@stage-labs/metro 0.1.0-beta.201 → 0.1.0-beta.202

package/runtime/node_modules/@metro-labs/daemon/src/agent-user/user.ts

@@ -13,12 +13,11 @@ export interface AgentUser {
 }
 
 export interface UserHost {
-  platform: string;
-  uid: number | undefined;
+  metro: boolean;
   lookup: (name: string) => AgentUser | null;
 }
 
-export function lookupUser(name: string): AgentUser | null {
+function lookupUser(name: string): AgentUser | null {
   const run = spawnSync('getent', ['passwd', name], { encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'] });
   if (run.error !== undefined || run.status !== 0) return null;
   const [, , uid = '', gid = '', , home = ''] = run.stdout.trim().split(':');
@@ -27,13 +26,13 @@ export function lookupUser(name: string): AgentUser | null {
   return Number.isInteger(u) && u > 0 && Number.isInteger(g) && home.startsWith('/') ? { name, uid: u, gid: g, home } : null;
 }
 
-const realHost: UserHost = { platform: process.platform, uid: process.getuid?.(), lookup: lookupUser };
+const realHost = (): UserHost => ({ metro: runningAsMetro(), lookup: lookupUser });
 
-export const agentUserExpected = (host: UserHost = realHost): boolean => host.platform === 'linux' && (host.uid === 0 || runningAsMetro());
+export const agentUserExpected = (host: UserHost = realHost()): boolean => host.metro;
 
 let cached: AgentUser | null = null;
 
-export function agentUser(host: UserHost = realHost): AgentUser | null {
+export function agentUser(host: UserHost = realHost()): AgentUser | null {
   if (!agentUserExpected(host)) return null;
   cached ??= host.lookup(AGENT_NAME);
   return cached;
@@ -51,7 +50,7 @@ export function setAgentExtraEnv(env: Record<string, string>): void {
 
 export const agentExtraEnv = (): Record<string, string> => ({ ...extraEnv });
 
-export function agentEnv(user: AgentUser, extra: Record<string, string> = {}): Record<string, string> {
+function agentEnv(user: AgentUser, extra: Record<string, string> = {}): Record<string, string> {
   return {
     HOME: user.home,
     USER: user.name,
@@ -68,8 +67,7 @@ export function agentEnv(user: AgentUser, extra: Record<string, string> = {}): R
 export function asUser(user: AgentUser | null, file: string, args: readonly string[], extra: Record<string, string> = {}): [string, string[]] {
   if (user === null) return [file, [...args]];
   const env = Object.entries(agentEnv(user, extra)).map(([k, v]) => `${k}=${v}`);
-  if (runningAsMetro()) return ['sudo', ['-n', '-u', user.name, '--', 'env', '-i', ...env, file, ...args]];
-  return ['setpriv', [`--reuid=${String(user.uid)}`, `--regid=${String(user.gid)}`, '--init-groups', 'env', '-i', ...env, file, ...args]];
+  return ['sudo', ['-n', '-u', user.name, '--', 'env', '-i', ...env, file, ...args]];
 }
 
 export const asAgent = (file: string, args: readonly string[], extra: Record<string, string> = {}): [string, string[]] =>

package/runtime/node_modules/@metro-labs/daemon/src/agent-user/view.ts

@@ -54,7 +54,7 @@ export function viewFiles(dir = agentsDir()): Map<string, string | null> {
 
 const written = new Map<string, string | null>();
 
-export function syncAgentView(user: AgentUser | null = agentUser(), dir = agentsDir()): number {
+function syncAgentView(user: AgentUser | null = agentUser(), dir = agentsDir()): number {
   if (user === null) return 0;
   const target = agentViewDir(user);
   let changed = 0;

package/runtime/node_modules/@metro-labs/daemon/src/agents/account-lookups.ts

@@ -11,7 +11,7 @@ interface Target {
   accountId: string;
 }
 
-export interface LookupDeps extends SenderCardDeps {
+interface LookupDeps extends SenderCardDeps {
   resolveSender: (station: StationName, accountId: string, query: string) => Promise<unknown>;
 }
 

package/runtime/node_modules/@metro-labs/daemon/src/agents/accounts-api.ts

@@ -32,7 +32,7 @@ import {
   type AttachView,
 } from '../stations/attach-session.js';
 
-export interface AttachSessionApi {
+interface AttachSessionApi {
   start: (
     owner: AttachOwner,
     station: InteractiveStation,

package/runtime/node_modules/@metro-labs/daemon/src/agents/allowlist.ts

@@ -1,6 +1,6 @@
 import { ApiError } from '@metro-labs/http/api-error';
 
-export const EVERYONE = '*';
+const EVERYONE = '*';
 const MAX_ENTRIES = 500;
 const MAX_LENGTH = 200;
 

package/runtime/node_modules/@metro-labs/daemon/src/agents/bundle.ts

@@ -27,21 +27,21 @@ export const loadedAgentOf = (bundle: AgentBundle): LoadedAgent => ({
   accounts: bundle.agent.stations,
 });
 
-export interface RestoredAgent {
+interface RestoredAgent {
   id: string;
   name: string;
   stations: number;
   connectors: number;
 }
 
-export type ImportMode = 'append' | 'overwrite';
+type ImportMode = 'append' | 'overwrite';
 
 export interface BundleApiDeps {
   bundle: (agentId: string) => Promise<AgentBundle>;
   restore: (bundle: AgentBundle, mode: ImportMode) => Promise<RestoredAgent>;
 }
 
-export function parseMode(raw: unknown): ImportMode {
+function parseMode(raw: unknown): ImportMode {
   const mode = isRecord(raw) && typeof raw.mode === 'string' ? raw.mode : 'overwrite';
   if (mode !== 'append' && mode !== 'overwrite') throw bad("mode is 'append' or 'overwrite'");
   return mode;

package/runtime/node_modules/@metro-labs/daemon/src/agents/file-admin.ts

@@ -35,7 +35,7 @@ interface Stored {
 
 const missing = (): AgentAdminError => new AgentAdminError('no such agent', 404);
 
-export function parseOwner(raw: string): string | null {
+function parseOwner(raw: string): string | null {
   const text = raw.trim();
   return isOrganizationId(text) ? text : null;
 }
@@ -56,7 +56,7 @@ export function setLocalOwner(raw: string, dir = agentsDir()): string {
   return owner;
 }
 
-export function storedAgents(dir: string): Stored[] {
+function storedAgents(dir: string): Stored[] {
   return listAgentFiles(dir).map((path) => ({ path, file: readAgentFile(path) }));
 }
 

package/runtime/node_modules/@metro-labs/daemon/src/agents/files.ts

@@ -1,5 +1,4 @@
-import { existsSync, readdirSync, readFileSync, renameSync, rmdirSync } from 'node:fs';
-import { log } from '@metro-labs/core/log';
+import { existsSync, readFileSync } from 'node:fs';
 import { homedir } from 'node:os';
 import { join } from 'node:path';
 import { AGENT_NAME_RE, ID_RE } from '@metro-labs/core/ids';
@@ -8,7 +7,7 @@ import type { LoadedAccount, LoadedAgent, StationSource } from '../stations/mate
 import { isRecord } from '@metro-labs/core/is-record';
 import { parsePolicy } from '../policy/policy.js';
 
-export const AGENT_FILE = 'agent.json';
+const AGENT_FILE = 'agent.json';
 
 const KEY_RE = /^[A-Za-z0-9_-]{16,128}$/;
 const STATION_NAMES = new Set<string>(STATIONS);
@@ -126,34 +125,9 @@ export function readAgentFile(path: string): AgentFile {
   return parseAgentFile(raw, path);
 }
 
-function legacyAgentFiles(dir: string): string[] {
-  if (!existsSync(dir)) return [];
-  return readdirSync(dir, { withFileTypes: true })
-    .filter((entry) => entry.isDirectory())
-    .map((entry) => join(dir, entry.name, AGENT_FILE))
-    .filter((path) => existsSync(path))
-    .sort();
-}
-
 export function listAgentFiles(dir = agentsDir()): string[] {
   const fixed = agentFilePath(dir);
-  return existsSync(fixed) ? [fixed] : legacyAgentFiles(dir);
-}
-
-export function migrateAgentLayout(dir = agentsDir()): 'moved' | 'kept' | 'none' {
-  const fixed = agentFilePath(dir);
-  if (existsSync(fixed)) return 'kept';
-  const [first, ...rest] = legacyAgentFiles(dir);
-  if (first === undefined) return 'none';
-  renameSync(first, fixed);
-  try {
-    rmdirSync(join(first, '..'));
-  } catch {
-    log.warn({ folder: join(first, '..') }, 'agent layout: the old agent folder is not empty and was left in place');
-  }
-  for (const extra of rest) log.warn({ path: extra }, 'agent layout: a second agent file is ignored; a box holds one agent');
-  log.info({ from: first, to: fixed }, 'agent layout: moved the agent file to its fixed place');
-  return 'moved';
+  return existsSync(fixed) ? [fixed] : [];
 }
 
 export function loadFileAgents(dir = agentsDir()): LoadedAgent[] {

package/runtime/node_modules/@metro-labs/daemon/src/approvals/pending.ts

@@ -1,6 +1,9 @@
 import { errMsg, log } from '@metro-labs/core/log';
 import { previewMatches } from './preview.js';
 
+export const NEEDS_APPROVAL = (where: string, tool: string): string =>
+  `Needs the owner's approval for ${where} (${tool}). Make this exact call from a background worker so Claude Code asks the owner in chat, and wait for the answer. An approval given only in the terminal does not count.`;
+
 export type Behavior = 'allow' | 'deny';
 
 export type AnsweredVia = 'chat' | 'page' | 'expiry';
@@ -22,8 +25,7 @@ interface Held extends PendingPrompt {
 
 const PENDING_MAX = 500;
 const SWEEP_MS = 60_000;
-const DEFAULT_TTL_H = 24;
-const HOUR_MS = 3_600_000;
+const APPROVAL_TTL_MS = 24 * 3_600_000;
 
 const held = new Map<string, Held>();
 
@@ -48,11 +50,6 @@ export function takeGrant(toolMatches: (tool: string) => boolean, args: Record<s
   return true;
 }
 
-export function approvalTtlMs(env: NodeJS.ProcessEnv = process.env): number {
-  const hours = Number(env.METRO_APPROVAL_TTL_H);
-  return (Number.isFinite(hours) && hours > 0 ? hours : DEFAULT_TTL_H) * HOUR_MS;
-}
-
 const shown = ({ requestId, tool, description, preview, line, at }: Held): PendingPrompt => ({
   requestId,
   tool,
@@ -122,7 +119,7 @@ export function settlePromptsFor(name: string, args: Record<string, unknown>): v
     }
 }
 
-export async function expirePrompts(now = Date.now(), ttl = approvalTtlMs()): Promise<number> {
+export async function expirePrompts(now = Date.now(), ttl = APPROVAL_TTL_MS): Promise<number> {
   const overdue = [...held.values()].filter((entry) => now - entry.at >= ttl);
   for (const entry of overdue)
     await answerPrompt(entry.requestId, 'deny', 'expiry').catch((err: unknown) => {

package/runtime/node_modules/@metro-labs/daemon/src/approvals/preview.ts

@@ -1,7 +1,7 @@
 import { isDeepStrictEqual } from 'node:util';
 import { isRecord } from '@metro-labs/core/is-record';
 
-export const ELIDED = '\u0000';
+const ELIDED = '\u0000';
 
 const CODE_POINTS = /(?:\\n|\n)⋯ \d+ code points elided ⋯(?:\\n|\n)/g;
 const FIELD_BLOCK = /[\s,]*(?:\\n|\n)?\s*⋯[^]*$/;

package/runtime/node_modules/@metro-labs/daemon/src/boot/boot.ts

@@ -23,17 +23,14 @@ import { agentsDir, fileSource } from '../agents/files.js';
 import { syncPluginServers } from '../connectors/plugin-sync.js';
 import { loadConnectorPolicies, readLocalConnectors } from '../connectors/store.js';
 import { ensureMetroPlugin } from '../claude/plugin-install.js';
+import { runningAsRoot } from '../metro-user/privilege.js';
 import { provisionAgentUser } from '../agent-user/provision.js';
-import { convertRootJobs } from '../agent-user/schedules.js';
 import { applyVault } from '../vault/index.js';
-import { agentUser as currentAgentUser } from '../agent-user/user.js';
-import { ensureServiceOomPolicy } from '../claude/memory.js';
 import { unwatchSession, watchSession } from '../claude/session.js';
 import { tryClaudeSetup } from '../claude/setup.js';
 import { applyLocalOwner } from './local-owner.js';
 import { installBearerSessions } from '../routes/bearer.js';
 import { ensureLocalAgent, localOwner } from '../agents/file-admin.js';
-import { migrateAgentLayout } from '../agents/files.js';
 import { ensureStationDeps } from '../stations/runtime-deps.js';
 import { localSessionApis } from '../routes/local-mode.js';
 import type { SessionApis } from '../routes/session-apis.js';
@@ -124,7 +121,6 @@ function sessionApis(): SessionApis {
 async function main(): Promise<void> {
   applyLocalOwner();
 installBearerSessions(agentsDir(), localOwner);
-  migrateAgentLayout();
   watchPolicySnapshot();
   loadConnectorPolicies().catch((err: unknown) => {
     log.warn({ err: errMsg(err) }, 'connector policy: loading the policies failed');
@@ -158,13 +154,14 @@ installBearerSessions(agentsDir(), localOwner);
 }
 
 async function startClaude(): Promise<void> {
-  ensureServiceOomPolicy();
+  if (runningAsRoot()) {
+    log.error('claude: Metro runs as root, so Claude Code never starts here; reinstall Metro as the metro user');
+    return;
+  }
   const agentUser = await provisionAgentUser();
   if (agentUser !== 'off') log.info({ agentUser }, 'agent-user: Claude Code runs as its own user');
   if (agentUser === 'failed') return;
   if (agentUser === 'ready') {
-    const switched = convertRootJobs(currentAgentUser());
-    if (switched > 0) log.info({ switched }, "schedules: jobs that pointed into root's home now run as the agent user");
     const vault = (await applyVault()).status;
     if (vault.enabled) log.info({ running: vault.running, problem: vault.problem }, 'vault: the agent reaches the internet through the vault');
   }

package/runtime/node_modules/@metro-labs/daemon/src/boot/connect-hint.ts

@@ -1,14 +1,11 @@
 import { hostname } from 'node:os';
 
-const uiBase = (): string => process.env.METRO_UI_URL ?? 'https://metro.box';
-
-const connectLink = (base: string): string =>
-  `${uiBase()}/#/${new URL(base).host}`;
+const connectLink = (base: string): string => `https://metro.box/#/${new URL(base).host}`;
 
 const ownerLine = (owner: string | null): string =>
   owner === null
-    ? 'No owner is set, so no wallet can sign in. Restart with:  metro serve --owner <address>'
-    : `Only ${owner} can sign in.`;
+    ? 'No owner is set, so nobody can sign in. Restart with:  metro serve --owner <organization id>'
+    : `Only members of the organization ${owner} can sign in.`;
 
 export function localConnectHint(port: number, owner: string | null): string {
   const here = `http://127.0.0.1:${String(port)}`;

package/runtime/node_modules/@metro-labs/daemon/src/channels/inbound.ts

@@ -1,7 +1,5 @@
 import type { Server } from '@modelcontextprotocol/sdk/server/index.js';
 import { str } from '@metro-labs/core/str';
-import { dedupeKey } from './dedupe.js';
-import { PERMISSION_REPLY_RE } from './reply-id.js';
 import {
   buildMediaFailureNote,
   buildMediaNote,
@@ -9,7 +7,6 @@ import {
   type SavedMedia,
 } from './media-note.js';
 import { buildWebhookNote } from './webhook-note.js';
-import { reactContent, reactionEmoji } from './react-note.js';
 import { replyMeta } from './addressed.js';
 import {
   capSet,
@@ -23,6 +20,31 @@ import {
 } from './pending.js';
 import { agentUser } from '../agent-user/user.js';
 
+const PERMISSION_REPLY_RE = /^\s*(y|yes|n|no)\s+([a-km-z]{5})\s*$/i;
+
+const accountStrippedLine = (line: string): string => {
+  const parts = line.split('/');
+  if (parts.length < 5) return line;
+  return [parts[0], parts[1], parts[2], ...parts.slice(4)].join('/');
+};
+
+const dedupeKey = (station: string, line: string, kind: string, messageId: string): string =>
+  `${station} ${accountStrippedLine(line)} ${kind} ${messageId}`;
+
+const shortId = (id: string): string => (id.length > 10 ? `${id.slice(0, 6)}…` : id);
+
+function reactionEmoji(raw: unknown): string {
+  if (typeof raw === 'string') return raw;
+  const obj = raw as { name?: string; reaction?: string } | undefined;
+  return obj?.name ?? obj?.reaction ?? '';
+}
+
+function reactContent(emoji: string, target: string, removed: boolean): string {
+  const verb = removed ? 'removed from' : 'reacted to';
+  const label = removed ? emoji || 'reaction' : emoji || 'reacted';
+  return `${label} ${verb} message ${shortId(target)}`.trim();
+}
+
 interface InboundDeps {
   mcp: Server;
   log: (...a: unknown[]) => void;

package/runtime/node_modules/@metro-labs/daemon/src/channels/media-note.ts

@@ -6,7 +6,6 @@ export interface SavedMedia {
   contentType?: string;
   attachmentFor?: string;
   attachmentPath?: string;
-  localPath?: string;
   url?: string;
   mime?: string;
   name?: string;
@@ -22,7 +21,7 @@ export interface MediaNote {
   path: string;
 }
 
-export function mediaKind(mime?: string, name?: string): string {
+function mediaKind(mime?: string, name?: string): string {
   const m = (mime ?? '').toLowerCase();
   if (m.startsWith('image/')) return 'image';
   if (m.startsWith('video/')) return 'video';
@@ -61,7 +60,7 @@ export async function buildMediaNote(
   caption: string,
   showPath = true,
 ): Promise<MediaNote | null> {
-  const path = p.attachmentPath ?? p.localPath;
+  const path = p.attachmentPath;
   if (!path) return null;
   const kind = p.kind ?? mediaKind(p.mime, p.name);
   const name = p.name ?? path.split('/').pop() ?? 'attachment';

package/runtime/node_modules/@metro-labs/daemon/src/claude/files.ts

@@ -167,14 +167,14 @@ export function listClaudeSessions(project: string, dir = claudeDir()): ClaudeSe
   );
 }
 
-export type Block =
+type Block =
   | { kind: 'text'; text: string }
   | { kind: 'tool_use'; name: string; input: string }
   | { kind: 'tool_result'; text: string; isError: boolean }
   | { kind: 'thinking' }
   | { kind: 'image' };
 
-export interface TranscriptEntry {
+interface TranscriptEntry {
   uuid: string;
   at: string | null;
   role: 'user' | 'assistant';

package/runtime/node_modules/@metro-labs/daemon/src/claude/login.ts

@@ -16,7 +16,7 @@ const ESC = String.fromCharCode(27);
 const CSI = /^\[[0-9;?]*[a-zA-Z]/;
 const URL_RE = /https:\/\/[^\s"'`]+/g;
 
-export type LoginState = 'pending' | 'done' | 'failed';
+type LoginState = 'pending' | 'done' | 'failed';
 
 export interface LoginView {
   id: string;

package/runtime/node_modules/@metro-labs/daemon/src/claude/memory.ts

@@ -1,27 +1,19 @@
-import { spawnSync } from 'node:child_process';
-import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { existsSync } from 'node:fs';
 import { totalmem } from 'node:os';
-import { dirname } from 'node:path';
-import { errMsg, log } from '@metro-labs/core/log';
 import { helperArgv, runningAsMetro } from '../metro-user/privilege.js';
 
-const UNIT = '/etc/systemd/system/metro.service';
-const DROP_IN = '/etc/systemd/system/metro.service.d/10-metro-memory.conf';
-const DROP_IN_TEXT = '[Service]\nOOMPolicy=continue\n';
 const GIB = 1024 ** 3;
 const RESERVE = 1.5 * GIB;
 const FLOOR = GIB;
 
 export interface ScopeHost {
-  platform: string;
-  uid: number | undefined;
+  metro: boolean;
   systemd: boolean;
   total: number;
 }
 
 const realHost = (): ScopeHost => ({
-  platform: process.platform,
-  uid: process.getuid?.(),
+  metro: runningAsMetro(),
   systemd: existsSync('/run/systemd/system'),
   total: totalmem(),
 });
@@ -31,52 +23,10 @@ export function sessionMemoryLimit(total: number): number {
   return Math.max(FLOOR, Math.floor(kept / (1024 * 1024)) * 1024 * 1024);
 }
 
-const usesScopes = (host: ScopeHost): boolean => host.platform === 'linux' && host.uid === 0 && host.systemd;
-
-function metroScope(command: [string, string[]], total: number): [string, string[]] {
+export function inSessionScope(command: [string, string[]], host: ScopeHost = realHost()): [string, string[]] {
   const [file, args] = command;
   const asAgent = file === 'sudo' && args[0] === '-n' && args[1] === '-u' && args[3] === '--';
-  if (!asAgent) return command;
-  const limit = sessionMemoryLimit(total);
-  return helperArgv(['as-agent-scope', String(limit), String(Math.floor(limit * 0.9)), ...args.slice(4)]);
-}
-
-export function inSessionScope(command: [string, string[]], host: ScopeHost = realHost(), now = Date.now()): [string, string[]] {
-  if (host.systemd && runningAsMetro()) return metroScope(command, host.total);
-  if (!usesScopes(host)) return command;
+  if (!host.metro || !host.systemd || !asAgent) return command;
   const limit = sessionMemoryLimit(host.total);
-  const [file, args] = command;
-  return [
-    'systemd-run',
-    [
-      '--scope',
-      '--quiet',
-      '--collect',
-      `--unit=metro-claude-${String(now)}`,
-      '-p',
-      `MemoryMax=${String(limit)}`,
-      '-p',
-      `MemoryHigh=${String(Math.floor(limit * 0.9))}`,
-      '-p',
-      'OOMPolicy=continue',
-      '--',
-      file,
-      ...args,
-    ],
-  ];
-}
-
-export function ensureServiceOomPolicy(host: ScopeHost = realHost(), env: NodeJS.ProcessEnv = process.env): 'written' | 'present' | 'skipped' {
-  if (!usesScopes(host) || (env.INVOCATION_ID ?? '') === '' || !existsSync(UNIT)) return 'skipped';
-  try {
-    if (existsSync(DROP_IN) && readFileSync(DROP_IN, 'utf8') === DROP_IN_TEXT) return 'present';
-    mkdirSync(dirname(DROP_IN), { recursive: true });
-    writeFileSync(DROP_IN, DROP_IN_TEXT, { mode: 0o644 });
-    const reload = spawnSync('systemctl', ['daemon-reload'], { stdio: 'ignore' });
-    log.info({ reloaded: reload.status === 0 }, 'claude-memory: the metro service no longer stops as a whole when the kernel kills one process for memory');
-    return 'written';
-  } catch (err) {
-    log.warn({ err: errMsg(err) }, 'claude-memory: could not set the service memory policy');
-    return 'skipped';
-  }
+  return helperArgv(['as-agent-scope', String(limit), String(Math.floor(limit * 0.9)), ...args.slice(4)]);
 }

package/runtime/node_modules/@metro-labs/daemon/src/claude/plugin-install.ts

@@ -26,7 +26,7 @@ export interface PluginInstallDeps {
 
 export type PluginOutcome = 'skipped' | 'unchanged' | 'installed' | 'updated' | 'failed';
 
-export function storeMarketplaceDir(env: NodeJS.ProcessEnv = process.env): string | null {
+function storeMarketplaceDir(env: NodeJS.ProcessEnv = process.env): string | null {
   const store = env.METRO_RUNTIME_STORE?.trim() ?? '';
   if (store === '') return null;
   const dir = join(store, 'marketplace');
@@ -60,7 +60,7 @@ const runner =
       });
     });
 
-export async function findClaude(candidates = agentUser() === null ? ['claude', join(homedir(), '.local', 'bin', 'claude')] : [claudeBin()]): Promise<Run | null> {
+async function findClaude(candidates = agentUser() === null ? ['claude', join(homedir(), '.local', 'bin', 'claude')] : [claudeBin()]): Promise<Run | null> {
   for (const bin of candidates) {
     const run = runner(bin);
     if ((await run(['--version'])).status === 0) return run;
@@ -129,7 +129,7 @@ function explainMissingMarketplace(env: NodeJS.ProcessEnv = process.env): void {
   if (store === '') return;
   log.warn(
     { store },
-    'plugin: the runtime store holds no plugin marketplace, so metro cannot install its Claude Code plugin; a `metro serve` started before beta.97 never copied it, restart the service once',
+    'plugin: the runtime store holds no plugin marketplace, so metro cannot install its Claude Code plugin; restart the metro service once so `metro serve` stages it again',
   );
 }
 

package/runtime/node_modules/@metro-labs/daemon/src/claude/session-files.ts

@@ -6,7 +6,7 @@ import { ApiError } from '@metro-labs/http/api-error';
 import { isRecord } from '@metro-labs/core/is-record';
 import { claudeDir, PROJECT_RE, safeName, SESSION_RE } from './files.js';
 
-export const SESSION_FILE_MAX = 512 * 1024 * 1024;
+const SESSION_FILE_MAX = 512 * 1024 * 1024;
 const FILE_MODE = 0o644;
 
 export interface SessionFile {

package/runtime/node_modules/@metro-labs/daemon/src/claude/session.ts

@@ -12,7 +12,7 @@ import { claudeDir, listClaudeProjects } from './files.js';
 import { claudeAccount, claudeInstalled } from './login.js';
 import { trustFolder } from './onboarding.js';
 import { inSessionScope } from './memory.js';
-import { runningAsMetro } from '../metro-user/privilege.js';
+import { runningAsRoot } from '../metro-user/privilege.js';
 import { agentExtraEnv, agentUser, agentUserExpected, agentViewDir, asAgent, claudeHome } from '../agent-user/user.js';
 
 function sessionEnv(): Record<string, string> {
@@ -22,7 +22,7 @@ function sessionEnv(): Record<string, string> {
   return { ...agentExtraEnv(), METRO_AGENTS_DIR: agentViewDir(user), ...(port === '' ? {} : { METRO_WEBHOOK_PORT: port }) };
 }
 
-export const SESSION_NAME = 'metro';
+const SESSION_NAME = 'metro';
 const STATE_FILE = 'claude-session.json';
 const WARNING = 'WARNING: Loading development channels';
 const CONFIRM_POLL_MS = 500;
@@ -78,7 +78,7 @@ export function setAutostart(enabled: boolean, agents = agentsDir()): void {
   writeState(agents, { autostart: enabled });
 }
 
-export function startedVersion(agents = agentsDir()): string | null {
+function startedVersion(agents = agentsDir()): string | null {
   const version = readState(agents).version;
   return typeof version === 'string' ? version : null;
 }
@@ -136,7 +136,10 @@ function credentialReady(deps: SessionDeps): string | null {
 const agentUserMissing = (deps: SessionDeps): boolean =>
   deps.metro === undefined && agentUserExpected() && agentUser() === null;
 
+const ROOT_REFUSED = 'Metro runs as root; reinstall it as the metro user';
+
 export function sessionBlocked(deps: SessionDeps = {}): string | null {
+  if (runningAsRoot()) return ROOT_REFUSED;
   const agents = deps.agents ?? agentsDir();
   if (listAgentFiles(agents).length === 0) return 'no agent on this machine yet';
   if (agentUserMissing(deps))
@@ -176,8 +179,6 @@ function recordStart(deps: SessionDeps, tmux: string, now: number, run: { error?
   confirmChannels(tmux, now + CONFIRM_WAIT_MS);
 }
 
-const spawnCwd = (home: string): string => (runningAsMetro() ? '/' : home);
-
 export function startSession(deps: SessionDeps = {}): SessionStatus {
   const tmux = deps.tmux ?? 'tmux';
   const home = deps.home ?? claudeHome() ?? homedir();
@@ -186,7 +187,7 @@ export function startSession(deps: SessionDeps = {}): SessionStatus {
   const [command = 'metro', ...args] = metroCommand(deps, home);
   const tmuxArgs = ['new-session', '-d', '-s', SESSION_NAME, '-c', home, '-x', '200', '-y', '50', command, ...args];
   const launch = deps.tmux === undefined && !tmuxServerUp(tmux) ? inSessionScope(asAgent(tmux, tmuxArgs)) : asAgent(tmux, tmuxArgs);
-  const run = spawnSync(...launch, { encoding: 'utf8', stdio: ['ignore', 'pipe', 'pipe'], cwd: spawnCwd(home) });
+  const run = spawnSync(...launch, { encoding: 'utf8', stdio: ['ignore', 'pipe', 'pipe'], cwd: '/' });
   recordStart(deps, tmux, now, run);
   if (memory.lastError === null) log.info({ home, trusted, command: [command, ...args].join(' ') }, 'claude-session: started Claude Code in tmux');
   return sessionStatus(deps);

package/runtime/node_modules/@metro-labs/daemon/src/claude/settings.ts

@@ -10,7 +10,7 @@ export const SETTINGS_MAX = 256 * 1024;
 const USER_ID = 'user';
 const LOCAL_SUFFIX = '.local';
 
-export type SettingsScope = 'user' | 'project' | 'local';
+type SettingsScope = 'user' | 'project' | 'local';
 
 export interface ClaudeSettingsFile {
   id: string;

package/runtime/node_modules/@metro-labs/daemon/src/claude/setup.ts

@@ -19,13 +19,13 @@ export const PRIVACY_ENV: Record<string, string> = {
   CLAUDE_CODE_GB_DISK_CACHE_WHEN_TELEMETRY_OFF: '1',
 };
 export const RETENTION_DAYS = 7;
-export const SKILL_NAME = 'metro-orchestrator';
+const SKILL_NAME = 'metro-orchestrator';
 const STATE_FILE = 'claude-setup.json';
 const GUIDANCE = 'orchestrator.md';
-export const SYSTEM_PROMPT_FILE = 'system-prompt.md';
+const SYSTEM_PROMPT_FILE = 'system-prompt.md';
 export const SYSTEM_PROMPT_MAX = 64 * 1024;
 
-export const WORKER_AGENT = `---
+const WORKER_AGENT = `---
 name: worker
 description: Default execution agent for delegated work. Full tool access and maximum reasoning effort. Use for any substantive task the orchestrator main thread cannot perform itself - reading and writing code, running commands, research, analysis.
 effort: xhigh
@@ -73,7 +73,7 @@ export interface SetupStatus {
 
 const statePath = (agents: string): string => join(agents, STATE_FILE);
 
-export const PERMISSION_MODES = ['auto', 'bypass'] as const;
+const PERMISSION_MODES = ['auto', 'bypass'] as const;
 export type PermissionMode = (typeof PERMISSION_MODES)[number];
 
 function readState(agents: string): Record<string, unknown> {
@@ -86,7 +86,7 @@ function writeState(agents: string, patch: Record<string, unknown>): void {
   writeJson(statePath(agents), { ...readState(agents), ...patch });
 }
 
-export const privacyEnabled = (agents = agentsDir()): boolean => readState(agents).privacy !== false;
+const privacyEnabled = (agents = agentsDir()): boolean => readState(agents).privacy !== false;
 
 export function setPrivacy(enabled: boolean, agents = agentsDir()): void {
   writeState(agents, { privacy: enabled });
@@ -120,7 +120,7 @@ export function setSystemPrompt(text: string, agents = agentsDir()): void {
   writeAtomic(promptPath(agents), `${trimmed}\n`, 0o600);
 }
 
-export function guidancePath(env: NodeJS.ProcessEnv = process.env): string {
+function guidancePath(env: NodeJS.ProcessEnv = process.env): string {
   const staged = stagedMarketplaceDir(env);
   if (staged !== null) {
     const path = join(staged, 'plugin', GUIDANCE);
@@ -177,7 +177,7 @@ function mergeSettings(dir: string, change: (settings: Record<string, unknown>)
   return 'written';
 }
 
-export function applyPrivacy(dir: string, enabled: boolean): SettingsOutcome {
+function applyPrivacy(dir: string, enabled: boolean): SettingsOutcome {
   return mergeSettings(dir, (current) => withPrivacy(current, enabled));
 }