@zixt/host 0.0.122 → 0.0.124

package/dist/index.js

@@ -28,7 +28,7 @@ import { homedir as homedir4 } from "node:os";
 // package.json
 var package_default = {
   name: "@zixt/host",
-  version: "0.0.122",
+  version: "0.0.124",
   type: "module",
   exports: {
     ".": "./src/client.ts",
@@ -22448,6 +22448,17 @@ function sanitizedInstallerEnv(inherited) {
 }
 
 // src/runners/runner-install.ts
+var INSTALLABLE_RUNNERS = ["claude-code", "codex"];
+function parseRunnerAutoinstallSelection(value) {
+  const trimmed = value?.trim() ?? "";
+  if (trimmed === "" || trimmed === "on") return new Set(INSTALLABLE_RUNNERS);
+  if (trimmed === "off") return /* @__PURE__ */ new Set();
+  return new Set(
+    trimmed.split(",").map((token2) => token2.trim()).filter(
+      (token2) => INSTALLABLE_RUNNERS.includes(token2)
+    )
+  );
+}
 var CLAUDE_INSTALLER_URL_POSIX = "https://claude.ai/install.sh";
 var CLAUDE_INSTALLER_URL_WINDOWS = "https://claude.ai/install.ps1";
 var CODEX_PACKAGE = "@openai/codex";
@@ -22464,7 +22475,7 @@ function runnerCommandCandidates(type, options = {}) {
   return platform === "win32" ? [join3(toolsRoot, "codex")] : [join3(toolsRoot, "bin", "codex")];
 }
 async function commandRuns(path) {
-  return new Promise((resolve18) => {
+  return new Promise((resolve19) => {
     let child;
     try {
       child = spawnCli(path, ["--version"], {
@@ -22472,21 +22483,21 @@ async function commandRuns(path) {
         windowsHide: true
       });
     } catch {
-      resolve18(false);
+      resolve19(false);
       return;
     }
     const timer = setTimeout(() => {
       child.kill();
-      resolve18(false);
+      resolve19(false);
     }, 1e4);
     timer.unref?.();
     child.once("error", () => {
       clearTimeout(timer);
-      resolve18(false);
+      resolve19(false);
     });
     child.once("exit", (code) => {
       clearTimeout(timer);
-      resolve18(code === 0);
+      resolve19(code === 0);
     });
   });
 }
@@ -22626,10 +22637,12 @@ function createRunnerAutoInstaller(options) {
   };
   const install = options.install ?? ((type) => type === "claude-code" ? installClaude() : installCodex());
   return {
-    ensureInstalled(type) {
+    ensureInstalled(type, ensureOptions) {
       if (inFlight.has(type)) return;
       const lastFailure = failedAt.get(type);
-      if (lastFailure !== void 0 && now() - lastFailure < FAILURE_COOLDOWN_MS) return;
+      if (!ensureOptions?.force && lastFailure !== void 0 && now() - lastFailure < FAILURE_COOLDOWN_MS) {
+        return;
+      }
       options.onEvent({ runner: type, state: "started" });
       const attempt = (async () => {
         try {
@@ -22663,6 +22676,9 @@ function createRunnerAutoInstaller(options) {
       })();
       inFlight.set(type, attempt);
     },
+    isInstalling(type) {
+      return inFlight.has(type);
+    },
     async settled() {
       while (inFlight.size > 0) await Promise.allSettled([...inFlight.values()]);
     }
@@ -22687,7 +22703,7 @@ async function generateTaskTitle(instructions, runner) {
     instructions.slice(0, INSTRUCTIONS_BUDGET),
     "</task_request>"
   ].join("\n");
-  return new Promise((resolve18) => {
+  return new Promise((resolve19) => {
     const child = spawnCli(
       command,
       [
@@ -22710,7 +22726,7 @@ async function generateTaskTitle(instructions, runner) {
       if (settled) return;
       settled = true;
       clearTimeout(timer);
-      resolve18(value);
+      resolve19(value);
     };
     const timer = setTimeout(() => {
       child.kill();
@@ -23039,11 +23055,11 @@ function createWorkerWatchdogSendDrain() {
         if (completed) return;
         completed = true;
         pending--;
-        if (pending === 0) drained.splice(0).forEach((resolve18) => resolve18());
+        if (pending === 0) drained.splice(0).forEach((resolve19) => resolve19());
       };
     },
     drain: async () => {
-      if (pending > 0) await new Promise((resolve18) => drained.push(resolve18));
+      if (pending > 0) await new Promise((resolve19) => drained.push(resolve19));
     }
   };
 }
@@ -23560,7 +23576,7 @@ async function waitForOperationGrantRetry(retryAt, signal) {
   const deadline = Date.parse(retryAt);
   if (!Number.isFinite(deadline) || signal.aborted) return false;
   if (deadline <= Date.now()) return true;
-  return await new Promise((resolve18) => {
+  return await new Promise((resolve19) => {
     let settled = false;
     let timer;
     const finish = (ready) => {
@@ -23568,7 +23584,7 @@ async function waitForOperationGrantRetry(retryAt, signal) {
       settled = true;
       if (timer) clearTimeout(timer);
       signal.removeEventListener("abort", onAbort);
-      resolve18(ready);
+      resolve19(ready);
     };
     const onAbort = () => finish(false);
     const schedule = () => {
@@ -23849,27 +23865,27 @@ var HostClient = class _HostClient {
     const unwindingAssignments = [...this.activeAssignments.values()];
     for (const cancel of this.cancels.values()) cancel(stopReason);
     for (const entry of this.secretGrants.values()) {
-      for (const resolve18 of entry.resolvers) resolve18({});
+      for (const resolve19 of entry.resolvers) resolve19({});
       entry.resolvers = [];
       delete entry.value;
     }
     for (const entry of this.connectionGrants.values()) {
-      for (const resolve18 of entry.resolvers) resolve18([]);
+      for (const resolve19 of entry.resolvers) resolve19([]);
       entry.resolvers = [];
       delete entry.value;
     }
     for (const entry of this.providerGrants.values()) {
-      for (const resolve18 of entry.resolvers) resolve18([]);
+      for (const resolve19 of entry.resolvers) resolve19([]);
       entry.resolvers = [];
       delete entry.value;
     }
     for (const entry of this.integrationToolServerGrants.values()) {
-      for (const resolve18 of entry.resolvers) resolve18([]);
+      for (const resolve19 of entry.resolvers) resolve19([]);
       entry.resolvers = [];
       delete entry.value;
     }
     for (const waiters of this.approvalWaiters.values()) {
-      for (const resolve18 of waiters.values()) resolve18({ approved: false, guidance: reason });
+      for (const resolve19 of waiters.values()) resolve19({ approved: false, guidance: reason });
     }
     for (const waiters of this.agentOpWaiters.values()) {
       for (const waiter of waiters.values()) {
@@ -23896,9 +23912,9 @@ var HostClient = class _HostClient {
     let drainTimer;
     const drained = await Promise.race([
       Promise.allSettled(runs).then(() => true),
-      new Promise((resolve18) => {
+      new Promise((resolve19) => {
         drainTimer = setTimeout(
-          () => resolve18(false),
+          () => resolve19(false),
           this.opts.unwindTimeoutMs ?? _HostClient.DEFAULT_UNWIND_TIMEOUT_MS
         );
         drainTimer.unref?.();
@@ -24046,9 +24062,9 @@ var HostClient = class _HostClient {
     let frameDrainTimer;
     const framesDrained = await Promise.race([
       frameTail.then(() => true),
-      new Promise((resolve18) => {
+      new Promise((resolve19) => {
         frameDrainTimer = setTimeout(
-          () => resolve18(false),
+          () => resolve19(false),
           this.opts.unwindTimeoutMs ?? _HostClient.DEFAULT_UNWIND_TIMEOUT_MS
         );
         frameDrainTimer.unref?.();
@@ -24624,7 +24640,7 @@ var HostClient = class _HostClient {
         const entry = this.secretGrants.get(key) ?? { resolvers: [] };
         entry.value = message.secrets;
         entry.expiresAt = expiresAt;
-        for (const resolve18 of entry.resolvers) resolve18(message.secrets);
+        for (const resolve19 of entry.resolvers) resolve19(message.secrets);
         entry.resolvers = [];
         this.secretGrants.set(key, entry);
         return;
@@ -24655,19 +24671,19 @@ var HostClient = class _HostClient {
         const entry = this.connectionGrants.get(key) ?? { resolvers: [] };
         entry.value = message.connections;
         entry.expiresAt = expiresAt;
-        for (const resolve18 of entry.resolvers) resolve18(message.connections);
+        for (const resolve19 of entry.resolvers) resolve19(message.connections);
         entry.resolvers = [];
         this.connectionGrants.set(key, entry);
         const providerEntry = this.providerGrants.get(key) ?? { resolvers: [] };
         providerEntry.value = providers;
         providerEntry.expiresAt = authorityExpiresAt;
-        for (const resolve18 of providerEntry.resolvers) resolve18(providers);
+        for (const resolve19 of providerEntry.resolvers) resolve19(providers);
         providerEntry.resolvers = [];
         this.providerGrants.set(key, providerEntry);
         const toolServerEntry = this.integrationToolServerGrants.get(key) ?? { resolvers: [] };
         const toolServers = [...message.toolServers ?? []];
         toolServerEntry.value = toolServers;
-        for (const resolve18 of toolServerEntry.resolvers) resolve18(toolServers);
+        for (const resolve19 of toolServerEntry.resolvers) resolve19(toolServers);
         toolServerEntry.resolvers = [];
         this.integrationToolServerGrants.set(key, toolServerEntry);
         return;
@@ -24806,8 +24822,8 @@ var HostClient = class _HostClient {
       return redactCredentialText(text, sensitiveSnapshot()).slice(0, maxLength);
     };
     let resolveCancelled;
-    const cancelledPromise = new Promise((resolve18) => {
-      resolveCancelled = resolve18;
+    const cancelledPromise = new Promise((resolve19) => {
+      resolveCancelled = resolve19;
     });
     const endAuthority = (reason = "cloud_cancel") => {
       if (stopReason) return;
@@ -24816,28 +24832,28 @@ var HostClient = class _HostClient {
       authorityController.abort(reason);
       const secretEntry = this.secretGrants.get(cancelKey);
       if (secretEntry) {
-        for (const resolve18 of secretEntry.resolvers) resolve18({});
+        for (const resolve19 of secretEntry.resolvers) resolve19({});
         secretEntry.resolvers = [];
         delete secretEntry.value;
       }
       this.secretGrants.delete(cancelKey);
       const connectionEntry = this.connectionGrants.get(cancelKey);
       if (connectionEntry) {
-        for (const resolve18 of connectionEntry.resolvers) resolve18([]);
+        for (const resolve19 of connectionEntry.resolvers) resolve19([]);
         connectionEntry.resolvers = [];
         delete connectionEntry.value;
       }
       this.connectionGrants.delete(cancelKey);
       const providerEntry = this.providerGrants.get(cancelKey);
       if (providerEntry) {
-        for (const resolve18 of providerEntry.resolvers) resolve18([]);
+        for (const resolve19 of providerEntry.resolvers) resolve19([]);
         providerEntry.resolvers = [];
         delete providerEntry.value;
       }
       this.providerGrants.delete(cancelKey);
       const toolServerEntry = this.integrationToolServerGrants.get(cancelKey);
       if (toolServerEntry) {
-        for (const resolve18 of toolServerEntry.resolvers) resolve18([]);
+        for (const resolve19 of toolServerEntry.resolvers) resolve19([]);
         toolServerEntry.resolvers = [];
         delete toolServerEntry.value;
       }
@@ -24845,8 +24861,8 @@ var HostClient = class _HostClient {
       this.clearAuthorityExpiry(cancelKey);
       const approvalWaiters = this.approvalWaiters.get(cancelKey);
       if (approvalWaiters) {
-        for (const resolve18 of approvalWaiters.values()) {
-          resolve18({ approved: false, guidance: "task was cancelled" });
+        for (const resolve19 of approvalWaiters.values()) {
+          resolve19({ approved: false, guidance: "task was cancelled" });
         }
         approvalWaiters.clear();
       }
@@ -24972,9 +24988,9 @@ var HostClient = class _HostClient {
         return value;
       };
       if (entry.value) return Promise.resolve(capture(entry.value));
-      return new Promise((resolve18) => {
-        entry.resolvers.push((value) => resolve18(capture(value)));
-        setTimeout(() => resolve18(capture(entry.value ?? {})), _HostClient.SECRETS_WAIT_MS);
+      return new Promise((resolve19) => {
+        entry.resolvers.push((value) => resolve19(capture(value)));
+        setTimeout(() => resolve19(capture(entry.value ?? {})), _HostClient.SECRETS_WAIT_MS);
       });
     };
     const connections = () => {
@@ -24991,9 +25007,9 @@ var HostClient = class _HostClient {
         return value;
       };
       if (entry.value) return Promise.resolve(capture(entry.value));
-      return new Promise((resolve18) => {
-        entry.resolvers.push((value) => resolve18(capture(value)));
-        setTimeout(() => resolve18(capture(entry.value ?? [])), _HostClient.SECRETS_WAIT_MS);
+      return new Promise((resolve19) => {
+        entry.resolvers.push((value) => resolve19(capture(value)));
+        setTimeout(() => resolve19(capture(entry.value ?? [])), _HostClient.SECRETS_WAIT_MS);
       });
     };
     const providers = () => {
@@ -25010,9 +25026,9 @@ var HostClient = class _HostClient {
         return value;
       };
       if (entry.value !== void 0) return Promise.resolve(capture(entry.value));
-      return new Promise((resolve18) => {
-        entry.resolvers.push((value) => resolve18(capture(value)));
-        setTimeout(() => resolve18(capture(entry.value ?? [])), _HostClient.SECRETS_WAIT_MS);
+      return new Promise((resolve19) => {
+        entry.resolvers.push((value) => resolve19(capture(value)));
+        setTimeout(() => resolve19(capture(entry.value ?? [])), _HostClient.SECRETS_WAIT_MS);
       });
     };
     const integrationToolServers = () => {
@@ -25021,9 +25037,9 @@ var HostClient = class _HostClient {
       this.integrationToolServerGrants.set(cancelKey, entry);
       const capture = (value) => authorityController.signal.aborted ? [] : value;
       if (entry.value !== void 0) return Promise.resolve(capture(entry.value));
-      return new Promise((resolve18) => {
-        entry.resolvers.push((value) => resolve18(capture(value)));
-        setTimeout(() => resolve18(capture(entry.value ?? [])), _HostClient.SECRETS_WAIT_MS);
+      return new Promise((resolve19) => {
+        entry.resolvers.push((value) => resolve19(capture(value)));
+        setTimeout(() => resolve19(capture(entry.value ?? [])), _HostClient.SECRETS_WAIT_MS);
       });
     };
     const linear = async () => {
@@ -25050,13 +25066,13 @@ var HostClient = class _HostClient {
         ...questionChoices ? { questionChoices: [...questionChoices] } : {},
         ...questionnaire ? { questionnaire } : {}
       });
-      return new Promise((resolve18) => {
+      return new Promise((resolve19) => {
         const waiters = this.approvalWaiters.get(cancelKey) ?? /* @__PURE__ */ new Map();
         this.approvalWaiters.set(cancelKey, waiters);
-        waiters.set(requestId, resolve18);
+        waiters.set(requestId, resolve19);
         void cancelledPromise.then(() => {
           if (waiters.delete(requestId)) {
-            resolve18({ approved: false, guidance: "task was cancelled" });
+            resolve19({ approved: false, guidance: "task was cancelled" });
           }
         });
       });
@@ -25102,11 +25118,11 @@ var HostClient = class _HostClient {
         if (existing) message = existing;
         else terminalMessages.set(requestId, message);
       }
-      return new Promise((resolve18) => {
+      return new Promise((resolve19) => {
         const waiters = this.agentOpWaiters.get(cancelKey) ?? /* @__PURE__ */ new Map();
         this.agentOpWaiters.set(cancelKey, waiters);
         if (waiters.has(requestId)) {
-          resolve18({ ok: false, error: "provider settlement request is already in flight" });
+          resolve19({ ok: false, error: "provider settlement request is already in flight" });
           return;
         }
         const timer = setTimeout(() => {
@@ -25117,7 +25133,7 @@ var HostClient = class _HostClient {
                 (pending) => !(pending.type === "agent.op" && pending.requestId === requestId)
               );
             }
-            resolve18({
+            resolve19({
               ok: false,
               error: terminal ? "The provider call completed, but Zixt could not record its outcome. Do not retry; wait for reconciliation." : "the platform did not answer in time; verify with a list_* tool before retrying a mutating call"
             });
@@ -25125,7 +25141,7 @@ var HostClient = class _HostClient {
         }, _HostClient.AGENT_OP_TIMEOUT_MS);
         timer.unref?.();
         waiters.set(requestId, {
-          resolve: resolve18,
+          resolve: resolve19,
           timer,
           ...terminal ? { terminalMessage: message } : {}
         });
@@ -25171,12 +25187,12 @@ var HostClient = class _HostClient {
             "No GitHub change was attempted; the authority grant request was invalid."
           );
         }
-        const outcome = await new Promise((resolve18) => {
+        const outcome = await new Promise((resolve19) => {
           const timer = setTimeout(() => {
             const waiter = this.operationGrantWaiters.get(requestId);
             if (!waiter) return;
             this.operationGrantWaiters.delete(requestId);
-            resolve18({ grant: null, retryable: true, reason: "no_reply_from_zixt" });
+            resolve19({ grant: null, retryable: true, reason: "no_reply_from_zixt" });
           }, this.operationGrantTimeoutMs);
           timer.unref?.();
           this.operationGrantWaiters.set(requestId, {
@@ -25189,9 +25205,9 @@ var HostClient = class _HostClient {
             timer,
             accept: (grant) => {
               addSensitiveValues(providerGrantSensitiveValues(grant));
-              resolve18({ grant });
+              resolve19({ grant });
             },
-            deny: (retryable, reason, detail, retryAt, retryCode) => resolve18({
+            deny: (retryable, reason, detail, retryAt, retryCode) => resolve19({
               grant: null,
               retryable,
               reason,
@@ -25205,7 +25221,7 @@ var HostClient = class _HostClient {
           } catch {
             clearTimeout(timer);
             this.operationGrantWaiters.delete(requestId);
-            resolve18({ grant: null, retryable: false, reason: "connection_unavailable" });
+            resolve19({ grant: null, retryable: false, reason: "connection_unavailable" });
           }
         });
         if (outcome.grant) {
@@ -25261,7 +25277,7 @@ var HostClient = class _HostClient {
           )
         );
       }
-      return new Promise((resolve18, reject3) => {
+      return new Promise((resolve19, reject3) => {
         const timer = setTimeout(() => {
           if (this.browserCredentialWaiters.delete(requestId)) {
             reject3(
@@ -25280,7 +25296,7 @@ var HostClient = class _HostClient {
           timer,
           accept: (credential) => {
             addSensitiveValues(webLoginSensitiveValues(credential));
-            resolve18(credential);
+            resolve19(credential);
           },
           deny: (reason) => reject3(new Error(reason))
         });
@@ -25603,14 +25619,14 @@ async function observeWindowsGuardianNonce(pid, nonce) {
       "Windows runner identity could not be observed"
     );
   }
-  return new Promise((resolve18, reject3) => {
+  return new Promise((resolve19, reject3) => {
     let done = false;
     const finish = (result) => {
       if (done) return;
       done = true;
       clearTimeout(timeout);
       if (result instanceof Error) reject3(result);
-      else resolve18(result);
+      else resolve19(result);
     };
     const timeout = setTimeout(
       () => finish(
@@ -25655,7 +25671,7 @@ async function observePosixGuardianNonce(pid, nonce) {
       );
     }
   }
-  return new Promise((resolve18, reject3) => {
+  return new Promise((resolve19, reject3) => {
     const observer = spawn3("/bin/ps", ["-ww", "-o", "command=", "-p", String(pid)], {
       stdio: ["ignore", "pipe", "ignore"]
     });
@@ -25666,7 +25682,7 @@ async function observePosixGuardianNonce(pid, nonce) {
       done = true;
       clearTimeout(timeout);
       if (result instanceof Error) reject3(result);
-      else resolve18(result);
+      else resolve19(result);
     };
     const timeout = setTimeout(() => {
       observer.kill("SIGKILL");
@@ -25713,7 +25729,7 @@ async function observeGuardianIdentity(pid, identity) {
   return process.platform === "win32" ? observeWindowsGuardianNonce(pid, identity.nonce) : observePosixGuardianNonce(pid, identity.nonce);
 }
 function delay(ms) {
-  return new Promise((resolve18) => setTimeout(resolve18, ms));
+  return new Promise((resolve19) => setTimeout(resolve19, ms));
 }
 function posixProcessRecordsFromPs(output) {
   const records = [];
@@ -25746,7 +25762,7 @@ function posixProcessRecordsFromPs(output) {
   return records;
 }
 async function snapshotPosixProcesses() {
-  return new Promise((resolve18, reject3) => {
+  return new Promise((resolve19, reject3) => {
     const observer = spawn3("/bin/ps", ["-axo", "uid=,pid=,ppid=,pgid=,stat="], {
       stdio: ["ignore", "pipe", "ignore"]
     });
@@ -25759,7 +25775,7 @@ async function snapshotPosixProcesses() {
       if (error52) reject3(error52);
       else {
         try {
-          resolve18(posixProcessRecordsFromPs(output));
+          resolve19(posixProcessRecordsFromPs(output));
         } catch (caught) {
           reject3(caught);
         }
@@ -26094,7 +26110,7 @@ async function snapshotWindowsDescendants(rootPid) {
       "Windows process-tree observation could not start"
     );
   }
-  return new Promise((resolve18, reject3) => {
+  return new Promise((resolve19, reject3) => {
     let done = false;
     const timeout = setTimeout(() => {
       if (done) return;
@@ -26121,7 +26137,7 @@ async function snapshotWindowsDescendants(rootPid) {
         return;
       }
       try {
-        resolve18(completeWindowsDescendantPids(rootPid, processes));
+        resolve19(completeWindowsDescendantPids(rootPid, processes));
       } catch (caught) {
         reject3(caught);
       }
@@ -26168,7 +26184,7 @@ async function waitForProcessesExit(pids, timeoutMs) {
 }
 async function runTaskkill(pid, command, timeoutMs = TASKKILL_TIMEOUT_MS, independentlyTrackedPids = []) {
   const trustedCommand = command ?? defaultTaskkillCommand();
-  const result = await new Promise((resolve18, reject3) => {
+  const result = await new Promise((resolve19, reject3) => {
     const killer = spawn3(trustedCommand, ["/PID", String(pid), "/T", "/F"], {
       stdio: ["ignore", "pipe", "pipe"],
       windowsHide: true
@@ -26203,7 +26219,7 @@ async function runTaskkill(pid, command, timeoutMs = TASKKILL_TIMEOUT_MS, indepe
       done = true;
       clearTimeout(timeout);
       if (error52) reject3(error52);
-      else resolve18({ code: killer.exitCode, output, outputTruncated });
+      else resolve19({ code: killer.exitCode, output, outputTruncated });
     };
     killer.once(
       "error",
@@ -27005,12 +27021,12 @@ async function createWindowsJobContainment(pid, options) {
     stderr = `${stderr}${String(chunk)}`.slice(-HELPER_OUTPUT_LIMIT);
   });
   const helperEvents = helper;
-  const exited = new Promise((resolve18) => {
+  const exited = new Promise((resolve19) => {
     let completed = false;
     const complete = (code, signal) => {
       if (completed) return;
       completed = true;
-      resolve18({ code, signal });
+      resolve19({ code, signal });
     };
     helperEvents.once("error", () => {
       failProtocol(new Error("Windows Job Object helper could not start"));
@@ -27023,7 +27039,7 @@ async function createWindowsJobContainment(pid, options) {
   });
   const nextLine = async (expected) => {
     if (protocolFailure) throw protocolFailure;
-    const line = lines.shift() ?? await new Promise((resolve18, reject3) => {
+    const line = lines.shift() ?? await new Promise((resolve19, reject3) => {
       const timer = setTimeout(
         () => reject3(timeoutError("Windows Job Object helper did not answer in time")),
         timeoutMs
@@ -27031,7 +27047,7 @@ async function createWindowsJobContainment(pid, options) {
       timer.unref?.();
       lineWaiters.push((value) => {
         clearTimeout(timer);
-        resolve18(value);
+        resolve19(value);
       });
     });
     if (protocolFailure) throw protocolFailure;
@@ -27044,8 +27060,8 @@ async function createWindowsJobContainment(pid, options) {
     }
     const stopped = await Promise.race([
       exited.then(() => true),
-      new Promise((resolve18) => {
-        const timer = setTimeout(() => resolve18(false), timeoutMs);
+      new Promise((resolve19) => {
+        const timer = setTimeout(() => resolve19(false), timeoutMs);
         timer.unref?.();
       })
     ]);
@@ -27104,7 +27120,7 @@ async function awaitWindowsContainmentGate(env = process.env, input = process.st
   if (nonce === void 0) return true;
   if (!SAFE_NONCE2.test(nonce)) return false;
   const expected = windowsContainmentGate(nonce).trimEnd();
-  return new Promise((resolve18) => {
+  return new Promise((resolve19) => {
     let pending = Buffer.alloc(0);
     let settled = false;
     const finish = (result) => {
@@ -27115,7 +27131,7 @@ async function awaitWindowsContainmentGate(env = process.env, input = process.st
       input.off("end", onEnd);
       input.off("error", onEnd);
       if (result) input.pause();
-      resolve18(result);
+      resolve19(result);
     };
     const onData = (chunk) => {
       pending = Buffer.concat([pending, chunk]);
@@ -28220,7 +28236,7 @@ async function installRelease(version2, options = {}) {
   }) : Promise.resolve(null);
   const timeoutMs = options.timeoutMs ?? INSTALL_TIMEOUT_MS2;
   const outcome = { code: null, signal: null, timedOut: false, spawnError: null };
-  const installed = await new Promise((resolve18, reject3) => {
+  const installed = await new Promise((resolve19, reject3) => {
     let finished = false;
     let cleanupStarted = false;
     let exitObserved = false;
@@ -28236,7 +28252,7 @@ async function installRelease(version2, options = {}) {
       finished = true;
       clearTimeout(timer);
       options.signal?.removeEventListener("abort", requestCleanup);
-      resolve18(result);
+      resolve19(result);
     };
     const requestCleanup = () => {
       if (cleanupStarted || finished) return;
@@ -28601,11 +28617,11 @@ async function runWorkerCompatibilityProxy(env = process.env, argv = process.arg
   child.stdin?.on("error", () => {
   });
   process.stdin.pipe(child.stdin);
-  return new Promise((resolve18) => {
-    child.once("error", () => resolve18(1));
+  return new Promise((resolve19) => {
+    child.once("error", () => resolve19(1));
     child.once("exit", (code) => {
       process.stdin.unpipe(child.stdin);
-      resolve18(code ?? 1);
+      resolve19(code ?? 1);
     });
   });
 }
@@ -28685,11 +28701,11 @@ async function launchHostSupervisor(options = {}) {
   const waitOrStop = async (ms) => {
     if (stopping) return false;
     if (!customDelay) {
-      await new Promise((resolve18) => {
+      await new Promise((resolve19) => {
         const finish = () => {
           clearTimeout(timer);
           stopController.signal.removeEventListener("abort", finish);
-          resolve18();
+          resolve19();
         };
         const timer = setTimeout(finish, ms);
         stopController.signal.addEventListener("abort", finish, { once: true });
@@ -28697,8 +28713,8 @@ async function launchHostSupervisor(options = {}) {
       return !stopping;
     }
     let finishStop;
-    const stopped = new Promise((resolve18) => {
-      finishStop = () => resolve18();
+    const stopped = new Promise((resolve19) => {
+      finishStop = () => resolve19();
       stopController.signal.addEventListener("abort", finishStop, { once: true });
     });
     await Promise.race([customDelay(ms), stopped]);
@@ -28828,19 +28844,19 @@ async function launchHostSupervisor(options = {}) {
       child = spawnSupervisor(entry, version2, ownershipDirectory, containmentGateNonce);
       const launchedSupervisor = child;
       let resolveChildExited;
-      const childExited = new Promise((resolve18) => {
-        resolveChildExited = resolve18;
+      const childExited = new Promise((resolve19) => {
+        resolveChildExited = resolve19;
       });
       const supervisorContainmentAbort = new AbortController();
       void childExited.then(() => supervisorContainmentAbort.abort());
       const outcomePromise = new Promise(
-        (resolve18) => {
+        (resolve19) => {
           let observed = false;
           const finish = (code, signal) => {
             if (observed) return;
             observed = true;
             resolveChildExited();
-            resolve18({ code, signal });
+            resolve19({ code, signal });
           };
           child.once("error", () => finish(1, null));
           child.once("exit", finish);
@@ -28861,12 +28877,12 @@ async function launchHostSupervisor(options = {}) {
           if (!supervisorContainment || !launchedSupervisor.stdin) {
             throw new Error("supervisor Job Object gate is unavailable");
           }
-          await new Promise((resolve18, reject3) => {
+          await new Promise((resolve19, reject3) => {
             launchedSupervisor.stdin.write(
               windowsContainmentGate(containmentGateNonce),
               (error52) => {
                 if (error52) reject3(error52);
-                else resolve18();
+                else resolve19();
               }
             );
           });
@@ -29014,19 +29030,19 @@ async function superviseHost(options = {}) {
     }
   }
   let announceShutdown;
-  const shutdownAnnounced = new Promise((resolve18) => {
-    announceShutdown = resolve18;
+  const shutdownAnnounced = new Promise((resolve19) => {
+    announceShutdown = resolve19;
   });
   const attempted = /* @__PURE__ */ new Set();
   let unsatisfiableUpdates = 0;
   const waitOrShutdown = async (ms) => {
     if (shuttingDown2) return false;
     if (!customDelay) {
-      await new Promise((resolve18) => {
+      await new Promise((resolve19) => {
         const finish = () => {
           clearTimeout(timer);
           shutdownController.signal.removeEventListener("abort", finish);
-          resolve18();
+          resolve19();
         };
         const timer = setTimeout(finish, ms);
         shutdownController.signal.addEventListener("abort", finish, { once: true });
@@ -29176,19 +29192,19 @@ async function superviseHost(options = {}) {
       const watchedChild = child;
       const workerStderr = captureWorkerStderr(watchedChild);
       let resolveChildExited;
-      const childExited = new Promise((resolve18) => {
-        resolveChildExited = resolve18;
+      const childExited = new Promise((resolve19) => {
+        resolveChildExited = resolve19;
       });
       const workerContainmentAbort = new AbortController();
       void childExited.then(() => workerContainmentAbort.abort());
       const outcomePromise = new Promise(
-        (resolve18) => {
+        (resolve19) => {
           let observed = false;
           const finish = (result) => {
             if (observed) return;
             observed = true;
             resolveChildExited();
-            resolve18(result);
+            resolve19(result);
           };
           watchedChild.once("error", () => finish({ code: 1, signal: null }));
           watchedChild.once(
@@ -29210,10 +29226,10 @@ async function superviseHost(options = {}) {
           if (!workerContainment || !watchedChild.stdin) {
             throw new Error("worker Job Object gate is unavailable");
           }
-          await new Promise((resolve18, reject3) => {
+          await new Promise((resolve19, reject3) => {
             watchedChild.stdin.write(windowsContainmentGate(containmentGateNonce), (error52) => {
               if (error52) reject3(error52);
-              else resolve18();
+              else resolve19();
             });
           });
         }
@@ -29620,7 +29636,7 @@ function watchParentPipe(pipe2, onStop) {
 }
 
 // src/index.ts
-import { homedir as homedir16, hostname as hostname3 } from "node:os";
+import { homedir as homedir17, hostname as hostname3 } from "node:os";
 
 // src/hardware.ts
 import { existsSync } from "node:fs";
@@ -30391,7 +30407,7 @@ async function loadPlaywright() {
 }
 async function installChromium() {
   const cliPath = join12(playwrightCoreRoot, "cli.js");
-  await new Promise((resolve18, reject3) => {
+  await new Promise((resolve19, reject3) => {
     const child = spawn7(process.execPath, [cliPath, "install", "chromium"], {
       env: process.env,
       stdio: ["ignore", "inherit", "inherit"],
@@ -30406,7 +30422,7 @@ async function installChromium() {
       settled = true;
       clearTimeout(timeout);
       if (error52) reject3(error52);
-      else resolve18();
+      else resolve19();
     };
     const timeout = setTimeout(() => {
       child.kill();
@@ -34210,8 +34226,8 @@ async function runGit(input, args, env) {
     let settled = false;
     let stopping = false;
     let resolveExited;
-    const exited = new Promise((resolve18) => {
-      resolveExited = resolve18;
+    const exited = new Promise((resolve19) => {
+      resolveExited = resolve19;
     });
     child.once("exit", resolveExited);
     const cleanup = () => {
@@ -37021,8 +37037,8 @@ var linearToolPackFactory = {
   async create(grant, context) {
     let resolveCancelled;
     let closed = false;
-    const cancelled = new Promise((resolve18) => {
-      resolveCancelled = resolve18;
+    const cancelled = new Promise((resolve19) => {
+      resolveCancelled = resolve19;
     });
     const cancel = () => {
       if (closed) return;
@@ -38058,7 +38074,7 @@ function createAskUserServer() {
   let server;
   let listening;
   function ensureListening() {
-    listening ??= new Promise((resolve18, reject3) => {
+    listening ??= new Promise((resolve19, reject3) => {
       server = createServer2((req, res) => {
         res.on("error", () => {
         });
@@ -38074,7 +38090,7 @@ function createAskUserServer() {
       server.on("error", reject3);
       server.listen(0, "127.0.0.1", () => {
         const address = server.address();
-        if (address && typeof address === "object") resolve18(address.port);
+        if (address && typeof address === "object") resolve19(address.port);
         else reject3(new Error("ask_user server failed to bind"));
       });
       server.unref();
@@ -40630,7 +40646,7 @@ function runCliProcess(options) {
       usage: { inputTokens: 0, outputTokens: 0 }
     });
   }
-  return new Promise((resolve18) => {
+  return new Promise((resolve19) => {
     const platform = options.platform ?? process.platform;
     const containmentGateNonce = options.guardian && platform === "win32" ? randomUUID11() : void 0;
     const child = options.guardian ? spawn10(
@@ -40692,7 +40708,7 @@ function runCliProcess(options) {
       clearInterval(timer);
       unregisterFollowUps?.();
       parser.stop?.();
-      resolve18(result);
+      resolve19(result);
     };
     const terminate = (result) => {
       if (settled || forcedResult) return;
@@ -41038,7 +41054,7 @@ async function readCodexSessionRuntime(input) {
 }
 var codexCatalogCache = /* @__PURE__ */ new Map();
 async function loadCodexModelCatalog(command, prefixArgs, env) {
-  const output = await new Promise((resolve18) => {
+  const output = await new Promise((resolve19) => {
     const child = spawnCli(command, [...prefixArgs, "debug", "models"], {
       stdio: ["ignore", "pipe", "ignore"],
       windowsHide: true,
@@ -41053,7 +41069,7 @@ async function loadCodexModelCatalog(command, prefixArgs, env) {
       if (settled) return;
       settled = true;
       clearTimeout(timer);
-      resolve18(value);
+      resolve19(value);
     };
     const timer = setTimeout(() => {
       child.kill();
@@ -41158,8 +41174,8 @@ function createRuntimeReporter(input, sessionId) {
 var EFFORT_READ_ATTEMPTS = 5;
 var EFFORT_READ_INTERVAL_MS = 3e3;
 function delay2(ms) {
-  return new Promise((resolve18) => {
-    const timer = setTimeout(resolve18, ms);
+  return new Promise((resolve19) => {
+    const timer = setTimeout(resolve19, ms);
     timer.unref?.();
   });
 }
@@ -41246,10 +41262,10 @@ function createClaudeLiveParser(onStream, onSessionModel) {
     },
     async steer(followUp) {
       if (!write) return false;
-      return await new Promise((resolve18) => {
-        acknowledgements.set(followUp.inputId, resolve18);
+      return await new Promise((resolve19) => {
+        acknowledgements.set(followUp.inputId, resolve19);
         void write(input(followUp.inputId, followUp.text)).catch(() => {
-          if (acknowledgements.delete(followUp.inputId)) resolve18(false);
+          if (acknowledgements.delete(followUp.inputId)) resolve19(false);
         });
       });
     },
@@ -41565,8 +41581,8 @@ ${value}` : value;
 var RUNTIME_READ_ATTEMPTS = 5;
 var RUNTIME_READ_INTERVAL_MS = 2e3;
 function delay3(ms) {
-  return new Promise((resolve18) => {
-    const timer = setTimeout(resolve18, ms);
+  return new Promise((resolve19) => {
+    const timer = setTimeout(resolve19, ms);
     timer.unref?.();
   });
 }
@@ -41605,7 +41621,7 @@ function createCodexAppServerParser(onStream, options) {
   const turnReadyWaiters = /* @__PURE__ */ new Set();
   const usage = () => ({ inputTokens, outputTokens });
   const settleTurnReadiness = (ready) => {
-    for (const resolve18 of turnReadyWaiters) resolve18(ready);
+    for (const resolve19 of turnReadyWaiters) resolve19(ready);
     turnReadyWaiters.clear();
   };
   const send = async (message) => {
@@ -41786,12 +41802,12 @@ function createCodexAppServerParser(onStream, options) {
     async steer(input) {
       if (stopped) return false;
       if (!activeTurnId) {
-        const ready = await new Promise((resolve18) => turnReadyWaiters.add(resolve18));
+        const ready = await new Promise((resolve19) => turnReadyWaiters.add(resolve19));
         if (!ready || stopped) return false;
       }
       if (!threadId || !activeTurnId) return false;
-      return await new Promise((resolve18) => {
-        steerWaiters.set(input.inputId, resolve18);
+      return await new Promise((resolve19) => {
+        steerWaiters.set(input.inputId, resolve19);
         void send({
           id: `steer:${input.inputId}`,
           method: "turn/steer",
@@ -41802,7 +41818,7 @@ function createCodexAppServerParser(onStream, options) {
             clientUserMessageId: input.inputId
           }
         }).catch(() => {
-          if (steerWaiters.delete(input.inputId)) resolve18(false);
+          if (steerWaiters.delete(input.inputId)) resolve19(false);
         });
       });
     },
@@ -41810,7 +41826,7 @@ function createCodexAppServerParser(onStream, options) {
       stopped = true;
       write = null;
       settleTurnReadiness(false);
-      for (const resolve18 of steerWaiters.values()) resolve18(false);
+      for (const resolve19 of steerWaiters.values()) resolve19(false);
       steerWaiters.clear();
     },
     push(chunk) {
@@ -42230,7 +42246,7 @@ function parseAuth(result) {
   return "unknown";
 }
 function run2(command, args) {
-  return new Promise((resolve18) => {
+  return new Promise((resolve19) => {
     const child = spawnCli(command, args, {
       stdio: ["ignore", "pipe", "pipe"],
       windowsHide: true
@@ -42246,7 +42262,7 @@ function run2(command, args) {
       if (settled) return;
       settled = true;
       clearTimeout(timeout);
-      resolve18(result);
+      resolve19(result);
     };
     const timeout = setTimeout(() => {
       child.kill();
@@ -42260,9 +42276,46 @@ function run2(command, args) {
 // src/linux-service.ts
 import { spawn as spawn12 } from "node:child_process";
 import { constants as constants2 } from "node:fs";
-import { access as access4, chmod as chmod7, mkdir as mkdir14, open as open7, rename as rename6, rm as rm10 } from "node:fs/promises";
-import { homedir as homedir10, userInfo } from "node:os";
-import { basename as basename4, dirname as dirname11, join as join21, relative as relative9, resolve as resolve12, sep as sep5 } from "node:path";
+import { access as access5, chmod as chmod8, mkdir as mkdir15, open as open7, rename as rename7, rm as rm11 } from "node:fs/promises";
+import { homedir as homedir11, userInfo } from "node:os";
+import { basename as basename4, dirname as dirname11, join as join22, relative as relative9, resolve as resolve13, sep as sep6 } from "node:path";
+
+// src/service-runtime.ts
+import { access as access4, chmod as chmod7, copyFile, mkdir as mkdir14, rename as rename6, rm as rm10 } from "node:fs/promises";
+import { homedir as homedir10 } from "node:os";
+import { join as join21, resolve as resolve12, sep as sep5 } from "node:path";
+async function ensureDurableServiceNode(options = {}) {
+  const execPath = resolve12(options.execPath ?? process.execPath);
+  const home = options.home ?? homedir10();
+  const platform = options.platform ?? process.platform;
+  const version2 = options.nodeVersion ?? process.version;
+  if (!/^v?[0-9A-Za-z.-]+$/.test(version2)) {
+    throw new Error("the Node runtime version is not a safe directory name");
+  }
+  const zixtRoot = resolve12(home, ".zixt");
+  if (execPath === zixtRoot || execPath.startsWith(zixtRoot + sep5)) return execPath;
+  const directory = join21(zixtRoot, "runtime", `node-${version2}`);
+  const destination = join21(directory, platform === "win32" ? "node.exe" : "node");
+  const alreadyCopied = await access4(destination).then(
+    () => true,
+    () => false
+  );
+  if (alreadyCopied) return destination;
+  await mkdir14(directory, { recursive: true, mode: 448 });
+  const temporary = `${destination}.${process.pid}.${crypto.randomUUID()}.tmp`;
+  try {
+    await copyFile(execPath, temporary);
+    await chmod7(temporary, 493);
+    await rename6(temporary, destination);
+  } catch (error52) {
+    await rm10(temporary, { force: true }).catch(() => void 0);
+    throw error52;
+  }
+  await options.syncDirectory?.(directory);
+  return destination;
+}
+
+// src/linux-service.ts
 var SERVICE_NAME = "zixt-host.service";
 var SYSTEM_SERVICE_COMMAND_TIMEOUT_MS = 7e4;
 var SERVICE_STABILITY_DELAY_MS = 2e3;
@@ -42290,7 +42343,7 @@ function boundedAppend(current, chunk) {
 }
 async function defaultRunCommand(command, args) {
   const commandEnvironment3 = systemServiceCommandEnvironment();
-  return new Promise((resolve18) => {
+  return new Promise((resolve19) => {
     const child = spawn12(command, [...args], {
       stdio: ["ignore", "pipe", "pipe"],
       env: commandEnvironment3,
@@ -42304,7 +42357,7 @@ async function defaultRunCommand(command, args) {
       if (settled) return;
       settled = true;
       if (timer) clearTimeout(timer);
-      resolve18(result);
+      resolve19(result);
     };
     child.stdout?.on("data", (chunk) => {
       stdout = boundedAppend(stdout, chunk);
@@ -42324,7 +42377,7 @@ async function defaultRunCommand(command, args) {
 }
 async function defaultResolveCommand(name) {
   for (const candidate of [`/usr/bin/${name}`, `/bin/${name}`]) {
-    if (await access4(candidate, constants2.X_OK).then(
+    if (await access5(candidate, constants2.X_OK).then(
       () => true,
       () => false
     )) {
@@ -42363,33 +42416,33 @@ async function defaultSyncDirectory(path) {
   }
 }
 async function ensureDirectory(path, mode, syncDirectory8) {
-  const firstCreated = await mkdir14(path, { recursive: true, mode });
+  const firstCreated = await mkdir15(path, { recursive: true, mode });
   if (!firstCreated) return;
-  const first = resolve12(firstCreated);
-  const target = resolve12(path);
+  const first = resolve13(firstCreated);
+  const target = resolve13(path);
   await syncDirectory8(dirname11(first));
   let current = first;
   const descendants = relative9(first, target);
-  for (const part of descendants ? descendants.split(sep5) : []) {
+  for (const part of descendants ? descendants.split(sep6) : []) {
     await syncDirectory8(current);
-    current = join21(current, part);
+    current = join22(current, part);
   }
 }
 async function replacePrivateFile(path, contents, mode, syncDirectory8) {
   const parent = dirname11(path);
   await ensureDirectory(parent, 448, syncDirectory8);
-  const temporary = join21(parent, `.${basename4(path)}.${process.pid}.${crypto.randomUUID()}.tmp`);
+  const temporary = join22(parent, `.${basename4(path)}.${process.pid}.${crypto.randomUUID()}.tmp`);
   const handle = await open7(temporary, "wx", mode);
   try {
     await handle.writeFile(contents, "utf8");
     await handle.sync();
     await handle.close();
-    await rename6(temporary, path);
-    await chmod7(path, mode);
+    await rename7(temporary, path);
+    await chmod8(path, mode);
     await syncDirectory8(parent);
   } catch (error52) {
     await handle.close().catch(() => void 0);
-    await rm10(temporary, { force: true }).catch(() => void 0);
+    await rm11(temporary, { force: true }).catch(() => void 0);
     throw error52;
   }
 }
@@ -42422,7 +42475,7 @@ async function installLinuxService(options) {
     throw new Error("Linux automatic startup is available only on Linux.");
   }
   const env = options.env ?? process.env;
-  const home = options.home ?? homedir10();
+  const home = options.home ?? homedir11();
   const username = oneLine(options.username ?? userInfo().username, "user name");
   const token2 = oneLine(options.token, "pairing code");
   const path = oneLine(
@@ -42430,17 +42483,17 @@ async function installLinuxService(options) {
     "command search path"
   );
   const cloudUrl = options.cloudUrl ? oneLine(options.cloudUrl, "Zixt Cloud address") : void 0;
-  const xdgConfigHome = env.XDG_CONFIG_HOME ? oneLine(env.XDG_CONFIG_HOME, "Linux configuration path") : join21(home, ".config");
-  const configRoot = options.serviceConfigRoot ?? join21(xdgConfigHome, "zixt");
-  const unitRoot = options.userUnitRoot ?? join21(xdgConfigHome, "systemd", "user");
-  const environmentPath = join21(configRoot, "host.env");
-  const unitPath = join21(unitRoot, SERVICE_NAME);
+  const xdgConfigHome = env.XDG_CONFIG_HOME ? oneLine(env.XDG_CONFIG_HOME, "Linux configuration path") : join22(home, ".config");
+  const configRoot = options.serviceConfigRoot ?? join22(xdgConfigHome, "zixt");
+  const unitRoot = options.userUnitRoot ?? join22(xdgConfigHome, "systemd", "user");
+  const environmentPath = join22(configRoot, "host.env");
+  const unitPath = join22(unitRoot, SERVICE_NAME);
   const installVersion = options.installVersion ?? ((version2, onFailure) => installRelease(version2, onFailure ? { onFailure } : {}));
   const activateVersion = options.activateVersion ?? (options.installVersion ? async (entry) => entry : activateInstalledRelease);
   const resolveCommand = options.resolveCommand ?? defaultResolveCommand;
   const run3 = options.runCommand ?? defaultRunCommand;
   const syncDirectory8 = options.syncDirectory ?? defaultSyncDirectory;
-  const stabilityDelay = options.delay ?? ((ms) => new Promise((resolve18) => setTimeout(resolve18, ms)));
+  const stabilityDelay = options.delay ?? ((ms) => new Promise((resolve19) => setTimeout(resolve19, ms)));
   const [systemctl, loginctl] = await Promise.all([
     resolveCommand("systemctl"),
     resolveCommand("loginctl")
@@ -42474,7 +42527,7 @@ async function installLinuxService(options) {
     }
   }
   await ensureDirectory(configRoot, 448, syncDirectory8);
-  await chmod7(configRoot, 448);
+  await chmod8(configRoot, 448);
   const serviceEnvironment = [
     `ZIXT_HOST_TOKEN=${systemdEnvironmentValue(token2)}`,
     ...cloudUrl ? [`ZIXT_CLOUD_URL=${systemdEnvironmentValue(cloudUrl)}`] : [],
@@ -42489,6 +42542,7 @@ async function installLinuxService(options) {
     ""
   ].join("\n");
   await replacePrivateFile(environmentPath, serviceEnvironment, 384, syncDirectory8);
+  const serviceNode = options.serviceNode ?? await ensureDurableServiceNode({ home, syncDirectory: syncDirectory8 });
   const unit = [
     "[Unit]",
     "Description=Zixt Host",
@@ -42498,7 +42552,7 @@ async function installLinuxService(options) {
     // Node, so a missing/corrupt release cannot masquerade as an active Host.
     "Type=exec",
     `EnvironmentFile=${systemdDirectivePath(environmentPath)}`,
-    `ExecStart=${systemdUnitValue(process.execPath)} ${systemdUnitValue(currentEntry)}`,
+    `ExecStart=${systemdUnitValue(serviceNode)} ${systemdUnitValue(currentEntry)}`,
     "Restart=on-failure",
     "RestartPreventExitStatus=64",
     "RestartSec=5s",
@@ -42563,9 +42617,9 @@ async function installLinuxService(options) {
 // src/macos-service.ts
 import { spawn as spawn13 } from "node:child_process";
 import { constants as constants3 } from "node:fs";
-import { access as access5, chmod as chmod8, mkdir as mkdir15, open as open8, rename as rename7, rm as rm11 } from "node:fs/promises";
-import { homedir as homedir11, userInfo as userInfo2 } from "node:os";
-import { basename as basename5, dirname as dirname12, join as join22, relative as relative10, resolve as resolve13, sep as sep6 } from "node:path";
+import { access as access6, chmod as chmod9, mkdir as mkdir16, open as open8, rename as rename8, rm as rm12 } from "node:fs/promises";
+import { homedir as homedir12, userInfo as userInfo2 } from "node:os";
+import { basename as basename5, dirname as dirname12, join as join23, relative as relative10, resolve as resolve14, sep as sep7 } from "node:path";
 var LAUNCH_AGENT_LABEL = "ai.zixt.host";
 var SERVICE_STABILITY_DELAY_MS2 = 2e3;
 var COMMAND_TIMEOUT_MS2 = 7e4;
@@ -42589,32 +42643,32 @@ async function syncDirectory4(path) {
   }
 }
 async function ensureDirectory2(path, sync) {
-  const firstCreated = await mkdir15(path, { recursive: true, mode: 448 });
+  const firstCreated = await mkdir16(path, { recursive: true, mode: 448 });
   if (!firstCreated) return;
-  const first = resolve13(firstCreated);
-  const target = resolve13(path);
+  const first = resolve14(firstCreated);
+  const target = resolve14(path);
   await sync(dirname12(first));
   let current = first;
-  for (const part of relative10(first, target).split(sep6).filter(Boolean)) {
+  for (const part of relative10(first, target).split(sep7).filter(Boolean)) {
     await sync(current);
-    current = join22(current, part);
+    current = join23(current, part);
   }
 }
 async function replacePrivateFile2(path, contents, mode, sync) {
   const parent = dirname12(path);
   await ensureDirectory2(parent, sync);
-  const temporary = join22(parent, `.${basename5(path)}.${process.pid}.${crypto.randomUUID()}.tmp`);
+  const temporary = join23(parent, `.${basename5(path)}.${process.pid}.${crypto.randomUUID()}.tmp`);
   const handle = await open8(temporary, "wx", mode);
   try {
     await handle.writeFile(contents, "utf8");
     await handle.sync();
     await handle.close();
-    await rename7(temporary, path);
-    await chmod8(path, mode);
+    await rename8(temporary, path);
+    await chmod9(path, mode);
     await sync(parent);
   } catch (error52) {
     await handle.close().catch(() => void 0);
-    await rm11(temporary, { force: true }).catch(() => void 0);
+    await rm12(temporary, { force: true }).catch(() => void 0);
     throw error52;
   }
 }
@@ -42657,7 +42711,7 @@ async function defaultRunCommand2(command, args, env) {
 }
 async function defaultResolveCommand2() {
   for (const candidate of ["/bin/launchctl", "/usr/bin/launchctl"]) {
-    if (await access5(candidate, constants3.X_OK).then(
+    if (await access6(candidate, constants3.X_OK).then(
       () => true,
       () => false
     ))
@@ -42669,13 +42723,13 @@ function commandFailure2(label, result) {
   const detail = (result.stderr || result.stdout).trim().slice(-240);
   return new Error(`${label} failed${detail ? `: ${detail}` : ""}`);
 }
-function launcherSource(configPath, home, entry) {
+function launcherSource(configPath, home, node, entry) {
   return `#!/bin/sh
 set -a
 . ${shellValue(configPath)}
 set +a
 cd ${shellValue(home)} || exit 64
-exec ${shellValue(process.execPath)} ${shellValue(entry)}
+exec ${shellValue(node)} ${shellValue(entry)}
 `;
 }
 function parseLaunchdStatus(output) {
@@ -42691,7 +42745,7 @@ async function installMacosService(options) {
     throw new Error("macOS automatic startup is available only on macOS.");
   }
   const env = options.env ?? process.env;
-  const home = options.home ?? homedir11();
+  const home = options.home ?? homedir12();
   const uid = options.uid ?? userInfo2().uid;
   if (!Number.isSafeInteger(uid) || uid < 0) throw new Error("macOS user id is invalid.");
   const token2 = oneLine2(options.token, "pairing code");
@@ -42700,14 +42754,14 @@ async function installMacosService(options) {
     options.path ?? env.PATH ?? "/usr/local/bin:/opt/homebrew/bin:/usr/bin:/bin",
     "command search path"
   );
-  const configRoot = options.configRoot ?? join22(home, "Library", "Application Support", "Zixt");
-  const launchAgentsRoot = options.launchAgentsRoot ?? join22(home, "Library", "LaunchAgents");
-  const logRoot = options.logRoot ?? join22(home, "Library", "Logs", "Zixt");
-  const configPath = join22(configRoot, "host.env");
-  const launcherPath = join22(configRoot, "host-launcher.sh");
-  const plistPath = join22(launchAgentsRoot, `${LAUNCH_AGENT_LABEL}.plist`);
-  const stdoutPath = join22(logRoot, "host.log");
-  const stderrPath = join22(logRoot, "host-error.log");
+  const configRoot = options.configRoot ?? join23(home, "Library", "Application Support", "Zixt");
+  const launchAgentsRoot = options.launchAgentsRoot ?? join23(home, "Library", "LaunchAgents");
+  const logRoot = options.logRoot ?? join23(home, "Library", "Logs", "Zixt");
+  const configPath = join23(configRoot, "host.env");
+  const launcherPath = join23(configRoot, "host-launcher.sh");
+  const plistPath = join23(launchAgentsRoot, `${LAUNCH_AGENT_LABEL}.plist`);
+  const stdoutPath = join23(logRoot, "host.log");
+  const stderrPath = join23(logRoot, "host-error.log");
   const installVersion = options.installVersion ?? ((version2, onFailure) => installRelease(version2, onFailure ? { onFailure } : {}));
   const activateVersion = options.activateVersion ?? (options.installVersion ? async (entry) => entry : (entry) => activateInstalledRelease(entry));
   const resolveCommand = options.resolveCommand ?? (async () => defaultResolveCommand2());
@@ -42730,7 +42784,7 @@ async function installMacosService(options) {
   await ensureDirectory2(configRoot, sync);
   await ensureDirectory2(launchAgentsRoot, sync);
   await ensureDirectory2(logRoot, sync);
-  await chmod8(configRoot, 448);
+  await chmod9(configRoot, 448);
   const serviceEnvironment = [
     `ZIXT_HOST_TOKEN=${shellValue(token2)}`,
     ...cloudUrl ? [`ZIXT_CLOUD_URL=${shellValue(cloudUrl)}`] : [],
@@ -42746,9 +42800,10 @@ async function installMacosService(options) {
     ""
   ].join("\n");
   await replacePrivateFile2(configPath, serviceEnvironment, 384, sync);
+  const serviceNode = options.serviceNode ?? await ensureDurableServiceNode({ home, syncDirectory: sync });
   await replacePrivateFile2(
     launcherPath,
-    launcherSource(configPath, home, currentEntry),
+    launcherSource(configPath, home, serviceNode, currentEntry),
     448,
     sync
   );
@@ -42804,9 +42859,9 @@ async function installMacosService(options) {
 // src/windows-service.ts
 import { spawn as spawn14 } from "node:child_process";
 import { constants as constants4 } from "node:fs";
-import { access as access6, mkdir as mkdir16, open as open9, readFile as readFile11, rename as rename8, rm as rm12 } from "node:fs/promises";
-import { homedir as homedir12 } from "node:os";
-import { basename as basename6, dirname as dirname13, isAbsolute as isAbsolute18, join as join23, relative as relative11, resolve as resolve14, sep as sep7 } from "node:path";
+import { access as access7, mkdir as mkdir17, open as open9, readFile as readFile11, rename as rename9, rm as rm13 } from "node:fs/promises";
+import { homedir as homedir13 } from "node:os";
+import { basename as basename6, dirname as dirname13, isAbsolute as isAbsolute18, join as join24, relative as relative11, resolve as resolve15, sep as sep8 } from "node:path";
 var TASK_NAME = "Zixt Host";
 var COMMAND_TIMEOUT_MS3 = 7e4;
 var SERVICE_STABILITY_DELAY_MS3 = 2e3;
@@ -42832,31 +42887,31 @@ async function syncDirectory5(path) {
   }
 }
 async function ensureDirectory3(path, sync) {
-  const firstCreated = await mkdir16(path, { recursive: true, mode: 448 });
+  const firstCreated = await mkdir17(path, { recursive: true, mode: 448 });
   if (!firstCreated) return;
-  const first = resolve14(firstCreated);
-  const target = resolve14(path);
+  const first = resolve15(firstCreated);
+  const target = resolve15(path);
   await sync(dirname13(first));
   let current = first;
-  for (const part of relative11(first, target).split(sep7).filter(Boolean)) {
+  for (const part of relative11(first, target).split(sep8).filter(Boolean)) {
     await sync(current);
-    current = join23(current, part);
+    current = join24(current, part);
   }
 }
 async function replacePrivateFile3(path, contents, sync, encoding = "utf8") {
   const parent = dirname13(path);
   await ensureDirectory3(parent, sync);
-  const temporary = join23(parent, `.${basename6(path)}.${process.pid}.${crypto.randomUUID()}.tmp`);
+  const temporary = join24(parent, `.${basename6(path)}.${process.pid}.${crypto.randomUUID()}.tmp`);
   const handle = await open9(temporary, "wx", 384);
   try {
     await handle.writeFile(encoding === "utf16le" ? `\uFEFF${contents}` : contents, encoding);
     await handle.sync();
     await handle.close();
-    await rename8(temporary, path);
+    await rename9(temporary, path);
     await sync(parent);
   } catch (error52) {
     await handle.close().catch(() => void 0);
-    await rm12(temporary, { force: true }).catch(() => void 0);
+    await rm13(temporary, { force: true }).catch(() => void 0);
     throw error52;
   }
 }
@@ -42901,8 +42956,8 @@ async function runChild(command, args, env, input) {
 async function defaultResolveCommand3(name, env) {
   const root = env.SYSTEMROOT ?? env.WINDIR;
   if (!root || !isAbsolute18(root)) return null;
-  const candidate = name === "powershell" ? join23(root, "System32", "WindowsPowerShell", "v1.0", "powershell.exe") : join23(root, "System32", `${name}.exe`);
-  return access6(candidate, constants4.X_OK).then(
+  const candidate = name === "powershell" ? join24(root, "System32", "WindowsPowerShell", "v1.0", "powershell.exe") : join24(root, "System32", `${name}.exe`);
+  return access7(candidate, constants4.X_OK).then(
     () => candidate,
     () => null
   );
@@ -43044,7 +43099,7 @@ async function installWindowsService(options) {
     throw new Error("Windows automatic startup is available only on Windows.");
   }
   const env = options.env ?? process.env;
-  const home = options.home ?? homedir12();
+  const home = options.home ?? homedir13();
   const localAppData = options.localAppData ?? env.LOCALAPPDATA;
   if (!localAppData || !isAbsolute18(localAppData)) {
     throw new Error("Windows local application data path is unavailable.");
@@ -43052,12 +43107,12 @@ async function installWindowsService(options) {
   const token2 = oneLine3(options.token, "pairing code");
   const cloudUrl = options.cloudUrl ? oneLine3(options.cloudUrl, "Zixt Cloud address") : void 0;
   const path = oneLine3(options.path ?? env.PATH ?? "", "command search path");
-  const configRoot = options.configRoot ?? join23(localAppData, "Zixt", "Host");
-  const configPath = join23(configRoot, "host.json");
-  const launcherPath = join23(configRoot, "host-launcher.ps1");
-  const launchShimPath = join23(configRoot, "host-launch.vbs");
-  const taskXmlPath = join23(configRoot, "host-task.xml");
-  const statusPath = join23(configRoot, "host-status.json");
+  const configRoot = options.configRoot ?? join24(localAppData, "Zixt", "Host");
+  const configPath = join24(configRoot, "host.json");
+  const launcherPath = join24(configRoot, "host-launcher.ps1");
+  const launchShimPath = join24(configRoot, "host-launch.vbs");
+  const taskXmlPath = join24(configRoot, "host-task.xml");
+  const statusPath = join24(configRoot, "host-status.json");
   const installVersion = options.installVersion ?? ((version2, onFailure) => installRelease(version2, onFailure ? { onFailure } : {}));
   const activateVersion = options.activateVersion ?? (options.installVersion ? async (entry) => entry : (entry) => activateInstalledRelease(entry));
   const resolveCommand = options.resolveCommand ?? ((name) => defaultResolveCommand3(name, env));
@@ -43092,13 +43147,14 @@ async function installWindowsService(options) {
     throw new Error("Windows did not return a protected Machine pairing credential.");
   }
   const generation = crypto.randomUUID();
+  const serviceNode = options.serviceNode ?? await ensureDurableServiceNode({ home, syncDirectory: sync });
   await ensureDirectory3(configRoot, sync);
   await replacePrivateFile3(
     configPath,
     `${JSON.stringify({
       schema: 1,
       generation,
-      node: process.execPath,
+      node: serviceNode,
       entry: currentEntry,
       cwd: home,
       protectedToken,
@@ -43123,7 +43179,7 @@ async function installWindowsService(options) {
     sync,
     "utf16le"
   );
-  await rm12(statusPath, { force: true });
+  await rm13(statusPath, { force: true });
   const acl = await run3(icacls, [
     configRoot,
     "/inheritance:r",
@@ -43183,23 +43239,23 @@ async function installSystemService(options) {
 }
 
 // src/terminal-outcomes.ts
-import { chmod as chmod9, lstat as lstat12, mkdir as mkdir17, open as open10, readdir as readdir6, readFile as readFile12, rename as rename9, rm as rm13 } from "node:fs/promises";
-import { homedir as homedir13 } from "node:os";
-import { dirname as dirname14, join as join24, relative as relative12, resolve as resolve15, sep as sep8 } from "node:path";
+import { chmod as chmod10, lstat as lstat12, mkdir as mkdir18, open as open10, readdir as readdir6, readFile as readFile12, rename as rename10, rm as rm14 } from "node:fs/promises";
+import { homedir as homedir14 } from "node:os";
+import { dirname as dirname14, join as join25, relative as relative12, resolve as resolve16, sep as sep9 } from "node:path";
 var DIRECTORY_MODE5 = 448;
 var FILE_MODE4 = 384;
 var MAX_OUTCOME_BYTES = 4 * 1024 * 1024;
 var HOST_DIRECTORY = /^hst_[0-9a-f]{32}$/;
 var OUTCOME_FILE = /^(tsk_[0-9a-f]{32})\.([1-9][0-9]*)\.json$/;
 function defaultTerminalOutcomeRoot() {
-  return join24(homedir13(), ".zixt", "terminal-outcomes");
+  return join25(homedir14(), ".zixt", "terminal-outcomes");
 }
 function hostOutcomeRoot(root, hostId) {
   if (!HOST_DIRECTORY.test(hostId)) throw new Error("terminal outcome Host identity is malformed");
-  return join24(root, hostId);
+  return join25(root, hostId);
 }
 function outcomePath(root, hostId, taskId, epoch) {
-  return join24(hostOutcomeRoot(root, hostId), `${taskId}.${epoch}.json`);
+  return join25(hostOutcomeRoot(root, hostId), `${taskId}.${epoch}.json`);
 }
 async function syncDirectory6(root) {
   if (process.platform === "win32") return;
@@ -43211,22 +43267,22 @@ async function syncDirectory6(root) {
   }
 }
 async function requirePrivateRoot(root, sync = syncDirectory6) {
-  const firstCreated = await mkdir17(root, { recursive: true, mode: DIRECTORY_MODE5 });
+  const firstCreated = await mkdir18(root, { recursive: true, mode: DIRECTORY_MODE5 });
   if (firstCreated) {
-    const first = resolve15(firstCreated);
-    const target = resolve15(root);
+    const first = resolve16(firstCreated);
+    const target = resolve16(root);
     await sync(dirname14(first));
     let current = first;
-    for (const part of relative12(first, target).split(sep8).filter(Boolean)) {
+    for (const part of relative12(first, target).split(sep9).filter(Boolean)) {
       await sync(current);
-      current = join24(current, part);
+      current = join25(current, part);
     }
   }
   const stat4 = await lstat12(root);
   if (stat4.isSymbolicLink() || !stat4.isDirectory()) {
     throw new Error("terminal outcome journal root is not a trusted directory");
   }
-  await chmod9(root, DIRECTORY_MODE5);
+  await chmod10(root, DIRECTORY_MODE5);
 }
 function parseCommittedOutcome(text, taskId, epoch) {
   let json2;
@@ -43259,7 +43315,7 @@ async function recordTerminalOutcome(hostId, input, root = defaultTerminalOutcom
   } catch (error52) {
     if (error52.code !== "ENOENT") throw error52;
   }
-  const temporary = join24(
+  const temporary = join25(
     scopedRoot,
     `.${outcome.taskId}.${outcome.epoch}.${process.pid}.${Date.now()}.${outcome.resultId}.tmp`
   );
@@ -43270,13 +43326,13 @@ async function recordTerminalOutcome(hostId, input, root = defaultTerminalOutcom
     await handle.sync();
     await handle.close();
     handle = void 0;
-    await rename9(temporary, destination);
+    await rename10(temporary, destination);
     await sync(scopedRoot);
     await sync(root);
   } finally {
     await handle?.close().catch(() => {
     });
-    await rm13(temporary, { force: true }).catch(() => {
+    await rm14(temporary, { force: true }).catch(() => {
     });
   }
 }
@@ -43291,7 +43347,7 @@ async function readTerminalOutcomesStrict(root = defaultTerminalOutcomeRoot()) {
   if (rootStat.isSymbolicLink() || !rootStat.isDirectory()) {
     throw new Error("terminal outcome journal root is not a trusted directory");
   }
-  await chmod9(root, DIRECTORY_MODE5);
+  await chmod10(root, DIRECTORY_MODE5);
   const hostEntries = await readdir6(root, { withFileTypes: true });
   const outcomes = [];
   const resultIds = /* @__PURE__ */ new Set();
@@ -43304,7 +43360,7 @@ async function readTerminalOutcomesStrict(root = defaultTerminalOutcomeRoot()) {
     if (scopedStat.isSymbolicLink() || !scopedStat.isDirectory()) {
       throw new Error("terminal outcome Host scope is not a trusted directory");
     }
-    await chmod9(scopedRoot, DIRECTORY_MODE5);
+    await chmod10(scopedRoot, DIRECTORY_MODE5);
     const entries = await readdir6(scopedRoot, { withFileTypes: true });
     for (const entry of entries) {
       if (!entry.name.endsWith(".json")) continue;
@@ -43312,7 +43368,7 @@ async function readTerminalOutcomesStrict(root = defaultTerminalOutcomeRoot()) {
       if (!match || !entry.isFile() || entry.isSymbolicLink()) {
         throw new Error("committed terminal outcome is not a trusted regular file");
       }
-      const path = join24(scopedRoot, entry.name);
+      const path = join25(scopedRoot, entry.name);
       const stat4 = await lstat12(path);
       if (!stat4.isFile() || stat4.isSymbolicLink() || stat4.size > MAX_OUTCOME_BYTES) {
         throw new Error("committed terminal outcome is not a trusted regular file");
@@ -43345,7 +43401,7 @@ async function forgetAcknowledgedTerminalOutcomes(refs, root = defaultTerminalOu
     if (acknowledged.get(`${hostId}:${outcome.taskId}:${outcome.epoch}`) !== outcome.resultId) {
       continue;
     }
-    await rm13(outcomePath(root, hostId, outcome.taskId, outcome.epoch), { force: true });
+    await rm14(outcomePath(root, hostId, outcome.taskId, outcome.epoch), { force: true });
     changedHostRoots.add(hostOutcomeRoot(root, hostId));
   }
   for (const scopedRoot of changedHostRoots) await syncDirectory6(scopedRoot);
@@ -43357,22 +43413,22 @@ async function forgetSupersededTerminalOutcomes(hostId, taskId, epoch, root = de
     if (scoped.hostId !== hostId) continue;
     const { outcome } = scoped;
     if (outcome.taskId !== taskId || outcome.epoch >= epoch) continue;
-    await rm13(outcomePath(root, hostId, outcome.taskId, outcome.epoch), { force: true });
+    await rm14(outcomePath(root, hostId, outcome.taskId, outcome.epoch), { force: true });
     removed = true;
   }
   if (removed) await syncDirectory6(hostOutcomeRoot(root, hostId));
 }
 
 // src/accepted-assignments.ts
-import { chmod as chmod10, lstat as lstat13, mkdir as mkdir18, open as open11, readdir as readdir7, rename as rename10, rm as rm14 } from "node:fs/promises";
-import { homedir as homedir14 } from "node:os";
-import { dirname as dirname15, join as join25, relative as relative13, resolve as resolve16, sep as sep9 } from "node:path";
+import { chmod as chmod11, lstat as lstat13, mkdir as mkdir19, open as open11, readdir as readdir7, rename as rename11, rm as rm15 } from "node:fs/promises";
+import { homedir as homedir15 } from "node:os";
+import { dirname as dirname15, join as join26, relative as relative13, resolve as resolve17, sep as sep10 } from "node:path";
 var DIRECTORY_MODE6 = 448;
 var FILE_MODE5 = 384;
 var CLAIM_FILE = /^(tsk_[0-9a-f]{32})\.([1-9][0-9]*)\.json$/;
 var TASK_ID = /^tsk_[0-9a-f]{32}$/;
 function defaultAcceptedAssignmentRoot() {
-  return join25(homedir14(), ".zixt", "accepted-assignments");
+  return join26(homedir15(), ".zixt", "accepted-assignments");
 }
 async function syncDirectory7(root) {
   if (process.platform === "win32") return;
@@ -43384,29 +43440,29 @@ async function syncDirectory7(root) {
   }
 }
 async function requirePrivateRoot2(root, sync = syncDirectory7) {
-  const firstCreated = await mkdir18(root, { recursive: true, mode: DIRECTORY_MODE6 });
+  const firstCreated = await mkdir19(root, { recursive: true, mode: DIRECTORY_MODE6 });
   if (firstCreated) {
-    const first = resolve16(firstCreated);
-    const target = resolve16(root);
+    const first = resolve17(firstCreated);
+    const target = resolve17(root);
     await sync(dirname15(first));
     let current = first;
-    for (const part of relative13(first, target).split(sep9).filter(Boolean)) {
+    for (const part of relative13(first, target).split(sep10).filter(Boolean)) {
       await sync(current);
-      current = join25(current, part);
+      current = join26(current, part);
     }
   }
   const stat4 = await lstat13(root);
   if (stat4.isSymbolicLink() || !stat4.isDirectory()) {
     throw new Error("accepted assignment journal root is not a trusted directory");
   }
-  await chmod10(root, DIRECTORY_MODE6);
+  await chmod11(root, DIRECTORY_MODE6);
 }
 function claimPath(root, taskId, epoch) {
   if (!TASK_ID.test(taskId)) throw new Error("accepted assignment Task identity is malformed");
   if (!Number.isSafeInteger(epoch) || epoch < 1) {
     throw new Error("accepted assignment epoch is malformed");
   }
-  return join25(root, `${taskId}.${epoch}.json`);
+  return join26(root, `${taskId}.${epoch}.json`);
 }
 async function recordAcceptedAssignment(assignment, root = defaultAcceptedAssignmentRoot(), options = {}) {
   const sync = options.syncDirectory ?? syncDirectory7;
@@ -43416,7 +43472,7 @@ async function recordAcceptedAssignment(assignment, root = defaultAcceptedAssign
   } catch {
     return false;
   }
-  const temporary = join25(
+  const temporary = join26(
     root,
     `.${assignment.taskId}.${assignment.epoch}.${process.pid}.${Date.now()}.tmp`
   );
@@ -43428,7 +43484,7 @@ async function recordAcceptedAssignment(assignment, root = defaultAcceptedAssign
     await handle.sync();
     await handle.close();
     handle = void 0;
-    await rename10(temporary, destination);
+    await rename11(temporary, destination);
     if (process.platform !== "win32") await sync(root);
     return true;
   } catch {
@@ -43436,7 +43492,7 @@ async function recordAcceptedAssignment(assignment, root = defaultAcceptedAssign
   } finally {
     await handle?.close().catch(() => {
     });
-    await rm14(temporary, { force: true }).catch(() => {
+    await rm15(temporary, { force: true }).catch(() => {
     });
   }
 }
@@ -43451,7 +43507,7 @@ async function recoverAcceptedAssignments(root = defaultAcceptedAssignmentRoot()
   if (rootStat.isSymbolicLink() || !rootStat.isDirectory()) {
     throw new Error("accepted assignment journal root is not a trusted directory");
   }
-  await chmod10(root, DIRECTORY_MODE6);
+  await chmod11(root, DIRECTORY_MODE6);
   const claims = [];
   for (const entry of await readdir7(root, { withFileTypes: true })) {
     if (!entry.isFile()) continue;
@@ -43470,7 +43526,7 @@ async function forgetAcceptedAssignment(assignment, root = defaultAcceptedAssign
   } catch {
     return;
   }
-  await rm14(path, { force: true }).catch(() => {
+  await rm15(path, { force: true }).catch(() => {
   });
 }
 async function forgetAcknowledgedAcceptedAssignments(assignments, root = defaultAcceptedAssignmentRoot()) {
@@ -43478,9 +43534,9 @@ async function forgetAcknowledgedAcceptedAssignments(assignments, root = default
 }
 
 // src/local-observability.ts
-import { appendFile, mkdir as mkdir19, open as open12, rename as rename11, rm as rm15, stat as stat3 } from "node:fs/promises";
-import { homedir as homedir15 } from "node:os";
-import { basename as basename7, dirname as dirname16, join as join26 } from "node:path";
+import { appendFile, mkdir as mkdir20, open as open12, readdir as readdir8, rename as rename12, rm as rm16, stat as stat3 } from "node:fs/promises";
+import { homedir as homedir16 } from "node:os";
+import { basename as basename7, dirname as dirname16, join as join27 } from "node:path";
 
 // src/logger.ts
 var ANSI = {
@@ -43589,13 +43645,14 @@ function createHostLogger(options = {}) {
 var LOCAL_CONSOLE_FILE = "console.jsonl";
 var LOCAL_CONSOLE_PREVIOUS_FILE = "console.prev.jsonl";
 var LOCAL_STATUS_FILE = "status.json";
+var LOCAL_REQUESTS_DIR = "requests";
 var DEFAULT_CONSOLE_ROTATE_BYTES = 2 * 1024 * 1024;
 function defaultLocalObservabilityRoot() {
-  return join26(homedir15(), ".zixt", "observability");
+  return join27(homedir16(), ".zixt", "observability");
 }
 function createLocalConsoleSink(options = {}) {
   const root = options.root ?? defaultLocalObservabilityRoot();
-  const consolePath = join26(root, LOCAL_CONSOLE_FILE);
+  const consolePath = join27(root, LOCAL_CONSOLE_FILE);
   const rotateBytes = options.rotateBytes ?? DEFAULT_CONSOLE_ROTATE_BYTES;
   let disabled = false;
   let prepared = false;
@@ -43605,7 +43662,7 @@ function createLocalConsoleSink(options = {}) {
     if (disabled) return;
     try {
       if (!prepared) {
-        await mkdir19(root, { recursive: true, mode: 448 });
+        await mkdir20(root, { recursive: true, mode: 448 });
         approximateBytes = await stat3(consolePath).then(
           (existing) => existing.size,
           () => 0
@@ -43613,8 +43670,8 @@ function createLocalConsoleSink(options = {}) {
         prepared = true;
       }
       if (approximateBytes >= rotateBytes) {
-        await rm15(join26(root, LOCAL_CONSOLE_PREVIOUS_FILE), { force: true });
-        await rename11(consolePath, join26(root, LOCAL_CONSOLE_PREVIOUS_FILE)).catch(
+        await rm16(join27(root, LOCAL_CONSOLE_PREVIOUS_FILE), { force: true });
+        await rename12(consolePath, join27(root, LOCAL_CONSOLE_PREVIOUS_FILE)).catch(
           (error52) => {
             if (error52.code !== "ENOENT") throw error52;
           }
@@ -43644,14 +43701,34 @@ function createLocalConsoleSink(options = {}) {
     settled: () => queue
   };
 }
+async function consumeRunnerInstallRequests(root = defaultLocalObservabilityRoot()) {
+  const directory = join27(root, LOCAL_REQUESTS_DIR);
+  const requested = /* @__PURE__ */ new Set();
+  let names;
+  try {
+    names = await readdir8(directory);
+  } catch {
+    return requested;
+  }
+  for (const type of INSTALLABLE_RUNNERS) {
+    const name = `install-runner-${type}.json`;
+    if (!names.includes(name)) continue;
+    try {
+      await rm16(join27(directory, name), { force: true });
+      requested.add(type);
+    } catch {
+    }
+  }
+  return requested;
+}
 async function writeLocalStatus(status, root = defaultLocalObservabilityRoot()) {
-  const destination = join26(root, LOCAL_STATUS_FILE);
-  const temporary = join26(
+  const destination = join27(root, LOCAL_STATUS_FILE);
+  const temporary = join27(
     dirname16(destination),
     `.${basename7(destination)}.${process.pid}.${crypto.randomUUID()}.tmp`
   );
   try {
-    await mkdir19(root, { recursive: true, mode: 448 });
+    await mkdir20(root, { recursive: true, mode: 448 });
     const handle = await open12(temporary, "wx", 384);
     try {
       await handle.writeFile(`${JSON.stringify(status)}
@@ -43659,31 +43736,31 @@ async function writeLocalStatus(status, root = defaultLocalObservabilityRoot())
     } finally {
       await handle.close();
     }
-    await rename11(temporary, destination);
+    await rename12(temporary, destination);
   } catch {
-    await rm15(temporary, { force: true }).catch(() => void 0);
+    await rm16(temporary, { force: true }).catch(() => void 0);
   }
 }
 
 // src/demo-state.ts
-import { isAbsolute as isAbsolute19, join as join27, parse as parse3, resolve as resolve17 } from "node:path";
+import { isAbsolute as isAbsolute19, join as join28, parse as parse3, resolve as resolve18 } from "node:path";
 var DEMO_STATE_ROOT_ENV = "ZIXT_DEMO_STATE_ROOT";
 function resolveDemoHostStatePaths(env = process.env) {
   const configured = env.ZIXT_RUNNER === "demo" ? env[DEMO_STATE_ROOT_ENV] : void 0;
   if (!configured) return null;
-  const root = resolve17(configured);
+  const root = resolve18(configured);
   if (!isAbsolute19(configured) || root === parse3(root).root) {
     throw new Error(`${DEMO_STATE_ROOT_ENV} must be a dedicated absolute directory`);
   }
   return {
-    runRegistryRoot: join27(root, "run-registry"),
-    terminalOutcomeRoot: join27(root, "terminal-outcomes"),
-    acceptedAssignmentRoot: join27(root, "accepted-assignments"),
-    runArtifactRoot: join27(root, "run-artifacts"),
-    browserProfileRoot: join27(root, "browser-profiles"),
-    runnerWorkspaceRoot: join27(root, "workspaces"),
-    codexThreadIndexRoot: join27(root, "codex-threads"),
-    localObservabilityRoot: join27(root, "local-observability")
+    runRegistryRoot: join28(root, "run-registry"),
+    terminalOutcomeRoot: join28(root, "terminal-outcomes"),
+    acceptedAssignmentRoot: join28(root, "accepted-assignments"),
+    runArtifactRoot: join28(root, "run-artifacts"),
+    browserProfileRoot: join28(root, "browser-profiles"),
+    runnerWorkspaceRoot: join28(root, "workspaces"),
+    codexThreadIndexRoot: join28(root, "codex-threads"),
+    localObservabilityRoot: join28(root, "local-observability")
   };
 }
 
@@ -43994,7 +44071,10 @@ if (!token) {
   process.exit(DO_NOT_RESTART_EXIT_CODE);
 }
 var demoPreflightScript = forceDemo ? process.env.ZIXT_DEMO_PREFLIGHT_SCRIPT : void 0;
-var runnerAutoInstaller = forceDemo || process.env.ZIXT_RUNNER_AUTOINSTALL === "off" ? null : createRunnerAutoInstaller({
+var runnerAutoinstallSelection = parseRunnerAutoinstallSelection(
+  process.env.ZIXT_RUNNER_AUTOINSTALL
+);
+var runnerAutoInstaller = forceDemo ? null : createRunnerAutoInstaller({
   onEvent: (event) => {
     const name = event.runner === "claude-code" ? "Claude Code" : "Codex";
     if (event.state === "started") {
@@ -44144,7 +44224,8 @@ async function currentBrowserCapability() {
   return measured;
 }
 async function telemetry() {
-  if (!cachedRunners || Date.now() - cachedRunnersAt > 4 * 6e4) {
+  const requestedInstalls = runnerAutoInstaller ? await consumeRunnerInstallRequests(localObservabilityRoot) : /* @__PURE__ */ new Set();
+  if (!cachedRunners || Date.now() - cachedRunnersAt > 4 * 6e4 || requestedInstalls.size > 0) {
     cachedRunners = await Promise.all([
       preflightClaudeCode(
         demoPreflightScript ? { command: process.execPath, commandPrefixArgs: [demoPreflightScript] } : {}
@@ -44156,7 +44237,22 @@ async function telemetry() {
     cachedRunnersAt = Date.now();
     for (const runner of cachedRunners) {
       reportRunnerReadiness(runner);
-      if (!runner.installed && (runner.type === "claude-code" || runner.type === "codex") && runnerAutoInstaller) {
+      if (!runnerAutoInstaller || runner.type !== "claude-code" && runner.type !== "codex") {
+        continue;
+      }
+      const requested = requestedInstalls.has(runner.type);
+      if (runner.installed) {
+        if (requested) {
+          log.info(
+            `${runner.type === "claude-code" ? "Claude Code" : "Codex"} is already installed on this Machine`,
+            { machine }
+          );
+        }
+        continue;
+      }
+      if (requested) {
+        runnerAutoInstaller.ensureInstalled(runner.type, { force: true });
+      } else if (runnerAutoinstallSelection.has(runner.type)) {
         runnerAutoInstaller.ensureInstalled(runner.type);
       }
     }
@@ -44192,7 +44288,7 @@ async function telemetry() {
     // Measured per heartbeat: free memory and free disk are only useful while
     // they are current, and a demo Host reports its own private root so the
     // number describes the filesystem its Tasks would really write to.
-    hardware: await machineHardware(runnerWorkspaceRoot ?? homedir16()),
+    hardware: await machineHardware(runnerWorkspaceRoot ?? homedir17()),
     capabilities: {
       linearToolPack: providerToolPacks.some(
         (pack) => pack.provider === "linear" && pack.health === "ready"
@@ -44272,7 +44368,9 @@ function publishLocalStatus() {
           ...localCloudConnectedAt ? { connectedAt: localCloudConnectedAt } : {}
         },
         activeSessions,
-        runners: cachedRunners ?? [],
+        runners: (cachedRunners ?? []).map(
+          (runner) => (runner.type === "claude-code" || runner.type === "codex") && runnerAutoInstaller?.isInstalling(runner.type) ? { ...runner, installing: true } : runner
+        ),
         browser: cachedBrowserCapability ?? { status: "unavailable" }
       },
       ...localObservabilityRoot ? [localObservabilityRoot] : []