flyspace-cli 0.1.29 → 0.1.31

package/dist/cli.js

@@ -642,6 +642,26 @@ async function requestHostDb(req) {
     send2({ type: "db", id, req });
   });
 }
+var pendingUrls = /* @__PURE__ */ new Map();
+function handleAttachmentUrlResult(id, url) {
+  pendingUrls.get(id)?.(url);
+  pendingUrls.delete(id);
+}
+async function requestAttachmentUrl(key) {
+  const send2 = await whenConnected();
+  const id = randomUUID();
+  return new Promise((resolve7, reject) => {
+    const timer2 = setTimeout(() => {
+      pendingUrls.delete(id);
+      reject(new Error("Data API did not answer in time"));
+    }, REQUEST_TIMEOUT_MS);
+    pendingUrls.set(id, (url) => {
+      clearTimeout(timer2);
+      resolve7(url);
+    });
+    send2({ type: "attachment-url", id, key });
+  });
+}
 var BODYLESS_STATUS = /* @__PURE__ */ new Set([101, 204, 205, 304]);
 function dbFetch(send2) {
   return async (input2, init2) => {
@@ -861,14 +881,17 @@ function isServiceInstalled(profile) {
   return false;
 }
 function serviceBinaryMissing(file) {
+  const bin = serviceBinary(file);
+  return !!bin && !existsSync3(bin);
+}
+function serviceBinary(file) {
   let text;
   try {
     text = readFileSync5(file, "utf-8");
   } catch {
-    return false;
+    return void 0;
   }
-  const bin = text.match(/<key>ProgramArguments<\/key>\s*<array>\s*<string>([^<]+)<\/string>/)?.[1] ?? text.match(/^ExecStart=(\S+)/m)?.[1];
-  return !!bin && !existsSync3(bin);
+  return text.match(/<key>ProgramArguments<\/key>\s*<array>\s*<string>([^<]+)<\/string>/)?.[1] ?? text.match(/^ExecStart=(\S+)/m)?.[1];
 }
 function profileServiceFile(profile) {
   return platform() === "darwin" ? plistPath(profile) : systemdUnitPath(profile);
@@ -1835,7 +1858,7 @@ async function runAuthCmd(args) {
 }
 
 // ../api/src/version.ts
-var CLI_VERSION = true ? "0.1.29" : null;
+var CLI_VERSION = true ? "0.1.31" : null;
 function isOlderVersion(a, b) {
   const parse = (v) => v.replace(/^v/, "").split("-")[0].split(".").map(Number);
   const [pa, pb] = [parse(a), parse(b)];
@@ -2108,11 +2131,11 @@ async function serverReachable() {
     return err.cause ? String(err.cause) : err.message;
   }
 }
-function checkService(name, installed, file, running, fix) {
+function checkService(name, installed, file, running2, fix) {
   if (!installed) bad2(`${name} not installed`, `run: ${fix}`);
   else if (serviceBinaryMissing(file))
     bad2(`${name} points at a CLI that no longer exists`, `run: ${fix}`);
-  else if (!running) bad2(`${name} not running`, `logs: ${tilde3(paths.LOG_DIR)}`);
+  else if (!running2) bad2(`${name} not running`, `logs: ${tilde3(paths.LOG_DIR)}`);
   else ok2(`${name} running`);
 }
 async function runDoctor(args) {
@@ -2381,8 +2404,8 @@ async function runProfiles(args = []) {
 
 // src/commands/upgrade.ts
 import { execSync as execSync6 } from "child_process";
-import { realpathSync as realpathSync3 } from "fs";
-import { join as join11 } from "path";
+import { existsSync as existsSync9, readFileSync as readFileSync10, realpathSync as realpathSync3 } from "fs";
+import { dirname as dirname5, join as join11 } from "path";
 function restartInstalledProfiles() {
   if (isHostServiceInstalled()) {
     console.log(restartHostService() ? "\nHost restarted." : "\nHost restart failed; run: flyspace setup --start-host --restart");
@@ -2402,36 +2425,68 @@ Restarting ${installed.length} instance(s)...`);
     }
   }
 }
-function npmInstallCommand() {
-  let prefix;
+function installTarget(entry) {
+  const home2 = flyspaceHome(entry) ?? (entry.endsWith("/bin/flyspace") ? dirname5(dirname5(entry)) : void 0);
+  if (home2 && existsSync9(join11(home2, "cli", "lib", "node_modules", "flyspace-cli"))) {
+    return { prefix: join11(home2, "cli"), nodeBin: join11(home2, "node", "bin") };
+  }
   try {
-    const entry = realpathSync3(process.argv[1] ?? "");
-    const at = entry.indexOf(`/lib/node_modules/${"flyspace-cli"}/`);
-    if (at > 0) prefix = entry.slice(0, at);
+    const real = realpathSync3(entry);
+    const at = real.indexOf(`/lib/node_modules/${"flyspace-cli"}/`);
+    if (at > 0) return { prefix: real.slice(0, at), nodeBin: join11(real.slice(0, at), "bin") };
   } catch {
   }
-  const global = `-g${prefix ? ` --prefix "${prefix}"` : ""}`;
+  return void 0;
+}
+function installTargets() {
+  const files = [
+    ...isHostServiceInstalled() ? [hostServiceFile()] : [],
+    ...listProfiles().filter(isServiceInstalled).map(profileServiceFile)
+  ];
+  const entries2 = [process.argv[1] ?? "", ...files.map(serviceBinary).filter((b) => !!b)];
+  const byPrefix = /* @__PURE__ */ new Map();
+  for (const target of entries2.map(installTarget)) {
+    if (target && !byPrefix.has(target.prefix)) byPrefix.set(target.prefix, target);
+  }
+  return [...byPrefix.values()];
+}
+function installedVersion(target) {
+  try {
+    const pkg = join11(target.prefix, "lib", "node_modules", "flyspace-cli", "package.json");
+    return JSON.parse(readFileSync10(pkg, "utf-8")).version;
+  } catch {
+    return void 0;
+  }
+}
+function npmInstallCommand(target) {
+  const global = `-g${target ? ` --prefix "${target.prefix}"` : ""}`;
   return `npm install ${global} --ignore-scripts ${"flyspace-cli"}@latest && npm rebuild ${global} better-sqlite3`;
 }
-function npmEnv() {
+function npmEnv(target) {
   const home2 = flyspaceHome();
-  return home2 ? { ...process.env, PATH: `${join11(home2, "node", "bin")}:${process.env.PATH ?? ""}` } : process.env;
+  const nodeBin = target?.nodeBin ?? (home2 ? join11(home2, "node", "bin") : void 0);
+  return nodeBin ? { ...process.env, PATH: `${nodeBin}:${process.env.PATH ?? ""}` } : process.env;
 }
 async function runUpgrade() {
-  const current = "0.1.29";
+  const current = "0.1.31";
   console.log(`Current version: ${current}`);
   console.log("Checking for updates...\n");
   try {
     const latest2 = execSync6(`npm view ${"flyspace-cli"} version`, { encoding: "utf-8", env: npmEnv() }).trim();
-    if (latest2 === current) {
+    const stale = installTargets().filter((t) => installedVersion(t) !== latest2);
+    if (stale.length === 0) {
       console.log(`Already on the latest version (${current}).`);
       return;
     }
     console.log(`New version available: ${latest2}`);
-    console.log("Upgrading...\n");
-    execSync6(npmInstallCommand(), { stdio: "inherit", env: npmEnv() });
+    for (const target of stale) {
+      console.log(`
+Upgrading ${target.prefix} (${installedVersion(target) ?? "unknown"})...
+`);
+      execSync6(npmInstallCommand(target), { stdio: "inherit", env: npmEnv(target) });
+    }
     console.log(`
-Upgraded from ${current} to ${latest2}.`);
+Upgraded to ${latest2}.`);
     restartInstalledProfiles();
     console.log("\nReload your shell to use the new version:");
     console.log("  source ~/.zshrc   # or source ~/.bashrc");
@@ -2447,13 +2502,13 @@ You can upgrade manually with: ${npmInstallCommand()}`);
 import { WebClient } from "@slack/web-api";
 
 // src/automations/config-file.ts
-import { readFileSync as readFileSync10, existsSync as existsSync9 } from "fs";
+import { readFileSync as readFileSync11, existsSync as existsSync10 } from "fs";
 import yaml from "js-yaml";
 var EMPTY_CONFIG = { schedules: [], triggers: [], mention_triggers: [] };
 function loadAutomationsFile() {
   const filePath = paths.AUTOMATIONS_FILE;
-  if (!existsSync9(filePath)) return { ...EMPTY_CONFIG };
-  const raw = readFileSync10(filePath, "utf-8");
+  if (!existsSync10(filePath)) return { ...EMPTY_CONFIG };
+  const raw = readFileSync11(filePath, "utf-8");
   if (!raw.trim()) return { ...EMPTY_CONFIG };
   const parsed = yaml.load(raw);
   return {
@@ -2809,7 +2864,7 @@ async function runAutomationCmd(args) {
 }
 
 // src/commands/usage.ts
-import { existsSync as existsSync10 } from "fs";
+import { existsSync as existsSync11 } from "fs";
 var HELP4 = `
   Usage: flyspace usage [options]
 
@@ -2936,7 +2991,7 @@ async function runUsage(args) {
     return;
   }
   const { days, by, explain, json } = parsed;
-  if (!existsSync10(paths.DB_FILE)) {
+  if (!existsSync11(paths.DB_FILE)) {
     console.log("No usage recorded yet (the database does not exist).");
     return;
   }
@@ -3051,13 +3106,13 @@ async function runRestart() {
 
 // src/commands/logs.ts
 import { spawn as spawn3 } from "child_process";
-import { existsSync as existsSync11 } from "fs";
+import { existsSync as existsSync12 } from "fs";
 import { join as join12 } from "path";
 async function runLogs(args) {
   const showErrors = args.includes("--error") || args.includes("-e");
   const filename = showErrors ? "custie-error.log" : "custie.log";
   const logFile = join12(paths.LOG_DIR, filename);
-  if (!existsSync11(logFile)) {
+  if (!existsSync12(logFile)) {
     console.error(`Log file not found: ${logFile}`);
     console.error("Is the service installed? Run `flyspace install` first.");
     process.exit(1);
@@ -3078,7 +3133,7 @@ async function runLogs(args) {
 
 // src/commands/slack.ts
 import { execFileSync as execFileSync3 } from "child_process";
-import { existsSync as existsSync12, readFileSync as readFileSync11, writeFileSync as writeFileSync7 } from "fs";
+import { existsSync as existsSync13, readFileSync as readFileSync12, writeFileSync as writeFileSync7 } from "fs";
 import { resolve as resolve4 } from "path";
 import { tmpdir as tmpdir2, homedir as homedir6 } from "os";
 import { input, confirm as confirm4, select, checkbox } from "@inquirer/prompts";
@@ -5164,7 +5219,7 @@ async function threadReplies(client2, nameOrId, ts2) {
 async function postMessage(client2, args) {
   const channelArg = getArg2(args, "--channel");
   const textFilePath = getArg2(args, "--text-file");
-  const text = textFilePath ? readFileSync11(textFilePath, "utf8") : getArg2(args, "--text");
+  const text = textFilePath ? readFileSync12(textFilePath, "utf8") : getArg2(args, "--text");
   const threadTs = getArg2(args, "--thread");
   const markdown = args.includes("--markdown");
   const broadcast = args.includes("--broadcast") && Boolean(threadTs);
@@ -5262,7 +5317,7 @@ function defaultClaudeConfigDir() {
   return process.env.CLAUDE_CONFIG_DIR || resolve4(homedir6(), ".claude");
 }
 function hasClaudeCredentials(configDir2) {
-  if (existsSync12(resolve4(configDir2, ".credentials.json"))) {
+  if (existsSync13(resolve4(configDir2, ".credentials.json"))) {
     return true;
   }
   if (process.platform === "darwin") {
@@ -5319,7 +5374,7 @@ async function ensureClaudeCodeReady() {
 }
 function getManifestYaml(botName) {
   const manifestPath = resolve4(paths.PACKAGE_ROOT, "slack-app-manifest.yml");
-  const raw = readFileSync11(manifestPath, "utf-8");
+  const raw = readFileSync12(manifestPath, "utf-8");
   return raw.replace(/name: Custie/g, `name: ${botName}`);
 }
 async function stepPersonalise() {
@@ -5748,10 +5803,10 @@ function printNextSteps() {
   console.log("     Run \x1B[1mflyspace service install\x1B[0m\n");
 }
 function copyDefaultPrompt(botName) {
-  if (!existsSync12(paths.PROMPT_FILE)) {
+  if (!existsSync13(paths.PROMPT_FILE)) {
     const defaultPrompt = resolve4(paths.PACKAGE_ROOT, "system.default.md");
-    if (existsSync12(defaultPrompt)) {
-      const content = readFileSync11(defaultPrompt, "utf-8").replace(/\{\{botName\}\}/g, botName);
+    if (existsSync13(defaultPrompt)) {
+      const content = readFileSync12(defaultPrompt, "utf-8").replace(/\{\{botName\}\}/g, botName);
       writeFileSync7(paths.PROMPT_FILE, content);
       success4(`Default prompt copied to ${paths.PROMPT_FILE}`);
     }
@@ -5764,7 +5819,7 @@ async function runSlackSetup(args) {
     const prereq = await ensureClaudeCodeReady();
     if (!prereq) return;
     const { claudeConfigDir } = prereq;
-    if (existsSync12(paths.CONFIG_FILE)) {
+    if (existsSync13(paths.CONFIG_FILE)) {
       const reconfigure = await confirm4({
         message: `Config already exists at ${paths.CONFIG_FILE}. Reconfigure?`,
         default: false
@@ -6075,10 +6130,10 @@ async function runChatCmd(args) {
 }
 
 // src/commands/memory.ts
-import { readFileSync as readFileSync13 } from "fs";
+import { readFileSync as readFileSync14 } from "fs";
 
 // src/store/claude-memory-import.ts
-import { existsSync as existsSync13, readdirSync as readdirSync3, readFileSync as readFileSync12 } from "fs";
+import { existsSync as existsSync14, readdirSync as readdirSync3, readFileSync as readFileSync13 } from "fs";
 import { homedir as homedir7 } from "os";
 import { basename as basename5, join as join14 } from "path";
 import dotenv from "dotenv";
@@ -6088,7 +6143,7 @@ function claudeMemoryDir(cwd, configDir2) {
 function profileClaudeConfigDirFor(profile) {
   const dir = profile === "default" ? paths.BASE_CONFIG_DIR : join14(paths.PROFILES_DIR, profile);
   const file = join14(dir, "config.env");
-  const env = existsSync13(file) ? dotenv.parse(readFileSync12(file)) : {};
+  const env = existsSync14(file) ? dotenv.parse(readFileSync13(file)) : {};
   return env["CLAUDE_CONFIG_DIR"]?.trim() || join14(homedir7(), ".claude");
 }
 var TYPE_MAP = {
@@ -6134,11 +6189,11 @@ function parseClaudeMemory(fileName, text, channelId) {
   return input2;
 }
 async function importClaudeMemories(dir, channelId, opts = {}) {
-  if (!existsSync13(dir)) throw new Error(`No Claude memory directory at ${dir}`);
+  if (!existsSync14(dir)) throw new Error(`No Claude memory directory at ${dir}`);
   const files = readdirSync3(dir).filter((f) => f.endsWith(".md") && f !== "MEMORY.md").sort();
   const results = [];
   for (const file of files) {
-    const parsed = parseClaudeMemory(file, readFileSync12(join14(dir, file), "utf-8"), channelId);
+    const parsed = parseClaudeMemory(file, readFileSync13(join14(dir, file), "utf-8"), channelId);
     if ("skip" in parsed) {
       results.push({ file, outcome: "skipped", reason: parsed.skip });
       continue;
@@ -6250,7 +6305,7 @@ ${memory.body}`);
         );
       }
       if (!isMemoryType(type)) throw new Error(`--type must be one of ${MEMORY_TYPES.join(", ")}`);
-      const body = bodyArg === "-" ? readFileSync13(0, "utf-8") : bodyArg;
+      const body = bodyArg === "-" ? readFileSync14(0, "utf-8") : bodyArg;
       const thread = getArg4(rest, "--thread");
       const { created, changed } = await saveMemory(
         target,
@@ -6348,13 +6403,13 @@ async function runMcpCmd(args) {
 }
 
 // src/commands/dashboard.ts
-import { spawn as spawn7, spawnSync } from "child_process";
-import { existsSync as existsSync32 } from "fs";
+import { spawn as spawn8, spawnSync } from "child_process";
+import { existsSync as existsSync33 } from "fs";
 import { platform as platform7 } from "os";
-import { join as join28 } from "path";
+import { join as join29 } from "path";
 
 // src/reconcile.ts
-import { existsSync as existsSync14, mkdirSync as mkdirSync8, writeFileSync as writeFileSync8 } from "fs";
+import { existsSync as existsSync15, mkdirSync as mkdirSync8, writeFileSync as writeFileSync8 } from "fs";
 async function boundWorkspaces2() {
   return (await boundWorkspaces())?.workspaces ?? null;
 }
@@ -6365,12 +6420,12 @@ async function servedWorkspaces2() {
 async function reconcileProfile(profile) {
   return runWithProfile(profile, async () => {
     const log5 = [];
-    const hadConfigDir = existsSync14(paths.CONFIG_DIR);
-    const hadDataDir = existsSync14(paths.DATA_DIR);
+    const hadConfigDir = existsSync15(paths.CONFIG_DIR);
+    const hadDataDir = existsSync15(paths.DATA_DIR);
     ensureDirs();
     if (!hadConfigDir) log5.push(`config dir created (${paths.CONFIG_DIR})`);
     if (!hadDataDir) log5.push(`data dir created (${paths.DATA_DIR})`);
-    if (!existsSync14(paths.CONFIG_FILE)) {
+    if (!existsSync15(paths.CONFIG_FILE)) {
       writeFileSync8(paths.CONFIG_FILE, `BOT_NAME=${profile}
 `);
       log5.push(`config.env written (${paths.CONFIG_FILE})`);
@@ -6527,7 +6582,7 @@ var requireDocsAccess = async (c, next) => {
 import { Hono as Hono29 } from "hono";
 
 // ../api/src/dashboard/public-share-routes.ts
-import { existsSync as existsSync16, readFileSync as readFileSync15, statSync as statSync3 } from "fs";
+import { existsSync as existsSync17, readFileSync as readFileSync16, statSync as statSync3 } from "fs";
 import { join as join16 } from "path";
 import { Hono as Hono5 } from "hono";
 import { GetObjectCommand } from "@aws-sdk/client-s3";
@@ -6993,11 +7048,11 @@ function injectShareHead(html, head) {
 
 // ../api/src/dashboard/app-icon.ts
 import { createHash as createHash2 } from "crypto";
-import { existsSync as existsSync15, readFileSync as readFileSync14 } from "fs";
+import { existsSync as existsSync16, readFileSync as readFileSync15 } from "fs";
 import { join as join15 } from "path";
 import sharp2 from "sharp";
 var PLATE = "#0A0A0F";
-var BRAND_DIR = existsSync15(join15(paths.WEB_ROOT, "public")) ? join15(paths.WEB_ROOT, "public") : join15(paths.PACKAGE_ROOT, "dist", "brand");
+var BRAND_DIR = existsSync16(join15(paths.WEB_ROOT, "public")) ? join15(paths.WEB_ROOT, "public") : join15(paths.PACKAGE_ROOT, "dist", "brand");
 var MARK_FILE = join15(BRAND_DIR, "icons", "icon-512.png");
 var MARK_SVG_FILE = join15(BRAND_DIR, "favicon.svg");
 var LAYOUT = {
@@ -7022,7 +7077,7 @@ function roundedPlate(size, fill = PLATE) {
 }
 async function renderBadge(box) {
   const transparent = { r: 0, g: 0, b: 0, alpha: 0 };
-  const raster = await sharp2(readFileSync14(MARK_SVG_FILE)).resize(512, 512, { fit: "contain", background: transparent }).png().toBuffer();
+  const raster = await sharp2(readFileSync15(MARK_SVG_FILE)).resize(512, 512, { fit: "contain", background: transparent }).png().toBuffer();
   return sharp2(raster).trim().resize(box, box, { fit: "contain", background: transparent }).png().toBuffer();
 }
 async function sampleBackground(logo) {
@@ -7077,7 +7132,7 @@ async function renderAppIcon({
   if (hit) return hit;
   const out = logo && await composeIcon(logo, size, maskable, plain).catch(() => null) || // No workspace logo to lead with — the stock mark is still the best icon,
   // either on its usual dark plate or, for a favicon, trimmed and bare.
-  (transparent ? await renderBadge(size) : await sharp2(readFileSync14(MARK_FILE)).resize(size, size, { fit: "cover" }).png().toBuffer());
+  (transparent ? await renderBadge(size) : await sharp2(readFileSync15(MARK_FILE)).resize(size, size, { fit: "cover" }).png().toBuffer());
   cache3.set(key, out);
   return out;
 }
@@ -7398,8 +7453,8 @@ var inFlight = /* @__PURE__ */ new Map();
 async function readOrCreateTranslation(input2) {
   const contentHash = translationHash(input2.title, input2.content);
   const key = `${input2.shareId}:${contentHash}:${input2.lang}`;
-  const running = inFlight.get(key);
-  if (running) return running;
+  const running2 = inFlight.get(key);
+  if (running2) return running2;
   const job = (async () => {
     const cached = await getDocShareTranslation(input2.shareId, input2.lang, contentHash);
     if (cached) return cached;
@@ -8295,7 +8350,7 @@ var shellCache = null;
 function readShell(path) {
   const { mtimeMs } = statSync3(path);
   if (shellCache?.mtimeMs === mtimeMs) return shellCache.html;
-  const html = readFileSync15(path, "utf8").replaceAll('"/assets/', `"${BUILD_PREFIX}/`);
+  const html = readFileSync16(path, "utf8").replaceAll('"/assets/', `"${BUILD_PREFIX}/`);
   shellCache = { mtimeMs, html };
   return html;
 }
@@ -8316,16 +8371,16 @@ function serveBuildFile(c, webDist, dir, name) {
     return c.text("not found", 404);
   }
   const path = join16(webDist, dir, name);
-  if (!existsSync16(path)) return c.text("not found", 404);
+  if (!existsSync17(path)) return c.text("not found", 404);
   c.header("Content-Type", type);
   c.header("Cache-Control", "public, max-age=31536000, immutable");
   if (ext === ".css") {
-    return c.body(readFileSync15(path, "utf8").replaceAll("url(/fonts/", `url(${BUILD_PREFIX}/fonts/`));
+    return c.body(readFileSync16(path, "utf8").replaceAll("url(/fonts/", `url(${BUILD_PREFIX}/fonts/`));
   }
   if (ext === ".js") {
-    return c.body(readFileSync15(path, "utf8").replaceAll('"/assets/', `"${BUILD_PREFIX}/`));
+    return c.body(readFileSync16(path, "utf8").replaceAll('"/assets/', `"${BUILD_PREFIX}/`));
   }
-  return c.body(new Uint8Array(readFileSync15(path)));
+  return c.body(new Uint8Array(readFileSync16(path)));
 }
 var HTML_SHARE_CSP = "sandbox allow-scripts allow-forms allow-modals allow-popups allow-popups-to-escape-sandbox";
 function servePublishedHtml(c, share) {
@@ -8462,7 +8517,7 @@ ${analytics}` : head);
     const lang = canonicalLanguage(requested);
     if (!isTranslatableLanguage(lang)) return next();
     const shell = join16(webDist, "index.html");
-    if (!existsSync16(shell)) return next();
+    if (!existsSync17(shell)) return next();
     const share = await getDocShare(c.req.param("id"));
     if (!share) return next();
     if (requested !== lang) return c.redirect(`/share/${share.id}/${lang}`, 302);
@@ -8498,7 +8553,7 @@ ${analytics}` : head);
     if (!share) return next();
     if (share.kind === "html") return servePublishedHtml(c, share);
     const shell = join16(webDist, "index.html");
-    if (!existsSync16(shell)) return next();
+    if (!existsSync17(shell)) return next();
     return readerPage(
       c,
       share,
@@ -8564,7 +8619,7 @@ function createGuestRouter() {
 }
 
 // ../api/src/dashboard/auth-routes.ts
-import { Hono as Hono8 } from "hono";
+import { Hono as Hono9 } from "hono";
 
 // ../api/src/dashboard/supabase-server-client.ts
 import { createServerClient, parseCookieHeader, serializeCookieHeader } from "@supabase/ssr";
@@ -8675,7 +8730,7 @@ function pruneExpired(now) {
   }
 }
 var SUPPORT_NAME = "Flyspace Support";
-var SUPPORT_AVATAR_URL = "/logo/flyspace-mark.svg";
+var SUPPORT_AVATAR_URL = "/logo/flyspace-support.svg";
 async function resolveAuthContext(c, opts = {}) {
   const cookie = c.req?.header("Cookie") ?? "";
   if (!cookie) return resolveAuthContextUncached(c);
@@ -8805,6 +8860,9 @@ async function verifyTurnstileToken(token) {
   return data.action === void 0 || data.action === "login";
 }
 
+// ../api/src/dashboard/onboarding-routes.ts
+import { Hono as Hono8 } from "hono";
+
 // ../api/src/store/device-store.ts
 import { createHash as createHash7, createPublicKey as createPublicKey2, randomBytes as randomBytes4, randomInt } from "crypto";
 var DEVICE_CODE_TTL_MS = 10 * 6e4;
@@ -9031,27 +9089,84 @@ async function userEmail(userId) {
   return data.user?.email ?? null;
 }
 
-// ../api/src/dashboard/onboarding-routes.ts
-import { Hono as Hono7 } from "hono";
-
 // ../api/src/dashboard/agent-bridge-data.ts
-import { randomBytes as randomBytes5, randomUUID as randomUUID2, verify as verifyRaw } from "crypto";
+import { randomBytes as randomBytes5, randomUUID as randomUUID3, verify as verifyRaw } from "crypto";
 import { WebSocket, WebSocketServer } from "ws";
 
 // ../api/src/dashboard/host-identity.ts
 import { createPrivateKey as createPrivateKey2, createPublicKey as createPublicKey3, generateKeyPairSync as generateKeyPairSync2 } from "crypto";
-import { existsSync as existsSync17, mkdirSync as mkdirSync9, readFileSync as readFileSync16, writeFileSync as writeFileSync9 } from "fs";
-import { dirname as dirname5, join as join17 } from "path";
+import { existsSync as existsSync18, mkdirSync as mkdirSync9, readFileSync as readFileSync17, writeFileSync as writeFileSync9 } from "fs";
+import { dirname as dirname6, join as join17 } from "path";
 function hostPrivateKeyPath() {
   return process.env["FLYSPACE_HOST_KEY_PATH"] || join17(paths.BASE_CONFIG_DIR, "host.key");
 }
 function loadHostPrivateKey(path = hostPrivateKeyPath()) {
-  if (!existsSync17(path)) {
+  if (!existsSync18(path)) {
     throw new Error(
       `No Host identity at ${path}. Run \`pnpm run generate-host-key\` on this machine, then set FLYSPACE_HOST_PUBLIC_KEY on the Data process to the printed public key.`
     );
   }
-  return createPrivateKey2(readFileSync16(path, "utf8"));
+  return createPrivateKey2(readFileSync17(path, "utf8"));
+}
+
+// ../api/src/dashboard/uploads-routes.ts
+import { randomUUID as randomUUID2 } from "crypto";
+import { Hono as Hono7 } from "hono";
+import { PutObjectCommand as PutObjectCommand2, GetObjectCommand as GetObjectCommand3 } from "@aws-sdk/client-s3";
+import { getSignedUrl as getSignedUrl3 } from "@aws-sdk/s3-request-presigner";
+var MAX_FILE_BYTES = 10 * 1024 * 1024;
+var PRESIGN_TTL_SECONDS2 = 300;
+var KEY_PREFIX = "chat";
+var READABLE_PREFIXES = [KEY_PREFIX, SCRATCH_PREFIX];
+function sanitizeFilename(name) {
+  const cleaned = name.replace(/[/\\]/g, "_").replace(/\s+/g, "-").replace(/[^\w.-]/g, "").trim();
+  return (cleaned || "file").slice(-100);
+}
+function encodeKeyForUrl(key) {
+  return key.split("/").map(encodeURIComponent).join("/");
+}
+async function presignAttachmentRead(key) {
+  if (!READABLE_PREFIXES.some((prefix) => key.startsWith(`${prefix}/`))) return null;
+  return getSignedUrl3(getR2Client(), new GetObjectCommand3({ Bucket: getR2Bucket(), Key: key }), {
+    expiresIn: PRESIGN_TTL_SECONDS2
+  });
+}
+function createUploadsRouter() {
+  const app = new Hono7();
+  app.post("/uploads", async (c) => {
+    const body = await c.req.parseBody().catch(() => null);
+    const file = body?.["file"];
+    if (!(file instanceof File)) return c.json({ error: "missing file" }, 400);
+    if (file.size > MAX_FILE_BYTES) {
+      return c.json({ error: `file must be ${MAX_FILE_BYTES / (1024 * 1024)}MB or smaller` }, 400);
+    }
+    const key = `${KEY_PREFIX}/${getProfile()}/${randomUUID2()}-${sanitizeFilename(file.name)}`;
+    const buffer = Buffer.from(await file.arrayBuffer());
+    await getR2Client().send(
+      new PutObjectCommand2({
+        Bucket: getR2Bucket(),
+        Key: key,
+        Body: buffer,
+        ContentType: file.type || "application/octet-stream"
+      })
+    );
+    return c.json(
+      {
+        url: `/api/attachments/${encodeKeyForUrl(key)}`,
+        name: file.name,
+        type: file.type,
+        size: file.size
+      },
+      201
+    );
+  });
+  app.get("/attachments/:key{.+}", async (c) => {
+    const url = await presignAttachmentRead(c.req.param("key"));
+    if (!url) return c.json({ error: "not found" }, 404);
+    c.header("Cache-Control", `private, max-age=${PRESIGN_TTL_SECONDS2 - 60}`);
+    return c.redirect(url, 302);
+  });
+  return app;
 }
 
 // ../core/src/bridge-protocol.ts
@@ -9207,11 +9322,16 @@ var CHANNEL_NAME_RE = /^[a-z0-9][a-z0-9-]*$/;
 function isWorkspaceOwner(ctx) {
   return ctx?.role === "admin" && !ctx.isSupport;
 }
+async function isHostOwner(ctx) {
+  if (ctx.role !== "admin") return false;
+  if (ctx.isSupport) return true;
+  return (await listWorkspaceDevices(ctx.workspaceId)).some((d) => d.userId === ctx.userId);
+}
 function hostUnavailable(c, agent, method) {
   return c.json({ error: "host offline", reason: agent.getHostCallFailure?.(method) ?? "offline" }, 503);
 }
 function createOnboardingRouter(agent) {
-  const app = new Hono7();
+  const app = new Hono8();
   app.get("/scan", async (c) => {
     const ctx = await resolveAuthContext(c);
     if (ctx?.role !== "admin") return c.json({ error: "admin access required" }, 403);
@@ -9349,7 +9469,7 @@ async function ensureGreetingThread(workspaceId, channelId, ownerName) {
 
 // ../api/src/dashboard/auth-routes.ts
 function createAuthRouter() {
-  const auth = new Hono8();
+  const auth = new Hono9();
   const emailedLink = (deliver) => async (c) => {
     const body = await c.req.json().catch(() => ({}));
     const email = body.email?.trim().toLowerCase();
@@ -9389,7 +9509,7 @@ function createAuthRouter() {
       owner: isWorkspaceOwner(ctx),
       // Only the Host's owner can run `flyspace upgrade` on it, so other
       // admins never see the upgrade banner. Support staff can tell them to.
-      hostOwner: ctx.role === "admin" && (ctx.isSupport === true || (await listWorkspaceDevices(ctx.workspaceId)).some((d) => d.userId === ctx.userId))
+      hostOwner: await isHostOwner(ctx)
     });
   });
   auth.patch("/handle", async (c) => {
@@ -9429,7 +9549,7 @@ var requireWorkspaceMembership = async (c, next) => {
 };
 
 // ../api/src/dashboard/billing-routes.ts
-import { Hono as Hono9 } from "hono";
+import { Hono as Hono10 } from "hono";
 function isPlan(value) {
   return value === "local" || value === "cloud";
 }
@@ -9445,7 +9565,7 @@ async function requireActivePlan(c, next) {
   return next();
 }
 function createBillingRouter() {
-  const billing = new Hono9();
+  const billing = new Hono10();
   billing.get("/", async (c) => {
     const auth = c.get("auth");
     const { planStatus, stripeSubscriptionId } = await getWorkspaceBilling(auth.workspaceId);
@@ -9501,7 +9621,7 @@ function createBillingRouter() {
 }
 
 // ../api/src/dashboard/admin-routes.ts
-import { Hono as Hono10 } from "hono";
+import { Hono as Hono11 } from "hono";
 
 // ../api/src/dashboard/admin-middleware.ts
 function platformAdminEmails() {
@@ -9527,7 +9647,7 @@ var requirePlatformOperator = async (c, next) => {
 // ../api/src/dashboard/admin-routes.ts
 var EMAIL_RE = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
 function createAdminRouter() {
-  const admin = new Hono10();
+  const admin = new Hono11();
   admin.use("*", requirePlatformOperator);
   admin.get("/workspaces", async (c) => {
     const summaries = await listWorkspaceSummaries();
@@ -9640,11 +9760,11 @@ var BOT_LABEL = "Workspace Agent";
 var BOT_DM_KEY = "claude";
 
 // ../api/src/dashboard/data-api.ts
-import { existsSync as existsSync19 } from "fs";
+import { existsSync as existsSync20 } from "fs";
 import sharp5 from "sharp";
 
 // ../api/src/dashboard/automations-routes.ts
-import { Hono as Hono11 } from "hono";
+import { Hono as Hono12 } from "hono";
 var TYPES2 = ["schedule", "trigger", "mention-trigger"];
 function isType(t) {
   return TYPES2.includes(t);
@@ -9661,7 +9781,7 @@ function statusFor(message) {
   return 400;
 }
 function createAutomationWriteRouter() {
-  const app = new Hono11();
+  const app = new Hono12();
   const manager = () => new AutomationManager();
   app.get("/:type/:name", (c) => {
     const item = manager().get(c.req.param("name"));
@@ -9717,9 +9837,9 @@ function createAutomationWriteRouter() {
 }
 
 // ../api/src/dashboard/categories-routes.ts
-import { Hono as Hono12 } from "hono";
+import { Hono as Hono13 } from "hono";
 function createCategoryWriteRouter() {
-  const app = new Hono12();
+  const app = new Hono13();
   app.get("/", async (c) => {
     const { data, error: error2 } = await getSupabaseClient().from("categories").select("*").eq("profile", getProfile()).order("position", { ascending: true });
     if (error2) return c.json({ error: error2.message }, 500);
@@ -9773,7 +9893,7 @@ function createCategoryWriteRouter() {
 }
 
 // ../api/src/dashboard/chat-routes.ts
-import { Hono as Hono13 } from "hono";
+import { Hono as Hono14 } from "hono";
 
 // ../api/src/dashboard/fork-summary.ts
 var GROQ_API_URL4 = "https://api.groq.com/openai/v1/chat/completions";
@@ -10057,8 +10177,8 @@ async function translateThread(threadId, lang, messages) {
   if (messages.length === 0) return [];
   const shape = createHash8("sha256").update(messages.map((m) => translationHash2(m.author, m.body)).join("\n")).digest("hex");
   const key = `${threadId}:${lang}:${shape}`;
-  const running = inFlight4.get(key);
-  if (running) return running;
+  const running2 = inFlight4.get(key);
+  if (running2) return running2;
   const job = (async () => {
     const hashes = messages.map((m) => ({
       replyId: m.id,
@@ -10260,7 +10380,7 @@ async function generateAutoTitle(threadId, channelId, body) {
   await supabase.from("threads").update({ auto_title: autoTitle }).eq("id", threadId).is("title", null);
 }
 function createChatRouter(agent = {}) {
-  const app = new Hono13();
+  const app = new Hono14();
   const {
     onChatMessage: onMessage,
     isAgentThinking,
@@ -10774,7 +10894,7 @@ function createChatRouter(agent = {}) {
 }
 
 // ../api/src/dashboard/doc-shares-routes.ts
-import { Hono as Hono14 } from "hono";
+import { Hono as Hono15 } from "hono";
 
 // ../api/src/dashboard/doc-share-features.ts
 import { DeleteObjectCommand as DeleteObjectCommand2 } from "@aws-sdk/client-s3";
@@ -10834,7 +10954,7 @@ async function updateShareFeatures(share, requested) {
 
 // ../api/src/dashboard/doc-share-publish.ts
 import { randomBytes as randomBytes6 } from "crypto";
-import { CopyObjectCommand, PutObjectCommand as PutObjectCommand2 } from "@aws-sdk/client-s3";
+import { CopyObjectCommand, PutObjectCommand as PutObjectCommand3 } from "@aws-sdk/client-s3";
 
 // ../api/src/dashboard/bridge-types.ts
 var SHARE_ASSET_PLACEHOLDER = "/share/{{flyspace-share-id}}/assets/";
@@ -10930,7 +11050,7 @@ async function publishDocShare(input2, readBundle) {
       );
     } else {
       await client2.send(
-        new PutObjectCommand2({
+        new PutObjectCommand3({
           Bucket: bucket,
           Key: key,
           Body: Buffer.from(asset.data, "base64"),
@@ -11109,7 +11229,7 @@ function resolveChannel2(c) {
 }
 var LIST_LIMIT = 500;
 function createDocShareListRouter() {
-  const app = new Hono14();
+  const app = new Hono15();
   app.get("/shares", async (c) => {
     const viewer = c.get("auth");
     const readable = await filterReadableDocsChannels(
@@ -11153,7 +11273,7 @@ function createDocShareListRouter() {
   return app;
 }
 function createDocShareWriteRouter(agent = {}) {
-  const app = new Hono14();
+  const app = new Hono15();
   app.use("/:id/docs/share", requireDocsAccess);
   app.use("/:id/docs/share/*", requireDocsAccess);
   app.use("/:id/docs/shares", requireDocsAccess);
@@ -11326,7 +11446,7 @@ function createDocShareWriteRouter(agent = {}) {
 }
 
 // ../api/src/dashboard/search-routes.ts
-import { Hono as Hono15 } from "hono";
+import { Hono as Hono16 } from "hono";
 function matchScore(q, fields) {
   const terms = q.toLowerCase().split(/\s+/).filter(Boolean);
   if (terms.length === 0) return 0;
@@ -11474,7 +11594,7 @@ function searchAutomations(q) {
 }
 var RESULT_LIMIT = 30;
 function createSearchRouter() {
-  const app = new Hono15();
+  const app = new Hono16();
   app.get("/", async (c) => {
     const q = c.req.query("q")?.trim();
     if (!q) return c.json({ results: [] });
@@ -11490,14 +11610,14 @@ function createSearchRouter() {
 }
 
 // ../api/src/dashboard/feature-flags-routes.ts
-import { Hono as Hono16 } from "hono";
+import { Hono as Hono17 } from "hono";
 async function isFeatureEnabled(c, flagId) {
   const auth = c.get("auth");
   const enabled = await listEnabledFeatureFlags(auth.workspaceId);
   return resolveFeatureFlags(enabled, isDevHost(c))[flagId];
 }
 function createFeatureFlagsRouter() {
-  const app = new Hono16();
+  const app = new Hono17();
   app.get("/", async (c) => {
     const auth = c.get("auth");
     const devHost = isDevHost(c);
@@ -11522,67 +11642,6 @@ function createFeatureFlagsRouter() {
   return app;
 }
 
-// ../api/src/dashboard/uploads-routes.ts
-import { randomUUID as randomUUID3 } from "crypto";
-import { Hono as Hono17 } from "hono";
-import { PutObjectCommand as PutObjectCommand3, GetObjectCommand as GetObjectCommand3 } from "@aws-sdk/client-s3";
-import { getSignedUrl as getSignedUrl3 } from "@aws-sdk/s3-request-presigner";
-var MAX_FILE_BYTES = 10 * 1024 * 1024;
-var PRESIGN_TTL_SECONDS2 = 300;
-var KEY_PREFIX = "chat";
-var READABLE_PREFIXES = [KEY_PREFIX, SCRATCH_PREFIX];
-function sanitizeFilename(name) {
-  const cleaned = name.replace(/[/\\]/g, "_").replace(/\s+/g, "-").replace(/[^\w.-]/g, "").trim();
-  return (cleaned || "file").slice(-100);
-}
-function encodeKeyForUrl(key) {
-  return key.split("/").map(encodeURIComponent).join("/");
-}
-function createUploadsRouter() {
-  const app = new Hono17();
-  app.post("/uploads", async (c) => {
-    const body = await c.req.parseBody().catch(() => null);
-    const file = body?.["file"];
-    if (!(file instanceof File)) return c.json({ error: "missing file" }, 400);
-    if (file.size > MAX_FILE_BYTES) {
-      return c.json({ error: `file must be ${MAX_FILE_BYTES / (1024 * 1024)}MB or smaller` }, 400);
-    }
-    const key = `${KEY_PREFIX}/${getProfile()}/${randomUUID3()}-${sanitizeFilename(file.name)}`;
-    const buffer = Buffer.from(await file.arrayBuffer());
-    await getR2Client().send(
-      new PutObjectCommand3({
-        Bucket: getR2Bucket(),
-        Key: key,
-        Body: buffer,
-        ContentType: file.type || "application/octet-stream"
-      })
-    );
-    return c.json(
-      {
-        url: `/api/attachments/${encodeKeyForUrl(key)}`,
-        name: file.name,
-        type: file.type,
-        size: file.size
-      },
-      201
-    );
-  });
-  app.get("/attachments/:key{.+}", async (c) => {
-    const key = c.req.param("key");
-    if (!READABLE_PREFIXES.some((prefix) => key.startsWith(`${prefix}/`))) {
-      return c.json({ error: "not found" }, 404);
-    }
-    const url = await getSignedUrl3(
-      getR2Client(),
-      new GetObjectCommand3({ Bucket: getR2Bucket(), Key: key }),
-      { expiresIn: PRESIGN_TTL_SECONDS2 }
-    );
-    c.header("Cache-Control", `private, max-age=${PRESIGN_TTL_SECONDS2 - 60}`);
-    return c.redirect(url, 302);
-  });
-  return app;
-}
-
 // ../api/src/dashboard/transcribe-routes.ts
 import { Hono as Hono18 } from "hono";
 var GROQ_TRANSCRIBE_URL = "https://api.groq.com/openai/v1/audio/transcriptions";
@@ -13240,7 +13299,7 @@ async function sessionUsageForThreads(workspace, threadTsList) {
 }
 
 // ../api/src/dashboard/usage-report.ts
-import { existsSync as existsSync18 } from "fs";
+import { existsSync as existsSync19 } from "fs";
 function mergeByLabel(buckets) {
   const merged = /* @__PURE__ */ new Map();
   for (const bucket of buckets) {
@@ -13286,7 +13345,7 @@ function toReport(days, rows, labelChannel) {
   };
 }
 function fromLocalStore(days, labelChannel) {
-  const store = existsSync18(paths.DB_FILE) ? getLocalCache().openUsageStore(paths.DB_FILE) : null;
+  const store = existsSync19(paths.DB_FILE) ? getLocalCache().openUsageStore(paths.DB_FILE) : null;
   if (!store) return { ...EMPTY, days };
   const window = days === 0 ? void 0 : days;
   try {
@@ -13328,7 +13387,7 @@ async function buildChannelUsageReport(channelId, days, labelChannel) {
     const { totals, byDay } = await channelUsageForWorkspace(workspace, aliasIds, window);
     return { days, totals: totals.runs > 0 ? totals : null, byDay };
   } catch {
-    const store = existsSync18(paths.DB_FILE) ? getLocalCache().openUsageStore(paths.DB_FILE) : null;
+    const store = existsSync19(paths.DB_FILE) ? getLocalCache().openUsageStore(paths.DB_FILE) : null;
     if (!store) return { days, totals: null, byDay: [] };
     try {
       const targetLabel = labelChannel(channelId);
@@ -13350,7 +13409,7 @@ async function buildThreadUsage(threadTs) {
     if (totals.runs === 0) return { threadTs, totals: null, byModel: [] };
     return { threadTs, totals, byModel };
   } catch {
-    const store = existsSync18(paths.DB_FILE) ? getLocalCache().openUsageStore(paths.DB_FILE) : null;
+    const store = existsSync19(paths.DB_FILE) ? getLocalCache().openUsageStore(paths.DB_FILE) : null;
     if (!store) return { threadTs, totals: null, byModel: [] };
     try {
       const totals = store.threadTotals(threadTs);
@@ -13701,6 +13760,7 @@ async function resolveThreadLinks(sessions2) {
 }
 
 // ../api/src/dashboard/data-api.ts
+var SELF_UPGRADE_MIN_VERSION = "0.1.30";
 function registerDataRoutes(api, agent = {}) {
   api.get("/profile", (c) => c.json({ profile: getProfile() }));
   api.get("/host/status", async (c) => {
@@ -13714,7 +13774,20 @@ function registerDataRoutes(api, agent = {}) {
     const cliVersion = agent.getHostCliVersion?.(getProfile()) ?? null;
     const latest2 = cliVersion ? await latestCliVersion() : null;
     const outdated = !!(cliVersion && latest2 && isOlderVersion(cliVersion, latest2));
-    return c.json({ online: !paused, cliVersion, ...outdated ? { latestCliVersion: latest2 } : {} });
+    const selfUpgrade = !!cliVersion && !isOlderVersion(cliVersion, SELF_UPGRADE_MIN_VERSION);
+    return c.json({
+      online: !paused,
+      cliVersion,
+      selfUpgrade,
+      ...outdated ? { latestCliVersion: latest2 } : {}
+    });
+  });
+  api.post("/host/upgrade", async (c) => {
+    const auth = c.get("auth");
+    if (!await isHostOwner(auth)) return c.json({ error: "only the Host owner can upgrade it" }, 403);
+    const res = await agent.upgradeHost?.();
+    if (!res) return c.json({ error: "Host is offline" }, 503);
+    return c.json(res, 202);
   });
   api.get("/channels", async (c) => {
     const auth = c.get("auth");
@@ -13774,7 +13847,7 @@ function registerDataRoutes(api, agent = {}) {
         runs.set(name, { lastRun: run4.lastRunAt.toISOString(), lastStatus: run4.lastStatus });
       }
     } catch {
-      const runStore = existsSync19(paths.DB_FILE) ? getLocalCache().openAutomationRunStore(paths.DB_FILE) : null;
+      const runStore = existsSync20(paths.DB_FILE) ? getLocalCache().openAutomationRunStore(paths.DB_FILE) : null;
       if (runStore) {
         try {
           for (const run4 of runStore.listLastRuns()) {
@@ -13836,7 +13909,7 @@ function registerDataRoutes(api, agent = {}) {
       const runs = (await recentRunsForWorkspace(getProfile(), 200)).map(toResponse5);
       return c.json({ runs });
     } catch {
-      const runStore = existsSync19(paths.DB_FILE) ? getLocalCache().openAutomationRunStore(paths.DB_FILE) : null;
+      const runStore = existsSync20(paths.DB_FILE) ? getLocalCache().openAutomationRunStore(paths.DB_FILE) : null;
       if (!runStore) return c.json({ runs: [] });
       try {
         const runs = runStore.listRuns(200).map(toResponse5);
@@ -13902,9 +13975,9 @@ function registerDataRoutes(api, agent = {}) {
     void broadcastHostStatusChange();
     let cancelled = 0;
     if (body.paused) {
-      const running = await agent.listAgentRuns?.() ?? [];
-      if (running.length > 0) {
-        const { data } = await getSupabaseClient().from("threads").select("id, channel_id").in("id", running);
+      const running2 = await agent.listAgentRuns?.() ?? [];
+      if (running2.length > 0) {
+        const { data } = await getSupabaseClient().from("threads").select("id, channel_id").in("id", running2);
         const profile = getProfile();
         for (const t of data ?? []) {
           if (findOwningProfile(t.channel_id) !== profile) continue;
@@ -13922,7 +13995,7 @@ function registerDataRoutes(api, agent = {}) {
     const host = trustedHost(c);
     const known = await listKnownWorkspaces();
     const hostProfile = profileFromHost(host, known);
-    const running = new Set(await agent.listRunningProfiles?.() ?? []);
+    const running2 = new Set(await agent.listRunningProfiles?.() ?? []);
     const auth = c.get("auth");
     const [{ data: memberships }, workspaces] = await Promise.all([
       getSupabaseClient().from("memberships").select("workspace_id").eq("user_id", auth.userId),
@@ -13939,7 +14012,7 @@ function registerDataRoutes(api, agent = {}) {
         return {
           name,
           active: name === active,
-          running: running.has(name),
+          running: running2.has(name),
           displayName: branding.displayName,
           logo: branding.logo,
           hostname: (hostProfile ? workspaceHostname(host, name) : null) ?? void 0
@@ -13958,7 +14031,7 @@ function registerDataRoutes(api, agent = {}) {
     } catch {
       latest2 = /* @__PURE__ */ new Map();
       totals = /* @__PURE__ */ new Map();
-      const usageStore = existsSync19(paths.DB_FILE) ? getLocalCache().openUsageStore(paths.DB_FILE) : null;
+      const usageStore = existsSync20(paths.DB_FILE) ? getLocalCache().openUsageStore(paths.DB_FILE) : null;
       if (usageStore) {
         try {
           latest2 = usageStore.latestByThread(threadTsList);
@@ -14224,11 +14297,11 @@ function createDeviceAuthRouter() {
 }
 
 // ../api/src/dashboard/skills-routes.ts
-import { dirname as dirname6 } from "path";
+import { dirname as dirname7 } from "path";
 
 // ../api/src/dashboard/skill-mirror.ts
 import { createHash as createHash11 } from "crypto";
-import { existsSync as existsSync20, statSync as statSync4 } from "fs";
+import { existsSync as existsSync21, statSync as statSync4 } from "fs";
 var SYNC_INTERVAL_MS = 6e4;
 var UPSERT_BATCH = 50;
 function mirrorScopeOf(ref) {
@@ -14236,7 +14309,7 @@ function mirrorScopeOf(ref) {
 }
 function isDir(path) {
   try {
-    return existsSync20(path) && statSync4(path).isDirectory();
+    return existsSync21(path) && statSync4(path).isDirectory();
   } catch {
     return false;
   }
@@ -14313,16 +14386,16 @@ function installSkillSync(profiles, options = {}) {
   if (!databaseReachable()) return () => {
   };
   const { intervalMs = SYNC_INTERVAL_MS, onError = (e) => console.error("[skill-sync]", e) } = options;
-  let running = false;
+  let running2 = false;
   const tick = async () => {
-    if (running) return;
-    running = true;
+    if (running2) return;
+    running2 = true;
     try {
       for (const profile of profiles) {
         await runWithProfile(profile, () => pushSkillScopes()).catch(onError);
       }
     } finally {
-      running = false;
+      running2 = false;
     }
   };
   void tick();
@@ -14561,12 +14634,12 @@ function createGatedRouter(agent, register) {
 }
 
 // src/dashboard/host-api.ts
-import { existsSync as existsSync29, readFileSync as readFileSync23, statSync as statSync8 } from "fs";
+import { existsSync as existsSync30, readFileSync as readFileSync24, statSync as statSync8 } from "fs";
 import { join as join26 } from "path";
 import sharp6 from "sharp";
 
 // src/dashboard/channels-routes.ts
-import { existsSync as existsSync21, mkdirSync as mkdirSync10 } from "fs";
+import { existsSync as existsSync22, mkdirSync as mkdirSync10 } from "fs";
 import { Hono as Hono30 } from "hono";
 function coerceAccess(raw) {
   if (raw === "open" || raw === "*" || raw === "all") return raw;
@@ -14605,7 +14678,7 @@ function coerceMemberEmails(raw) {
 function ensureCwdDir(cwd) {
   const expanded = expandPath(cwd);
   if (isLogicalCwd(cwd) || isUnderLogicalRoot(expanded)) return;
-  if (!existsSync21(expanded)) mkdirSync10(expanded, { recursive: true });
+  if (!existsSync22(expanded)) mkdirSync10(expanded, { recursive: true });
 }
 function toResponse3(channel) {
   return {
@@ -14755,13 +14828,13 @@ function createChannelWriteRouter() {
 import {
   closeSync as closeSync2,
   createReadStream,
-  existsSync as existsSync25,
+  existsSync as existsSync26,
   lstatSync as lstatSync2,
   mkdirSync as mkdirSync11,
   openSync as openSync2,
   readSync as readSync2,
   readdirSync as readdirSync5,
-  readFileSync as readFileSync20,
+  readFileSync as readFileSync21,
   realpathSync as realpathSync4,
   renameSync,
   rmSync as rmSync8,
@@ -14769,12 +14842,12 @@ import {
   writeFileSync as writeFileSync11
 } from "fs";
 import { Readable } from "stream";
-import { basename as basename8, dirname as dirname7, extname, join as join23, relative, resolve as resolve5, sep } from "path";
+import { basename as basename8, dirname as dirname8, extname, join as join23, relative, resolve as resolve5, sep } from "path";
 import { Hono as Hono31 } from "hono";
 import { streamSSE as streamSSE2 } from "hono/streaming";
 
 // src/dashboard/docs-watcher.ts
-import { existsSync as existsSync22, watch } from "fs";
+import { existsSync as existsSync23, watch } from "fs";
 import { basename as basename6, join as join18 } from "path";
 var DEBOUNCE_MS = 200;
 var MAX_PENDING = 200;
@@ -14816,7 +14889,7 @@ function watchDocs(cwd, listener) {
       const current = entries.get(cwd);
       if (!current || filename === null) return;
       const rel = filename.split("\\").join("/");
-      if (rel === root && !existsSync22(join18(cwd, rel))) return;
+      if (rel === root && !existsSync23(join18(cwd, rel))) return;
       if (isIgnoredDocPath(rel)) return;
       if (current.pending.size < MAX_PENDING) current.pending.add(rel);
       if (current.timer === null) current.timer = setTimeout(() => flush(cwd), DEBOUNCE_MS);
@@ -14874,8 +14947,8 @@ var inFlight5 = /* @__PURE__ */ new Map();
 async function readOrCreateDocTranslation(input2) {
   const contentHash = translationHash(input2.title, input2.content);
   const key = `${input2.channelId}:${input2.sourcePath}:${contentHash}:${input2.lang}`;
-  const running = inFlight5.get(key);
-  if (running) return running;
+  const running2 = inFlight5.get(key);
+  if (running2) return running2;
   const job = (async () => {
     const cached = await getDocTranslation(input2.channelId, input2.sourcePath, input2.lang, contentHash);
     if (cached) return cached;
@@ -15053,7 +15126,7 @@ async function readOrQueueDocAudio(input2) {
 }
 
 // src/dashboard/artifact-export.ts
-import { readFileSync as readFileSync19 } from "fs";
+import { readFileSync as readFileSync20 } from "fs";
 
 // src/dashboard/chat-agent.ts
 import { homedir as homedir9 } from "os";
@@ -15271,7 +15344,7 @@ async function withMcpConfig(profile, connectionIds, fn) {
 }
 
 // src/claude/agents.ts
-import { existsSync as existsSync23, readdirSync as readdirSync4, readFileSync as readFileSync17 } from "fs";
+import { existsSync as existsSync24, readdirSync as readdirSync4, readFileSync as readFileSync18 } from "fs";
 import { homedir as homedir8 } from "os";
 import { basename as basename7, join as join20 } from "path";
 import yaml2 from "js-yaml";
@@ -15286,7 +15359,7 @@ function expandHome(p) {
 function parseFrontmatter(file) {
   let content;
   try {
-    content = readFileSync17(file, "utf-8");
+    content = readFileSync18(file, "utf-8");
   } catch {
     return {};
   }
@@ -15302,7 +15375,7 @@ function parseFrontmatter(file) {
   }
 }
 function collectFrom(root, source) {
-  if (!existsSync23(root)) return [];
+  if (!existsSync24(root)) return [];
   let entries2;
   try {
     entries2 = readdirSync4(root).filter((f) => f.endsWith(".md"));
@@ -15332,7 +15405,7 @@ function readAgentPersona(configDir2, cwd, name) {
   const agent = listAgents(configDir2, cwd).find((a) => a.name === name);
   if (!agent) return void 0;
   try {
-    const content = readFileSync17(agent.path, "utf-8");
+    const content = readFileSync18(agent.path, "utf-8");
     return content.replace(/^---\r?\n[\s\S]*?\r?\n---\r?\n?/, "").trim();
   } catch {
     return void 0;
@@ -15341,7 +15414,7 @@ function readAgentPersona(configDir2, cwd, name) {
 
 // src/dashboard/memory-extraction-runner.ts
 import { spawn as spawn4 } from "child_process";
-import { mkdtempSync as mkdtempSync2, readFileSync as readFileSync18, rmSync as rmSync7 } from "fs";
+import { mkdtempSync as mkdtempSync2, readFileSync as readFileSync19, rmSync as rmSync7 } from "fs";
 import { tmpdir as tmpdir4 } from "os";
 import { join as join21 } from "path";
 var CLAUDE_MODEL = "sonnet";
@@ -15433,7 +15506,7 @@ function run3(inv, cwd) {
       let raw = stdout;
       if (inv.outputFile) {
         try {
-          raw = readFileSync18(inv.outputFile, "utf-8");
+          raw = readFileSync19(inv.outputFile, "utf-8");
         } catch {
           raw = "";
         }
@@ -15750,23 +15823,43 @@ function extractAttachmentKeys(body) {
   }
   return keys;
 }
+async function fetchObject(key) {
+  if (process.env["CLOUDFLARE_R2_ACCESS_KEY_ID"]) {
+    const response2 = await getR2Client().send(
+      new GetObjectCommand5({ Bucket: getR2Bucket(), Key: key })
+    );
+    return {
+      mimetype: response2.ContentType ?? "application/octet-stream",
+      contentLength: response2.ContentLength,
+      read: async () => response2.Body?.transformToByteArray()
+    };
+  }
+  const url = await requestAttachmentUrl(key);
+  if (!url) throw new Error("Data API refused the attachment");
+  const response = await fetch(url);
+  if (!response.ok) throw new Error(`presigned GET answered ${response.status}`);
+  const length = response.headers.get("content-length");
+  return {
+    mimetype: response.headers.get("content-type") ?? "application/octet-stream",
+    contentLength: length === null ? void 0 : Number(length),
+    read: async () => new Uint8Array(await response.arrayBuffer())
+  };
+}
 async function downloadOne(key) {
   const lastSegment = key.slice(key.lastIndexOf("/") + 1);
   const name = displayName(lastSegment);
   try {
-    const response = await getR2Client().send(
-      new GetObjectCommand5({ Bucket: getR2Bucket(), Key: key })
-    );
-    const mimetype = response.ContentType ?? "application/octet-stream";
+    const response = await fetchObject(key);
+    const mimetype = response.mimetype;
     const sizeLimit = mimetypeSizeLimit(mimetype);
     if (sizeLimit === null) {
       if (debug) console.log(`[attachment-downloader] unsupported mimetype: ${mimetype} (${key})`);
       return { kind: "skip", skipped: { name, mimetype, reason: "unsupported" } };
     }
-    if (response.ContentLength !== void 0 && response.ContentLength > sizeLimit) {
+    if (response.contentLength !== void 0 && response.contentLength > sizeLimit) {
       return { kind: "skip", skipped: { name, mimetype, reason: "too_large" } };
     }
-    const bytes = await response.Body?.transformToByteArray();
+    const bytes = await response.read();
     if (!bytes) {
       return { kind: "skip", skipped: { name, mimetype, reason: "download_failed" } };
     }
@@ -15798,11 +15891,11 @@ async function downloadChatAttachments(body) {
 }
 
 // src/dashboard/doc-mention-guard.ts
-import { existsSync as existsSync24, statSync as statSync5 } from "fs";
+import { existsSync as existsSync25, statSync as statSync5 } from "fs";
 var DOC_MENTION_RE = /(?<![\w@/`])@((?:[\w.-]+\/)+[\w.-]+\.[A-Za-z0-9]{1,6})(?::(\d+))?(?![\w-])/g;
 function isRealDoc(root, rel) {
   const abs = resolveDocPath(root, rel);
-  if (!abs || !existsSync24(abs)) return false;
+  if (!abs || !existsSync25(abs)) return false;
   try {
     return statSync5(abs).isFile();
   } catch {
@@ -17072,7 +17165,7 @@ async function exportDocAsArtifact(channelId, docPath) {
   );
   const abs = resolveDocPath(channelConfig.cwd, docPath);
   if (!abs) throw new Error(`doc not found: ${docPath}`);
-  const content = readFileSync19(abs, "utf8");
+  const content = readFileSync20(abs, "utf8");
   const title = extractTitle(abs, "md");
   const today = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
   const prompt = `Publish the document at \`${docPath}\` (already read below) as a Claude Artifact, then record the result as a stub file under this channel's \`docs/artifacts/\` folder (create the folder if it doesn't exist).
@@ -17353,12 +17446,12 @@ function readGitBranch(dir) {
   try {
     let gitDir = join23(dir, ".git");
     if (statSync6(gitDir).isFile()) {
-      const pointer = readFileSync20(gitDir, "utf8").trim();
+      const pointer = readFileSync21(gitDir, "utf8").trim();
       const match = pointer.match(/^gitdir:\s*(.+)$/);
       if (!match) return void 0;
       gitDir = resolve5(dir, match[1]);
     }
-    const head = readFileSync20(join23(gitDir, "HEAD"), "utf8").trim();
+    const head = readFileSync21(join23(gitDir, "HEAD"), "utf8").trim();
     const branchMatch = head.match(/^ref:\s*refs\/heads\/(.+)$/);
     if (branchMatch) return branchMatch[1];
     return /^[0-9a-f]{7,40}$/i.test(head) ? head.slice(0, 7) : void 0;
@@ -17387,7 +17480,7 @@ function listDocLevel(root, relDir = "", sort = "newest", showHidden = false) {
       if (SKIP_DIRS.has(entry.name)) continue;
       const probe3 = probeDir(abs, showHidden);
       if (!probe3.hasDocs && probe3.hasOther) continue;
-      const isRepo = existsSync25(join23(abs, ".git"));
+      const isRepo = existsSync26(join23(abs, ".git"));
       dirs.push({
         path,
         name: entry.name,
@@ -17593,7 +17686,7 @@ function moveDocEntry(root, from, to) {
       return { status: "bad-target" };
     }
   }
-  const absToDir = dirname7(absTo);
+  const absToDir = dirname8(absTo);
   if (resolveDirPath(root, relative(root, absToDir)) === null) return { status: "bad-target" };
   try {
     if (!statSync6(absToDir).isDirectory()) return { status: "bad-target" };
@@ -17684,7 +17777,7 @@ function createDocsRouter({ gate = requireDocsAccess } = {}) {
     }
     if (!stat.isFile()) return c.json({ error: "not found" }, 404);
     if (stat.size > MAX_RAW_BYTES) return c.json({ error: "file too large" }, 413);
-    return c.body(withDocLinkBridge(readFileSync20(abs, "utf8")), 200, {
+    return c.body(withDocLinkBridge(readFileSync21(abs, "utf8")), 200, {
       "Content-Type": "text/html; charset=utf-8",
       "Content-Security-Policy": HTML_SHARE_CSP,
       "X-Content-Type-Options": "nosniff",
@@ -17869,7 +17962,7 @@ function createDocsRouter({ gate = requireDocsAccess } = {}) {
       title: kind ? extractTitle(abs, kind) : basename8(abs),
       mtime: stat.mtime.toISOString(),
       tooLarge: tooLarge || void 0,
-      content: tooLarge ? "" : readFileSync20(abs, "utf8")
+      content: tooLarge ? "" : readFileSync21(abs, "utf8")
     });
   });
   app.put("/:id/docs/content", async (c) => {
@@ -17912,7 +18005,7 @@ function createDocsRouter({ gate = requireDocsAccess } = {}) {
       channel,
       rel,
       title: extractTitle(abs, "md"),
-      content: readFileSync20(abs, "utf8")
+      content: readFileSync21(abs, "utf8")
     };
   };
   app.get("/:id/docs/translation/:lang", async (c) => {
@@ -17967,8 +18060,8 @@ function withDocLinkBridge(html) {
 }
 
 // src/dashboard/skills-routes-host.ts
-import { existsSync as existsSync26, statSync as statSync7 } from "fs";
-import { dirname as dirname8 } from "path";
+import { existsSync as existsSync27, statSync as statSync7 } from "fs";
+import { dirname as dirname9 } from "path";
 import { Hono as Hono32 } from "hono";
 function workspaceScope() {
   const claudeConfigDir = profileClaudeConfigDir();
@@ -17976,7 +18069,7 @@ function workspaceScope() {
   return {
     dir: workspaceSkillsDir(claudeConfigDir),
     // `~/.claude` itself, which exists wherever the CLI has ever run.
-    root: dirname8(workspaceSkillsDir(claudeConfigDir)),
+    root: dirname9(workspaceSkillsDir(claudeConfigDir)),
     cwd,
     claudeConfigDir,
     // Only plugin skills. Project skills belong to a specific channel's cwd, so
@@ -18002,7 +18095,7 @@ function inheritedSkills(scope, own) {
 }
 function rootExists(dir) {
   try {
-    return existsSync26(dir) && statSync7(dir).isDirectory();
+    return existsSync27(dir) && statSync7(dir).isDirectory();
   } catch {
     return false;
   }
@@ -18112,7 +18205,7 @@ async function resolveAgentIdentities() {
 
 // ../api/src/dashboard/providers.ts
 import { execFileSync as execFileSync4 } from "child_process";
-import { existsSync as existsSync27, readFileSync as readFileSync21 } from "fs";
+import { existsSync as existsSync28, readFileSync as readFileSync22 } from "fs";
 import { homedir as homedir10 } from "os";
 import { join as join24, resolve as resolve6 } from "path";
 var PROVIDER_LABELS = {
@@ -18135,7 +18228,7 @@ function binaryOnPath(bin) {
 function claudeAuthAvailable() {
   if (profileEnv("CLAUDE_CODE_OAUTH_TOKEN")?.trim()) return true;
   const configDir2 = profileClaudeConfigDir() || resolve6(homedir10(), ".claude");
-  if (existsSync27(join24(configDir2, ".credentials.json"))) return true;
+  if (existsSync28(join24(configDir2, ".credentials.json"))) return true;
   if (process.platform !== "darwin") return false;
   try {
     execFileSync4("security", ["find-generic-password", "-s", "Claude Code-credentials"], {
@@ -18181,7 +18274,7 @@ function claudeAccount() {
 function codexAccount() {
   const home2 = process.env["CODEX_HOME"]?.trim() || join24(homedir10(), ".codex");
   try {
-    const auth = JSON.parse(readFileSync21(join24(home2, "auth.json"), "utf8"));
+    const auth = JSON.parse(readFileSync22(join24(home2, "auth.json"), "utf8"));
     const payload = auth.tokens?.id_token?.split(".")[1];
     if (!payload) return void 0;
     const claims = JSON.parse(Buffer.from(payload, "base64url").toString("utf8"));
@@ -18212,9 +18305,9 @@ function providerStatuses() {
 // src/dashboard/provider-login-host.ts
 import { spawn as spawn6 } from "child_process";
 import { randomUUID as randomUUID5 } from "crypto";
-import { chmodSync, existsSync as existsSync28, mkdirSync as mkdirSync12, readFileSync as readFileSync22, writeFileSync as writeFileSync12 } from "fs";
+import { chmodSync, existsSync as existsSync29, mkdirSync as mkdirSync12, readFileSync as readFileSync23, writeFileSync as writeFileSync12 } from "fs";
 import { createRequire } from "module";
-import { dirname as dirname9, join as join25 } from "path";
+import { dirname as dirname10, join as join25 } from "path";
 import { Hono as Hono33 } from "hono";
 var SESSION_TTL_MS = 10 * 6e4;
 var URL_WAIT_MS = 3e4;
@@ -18277,10 +18370,10 @@ function waitFor(s, parse, ms) {
 }
 function loadPty() {
   const require2 = createRequire(import.meta.url);
-  const root = dirname9(require2.resolve("node-pty/package.json"));
+  const root = dirname10(require2.resolve("node-pty/package.json"));
   const helper = join25(root, "prebuilds", `${process.platform}-${process.arch}`, "spawn-helper");
   try {
-    if (existsSync28(helper)) chmodSync(helper, 493);
+    if (existsSync29(helper)) chmodSync(helper, 493);
   } catch {
   }
   return require2("node-pty");
@@ -18320,8 +18413,8 @@ async function startClaude() {
   return { id, url };
 }
 function saveClaudeToken(configFile, token) {
-  mkdirSync12(dirname9(configFile), { recursive: true });
-  const current = existsSync28(configFile) ? readFileSync22(configFile, "utf-8") : "";
+  mkdirSync12(dirname10(configFile), { recursive: true });
+  const current = existsSync29(configFile) ? readFileSync23(configFile, "utf-8") : "";
   writeFileSync12(configFile, upsertEnvLine(current, "CLAUDE_CODE_OAUTH_TOKEN", token), { mode: 384 });
   const cached = cachedProfileConfig();
   if (cached) cached.env["CLAUDE_CODE_OAUTH_TOKEN"] = token;
@@ -18540,7 +18633,7 @@ function registerHostRoutes(api) {
     const limit = Math.min(Number(c.req.query("limit")) || 200, 2e3);
     const filename = errors ? "custie-error.log" : "custie.log";
     const file = join26(paths.LOG_DIR, filename);
-    const exists = existsSync29(file);
+    const exists = existsSync30(file);
     return c.json({
       file,
       exists,
@@ -18550,8 +18643,8 @@ function registerHostRoutes(api) {
   });
 }
 function tailFile(file, limit) {
-  if (!existsSync29(file)) return [];
-  const lines = readFileSync23(file, "utf-8").split("\n");
+  if (!existsSync30(file)) return [];
+  const lines = readFileSync24(file, "utf-8").split("\n");
   if (lines.at(-1) === "") lines.pop();
   return lines.slice(-limit);
 }
@@ -18569,7 +18662,7 @@ function createHostApiRouter(agent = {}) {
 
 // src/dashboard/agent-bridge-host.ts
 import { sign as signRaw, timingSafeEqual as timingSafeEqual2 } from "crypto";
-import { existsSync as existsSync30, readFileSync as readFileSync25 } from "fs";
+import { existsSync as existsSync31, readFileSync as readFileSync26 } from "fs";
 import dotenv2 from "dotenv";
 import { WebSocket as WebSocket2 } from "ws";
 
@@ -18603,7 +18696,7 @@ async function handleHostRequest(req) {
 }
 
 // src/dashboard/doc-share-publisher.ts
-import { readFileSync as readFileSync24, statSync as statSync9 } from "fs";
+import { readFileSync as readFileSync25, statSync as statSync9 } from "fs";
 import { extname as extname2, posix } from "path";
 var MAX_ASSET_BYTES = 20 * 1024 * 1024;
 var MAX_CONTENT_BYTES2 = 2 * 1024 * 1024;
@@ -18718,7 +18811,7 @@ function readDocShareBundle({ cwd, sourcePath }) {
   }
   if (!stat.isFile()) return { status: "not-found" };
   if (stat.size > MAX_CONTENT_BYTES2) return { status: "too-large" };
-  const source = readFileSync24(abs, "utf8");
+  const source = readFileSync25(abs, "utf8");
   const title = extractTitle(abs, kind === "markdown" ? "md" : kind);
   if (kind === "excalidraw") {
     try {
@@ -18789,7 +18882,7 @@ function readDocShareBundle({ cwd, sourcePath }) {
       let text = null;
       try {
         const size = statSync9(docAbs).size;
-        if (size <= budget) text = readFileSync24(docAbs, "utf8");
+        if (size <= budget) text = readFileSync25(docAbs, "utf8");
       } catch {
         continue;
       }
@@ -18806,7 +18899,7 @@ function readDocShareBundle({ cwd, sourcePath }) {
     let body;
     try {
       if (statSync9(resolved2.abs).size > MAX_ASSET_BYTES) continue;
-      body = readFileSync24(resolved2.abs);
+      body = readFileSync25(resolved2.abs);
     } catch {
       continue;
     }
@@ -18832,6 +18925,26 @@ function readDocShareBundle({ cwd, sourcePath }) {
   return { status: "ok", kind, title, content: content + renderAttachments(attachments), assets };
 }
 
+// src/dashboard/host-upgrade.ts
+import { spawn as spawn7 } from "child_process";
+import { mkdirSync as mkdirSync13, openSync as openSync3 } from "fs";
+import { join as join27 } from "path";
+var running = false;
+function startHostUpgrade() {
+  if (running) return { started: false };
+  mkdirSync13(paths.LOG_DIR, { recursive: true });
+  const log5 = openSync3(join27(paths.LOG_DIR, "host-upgrade.log"), "a");
+  const child = spawn7(process.execPath, [process.argv[1] ?? "", "upgrade"], {
+    detached: true,
+    stdio: ["ignore", log5, log5]
+  });
+  running = true;
+  child.on("exit", () => running = false);
+  child.on("error", () => running = false);
+  child.unref();
+  return { started: true };
+}
+
 // src/dashboard/agent-bridge-host.ts
 var HOSTED_DATA_SOCKET_ORIGIN = "wss://flyspace-api.fly.dev";
 function dataSocketUrl() {
@@ -18841,7 +18954,7 @@ function dataSocketUrl() {
   return `ws://127.0.0.1:${process.env["FLYSPACE_DATA_API_PORT"] ?? DEFAULT_DATA_API_PORT}${HOST_SOCKET_PATH}`;
 }
 function listLocalSessions() {
-  if (!existsSync30(paths.DB_FILE)) return [];
+  if (!existsSync31(paths.DB_FILE)) return [];
   const store = new SessionStore(paths.DB_FILE);
   try {
     return store.listSessions();
@@ -18872,6 +18985,7 @@ function localAgentCallbacks(chatAgent) {
     docsRequest: (req) => handleDocsRequest(req),
     hostRequest: (req) => handleHostRequest(req),
     listSessions: () => listLocalSessions(),
+    upgradeHost: () => startHostUpgrade(),
     scanOnboarding: (slug) => scanOnboarding(slug),
     linkProjectFolders: (slug, items) => linkProjectFolders(slug, items),
     isHostOnline: () => true
@@ -18882,7 +18996,7 @@ function buildHostConfigSnapshot() {
   const snapshot2 = {};
   for (const profile of listProfiles()) {
     snapshot2[profile] = runWithProfile(profile, () => ({
-      env: existsSync30(paths.CONFIG_FILE) ? dotenv2.parse(readFileSync25(paths.CONFIG_FILE, "utf-8")) : {},
+      env: existsSync31(paths.CONFIG_FILE) ? dotenv2.parse(readFileSync26(paths.CONFIG_FILE, "utf-8")) : {},
       agentModel: loadDashboardSettings().agent
     }));
   }
@@ -18962,6 +19076,10 @@ function connectHostSocket(url, callbacks, onAuthenticated, onWorkspaces) {
         handleHostDbResult(msg.id, msg.res);
         return;
       }
+      if (msg.type === "attachment-url-result") {
+        handleAttachmentUrlResult(msg.id, msg.url);
+        return;
+      }
       if (msg.type === "call") {
         void handleCall(msg, callbacks, ws);
       }
@@ -19128,8 +19246,8 @@ function startPushWatcher() {
 }
 
 // src/dashboard/machine-server.ts
-import { existsSync as existsSync31 } from "fs";
-import { join as join27 } from "path";
+import { existsSync as existsSync32 } from "fs";
+import { join as join28 } from "path";
 import { serveStatic } from "@hono/node-server/serve-static";
 
 // src/dashboard/app-icon-routes.ts
@@ -19211,7 +19329,7 @@ function pngResponse(c, png) {
 }
 
 // src/dashboard/machine-server.ts
-var WEB_DIST = join27(paths.WEB_ROOT, "dist");
+var WEB_DIST = join28(paths.WEB_ROOT, "dist");
 async function bootMachine() {
   await reconcileAll().catch(
     (err) => console.error("[dashboard] reconcileAll failed:", err.message)
@@ -19231,14 +19349,14 @@ async function bootMachine() {
 function mountSpa(app) {
   app.route("/share", createPublicShareAssetRouter(WEB_DIST));
   app.route("/", createAppIconRouter());
-  if (existsSync31(WEB_DIST) || existsSync31(join27(paths.WEB_ROOT, "package.json"))) {
+  if (existsSync32(WEB_DIST) || existsSync32(join28(paths.WEB_ROOT, "package.json"))) {
     app.use("/*", serveStatic({ root: WEB_DIST }));
   }
   app.get("/assets/*", (c) => c.text("stale asset \u2014 reload for the current build", 404));
-  const spaFallback = serveStatic({ path: join27(WEB_DIST, "index.html") });
+  const spaFallback = serveStatic({ path: join28(WEB_DIST, "index.html") });
   app.get("*", async (c, next) => {
-    if (!existsSync31(join27(WEB_DIST, "index.html"))) {
-      const isCheckout = existsSync31(join27(paths.WEB_ROOT, "package.json"));
+    if (!existsSync32(join28(WEB_DIST, "index.html"))) {
+      const isCheckout = existsSync32(join28(paths.WEB_ROOT, "package.json"));
       return c.text(
         isCheckout ? `Workspace UI build missing (${WEB_DIST}).
 Run \`pnpm build:web\` from the repo root.
@@ -19367,13 +19485,13 @@ function flagValue(args, name) {
 function openBrowser2(url) {
   const cmd = platform7() === "darwin" ? "open" : platform7() === "win32" ? "start" : "xdg-open";
   try {
-    spawn7(cmd, [url], { stdio: "ignore", detached: true }).unref();
+    spawn8(cmd, [url], { stdio: "ignore", detached: true }).unref();
   } catch {
   }
 }
 function ensureWebBuild() {
-  if (existsSync32(join28(paths.WEB_ROOT, "dist", "index.html"))) return;
-  if (!existsSync32(join28(paths.WEB_ROOT, "package.json"))) return;
+  if (existsSync33(join29(paths.WEB_ROOT, "dist", "index.html"))) return;
+  if (!existsSync33(join29(paths.WEB_ROOT, "package.json"))) return;
   console.log("  packages/ui/dist missing, building the dashboard UI...");
   const result = spawnSync("pnpm", ["build"], {
     cwd: paths.WEB_ROOT,
@@ -19423,7 +19541,7 @@ async function runDashboard(args) {
 }
 
 // src/commands/workspace.ts
-import { existsSync as existsSync33, mkdirSync as mkdirSync13, writeFileSync as writeFileSync13 } from "fs";
+import { existsSync as existsSync34, mkdirSync as mkdirSync14, writeFileSync as writeFileSync13 } from "fs";
 var USAGE7 = `
   Usage: flyspace workspace <subcommand> [options]
 
@@ -19509,7 +19627,7 @@ function provisionLocal(botName) {
   ensureDirs();
   console.log(`  config dir ready (${paths.CONFIG_DIR})`);
   console.log(`  data dir ready (${paths.DATA_DIR})`);
-  if (existsSync33(paths.CONFIG_FILE)) {
+  if (existsSync34(paths.CONFIG_FILE)) {
     console.log("  config.env exists");
   } else {
     writeFileSync13(paths.CONFIG_FILE, `BOT_NAME=${botName}
@@ -19526,8 +19644,8 @@ async function provisionChannels(specs) {
       continue;
     }
     const cwd = expandPath(spec.cwd);
-    if (!existsSync33(cwd)) {
-      mkdirSync13(cwd, { recursive: true });
+    if (!existsSync34(cwd)) {
+      mkdirSync14(cwd, { recursive: true });
       console.log(`  created cwd ${cwd}`);
     }
     await createChannel({ name: spec.name, cwd, position: index });
@@ -19604,10 +19722,10 @@ async function runReconcileCmd(args) {
 }
 
 // src/cli.ts
-import { join as join29 } from "path";
+import { join as join30 } from "path";
 var home = flyspaceHome();
 if (home) {
-  const bin = join29(home, "bin");
+  const bin = join30(home, "bin");
   const path = process.env.PATH ?? "";
   if (!path.split(":").includes(bin)) process.env.PATH = path ? `${bin}:${path}` : bin;
 }
@@ -19745,7 +19863,7 @@ async function main() {
       break;
     case "-v":
     case "--version":
-      printRaw("0.1.29");
+      printRaw("0.1.31");
       break;
     case "-h":
     case "--help":