openmausbot 0.1.67 → 0.1.68

package/dist-server/openmausbot.js

@@ -17577,9 +17577,9 @@ var init_schema = __esm({
 });
 
 // server/config.ts
-import { readFileSync as readFileSync2, mkdirSync as mkdirSync3, existsSync as existsSync3, renameSync as renameSync3 } from "node:fs";
-import { homedir as homedir2 } from "node:os";
-import { join as join4 } from "node:path";
+import { readFileSync as readFileSync2, mkdirSync as mkdirSync4, existsSync as existsSync3, renameSync as renameSync3 } from "node:fs";
+import { homedir as homedir4 } from "node:os";
+import { join as join5 } from "node:path";
 function isValidSshAlias(value) {
   return typeof value === "string" && SSH_ALIAS.test(value);
 }
@@ -17712,7 +17712,7 @@ function parseStoredConfig(value) {
 function loadConfig() {
   let cfg = {};
   try {
-    cfg = parseStoredConfig(parseJson(readFileSync2(join4(DATA_DIR, "config.json"), "utf8")));
+    cfg = parseStoredConfig(parseJson(readFileSync2(join5(DATA_DIR, "config.json"), "utf8")));
   } catch {
   }
   cfg.xai = { ...cfg.xai };
@@ -17744,7 +17744,7 @@ function stripWorkspaceCredentialEnv(env) {
   for (const key of WORKSPACE_CREDENTIAL_ENV) delete env[key];
 }
 function saveConfig(patch, options = {}) {
-  const p = join4(DATA_DIR, "config.json");
+  const p = join5(DATA_DIR, "config.json");
   let disk = {};
   try {
     const parsed = jsonObjectSchema.safeParse(parseJson(readFileSync2(p, "utf8")));
@@ -17754,7 +17754,7 @@ function saveConfig(patch, options = {}) {
   const checkedPatch = appConfigSchema.partial().parse(patch);
   const storedProfiles = storedBrowserProfilesSchema.safeParse(disk.browserProfiles);
   if (storedProfiles.success) disk.browserProfiles = storedProfiles.data;
-  for (const key of ["xai", "openaiCompat", "composio", "box", "opencodeGo", "tts", "imageGen", "profile", "rooms", "localVm", "features"]) {
+  for (const key of ["xai", "openaiCompat", "composio", "box", "opencodeGo", "tts", "imageGen", "profile", "rooms", "threads", "localVm", "features"]) {
     const section = checkedPatch[key];
     if (!section) continue;
     const current = jsonObjectSchema.safeParse(disk[key]);
@@ -17803,7 +17803,7 @@ function saveConfig(patch, options = {}) {
     }
     disk.instances = diskInstances;
   }
-  mkdirSync3(DATA_DIR, { recursive: true });
+  mkdirSync4(DATA_DIR, { recursive: true });
   writeFileAtomic(p, JSON.stringify(disk, null, 2), { mode: 384 });
 }
 function injectedEnvironment(cfg, driver) {
@@ -17875,7 +17875,7 @@ function instanceConfigs(cfg) {
   }
   return map3;
 }
-var optionalText, SSH_ALIAS, LEGACY_BROWSER_PROFILE_ID, BROWSER_PROFILE_ID, MIN_ROOM_TURN_TIMEOUT_MINUTES, MAX_ROOM_TURN_TIMEOUT_MINUTES, MIN_LOCAL_VM_MAX_INSTANCES, MAX_LOCAL_VM_MAX_INSTANCES, vpsConfigSchema, roomConfigSchema, localVmConfigSchema, browserProfileSchema, legacyBrowserProfileSchema, legacyBrowserProfilesSchema, storedBrowserProfilesSchema, browserProfilesSchema, featureConfigSchema, instanceConfigSchema, instanceConfigMapSchema, defaultModelSelectionSchema, appConfigSchema, storedAppConfigSchema, appConfigPatchSchema, jsonObjectSchema, DATA_DIR, LEGACY_DATA_DIR, EVENTS_DIR, NATIVE_DIR, WORKSPACE_CREDENTIAL_ENV, PROVIDER_CREDENTIAL_ENV;
+var optionalText, SSH_ALIAS, LEGACY_BROWSER_PROFILE_ID, BROWSER_PROFILE_ID, MIN_ROOM_TURN_TIMEOUT_MINUTES, MAX_ROOM_TURN_TIMEOUT_MINUTES, MAX_CONCURRENT_BOT_THREADS, MIN_LOCAL_VM_MAX_INSTANCES, MAX_LOCAL_VM_MAX_INSTANCES, vpsConfigSchema, roomConfigSchema, localVmConfigSchema, browserProfileSchema, legacyBrowserProfileSchema, legacyBrowserProfilesSchema, storedBrowserProfilesSchema, browserProfilesSchema, featureConfigSchema, instanceConfigSchema, instanceConfigMapSchema, defaultModelSelectionSchema, appConfigSchema, storedAppConfigSchema, appConfigPatchSchema, jsonObjectSchema, DATA_DIR, LEGACY_DATA_DIR, EVENTS_DIR, NATIVE_DIR, WORKSPACE_CREDENTIAL_ENV, PROVIDER_CREDENTIAL_ENV;
 var init_config = __esm({
   "server/config.ts"() {
     "use strict";
@@ -17890,6 +17890,7 @@ var init_config = __esm({
     BROWSER_PROFILE_ID = /^[a-z0-9_-]{1,40}$/;
     MIN_ROOM_TURN_TIMEOUT_MINUTES = 1;
     MAX_ROOM_TURN_TIMEOUT_MINUTES = 1440;
+    MAX_CONCURRENT_BOT_THREADS = 10;
     MIN_LOCAL_VM_MAX_INSTANCES = 1;
     MAX_LOCAL_VM_MAX_INSTANCES = 4;
     vpsConfigSchema = external_exports.object({
@@ -17995,6 +17996,7 @@ var init_config = __esm({
        * system language. Unknown tags degrade to English in the renderer. */
       language: optionalText,
       rooms: roomConfigSchema.optional(),
+      threads: external_exports.object({ maxConcurrentPerBot: external_exports.number().int().min(1).max(MAX_CONCURRENT_BOT_THREADS) }).strict().optional(),
       localVm: localVmConfigSchema.optional(),
       features: featureConfigSchema.optional(),
       browserProfiles: browserProfilesSchema.optional(),
@@ -18010,10 +18012,10 @@ var init_config = __esm({
     });
     appConfigPatchSchema = appConfigSchema.omit({ instances: true, mcpServers: true, cliStartup: true, customDomain: true });
     jsonObjectSchema = external_exports.record(external_exports.string(), external_exports.json());
-    DATA_DIR = process.env.OMB_DATA_DIR ?? join4(homedir2(), ".openmausbot");
-    LEGACY_DATA_DIR = join4(homedir2(), ".opengrokbot");
-    EVENTS_DIR = join4(DATA_DIR, "events");
-    NATIVE_DIR = join4(DATA_DIR, "native");
+    DATA_DIR = process.env.OMB_DATA_DIR ?? join5(homedir4(), ".openmausbot");
+    LEGACY_DATA_DIR = join5(homedir4(), ".opengrokbot");
+    EVENTS_DIR = join5(DATA_DIR, "events");
+    NATIVE_DIR = join5(DATA_DIR, "native");
     WORKSPACE_CREDENTIAL_ENV = [
       "XAI_API_KEY",
       "OPENAI_COMPAT_API_KEY",
@@ -18050,9 +18052,9 @@ var init_config = __esm({
 // electron/data-dir-lease.mjs
 import { execFileSync } from "node:child_process";
 import { createHash as createHash2, randomUUID as randomUUID5 } from "node:crypto";
-import { existsSync as existsSync4, linkSync, mkdirSync as mkdirSync4, readFileSync as readFileSync3, renameSync as renameSync4, unlinkSync as unlinkSync2, writeFileSync as writeFileSync3 } from "node:fs";
+import { existsSync as existsSync4, linkSync, mkdirSync as mkdirSync5, readFileSync as readFileSync3, renameSync as renameSync4, unlinkSync as unlinkSync2, writeFileSync as writeFileSync4 } from "node:fs";
 import { hostname as hostname4, uptime } from "node:os";
-import { join as join5 } from "node:path";
+import { join as join6 } from "node:path";
 function leaseError(message2, cause) {
   return Object.assign(new DataDirLeaseError(message2), { cause });
 }
@@ -18157,7 +18159,7 @@ function unlinkExact(path3, message2) {
 function publishRecord(path3, record3, prepareMessage, acquireMessage) {
   const candidatePath = `${path3}.candidate-${record3.pid}-${record3.token}`;
   try {
-    writeFileSync3(candidatePath, `${JSON.stringify(record3)}
+    writeFileSync4(candidatePath, `${JSON.stringify(record3)}
 `, { flag: "wx", mode: 384, flush: true });
   } catch (error51) {
     throw leaseError(prepareMessage, error51);
@@ -18240,14 +18242,14 @@ function prepareDataDir(dataDir, legacyDataDir) {
     }
   }
   try {
-    mkdirSync4(dataDir, { recursive: true, mode: 448 });
+    mkdirSync5(dataDir, { recursive: true, mode: 448 });
   } catch (error51) {
     throw leaseError("OpenMausBot cannot create its data directory.", error51);
   }
-  return join5(dataDir, LEASE_NAME);
+  return join6(dataDir, LEASE_NAME);
 }
 function assertNoLiveDelegatedChild(dataDir) {
-  const childLeasePath = join5(dataDir, DELEGATED_CHILD_DIR, LEASE_NAME);
+  const childLeasePath = join6(dataDir, DELEGATED_CHILD_DIR, LEASE_NAME);
   const child = readOwner(childLeasePath);
   if (!child) return;
   if (child.host !== hostname4()) {
@@ -18278,7 +18280,7 @@ function acquireDataDirLeaseInternal(dataDir, options = {}) {
   };
   const candidatePath = `${leasePath}.candidate-${owner.pid}-${owner.token}`;
   try {
-    writeFileSync3(candidatePath, `${JSON.stringify(owner)}
+    writeFileSync4(candidatePath, `${JSON.stringify(owner)}
 `, { flag: "wx", mode: 384, flush: true });
   } catch (error51) {
     throw leaseError("OpenMausBot cannot prepare its data-directory lease.", error51);
@@ -18371,62 +18373,62 @@ var init_data_dir_lease2 = __esm({
 // server/env-path.ts
 import { execFile as execFile2 } from "node:child_process";
 import { closeSync as closeSync2, existsSync as existsSync5, openSync as openSync2, readFileSync as readFileSync4, readSync, statSync as statSync2, readdirSync } from "node:fs";
-import { homedir as homedir3 } from "node:os";
-import { basename, delimiter as delimiter3, dirname as dirname2, extname, join as join6 } from "node:path";
+import { homedir as homedir5 } from "node:os";
+import { basename as basename2, delimiter as delimiter3, dirname as dirname3, extname, join as join7 } from "node:path";
 function nvmBinDirs() {
   try {
-    const base2 = join6(homedir3(), ".nvm", "versions", "node");
-    return readdirSync(base2).filter((v) => v.startsWith("v")).sort((a2, b) => b.localeCompare(a2, void 0, { numeric: true })).map((v) => join6(base2, v, "bin"));
+    const base2 = join7(homedir5(), ".nvm", "versions", "node");
+    return readdirSync(base2).filter((v) => v.startsWith("v")).sort((a2, b) => b.localeCompare(a2, void 0, { numeric: true })).map((v) => join7(base2, v, "bin"));
   } catch {
     return [];
   }
 }
 function knownDirs() {
-  const home = homedir3();
+  const home = homedir5();
   return [
-    join6(home, ".local", "bin"),
+    join7(home, ".local", "bin"),
     // claude installer default
-    join6(home, ".npm-global", "bin"),
+    join7(home, ".npm-global", "bin"),
     // npm prefix ~/.npm-global (claude, opencode)
-    join6(home, ".kimi-code", "bin"),
+    join7(home, ".kimi-code", "bin"),
     // kimi-code installer
-    join6(home, ".grok", "bin"),
+    join7(home, ".grok", "bin"),
     // x.ai installer
-    join6(home, ".opencode", "bin"),
+    join7(home, ".opencode", "bin"),
     // opencode installer
-    join6(home, ".claude", "local"),
+    join7(home, ".claude", "local"),
     // claude "local install"
     "/opt/homebrew/bin",
     // brew, Apple silicon
     "/usr/local/bin",
     // brew Intel / classic installs
-    join6(home, ".volta", "bin"),
-    join6(home, ".bun", "bin"),
-    join6(home, ".asdf", "shims"),
-    join6(home, ".deno", "bin"),
-    join6(home, "bin"),
+    join7(home, ".volta", "bin"),
+    join7(home, ".bun", "bin"),
+    join7(home, ".asdf", "shims"),
+    join7(home, ".deno", "bin"),
+    join7(home, "bin"),
     ...nvmBinDirs()
   ];
 }
 function windowsKnownDirs() {
-  const home = homedir3();
-  const appData = process.env.APPDATA ?? join6(home, "AppData", "Roaming");
-  const localAppData = process.env.LOCALAPPDATA ?? join6(home, "AppData", "Local");
+  const home = homedir5();
+  const appData = process.env.APPDATA ?? join7(home, "AppData", "Roaming");
+  const localAppData = process.env.LOCALAPPDATA ?? join7(home, "AppData", "Local");
   return [
-    join6(appData, "npm"),
+    join7(appData, "npm"),
     // npm -g shims: claude, codex
-    join6(home, ".grok", "bin"),
+    join7(home, ".grok", "bin"),
     // x.ai installer
-    join6(localAppData, "agy", "bin"),
+    join7(localAppData, "agy", "bin"),
     // Antigravity installer
-    join6(home, ".local", "bin"),
+    join7(home, ".local", "bin"),
     // claude native installer
-    join6(home, ".claude", "local"),
-    join6(home, "bin"),
+    join7(home, ".claude", "local"),
+    join7(home, "bin"),
     // Factory droid installer (%USERPROFILE%\bin)
-    join6(home, ".bun", "bin"),
-    join6(home, ".deno", "bin"),
-    join6(home, "go", "bin")
+    join7(home, ".bun", "bin"),
+    join7(home, ".deno", "bin"),
+    join7(home, "go", "bin")
   ];
 }
 function resetPathCache() {
@@ -18480,7 +18482,7 @@ function findCliCandidates(name) {
   for (const dir of augmentedPath().split(delimiter3)) {
     if (!dir) continue;
     for (const ext of exts) {
-      const p = join6(dir, name + ext);
+      const p = join7(dir, name + ext);
       if (existsSync5(p)) {
         out.push(p);
         break;
@@ -18525,13 +18527,13 @@ function whichWin(cli) {
   if (/[\\/]/.test(cli) || /^[a-zA-Z]:/.test(cli)) return probe(cli);
   for (const dir of augmentedPath().split(delimiter3)) {
     if (!dir) continue;
-    const hit = probe(join6(dir, cli));
+    const hit = probe(join7(dir, cli));
     if (hit) return hit;
   }
   return null;
 }
 function nodeExe(near) {
-  const local = join6(near, "node.exe");
+  const local = join7(near, "node.exe");
   if (isFile(local)) return local;
   const onPath2 = whichWin("node.exe");
   if (onPath2 && extname(onPath2).toLowerCase() === ".exe") return onPath2;
@@ -18544,8 +18546,8 @@ function parseCmdShim(shim) {
   } catch {
     return null;
   }
-  const dir = dirname2(shim);
-  const targets = [...text2.matchAll(/"%~?dp0%?\\?([^"]+)"/g)].map((m) => join6(dir, m[1])).filter((p) => isFile(p) && basename(p).toLowerCase() !== "node.exe");
+  const dir = dirname3(shim);
+  const targets = [...text2.matchAll(/"%~?dp0%?\\?([^"]+)"/g)].map((m) => join7(dir, m[1])).filter((p) => isFile(p) && basename2(p).toLowerCase() !== "node.exe");
   const script = targets.find((p) => /\.[cm]?js$/i.test(p));
   if (script) {
     const node = nodeExe(dir);
@@ -18573,7 +18575,7 @@ function parseNodeShebang(file2) {
     }
   }
   if (!/^#!.*\bnode(\.exe)?\b/.test(head)) return null;
-  const node = nodeExe(dirname2(file2));
+  const node = nodeExe(dirname3(file2));
   return node ? { command: node, args: [file2] } : null;
 }
 function resolveWord(cli, args) {
@@ -18615,7 +18617,7 @@ import {
   spawn as spawn4,
   execFile as execFile3
 } from "node:child_process";
-import { join as join7 } from "node:path";
+import { join as join8 } from "node:path";
 function resolveCli(cli, args = []) {
   return resolveCliSpawn(cli, args);
 }
@@ -18709,7 +18711,7 @@ function killCliTree(child, timeoutMs = 5e3) {
   });
 }
 function brokerSocketPath(dataDir, tag) {
-  return process.platform === "win32" ? `\\\\.\\pipe\\openmausbot-perm-${process.pid}-${tag}` : join7(dataDir, `perm-${tag}.sock`);
+  return process.platform === "win32" ? `\\\\.\\pipe\\openmausbot-perm-${process.pid}-${tag}` : join8(dataDir, `perm-${tag}.sock`);
 }
 var WINDOWS_SAFE_COMMAND_LINE_CHARS;
 var init_procs = __esm({
@@ -18937,8 +18939,8 @@ var init_registry = __esm({
 
 // server/drivers/local-inject.ts
 import { readFileSync as readFileSync5 } from "node:fs";
-import { homedir as homedir4 } from "node:os";
-import { join as join8 } from "node:path";
+import { homedir as homedir6 } from "node:os";
+import { join as join9 } from "node:path";
 function contextWindowsFromPs(extra) {
   const out = /* @__PURE__ */ new Map();
   const rec = extra && typeof extra === "object" ? extra : null;
@@ -19021,9 +19023,9 @@ function firstUnslothToken(row) {
   return null;
 }
 function readUnslothKey(env) {
-  const home = env.HOME || env.USERPROFILE || homedir4();
+  const home = env.HOME || env.USERPROFILE || homedir6();
   try {
-    const raw = JSON.parse(readFileSync5(join8(home, ".unsloth", "studio", "auth", "agent_api_key.json"), "utf8"));
+    const raw = JSON.parse(readFileSync5(join9(home, ".unsloth", "studio", "auth", "agent_api_key.json"), "utf8"));
     if (raw.servers && typeof raw.servers === "object") {
       const servers = raw.servers;
       for (const url2 of ["http://127.0.0.1:8888", "http://localhost:8888"]) {
@@ -19225,17 +19227,17 @@ var init_local_inject = __esm({
 
 // server/proxy-paths.ts
 import { existsSync as existsSync6 } from "node:fs";
-import { dirname as dirname3, join as join9 } from "node:path";
+import { dirname as dirname4, join as join10 } from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 function resolveProxy(relative2) {
-  const source = join9(SERVER_ROOT, `${relative2}.ts`);
-  return existsSync6(source) ? source : join9(SERVER_ROOT, `${relative2}.js`);
+  const source = join10(SERVER_ROOT, `${relative2}.ts`);
+  return existsSync6(source) ? source : join10(SERVER_ROOT, `${relative2}.js`);
 }
 var SERVER_ROOT, SPAWNED_PROXIES;
 var init_proxy_paths = __esm({
   "server/proxy-paths.ts"() {
     "use strict";
-    SERVER_ROOT = dirname3(fileURLToPath2(import.meta.url));
+    SERVER_ROOT = dirname4(fileURLToPath2(import.meta.url));
     SPAWNED_PROXIES = {
       browser: resolveProxy("browser-proxy"),
       computer: resolveProxy("computer-proxy"),
@@ -19257,7 +19259,7 @@ var init_proxy_paths = __esm({
 
 // server/container-computer.ts
 import { execFile as execFile4 } from "node:child_process";
-import { join as join10, resolve as resolve3 } from "node:path";
+import { join as join11, resolve as resolve3 } from "node:path";
 import { promisify } from "node:util";
 function computerProxyEnv(computer) {
   return {
@@ -19281,7 +19283,7 @@ var init_container_computer = __esm({
     IMAGE_REPOSITORY = "localhost/openmausbot/cua-local-vm";
     IMAGE_LAYER_VERSION = "5";
     IMAGE = `${IMAGE_REPOSITORY}:driver-${CUA_DRIVER_VERSION}-v${IMAGE_LAYER_VERSION}`;
-    VM_WORKSPACE_DIR = join10(DATA_DIR, "vm-home");
+    VM_WORKSPACE_DIR = join11(DATA_DIR, "vm-home");
     MEMORY_BYTES = 4 * 1024 * 1024 * 1024;
     SHM_BYTES = 512 * 1024 * 1024;
     containerMcpPath = SPAWNED_PROXIES.containerMcp;
@@ -19372,11 +19374,11 @@ var init_redact = __esm({
 
 // server/drivers/native.ts
 import { appendFileSync } from "node:fs";
-import { join as join11 } from "node:path";
+import { join as join12 } from "node:path";
 function appendNative(threadId, entry) {
   try {
     appendFileSync(
-      join11(NATIVE_DIR, `${threadId}.ndjson`),
+      join12(NATIVE_DIR, `${threadId}.ndjson`),
       JSON.stringify({ at: (/* @__PURE__ */ new Date()).toISOString(), ...entry, msg: redactSecrets(entry.msg) }) + "\n",
       { mode: 384 }
     );
@@ -19392,9 +19394,9 @@ var init_native = __esm({
 });
 
 // server/drivers/acp/core.ts
-import { homedir as homedir5 } from "node:os";
+import { homedir as homedir7 } from "node:os";
 import { lstat, mkdir, readFile, realpath, stat, writeFile } from "node:fs/promises";
-import { basename as basename2, dirname as dirname4, isAbsolute, relative, resolve as resolve4 } from "node:path";
+import { basename as basename3, dirname as dirname5, isAbsolute, relative, resolve as resolve4 } from "node:path";
 function skipSubscriptionAuthForLocalInject(model) {
   return Boolean(decodeInjectId(model));
 }
@@ -19579,7 +19581,7 @@ function createAcpDriver(support11) {
           throw new Error("local computer control requires interactive provider approvals");
         }
         const turnId = newId();
-        const cwd = turn.cwd ?? turnConfig.workspace ?? homedir5();
+        const cwd = turn.cwd ?? turnConfig.workspace ?? homedir7();
         const env = childEnv(turnConfig);
         if (support11.requireAuthenticationBeforeSpawn && !skipSubscriptionAuthForLocalInject(turn.model) && !await support11.isAuthenticated(env, turnConfig, instanceId)) {
           emit({ ...base2(threadId, turnId), type: "turn.started" });
@@ -19647,12 +19649,12 @@ function createAcpDriver(support11) {
           if (lexical === ".." || lexical.startsWith(`..${process.platform === "win32" ? "\\" : "/"}`) || isAbsolute(lexical)) {
             throw new Error("ACP file path is outside the session workspace.");
           }
-          const suffix = [basename2(requested)];
-          let ancestor = dirname4(requested);
+          const suffix = [basename3(requested)];
+          let ancestor = dirname5(requested);
           while (!await lstat(ancestor).catch(() => null)) {
-            const parent = dirname4(ancestor);
+            const parent = dirname5(ancestor);
             if (parent === ancestor) throw new Error("ACP file path has no accessible parent.");
-            suffix.unshift(basename2(ancestor));
+            suffix.unshift(basename3(ancestor));
             ancestor = parent;
           }
           const candidate = resolve4(await realpath(ancestor), ...suffix);
@@ -19698,7 +19700,7 @@ function createAcpDriver(support11) {
             if (typeof params.content !== "string" || Buffer.byteLength(params.content) > CLIENT_FILE_MAX_BYTES) {
               throw new Error(`ACP can only write text files under ${CLIENT_FILE_MAX_BYTES} bytes.`);
             }
-            await mkdir(dirname4(path3), { recursive: true });
+            await mkdir(dirname5(path3), { recursive: true });
             await writeFile(path3, params.content, "utf8");
             send({ jsonrpc: "2.0", id: msg.id, result: {} });
           } catch (error51) {
@@ -20162,7 +20164,7 @@ import { createHash as createHash3, randomUUID as randomUUID6 } from "node:crypt
 import { mkdir as mkdir2, mkdtemp, readFile as readFile2, rm, stat as stat2 } from "node:fs/promises";
 import { request as httpRequest } from "node:http";
 import { tmpdir as tmpdir2 } from "node:os";
-import { delimiter as delimiter4, join as join12, resolve as resolve5 } from "node:path";
+import { delimiter as delimiter4, join as join13, resolve as resolve5 } from "node:path";
 function quoteBrowserArgument(value) {
   return `'${value.replaceAll("'", `'"'"'`)}'`;
 }
@@ -20197,11 +20199,11 @@ function authorizationUrlFromLine(line) {
   }
 }
 function antigravityProfileDirectory(instanceId, baseDir = DATA_DIR) {
-  return join12(baseDir, "providers", "antigravity", createHash3("sha256").update(instanceId).digest("hex"));
+  return join13(baseDir, "providers", "antigravity", createHash3("sha256").update(instanceId).digest("hex"));
 }
 async function prepareAntigravityProfile(input) {
   const directory = resolve5(input.profileDirectory ?? antigravityProfileDirectory(input.instanceId, input.baseDir));
-  const acpDirectory = join12(directory, "antigravity-acp");
+  const acpDirectory = join13(directory, "antigravity-acp");
   await mkdir2(acpDirectory, { recursive: true, mode: 448 });
   if (process.platform !== "win32") {
     const { chmod: chmod2 } = await import("node:fs/promises");
@@ -20209,7 +20211,7 @@ async function prepareAntigravityProfile(input) {
     await chmod2(acpDirectory, 448);
   }
   writeFileAtomic(
-    join12(acpDirectory, "settings.json"),
+    join13(acpDirectory, "settings.json"),
     `${JSON.stringify({ auth: { type: "oauth-personal" } })}
 `,
     { mode: 384 }
@@ -20232,7 +20234,7 @@ async function prepareAntigravityProfile(input) {
     PYTHONUNBUFFERED: "1",
     ELECTRON_RUN_AS_NODE: "1"
   });
-  return { directory, tokenPath: join12(acpDirectory, "acp_token.json"), environment };
+  return { directory, tokenPath: join13(acpDirectory, "acp_token.json"), environment };
 }
 async function antigravityProfileAuthenticated(profile) {
   try {
@@ -20361,7 +20363,7 @@ function isValidAntigravityInitializeResult(initialized, expectedVersion) {
   return true;
 }
 async function validateAntigravityRuntime(runtime, expectedVersion) {
-  const profileDirectory = await mkdtemp(join12(tmpdir2(), "openmaus-antigravity-verify-"));
+  const profileDirectory = await mkdtemp(join13(tmpdir2(), "openmaus-antigravity-verify-"));
   let client;
   let failed = false;
   let failure;
@@ -20750,7 +20752,7 @@ import {
   writeFile as writeFile2
 } from "node:fs/promises";
 import { constants } from "node:fs";
-import { delimiter as delimiter5, dirname as dirname5, isAbsolute as isAbsolute2, join as join13, resolve as resolve6 } from "node:path";
+import { delimiter as delimiter5, dirname as dirname6, isAbsolute as isAbsolute2, join as join14, resolve as resolve6 } from "node:path";
 import { Transform } from "node:stream";
 import { pipeline } from "node:stream/promises";
 import { createInflateRaw } from "node:zlib";
@@ -20771,7 +20773,7 @@ async function retryOnWindowsFileLock(step, options = {}) {
   }
 }
 function runtimeRoot(baseDir = DATA_DIR) {
-  return join13(baseDir, "tools", "antigravity-acp", `${process.platform}-${process.arch}`);
+  return join14(baseDir, "tools", "antigravity-acp", `${process.platform}-${process.arch}`);
 }
 function executableNames(platform = process.platform) {
   return platform === "win32" ? { executable: "agy_acp_server.exe", harness: "localharness_external.exe" } : { executable: "agy_acp_server.par", harness: "localharness_external" };
@@ -20788,10 +20790,10 @@ async function executableFile(path3, bytes) {
 }
 async function completedRelease(directory, asset) {
   try {
-    const record3 = JSON.parse(await readFile3(join13(directory, INSTALL_RECORD), "utf8"));
+    const record3 = JSON.parse(await readFile3(join14(directory, INSTALL_RECORD), "utf8"));
     if (record3.sha256 !== asset.sha256 || record3.version !== asset.version || record3.executable.name !== asset.executable.name || record3.executable.bytes !== asset.executable.bytes || record3.harness.name !== asset.harness.name || record3.harness.bytes !== asset.harness.bytes) return null;
-    const executablePath = join13(directory, asset.executable.name);
-    const harnessPath = join13(directory, asset.harness.name);
+    const executablePath = join14(directory, asset.executable.name);
+    const harnessPath = join14(directory, asset.harness.name);
     if (!await executableFile(executablePath, asset.executable.bytes)) return null;
     if (!await executableFile(harnessPath, asset.harness.bytes)) return null;
     return { executablePath, harnessPath, source: "managed", version: asset.version };
@@ -20807,7 +20809,7 @@ function pathCandidates(binary2, env) {
 async function externalRuntime(candidate, source) {
   const names = executableNames();
   const executablePath = resolve6(candidate);
-  const harnessPath = join13(dirname5(executablePath), names.harness);
+  const harnessPath = join14(dirname6(executablePath), names.harness);
   if (!await executableFile(executablePath) || !await executableFile(harnessPath)) return null;
   return { executablePath, harnessPath, source, version: null };
 }
@@ -20827,7 +20829,7 @@ async function resolveAntigravityRuntime(binaryPath, env = process.env, baseDir
   }
   const asset = resolveAntigravityReleaseAsset();
   if (asset) {
-    const managed = await completedRelease(join13(runtimeRoot(baseDir), "versions", asset.sha256), asset);
+    const managed = await completedRelease(join14(runtimeRoot(baseDir), "versions", asset.sha256), asset);
     if (managed) return managed;
   }
   const names = executableNames();
@@ -20949,7 +20951,7 @@ async function extractPinnedArchive(archivePath, outputDirectory, asset) {
       start: dataOffset,
       end: dataOffset + entry.compressedBytes - 1
     });
-    const destination = createWriteStream(join13(outputDirectory, entry.name), { flags: "wx", mode: 448 });
+    const destination = createWriteStream(join14(outputDirectory, entry.name), { flags: "wx", mode: 448 });
     if (entry.compression === 8) await pipeline(source, createInflateRaw(), counter, destination);
     else await pipeline(source, counter, destination);
     if (bytes !== expectedBytes) throw new Error("An extracted file was truncated.");
@@ -20960,8 +20962,8 @@ async function installOnce(options) {
   const asset = options.asset === void 0 ? resolveAntigravityReleaseAsset() : options.asset;
   if (!asset) throw new Error(`Google does not publish an Antigravity runtime for ${process.platform}-${process.arch}.`);
   const root = runtimeRoot(options.baseDir);
-  const versions = join13(root, "versions");
-  const destination = join13(versions, asset.sha256);
+  const versions = join14(root, "versions");
+  const destination = join14(versions, asset.sha256);
   await mkdir3(versions, { recursive: true, mode: 448 });
   const existing = await completedRelease(destination, asset);
   if (existing) {
@@ -20977,11 +20979,11 @@ async function installOnce(options) {
   } catch (error51) {
     if (error51 instanceof Error && error51.message.includes("Antigravity needs")) throw error51;
   }
-  const staging = await mkdtemp2(join13(versions, `${STAGING_PREFIX}${randomUUID7()}-`));
+  const staging = await mkdtemp2(join14(versions, `${STAGING_PREFIX}${randomUUID7()}-`));
   let failed = false;
   try {
-    const archivePath = join13(staging, "download.zip");
-    const runtimeDirectory = join13(staging, "runtime");
+    const archivePath = join14(staging, "download.zip");
+    const runtimeDirectory = join14(staging, "runtime");
     await mkdir3(runtimeDirectory, { mode: 448 });
     const controller = new AbortController();
     const timeout = setTimeout(() => controller.abort(), DOWNLOAD_TIMEOUT_MS2);
@@ -21027,12 +21029,12 @@ async function installOnce(options) {
     }
     await extractPinnedArchive(archivePath, runtimeDirectory, asset);
     if (process.platform !== "win32") {
-      await chmod(join13(runtimeDirectory, asset.executable.name), 493);
-      await chmod(join13(runtimeDirectory, asset.harness.name), 493);
+      await chmod(join14(runtimeDirectory, asset.executable.name), 493);
+      await chmod(join14(runtimeDirectory, asset.harness.name), 493);
     }
     const candidate = {
-      executablePath: join13(runtimeDirectory, asset.executable.name),
-      harnessPath: join13(runtimeDirectory, asset.harness.name),
+      executablePath: join14(runtimeDirectory, asset.executable.name),
+      harnessPath: join14(runtimeDirectory, asset.harness.name),
       source: "managed",
       version: asset.version
     };
@@ -21043,7 +21045,7 @@ async function installOnce(options) {
       executable: asset.executable,
       harness: asset.harness
     };
-    await writeFile2(join13(runtimeDirectory, INSTALL_RECORD), `${JSON.stringify(record3)}
+    await writeFile2(join14(runtimeDirectory, INSTALL_RECORD), `${JSON.stringify(record3)}
 `, { flag: "wx", mode: 384 });
     try {
       await retryOnWindowsFileLock(() => rename(runtimeDirectory, destination));
@@ -21482,15 +21484,15 @@ var init_boxagent = __esm({
 // server/drivers/claude-login-auth.ts
 import { randomUUID as randomUUID8 } from "node:crypto";
 import { realpathSync } from "node:fs";
-import { homedir as homedir6 } from "node:os";
-import { basename as basename3, dirname as dirname6, isAbsolute as isAbsolute3, join as join14, resolve as resolve7 } from "node:path";
+import { homedir as homedir8 } from "node:os";
+import { basename as basename4, dirname as dirname7, isAbsolute as isAbsolute3, join as join15, resolve as resolve7 } from "node:path";
 import { stripVTControlCharacters as stripVTControlCharacters3 } from "node:util";
 function canonicalPath(path3) {
   try {
     return realpathSync(path3);
   } catch {
-    const parent = dirname6(path3);
-    return parent === path3 ? path3 : join14(canonicalPath(parent), basename3(path3));
+    const parent = dirname7(path3);
+    return parent === path3 ? path3 : join15(canonicalPath(parent), basename4(path3));
   }
 }
 function claudeSignInLink(value) {
@@ -21542,11 +21544,11 @@ var init_claude_login_auth = __esm({
         await this.flow?.stopping;
         if (this.disposed) throw new Error("This provider was removed. Refresh Settings before signing in.");
         const env = this.options.environment();
-        const home = env.HOME || env.USERPROFILE || homedir6();
+        const home = env.HOME || env.USERPROFILE || homedir8();
         if (!isAbsolute3(home) || env.CLAUDE_CONFIG_DIR && !isAbsolute3(env.CLAUDE_CONFIG_DIR)) {
           throw new Error("Use an absolute HOME and CLAUDE_CONFIG_DIR path for this server's Claude provider before signing in.");
         }
-        const homeKey = canonicalPath(resolve7(env.CLAUDE_CONFIG_DIR || join14(home, ".claude")));
+        const homeKey = canonicalPath(resolve7(env.CLAUDE_CONFIG_DIR || join15(home, ".claude")));
         if (authenticatingHomes.has(homeKey)) {
           throw new Error("A Claude sign-in is already running for this server account. Finish or cancel it before starting another.");
         }
@@ -21856,10 +21858,10 @@ var init_retry = __esm({
 
 // server/drivers/claude.ts
 import { createHash as createHash5, randomBytes as randomBytes2 } from "node:crypto";
-import { chmodSync as chmodSync3, mkdtempSync as mkdtempSync2, readFileSync as readFileSync6, rmSync as rmSync2, unlinkSync as unlinkSync3, writeFileSync as writeFileSync4 } from "node:fs";
+import { chmodSync as chmodSync3, mkdtempSync as mkdtempSync2, readFileSync as readFileSync6, rmSync as rmSync2, unlinkSync as unlinkSync3, writeFileSync as writeFileSync5 } from "node:fs";
 import { createServer as createNetServer } from "node:net";
-import { homedir as homedir7, tmpdir as tmpdir3 } from "node:os";
-import { join as join15, dirname as dirname7, isAbsolute as isAbsolute4, normalize } from "node:path";
+import { homedir as homedir9, tmpdir as tmpdir3 } from "node:os";
+import { join as join16, dirname as dirname8, isAbsolute as isAbsolute4, normalize } from "node:path";
 function claudeAuthStatus(cli, env, run3 = execCli) {
   return new Promise((resolve12) => {
     run3(cli, ["auth", "status", "--json"], { timeout: 8e3, maxBuffer: 65536, env }, (_error, stdout2) => {
@@ -21884,9 +21886,9 @@ function claudeAuthStatus(cli, env, run3 = execCli) {
   });
 }
 function resolveClaudeConfigDir(configDir, env = process.env) {
-  const home = env.HOME || env.USERPROFILE || homedir7();
-  const configured = configDir?.trim() || env.CLAUDE_CONFIG_DIR?.trim() || join15(home, ".claude");
-  const expanded = configured === "~" ? home : configured.startsWith("~/") ? join15(home, configured.slice(2)) : configured;
+  const home = env.HOME || env.USERPROFILE || homedir9();
+  const configured = configDir?.trim() || env.CLAUDE_CONFIG_DIR?.trim() || join16(home, ".claude");
+  const expanded = configured === "~" ? home : configured.startsWith("~/") ? join16(home, configured.slice(2)) : configured;
   if (!isAbsolute4(expanded) || /[\p{Cc}\p{Cf}]/u.test(expanded)) {
     throw new Error("claude: configDir must be an absolute path or start with ~/");
   }
@@ -21938,7 +21940,7 @@ function extrasFromUnknown(value) {
 function readClaudeModelCatalog(env = process.env) {
   let settings2 = {};
   try {
-    settings2 = JSON.parse(readFileSync6(join15(resolveClaudeConfigDir(void 0, env), "settings.json"), "utf8"));
+    settings2 = JSON.parse(readFileSync6(join16(resolveClaudeConfigDir(void 0, env), "settings.json"), "utf8"));
   } catch {
     return STATIC_CLAUDE_MODELS;
   }
@@ -21962,7 +21964,7 @@ function readClaudeModelCatalog(env = process.env) {
 function removePrivateTempDir(filePath) {
   if (!filePath) return true;
   try {
-    rmSync2(dirname7(filePath), { recursive: true, force: true, maxRetries: 3, retryDelay: 50 });
+    rmSync2(dirname8(filePath), { recursive: true, force: true, maxRetries: 3, retryDelay: 50 });
     return true;
   } catch {
     return false;
@@ -21988,7 +21990,7 @@ function brokerSocketCandidates(threadId) {
   const base2 = permissionSocketPath(threadId);
   if (process.platform !== "win32") {
     const scope = createHash5("sha256").update(`${DATA_DIR}\0${process.pid}\0${threadId}`).digest("hex").slice(0, 16);
-    return [base2, join15(tmpdir3(), `omb-perm-${scope}.sock`)];
+    return [base2, join16(tmpdir3(), `omb-perm-${scope}.sock`)];
   }
   return [
     base2,
@@ -22454,13 +22456,13 @@ var init_claude = __esm({
           allowed.push("mcp__ogb");
           let mcpConfigPath = null;
           if (Object.keys(mcpServers).length) {
-            mcpConfigPath = join15(mkdtempSync2(join15(tmpdir3(), "omb-mcp-")), "mcp.json");
+            mcpConfigPath = join16(mkdtempSync2(join16(tmpdir3(), "omb-mcp-")), "mcp.json");
             args.push("--mcp-config", mcpConfigPath);
             args.push("--allowedTools", allowed.join(","));
           }
           const env = environment(turnModel);
           env.CLAUDE_CODE_DISABLE_BACKGROUND_TASKS = "1";
-          const cwd = turn.cwd ?? homedir7();
+          const cwd = turn.cwd ?? homedir9();
           const privateFileFlags = /* @__PURE__ */ new Set(["--mcp-config"]);
           const keyArgs = args.filter((a2, i2) => !privateFileFlags.has(a2) && !privateFileFlags.has(args[i2 - 1] ?? ""));
           const argsKey = JSON.stringify({
@@ -22489,7 +22491,7 @@ var init_claude = __esm({
               retryState.delete(threadId);
               if (mcpConfigPath) {
                 try {
-                  rmSync2(dirname7(mcpConfigPath), { recursive: true, force: true });
+                  rmSync2(dirname8(mcpConfigPath), { recursive: true, force: true });
                 } catch {
                 }
               }
@@ -22497,7 +22499,7 @@ var init_claude = __esm({
             }
             if (mcpConfigPath) {
               try {
-                rmSync2(dirname7(mcpConfigPath), { recursive: true, force: true });
+                rmSync2(dirname8(mcpConfigPath), { recursive: true, force: true });
               } catch {
               }
             }
@@ -22509,7 +22511,7 @@ var init_claude = __esm({
             broker = void 0;
             if (mcpConfigPath) {
               try {
-                rmSync2(dirname7(mcpConfigPath), { recursive: true, force: true });
+                rmSync2(dirname8(mcpConfigPath), { recursive: true, force: true });
               } catch {
               }
               mcpConfigPath = null;
@@ -22522,8 +22524,8 @@ var init_claude = __esm({
           };
           try {
             if (turn.system) {
-              systemPromptPath = join15(mkdtempSync2(join15(tmpdir3(), "omb-system-")), "prompt.txt");
-              writeFileSync4(systemPromptPath, turn.system, { mode: 384 });
+              systemPromptPath = join16(mkdtempSync2(join16(tmpdir3(), "omb-system-")), "prompt.txt");
+              writeFileSync5(systemPromptPath, turn.system, { mode: 384 });
               args.push("--append-system-prompt-file", systemPromptPath);
             }
             if (socketPath) {
@@ -22563,7 +22565,7 @@ var init_claude = __esm({
               }
             }
             if (mcpConfigPath) {
-              writeFileSync4(mcpConfigPath, JSON.stringify({ mcpServers }), { mode: 384 });
+              writeFileSync5(mcpConfigPath, JSON.stringify({ mcpServers }), { mode: 384 });
             }
             if (sessionId) args.push("--resume", sessionId);
             else args.push("--session-id", newSessionId);
@@ -22602,7 +22604,7 @@ var init_claude = __esm({
             session.broker?.pause();
             if (session.mcpConfigPath) {
               try {
-                rmSync2(dirname7(session.mcpConfigPath), { recursive: true, force: true });
+                rmSync2(dirname8(session.mcpConfigPath), { recursive: true, force: true });
               } catch {
               }
               session.mcpConfigPath = null;
@@ -22730,7 +22732,7 @@ var init_claude = __esm({
                 failedBroker?.close();
                 if (session.mcpConfigPath) {
                   try {
-                    rmSync2(dirname7(session.mcpConfigPath), { recursive: true, force: true });
+                    rmSync2(dirname8(session.mcpConfigPath), { recursive: true, force: true });
                   } catch {
                   }
                   session.mcpConfigPath = null;
@@ -22799,7 +22801,7 @@ var init_claude = __esm({
             session.broker?.close();
             if (session.mcpConfigPath) {
               try {
-                rmSync2(dirname7(session.mcpConfigPath), { recursive: true, force: true });
+                rmSync2(dirname8(session.mcpConfigPath), { recursive: true, force: true });
               } catch {
               }
             }
@@ -22961,8 +22963,8 @@ var init_claude = __esm({
 
 // server/drivers/codex-catalog.ts
 import { readdirSync as readdirSync2, readFileSync as readFileSync7 } from "node:fs";
-import { homedir as homedir8 } from "node:os";
-import { basename as basename4, join as join16 } from "node:path";
+import { homedir as homedir10 } from "node:os";
+import { basename as basename5, join as join17 } from "node:path";
 function encodeCodexSelection(provider, model) {
   return `${provider}${SEP}${model}`;
 }
@@ -22977,7 +22979,7 @@ function decodeCodexSelection(id) {
 function readCodexAppServerModelCatalog(cli, env, timeoutMs = 8e3) {
   return new Promise((resolve12) => {
     const child = spawnCli(cli, ["app-server"], {
-      cwd: homedir8(),
+      cwd: homedir10(),
       env,
       stdio: ["pipe", "pipe", "pipe"]
     });
@@ -23078,7 +23080,7 @@ function readCodexAppServerModelCatalog(cli, env, timeoutMs = 8e3) {
 }
 function codexHome(env) {
   if (env.CODEX_HOME) return env.CODEX_HOME;
-  return join16(env.HOME || env.USERPROFILE || homedir8(), ".codex");
+  return join17(env.HOME || env.USERPROFILE || homedir10(), ".codex");
 }
 function unquote(raw) {
   let value = raw.trim();
@@ -23164,11 +23166,11 @@ function niceLabel(model, provider, known, named) {
 }
 function collectCatalogNames(home) {
   const named = /* @__PURE__ */ new Map();
-  for (const file2 of listDir(join16(home, "model-catalogs"))) {
+  for (const file2 of listDir(join17(home, "model-catalogs"))) {
     if (!file2.endsWith(".json")) continue;
-    const provider = basename4(file2, ".json").replace(/-models$/, "");
+    const provider = basename5(file2, ".json").replace(/-models$/, "");
     if (!PROVIDER_ID.test(provider)) continue;
-    const raw = readText(join16(home, "model-catalogs", file2));
+    const raw = readText(join17(home, "model-catalogs", file2));
     if (!raw) continue;
     let parsed;
     try {
@@ -23220,7 +23222,7 @@ async function probeProviderModels(provider, env, fetchImpl) {
 async function readCodexModelCatalog(env = process.env, fetchImpl = fetch, cli) {
   const official = (cli ? await readCodexAppServerModelCatalog(cli, env) : null) ?? STATIC_CODEX_MODELS;
   const home = codexHome(env);
-  const mainText = readText(join16(home, "config.toml"));
+  const mainText = readText(join17(home, "config.toml"));
   if (!mainText) return mergeLocalInject(official, env, fetchImpl);
   const main2 = parseCodexToml(mainText);
   const known = new Map(main2.providers.map((provider) => [provider.id, provider]));
@@ -23235,7 +23237,7 @@ async function readCodexModelCatalog(env = process.env, fetchImpl = fetch, cli)
   remember(main2.modelProvider, main2.model);
   for (const file2 of listDir(home)) {
     if (!file2.endsWith(".config.toml")) continue;
-    const profile = parseCodexToml(readText(join16(home, file2)) ?? "");
+    const profile = parseCodexToml(readText(join17(home, file2)) ?? "");
     for (const provider of profile.providers) {
       if (!known.has(provider.id)) known.set(provider.id, provider);
     }
@@ -23301,8 +23303,8 @@ var init_codex_catalog = __esm({
 
 // server/drivers/codex-instructions.ts
 import { createHash as createHash6 } from "node:crypto";
-import { mkdirSync as mkdirSync5, readFileSync as readFileSync8 } from "node:fs";
-import { join as join17 } from "node:path";
+import { mkdirSync as mkdirSync6, readFileSync as readFileSync8 } from "node:fs";
+import { join as join18 } from "node:path";
 function codexDeveloperInstructions(config2, botInstructions) {
   if (!config2 || typeof config2 !== "object" || Array.isArray(config2)) {
     throw new Error("Codex returned no effective configuration; cannot safely update bot instructions.");
@@ -23316,8 +23318,8 @@ function codexDeveloperInstructions(config2, botInstructions) {
 ${configured}` : botInstructions;
 }
 async function syncCodexInstructions(key, nativeThreadId, instructions, resumed, request) {
-  const directory = join17(DATA_DIR, "codex-instructions");
-  const path3 = join17(directory, `${digest(JSON.stringify([key, nativeThreadId]))}.sha256`);
+  const directory = join18(DATA_DIR, "codex-instructions");
+  const path3 = join18(directory, `${digest(JSON.stringify([key, nativeThreadId]))}.sha256`);
   const fingerprint = digest(instructions);
   let previous;
   try {
@@ -23346,7 +23348,7 @@ async function syncCodexInstructions(key, nativeThreadId, instructions, resumed,
     }
   }
   if (!resumed || previous !== fingerprint) {
-    mkdirSync5(directory, { recursive: true });
+    mkdirSync6(directory, { recursive: true });
     writeFileAtomic(path3, fingerprint, { mode: 384 });
   }
 }
@@ -23363,15 +23365,15 @@ var init_codex_instructions = __esm({
 // server/drivers/codex-device-auth.ts
 import { randomUUID as randomUUID9 } from "node:crypto";
 import { realpathSync as realpathSync2 } from "node:fs";
-import { homedir as homedir9 } from "node:os";
-import { basename as basename5, dirname as dirname8, isAbsolute as isAbsolute5, join as join18, resolve as resolve8 } from "node:path";
+import { homedir as homedir11 } from "node:os";
+import { basename as basename6, dirname as dirname9, isAbsolute as isAbsolute5, join as join19, resolve as resolve8 } from "node:path";
 import { stripVTControlCharacters as stripVTControlCharacters4 } from "node:util";
 function canonicalPath2(path3) {
   try {
     return realpathSync2(path3);
   } catch {
-    const parent = dirname8(path3);
-    return parent === path3 ? path3 : join18(canonicalPath2(parent), basename5(path3));
+    const parent = dirname9(path3);
+    return parent === path3 ? path3 : join19(canonicalPath2(parent), basename6(path3));
   }
 }
 function codexDevicePrompt(output) {
@@ -23417,11 +23419,11 @@ var init_codex_device_auth = __esm({
         await this.flow?.stopping;
         if (this.disposed) throw new Error("This provider was removed. Refresh Settings before signing in.");
         const env = this.options.environment();
-        const home = env.HOME || env.USERPROFILE || homedir9();
+        const home = env.HOME || env.USERPROFILE || homedir11();
         if (!isAbsolute5(home) || env.CODEX_HOME && !isAbsolute5(env.CODEX_HOME)) {
           throw new Error("Use an absolute HOME and CODEX_HOME path for this server's Codex provider before signing in.");
         }
-        const homeKey = canonicalPath2(resolve8(env.CODEX_HOME || join18(home, ".codex")));
+        const homeKey = canonicalPath2(resolve8(env.CODEX_HOME || join19(home, ".codex")));
         if (authenticatingHomes2.has(homeKey)) {
           throw new Error("A ChatGPT sign-in is already running for this server account. Finish or cancel it before starting another.");
         }
@@ -23580,7 +23582,7 @@ var init_codex_device_auth = __esm({
 
 // server/drivers/codex.ts
 import { existsSync as existsSync7 } from "node:fs";
-import { homedir as homedir10 } from "node:os";
+import { homedir as homedir12 } from "node:os";
 function codexPredatesAstra(version2) {
   const value = version2.trim();
   const match = /\bcodex-cli\s+v?(\d+)\.(\d+)\.(\d+)(?:[-+][0-9a-z.-]+)?(?![\d.])\b/i.exec(value) ?? /^v?(\d+)\.(\d+)\.(\d+)(?:[-+][0-9a-z.-]+)?$/i.exec(value);
@@ -23983,7 +23985,7 @@ var init_codex = __esm({
               );
             }
             const child = spawnCli(config2.cli, appServerArgs, {
-              cwd: turn.cwd ?? homedir10(),
+              cwd: turn.cwd ?? homedir12(),
               env,
               stdio: ["pipe", "pipe", "pipe"]
             });
@@ -24289,7 +24291,7 @@ var init_codex = __esm({
               let effectiveConfig;
               try {
                 const configured = await request("config/read", {
-                  cwd: turn.cwd ?? homedir10(),
+                  cwd: turn.cwd ?? homedir12(),
                   includeLayers: false
                 });
                 effectiveConfig = configured?.config;
@@ -24333,7 +24335,7 @@ var init_codex = __esm({
                 const selection = decodeCodexSelection(turn.model);
                 const startThread = () => request("thread/start", {
                   developerInstructions,
-                  cwd: turn.cwd ?? homedir10(),
+                  cwd: turn.cwd ?? homedir12(),
                   model: selection.model,
                   ...selection.modelProvider ? { modelProvider: selection.modelProvider } : {},
                   ...approvalParams.thread,
@@ -24790,12 +24792,12 @@ var init_grok = __esm({
 });
 
 // server/drivers/acp/grok.ts
-import { existsSync as existsSync8, readFileSync as readFileSync9, writeFileSync as writeFileSync5 } from "node:fs";
-import { homedir as homedir11 } from "node:os";
-import { join as join19 } from "node:path";
+import { existsSync as existsSync8, readFileSync as readFileSync9, writeFileSync as writeFileSync6 } from "node:fs";
+import { homedir as homedir13 } from "node:os";
+import { join as join20 } from "node:path";
 function grokHome(env) {
   if (env.GROK_HOME) return env.GROK_HOME;
-  return join19(env.HOME || env.USERPROFILE || homedir11(), ".grok");
+  return join20(env.HOME || env.USERPROFILE || homedir13(), ".grok");
 }
 function unquote2(raw) {
   const value = raw.trim();
@@ -24805,7 +24807,7 @@ function unquote2(raw) {
   return value;
 }
 function readGrokModelCatalog(env = process.env) {
-  const path3 = join19(grokHome(env), "config.toml");
+  const path3 = join20(grokHome(env), "config.toml");
   let text2 = "";
   try {
     text2 = readFileSync9(path3, "utf8");
@@ -24878,7 +24880,7 @@ function ensureGrokInjectSlug(modelId, env = process.env) {
   if (!inject) return modelId;
   const host = localHost(inject.host);
   if (!host) return modelId;
-  const path3 = join19(grokHome(env), "config.toml");
+  const path3 = join20(grokHome(env), "config.toml");
   let text2 = "";
   try {
     text2 = readFileSync9(path3, "utf8");
@@ -24932,7 +24934,7 @@ function ensureGrokInjectSlug(modelId, env = process.env) {
   const next = text2 && !text2.endsWith("\n") ? `${text2}
 
 ${block2}` : `${text2}${text2 ? "\n" : ""}${block2}`;
-  writeFileSync5(path3, next);
+  writeFileSync6(path3, next);
   return slug;
 }
 var STATIC_GROK_MODELS, SLUG, support2, GrokAgentDriver;
@@ -25013,7 +25015,7 @@ var init_grok2 = __esm({
       // an unauthenticated CLI is a user action, not something to paper over.
       pickAuthMethod: (methods) => methods.some((m) => m.id === "cached_token") ? "cached_token" : null,
       authFailure: "fail",
-      isAuthenticated: () => existsSync8(join19(homedir11(), ".grok", "auth.json")),
+      isAuthenticated: () => existsSync8(join20(homedir13(), ".grok", "auth.json")),
       // `--append-system-prompt`/`--rules` are accepted by the CLI but do NOT
       // reach the agent-stdio system prompt (verified against 1.0.0), so the
       // persona is prepended codex-style.
@@ -25027,11 +25029,11 @@ ${turn.text}` : turn.text
 
 // server/drivers/acp/gemini.ts
 import { existsSync as existsSync9, readFileSync as readFileSync10 } from "node:fs";
-import { homedir as homedir12 } from "node:os";
-import { join as join20 } from "node:path";
+import { homedir as homedir14 } from "node:os";
+import { join as join21 } from "node:path";
 function liveOauthCredential() {
   try {
-    const creds = JSON.parse(readFileSync10(join20(homedir12(), ".gemini", "oauth_creds.json"), "utf8"));
+    const creds = JSON.parse(readFileSync10(join21(homedir14(), ".gemini", "oauth_creds.json"), "utf8"));
     if (typeof creds.access_token !== "string" || creds.access_token.trim().length === 0) return false;
     const hasRefresh = typeof creds.refresh_token === "string" && creds.refresh_token.trim().length > 0;
     if (creds.expiry_date !== void 0) {
@@ -25044,7 +25046,7 @@ function liveOauthCredential() {
   }
 }
 function geminiIsAuthenticated(env) {
-  return nonBlank(env.GEMINI_API_KEY) || nonBlank(env.GOOGLE_API_KEY) || existsSync9(join20(homedir12(), ".gemini", "oauth_creds.json")) && liveOauthCredential();
+  return nonBlank(env.GEMINI_API_KEY) || nonBlank(env.GOOGLE_API_KEY) || existsSync9(join21(homedir14(), ".gemini", "oauth_creds.json")) && liveOauthCredential();
 }
 var AUTH_PREFERENCE, nonBlank, support3, GeminiAgentDriver;
 var init_gemini = __esm({
@@ -25086,17 +25088,17 @@ ${turn.text}` : turn.text
 });
 
 // server/drivers/acp/kimi.ts
-import { existsSync as existsSync10, mkdirSync as mkdirSync6, readFileSync as readFileSync11, writeFileSync as writeFileSync6 } from "node:fs";
-import { homedir as homedir13 } from "node:os";
-import { join as join21 } from "node:path";
+import { existsSync as existsSync10, mkdirSync as mkdirSync7, readFileSync as readFileSync11, writeFileSync as writeFileSync7 } from "node:fs";
+import { homedir as homedir15 } from "node:os";
+import { join as join22 } from "node:path";
 function isLocalInjectAlias(slug) {
   return LOCAL_PROVIDER_PREFIXES.some((prefix) => slug.startsWith(prefix));
 }
 function kimiDataRoot(env) {
-  return env.KIMI_CODE_HOME || join21(env.HOME || env.USERPROFILE || homedir13(), ".kimi-code");
+  return env.KIMI_CODE_HOME || join22(env.HOME || env.USERPROFILE || homedir15(), ".kimi-code");
 }
 function credentialsPath(env) {
-  return join21(kimiDataRoot(env), "credentials", "kimi-code.json");
+  return join22(kimiDataRoot(env), "credentials", "kimi-code.json");
 }
 function quoteToml2(value) {
   return `"${value.replace(/\\/g, "\\\\").replace(/"/g, '\\"')}"`;
@@ -25383,8 +25385,8 @@ function ensureKimiInjectAlias(modelId, env = process.env) {
   if (!host) return modelId;
   const alias = `${inject.host}/${inject.model.replace(/\//g, "-")}`;
   const dataRoot = kimiDataRoot(env);
-  mkdirSync6(dataRoot, { recursive: true });
-  const path3 = join21(dataRoot, "config.toml");
+  mkdirSync7(dataRoot, { recursive: true });
+  const path3 = join22(dataRoot, "config.toml");
   let text2 = "";
   try {
     text2 = readFileSync11(path3, "utf8");
@@ -25425,9 +25427,9 @@ function ensureKimiInjectAlias(modelId, env = process.env) {
 
 ` : text2 ? `${text2}
 ` : "";
-    writeFileSync6(path3, `${prefix}${blocks.join("\n")}`);
+    writeFileSync7(path3, `${prefix}${blocks.join("\n")}`);
   } else if (text2 !== original) {
-    writeFileSync6(path3, text2);
+    writeFileSync7(path3, text2);
   }
   return alias;
 }
@@ -25449,7 +25451,7 @@ function readKimiModelCatalog(env) {
   const dataRoot = kimiDataRoot(env);
   let text2 = "";
   try {
-    text2 = readFileSync11(join21(dataRoot, "config.toml"), "utf8");
+    text2 = readFileSync11(join22(dataRoot, "config.toml"), "utf8");
   } catch {
     return STATIC_KIMI_MODELS;
   }
@@ -25568,19 +25570,19 @@ ${turn.text}` : turn.text
 });
 
 // server/drivers/acp/droid.ts
-import { existsSync as existsSync11, mkdirSync as mkdirSync7, readFileSync as readFileSync12, writeFileSync as writeFileSync7 } from "node:fs";
-import { homedir as homedir14 } from "node:os";
-import { join as join22 } from "node:path";
+import { existsSync as existsSync11, mkdirSync as mkdirSync8, readFileSync as readFileSync12, writeFileSync as writeFileSync8 } from "node:fs";
+import { homedir as homedir16 } from "node:os";
+import { join as join23 } from "node:path";
 function authFilePaths(env) {
-  const home = env.FACTORY_HOME_OVERRIDE || env.HOME || homedir14();
-  return AUTH_FILES.map((name) => join22(home, ".factory", name));
+  const home = env.FACTORY_HOME_OVERRIDE || env.HOME || homedir16();
+  return AUTH_FILES.map((name) => join23(home, ".factory", name));
 }
 function droidInjectId(host, model) {
   const safe = `${host}-${model}`.replace(/[^a-zA-Z0-9._+-]+/g, "-").replace(/-+/g, "-");
   return `${INJECT_ID_PREFIX}${safe}`;
 }
 function factoryHome(env) {
-  return env.FACTORY_HOME_OVERRIDE || env.HOME || env.USERPROFILE || homedir14();
+  return env.FACTORY_HOME_OVERRIDE || env.HOME || env.USERPROFILE || homedir16();
 }
 function ensureDroidInjectModel(modelId, env = process.env) {
   const inject = decodeInjectId(modelId);
@@ -25588,9 +25590,9 @@ function ensureDroidInjectModel(modelId, env = process.env) {
   const host = localHost(inject.host);
   if (!host) return modelId;
   const id = droidInjectId(inject.host, inject.model);
-  const dir = join22(factoryHome(env), ".factory");
-  mkdirSync7(dir, { recursive: true });
-  const path3 = join22(dir, "settings.json");
+  const dir = join23(factoryHome(env), ".factory");
+  mkdirSync8(dir, { recursive: true });
+  const path3 = join23(dir, "settings.json");
   let settings2 = {};
   try {
     settings2 = JSON.parse(readFileSync12(path3, "utf8"));
@@ -25605,7 +25607,7 @@ function ensureDroidInjectModel(modelId, env = process.env) {
     if (!match.id) {
       match.id = id;
       settings2.customModels = custom2;
-      writeFileSync7(path3, `${JSON.stringify(settings2, null, 2)}
+      writeFileSync8(path3, `${JSON.stringify(settings2, null, 2)}
 `);
     }
     return match.id;
@@ -25619,7 +25621,7 @@ function ensureDroidInjectModel(modelId, env = process.env) {
     provider: "generic-chat-completion-api"
   });
   settings2.customModels = custom2;
-  writeFileSync7(path3, `${JSON.stringify(settings2, null, 2)}
+  writeFileSync8(path3, `${JSON.stringify(settings2, null, 2)}
 `);
   return id;
 }
@@ -25630,7 +25632,7 @@ function applyDroidLocalAuthEnv(env, modelId) {
   env.FACTORY_API_KEY = "openmausbot-local";
 }
 function readSettings(env) {
-  return JSON.parse(readFileSync12(join22(factoryHome(env), ".factory", "settings.json"), "utf8"));
+  return JSON.parse(readFileSync12(join23(factoryHome(env), ".factory", "settings.json"), "utf8"));
 }
 async function resolveModels(env) {
   let catalog = MODELS3;
@@ -26020,9 +26022,9 @@ ${turn.text}` : turn.text
 });
 
 // server/drivers/acp/opencode-go.ts
-import { existsSync as existsSync12, mkdirSync as mkdirSync8, readFileSync as readFileSync13, writeFileSync as writeFileSync8 } from "node:fs";
-import { homedir as homedir15 } from "node:os";
-import { join as join23 } from "node:path";
+import { existsSync as existsSync12, mkdirSync as mkdirSync9, readFileSync as readFileSync13, writeFileSync as writeFileSync9 } from "node:fs";
+import { homedir as homedir17 } from "node:os";
+import { join as join24 } from "node:path";
 function labelForModel(id) {
   return id.split(/[-_.]+/g).filter(Boolean).map((part) => part.charAt(0).toUpperCase() + part.slice(1)).join(" ");
 }
@@ -26122,8 +26124,8 @@ async function discoverOpenCodeModels(environment, cli = "opencode") {
   }
 }
 function opencodeConfigDir(env) {
-  const home = env.HOME || env.USERPROFILE || homedir15();
-  return join23(env.XDG_CONFIG_HOME || join23(home, ".config"), "opencode");
+  const home = env.HOME || env.USERPROFILE || homedir17();
+  return join24(env.XDG_CONFIG_HOME || join24(home, ".config"), "opencode");
 }
 function ensureOpenCodeInjectModel(modelId, env = process.env) {
   const inject = decodeInjectId(modelId);
@@ -26132,8 +26134,8 @@ function ensureOpenCodeInjectModel(modelId, env = process.env) {
   if (!host) return modelId;
   const native = `${inject.host}/${inject.model}`;
   const dir = opencodeConfigDir(env);
-  mkdirSync8(dir, { recursive: true });
-  const path3 = join23(dir, "opencode.json");
+  mkdirSync9(dir, { recursive: true });
+  const path3 = join24(dir, "opencode.json");
   let config2 = { $schema: "https://opencode.ai/config.json" };
   if (existsSync12(path3)) {
     try {
@@ -26164,17 +26166,17 @@ function ensureOpenCodeInjectModel(modelId, env = process.env) {
     models
   };
   config2.provider = providers;
-  writeFileSync8(path3, `${JSON.stringify(config2, null, 2)}
+  writeFileSync9(path3, `${JSON.stringify(config2, null, 2)}
 `);
   return native;
 }
 function storedAuthPaths(env) {
-  const home = env.HOME || env.USERPROFILE || homedir15();
+  const home = env.HOME || env.USERPROFILE || homedir17();
   const roots = [
-    env.XDG_DATA_HOME || join23(home, ".local", "share"),
-    process.platform === "darwin" ? join23(home, "Library", "Application Support") : process.platform === "win32" ? env.LOCALAPPDATA || join23(home, "AppData", "Local") : ""
+    env.XDG_DATA_HOME || join24(home, ".local", "share"),
+    process.platform === "darwin" ? join24(home, "Library", "Application Support") : process.platform === "win32" ? env.LOCALAPPDATA || join24(home, "AppData", "Local") : ""
   ].filter(Boolean);
-  return [...new Set(roots)].map((root) => join23(root, "opencode", "auth.json"));
+  return [...new Set(roots)].map((root) => join24(root, "opencode", "auth.json"));
 }
 function usableAuthEntry(parsed) {
   return Object.values(parsed).some((auth) => {
@@ -26304,11 +26306,11 @@ ${turn.text}` : turn.text
 });
 
 // server/drivers/acp/qwen.ts
-import { chmodSync as chmodSync4, existsSync as existsSync13, mkdirSync as mkdirSync9, readFileSync as readFileSync14, writeFileSync as writeFileSync9 } from "node:fs";
-import { homedir as homedir16 } from "node:os";
-import { join as join24 } from "node:path";
+import { chmodSync as chmodSync4, existsSync as existsSync13, mkdirSync as mkdirSync10, readFileSync as readFileSync14, writeFileSync as writeFileSync10 } from "node:fs";
+import { homedir as homedir18 } from "node:os";
+import { join as join25 } from "node:path";
 function qwenHome(env) {
-  return join24(env.HOME || env.USERPROFILE || homedir16(), ".qwen");
+  return join25(env.HOME || env.USERPROFILE || homedir18(), ".qwen");
 }
 function envKeyFor(hostId) {
   return `OPENMAUSBOT_QWEN_${hostId.toUpperCase().replace(/[^A-Z0-9]+/g, "_")}_API_KEY`;
@@ -26319,8 +26321,8 @@ function ensureQwenInjectModel(modelId, env = process.env) {
   const host = localHost(inject.host);
   if (!host) return modelId;
   const dir = qwenHome(env);
-  mkdirSync9(dir, { recursive: true });
-  const path3 = join24(dir, "settings.json");
+  mkdirSync10(dir, { recursive: true });
+  const path3 = join25(dir, "settings.json");
   let settings2 = {};
   if (existsSync13(path3)) {
     try {
@@ -26348,7 +26350,7 @@ function ensureQwenInjectModel(modelId, env = process.env) {
     providers.openai = openai;
     settings2.modelProviders = providers;
   }
-  writeFileSync9(path3, `${JSON.stringify(settings2, null, 2)}
+  writeFileSync10(path3, `${JSON.stringify(settings2, null, 2)}
 `, { mode: 384 });
   try {
     chmodSync4(path3, 384);
@@ -33285,9 +33287,9 @@ var init_browser = __esm({
 
 // server/drivers/acp/hermes.ts
 import { spawn as spawn5 } from "node:child_process";
-import { mkdirSync as mkdirSync10, readFileSync as readFileSync15, writeFileSync as writeFileSync10 } from "node:fs";
-import { homedir as homedir17 } from "node:os";
-import { join as join25 } from "node:path";
+import { mkdirSync as mkdirSync11, readFileSync as readFileSync15, writeFileSync as writeFileSync11 } from "node:fs";
+import { homedir as homedir19 } from "node:os";
+import { join as join26 } from "node:path";
 function bindHermesScreenshotCompat(env, modelId) {
   delete env[HERMES_OPENMAUS_SCREENSHOT_COMPAT];
   delete env[HERMES_OPENMAUS_SCREENSHOT_COMPAT_MODEL];
@@ -33297,7 +33299,7 @@ function bindHermesScreenshotCompat(env, modelId) {
   env[HERMES_OPENMAUS_SCREENSHOT_COMPAT_MODEL] = inject.model;
 }
 function hermesHome(env) {
-  return env.HERMES_HOME || join25(env.HOME || env.USERPROFILE || homedir17(), ".hermes");
+  return env.HERMES_HOME || join26(env.HOME || env.USERPROFILE || homedir19(), ".hermes");
 }
 function quoteYaml(value) {
   if (/^[\w./:+-]+$/.test(value)) return value;
@@ -33338,8 +33340,8 @@ function ensureHermesInjectProvider(modelId, env = process.env) {
   const host = localHost(inject.host);
   if (!host) return modelId;
   const dir = hermesHome(env);
-  mkdirSync10(dir, { recursive: true });
-  const path3 = join25(dir, "config.yaml");
+  mkdirSync11(dir, { recursive: true });
+  const path3 = join26(dir, "config.yaml");
   let text2 = "";
   try {
     text2 = readFileSync15(path3, "utf8");
@@ -33347,7 +33349,7 @@ function ensureHermesInjectProvider(modelId, env = process.env) {
     text2 = "";
   }
   const next = upsertHermesProvider(text2, inject.host, host.baseUrl, hostApiKey(host, env));
-  if (next !== text2) writeFileSync10(path3, next);
+  if (next !== text2) writeFileSync11(path3, next);
   return hermesAcpModelId(modelId) ?? modelId;
 }
 function hermesAcpModelId(modelId) {
@@ -33410,13 +33412,13 @@ function hermesConfiguredModel(env = process.env) {
   const dir = hermesHome(env);
   let secrets = "";
   try {
-    secrets = readFileSync15(join25(dir, ".env"), "utf8");
+    secrets = readFileSync15(join26(dir, ".env"), "utf8");
   } catch {
   }
   const hasHostedProviderKey = HERMES_HOSTED_PROVIDER_KEYS.some((name) => nonEmptyDotenvValue(secrets, name));
   let configuredDefault = null;
   try {
-    configuredDefault = hermesConfigDefault(readFileSync15(join25(dir, "config.yaml"), "utf8"));
+    configuredDefault = hermesConfigDefault(readFileSync15(join26(dir, "config.yaml"), "utf8"));
   } catch {
   }
   const configuredProvider = configuredDefault?.provider.toLowerCase() ?? "";
@@ -33501,7 +33503,7 @@ async function fetchHermesAcpModels(cli, env) {
         }
         if (msg?.id === initId) {
           if (!msg.result) return done([]);
-          sessionId = send("session/new", { cwd: env.HOME || env.USERPROFILE || homedir17(), mcpServers: [] });
+          sessionId = send("session/new", { cwd: env.HOME || env.USERPROFILE || homedir19(), mcpServers: [] });
         } else if (sessionId && msg?.id === sessionId) {
           const list = Array.isArray(msg.result?.models?.availableModels) ? msg.result.models.availableModels : [];
           done(
@@ -33736,9 +33738,9 @@ var init_openai_compat = __esm({
 });
 
 // server/drivers/pi.ts
-import { chmodSync as chmodSync5, existsSync as existsSync14, mkdirSync as mkdirSync11, mkdtempSync as mkdtempSync3, readFileSync as readFileSync16, rmSync as rmSync3, writeFileSync as writeFileSync11 } from "node:fs";
-import { homedir as homedir18, tmpdir as tmpdir4 } from "node:os";
-import { join as join26 } from "node:path";
+import { chmodSync as chmodSync5, existsSync as existsSync14, mkdirSync as mkdirSync12, mkdtempSync as mkdtempSync3, readFileSync as readFileSync16, rmSync as rmSync3, writeFileSync as writeFileSync12 } from "node:fs";
+import { homedir as homedir20, tmpdir as tmpdir4 } from "node:os";
+import { join as join27 } from "node:path";
 function readPiPromptImages(turn) {
   return (turn.images ?? []).map((image) => ({
     type: "image",
@@ -33845,7 +33847,7 @@ async function applyPiLocalCatalog(catalog, env = process.env, fetchImpl = fetch
   return preferPiInjectRows(await mergeLocalInject(catalog, env, fetchImpl));
 }
 function piAgentDir(env) {
-  return join26(env.HOME || env.USERPROFILE || homedir18(), ".pi", "agent");
+  return join27(env.HOME || env.USERPROFILE || homedir20(), ".pi", "agent");
 }
 function ensurePiInjectModel(modelId, env = process.env) {
   const split = splitPiModel(modelId);
@@ -33855,8 +33857,8 @@ function ensurePiInjectModel(modelId, env = process.env) {
   const host = localHost(inject.host);
   if (!host) return split;
   const dir = piAgentDir(env);
-  mkdirSync11(dir, { recursive: true });
-  const path3 = join26(dir, "models.json");
+  mkdirSync12(dir, { recursive: true });
+  const path3 = join27(dir, "models.json");
   let root = { providers: {} };
   if (existsSync14(path3)) {
     try {
@@ -33901,7 +33903,7 @@ function ensurePiInjectModel(modelId, env = process.env) {
   existing.models = models;
   providers[inject.host] = existing;
   root.providers = providers;
-  writeFileSync11(path3, `${JSON.stringify(root, null, 2)}
+  writeFileSync12(path3, `${JSON.stringify(root, null, 2)}
 `, { mode: 384 });
   try {
     chmodSync5(path3, 384);
@@ -33910,7 +33912,7 @@ function ensurePiInjectModel(modelId, env = process.env) {
   return split;
 }
 function readPiDefaultModel(env) {
-  const home = env.HOME || env.USERPROFILE || homedir18();
+  const home = env.HOME || env.USERPROFILE || homedir20();
   try {
     const s = JSON.parse(readFileSync16(`${home}/.pi/agent/settings.json`, "utf8"));
     return s.defaultProvider && s.defaultModel ? `${s.defaultProvider}/${s.defaultModel}` : "";
@@ -34058,9 +34060,9 @@ var init_pi = __esm({
           const mcpServers = buildMcpServers(turn);
           let mcpTempDir = null;
           if (mcpServers) {
-            mcpTempDir = mkdtempSync3(join26(tmpdir4(), "omb-pi-mcp-"));
+            mcpTempDir = mkdtempSync3(join27(tmpdir4(), "omb-pi-mcp-"));
             try {
-              writeFileSync11(join26(mcpTempDir, "mcp.json"), JSON.stringify({ mcpServers }), { mode: 384 });
+              writeFileSync12(join27(mcpTempDir, "mcp.json"), JSON.stringify({ mcpServers }), { mode: 384 });
             } catch (err) {
               try {
                 rmSync3(mcpTempDir, { recursive: true, force: true });
@@ -34078,7 +34080,7 @@ var init_pi = __esm({
                 env: piEnvironment({
                   ...process.env,
                   ...input.environment,
-                  ...mcpServers && mcpTempDir ? { OMB_MCP_CONFIG: join26(mcpTempDir, "mcp.json") } : {}
+                  ...mcpServers && mcpTempDir ? { OMB_MCP_CONFIG: join27(mcpTempDir, "mcp.json") } : {}
                 })
               });
             } catch (err) {
@@ -34416,15 +34418,15 @@ ${turn.text}` : turn.text;
 
 // server/drivers/minimax.ts
 import { readFileSync as readFileSync17 } from "node:fs";
-import { homedir as homedir19 } from "node:os";
-import { join as join27 } from "node:path";
+import { homedir as homedir21 } from "node:os";
+import { join as join28 } from "node:path";
 function normalizedApiUrl(value) {
   const root = value.trim().replace(/\/+$/, "");
   return root.endsWith("/v1") ? root : `${root}/v1`;
 }
-function loadLocalMiniMaxConfig(home = homedir19()) {
+function loadLocalMiniMaxConfig(home = homedir21()) {
   try {
-    const raw = localConfigSchema.parse(JSON.parse(readFileSync17(join27(home, ".mmx", "config.json"), "utf8")));
+    const raw = localConfigSchema.parse(JSON.parse(readFileSync17(join28(home, ".mmx", "config.json"), "utf8")));
     const configuredUrl = raw.base_url?.trim() ? raw.base_url : raw.region === "cn" ? CN_URL : DEFAULT_URL2;
     return {
       apiKey: raw.api_key?.trim() ?? "",
@@ -34692,7 +34694,7 @@ __export(cli_setup_exports, {
 });
 import { spawn as spawn6 } from "node:child_process";
 import { readFileSync as readFileSync18 } from "node:fs";
-import { join as join28, resolve as resolve9 } from "node:path";
+import { join as join29, resolve as resolve9 } from "node:path";
 import { randomUUID as randomUUID10 } from "node:crypto";
 async function inspect(id, entry) {
   const registry2 = new ProviderRegistry(BUILT_IN_DRIVERS);
@@ -34729,7 +34731,7 @@ function assertDataDir(dataDir) {
 }
 function checkStoredConfig(dataDir) {
   try {
-    parseStoredConfig(JSON.parse(readFileSync18(join28(dataDir, "config.json"), "utf8")));
+    parseStoredConfig(JSON.parse(readFileSync18(join29(dataDir, "config.json"), "utf8")));
   } catch (error51) {
     if (error51.code === "ENOENT") return;
     throw new Error("Existing config.json could not be read or validated. Setup has not changed it; repair it before continuing.");
@@ -35007,7 +35009,7 @@ var init_browser_engine_release = __esm({
 });
 
 // server/browser-bundle-release.ts
-import { join as join29 } from "node:path";
+import { join as join30 } from "node:path";
 function browserBundleSpec(target) {
   if (!Object.hasOwn(CHROME_ASSETS, target)) throw new Error(`Unsupported desktop browser target: ${target}`);
   const pinned = CHROME_ASSETS[target];
@@ -35043,10 +35045,10 @@ function browserBundlePaths(bundleDirectory, target) {
   const spec = browserBundleSpec(target);
   return {
     directory: bundleDirectory,
-    manifest: join29(bundleDirectory, "manifest.json"),
-    engine: join29(bundleDirectory, spec.engine.executable),
-    chrome: join29(bundleDirectory, spec.chrome.executable),
-    licenses: join29(bundleDirectory, "licenses")
+    manifest: join30(bundleDirectory, "manifest.json"),
+    engine: join30(bundleDirectory, spec.engine.executable),
+    chrome: join30(bundleDirectory, spec.chrome.executable),
+    licenses: join30(bundleDirectory, "licenses")
   };
 }
 var CHROME_VERSION, CHROME_ASSETS;
@@ -35101,9 +35103,9 @@ __export(browser_engine_exports, {
 });
 import { spawn as spawn7 } from "node:child_process";
 import { createHash as createHash7, randomBytes as randomBytes3, randomUUID as randomUUID11 } from "node:crypto";
-import { chmodSync as chmodSync6, constants as constants2, copyFileSync, existsSync as existsSync15, mkdirSync as mkdirSync12, readFileSync as readFileSync19, readdirSync as readdirSync3, renameSync as renameSync5, rmSync as rmSync4, statSync as statSync3, unlinkSync as unlinkSync4, writeFileSync as writeFileSync12 } from "node:fs";
-import { homedir as homedir20, tmpdir as tmpdir5 } from "node:os";
-import { delimiter as delimiter6, dirname as dirname9, join as join30, resolve as resolve10 } from "node:path";
+import { chmodSync as chmodSync6, constants as constants2, copyFileSync, existsSync as existsSync15, mkdirSync as mkdirSync13, readFileSync as readFileSync19, readdirSync as readdirSync3, renameSync as renameSync5, rmSync as rmSync4, statSync as statSync3, unlinkSync as unlinkSync4, writeFileSync as writeFileSync13 } from "node:fs";
+import { homedir as homedir22, tmpdir as tmpdir5 } from "node:os";
+import { delimiter as delimiter6, dirname as dirname10, join as join31, resolve as resolve10 } from "node:path";
 function browserRestoreKey(session) {
   if (!/^[A-Za-z0-9_-]{1,96}$/.test(session)) throw new Error("Invalid browser session.");
   return `omb-${createHash7("sha256").update(session).digest("hex")}`;
@@ -35111,18 +35113,18 @@ function browserRestoreKey(session) {
 function browserSessionsDirectory(env) {
   const namespace = env.AGENT_BROWSER_NAMESPACE;
   if (namespace && !/^[a-z0-9]+(?:[-_][a-z0-9]+)*$/.test(namespace)) throw new Error("Invalid browser namespace.");
-  const home = (process.platform === "win32" ? env.USERPROFILE : env.HOME) || homedir20();
-  const stateRoot = namespace ? join30(home, ".agent-browser", "namespaces", namespace, "state") : join30(home, ".agent-browser");
-  return join30(stateRoot, "sessions");
+  const home = (process.platform === "win32" ? env.USERPROFILE : env.HOME) || homedir22();
+  const stateRoot = namespace ? join31(home, ".agent-browser", "namespaces", namespace, "state") : join31(home, ".agent-browser");
+  return join31(stateRoot, "sessions");
 }
 function managedBrowserConfigPath(env) {
-  return join30(browserSessionsDirectory(env), "..", "omb-managed-config.json");
+  return join31(browserSessionsDirectory(env), "..", "omb-managed-config.json");
 }
 function ensureManagedBrowserConfig(env) {
   const path3 = managedBrowserConfigPath(env);
-  mkdirSync12(dirname9(path3), { recursive: true, mode: 448 });
+  mkdirSync13(dirname10(path3), { recursive: true, mode: 448 });
   try {
-    writeFileSync12(path3, "{}\n", { flag: "wx", mode: 384 });
+    writeFileSync13(path3, "{}\n", { flag: "wx", mode: 384 });
   } catch (error51) {
     if (error51.code !== "EEXIST") throw error51;
     if (readFileSync19(path3, "utf8").trim() !== "{}") throw new Error("The managed browser configuration was changed. Restore it to an empty JSON object before connecting.");
@@ -35203,11 +35205,11 @@ async function prepareBrowserSessionState(binaryPath, session, options = {}) {
   ensureManagedBrowserConfig(env);
   if (options.persistent === false) return;
   const directory = browserSessionsDirectory(env);
-  const key = join30(directory, session);
+  const key = join31(directory, session);
   let pending = preparedBrowserSessions.get(key);
   if (!pending) {
     pending = (async () => {
-      const targetBase = join30(directory, `${restoreKey}-${session}`);
+      const targetBase = join31(directory, `${restoreKey}-${session}`);
       const hasTarget = () => existsSync15(`${targetBase}.json.enc`) || existsSync15(`${targetBase}.json`);
       if (hasTarget()) return;
       check2();
@@ -35217,7 +35219,7 @@ async function prepareBrowserSessionState(binaryPath, session, options = {}) {
       check2();
       if (hasTarget()) return;
       const candidates = [".json.enc", ".json"].flatMap((suffix) => {
-        const path3 = join30(directory, `${session}-${session}${suffix}`);
+        const path3 = join31(directory, `${session}-${session}${suffix}`);
         try {
           const stat4 = statSync3(path3);
           if (!stat4.isFile()) throw new Error("Saved browser state is not a file.");
@@ -35252,7 +35254,7 @@ function isMusl(platform = process.platform, exists = existsSync15) {
 }
 function pinnedBinaryPath(dataDir = DATA_DIR, platform = process.platform, arch = process.arch) {
   const version2 = agentBrowserReleaseVersion(resolveAgentBrowserReleaseAsset(platform, arch));
-  return join30(dataDir, ENGINE_DIR, version2, executableName(platform));
+  return join31(dataDir, ENGINE_DIR, version2, executableName(platform));
 }
 function onPath(env, platform, exists) {
   const pathValue = platform === "win32" ? Object.entries(env).findLast(([key]) => key.toUpperCase() === "PATH")?.[1] : env.PATH;
@@ -35268,7 +35270,7 @@ function packagedBrowser(options) {
   const resources = (options.env ?? process.env).OMB_RESOURCES_PATH;
   if (!resources) return null;
   try {
-    return browserBundlePaths(join30(resolve10(resources), "browser-engine"), `${options.platform ?? process.platform}-${options.arch ?? process.arch}`);
+    return browserBundlePaths(join31(resolve10(resources), "browser-engine"), `${options.platform ?? process.platform}-${options.arch ?? process.arch}`);
   } catch {
     return null;
   }
@@ -35293,8 +35295,8 @@ async function installAgentBrowserBinary(options = {}) {
   const asset = options.asset ?? resolveAgentBrowserReleaseAsset(platform, options.arch ?? process.arch, options.musl ?? isMusl(platform));
   if (!asset) throw new Error(`agent-browser publishes no build for ${platform}-${options.arch ?? process.arch}.`);
   const destination = pinnedBinaryPath(options.dataDir, platform, options.arch);
-  const directory = join30(destination, "..");
-  mkdirSync12(directory, { recursive: true, mode: 448 });
+  const directory = join31(destination, "..");
+  mkdirSync13(directory, { recursive: true, mode: 448 });
   const url2 = agentBrowserReleaseUrl(asset);
   options.log?.(`downloading agent-browser ${agentBrowserReleaseVersion(asset)} (${Math.round(asset.bytes / 1024 / 1024)} MB, digest pinned)`);
   const controller = new AbortController();
@@ -35312,7 +35314,7 @@ async function installAgentBrowserBinary(options = {}) {
   const digest2 = createHash7("sha256").update(body).digest("hex");
   if (digest2 !== asset.sha256) throw new Error("the agent-browser download failed its SHA-256 check; nothing was installed");
   const staging = `${destination}.${randomBytes3(6).toString("hex")}.part`;
-  writeFileSync12(staging, body, { mode: 493 });
+  writeFileSync13(staging, body, { mode: 493 });
   if (platform !== "win32") chmodSync6(staging, 493);
   renameSync5(staging, destination);
   return destination;
@@ -35345,14 +35347,14 @@ function ensureChrome(binaryPath, options = {}) {
   });
 }
 function browserEngineEncryptionKey(dataDir = DATA_DIR) {
-  const file2 = join30(dataDir, KEY_FILE);
+  const file2 = join31(dataDir, KEY_FILE);
   try {
     const existing = readFileSync19(file2, "utf8").trim();
     if (/^[0-9a-f]{64}$/u.test(existing)) return existing;
   } catch {
   }
   const key = randomBytes3(32).toString("hex");
-  mkdirSync12(dataDir, { recursive: true });
+  mkdirSync13(dataDir, { recursive: true });
   writeFileAtomic(file2, `${key}
 `, { mode: 384 });
   return key;
@@ -35405,7 +35407,7 @@ function agentBrowserIntegration(input) {
   return { command: input.binaryPath, args: ["mcp", "--tools", "core", "--no-webmcp"], env };
 }
 function agentBrowserFrame(input) {
-  const file2 = join30(tmpdir5(), `openmausbot-browser-${randomUUID11()}.png`);
+  const file2 = join31(tmpdir5(), `openmausbot-browser-${randomUUID11()}.png`);
   return new Promise((settle, fail) => {
     const child = spawn7(input.binaryPath, ["screenshot", file2], {
       env: browserRuntimeEnv(input.env),
@@ -35475,8 +35477,8 @@ async function clearBrowserSessionState(binaryPath, session, options = {}) {
     }
   };
   try {
-    for (const base2 of bases) for (const suffix of [".json", ".json.enc", ".json.previous", ".json.enc.previous"]) remove(join30(directory, base2 + suffix));
-    const pendingDirectory = join30(directory, ".tmp");
+    for (const base2 of bases) for (const suffix of [".json", ".json.enc", ".json.previous", ".json.enc.previous"]) remove(join31(directory, base2 + suffix));
+    const pendingDirectory = join31(directory, ".tmp");
     let pendingFiles = [];
     try {
       pendingFiles = readdirSync3(pendingDirectory);
@@ -35484,8 +35486,8 @@ async function clearBrowserSessionState(binaryPath, session, options = {}) {
       if (error51.code !== "ENOENT") throw error51;
     }
     const candidates = bases.map((base2) => new RegExp(`^${base2}-candidate-[0-9]+\\.json(?:\\.enc)?$`));
-    for (const name of pendingFiles) if (candidates.some((candidate) => candidate.test(name))) remove(join30(pendingDirectory, name));
-    preparedBrowserSessions.delete(join30(directory, session));
+    for (const name of pendingFiles) if (candidates.some((candidate) => candidate.test(name))) remove(join31(pendingDirectory, name));
+    preparedBrowserSessions.delete(join31(directory, session));
     return true;
   } catch {
     return false;
@@ -35512,9 +35514,9 @@ var init_browser_engine = __esm({
 // server/cli.ts
 var import_qrcode_terminal = __toESM(require_main(), 1);
 import { spawn as spawn8 } from "node:child_process";
-import { closeSync as closeSync3, existsSync as existsSync16, mkdirSync as mkdirSync13, openSync as openSync3, readFileSync as readFileSync20 } from "node:fs";
-import { homedir as homedir21 } from "node:os";
-import { dirname as dirname10, join as join31, resolve as resolve11 } from "node:path";
+import { closeSync as closeSync3, existsSync as existsSync16, mkdirSync as mkdirSync14, openSync as openSync3, readFileSync as readFileSync20 } from "node:fs";
+import { homedir as homedir23 } from "node:os";
+import { dirname as dirname11, join as join32, resolve as resolve11 } from "node:path";
 import { createInterface as createInterface2 } from "node:readline/promises";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 
@@ -37111,16 +37113,190 @@ function normalizeDomainOption(raw) {
   return value;
 }
 
+// server/service-cli.ts
+import { mkdirSync as mkdirSync2, writeFileSync as writeFileSync3 } from "node:fs";
+import { homedir as homedir2 } from "node:os";
+
+// server/service-unit.ts
+import { homedir, userInfo } from "node:os";
+import { posix } from "node:path";
+var { basename, dirname, join: join2 } = posix;
+var SYSTEMD_UNIT_NAME = "openmausbot.service";
+var LAUNCHD_LABEL = "com.openmausbot.serve";
+function quoteSystemd(value) {
+  return /[\s"\\]/.test(value) ? `"${value.replace(/[\\"]/g, "\\$&")}"` : value;
+}
+function needsStripTypes(script) {
+  return script.endsWith(".ts");
+}
+function serviceCommand(spec) {
+  return [spec.node, ...needsStripTypes(spec.script) ? ["--experimental-strip-types"] : [], spec.script, "serve", ...spec.serveArgs];
+}
+function systemdUnit(spec) {
+  const lines = [
+    "# Written by `openmausbot service install`. Re-run it to change the options.",
+    "[Unit]",
+    `Description=OpenMausBot${spec.label ? ` (${spec.label})` : ""}`,
+    "After=network-online.target",
+    "Wants=network-online.target",
+    "",
+    "[Service]",
+    "Type=simple",
+    `User=${spec.user}`,
+    `WorkingDirectory=${spec.home}`,
+    `Environment=HOME=${spec.home}`,
+    `Environment=OMB_DATA_DIR=${spec.dataDir}`,
+    `ExecStart=${serviceCommand(spec).map(quoteSystemd).join(" ")}`,
+    "Restart=always",
+    "RestartSec=3",
+    "KillMode=mixed",
+    "TimeoutStopSec=30"
+  ];
+  if (spec.bindsLowPorts) {
+    lines.push("# serve --domain: Caddy binds ports 80 and 443 without running as root.");
+    lines.push("AmbientCapabilities=CAP_NET_BIND_SERVICE");
+    lines.push("CapabilityBoundingSet=CAP_NET_BIND_SERVICE");
+  }
+  lines.push("", "[Install]", "WantedBy=multi-user.target", "");
+  return lines.join("\n");
+}
+function xml(value) {
+  return value.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
+}
+function launchdPlist(spec) {
+  const args = serviceCommand(spec).map((arg) => `		<string>${xml(arg)}</string>`).join("\n");
+  return [
+    '<?xml version="1.0" encoding="UTF-8"?>',
+    '<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">',
+    '<plist version="1.0">',
+    "<dict>",
+    "	<key>Label</key>",
+    `	<string>${LAUNCHD_LABEL}</string>`,
+    "	<key>ProgramArguments</key>",
+    "	<array>",
+    args,
+    "	</array>",
+    "	<key>EnvironmentVariables</key>",
+    "	<dict>",
+    "		<key>HOME</key>",
+    `		<string>${xml(spec.home)}</string>`,
+    "		<key>OMB_DATA_DIR</key>",
+    `		<string>${xml(spec.dataDir)}</string>`,
+    "		<key>PATH</key>",
+    "		<string>/usr/local/bin:/opt/homebrew/bin:/usr/bin:/bin</string>",
+    "	</dict>",
+    "	<key>WorkingDirectory</key>",
+    `	<string>${xml(spec.home)}</string>`,
+    "	<key>RunAtLoad</key>",
+    "	<true/>",
+    "	<key>KeepAlive</key>",
+    "	<true/>",
+    "	<key>StandardOutPath</key>",
+    `	<string>${xml(join2(spec.dataDir, "logs", "service.log"))}</string>`,
+    "	<key>StandardErrorPath</key>",
+    `	<string>${xml(join2(spec.dataDir, "logs", "service.log"))}</string>`,
+    "</dict>",
+    "</plist>",
+    ""
+  ].join("\n");
+}
+function unstableInstallWarning(script) {
+  const normalized = script.replace(/\\/g, "/");
+  if (/\/_npx\//.test(normalized) || /\/\.npm\/_npx\//.test(normalized)) {
+    return `this command runs from an npx cache (${dirname(script)}), which npm may delete at any time. Install it permanently first (npm install -g openmausbot) and run \`openmausbot service install\` from that install.`;
+  }
+  return null;
+}
+function servicePlan(platform, dataDir, home = homedir()) {
+  if (platform === "linux") {
+    const installed = `/etc/systemd/system/${SYSTEMD_UNIT_NAME}`;
+    return {
+      file: join2(dataDir, SYSTEMD_UNIT_NAME),
+      installed,
+      activate: [`sudo install -m 644 ${join2(dataDir, SYSTEMD_UNIT_NAME)} ${installed}`, "sudo systemctl daemon-reload", `sudo systemctl enable --now ${basename(SYSTEMD_UNIT_NAME, ".service")}`],
+      deactivate: [`sudo systemctl disable --now ${basename(SYSTEMD_UNIT_NAME, ".service")}`, `sudo rm ${installed}`, "sudo systemctl daemon-reload"]
+    };
+  }
+  if (platform === "darwin") {
+    const installed = join2(home, "Library", "LaunchAgents", `${LAUNCHD_LABEL}.plist`);
+    return {
+      file: join2(dataDir, `${LAUNCHD_LABEL}.plist`),
+      installed,
+      activate: [`mkdir -p ${dirname(installed)} && cp ${join2(dataDir, `${LAUNCHD_LABEL}.plist`)} ${installed}`, `launchctl bootstrap gui/$(id -u) ${installed}`],
+      deactivate: [`launchctl bootout gui/$(id -u)/${LAUNCHD_LABEL}`, `rm ${installed}`]
+    };
+  }
+  return null;
+}
+function currentUser() {
+  try {
+    return userInfo().username;
+  } catch {
+    return process.env.USER || process.env.USERNAME || "openmausbot";
+  }
+}
+
+// server/service-cli.ts
+function serviceServeArgs(input) {
+  const args = ["--port", String(input.port), "--data-dir", input.dataDir, "--no-pair"];
+  if (input.domain) args.push("--domain", input.domain);
+  else if (input.tunnel) args.push("--tunnel");
+  else if (input.tailscale) args.push("--tailscale");
+  if (input.label) args.push("--label", input.label);
+  return args;
+}
+function runServiceCommand(input, io) {
+  const platform = input.platform ?? process.platform;
+  const home = input.home ?? homedir2();
+  const plan = servicePlan(platform, input.dataDir, home);
+  if (!plan) {
+    io.error("services are written for Linux (systemd) and macOS (launchd); on Windows, use Task Scheduler to run `openmausbot serve` at startup");
+    return 1;
+  }
+  if (input.action === "uninstall") {
+    io.log(`to stop and remove the service:`);
+    for (const line of plan.deactivate) io.log(`  ${line}`);
+    return 0;
+  }
+  const warning = unstableInstallWarning(input.script);
+  if (warning) {
+    io.error(warning);
+    return 1;
+  }
+  const spec = {
+    node: input.node,
+    script: input.script,
+    serveArgs: serviceServeArgs(input),
+    dataDir: input.dataDir,
+    user: input.user ?? currentUser(),
+    home,
+    bindsLowPorts: Boolean(input.domain),
+    ...input.label ? { label: input.label } : {}
+  };
+  const rendered = platform === "darwin" ? launchdPlist(spec) : systemdUnit(spec);
+  mkdirSync2(input.dataDir, { recursive: true, mode: 448 });
+  writeFileSync3(plan.file, rendered, { mode: 420 });
+  io.log(`wrote ${plan.file}`);
+  io.log("");
+  io.log(platform === "darwin" ? "to install and start it (runs at login):" : "to install and start it (runs at boot, restarts if it stops):");
+  for (const line of plan.activate) io.log(`  ${line}`);
+  io.log("");
+  if (input.domain && platform === "linux") io.log("the unit grants Caddy the capability for ports 80 and 443, so no setcap is needed under the service");
+  io.log(`logs: ${platform === "darwin" ? `${input.dataDir}/logs/service.log` : "journalctl -u openmausbot -f"}`);
+  io.log(`change options later by running \`openmausbot service install\` again with the new ones, then: ${platform === "darwin" ? plan.activate[1] : "sudo systemctl daemon-reload && sudo systemctl restart openmausbot"}`);
+  return 0;
+}
+
 // server/tailscale.ts
 import { execFile } from "node:child_process";
 
 // companion/src/listener.ts
-import { homedir, networkInterfaces } from "node:os";
-import { delimiter as delimiter2, join as join2 } from "node:path";
-function tailscaleCandidates(home = homedir()) {
+import { homedir as homedir3, networkInterfaces } from "node:os";
+import { delimiter as delimiter2, join as join3 } from "node:path";
+function tailscaleCandidates(home = homedir3()) {
   return [
     "/Applications/Tailscale.app/Contents/MacOS/Tailscale",
-    join2(home, "Applications", "Tailscale.app", "Contents", "MacOS", "Tailscale"),
+    join3(home, "Applications", "Tailscale.app", "Contents", "MacOS", "Tailscale"),
     "/opt/homebrew/bin/tailscale",
     "/usr/local/bin/tailscale",
     "/usr/bin/tailscale",
@@ -37333,9 +37509,9 @@ function phonePairingInstructions(phone, input) {
 // server/tunnel.ts
 import { spawn as spawn3 } from "node:child_process";
 import { randomUUID as randomUUID4 } from "node:crypto";
-import { chmodSync as chmodSync2, existsSync as existsSync2, mkdirSync as mkdirSync2, readFileSync, statSync } from "node:fs";
+import { chmodSync as chmodSync2, existsSync as existsSync2, mkdirSync as mkdirSync3, readFileSync, statSync } from "node:fs";
 import { hostname } from "node:os";
-import { dirname, join as join3, resolve as resolve2 } from "node:path";
+import { dirname as dirname2, join as join4, resolve as resolve2 } from "node:path";
 import { fileURLToPath } from "node:url";
 
 // electron/secure-credential-state.mjs
@@ -37408,7 +37584,7 @@ function createSecureCredentialState(initialCredentials, persist, { writable = t
 
 // server/tunnel.ts
 init_atomic();
-var HERE = dirname(fileURLToPath(import.meta.url));
+var HERE = dirname2(fileURLToPath(import.meta.url));
 var TUNNEL_CREDENTIALS_FILE = "tunnel-account.json";
 var TUNNEL_RUNTIME_DIR = "tunnel-runtime";
 function plainDocument(value) {
@@ -37418,7 +37594,7 @@ function plainDocument(value) {
   return document;
 }
 function openTunnelCredentials(dataDir) {
-  const file2 = join3(dataDir, TUNNEL_CREDENTIALS_FILE);
+  const file2 = join4(dataDir, TUNNEL_CREDENTIALS_FILE);
   let initial = {};
   let status = "empty";
   if (existsSync2(file2)) {
@@ -37433,7 +37609,7 @@ function openTunnelCredentials(dataDir) {
     }
   }
   const persist = (next) => {
-    mkdirSync2(dataDir, { recursive: true, mode: 448 });
+    mkdirSync3(dataDir, { recursive: true, mode: 448 });
     writeFileAtomic(file2, `${JSON.stringify(next, null, 2)}
 `, { mode: 384 });
   };
@@ -37500,11 +37676,11 @@ function cloudflaredPath(dataDir, env = process.env) {
   return resolveCloudflaredBinary({ isPackaged: false, appPath: dataDir, environment: env });
 }
 function prepareEntry(here = HERE) {
-  const bundled = join3(here, "prepare-cloudflared.js");
+  const bundled = join4(here, "prepare-cloudflared.js");
   return existsSync2(bundled) ? bundled : resolve2(here, "..", "scripts", "prepare-cloudflared.mjs");
 }
 function guardianEntry(here = HERE) {
-  const bundled = join3(here, "tunnel-guardian.js");
+  const bundled = join4(here, "tunnel-guardian.js");
   if (existsSync2(bundled)) return bundled;
   const source = resolve2(here, "..", "electron", "managed-companion-guardian-main.mjs");
   return existsSync2(source) ? source : null;
@@ -37539,7 +37715,7 @@ function startTunnel(options) {
   const tunnel = createManagedCompanionTunnel({
     binaryPath: options.binaryPath,
     guardianEntry: options.guardian,
-    runtimeRoot: join3(options.dataDir, TUNNEL_RUNTIME_DIR),
+    runtimeRoot: join4(options.dataDir, TUNNEL_RUNTIME_DIR),
     originPort,
     environment: env,
     fetchImpl: options.fetchImpl,
@@ -37574,8 +37750,8 @@ function describeTunnelState(state, address) {
 }
 
 // server/cli.ts
-var HERE2 = dirname10(fileURLToPath3(import.meta.url));
-var COMMANDS = ["setup", "start", "serve", "pair", "sessions", "status", "login", "logout", "access", "browser", "help", "--help", "-h"];
+var HERE2 = dirname11(fileURLToPath3(import.meta.url));
+var COMMANDS = ["setup", "start", "serve", "pair", "sessions", "status", "login", "logout", "access", "service", "browser", "help", "--help", "-h"];
 function parseArgs(argv, env = process.env) {
   const implicitStart = !argv.length || argv[0].startsWith("--") && argv[0] !== "--help";
   const [command = "start", ...rest] = implicitStart ? ["start", ...argv] : argv;
@@ -37585,7 +37761,7 @@ function parseArgs(argv, env = process.env) {
   const options = {
     command: command === "--help" || command === "-h" ? "help" : command,
     port: Number(env.OMB_PORT || 8799),
-    dataDir: env.OMB_DATA_DIR || join31(homedir21(), ".openmausbot"),
+    dataDir: env.OMB_DATA_DIR || join32(homedir23(), ".openmausbot"),
     tailscale: false,
     tunnel: false,
     client: false,
@@ -37624,6 +37800,7 @@ function parseArgs(argv, env = process.env) {
         options.accessAction = arg;
         if (arg !== "list") options.email = value();
       } else if (options.command === "access" && arg === "--chat-only") options.chatOnly = true;
+      else if (options.command === "service" && !options.serviceAction && (arg === "install" || arg === "uninstall")) options.serviceAction = arg;
       else if (options.command === "browser" && (arg === "install" || arg === "status")) options.browserAction = arg;
       else if (options.command === "browser" && arg === "--with-deps") options.withDeps = true;
       else return { error: `unknown argument "${arg}"` };
@@ -37635,6 +37812,7 @@ function parseArgs(argv, env = process.env) {
   if (options.publicUrl && !/^https?:\/\//.test(options.publicUrl)) return { error: "--public-url must start with http:// or https://" };
   if (options.tailscale && options.tunnel) return { error: "choose one of --tailscale (your tailnet) and --tunnel (a public address)" };
   if (options.command === "access" && !options.accessAction) return { error: "access needs one of: list, add EMAIL [--chat-only], remove EMAIL" };
+  if (options.command === "service" && !options.serviceAction) return { error: "service needs one of: install [the same options as serve], uninstall" };
   if (options.domain && (options.tailscale || options.tunnel || options.publicUrl)) return { error: "--domain already gives the server its address; drop --tailscale, --tunnel and --public-url" };
   if (options.local && (options.tailscale || options.tunnel || options.publicUrl)) return { error: "--local cannot be combined with a remote-access option" };
   if (options.command === "browser" && !options.browserAction) return { error: "browser needs an action: install or status" };
@@ -37653,6 +37831,7 @@ var USAGE = `openmausbot \u2014 your team of AI bots, ready in a few steps
   openmausbot login [--email you@example.com]
   openmausbot logout
   openmausbot access list | add EMAIL [--chat-only] | remove EMAIL
+  openmausbot service install [--domain HOST | --tunnel | --tailscale] [--port N] [--data-dir DIR] | uninstall
   openmausbot browser install [--with-deps] | status
 
 setup   choose AI access and optional phone access; keep existing bots and chats
@@ -37667,6 +37846,10 @@ logout  releases that address and signs out
 access  who may sign in with an emailed code at /pair: an address or
         @domain; --chat-only gives chat and approvals without settings.
         Takes effect at once, no restart.
+service keep the server running across reboots: writes a systemd unit
+        (Linux) or a launchd agent (macOS) for the same serve options and
+        prints the commands that install it. Install the package
+        permanently first (npm install -g openmausbot).
 browser install: the bots' browser engine (agent-browser, pinned) into the
         data dir, and Chrome for Testing into the user's browser cache.
         --with-deps also installs
@@ -37733,7 +37916,7 @@ async function isWorkspaceRunning(options) {
   try {
     const { status, body } = await api(options.port, "/api/health");
     if (status !== 200 || body?.app !== "openmausbot") return false;
-    const expected = readFileSync20(join31(options.dataDir, "environment-id"), "utf8").trim();
+    const expected = readFileSync20(join32(options.dataDir, "environment-id"), "utf8").trim();
     const descriptor = await api(options.port, "/.well-known/openmausbot/environment");
     return /^[0-9a-f-]{36}$/i.test(expected) && descriptor.status === 200 && descriptor.body?.environmentId === expected;
   } catch {
@@ -37933,7 +38116,7 @@ async function runStatus(options, io = defaultIo()) {
   return code;
 }
 async function runAccess(options, io = defaultIo()) {
-  const file2 = join31(options.dataDir, "config.json");
+  const file2 = join32(options.dataDir, "config.json");
   let raw = {};
   if (existsSync16(file2)) {
     try {
@@ -37951,7 +38134,7 @@ async function runAccess(options, io = defaultIo()) {
   const members = list(Reflect.get(current, "members"));
   const overridden = process.env.OMB_SIGNIN_EMAILS !== void 0 || process.env.OMB_SIGNIN_MEMBER_EMAILS !== void 0;
   const write = (next) => {
-    mkdirSync13(options.dataDir, { recursive: true, mode: 448 });
+    mkdirSync14(options.dataDir, { recursive: true, mode: 448 });
     writeFileAtomic(file2, `${JSON.stringify({ ...raw, signIn: next }, null, 2)}
 `, { mode: 384 });
   };
@@ -38085,16 +38268,16 @@ async function runBrowser(options, io = defaultIo()) {
   return 0;
 }
 function serverEntry(here = HERE2) {
-  const bundled = join31(here, "index.js");
+  const bundled = join32(here, "index.js");
   const root = resolve11(here, "..");
   if (existsSync16(bundled)) {
-    const staticDir2 = [join31(root, "dist"), join31(here, "..", "ui")].find((d) => existsSync16(join31(d, "index.html"))) ?? null;
-    const skillsDir = existsSync16(join31(root, "skills")) ? join31(root, "skills") : null;
+    const staticDir2 = [join32(root, "dist"), join32(here, "..", "ui")].find((d) => existsSync16(join32(d, "index.html"))) ?? null;
+    const skillsDir = existsSync16(join32(root, "skills")) ? join32(root, "skills") : null;
     return { command: process.execPath, args: [bundled], staticDir: staticDir2, skillsDir };
   }
-  const source = join31(here, "index.ts");
-  const staticDir = existsSync16(join31(root, "dist", "index.html")) ? join31(root, "dist") : null;
-  return { command: process.execPath, args: ["--experimental-strip-types", source], staticDir, skillsDir: existsSync16(join31(root, "skills")) ? join31(root, "skills") : null };
+  const source = join32(here, "index.ts");
+  const staticDir = existsSync16(join32(root, "dist", "index.html")) ? join32(root, "dist") : null;
+  return { command: process.execPath, args: ["--experimental-strip-types", source], staticDir, skillsDir: existsSync16(join32(root, "skills")) ? join32(root, "skills") : null };
 }
 async function planTunnel(options, log) {
   let access2 = null;
@@ -38194,9 +38377,9 @@ async function runServe(options, log = console.log) {
   let child;
   try {
     if (options.guided) {
-      const logsDir = join31(options.dataDir, "logs");
-      mkdirSync13(logsDir, { recursive: true, mode: 448 });
-      logPath = join31(logsDir, `server-${Date.now()}-${process.pid}.log`);
+      const logsDir = join32(options.dataDir, "logs");
+      mkdirSync14(logsDir, { recursive: true, mode: 448 });
+      logPath = join32(logsDir, `server-${Date.now()}-${process.pid}.log`);
       logFd = openSync3(logPath, "wx", 384);
       log("\nStarting your workspace\u2026");
     }
@@ -38388,7 +38571,7 @@ async function runOnboardingCommand(options, io = defaultIo(), startServer = run
     }
     if (options.command === "setup") {
       io.log("\nAll set. Start with: openmausbot (or npx openmausbot without a global install).");
-      if (options.dataDir !== join31(homedir21(), ".openmausbot") || options.port !== 8799) {
+      if (options.dataDir !== join32(homedir23(), ".openmausbot") || options.port !== 8799) {
         io.log(`Use the same --data-dir (${options.dataDir}) and --port (${options.port}) options when starting.`);
       }
       return 0;
@@ -38426,6 +38609,18 @@ ${USAGE}`);
       return runLogin(options);
     case "access":
       return runAccess(options);
+    case "service":
+      return runServiceCommand({
+        action: options.serviceAction ?? "install",
+        dataDir: options.dataDir,
+        port: options.port,
+        domain: options.domain,
+        tunnel: options.tunnel,
+        tailscale: options.tailscale,
+        label: options.label,
+        script: process.argv[1] ?? "",
+        node: process.execPath
+      }, { log: (line) => console.log(line), error: (line) => console.error(line) });
     case "logout":
       return runLogout(options);
     case "browser":