mindwire 0.1.11 → 0.1.14

package/README.md

@@ -61,6 +61,79 @@ setTimeout(() => run.cancel(), 5_000);
 for await (const ev of run) { /* … */ }
 ```
 
+## Saved workspace data
+
+`mw.workspace` manages named agent profiles, projects and chat links in the
+workspace's SQLite registry. It is shared by every `withAgent()` view. Harness
+configuration/history remain in their existing harness stores; credentials still
+use the daemon's existing auth adapters and credential store.
+
+```ts
+const profileId = crypto.randomUUID();
+const projectId = crypto.randomUUID();
+const chatId = crypto.randomUUID();
+await mw.workspace.agents.put(profileId, { name: "My Codex", agentType: "codex" });
+// This metadata API opens an existing directory. See createProject below for cloning.
+await mw.workspace.projects.put(projectId, { name: "App", path: "/work/app" });
+const saved = await mw.workspace.chats.put(chatId, {
+  agentId: profileId, projectId, title: "Build app",
+});
+
+// A second client can reconstruct all saved navigation links.
+const snapshot = await mw.workspace.snapshot();
+const updates = await mw.workspace.changes(saved.revision, saved.workspaceId);
+const project = snapshot.projects.find(p => p.id === projectId)!;
+await mw.workspace.projects.put(projectId, { ...project, name: "Renamed" }, project.revision);
+```
+
+Use stable IDs when retrying creates and the latest record revision when updating
+or deleting. Conflicts return `ApiError` with status 409; a removed ID returns 410.
+Collection deletion removes membership and dependent chat links, retaining files
+and native transcripts. Use `deleteChat()` for an explicit transcript purge.
+
+Check `health().workspaceMetadataVersion` before enabling registry features on an
+older daemon. `workspace.import()` imports legacy IDs once; existing records and
+deletion markers win. See the [registry contract](../../daemon/WORKSPACES.md) for
+migration and recovery. The embedded Go SDK exposes the same operations through
+`client.Workspace`, using the same SQLite implementation.
+
+Project workflows run in the daemon, including directory validation, clone output,
+cancellation, retries, registration and folder removal. Check `health().projectOperationsVersion`.
+
+```ts
+const operation = await mw.workspace.createProject({
+  id: crypto.randomUUID(), // retain this ID when retrying a lost acknowledgement
+  source: "clone",        // or "folder" (existing) / "create" (new directory)
+  name: "My app",
+  path: "~/projects/my-app", // parent exists; destination must be absent for cloning
+  repoUrl: "https://github.com/owner/repo.git",
+  // auth: { kind: "token", token: installationToken } — write-only, never in origin
+});
+for await (const snapshot of mw.workspace.operations.watch(operation.id)) {
+  console.log(snapshot.status, snapshot.phase, snapshot.progress);
+}
+// A new client can list/observe the same operation, including after disconnect.
+await mw.workspace.operations.list(true);
+// Explicit cancellation/retry; breaking a watch loop only detaches that observer.
+// await mw.workspace.operations.cancel(operation.id);
+// await mw.workspace.operations.retry(operation.id, freshAuth);
+```
+
+In Go, use `client.Workspace.CreateProject(ProjectRequest{...})` and
+`client.Workspace.Operations.Get/List/Watch/Cancel/Retry`. These call the same
+project service as HTTP. Active destination reservations prevent duplicate clones;
+the final project and successful operation status commit in one SQLite transaction.
+An interrupted daemon reconciles a staged commit or marks earlier work retryable.
+
+`workspace.projects.delete(id, revision)` removes registry membership while retaining
+files and native transcripts. Explicit folder deletion uses
+`workspace.removeProjectFiles(id, { operationId, expectedRevision })` (Go:
+`Workspace.RemoveProjectFiles`). Confirm it with the user first, retain the operation
+ID for transport retries, and observe the returned operation as above. The daemon
+blocks running chats/overlapping projects and recovers removal across restarts.
+Cancellation returns 409 after the `deleting` phase; cleanup then affects only the
+owned quarantine, even if someone recreates the original directory.
+
 ## Targets — where the daemon runs
 
 **One `new Mindwire` = one instance = one daemon = one environment.** Every agent that instance runs

package/dist/client.d.ts

@@ -1,5 +1,7 @@
 import { Http, type FetchLike } from "./http.js";
 import { Run } from "./run.js";
+import { WorkspaceApi } from "./workspace.js";
+import { SurfacesApi } from "./surfaces.js";
 import { type Target } from "./target/index.js";
 import type { EnsureEvent } from "./target/host.js";
 import type { AgentInfo, AuthMethod, AuthState, AuthStatus, Catalog, ChatSummary, CustomProvider, DeleteResult, DoctorReport, Health, MCPServer, MemoryDoc, MemoryScope, Message, ModelInfo, Notification, NotifyChannel, NotifyChannelInput, NotifyChannelTestResult, NotifyConfigInput, NotifyConfigStatus, NotifyRule, NotifyRuleInput, ProcessFrame, PromptTemplate, ResolveOptions, SetupStatus, Stats, Subagent, TurnOptions } from "./types.js";
@@ -67,6 +69,9 @@ export interface AgentScoped {
  * ```
  */
 export declare class Mindwire {
+    /** Workspace registry: saved agent profiles, projects and chat relationships. */
+    readonly workspace: WorkspaceApi;
+    readonly surfaces: SurfacesApi;
     readonly http: Http;
     /** The default agent type applied to agent-scoped calls, if set. */
     readonly defaultAgent: string | undefined;

package/dist/index.cjs

@@ -289,6 +289,8 @@ async function* readSSE(body, signal) {
     if (payload !== void 0) yield JSON.parse(payload);
   } finally {
     if (signal) signal.removeEventListener("abort", onAbort);
+    await reader.cancel().catch(() => {
+    });
     reader.releaseLock();
   }
 }
@@ -413,9 +415,9 @@ var Run = class _Run {
     });
   }
   /**
-   * Switch the permission mode of the live turn (e.g. `default`, `acceptEdits`, `plan`,
-   * `bypassPermissions`). Only meaningful on a persistent (non-bypass) turn; on a one-shot turn it
-   * is a best-effort no-op. Requires the agent's `setPermissionMode` capability.
+   * Switch the live permission mode using a value from the agent's settings schema.
+   * Resolves after the harness acknowledges the change; rejects if it cannot apply it.
+   * Requires `setPermissionMode`. Codex settings apply on the next turn instead.
    */
   async setPermissionMode(mode) {
     await this.http.request("POST", `/runs/${encodeURIComponent(this.id)}/set-permission-mode`, {
@@ -475,8 +477,174 @@ var Run = class _Run {
   }
 };
 
+// src/workspace.ts
+var ProjectOperationsApi = class {
+  constructor(mw) {
+    this.mw = mw;
+  }
+  mw;
+  async list(activeOnly = false) {
+    const response = await this.mw.http.request("GET", "/workspace/operations", {
+      query: { active: activeOnly }
+    });
+    return response.operations;
+  }
+  get(id) {
+    return this.mw.http.request("GET", `/workspace/operations/${encodeURIComponent(id)}`);
+  }
+  cancel(id) {
+    return this.mw.http.request("POST", `/workspace/operations/${encodeURIComponent(id)}/cancel`);
+  }
+  retry(id, auth) {
+    return this.mw.http.request("POST", `/workspace/operations/${encodeURIComponent(id)}/retry`, { body: { auth } });
+  }
+  /** The first event is the current snapshot, then live changes. Reconnecting never replays old
+   * progress. Breaking the loop/aborting detaches the observer; cancel(id) explicitly stops work.
+   */
+  async *watch(id, opts = {}) {
+    const controller = new AbortController();
+    const abort = () => controller.abort();
+    opts.signal?.addEventListener("abort", abort, { once: true });
+    if (opts.signal?.aborted) controller.abort();
+    try {
+      const response = await this.mw.http.open("GET", `/workspace/operations/${encodeURIComponent(id)}/stream`, {
+        signal: controller.signal
+      });
+      let sequence = -1;
+      for await (const operation of readSSE(response.body, controller.signal)) {
+        if (operation.sequence > sequence) {
+          sequence = operation.sequence;
+          yield operation;
+        }
+      }
+    } finally {
+      controller.abort();
+      opts.signal?.removeEventListener("abort", abort);
+    }
+  }
+};
+var WorkspaceCollection = class {
+  constructor(mw, kind) {
+    this.mw = mw;
+    this.kind = kind;
+  }
+  mw;
+  kind;
+  /** Create with a stable client-generated ID. For updates, supply the record's last revision. */
+  put(id, record, expectedRevision) {
+    return this.mw.http.request("PUT", `/workspace/${this.kind}/${encodeURIComponent(id)}`, {
+      body: { record, expectedRevision }
+    });
+  }
+  /** Remove membership and dependent chat links. Files and native transcripts are retained.
+   * Use deleteChat() for an explicit transcript purge. Running chats reject removal with 409.
+   */
+  delete(id, revision) {
+    return this.mw.http.request("DELETE", `/workspace/${this.kind}/${encodeURIComponent(id)}`, {
+      query: { revision }
+    });
+  }
+};
+var WorkspaceApi = class {
+  constructor(mw) {
+    this.mw = mw;
+    this.operations = new ProjectOperationsApi(mw);
+    this.agents = new WorkspaceCollection(mw, "agents");
+    this.projects = new WorkspaceCollection(mw, "projects");
+    this.chats = new WorkspaceCollection(mw, "chats");
+  }
+  mw;
+  operations;
+  agents;
+  projects;
+  chats;
+  snapshot() {
+    return this.mw.http.request("GET", "/workspace");
+  }
+  /** Start an operation owned by the daemon. The same ID/payload returns the existing operation. */
+  createProject(request) {
+    return this.mw.http.request("POST", "/workspace/projects", { body: request });
+  }
+  /** Permanently remove the confirmed project's directory and membership.
+   * projects.delete() retains files. Native harness transcripts are not purged.
+   */
+  removeProjectFiles(id, request) {
+    return this.mw.http.request("POST", `/workspace/projects/${encodeURIComponent(id)}/remove`, { body: request });
+  }
+  /** Incremental reconciliation. Pass the previous identity to detect a replaced/restored workspace.
+   * A 409 requires fetching snapshot() again; never apply a delta to a different registry.
+   */
+  changes(since, workspaceId) {
+    return this.mw.http.request("GET", "/workspace/changes", { query: { since, workspaceId } });
+  }
+  /** Import legacy metadata before replacing a local cache. Safe to repeat after interruption. */
+  import(records) {
+    return this.mw.http.request("POST", "/workspace/import", { body: records });
+  }
+};
+
+// src/surfaces.ts
+var SurfacesApi = class {
+  constructor(mw) {
+    this.mw = mw;
+  }
+  mw;
+  list() {
+    return this.mw.http.request("GET", "/surfaces");
+  }
+  status(refresh = false) {
+    return this.mw.http.request("GET", "/surfaces/desktop", { query: { refresh } });
+  }
+  bind(binding) {
+    return this.mw.http.request("PUT", "/surfaces/desktop/binding", { body: binding });
+  }
+  open(request) {
+    return this.mw.http.request("POST", "/surfaces/desktop/sessions", { body: request });
+  }
+  control(id, request) {
+    return this.mw.http.request("POST", `/surfaces/desktop/sessions/${encodeURIComponent(id)}/control`, { body: request });
+  }
+  close(id) {
+    return this.mw.http.request("DELETE", `/surfaces/desktop/sessions/${encodeURIComponent(id)}`);
+  }
+  capture(id) {
+    return this.mw.http.request("POST", `/surfaces/desktop/sessions/${encodeURIComponent(id)}/captures`);
+  }
+  action(request) {
+    return this.mw.http.request("POST", "/surfaces/desktop/actions", { body: request });
+  }
+  receipt(id) {
+    return this.mw.http.request("GET", `/surfaces/desktop/actions/${encodeURIComponent(id)}`);
+  }
+  artifact(id) {
+    return this.mw.http.request("GET", `/artifacts/${encodeURIComponent(id)}`);
+  }
+  /** Every connection starts with the current snapshot, then revisions. Never replays input. */
+  async *watch(opts = {}) {
+    const controller = new AbortController();
+    const abort = () => controller.abort();
+    opts.signal?.addEventListener("abort", abort, { once: true });
+    if (opts.signal?.aborted) controller.abort();
+    try {
+      const response = await this.mw.http.open("GET", "/surfaces/desktop/events", { signal: controller.signal });
+      let instance;
+      let revision = -1;
+      for await (const snapshot of readSSE(response.body, controller.signal)) {
+        if (instance !== snapshot.instanceId || snapshot.revision > revision) {
+          instance = snapshot.instanceId;
+          revision = snapshot.revision;
+          yield snapshot;
+        }
+      }
+    } finally {
+      controller.abort();
+      opts.signal?.removeEventListener("abort", abort);
+    }
+  }
+};
+
 // src/version.ts
-var SDK_VERSION = "0.1.11" ;
+var SDK_VERSION = "0.1.14" ;
 
 // src/daemon-binary.ts
 function supported(platform, arch) {
@@ -734,6 +902,9 @@ function remote(baseUrl, opts = {}) {
 // src/client.ts
 var handleByTransport = /* @__PURE__ */ new WeakMap();
 var Mindwire = class _Mindwire {
+  /** Workspace registry: saved agent profiles, projects and chat relationships. */
+  workspace;
+  surfaces;
   http;
   /** The default agent type applied to agent-scoped calls, if set. */
   defaultAgent;
@@ -767,6 +938,8 @@ var Mindwire = class _Mindwire {
       }
     });
     this.defaultAgent = opts.agent;
+    this.workspace = new WorkspaceApi(this);
+    this.surfaces = new SurfacesApi(this);
     this.auth = new AuthApi(this);
     this.prompts = new PromptsApi(this);
     this.mcp = new McpApi(this);
@@ -787,6 +960,8 @@ var Mindwire = class _Mindwire {
     const clone = Object.create(_Mindwire.prototype);
     clone.http = this.http;
     clone.defaultAgent = agent;
+    clone.workspace = new WorkspaceApi(clone);
+    clone.surfaces = new SurfacesApi(clone);
     clone.auth = new AuthApi(clone);
     clone.prompts = new PromptsApi(clone);
     clone.mcp = new McpApi(clone);
@@ -1309,17 +1484,24 @@ function makeEmit(cfg) {
     }
   };
 }
-var DAEMON_DIR = "/root/.mindwire";
-var BIN = `${DAEMON_DIR}/mindwired`;
-var BIN_NEW = `${BIN}.new`;
-var STATE = `${DAEMON_DIR}/agent-state.json`;
-var LOG = `${DAEMON_DIR}/daemon.log`;
+async function daemonDirectory(host) {
+  const result = await host.exec(["sh", "-lc", 'printf "<<MW_HOME>>%s<<MW_HOME>>" "$HOME"'], { timeoutSeconds: 15 });
+  const runtimeHome = result.stdout?.match(/<<MW_HOME>>([\s\S]*?)<<MW_HOME>>/)?.[1];
+  if (!runtimeHome?.startsWith("/") || runtimeHome.length > 4096 || /[\x00-\x1f\x7f]/.test(runtimeHome)) {
+    throw new MindwireError("mindwire: cannot resolve the runtime user's home directory");
+  }
+  return runtimeHome.replace(/\/+$/, "") + "/.mindwire";
+}
 async function ensureDaemon(host, cfg) {
   const emit2 = makeEmit(cfg);
-  const token = cfg.token ?? (await import('crypto')).randomBytes(32).toString("hex");
+  let token = cfg.token ?? (await import('crypto')).randomBytes(32).toString("hex");
   try {
     await waitHostReady(host);
     emit2({ phase: "connect", message: "runtime ready" });
+    const directory = await daemonDirectory(host);
+    if (!cfg.token) {
+      token = await readWorkspaceToken(host, directory) ?? token;
+    }
     const desired = cfg.desiredVersion ?? SDK_VERSION;
     const health = await probeHealth(host, cfg.port, token);
     if (health.reachable) {
@@ -1340,37 +1522,54 @@ async function ensureDaemon(host, cfg) {
     } else {
       emit2({ phase: "probe", message: "no daemon reachable; deploying" });
     }
-    await deploy(host, cfg, emit2, token);
+    await deploy(host, cfg, emit2, token, directory);
+    if (!cfg.token) token = await readWorkspaceToken(host, directory) ?? token;
     return token;
   } catch (err) {
     emit2({ phase: "error", message: "ensure failed", error: err instanceof Error ? err.message : String(err) });
     throw err;
   }
 }
-async function deploy(host, cfg, emit2, token) {
-  const arch = await probeArch(host);
+async function readWorkspaceToken(host, directory) {
+  const saved = await host.exec(["sh", "-lc", `cat ${shellQuote(directory + "/daemon.token")} 2>/dev/null || true`], { timeoutSeconds: 15 });
+  const candidate = saved.stdout?.trim();
+  return candidate && candidate.length <= 4096 && /^[\x21-\x7e]+$/.test(candidate) ? candidate : void 0;
+}
+async function deploy(host, cfg, emit2, token, directory) {
+  const newPath = directory + "/mindwired.new";
+  const BIN = shellQuote(directory + "/mindwired"), BIN_NEW = shellQuote(newPath);
+  const STATE = shellQuote(directory + "/agent-state.json"), LOG = shellQuote(directory + "/daemon.log");
+  const TOKEN = shellQuote(directory + "/daemon.token");
+  const { platform, arch } = await probePlatform(host);
   const desired = cfg.desiredVersion ?? SDK_VERSION;
   let acquire = "";
+  let stagedUpload;
   if (cfg.daemonBin) {
-    const binPath = await resolveLinuxDaemon(cfg.daemonBin, arch);
+    const binPath = await resolveHostDaemon(cfg.daemonBin, platform, arch);
     const bytes = await readBytes(binPath);
-    emit2({ phase: "upload", message: `uploading daemon (${arch}, ${formatMiB(bytes.length)})`, arch, bytes: bytes.length });
-    await host.putFile(BIN_NEW, bytes, { mode: "0755" });
+    emit2({ phase: "upload", message: `uploading daemon (${platform}-${arch}, ${formatMiB(bytes.length)})`, platform, arch, bytes: bytes.length });
+    stagedUpload = `${newPath}-${(await import('crypto')).randomUUID()}`;
+    await host.exec(["sh", "-lc", `mkdir -p ${shellQuote(directory)}`], { timeoutSeconds: 15 });
+    await host.putFile(stagedUpload, bytes, { mode: "0755" });
+    acquire = `mv -f ${shellQuote(stagedUpload)} ${BIN_NEW}`;
   } else {
     if (!/^[0-9]+\.[0-9]+\.[0-9]+(?:-[0-9A-Za-z.-]+)?$/.test(desired)) {
       throw new MindwireError(`mindwire: cannot download daemon for non-release SDK version ${desired}`);
     }
-    const asset = `mindwired-v${desired}-linux-${arch === "arm64" ? "arm64" : "amd64"}`;
+    const asset = `mindwired-v${desired}-${platform}-${arch}`;
     const release = `https://github.com/oblien/mindwire/releases/download/v${desired}`;
-    emit2({ phase: "download", message: `downloading daemon v${desired} on the destination (${arch})`, arch });
+    emit2({ phase: "download", message: `downloading daemon v${desired} on the destination (${platform}-${arch})`, platform, arch });
     acquire = [
       `release=${shellQuote(release)}`,
       `asset=${shellQuote(asset)}`,
+      "if command -v sha256sum >/dev/null 2>&1; then mw_sha256=(sha256sum);",
+      "elif command -v shasum >/dev/null 2>&1; then mw_sha256=(shasum -a 256);",
+      'else echo "MINDWIRE_FAIL SHA-256 verification requires sha256sum or shasum"; exit 1; fi',
       "download() {",
       `  expected=$(curl -fsSL "$release/checksums.txt" | awk -v asset="$asset" '$2 == asset { print $1; exit }') || return 1`,
       '  [ -n "$expected" ] || return 1',
       `  curl -fsSL "$release/$asset" -o ${BIN_NEW} || return 1`,
-      `  actual=$(sha256sum ${BIN_NEW} | awk '{print $1}')`,
+      `  actual=$("\${mw_sha256[@]}" ${BIN_NEW} | awk '{print $1}') || return 1`,
       '  [ "$actual" = "$expected" ] || return 2',
       "}",
       "if download; then :; else",
@@ -1378,33 +1577,61 @@ async function deploy(host, cfg, emit2, token) {
       `  latest=$(curl -fsSL https://api.github.com/repos/oblien/mindwire/releases/latest | sed -n 's/.*"tag_name"[[:space:]]*:[[:space:]]*"\\([^"]*\\)".*/\\1/p')`,
       '  case "$latest" in v[0-9]*.[0-9]*.[0-9]*) ;; *) echo "MINDWIRE_FAIL no matching or latest release"; exit 1 ;; esac',
       '  release="https://github.com/oblien/mindwire/releases/download/$latest"',
-      `  asset="mindwired-$latest-linux-${arch === "arm64" ? "arm64" : "amd64"}"`,
+      `  asset="mindwired-$latest-${platform}-${arch}"`,
       '  download || { echo "MINDWIRE_FAIL latest release download failed"; exit 1; }',
       "fi",
       `chmod +x ${BIN_NEW}`
     ].join("\n");
   }
   const script = [
-    "set -e",
-    `mkdir -p ${DAEMON_DIR}`,
+    "set -eo pipefail",
+    `mkdir -p ${shellQuote(directory)}`,
+    // iOS takes this same workspace lock. Unique staging also protects concurrent local uploads.
+    stagedUpload ? `trap ${shellQuote(`rm -f ${shellQuote(stagedUpload)}`)} EXIT` : "",
+    `exec 9>${shellQuote(directory + "/daemon-install.lock")}`,
+    "if command -v flock >/dev/null 2>&1; then",
+    '  flock -w 360 9 || { echo "MINDWIRE_FAIL another daemon update is still running"; exit 1; }',
+    "elif command -v lockf >/dev/null 2>&1; then",
+    '  lockf -s -t 360 9 || { echo "MINDWIRE_FAIL another daemon update is still running"; exit 1; }',
+    'else echo "MINDWIRE_FAIL No supported update lock is available (flock on Linux, lockf on macOS)."; exit 1; fi',
+    `mw_token=${shellQuote(token)}`,
+    !cfg.token ? `if [ -s ${TOKEN} ]; then mw_token=$(cat ${TOKEN}); fi` : "",
+    !cfg.forceDeploy ? [
+      `mw_health=$(curl -fsS --max-time 3 -H "Authorization: Bearer $mw_token" http://127.0.0.1:${cfg.port}/healthz 2>/dev/null || true)`,
+      `mw_version=$(printf '%s' "$mw_health" | sed -n 's/.*"version"[[:space:]]*:[[:space:]]*"\\([^" ]*\\)".*/\\1/p')`,
+      `if [ -n "$mw_health" ] && ${cfg.autoUpdate ? `[ "$mw_version" = ${shellQuote(desired)} ]` : "true"}; then echo MINDWIRE_READY; exit 0; fi`
+    ].join("\n") : "",
+    // macOS ships POSIX setsid in Perl, but does not include Linux's setsid executable.
+    "if command -v setsid >/dev/null 2>&1; then mw_detach=(setsid);",
+    `elif command -v perl >/dev/null 2>&1; then mw_detach=(perl -MPOSIX -e 'defined(my $sid = POSIX::setsid()) && $sid >= 0 or die "setsid: $!"; exec @ARGV; die "exec: $!";');`,
+    'else echo "MINDWIRE_FAIL Cannot start the Mindwire service: setsid or Perl is required."; exit 1; fi',
     acquire,
     // Stop a prior daemon by exact process NAME, never `pkill -f <path>`: this whole script (which
     // contains `${BIN}` several times) is the argv of the `bash -lc` shell running it, so a full-cmdline
     // match would SIGTERM our own deploying shell before the daemon ever launches. `-x mindwired` matches
     // only the daemon's comm (`bash`/`pkill` never match), leaving this shell alive.
-    `pkill -x mindwired 2>/dev/null || true`,
+    "if command -v pkill >/dev/null 2>&1; then",
+    "  pkill -x mindwired 2>/dev/null || true",
+    "else",
+    "  for mw_proc in /proc/[0-9]*/comm; do",
+    '    IFS= read -r mw_name 2>/dev/null < "$mw_proc" || continue',
+    '    [ "$mw_name" = mindwired ] || continue',
+    "    mw_pid=${mw_proc#/proc/}; mw_pid=${mw_pid%/comm}",
+    '    kill "$mw_pid" 2>/dev/null || true',
+    "  done",
+    "fi",
     "sleep 0.3",
     `mv -f ${BIN_NEW} ${BIN}`,
     `chmod +x ${BIN}`,
     // Detach so the daemon survives this exec's shell exiting. ADDR=":<port>" binds 0.0.0.0.
-    `setsid nohup env ADDR=":${cfg.port}" AGENT_TYPE="${cfg.agent}" AGENT_CWD="${cfg.agentCwd}" STATE_PATH="${STATE}" DAEMON_TOKEN=${shellQuote(token)} ${BIN} > ${LOG} 2>&1 < /dev/null &`,
+    `"\${mw_detach[@]}" nohup env ADDR=":${cfg.port}" AGENT_TYPE=${shellQuote(cfg.agent)} AGENT_CWD=${shellQuote(cfg.agentCwd)} STATE_PATH=${STATE} DAEMON_TOKEN="$mw_token" ${BIN} > ${LOG} 2>&1 < /dev/null 9>&- &`,
     // Health-poll from inside the VM (loopback) and emit a marker — exit codes are unreliable here.
-    `for i in $(seq 1 60); do curl -fsS --max-time 2 -H ${shellQuote(`Authorization: Bearer ${token}`)} http://127.0.0.1:${cfg.port}/healthz >/dev/null 2>&1 && { echo MINDWIRE_READY; exit 0; }; sleep 0.25; done`,
+    `for ((mw_attempt=0; mw_attempt<60; mw_attempt++)); do curl -fsS --max-time 2 -H "Authorization: Bearer $mw_token" http://127.0.0.1:${cfg.port}/healthz >/dev/null 2>&1 && { echo MINDWIRE_READY; exit 0; }; sleep 0.25; done`,
     "echo MINDWIRE_FAIL",
     `tail -n 40 ${LOG} 2>/dev/null || true`
   ].join("\n");
   emit2({ phase: "launch", message: "launching daemon" });
-  const res = await host.exec(["bash", "-lc", script], { timeoutSeconds: 45 });
+  const res = await host.exec(["bash", "-lc", script], { timeoutSeconds: 420 });
   const out = res.stdout ?? "";
   if (!out.includes("MINDWIRE_READY")) {
     throw new MindwireError(
@@ -1425,10 +1652,15 @@ async function probeHealth(host, port, token) {
     return { reachable: true };
   }
 }
-async function probeArch(host) {
-  const res = await host.exec(["bash", "-lc", `printf '<<ARCH:%s>>' "$(uname -m)"`], { timeoutSeconds: 15 });
-  const raw = ((res.stdout ?? "").match(/<<ARCH:([^>]*)>>/)?.[1] ?? "").trim();
-  return raw === "aarch64" || raw === "arm64" ? "arm64" : "amd64";
+async function probePlatform(host) {
+  const res = await host.exec(["bash", "-lc", `printf '<<OS:%s>><<ARCH:%s>>' "$(uname -s)" "$(uname -m)"`], { timeoutSeconds: 15 });
+  const os = ((res.stdout ?? "").match(/<<OS:([^>]*)>>/)?.[1] ?? "").trim().toLowerCase();
+  const rawArch = ((res.stdout ?? "").match(/<<ARCH:([^>]*)>>/)?.[1] ?? "").trim();
+  const arch = rawArch === "aarch64" || rawArch === "arm64" ? "arm64" : rawArch === "x86_64" || rawArch === "amd64" ? "amd64" : void 0;
+  if (os !== "linux" && os !== "darwin" || !arch) {
+    throw new MindwireError(`mindwire: unsupported workspace platform ${os || "unknown"}/${rawArch || "unknown"}; expected Linux or macOS on amd64 or arm64`);
+  }
+  return { platform: os, arch };
 }
 async function waitHostReady(host, timeoutMs = 6e4) {
   const deadline = Date.now() + timeoutMs;
@@ -1448,15 +1680,18 @@ async function waitHostReady(host, timeoutMs = 6e4) {
   );
 }
 async function resolveLinuxDaemon(explicit, arch) {
+  return resolveHostDaemon(explicit, "linux", arch);
+}
+async function resolveHostDaemon(explicit, platform, arch) {
   const fs = await import('fs');
   if (explicit) {
-    const resolved = explicit.replaceAll("{arch}", arch);
+    const resolved = explicit.replaceAll("{os}", platform).replaceAll("{arch}", arch);
     if (!fs.existsSync(resolved)) {
       throw new MindwireError(`mindwire: sandbox daemonBin not found at ${resolved}`);
     }
     return resolved;
   }
-  return ensureDaemonBinary({ platform: "linux", arch: arch === "arm64" ? "arm64" : "x64" });
+  return ensureDaemonBinary({ platform, arch: arch === "arm64" ? "arm64" : "x64" });
 }
 async function readBytes(p) {
   const fs = await import('fs/promises');
@@ -2318,12 +2553,16 @@ exports.McpApi = McpApi;
 exports.Mindwire = Mindwire;
 exports.MindwireError = MindwireError;
 exports.NotifyApi = NotifyApi;
+exports.ProjectOperationsApi = ProjectOperationsApi;
 exports.PromptsApi = PromptsApi;
 exports.ProvidersApi = ProvidersApi;
 exports.Run = Run;
 exports.RunFailedError = RunFailedError;
 exports.SDK_VERSION = SDK_VERSION;
+exports.SurfacesApi = SurfacesApi;
 exports.TimeoutError = TimeoutError;
+exports.WorkspaceApi = WorkspaceApi;
+exports.WorkspaceCollection = WorkspaceCollection;
 exports.catalogModels = catalogModels;
 exports.catalogProvider = catalogProvider;
 exports.catalogProviders = catalogProviders;