@sulala/agent-os 0.1.0 → 0.1.2

package/dist/cli.js

@@ -80,6 +80,7 @@ async function readConfig() {
       const signal_default_agent_id = o.signal_default_agent_id;
       const viber_auth_token = o.viber_auth_token;
       const viber_default_agent_id = o.viber_default_agent_id;
+      const onboarding_completed = o.onboarding_completed;
       return {
         provider: provider === "openrouter" || provider === "openai" ? provider : undefined,
         api_key: typeof api_key === "string" ? api_key : undefined,
@@ -98,7 +99,8 @@ async function readConfig() {
         signal_bridge_url: typeof signal_bridge_url === "string" ? signal_bridge_url.trim() || undefined : undefined,
         signal_default_agent_id: typeof signal_default_agent_id === "string" ? signal_default_agent_id : undefined,
         viber_auth_token: typeof viber_auth_token === "string" ? viber_auth_token : undefined,
-        viber_default_agent_id: typeof viber_default_agent_id === "string" ? viber_default_agent_id : undefined
+        viber_default_agent_id: typeof viber_default_agent_id === "string" ? viber_default_agent_id : undefined,
+        onboarding_completed: onboarding_completed === true ? true : undefined
       };
     }
   } catch (err) {
@@ -128,7 +130,8 @@ async function writeConfig(updates) {
     signal_bridge_url: updates.signal_bridge_url !== undefined ? updates.signal_bridge_url : current.signal_bridge_url,
     signal_default_agent_id: updates.signal_default_agent_id !== undefined ? updates.signal_default_agent_id : current.signal_default_agent_id,
     viber_auth_token: updates.viber_auth_token !== undefined ? updates.viber_auth_token : current.viber_auth_token,
-    viber_default_agent_id: updates.viber_default_agent_id !== undefined ? updates.viber_default_agent_id : current.viber_default_agent_id
+    viber_default_agent_id: updates.viber_default_agent_id !== undefined ? updates.viber_default_agent_id : current.viber_default_agent_id,
+    onboarding_completed: updates.onboarding_completed !== undefined ? updates.onboarding_completed : current.onboarding_completed
   };
   const home = getAgentOsHome();
   const path = getConfigPath();
@@ -151,7 +154,8 @@ async function writeConfig(updates) {
     signal_bridge_url: merged.signal_bridge_url ?? null,
     signal_default_agent_id: merged.signal_default_agent_id ?? null,
     viber_auth_token: merged.viber_auth_token ?? null,
-    viber_default_agent_id: merged.viber_default_agent_id ?? null
+    viber_default_agent_id: merged.viber_default_agent_id ?? null,
+    onboarding_completed: merged.onboarding_completed ?? null
   }, null, 2), "utf-8");
 }
 function getConfigsDir() {
@@ -850,6 +854,66 @@ var init_agent_registry = __esm(() => {
   ];
 });
 
+// src/core/tool-registry.ts
+function registerTool(tool) {
+  registry.set(tool.id, tool);
+}
+function unregisterTool(id) {
+  return registry.delete(id);
+}
+function getTool(id) {
+  return registry.get(id);
+}
+function getAllTools() {
+  return [...registry.values()];
+}
+function getSkillIdFromToolId(toolId) {
+  if (toolId.endsWith("_request"))
+    return toolId.replace(/_request$/, "");
+  const idx = toolId.indexOf(":");
+  if (idx > 0)
+    return toolId.slice(0, idx);
+  return null;
+}
+function unregisterSkillTools() {
+  const all = getAllTools();
+  for (const t of all) {
+    if (getSkillIdFromToolId(t.id) !== null)
+      unregisterTool(t.id);
+  }
+}
+function getToolsForAgent(agent) {
+  const all = getAllTools();
+  const allowlist = agent.tools;
+  if (allowlist?.length) {
+    const set = new Set(allowlist);
+    return all.filter((t) => set.has(t.id));
+  }
+  const skills = agent.skills;
+  if (skills?.length && !skills.includes("*")) {
+    const skillSet = new Set(skills);
+    return all.filter((t) => {
+      const skillId = getSkillIdFromToolId(t.id);
+      return skillId === null || skillSet.has(skillId);
+    });
+  }
+  return all;
+}
+function toolToOpenAIFormat(tool) {
+  return {
+    type: "function",
+    function: {
+      name: tool.id,
+      description: tool.description,
+      parameters: tool.input_schema
+    }
+  };
+}
+var registry;
+var init_tool_registry = __esm(() => {
+  registry = new Map;
+});
+
 // node_modules/yaml/dist/nodes/identity.js
 var require_identity = __commonJS((exports) => {
   var ALIAS = Symbol.for("yaml.alias");
@@ -7801,75 +7865,9 @@ var require_dist = __commonJS((exports) => {
   exports.visitAsync = visit.visitAsync;
 });
 
-// src/core/tool-registry.ts
-function registerTool(tool) {
-  registry.set(tool.id, tool);
-}
-function unregisterTool(id) {
-  return registry.delete(id);
-}
-function getTool(id) {
-  return registry.get(id);
-}
-function getAllTools() {
-  return [...registry.values()];
-}
-function getSkillIdFromToolId(toolId) {
-  if (toolId.endsWith("_request"))
-    return toolId.replace(/_request$/, "");
-  const idx = toolId.indexOf(":");
-  if (idx > 0)
-    return toolId.slice(0, idx);
-  return null;
-}
-function unregisterSkillTools() {
-  const all = getAllTools();
-  for (const t of all) {
-    if (getSkillIdFromToolId(t.id) !== null)
-      unregisterTool(t.id);
-  }
-}
-function getToolsForAgent(agent) {
-  const all = getAllTools();
-  const allowlist = agent.tools;
-  if (allowlist?.length) {
-    const set = new Set(allowlist);
-    return all.filter((t) => set.has(t.id));
-  }
-  const skills = agent.skills;
-  if (skills?.length && !skills.includes("*")) {
-    const skillSet = new Set(skills);
-    return all.filter((t) => {
-      const skillId = getSkillIdFromToolId(t.id);
-      return skillId === null || skillSet.has(skillId);
-    });
-  }
-  return all;
-}
-function toolToOpenAIFormat(tool) {
-  return {
-    type: "function",
-    function: {
-      name: tool.id,
-      description: tool.description,
-      parameters: tool.input_schema
-    }
-  };
-}
-var registry;
-var init_tool_registry = __esm(() => {
-  registry = new Map;
-});
-
-// src/core/error.ts
-function errorMessage(err) {
-  return err instanceof Error ? err.message : String(err);
-}
-
-// src/skills/loader.ts
-import { readFile as readFile3, readdir as readdir2, cp, mkdir as mkdir3, writeFile as writeFile3, rm } from "fs/promises";
-import { join as join3, resolve as resolve2, basename } from "path";
-import { tmpdir } from "os";
+// src/skills/skill-doc.ts
+import { readFile as readFile3 } from "fs/promises";
+import { join as join3 } from "path";
 function getRequiredEnvFromDoc(doc) {
   const creds = Array.isArray(doc.credentials) ? doc.credentials : typeof doc.credentials === "string" ? [doc.credentials] : [];
   const baseEnv = doc.base_url_env?.trim() ? [doc.base_url_env.trim()] : [];
@@ -7890,18 +7888,6 @@ async function getRequiredEnvForSkill(skillDir, subEntries, doc) {
   }
   return env;
 }
-async function loadSkillYamlFromFile(path) {
-  try {
-    const raw = await readFile3(path, "utf-8");
-    const parsed = import_yaml.default.parse(raw);
-    return parsed;
-  } catch (err) {
-    if (err.code === "ENOENT")
-      return null;
-    console.error(`[skills] Failed to read YAML from ${path}:`, err);
-    return null;
-  }
-}
 function extractYamlBlockFromMarkdown(md) {
   const lines = md.split(`
 `);
@@ -7915,15 +7901,12 @@ function extractYamlBlockFromMarkdown(md) {
       }
       continue;
     }
-    if (trimmed.startsWith("```")) {
+    if (trimmed.startsWith("```"))
       break;
-    }
     buf.push(line);
   }
-  if (buf.length === 0)
-    return null;
-  return buf.join(`
-`);
+  return buf.length > 0 ? buf.join(`
+`) : null;
 }
 function extractFrontmatterFromMarkdown(md) {
   const lines = md.split(`
@@ -7936,16 +7919,53 @@ function extractFrontmatterFromMarkdown(md) {
       break;
     buf.push(lines[i]);
   }
-  if (buf.length === 0)
+  return buf.length > 0 ? buf.join(`
+`) : null;
+}
+function extractMarkdownBody(md) {
+  const trimmed = md.replace(/\r\n/g, `
+`).trim();
+  if (!trimmed.startsWith("---"))
+    return trimmed;
+  const afterFirst = trimmed.slice(3);
+  const closeIdx = afterFirst.indexOf(`
+---`);
+  if (closeIdx === -1)
+    return trimmed;
+  return afterFirst.slice(closeIdx + 4).trim();
+}
+async function loadSkillDocument(dir, entries) {
+  if (!entries.includes("SKILL.md"))
     return null;
-  return buf.join(`
-`);
+  try {
+    const raw = await readFile3(join3(dir, "SKILL.md"), "utf-8");
+    const yamlBlock = extractFrontmatterFromMarkdown(raw) || extractYamlBlockFromMarkdown(raw);
+    if (!yamlBlock) {
+      console.warn(`[skills] No YAML frontmatter or block in SKILL.md for ${dir}, skipping.`);
+      return null;
+    }
+    return import_yaml.default.parse(yamlBlock);
+  } catch (err) {
+    console.error(`[skills] Failed to read SKILL.md in ${dir}:`, err);
+    return null;
+  }
+}
+var import_yaml;
+var init_skill_doc = __esm(() => {
+  import_yaml = __toESM(require_dist(), 1);
+});
+
+// src/skills/skill-extract.ts
+import { readFile as readFile4, readdir as readdir2 } from "fs/promises";
+import { join as join4 } from "path";
+function isJunkDir(name) {
+  return JUNK_DIR_NAMES.has(name.toLowerCase()) || name.startsWith(".");
 }
 async function deriveSkillIdFromFlatRoot(extractDir, archiveFilename) {
   const entries = await readdir2(extractDir);
   if (entries.includes("_meta.json")) {
     try {
-      const raw = await readFile3(join3(extractDir, "_meta.json"), "utf-8");
+      const raw = await readFile4(join4(extractDir, "_meta.json"), "utf-8");
       const meta = JSON.parse(raw);
       if (typeof meta.slug === "string" && meta.slug.length > 0) {
         return meta.slug.replace(/[^a-z0-9_-]/gi, "_").toLowerCase() || "skill";
@@ -7954,10 +7974,10 @@ async function deriveSkillIdFromFlatRoot(extractDir, archiveFilename) {
   }
   if (entries.includes("SKILL.md")) {
     try {
-      const raw = await readFile3(join3(extractDir, "SKILL.md"), "utf-8");
+      const raw = await readFile4(join4(extractDir, "SKILL.md"), "utf-8");
       const yamlBlock = extractFrontmatterFromMarkdown(raw) || extractYamlBlockFromMarkdown(raw);
       if (yamlBlock) {
-        const parsed = import_yaml.default.parse(yamlBlock);
+        const parsed = import_yaml2.default.parse(yamlBlock);
         if (typeof parsed.name === "string" && parsed.name.length > 0) {
           return parsed.name.replace(/[^a-z0-9_-]/gi, "_").toLowerCase() || "skill";
         }
@@ -7967,9 +7987,6 @@ async function deriveSkillIdFromFlatRoot(extractDir, archiveFilename) {
   const stem = archiveFilename.replace(/\.tar\.gz$/i, "").replace(/\.tgz$/i, "").replace(/\.zip$/i, "").replace(/\.tar$/i, "");
   return stem.replace(/[^a-z0-9_-]/gi, "_").toLowerCase() || "skill";
 }
-function isJunkDir(name) {
-  return JUNK_DIR_NAMES.has(name.toLowerCase()) || name.startsWith(".");
-}
 async function chooseSkillRootFromExtract(tmpDir, archiveFilename) {
   const entries = await readdir2(tmpDir, { withFileTypes: true });
   const rootNames = new Set(entries.map((e) => e.name));
@@ -7977,7 +7994,7 @@ async function chooseSkillRootFromExtract(tmpDir, archiveFilename) {
   const dirs = entries.filter((e) => e.isDirectory() && !isJunkDir(e.name));
   const dirsWithSkillDoc = [];
   for (const d of dirs) {
-    const sub = await readdir2(join3(tmpDir, d.name)).catch(() => []);
+    const sub = await readdir2(join4(tmpDir, d.name)).catch(() => []);
     const hasSkillMd = sub.includes("SKILL.md");
     if (hasSkillMd || sub.includes("README.md"))
       dirsWithSkillDoc.push({ name: d.name, hasSkillMd });
@@ -7988,12 +8005,11 @@ async function chooseSkillRootFromExtract(tmpDir, archiveFilename) {
   }
   if (dirsWithSkillDoc.length >= 1) {
     const preferred = dirsWithSkillDoc.find((d) => d.hasSkillMd) ?? dirsWithSkillDoc[0];
-    const dirName = preferred.name;
-    return { id: dirName, sourcePath: join3(tmpDir, dirName) };
+    return { id: preferred.name, sourcePath: join4(tmpDir, preferred.name) };
   }
   if (dirs.length === 1) {
     const dirName = dirs[0].name;
-    return { id: dirName, sourcePath: join3(tmpDir, dirName) };
+    return { id: dirName, sourcePath: join4(tmpDir, dirName) };
   }
   if (hasSkillDocAtRoot) {
     const id2 = await deriveSkillIdFromFlatRoot(tmpDir, archiveFilename);
@@ -8001,33 +8017,43 @@ async function chooseSkillRootFromExtract(tmpDir, archiveFilename) {
   }
   const firstDir = dirs[0];
   if (firstDir) {
-    return { id: firstDir.name, sourcePath: join3(tmpDir, firstDir.name) };
+    return { id: firstDir.name, sourcePath: join4(tmpDir, firstDir.name) };
   }
   const id = await deriveSkillIdFromFlatRoot(tmpDir, archiveFilename);
   return { id, sourcePath: tmpDir };
 }
-async function loadSkillDocument(dir, entries) {
-  const mdName = "SKILL.md";
-  const yamlName = "skill.yaml";
-  if (entries.includes(mdName)) {
+function slugToSkillId(slug) {
+  return slug.trim().toLowerCase().replace(/[^a-z0-9_-]/g, "_").replace(/_+/g, "_").replace(/^_|_$/g, "") || "skill";
+}
+function deriveSkillIdFromSkillMdContent(md, filename) {
+  const yamlBlock = extractFrontmatterFromMarkdown(md) || extractYamlBlockFromMarkdown(md);
+  if (yamlBlock) {
     try {
-      const raw = await readFile3(join3(dir, mdName), "utf-8");
-      const yamlBlock = extractYamlBlockFromMarkdown(raw) || extractFrontmatterFromMarkdown(raw);
-      if (!yamlBlock) {
-        console.warn(`[skills] No YAML block or frontmatter in ${mdName} for ${dir}, skipping.`);
-        return null;
+      const parsed = import_yaml2.default.parse(yamlBlock);
+      if (typeof parsed.name === "string" && parsed.name.trim()) {
+        return parsed.name.trim().replace(/[^a-z0-9_-]/gi, "_").toLowerCase().replace(/^_+|_+$/g, "") || "skill";
       }
-      const parsed = import_yaml.default.parse(yamlBlock);
-      return parsed;
-    } catch (err) {
-      console.error(`[skills] Failed to read SKILL.md in ${dir}:`, err);
-    }
+    } catch {}
   }
-  if (entries.includes(yamlName)) {
-    return loadSkillYamlFromFile(join3(dir, yamlName));
+  const stem = filename.replace(/\.(md|markdown)$/i, "").trim();
+  if (stem && stem !== "SKILL") {
+    return stem.replace(/[^a-z0-9_-]/gi, "_").toLowerCase() || "uploaded_skill";
   }
-  return null;
+  return "uploaded_skill";
 }
+var import_yaml2, JUNK_DIR_NAMES;
+var init_skill_extract = __esm(() => {
+  init_skill_doc();
+  import_yaml2 = __toESM(require_dist(), 1);
+  JUNK_DIR_NAMES = new Set(["__macosx"]);
+});
+
+// src/core/error.ts
+function errorMessage(err) {
+  return err instanceof Error ? err.message : String(err);
+}
+
+// src/skills/skill-tools.ts
 function getSkillBaseUrl() {
   const env = process.env.AGENT_OS_SKILL_BASE_URL?.trim();
   if (env)
@@ -8036,10 +8062,23 @@ function getSkillBaseUrl() {
   const port = process.env.PORT || "3010";
   return `http://${host}:${port}`;
 }
-function httpToolFromDescriptor(skill, dir, desc) {
+async function getAuthToken(skillId, credentials) {
+  if (!credentials?.length)
+    return null;
+  const { readSkillConfig: readSkillConfig2 } = await Promise.resolve().then(() => (init_config(), exports_config));
+  const stored = await readSkillConfig2(skillId);
+  for (const envVar of credentials) {
+    const v = stored[envVar]?.trim() ?? process.env[envVar]?.trim();
+    if (v)
+      return v;
+  }
+  return null;
+}
+function httpToolFromDescriptor(skill, _dir, desc) {
   const id = desc.id;
   const method = (desc.method || "GET").toUpperCase();
   const path = desc.path || "/";
+  const base = getSkillBaseUrl();
   return {
     id,
     name: `${skill}:${id}`,
@@ -8052,7 +8091,6 @@ function httpToolFromDescriptor(skill, dir, desc) {
       }
     },
     async execute(input) {
-      const base = getSkillBaseUrl();
       const url = `${base}${path}`;
       const query = input.query ?? {};
       let body = input.body;
@@ -8070,9 +8108,7 @@ function httpToolFromDescriptor(skill, dir, desc) {
       }
       const res = await fetch(urlObj.toString(), {
         method,
-        headers: {
-          "Content-Type": "application/json"
-        },
+        headers: { "Content-Type": "application/json" },
         body: method === "GET" || method === "HEAD" ? undefined : JSON.stringify(body ?? {})
       });
       const text = await res.text();
@@ -8082,26 +8118,10 @@ function httpToolFromDescriptor(skill, dir, desc) {
       } catch {
         json = text;
       }
-      return {
-        status: res.status,
-        ok: res.ok,
-        data: json
-      };
+      return { status: res.status, ok: res.ok, data: json };
     }
   };
 }
-async function getAuthToken(skillId, credentials) {
-  if (!credentials?.length)
-    return null;
-  const { readSkillConfig: readSkillConfig2 } = await Promise.resolve().then(() => (init_config(), exports_config));
-  const stored = await readSkillConfig2(skillId);
-  for (const envVar of credentials) {
-    const v = stored[envVar]?.trim() ?? process.env[envVar]?.trim();
-    if (v)
-      return v;
-  }
-  return null;
-}
 function createDocOnlyRequestTool(skillId, apiBase, credentials, authScheme, authLocation, authParam, skillDescription) {
   const base = apiBase.replace(/\/$/, "");
   const desc = skillDescription?.trim() ? `${skillDescription.trim()} Use this tool with method, path, and optional query and body. See skill doc for paths and examples.` : `Call the API for the "${skillId}" skill. Provide method (GET, POST, etc.), path, and optional query (object) and body (object). Use the skill documentation in your context to know which paths and params to use.`;
@@ -8226,11 +8246,17 @@ function createTokenRequestTool(skillId, toolId, baseUrl, description) {
     }
   };
 }
+var init_skill_tools = () => {};
+
+// src/skills/loader.ts
+import { readFile as readFile5, readdir as readdir3, cp, mkdir as mkdir3, writeFile as writeFile3, rm } from "fs/promises";
+import { join as join5, resolve as resolve2, basename } from "path";
+import { tmpdir } from "os";
 async function loadSkill(name) {
-  const dir = join3(getSkillsDir(), name);
+  const dir = join5(getSkillsDir(), name);
   let entries;
   try {
-    entries = await readdir2(dir);
+    entries = await readdir3(dir);
   } catch (err) {
     if (err.code === "ENOENT")
       return;
@@ -8244,8 +8270,7 @@ async function loadSkill(name) {
     for (const t of skill.tools) {
       if (!t.id)
         continue;
-      const tool = httpToolFromDescriptor(name, dir, t);
-      registerTool(tool);
+      registerTool(httpToolFromDescriptor(name, dir, t));
     }
     return;
   }
@@ -8264,7 +8289,7 @@ async function loadSkill(name) {
   }
   if (!apiBase && entries.includes("skill.json")) {
     try {
-      const raw = await readFile3(join3(dir, "skill.json"), "utf-8");
+      const raw = await readFile5(join5(dir, "skill.json"), "utf-8");
       const meta = JSON.parse(raw);
       if (meta.base_url_env && process.env[meta.base_url_env]?.trim()) {
         apiBase = process.env[meta.base_url_env].trim().replace(/\/$/, "");
@@ -8277,7 +8302,7 @@ async function loadSkill(name) {
   }
   if (!apiBase && entries.includes("SKILL.md")) {
     try {
-      const raw = await readFile3(join3(dir, "SKILL.md"), "utf-8");
+      const raw = await readFile5(join5(dir, "SKILL.md"), "utf-8");
       const match = raw.match(/Base\s+URL:\s*[`"]?(\s*https?:\/\/[^\s`"]+)/i) || raw.match(/api_base:\s*["']?([^"'\s]+)/i);
       if (match?.[1])
         apiBase = match[1].trim().replace(/[`"]/g, "");
@@ -8285,8 +8310,7 @@ async function loadSkill(name) {
   }
   if (apiBase) {
     const authScheme = skill.auth_scheme === "Apikey" ? "Apikey" : "Bearer";
-    const tool = createDocOnlyRequestTool(name, apiBase, credentials, authScheme, skill.auth_location, skill.auth_param, skill.description);
-    registerTool(tool);
+    registerTool(createDocOnlyRequestTool(name, apiBase, credentials, authScheme, skill.auth_location, skill.auth_param, skill.description));
   } else if (baseUrlEnv) {
     console.warn(`[skills] ${name} skill loaded but request tool not registered: set ${baseUrlEnv} so the agent can call the API.`);
   }
@@ -8305,28 +8329,16 @@ async function loadSkillsForAgent(agent) {
   }
   await Promise.all(skills.map((name) => loadSkill(name)));
 }
-function extractMarkdownBody(md) {
-  const trimmed = md.replace(/\r\n/g, `
-`).trim();
-  if (!trimmed.startsWith("---"))
-    return trimmed;
-  const afterFirst = trimmed.slice(3);
-  const closeIdx = afterFirst.indexOf(`
----`);
-  if (closeIdx === -1)
-    return trimmed;
-  return afterFirst.slice(closeIdx + 4).trim();
-}
 async function getSkillDocContext(skillNames) {
   const dir = getSkillsDir();
   const parts = [];
   for (const name of skillNames) {
     if (!name?.trim())
       continue;
-    const skillDir = join3(dir, name);
-    const mdPath = join3(skillDir, "SKILL.md");
+    const skillDir = join5(dir, name);
+    const mdPath = join5(skillDir, "SKILL.md");
     try {
-      const raw = await readFile3(mdPath, "utf-8");
+      const raw = await readFile5(mdPath, "utf-8");
       const body = extractMarkdownBody(raw);
       if (body)
         parts.push(`## Skill: ${name}
@@ -8341,10 +8353,9 @@ ${body}`);
 `);
 }
 async function getSkillConfigSchema(skillId) {
-  const dir = join3(getSkillsDir(), skillId);
-  const path = join3(dir, "config.schema.json");
+  const path = join5(getSkillsDir(), skillId, "config.schema.json");
   try {
-    const raw = await readFile3(path, "utf-8");
+    const raw = await readFile5(path, "utf-8");
     const parsed = JSON.parse(raw);
     if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
       return parsed;
@@ -8357,10 +8368,9 @@ async function getSkillConfigSchema(skillId) {
   return null;
 }
 async function getSkillSetupMarkdown(skillId) {
-  const dir = join3(getSkillsDir(), skillId);
-  const mdPath = join3(dir, "SKILL.md");
+  const mdPath = join5(getSkillsDir(), skillId, "SKILL.md");
   try {
-    const raw = await readFile3(mdPath, "utf-8");
+    const raw = await readFile5(mdPath, "utf-8");
     const lines = raw.split(`
 `);
     let inSetup = false;
@@ -8391,22 +8401,19 @@ async function getSkillSetupMarkdown(skillId) {
 }
 async function getStoreRegistry() {
   const registryUrl = process.env.SKILLS_REGISTRY_URL?.trim() ?? null;
-  if (!registryUrl) {
+  if (!registryUrl)
     return { skills: [], storeBase: null, registryUrl: null };
-  }
   let storeBase = null;
   try {
     storeBase = new URL(registryUrl).origin;
   } catch {}
   try {
     const res = await fetch(registryUrl, { redirect: "follow" });
-    if (!res.ok) {
+    if (!res.ok)
       return { skills: [], storeBase, registryUrl };
-    }
     const contentType = (res.headers.get("content-type") ?? "").toLowerCase();
-    if (!contentType.includes("application/json")) {
+    if (!contentType.includes("application/json"))
       return { skills: [], storeBase, registryUrl };
-    }
     const data = await res.json();
     const raw = Array.isArray(data) ? data : Array.isArray(data?.skills) ? data.skills : [];
     const skills = raw.filter((e) => e != null && typeof e === "object").filter((e) => typeof e.slug === "string").map((e) => {
@@ -8433,13 +8440,10 @@ async function getStoreRegistry() {
 }
 async function getSkillMarketplace() {
   const home = getAgentOsHome();
-  const paths = [
-    join3(home, "skill-marketplace.json"),
-    join3(process.cwd(), "data", "skill-marketplace.json")
-  ];
+  const paths = [join5(home, "skill-marketplace.json"), join5(process.cwd(), "data", "skill-marketplace.json")];
   for (const path of paths) {
     try {
-      const raw = await readFile3(path, "utf-8");
+      const raw = await readFile5(path, "utf-8");
       const parsed = JSON.parse(raw);
       if (Array.isArray(parsed)) {
         return parsed.filter((e) => e && typeof e === "object" && typeof e.id === "string" && typeof e.name === "string");
@@ -8459,15 +8463,13 @@ async function uninstallSkill(skillId) {
   if (SYSTEM_SKILL_IDS.has(skillId)) {
     throw new Error("Cannot uninstall system skill");
   }
-  const dir = getSkillsDir();
-  const skillDir = join3(dir, skillId);
-  await rm(skillDir, { recursive: true, force: true });
+  await rm(join5(getSkillsDir(), skillId), { recursive: true, force: true });
 }
 async function listSkills() {
   const dir = getSkillsDir();
   let entries;
   try {
-    entries = await readdir2(dir, { withFileTypes: true });
+    entries = await readdir3(dir, { withFileTypes: true });
   } catch (err) {
     if (err.code === "ENOENT")
       return [];
@@ -8480,10 +8482,10 @@ async function listSkills() {
     const name = e.name;
     if (!name || name.startsWith("."))
       continue;
-    const skillDir = join3(dir, name);
+    const skillDir = join5(dir, name);
     let subEntries;
     try {
-      subEntries = await readdir2(skillDir);
+      subEntries = await readdir3(skillDir);
     } catch {
       continue;
     }
@@ -8512,16 +8514,13 @@ function getAllowedPathBase() {
 async function installSkillFromPath(sourcePath) {
   const base = getAllowedPathBase();
   const resolved = resolve2(sourcePath);
-  if (!resolved.startsWith(base)) {
+  if (!resolved.startsWith(base))
     throw new Error(`Path must be under ${base}`);
-  }
   const id = basename(resolved);
-  if (!id || id.startsWith(".")) {
+  if (!id || id.startsWith("."))
     throw new Error("Invalid skill folder name");
-  }
-  const destDir = join3(getSkillsDir(), id);
   await mkdir3(getSkillsDir(), { recursive: true });
-  await cp(resolved, destDir, { recursive: true });
+  await cp(resolved, join5(getSkillsDir(), id), { recursive: true });
   return { id };
 }
 async function installSystemSkills() {
@@ -8535,16 +8534,15 @@ async function installSystemSkills() {
   } catch {
     seedExists = false;
   }
-  if (!seedExists) {
+  if (!seedExists)
     throw new Error(`Seed skills directory not found: ${seedDir}`);
-  }
   let installed = 0;
   for (const id of DEFAULT_SYSTEM_SKILL_IDS) {
-    const sourcePath = join3(seedDir, id);
-    const destPath = join3(skillsDir, id);
+    const sourcePath = join5(seedDir, id);
+    const destPath = join5(skillsDir, id);
     let hasSkillMd;
     try {
-      await access(join3(sourcePath, "SKILL.md"));
+      await access(join5(sourcePath, "SKILL.md"));
       hasSkillMd = true;
     } catch {
       hasSkillMd = false;
@@ -8553,8 +8551,7 @@ async function installSystemSkills() {
       continue;
     let alreadyInstalled;
     try {
-      const st = await stat(destPath);
-      alreadyInstalled = st.isDirectory();
+      alreadyInstalled = (await stat(destPath)).isDirectory();
     } catch {
       alreadyInstalled = false;
     }
@@ -8569,35 +8566,25 @@ async function installSystemSkills() {
   }
   return { installed };
 }
-function slugToSkillId(slug) {
-  return slug.trim().toLowerCase().replace(/[^a-z0-9_-]/g, "_").replace(/_+/g, "_").replace(/^_|_$/g, "") || "skill";
-}
 async function installSkillFromUrl(url, explicitId) {
   const urlLower = url.toLowerCase();
   const isStoreSkillContentUrl = urlLower.includes("/api/sulalahub/skills/") && !urlLower.includes("/download") && !urlLower.endsWith(".zip");
   const headers = isStoreSkillContentUrl ? { Accept: "application/zip" } : {};
   const res = await fetch(url, { redirect: "follow", headers });
-  if (!res.ok) {
+  if (!res.ok)
     throw new Error(`Fetch failed: ${res.status}`);
-  }
   const buf = await res.arrayBuffer();
   const contentType = (res.headers.get("content-type") ?? "").toLowerCase();
-  const isZipByType = contentType.includes("application/zip");
-  const isZipByUrl = urlLower.endsWith(".zip") || urlLower.includes("/download");
-  const isZip = isZipByType || isZipByUrl;
+  const isZip = contentType.includes("application/zip") || urlLower.endsWith(".zip") || urlLower.includes("/download");
   const skillsDir = getSkillsDir();
   await mkdir3(skillsDir, { recursive: true });
-  const tmpDir = join3(tmpdir(), `agent-os-skill-${Date.now()}`);
+  const tmpDir = join5(tmpdir(), `agent-os-skill-${Date.now()}`);
   await mkdir3(tmpDir, { recursive: true });
   try {
     if (isZip) {
-      const zipPath = join3(tmpDir, "archive.zip");
+      const zipPath = join5(tmpDir, "archive.zip");
       await writeFile3(zipPath, new Uint8Array(buf));
-      const proc2 = Bun.spawn({
-        cmd: ["unzip", "-q", "-o", zipPath, "-d", tmpDir],
-        stdout: "ignore",
-        stderr: "pipe"
-      });
+      const proc2 = Bun.spawn({ cmd: ["unzip", "-q", "-o", zipPath, "-d", tmpDir], stdout: "ignore", stderr: "pipe" });
       const exit2 = await proc2.exited;
       if (exit2 !== 0) {
         const err = await new Response(proc2.stderr).text();
@@ -8605,17 +8592,12 @@ async function installSkillFromUrl(url, explicitId) {
       }
       const { id: id2, sourcePath: sourcePath2 } = await chooseSkillRootFromExtract(tmpDir, "archive.zip");
       const destId2 = explicitId != null && explicitId.trim() !== "" ? slugToSkillId(explicitId) : id2;
-      const destDir2 = join3(skillsDir, destId2);
-      await cp(sourcePath2, destDir2, { recursive: true });
+      await cp(sourcePath2, join5(skillsDir, destId2), { recursive: true });
       return { id: destId2 };
     }
-    const tarPath = join3(tmpDir, "archive.tar.gz");
+    const tarPath = join5(tmpDir, "archive.tar.gz");
     await writeFile3(tarPath, new Uint8Array(buf));
-    const proc = Bun.spawn({
-      cmd: ["tar", "-xzf", tarPath, "-C", tmpDir],
-      stdout: "ignore",
-      stderr: "pipe"
-    });
+    const proc = Bun.spawn({ cmd: ["tar", "-xzf", tarPath, "-C", tmpDir], stdout: "ignore", stderr: "pipe" });
     const exit = await proc.exited;
     if (exit !== 0) {
       const err = await new Response(proc.stderr).text();
@@ -8623,8 +8605,7 @@ async function installSkillFromUrl(url, explicitId) {
     }
     const { id, sourcePath } = await chooseSkillRootFromExtract(tmpDir, "archive.tar.gz");
     const destId = explicitId != null && explicitId.trim() !== "" ? slugToSkillId(explicitId) : id;
-    const destDir = join3(skillsDir, destId);
-    await cp(sourcePath, destDir, { recursive: true });
+    await cp(sourcePath, join5(skillsDir, destId), { recursive: true });
     return { id: destId };
   } finally {
     await rm(tmpDir, { recursive: true, force: true });
@@ -8633,25 +8614,20 @@ async function installSkillFromUrl(url, explicitId) {
 async function installSkillFromUpload(buffer, filename) {
   const skillsDir = getSkillsDir();
   await mkdir3(skillsDir, { recursive: true });
-  const tmpDir = join3(tmpdir(), `agent-os-skill-upload-${Date.now()}`);
+  const tmpDir = join5(tmpdir(), `agent-os-skill-upload-${Date.now()}`);
   await mkdir3(tmpDir, { recursive: true });
   const lower = filename.toLowerCase();
   const isZip = lower.endsWith(".zip");
   const isTarGz = lower.endsWith(".tar.gz") || lower.endsWith(".tgz");
   const isTar = lower.endsWith(".tar");
-  if (!isZip && !isTarGz && !isTar) {
+  if (!isZip && !isTarGz && !isTar)
     throw new Error("Upload must be a .tar.gz, .tar, or .zip archive");
-  }
   try {
     const ext = isZip ? "archive.zip" : isTar && !isTarGz ? "archive.tar" : "archive.tar.gz";
-    const archivePath = join3(tmpDir, ext);
+    const archivePath = join5(tmpDir, ext);
     await writeFile3(archivePath, new Uint8Array(buffer));
     if (isZip) {
-      const proc = Bun.spawn({
-        cmd: ["unzip", "-q", "-o", archivePath, "-d", tmpDir],
-        stdout: "ignore",
-        stderr: "pipe"
-      });
+      const proc = Bun.spawn({ cmd: ["unzip", "-q", "-o", archivePath, "-d", tmpDir], stdout: "ignore", stderr: "pipe" });
       const exit = await proc.exited;
       if (exit !== 0) {
         const err = await new Response(proc.stderr).text();
@@ -8670,29 +8646,12 @@ async function installSkillFromUpload(buffer, filename) {
       }
     }
     const { id, sourcePath } = await chooseSkillRootFromExtract(tmpDir, filename);
-    const destDir = join3(skillsDir, id);
-    await cp(sourcePath, destDir, { recursive: true });
+    await cp(sourcePath, join5(skillsDir, id), { recursive: true });
     return { id };
   } finally {
     await rm(tmpDir, { recursive: true, force: true });
   }
 }
-function deriveSkillIdFromSkillMdContent(md, filename) {
-  const yamlBlock = extractFrontmatterFromMarkdown(md) || extractYamlBlockFromMarkdown(md);
-  if (yamlBlock) {
-    try {
-      const parsed = import_yaml.default.parse(yamlBlock);
-      if (typeof parsed.name === "string" && parsed.name.trim()) {
-        return parsed.name.trim().replace(/[^a-z0-9_-]/gi, "_").toLowerCase().replace(/^_+|_+$/g, "") || "skill";
-      }
-    } catch {}
-  }
-  const stem = filename.replace(/\.(md|markdown)$/i, "").trim();
-  if (stem && stem !== "SKILL") {
-    return stem.replace(/[^a-z0-9_-]/gi, "_").toLowerCase() || "uploaded_skill";
-  }
-  return "uploaded_skill";
-}
 async function installSkillFromSkillMd(buffer, filename, explicitId) {
   const skillsDir = getSkillsDir();
   await mkdir3(skillsDir, { recursive: true });
@@ -8700,18 +8659,19 @@ async function installSkillFromSkillMd(buffer, filename, explicitId) {
   const id = explicitId?.trim() ? explicitId.replace(/[^a-z0-9_-]/gi, "_").toLowerCase().replace(/^_+|_+$/g, "") || "uploaded_skill" : deriveSkillIdFromSkillMdContent(text, filename);
   if (!id)
     throw new Error("Invalid skill id");
-  const destDir = join3(skillsDir, id);
+  const destDir = join5(skillsDir, id);
   await mkdir3(destDir, { recursive: true });
-  await writeFile3(join3(destDir, "SKILL.md"), text, "utf-8");
+  await writeFile3(join5(destDir, "SKILL.md"), text, "utf-8");
   return { id };
 }
-var import_yaml, JUNK_DIR_NAMES, SYSTEM_SKILL_IDS, DEFAULT_SYSTEM_SKILL_IDS;
+var SYSTEM_SKILL_IDS, DEFAULT_SYSTEM_SKILL_IDS;
 var init_loader = __esm(() => {
   init_config();
   init_tool_registry();
+  init_skill_doc();
+  init_skill_extract();
+  init_skill_tools();
   init_config();
-  import_yaml = __toESM(require_dist(), 1);
-  JUNK_DIR_NAMES = new Set(["__macosx"]);
   SYSTEM_SKILL_IDS = new Set(["memory"]);
   DEFAULT_SYSTEM_SKILL_IDS = ["memory", "date", "fetch", "jq", "file-search"];
 });
@@ -9014,7 +8974,7 @@ var init_echo = __esm(() => {
 
 // src/tools/exec.ts
 import { spawn } from "child_process";
-import { basename as basename2, join as join4, resolve as resolve3 } from "path";
+import { basename as basename2, join as join6, resolve as resolve3 } from "path";
 function sanitizeSkillId(skillId) {
   return skillId.replace(/[^a-z0-9_-]/gi, "_");
 }
@@ -9048,7 +9008,7 @@ var init_exec = __esm(() => {
         const skillId = sanitizeSkillId(String(input.skill_id).trim());
         if (!skillId)
           return { ok: false, stdout: "", stderr: "skill_id must be non-empty", exitCode: -1 };
-        cwd = join4(getSkillsDir(), skillId);
+        cwd = join6(getSkillsDir(), skillId);
         const skillConfig = await readSkillConfig(skillId);
         for (const [k, v] of Object.entries(skillConfig)) {
           if (typeof v === "string")
@@ -9172,7 +9132,7 @@ var init_tools = __esm(() => {
 
 // src/core/events.ts
 import { mkdir as mkdir4, appendFile } from "fs/promises";
-import { join as join5 } from "path";
+import { join as join7 } from "path";
 function registerEventHooks(hooks) {
   for (const [type, handler] of Object.entries(hooks)) {
     if (type && handler && typeof handler === "function") {
@@ -9246,8 +9206,8 @@ var subscribers, recent, MAX_RECENT = 200, LOG_DIR, LOG_FILE, logInitPromise = n
 var init_events = __esm(() => {
   subscribers = new Map;
   recent = [];
-  LOG_DIR = process.env.AGENT_OS_LOGS_DIR || join5(process.env.HOME || process.env.USERPROFILE || "~", ".agent-os", "logs");
-  LOG_FILE = join5(LOG_DIR, "agent-os.log");
+  LOG_DIR = process.env.AGENT_OS_LOGS_DIR || join7(process.env.HOME || process.env.USERPROFILE || "~", ".agent-os", "logs");
+  LOG_FILE = join7(LOG_DIR, "agent-os.log");
   for (const type of [
     "task.created",
     "task.started",
@@ -9263,8 +9223,8 @@ var init_events = __esm(() => {
 });
 
 // src/core/runtime.ts
-import { readFile as readFile4 } from "fs/promises";
-import { join as join6 } from "path";
+import { readFile as readFile6 } from "fs/promises";
+import { join as join8 } from "path";
 function formatLLMErrorForUser(err) {
   const msg = errorMessage(err);
   if (msg.includes("429") || /rate_limit|rate limit/i.test(msg)) {
@@ -9688,7 +9648,7 @@ async function readWorkspacePromptContext(agentId) {
   const chunks = [];
   for (const name of WORKSPACE_PROMPT_FILES) {
     try {
-      const content = await readFile4(join6(workspaceDir, name), "utf-8");
+      const content = await readFile6(join8(workspaceDir, name), "utf-8");
       const trimmed = content.trim();
       if (trimmed)
         chunks.push(trimmed);
@@ -9770,6 +9730,14 @@ function jsonResponse(data, status = 200) {
     headers: CORS_HEADERS
   });
 }
+async function parseJsonBody(req) {
+  try {
+    const body = await req.json();
+    return { ok: true, body };
+  } catch {
+    return { ok: false, response: jsonResponse({ error: "Invalid JSON body" }, 400) };
+  }
+}
 function getConversationHistoryForRun(memoryStore, conversationId, limit = 40) {
   const rows = memoryStore.getHistoryForConversation(conversationId, limit);
   return rows.map((row) => {
@@ -9863,12 +9831,10 @@ async function handleMemoryWrite(req, store) {
   if (req.method !== "POST") {
     return jsonResponse({ error: "Method not allowed" }, 405);
   }
-  let body;
-  try {
-    body = await req.json();
-  } catch {
-    return jsonResponse({ error: "Invalid JSON body" }, 400);
-  }
+  const parsed = await parseJsonBody(req);
+  if (!parsed.ok)
+    return parsed.response;
+  const body = parsed.body;
   const agent_id = typeof body.agent_id === "string" ? body.agent_id.trim() : "";
   const text = typeof body.text === "string" ? body.text.trim() : "";
   const user_id = typeof body.user_id === "string" ? body.user_id.trim() : null;
@@ -9969,12 +9935,10 @@ var init_memory = __esm(() => {
 // src/http/conversations.ts
 async function handleConversations(req, url, store) {
   if (req.method === "POST") {
-    let body;
-    try {
-      body = await req.json();
-    } catch {
-      return jsonResponse({ error: "Invalid JSON body" }, 400);
-    }
+    const parsed = await parseJsonBody(req);
+    if (!parsed.ok)
+      return parsed.response;
+    const body = parsed.body;
     const graph_id = typeof body.graph_id === "string" ? body.graph_id.trim() : null;
     const agent_id = typeof body.agent_id === "string" ? body.agent_id.trim() : graph_id ?? "";
     const role = body.role;
@@ -10068,13 +10032,10 @@ async function handleConversations(req, url, store) {
 async function handleConversationUpdate(req, conversationId, store) {
   if (req.method !== "PUT")
     return jsonResponse({ error: "Method not allowed" }, 405);
-  let body;
-  try {
-    body = await req.json();
-  } catch {
-    return jsonResponse({ error: "Invalid JSON body" }, 400);
-  }
-  const title = typeof body.title === "string" ? body.title.trim().slice(0, 200) : "";
+  const parsed = await parseJsonBody(req);
+  if (!parsed.ok)
+    return parsed.response;
+  const title = typeof parsed.body.title === "string" ? parsed.body.title.trim().slice(0, 200) : "";
   try {
     store.updateConversationTitle(conversationId, title || null);
     return jsonResponse({ ok: true });
@@ -10086,13 +10047,10 @@ async function handleConversationUpdate(req, conversationId, store) {
 async function handleConversationSummarize(req, store) {
   if (req.method !== "POST")
     return jsonResponse({ error: "Method not allowed" }, 405);
-  let body;
-  try {
-    body = await req.json();
-  } catch {
-    return jsonResponse({ error: "Invalid JSON body" }, 400);
-  }
-  const conversation_id = body.conversation_id?.trim();
+  const parsed = await parseJsonBody(req);
+  if (!parsed.ok)
+    return parsed.response;
+  const conversation_id = parsed.body.conversation_id?.trim();
   if (!conversation_id) {
     return jsonResponse({ error: "conversation_id is required" }, 400);
   }
@@ -10110,9 +10068,9 @@ async function handleConversationSummarize(req, store) {
     let text = row.content;
     if (typeof text === "string" && text.startsWith("{")) {
       try {
-        const parsed = JSON.parse(text);
-        if (typeof parsed.text === "string")
-          text = parsed.text;
+        const parsed2 = JSON.parse(text);
+        if (typeof parsed2.text === "string")
+          text = parsed2.text;
       } catch {}
     }
     const prefix = row.role === "user" ? "User" : "Assistant";
@@ -11457,15 +11415,15 @@ var require_node_cron = __commonJS((exports) => {
 });
 
 // src/core/graphs.ts
-import { readFile as readFile5, readdir as readdir3, writeFile as writeFile4, mkdir as mkdir5 } from "fs/promises";
-import { join as join7 } from "path";
+import { readFile as readFile7, readdir as readdir4, writeFile as writeFile4, mkdir as mkdir5 } from "fs/promises";
+import { join as join9 } from "path";
 function getGraphsDir() {
   return process.env.AGENT_OS_GRAPHS_DIR || DEFAULT_GRAPHS_DIR;
 }
 async function listGraphs() {
   const dir = getGraphsDir();
   try {
-    const entries = await readdir3(dir);
+    const entries = await readdir4(dir);
     const summaries = [];
     for (const name of entries) {
       if (name.endsWith(".json")) {
@@ -11484,11 +11442,11 @@ async function listGraphs() {
 async function loadGraph(id) {
   const dir = getGraphsDir();
   try {
-    const entries = await readdir3(dir);
+    const entries = await readdir4(dir);
     const file = entries.find((name) => name === `${id}.json` || name === `${id}.graph.json`);
     if (!file)
       return null;
-    const raw = await readFile5(join7(dir, file), "utf-8");
+    const raw = await readFile7(join9(dir, file), "utf-8");
     const parsed = JSON.parse(raw);
     validateGraph(parsed);
     return parsed;
@@ -11503,7 +11461,7 @@ async function saveGraph(graph) {
   validateGraph(graph);
   const dir = getGraphsDir();
   await mkdir5(dir, { recursive: true });
-  const path = join7(dir, `${graph.id}.json`);
+  const path = join9(dir, `${graph.id}.json`);
   await writeFile4(path, JSON.stringify(graph, null, 2), "utf-8");
 }
 function validateGraph(graph) {
@@ -11678,14 +11636,14 @@ var DEFAULT_GRAPHS_DIR;
 var init_graphs = __esm(() => {
   init_agent_registry();
   init_runtime();
-  DEFAULT_GRAPHS_DIR = join7(process.env.HOME || process.env.USERPROFILE || "~", ".agent-os", "graphs");
+  DEFAULT_GRAPHS_DIR = join9(process.env.HOME || process.env.USERPROFILE || "~", ".agent-os", "graphs");
 });
 
 // src/core/tasks.ts
 import { randomUUID } from "crypto";
 import os from "os";
-import { readFile as readFile6, appendFile as appendFile2, mkdir as mkdir6 } from "fs/promises";
-import { join as join8 } from "path";
+import { readFile as readFile8, appendFile as appendFile2, mkdir as mkdir6 } from "fs/promises";
+import { join as join10 } from "path";
 function nowIso() {
   return new Date().toISOString();
 }
@@ -11747,7 +11705,7 @@ class MemoryTaskStore {
   }
   async loadFromDisk() {
     try {
-      const raw = await readFile6(TASKS_FILE, "utf-8");
+      const raw = await readFile8(TASKS_FILE, "utf-8");
       const lines = raw.split(`
 `);
       for (const line of lines) {
@@ -11929,23 +11887,20 @@ var init_tasks = __esm(() => {
   init_graphs();
   init_events();
   import_node_cron = __toESM(require_node_cron(), 1);
-  TASKS_DIR = process.env.AGENT_OS_TASKS_DIR || join8(process.env.HOME || process.env.USERPROFILE || "~", ".agent-os", "tasks");
-  TASKS_FILE = join8(TASKS_DIR, "tasks.log");
+  TASKS_DIR = process.env.AGENT_OS_TASKS_DIR || join10(process.env.HOME || process.env.USERPROFILE || "~", ".agent-os", "tasks");
+  TASKS_FILE = join10(TASKS_DIR, "tasks.log");
   memoryTaskStore = new MemoryTaskStore;
   maxWorkers = Math.max(1, (os.cpus?.().length ?? 1) * 2);
 });
 
 // src/http/handlers.ts
-import { readFile as readFile7, writeFile as writeFile5, stat } from "fs/promises";
-import { join as join9 } from "path";
+import { readFile as readFile9, writeFile as writeFile5, stat } from "fs/promises";
+import { join as join11 } from "path";
 async function handleRun(req, memoryStore) {
-  let body;
-  try {
-    body = await req.json();
-  } catch {
-    return jsonResponse({ error: "Invalid JSON body" }, 400);
-  }
-  const { agent_id, task, conversation_id } = body;
+  const parsed = await parseJsonBody(req);
+  if (!parsed.ok)
+    return parsed.response;
+  const { agent_id, task, conversation_id } = parsed.body;
   if (!agent_id || typeof task !== "string") {
     return jsonResponse({ error: "Missing required fields: agent_id, task" }, 400);
   }
@@ -11969,13 +11924,10 @@ async function handleRun(req, memoryStore) {
   }
 }
 async function handleRunStream(req, memoryStore) {
-  let body;
-  try {
-    body = await req.json();
-  } catch {
-    return jsonResponse({ error: "Invalid JSON body" }, 400);
-  }
-  const { agent_id, task, conversation_id, attachment_paths } = body;
+  const parsed = await parseJsonBody(req);
+  if (!parsed.ok)
+    return parsed.response;
+  const { agent_id, task, conversation_id, attachment_paths } = parsed.body;
   if (!agent_id || typeof task !== "string") {
     return jsonResponse({ error: "Missing required fields: agent_id, task" }, 400);
   }
@@ -12062,13 +12014,10 @@ async function handleTasks(req, url) {
     return jsonResponse({ tasks });
   }
   if (req.method === "POST") {
-    let body;
-    try {
-      body = await req.json();
-    } catch {
-      return jsonResponse({ error: "Invalid JSON body" }, 400);
-    }
-    const { agent_id, graph_id, task } = body;
+    const parsed = await parseJsonBody(req);
+    if (!parsed.ok)
+      return parsed.response;
+    const { agent_id, graph_id, task } = parsed.body;
     if (typeof task !== "string") {
       return jsonResponse({ error: "Missing required field: task" }, 400);
     }
@@ -12092,12 +12041,10 @@ async function handleLogs(req) {
   return jsonResponse({ events });
 }
 async function handleSkillInstall(req) {
-  let body;
-  try {
-    body = await req.json();
-  } catch {
-    return jsonResponse({ error: "Invalid JSON body" }, 400);
-  }
+  const parsed = await parseJsonBody(req);
+  if (!parsed.ok)
+    return parsed.response;
+  const body = parsed.body;
   const hasPath = typeof body.path === "string" && body.path.trim().length > 0;
   const hasUrl = typeof body.url === "string" && body.url.trim().length > 0;
   if (hasPath && hasUrl) {
@@ -12189,16 +12136,16 @@ async function handleSettings(req) {
       signal_default_agent_id: config.signal_default_agent_id ?? null,
       signal_bridge_url: config.signal_bridge_url ?? null,
       viber_configured: Boolean(config.viber_auth_token?.trim()),
-      viber_default_agent_id: config.viber_default_agent_id ?? null
+      viber_default_agent_id: config.viber_default_agent_id ?? null,
+      onboarding_completed: config.onboarding_completed === true
     });
   }
   if (req.method === "PUT") {
     let body;
-    try {
-      body = await req.json();
-    } catch {
-      return jsonResponse({ error: "Invalid JSON body" }, 400);
-    }
+    const parsed = await parseJsonBody(req);
+    if (!parsed.ok)
+      return parsed.response;
+    body = parsed.body;
     const current = await readConfig();
     const provider = body.provider === "openrouter" || body.provider === "openai" ? body.provider : undefined;
     const rawKey = typeof body.api_key === "string" ? body.api_key.trim() : undefined;
@@ -12219,6 +12166,7 @@ async function handleSettings(req) {
     const signal_default_agent_id = body.signal_default_agent_id !== undefined ? typeof body.signal_default_agent_id === "string" ? body.signal_default_agent_id.trim() || undefined : undefined : current.signal_default_agent_id;
     const viber_auth_token = body.viber_auth_token !== undefined ? typeof body.viber_auth_token === "string" ? body.viber_auth_token.trim() || undefined : undefined : current.viber_auth_token;
     const viber_default_agent_id = body.viber_default_agent_id !== undefined ? typeof body.viber_default_agent_id === "string" ? body.viber_default_agent_id.trim() || undefined : undefined : current.viber_default_agent_id;
+    const onboarding_completed = body.onboarding_completed !== undefined ? body.onboarding_completed === true ? true : undefined : current.onboarding_completed;
     await writeConfig({
       provider: provider ?? current.provider,
       api_key: api_key || undefined,
@@ -12237,7 +12185,8 @@ async function handleSettings(req) {
       signal_bridge_url: signal_bridge_url || undefined,
       signal_default_agent_id: signal_default_agent_id || undefined,
       viber_auth_token: viber_auth_token || undefined,
-      viber_default_agent_id: viber_default_agent_id || undefined
+      viber_default_agent_id: viber_default_agent_id || undefined,
+      onboarding_completed: onboarding_completed ?? undefined
     });
     return jsonResponse({ ok: true });
   }
@@ -12247,13 +12196,10 @@ async function handleGraphRun(req) {
   if (req.method !== "POST") {
     return jsonResponse({ error: "Method not allowed" }, 405);
   }
-  let body;
-  try {
-    body = await req.json();
-  } catch {
-    return jsonResponse({ error: "Invalid JSON body" }, 400);
-  }
-  const { graph_id, input } = body;
+  const parsed = await parseJsonBody(req);
+  if (!parsed.ok)
+    return parsed.response;
+  const { graph_id, input } = parsed.body;
   if (!graph_id || typeof input !== "string") {
     return jsonResponse({ error: "Missing required fields: graph_id, input" }, 400);
   }
@@ -12270,13 +12216,10 @@ async function handleGraphRun(req) {
   }
 }
 async function handleGraphRunStream(req) {
-  let body;
-  try {
-    body = await req.json();
-  } catch {
-    return jsonResponse({ error: "Invalid JSON body" }, 400);
-  }
-  const { graph_id, input } = body;
+  const parsed = await parseJsonBody(req);
+  if (!parsed.ok)
+    return parsed.response;
+  const { graph_id, input } = parsed.body;
   if (!graph_id || typeof input !== "string") {
     return jsonResponse({ error: "Missing required fields: graph_id, input" }, 400);
   }
@@ -12331,13 +12274,10 @@ function extractJsonFromContent(content) {
   return trimmed;
 }
 async function handleAgentSuggest(req) {
-  let body;
-  try {
-    body = await req.json();
-  } catch {
-    return jsonResponse({ error: "Invalid JSON body" }, 400);
-  }
-  const prompt = typeof body.prompt === "string" ? body.prompt.trim() : "";
+  const parsed = await parseJsonBody(req);
+  if (!parsed.ok)
+    return parsed.response;
+  const prompt = typeof parsed.body.prompt === "string" ? parsed.body.prompt.trim() : "";
   if (!prompt)
     return jsonResponse({ error: "Missing prompt" }, 400);
   const skills = await listSkills();
@@ -12378,13 +12318,13 @@ Rules:
     if (!content)
       return jsonResponse({ error: "No suggestion from model" }, 502);
     const raw = extractJsonFromContent(content);
-    const parsed = JSON.parse(raw);
-    const name = typeof parsed.name === "string" ? parsed.name.trim() : "Agent";
-    const id = typeof parsed.id === "string" ? parsed.id.trim().toLowerCase().replace(/[^a-z0-9_.-]/g, "_").replace(/\s+/g, "_") || "agent" : "agent";
-    const description = typeof parsed.description === "string" ? parsed.description.trim() : "";
-    const skillsOut = Array.isArray(parsed.skills) ? parsed.skills.filter((s) => typeof s === "string" && skillIds.includes(s)) : [];
-    const schedule = typeof parsed.schedule === "string" ? parsed.schedule.trim() : "";
-    const schedule_input = typeof parsed.schedule_input === "string" ? parsed.schedule_input.trim() : "";
+    const parsed2 = JSON.parse(raw);
+    const name = typeof parsed2.name === "string" ? parsed2.name.trim() : "Agent";
+    const id = typeof parsed2.id === "string" ? parsed2.id.trim().toLowerCase().replace(/[^a-z0-9_.-]/g, "_").replace(/\s+/g, "_") || "agent" : "agent";
+    const description = typeof parsed2.description === "string" ? parsed2.description.trim() : "";
+    const skillsOut = Array.isArray(parsed2.skills) ? parsed2.skills.filter((s) => typeof s === "string" && skillIds.includes(s)) : [];
+    const schedule = typeof parsed2.schedule === "string" ? parsed2.schedule.trim() : "";
+    const schedule_input = typeof parsed2.schedule_input === "string" ? parsed2.schedule_input.trim() : "";
     const suggestion = {
       name,
       id,
@@ -12419,10 +12359,10 @@ async function handleAgentUpload(req, agentId) {
   const unique = `${Date.now()}-${Math.random().toString(36).slice(2, 10)}`;
   const filename = `${unique}_${basename3}`;
   await ensureWorkspace(agentId);
-  const uploadsDir = join9(getWorkspaceDir(agentId), "uploads");
+  const uploadsDir = join11(getWorkspaceDir(agentId), "uploads");
   const { mkdir: mkdir7 } = await import("fs/promises");
   await mkdir7(uploadsDir, { recursive: true });
-  const absolutePath = join9(uploadsDir, filename);
+  const absolutePath = join11(uploadsDir, filename);
   const buffer = Buffer.from(await file.arrayBuffer());
   await writeFile5(absolutePath, buffer);
   return jsonResponse({ path: absolutePath });
@@ -12454,7 +12394,7 @@ async function handleGetAgentWorkspaceFile(agentId, filename) {
     const msg = errorMessage(err);
     return jsonResponse({ error: msg }, 500);
   }
-  const buf = await readFile7(absolutePath);
+  const buf = await readFile9(absolutePath);
   const ext = basename3.replace(/^.*\./, "").toLowerCase();
   const mime = {
     png: "image/png",
@@ -12524,8 +12464,8 @@ async function handleGetDoc(name) {
     return jsonResponse({ error: "Unknown doc" }, 404);
   }
   try {
-    const path = join9(process.cwd(), "doc", filename);
-    const content = await readFile7(path, "utf-8");
+    const path = join11(process.cwd(), "doc", filename);
+    const content = await readFile9(path, "utf-8");
     return jsonResponse({ content });
   } catch (err) {
     const code = err?.code;
@@ -12571,6 +12511,15 @@ var init_handlers = __esm(() => {
 });
 
 // src/http/channel-run.ts
+async function getDefaultAgent(config, defaultAgentIdKey) {
+  const agents = await loadAgents();
+  const id = config[defaultAgentIdKey];
+  const defaultAgentId = typeof id === "string" ? id.trim() : "";
+  if (defaultAgentId) {
+    return agents.find((a) => a.id === defaultAgentId) ?? null;
+  }
+  return agents[0] ?? null;
+}
 async function runAgentWithConversation(memoryStore, agent, conversationId, userId, task, sendReply) {
   memoryStore.ensureConversation(conversationId, agent.id, userId);
   const conversationHistory = getConversationHistoryForRun(memoryStore, conversationId);
@@ -12593,6 +12542,7 @@ async function runAgentWithConversation(memoryStore, agent, conversationId, user
   await sendReply(output);
 }
 var init_channel_run = __esm(() => {
+  init_agent_registry();
   init_runtime();
   init_utils();
 });
@@ -12602,13 +12552,10 @@ async function handleTelegramSetWebhook(req) {
   if (req.method !== "POST") {
     return jsonResponse({ error: "Method not allowed" }, 405);
   }
-  let body;
-  try {
-    body = await req.json();
-  } catch {
-    return jsonResponse({ error: "Invalid JSON body" }, 400);
-  }
-  const baseUrl = typeof body.base_url === "string" ? body.base_url.trim() : "";
+  const parsed = await parseJsonBody(req);
+  if (!parsed.ok)
+    return parsed.response;
+  const baseUrl = typeof parsed.body.base_url === "string" ? parsed.body.base_url.trim() : "";
   if (!baseUrl) {
     return jsonResponse({ error: "base_url is required" }, 400);
   }
@@ -12684,11 +12631,9 @@ async function processTelegramUpdate(memoryStore, body) {
   const botToken = config.telegram_bot_token?.trim();
   if (!botToken)
     return;
-  const agents = await loadAgents();
-  const defaultAgentId = config.telegram_default_agent_id?.trim();
-  const agent = defaultAgentId ? agents.find((a) => a.id === defaultAgentId) : agents[0];
+  const agent = await getDefaultAgent(config, "telegram_default_agent_id");
   if (!agent) {
-    await sendTelegramMessage(botToken, chatId, "No agent configured. Add an agent and set Telegram default agent in Settings.");
+    await sendTelegramMessage(botToken, chatId, "No agent configured. Set default agent in Settings.");
     return;
   }
   if (!text) {
@@ -12702,12 +12647,10 @@ async function handleTelegramWebhook(req, memoryStore) {
   if (req.method !== "POST") {
     return jsonResponse({ error: "Method not allowed" }, 405);
   }
-  let body;
-  try {
-    body = await req.json();
-  } catch {
-    return jsonResponse({ error: "Invalid JSON body" }, 400);
-  }
+  const parsed = await parseJsonBody(req);
+  if (!parsed.ok)
+    return parsed.response;
+  const body = parsed.body;
   const message = body.message;
   if (!message?.chat?.id) {
     return jsonResponse({ ok: true });
@@ -12776,7 +12719,6 @@ function startTelegramPolling(memoryStore) {
 var POLLING_INTERVAL_MS = 1000, GET_UPDATES_TIMEOUT = 30;
 var init_telegram = __esm(() => {
   init_config();
-  init_agent_registry();
   init_utils();
   init_channel_run();
 });
@@ -12834,11 +12776,9 @@ async function processSlackEvent(memoryStore, payload) {
   const botToken = config.slack_bot_token?.trim();
   if (!botToken)
     return;
-  const agents = await loadAgents();
-  const defaultAgentId = config.slack_default_agent_id?.trim();
-  const agent = defaultAgentId ? agents.find((a) => a.id === defaultAgentId) : agents[0];
+  const agent = await getDefaultAgent(config, "slack_default_agent_id");
   if (!agent) {
-    await sendSlackMessage(botToken, event.channel, "No agent configured. Set Slack default agent in Settings.");
+    await sendSlackMessage(botToken, event.channel, "No agent configured. Set default agent in Settings.");
     return;
   }
   const userId = event.user ?? "unknown";
@@ -12893,7 +12833,6 @@ async function handleSlackWebhook(req, memoryStore) {
 }
 var init_slack = __esm(() => {
   init_config();
-  init_agent_registry();
   init_utils();
   init_channel_run();
 });
@@ -15248,11 +15187,9 @@ async function processDiscordInteraction(memoryStore, interaction) {
   const botToken = config.discord_bot_token?.trim();
   if (!botToken)
     return;
-  const agents = await loadAgents();
-  const defaultAgentId = config.discord_default_agent_id?.trim();
-  const agent = defaultAgentId ? agents.find((a) => a.id === defaultAgentId) : agents[0];
+  const agent = await getDefaultAgent(config, "discord_default_agent_id");
   if (!agent) {
-    await sendDiscordFollowup(appId, token, botToken, "No agent configured. Set Discord default agent in Settings.");
+    await sendDiscordFollowup(appId, token, botToken, "No agent configured. Set default agent in Settings.");
     return;
   }
   const conversationId = `discord:${channelId}:${userId}`;
@@ -15312,7 +15249,6 @@ async function handleDiscordWebhook(req, memoryStore) {
 var import_tweetnacl, INTERACTION_TYPE_PING = 1, INTERACTION_TYPE_APPLICATION_COMMAND = 2, INTERACTION_RESPONSE_DEFERRED = 5;
 var init_discord = __esm(() => {
   init_config();
-  init_agent_registry();
   init_utils();
   init_channel_run();
   import_tweetnacl = __toESM(require_nacl_fast(), 1);
@@ -15341,11 +15277,9 @@ async function processSignalWebhook(memoryStore, body) {
   const bridgeUrl = config.signal_bridge_url?.trim();
   if (!bridgeUrl)
     return;
-  const agents = await loadAgents();
-  const defaultAgentId = config.signal_default_agent_id?.trim();
-  const agent = defaultAgentId ? agents.find((a) => a.id === defaultAgentId) : agents[0];
+  const agent = await getDefaultAgent(config, "signal_default_agent_id");
   if (!agent) {
-    await sendSignalMessage(bridgeUrl, from, "No agent configured. Set Signal default agent in Settings.");
+    await sendSignalMessage(bridgeUrl, from, "No agent configured. Set default agent in Settings.");
     return;
   }
   if (!text) {
@@ -15364,12 +15298,10 @@ async function handleSignalWebhook(req, memoryStore) {
   if (req.method !== "POST") {
     return jsonResponse({ error: "Method not allowed" }, 405);
   }
-  let body;
-  try {
-    body = await req.json();
-  } catch {
-    return jsonResponse({ error: "Invalid JSON body" }, 400);
-  }
+  const parsed = await parseJsonBody(req);
+  if (!parsed.ok)
+    return parsed.response;
+  const body = parsed.body;
   const config = await readConfig();
   if (!config.signal_bridge_url?.trim()) {
     console.warn("[signal] Webhook received but signal_bridge_url not configured");
@@ -15385,7 +15317,6 @@ async function handleSignalWebhook(req, memoryStore) {
 }
 var init_signal = __esm(() => {
   init_config();
-  init_agent_registry();
   init_utils();
   init_channel_run();
 });
@@ -15410,13 +15341,10 @@ async function handleViberSetWebhook(req) {
   if (req.method !== "POST") {
     return jsonResponse({ error: "Method not allowed" }, 405);
   }
-  let body;
-  try {
-    body = await req.json();
-  } catch {
-    return jsonResponse({ error: "Invalid JSON body" }, 400);
-  }
-  const baseUrl = typeof body.base_url === "string" ? body.base_url.trim() : "";
+  const parsed = await parseJsonBody(req);
+  if (!parsed.ok)
+    return parsed.response;
+  const baseUrl = typeof parsed.body.base_url === "string" ? parsed.body.base_url.trim() : "";
   if (!baseUrl) {
     return jsonResponse({ error: "base_url is required" }, 400);
   }
@@ -15517,11 +15445,9 @@ async function processViberCallback(memoryStore, payload) {
   const authToken = config.viber_auth_token?.trim();
   if (!authToken)
     return;
-  const agents = await loadAgents();
-  const defaultAgentId = config.viber_default_agent_id?.trim();
-  const agent = defaultAgentId ? agents.find((a) => a.id === defaultAgentId) : agents[0];
+  const agent = await getDefaultAgent(config, "viber_default_agent_id");
   if (!agent) {
-    await sendViberMessage(authToken, senderId, "No agent configured. Set Viber default agent in Settings.");
+    await sendViberMessage(authToken, senderId, "No agent configured. Set default agent in Settings.");
     return;
   }
   const conversationId = `viber:${senderId}`;
@@ -15568,14 +15494,13 @@ async function handleViberWebhook(req, memoryStore) {
 var VIBER_API = "https://chatapi.viber.com/pa", SENDER_NAME_MAX = 28;
 var init_viber = __esm(() => {
   init_config();
-  init_agent_registry();
   init_utils();
   init_channel_run();
 });
 
 // src/core/plugins.ts
-import { readdir as readdir4, stat as stat2 } from "fs/promises";
-import { join as join10 } from "path";
+import { readdir as readdir5, stat as stat2 } from "fs/promises";
+import { join as join12 } from "path";
 function getPluginsDir() {
   return process.env.AGENT_OS_PLUGINS_DIR || DEFAULT_PLUGINS_DIR;
 }
@@ -15589,7 +15514,7 @@ async function loadPlugins() {
   const dir = getPluginsDir();
   let entries = [];
   try {
-    entries = await readdir4(dir);
+    entries = await readdir5(dir);
   } catch (err) {
     if (err?.code === "ENOENT")
       return;
@@ -15600,12 +15525,12 @@ async function loadPlugins() {
   for (const name of entries) {
     if (name.startsWith("."))
       continue;
-    const pluginPath = join10(dir, name);
+    const pluginPath = join12(dir, name);
     let modulePath;
     try {
       const st = await stat2(pluginPath);
       if (st.isDirectory()) {
-        modulePath = join10(pluginPath, "index.js");
+        modulePath = join12(pluginPath, "index.js");
       } else if (name.endsWith(".js") || name.endsWith(".ts")) {
         modulePath = pluginPath;
       } else {
@@ -15628,7 +15553,7 @@ var DEFAULT_PLUGINS_DIR;
 var init_plugins = __esm(() => {
   init_events();
   init_config();
-  DEFAULT_PLUGINS_DIR = join10(process.env.HOME || process.env.USERPROFILE || "~", ".agent-os", "plugins");
+  DEFAULT_PLUGINS_DIR = join12(process.env.HOME || process.env.USERPROFILE || "~", ".agent-os", "plugins");
 });
 
 // src/server.ts
@@ -15636,8 +15561,8 @@ var exports_server = {};
 __export(exports_server, {
   startServer: () => startServer
 });
-import { join as join11, dirname } from "path";
-import { mkdirSync } from "fs";
+import { join as join13, dirname, resolve as resolve4 } from "path";
+import { mkdirSync, existsSync } from "fs";
 function broadcastEvent(event) {
   const msg = JSON.stringify(event);
   for (const ws of wsClients) {
@@ -15646,6 +15571,44 @@ function broadcastEvent(event) {
     } catch {}
   }
 }
+function serveDashboard(pathname) {
+  if (!existsSync(DASHBOARD_DIST) || !existsSync(join13(DASHBOARD_DIST, "index.html"))) {
+    return null;
+  }
+  const decoded = decodeURIComponent(pathname);
+  if (decoded.includes("..")) {
+    return Response.json({ error: "Not found" }, { status: 404, headers: CORS_HEADERS });
+  }
+  const subpath = decoded === "/" ? "index.html" : decoded.slice(1);
+  const filePath = join13(DASHBOARD_DIST, subpath);
+  if (existsSync(filePath)) {
+    const file = Bun.file(filePath);
+    const ext = subpath.split(".").pop() ?? "";
+    const mime = {
+      html: "text/html",
+      js: "application/javascript",
+      css: "text/css",
+      json: "application/json",
+      png: "image/png",
+      jpg: "image/jpeg",
+      jpeg: "image/jpeg",
+      ico: "image/x-icon",
+      svg: "image/svg+xml",
+      woff: "font/woff",
+      woff2: "font/woff2"
+    };
+    return new Response(file, {
+      headers: { "Content-Type": mime[ext] ?? "application/octet-stream" }
+    });
+  }
+  const indexPath = join13(DASHBOARD_DIST, "index.html");
+  if (existsSync(indexPath)) {
+    return new Response(Bun.file(indexPath), {
+      headers: { "Content-Type": "text/html" }
+    });
+  }
+  return null;
+}
 function createRoutes() {
   return {
     "/*": {
@@ -16018,6 +15981,17 @@ async function startServer() {
           return;
         return Response.json({ error: "Upgrade failed" }, { status: 500, headers: CORS_HEADERS });
       }
+      if (req.method === "GET" && !url.pathname.startsWith("/api/")) {
+        const dashboardResponse = serveDashboard(url.pathname);
+        if (dashboardResponse)
+          return dashboardResponse;
+        if (url.pathname === "/" || url.pathname === "") {
+          return Response.json({
+            error: "Dashboard not built",
+            hint: "From the sulala package root run: cd dashboard && npm run build"
+          }, { status: 404, headers: CORS_HEADERS });
+        }
+      }
       return Response.json({ error: "Not found" }, { status: 404, headers: CORS_HEADERS });
     },
     error(error) {
@@ -16037,7 +16011,7 @@ async function startServer() {
   console.log(`Agent OS server running at ${server.url}`);
   startTelegramPolling(memoryStore);
 }
-var PORT, HOST, EVENT_TYPES, wsClients, MEMORY_DB_PATH, memoryStore;
+var PORT, DASHBOARD_DIST, HOST, EVENT_TYPES, wsClients, MEMORY_DB_PATH, memoryStore;
 var init_server = __esm(() => {
   init_memory_store();
   init_utils();
@@ -16059,6 +16033,7 @@ var init_server = __esm(() => {
   init_loader();
   init_config();
   PORT = parseInt(process.env.PORT ?? "3010", 10);
+  DASHBOARD_DIST = resolve4(join13(import.meta.dir, "..", "dashboard", "dist"));
   HOST = process.env.HOST ?? "127.0.0.1";
   EVENT_TYPES = [
     "task.created",
@@ -16071,7 +16046,7 @@ var init_server = __esm(() => {
     "tool.completed"
   ];
   wsClients = new Set;
-  MEMORY_DB_PATH = process.env.AGENT_MEMORY_DB_PATH ?? join11(getAgentOsHome(), "database.db");
+  MEMORY_DB_PATH = process.env.AGENT_MEMORY_DB_PATH ?? join13(getAgentOsHome(), "database.db");
   mkdirSync(dirname(MEMORY_DB_PATH), { recursive: true });
   memoryStore = new MemoryStore(MEMORY_DB_PATH);
   setAgentStore(memoryStore);
@@ -16087,13 +16062,20 @@ init_agent_registry();
 init_loader();
 init_agent_registry();
 init_runtime();
-import { join as join12, dirname as dirname2 } from "path";
-import { readFile as readFile8, writeFile as writeFile6, mkdir as mkdir7, unlink as unlink2 } from "fs/promises";
-import { existsSync, readFileSync } from "fs";
-var PID_FILE = join12(getAgentOsHome(), "sulala.pid");
+import { join as join14, dirname as dirname2 } from "path";
+import { readFile as readFile10, writeFile as writeFile6, mkdir as mkdir7, unlink as unlink2 } from "fs/promises";
+import { existsSync as existsSync2, readFileSync } from "fs";
+var PID_FILE = join14(getAgentOsHome(), "sulala.pid");
+var DEFAULT_PORT = 3010;
+function openDashboard() {
+  const port = parseInt(process.env.PORT ?? String(DEFAULT_PORT), 10);
+  const url = `http://127.0.0.1:${port}`;
+  const cmd = process.platform === "darwin" ? ["open", url] : process.platform === "win32" ? ["cmd", "/c", "start", "", url] : ["xdg-open", url];
+  Bun.spawn(cmd, { stdin: "ignore", stdout: "ignore", stderr: "ignore" });
+}
 function getVersion() {
   try {
-    const path = join12(import.meta.dir, "..", "package.json");
+    const path = join14(import.meta.dir, "..", "package.json");
     const raw = readFileSync(path, "utf-8");
     const pkg = JSON.parse(raw);
     return pkg.version ?? "0.0.0";
@@ -16102,8 +16084,8 @@ function getVersion() {
   }
 }
 async function getVersionAsync() {
-  const path = join12(import.meta.dir, "..", "package.json");
-  const raw = await readFile8(path, "utf-8");
+  const path = join14(import.meta.dir, "..", "package.json");
+  const raw = await readFile10(path, "utf-8");
   const pkg = JSON.parse(raw);
   return pkg.version ?? "0.0.0";
 }
@@ -16118,8 +16100,8 @@ Commands:
   version              Show version
   start [--daemon]     Start the server (default: foreground)
   stop                 Stop the server (when started with --daemon)
-  onboard              First-time setup: create config, seed agents & skills
-  update               Update system agents and skills
+  onboard              First-time setup: create config, seed agents & skills, open dashboard
+  update               Update package from npm and system agents/skills
   run <agent_id> <task>  Run an agent with a one-off task
 
 Examples:
@@ -16140,9 +16122,9 @@ async function cmdStart(args) {
   const daemon = args.includes("--daemon");
   if (daemon) {
     await mkdir7(getAgentOsHome(), { recursive: true });
-    const projectRoot = join12(import.meta.dir, "..");
-    const distEntry = join12(projectRoot, "dist", "index.js");
-    const serverEntry = existsSync(distEntry) ? "dist/index.js" : "src/index.ts";
+    const projectRoot = join14(import.meta.dir, "..");
+    const distEntry = join14(projectRoot, "dist", "index.js");
+    const serverEntry = existsSync2(distEntry) ? "dist/index.js" : "src/index.ts";
     const child = Bun.spawn(["bun", "run", serverEntry], {
       cwd: projectRoot,
       stdout: "ignore",
@@ -16159,11 +16141,11 @@ async function cmdStart(args) {
   await startServer2();
 }
 async function cmdStop() {
-  if (!existsSync(PID_FILE)) {
+  if (!existsSync2(PID_FILE)) {
     console.error("No PID file found. Is the server running with 'sulala start --daemon'?");
     process.exit(1);
   }
-  const pidStr = await readFile8(PID_FILE, "utf-8");
+  const pidStr = await readFile10(PID_FILE, "utf-8");
   const pid = parseInt(pidStr.trim(), 10);
   if (Number.isNaN(pid)) {
     console.error("Invalid PID in", PID_FILE);
@@ -16184,14 +16166,40 @@ async function cmdStop() {
   console.log("Sulala server stopped.");
 }
 function getMemoryDbPath() {
-  return process.env.AGENT_MEMORY_DB_PATH ?? join12(getAgentOsHome(), "database.db");
+  return process.env.AGENT_MEMORY_DB_PATH ?? join14(getAgentOsHome(), "database.db");
+}
+async function startServerDaemonIfNeeded() {
+  if (existsSync2(PID_FILE)) {
+    try {
+      const pidStr = await readFile10(PID_FILE, "utf-8");
+      const pid = parseInt(pidStr.trim(), 10);
+      if (!Number.isNaN(pid)) {
+        process.kill(pid, 0);
+        return false;
+      }
+    } catch {}
+  }
+  await mkdir7(getAgentOsHome(), { recursive: true });
+  const projectRoot = join14(import.meta.dir, "..");
+  const distEntry = join14(projectRoot, "dist", "index.js");
+  const serverEntry = existsSync2(distEntry) ? "dist/index.js" : "src/index.ts";
+  const child = Bun.spawn(["bun", "run", serverEntry], {
+    cwd: projectRoot,
+    stdout: "ignore",
+    stderr: "ignore",
+    stdin: "ignore",
+    detached: true
+  });
+  child.unref();
+  await writeFile6(PID_FILE, String(child.pid), "utf-8");
+  return true;
 }
 async function cmdOnboard() {
   const home = getAgentOsHome();
   await mkdir7(home, { recursive: true });
   await mkdir7(dirname2(getMemoryDbPath()), { recursive: true });
-  const configPath = join12(home, "config.json");
-  if (!existsSync(configPath)) {
+  const configPath = join14(home, "config.json");
+  if (!existsSync2(configPath)) {
     await writeFile6(configPath, JSON.stringify({
       provider: null,
       api_key: null,
@@ -16220,12 +16228,35 @@ async function cmdOnboard() {
   const { installed: agentsInstalled } = await installSystemAgents();
   const { installed: skillsInstalled } = await installSystemSkills();
   console.log("Onboard complete. Agents:", agentsInstalled, "Skills:", skillsInstalled);
+  const started = await startServerDaemonIfNeeded();
+  if (started) {
+    console.log("Server starting in background. Use 'sulala stop' to stop.");
+    await new Promise((r) => setTimeout(r, 1500));
+  }
+  openDashboard();
 }
+var NPM_PACKAGE = "@sulala/agent-os";
 async function cmdUpdate() {
+  console.log(`Checking npm for latest ${NPM_PACKAGE}...`);
+  const proc = Bun.spawn(["bun", "install", "-g", `${NPM_PACKAGE}@latest`], {
+    stdout: "pipe",
+    stderr: "pipe",
+    stdin: "ignore"
+  });
+  const exit = await proc.exited;
+  const out = await new Response(proc.stdout).text();
+  const err = await new Response(proc.stderr).text();
+  if (exit === 0) {
+    console.log("Package updated to latest from npm.");
+    if (out.trim())
+      console.log(out.trim());
+  } else {
+    console.warn("Could not update package from npm (run 'bun install -g @sulala/agent-os@latest' manually):", err.trim() || out.trim());
+  }
   const dbPath = getMemoryDbPath();
-  if (!existsSync(dbPath)) {
-    console.error("No database found. Run 'sulala onboard' first.");
-    process.exit(1);
+  if (!existsSync2(dbPath)) {
+    console.log("No database found. Run 'sulala onboard' to set up agents and skills.");
+    return;
   }
   const memoryStore2 = new MemoryStore(dbPath);
   setAgentStore(memoryStore2);
@@ -16242,7 +16273,7 @@ async function cmdRun(args) {
     process.exit(1);
   }
   const dbPath = getMemoryDbPath();
-  if (existsSync(dbPath)) {
+  if (existsSync2(dbPath)) {
     setAgentStore(new MemoryStore(dbPath));
   }
   const agent = await getAgent(agentId);