.CredentialBlob = $blob",
+    "$cred.Persist = 2",
+    "$ok = [RostCred]::CredWriteW([ref]$cred, 0)",
+    "[Runtime.InteropServices.Marshal]::FreeHGlobal($blob)",
+    "if (-not $ok) { exit 1 }"
+  ].join("\n");
+}
+function windowsReadScript(target) {
+  return [
+    WINDOWS_CRED_MODULE,
+    "$ptr = [IntPtr]::Zero",
+    `if (-not [RostCred]::CredReadW(${psQuote(target)}, 1, 0, [ref]$ptr)) { exit 0 }`,
+    "$cred = [Runtime.InteropServices.Marshal]::PtrToStructure($ptr, [Type][RostCred+CREDENTIAL])",
+    "$secret = [Runtime.InteropServices.Marshal]::PtrToStringUni($cred.CredentialBlob, [int]($cred.CredentialBlobSize / 2))",
+    "[RostCred]::CredFree($ptr)",
+    "[Console]::Out.Write($secret)"
+  ].join("\n");
+}
+function windowsClearScript(target) {
+  return [
+    WINDOWS_CRED_MODULE,
+    `[void][RostCred]::CredDeleteW(${psQuote(target)}, 1, 0)`
+  ].join("\n");
+}
 
 // ../../packages/prompts/src/index.ts
 import { readFileSync } from "node:fs";
@@ -37569,10 +37802,10 @@ var util;
   function assertIs2(_arg) {
   }
   util2.assertIs = assertIs2;
-  function assertNever2(_x) {
+  function assertNever3(_x) {
     throw new Error();
   }
-  util2.assertNever = assertNever2;
+  util2.assertNever = assertNever3;
   util2.arrayToEnum = (items) => {
     const obj = {};
     for (const item of items) {
@@ -37927,8 +38160,8 @@ function getErrorMap2() {
 
 // ../../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/helpers/parseUtil.js
 var makeIssue = (params) => {
-  const { data, path: path4, errorMaps, issueData } = params;
-  const fullPath = [...path4, ...issueData.path || []];
+  const { data, path: path5, errorMaps, issueData } = params;
+  const fullPath = [...path5, ...issueData.path || []];
   const fullIssue = {
     ...issueData,
     path: fullPath
@@ -38044,11 +38277,11 @@ var errorUtil;
 
 // ../../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/types.js
 var ParseInputLazyPath = class {
-  constructor(parent, value, path4, key) {
+  constructor(parent, value, path5, key) {
     this._cachedPath = [];
     this.parent = parent;
     this.data = value;
-    this._path = path4;
+    this._path = path5;
     this._key = key;
   }
   get path() {
@@ -41638,6 +41871,82 @@ The Compass is drafted, then activated by a human through supersession.
 ## When to stop for confirmation
 
 \`onboarding.finish\`, \`compass.approve_version\`, \`compass.reject_draft\`, and \`compass.set\` are \`human_required\`. \`onboarding.advance_step\`, \`onboarding.create_invite\`, \`onboarding.attach_reference\`, \`compass.answer_gap\`, and drafting a Compass are \`none\` \u2014 none of them returns a pending confirmation. \`none\` is not the same as "agent-callable", though: \`onboarding.create_invite\` and \`compass.answer_gap\` record the human who ran them, so they run as a person, not from an agent session, while advancing a step, attaching a reference, and drafting a Compass are safe for an agent. Approving a version (a supersession) is a human act. The agent drafts and surfaces the approve link. See the confirmations guide.`
+  },
+  {
+    slug: "aicos-chat-guide",
+    order: 15,
+    title: "AICOS chat guide",
+    summary: "How the AI Chief of Staff chat works in the authenticated app shell and what it can safely do today.",
+    version: "2026-07-02.5",
+    public: true,
+    audiences: ["human", "in_app_agent"],
+    stages: ["company_setup", "operating_rhythm"],
+    relatedCommandIds: ["confirmation.approve", "onboarding.status", "graph.get", "seat.get"],
+    legal: {
+      publicRisk: "low",
+      notes: [
+        "Describes the authenticated AICOS chat surface without promising autonomous action.",
+        "Keeps authority, lane, and confirmation language aligned with the platform governance model."
+      ]
+    },
+    sources: [
+      {
+        label: "AICOS Company Chief of Staff plan",
+        internalPath: "docs/plans/2026-07-01-003-feat-aicos-company-chief-of-staff-plan.md",
+        note: "Defines the AICOS product contract, lane portability, and governance boundaries."
+      },
+      {
+        label: "MVP implementation plan",
+        internalPath: "docs/specs/MVP-implementation-plan.md",
+        note: "FR-10.6 records the AICOS extension and chat harness rollout."
+      }
+    ],
+    body: `# AICOS chat guide
+
+AICOS is the AI Chief of Staff for an authenticated {{brand}} tenant. It is a governed agent seat in the Responsibility Graph, not an anonymous public chatbot and not a hidden superuser.
+
+## Where AICOS appears
+
+In the authenticated app shell, AICOS opens from the floating assistant control. The panel is available across normal app pages and keeps the same thread while you move through the product. Full-bleed public, login, onboarding, docs, invite, and demo routes do not receive the authenticated shell.
+
+Each thread has a purpose:
+
+- **Onboarding** \u2014 setup help and page-aware setup context.
+- **Seat** \u2014 seat and agent setup context.
+- **General** \u2014 company operating help.
+
+You can reopen prior threads or start a new one. Session history is stored in tenant-scoped conversation tables so chat history is not reconstructed from analytics, events, or run logs.
+
+## What context AICOS receives
+
+Each turn carries server-normalized page context: route template, current path, safe search state, selected seat or object ids when authorized, and onboarding state when relevant. The server derives tenant and user authority from the authenticated session. Client-supplied tenant context is never accepted as authority.
+
+The current chat harness shows the effective lane and model. The initial lane is cloud, with a deterministic harness response while live model execution, action execution, and runner execution waves land. The contract is intentionally backend-neutral: future cloud and runner turns use the same sessions, messages, lane labels, sources, and linked artifacts.
+
+Model behavior is now explicit in the AICOS session contract. A thread can run in **Auto** or use a pinned compatible model from the guided catalog. Auto chooses a fast tier for short low-risk turns, the balanced default for normal operating help, and a higher-reasoning tier for onboarding synthesis or large context. The panel shows the effective model, disables lower-context choices once the active thread outgrows them, and tells the user to start a new session for those models. Session context is estimated and compacted into a durable summary when it crosses the configured threshold; raw messages remain in history, but future model calls can use the summary rather than resending the whole thread. Platform allowance and BYOK state are checked before routing; an exhausted included allowance keeps AICOS in guided mode and points the user toward BYOK/manual continuation. Because the DER-1068 implementation still uses the deterministic harness, it does not create fake llm_calls rows or settle fake allowance usage; reservation/settlement belongs to the real provider call path.
+
+During onboarding, the deterministic harness may execute only explicit low-risk draft actions. In the Responsibility Graph step, a user with setup/action authority can ask AICOS to create one named draft seat per turn; the seat stays vacant, is traceable to the AICOS message through artifact sources, and still needs human review before staffing, Charters, manifests, or go-live. Compass and Charter help remains draft guidance and clarifying questions until the live drafting planner lands. AICOS never silently finishes onboarding, approves Compass or Charter content, signs manifests, goes live, stores credentials, changes autonomy policy, or invites external people; those actions remain human-confirmed.
+
+AICOS posture is resolved on the server from the current user's AICOS access scope plus the tenant's Company guardrails. **Report-only** can read, explain, and draft guidance, but it cannot mutate setup or operating state. **Balanced** can perform narrow low-risk internal draft/setup actions and stops at human gates. **High autonomy** can perform allowed internal low-risk actions without changing the hard prohibitions: AICOS still cannot approve its own Charter or manifest, handle credentials, send externally, spend money, perform destructive/admin changes, go live, expand policy/access, or receive hidden sensitive data.
+
+AICOS grounds answers from two source classes before producing user-visible setup or operating guidance:
+
+- **Reference documents** \u2014 public {{brand}} guides such as this chat guide, onboarding guidance, the Responsibility Graph playbook, tool-access guidance, and confirmation guidance. AICOS retrieves the narrowest relevant guide before setup, Charter, Signal, Friction, Cascade, Sync, tool-access, or onboarding advice.
+- **Tenant read models** \u2014 bounded summaries of tenant operating state, including onboarding status, graph/setup readiness, Compass/Charter readiness, operating health, agent/system health, approvals/inbox, and selected Seat context. These read models expose counts and short observations rather than raw database dumps.
+
+Assistant messages can carry source counts and persisted source metadata so a thread can later show which reference docs or read models informed the answer.
+
+## Governance boundary
+
+AICOS can preserve context and explain what it is ready to do, but durable operating changes still use the same {{brand}} controls:
+
+- Tenant isolation is enforced by RLS and server-side tenant context.
+- Raw secrets, vault refs, hidden tool arguments, storage refs, provider payloads, agent custom prompts, and secret-shaped text are not stored in chat history or read-model context.
+- Durable decisions remain human decisions.
+- Action execution must route through command guards and confirmation when required.
+- Expanding authority, approving Charters or Compass versions, going live, credentials, external sends, money, destructive operations, and policy changes stay human-gated.
+
+Treat AICOS as a coordinator over the operating system. It can become more useful as model grounding, read tools, draft actions, and runner execution are enabled, but it does not bypass the Responsibility Graph, Seat Steward accountability, command guards, or confirmations.`
   },
   {
     slug: "responsibility-graph-playbook",
@@ -42412,7 +42721,7 @@ External connectors are being rolled out provider by provider, conservatively (r
     order: 48,
     title: "CLI and MCP installation guide",
     summary: "Install the public CLI, register remote token-backed MCP clients, and find the full command and tool catalog.",
-    version: "2026-07-02.5",
+    version: "2026-07-02.6",
     public: true,
     audiences: ["human", "cli", "mcp", "in_app_agent"],
     stages: ["company_setup", "staffing"],
@@ -42869,6 +43178,7 @@ The signed-in app exposes the same Skill command surface under **Skills** in the
 | \`{{cli}} error list|resolve|supersede\` | \`error_log.list\`, \`error_log.resolve\`, \`error_log.supersede\` | List active, acknowledged, resolved, or superseded product error logs and let a human acknowledge, resolve, or supersede stale errors with evidence links. | Tenant | \`{{cli}} error list --resolved active --json\`; \`{{cli}} error resolve --error-log-id <id> --reason "Fixed in PR #123"\` |
 | \`{{cli}} sync brief|compile|complete\` | \`sync.brief.get\`, \`sync.brief.compile\`, \`sync.run.complete\` | Compile, read, and complete a weekly Sync. | Tenant | \`{{cli}} sync brief --json\` |
 | \`{{cli}} runner list|status|diagnose|repair|work-orders|revoke|serve\` | \`runner.list\`, \`runner.status\`, \`runner.diagnose\`, \`runner.repair\`, \`work_order.list\`, \`runner.revoke\`, runner endpoint APIs | Inspect heartbeat and execute-readiness evidence, inspect work orders, diagnose offline runners, get repair guidance, revoke a runner, or run the headless local runner loop. | Tenant | \`{{cli}} runner diagnose --runner-id <id> --json\`; \`{{cli}} runner serve --once\` |
+| \`{{cli}} runner install-service|start|stop|restart|status|logs|uninstall --name <name>\` | launchd/service manager (macOS today) + \`{{cli}} runner serve\` | Install and manage an always-on local runner service that keeps the runner online across reboots; the service shells out to \`{{cli}} runner serve --execute\` and stores no secret in the service definition, its arguments, or logs. Non-macOS emits an explicit unsupported message. | Tenant (local machine) | \`{{cli}} runner install-service --name mac-mini --execute\`; \`{{cli}} runner logs --name mac-mini\` |
 | \`{{cli}} notification settings|test|errors\` | \`notification.settings.get\`, \`notification.test\`, \`notification.list_errors\` | Read notification settings, send a test, and list failed deliveries with linked product error source, seat id, and run id when available. | Tenant | \`{{cli}} notification errors --limit 10 --json\` |
 | \`{{cli}} integration list|readiness|status|test\` / credential flow for Baserow REST connect | \`integration.connect_rest\`, \`integration.list\`, \`integration.readiness\`, \`integration.status\`, \`integration.test\` | Create a vault-backed Baserow REST integration through the credential flow, list connector metadata, read setup-readiness, read one connector's health, and run provider-specific tests without exposing credentials. | Tenant-admin for connect; tenant for reads/tests | \`{{cli}} integration readiness --provider google --json\` |
 | \`{{cli}} system health\` | \`system.health\` | Read the scoped system-health snapshot across agent runs, unresolved errors, Signals, Cascade setup, work loop, integrations, runners, notifications, and Sync Brief readiness. | Tenant, member, or seat token | \`{{cli}} system health --json\`; \`{{cli}} system health --seat <id> --json\` |
@@ -43461,7 +43771,7 @@ Set \`ROST_SKILL_INSTALL_ROOT\` only for a sandbox or CI override. Local copies
     order: 55,
     title: "Agent reference map",
     summary: "Where CLI sessions, MCP clients, and in-app agents should retrieve {{brand}} guidance before recommending setup changes.",
-    version: "2026-07-02.2",
+    version: "2026-07-02.3",
     public: true,
     audiences: ["cli", "mcp", "in_app_agent"],
     stages: ["company_setup", "graph_design", "charter_design", "staffing", "operating_rhythm"],
@@ -43525,28 +43835,29 @@ Agents that run on {{brand}}-managed inference draw against a tenant inference b
 
 1. rost-implementation-method
 2. compass-authoring-guide
-3. responsibility-graph-playbook
-4. charter-design-playbook
-5. charter-authoring-deep-dive
-6. agent-staffing-playbook
-7. add-agents-guide
-8. custom-agents-guide
-9. agent-builder-guide
-10. how-agents-work
-11. tool-access-and-vault
-12. available-tools-guide
-13. mcp-and-cli-guide
-14. skill-builder-guide
-15. agent-skill-authoring-guide
-16. agent-skill-setup-guide
-17. ai-model-data-handling-guide
-18. cascade-guide
-19. signal-guide
-20. friction-guide
-21. confirmations-guide
-22. steward-queue-guide
-23. sync-rhythm-playbook
-24. billing-and-pricing-guide
+3. aicos-chat-guide
+4. responsibility-graph-playbook
+5. charter-design-playbook
+6. charter-authoring-deep-dive
+7. agent-staffing-playbook
+8. add-agents-guide
+9. custom-agents-guide
+10. agent-builder-guide
+11. how-agents-work
+12. tool-access-and-vault
+13. available-tools-guide
+14. mcp-and-cli-guide
+15. skill-builder-guide
+16. agent-skill-authoring-guide
+17. agent-skill-setup-guide
+18. ai-model-data-handling-guide
+19. cascade-guide
+20. signal-guide
+21. friction-guide
+22. confirmations-guide
+23. steward-queue-guide
+24. sync-rhythm-playbook
+25. billing-and-pricing-guide
 
 ## Workflow to guide map
 
@@ -43554,6 +43865,7 @@ Read the listed guide before recommending or running each workflow. Every workfl
 
 - Connect a local agent (CLI login, MCP token, client registration): mcp-and-cli-guide, then agent-reference-map.
 - Company onboarding (context, Compass draft, finish): rost-implementation-method, then settings-members-and-invites-guide for invites.
+- Use the in-app AI Chief of Staff chat or explain its current authority boundary: aicos-chat-guide, then confirmations-guide for any durable change.
 - Author a strong Compass directly (attach references, draft, answer gaps, approve): compass-authoring-guide \u2014 it shows the full JSON contract, what good vs weak looks like per field, and worked examples. Attaching reference docs (onboarding.attach_reference) is reference-only; you author the Compass, the server does not build it for you.
 - Design the graph (create, rename, reparent, set type): responsibility-graph-playbook.
 - Write Charters (draft, edit, approve, sign manifest): charter-design-playbook for the narrative, then charter-authoring-deep-dive for the full document contract field by field (decision_authority, escalation_rules, measurables, budget, permission_manifest, seat-type), then tool-access-and-vault for permissions. Submit the finished Charter directly with charter.update_draft or charter.set.
@@ -43577,11 +43889,11 @@ Read the listed guide before recommending or running each workflow. Every workfl
 
 ## Stage map
 
-- Company setup: rost-implementation-method, compass-authoring-guide, settings-guide, settings-members-and-invites-guide
+- Company setup: rost-implementation-method, compass-authoring-guide, aicos-chat-guide, settings-guide, settings-members-and-invites-guide
 - Graph design: responsibility-graph-playbook
 - Charter design: charter-design-playbook, charter-authoring-deep-dive
 - Staffing: agent-staffing-playbook, add-agents-guide, custom-agents-guide, agent-builder-guide, how-agents-work, tool-access-and-vault, available-tools-guide, skill-builder-guide, agent-skill-authoring-guide, agent-skill-setup-guide, mcp-and-cli-guide, stock-agents-guide
-- Operating rhythm: cascade-guide, signal-guide, friction-guide, confirmations-guide, steward-queue-guide, sync-rhythm-playbook, notifications-guide
+- Operating rhythm: aicos-chat-guide, cascade-guide, signal-guide, friction-guide, confirmations-guide, steward-queue-guide, sync-rhythm-playbook, notifications-guide
 - Local agents and runners: mcp-and-cli-guide, runner-guide, agent-reference-map
 - Security and troubleshooting: ai-model-data-handling-guide, security-model-guide, troubleshooting-guide
 
@@ -44292,7 +44604,7 @@ Every notification should include the seat, cause, evidence, and requested decis
     order: 75,
     title: "Local runner guide",
     summary: "How local agent sessions and runner surfaces should operate through {{brand}} without bypassing Charters or audit.",
-    version: "2026-06-30.1",
+    version: "2026-07-02.2",
     public: true,
     audiences: ["human", "cli", "mcp", "in_app_agent"],
     stages: ["staffing", "operating_rhythm"],
@@ -44318,6 +44630,26 @@ The local runner is for human-controlled local agent work. It should retrieve {{
 5. Record work, Friction, handoffs, and escalations.
 6. Revoke access when the session ends.
 
+## Install a local Runner
+
+Use Local Runner when a Seat should run on a machine you control. Install it from the public CLI \u2014 no repository checkout and no desktop app are required. A signed desktop app is planned; until verified installers ship, Settings > Runners shows no desktop download link.
+
+Recommended paths:
+
+- **Always-on host:** \`{{cli}} runner install-service --name <runner-name> --execute\` installs a background service (macOS launchd user agent, \`user/<uid>\` domain) that keeps the runner online. Manage it with \`{{cli}} runner start|stop|restart|status|logs|uninstall --name <runner-name>\`. On macOS this loads reliably when the runner user is logged in at the console; on a purely headless SSH box where that user is not at the console, run \`{{cli}} runner serve\` under a process supervisor instead.
+- **Manual smoke:** \`{{cli}} runner serve --once\` heartbeats once and exits; \`{{cli}} runner serve --execute\` claims and executes runner work orders while it runs.
+
+Two ways to authenticate and pair \u2014 both first-class, an agent can drive either entirely from the terminal:
+
+- **CLI-native (agent):** \`{{cli}} login --device\` prints a code for one human OAuth approval; after that the session is stored locally and the agent runs unattended ("approve once, then autonomous"). Then \`{{cli}} runner serve\`/\`install-service\` pairs against your active company \u2014 an authenticated CLI can also self-issue a pairing code with \`runner.pairing.start\` and claim it.
+- **Web-guided (human):** issue a pairing code from Settings > Runners > Add a Runner, then on the host run \`{{cli}} runner serve --user-code <code>\`. The host stores only the runner bearer secret in an owner-only file and never logs in.
+
+Headless and service accounts are supported first-class: when no usable OS keychain exists (for example a service or SSH account), the CLI stores the session in an owner-only file (directory 0700, file 0600) automatically \u2014 no development flag. That file holds only the CLI session token, never tenant secrets, API keys, or vault refs.
+
+Choose the local runtime with \`--runtime auto|claude|codex\` (default \`auto\`). The same short-lived seat-scoped MCP token and server-side guard apply regardless of runtime; results are tagged \`claude-cli\` or \`codex-cli\`.
+
+The runner bearer secret is stored locally and is never displayed. Each claimed turn receives a short-lived seat-scoped MCP token from {{brand}}, and server-side guards still decide what tools the Seat may use.
+
 ## Inspect and control runners from CLI or MCP
 
 - Pair a new runner: \`runner.pairing.start\` / \`rost_start_runner_pairing\` with \`name\` and \`platform\` returns a human pairing code. This is owner/admin-only because it mints a short-lived runner pairing session that leads to machine credentials.
@@ -47955,6 +48287,9 @@ function operationUsageLines(bin) {
     `${bin} error list|resolve|supersede`,
     `${bin} sync brief|compile|complete`,
     `${bin} runner list|status|diagnose|repair|work-orders|revoke|serve`,
+    // Local runner service lifecycle (DER-1142). The orchestrator mirrors this
+    // exact line into the mcp-and-cli-guide so the help/guide parity gate passes.
+    `${bin} runner install-service|start|stop|restart|status|logs|uninstall --name <name>`,
     `${bin} notification settings|test|errors`,
     `${bin} settings get|update|product-learning|agent-policy|rename`,
     `${bin} member invite|update|remove`,
@@ -48529,8 +48864,8 @@ function pendingConfirmationFromError(error51) {
 import { execFile as execFileCallback2 } from "node:child_process";
 import { access, readFile as readFile3 } from "node:fs/promises";
 import { delimiter } from "node:path";
-import { promisify as promisify3 } from "node:util";
-var execFile3 = promisify3(execFileCallback2);
+import { promisify as promisify2 } from "node:util";
+var execFile2 = promisify2(execFileCallback2);
 async function runDoctor(options) {
   const env = options.env ?? process.env;
   const store = options.store ?? createTokenStore();
@@ -48578,7 +48913,7 @@ async function checkPath(env) {
 }
 async function probeCli(command) {
   try {
-    const { stdout, stderr } = await execFile3(command, ["--version"], { timeout: 1500 });
+    const { stdout, stderr } = await execFile2(command, ["--version"], { timeout: 1500 });
     const version4 = (stdout || stderr).trim().split("\n")[0]?.trim();
     return version4 ? `installed (${version4})` : "installed";
   } catch {
@@ -48653,8 +48988,8 @@ import { chmod, mkdir as mkdir2, readFile as readFile4, rm as rm2, writeFile as
 import { hostname as hostname3, tmpdir } from "node:os";
 import path3 from "node:path";
 import { setTimeout as sleep2 } from "node:timers/promises";
-import { promisify as promisify4 } from "node:util";
-var execFile4 = promisify4(execFileCallback3);
+import { promisify as promisify3 } from "node:util";
+var execFile3 = promisify3(execFileCallback3);
 async function runRunnerServe(options) {
   const env = options.env ?? process.env;
   const fetchImpl = options.fetchImpl ?? fetch;
@@ -48693,8 +49028,11 @@ ${usage()}
         options.io.stdout.write(`heartbeat ok #${beat} runner_id=${state.runner_id} claude=${capabilities.claude.installed} codex=${capabilities.codex.installed}
 `);
       }
-      if (config2.execute && capabilities.claude.installed) {
-        await claimAndExecute(fetchImpl, options.appUrl, state, options.io);
+      if (config2.execute) {
+        const localRuntime = effectiveExecutionRuntime(config2.runtime, capabilities);
+        if (localRuntime) {
+          await claimAndExecute(fetchImpl, options.appUrl, state, options.io, localRuntime);
+        }
       }
     } catch (error51) {
       failed = true;
@@ -48714,6 +49052,7 @@ function parseServeArgs(args, appUrl2, env) {
   let heartbeatMs = Number(env.RUNNER_HEARTBEAT_MS ?? 3e4);
   let execute2 = env.RUNNER_EXECUTE === "1";
   let once = false;
+  let runtime = parseRuntime(env.RUNNER_RUNTIME ?? "auto");
   let userCode = env.RUNNER_USER_CODE;
   for (let index = 0; index < args.length; index += 1) {
     const token = args[index];
@@ -48729,6 +49068,9 @@ function parseServeArgs(args, appUrl2, env) {
     } else if (token === "--user-code") {
       userCode = requiredValue(args, index);
       index += 1;
+    } else if (token === "--runtime") {
+      runtime = parseRuntime(requiredValue(args, index));
+      index += 1;
     } else if (token === "--execute") {
       execute2 = true;
     } else if (token === "--once") {
@@ -48740,7 +49082,19 @@ function parseServeArgs(args, appUrl2, env) {
   if (!Number.isSafeInteger(heartbeatMs) || heartbeatMs < 1e3) {
     throw new Error("--heartbeat-ms must be an integer >= 1000.");
   }
-  return { name, stateFile, heartbeatMs, execute: execute2, once, ...userCode ? { userCode } : {} };
+  return { name, stateFile, heartbeatMs, execute: execute2, once, runtime, ...userCode ? { userCode } : {} };
+}
+function parseRuntime(value) {
+  if (value === "auto" || value === "claude" || value === "codex") {
+    return value;
+  }
+  throw new Error(`--runtime must be one of auto, claude, codex (got ${value}).`);
+}
+function effectiveExecutionRuntime(runtime, capabilities) {
+  if (runtime === "codex") {
+    return capabilities.codex.installed ? "codex" : null;
+  }
+  return capabilities.claude.installed ? "claude" : null;
 }
 function requiredValue(args, index) {
   const value = args[index + 1];
@@ -48772,10 +49126,16 @@ async function pairIfNeeded(client, fetchImpl, appUrl2, config2, io) {
 `);
     return existing;
   }
-  if (!client) {
-    throw new Error(`No paired runner state at ${config2.stateFile}. Run with a CLI login once to pair this runner before starting without a CLI session.`);
+  let userCode;
+  if (config2.userCode !== void 0) {
+    userCode = config2.userCode;
+  } else if (client) {
+    userCode = await startPairing(client, config2);
+  } else {
+    throw new Error(
+      `No paired runner state at ${config2.stateFile}. Provide --user-code <code> from Settings > Runners (Add a runner), or run \`${cliBrand.binName} login --device\` once to pair this runner.`
+    );
   }
-  const userCode = config2.userCode ?? await startPairing(client, config2);
   const claim = await post2(fetchImpl, appUrl2, "/api/runner/pairing/claim", { user_code: userCode });
   const runnerSecret = claim.json.runner_secret;
   const runnerId = claim.json.runner_id;
@@ -48830,7 +49190,7 @@ async function detectCapabilities() {
 }
 async function probe(command) {
   try {
-    const { stdout, stderr } = await execFile4(command, ["--version"], { timeout: 1500 });
+    const { stdout, stderr } = await execFile3(command, ["--version"], { timeout: 1500 });
     return { installed: true, version: (stdout || stderr).trim() || null, auth_state: "ready" };
   } catch {
     return { installed: false, version: null, auth_state: "unknown" };
@@ -48855,7 +49215,7 @@ async function post2(fetchImpl, appUrl2, pathName, body, token) {
   }
   return { status: response.status, json: json2 };
 }
-async function claimAndExecute(fetchImpl, appUrl2, state, io) {
+async function claimAndExecute(fetchImpl, appUrl2, state, io, runtime) {
   const claimed = await post2(fetchImpl, appUrl2, "/api/runner/work-orders/claim", {}, state.runner_secret);
   const workOrder = claimed.json.work_order;
   if (claimed.status !== 200 || !workOrder || typeof workOrder !== "object") {
@@ -48869,12 +49229,12 @@ async function claimAndExecute(fetchImpl, appUrl2, state, io) {
   if (started.status !== 200) {
     throw new Error(`work order start failed ${started.status}: ${redactForLog(JSON.stringify(started.json))}`);
   }
-  const result = await runClaudeTurn(appUrl2, workOrder);
+  const result = await runLocalTurn(appUrl2, workOrder, runtime);
   const reported = await post2(fetchImpl, appUrl2, `/api/runner/work-orders/${encodeURIComponent(workOrderId)}/result`, {
     status: result.ok ? "succeeded" : "failed",
     summary: result.summary,
     log_ref: `runner-local:${workOrderId}`,
-    model: "claude-cli"
+    model: runtime === "codex" ? "codex-cli" : "claude-cli"
   }, state.runner_secret);
   if (reported.status !== 200) {
     throw new Error(`work order result failed ${reported.status}: ${redactForLog(JSON.stringify(reported.json))}`);
@@ -48882,7 +49242,28 @@ async function claimAndExecute(fetchImpl, appUrl2, state, io) {
   io.stdout.write(`work_order_id=${workOrderId} status=${result.ok ? "succeeded" : "failed"}
 `);
 }
-async function runClaudeTurn(appUrl2, workOrder) {
+function runLocalTurn(appUrl2, workOrder, runtime) {
+  return runtime === "codex" ? runCodexTurn(appUrl2, workOrder) : runClaudeTurn(appUrl2, workOrder);
+}
+function runClaudeTurn(appUrl2, workOrder) {
+  return spawnRunnerTurn(appUrl2, workOrder, "claude");
+}
+function runCodexTurn(appUrl2, workOrder) {
+  return spawnRunnerTurn(appUrl2, workOrder, "codex");
+}
+function buildTurnCommand(runtime, prompt, configPath) {
+  if (runtime === "codex") {
+    return {
+      command: "codex",
+      args: ["exec", prompt, "--mcp-config", configPath, "--sandbox", "read-only", "--skip-git-repo-check"]
+    };
+  }
+  return {
+    command: "claude",
+    args: ["-p", prompt, "--mcp-config", configPath, "--strict-mcp-config", "--output-format", "text"]
+  };
+}
+async function spawnRunnerTurn(appUrl2, workOrder, runtime) {
   const mcp = typeof workOrder.mcp === "object" && workOrder.mcp !== null ? workOrder.mcp : {};
   const token = typeof mcp.token === "string" ? mcp.token : "";
   const url2 = typeof mcp.url === "string" ? `${appUrl2.replace(/\/+$/, "")}${mcp.url}` : `${appUrl2.replace(/\/+$/, "")}/mcp`;
@@ -48903,6 +49284,7 @@ async function runClaudeTurn(appUrl2, workOrder) {
   await writeFile2(configPath, `${mcpConfig}
 `, { mode: 384 });
   await chmod(configPath, 384);
+  const { command, args } = buildTurnCommand(runtime, prompt, configPath);
   return new Promise((resolve2) => {
     let settled = false;
     const finish = (result) => {
@@ -48913,7 +49295,7 @@ async function runClaudeTurn(appUrl2, workOrder) {
       void rm2(configPath, { force: true });
       resolve2(result);
     };
-    const child = spawn("claude", ["-p", prompt, "--mcp-config", configPath, "--strict-mcp-config", "--output-format", "text"], {
+    const child = spawn(command, args, {
       cwd: tmpdir(),
       stdio: ["ignore", "pipe", "pipe"]
     });
@@ -48940,7 +49322,431 @@ async function runClaudeTurn(appUrl2, workOrder) {
   });
 }
 function usage() {
-  return "Usage: rost runner serve [--name <text>] [--state-file <path>] [--heartbeat-ms <n>] [--user-code <code>] [--once] [--execute]";
+  return "Usage: rost runner serve [--name <text>] [--state-file <path>] [--heartbeat-ms <n>] [--user-code <code>] [--runtime auto|claude|codex] [--once] [--execute]";
+}
+
+// src/runner-service.ts
+import { execFile as execFileCallback4 } from "node:child_process";
+import { realpathSync } from "node:fs";
+import { access as access2, mkdir as mkdir3, readFile as readFile5, rm as rm3, writeFile as writeFile3 } from "node:fs/promises";
+import { homedir as homedir2 } from "node:os";
+import path4 from "node:path";
+import { promisify as promisify4 } from "node:util";
+var execFile4 = promisify4(execFileCallback4);
+var SERVICE_VERBS = ["install-service", "start", "stop", "restart", "status", "logs", "uninstall"];
+function isServiceVerb(value) {
+  return value !== void 0 && SERVICE_VERBS.includes(value);
+}
+function isRunnerServiceInvocation(args) {
+  const verb = args[0];
+  if (verb === "status") {
+    return args.includes("--name");
+  }
+  return isServiceVerb(verb);
+}
+function runnerServicePaths(homeDir, runnerName) {
+  const safeName = safeRunnerName(runnerName);
+  return {
+    launchAgentPath: path4.join(homeDir, "Library", "LaunchAgents", `${serviceLabel(safeName)}.plist`),
+    stateFile: path4.join(homeDir, "Library", "Application Support", cliBrand.name, `runner-${safeName}.json`),
+    logDir: path4.join(homeDir, "Library", "Logs", cliBrand.name, "runner", safeName)
+  };
+}
+function renderLaunchdPlist(config2) {
+  const programArgs = [
+    config2.binPath,
+    "runner",
+    "serve",
+    ...config2.execute ? ["--execute"] : [],
+    "--name",
+    config2.runnerName,
+    "--state-file",
+    config2.stateFile
+  ];
+  const programArgsXml = programArgs.map((arg) => `    <string>${escapePlist(arg)}</string>`).join("\n");
+  return `<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+  <key>Label</key>
+  <string>${escapePlist(serviceLabel(config2.runnerName))}</string>
+  <key>ProgramArguments</key>
+  <array>
+${programArgsXml}
+  </array>
+  <key>EnvironmentVariables</key>
+  <dict>
+    <key>${cliBrand.envPrefix}_APP_URL</key>
+    <string>${escapePlist(config2.appUrl)}</string>
+  </dict>
+  <key>KeepAlive</key>
+  <true/>
+  <key>RunAtLoad</key>
+  <true/>
+  <key>StandardOutPath</key>
+  <string>${escapePlist(path4.join(config2.logDir, "stdout.log"))}</string>
+  <key>StandardErrorPath</key>
+  <string>${escapePlist(path4.join(config2.logDir, "stderr.log"))}</string>
+</dict>
+</plist>
+`;
+}
+async function runRunnerService(options) {
+  const verb = options.args[0];
+  if (!isServiceVerb(verb)) {
+    options.io.stderr.write(`Unknown runner service command: ${verb ?? ""}
+${serviceUsage()}
+`);
+    return 1;
+  }
+  if (options.args.includes("--help") || options.args.includes("-h")) {
+    options.io.stdout.write(`${serviceUsage()}
+`);
+    return 0;
+  }
+  let parsed;
+  try {
+    parsed = parseServiceArgs(options.args.slice(1));
+  } catch (error51) {
+    options.io.stderr.write(`${error51 instanceof Error ? error51.message : String(error51)}
+${serviceUsage()}
+`);
+    return 1;
+  }
+  const cmd = {
+    io: options.io,
+    runnerName: parsed.runnerName,
+    appUrl: options.appUrl,
+    execute: parsed.execute,
+    binPath: options.binPath ?? resolveBinPath(),
+    homeDir: options.homeDir ?? homedir2(),
+    platform: options.platform ?? process.platform,
+    exec: options.exec ?? defaultExec,
+    uid: options.uid ?? (process.getuid ? process.getuid() : 0)
+  };
+  switch (verb) {
+    case "install-service":
+      return installService(cmd);
+    case "start":
+      return startService(cmd);
+    case "stop":
+      return stopService(cmd);
+    case "restart":
+      return restartService(cmd);
+    case "status":
+      return statusService(cmd);
+    case "logs":
+      return logsService(cmd);
+    case "uninstall":
+      return uninstallService(cmd);
+    default:
+      return assertNever2(verb);
+  }
+}
+async function installService(options) {
+  if (options.platform !== "darwin") {
+    return unsupportedPlatform(options.io, options.platform);
+  }
+  const safeName = safeRunnerName(options.runnerName);
+  const paths = runnerServicePaths(options.homeDir, safeName);
+  const label = serviceLabel(safeName);
+  await mkdir3(paths.logDir, { recursive: true });
+  await mkdir3(path4.dirname(paths.stateFile), { recursive: true });
+  await mkdir3(path4.dirname(paths.launchAgentPath), { recursive: true });
+  const plist = renderLaunchdPlist({
+    binPath: options.binPath,
+    runnerName: safeName,
+    stateFile: paths.stateFile,
+    logDir: paths.logDir,
+    appUrl: options.appUrl,
+    execute: options.execute
+  });
+  await writeFile3(paths.launchAgentPath, plist, { mode: 420 });
+  await bootoutQuietly(options.exec, options.uid, paths.launchAgentPath);
+  try {
+    await options.exec("launchctl", ["bootstrap", domainTarget(options.uid), paths.launchAgentPath]);
+  } catch (error51) {
+    options.io.stderr.write(
+      `Failed to load the runner service: ${redactForLog(error51 instanceof Error ? error51.message : String(error51))}
+`
+    );
+    return 1;
+  }
+  options.io.stdout.write(
+    `${[
+      `Installed runner service ${label}.`,
+      `plist: ${paths.launchAgentPath}`,
+      `state file: ${paths.stateFile}`,
+      `logs: ${paths.logDir}`,
+      `execute: ${options.execute ? "on (claims and runs work orders)" : "off (heartbeat only)"}`,
+      `The runner pairs on first run; its bearer secret is stored locally and never printed.`
+    ].join("\n")}
+`
+  );
+  return 0;
+}
+async function startService(options) {
+  if (options.platform !== "darwin") {
+    return unsupportedPlatform(options.io, options.platform);
+  }
+  const safeName = safeRunnerName(options.runnerName);
+  const paths = runnerServicePaths(options.homeDir, safeName);
+  const label = serviceLabel(safeName);
+  if (!await fileExists(paths.launchAgentPath)) {
+    options.io.stderr.write(
+      `No runner service found for "${safeName}". Run \`${cliBrand.binName} runner install-service --name ${safeName}\` first.
+`
+    );
+    return 1;
+  }
+  try {
+    await options.exec("launchctl", ["bootstrap", domainTarget(options.uid), paths.launchAgentPath]);
+    options.io.stdout.write(`Started runner service ${label}.
+`);
+    return 0;
+  } catch (bootstrapError) {
+    try {
+      await options.exec("launchctl", ["kickstart", "-k", serviceTarget(options.uid, label)]);
+      options.io.stdout.write(`Runner service ${label} was already loaded; restarted it.
+`);
+      return 0;
+    } catch (kickstartError) {
+      options.io.stderr.write(
+        `Failed to start runner service ${label}: ${redactForLog(kickstartError instanceof Error ? kickstartError.message : String(kickstartError))}
+`
+      );
+      return 1;
+    }
+  }
+}
+async function stopService(options) {
+  if (options.platform !== "darwin") {
+    return unsupportedPlatform(options.io, options.platform);
+  }
+  const safeName = safeRunnerName(options.runnerName);
+  const paths = runnerServicePaths(options.homeDir, safeName);
+  const label = serviceLabel(safeName);
+  try {
+    await options.exec("launchctl", ["bootout", domainTarget(options.uid), paths.launchAgentPath]);
+    options.io.stdout.write(`Stopped runner service ${label}.
+`);
+  } catch {
+    options.io.stdout.write(`Runner service ${label} was not running.
+`);
+  }
+  return 0;
+}
+async function restartService(options) {
+  if (options.platform !== "darwin") {
+    return unsupportedPlatform(options.io, options.platform);
+  }
+  const safeName = safeRunnerName(options.runnerName);
+  const label = serviceLabel(safeName);
+  try {
+    await options.exec("launchctl", ["kickstart", "-k", serviceTarget(options.uid, label)]);
+    options.io.stdout.write(`Restarted runner service ${label}.
+`);
+    return 0;
+  } catch (error51) {
+    options.io.stderr.write(
+      `Failed to restart runner service ${label}: ${redactForLog(error51 instanceof Error ? error51.message : String(error51))}. Is it installed? Run \`${cliBrand.binName} runner install-service --name ${safeName}\`.
+`
+    );
+    return 1;
+  }
+}
+async function statusService(options) {
+  if (options.platform !== "darwin") {
+    return unsupportedPlatform(options.io, options.platform);
+  }
+  const safeName = safeRunnerName(options.runnerName);
+  const paths = runnerServicePaths(options.homeDir, safeName);
+  const label = serviceLabel(safeName);
+  const installed = await fileExists(paths.launchAgentPath);
+  try {
+    const { stdout } = await options.exec("launchctl", ["print", serviceTarget(options.uid, label)]);
+    const state = extractLaunchdState(stdout);
+    options.io.stdout.write(
+      `${[
+        `runner service: ${label}`,
+        `installed: ${installed ? "yes" : "no"}`,
+        `loaded: yes`,
+        `state: ${state ?? "unknown"}`,
+        `plist: ${paths.launchAgentPath}`,
+        `logs: ${paths.logDir}`
+      ].join("\n")}
+`
+    );
+    return 0;
+  } catch {
+    options.io.stdout.write(
+      `${[
+        `runner service: ${label}`,
+        `installed: ${installed ? "yes" : "no"}`,
+        `loaded: no`,
+        `plist: ${paths.launchAgentPath}`,
+        `logs: ${paths.logDir}`
+      ].join("\n")}
+`
+    );
+    return 1;
+  }
+}
+async function logsService(options) {
+  if (options.platform !== "darwin") {
+    return unsupportedPlatform(options.io, options.platform);
+  }
+  const safeName = safeRunnerName(options.runnerName);
+  const paths = runnerServicePaths(options.homeDir, safeName);
+  const label = serviceLabel(safeName);
+  const stdoutLog = path4.join(paths.logDir, "stdout.log");
+  const stderrLog = path4.join(paths.logDir, "stderr.log");
+  options.io.stdout.write(
+    `${[
+      `runner service logs for ${label}:`,
+      `  stdout: ${stdoutLog}`,
+      `  stderr: ${stderrLog}`,
+      `Follow live with: tail -f ${JSON.stringify(stdoutLog)} ${JSON.stringify(stderrLog)}`
+    ].join("\n")}
+`
+  );
+  for (const [name, file2] of [["stdout", stdoutLog], ["stderr", stderrLog]]) {
+    const tail = await readTail(file2, 4e3);
+    if (tail !== null && tail.trim().length > 0) {
+      options.io.stdout.write(`
+----- ${name} (tail) -----
+${redactForLog(tail)}
+`);
+    }
+  }
+  return 0;
+}
+async function uninstallService(options) {
+  if (options.platform !== "darwin") {
+    return unsupportedPlatform(options.io, options.platform);
+  }
+  const safeName = safeRunnerName(options.runnerName);
+  const paths = runnerServicePaths(options.homeDir, safeName);
+  const label = serviceLabel(safeName);
+  await bootoutQuietly(options.exec, options.uid, paths.launchAgentPath);
+  let removed = false;
+  try {
+    await rm3(paths.launchAgentPath, { force: true });
+    removed = true;
+  } catch (error51) {
+    options.io.stderr.write(
+      `Failed to remove ${paths.launchAgentPath}: ${redactForLog(error51 instanceof Error ? error51.message : String(error51))}
+`
+    );
+  }
+  options.io.stdout.write(
+    `${[
+      `Uninstalled runner service ${label}.`,
+      removed ? `Removed ${paths.launchAgentPath}.` : `Could not remove ${paths.launchAgentPath}; remove it manually.`,
+      `Left the runner state file at ${paths.stateFile} (it holds the local bearer secret).`,
+      `Delete that file to forget this runner locally, and run \`${cliBrand.binName} runner revoke <runner-id>\` to revoke it in ${cliBrand.name}.`
+    ].join("\n")}
+`
+  );
+  return removed ? 0 : 1;
+}
+function parseServiceArgs(args) {
+  let runnerName;
+  let execute2 = false;
+  for (let index = 0; index < args.length; index += 1) {
+    const token = args[index];
+    if (token === "--name") {
+      const value = args[index + 1];
+      if (value === void 0 || value.startsWith("--")) {
+        throw new Error("--name requires a value.");
+      }
+      runnerName = value;
+      index += 1;
+    } else if (token === "--execute") {
+      execute2 = true;
+    } else {
+      throw new Error(`Unexpected runner service argument: ${token ?? ""}`);
+    }
+  }
+  if (runnerName === void 0 || runnerName.trim().length === 0) {
+    throw new Error("--name <runner-name> is required.");
+  }
+  return { runnerName, execute: execute2 };
+}
+function serviceUsage() {
+  const bin = cliBrand.binName;
+  return [
+    `Usage:`,
+    `  ${bin} runner install-service --name <name> [--execute]`,
+    `  ${bin} runner start|stop|restart|status|logs|uninstall --name <name>`
+  ].join("\n");
+}
+function safeRunnerName(runnerName) {
+  const safe = runnerName.replace(/[^a-zA-Z0-9._-]+/g, "-").replace(/^-+|-+$/g, "");
+  return safe.length > 0 ? safe : "runner";
+}
+function serviceLabel(safeName) {
+  return `com.${cliBrand.binName}.runner.${safeName}`;
+}
+function domainTarget(uid) {
+  return `user/${uid}`;
+}
+function serviceTarget(uid, label) {
+  return `user/${uid}/${label}`;
+}
+async function bootoutQuietly(exec, uid, plistPath) {
+  try {
+    await exec("launchctl", ["bootout", domainTarget(uid), plistPath]);
+  } catch {
+  }
+}
+function unsupportedPlatform(io, platform) {
+  io.stderr.write(
+    `Service install is not supported on ${platform} yet. Run \`${cliBrand.binName} runner serve --execute\` under a process manager (for example systemd, pm2, or nssm) to keep a runner online.
+`
+  );
+  return 1;
+}
+function resolveBinPath() {
+  const entry = process.argv[1];
+  if (entry === void 0 || entry.length === 0) {
+    return cliBrand.binName;
+  }
+  try {
+    return realpathSync(entry);
+  } catch {
+    return entry;
+  }
+}
+function extractLaunchdState(printOutput) {
+  const match = printOutput.match(/state\s*=\s*(\S+)/);
+  return match ? match[1] ?? null : null;
+}
+async function fileExists(file2) {
+  try {
+    await access2(file2);
+    return true;
+  } catch {
+    return false;
+  }
+}
+async function readTail(file2, maxBytes) {
+  try {
+    const content = await readFile5(file2, "utf8");
+    return content.length > maxBytes ? content.slice(content.length - maxBytes) : content;
+  } catch {
+    return null;
+  }
+}
+function escapePlist(value) {
+  return value.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
+}
+var defaultExec = async (file2, args) => {
+  const result = await execFile4(file2, args);
+  return { stdout: String(result.stdout), stderr: String(result.stderr) };
+};
+function assertNever2(value) {
+  throw new Error(`Unhandled runner service verb: ${String(value)}`);
 }
 
 // src/index.ts
@@ -49090,6 +49896,9 @@ async function main(argv = process.argv.slice(2), options = {}) {
       env: process.env
     });
   }
+  if (command === "runner" && isRunnerServiceInvocation(args)) {
+    return runRunnerService({ io, args, appUrl: config2.appUrl });
+  }
   if (!session) {
     io.stderr.write(`Not logged in. Run ${cliBrand.binName} login first.
 `);
@@ -49567,7 +50376,7 @@ function isCliEntrypoint(moduleUrl, argvPath) {
     return false;
   }
   try {
-    return realpathSync(fileURLToPath3(moduleUrl)) === realpathSync(argvPath);
+    return realpathSync2(fileURLToPath3(moduleUrl)) === realpathSync2(argvPath);
   } catch {
     return moduleUrl === pathToFileURL(argvPath).href;
   }