friend-assistant 0.1.44 → 0.1.46

package/dist/friend.mjs

@@ -99,7 +99,7 @@ function clampToSafe(r) {
   const h = Math.min(Math.max(r[3], 10), sh);
   const x = Math.min(Math.max(r[0], sx), sx + sw - w);
   const y = Math.min(Math.max(r[1], sy), sy + sh - h);
-  const round = (n) => Math.round(n * 100) / 100;
+  const round = (n2) => Math.round(n2 * 100) / 100;
   return [round(x), round(y), round(w), round(h)];
 }
 
@@ -940,7 +940,7 @@ var TOOL_DEFS = [
     target: "gateway"
   }
 ];
-var clip = (s, n = 300) => s.length > n ? s.slice(0, n) + "\u2026" : s;
+var clip = (s, n2 = 300) => s.length > n2 ? s.slice(0, n2) + "\u2026" : s;
 var INVISIBLE = /[\u0000-\u0008\u000B\u000C\u000D-\u001F\u007F-\u009F​-‏‪-‮⁠-⁤⁦-⁩]/g;
 var visible = (s) => s.replace(INVISIBLE, (c) => `\\u{${c.codePointAt(0).toString(16).toUpperCase()}}`);
 function describeCall(name, args, device) {
@@ -1023,9 +1023,9 @@ ${visible(clip(String(a.text ?? ""), 600))}`;
     case "reports.run":
       return a.send === true ? "Build your portfolio report and send it to your phone" : "Build your portfolio report";
     case "reports.schedule": {
-      const label3 = { telegram: "Telegram", whatsapp: "WhatsApp", sms: "SMS" }[String(a.channel)] ?? visible(String(a.channel ?? ""));
+      const label4 = { telegram: "Telegram", whatsapp: "WhatsApp", sms: "SMS" }[String(a.channel)] ?? visible(String(a.channel ?? ""));
       const days = Array.isArray(a.days) ? a.days.map((d) => ["", "Mon", "Tue", "Wed", "Thu", "Fri", "Sat", "Sun"][Number(d)] ?? "?").join(", ") : "Mon to Fri";
-      return `Schedule the ${visible(String(a.kind ?? ""))} report "${visible(clip(String(a.name ?? ""), 60))}" at ${visible(String(a.time ?? ""))} (${days}). It sends your portfolio figures to ${label3}.`;
+      return `Schedule the ${visible(String(a.kind ?? ""))} report "${visible(clip(String(a.name ?? ""), 60))}" at ${visible(String(a.time ?? ""))} (${days}). It sends your portfolio figures to ${label4}.`;
     }
     case "reports.remove":
       return `Delete the report schedule #${visible(String(a.id ?? ""))}`;
@@ -1114,8 +1114,8 @@ var MAX_LAUNCHER = 12;
 function launcherProblem(raw) {
   const r = raw && typeof raw === "object" ? raw : null;
   if (!r) return "A button needs a label and an action.";
-  const label3 = typeof r.label === "string" ? r.label.trim() : "";
-  if (label3.length < 1 || label3.length > 24) return "A button label is 1 to 24 characters.";
+  const label4 = typeof r.label === "string" ? r.label.trim() : "";
+  if (label4.length < 1 || label4.length > 24) return "A button label is 1 to 24 characters.";
   const icon = typeof r.icon === "string" ? r.icon.trim() : "";
   if (icon.length < 1 || [...icon].length > 4) return "A button icon is 1 to 4 characters (a symbol or an emoji).";
   const a = r.action && typeof r.action === "object" ? r.action : null;
@@ -1172,7 +1172,7 @@ function shuffled(items, random = Math.random) {
   }
   return a;
 }
-var clamp = (n, min, max) => Math.min(max, Math.max(min, n));
+var clamp = (n2, min, max) => Math.min(max, Math.max(min, n2));
 var reset = (s, index, playing) => ({ ...s, index, playing, position: 0, duration: 0 });
 function playerReducer(s, a, env = {}) {
   const mix = env.shuffle ?? shuffled;
@@ -1333,8 +1333,8 @@ function formatterFor(locale2) {
   }
   return f;
 }
-function formatMoney(n, o = DEFAULT_MONEY) {
-  const value = Number.isFinite(n) ? n : 0;
+function formatMoney(n2, o = DEFAULT_MONEY) {
+  const value = Number.isFinite(n2) ? n2 : 0;
   const fixed = Math.abs(value).toFixed(2);
   const negative = value < 0 && fixed !== "0.00";
   return `${negative ? "-" : ""}${o.symbol}${formatterFor(o.locale).format(Number(fixed))}`;
@@ -1346,7 +1346,7 @@ var WHY = { rate: "Zerodha's rate limit was hit, try again in a minute", session
 var asOf = (at, zone) => new Intl.DateTimeFormat("en-GB", { timeZone: zone, hour: "2-digit", minute: "2-digit", hourCycle: "h23" }).format(new Date(at));
 var rows = (items, line) => [...items.slice(0, MAX_ROWS).map(line), ...items.length > MAX_ROWS ? [`...and ${items.length - MAX_ROWS} more`] : []];
 function partText(part, snap, zone, money = DEFAULT_MONEY) {
-  const formatInr = (n) => formatMoney(n, money);
+  const formatInr = (n2) => formatMoney(n2, money);
   const section2 = snap[part];
   if (!section2.ok) return `Could not read the ${part}: ${WHY[section2.kind] ?? section2.error.slice(0, 100)}.`;
   const head = `Zerodha ${part} as of ${asOf(snap.at, zone)}:`;
@@ -1378,7 +1378,7 @@ Available ${formatInr(f.available)}, used ${formatInr(f.used)}, total ${formatIn
 import { createHash } from "node:crypto";
 
 // ../server/src/stats.ts
-var clampPct = (n) => Math.min(100, Math.max(0, Math.round(n)));
+var clampPct = (n2) => Math.min(100, Math.max(0, Math.round(n2)));
 function used(line) {
   const m = line && /([\d.]+) GB free of ([\d.]+) GB/.exec(line);
   if (!m) return null;
@@ -1629,7 +1629,7 @@ function nextSlot(due, step, after) {
   return next > after ? next : due + (Math.floor((after - due) / step) + 1) * step;
 }
 function localIso(d) {
-  const p = (n, w = 2) => String(Math.abs(n)).padStart(w, "0");
+  const p = (n2, w = 2) => String(Math.abs(n2)).padStart(w, "0");
   const off = -d.getTimezoneOffset();
   return `${d.getFullYear()}-${p(d.getMonth() + 1)}-${p(d.getDate())}T${p(d.getHours())}:${p(d.getMinutes())}:${p(d.getSeconds())}${off >= 0 ? "+" : "-"}${p(Math.floor(Math.abs(off) / 60))}:${p(Math.abs(off) % 60)}`;
 }
@@ -1667,10 +1667,10 @@ var Tasks = class {
     return rows3.map(toRow);
   }
   done(id2) {
-    const row = this.db.prepare(`select ${COLUMNS} from tasks where id = ? and status = 'open'`).get(id2);
-    if (!row) return { ok: false, error: "No open task with that number." };
-    if (row.repeat && row.due_at !== null) {
-      this.db.prepare("update tasks set due_at = ?, fired_at = null where id = ?").run(nextSlot(row.due_at, STEP[row.repeat], this.clock()), id2);
+    const row2 = this.db.prepare(`select ${COLUMNS} from tasks where id = ? and status = 'open'`).get(id2);
+    if (!row2) return { ok: false, error: "No open task with that number." };
+    if (row2.repeat && row2.due_at !== null) {
+      this.db.prepare("update tasks set due_at = ?, fired_at = null where id = ?").run(nextSlot(row2.due_at, STEP[row2.repeat], this.clock()), id2);
       return { ok: true, rescheduled: true };
     }
     this.db.prepare("update tasks set status = 'done' where id = ?").run(id2);
@@ -1686,10 +1686,10 @@ var Tasks = class {
   }
   /** The owner has been told. A repeating task moves to its next slot after now (missed slots are skipped, never replayed). */
   markFired(id2) {
-    const row = this.db.prepare(`select ${COLUMNS} from tasks where id = ?`).get(id2);
-    if (!row) return;
-    if (row.repeat && row.due_at !== null) {
-      this.db.prepare("update tasks set due_at = ?, fired_at = null where id = ?").run(nextSlot(row.due_at, STEP[row.repeat], this.clock()), id2);
+    const row2 = this.db.prepare(`select ${COLUMNS} from tasks where id = ?`).get(id2);
+    if (!row2) return;
+    if (row2.repeat && row2.due_at !== null) {
+      this.db.prepare("update tasks set due_at = ?, fired_at = null where id = ?").run(nextSlot(row2.due_at, STEP[row2.repeat], this.clock()), id2);
     } else {
       this.db.prepare("update tasks set fired_at = ? where id = ?").run(this.clock(), id2);
     }
@@ -1974,7 +1974,7 @@ function regionUse(objects) {
     });
     if (hits.length) used2.set(name, hits);
   }
-  return { used: used2, free: REGION_NAMES.filter((n) => !used2.has(n)) };
+  return { used: used2, free: REGION_NAMES.filter((n2) => !used2.has(n2)) };
 }
 function describeScreen(scene, presence, entries, now, panels = [], screen = null, view, accent) {
   const open2 = panels.length ? `; the owner has open: ${panels.map((p) => PANEL_TEXT[p]).join(", ")}, so keep clear of them` : "";
@@ -2572,6 +2572,7 @@ var Agent = class {
       return;
     }
     this.busy = true;
+    const spent = { input: 0, output: 0 };
     this.scenesThisTurn = 0;
     const stage = (cmd) => {
       d.stage.apply(cmd);
@@ -2631,7 +2632,10 @@ var Agent = class {
           languageNote(text3, ctx.spoken, voiceGender(devanagariLanguage(text3) === "mr" || ctx.spoken?.toLowerCase().startsWith("mr") ? "mr" : "hi", { main: d.config.voice.ttsVoice, hindi: d.config.voice.hindiVoice || void 0, marathi: d.config.voice.marathiVoice || void 0 }))
         );
         for await (const ev of d.provider.stream({ system, ...context ? { context } : {}, session: isolated ? "guest" : "owner", messages, tools, signal: abort.signal })) {
-          if (ev.type === "text_delta") {
+          if (ev.type === "usage") {
+            spent.input += ev.input;
+            spent.output += ev.output;
+          } else if (ev.type === "text_delta") {
             if (!assistantText) {
               stage({ cmd: "presence", state: "speaking" });
               emit({ type: "activity", text: "Answering" });
@@ -2691,6 +2695,7 @@ var Agent = class {
       d.audit.log("system", "agent.error", { message: e.message });
       emit({ type: "caption.delta", text: "Sorry, something went wrong on my side." });
     } finally {
+      if (d.usage && (spent.input > 0 || spent.output > 0)) d.usage({ source: ctx.source ?? "other", ...spent });
       if (member && lastAnswer) {
         const lines = [...earlierOf(this.memberTalk.get(ctx.person.id), d.tasks?.now() ?? Date.now()), { role: "user", content: [{ type: "text", text: text3 }] }, { role: "assistant", content: [{ type: "text", text: lastAnswer }] }];
         this.memberTalk.set(ctx.person.id, { at: d.tasks?.now() ?? Date.now(), lines: lines.slice(-MEMBER_MEMORY_MSGS) });
@@ -3213,8 +3218,8 @@ function sanitizeAlexa(raw) {
   const users = (Array.isArray(r.allowedUsers) ? r.allowedUsers : []).flatMap((u) => {
     const x = u && typeof u === "object" ? u : {};
     if (typeof x.id !== "string" || !AMAZON_USER.test(x.id)) return [];
-    const label3 = typeof x.name === "string" ? x.name.replace(/[\u0000-\u001f\u007f]/g, " ").trim().slice(0, 40) : "";
-    return [{ id: x.id, name: label3 || "Echo", addedAt: typeof x.addedAt === "number" && Number.isFinite(x.addedAt) ? x.addedAt : 0 }];
+    const label4 = typeof x.name === "string" ? x.name.replace(/[\u0000-\u001f\u007f]/g, " ").trim().slice(0, 40) : "";
+    return [{ id: x.id, name: label4 || "Echo", addedAt: typeof x.addedAt === "number" && Number.isFinite(x.addedAt) ? x.addedAt : 0 }];
   });
   const num3 = (v, o, whole = true) => typeof v === "number" && Number.isFinite(v) ? Math.min(o.max, Math.max(o.min, whole ? Math.round(v) : Math.round(v * 10) / 10)) : o.def;
   const locales = [...new Set((Array.isArray(r.locales) ? r.locales : []).filter((l) => ALEXA_LOCALES.includes(l)))];
@@ -3347,6 +3352,7 @@ function sanitizeLook(raw) {
   };
 }
 var DEFAULT_OLLAMA = { url: "http://127.0.0.1:11434", model: "qwen2.5:7b", contextTokens: 8192, vision: false };
+var sanitizeUpdates = (u) => ({ auto: typeof u?.auto === "boolean" ? u.auto : true });
 var DEFAULT_VOICE = {
   enabled: true,
   sttModel: "small",
@@ -3361,7 +3367,7 @@ var DEFAULT_VOICE = {
   duckPercent: 25
 };
 function sanitizeVoice(v) {
-  const ok = (n) => typeof n === "number" && Number.isFinite(n) && n >= 0 && n <= 1;
+  const ok = (n2) => typeof n2 === "number" && Number.isFinite(n2) && n2 >= 0 && n2 <= 1;
   const percent2 = typeof v.duckPercent === "number" && Number.isFinite(v.duckPercent) ? Math.max(0, Math.min(100, Math.round(v.duckPercent))) : DEFAULT_VOICE.duckPercent;
   const base = { ...v, duck: typeof v.duck === "boolean" ? v.duck : DEFAULT_VOICE.duck, duckPercent: percent2 };
   if (ok(v.accept) && ok(v.challenge) && v.accept > v.challenge) return base;
@@ -3412,6 +3418,7 @@ var defaults = (dataDir) => ({
   openai: { ...DEFAULT_OPENAI },
   claudeCode: { ...DEFAULT_CLAUDE_CODE },
   voice: { ...DEFAULT_VOICE },
+  updates: sanitizeUpdates(void 0),
   view: "companion",
   look: { ...DEFAULT_LOOK },
   ownerName: "",
@@ -3458,6 +3465,7 @@ function loadConfig(dataDir = defaultDataDir()) {
     openai: { ...DEFAULT_OPENAI, ...stored.openai },
     claudeCode: sanitizeClaudeCode(stored.claudeCode),
     voice: sanitizeVoice({ ...DEFAULT_VOICE, ...stored.voice }),
+    updates: sanitizeUpdates(stored.updates),
     view: stored.view === "minimal" || stored.view === "workspace" ? stored.view : "companion",
     look: sanitizeLook(stored.look),
     ownerName: typeof stored.ownerName === "string" ? stored.ownerName.replace(/[\u0000-\u001f\u007f]/g, " ").trim().slice(0, 40) : "",
@@ -3554,7 +3562,7 @@ function integrationViews(config, hub, brokers, alexa, spotify, soundcloud, audi
   const vdNeeds = () => {
     if (!vs) return [];
     const need = [{ name: "yt-dlp", h: vs.ytdlp }, ...vdMpvWindow ? [] : [{ name: "ffmpeg", h: vs.ffmpeg }]];
-    return need.filter((n) => !n.h.found).map((n) => ({ name: n.name, ...n.h.install ? { install: n.h.install } : {} }));
+    return need.filter((n2) => !n2.h.found).map((n2) => ({ name: n2.name, ...n2.h.install ? { install: n2.h.install } : {} }));
   };
   const vdSteps = [
     { text: "Friend gets the helper programs (yt-dlp and ffmpeg) by itself when you turn the plugin on: nothing to install.", done: !!vs && vdNeeds().length === 0 },
@@ -3894,7 +3902,7 @@ function inspectPlugin(dir) {
   }
   const manifest = parsed.data;
   const seen = (names, kind) => {
-    const dup2 = names.find((n, i) => names.indexOf(n) !== i);
+    const dup2 = names.find((n2, i) => names.indexOf(n2) !== i);
     return dup2 ? `The ${kind} name "${dup2}" is used twice.` : null;
   };
   const dup = seen(manifest.skills.map((s) => s.name), "skill") ?? seen(manifest.tools.map((t) => t.name), "tool");
@@ -4314,9 +4322,9 @@ var ConnectorStore = class {
     return true;
   }
   remove(id2) {
-    const n = this.items.length;
+    const n2 = this.items.length;
     this.items = this.items.filter((i) => i.id !== id2);
-    if (this.items.length === n) return false;
+    if (this.items.length === n2) return false;
     this.save();
     return true;
   }
@@ -4336,10 +4344,10 @@ var hasSecrets = (c) => c.kind === "stdio" ? Object.keys(c.env).length > 0 : Obj
 var MAX_RESULT_BYTES = 1024 * 1024;
 var MAX_TOOL_PART = 28;
 function friendlyToolName(original, taken) {
-  let n = original.replace(/[^A-Za-z0-9_-]/g, "-").replace(/_{2,}/g, "_").replace(/^[-_]+/, "") || "tool";
-  if (n.length > MAX_TOOL_PART) n = `${n.slice(0, MAX_TOOL_PART - 7)}_${createHash2("sha1").update(original).digest("hex").slice(0, 5)}`;
-  let out = n;
-  for (let i = 2; taken.has(out); i++) out = `${n.slice(0, MAX_TOOL_PART - 3)}_${i}`;
+  let n2 = original.replace(/[^A-Za-z0-9_-]/g, "-").replace(/_{2,}/g, "_").replace(/^[-_]+/, "") || "tool";
+  if (n2.length > MAX_TOOL_PART) n2 = `${n2.slice(0, MAX_TOOL_PART - 7)}_${createHash2("sha1").update(original).digest("hex").slice(0, 5)}`;
+  let out = n2;
+  for (let i = 2; taken.has(out); i++) out = `${n2.slice(0, MAX_TOOL_PART - 3)}_${i}`;
   taken.add(out);
   return out;
 }
@@ -4884,9 +4892,9 @@ function chromeToken(home = homedir3()) {
     return null;
   }
 }
-function sameKey(given, real2) {
-  if (!given || !real2) return false;
-  return timingSafeEqual(createHash3("sha256").update(given).digest(), createHash3("sha256").update(real2).digest());
+function sameKey(given, real3) {
+  if (!given || !real3) return false;
+  return timingSafeEqual(createHash3("sha256").update(given).digest(), createHash3("sha256").update(real3).digest());
 }
 function keyFromRequest(headers, search) {
   const bearer = /^Bearer (.+)$/i.exec(headers.authorization ?? "")?.[1];
@@ -4975,10 +4983,10 @@ import { join as join9 } from "node:path";
 import { deflateRawSync } from "node:zlib";
 var TABLE = (() => {
   const t = new Uint32Array(256);
-  for (let n = 0; n < 256; n++) {
-    let c = n;
+  for (let n2 = 0; n2 < 256; n2++) {
+    let c = n2;
     for (let k = 0; k < 8; k++) c = c & 1 ? 3988292384 ^ c >>> 1 : c >>> 1;
-    t[n] = c >>> 0;
+    t[n2] = c >>> 0;
   }
   return t;
 })();
@@ -5541,8 +5549,8 @@ var AudiusHub = class {
     };
   }
   async search(query, limit) {
-    const n = Math.max(1, Math.min(50, Math.floor(limit)));
-    const j = await this.api("/v1/tracks/search", { query: query.slice(0, 200), limit: String(n) });
+    const n2 = Math.max(1, Math.min(50, Math.floor(limit)));
+    const j = await this.api("/v1/tracks/search", { query: query.slice(0, 200), limit: String(n2) });
     return (Array.isArray(j) ? j : []).flatMap((t) => this.of(t) ?? []);
   }
   async playlists(_limit) {
@@ -5575,7 +5583,7 @@ var AudiusHub = class {
     }
   }
   /** Fetches the audio from a checked address, following at most three redirects and only to checked addresses. */
-  async fetchAudio(address, range, signal) {
+  async fetchAudio(address, range2, signal) {
     let next = address;
     for (let hop = 0; hop <= MAX_HOPS; hop++) {
       if (!isAudiusAddress(next, hop > 0) || !await this.publicName(next)) return { ok: false, error: "Audius sent the audio somewhere Friend will not follow." };
@@ -5585,7 +5593,7 @@ var AudiusHub = class {
         const timer = setTimeout(() => ctl.abort(), this.d.requestTimeoutMs ?? 8e3);
         const stop2 = signal ? AbortSignal.any([ctl.signal, signal]) : ctl.signal;
         try {
-          res = await (this.d.fetch ?? fetch)(next, { redirect: "manual", headers: range ? { range } : {}, signal: stop2 });
+          res = await (this.d.fetch ?? fetch)(next, { redirect: "manual", headers: range2 ? { range: range2 } : {}, signal: stop2 });
         } finally {
           clearTimeout(timer);
         }
@@ -5839,14 +5847,14 @@ var zipExtract = async (archive, plan, dest) => {
     await fh.read(tail2, 0, tailLen, size - tailLen);
     const eocd = tail2.lastIndexOf(Buffer.from([80, 75, 5, 6]));
     if (eocd < 0) throw new Error("not a zip file");
-    const count2 = tail2.readUInt16LE(eocd + 10);
+    const count3 = tail2.readUInt16LE(eocd + 10);
     const cdSize = tail2.readUInt32LE(eocd + 12);
     const cdOffset = tail2.readUInt32LE(eocd + 16);
     if (cdOffset === 4294967295 || cdSize === 4294967295) throw new Error("zip64 archives are not supported");
     const cd = Buffer.alloc(cdSize);
     await fh.read(cd, 0, cdSize, cdOffset);
     let p = 0;
-    for (let i = 0; i < count2 && p + 46 <= cd.length; i++) {
+    for (let i = 0; i < count3 && p + 46 <= cd.length; i++) {
       if (cd.readUInt32LE(p) !== 33639248) break;
       const method = cd.readUInt16LE(p + 10);
       const csize = cd.readUInt32LE(p + 20);
@@ -6392,7 +6400,7 @@ var VideoHub = class {
     return this.tokens.has(id2);
   }
   missing(status2, names) {
-    return names.filter((n) => !(n === "yt-dlp" ? status2.ytdlp : status2.ffmpeg).found);
+    return names.filter((n2) => !(n2 === "yt-dlp" ? status2.ytdlp : status2.ffmpeg).found);
   }
   /** Downloads what the plugin needs (if the owner allows it) and looks again. Called when the plugin is installed or switched on. */
   async prepare() {
@@ -6595,9 +6603,9 @@ var VideoHub = class {
     return { ok: true, text: "On the Friend screen the video has its own buttons for pause, play and volume: use those." };
   }
   nowPlaying() {
-    const n = this.now;
-    if (!n) return "Nothing is playing.";
-    return `Playing "${n.title}"${n.uploader ? ` by ${n.uploader}` : ""} ${n.output === "host" ? n.via === "browser" ? "in a browser window on this PC" : "in a window on this PC" : "on the Friend screen"}.`;
+    const n2 = this.now;
+    if (!n2) return "Nothing is playing.";
+    return `Playing "${n2.title}"${n2.uploader ? ` by ${n2.uploader}` : ""} ${n2.output === "host" ? n2.via === "browser" ? "in a browser window on this PC" : "in a window on this PC" : "on the Friend screen"}.`;
   }
   /** What is found and what is missing, in words, for the assistant to pass on. */
   async check() {
@@ -6766,8 +6774,8 @@ var Auth = class _Auth {
   }
   async login(password, ip) {
     const succeeded = this.begin("login", ip);
-    const row = this.db.prepare("select password_hash h from owner where id = 1").get();
-    const ok = row ? await verifySecret(password, row.h) : false;
+    const row2 = this.db.prepare("select password_hash h from owner where id = 1").get();
+    const ok = row2 ? await verifySecret(password, row2.h) : false;
     if (!ok) {
       this.audit.log("anonymous", "login.fail", { ip });
       throw new Error("Invalid credentials");
@@ -6798,8 +6806,8 @@ var Auth = class _Auth {
   }
   async verifyPin(pin, ip) {
     const succeeded = this.begin("pin", ip);
-    const row = this.db.prepare("select pin_hash h from owner where id = 1").get();
-    const ok = row ? await verifySecret(pin, row.h) : false;
+    const row2 = this.db.prepare("select pin_hash h from owner where id = 1").get();
+    const ok = row2 ? await verifySecret(pin, row2.h) : false;
     if (ok) succeeded();
     else this.audit.log("owner", "pin.fail", { ip });
     return ok;
@@ -6823,8 +6831,8 @@ var Auth = class _Auth {
     const problem = _Auth.checkNewSecrets(input);
     if (problem) throw new Error(problem);
     const succeeded = this.begin("login", ip);
-    const row = this.db.prepare("select password_hash h from owner where id = 1").get();
-    const ok = row ? await verifySecret(input.current, row.h) : false;
+    const row2 = this.db.prepare("select password_hash h from owner where id = 1").get();
+    const ok = row2 ? await verifySecret(input.current, row2.h) : false;
     if (!ok) {
       this.audit.log("owner", "secrets.fail", { ip });
       throw new Error("Invalid credentials");
@@ -7120,32 +7128,32 @@ var MAX_TEXT = 2e5;
 var MAX_CSV_ROWS = 200;
 function parseCsv(text3) {
   const rows3 = [];
-  let row = [];
+  let row2 = [];
   let cell = "";
-  let quoted = false;
+  let quoted2 = false;
   for (let i = 0; i < text3.length; i++) {
     const ch = text3[i];
-    if (quoted) {
+    if (quoted2) {
       if (ch === '"' && text3[i + 1] === '"') {
         cell += '"';
         i++;
-      } else if (ch === '"') quoted = false;
+      } else if (ch === '"') quoted2 = false;
       else cell += ch;
-    } else if (ch === '"') quoted = true;
+    } else if (ch === '"') quoted2 = true;
     else if (ch === ",") {
-      row.push(cell);
+      row2.push(cell);
       cell = "";
     } else if (ch === "\n" || ch === "\r") {
       if (ch === "\r" && text3[i + 1] === "\n") i++;
-      row.push(cell);
+      row2.push(cell);
       cell = "";
-      if (row.some((c) => c !== "")) rows3.push(row);
-      row = [];
+      if (row2.some((c) => c !== "")) rows3.push(row2);
+      row2 = [];
       if (rows3.length > MAX_CSV_ROWS + 1) return rows3;
     } else cell += ch;
   }
-  row.push(cell);
-  if (row.some((c) => c !== "")) rows3.push(row);
+  row2.push(cell);
+  if (row2.some((c) => c !== "")) rows3.push(row2);
   return rows3;
 }
 var insideOf = (dir, path3) => {
@@ -7184,59 +7192,59 @@ var MediaStore = class {
   /** A file the assistant wants to send to the owner's chat: checked here (it must exist, be a real file, not be Friend's own data, not a program). */
   async sendable(rawPath) {
     if (!isAbsolute(rawPath)) return { ok: false, error: "Give the full path of the file, for example D:\\Pictures\\photo.png." };
-    let real2;
+    let real3;
     try {
-      real2 = await fs.realpath(resolve4(rawPath));
+      real3 = await fs.realpath(resolve4(rawPath));
     } catch {
       return { ok: false, error: "That file does not exist." };
     }
-    if (insideOf(await fs.realpath(this.dataDir).catch(() => this.dataDir), real2)) return { ok: false, error: "Friend's own data folder cannot be sent." };
-    const stat2 = await fs.stat(real2).catch(() => null);
+    if (insideOf(await fs.realpath(this.dataDir).catch(() => this.dataDir), real3)) return { ok: false, error: "Friend's own data folder cannot be sent." };
+    const stat2 = await fs.stat(real3).catch(() => null);
     if (!stat2 || !stat2.isFile()) return { ok: false, error: "That path is not a file." };
-    const name = basename(real2);
-    const ext = extname(real2).slice(1).toLowerCase();
+    const name = basename(real3);
+    const ext = extname(real3).slice(1).toLowerCase();
     if (NOT_SENT.has(ext)) return { ok: false, error: `Friend cannot send .${ext} files.` };
     if (stat2.size === 0) return { ok: false, error: "That file is empty." };
     if (stat2.size > MAX_SEND) return { ok: false, error: `That file is too big to send (${Math.round(stat2.size / 1048576)} MB).` };
     const mime = IMAGE[ext] ?? VIDEO[ext] ?? DOC_MIME[ext] ?? "application/octet-stream";
     const kind = mime.startsWith("image/") ? "image" : mime.startsWith("audio/") ? "audio" : mime.startsWith("video/") ? "video" : "document";
-    return { ok: true, path: real2, name, mime, size: stat2.size, kind };
+    return { ok: true, path: real3, name, mime, size: stat2.size, kind };
   }
   async present(rawPath, title2) {
     if (!isAbsolute(rawPath)) return { ok: false, error: "Give the full path of the file, for example D:\\Pictures\\photo.png." };
-    let real2;
+    let real3;
     try {
-      real2 = await fs.realpath(resolve4(rawPath));
+      real3 = await fs.realpath(resolve4(rawPath));
     } catch {
       return { ok: false, error: "That file does not exist." };
     }
-    if (insideOf(await fs.realpath(this.dataDir).catch(() => this.dataDir), real2)) return { ok: false, error: "Friend's own data folder cannot be shown." };
-    const stat2 = await fs.stat(real2).catch(() => null);
+    if (insideOf(await fs.realpath(this.dataDir).catch(() => this.dataDir), real3)) return { ok: false, error: "Friend's own data folder cannot be shown." };
+    const stat2 = await fs.stat(real3).catch(() => null);
     if (!stat2 || !stat2.isFile()) return { ok: false, error: "That path is not a file." };
-    const name = basename(real2);
-    const ext = extname(real2).slice(1).toLowerCase();
-    const label3 = title2?.trim() || name;
+    const name = basename(real3);
+    const ext = extname(real3).slice(1).toLowerCase();
+    const label4 = title2?.trim() || name;
     const tooBig = (limit, what) => stat2.size > limit ? { ok: false, error: `That ${what} is too large to show (${Math.round(stat2.size / 1048576)} MB).` } : null;
     if (IMAGE[ext]) {
       const big = tooBig(MAX_IMAGE, "image");
       if (big) return big;
-      const id2 = this.grant(real2, IMAGE[ext], stat2.size);
-      return { ok: true, type: "image", props: { title: label3, src: `/api/media/${id2}` }, summary: `Showing the image ${name}.` };
+      const id2 = this.grant(real3, IMAGE[ext], stat2.size);
+      return { ok: true, type: "image", props: { title: label4, src: `/api/media/${id2}` }, summary: `Showing the image ${name}.` };
     }
     if (VIDEO[ext]) {
       const big = tooBig(MAX_VIDEO, "file");
       if (big) return big;
-      const id2 = this.grant(real2, VIDEO[ext], stat2.size);
-      return { ok: true, type: "video", props: { title: label3, src: `/api/media/${id2}` }, summary: `Showing ${name}.` };
+      const id2 = this.grant(real3, VIDEO[ext], stat2.size);
+      return { ok: true, type: "video", props: { title: label4, src: `/api/media/${id2}` }, summary: `Showing ${name}.` };
     }
     if (ext === "pdf") {
       const big = tooBig(MAX_PDF, "PDF");
       if (big) return big;
-      const id2 = this.grant(real2, "application/pdf", stat2.size);
-      return { ok: true, type: "pdf", props: { title: label3, src: `/api/media/${id2}` }, summary: `Showing the PDF ${name}.` };
+      const id2 = this.grant(real3, "application/pdf", stat2.size);
+      return { ok: true, type: "pdf", props: { title: label4, src: `/api/media/${id2}` }, summary: `Showing the PDF ${name}.` };
     }
     if (MARKDOWN.has(ext) || ext === "csv" || CODE_LANG[ext]) {
-      const handle = await fs.open(real2, "r");
+      const handle = await fs.open(real3, "r");
       let text3;
       try {
         const buf = Buffer.alloc(Math.min(stat2.size, MAX_TEXT));
@@ -7250,13 +7258,13 @@ var MediaStore = class {
       const note = cut ? `
 
 [Only the first ${MAX_TEXT} characters are shown.]` : "";
-      if (MARKDOWN.has(ext)) return { ok: true, type: "markdown", props: { title: label3, text: text3 + note }, summary: `Showing ${name}.${cut ? " It is long, so only the start is shown." : ""}` };
+      if (MARKDOWN.has(ext)) return { ok: true, type: "markdown", props: { title: label4, text: text3 + note }, summary: `Showing ${name}.${cut ? " It is long, so only the start is shown." : ""}` };
       if (ext === "csv") {
         const rows3 = parseCsv(text3);
         const [head = [], ...body] = rows3;
-        return { ok: true, type: "table", props: { title: label3, columns: head, rows: body.slice(0, MAX_CSV_ROWS) }, summary: `Showing ${name} as a table (${Math.min(body.length, MAX_CSV_ROWS)} rows).` };
+        return { ok: true, type: "table", props: { title: label4, columns: head, rows: body.slice(0, MAX_CSV_ROWS) }, summary: `Showing ${name} as a table (${Math.min(body.length, MAX_CSV_ROWS)} rows).` };
       }
-      return { ok: true, type: "code", props: { title: label3, language: CODE_LANG[ext], code: text3 + note.replace(/^\n\n/, "\n") }, summary: `Showing ${name}.${cut ? " It is long, so only the start is shown." : ""}` };
+      return { ok: true, type: "code", props: { title: label4, language: CODE_LANG[ext], code: text3 + note.replace(/^\n\n/, "\n") }, summary: `Showing ${name}.${cut ? " It is long, so only the start is shown." : ""}` };
     }
     return { ok: false, error: `Friend cannot show .${ext || "?"} files. It can show images, GIFs, video, sound, PDF, Markdown, text, CSV and code.` };
   }
@@ -7311,7 +7319,7 @@ async function readLimited(res, max) {
   }
   return Buffer.concat(chunks);
 }
-var clip2 = (s, n) => s.length > n ? `${s.slice(0, n)}\u2026` : s;
+var clip2 = (s, n2) => s.length > n2 ? `${s.slice(0, n2)}\u2026` : s;
 var plain = (s) => s.replace(/[\u0000-\u001f\u007f‪-‮⁦-⁩]/g, " ");
 var digits = (s) => s.replace(/\D/g, "");
 var ChannelHub = class _ChannelHub {
@@ -7810,8 +7818,8 @@ var AlexaDevices = class {
     const matches = [...this.waitingMap.values()].filter((w2) => short.length === SHORT && w2.id.endsWith(short));
     if (matches.length !== 1 || this.store.config().allowedUsers.length >= this.store.config().maxDevices) return false;
     const w = matches[0];
-    const label3 = name.replace(/[\u0000-\u001f\u007f]/g, " ").trim().slice(0, 40) || "Echo";
-    this.store.update((a) => a.allowedUsers.push({ id: w.id, name: label3, addedAt: this.clock() }));
+    const label4 = name.replace(/[\u0000-\u001f\u007f]/g, " ").trim().slice(0, 40) || "Echo";
+    this.store.update((a) => a.allowedUsers.push({ id: w.id, name: label4, addedAt: this.clock() }));
     this.waitingMap.delete(w.id);
     return true;
   }
@@ -8361,7 +8369,7 @@ var clock = (sec) => `${Math.floor(sec / 60)}:${String(Math.floor(sec % 60)).pad
 var ref = (t) => ({ id: t.id, title: t.title, artist: t.artist, album: t.album, durationSec: t.durationSec });
 var refOfSource = (t) => ({ id: t.source === "local" ? parseRef(t.ref)?.id ?? t.ref : t.ref, title: t.title, artist: t.artist, album: t.album, durationSec: t.durationSec });
 var label2 = (t) => t.artist ? `${t.title} by ${t.artist}` : t.title;
-var plural = (n, w) => `${n} ${w}${n === 1 ? "" : "s"}`;
+var plural = (n2, w) => `${n2} ${w}${n2 === 1 ? "" : "s"}`;
 var SERVICE_NAMES = { spotify: "Spotify", soundcloud: "SoundCloud", audius: "Audius" };
 var MusicHub = class {
   constructor(d) {
@@ -8452,10 +8460,10 @@ var MusicHub = class {
     const mode = a.mode ?? "replace";
     const failed = await this.send({ action: "play", tracks: tracks.map(refOfSource), mode, ...a.shuffle ? { shuffle: true } : {} });
     if (failed) return failed;
-    const n = tracks.length;
+    const n2 = tracks.length;
     const first2 = tracks[0];
     const at = this.at();
-    const base = mode === "add" ? `Added ${plural(n, "track")} to the queue${at}.` : mode === "next" ? `Queued ${plural(n, "track")} to play next${at}, starting with ${label2(first2)}.` : `Playing ${plural(n, "track")}${at}${a.shuffle ? " shuffled" : ", starting with " + label2(first2)}.`;
+    const base = mode === "add" ? `Added ${plural(n2, "track")} to the queue${at}.` : mode === "next" ? `Queued ${plural(n2, "track")} to play next${at}, starting with ${label2(first2)}.` : `Playing ${plural(n2, "track")}${at}${a.shuffle ? " shuffled" : ", starting with " + label2(first2)}.`;
     return { ok: true, text: [base, ...notes].join(" ") };
   }
   async playLocal(a, words) {
@@ -8467,11 +8475,11 @@ var MusicHub = class {
     const failed = await this.send({ action: "play", tracks: found.tracks.map(ref), mode, ...a.shuffle ? { shuffle: true } : {} });
     if (failed) return failed;
     const first2 = found.tracks[0];
-    const n = found.tracks.length;
+    const n2 = found.tracks.length;
     const at = this.at();
-    if (mode === "add") return { ok: true, text: `Added ${plural(n, "track")} to the queue${at}.` };
-    if (mode === "next") return { ok: true, text: `Queued ${plural(n, "track")} to play next${at}, starting with ${label2(first2)}.` };
-    return { ok: true, text: `Playing ${plural(n, "track")}${at}${a.shuffle ? " shuffled" : ", starting with " + label2(first2)}.` };
+    if (mode === "add") return { ok: true, text: `Added ${plural(n2, "track")} to the queue${at}.` };
+    if (mode === "next") return { ok: true, text: `Queued ${plural(n2, "track")} to play next${at}, starting with ${label2(first2)}.` };
+    return { ok: true, text: `Playing ${plural(n2, "track")}${at}${a.shuffle ? " shuffled" : ", starting with " + label2(first2)}.` };
   }
   async control(a) {
     const bad = (text3) => ({ ok: false, text: text3 });
@@ -8835,8 +8843,8 @@ var SoundCloudHub = class {
     };
   }
   async search(query, limit) {
-    const n = Math.max(1, Math.min(50, Math.floor(limit)));
-    const j = await this.api(`/tracks?${new URLSearchParams({ q: query.slice(0, 200), limit: String(n), access: "playable" })}`);
+    const n2 = Math.max(1, Math.min(50, Math.floor(limit)));
+    const j = await this.api(`/tracks?${new URLSearchParams({ q: query.slice(0, 200), limit: String(n2), access: "playable" })}`);
     return (Array.isArray(j) ? j : []).flatMap((t) => this.of(t) ?? []);
   }
   async playlists(limit) {
@@ -8867,7 +8875,7 @@ var SoundCloudHub = class {
     }
   }
   /** Fetches the audio from a vetted address, following at most three redirects and only to SoundCloud's own https addresses. */
-  async fetchAudio(address, range, signal) {
+  async fetchAudio(address, range2, signal) {
     let next = address;
     for (let hop = 0; hop <= MAX_HOPS3; hop++) {
       if (!isSoundCloudAddress(next)) return { ok: false, error: "SoundCloud sent the audio somewhere Friend will not follow." };
@@ -8877,7 +8885,7 @@ var SoundCloudHub = class {
         const timer = setTimeout(() => ctl.abort(), this.d.requestTimeoutMs ?? 8e3);
         const stop2 = signal ? AbortSignal.any([ctl.signal, signal]) : ctl.signal;
         try {
-          res = await (this.d.fetch ?? fetch)(next, { redirect: "manual", headers: range ? { range } : {}, signal: stop2 });
+          res = await (this.d.fetch ?? fetch)(next, { redirect: "manual", headers: range2 ? { range: range2 } : {}, signal: stop2 });
         } finally {
           clearTimeout(timer);
         }
@@ -9400,8 +9408,8 @@ var MusicLibrary = class {
     try {
       const info = await lstat(path3);
       if (!info.isFile() || info.isSymbolicLink()) return null;
-      const real2 = await realpath(path3);
-      return real2.startsWith(this.root + sep2) ? path3 : null;
+      const real3 = await realpath(path3);
+      return real3.startsWith(this.root + sep2) ? path3 : null;
     } catch {
       return null;
     }
@@ -9736,8 +9744,8 @@ var SpotifyHub = class {
     };
   }
   async search(query, limit) {
-    const n = Math.max(1, Math.min(50, Math.floor(limit)));
-    const j = await this.api(`/v1/search?${new URLSearchParams({ q: query.slice(0, 200), type: "track", limit: String(n) })}`);
+    const n2 = Math.max(1, Math.min(50, Math.floor(limit)));
+    const j = await this.api(`/v1/search?${new URLSearchParams({ q: query.slice(0, 200), type: "track", limit: String(n2) })}`);
     return (j?.tracks?.items ?? []).flatMap((t) => this.of(t) ?? []);
   }
   async playlists(limit) {
@@ -9757,12 +9765,12 @@ var SpotifyHub = class {
 };
 
 // ../server/src/alexa/fast.ts
-var rupees = (n, lang, o = {}) => {
+var rupees = (n2, lang, o = {}) => {
   const word2 = o.currencyName ?? "rupees";
   const spoken = lang === "hi" && word2 === "rupees" ? "\u0930\u0941\u092A\u092F\u0947" : word2;
-  return `${formatMoney(Math.abs(n), { symbol: "", locale: (o.money ?? DEFAULT_MONEY).locale }).replace(/[.,]00$/, "")} ${spoken}`;
+  return `${formatMoney(Math.abs(n2), { symbol: "", locale: (o.money ?? DEFAULT_MONEY).locale }).replace(/[.,]00$/, "")} ${spoken}`;
 };
-var pct = (n) => String(Math.round(Math.abs(n) * 100) / 100);
+var pct = (n2) => String(Math.round(Math.abs(n2) * 100) / 100);
 function portfolioSpeech(s, lang, o = {}) {
   if (s.value === 0 && s.invested === 0) return lang === "hi" ? "\u0906\u092A\u0915\u0947 \u0916\u093E\u0924\u0947 \u092E\u0947\u0902 \u0905\u092D\u0940 \u0915\u094B\u0908 \u0939\u094B\u0932\u094D\u0921\u093F\u0902\u0917 \u0928\u0939\u0940\u0902 \u0939\u0948\u0964" : "You have no holdings right now.";
   const up = s.dayChange >= 0;
@@ -9799,7 +9807,7 @@ var BrokerError = class extends Error {
 // ../server/src/brokers/portfolio.ts
 var MOVERS = 3;
 var TOP = 5;
-var r2 = (n) => Number.isFinite(n) ? Math.round((n + Number.EPSILON) * 100) / 100 : 0;
+var r2 = (n2) => Number.isFinite(n2) ? Math.round((n2 + Number.EPSILON) * 100) / 100 : 0;
 function summarize(holdings) {
   let value = 0;
   let invested = 0;
@@ -9871,7 +9879,7 @@ async function section(supported, read) {
 }
 
 // ../server/src/brokers/report.ts
-var signedMoney = (n, m) => n > 4e-3 ? `+${formatMoney(n, m)}` : formatMoney(n, m);
+var signedMoney = (n2, m) => n2 > 4e-3 ? `+${formatMoney(n2, m)}` : formatMoney(n2, m);
 var signedPct = (p) => {
   const x = Number.isFinite(p) ? p : 0;
   const text3 = Math.abs(x).toFixed(2);
@@ -9880,7 +9888,7 @@ var signedPct = (p) => {
 var pct1 = (p) => Math.abs(p).toFixed(1);
 var TITLE = { morning: "Morning report", close: "Market close report", custom: "Portfolio report" };
 var WHY2 = { rate: "rate limit", session: "login expired", network: "network problem", auth: "login problem" };
-var missing = (label3, s) => `${label3}: not available (${WHY2[s.kind] ?? s.error.slice(0, 60)})`;
+var missing = (label4, s) => `${label4}: not available (${WHY2[s.kind] ?? s.error.slice(0, 60)})`;
 var DEFAULT_REPORT_OPTIONS = { money: DEFAULT_MONEY, concentrationPct: 30, bigDropPct: 5 };
 function title(kind, broker, now, zone) {
   const parts = Object.fromEntries(
@@ -9892,8 +9900,8 @@ var dayMovePct = (h) => h.closePrice > 0 ? (h.lastPrice - h.closePrice) / h.clos
 function buildReport(input) {
   const { snapshot: snap, caps } = input;
   const o = input.options ?? DEFAULT_REPORT_OPTIONS;
-  const fmt = (n) => formatMoney(n, o.money);
-  const signed = (n) => signedMoney(n, o.money);
+  const fmt = (n2) => formatMoney(n2, o.money);
+  const signed = (n2) => signedMoney(n2, o.money);
   const out = [title(input.kind, input.broker, input.now, input.zone ?? "Asia/Kolkata"), ""];
   if (caps.holdings) {
     if (!snap.holdings.ok) out.push(missing("Holdings", snap.holdings));
@@ -10028,10 +10036,10 @@ var ReportSchedules = class {
   }
   /** Counts one try for this schedule on this local day and returns how many there have been today (including this one). */
   noteAttempt(id2, day) {
-    const row = this.db.prepare("select attempt_day d, attempts n from report_schedules where id = ?").get(id2);
-    const n = row && row.d === day ? row.n + 1 : 1;
-    this.db.prepare("update report_schedules set attempt_day = ?, attempts = ? where id = ?").run(day, n, id2);
-    return n;
+    const row2 = this.db.prepare("select attempt_day d, attempts n from report_schedules where id = ?").get(id2);
+    const n2 = row2 && row2.d === day ? row2.n + 1 : 1;
+    this.db.prepare("update report_schedules set attempt_day = ?, attempts = ? where id = ?").run(day, n2, id2);
+    return n2;
   }
 };
 
@@ -10113,8 +10121,8 @@ function nextSixIst(now) {
   return today > now ? today : today + DAY_MS;
 }
 var num2 = (v) => {
-  const n = Number(v ?? 0);
-  return Number.isFinite(n) ? n : 0;
+  const n2 = Number(v ?? 0);
+  return Number.isFinite(n2) ? n2 : 0;
 };
 var str = (v) => typeof v === "string" ? v : v === void 0 || v === null ? "" : String(v);
 var rows2 = (v) => Array.isArray(v) ? v : [];
@@ -10461,7 +10469,7 @@ var CodeBox = class {
     if (input.code.length > MAX_CODE_CHARS) return { ok: false, error: `The code is too long (the limit is ${MAX_CODE_CHARS} characters).` };
     const extra = Object.entries(input.files ?? {});
     if (extra.length > MAX_EXTRA_FILES) return { ok: false, error: "Too many files for the sandbox." };
-    if (extra.some(([n]) => !/^[A-Za-z0-9_.-]{1,64}$/.test(n) || n.startsWith("..") || Object.values(SETUP).some((s) => s.file === n))) {
+    if (extra.some(([n2]) => !/^[A-Za-z0-9_.-]{1,64}$/.test(n2) || n2.startsWith("..") || Object.values(SETUP).some((s) => s.file === n2))) {
       return { ok: false, error: "That file name is not allowed in the sandbox." };
     }
     if (extra.reduce((sum, [, body]) => sum + body.length, 0) > MAX_EXTRA_FILE_CHARS) return { ok: false, error: "The sandbox files are too large." };
@@ -10608,7 +10616,7 @@ var Memory = class {
 };
 
 // ../server/src/app.ts
-import { dirname as dirname5, extname as extname3, resolve as resolve5 } from "node:path";
+import { dirname as dirname6, extname as extname3, resolve as resolve5 } from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 import { join as join18 } from "node:path";
 
@@ -10796,6 +10804,22 @@ create table report_schedules (
   attempt_day text,
   attempts integer not null default 0
 );
+`
+  },
+  {
+    id: 11,
+    sql: `
+create table usage (
+  id integer primary key autoincrement,
+  at integer not null,
+  day text not null,
+  provider text not null,
+  model text not null,
+  source text not null,
+  input integer not null,
+  output integer not null
+);
+create index usage_day on usage (day);
 `
   }
 ];
@@ -10820,6 +10844,77 @@ function openDb(dataDir) {
   return db;
 }
 
+// ../server/src/usage.ts
+var USAGE_SOURCES = ["voice", "chat", "task", "channel"];
+var DAY_MS2 = 864e5;
+var USAGE_KEEP_DAYS = 400;
+var pad = (n2) => String(n2).padStart(2, "0");
+function localDay2(ms2) {
+  const d = new Date(ms2);
+  return `${d.getFullYear()}-${pad(d.getMonth() + 1)}-${pad(d.getDate())}`;
+}
+var count = (n2) => Number.isFinite(n2) && n2 > 0 ? Math.floor(n2) : 0;
+var label3 = (s, fallback) => {
+  const t = String(s ?? "").trim().slice(0, 80);
+  return /^[\w.:\/@+\- ]+$/.test(t) ? t : fallback;
+};
+function range(days) {
+  if (!Number.isFinite(days)) return 30;
+  return Math.min(366, Math.max(1, Math.floor(days)));
+}
+var UsageLog = class {
+  constructor(db, now = Date.now) {
+    this.db = db;
+    this.now = now;
+  }
+  db;
+  now;
+  record(e) {
+    const input = count(e.input);
+    const output = count(e.output);
+    if (input === 0 && output === 0) return;
+    const at = this.now();
+    const source = USAGE_SOURCES.includes(e.source) ? e.source : "other";
+    this.db.prepare("insert into usage (at, day, provider, model, source, input, output) values (?, ?, ?, ?, ?, ?, ?)").run(at, localDay2(at), label3(e.provider, "unknown"), label3(e.model, "unknown"), source, input, output);
+  }
+  /** The first day (local) that a range of `n` days ending today covers. */
+  since(n2) {
+    return localDay2(this.now() - (n2 - 1) * DAY_MS2);
+  }
+  days(n2) {
+    const r = range(n2);
+    const rows3 = this.db.prepare("select day, sum(input) as input, sum(output) as output, count(*) as turns from usage where day >= ? group by day").all(this.since(r));
+    const by = new Map(rows3.map((x) => [x.day, x]));
+    const out = [];
+    for (let i = r - 1; i >= 0; i--) {
+      const day = localDay2(this.now() - i * DAY_MS2);
+      out.push(by.get(day) ?? { day, input: 0, output: 0, turns: 0 });
+    }
+    return out;
+  }
+  totals(n2) {
+    const r = this.db.prepare("select coalesce(sum(input), 0) as input, coalesce(sum(output), 0) as output, count(*) as turns from usage where day >= ?").get(this.since(range(n2)));
+    return { input: r.input, output: r.output, turns: r.turns };
+  }
+  byModel(n2) {
+    return this.db.prepare("select provider, model, sum(input) as input, sum(output) as output, count(*) as turns from usage where day >= ? group by provider, model order by sum(input) + sum(output) desc, model").all(this.since(range(n2)));
+  }
+  bySource(n2) {
+    return this.db.prepare("select source, sum(input) as input, sum(output) as output, count(*) as turns from usage where day >= ? group by source order by sum(input) + sum(output) desc, source").all(this.since(range(n2)));
+  }
+  summary(n2) {
+    const r = range(n2);
+    return { range: r, days: this.days(r), total: this.totals(r), byModel: this.byModel(r), bySource: this.bySource(r) };
+  }
+  /** Removes rows older than `keepDays` days. Returns how many went. */
+  prune(keepDays) {
+    return this.db.prepare("delete from usage where day < ?").run(this.since(Math.max(1, Math.floor(keepDays)))).changes;
+  }
+  clear() {
+    return this.db.prepare("delete from usage").run().changes;
+  }
+};
+
 // ../server/src/devices.ts
 import { randomUUID as randomUUID5 } from "node:crypto";
 var DeviceHub = class {
@@ -11193,10 +11288,10 @@ function createGateway(deps) {
     const size = stat2.size;
     reply.header("accept-ranges", "bytes").header("x-content-type-options", "nosniff").header("cache-control", "private, max-age=300");
     if (grant.mime === "image/svg+xml") reply.header("content-security-policy", "default-src 'none'; style-src 'unsafe-inline'; sandbox");
-    const range = /^bytes=(\d*)-(\d*)$/.exec(String(req.headers.range ?? ""));
-    if (range && (range[1] || range[2])) {
-      let start2 = range[1] ? Number(range[1]) : Math.max(0, size - Number(range[2]));
-      let end = range[1] && range[2] ? Number(range[2]) : size - 1;
+    const range2 = /^bytes=(\d*)-(\d*)$/.exec(String(req.headers.range ?? ""));
+    if (range2 && (range2[1] || range2[2])) {
+      let start2 = range2[1] ? Number(range2[1]) : Math.max(0, size - Number(range2[2]));
+      let end = range2[1] && range2[2] ? Number(range2[2]) : size - 1;
       end = Math.min(end, size - 1);
       if (!(start2 <= end) || start2 >= size) return reply.code(416).header("content-range", `bytes */${size}`).send();
       start2 = Math.max(0, start2);
@@ -11363,10 +11458,10 @@ function createGateway(deps) {
     if (!info || !info.isFile()) return reply.code(404).send({ error: "The file is gone" });
     const size = info.size;
     reply.header("accept-ranges", "bytes").header("x-content-type-options", "nosniff").header("cache-control", "private, max-age=300");
-    const range = /^bytes=(\d*)-(\d*)$/.exec(String(req.headers.range ?? ""));
-    if (range && (range[1] || range[2])) {
-      let start2 = range[1] ? Number(range[1]) : Math.max(0, size - Number(range[2]));
-      let end = range[1] && range[2] ? Number(range[2]) : size - 1;
+    const range2 = /^bytes=(\d*)-(\d*)$/.exec(String(req.headers.range ?? ""));
+    if (range2 && (range2[1] || range2[2])) {
+      let start2 = range2[1] ? Number(range2[1]) : Math.max(0, size - Number(range2[2]));
+      let end = range2[1] && range2[2] ? Number(range2[2]) : size - 1;
       end = Math.min(end, size - 1);
       if (!(start2 <= end) || start2 >= size) return reply.code(416).header("content-range", `bytes */${size}`).send();
       start2 = Math.max(0, start2);
@@ -11434,10 +11529,10 @@ function createGateway(deps) {
   app.get("/api/music/stream/:ref", { onRequest: musicGuard }, async (req, reply) => {
     const ctl = new AbortController();
     req.raw.on("close", () => ctl.abort());
-    const range = typeof req.headers.range === "string" && /^bytes=\d*-\d*$/.test(req.headers.range) ? req.headers.range : void 0;
+    const range2 = typeof req.headers.range === "string" && /^bytes=\d*-\d*$/.test(req.headers.range) ? req.headers.range : void 0;
     let r;
     try {
-      r = await deps.music.stream(req.params.ref, range, ctl.signal);
+      r = await deps.music.stream(req.params.ref, range2, ctl.signal);
     } catch {
       return reply.code(502).send({ error: "That track could not be played right now." });
     }
@@ -11582,6 +11677,56 @@ function createGateway(deps) {
     if (!deps.video) return reply.code(404).send({ error: "Not found" });
     return deps.video.prepare();
   });
+  const systemWindow = new SlidingWindow(30, 6e4);
+  const systemGuard = async (req, reply) => {
+    const token = req.cookies[COOKIE_NAME];
+    const session = token ? auth.resolveSession(token) : null;
+    if (!session) return reply.code(401).send({ error: "Unauthorized" });
+    if (!systemWindow.allow(String(session.id))) return reply.code(429).header("retry-after", 10).send({ error: "Too many requests" });
+    if (!deps.system) return reply.code(503).send({ error: "Not available" });
+  };
+  const systemError = (reply, e, what) => {
+    if (e instanceof HttpError) return reply.code(e.status).send({ error: e.message });
+    audit.log("owner", "system.failed", { what, message: e.message });
+    return reply.code(500).send({ error: "That did not work. Try again." });
+  };
+  app.get("/api/system", { onRequest: systemGuard }, async () => deps.system.info());
+  app.post("/api/system/update/check", { onRequest: systemGuard }, async (_req, reply) => {
+    try {
+      return await deps.system.check();
+    } catch (e) {
+      return systemError(reply, e, "update.check");
+    }
+  });
+  app.post("/api/system/update/apply", { onRequest: systemGuard }, async (req, reply) => {
+    const body = z10.object({ pin: z10.string().min(1).max(32) }).safeParse(req.body);
+    if (!body.success) return reply.code(400).send({ error: "Enter your PIN" });
+    try {
+      return await deps.system.update(body.data.pin, req.ip);
+    } catch (e) {
+      return systemError(reply, e, "update.apply");
+    }
+  });
+  app.post("/api/system/autostart", { onRequest: systemGuard }, async (req, reply) => {
+    const body = z10.object({ enabled: z10.boolean(), pin: z10.string().min(1).max(32) }).safeParse(req.body);
+    if (!body.success) return reply.code(400).send({ error: "Enter your PIN" });
+    try {
+      return await deps.system.setAutostart(body.data.enabled, body.data.pin, req.ip);
+    } catch (e) {
+      return systemError(reply, e, "autostart");
+    }
+  });
+  const usageGuard = async (req, reply) => {
+    const token = req.cookies[COOKIE_NAME];
+    if (!(token && auth.resolveSession(token))) return reply.code(401).send({ error: "Unauthorized" });
+    if (!deps.usage) return reply.code(503).send({ error: "Not available" });
+  };
+  app.get("/api/usage", { onRequest: usageGuard }, async (req) => deps.usage.summary(Number(req.query.days ?? 30)));
+  app.delete("/api/usage", { onRequest: usageGuard }, async () => {
+    const removed = deps.usage.clear();
+    audit.log("owner", "usage.cleared", { removed });
+    return { removed };
+  });
   const chromeFailures = new SlidingWindow(20, 6e4);
   const chromeWss = new WebSocketServer({ noServer: true, maxPayload: MAX_DEVICE_FRAME_BYTES });
   if (deps.chrome) {
@@ -12041,8 +12186,8 @@ Connection: close\r
 
 // ../server/src/provider/claude.ts
 import Anthropic from "@anthropic-ai/sdk";
-var encodeName = (n) => n.replaceAll(".", "__");
-var decodeName = (n) => n.replaceAll("__", ".");
+var encodeName = (n2) => n2.replaceAll(".", "__");
+var decodeName = (n2) => n2.replaceAll("__", ".");
 var toAnthropicImage = (b) => ({
   type: "image",
   source: { type: "base64", media_type: b.mime, data: b.data }
@@ -12294,7 +12439,7 @@ function readBody(req) {
 var LIMIT = /\b(?:hit|reached)\s+(?:your\s+|the\s+)?(?:[\w-]+\s+)?(?:usage\s+)?limit\b|\busage\s+limit\b|\b(?:\d+-hour|weekly|daily|monthly)\s+limit\s+reached\b|\bhit your (?:weekly|daily|monthly|usage|\d+-hour) limit\b/i;
 var DEFAULT_BACKOFF_MS = 15 * 6e4;
 var MIN_BACKOFF_MS = 3e4;
-var DAY_MS2 = 864e5;
+var DAY_MS3 = 864e5;
 function isUsageLimit(text3) {
   return LIMIT.test(text3);
 }
@@ -12319,7 +12464,7 @@ function parseResetDelayMs(message, now = /* @__PURE__ */ new Date()) {
     const zoneNow = Date.UTC(get("year"), get("month") - 1, get("day"), get("hour") % 24, get("minute"), get("second"));
     const offset = zoneNow - now.getTime();
     let reset2 = Date.UTC(get("year"), get("month") - 1, get("day"), hour, Number(min), 0) - offset;
-    if (reset2 <= now.getTime()) reset2 += DAY_MS2;
+    if (reset2 <= now.getTime()) reset2 += DAY_MS3;
     const delay = reset2 - now.getTime();
     return Number.isFinite(delay) && delay > 0 ? delay : void 0;
   } catch {
@@ -12999,7 +13144,8 @@ var SettingsPatch = z11.object({
     sttModel: z11.string().trim().min(1).max(80).regex(/^[\w./-]+$/),
     duck: z11.boolean(),
     duckPercent: z11.number().int().min(0).max(100)
-  }).partial().strict()
+  }).partial().strict(),
+  updates: z11.object({ auto: z11.boolean() }).partial().strict()
 }).partial().strict();
 function settingsView(c) {
   return {
@@ -13062,7 +13208,8 @@ function settingsView(c) {
       marathiVoice: c.voice.marathiVoice,
       duck: c.voice.duck,
       duckPercent: c.voice.duckPercent
-    }
+    },
+    updates: { auto: c.updates.auto }
   };
 }
 var SettingsError = class extends Error {
@@ -13074,6 +13221,7 @@ function refuseForAgent(raw) {
   if ("brokers" in r || "trading" in r) throw new SettingsError("Broker accounts and the trading level can only be changed by the owner on the settings screen.");
   if ("music" in r || "hud" in r) throw new SettingsError("The music folder and the screen widgets can only be changed by the owner on the settings screen.");
   if ("video" in r) throw new SettingsError("Video settings (which programs run, where videos play, which sites) can only be changed by the owner on the settings screen.");
+  if ("updates" in r) throw new SettingsError("Whether Friend updates itself can only be changed by the owner on the settings screen.");
   if ("alexa" in r) throw new SettingsError("Alexa settings can only be changed by the owner on the settings screen.");
   if ("channels" in r) throw new SettingsError("Messaging channels can only be set up by the owner on the settings screen.");
   if ("approvals" in r) throw new SettingsError("How much Friend asks before acting can only be changed by the owner on the settings screen.");
@@ -13218,6 +13366,7 @@ function applySettings(config, raw) {
     if (apiKey) config.openai.apiKey = apiKey;
   }
   if (p.claudeCode) Object.assign(config.claudeCode, p.claudeCode);
+  if (p.updates) Object.assign(config.updates, p.updates);
   if (p.voice) {
     const safe = next.voice;
     for (const k of Object.keys(p.voice)) config.voice[k] = safe[k];
@@ -13235,8 +13384,8 @@ function clientLook(l) {
 
 // ../server/src/provider/ollama.ts
 import { Agent as Agent2, fetch as undiciFetch } from "undici";
-var encodeName2 = (n) => n.replaceAll(".", "__");
-var decodeName2 = (n) => n.replaceAll("__", ".");
+var encodeName2 = (n2) => n2.replaceAll(".", "__");
+var decodeName2 = (n2) => n2.replaceAll("__", ".");
 function toOllamaMessages(system, messages, vision) {
   const out = [{ role: "system", content: system }];
   const nameById = /* @__PURE__ */ new Map();
@@ -13406,8 +13555,8 @@ var OllamaProvider = class {
 
 // ../server/src/provider/openai.ts
 import { Agent as Agent3, fetch as undiciFetch2 } from "undici";
-var encodeName3 = (n) => n.replaceAll(".", "__");
-var decodeName3 = (n) => n.replaceAll("__", ".");
+var encodeName3 = (n2) => n2.replaceAll(".", "__");
+var decodeName3 = (n2) => n2.replaceAll("__", ".");
 function toOpenAiMessages(system, messages, vision) {
   const out = [{ role: "system", content: system }];
   for (const m of messages) {
@@ -13689,6 +13838,368 @@ var DuckController = class {
   }
 };
 
+// ../server/src/system/autostart.ts
+import { spawn as spawn6 } from "node:child_process";
+import { existsSync as existsSync16, mkdirSync as mkdirSync11, readFileSync as readFileSync10, rmSync as rmSync9, writeFileSync as writeFileSync10 } from "node:fs";
+import { homedir as homedir4 } from "node:os";
+import { dirname as dirname4, posix as posix2, win32 as win322 } from "node:path";
+var RUN_KEY = "HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Run";
+var NAME2 = "Friend";
+var LABEL = "com.friend.assistant";
+var UNIT = "friend.service";
+var quoted = (s) => `"${s}"`;
+function vbsLauncher(self) {
+  const cmd = `${quoted(self.node)} ${quoted(self.script)} daemon start`;
+  const inVbs = cmd.replace(/"/g, '""');
+  return [`' Starts Friend in the background when you sign in. Made by: friend autostart on`, `CreateObject("WScript.Shell").Run "${inVbs}", 0, False`, ""].join("\r\n");
+}
+var xml = (s) => s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
+function plistFor(self, o) {
+  const log = `${o.dataDir}/friend-autostart.log`;
+  return [
+    `<?xml version="1.0" encoding="UTF-8"?>`,
+    `<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">`,
+    `<plist version="1.0">`,
+    `<dict>`,
+    `  <key>Label</key><string>${LABEL}</string>`,
+    `  <key>ProgramArguments</key>`,
+    `  <array>`,
+    `    <string>${xml(self.node)}</string>`,
+    `    <string>${xml(self.script)}</string>`,
+    `    <string>daemon</string>`,
+    `    <string>start</string>`,
+    `  </array>`,
+    `  <key>RunAtLoad</key>`,
+    `  <true/>`,
+    `  <key>EnvironmentVariables</key>`,
+    `  <dict><key>PATH</key><string>${xml(o.path)}</string></dict>`,
+    `  <key>StandardOutPath</key><string>${xml(log)}</string>`,
+    `  <key>StandardErrorPath</key><string>${xml(log)}</string>`,
+    `</dict>`,
+    `</plist>`,
+    ""
+  ].join("\n");
+}
+var unitWord = (s) => `"${s.replace(/\\/g, "\\\\").replace(/"/g, '\\"').replace(/%/g, "%%")}"`;
+function systemdUnit(self, o) {
+  return [
+    "[Unit]",
+    "Description=Friend assistant",
+    "After=network-online.target",
+    "",
+    "[Service]",
+    "Type=oneshot",
+    "RemainAfterExit=yes",
+    `Environment=${unitWord(`PATH=${o.path}`)}`,
+    `ExecStart=${unitWord(self.node)} ${unitWord(self.script)} daemon start`,
+    `ExecStop=${unitWord(self.node)} ${unitWord(self.script)} daemon stop`,
+    "",
+    "[Install]",
+    "WantedBy=default.target",
+    ""
+  ].join("\n");
+}
+var desktopWord = (s) => `"${s.replace(/(["`$\\])/g, "\\$1")}"`;
+function desktopEntry(self) {
+  return ["[Desktop Entry]", "Type=Application", "Name=Friend", "Comment=Starts Friend in the background", `Exec=${desktopWord(self.node)} ${desktopWord(self.script)} daemon start`, "Terminal=false", "X-GNOME-Autostart-enabled=true", ""].join("\n");
+}
+var Autostart = class {
+  constructor(d, self) {
+    this.d = d;
+    this.self = self;
+  }
+  d;
+  self;
+  get win() {
+    return this.d.platform === "win32";
+  }
+  get mac() {
+    return this.d.platform === "darwin";
+  }
+  get linux() {
+    return this.d.platform === "linux";
+  }
+  p() {
+    return this.win ? win322 : posix2;
+  }
+  vbs() {
+    return win322.join(this.d.dataDir, "autostart.vbs");
+  }
+  plist() {
+    return posix2.join(this.d.home, "Library", "LaunchAgents", `${LABEL}.plist`);
+  }
+  configDir() {
+    return this.d.configHome || posix2.join(this.d.home, ".config");
+  }
+  unitFile() {
+    return posix2.join(this.configDir(), "systemd", "user", UNIT);
+  }
+  desktopFile() {
+    return posix2.join(this.configDir(), "autostart", "friend.desktop");
+  }
+  async hasSystemd() {
+    return (await this.d.run("systemctl", ["--user", "--version"])).code === 0;
+  }
+  async status() {
+    if (this.win) return { supported: true, enabled: (await this.d.run("reg", ["query", RUN_KEY, "/v", NAME2])).code === 0, kind: "registry" };
+    if (this.mac) return { supported: true, enabled: this.d.exists(this.plist()), kind: "launchd" };
+    if (this.linux) {
+      if (await this.hasSystemd()) {
+        const r = await this.d.run("systemctl", ["--user", "is-enabled", UNIT]);
+        if (r.code === 0 && /enabled/.test(r.stdout)) return { supported: true, enabled: true, kind: "systemd" };
+      }
+      return { supported: true, enabled: this.d.exists(this.desktopFile()), kind: this.d.exists(this.desktopFile()) ? "xdg" : "none" };
+    }
+    return { supported: false, enabled: false, kind: "none" };
+  }
+  async enable() {
+    const self = this.self();
+    if (!self.node || !self.script) return { ok: false, message: "Friend does not know which program to start. Run it with the friend command and try again." };
+    if (this.win) return this.enableWindows(self);
+    if (this.mac) return this.enableMac(self);
+    if (this.linux) return this.enableLinux(self);
+    return { ok: false, message: "Starting Friend by itself is not supported on this kind of computer." };
+  }
+  async disable() {
+    if (this.win) {
+      await this.d.run("reg", ["delete", RUN_KEY, "/v", NAME2, "/f"]);
+      this.d.remove(this.vbs());
+    } else if (this.mac) {
+      await this.d.run("launchctl", ["bootout", `gui/${this.d.uid}`, this.plist()]);
+      this.d.remove(this.plist());
+    } else if (this.linux) {
+      if (await this.hasSystemd()) {
+        await this.d.run("systemctl", ["--user", "disable", UNIT]);
+        this.d.remove(this.unitFile());
+        await this.d.run("systemctl", ["--user", "daemon-reload"]);
+      }
+      this.d.remove(this.desktopFile());
+    } else return { ok: false, message: "Starting Friend by itself is not supported on this kind of computer." };
+    return { ok: true, message: "Friend will no longer start by itself when you sign in." };
+  }
+  /** Writes the setup again with the program's current place, when it is on. Used after an upgrade. */
+  async refresh() {
+    if ((await this.status()).enabled) await this.enable();
+  }
+  async enableWindows(self) {
+    this.d.write(this.vbs(), vbsLauncher(self));
+    const r = await this.d.run("reg", ["add", RUN_KEY, "/v", NAME2, "/t", "REG_SZ", "/d", `wscript.exe ${quoted(this.vbs())}`, "/f"]);
+    if (r.code !== 0) return { ok: false, message: "Could not add Friend to the programs that start when you sign in." };
+    return { ok: true, message: "Friend will start by itself when you sign in to this computer." };
+  }
+  async enableMac(self) {
+    this.d.write(this.plist(), plistFor(self, { dataDir: this.d.dataDir, path: this.d.path }));
+    await this.d.run("launchctl", ["bootout", `gui/${this.d.uid}`, this.plist()]);
+    let r = await this.d.run("launchctl", ["bootstrap", `gui/${this.d.uid}`, this.plist()]);
+    if (r.code !== 0) r = await this.d.run("launchctl", ["load", "-w", this.plist()]);
+    if (r.code !== 0) return { ok: false, message: "Could not switch the launch agent on. It will still be used the next time you sign in." };
+    return { ok: true, message: "Friend will start by itself when you sign in to this computer." };
+  }
+  async enableLinux(self) {
+    if (await this.hasSystemd()) {
+      this.d.write(this.unitFile(), systemdUnit(self, { path: this.d.path }));
+      await this.d.run("systemctl", ["--user", "daemon-reload"]);
+      const r = await this.d.run("systemctl", ["--user", "enable", UNIT]);
+      if (r.code === 0) {
+        this.d.remove(this.desktopFile());
+        return { ok: true, message: "Friend will start by itself when you sign in to this computer." };
+      }
+    }
+    this.d.write(this.desktopFile(), desktopEntry(self));
+    return { ok: true, message: "Friend will start by itself when you sign in to this computer." };
+  }
+};
+function realAutostartDeps(dataDir) {
+  return {
+    platform: process.platform,
+    home: homedir4(),
+    dataDir,
+    uid: typeof process.getuid === "function" ? process.getuid() : 0,
+    path: process.env.PATH ?? "",
+    ...process.env.XDG_CONFIG_HOME ? { configHome: process.env.XDG_CONFIG_HOME } : {},
+    exists: (p) => existsSync16(p),
+    read: (p) => {
+      try {
+        return readFileSync10(p, "utf8");
+      } catch {
+        return null;
+      }
+    },
+    write: (p, text3) => {
+      mkdirSync11(dirname4(p), { recursive: true });
+      writeFileSync10(p, text3);
+    },
+    remove: (p) => rmSync9(p, { force: true }),
+    run: (cmd, args) => new Promise((resolve13) => {
+      let out = "";
+      const child = spawn6(cmd, args, { stdio: ["ignore", "pipe", "pipe"], windowsHide: true });
+      child.stdout?.on("data", (d) => out += d.toString());
+      child.stderr?.on("data", (d) => out += d.toString());
+      child.on("error", () => resolve13({ code: 127, stdout: out }));
+      child.on("close", (code) => resolve13({ code: code ?? 1, stdout: out }));
+    })
+  };
+}
+function currentSelf() {
+  const script = process.argv[1] ?? "";
+  return { node: process.execPath, script: /\.(mjs|js|cjs)$/i.test(script) ? script : "" };
+}
+
+// ../server/src/system/npm.ts
+import { spawn as spawn7 } from "node:child_process";
+var PACKAGE = "friend-assistant";
+var runningVersion = () => true ? "0.1.46" : "development";
+async function npmLatest(fetchFn = fetch, timeoutMs = 1e4) {
+  try {
+    const res = await fetchFn(`https://registry.npmjs.org/${PACKAGE}/latest`, { headers: { accept: "application/json" }, signal: AbortSignal.timeout(timeoutMs) });
+    if (!res.ok) return null;
+    const v = (await res.json()).version;
+    return typeof v === "string" && /^\d+\.\d+\.\d+$/.test(v) ? v : null;
+  } catch {
+    return null;
+  }
+}
+var ps = (s) => `'${s.replace(/'/g, "''")}'`;
+function spawnUpgrade(self, platform = process.platform) {
+  if (!self.node || !self.script) return false;
+  try {
+    const child = platform === "win32" ? spawn7("powershell.exe", ["-NoProfile", "-NonInteractive", "-WindowStyle", "Hidden", "-Command", `Start-Process -WindowStyle Hidden -FilePath ${ps(self.node)} -ArgumentList ${ps(`"${self.script}"`)},'upgrade','--auto'`], { detached: true, stdio: "ignore", windowsHide: true }) : spawn7(self.node, [self.script, "upgrade", "--auto"], { detached: true, stdio: "ignore" });
+    child.on("error", () => {
+    });
+    child.unref();
+    return child.pid !== void 0;
+  } catch {
+    return false;
+  }
+}
+
+// ../server/src/system/updater.ts
+function isNewerVersion(a, b) {
+  if (!/^\d/.test(a) || !/^\d/.test(b)) return false;
+  const n2 = (v) => v.split(/[.-]/).slice(0, 3).map((x2) => Number(x2) || 0);
+  const [x, y] = [n2(a), n2(b)];
+  for (let i = 0; i < 3; i++) if ((x[i] ?? 0) !== (y[i] ?? 0)) return (x[i] ?? 0) > (y[i] ?? 0);
+  return false;
+}
+var Updater = class {
+  constructor(d, t = {}) {
+    this.d = d;
+    this.firstMs = t.firstMs ?? 2e4;
+    this.everyMs = t.everyMs ?? 6 * 36e5;
+    this.retryMs = t.retryMs ?? 5 * 6e4;
+  }
+  d;
+  latest = null;
+  checkedAt = null;
+  applying = false;
+  error = null;
+  notified = null;
+  inflight = null;
+  first = null;
+  every = null;
+  retry = null;
+  firstMs;
+  everyMs;
+  retryMs;
+  state() {
+    const current = this.d.current();
+    return { current, latest: this.latest, checkedAt: this.checkedAt, available: this.latest !== null && isNewerVersion(this.latest, current), applying: this.applying, canApply: this.d.canApply(), error: this.error };
+  }
+  start() {
+    this.stop();
+    this.first = setTimeout(() => {
+      this.first = null;
+      void this.check();
+      this.every = setInterval(() => void this.check(), this.everyMs);
+      this.every.unref?.();
+    }, this.firstMs);
+    this.first.unref?.();
+  }
+  stop() {
+    if (this.first) clearTimeout(this.first);
+    if (this.every) clearInterval(this.every);
+    if (this.retry) clearTimeout(this.retry);
+    this.first = this.every = this.retry = null;
+  }
+  /** Asks npm for the newest version (one question at a time), tells the owner, and updates when that is switched on. */
+  check() {
+    this.inflight ??= (async () => {
+      try {
+        const latest = await this.d.latest();
+        this.checkedAt = Date.now();
+        if (latest) {
+          this.latest = latest;
+          this.error = null;
+          await this.consider();
+        } else {
+          this.error = "Could not ask npm for the newest version. Check the internet connection.";
+        }
+      } catch {
+        this.error = "Could not ask npm for the newest version. Check the internet connection.";
+      } finally {
+        this.inflight = null;
+      }
+      return this.state();
+    })();
+    return this.inflight;
+  }
+  /** The owner pressed Update now: installs even when automatic updates are off, but never in the middle of an answer. */
+  async applyNow() {
+    if (this.applying) return { ok: true, message: "The update is already running. Reload this page in a minute." };
+    if (!this.latest) await this.check();
+    const s = this.state();
+    if (!s.latest) return { ok: false, message: s.error ?? "Could not ask npm for the newest version." };
+    if (this.applying) return { ok: true, message: "The update is already running. Reload this page in a minute." };
+    if (!s.available) return { ok: false, message: `Friend is up to date (${s.current}).` };
+    if (!s.canApply) return { ok: false, message: "This Friend is running in a terminal and cannot restart itself. Close it and run: friend upgrade" };
+    if (this.d.busy()) return { ok: false, message: "Friend is busy with a request. Try again in a moment." };
+    return await this.begin(s.latest) ? { ok: true, message: `Updating to ${s.latest}. Friend restarts in a moment: reload this page afterwards.` } : { ok: false, message: this.error ?? "Could not start the update." };
+  }
+  async consider() {
+    const s = this.state();
+    if (!s.available || !s.latest) return;
+    const canApply = this.d.canApply();
+    if (this.notified !== s.latest) {
+      this.notified = s.latest;
+      this.d.notify(
+        canApply ? this.d.auto() ? `Friend ${s.latest} is available. It will update by itself when Friend is not busy.` : `Friend ${s.latest} is available. Turn on automatic updates in Settings, or press Update now there.` : `Friend ${s.latest} is available. Close this Friend and run: friend upgrade`
+      );
+    }
+    if (this.d.auto() && canApply) await this.maybeApply();
+  }
+  async maybeApply() {
+    const s = this.state();
+    if (this.applying || !s.available || !s.latest) return;
+    if (this.d.busy()) {
+      if (!this.retry) {
+        this.retry = setTimeout(() => {
+          this.retry = null;
+          void this.maybeApply();
+        }, this.retryMs);
+        this.retry.unref?.();
+      }
+      return;
+    }
+    await this.begin(s.latest);
+  }
+  async begin(version) {
+    this.applying = true;
+    this.error = null;
+    this.d.notify(`Updating Friend to ${version}. It restarts in a moment: reload this page afterwards.`);
+    let ok = false;
+    try {
+      ok = await this.d.apply(version);
+    } catch {
+      ok = false;
+    }
+    if (!ok) {
+      this.applying = false;
+      this.error = "Could not start the update.";
+    }
+    return ok;
+  }
+};
+
 // ../server/src/voice/challenge.ts
 import { randomUUID as randomUUID6 } from "node:crypto";
 var Challenges = class {
@@ -13750,20 +14261,20 @@ var Challenges = class {
 
 // ../server/src/voice/crypto.ts
 import { createCipheriv, createDecipheriv, randomBytes as randomBytes9 } from "node:crypto";
-import { chmodSync as chmodSync9, existsSync as existsSync16, mkdirSync as mkdirSync11, readFileSync as readFileSync10, writeFileSync as writeFileSync10 } from "node:fs";
-import { dirname as dirname4 } from "node:path";
+import { chmodSync as chmodSync9, existsSync as existsSync17, mkdirSync as mkdirSync12, readFileSync as readFileSync11, writeFileSync as writeFileSync11 } from "node:fs";
+import { dirname as dirname5 } from "node:path";
 var KEY_BYTES = 32;
 var IV_BYTES = 12;
 var TAG_BYTES = 16;
 function loadOrCreateKey(path3) {
-  if (existsSync16(path3)) {
-    const key2 = readFileSync10(path3);
+  if (existsSync17(path3)) {
+    const key2 = readFileSync11(path3);
     if (key2.length !== KEY_BYTES) throw new Error(`invalid voice key file (expected ${KEY_BYTES} bytes): ${path3}`);
     return key2;
   }
-  mkdirSync11(dirname4(path3), { recursive: true });
+  mkdirSync12(dirname5(path3), { recursive: true });
   const key = randomBytes9(KEY_BYTES);
-  writeFileSync10(path3, key, { mode: 384 });
+  writeFileSync11(path3, key, { mode: 384 });
   try {
     chmodSync9(path3, 384);
   } catch {
@@ -13852,9 +14363,9 @@ var Voiceprint = class {
   }
   /** Similarity of a new voiceprint to the owner's, or null when nobody is enrolled. Throws on a wrong key. */
   score(embedding) {
-    const row = this.db.prepare("select centroid_enc e, dim from voiceprint where id = 1").get();
-    if (!row) return null;
-    const raw = decrypt(this.key, row.e);
+    const row2 = this.db.prepare("select centroid_enc e, dim from voiceprint where id = 1").get();
+    if (!row2) return null;
+    const raw = decrypt(this.key, row2.e);
     const stored = Array.from(new Float32Array(raw.buffer, raw.byteOffset, raw.byteLength / 4));
     return cosine(stored, embedding);
   }
@@ -13895,10 +14406,10 @@ var Enrollment = class {
     if (!checkConsistency(this.samples, CONSISTENT).ok) {
       throw new EnrollError("The recordings do not agree with each other. They must all be the same person; start over.");
     }
-    const n = this.samples.length;
+    const n2 = this.samples.length;
     this.voiceprint.enroll(this.samples, this.model);
     this.samples = [];
-    return { samples: n };
+    return { samples: n2 };
   }
   cancel() {
     this.samples = [];
@@ -13914,17 +14425,17 @@ var GREETINGS = /* @__PURE__ */ new Set(["hey", "hay", "hi", "hello", "hellow",
 var WORD = /[\p{L}\p{M}\p{N}'’]+/gu;
 var GAP = /^[\s,.:;!?…\-–—]+/u;
 function distance(a, b) {
-  const row = Array.from({ length: b.length + 1 }, (_, i) => i);
+  const row2 = Array.from({ length: b.length + 1 }, (_, i) => i);
   for (let i = 1; i <= a.length; i++) {
-    let prev = row[0];
-    row[0] = i;
+    let prev = row2[0];
+    row2[0] = i;
     for (let j = 1; j <= b.length; j++) {
-      const keep = row[j];
-      row[j] = Math.min(row[j] + 1, row[j - 1] + 1, prev + (a[i - 1] === b[j - 1] ? 0 : 1));
+      const keep = row2[j];
+      row2[j] = Math.min(row2[j] + 1, row2[j - 1] + 1, prev + (a[i - 1] === b[j - 1] ? 0 : 1));
       prev = keep;
     }
   }
-  return row[b.length];
+  return row2[b.length];
 }
 var sameWord = (heard, name) => heard === name || name.length >= 4 && distance(heard, name) <= 1;
 function matchWake(text3, name) {
@@ -14295,6 +14806,8 @@ async function createApp(opts) {
   const config = { ...loadConfig(opts.dataDir), ...opts.config };
   const db = openDb(opts.dataDir);
   const audit = new Audit(db);
+  const usageLog = new UsageLog(db);
+  usageLog.prune(USAGE_KEEP_DAYS);
   const auth = new Auth(db, audit);
   const policy = new PolicyEngine(db, config);
   const devices = new DeviceHub();
@@ -14314,6 +14827,13 @@ async function createApp(opts) {
     if (config.provider === "openai") return new OpenAiProvider({ ...config.openai });
     return config.apiKey ? new ClaudeProvider({ apiKey: config.apiKey, model: config.model }) : new MissingKeyProvider();
   };
+  const modelInUse = () => {
+    if (opts.provider) return { provider: "custom", model: "custom" };
+    if (config.provider === "claude-code") return { provider: "claude-code", model: config.claudeCode.model };
+    if (config.provider === "ollama") return { provider: "ollama", model: config.ollama.model };
+    if (config.provider === "openai") return { provider: "openai", model: config.openai.model };
+    return { provider: "claude", model: config.model };
+  };
   const switchable = opts.provider ? null : new SwitchableProvider(makeProvider());
   const provider = opts.provider ?? switchable;
   const camera = new CameraBroker(opts.cameraTimeoutMs);
@@ -14345,7 +14865,7 @@ async function createApp(opts) {
         if (m.type === "caption.delta") reply += m.text;
         else if (m.type === "caption.end") reply += "\n";
       };
-      await agent.runTurn(text3, { trust: "owner", emit, ip: `channel:${via}` });
+      await agent.runTurn(text3, { trust: "owner", emit, ip: `channel:${via}`, source: "channel" });
       return reply.trim();
     }
   });
@@ -14651,6 +15171,7 @@ async function createApp(opts) {
     mcp: hub,
     admin,
     provider,
+    usage: (e) => usageLog.record({ ...e, ...modelInUse() }),
     policy,
     approvals,
     devices,
@@ -14693,7 +15214,7 @@ async function createApp(opts) {
     store: { config: () => config.alexa, update: (fn) => void changeAlexaConfig(fn) },
     verify: { fetchCert: opts.alexaFetchCert ?? fetchAmazonCert, roots: opts.alexaRoots },
     clock: Date.now,
-    agent: { isBusy: () => agent.isBusy(), runTurn: (text3, ctx) => agent.runTurn(text3, ctx) },
+    agent: { isBusy: () => agent.isBusy(), runTurn: (text3, ctx) => agent.runTurn(text3, { source: "task", ...ctx }) },
     broadcast,
     screenOpen: () => clients.size > 0,
     fast: {
@@ -14814,7 +15335,7 @@ async function createApp(opts) {
       if (m.type === "caption.delta" && epoch === lockEpoch) talk?.push(m.text);
       broadcast(m);
     };
-    await agent.runTurn(text3, { trust, emit, ip, ...person ? { person } : {}, ...spoken ? { spoken } : {} });
+    await agent.runTurn(text3, { trust, emit, ip, source: "voice", ...person ? { person } : {}, ...spoken ? { spoken } : {} });
     await talk?.end();
   }
   async function confirmChallenge(id2, pin, conn) {
@@ -14848,7 +15369,7 @@ async function createApp(opts) {
     broadcast({ type: "voice.heard", text: held.text, trust: "owner" });
     await runVoiceTurn(held.text, conn.ip, epoch);
   }
-  const here2 = dirname5(fileURLToPath2(import.meta.url));
+  const here2 = dirname6(fileURLToPath2(import.meta.url));
   const catalogDir = opts.pluginCatalogDir ?? firstExistingDir([process.env.FRIEND_PLUGIN_CATALOG, resolve5(here2, "plugins"), resolve5(here2, "../../..", "plugins")]) ?? resolve5(here2, "plugins");
   const pluginsApi = {
     list: () => {
@@ -15020,11 +15541,43 @@ async function createApp(opts) {
       });
     }
   });
+  const self = opts.system?.self ?? currentSelf();
+  const autostart = new Autostart(opts.system?.autostartDeps ?? realAutostartDeps(opts.dataDir), () => self);
+  const updater = new Updater(
+    {
+      current: opts.system?.current ?? runningVersion,
+      latest: opts.system?.latest ?? (() => npmLatest()),
+      auto: () => config.updates.auto,
+      busy: () => agent.isBusy(),
+      canApply: opts.system?.canApply ?? (() => process.env.FRIEND_DAEMON === "1"),
+      // only Friend in the background can replace itself
+      apply: opts.system?.apply ?? (() => spawnUpgrade(self)),
+      notify: (text3) => broadcast({ type: "alert", level: "info", text: text3 })
+    },
+    opts.system?.times
+  );
+  const systemApi = {
+    info: async () => ({ version: updater.state().current, update: updater.state(), autostart: await autostart.status(), auto: config.updates.auto }),
+    check: () => updater.check(),
+    update: async (pin, ip) => {
+      await requirePin(pin, ip);
+      audit.log("owner", "system.update_now", { ip });
+      return updater.applyNow();
+    },
+    setAutostart: async (enabled, pin, ip) => {
+      await requirePin(pin, ip);
+      audit.log("owner", enabled ? "system.autostart_on" : "system.autostart_off", { ip });
+      const r = enabled ? await autostart.enable() : await autostart.disable();
+      return { ...r, status: await autostart.status() };
+    }
+  };
   const tls = config.https ? await ensureTlsCert(opts.dataDir, [...config.allowedHosts, ...config.publicUrl ? [new URL(config.publicUrl).hostname] : []]) : void 0;
   const gateway = createGateway({
     ...tls ? { tls } : {},
     connectors: connectorsApi,
     chrome: chromeRemoteApi,
+    system: systemApi,
+    usage: usageLog,
     video: {
       stream: (id2) => videoHub.streamOf(id2),
       status: async () => videoHub.status() ?? await videoHub.refresh(),
@@ -15340,7 +15893,7 @@ async function createApp(opts) {
         audit.log("owner", "music.soundcloud.disconnect", { ip });
         return { ok: true };
       },
-      stream: async (ref2, range, signal) => {
+      stream: async (ref2, range2, signal) => {
         const p = parseRef(ref2);
         const svc = p?.source === "soundcloud" ? soundcloudHub : p?.source === "audius" ? audiusHub : null;
         if (!p || !svc) return { ok: false, status: 404, error: "Not found" };
@@ -15348,7 +15901,7 @@ async function createApp(opts) {
         if (!st.connected) return { ok: false, status: 404, error: st.needs ?? "That music source is not connected." };
         const s = await svc.streamOf(p.id);
         if (!s.ok) return { ok: false, status: 404, error: s.error };
-        const a = await svc.fetchAudio(s.url, range, signal);
+        const a = await svc.fetchAudio(s.url, range2, signal);
         if (!a.ok) return { ok: false, status: 502, error: a.error };
         const h = a.res.headers;
         const type = h.get("content-type") ?? "";
@@ -15448,7 +16001,7 @@ ${url}`);
           if (speaker && voiceAvailable() && config.voice.speakTyped) {
             void runVoiceTurn(msg.text, conn.ip, lockEpoch).catch((e) => audit.log("system", "turn.crash", { message: e.message }));
           } else {
-            void agent.runTurn(msg.text, { trust: "owner", emit: broadcast, ip: conn.ip }).catch((e) => audit.log("system", "turn.crash", { message: e.message }));
+            void agent.runTurn(msg.text, { trust: "owner", emit: broadcast, ip: conn.ip, source: "chat" }).catch((e) => audit.log("system", "turn.crash", { message: e.message }));
           }
           break;
         case "approval.respond":
@@ -15594,12 +16147,14 @@ ${url}`);
         for (const id2 of gone) broadcast({ type: "stage", command: { cmd: "hide", id: id2 } });
         if (gone.length) for (const follow of stage.settleNow()) broadcast({ type: "stage", command: follow });
       }, opts.expireIntervalMs ?? 1e3);
+      if (opts.system?.checkForUpdates) updater.start();
       const listening = await gateway.listen();
       listenPort = listening.port;
       return listening;
     },
     async stop() {
       stopped = true;
+      updater.stop();
       hostPlayer.dispose();
       videoHub.dispose();
       heartbeat.stop();
@@ -15622,7 +16177,7 @@ ${url}`);
 }
 
 // ../server/src/voice/sidecar.ts
-import { spawn as spawn6 } from "node:child_process";
+import { spawn as spawn8 } from "node:child_process";
 import { createInterface } from "node:readline";
 var SidecarProcess = class {
   constructor(opts) {
@@ -15659,7 +16214,7 @@ var SidecarProcess = class {
         settled = true;
         reject(new Error(message));
       };
-      const child = spawn6(this.opts.command, this.opts.args, {
+      const child = spawn8(this.opts.command, this.opts.args, {
         cwd: this.opts.cwd,
         env: { ...this.opts.env ?? process.env, FRIEND_VOICE_TOKEN: this.opts.token },
         windowsHide: true,
@@ -15754,14 +16309,14 @@ var nonEmpty = (v) => {
   return v.trim();
 };
 var unit2 = (v) => {
-  const n = Number(v);
-  if (v.trim() === "" || !Number.isFinite(n) || n < 0 || n > 1) throw new Error("Expected a number between 0 and 1");
-  return n;
+  const n2 = Number(v);
+  if (v.trim() === "" || !Number.isFinite(n2) || n2 < 0 || n2 > 1) throw new Error("Expected a number between 0 and 1");
+  return n2;
 };
 var percent = (v) => {
-  const n = Number(v);
-  if (v.trim() === "" || !Number.isFinite(n) || n < 0 || n > 100) throw new Error("Expected a number between 0 and 100");
-  return Math.round(n);
+  const n2 = Number(v);
+  if (v.trim() === "" || !Number.isFinite(n2) || n2 < 0 || n2 > 100) throw new Error("Expected a number between 0 and 100");
+  return Math.round(n2);
 };
 var httpUrl = (v) => {
   let u;
@@ -15793,9 +16348,9 @@ var PARSERS = {
   },
   https: bool,
   port: (v) => {
-    const n = Number(v);
-    if (!Number.isInteger(n) || n < 0 || n > 65535) throw new Error("Port must be a number between 0 and 65535");
-    return n;
+    const n2 = Number(v);
+    if (!Number.isInteger(n2) || n2 < 0 || n2 > 65535) throw new Error("Port must be a number between 0 and 65535");
+    return n2;
   },
   provider: (v) => {
     if (v !== "claude" && v !== "ollama" && v !== "claude-code" && v !== "openai") throw new Error("Provider must be claude, ollama, claude-code or openai");
@@ -15807,6 +16362,9 @@ var PARSERS = {
   trustProxy: bool
 };
 var GROUPS = {
+  updates: {
+    auto: bool
+  },
   voice: {
     enabled: bool,
     sttModel: nonEmpty,
@@ -15860,9 +16418,9 @@ var GROUPS = {
     model: nonEmpty,
     vision: bool,
     contextTokens: (v) => {
-      const n = Number(v);
-      if (!Number.isInteger(n) || n < 1024 || n > 131072) throw new Error("contextTokens must be a whole number between 1024 and 131072");
-      return n;
+      const n2 = Number(v);
+      if (!Number.isInteger(n2) || n2 < 1024 || n2 > 131072) throw new Error("contextTokens must be a whole number between 1024 and 131072");
+      return n2;
     }
   }
 };
@@ -15880,6 +16438,7 @@ var KEY_HELP = {
   allowedOrigins: "extra web addresses allowed to connect, separated by commas",
   allowedHosts: "extra host names that may reach Friend (for example my-pc), separated by commas",
   trustProxy: "true when Friend sits behind your own reverse proxy",
+  "updates.auto": "true or false: look for a newer Friend when it starts and install it by itself while Friend is not busy (false: only when you run friend upgrade or press Update now)",
   "voice.enabled": "true or false: use speech at all",
   "voice.sttModel": "listening model: tiny, base, small, large-v3-turbo \u2026 (bigger is more accurate and slower; Marathi and far-from-mic speech do best with small or large-v3-turbo)",
   "voice.ttsVoice": "speaking voice (easier: friend voice setup, or Settings)",
@@ -15947,12 +16506,12 @@ import { resolve as resolve9 } from "node:path";
 import { WebSocket as WebSocket3 } from "ws";
 
 // ../agent-cli/src/tools/fs.ts
-import { closeSync, mkdirSync as mkdirSync12, openSync, readSync, readdirSync as readdirSync4, statSync as statSync4, writeFileSync as writeFileSync11 } from "node:fs";
-import { dirname as dirname7, join as join19 } from "node:path";
+import { closeSync, mkdirSync as mkdirSync13, openSync, readSync, readdirSync as readdirSync4, statSync as statSync4, writeFileSync as writeFileSync12 } from "node:fs";
+import { dirname as dirname8, join as join19 } from "node:path";
 
 // ../agent-cli/src/tools/roots.ts
 import { lstatSync as lstatSync2, realpathSync } from "node:fs";
-import { dirname as dirname6, isAbsolute as isAbsolute2, relative as relative3, resolve as resolve6, sep as sep3 } from "node:path";
+import { dirname as dirname7, isAbsolute as isAbsolute2, relative as relative3, resolve as resolve6, sep as sep3 } from "node:path";
 var isWin = process.platform === "win32";
 var norm = (p) => isWin ? p.toLowerCase() : p;
 var exists = (p) => {
@@ -15968,18 +16527,18 @@ function realish(abs) {
   let cur = abs;
   const tail2 = [];
   while (!exists(cur)) {
-    const parent = dirname6(cur);
+    const parent = dirname7(cur);
     if (parent === cur) return abs;
     tail2.unshift(cur.slice(parent.length).replace(/^[\\/]+/, ""));
     cur = parent;
   }
-  let real2;
+  let real3;
   try {
-    real2 = realpathSync.native(cur);
+    real3 = realpathSync.native(cur);
   } catch {
     return UNRESOLVABLE + abs;
   }
-  return tail2.length ? resolve6(real2, ...tail2) : real2;
+  return tail2.length ? resolve6(real3, ...tail2) : real3;
 }
 function within(root, target) {
   if (target.startsWith(UNRESOLVABLE)) return false;
@@ -16051,8 +16610,8 @@ function fsWrite(args, ctx) {
   if ("error" in g) return { ok: false, error: g.error };
   if (Buffer.byteLength(args.content) > MAX_WRITE) return { ok: false, error: "Content too large (5 MB limit)" };
   try {
-    mkdirSync12(dirname7(g.abs), { recursive: true });
-    writeFileSync11(g.abs, args.content);
+    mkdirSync13(dirname8(g.abs), { recursive: true });
+    writeFileSync12(g.abs, args.content);
     return { ok: true, output: `Wrote ${Buffer.byteLength(args.content)} bytes to ${g.abs}`, truncated: false };
   } catch (e) {
     return { ok: false, error: e.message };
@@ -16060,7 +16619,7 @@ function fsWrite(args, ctx) {
 }
 
 // ../agent-cli/src/tools/shell.ts
-import { spawn as spawn7, spawnSync } from "node:child_process";
+import { spawn as spawn9, spawnSync } from "node:child_process";
 function killTree2(child) {
   if (!child.pid) return;
   if (process.platform === "win32") {
@@ -16086,7 +16645,7 @@ function runCommand2(command, cwdArg, ctx, argv) {
   const file = argv?.file ?? (win ? "powershell.exe" : "sh");
   const args = argv?.args ?? (win ? ["-NoProfile", "-NonInteractive", "-Command", command] : ["-c", command]);
   return new Promise((resolve13) => {
-    const child = spawn7(file, args, { cwd, windowsHide: true, detached: !win, stdio: ["ignore", "pipe", "pipe"] });
+    const child = spawn9(file, args, { cwd, windowsHide: true, detached: !win, stdio: ["ignore", "pipe", "pipe"] });
     let out = "";
     let truncated = false;
     let timedOut = false;
@@ -16288,8 +16847,8 @@ function startDeviceNode(opts) {
 
 // ../agent-cli/src/commands/start.ts
 import { randomBytes as randomBytes10 } from "node:crypto";
-import { existsSync as existsSync18, readFileSync as readFileSync12, writeFileSync as writeFileSync13 } from "node:fs";
-import { dirname as dirname9, join as join21, resolve as resolve8 } from "node:path";
+import { existsSync as existsSync19, readFileSync as readFileSync13, writeFileSync as writeFileSync14 } from "node:fs";
+import { dirname as dirname10, join as join21, resolve as resolve8 } from "node:path";
 import { fileURLToPath as fileURLToPath4 } from "node:url";
 
 // ../agent-cli/src/commands/lan.ts
@@ -16314,15 +16873,15 @@ function urlsFor(bind, port, ifaces = networkInterfaces2, https = false) {
 }
 var PORT_HELP = "The port must be a whole number from 1024 to 65535.";
 function parsePort(v) {
-  const n = Number(v);
-  if (v === void 0 || v.trim() === "" || !Number.isInteger(n) || n < 1024 || n > 65535) throw new Error(PORT_HELP);
-  return n;
+  const n2 = Number(v);
+  if (v === void 0 || v.trim() === "" || !Number.isInteger(n2) || n2 < 1024 || n2 > 65535) throw new Error(PORT_HELP);
+  return n2;
 }
 function show(io2, bind, port, ifaces, https = false) {
   const u = urlsFor(bind, port, ifaces, https);
   io2.out(`Listens on:    ${bind}:${port}`);
   io2.out(`On this PC:    ${u.local}`);
-  if (u.network.length) for (const n of u.network) io2.out(`On your network: ${n}`);
+  if (u.network.length) for (const n2 of u.network) io2.out(`On your network: ${n2}`);
   else if (isLoopbackBind(bind)) io2.out("On your network: not reachable (only this PC). Turn it on with: friend lan on");
   else io2.out("On your network: no network address found. Check that this PC is connected.");
 }
@@ -16394,9 +16953,9 @@ async function lanCommand(args, io2, ifaces = networkInterfaces2) {
 }
 
 // ../agent-cli/src/commands/voice.ts
-import { spawn as spawn8 } from "node:child_process";
-import { existsSync as existsSync17, mkdirSync as mkdirSync13, readFileSync as readFileSync11, writeFileSync as writeFileSync12 } from "node:fs";
-import { dirname as dirname8, join as join20, resolve as resolve7 } from "node:path";
+import { spawn as spawn10 } from "node:child_process";
+import { existsSync as existsSync18, mkdirSync as mkdirSync14, readFileSync as readFileSync12, writeFileSync as writeFileSync13 } from "node:fs";
+import { dirname as dirname9, join as join20, resolve as resolve7 } from "node:path";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 function voicePaths(dataDir) {
   const home = join20(dataDir, "voice");
@@ -16411,19 +16970,19 @@ function voicePaths(dataDir) {
 }
 function readMarker(dataDir) {
   try {
-    return JSON.parse(readFileSync11(voicePaths(dataDir).marker, "utf8"));
+    return JSON.parse(readFileSync12(voicePaths(dataDir).marker, "utf8"));
   } catch {
     return null;
   }
 }
 function findVoiceDir() {
-  const here2 = dirname8(fileURLToPath3(import.meta.url));
+  const here2 = dirname9(fileURLToPath3(import.meta.url));
   return firstExistingDir([process.env.FRIEND_VOICE_DIR, resolve7(here2, "voice"), resolve7(here2, "../../../voice")], "friend_voice") ?? resolve7(here2, "voice");
 }
 var QUIET_ENV = { ...process.env, HF_HUB_DISABLE_SYMLINKS_WARNING: "1", PYTHONUTF8: "1" };
 var defaultRunner = (cmd, args, opts) => new Promise((res) => {
   let stdout = "";
-  const child = spawn8(cmd, args, { cwd: opts?.cwd, env: QUIET_ENV, windowsHide: true, stdio: ["ignore", "pipe", "pipe"] });
+  const child = spawn10(cmd, args, { cwd: opts?.cwd, env: QUIET_ENV, windowsHide: true, stdio: ["ignore", "pipe", "pipe"] });
   const feed = (d) => {
     const s = d.toString();
     stdout += s;
@@ -16436,7 +16995,7 @@ var defaultRunner = (cmd, args, opts) => new Promise((res) => {
   child.on("error", (e) => res({ code: 127, stdout: stdout + e.message }));
   child.on("close", (code) => res({ code: code ?? 1, stdout }));
 });
-var tail = (s, n = 8) => s.trim().split(/\r?\n/).slice(-n).join("\n");
+var tail = (s, n2 = 8) => s.trim().split(/\r?\n/).slice(-n2).join("\n");
 async function findPython(run2) {
   const candidates = [
     ...process.env.FRIEND_PYTHON ? [[process.env.FRIEND_PYTHON, []]] : [],
@@ -16508,8 +17067,8 @@ async function voiceSetupCommand(io2, deps = {}, args = []) {
     io2.err("Python 3.10 or newer is required. Install it from https://www.python.org/downloads/ and run this again.");
     return 1;
   }
-  mkdirSync13(p.home, { recursive: true });
-  if (!existsSync17(p.python)) {
+  mkdirSync14(p.home, { recursive: true });
+  if (!existsSync18(p.python)) {
     io2.out("1/3 Creating a private Python environment\u2026");
     const r = await run2(py.cmd, [...py.args, "-m", "venv", p.venv], { onLine });
     if (r.code !== 0) {
@@ -16543,7 +17102,7 @@ ${tail(dl.stdout)}`);
     return 1;
   }
   const marker = { python: p.python, sttModel: cfg.voice.sttModel, ttsVoice: cfg.voice.ttsVoice, at: Date.now() };
-  writeFileSync12(p.marker, JSON.stringify(marker, null, 2));
+  writeFileSync13(p.marker, JSON.stringify(marker, null, 2));
   io2.out("Voice is ready. Start Friend with `friend start`, then hold Space to talk.");
   return 0;
 }
@@ -16559,7 +17118,7 @@ async function voiceStatusCommand(io2) {
     io2.out("Voice engine:   not installed. Run: friend voice setup");
     return 0;
   }
-  if (!existsSync17(marker.python)) {
+  if (!existsSync18(marker.python)) {
     io2.out("Voice engine:   installed, but its Python is missing. Run: friend voice setup");
     return 0;
   }
@@ -16630,9 +17189,9 @@ async function voiceCommand(args, io2) {
 
 // ../agent-cli/src/commands/start.ts
 function findWebDir(explicit) {
-  const here2 = dirname9(fileURLToPath4(import.meta.url));
+  const here2 = dirname10(fileURLToPath4(import.meta.url));
   const candidates = [explicit, process.env.FRIEND_WEB_DIR, resolve8(here2, "../../../web/dist"), resolve8(here2, "web")];
-  return candidates.find((c) => !!c && existsSync18(join21(c, "index.html")));
+  return candidates.find((c) => !!c && existsSync19(join21(c, "index.html")));
 }
 async function startFriend(opts) {
   const stored = loadConfig(opts.dataDir);
@@ -16657,6 +17216,8 @@ async function startFriend(opts) {
   }) : null;
   const voice2 = sidecar ? new HttpVoiceService({ baseUrl: () => sidecar.baseUrl(), token: secret }) : void 0;
   const app = await createApp({
+    system: { checkForUpdates: true },
+    // looks for a newer Friend after it starts, and updates by itself when that is on
     dataDir: opts.dataDir,
     webDir: findWebDir(opts.webDir),
     voice: voice2,
@@ -16667,21 +17228,21 @@ async function startFriend(opts) {
   });
   const { port } = await app.start();
   const tokenFile = join21(opts.dataDir, "local-device.token");
-  let token = existsSync18(tokenFile) ? readFileSync12(tokenFile, "utf8").trim() : "";
+  let token = existsSync19(tokenFile) ? readFileSync13(tokenFile, "utf8").trim() : "";
   if (!token || !app.auth.resolveDevice(token)) {
     token = app.auth.redeemPairCode(app.auth.createPairCode(), "this-pc");
-    writeFileSync13(tokenFile, token, { mode: 384 });
+    writeFileSync14(tokenFile, token, { mode: 384 });
   }
   const node = startDeviceNode({
     url: `${app.config.https ? "wss" : "ws"}://127.0.0.1:${port}/device`,
     token,
     roots: app.config.roots,
-    ...app.config.https ? { ca: readFileSync12(join21(opts.dataDir, "tls", "cert.pem"), "utf8") } : {}
+    ...app.config.https ? { ca: readFileSync13(join21(opts.dataDir, "tls", "cert.pem"), "utf8") } : {}
     // this PC trusts only its own Friend's certificate
   });
   const urls = urlsFor(app.config.bind, port, void 0, app.config.https);
   opts.out(`Friend is running at ${urls.local}`);
-  for (const n of urls.network) opts.out(`Also on your network: ${n}`);
+  for (const n2 of urls.network) opts.out(`Also on your network: ${n2}`);
   if (!app.auth.hasOwner()) opts.out("No owner yet. Run: friend onboard (guided), or friend setup (just the account)");
   const voiceAvailable = () => voice2?.available() ?? false;
   let lastAvailable = voiceAvailable();
@@ -16860,7 +17421,7 @@ async function memoryCommand(args, io2) {
     if (sub === "list") {
       const notes = memory.list();
       if (notes.length === 0) io2.out("No notes saved.");
-      for (const n of notes) io2.out(`#${n.id}  ${n.text}  (${n.source}, ${new Date(n.createdAt).toLocaleDateString()})`);
+      for (const n2 of notes) io2.out(`#${n2.id}  ${n2.text}  (${n2.source}, ${new Date(n2.createdAt).toLocaleDateString()})`);
       return 0;
     }
     if (sub === "forget") {
@@ -16877,8 +17438,8 @@ async function memoryCommand(args, io2) {
       io2.out(`Forgot note #${id2}.`);
       return 0;
     }
-    const count2 = memory.count();
-    if (count2 === 0) {
+    const count3 = memory.count();
+    if (count3 === 0) {
       io2.out("No notes saved.");
       return 0;
     }
@@ -16895,8 +17456,8 @@ async function memoryCommand(args, io2) {
       return 1;
     }
     memory.clear();
-    audit.log("owner", "memory.clear", { count: count2, via: "cli" });
-    io2.out(`Deleted ${count2} notes.`);
+    audit.log("owner", "memory.clear", { count: count3, via: "cli" });
+    io2.out(`Deleted ${count3} notes.`);
     return 0;
   } finally {
     db.close();
@@ -16904,22 +17465,22 @@ async function memoryCommand(args, io2) {
 }
 
 // ../agent-cli/src/commands/plugin.ts
-import { existsSync as existsSync19, readdirSync as readdirSync5, statSync as statSync5 } from "node:fs";
-import { dirname as dirname10, join as join22, resolve as resolve10 } from "node:path";
+import { existsSync as existsSync20, readdirSync as readdirSync5, statSync as statSync5 } from "node:fs";
+import { dirname as dirname11, join as join22, resolve as resolve10 } from "node:path";
 import { fileURLToPath as fileURLToPath5 } from "node:url";
 var USAGE2 = "Usage: friend plugin catalog | list | install <name|folder> [--yes] | enable <id> | disable <id> | remove <id>";
 function defaultCatalog() {
-  const here2 = dirname10(fileURLToPath5(import.meta.url));
+  const here2 = dirname11(fileURLToPath5(import.meta.url));
   return firstExistingDir([process.env.FRIEND_PLUGIN_CATALOG, resolve10(here2, "plugins"), resolve10(here2, "../../../../plugins")]) ?? resolve10(here2, "plugins");
 }
-var count = (n, word2) => `${n} ${word2}${n === 1 ? "" : "s"}`;
+var count2 = (n2, word2) => `${n2} ${word2}${n2 === 1 ? "" : "s"}`;
 async function pluginCommand(args, io2, deps = {}) {
   const catalogDir = deps.catalogDir ?? defaultCatalog();
   const [sub, ...rest] = args;
   const flags = rest.filter((a) => a.startsWith("--"));
   const arg = rest.find((a) => !a.startsWith("--"));
   if (sub === "catalog") {
-    const dirs = existsSync19(catalogDir) ? readdirSync5(catalogDir).filter((d) => statSync5(join22(catalogDir, d)).isDirectory()) : [];
+    const dirs = existsSync20(catalogDir) ? readdirSync5(catalogDir).filter((d) => statSync5(join22(catalogDir, d)).isDirectory()) : [];
     if (dirs.length === 0) io2.out("The catalog is empty.");
     for (const d of dirs.sort()) {
       const r = inspectPlugin(join22(catalogDir, d));
@@ -16928,7 +17489,7 @@ async function pluginCommand(args, io2, deps = {}) {
         continue;
       }
       const m = r.manifest;
-      io2.out(`${m.id}  ${m.name} ${m.version}  [${count(m.tools.length, "tool")}, ${count(m.skills.length, "skill")}]  ${m.description}`);
+      io2.out(`${m.id}  ${m.name} ${m.version}  [${count2(m.tools.length, "tool")}, ${count2(m.skills.length, "skill")}]  ${m.description}`);
     }
     return 0;
   }
@@ -16952,8 +17513,8 @@ async function pluginCommand(args, io2, deps = {}) {
         io2.err(USAGE2);
         return 1;
       }
-      const inCatalog = !/[\\/]/.test(arg) && existsSync19(join22(catalogDir, arg));
-      const source = inCatalog ? join22(catalogDir, arg) : existsSync19(resolve10(arg)) ? resolve10(arg) : null;
+      const inCatalog = !/[\\/]/.test(arg) && existsSync20(join22(catalogDir, arg));
+      const source = inCatalog ? join22(catalogDir, arg) : existsSync20(resolve10(arg)) ? resolve10(arg) : null;
       if (!source) {
         io2.err(`"${arg}" is not in the catalog and there is no such folder. See: friend plugin catalog`);
         return 1;
@@ -17008,7 +17569,7 @@ async function pluginCommand(args, io2, deps = {}) {
 
 // ../agent-cli/src/commands/onboard/index.ts
 import crossSpawn4 from "cross-spawn";
-import { mkdirSync as mkdirSync15 } from "node:fs";
+import { mkdirSync as mkdirSync16 } from "node:fs";
 import { resolve as resolve11 } from "node:path";
 
 // ../agent-cli/src/commands/ollama.ts
@@ -17331,16 +17892,16 @@ function installPlan(id2, platform, have) {
 }
 
 // ../agent-cli/src/commands/onboard/state.ts
-import { existsSync as existsSync20, mkdirSync as mkdirSync14, readFileSync as readFileSync13, renameSync as renameSync4, rmSync as rmSync9, writeFileSync as writeFileSync14 } from "node:fs";
-import { dirname as dirname11, join as join23 } from "node:path";
+import { existsSync as existsSync21, mkdirSync as mkdirSync15, readFileSync as readFileSync14, renameSync as renameSync4, rmSync as rmSync10, writeFileSync as writeFileSync15 } from "node:fs";
+import { dirname as dirname12, join as join23 } from "node:path";
 var FEATURES = ["claude-code", "claude-api", "ollama", "voice", "sandbox"];
 var emptyState = () => ({ version: 1, done: {}, features: [], restart: [] });
 var statePath = (dataDir) => join23(dataDir, "onboarding.json");
 function loadState(dataDir) {
   const f = statePath(dataDir);
-  if (!existsSync20(f)) return emptyState();
+  if (!existsSync21(f)) return emptyState();
   try {
-    const raw = JSON.parse(readFileSync13(f, "utf8"));
+    const raw = JSON.parse(readFileSync14(f, "utf8"));
     const done = raw.done && typeof raw.done === "object" ? Object.fromEntries(Object.entries(raw.done).filter(([, v]) => typeof v === "string")) : {};
     const features2 = Array.isArray(raw.features) ? raw.features.filter((x) => FEATURES.includes(x)) : [];
     const restart = Array.isArray(raw.restart) ? raw.restart.filter((x) => typeof x === "string") : [];
@@ -17351,13 +17912,13 @@ function loadState(dataDir) {
 }
 function saveState(dataDir, state) {
   const f = statePath(dataDir);
-  mkdirSync14(dirname11(f), { recursive: true });
+  mkdirSync15(dirname12(f), { recursive: true });
   const tmp = `${f}.tmp`;
-  writeFileSync14(tmp, JSON.stringify(state, null, 2));
+  writeFileSync15(tmp, JSON.stringify(state, null, 2));
   renameSync4(tmp, f);
 }
 function resetState(dataDir) {
-  rmSync9(statePath(dataDir), { force: true });
+  rmSync10(statePath(dataDir), { force: true });
 }
 
 // ../agent-cli/src/commands/onboard/ui.ts
@@ -17367,9 +17928,9 @@ function pick(options, typed) {
   if (/^\d+$/.test(a)) return options[Number(a) - 1];
   return options.find((o) => o.key.toLowerCase() === a || o.label.toLowerCase() === a || o.label.toLowerCase().split(/\s+/)[0] === a);
 }
-function heading(ui, n, total, title2) {
+function heading(ui, n2, total, title2) {
   ui.io.out("");
-  ui.io.out(`\u2500\u2500 Step ${n} of ${total} \xB7 ${title2} ${"\u2500".repeat(Math.max(2, 52 - title2.length))}`);
+  ui.io.out(`\u2500\u2500 Step ${n2} of ${total} \xB7 ${title2} ${"\u2500".repeat(Math.max(2, 52 - title2.length))}`);
 }
 async function choose(ui, question, options, suggested) {
   const { io: io2 } = ui;
@@ -17709,7 +18270,7 @@ async function workspace(c) {
   const answer = await text2(c.ui, current ? "Workspace folder" : "Workspace folder (Enter to skip)", current ?? "");
   if (answer) {
     const abs = resolve11(answer);
-    mkdirSync15(abs, { recursive: true });
+    mkdirSync16(abs, { recursive: true });
     cfg.roots = [abs];
     saveConfig(cfg);
     io2.out(`Workspace: ${abs}`);
@@ -17747,7 +18308,7 @@ async function network(c) {
   saveConfig(cfg);
   const u = urlsFor(cfg.bind, cfg.port, void 0, cfg.https);
   io2.out(`Friend will be at ${u.local}`);
-  for (const n of u.network) io2.out(`and on your network at ${n}`);
+  for (const n2 of u.network) io2.out(`and on your network at ${n2}`);
   if (where === "lan" && !cfg.https) io2.out("Note: the microphone and camera only work on this PC (or over HTTPS). Everything else works from the other devices. Later: friend lan https on");
   return "done";
 }
@@ -17879,19 +18440,102 @@ async function doctorCommand(io2, partial = {}) {
   return requiredMissing ? 1 : 0;
 }
 
+// ../agent-cli/src/commands/autostart.ts
+var USAGE3 = "Usage: friend autostart on|off|status";
+var real = (io2) => new Autostart(realAutostartDeps(io2.dataDir), currentSelf);
+async function autostartCommand(args, io2, autostart = real(io2)) {
+  switch (args[0]) {
+    case "on":
+    case "off": {
+      const r = await (args[0] === "on" ? autostart.enable() : autostart.disable());
+      if (!r.ok) {
+        io2.err(r.message);
+        return 1;
+      }
+      io2.out(r.message);
+      if (args[0] === "on") io2.out("Turn it off again with: friend autostart off");
+      return 0;
+    }
+    case "status": {
+      const s = await autostart.status();
+      if (!s.supported) {
+        io2.out("Starting Friend by itself is not supported on this kind of computer.");
+        return 0;
+      }
+      io2.out(`Starts by itself when you sign in: ${s.enabled ? "yes" : "no"}${s.enabled ? ` (${s.kind})` : ""}`);
+      if (!s.enabled) io2.out("Turn it on with: friend autostart on");
+      return 0;
+    }
+    case "refresh":
+      await autostart.refresh();
+      return 0;
+    default:
+      io2.err(USAGE3);
+      return 1;
+  }
+}
+
+// ../agent-cli/src/commands/usage.ts
+var USAGE4 = "Usage: friend usage [--days N] | friend usage clear";
+var n = (v) => v.toLocaleString("en-US");
+var row = (label4, input, output, turns, width) => `${label4.padEnd(width)}  ${n(input).padStart(12)}  ${n(output).padStart(12)}  ${String(turns).padStart(6)}`;
+async function usageCommand(args, io2, log) {
+  let days = 7;
+  let clear = false;
+  for (let i = 0; i < args.length; i++) {
+    const a = args[i];
+    if (a === "clear") clear = true;
+    else if (a === "--days" && /^\d+$/.test(args[i + 1] ?? "")) days = Number(args[++i]);
+    else {
+      io2.err(USAGE4);
+      return 1;
+    }
+  }
+  const db = log ? null : openDb(io2.dataDir);
+  try {
+    const l = log ?? new UsageLog(db);
+    if (clear) {
+      io2.out(`Removed ${l.clear()} saved counts.`);
+      return 0;
+    }
+    const s = l.summary(days);
+    if (s.total.turns === 0) {
+      io2.out(`Nothing used in the last ${s.range} days.`);
+      io2.out("Friend keeps counts only (no words), once a model has answered.");
+      return 0;
+    }
+    io2.out(`Tokens used in the last ${s.range} days`);
+    io2.out("");
+    io2.out(`${"Day".padEnd(10)}  ${"Input".padStart(12)}  ${"Output".padStart(12)}  ${"Turns".padStart(6)}`);
+    for (const d of s.days) io2.out(row(d.day, d.input, d.output, d.turns, 10));
+    io2.out(row("Total", s.total.input, s.total.output, s.total.turns, 10));
+    io2.out("");
+    io2.out("By model");
+    for (const m of s.byModel) io2.out(row(`${m.provider} / ${m.model}`, m.input, m.output, m.turns, 28));
+    io2.out("");
+    io2.out("By where it came from");
+    for (const m of s.bySource) io2.out(row(m.source, m.input, m.output, m.turns, 28));
+    io2.out("");
+    io2.out("Friend keeps counts only (no words). Remove them with: friend usage clear");
+    return 0;
+  } finally {
+    db?.close();
+  }
+}
+
 // ../agent-cli/src/commands/daemon.ts
-import { spawn as spawn9, spawnSync as spawnSync2 } from "node:child_process";
-import { closeSync as closeSync2, existsSync as existsSync21, mkdirSync as mkdirSync16, openSync as openSync2, readFileSync as readFileSync14, renameSync as renameSync5, rmSync as rmSync10, statSync as statSync6, writeFileSync as writeFileSync15 } from "node:fs";
+import { spawn as spawn11, spawnSync as spawnSync2 } from "node:child_process";
+import { closeSync as closeSync2, existsSync as existsSync22, mkdirSync as mkdirSync17, openSync as openSync2, readFileSync as readFileSync15, renameSync as renameSync5, rmSync as rmSync11, statSync as statSync6, writeFileSync as writeFileSync16 } from "node:fs";
 import { connect } from "node:net";
 import { join as join24 } from "node:path";
-var USAGE3 = "Usage: friend daemon start | stop | restart | status";
+var USAGE5 = "Usage: friend daemon start | stop | restart | status";
 var MAX_LOG_BYTES = 5 * 1024 * 1024;
 var sleep = (ms2) => new Promise((r) => setTimeout(r, ms2));
 var realDeps = {
   launch(logFile) {
     const fd = openSync2(logFile, "a");
     try {
-      const child = spawn9(process.execPath, [process.argv[1], "start"], { detached: true, stdio: ["ignore", fd, fd], windowsHide: true });
+      const child = spawn11(process.execPath, [process.argv[1], "start"], { detached: true, stdio: ["ignore", fd, fd], windowsHide: true, env: { ...process.env, FRIEND_DAEMON: "1" } });
       child.unref();
       return child.pid;
     } finally {
@@ -17943,7 +18587,7 @@ var pidFile = (dataDir) => join24(dataDir, "friend.pid");
 var logFileOf = (dataDir) => join24(dataDir, "friend.log");
 function readPid(dataDir) {
   try {
-    const r = JSON.parse(readFileSync14(pidFile(dataDir), "utf8"));
+    const r = JSON.parse(readFileSync15(pidFile(dataDir), "utf8"));
     return Number.isInteger(r.pid) && r.pid > 0 ? r : null;
   } catch {
     return null;
@@ -17952,7 +18596,7 @@ function readPid(dataDir) {
 function running(dataDir, deps) {
   const r = readPid(dataDir);
   if (r && deps.alive(r.pid)) return r;
-  if (r) rmSync10(pidFile(dataDir), { force: true });
+  if (r) rmSync11(pidFile(dataDir), { force: true });
   return null;
 }
 function since(ms2) {
@@ -17974,10 +18618,10 @@ async function start(io2, deps) {
     io2.err(`Port ${cfg.port} is already in use. Friend may be running in a terminal (stop it with Ctrl+C), or another program uses that port (friend lan port N).`);
     return 1;
   }
-  mkdirSync16(io2.dataDir, { recursive: true });
+  mkdirSync17(io2.dataDir, { recursive: true });
   const log = logFileOf(io2.dataDir);
   try {
-    if (existsSync21(log) && statSync6(log).size > MAX_LOG_BYTES) renameSync5(log, `${log}.old`);
+    if (existsSync22(log) && statSync6(log).size > MAX_LOG_BYTES) renameSync5(log, `${log}.old`);
   } catch {
   }
   const pid = deps.launch(log);
@@ -17985,18 +18629,18 @@ async function start(io2, deps) {
     io2.err("Could not start Friend in the background.");
     return 1;
   }
-  writeFileSync15(pidFile(io2.dataDir), JSON.stringify({ pid, startedAt: deps.now() }));
+  writeFileSync16(pidFile(io2.dataDir), JSON.stringify({ pid, startedAt: deps.now() }));
   for (let i = 0; i < 60; i++) {
     if (await deps.portOpen(cfg.port, 300)) {
       io2.out(`Friend is running in the background (pid ${pid}) at ${urls.local}`);
-      for (const n of urls.network) io2.out(`Also on your network: ${n}`);
+      for (const n2 of urls.network) io2.out(`Also on your network: ${n2}`);
       io2.out(`Stop it with: friend daemon stop   (log: ${log})`);
       return 0;
     }
     if (!deps.alive(pid)) break;
     await sleep(250);
   }
-  rmSync10(pidFile(io2.dataDir), { force: true });
+  rmSync11(pidFile(io2.dataDir), { force: true });
   io2.err(`Friend did not start. See the log: ${log}`);
   return 1;
 }
@@ -18011,7 +18655,7 @@ async function stop(io2, deps) {
     io2.err(`Could not stop Friend (pid ${r.pid}). End that process yourself.`);
     return 1;
   }
-  rmSync10(pidFile(io2.dataDir), { force: true });
+  rmSync11(pidFile(io2.dataDir), { force: true });
   io2.out("Friend stopped.");
   return 0;
 }
@@ -18022,7 +18666,7 @@ async function status(io2, deps) {
   if (r) {
     io2.out(`Friend is running in the background (pid ${r.pid}, for ${since(deps.now() - r.startedAt)}).`);
     io2.out(`Address: ${urls.local}`);
-    for (const n of urls.network) io2.out(`Also on your network: ${n}`);
+    for (const n2 of urls.network) io2.out(`Also on your network: ${n2}`);
     io2.out(`Log: ${logFileOf(io2.dataDir)}`);
     return 0;
   }
@@ -18043,25 +18687,27 @@ async function daemonCommand(args, io2, deps = realDeps) {
     case "status":
       return status(io2, deps);
     default:
-      io2.err(USAGE3);
+      io2.err(USAGE5);
       return 1;
   }
 }
 
 // ../agent-cli/src/commands/upgrade.ts
 import crossSpawn5 from "cross-spawn";
-var PACKAGE = "friend-assistant";
-var real = {
-  current: () => true ? "0.1.44" : "development",
+import { appendFileSync } from "node:fs";
+import { join as join25 } from "node:path";
+var PACKAGE2 = "friend-assistant";
+var real2 = {
+  current: () => true ? "0.1.46" : "development",
   latest: () => new Promise((resolve13) => {
-    const child = crossSpawn5("npm", ["view", PACKAGE, "version", "--prefer-online"], { stdio: ["ignore", "pipe", "ignore"] });
+    const child = crossSpawn5("npm", ["view", PACKAGE2, "version", "--prefer-online"], { stdio: ["ignore", "pipe", "ignore"] });
     let out = "";
     child.stdout?.on("data", (d) => out += d.toString());
     child.on("error", () => resolve13(null));
     child.on("close", (code) => resolve13(code === 0 && /^\d+\.\d+\.\d+/.test(out.trim()) ? out.trim().split(/\s+/)[0] : null));
   }),
   install: (version) => new Promise((resolve13) => {
-    const child = crossSpawn5("npm", ["install", "-g", `${PACKAGE}@${version}`, "--prefer-online"], { stdio: "inherit" });
+    const child = crossSpawn5("npm", ["install", "-g", `${PACKAGE2}@${version}`, "--prefer-online"], { stdio: "inherit" });
     child.on("error", () => resolve13(1));
     child.on("close", (code) => resolve13(code ?? 1));
   }),
@@ -18070,20 +18716,39 @@ var real = {
     child.on("error", () => resolve13(1));
     child.on("close", (code) => resolve13(code ?? 1));
   }),
+  refreshAutostart: () => new Promise((resolve13) => {
+    const child = crossSpawn5("friend", ["autostart", "refresh"], { stdio: "ignore" });
+    child.on("error", () => resolve13());
+    child.on("close", () => resolve13());
+  }),
   daemon: realDeps
 };
 var newer = (a, b) => {
-  const n = (v) => v.split(/[.-]/).slice(0, 3).map((x2) => Number(x2) || 0);
-  const [x, y] = [n(a), n(b)];
+  const n2 = (v) => v.split(/[.-]/).slice(0, 3).map((x2) => Number(x2) || 0);
+  const [x, y] = [n2(a), n2(b)];
   for (let i = 0; i < 3; i++) if ((x[i] ?? 0) !== (y[i] ?? 0)) return (x[i] ?? 0) > (y[i] ?? 0);
   return false;
 };
-async function upgradeCommand(args, io2, deps = real) {
+async function upgradeCommand(args, io0, deps = real2) {
   const force = args.includes("--force");
-  if (args.some((a) => a !== "--force")) {
-    io2.err("Usage: friend upgrade [--force]");
+  const auto = args.includes("--auto");
+  if (args.some((a) => a !== "--force" && a !== "--auto")) {
+    io0.err("Usage: friend upgrade [--force] [--auto]");
     return 1;
   }
+  const log = deps.log ?? ((line) => appendFileSync(join25(io0.dataDir, "update.log"), `${(/* @__PURE__ */ new Date()).toISOString()} ${line}
+`));
+  const io2 = auto ? {
+    ...io0,
+    out: (l) => {
+      io0.out(l);
+      log(l);
+    },
+    err: (l) => {
+      io0.err(l);
+      log(l);
+    }
+  } : io0;
   const current = deps.current();
   io2.out(`Installed: ${current}`);
   const latest = await deps.latest();
@@ -18106,7 +18771,7 @@ async function upgradeCommand(args, io2, deps = real) {
     io2.err(`Friend is running in a terminal (port ${cfg.port} is in use). Press Ctrl+C there to stop it, then run: friend upgrade`);
     return 1;
   }
-  io2.out(`Installing ${PACKAGE}@${latest}\u2026`);
+  io2.out(`Installing ${PACKAGE2}@${latest}\u2026`);
   const code = await deps.install(latest);
   if (code !== 0) {
     io2.err("The install failed. If it says EBUSY or EPERM, close whatever is using Friend (a terminal running it, a voice process) and run: friend upgrade");
@@ -18114,6 +18779,8 @@ async function upgradeCommand(args, io2, deps = real) {
     return 1;
   }
   io2.out(`Upgraded ${current} \u2192 ${latest}.`);
+  await deps.refreshAutostart?.().catch(() => {
+  });
   if (wasRunning) return deps.startAgain();
   io2.out("Start it with: friend start   (or in the background: friend daemon start)");
   return 0;
@@ -18187,7 +18854,7 @@ async function claudeCommand(args, io2, deps = {}) {
 }
 
 // ../agent-cli/src/commands/setup.ts
-import { mkdirSync as mkdirSync17 } from "node:fs";
+import { mkdirSync as mkdirSync18 } from "node:fs";
 import { resolve as resolve12 } from "node:path";
 async function setupCommand3(io2) {
   const db = openDb(io2.dataDir);
@@ -18213,7 +18880,7 @@ async function setupCommand3(io2) {
     const cfg = loadConfig(io2.dataDir);
     if (workspace2) {
       const abs = resolve12(workspace2);
-      mkdirSync17(abs, { recursive: true });
+      mkdirSync18(abs, { recursive: true });
       cfg.roots = [abs];
     }
     if (apiKey) cfg.apiKey = apiKey;
@@ -18239,16 +18906,16 @@ async function secretCommand(kind, io2) {
       io2.err("There is no owner yet. Run: friend setup");
       return 1;
     }
-    const label3 = kind === "password" ? "password" : "PIN";
-    const first2 = await io2.ask(`New ${label3} (${kind === "password" ? "at least 8 characters" : "at least 6 digits"}): `, { hidden: true });
+    const label4 = kind === "password" ? "password" : "PIN";
+    const first2 = await io2.ask(`New ${label4} (${kind === "password" ? "at least 8 characters" : "at least 6 digits"}): `, { hidden: true });
     const problem = Auth.checkNewSecrets(kind === "password" ? { newPassword: first2 } : { newPin: first2 });
     if (problem) {
       io2.err(problem);
       return 1;
     }
-    const again = await io2.ask(`Type the new ${label3} again: `, { hidden: true });
+    const again = await io2.ask(`Type the new ${label4} again: `, { hidden: true });
     if (again !== first2) {
-      io2.err(`The two ${label3}s are not the same. Nothing was changed.`);
+      io2.err(`The two ${label4}s are not the same. Nothing was changed.`);
       return 1;
     }
     await auth.resetSecrets(kind === "password" ? { newPassword: first2 } : { newPin: first2 });
@@ -18269,7 +18936,7 @@ async function statusCommand3(io2) {
   io2.out(`Data folder:  ${cfg.dataDir}`);
   io2.out(`Owner set up: ${owner}`);
   io2.out(`Listens on:   ${cfg.bind}:${cfg.port}`);
-  for (const n of urlsFor(cfg.bind, cfg.port, void 0, cfg.https).network) io2.out(`Network URL:  ${n}`);
+  for (const n2 of urlsFor(cfg.bind, cfg.port, void 0, cfg.https).network) io2.out(`Network URL:  ${n2}`);
   io2.out(`Public URL:   ${cfg.publicUrl ?? "(none)"}`);
   io2.out(`Workspace:    ${cfg.roots.length ? cfg.roots.join(", ") : "(none, every file action asks first)"}`);
   io2.out(`Model:        ${cfg.model}`);
@@ -18278,7 +18945,7 @@ async function statusCommand3(io2) {
 }
 
 // ../agent-cli/src/cli.ts
-var USAGE4 = `Usage: friend <command>
+var USAGE6 = `Usage: friend <command>
 
   onboard                    guided setup, step by step: checks this PC, installs what is missing, asks what you want
   doctor                     check what this PC has and what is missing (changes nothing)
@@ -18288,6 +18955,8 @@ var USAGE4 = `Usage: friend <command>
   start                      run the gateway and a local device node
   daemon start|stop|restart|status  run Friend in the background (no terminal needed), stop it, or see if it is running
   upgrade [--force]          stop the background Friend, install the newest version, start it again
+  usage [--days N]|clear     tokens used, day by day (counts only, never words)
+  autostart on|off|status    start Friend by itself when you sign in to this computer (Windows, macOS, Linux)
   pair                       print a one-time code to connect another PC
   node --url <ws-url> --code <code> [--roots a,b] [--name pc]
                              connect this PC to a Friend gateway
@@ -18320,6 +18989,10 @@ async function run(argv, io2) {
         return await daemonCommand(rest, io2);
       case "upgrade":
         return await upgradeCommand(rest, io2);
+      case "usage":
+        return await usageCommand(rest, io2);
+      case "autostart":
+        return await autostartCommand(rest, io2);
       case "pair":
         return await pairCommand(io2);
       case "node":
@@ -18335,12 +19008,12 @@ async function run(argv, io2) {
       case "help":
       case "--help":
       case "-h":
-        io2.out(USAGE4);
+        io2.out(USAGE6);
         return 0;
       case "version":
       case "--version":
       case "-v":
-        io2.out(true ? "0.1.44" : "development");
+        io2.out(true ? "0.1.46" : "development");
         return 0;
       case "lan":
         return await lanCommand(rest, io2);
@@ -18359,7 +19032,7 @@ async function run(argv, io2) {
       case "config":
         return await configCommand(rest, io2);
       default:
-        io2.err(USAGE4);
+        io2.err(USAGE6);
         return 1;
     }
   } catch (e) {