gemini-computer-use 0.1.2 → 0.2.4

package/install.ps1

@@ -18,7 +18,10 @@ try {
     $OutputEncoding = [System.Text.Encoding]::UTF8
 } catch {}
 
-$ErrorActionPreference = "Stop"
+$ErrorActionPreference = "Continue"
+if (Test-Path variable:global:PSNativeCommandUseErrorActionPreference) {
+    $global:PSNativeCommandUseErrorActionPreference = $false
+}
 
 $Hostname = $env:COMPUTERNAME.ToLower() -replace '[^a-z0-9_-]', ''
 $IsLaptop = [bool](Get-CimInstance -ClassName Win32_Battery -ErrorAction SilentlyContinue)
@@ -50,20 +53,41 @@ if ($DryRun) {
     exit 0
 }
 
-# Python check & auto-install
+# Python check & auto-install.
+# Windows ships a "python.exe" App Execution Alias that opens the Microsoft Store
+# instead of running Python, so "python --version" can look successful while doing
+# nothing. Resolve a real interpreter once and pin its full path in $PyExe.
 $hasPython = $false
-try {
-    $pyVer = python --version 2>&1
-    if ($LASTEXITCODE -eq 0 -or $pyVer -match "Python 3") {
-        if ($Lang -eq "ru") {
-            Write-Host "[1/3] Python обнаружен: $pyVer" -ForegroundColor Green
-        } else {
-            Write-Host "[1/3] Python detected: $pyVer" -ForegroundColor Green
+$PyExe = $null
+$candidates = @()
+$cmdPython = Get-Command python -ErrorAction SilentlyContinue
+if ($cmdPython) { $candidates += $cmdPython.Source }
+$candidates += @(
+    "$env:LOCALAPPDATA\Programs\Python\Python312\python.exe",
+    "$env:LOCALAPPDATA\Programs\Python\Python311\python.exe",
+    "$env:ProgramFiles\Python312\python.exe",
+    "$env:ProgramFiles\Python311\python.exe"
+)
+$cmdPy = Get-Command py -ErrorAction SilentlyContinue
+if ($cmdPy) { $candidates += $cmdPy.Source }
+
+foreach ($cand in $candidates) {
+    if (-not $cand -or -not (Test-Path $cand)) { continue }
+    try {
+        # Require a working sys import, not just a zero exit code.
+        $probe = & $cand -c "import sys; print(sys.version_info[0])" 2>&1
+        if ($LASTEXITCODE -eq 0 -and "$probe".Trim() -eq "3") {
+            if ((Split-Path $cand -Leaf) -eq "py.exe") { $PyExe = "$cand -3" } else { $PyExe = $cand }
+            $pyVer = & $cand --version 2>&1
+            if ($Lang -eq "ru") {
+                Write-Host "[1/3] Python обнаружен: $pyVer" -ForegroundColor Green
+            } else {
+                Write-Host "[1/3] Python detected: $pyVer" -ForegroundColor Green
+            }
+            $hasPython = $true
+            break
         }
-        $hasPython = $true
-    }
-} catch {
-    $hasPython = $false
+    } catch { continue }
 }
 
 if (-not $hasPython) {
@@ -112,13 +136,47 @@ if (-not $hasPython) {
     }
 }
 
-# Install dependencies
-if ($Lang -eq "ru") {
-    Write-Host "[2/3] Проверка библиотек (websockets)..." -ForegroundColor Yellow
-} else {
-    Write-Host "[2/3] Checking dependencies (websockets)..." -ForegroundColor Yellow
-}
-python -m pip install websockets --quiet 2>$null; if ($LASTEXITCODE -ne 0) { python -m ensurepip --default-pip 2>$null; python -m pip install websockets --quiet }
+    # Install dependencies.
+    # The tunnel agent needs "websockets"; core/mcp_tools.py and core/server.py
+    # are standard library only, so this is the single external requirement.
+    if ($Lang -eq "ru") {
+        Write-Host "[2/3] Проверка библиотек (websockets)..." -ForegroundColor Yellow
+    } else {
+        Write-Host "[2/3] Checking dependencies (websockets)..." -ForegroundColor Yellow
+    }
+
+    # Use the interpreter resolved above; fall back to PATH only if that failed.
+    $pyRun = if ($PyExe) { $PyExe } else { "python" }
+    $pyExeOnly = ($pyRun -split " ")[0]
+
+    # Upgrading pip first avoids the "old pip cannot build wheels" failure common
+    # on a fresh Python installation.
+    & $pyExeOnly -c "import websockets" 2>$null
+    if ($LASTEXITCODE -ne 0) {
+        & $pyExeOnly -m pip install --disable-pip-version-check --quiet --upgrade pip 2>&1 | Out-Null
+        & $pyExeOnly -m pip install --disable-pip-version-check --quiet websockets 2>&1 | Out-Null
+        if ($LASTEXITCODE -ne 0) {
+            & $pyExeOnly -m ensurepip --default-pip 2>&1 | Out-Null
+            & $pyExeOnly -m pip install --disable-pip-version-check --quiet websockets 2>&1 | Out-Null
+        }
+    }
+
+    & $pyExeOnly -c "import websockets" 2>$null
+    if ($LASTEXITCODE -ne 0) {
+        if ($Lang -eq "ru") {
+            Write-Host "[!] Не удалось установить websockets автоматически." -ForegroundColor Red
+            Write-Host "    Выполните вручную: $pyExeOnly -m pip install websockets" -ForegroundColor Yellow
+        } else {
+            Write-Host "[!] Could not install websockets automatically." -ForegroundColor Red
+            Write-Host "    Run manually: $pyExeOnly -m pip install websockets" -ForegroundColor Yellow
+        }
+        exit 1
+    }
+    if ($Lang -eq "ru") {
+        Write-Host "[OK] websockets установлен." -ForegroundColor Green
+    } else {
+        Write-Host "[OK] websockets is installed." -ForegroundColor Green
+    }
 
 $ConfigDir = "$env:USERPROFILE\.config\antigravity-mesh"
 if (!(Test-Path $ConfigDir)) { New-Item -ItemType Directory -Path $ConfigDir -Force | Out-Null }
@@ -135,6 +193,7 @@ if (-not $ScriptDir -or -not (Test-Path "$ScriptDir\core\agent.py")) {
     $files = @(
         "core/agent.py",
         "core/server.py",
+        "core/mcp_tools.py",
         "core/vitals.py",
         "core/__init__.py",
         "skills/orchestrator.md"
@@ -193,7 +252,7 @@ if ($Mode -eq "standalone") {
     } else {
         Write-Host "=== Starting in Local Standalone Mode on port $Port ===" -ForegroundColor Blue
     }
-    Start-Process python -ArgumentList "-m core.server --port=$Port" -WorkingDirectory $ScriptDir -WindowStyle Hidden
+    Start-Process $pyExeOnly -ArgumentList "-m core.server --host 127.0.0.1 --port=$Port" -WorkingDirectory $ScriptDir -WindowStyle Hidden
     $LocalUrl = "http://localhost:$Port/sse"
     $Copied = $false
     try {
@@ -235,9 +294,9 @@ if ([string]::IsNullOrWhiteSpace($User)) {
 }
 
 if ($Lang -eq "ru") {
-    Write-Host "[2/3] Регистрация субдомена '$User' на шлюзе ($Gateway)..." -ForegroundColor Yellow
+    Write-Host "[2/3] Регистрация узла '$User' на общем домене ($Gateway)..." -ForegroundColor Yellow
 } else {
-    Write-Host "[2/3] Registering subdomain '$User' on gateway ($Gateway)..." -ForegroundColor Yellow
+    Write-Host "[2/3] Registering node '$User' on the shared domain ($Gateway)..." -ForegroundColor Yellow
 }
 $detectedMac = ""
 try {
@@ -248,7 +307,10 @@ try {
 } catch {}
 if ([string]::IsNullOrWhiteSpace($detectedMac)) {
     try {
-        $detectedMac = python -c "import uuid; print(':'.join(['{:02x}'.format((uuid.getnode() >> ele) & 0xff) for ele in range(0,8*6,8)][::-1]))" 2>$null
+        $res = python -c "import uuid; print(':'.join(['{:02x}'.format((uuid.getnode() >> ele) & 0xff) for ele in range(0,8*6,8)][::-1]))" 2>&1
+        if ($LASTEXITCODE -eq 0 -and $res) {
+            $detectedMac = $res.ToString().Trim()
+        }
     } catch {}
 }
 
@@ -268,7 +330,20 @@ $response = Invoke-RestMethod -Uri "https://$Gateway/api/register" -Method Post
 
 $AssignedUser = $response.username
 $AssignedToken = $response.token
+
+# ------------------------------------------------------------------------------
+# SHARED-DOMAIN CONTRACT: one public domain serves every node and the node is
+# selected by ?user=<node-name>. Never build a per-device subdomain URL: each
+# extra hostname needs its own DNS record and TLS SAN, and a missing SAN makes
+# the Gemini client fail with an opaque "cannot connect to host" error.
+# The gateway returns this canonical URL; the fallback keeps older gateways
+# working without ever advertising a subdomain.
+# ------------------------------------------------------------------------------
+$PublicBaseUrl = "https://$Gateway"
 $SseUrl = $response.sse_url
+if ([string]::IsNullOrWhiteSpace($SseUrl)) {
+    $SseUrl = "$PublicBaseUrl/sse?user=$AssignedUser&token=$AssignedToken"
+}
 
 # Quick Copy to Clipboard
 $Copied = $false
@@ -299,20 +374,25 @@ $env:MESH_GATEWAY = $Gateway
 $env:MESH_USER = $AssignedUser
 $env:MESH_TOKEN = $AssignedToken
 
-# Create Windows Startup launcher for persistent autostart
-$startupDir = [Environment]::GetFolderPath("Startup")
-$startupVbs = "$startupDir\antigravity-agent.vbs"
-@"
-Set WshShell = CreateObject("WScript.Shell")
-WshShell.Environment("PROCESS")("MESH_GATEWAY") = "$Gateway"
-WshShell.Environment("PROCESS")("MESH_USER") = "$AssignedUser"
-WshShell.Environment("PROCESS")("MESH_TOKEN") = "$AssignedToken"
-WshShell.CurrentDirectory = "$ScriptDir"
-WshShell.Run "python -m core.agent", 0, False
-"@ | Out-File -FilePath $startupVbs -Encoding ascii
+    # Create Windows Startup launcher for persistent autostart.
+    # The interpreter is pinned by full path: relying on PATH breaks when the
+    # Microsoft Store "python" alias is present or PATH changes between sessions.
+    $startupDir = [Environment]::GetFolderPath("Startup")
+    $startupVbs = "$startupDir\antigravity-agent.vbs"
+    $pyExeForVbs = if ($pyExeOnly) { $pyExeOnly } else { "python" }
+    $agentLog = "$ConfigDir\agent.log"
+    @"
+    Set WshShell = CreateObject("WScript.Shell")
+    WshShell.Environment("PROCESS")("MESH_GATEWAY") = "$Gateway"
+    WshShell.Environment("PROCESS")("MESH_USER") = "$AssignedUser"
+    WshShell.Environment("PROCESS")("MESH_TOKEN") = "$AssignedToken"
+    WshShell.CurrentDirectory = "$ScriptDir"
+    ' Log the output so a silent autostart failure can be diagnosed later.
+    WshShell.Run "cmd /c """"$pyExeForVbs"" -m core.agent >> """"$agentLog"""" 2>&1""", 0, False
+    "@ | Out-File -FilePath $startupVbs -Encoding ascii
 
 # Launch now
-Start-Process python -ArgumentList "-m core.agent" -WorkingDirectory $ScriptDir -WindowStyle Hidden
+Start-Process $pyExeOnly -ArgumentList "-m core.agent" -WorkingDirectory $ScriptDir -WindowStyle Hidden
 
 Clear-Host
 

package/install.sh

@@ -29,6 +29,7 @@ if [ ! -f "$SCRIPT_DIR/core/agent.py" ]; then
     mkdir -p "$BOOTSTRAP_DIR/core" "$BOOTSTRAP_DIR/skills"
     curl -fsSL "https://${GATEWAY}/core/agent.py" -o "$BOOTSTRAP_DIR/core/agent.py" 2>/dev/null || curl -fsSL "https://raw.githubusercontent.com/LevRa7/Computer-use-for-Gemini-App-Web/main/core/agent.py" -o "$BOOTSTRAP_DIR/core/agent.py" 2>/dev/null || true
     curl -fsSL "https://${GATEWAY}/core/server.py" -o "$BOOTSTRAP_DIR/core/server.py" 2>/dev/null || curl -fsSL "https://raw.githubusercontent.com/LevRa7/Computer-use-for-Gemini-App-Web/main/core/server.py" -o "$BOOTSTRAP_DIR/core/server.py" 2>/dev/null || true
+    curl -fsSL "https://${GATEWAY}/core/mcp_tools.py" -o "$BOOTSTRAP_DIR/core/mcp_tools.py" 2>/dev/null || curl -fsSL "https://raw.githubusercontent.com/LevRa7/Computer-use-for-Gemini-App-Web/main/core/mcp_tools.py" -o "$BOOTSTRAP_DIR/core/mcp_tools.py" 2>/dev/null || true
     curl -fsSL "https://${GATEWAY}/core/vitals.py" -o "$BOOTSTRAP_DIR/core/vitals.py" 2>/dev/null || curl -fsSL "https://raw.githubusercontent.com/LevRa7/Computer-use-for-Gemini-App-Web/main/core/vitals.py" -o "$BOOTSTRAP_DIR/core/vitals.py" 2>/dev/null || true
     curl -fsSL "https://${GATEWAY}/core/__init__.py" -o "$BOOTSTRAP_DIR/core/__init__.py" 2>/dev/null || true
     curl -fsSL "https://${GATEWAY}/skills/orchestrator.md" -o "$BOOTSTRAP_DIR/skills/orchestrator.md" 2>/dev/null || true
@@ -139,7 +140,10 @@ while [[ $# -gt 0 ]]; do
             shift
             ;;
         --domain=*)
+            # The shared public domain that serves every node. This is NOT a
+            # per-device subdomain: nodes are selected with ?user=<node>.
             DOMAIN="${1#*=}"
+            GATEWAY="$DOMAIN"
             shift
             ;;
         --dry-run)
@@ -147,7 +151,10 @@ while [[ $# -gt 0 ]]; do
             shift
             ;;
         -h|--help)
-            echo "Usage: $0 [--lang=en|ru] [-q|--quick] [--mode=tunnel|standalone|gateway] [--user=<subdomain>] [--token=<token>] [--port=<port>] [--ssh=user@host] [--dry-run]"
+            echo "Usage: $0 [--lang=en|ru] [-q|--quick] [--mode=tunnel|standalone|gateway] [--user=<node-name>] [--token=<token>] [--domain=<shared-domain>] [--port=<port>] [--ssh=user@host] [--dry-run]"
+            echo ""
+            echo "All nodes use ONE shared domain; the node is selected by ?user=<node-name>:"
+            echo "  MCP URL: https://<shared-domain>/sse?user=<node-name>&token=<token>"
             exit 0
             ;;
         *)
@@ -157,6 +164,20 @@ while [[ $# -gt 0 ]]; do
     esac
 done
 
+# ------------------------------------------------------------------------------
+#  SHARED-DOMAIN CONTRACT (canonical step)
+#  Every node is reached through ONE public domain ($GATEWAY); the node is
+#  selected by the ?user= query parameter. The installer never mints a
+#  per-device subdomain: each extra hostname would need its own DNS record and
+#  TLS SAN, and a name missing from the certificate fails the handshake with an
+#  opaque "cannot connect to host" error in the Gemini client.
+#     sse    https://<shared-domain>/sse?user=<node-name>&token=<token>
+#     http   https://<shared-domain>/mcp?user=<node-name>&token=<token>
+#     tunnel wss://<shared-domain>/ws/tunnel?user=<node-name>&token=<token>
+#  $GATEWAY is read at call time so the interactive menu can still change it.
+# ------------------------------------------------------------------------------
+node_sse_url() { printf 'https://%s/sse?user=%s&token=%s' "$GATEWAY" "$1" "$2"; }
+
 # Language prompt if interactive and not specified
 if [ -z "$LANG_CHOICE" ]; then
     if [ "$QUICK" = false ] && [ -z "$MODE" ] && [ -t 0 ]; then
@@ -295,7 +316,11 @@ if [ "$DRY_RUN" = true ]; then
     echo "[DRY-RUN] Port: $PORT"
     echo "[DRY-RUN] TLS: $TLS"
     if [ -n "$DOMAIN" ]; then echo "[DRY-RUN] Domain: $DOMAIN"; fi
-    if [ -n "$USERNAME" ]; then echo "[DRY-RUN] User: $USERNAME"; fi
+    if [ -n "$USERNAME" ]; then
+        echo "[DRY-RUN] User: $USERNAME"
+        echo "[DRY-RUN] Canonical MCP URL: $(node_sse_url "$USERNAME" "${TOKEN:-<token>}")"
+    fi
+    if [ -n "$TOKEN" ]; then echo "[DRY-RUN] Token: set (standalone: stored in ${CONFIG_DIR}/standalone.env, chmod 600)"; fi
     echo "[DRY-RUN] Systemd service and dependencies check: OK"
     exit 0
 fi
@@ -333,18 +358,18 @@ if [ "$QUICK" = false ] && [ -z "$MODE" ] && [ -t 0 ]; then
     echo ""
     if [ "$LANG_CHOICE" = "ru" ]; then
         echo -e "${BOLD}Выберите режим установки:${RESET}"
-        echo -e "  ${GREEN}1)${RESET} ⚡ ${BOLD}Быстрая настройка${RESET} (Субдомен как имя ПК + Облачный шлюз + Автозапуск) [Рекомендуется]"
-        echo -e "  ${BLUE}2)${RESET} 🖥️  ${BOLD}Локальный Standalone${RESET} (Только localhost:${PORT}, без субдомена и шлюза)"
-        echo -e "  ${YELLOW}3)${RESET} ⚙️  ${BOLD}Кастомная настройка${RESET} (Ввести имя субдомена вручную, выбор шлюза)"
+        echo -e "  ${GREEN}1)${RESET} ⚡ ${BOLD}Быстрая настройка${RESET} (Имя узла как имя ПК + Общий домен + Автозапуск) [Рекомендуется]"
+        echo -e "  ${BLUE}2)${RESET} 🖥️  ${BOLD}Локальный Standalone${RESET} (Только localhost:${PORT}, без облачного шлюза)"
+        echo -e "  ${YELLOW}3)${RESET} ⚙️  ${BOLD}Кастомная настройка${RESET} (Ввести имя узла вручную, выбор общего домена)"
         echo -e "  ${CYAN}4)${RESET} 📡 ${BOLD}Удаленная установка на SSH-сервер${RESET}"
         echo -e "  ${RESET}0) Выход"
         echo ""
         read -rp "Ваш выбор [1]: " MENU_CHOICE
     else
         echo -e "${BOLD}Select Installation Mode:${RESET}"
-        echo -e "  ${GREEN}1)${RESET} ⚡ ${BOLD}Quick Setup${RESET} (Auto-subdomain from PC name + Cloud Gateway + Autostart) [Recommended]"
-        echo -e "  ${BLUE}2)${RESET} 🖥️  ${BOLD}Local Standalone${RESET} (localhost:${PORT} only, no subdomain, no cloud gateway)"
-        echo -e "  ${YELLOW}3)${RESET} ⚙️  ${BOLD}Custom Setup${RESET} (Custom subdomain name, custom gateway/port)"
+        echo -e "  ${GREEN}1)${RESET} ⚡ ${BOLD}Quick Setup${RESET} (Node name from PC name + shared domain + Autostart) [Recommended]"
+        echo -e "  ${BLUE}2)${RESET} 🖥️  ${BOLD}Local Standalone${RESET} (localhost:${PORT} only, no cloud gateway)"
+        echo -e "  ${YELLOW}3)${RESET} ⚙️  ${BOLD}Custom Setup${RESET} (Custom node name, custom shared domain)"
         echo -e "  ${CYAN}4)${RESET} 📡 ${BOLD}Remote SSH Installation${RESET}"
         echo -e "  ${RESET}0) Exit"
         echo ""
@@ -364,11 +389,11 @@ if [ "$QUICK" = false ] && [ -z "$MODE" ] && [ -t 0 ]; then
             MODE="tunnel"
             echo ""
             if [ "$LANG_CHOICE" = "ru" ]; then
-                read -rp "Введите имя субдомена [по умолчанию: ${DETECTED_HOSTNAME}]: " CUSTOM_SUB
-                read -rp "Хост шлюза [по умолчанию: ${GATEWAY}]: " CUSTOM_GW
+                read -rp "Введите имя узла [по умолчанию: ${DETECTED_HOSTNAME}]: " CUSTOM_SUB
+                read -rp "Общий домен шлюза [по умолчанию: ${GATEWAY}]: " CUSTOM_GW
             else
-                read -rp "Enter subdomain name [default: ${DETECTED_HOSTNAME}]: " CUSTOM_SUB
-                read -rp "Gateway host [default: ${GATEWAY}]: " CUSTOM_GW
+                read -rp "Enter node name [default: ${DETECTED_HOSTNAME}]: " CUSTOM_SUB
+                read -rp "Shared gateway domain [default: ${GATEWAY}]: " CUSTOM_GW
             fi
             if [ -n "$CUSTOM_SUB" ]; then USERNAME="$CUSTOM_SUB"; fi
             if [ -n "$CUSTOM_GW" ]; then GATEWAY="$CUSTOM_GW"; fi
@@ -376,10 +401,10 @@ if [ "$QUICK" = false ] && [ -z "$MODE" ] && [ -t 0 ]; then
         4)
             echo ""
             if [ "$LANG_CHOICE" = "ru" ]; then
-                read -rp "Введите SSH цель (например, user@192.168.1.50): " REMOTE_TARGET
+                read -rp "Введите SSH цель (например, user@<host-ip>): " REMOTE_TARGET
                 read -rp "Порт SSH [22]: " REMOTE_PORT
             else
-                read -rp "Enter SSH target (e.g., user@192.168.1.50): " REMOTE_TARGET
+                read -rp "Enter SSH target (e.g., user@<host-ip>): " REMOTE_TARGET
                 read -rp "SSH Port [22]: " REMOTE_PORT
             fi
             REMOTE_PORT=${REMOTE_PORT:-22}
@@ -416,6 +441,37 @@ if [ "$MODE" = "standalone" ]; then
     ensure_dependencies
     mkdir -p "$CONFIG_DIR"
 
+    # Honour --token in standalone mode without embedding the secret in the
+    # (world-readable) unit/plist: keep it in a 0600 env file for systemd
+    # (EnvironmentFile) and use a 0600 plist environment block on macOS.
+    # core.server reads MESH_TOKEN as the default for --token.
+    STANDALONE_ENV_FILE="$CONFIG_DIR/standalone.env"
+    ENV_FILE_LINE=""
+    PLIST_ENV_BLOCK=""
+    if [ -n "$TOKEN" ]; then
+        printf 'MESH_TOKEN=%s\n' "$TOKEN" > "$STANDALONE_ENV_FILE"
+        chmod 600 "$STANDALONE_ENV_FILE"
+        ENV_FILE_LINE="EnvironmentFile=$STANDALONE_ENV_FILE"
+        PLIST_TOKEN=$(printf '%s' "$TOKEN" | sed -e 's/&/\&amp;/g' -e 's/</\&lt;/g' -e 's/>/\&gt;/g')
+        PLIST_ENV_BLOCK="    <key>EnvironmentVariables</key>
+    <dict>
+        <key>MESH_TOKEN</key>
+        <string>${PLIST_TOKEN}</string>
+    </dict>"
+        if [ "$LANG_CHOICE" = "ru" ]; then
+            echo -e "${GREEN}[✓] Токен авторизации включён (chmod 600).${RESET}"
+        else
+            echo -e "${GREEN}[OK] Authorization token enabled (chmod 600).${RESET}"
+        fi
+    else
+        rm -f "$STANDALONE_ENV_FILE" 2>/dev/null || true
+        if [ "$LANG_CHOICE" = "ru" ]; then
+            echo -e "${YELLOW}[!] Токен не задан (--token): сервер доступен без авторизации на 127.0.0.1.${RESET}"
+        else
+            echo -e "${YELLOW}[!] No --token given: server is unauthenticated on 127.0.0.1.${RESET}"
+        fi
+    fi
+
     if [ "$LANG_CHOICE" = "ru" ]; then
         echo "[2/3] Настройка systemd автозапуска на ПК..."
     else
@@ -438,6 +494,7 @@ if [ "$MODE" = "standalone" ]; then
         <string>$(which python3)</string>
         <string>-m</string>
         <string>core.server</string>
+        <string>--host=127.0.0.1</string>
         <string>--port=$PORT</string>
     </array>
     <key>WorkingDirectory</key>
@@ -446,9 +503,13 @@ if [ "$MODE" = "standalone" ]; then
     <true/>
     <key>KeepAlive</key>
     <true/>
+$PLIST_ENV_BLOCK
 </dict>
 </plist>
 EOF
+        if [ -n "$TOKEN" ]; then
+            chmod 600 "$PLIST_FILE"
+        fi
         launchctl unload "$PLIST_FILE" 2>/dev/null || true
         launchctl load -w "$PLIST_FILE" 2>/dev/null || true
     else
@@ -462,8 +523,9 @@ After=network.target
 
 [Service]
 Type=simple
+$ENV_FILE_LINE
 WorkingDirectory=$SCRIPT_DIR
-ExecStart=$PYTHON_BIN -m core.server --port=$PORT
+ExecStart=$PYTHON_BIN -m core.server --host 127.0.0.1 --port=$PORT
 Restart=always
 RestartSec=5
 
@@ -473,7 +535,11 @@ EOF
         systemctl --user daemon-reload 2>/dev/null || true
         systemctl --user enable --now agy-standalone.service 2>/dev/null || {
             pkill -f "core.server" 2>/dev/null || true
-            nohup $PYTHON_BIN -m core.server --port="$PORT" > "$CONFIG_DIR/standalone.log" 2>&1 &
+            if [ -n "$TOKEN" ]; then
+                nohup env MESH_TOKEN="$TOKEN" $PYTHON_BIN -m core.server --host 127.0.0.1 --port="$PORT" > "$CONFIG_DIR/standalone.log" 2>&1 &
+            else
+                nohup $PYTHON_BIN -m core.server --host 127.0.0.1 --port="$PORT" > "$CONFIG_DIR/standalone.log" 2>&1 &
+            fi
         }
         loginctl enable-linger "$USER" 2>/dev/null || true
     fi
@@ -483,7 +549,28 @@ EOF
     else
         echo "[3/3] Verifying local endpoint..."
     fi
-    sleep 1
+    HEALTH_URL="http://127.0.0.1:${PORT}/health"
+    HEALTH_OK=false
+    for _attempt in 1 2 3 4 5 6 7 8 9 10; do
+        HTTP_CODE=$(curl -s -o /dev/null -m 2 -w "%{http_code}" "$HEALTH_URL" 2>/dev/null || true)
+        if [ "$HTTP_CODE" = "200" ]; then
+            HEALTH_OK=true
+            break
+        fi
+        sleep 1
+    done
+    if [ "$HEALTH_OK" != true ]; then
+        if [ "$LANG_CHOICE" = "ru" ]; then
+            echo -e "\033[1;31m[ОШИБКА] Standalone MCP-сервер не отвечает (HTTP ${HTTP_CODE:-нет ответа}): $HEALTH_URL\033[0m" >&2
+            echo -e "  Проверьте статус: ${CYAN}systemctl --user status agy-standalone.service${RESET}" >&2
+            echo -e "  Логи:             ${CYAN}journalctl --user -u agy-standalone.service -n 50 --no-pager${RESET}" >&2
+        else
+            echo -e "\033[1;31m[ERROR] Standalone MCP server is not responding (HTTP ${HTTP_CODE:-no response}): $HEALTH_URL\033[0m" >&2
+            echo -e "  Check status: ${CYAN}systemctl --user status agy-standalone.service${RESET}" >&2
+            echo -e "  Logs:         ${CYAN}journalctl --user -u agy-standalone.service -n 50 --no-pager${RESET}" >&2
+        fi
+        exit 1
+    fi
 
     MCP_LOCAL_URL="http://localhost:${PORT}/sse"
     
@@ -507,7 +594,7 @@ EOF
 
     if [ "$LANG_CHOICE" = "ru" ]; then
         echo ""
-        local copy_msg=""
+        copy_msg=""
         if [ "$COPIED" = true ]; then
             copy_msg="[OK] ССЫЛКА СКОПИРОВАНА В БУФЕР ОБМЕНА! (Вставьте через Ctrl+V)"
         else
@@ -522,7 +609,7 @@ EOF
         echo ""
     else
         echo ""
-        local copy_msg=""
+        copy_msg=""
         if [ "$COPIED" = true ]; then
             copy_msg="[OK] URL COPIED TO CLIPBOARD! (Press Ctrl+V to paste)"
         else
@@ -543,9 +630,9 @@ fi
 #  BRANCH: CLOUD GATEWAY + REVERSE TUNNEL
 # ==============================================================================
 if [ "$LANG_CHOICE" = "ru" ]; then
-    echo -e "\n${BOLD}${MAGENTA}=== Настройка облачного туннеля и субдомена ===${RESET}"
+    echo -e "\n${BOLD}${MAGENTA}=== Настройка облачного туннеля (общий домен) ===${RESET}"
 else
-    echo -e "\n${BOLD}${MAGENTA}=== Configuring Cloud Gateway Tunnel & Subdomain ===${RESET}"
+    echo -e "\n${BOLD}${MAGENTA}=== Configuring Cloud Gateway Tunnel (shared domain) ===${RESET}"
 fi
 
 if [ -z "$USERNAME" ]; then
@@ -566,9 +653,9 @@ fi
 ensure_dependencies
 
 if [ "$LANG_CHOICE" = "ru" ]; then
-    echo "[2/4] Регистрация субдомена '${USERNAME}' на шлюзе (${GATEWAY})..."
+    echo "[2/4] Регистрация узла '${USERNAME}' на общем домене (${GATEWAY})..."
 else
-    echo "[2/4] Registering subdomain '${USERNAME}' on Gateway (${GATEWAY})..."
+    echo "[2/4] Registering node '${USERNAME}' on the shared domain (${GATEWAY})..."
 fi
 
 EXISTING_TOKEN=""
@@ -633,9 +720,9 @@ fi
 
 if [ "$ASSIGNED_USER" != "$USERNAME" ]; then
     if [ "$LANG_CHOICE" = "ru" ]; then
-        echo -e "${YELLOW}ℹ️  Имя '${USERNAME}' уже было занято. Автоматически назначен субдомен:${RESET} ${BOLD}${GREEN}${ASSIGNED_USER}${RESET}"
+        echo -e "${YELLOW}ℹ️  Имя '${USERNAME}' уже было занято. Автоматически назначено имя узла:${RESET} ${BOLD}${GREEN}${ASSIGNED_USER}${RESET}"
     else
-        echo -e "${YELLOW}ℹ️  Name '${USERNAME}' was already taken. Automatically assigned subdomain:${RESET} ${BOLD}${GREEN}${ASSIGNED_USER}${RESET}"
+        echo -e "${YELLOW}ℹ️  Name '${USERNAME}' was already taken. Automatically assigned node name:${RESET} ${BOLD}${GREEN}${ASSIGNED_USER}${RESET}"
     fi
 fi
 
@@ -724,7 +811,8 @@ fi
 
 sleep 1
 
-MCP_URL="https://${ASSIGNED_USER}.${GATEWAY}/sse?token=${ASSIGNED_TOKEN}"
+# Canonical shared-domain MCP URL (one domain for every node; ?user= selects it).
+MCP_URL="$(node_sse_url "$ASSIGNED_USER" "$ASSIGNED_TOKEN")"
 
 # Quick Copy to Clipboard
 COPIED=false
@@ -746,7 +834,7 @@ clear 2>/dev/null || printf "\033[2J\033[H" || true
 
 if [ "$LANG_CHOICE" = "ru" ]; then
     echo ""
-    local copy_msg=""
+    copy_msg=""
     if [ "$COPIED" = true ]; then
         copy_msg="[OK] ССЫЛКА СКОПИРОВАНА В БУФЕР ОБМЕНА! (Вставьте через Ctrl+V)"
     else
@@ -761,7 +849,7 @@ if [ "$LANG_CHOICE" = "ru" ]; then
     echo ""
 else
     echo ""
-    local copy_msg=""
+    copy_msg=""
     if [ "$COPIED" = true ]; then
         copy_msg="[OK] URL COPIED TO CLIPBOARD! (Paste with Ctrl+V)"
     else

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "gemini-computer-use",
-  "version": "0.1.2",
-  "description": "Turn your PC, Laptop, or Server into an autonomous execution node for Google Gemini via Native MCP",
+  "version": "0.2.4",
+  "description": "Turn your PC, Laptop or Server into an autonomous execution node for Google Gemini via native MCP: 14 tools, write/edit/search, background jobs, secure reverse tunnel.",
   "main": "bin/cli.js",
   "bin": {
     "gemini-computer-use": "bin/cli.js"
@@ -16,7 +16,8 @@
     "install.sh",
     "install.ps1",
     "README.md",
-    "LICENSE"
+    "LICENSE",
+    "gateway.py"
   ],
   "keywords": [
     "gemini",