sparkecoder 0.1.117 → 0.1.119

package/dist/cli.js

@@ -725,12 +725,6 @@ var init_types = __esm({
       skillsDirectory: z.string().optional(),
       maxContextChars: z.number().optional().default(2e5),
       task: TaskConfigSchema.optional(),
-      // Anthropic computer use tool — opt-in. When true, the `computer` tool is
-      // included in the toolset for Anthropic models. Default false.
-      computerUseEnabled: z.boolean().optional(),
-      // Display dimensions for the computer use tool (defaults: 1280x800).
-      computerUseDisplayWidth: z.number().int().positive().optional(),
-      computerUseDisplayHeight: z.number().int().positive().optional(),
       // 'orchestrator' = supervisor session; 'worker' = task spawned by an orchestrator.
       role: z.enum(["orchestrator", "worker", "chat"]).optional(),
       // Optional persona / extra system-prompt text appended to the orchestrator's
@@ -1166,7 +1160,7 @@ function loadConfig(configPath, workingDirectory) {
     ...config,
     server: {
       port: config.server.port,
-      host: config.server.host ?? "127.0.0.1",
+      host: config.server.host ?? "0.0.0.0",
       publicUrl: config.server.publicUrl
     },
     resolvedWorkingDirectory,
@@ -1333,7 +1327,7 @@ function createDefaultConfig() {
     },
     server: {
       port: 3141,
-      host: "127.0.0.1"
+      host: "0.0.0.0"
     },
     databasePath: "./sparkecoder.db"
   };
@@ -5386,7 +5380,7 @@ function isPathExcluded(relativePath, exclude) {
 }
 async function walkDirectory(dir, include, exclude, baseDir) {
   const { readdirSync: readdirSync4 } = await import("fs");
-  const { join: join18, relative: relative10 } = await import("path");
+  const { join: join17, relative: relative10 } = await import("path");
   const files = [];
   function walk(currentDir) {
     let entries;
@@ -5396,7 +5390,7 @@ async function walkDirectory(dir, include, exclude, baseDir) {
       return;
     }
     for (const entry2 of entries) {
-      const fullPath = join18(currentDir, entry2.name);
+      const fullPath = join17(currentDir, entry2.name);
       const relativePath = relative10(baseDir, fullPath);
       if (isPathExcluded(relativePath, exclude)) {
         continue;
@@ -7107,593 +7101,6 @@ var init_upload_file = __esm({
   }
 });
 
-// src/tools/computer-use.ts
-var computer_use_exports = {};
-__export(computer_use_exports, {
-  createComputerUseTool: () => createComputerUseTool,
-  detectScreenSize: () => detectScreenSize,
-  hasAccessibilityPermissions: () => hasAccessibilityPermissions,
-  hasScreenRecordingPermissions: () => hasScreenRecordingPermissions,
-  isCliclickInstalled: () => isCliclickInstalled,
-  isMacOs: () => isMacOs,
-  openSystemSettings: () => openSystemSettings,
-  requestAccessibilityPrompt: () => requestAccessibilityPrompt,
-  requestScreenRecordingPrompt: () => requestScreenRecordingPrompt
-});
-import { anthropic } from "@ai-sdk/anthropic";
-import { exec as exec5 } from "child_process";
-import { promisify as promisify5 } from "util";
-import { mkdirSync as mkdirSync5, existsSync as existsSync15, readFileSync as readFileSync7, unlinkSync as unlinkSync2 } from "fs";
-import { join as join8 } from "path";
-import { tmpdir } from "os";
-import { nanoid as nanoid4 } from "nanoid";
-function isMacOs() {
-  return process.platform === "darwin";
-}
-async function isCliclickInstalled() {
-  try {
-    await execAsync5("command -v cliclick", { timeout: 2e3 });
-    return true;
-  } catch {
-    return false;
-  }
-}
-async function runJxa(script) {
-  try {
-    const escaped = script.replace(/'/g, `'\\''`);
-    const { stdout } = await execAsync5(`osascript -l JavaScript -e '${escaped}'`, {
-      timeout: 5e3
-    });
-    return JSON.parse(stdout.trim());
-  } catch {
-    return null;
-  }
-}
-async function hasAccessibilityPermissions() {
-  try {
-    const { stderr } = await execAsync5("cliclick p:.", { timeout: 3e3 });
-    if (/accessibility privileges not enabled/i.test(stderr)) {
-      return { ok: false, error: stderr.trim().split("\n")[0] };
-    }
-    return { ok: true };
-  } catch (err) {
-    return { ok: false, error: err?.message || String(err) };
-  }
-}
-async function hasScreenRecordingPermissions() {
-  const result = await runJxa(
-    `ObjC.import("Cocoa");
-     ObjC.import("CoreGraphics");
-     ObjC.bindFunction("CGPreflightScreenCaptureAccess", ["bool", []]);
-     JSON.stringify({ hasAccess: !!$.CGPreflightScreenCaptureAccess() });`
-  );
-  return result?.hasAccess ?? false;
-}
-async function requestAccessibilityPrompt() {
-  const result = await runJxa(
-    `ObjC.import("ApplicationServices");
-     var key = $.kAXTrustedCheckOptionPrompt;
-     var dict = $.NSDictionary.dictionaryWithObjectForKey($.kCFBooleanTrue, key);
-     var trusted = $.AXIsProcessTrustedWithOptions(dict);
-     JSON.stringify({ trusted: !!trusted });`
-  );
-  return result?.trusted ?? false;
-}
-async function requestScreenRecordingPrompt() {
-  const result = await runJxa(
-    `ObjC.import("Cocoa");
-     ObjC.import("CoreGraphics");
-     ObjC.bindFunction("CGRequestScreenCaptureAccess", ["bool", []]);
-     JSON.stringify({ granted: !!$.CGRequestScreenCaptureAccess() });`
-  );
-  return result?.granted ?? false;
-}
-async function openSystemSettings(pane) {
-  const url = pane === "accessibility" ? "x-apple.systempreferences:com.apple.preference.security?Privacy_Accessibility" : "x-apple.systempreferences:com.apple.preference.security?Privacy_ScreenCapture";
-  try {
-    await execAsync5(`open '${url}'`, { timeout: 3e3 });
-  } catch {
-  }
-}
-async function detectScreenSize() {
-  try {
-    const { stdout } = await execAsync5(
-      `osascript -e 'tell application "Finder" to get bounds of window of desktop'`,
-      { timeout: 3e3 }
-    );
-    const parts = stdout.trim().split(",").map((s) => parseInt(s.trim(), 10));
-    if (parts.length >= 4 && parts.every((n) => Number.isFinite(n))) {
-      const [x1, y1, x2, y2] = parts;
-      return { width: x2 - x1, height: y2 - y1 };
-    }
-  } catch {
-  }
-  return null;
-}
-async function runCliclick(args) {
-  const quoted = args.map((a) => `'${a.replace(/'/g, `'\\''`)}'`).join(" ");
-  const { stdout, stderr } = await execAsync5(`cliclick ${quoted}`, {
-    timeout: 15e3,
-    maxBuffer: 1024 * 1024
-  });
-  if (/accessibility privileges not enabled/i.test(stderr)) {
-    throw new Error(
-      "Accessibility permissions not granted to cliclick. Open System Settings \u2192 Privacy & Security \u2192 Accessibility, add cliclick (or the agent runtime), and toggle it on."
-    );
-  }
-  if (stderr && !stdout) throw new Error(stderr.trim());
-  return (stdout || "").trim();
-}
-async function runScreencapture(path) {
-  await execAsync5(`screencapture -x -t png '${path.replace(/'/g, `'\\''`)}'`, {
-    timeout: 5e3
-  });
-}
-async function resizeScreenshotToPoints(path, targetWidth, targetHeight) {
-  const sharpModule = await import("sharp");
-  const sharp2 = sharpModule.default || sharpModule;
-  const meta = await sharp2(path).metadata();
-  if (meta.width === targetWidth && meta.height === targetHeight) {
-    return readFileSync7(path);
-  }
-  return await sharp2(path).resize(targetWidth, targetHeight, { fit: "fill" }).png().toBuffer();
-}
-async function runScroll(dx, dy) {
-  const wheelY = -Math.round(dy);
-  const wheelX = -Math.round(dx);
-  const script = `ObjC.import('CoreGraphics');var ev = $.CGEventCreateScrollWheelEvent(null, 0, 2, ${wheelY}, ${wheelX});$.CGEventPost(0, ev);`;
-  await execAsync5(
-    `osascript -l JavaScript -e '${script.replace(/'/g, `'\\''`)}'`,
-    { timeout: 5e3 }
-  );
-}
-function translateKeyForCliclick(key2) {
-  if (!key2) return [];
-  const parts = key2.split("+").map((p) => p.trim()).filter(Boolean);
-  if (parts.length === 0) return [];
-  const modMap = {
-    ctrl: "ctrl",
-    control: "ctrl",
-    alt: "alt",
-    option: "alt",
-    shift: "shift",
-    cmd: "cmd",
-    super: "cmd",
-    meta: "cmd",
-    win: "cmd",
-    fn: "fn"
-  };
-  const keyMap = {
-    return: "enter",
-    enter: "enter",
-    esc: "esc",
-    escape: "esc",
-    backspace: "delete",
-    back_space: "delete",
-    delete: "fwd-delete",
-    fwd_delete: "fwd-delete",
-    forward_delete: "fwd-delete",
-    tab: "tab",
-    space: "space",
-    up: "arrow-up",
-    arrow_up: "arrow-up",
-    down: "arrow-down",
-    arrow_down: "arrow-down",
-    left: "arrow-left",
-    arrow_left: "arrow-left",
-    right: "arrow-right",
-    arrow_right: "arrow-right",
-    page_up: "page-up",
-    pageup: "page-up",
-    page_down: "page-down",
-    pagedown: "page-down",
-    home: "home",
-    end: "end",
-    f1: "f1",
-    f2: "f2",
-    f3: "f3",
-    f4: "f4",
-    f5: "f5",
-    f6: "f6",
-    f7: "f7",
-    f8: "f8",
-    f9: "f9",
-    f10: "f10",
-    f11: "f11",
-    f12: "f12"
-  };
-  const modifiers = [];
-  let mainKey = null;
-  for (let i = 0; i < parts.length; i++) {
-    const lower = parts[i].toLowerCase().replace(/-/g, "_");
-    if (i < parts.length - 1 && modMap[lower]) {
-      modifiers.push(modMap[lower]);
-    } else {
-      mainKey = keyMap[lower] || lower;
-    }
-  }
-  const args = [];
-  if (modifiers.length > 0) args.push(`kd:${modifiers.join(",")}`);
-  if (mainKey) {
-    const isNamedKey = Object.values(keyMap).includes(mainKey) || /^f([1-9]|1[0-9]|20)$/.test(mainKey) || /^num-/.test(mainKey);
-    if (isNamedKey) {
-      args.push(`kp:${mainKey}`);
-    } else {
-      args.push(`t:${mainKey}`);
-    }
-  }
-  if (modifiers.length > 0) args.push(`ku:${modifiers.join(",")}`);
-  return args;
-}
-function modifierStringToCliclick(text) {
-  return text.split("+").map((p) => p.trim().toLowerCase()).map((p) => {
-    if (p === "ctrl" || p === "control") return "ctrl";
-    if (p === "alt" || p === "option") return "alt";
-    if (p === "shift") return "shift";
-    if (p === "super" || p === "meta" || p === "cmd") return "cmd";
-    return "";
-  }).filter(Boolean);
-}
-function createComputerUseTool(options) {
-  const displayWidth = options.displayWidth ?? DEFAULT_WIDTH;
-  const displayHeight = options.displayHeight ?? DEFAULT_HEIGHT;
-  return anthropic.tools.computer_20251124({
-    displayWidthPx: displayWidth,
-    displayHeightPx: displayHeight,
-    enableZoom: true,
-    execute: async (input) => {
-      try {
-        switch (input.action) {
-          case "screenshot": {
-            const path = join8(tmpdir(), `cu-${nanoid4(8)}.png`);
-            await runScreencapture(path);
-            const resized = await resizeScreenshotToPoints(path, displayWidth, displayHeight);
-            try {
-              unlinkSync2(path);
-            } catch {
-            }
-            return { type: "image", data: resized.toString("base64") };
-          }
-          case "left_click": {
-            const [x, y] = input.coordinate ?? [0, 0];
-            if (input.text) {
-              const mods = modifierStringToCliclick(input.text);
-              if (mods.length > 0) {
-                await runCliclick([`kd:${mods.join(",")}`, `c:${x},${y}`, `ku:${mods.join(",")}`]);
-              } else {
-                await runCliclick([`c:${x},${y}`]);
-              }
-            } else {
-              await runCliclick([`c:${x},${y}`]);
-            }
-            return `clicked at (${x}, ${y})${input.text ? ` with ${input.text}` : ""}`;
-          }
-          case "right_click": {
-            const [x, y] = input.coordinate ?? [0, 0];
-            await runCliclick([`rc:${x},${y}`]);
-            return `right-clicked at (${x}, ${y})`;
-          }
-          case "middle_click": {
-            const [x, y] = input.coordinate ?? [0, 0];
-            const script = `ObjC.import('CoreGraphics');var loc = $.CGPointMake(${x}, ${y});var down = $.CGEventCreateMouseEvent(null, 25, loc, 2);var up = $.CGEventCreateMouseEvent(null, 26, loc, 2);$.CGEventPost(0, down); $.CGEventPost(0, up);`;
-            await execAsync5(
-              `osascript -l JavaScript -e '${script.replace(/'/g, `'\\''`)}'`,
-              { timeout: 3e3 }
-            );
-            return `middle-clicked at (${x}, ${y})`;
-          }
-          case "double_click": {
-            const [x, y] = input.coordinate ?? [0, 0];
-            await runCliclick([`dc:${x},${y}`]);
-            return `double-clicked at (${x}, ${y})`;
-          }
-          case "triple_click": {
-            const [x, y] = input.coordinate ?? [0, 0];
-            await runCliclick([`tc:${x},${y}`]);
-            return `triple-clicked at (${x}, ${y})`;
-          }
-          case "mouse_move": {
-            const [x, y] = input.coordinate ?? [0, 0];
-            await runCliclick([`m:${x},${y}`]);
-            return `moved cursor to (${x}, ${y})`;
-          }
-          case "left_mouse_down": {
-            const [x, y] = input.coordinate ?? [0, 0];
-            await runCliclick([`dd:${x},${y}`]);
-            return `left mouse button pressed at (${x}, ${y})`;
-          }
-          case "left_mouse_up": {
-            const [x, y] = input.coordinate ?? [0, 0];
-            await runCliclick([`du:${x},${y}`]);
-            return `left mouse button released at (${x}, ${y})`;
-          }
-          case "left_click_drag": {
-            const [sx, sy] = input.start_coordinate ?? [0, 0];
-            const [ex, ey] = input.coordinate ?? [0, 0];
-            await runCliclick([`dd:${sx},${sy}`, `m:${ex},${ey}`, `du:${ex},${ey}`]);
-            return `dragged from (${sx}, ${sy}) to (${ex}, ${ey})`;
-          }
-          case "type": {
-            const text = input.text ?? "";
-            await runCliclick([`t:${text}`]);
-            return `typed ${text.length} character(s)`;
-          }
-          case "key": {
-            const args = translateKeyForCliclick(input.text ?? "");
-            if (args.length === 0) return "no key specified";
-            await runCliclick(args);
-            return `pressed ${input.text}`;
-          }
-          case "hold_key": {
-            const text = (input.text ?? "").toLowerCase();
-            const duration = input.duration ?? 1;
-            const modMap = {
-              ctrl: "ctrl",
-              control: "ctrl",
-              alt: "alt",
-              option: "alt",
-              shift: "shift",
-              cmd: "cmd",
-              super: "cmd",
-              meta: "cmd",
-              fn: "fn"
-            };
-            const cliName = modMap[text] || text;
-            await runCliclick([`kd:${cliName}`]);
-            await new Promise((r) => setTimeout(r, duration * 1e3));
-            await runCliclick([`ku:${cliName}`]);
-            return `held ${text} for ${duration}s`;
-          }
-          case "scroll": {
-            const direction = input.scroll_direction ?? "down";
-            const amount = input.scroll_amount ?? 3;
-            const px = amount * 100;
-            const dx = direction === "left" ? -px : direction === "right" ? px : 0;
-            const dy = direction === "up" ? -px : direction === "down" ? px : 0;
-            if (input.coordinate) {
-              const [x, y] = input.coordinate;
-              await runCliclick([`m:${x},${y}`]);
-            }
-            const mods = input.text ? modifierStringToCliclick(input.text) : [];
-            if (mods.length > 0) {
-              await runCliclick([`kd:${mods.join(",")}`]);
-            }
-            await runScroll(dx, dy);
-            if (mods.length > 0) {
-              await runCliclick([`ku:${mods.join(",")}`]);
-            }
-            return `scrolled ${direction} by ${amount}`;
-          }
-          case "wait": {
-            const duration = input.duration ?? 1;
-            await new Promise((r) => setTimeout(r, duration * 1e3));
-            return `waited ${duration}s`;
-          }
-          case "cursor_position": {
-            const out = await runCliclick(["p:."]);
-            return `cursor at ${out}`;
-          }
-          case "zoom": {
-            const region = input.region ?? [0, 0, displayWidth, displayHeight];
-            const [x1, y1, x2, y2] = region;
-            const tmpPath = join8(tmpdir(), `cu-zoom-${nanoid4(8)}.png`);
-            await runScreencapture(tmpPath);
-            const sharpModule = await import("sharp");
-            const sharp2 = sharpModule.default || sharpModule;
-            const meta = await sharp2(tmpPath).metadata();
-            const scaleX = (meta.width || displayWidth) / displayWidth;
-            const scaleY = (meta.height || displayHeight) / displayHeight;
-            const px = {
-              left: Math.max(0, Math.round(x1 * scaleX)),
-              top: Math.max(0, Math.round(y1 * scaleY)),
-              width: Math.max(1, Math.round((x2 - x1) * scaleX)),
-              height: Math.max(1, Math.round((y2 - y1) * scaleY))
-            };
-            const buf = await sharp2(tmpPath).extract(px).png().toBuffer();
-            try {
-              unlinkSync2(tmpPath);
-            } catch {
-            }
-            return { type: "image", data: buf.toString("base64") };
-          }
-          default: {
-            const exhaustive = input.action;
-            return `unsupported action: ${String(exhaustive)}`;
-          }
-        }
-      } catch (err) {
-        const msg = err?.message || String(err);
-        let hint = "";
-        if (/accessibility|not authorized|tcc|operation not permitted/i.test(msg)) {
-          hint = " (Hint: call enable_computer_use to (re-)check permissions and open System Settings)";
-        } else if (/command not found/i.test(msg)) {
-          hint = " (Hint: install cliclick with `brew install cliclick`)";
-        }
-        return `Error: ${msg}${hint}`;
-      }
-    },
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
-    toModelOutput({ output }) {
-      if (typeof output === "string") {
-        return { type: "content", value: [{ type: "text", text: output }] };
-      }
-      return {
-        type: "content",
-        value: [{ type: "media", data: output.data, mediaType: "image/png" }]
-      };
-    }
-  });
-}
-var execAsync5, DEFAULT_WIDTH, DEFAULT_HEIGHT;
-var init_computer_use = __esm({
-  "src/tools/computer-use.ts"() {
-    "use strict";
-    execAsync5 = promisify5(exec5);
-    DEFAULT_WIDTH = 1280;
-    DEFAULT_HEIGHT = 800;
-  }
-});
-
-// src/tools/enable-computer-use.ts
-import { tool as tool13 } from "ai";
-import { z as z14 } from "zod";
-function createEnableComputerUseTool(options) {
-  return tool13({
-    description: "Enable Anthropic's computer use beta tool for this session. macOS only. Drives the actual desktop (mouse, keyboard, screenshots) at pixel coordinates. Requires `cliclick` (brew install cliclick), Accessibility permissions, and Screen Recording permissions. When called, this tool will automatically request any missing permissions and open System Settings to the right pane. Only works on Anthropic Claude models. After this tool succeeds, you MUST stop the current turn and ask the user to send another message \u2014 the `computer` tool only becomes available on the NEXT message because the toolset is fixed for the current turn.",
-    inputSchema,
-    execute: async ({ display_width, display_height, request_permissions }) => {
-      try {
-        if (!isMacOs()) {
-          return {
-            success: false,
-            error: "Computer use is currently only supported on macOS.",
-            platform: process.platform
-          };
-        }
-        if (!await isCliclickInstalled()) {
-          return {
-            success: false,
-            error: "`cliclick` is not installed. It is required for mouse/keyboard control on macOS.",
-            installCommand: "brew install cliclick",
-            fixSteps: [
-              "In a terminal on this Mac, run: brew install cliclick",
-              "(If Homebrew is not installed, install it first from https://brew.sh)",
-              "Then call enable_computer_use again"
-            ]
-          };
-        }
-        const acc = await hasAccessibilityPermissions();
-        const screen = await hasScreenRecordingPermissions();
-        const missing = [];
-        if (!acc.ok) {
-          let prompted = false;
-          let panelOpened = false;
-          if (request_permissions) {
-            prompted = await requestAccessibilityPrompt().then(() => true).catch(() => false);
-            await openSystemSettings("accessibility").then(() => {
-              panelOpened = true;
-            }).catch(() => void 0);
-          }
-          missing.push({
-            name: "Accessibility",
-            reason: "cliclick failed: " + (acc.error?.split("\n")[0] || "no permission"),
-            pane: "accessibility",
-            settingsUrl: ACCESSIBILITY_URL,
-            fixSteps: [
-              "In the System Settings \u2192 Privacy & Security \u2192 Accessibility pane that opened",
-              "Click the + button",
-              "Add the application running the agent (Terminal, iTerm, your IDE, or `node`)",
-              "Toggle the switch ON",
-              "Restart the agent process so the new permission takes effect",
-              "Then call enable_computer_use again"
-            ],
-            prompted,
-            panelOpened
-          });
-        }
-        if (!screen) {
-          let prompted = false;
-          let panelOpened = false;
-          if (request_permissions) {
-            prompted = await requestScreenRecordingPrompt().then(() => true).catch(() => false);
-            await openSystemSettings("screen-recording").then(() => {
-              panelOpened = true;
-            }).catch(() => void 0);
-          }
-          missing.push({
-            name: "Screen Recording",
-            reason: "CGPreflightScreenCaptureAccess returned false",
-            pane: "screen-recording",
-            settingsUrl: SCREEN_RECORDING_URL,
-            fixSteps: [
-              "In the System Settings \u2192 Privacy & Security \u2192 Screen Recording pane that opened",
-              "Click the + button",
-              "Add the application running the agent (Terminal, iTerm, your IDE, or `node`)",
-              "Toggle the switch ON",
-              "Restart the agent process so the new permission takes effect",
-              "Then call enable_computer_use again"
-            ],
-            prompted,
-            panelOpened
-          });
-        }
-        if (missing.length > 0) {
-          return {
-            success: false,
-            error: `Missing permission${missing.length > 1 ? "s" : ""}: ` + missing.map((m) => m.name).join(" and ") + ".",
-            missingPermissions: missing,
-            note: request_permissions ? "System permission prompts have been triggered (best-effort) and System Settings has been opened to the relevant pane(s). After granting and restarting the agent, call enable_computer_use again." : "Re-run with request_permissions: true to auto-open System Settings."
-          };
-        }
-        let width = display_width;
-        let height = display_height;
-        let detected = null;
-        if (width === void 0 || height === void 0) {
-          detected = await detectScreenSize();
-          width = width ?? detected?.width ?? 1280;
-          height = height ?? detected?.height ?? 800;
-        }
-        const session = await sessionQueries.getById(options.sessionId);
-        if (!session) {
-          return { success: false, error: "Session not found" };
-        }
-        const config = session.config || {};
-        if (config.computerUseEnabled === true && config.computerUseDisplayWidth === width && config.computerUseDisplayHeight === height) {
-          return {
-            success: true,
-            alreadyEnabled: true,
-            message: "Computer use was already enabled for this session.",
-            displayWidth: width,
-            displayHeight: height
-          };
-        }
-        const updated = {
-          ...config,
-          computerUseEnabled: true,
-          computerUseDisplayWidth: width,
-          computerUseDisplayHeight: height
-        };
-        await sessionQueries.update(options.sessionId, { config: updated });
-        return {
-          success: true,
-          enabled: true,
-          platform: "darwin",
-          displayWidth: width,
-          displayHeight: height,
-          detectedScreenSize: detected || void 0,
-          permissions: {
-            accessibility: "granted",
-            screenRecording: "granted"
-          },
-          message: `Computer use is now enabled for this session. IMPORTANT: The \`computer\` tool is NOT yet available in this turn. Stop here, send a brief message to the user telling them computer use is enabled (display: ${width}x${height}), and ask them to send their next message to begin using it.`
-        };
-      } catch (err) {
-        return {
-          success: false,
-          error: err?.message || String(err)
-        };
-      }
-    }
-  });
-}
-var inputSchema, ACCESSIBILITY_URL, SCREEN_RECORDING_URL;
-var init_enable_computer_use = __esm({
-  "src/tools/enable-computer-use.ts"() {
-    "use strict";
-    init_db();
-    init_computer_use();
-    inputSchema = z14.object({
-      display_width: z14.number().int().positive().optional().describe("Display width in pixels (defaults to detected primary display, fallback 1280)"),
-      display_height: z14.number().int().positive().optional().describe("Display height in pixels (defaults to detected primary display, fallback 800)"),
-      request_permissions: z14.boolean().optional().default(true).describe(
-        "When true (default), proactively trigger macOS permission prompts and open System Settings panes for any missing permissions."
-      )
-    });
-    ACCESSIBILITY_URL = "x-apple.systempreferences:com.apple.preference.security?Privacy_Accessibility";
-    SCREEN_RECORDING_URL = "x-apple.systempreferences:com.apple.preference.security?Privacy_ScreenCapture";
-  }
-});
-
 // src/tools/index.ts
 async function createTools(options) {
   const tools = {
@@ -7738,20 +7145,6 @@ async function createTools(options) {
       sessionId: options.sessionId
     });
   }
-  if (process.platform === "darwin") {
-    if (options.enableComputerUse) {
-      tools.computer = createComputerUseTool({
-        workingDirectory: options.workingDirectory,
-        sessionId: options.sessionId,
-        displayWidth: options.computerUseDisplayWidth,
-        displayHeight: options.computerUseDisplayHeight
-      });
-    } else {
-      tools.enable_computer_use = createEnableComputerUseTool({
-        sessionId: options.sessionId
-      });
-    }
-  }
   if (options.enableSemanticSearch !== false) {
     try {
       if (isVectorGatewayConfigured()) {
@@ -7786,8 +7179,6 @@ var init_tools = __esm({
     init_code_graph();
     init_task();
     init_upload_file();
-    init_computer_use();
-    init_enable_computer_use();
     init_semantic();
     init_remote();
     init_bash();
@@ -7801,8 +7192,6 @@ var init_tools = __esm({
     init_code_graph();
     init_task();
     init_upload_file();
-    init_computer_use();
-    init_enable_computer_use();
   }
 });
 
@@ -8278,8 +7667,7 @@ ${JSON.stringify(outputSchema, null, 2)}
 `;
 }
 function buildOrchestratorPromptAddendum() {
-  const platform3 = process.platform === "darwin" ? "darwin" : "other";
-  const computerUseAvailable = platform3 === "darwin";
+  const desktopAvailable = process.platform === "darwin";
   return `
 ## Orchestrator Mode
 
@@ -8378,14 +7766,14 @@ When NOT to split (keep as one worker):
 When spawning a worker, push it toward the *cheapest tool that gets the job done*:
 
 1. **Bash / file tools** for anything with a CLI (git, npm, brew, builds, tests, file editing, HTTP via curl, scripting).
-2. **agent-browser** (\`load_skill browser\`) for *anything* in a web browser \u2014 refs from \`snapshot -i\` are deterministic, ~100\xD7 cheaper in tokens than pixel coordinates, work cross-platform, and don't need any host permissions.${computerUseAvailable ? `
-3. **Computer use** is the last resort \u2014 only when the task genuinely requires a native macOS GUI app with no CLI / API equivalent (System Settings, Calculator, Finder operations that don't have CLI flags, complex cross-app drag/drop, demos where the user wants to *see* the screen).
+2. **agent-browser** (\`load_skill browser\`) for *anything* in a web browser \u2014 refs from \`snapshot -i\` are deterministic, ~100\xD7 cheaper in tokens than pixel coordinates, work cross-platform, and don't need any host permissions.${desktopAvailable ? `
+3. **Desktop automation** (\`load_skill desktop-automation\`) is the last resort \u2014 only when the task genuinely requires a native macOS GUI app with no CLI / API equivalent (System Settings, Calculator, Finder operations that don't have CLI flags, complex cross-app drag/drop, demos where the user wants to *see* the screen). It's all shell \u2014 \`cliclick\`, \`screencapture\`, and \`osascript\` \u2014 invoked from \`bash\`. No special tool registration; no vendor lock-in.
 
-A common anti-pattern: a worker reaches for computer use because the user phrased the request visually ("open the website and click the button"). Almost always wrong \u2014 that's a job for the browser skill, not the desktop. Coach the worker in its goal text: *"Use the browser skill (\`load_skill browser\` + \`agent-browser\` with refs from \`snapshot -i\`) to open the site and click the button. Don't use computer use for browser work."*
+A common anti-pattern: a worker reaches for desktop automation because the user phrased the request visually ("open the website and click the button"). Almost always wrong \u2014 that's a job for the browser skill, not the desktop. Coach the worker in its goal text: *"Use the browser skill (\`load_skill browser\` + \`agent-browser\` with refs from \`snapshot -i\`) to open the site and click the button. Don't use desktop automation for browser work."*
 
-### Serialize desktop / computer-use tasks
+### Serialize desktop-automation tasks
 
-There is exactly **one** desktop, mouse, and keyboard on the host. If two or more workers both need the **\`computer\` tool** (clicking, typing, taking desktop screenshots, opening apps, switching windows), they will **fight over the same screen** \u2014 windows will steal focus from each other, screenshots will catch the wrong app, mouse clicks will land on the wrong target.
+There is exactly **one** desktop, mouse, and keyboard on the host. If two or more workers both drive the desktop (clicking with \`cliclick\`, taking screenshots with \`screencapture\`, opening apps, switching windows), they will **fight over the same screen** \u2014 windows will steal focus from each other, screenshots will catch the wrong app, mouse clicks will land on the wrong target.
 
 **Rule**: when spawning workers, look at each one's goal:
 
@@ -8406,7 +7794,7 @@ Example: *"Take a screenshot of Calculator AND run the test suite AND open Syste
 
 Headless workers never interfere with desktop workers (they don't touch the screen), so they always run in parallel.
 
-When you spawn a **desktop worker**, include a one-liner in the goal asking it to **record the session by default** (\`screencapture -v -V <seconds> -C\` on macOS) and return the recording path in its result, *unless* the task is long-running / boring / contains sensitive content. The recording lets you (and the user) replay what actually happened on screen. When the worker reports back, mention the recording path in your reply via the original channel.` : ""}
+When you spawn a **desktop worker**, tell it to bracket the work with \`sparkecoder record start\` / \`sparkecoder record stop\` (per the \`recording\` skill) so the user can replay what happened on screen, unless the task is long-running / boring / contains sensitive content. When the worker reports back, mention the recording path in your reply via the original channel.` : ""}
 
 Default bias: **when in doubt, decompose**. Two workers running in parallel and reporting independently is almost always better UX than one worker doing things sequentially.
 
@@ -8437,7 +7825,7 @@ You delegate; the worker executes. Stay at the **what** level, not the **how**.
 **DO** put in the goal:
 
 - The end objective ("open the macOS Weather app and capture the forecast for Anchorage as a screen recording").
-- Which skills the worker should load up-front (\`load_skill recording\`, \`load_skill computer-use\`).
+- Which skills the worker should load up-front (\`load_skill recording\`, \`load_skill desktop-automation\`).
 - Acceptance criteria ("verify the city name is visible in the screenshot before reporting done").
 - Routing back ("post the recording URL to Slack channel C0123 thread 1700.001").
 
@@ -8470,7 +7858,7 @@ Bad goal (don't do this):
 > "Start a screen recording with \`screencapture -v -V 45 -C /tmp/weather.mov &\`, then open Weather with \`open -a Weather\`, then click the search bar with cliclick, type 'Anchorage'..."
 
 Good goal (do this):
-> "Capture a 30\u201360s screen recording of opening the macOS Weather app and viewing the Anchorage, AK forecast. \`load_skill recording\` and \`load_skill computer-use\` first; use the canonical commands from those skills. Verify the Anchorage temperature is visible in a final screenshot before completing. Return the recording path + a one-line summary of the forecast."
+> "Capture a 30\u201360s screen recording of opening the macOS Weather app and viewing the Anchorage, AK forecast. \`load_skill recording\` and \`load_skill desktop-automation\` first; use the canonical commands from those skills. Verify the Anchorage temperature is visible in a final screenshot before completing. Return the recording path + a one-line summary of the forecast."
 `;
 }
 function createSummaryPrompt(conversationHistory) {
@@ -8689,17 +8077,17 @@ __export(conversation_archive_exports, {
   getHistoryDir: () => getHistoryDir,
   listSessionArchives: () => listSessionArchives
 });
-import { existsSync as existsSync16, mkdirSync as mkdirSync6, appendFileSync as appendFileSync2, readdirSync as readdirSync2 } from "fs";
-import { join as join9 } from "path";
+import { existsSync as existsSync15, mkdirSync as mkdirSync5, appendFileSync as appendFileSync2, readdirSync as readdirSync2 } from "fs";
+import { join as join8 } from "path";
 function getHistoryDir() {
-  const dir = join9(ensureAppDataDirectory(), "history");
-  if (!existsSync16(dir)) mkdirSync6(dir, { recursive: true });
+  const dir = join8(ensureAppDataDirectory(), "history");
+  if (!existsSync15(dir)) mkdirSync5(dir, { recursive: true });
   return dir;
 }
 function appendTurn(turn) {
   try {
     const dir = getHistoryDir();
-    const path = join9(dir, `${turn.sessionId}.jsonl`);
+    const path = join8(dir, `${turn.sessionId}.jsonl`);
     const line = JSON.stringify({
       ts: turn.ts ?? (/* @__PURE__ */ new Date()).toISOString(),
       sessionId: turn.sessionId,
@@ -8728,7 +8116,7 @@ function flattenContent(content) {
 }
 function listSessionArchives() {
   const dir = getHistoryDir();
-  if (!existsSync16(dir)) return [];
+  if (!existsSync15(dir)) return [];
   return readdirSync2(dir).filter((f) => f.endsWith(".jsonl"));
 }
 var init_conversation_archive = __esm({
@@ -8800,6 +8188,18 @@ function repairToolPairing(messages) {
   }
   return repaired;
 }
+function ensureEndsWithUserOrTool(messages) {
+  if (!Array.isArray(messages) || messages.length === 0) return messages;
+  const last = messages[messages.length - 1];
+  if (last?.role !== "assistant") return messages;
+  console.warn(
+    "[context] Trailing assistant message detected \u2014 appending synthetic user turn to satisfy prefill restrictions"
+  );
+  return [
+    ...messages,
+    { role: "user", content: [{ type: "text", text: "Please continue." }] }
+  ];
+}
 var TOOL_OUTPUT_TRIM_CHARS, COMPACTABLE_TOOLS, ContextManager;
 var init_context = __esm({
   "src/agent/context.ts"() {
@@ -8857,6 +8257,7 @@ ${summaryContent}`
           ];
         }
         messages = repairToolPairing(messages);
+        messages = ensureEndsWithUserOrTool(messages);
         return messages;
       }
       // ---------------------------------------------------------------------------
@@ -9050,7 +8451,8 @@ ${summaryContent}`
         }
       }
       async addResponseMessages(messages) {
-        await messageQueries.addMany(this.sessionId, messages);
+        const safe = repairToolPairing(messages);
+        await messageQueries.addMany(this.sessionId, safe);
         try {
           const { appendTurn: appendTurn2, flattenContent: flattenContent2 } = await Promise.resolve().then(() => (init_conversation_archive(), conversation_archive_exports));
           const { sessionQueries: sessionQueries2 } = await Promise.resolve().then(() => (init_db(), db_exports));
@@ -9146,6 +8548,44 @@ function getSlackSigningSecret() {
 function getDefaultOrchestratorName() {
   return readSlackConfig()?.defaultOrchestratorName ?? null;
 }
+function getCachedSlackSelfIdentity() {
+  const cfg = readSlackConfig();
+  if (!cfg) return null;
+  if (cachedSelf && cachedSelf.token === cfg.botToken) return cachedSelf.identity;
+  return null;
+}
+async function ensureSlackSelfIdentity() {
+  const cfg = readSlackConfig();
+  if (!cfg) return null;
+  if (cachedSelf && cachedSelf.token === cfg.botToken) return cachedSelf.identity;
+  if (selfInflight) return selfInflight;
+  selfInflight = (async () => {
+    try {
+      const res = await fetch("https://slack.com/api/auth.test", {
+        method: "POST",
+        headers: { Authorization: `Bearer ${cfg.botToken}` }
+      });
+      const data = await res.json().catch(() => ({}));
+      if (!data?.ok) {
+        console.warn(`[slack] auth.test failed: ${data?.error || `HTTP ${res.status}`}`);
+        return null;
+      }
+      const identity = {
+        botUserId: String(data.user_id || ""),
+        botId: String(data.bot_id || ""),
+        teamId: data.team_id ? String(data.team_id) : void 0
+      };
+      cachedSelf = { token: cfg.botToken, identity };
+      return identity;
+    } catch (err) {
+      console.warn("[slack] auth.test error:", err?.message || err);
+      return null;
+    } finally {
+      selfInflight = null;
+    }
+  })();
+  return selfInflight;
+}
 function getSlackAllowlistPolicy() {
   try {
     const cfg = getConfig();
@@ -9171,11 +8611,13 @@ function getSlackDeniedReplyPolicy() {
     return { enabled: true, template: DEFAULT_DENIED_TEMPLATE };
   }
 }
-var DEFAULT_DENIED_TEMPLATE;
+var cachedSelf, selfInflight, DEFAULT_DENIED_TEMPLATE;
 var init_client3 = __esm({
   "src/integrations/slack/client.ts"() {
     "use strict";
     init_config();
+    cachedSelf = null;
+    selfInflight = null;
     DEFAULT_DENIED_TEMPLATE = "Sorry, you don't have permission to use this bot. (Contact the bot owner if you think this is a mistake.)";
   }
 });
@@ -9193,9 +8635,19 @@ function isThreadOwned(channel, threadTs) {
 function stripMention(text) {
   return String(text || "").replace(/<@[^>]+>/g, "").trim();
 }
-function slackEventToInboundResult(event) {
+function isSelfAuthored(event, self) {
+  if (!self) return true;
+  if (self.botId && event.bot_id && event.bot_id === self.botId) return true;
+  if (self.botUserId && event.user && event.user === self.botUserId) return true;
+  return false;
+}
+function slackEventToInboundResult(event, opts = {}) {
   if (!event) return { event: null, dropReason: "empty_text" };
-  if (event.bot_id) return { event: null, dropReason: "bot_message" };
+  const self = opts.self ?? getCachedSlackSelfIdentity();
+  const isBotAuthored = !!event.bot_id || event.type === "message" && event.subtype === "bot_message";
+  if (isBotAuthored && isSelfAuthored(event, self)) {
+    return { event: null, dropReason: "bot_message" };
+  }
   if (event.type === "message" && event.subtype && IGNORED_MESSAGE_SUBTYPES.has(event.subtype)) {
     return { event: null, dropReason: "bot_message" };
   }
@@ -9272,7 +8724,6 @@ var init_slack = __esm({
       }
     };
     IGNORED_MESSAGE_SUBTYPES = /* @__PURE__ */ new Set([
-      "bot_message",
       "message_changed",
       "message_deleted",
       "channel_join",
@@ -9491,7 +8942,7 @@ var init_messenger = __esm({
 });
 
 // src/orchestrator/schedules-store.ts
-import { nanoid as nanoid5 } from "nanoid";
+import { nanoid as nanoid4 } from "nanoid";
 async function readOrch(orchestratorSessionId) {
   const s = await sessionQueries.getById(orchestratorSessionId);
   if (!s) return null;
@@ -9506,7 +8957,7 @@ async function createSchedule(orchestratorSessionId, input) {
   const data = await readOrch(orchestratorSessionId);
   if (!data) throw new Error("orchestrator session not found");
   const row = {
-    id: `sch_${nanoid5(10)}`,
+    id: `sch_${nanoid4(10)}`,
     name: input.name,
     cron: input.cron,
     prompt: input.prompt,
@@ -9543,7 +8994,7 @@ var init_schedules_store = __esm({
 
 // src/orchestrator/webhooks-store.ts
 import { randomBytes } from "crypto";
-import { nanoid as nanoid6 } from "nanoid";
+import { nanoid as nanoid5 } from "nanoid";
 function newToken() {
   return randomBytes(24).toString("base64url");
 }
@@ -9560,7 +9011,7 @@ async function createWebhook(orchestratorSessionId, input) {
   const data = await readOrch2(orchestratorSessionId);
   if (!data) throw new Error("orchestrator session not found");
   const row = {
-    id: `whk_${nanoid6(10)}`,
+    id: `whk_${nanoid5(10)}`,
     name: input.name,
     token: newToken(),
     wake: input.wake ?? "now",
@@ -9616,8 +9067,8 @@ var init_webhooks_store = __esm({
 });
 
 // src/tools/orchestrator-actions.ts
-import { tool as tool14 } from "ai";
-import { z as z15 } from "zod";
+import { tool as tool13 } from "ai";
+import { z as z14 } from "zod";
 async function api2(baseUrl, path, init = {}) {
   const res = await fetch(`${baseUrl}${path}`, {
     method: init.method || "GET",
@@ -9643,7 +9094,7 @@ function previewMessageContent(content) {
   return "";
 }
 function buildAgentTool(opts) {
-  return tool14({
+  return tool13({
     description: "Manage worker agents. Actions: list (browse with optional status filter), get (deep dive: status, todos, pending question, recent messages, final result; required: id), spawn (start a new worker; required: name, goal), message (post a message to a running worker; force=true to soft-interrupt; required: id, text), answer_question (resolve a worker's ask_question_to_user prompt; required: id, questionId, answer), stop (hard-cancel a running worker; required: id).",
     inputSchema: agentInputSchema,
     execute: async (input) => {
@@ -9746,7 +9197,7 @@ function buildAgentTool(opts) {
   });
 }
 function buildMessengerTool() {
-  return tool14({
+  return tool13({
     description: "Send messages on configured external channels. Actions: list_channels (no args; returns which integrations are configured), post (required: channel, to, text). Use this to ping the user on Slack when a worker finishes, when a schedule fires, etc.",
     inputSchema: messengerInputSchema,
     execute: async (input) => {
@@ -9768,7 +9219,7 @@ function buildMessengerTool() {
   });
 }
 function buildScheduleTool(opts) {
-  return tool14({
+  return tool13({
     description: "Recurring prompts. Actions: create (required: name, cron, prompt), list, update (required: id; any of name/cron/prompt/enabled/replyChannel), delete (required: id), pause (required: id), resume (required: id). Cron is standard 5-field syntax.",
     inputSchema: scheduleInputSchema,
     execute: async (input) => {
@@ -9811,7 +9262,7 @@ function buildWebhookUrl(opts, token) {
   return `${base}${webhookPrefix2}/inbox/${token}`;
 }
 function buildWebhookTool(opts) {
-  return tool14({
+  return tool13({
     description: "Custom token-protected inbound URLs. Anyone POSTing JSON to the URL pings the orchestrator. Actions: create (required: name), list, update (required: id; optional: name, wake, template, rotateToken), delete (required: id). Use these to wire up GitHub, IFTTT, n8n, etc.",
     inputSchema: webhookInputSchema,
     execute: async (input) => {
@@ -9860,66 +9311,66 @@ var init_orchestrator_actions = __esm({
     init_schedules_store();
     init_config();
     init_webhooks_store();
-    AGENT_STATUS_ENUM = z15.enum(["running", "needs_attention", "completed", "failed", "idle"]);
-    agentInputSchema = z15.object({
-      action: z15.enum(["list", "get", "spawn", "message", "answer_question", "stop"]).describe("Which agent operation to perform."),
+    AGENT_STATUS_ENUM = z14.enum(["running", "needs_attention", "completed", "failed", "idle"]);
+    agentInputSchema = z14.object({
+      action: z14.enum(["list", "get", "spawn", "message", "answer_question", "stop"]).describe("Which agent operation to perform."),
       // list
       status: AGENT_STATUS_ENUM.optional().describe("list only: filter to one status."),
-      limit: z15.number().int().min(1).max(100).optional().describe("list only: max rows."),
+      limit: z14.number().int().min(1).max(100).optional().describe("list only: max rows."),
       // get / message / answer_question / stop
-      id: z15.string().optional().describe("get | message | answer_question | stop: the agent (session) id."),
-      recentMessages: z15.number().int().min(0).max(50).optional().describe("get only: how many recent messages to include."),
+      id: z14.string().optional().describe("get | message | answer_question | stop: the agent (session) id."),
+      recentMessages: z14.number().int().min(0).max(50).optional().describe("get only: how many recent messages to include."),
       // spawn
-      name: z15.string().optional().describe("spawn only: short human-readable label."),
-      goal: z15.string().optional().describe("spawn only: the worker's self-contained instruction."),
-      outputSchema: z15.record(z15.string(), z15.unknown()).optional().describe(
+      name: z14.string().optional().describe("spawn only: short human-readable label."),
+      goal: z14.string().optional().describe("spawn only: the worker's self-contained instruction."),
+      outputSchema: z14.record(z14.string(), z14.unknown()).optional().describe(
         'spawn only: JSON Schema for the worker result. Defaults to {type:"object", properties:{summary:{type:"string"}}, required:["summary"]}.'
       ),
-      model: z15.string().optional().describe("spawn only: model override."),
-      workingDirectory: z15.string().optional().describe("spawn only: working directory override."),
-      maxIterations: z15.number().int().min(1).max(500).optional().describe("spawn only."),
+      model: z14.string().optional().describe("spawn only: model override."),
+      workingDirectory: z14.string().optional().describe("spawn only: working directory override."),
+      maxIterations: z14.number().int().min(1).max(500).optional().describe("spawn only."),
       // message
-      text: z15.string().optional().describe("message only: the text to deliver to the worker."),
-      force: z15.boolean().optional().describe("message only: soft-interrupt the current step."),
+      text: z14.string().optional().describe("message only: the text to deliver to the worker."),
+      force: z14.boolean().optional().describe("message only: soft-interrupt the current step."),
       // answer_question
-      questionId: z15.string().optional().describe("answer_question only: pending question id (e.g. q_abc123)."),
-      answer: z15.string().optional().describe("answer_question only: your answer.")
+      questionId: z14.string().optional().describe("answer_question only: pending question id (e.g. q_abc123)."),
+      answer: z14.string().optional().describe("answer_question only: your answer.")
     });
-    messengerInputSchema = z15.object({
-      action: z15.enum(["list_channels", "post"]),
+    messengerInputSchema = z14.object({
+      action: z14.enum(["list_channels", "post"]),
       // post
-      channel: z15.string().optional().describe('post only: channel id (e.g. "slack").'),
-      to: z15.string().optional().describe('post only: destination. Slack: channel id (C0123), user id (U0123), or "#channel-name".'),
-      text: z15.string().optional().describe("post only: message body."),
-      threadTs: z15.string().optional().describe("post + slack: reply in this thread."),
-      subject: z15.string().optional().describe("post + email: subject (future).")
+      channel: z14.string().optional().describe('post only: channel id (e.g. "slack").'),
+      to: z14.string().optional().describe('post only: destination. Slack: channel id (C0123), user id (U0123), or "#channel-name".'),
+      text: z14.string().optional().describe("post only: message body."),
+      threadTs: z14.string().optional().describe("post + slack: reply in this thread."),
+      subject: z14.string().optional().describe("post + email: subject (future).")
     });
-    scheduleInputSchema = z15.object({
-      action: z15.enum(["create", "list", "update", "delete", "pause", "resume"]),
+    scheduleInputSchema = z14.object({
+      action: z14.enum(["create", "list", "update", "delete", "pause", "resume"]),
       // create / update
-      name: z15.string().optional().describe("create | update"),
-      cron: z15.string().optional().describe('create | update: 5-field cron (e.g. "0 9 * * 1-5" = weekdays at 9am).'),
-      prompt: z15.string().optional().describe("create | update: the prompt injected when the schedule fires."),
-      replyChannel: z15.string().optional().describe("create | update: default channel id for orchestrator replies."),
+      name: z14.string().optional().describe("create | update"),
+      cron: z14.string().optional().describe('create | update: 5-field cron (e.g. "0 9 * * 1-5" = weekdays at 9am).'),
+      prompt: z14.string().optional().describe("create | update: the prompt injected when the schedule fires."),
+      replyChannel: z14.string().optional().describe("create | update: default channel id for orchestrator replies."),
       // update / delete / pause / resume
-      id: z15.string().optional().describe("update | delete | pause | resume: schedule id."),
-      enabled: z15.boolean().optional().describe("update only.")
+      id: z14.string().optional().describe("update | delete | pause | resume: schedule id."),
+      enabled: z14.boolean().optional().describe("update only.")
     });
-    webhookInputSchema = z15.object({
-      action: z15.enum(["create", "list", "update", "delete"]),
-      name: z15.string().optional().describe("create | update."),
-      wake: z15.enum(["now", "next"]).optional().describe("create | update: now = wake orchestrator immediately; next = add as context."),
-      template: z15.string().optional().describe("create | update: mustache-style template ({{path.to.field}}). Defaults to pretty-printed JSON."),
-      id: z15.string().optional().describe("update | delete: webhook id."),
-      rotateToken: z15.boolean().optional().describe("update only: regenerate the URL token.")
+    webhookInputSchema = z14.object({
+      action: z14.enum(["create", "list", "update", "delete"]),
+      name: z14.string().optional().describe("create | update."),
+      wake: z14.enum(["now", "next"]).optional().describe("create | update: now = wake orchestrator immediately; next = add as context."),
+      template: z14.string().optional().describe("create | update: mustache-style template ({{path.to.field}}). Defaults to pretty-printed JSON."),
+      id: z14.string().optional().describe("update | delete: webhook id."),
+      rotateToken: z14.boolean().optional().describe("update only: regenerate the URL token.")
     });
   }
 });
 
 // src/integrations/mcp/store.ts
-import { nanoid as nanoid7 } from "nanoid";
-import { existsSync as existsSync17, readFileSync as readFileSync8 } from "fs";
-import { resolve as resolve10, join as join10 } from "path";
+import { nanoid as nanoid6 } from "nanoid";
+import { existsSync as existsSync16, readFileSync as readFileSync7 } from "fs";
+import { resolve as resolve10, join as join9 } from "path";
 function readServers() {
   try {
     const cfg = getConfig();
@@ -9931,12 +9382,12 @@ function readServers() {
 function refreshMcpServersFromDisk() {
   const candidates = [
     resolve10(process.cwd(), "sparkecoder.config.json"),
-    join10(ensureAppDataDirectory(), "sparkecoder.config.json")
+    join9(ensureAppDataDirectory(), "sparkecoder.config.json")
   ];
   for (const path of candidates) {
-    if (!existsSync17(path)) continue;
+    if (!existsSync16(path)) continue;
     try {
-      const raw = JSON.parse(readFileSync8(path, "utf-8"));
+      const raw = JSON.parse(readFileSync7(path, "utf-8"));
       const servers2 = Array.isArray(raw?.mcp?.servers) ? raw.mcp.servers : [];
       setMcpServers(servers2);
       return servers2;
@@ -9955,7 +9406,7 @@ function createMcpServer(input) {
   const all = readServers();
   validateInput(input);
   const row = {
-    id: `mcp_${nanoid7(10)}`,
+    id: `mcp_${nanoid6(10)}`,
     name: sanitizeName(input.name),
     transport: input.transport,
     url: input.url,
@@ -10546,15 +9997,15 @@ var recorder_exports = {};
 __export(recorder_exports, {
   FrameRecorder: () => FrameRecorder
 });
-import { exec as exec6 } from "child_process";
-import { promisify as promisify6 } from "util";
+import { exec as exec5 } from "child_process";
+import { promisify as promisify5 } from "util";
 import { writeFile as writeFile5, mkdir as mkdir4, readFile as readFile11, unlink as unlink2, readdir as readdir5, rm } from "fs/promises";
-import { join as join11 } from "path";
-import { tmpdir as tmpdir2 } from "os";
-import { nanoid as nanoid8 } from "nanoid";
+import { join as join10 } from "path";
+import { tmpdir } from "os";
+import { nanoid as nanoid7 } from "nanoid";
 async function checkFfmpeg() {
   try {
-    await execAsync6("ffmpeg -version", { timeout: 5e3 });
+    await execAsync5("ffmpeg -version", { timeout: 5e3 });
     return true;
   } catch {
     return false;
@@ -10566,11 +10017,11 @@ async function cleanup(dir) {
   } catch {
   }
 }
-var execAsync6, FrameRecorder;
+var execAsync5, FrameRecorder;
 var init_recorder = __esm({
   "src/browser/recorder.ts"() {
     "use strict";
-    execAsync6 = promisify6(exec6);
+    execAsync5 = promisify5(exec5);
     FrameRecorder = class {
       frames = [];
       startTime = null;
@@ -10606,21 +10057,21 @@ var init_recorder = __esm({
        */
       async encode() {
         if (this.frames.length === 0) return null;
-        const workDir = join11(tmpdir2(), `sparkecoder-recording-${nanoid8(8)}`);
+        const workDir = join10(tmpdir(), `sparkecoder-recording-${nanoid7(8)}`);
         await mkdir4(workDir, { recursive: true });
         try {
           for (let i = 0; i < this.frames.length; i++) {
-            const framePath = join11(workDir, `frame_${String(i).padStart(6, "0")}.jpg`);
+            const framePath = join10(workDir, `frame_${String(i).padStart(6, "0")}.jpg`);
             await writeFile5(framePath, this.frames[i].data);
           }
           const duration = (this.frames[this.frames.length - 1].timestamp - this.frames[0].timestamp) / 1e3;
           const fps = duration > 0 ? Math.round(this.frames.length / duration) : 10;
           const clampedFps = Math.max(1, Math.min(fps, 30));
-          const outputPath = join11(workDir, `recording_${this.sessionId}.mp4`);
+          const outputPath = join10(workDir, `recording_${this.sessionId}.mp4`);
           const hasFfmpeg = await checkFfmpeg();
           if (hasFfmpeg) {
-            await execAsync6(
-              `ffmpeg -y -framerate ${clampedFps} -i "${join11(workDir, "frame_%06d.jpg")}" -c:v libx264 -pix_fmt yuv420p -preset fast -crf 23 "${outputPath}"`,
+            await execAsync5(
+              `ffmpeg -y -framerate ${clampedFps} -i "${join10(workDir, "frame_%06d.jpg")}" -c:v libx264 -pix_fmt yuv420p -preset fast -crf 23 "${outputPath}"`,
               { timeout: 12e4 }
             );
           } else {
@@ -10632,7 +10083,7 @@ var init_recorder = __esm({
           const files = await readdir5(workDir);
           for (const f of files) {
             if (f.startsWith("frame_")) {
-              await unlink2(join11(workDir, f)).catch(() => {
+              await unlink2(join10(workDir, f)).catch(() => {
               });
             }
           }
@@ -10657,11 +10108,11 @@ var init_recorder = __esm({
 import {
   streamText as streamText2,
   generateText as generateText3,
-  tool as tool15,
+  tool as tool14,
   stepCountIs as stepCountIs2
 } from "ai";
-import { z as z16 } from "zod";
-import { nanoid as nanoid9 } from "nanoid";
+import { z as z15 } from "zod";
+import { nanoid as nanoid8 } from "nanoid";
 function anySignal(signals) {
   const ctrl = new AbortController();
   for (const s of signals) {
@@ -10730,14 +10181,10 @@ var init_agent = __esm({
        */
       async createToolsWithCallbacks(options) {
         const config = getConfig();
-        const sessionConfig = this.session.config || {};
         const tools = await createTools({
           sessionId: this.session.id,
           workingDirectory: this.session.workingDirectory,
           skillsDirectories: config.resolvedSkillsDirectories,
-          enableComputerUse: sessionConfig.computerUseEnabled === true,
-          computerUseDisplayWidth: sessionConfig.computerUseDisplayWidth,
-          computerUseDisplayHeight: sessionConfig.computerUseDisplayHeight,
           onBashProgress: options.onToolProgress ? (progress) => options.onToolProgress({ toolName: "bash", data: progress }) : void 0,
           onWriteFileProgress: options.onToolProgress ? (progress) => options.onToolProgress({ toolName: "write_file", data: progress }) : void 0,
           onSearchProgress: options.onToolProgress ? (progress) => options.onToolProgress({ toolName: "explore_agent", data: progress }) : void 0
@@ -10787,14 +10234,10 @@ var init_agent = __esm({
           keepRecentMessages: config.context?.keepRecentMessages || 10,
           autoSummarize: config.context?.autoSummarize ?? true
         });
-        const sessionConfig = session.config || {};
         const tools = await createTools({
           sessionId: session.id,
           workingDirectory: session.workingDirectory,
-          skillsDirectories: config.resolvedSkillsDirectories,
-          enableComputerUse: sessionConfig.computerUseEnabled === true,
-          computerUseDisplayWidth: sessionConfig.computerUseDisplayWidth,
-          computerUseDisplayHeight: sessionConfig.computerUseDisplayHeight
+          skillsDirectories: config.resolvedSkillsDirectories
         });
         if (session.config?.role === "orchestrator") {
           const baseUrl = `http://127.0.0.1:${config.server?.port ?? 3141}`;
@@ -11032,14 +10475,10 @@ ${personality.trim()}`;
             });
           }
         };
-        const taskSessionConfig = this.session.config || {};
         const taskTools = await createTools({
           sessionId: this.session.id,
           workingDirectory: this.session.workingDirectory,
           skillsDirectories: config.resolvedSkillsDirectories,
-          enableComputerUse: taskSessionConfig.computerUseEnabled === true,
-          computerUseDisplayWidth: taskSessionConfig.computerUseDisplayWidth,
-          computerUseDisplayHeight: taskSessionConfig.computerUseDisplayHeight,
           onBashProgress: bashProgressHandler,
           onWriteFileProgress: (progress) => {
             options.onToolProgress?.({ toolName: "write_file", data: progress });
@@ -11387,11 +10826,11 @@ ${p.text}` : p.text;
           const { isRemoteConfigured: isRemoteConfigured2, storageQueries: storageQueries2 } = await Promise.resolve().then(() => (init_remote(), remote_exports));
           if (!isRemoteConfigured2()) return [];
           const { readFile: readFile12 } = await import("fs/promises");
-          const { join: join18, basename: basename6 } = await import("path");
+          const { join: join17, basename: basename6 } = await import("path");
           const urls = [];
           for (const filePath of filePaths) {
             try {
-              const fullPath = filePath.startsWith("/") ? filePath : join18(this.session.workingDirectory, filePath);
+              const fullPath = filePath.startsWith("/") ? filePath : join17(this.session.workingDirectory, filePath);
               const fileName = basename6(fullPath);
               const ext = fileName.split(".").pop()?.toLowerCase() || "";
               const mimeMap = {
@@ -11449,11 +10888,11 @@ ${p.text}` : p.text;
             wrappedTools[name] = originalTool;
             continue;
           }
-          wrappedTools[name] = tool15({
+          wrappedTools[name] = tool14({
             description: originalTool.description || "",
-            inputSchema: originalTool.inputSchema || z16.object({}),
+            inputSchema: originalTool.inputSchema || z15.object({}),
             execute: async (input, toolOptions) => {
-              const toolCallId = toolOptions.toolCallId || nanoid9();
+              const toolCallId = toolOptions.toolCallId || nanoid8();
               const execution = toolExecutionQueries.create({
                 sessionId: this.session.id,
                 toolName: name,
@@ -11596,19 +11035,19 @@ var init_session_lock = __esm({
 });
 
 // src/orchestrator/webhook-events.ts
-import { existsSync as existsSync18, readFileSync as readFileSync9, appendFileSync as appendFileSync3, writeFileSync as writeFileSync3, mkdirSync as mkdirSync7 } from "fs";
-import { dirname as dirname6, join as join12 } from "path";
-import { nanoid as nanoid10 } from "nanoid";
+import { existsSync as existsSync17, readFileSync as readFileSync8, appendFileSync as appendFileSync3, writeFileSync as writeFileSync3, mkdirSync as mkdirSync6 } from "fs";
+import { dirname as dirname6, join as join11 } from "path";
+import { nanoid as nanoid9 } from "nanoid";
 function logFilePath() {
-  return join12(getAppDataDirectory(), "webhook-events.jsonl");
+  return join11(getAppDataDirectory(), "webhook-events.jsonl");
 }
 function ensureLoaded() {
   if (cache !== null) return cache;
   cache = [];
   try {
     const p = logFilePath();
-    if (!existsSync18(p)) return cache;
-    const lines = readFileSync9(p, "utf-8").split("\n").filter(Boolean);
+    if (!existsSync17(p)) return cache;
+    const lines = readFileSync8(p, "utf-8").split("\n").filter(Boolean);
     for (const line of lines) {
       try {
         cache.push(JSON.parse(line));
@@ -11632,14 +11071,14 @@ function appendEvent(ev) {
   if (list.length > MAX_EVENTS) list.shift();
   try {
     const p = logFilePath();
-    mkdirSync7(dirname6(p), { recursive: true });
+    mkdirSync6(dirname6(p), { recursive: true });
     appendFileSync3(p, JSON.stringify(ev) + "\n");
   } catch {
   }
 }
 function recordEvent(ev) {
   const full = {
-    id: ev.id ?? nanoid10(),
+    id: ev.id ?? nanoid9(),
     ts: ev.ts ?? (/* @__PURE__ */ new Date()).toISOString(),
     source: ev.source,
     status: ev.status,
@@ -11663,7 +11102,7 @@ function updateEvent(id, patch) {
   list[i] = { ...list[i], ...patch };
   try {
     const p = logFilePath();
-    mkdirSync7(dirname6(p), { recursive: true });
+    mkdirSync6(dirname6(p), { recursive: true });
     writeFileSync3(p, list.map((e) => JSON.stringify(e)).join("\n") + "\n");
   } catch {
   }
@@ -12038,6 +11477,148 @@ var init_api = __esm({
   }
 });
 
+// src/utils/desktop-permissions.ts
+var desktop_permissions_exports = {};
+__export(desktop_permissions_exports, {
+  detectScreenSize: () => detectScreenSize,
+  getResponsibleAppName: () => getResponsibleAppName,
+  hasAccessibilityPermissions: () => hasAccessibilityPermissions,
+  hasScreenRecordingPermissions: () => hasScreenRecordingPermissions,
+  isCliclickInstalled: () => isCliclickInstalled,
+  isMacOs: () => isMacOs,
+  openSystemSettings: () => openSystemSettings
+});
+import { exec as exec7 } from "child_process";
+import { promisify as promisify7 } from "util";
+function isMacOs() {
+  return process.platform === "darwin";
+}
+async function isCliclickInstalled() {
+  try {
+    await execAsync7("command -v cliclick", { timeout: 2e3 });
+    return true;
+  } catch {
+    return false;
+  }
+}
+async function runJxa(script) {
+  try {
+    const escaped = script.replace(/'/g, `'\\''`);
+    const { stdout } = await execAsync7(`osascript -l JavaScript -e '${escaped}'`, {
+      timeout: 5e3
+    });
+    return JSON.parse(stdout.trim());
+  } catch {
+    return null;
+  }
+}
+async function hasAccessibilityPermissions() {
+  try {
+    const { stderr } = await execAsync7("cliclick p:.", { timeout: 3e3 });
+    if (stderr && ACCESSIBILITY_DENIED_RE.test(stderr)) {
+      return { ok: false, error: stderr.trim().split("\n")[0] };
+    }
+    return { ok: true };
+  } catch (err) {
+    return { ok: false, error: err?.message || String(err) };
+  }
+}
+async function hasScreenRecordingPermissions() {
+  const result = await runJxa(
+    `ObjC.import("Cocoa");
+     ObjC.import("CoreGraphics");
+     ObjC.bindFunction("CGPreflightScreenCaptureAccess", ["bool", []]);
+     JSON.stringify({ hasAccess: !!$.CGPreflightScreenCaptureAccess() });`
+  );
+  return result?.hasAccess ?? false;
+}
+async function openSystemSettings(pane) {
+  const url = pane === "accessibility" ? "x-apple.systempreferences:com.apple.preference.security?Privacy_Accessibility" : "x-apple.systempreferences:com.apple.preference.security?Privacy_ScreenCapture";
+  try {
+    await execAsync7(`open '${url}'`, { timeout: 3e3 });
+  } catch {
+  }
+}
+async function detectScreenSize() {
+  try {
+    const { stdout } = await execAsync7("system_profiler SPDisplaysDataType -json", {
+      timeout: 5e3,
+      maxBuffer: 4 * 1024 * 1024
+    });
+    const data = JSON.parse(stdout);
+    const cards = data.SPDisplaysDataType ?? [];
+    const all = cards.flatMap((c) => c.spdisplays_ndrvs ?? []);
+    if (all.length === 0) return null;
+    const primary = all.find((d) => d.spdisplays_main === "spdisplays_yes") ?? all[0];
+    const pixels = parseDim(primary._spdisplays_pixels) ?? parseDim(primary._spdisplays_resolution);
+    const points = parseDim(primary.spdisplays_resolution) ?? pixels;
+    if (!points) return null;
+    return {
+      width: points.w,
+      height: points.h,
+      pixelWidth: pixels?.w,
+      pixelHeight: pixels?.h,
+      displayName: primary._name
+    };
+  } catch {
+    return null;
+  }
+}
+function parseDim(s) {
+  if (!s) return null;
+  const m = s.match(/(\d+)\s*x\s*(\d+)/i);
+  if (!m) return null;
+  const w = parseInt(m[1], 10);
+  const h = parseInt(m[2], 10);
+  if (!Number.isFinite(w) || !Number.isFinite(h)) return null;
+  return { w, h };
+}
+async function getResponsibleAppName() {
+  const termProgram = process.env.TERM_PROGRAM;
+  if (termProgram) {
+    const pretty = TERM_PROGRAM_NAMES[termProgram] ?? termProgram;
+    return pretty;
+  }
+  try {
+    let pid = process.ppid;
+    for (let i = 0; i < 12 && pid && pid !== 1; i++) {
+      const { stdout } = await execAsync7(`ps -o ppid=,comm= -p ${pid}`, { timeout: 1e3 });
+      const trimmed = stdout.trim();
+      if (!trimmed) break;
+      const m = trimmed.match(/^\s*(\d+)\s+(.+)$/);
+      if (!m) break;
+      const parentPid = parseInt(m[1], 10);
+      const comm = m[2];
+      const bundle = comm.match(/\/([^/]+)\.app\//);
+      if (bundle) return bundle[1];
+      pid = parentPid;
+    }
+  } catch {
+  }
+  return "the terminal app you launched the agent from";
+}
+var execAsync7, ACCESSIBILITY_DENIED_RE, TERM_PROGRAM_NAMES;
+var init_desktop_permissions = __esm({
+  "src/utils/desktop-permissions.ts"() {
+    "use strict";
+    execAsync7 = promisify7(exec7);
+    ACCESSIBILITY_DENIED_RE = /(not allowed|not trusted|accessibility (privilege|client)|control your computer|privilege.{0,20}required|enable.{0,20}accessibility)/i;
+    TERM_PROGRAM_NAMES = {
+      Apple_Terminal: "Terminal",
+      "iTerm.app": "iTerm",
+      iTerm: "iTerm",
+      vscode: "Visual Studio Code (or Cursor, if that's what you're using)",
+      WarpTerminal: "Warp",
+      ghostty: "Ghostty",
+      Hyper: "Hyper",
+      Tabby: "Tabby",
+      Alacritty: "Alacritty",
+      WezTerm: "WezTerm",
+      kitty: "kitty"
+    };
+  }
+});
+
 // src/cli.ts
 import { Command } from "commander";
 import chalk from "chalk";
@@ -12053,8 +11634,8 @@ import { Hono as Hono9 } from "hono";
 import { serve } from "@hono/node-server";
 import { cors } from "hono/cors";
 import { logger } from "hono/logger";
-import { existsSync as existsSync21, mkdirSync as mkdirSync10, writeFileSync as writeFileSync6 } from "fs";
-import { resolve as resolve11, dirname as dirname8, join as join16 } from "path";
+import { existsSync as existsSync20, mkdirSync as mkdirSync9, writeFileSync as writeFileSync6 } from "fs";
+import { resolve as resolve11, dirname as dirname8, join as join15 } from "path";
 import { spawn as spawn2 } from "child_process";
 import { createServer as createNetServer } from "net";
 import { fileURLToPath as fileURLToPath4 } from "url";
@@ -12067,11 +11648,11 @@ init_tmux();
 init_checkpoints();
 import { Hono } from "hono";
 import { zValidator } from "@hono/zod-validator";
-import { z as z17 } from "zod";
-import { existsSync as existsSync19, mkdirSync as mkdirSync8, writeFileSync as writeFileSync4, readdirSync as readdirSync3, statSync as statSync2, unlinkSync as unlinkSync3 } from "fs";
+import { z as z16 } from "zod";
+import { existsSync as existsSync18, mkdirSync as mkdirSync7, writeFileSync as writeFileSync4, readdirSync as readdirSync3, statSync as statSync2, unlinkSync as unlinkSync2 } from "fs";
 import { readdir as readdir6 } from "fs/promises";
-import { join as join13, basename as basename5, extname as extname8, relative as relative9 } from "path";
-import { nanoid as nanoid11 } from "nanoid";
+import { join as join12, basename as basename5, extname as extname8, relative as relative9 } from "path";
+import { nanoid as nanoid10 } from "nanoid";
 
 // src/tasks/agent-status.ts
 init_questions();
@@ -12129,22 +11710,22 @@ function cleanupPendingInputs() {
     }
   }
 }
-var createSessionSchema = z17.object({
-  name: z17.string().optional(),
-  workingDirectory: z17.string().optional(),
-  model: z17.string().optional(),
-  toolApprovals: z17.record(z17.string(), z17.boolean()).optional(),
-  // Optional full session-config passthrough (computerUseEnabled, etc.)
-  config: z17.record(z17.string(), z17.unknown()).optional(),
-  role: z17.enum(["orchestrator", "worker", "chat"]).optional()
+var createSessionSchema = z16.object({
+  name: z16.string().optional(),
+  workingDirectory: z16.string().optional(),
+  model: z16.string().optional(),
+  toolApprovals: z16.record(z16.string(), z16.boolean()).optional(),
+  // Optional full session-config passthrough (role, persona, etc.)
+  config: z16.record(z16.string(), z16.unknown()).optional(),
+  role: z16.enum(["orchestrator", "worker", "chat"]).optional()
 });
-var paginationQuerySchema = z17.object({
-  limit: z17.string().optional(),
-  offset: z17.string().optional(),
-  role: z17.enum(["orchestrator", "worker", "chat", "all"]).optional()
+var paginationQuerySchema = z16.object({
+  limit: z16.string().optional(),
+  offset: z16.string().optional(),
+  role: z16.enum(["orchestrator", "worker", "chat", "all"]).optional()
 });
-var messagesQuerySchema = z17.object({
-  limit: z17.string().optional()
+var messagesQuerySchema = z16.object({
+  limit: z16.string().optional()
 });
 sessions2.get(
   "/",
@@ -12213,15 +11794,11 @@ sessions2.post(
   async (c) => {
     const body = c.req.valid("json");
     const config = getConfig();
-    const cuDefault = process.env.SPARKECODER_COMPUTER_USE === "1";
     const baseConfig = body.config || {};
     const mergedConfig = {
       ...baseConfig,
       ...body.toolApprovals ? { toolApprovals: body.toolApprovals } : {},
-      ...body.role ? { role: body.role } : {},
-      // Turn on computer use by default if the server was launched with --enable-computer-use,
-      // unless the client explicitly provided a value.
-      ...cuDefault && baseConfig.computerUseEnabled === void 0 ? { computerUseEnabled: true } : {}
+      ...body.role ? { role: body.role } : {}
     };
     const agent = await Agent.create({
       name: body.name,
@@ -12398,10 +11975,10 @@ sessions2.get("/:id/tools", async (c) => {
     count: executions.length
   });
 });
-var updateSessionSchema = z17.object({
-  model: z17.string().optional(),
-  name: z17.string().optional(),
-  toolApprovals: z17.record(z17.string(), z17.boolean()).optional()
+var updateSessionSchema = z16.object({
+  model: z16.string().optional(),
+  name: z16.string().optional(),
+  toolApprovals: z16.record(z16.string(), z16.boolean()).optional()
 });
 sessions2.patch(
   "/:id",
@@ -12471,10 +12048,10 @@ sessions2.post("/:id/clear", async (c) => {
   await agent.clearContext();
   return c.json({ success: true, sessionId: id });
 });
-var injectMessageSchema = z17.object({
-  text: z17.string().min(1),
-  source: z17.enum(["orchestrator", "user", "system"]).optional(),
-  force: z17.boolean().optional()
+var injectMessageSchema = z16.object({
+  text: z16.string().min(1),
+  source: z16.enum(["orchestrator", "user", "system"]).optional(),
+  force: z16.boolean().optional()
 });
 sessions2.post(
   "/:id/messages",
@@ -12488,8 +12065,8 @@ sessions2.post(
     return c.json({ success: true, sessionId: id, queued: true, force });
   }
 );
-var pendingInputSchema = z17.object({
-  text: z17.string()
+var pendingInputSchema = z16.object({
+  text: z16.string()
 });
 sessions2.post(
   "/:id/pending-input",
@@ -12520,13 +12097,13 @@ sessions2.get("/:id/pending-input", async (c) => {
     createdAt: pending.createdAt.toISOString()
   });
 });
-var devtoolsContextSchema = z17.object({
-  url: z17.string(),
-  path: z17.string(),
-  pageName: z17.string().optional(),
-  screenWidth: z17.number().optional(),
-  screenHeight: z17.number().optional(),
-  devicePixelRatio: z17.number().optional()
+var devtoolsContextSchema = z16.object({
+  url: z16.string(),
+  path: z16.string(),
+  pageName: z16.string().optional(),
+  screenWidth: z16.number().optional(),
+  screenHeight: z16.number().optional(),
+  devicePixelRatio: z16.number().optional()
 });
 sessions2.post(
   "/:id/devtools-context",
@@ -12712,12 +12289,12 @@ sessions2.get("/:id/diff/:filePath", async (c) => {
 });
 function getAttachmentsDir(sessionId) {
   const appDataDir = getAppDataDirectory();
-  return join13(appDataDir, "attachments", sessionId);
+  return join12(appDataDir, "attachments", sessionId);
 }
 function ensureAttachmentsDir(sessionId) {
   const dir = getAttachmentsDir(sessionId);
-  if (!existsSync19(dir)) {
-    mkdirSync8(dir, { recursive: true });
+  if (!existsSync18(dir)) {
+    mkdirSync7(dir, { recursive: true });
   }
   return dir;
 }
@@ -12728,12 +12305,12 @@ sessions2.get("/:id/attachments", async (c) => {
     return c.json({ error: "Session not found" }, 404);
   }
   const dir = getAttachmentsDir(sessionId);
-  if (!existsSync19(dir)) {
+  if (!existsSync18(dir)) {
     return c.json({ sessionId, attachments: [], count: 0 });
   }
   const files = readdirSync3(dir);
   const attachments = files.map((filename) => {
-    const filePath = join13(dir, filename);
+    const filePath = join12(dir, filename);
     const stats = statSync2(filePath);
     return {
       id: filename.split("_")[0],
@@ -12765,10 +12342,10 @@ sessions2.post("/:id/attachments", async (c) => {
         return c.json({ error: "No file provided" }, 400);
       }
       const dir = ensureAttachmentsDir(sessionId);
-      const id = nanoid11(10);
+      const id = nanoid10(10);
       const ext = extname8(file.name) || "";
       const safeFilename = `${id}_${basename5(file.name).replace(/[^a-zA-Z0-9._-]/g, "_")}`;
-      const filePath = join13(dir, safeFilename);
+      const filePath = join12(dir, safeFilename);
       const arrayBuffer = await file.arrayBuffer();
       writeFileSync4(filePath, Buffer.from(arrayBuffer));
       return c.json({
@@ -12791,10 +12368,10 @@ sessions2.post("/:id/attachments", async (c) => {
       return c.json({ error: "Missing filename or data" }, 400);
     }
     const dir = ensureAttachmentsDir(sessionId);
-    const id = nanoid11(10);
+    const id = nanoid10(10);
     const ext = extname8(body.filename) || "";
     const safeFilename = `${id}_${basename5(body.filename).replace(/[^a-zA-Z0-9._-]/g, "_")}`;
-    const filePath = join13(dir, safeFilename);
+    const filePath = join12(dir, safeFilename);
     let base64Data = body.data;
     if (base64Data.includes(",")) {
       base64Data = base64Data.split(",")[1];
@@ -12823,7 +12400,7 @@ sessions2.delete("/:id/attachments/:attachmentId", async (c) => {
     return c.json({ error: "Session not found" }, 404);
   }
   const dir = getAttachmentsDir(sessionId);
-  if (!existsSync19(dir)) {
+  if (!existsSync18(dir)) {
     return c.json({ error: "Attachment not found" }, 404);
   }
   const files = readdirSync3(dir);
@@ -12831,14 +12408,14 @@ sessions2.delete("/:id/attachments/:attachmentId", async (c) => {
   if (!file) {
     return c.json({ error: "Attachment not found" }, 404);
   }
-  const filePath = join13(dir, file);
-  unlinkSync3(filePath);
+  const filePath = join12(dir, file);
+  unlinkSync2(filePath);
   return c.json({ success: true, id: attachmentId });
 });
-var filesQuerySchema = z17.object({
-  query: z17.string().optional(),
+var filesQuerySchema = z16.object({
+  query: z16.string().optional(),
   // Filter query (e.g., "src/com" to match "src/components")
-  limit: z17.string().optional()
+  limit: z16.string().optional()
   // Max results (default 50)
 });
 var IGNORED_DIRECTORIES = /* @__PURE__ */ new Set([
@@ -12914,7 +12491,7 @@ async function listWorkspaceFiles(baseDir, currentDir, query, limit, results = [
     const entries = await readdir6(currentDir, { withFileTypes: true });
     for (const entry2 of entries) {
       if (results.length >= limit * 2) break;
-      const fullPath = join13(currentDir, entry2.name);
+      const fullPath = join12(currentDir, entry2.name);
       const relativePath = relative9(baseDir, fullPath);
       if (entry2.isDirectory() && IGNORED_DIRECTORIES.has(entry2.name)) {
         continue;
@@ -12962,7 +12539,7 @@ sessions2.get(
       return c.json({ error: "Session not found" }, 404);
     }
     const workingDirectory = session.workingDirectory;
-    if (!existsSync19(workingDirectory)) {
+    if (!existsSync18(workingDirectory)) {
       return c.json({
         sessionId,
         workingDirectory,
@@ -13075,9 +12652,9 @@ init_session_lock();
 init_config();
 import { Hono as Hono2 } from "hono";
 import { zValidator as zValidator2 } from "@hono/zod-validator";
-import { z as z18 } from "zod";
-import { existsSync as existsSync20, mkdirSync as mkdirSync9, writeFileSync as writeFileSync5 } from "fs";
-import { join as join14 } from "path";
+import { z as z17 } from "zod";
+import { existsSync as existsSync19, mkdirSync as mkdirSync8, writeFileSync as writeFileSync5 } from "fs";
+import { join as join13 } from "path";
 
 // src/server/resumable-stream.ts
 import { createResumableStreamContext } from "resumable-stream/generic";
@@ -13164,7 +12741,7 @@ var streamContext = createResumableStreamContext({
 
 // src/server/routes/agents.ts
 init_checkpoints();
-import { nanoid as nanoid12 } from "nanoid";
+import { nanoid as nanoid11 } from "nanoid";
 init_stream_proxy();
 init_recorder();
 init_remote();
@@ -13256,40 +12833,40 @@ function enrichPromptWithDevtoolsContext(sessionId, prompt) {
 ${prompt}`;
 }
 var agents = new Hono2();
-var attachmentSchema = z18.object({
-  type: z18.enum(["image", "file"]),
-  data: z18.string(),
+var attachmentSchema = z17.object({
+  type: z17.enum(["image", "file"]),
+  data: z17.string(),
   // base64 data URL or raw base64
-  mediaType: z18.string().optional(),
-  filename: z18.string().optional()
+  mediaType: z17.string().optional(),
+  filename: z17.string().optional()
 });
-var runPromptSchema = z18.object({
-  prompt: z18.string(),
+var runPromptSchema = z17.object({
+  prompt: z17.string(),
   // Can be empty if attachments are provided
-  attachments: z18.array(attachmentSchema).optional()
+  attachments: z17.array(attachmentSchema).optional()
 }).refine(
   (data) => data.prompt.trim().length > 0 || data.attachments && data.attachments.length > 0,
   { message: "Either prompt or attachments must be provided" }
 );
-var quickStartSchema = z18.object({
-  prompt: z18.string().min(1),
-  name: z18.string().optional(),
-  workingDirectory: z18.string().optional(),
-  model: z18.string().optional(),
-  toolApprovals: z18.record(z18.string(), z18.boolean()).optional()
+var quickStartSchema = z17.object({
+  prompt: z17.string().min(1),
+  name: z17.string().optional(),
+  workingDirectory: z17.string().optional(),
+  model: z17.string().optional(),
+  toolApprovals: z17.record(z17.string(), z17.boolean()).optional()
 });
-var rejectSchema = z18.object({
-  reason: z18.string().optional()
+var rejectSchema = z17.object({
+  reason: z17.string().optional()
 }).optional();
 var streamAbortControllers = /* @__PURE__ */ new Map();
 function getAttachmentsDirectory(sessionId) {
   const appDataDir = getAppDataDirectory();
-  return join14(appDataDir, "attachments", sessionId);
+  return join13(appDataDir, "attachments", sessionId);
 }
 async function saveAttachmentToDisk(sessionId, attachment, index) {
   const attachmentsDir = getAttachmentsDirectory(sessionId);
-  if (!existsSync20(attachmentsDir)) {
-    mkdirSync9(attachmentsDir, { recursive: true });
+  if (!existsSync19(attachmentsDir)) {
+    mkdirSync8(attachmentsDir, { recursive: true });
   }
   let filename = attachment.filename;
   if (!filename) {
@@ -13307,7 +12884,7 @@ async function saveAttachmentToDisk(sessionId, attachment, index) {
     attachment.mediaType = resized.mediaType;
     attachment.data = buffer.toString("base64");
   }
-  const filePath = join14(attachmentsDir, filename);
+  const filePath = join13(attachmentsDir, filename);
   writeFileSync5(filePath, buffer);
   return filePath;
 }
@@ -13744,7 +13321,7 @@ ${prompt}` });
       });
     } catch {
     }
-    const streamId = `stream_${id}_${nanoid12(10)}`;
+    const streamId = `stream_${id}_${nanoid11(10)}`;
     console.log(`[STREAM] Creating stream ${streamId} for session ${id}`);
     await activeStreamQueries.create(id, streamId);
     const stream = await streamContext.resumableStream(
@@ -13949,7 +13526,7 @@ agents.post(
     });
     const session = agent.getSession();
     const enrichedPrompt = enrichPromptWithDevtoolsContext(session.id, body.prompt);
-    const streamId = `stream_${session.id}_${nanoid12(10)}`;
+    const streamId = `stream_${session.id}_${nanoid11(10)}`;
     await createCheckpoint(session.id, session.workingDirectory, 0);
     await activeStreamQueries.create(session.id, streamId);
     const createQuickStreamProducer = () => {
@@ -14216,23 +13793,23 @@ agents.post(
     });
   }
 );
-var browserInputSchema = z18.object({
-  type: z18.enum(["input_mouse", "input_keyboard", "input_touch"]),
-  eventType: z18.string(),
-  x: z18.number().optional(),
-  y: z18.number().optional(),
-  button: z18.string().optional(),
-  clickCount: z18.number().optional(),
-  deltaX: z18.number().optional(),
-  deltaY: z18.number().optional(),
-  key: z18.string().optional(),
-  code: z18.string().optional(),
-  text: z18.string().optional(),
-  modifiers: z18.number().optional(),
-  touchPoints: z18.array(z18.object({
-    x: z18.number(),
-    y: z18.number(),
-    id: z18.number().optional()
+var browserInputSchema = z17.object({
+  type: z17.enum(["input_mouse", "input_keyboard", "input_touch"]),
+  eventType: z17.string(),
+  x: z17.number().optional(),
+  y: z17.number().optional(),
+  button: z17.string().optional(),
+  clickCount: z17.number().optional(),
+  deltaX: z17.number().optional(),
+  deltaY: z17.number().optional(),
+  key: z17.string().optional(),
+  code: z17.string().optional(),
+  text: z17.string().optional(),
+  modifiers: z17.number().optional(),
+  touchPoints: z17.array(z17.object({
+    x: z17.number(),
+    y: z17.number(),
+    id: z17.number().optional()
   })).optional()
 });
 agents.post(
@@ -14267,27 +13844,27 @@ agents.get("/:id/browser-stream", async (c) => {
 init_config();
 import { Hono as Hono3 } from "hono";
 import { zValidator as zValidator3 } from "@hono/zod-validator";
-import { z as z19 } from "zod";
-import { readFileSync as readFileSync10 } from "fs";
+import { z as z18 } from "zod";
+import { readFileSync as readFileSync9 } from "fs";
 import { fileURLToPath as fileURLToPath3 } from "url";
-import { dirname as dirname7, join as join15 } from "path";
+import { dirname as dirname7, join as join14 } from "path";
 var __filename = fileURLToPath3(import.meta.url);
 var __dirname = dirname7(__filename);
 var possiblePaths = [
-  join15(__dirname, "../package.json"),
+  join14(__dirname, "../package.json"),
   // From dist/server -> dist/../package.json
-  join15(__dirname, "../../package.json"),
+  join14(__dirname, "../../package.json"),
   // From dist/server (if nested differently)
-  join15(__dirname, "../../../package.json"),
+  join14(__dirname, "../../../package.json"),
   // From src/server/routes (development)
-  join15(process.cwd(), "package.json")
+  join14(process.cwd(), "package.json")
   // From current working directory
 ];
 var currentVersion = "0.0.0";
 var packageName = "sparkecoder";
 for (const packageJsonPath of possiblePaths) {
   try {
-    const packageJson = JSON.parse(readFileSync10(packageJsonPath, "utf-8"));
+    const packageJson = JSON.parse(readFileSync9(packageJsonPath, "utf-8"));
     if (packageJson.name === "sparkecoder") {
       currentVersion = packageJson.version || "0.0.0";
       packageName = packageJson.name || "sparkecoder";
@@ -14379,9 +13956,9 @@ health.get("/api-keys", async (c) => {
     supportedProviders: SUPPORTED_PROVIDERS
   });
 });
-var setApiKeySchema = z19.object({
-  provider: z19.string(),
-  apiKey: z19.string().min(1)
+var setApiKeySchema = z18.object({
+  provider: z18.string(),
+  apiKey: z18.string().min(1)
 });
 health.post(
   "/api-keys",
@@ -14422,12 +13999,12 @@ init_tmux();
 init_db();
 import { Hono as Hono4 } from "hono";
 import { zValidator as zValidator4 } from "@hono/zod-validator";
-import { z as z20 } from "zod";
+import { z as z19 } from "zod";
 var terminals = new Hono4();
-var spawnSchema = z20.object({
-  command: z20.string(),
-  cwd: z20.string().optional(),
-  name: z20.string().optional()
+var spawnSchema = z19.object({
+  command: z19.string(),
+  cwd: z19.string().optional(),
+  name: z19.string().optional()
 });
 terminals.post(
   "/:sessionId/terminals",
@@ -14508,8 +14085,8 @@ terminals.get("/:sessionId/terminals/:terminalId", async (c) => {
     // We don't track exit codes in tmux mode
   });
 });
-var logsQuerySchema = z20.object({
-  tail: z20.string().optional().transform((v) => v ? parseInt(v, 10) : void 0)
+var logsQuerySchema = z19.object({
+  tail: z19.string().optional().transform((v) => v ? parseInt(v, 10) : void 0)
 });
 terminals.get(
   "/:sessionId/terminals/:terminalId/logs",
@@ -14533,8 +14110,8 @@ terminals.get(
     });
   }
 );
-var killSchema = z20.object({
-  signal: z20.enum(["SIGTERM", "SIGKILL"]).optional()
+var killSchema = z19.object({
+  signal: z19.enum(["SIGTERM", "SIGKILL"]).optional()
 });
 terminals.post(
   "/:sessionId/terminals/:terminalId/kill",
@@ -14548,8 +14125,8 @@ terminals.post(
     return c.json({ success: true, message: "Terminal killed" });
   }
 );
-var writeSchema = z20.object({
-  input: z20.string()
+var writeSchema = z19.object({
+  input: z19.string()
 });
 terminals.post(
   "/:sessionId/terminals/:terminalId/write",
@@ -14736,23 +14313,23 @@ init_agent();
 init_config();
 import { Hono as Hono5 } from "hono";
 import { zValidator as zValidator5 } from "@hono/zod-validator";
-import { z as z21 } from "zod";
-import { nanoid as nanoid13 } from "nanoid";
+import { z as z20 } from "zod";
+import { nanoid as nanoid12 } from "nanoid";
 init_questions();
 var tasks = new Hono5();
 var taskAbortControllers = /* @__PURE__ */ new Map();
-var createTaskSchema = z21.object({
-  prompt: z21.string().min(1),
-  outputSchema: z21.record(z21.string(), z21.unknown()),
-  webhookUrl: z21.string().url().optional(),
-  model: z21.string().optional(),
-  workingDirectory: z21.string().optional(),
-  name: z21.string().optional(),
-  maxIterations: z21.number().int().min(1).max(500).optional(),
-  parentTaskId: z21.string().optional(),
+var createTaskSchema = z20.object({
+  prompt: z20.string().min(1),
+  outputSchema: z20.record(z20.string(), z20.unknown()),
+  webhookUrl: z20.string().url().optional(),
+  model: z20.string().optional(),
+  workingDirectory: z20.string().optional(),
+  name: z20.string().optional(),
+  maxIterations: z20.number().int().min(1).max(500).optional(),
+  parentTaskId: z20.string().optional(),
   /** When set, the spawning orchestrator's session id. Stamped on the
    *  worker's config so terminal events can wake the orchestrator. */
-  orchestratorSessionId: z21.string().optional()
+  orchestratorSessionId: z20.string().optional()
 });
 tasks.post(
   "/",
@@ -14818,7 +14395,7 @@ tasks.post(
     const taskId = agent.sessionId;
     const abortController = new AbortController();
     taskAbortControllers.set(taskId, abortController);
-    const streamId = `stream_${taskId}_${nanoid13(10)}`;
+    const streamId = `stream_${taskId}_${nanoid12(10)}`;
     await activeStreamQueries.create(taskId, streamId);
     const taskStreamProducer = () => {
       const { readable, writable } = new TransformStream();
@@ -14967,9 +14544,9 @@ tasks.post("/:id/cancel", async (c) => {
   }
   return c.json({ taskId: id, status: "failed", error: "Task cancelled by user" });
 });
-var answerQuestionSchema = z21.object({
-  answer: z21.string().min(1),
-  answeredBy: z21.enum(["orchestrator", "user", "system"]).optional()
+var answerQuestionSchema = z20.object({
+  answer: z20.string().min(1),
+  answeredBy: z20.enum(["orchestrator", "user", "system"]).optional()
 });
 tasks.post(
   "/:id/questions/:questionId/answer",
@@ -15098,7 +14675,8 @@ slack.post("/events", async (c) => {
       updateEvent(auditId, { status: "dropped", dropReason: "duplicate_delivery" });
       return c.json({ ok: true });
     }
-    const { event: inbound, dropReason } = slackEventToInboundResult(ev);
+    const self = await ensureSlackSelfIdentity();
+    const { event: inbound, dropReason } = slackEventToInboundResult(ev, { self });
     if (inbound) {
       const isThreadReply = ev.type === "message" && ev.channel_type !== "im" && typeof ev.thread_ts === "string" && ev.thread_ts !== ev.ts;
       if (isThreadReply) {
@@ -15253,7 +14831,7 @@ init_pool();
 init_webhook_events();
 import { Hono as Hono8 } from "hono";
 import { zValidator as zValidator6 } from "@hono/zod-validator";
-import { z as z22 } from "zod";
+import { z as z21 } from "zod";
 var integrations = new Hono8();
 var orchestratorRouter = new Hono8();
 async function getOrchestratorId() {
@@ -15276,9 +14854,9 @@ orchestratorRouter.get("/", async (c) => {
 });
 orchestratorRouter.patch(
   "/",
-  zValidator6("json", z22.object({
-    name: z22.string().min(1).optional(),
-    personality: z22.string().optional()
+  zValidator6("json", z21.object({
+    name: z21.string().min(1).optional(),
+    personality: z21.string().optional()
   })),
   async (c) => {
     const id = await getOrchestratorId();
@@ -15354,15 +14932,15 @@ integrations.get("/", async (c) => {
     }
   });
 });
-var slackConfigSchema = z22.object({
-  botToken: z22.string().optional(),
-  signingSecret: z22.string().optional(),
-  defaultOrchestratorName: z22.string().optional(),
-  allowedUsers: z22.array(z22.string()).optional(),
-  allowedChannels: z22.array(z22.string()).optional(),
-  allowDmsFromAnyone: z22.boolean().optional(),
-  deniedReplyEnabled: z22.boolean().optional(),
-  deniedReplyTemplate: z22.string().optional()
+var slackConfigSchema = z21.object({
+  botToken: z21.string().optional(),
+  signingSecret: z21.string().optional(),
+  defaultOrchestratorName: z21.string().optional(),
+  allowedUsers: z21.array(z21.string()).optional(),
+  allowedChannels: z21.array(z21.string()).optional(),
+  allowDmsFromAnyone: z21.boolean().optional(),
+  deniedReplyEnabled: z21.boolean().optional(),
+  deniedReplyTemplate: z21.string().optional()
 });
 integrations.post("/slack", zValidator6("json", slackConfigSchema), async (c) => {
   const body = c.req.valid("json");
@@ -15391,11 +14969,11 @@ schedulesRouter.get("/", async (c) => {
 });
 schedulesRouter.post(
   "/",
-  zValidator6("json", z22.object({
-    name: z22.string().min(1),
-    cron: z22.string().min(1),
-    prompt: z22.string().min(1),
-    replyChannel: z22.string().optional()
+  zValidator6("json", z21.object({
+    name: z21.string().min(1),
+    cron: z21.string().min(1),
+    prompt: z21.string().min(1),
+    replyChannel: z21.string().optional()
   })),
   async (c) => {
     const orcId = await getOrchestratorId();
@@ -15406,12 +14984,12 @@ schedulesRouter.post(
 );
 schedulesRouter.patch(
   "/:id",
-  zValidator6("json", z22.object({
-    name: z22.string().optional(),
-    cron: z22.string().optional(),
-    prompt: z22.string().optional(),
-    enabled: z22.boolean().optional(),
-    replyChannel: z22.string().optional()
+  zValidator6("json", z21.object({
+    name: z21.string().optional(),
+    cron: z21.string().optional(),
+    prompt: z21.string().optional(),
+    enabled: z21.boolean().optional(),
+    replyChannel: z21.string().optional()
   })),
   async (c) => {
     const orcId = await getOrchestratorId();
@@ -15439,10 +15017,10 @@ webhooksRouter.get("/", async (c) => {
 });
 webhooksRouter.post(
   "/",
-  zValidator6("json", z22.object({
-    name: z22.string().min(1),
-    wake: z22.enum(["now", "next"]).optional(),
-    template: z22.string().optional()
+  zValidator6("json", z21.object({
+    name: z21.string().min(1),
+    wake: z21.enum(["now", "next"]).optional(),
+    template: z21.string().optional()
   })),
   async (c) => {
     const orcId = await getOrchestratorId();
@@ -15453,11 +15031,11 @@ webhooksRouter.post(
 );
 webhooksRouter.patch(
   "/:id",
-  zValidator6("json", z22.object({
-    name: z22.string().optional(),
-    wake: z22.enum(["now", "next"]).optional(),
-    template: z22.string().optional(),
-    rotateToken: z22.boolean().optional()
+  zValidator6("json", z21.object({
+    name: z21.string().optional(),
+    wake: z21.enum(["now", "next"]).optional(),
+    template: z21.string().optional(),
+    rotateToken: z21.boolean().optional()
   })),
   async (c) => {
     const orcId = await getOrchestratorId();
@@ -15474,22 +15052,22 @@ webhooksRouter.delete("/:id", async (c) => {
   return c.json({ deleted: ok });
 });
 var mcpRouter = new Hono8();
-var mcpServerSchema = z22.object({
-  name: z22.string().min(1),
-  transport: z22.enum(["http", "sse", "stdio"]),
-  url: z22.string().optional(),
-  headers: z22.record(z22.string(), z22.string()).optional(),
-  command: z22.string().optional(),
-  args: z22.array(z22.string()).optional(),
-  enabled: z22.boolean().optional()
+var mcpServerSchema = z21.object({
+  name: z21.string().min(1),
+  transport: z21.enum(["http", "sse", "stdio"]),
+  url: z21.string().optional(),
+  headers: z21.record(z21.string(), z21.string()).optional(),
+  command: z21.string().optional(),
+  args: z21.array(z21.string()).optional(),
+  enabled: z21.boolean().optional()
 });
-var mcpPatchSchema = z22.object({
-  name: z22.string().optional(),
-  url: z22.string().optional(),
-  headers: z22.record(z22.string(), z22.string()).optional(),
-  command: z22.string().optional(),
-  args: z22.array(z22.string()).optional(),
-  enabled: z22.boolean().optional()
+var mcpPatchSchema = z21.object({
+  name: z21.string().optional(),
+  url: z21.string().optional(),
+  headers: z21.record(z21.string(), z21.string()).optional(),
+  command: z21.string().optional(),
+  args: z21.array(z21.string()).optional(),
+  enabled: z21.boolean().optional()
 });
 mcpRouter.get("/", async (c) => {
   const rows = listMcpServers().map((s) => ({
@@ -15606,10 +15184,10 @@ init_config();
 init_db();
 
 // src/utils/dependencies.ts
-import { exec as exec7 } from "child_process";
-import { promisify as promisify7 } from "util";
+import { exec as exec6 } from "child_process";
+import { promisify as promisify6 } from "util";
 import { platform as platform2 } from "os";
-var execAsync7 = promisify7(exec7);
+var execAsync6 = promisify6(exec6);
 function getInstallInstructions() {
   const os2 = platform2();
   if (os2 === "darwin") {
@@ -15642,7 +15220,7 @@ Install tmux:
 }
 async function checkTmux() {
   try {
-    const { stdout } = await execAsync7("tmux -V", { timeout: 5e3 });
+    const { stdout } = await execAsync6("tmux -V", { timeout: 5e3 });
     const version = stdout.trim();
     return {
       available: true,
@@ -15683,7 +15261,7 @@ async function checkDependencies(options = {}) {
 }
 async function checkAgentBrowser() {
   try {
-    const { stdout } = await execAsync7("agent-browser --version", { timeout: 1e4 });
+    const { stdout } = await execAsync6("agent-browser --version", { timeout: 1e4 });
     const version = stdout.trim();
     return { available: true, version };
   } catch {
@@ -15699,12 +15277,12 @@ async function tryInstallAgentBrowser(options = {}) {
     if (!options.quiet) {
       console.log("\u{1F4E6} Installing agent-browser globally...");
     }
-    await execAsync7("npm install -g agent-browser", { timeout: 12e4 });
+    await execAsync6("npm install -g agent-browser", { timeout: 12e4 });
     try {
       if (!options.quiet) {
         console.log("\u{1F4E6} Installing Chromium for browser automation...");
       }
-      await execAsync7("agent-browser install", { timeout: 12e4 });
+      await execAsync6("agent-browser install", { timeout: 12e4 });
     } catch {
     }
     if (!options.quiet) {
@@ -15723,21 +15301,21 @@ async function tryAutoInstallTmux() {
   try {
     if (os2 === "darwin") {
       try {
-        await execAsync7("which brew", { timeout: 5e3 });
+        await execAsync6("which brew", { timeout: 5e3 });
       } catch {
         return false;
       }
       console.log("\u{1F4E6} Installing tmux via Homebrew...");
-      await execAsync7("brew install tmux", { timeout: 3e5 });
+      await execAsync6("brew install tmux", { timeout: 3e5 });
       console.log("\u2705 tmux installed successfully");
       return true;
     }
     if (os2 === "linux") {
       try {
-        await execAsync7("which apt-get", { timeout: 5e3 });
+        await execAsync6("which apt-get", { timeout: 5e3 });
         console.log("\u{1F4E6} Installing tmux via apt-get...");
         console.log("   (This may require sudo password)");
-        await execAsync7("sudo apt-get update && sudo apt-get install -y tmux", {
+        await execAsync6("sudo apt-get update && sudo apt-get install -y tmux", {
           timeout: 3e5
         });
         console.log("\u2705 tmux installed successfully");
@@ -15745,9 +15323,9 @@ async function tryAutoInstallTmux() {
       } catch {
       }
       try {
-        await execAsync7("which dnf", { timeout: 5e3 });
+        await execAsync6("which dnf", { timeout: 5e3 });
         console.log("\u{1F4E6} Installing tmux via dnf...");
-        await execAsync7("sudo dnf install -y tmux", { timeout: 3e5 });
+        await execAsync6("sudo dnf install -y tmux", { timeout: 3e5 });
         console.log("\u2705 tmux installed successfully");
         return true;
       } catch {
@@ -15787,11 +15365,11 @@ function getWebDirectory() {
   try {
     const currentDir = dirname8(fileURLToPath4(import.meta.url));
     const webDir = resolve11(currentDir, "..", "web");
-    if (existsSync21(webDir) && existsSync21(join16(webDir, "package.json"))) {
+    if (existsSync20(webDir) && existsSync20(join15(webDir, "package.json"))) {
       return webDir;
     }
     const altWebDir = resolve11(currentDir, "..", "..", "web");
-    if (existsSync21(altWebDir) && existsSync21(join16(altWebDir, "package.json"))) {
+    if (existsSync20(altWebDir) && existsSync20(join15(altWebDir, "package.json"))) {
       return altWebDir;
     }
     return null;
@@ -15849,23 +15427,23 @@ async function findWebPort(preferredPort) {
   return { port: preferredPort, alreadyRunning: false };
 }
 function hasProductionBuild(webDir) {
-  const buildIdPath = join16(webDir, ".next", "BUILD_ID");
-  return existsSync21(buildIdPath);
+  const buildIdPath = join15(webDir, ".next", "BUILD_ID");
+  return existsSync20(buildIdPath);
 }
 function hasSourceFiles(webDir) {
-  const appDir = join16(webDir, "src", "app");
-  const pagesDir = join16(webDir, "src", "pages");
-  const rootAppDir = join16(webDir, "app");
-  const rootPagesDir = join16(webDir, "pages");
-  return existsSync21(appDir) || existsSync21(pagesDir) || existsSync21(rootAppDir) || existsSync21(rootPagesDir);
+  const appDir = join15(webDir, "src", "app");
+  const pagesDir = join15(webDir, "src", "pages");
+  const rootAppDir = join15(webDir, "app");
+  const rootPagesDir = join15(webDir, "pages");
+  return existsSync20(appDir) || existsSync20(pagesDir) || existsSync20(rootAppDir) || existsSync20(rootPagesDir);
 }
 function getStandaloneServerPath(webDir) {
   const possiblePaths2 = [
-    join16(webDir, ".next", "standalone", "server.js"),
-    join16(webDir, ".next", "standalone", "web", "server.js")
+    join15(webDir, ".next", "standalone", "server.js"),
+    join15(webDir, ".next", "standalone", "web", "server.js")
   ];
   for (const serverPath of possiblePaths2) {
-    if (existsSync21(serverPath)) {
+    if (existsSync20(serverPath)) {
       return serverPath;
     }
   }
@@ -15905,13 +15483,13 @@ async function startWebUI(apiPort, webPort = DEFAULT_WEB_PORT, quiet = false, pu
     if (!quiet) console.log(`  \u2713 Web UI already running at http://localhost:${actualPort}`);
     return { process: null, port: actualPort };
   }
-  const usePnpm = existsSync21(join16(webDir, "pnpm-lock.yaml"));
-  const useNpm = !usePnpm && existsSync21(join16(webDir, "package-lock.json"));
+  const usePnpm = existsSync20(join15(webDir, "pnpm-lock.yaml"));
+  const useNpm = !usePnpm && existsSync20(join15(webDir, "package-lock.json"));
   const pkgManager = usePnpm ? "pnpm" : useNpm ? "npm" : "npx";
   const { NODE_OPTIONS, TSX_TSCONFIG_PATH, ...cleanEnv } = process.env;
   const apiUrl = publicUrl || `http://127.0.0.1:${apiPort}`;
   const runtimeConfig = { apiBaseUrl: apiUrl };
-  const runtimeConfigPath = join16(webDir, "runtime-config.json");
+  const runtimeConfigPath = join15(webDir, "runtime-config.json");
   try {
     writeFileSync6(runtimeConfigPath, JSON.stringify(runtimeConfig, null, 2));
     if (!quiet) console.log(`  \u{1F4DD} Runtime config written to ${runtimeConfigPath}`);
@@ -16126,8 +15704,8 @@ async function startServer(options = {}) {
   if (options.workingDirectory) {
     config.resolvedWorkingDirectory = options.workingDirectory;
   }
-  if (!existsSync21(config.resolvedWorkingDirectory)) {
-    mkdirSync10(config.resolvedWorkingDirectory, { recursive: true });
+  if (!existsSync20(config.resolvedWorkingDirectory)) {
+    mkdirSync9(config.resolvedWorkingDirectory, { recursive: true });
     if (!options.quiet) console.log(`\u{1F4C1} Created agent workspace: ${config.resolvedWorkingDirectory}`);
   }
   if (!config.resolvedRemoteServer.url) {
@@ -16168,13 +15746,15 @@ async function startServer(options = {}) {
     if (!options.quiet) console.warn(`[scheduler] start skipped: ${err.message}`);
   }
   const port = options.port || config.server.port;
-  const host = options.host || config.server.host || "0.0.0.0";
+  const envHost = process.env.SPARKECODER_API_HOST || process.env.SPARKECODER_HOST;
+  const host = envHost || options.host || config.server.host || "0.0.0.0";
+  const hostSource = envHost ? process.env.SPARKECODER_API_HOST ? "env SPARKECODER_API_HOST" : "env SPARKECODER_HOST" : options.host ? "--host flag" : config.server.host ? "config.server.host" : "default";
   const publicUrl = options.publicUrl || config.server.publicUrl;
   const app = await createApp({ quiet: options.quiet });
   if (!options.quiet) {
     console.log(`
 \u{1F680} SparkECoder API Server`);
-    console.log(`   \u2192 Running at http://${host}:${port}`);
+    console.log(`   \u2192 Binding to ${host}:${port} (source: ${hostSource})`);
     if (publicUrl) {
       console.log(`   \u2192 Public URL: ${publicUrl}`);
     }
@@ -16183,10 +15763,22 @@ async function startServer(options = {}) {
     console.log(`   \u2192 OpenAPI spec: http://${host}:${port}/openapi.json
 `);
   }
+  if (host === "127.0.0.1" || host === "localhost") {
+    console.log(`[sparkecoder] \u26A0 API bound to ${host} only \u2014 not reachable from outside the machine.`);
+    console.log(`[sparkecoder]   For tunnels/reverse proxies (Modal/Fly/Docker), set --host 0.0.0.0 or SPARKECODER_API_HOST=0.0.0.0.`);
+  }
   serverInstance = serve({
     fetch: app.fetch,
     port,
     hostname: host
+  }, (info) => {
+    const actual = `${info.address}:${info.port}`;
+    const requested = `${host}:${port}`;
+    if (info.address === "127.0.0.1" && host !== "127.0.0.1" && host !== "localhost") {
+      console.warn(`[sparkecoder] \u2717 API listener bound to ${actual} but ${requested} was requested. External requests will be refused.`);
+    } else {
+      console.log(`[sparkecoder] \u2713 API listening on ${actual}`);
+    }
   });
   let webPort;
   let webStarted;
@@ -16671,18 +16263,18 @@ function generateOpenAPISpec() {
 init_config();
 init_semantic();
 init_db();
-import { mkdirSync as mkdirSync11, writeFileSync as writeFileSync7, readFileSync as readFileSync11, existsSync as existsSync22, statSync as statSync3 } from "fs";
-import { resolve as resolve12, join as join17 } from "path";
+import { mkdirSync as mkdirSync10, writeFileSync as writeFileSync7, readFileSync as readFileSync10, existsSync as existsSync21, statSync as statSync3 } from "fs";
+import { resolve as resolve12, join as join16 } from "path";
 function getCliVersion() {
   const here = dirname9(fileURLToPath5(import.meta.url));
   const candidates = [
-    join17(here, "..", "package.json"),
-    join17(here, "..", "..", "package.json"),
-    join17(process.cwd(), "package.json")
+    join16(here, "..", "package.json"),
+    join16(here, "..", "..", "package.json"),
+    join16(process.cwd(), "package.json")
   ];
   for (const p of candidates) {
     try {
-      const pkg = JSON.parse(readFileSync11(p, "utf8"));
+      const pkg = JSON.parse(readFileSync10(p, "utf8"));
       if (pkg.name === "sparkecoder" && pkg.version) return pkg.version;
     } catch {
     }
@@ -17251,20 +16843,10 @@ Unexpected error: ${outerError.message}`));
   }
 }
 var program = new Command();
-program.name("sparkecoder").description("AI coding agent - just type sparkecoder to start chatting").version(getCliVersion()).option("-s, --session <id>", "Resume an existing session").option("-n, --name <name>", "Name for the new session").option("-m, --model <model>", "Model to use").option("-w, --working-dir <path>", "Working directory").option("-c, --config <path>", "Path to config file").option("-p, --port <port>", "Server port", "3141").option("-H, --host <host>", "Server host", "127.0.0.1").option("--no-auto-start", "Do not auto-start server if not running").option("--web-port <port>", "Web UI port", "6969").option("--no-web", "Do not start web UI when auto-starting server").option("--public-url <url>", "Public URL for web UI to connect to API (for Docker/remote access)").option("-v, --verbose", "Enable verbose logging for web server").option("--dangerously-skip-approvals", "Auto-approve all tool calls (no confirmation prompts)").option("--enable-computer-use", "Enable the Anthropic computer use tool for all new sessions by default (macOS only)").action(async (options) => {
-  if (options.enableComputerUse) {
-    process.env.SPARKECODER_COMPUTER_USE = "1";
-    console.log(chalk.cyan("\u2192 Computer use enabled by default for new sessions."));
-  }
+program.name("sparkecoder").description("AI coding agent - just type sparkecoder to start chatting").version(getCliVersion()).option("-s, --session <id>", "Resume an existing session").option("-n, --name <name>", "Name for the new session").option("-m, --model <model>", "Model to use").option("-w, --working-dir <path>", "Working directory").option("-c, --config <path>", "Path to config file").option("-p, --port <port>", "Server port", "3141").option("-H, --host <host>", "Server host", "127.0.0.1").option("--no-auto-start", "Do not auto-start server if not running").option("--web-port <port>", "Web UI port", "6969").option("--no-web", "Do not start web UI when auto-starting server").option("--public-url <url>", "Public URL for web UI to connect to API (for Docker/remote access)").option("-v, --verbose", "Enable verbose logging for web server").option("--dangerously-skip-approvals", "Auto-approve all tool calls (no confirmation prompts)").action(async (options) => {
   await runChat(options);
 });
-program.command("server").description("Start the SparkECoder server (API + Web UI)").option("-p, --port <port>", "API server port", "3141").option("-h, --host <host>", "Server host", "127.0.0.1").option("-c, --config <path>", "Path to config file").option("-w, --working-dir <path>", "Working directory").option("--web-port <port>", "Web UI port", "6969").option("--no-web", "Do not start web UI").option("--public-url <url>", "Public URL for web UI to connect to API (for Docker/remote access)").option("-v, --verbose", "Enable verbose logging for web server").option("--enable-computer-use", "Enable the Anthropic computer use tool for all new sessions by default (macOS only)").option("--setup-secret <secret>", "Setup secret (or short-lived JWT) used for /auth/register and /tunnels when the remote server has SETUP_SECRET configured. Equivalent to setting SPARKECODER_SETUP_SECRET env.").action(async (options) => {
-  const globalOpts = program.opts();
-  const enableCU = options.enableComputerUse || globalOpts.enableComputerUse;
-  if (enableCU) {
-    process.env.SPARKECODER_COMPUTER_USE = "1";
-    console.log(chalk.cyan("\u2192 Computer use enabled by default for new sessions."));
-  }
+program.command("server").description("Start the SparkECoder server (API + Web UI)").option("-p, --port <port>", "API server port", "3141").option("-h, --host <host>", "Server bind address (use 127.0.0.1 to restrict to loopback). Overridable via SPARKECODER_API_HOST / SPARKECODER_HOST env.", "0.0.0.0").option("-c, --config <path>", "Path to config file").option("-w, --working-dir <path>", "Working directory").option("--web-port <port>", "Web UI port", "6969").option("--no-web", "Do not start web UI").option("--public-url <url>", "Public URL for web UI to connect to API (for Docker/remote access)").option("-v, --verbose", "Enable verbose logging for web server").option("--setup-secret <secret>", "Setup secret (or short-lived JWT) used for /auth/register and /tunnels when the remote server has SETUP_SECRET configured. Equivalent to setting SPARKECODER_SETUP_SECRET env.").action(async (options) => {
   if (options.setupSecret) {
     process.env.SPARKECODER_SETUP_SECRET = options.setupSecret;
     if (!process.env.SPARKECODER_TUNNEL_SECRET) {
@@ -17307,13 +16889,7 @@ program.command("server").description("Start the SparkECoder server (API + Web U
     process.exit(1);
   }
 });
-program.command("chat").description("Start an interactive chat session").option("-s, --session <id>", "Resume an existing session").option("-n, --name <name>", "Name for the new session").option("-m, --model <model>", "Model to use").option("-w, --working-dir <path>", "Working directory").option("-c, --config <path>", "Path to config file").option("-p, --port <port>", "Server port", "3141").option("-H, --host <host>", "Server host", "127.0.0.1").option("--no-auto-start", "Do not auto-start server if not running").option("--web-port <port>", "Web UI port", "6969").option("--no-web", "Do not start web UI when auto-starting server").option("--public-url <url>", "Public URL for web UI to connect to API (for Docker/remote access)").option("-v, --verbose", "Enable verbose logging for web server").option("--dangerously-skip-approvals", "Auto-approve all tool calls (no confirmation prompts)").option("--enable-computer-use", "Enable the Anthropic computer use tool for all new sessions by default (macOS only)").action(async (options) => {
-  const globalOpts = program.opts();
-  const enableCU = options.enableComputerUse || globalOpts.enableComputerUse;
-  if (enableCU) {
-    process.env.SPARKECODER_COMPUTER_USE = "1";
-    console.log(chalk.cyan("\u2192 Computer use enabled by default for new sessions."));
-  }
+program.command("chat").description("Start an interactive chat session").option("-s, --session <id>", "Resume an existing session").option("-n, --name <name>", "Name for the new session").option("-m, --model <model>", "Model to use").option("-w, --working-dir <path>", "Working directory").option("-c, --config <path>", "Path to config file").option("-p, --port <port>", "Server port", "3141").option("-H, --host <host>", "Server host", "127.0.0.1").option("--no-auto-start", "Do not auto-start server if not running").option("--web-port <port>", "Web UI port", "6969").option("--no-web", "Do not start web UI when auto-starting server").option("--public-url <url>", "Public URL for web UI to connect to API (for Docker/remote access)").option("-v, --verbose", "Enable verbose logging for web server").option("--dangerously-skip-approvals", "Auto-approve all tool calls (no confirmation prompts)").action(async (options) => {
   await runChat(options);
 });
 program.command("task").description("Run an autonomous task that completes without human interaction").requiredOption("--prompt <prompt>", "Task prompt describing what to do").requiredOption("--schema <schema>", "JSON Schema for the output (file path or inline JSON string)").option("--webhook <url>", "Webhook URL to receive task events").option("-m, --model <model>", "Model to use").option("-w, --working-dir <path>", "Working directory").option("-n, --name <name>", "Name for the task").option("--max-iterations <n>", "Maximum agent loop iterations", "50").option("-p, --port <port>", "Server port", "3141").option("-H, --host <host>", "Server host", "127.0.0.1").option("-c, --config <path>", "Path to config file").option("--no-auto-start", "Do not auto-start server if not running").option("--parent-task <id>", "Continue from a previous task (inherits its full conversation context)").option("--wait", "Block and poll until task completes").option("-v, --verbose", "Enable verbose logging").action(async (options) => {
@@ -17345,8 +16921,8 @@ program.command("task").description("Run an autonomous task that completes witho
   let outputSchema;
   try {
     const schemaStr = options.schema;
-    if (existsSync22(schemaStr)) {
-      outputSchema = JSON.parse(readFileSync11(schemaStr, "utf-8"));
+    if (existsSync21(schemaStr)) {
+      outputSchema = JSON.parse(readFileSync10(schemaStr, "utf-8"));
     } else {
       outputSchema = JSON.parse(schemaStr);
     }
@@ -17413,13 +16989,13 @@ program.command("init").description("Create a sparkecoder.config.json file").opt
   let configLocation;
   if (options.global) {
     const appDataDir = ensureAppDataDirectory();
-    configPath = join17(appDataDir, "sparkecoder.config.json");
+    configPath = join16(appDataDir, "sparkecoder.config.json");
     configLocation = "global";
   } else {
     configPath = resolve12(process.cwd(), "sparkecoder.config.json");
     configLocation = "local";
   }
-  if (existsSync22(configPath) && !options.force) {
+  if (existsSync21(configPath) && !options.force) {
     console.log(chalk.yellow("Config file already exists. Use --force to overwrite."));
     console.log(chalk.dim(`  ${configPath}`));
     return;
@@ -17444,11 +17020,11 @@ program.command("slack-setup").description("Interactively configure Slack integr
       console.error(chalk.red("Both bot token and signing secret are required."));
       process.exit(1);
     }
-    const configPath = options.global ? join17(ensureAppDataDirectory(), "sparkecoder.config.json") : resolve12(process.cwd(), "sparkecoder.config.json");
+    const configPath = options.global ? join16(ensureAppDataDirectory(), "sparkecoder.config.json") : resolve12(process.cwd(), "sparkecoder.config.json");
     let existing = {};
-    if (existsSync22(configPath)) {
+    if (existsSync21(configPath)) {
       try {
-        existing = JSON.parse(readFileSync11(configPath, "utf-8"));
+        existing = JSON.parse(readFileSync10(configPath, "utf-8"));
       } catch {
       }
     } else {
@@ -17712,9 +17288,9 @@ program.command("cloudflared-setup").description("Auto-detect cloudflared + set
     }
     const verOut = run("cloudflared", ["--version"]).stdout?.toString().split("\n")[0] || "installed";
     console.log(chalk.green("\u2713"), "cloudflared:", chalk.dim(verOut));
-    const cfDir = join17(homedir2(), ".cloudflared");
-    const certPath = join17(cfDir, "cert.pem");
-    if (!existsSync22(certPath)) {
+    const cfDir = join16(homedir2(), ".cloudflared");
+    const certPath = join16(cfDir, "cert.pem");
+    if (!existsSync21(certPath)) {
       console.log(chalk.yellow("No Cloudflare login cert found."));
       if (await confirm("Run `cloudflared tunnel login` now (opens a browser)?", true)) {
         run("cloudflared", ["tunnel", "login"], { inheritIO: true, check: true });
@@ -17758,8 +17334,8 @@ program.command("cloudflared-setup").description("Auto-detect cloudflared + set
         return;
       }
     }
-    const credsFile = tunnel.credentials_file || join17(cfDir, `${tunnel.id}.json`);
-    if (!existsSync22(credsFile)) {
+    const credsFile = tunnel.credentials_file || join16(cfDir, `${tunnel.id}.json`);
+    if (!existsSync21(credsFile)) {
       console.log(chalk.yellow(`Credentials file not found at ${credsFile}. The tunnel may still work via cert.pem.`));
     }
     let hostname = options.hostname;
@@ -17782,7 +17358,7 @@ program.command("cloudflared-setup").description("Auto-detect cloudflared + set
         console.log(chalk.yellow("DNS route warning:"), err.trim().split("\n").slice(-2).join(" "));
       }
     }
-    const configPath = join17(cfDir, "config.yml");
+    const configPath = join16(cfDir, "config.yml");
     const configBody = `tunnel: ${tunnel.id}
 credentials-file: ${credsFile}
 ingress:
@@ -17793,8 +17369,8 @@ ingress:
   - service: http_status:404
 `;
     let wroteConfig = false;
-    if (existsSync22(configPath)) {
-      const existing = readFileSync11(configPath, "utf8");
+    if (existsSync21(configPath)) {
+      const existing = readFileSync10(configPath, "utf8");
       if (existing.trim() === configBody.trim()) {
         console.log(chalk.green("\u2713"), `config.yml already up to date: ${configPath}`);
         wroteConfig = true;
@@ -18168,18 +17744,27 @@ ${providerName} API Key:
     process.exit(1);
   }
 });
-program.command("check-permissions").description("Check macOS permissions required for the computer use tool (Accessibility + Screen Recording)").action(async () => {
+function formatDisplaySize(size) {
+  const points = `${size.width}\xD7${size.height} points`;
+  const px = size.pixelWidth && size.pixelHeight && (size.pixelWidth !== size.width || size.pixelHeight !== size.height) ? ` (${size.pixelWidth}\xD7${size.pixelHeight} pixels, Retina)` : "";
+  const name = size.displayName ? `${size.displayName} \u2014 ` : "";
+  return `${name}${points}${px}`;
+}
+program.command("check-permissions").description("Check macOS prerequisites for desktop automation (cliclick + Accessibility + Screen Recording)").action(async () => {
   if (process.platform !== "darwin") {
-    console.log(chalk.yellow(`Computer use is only supported on macOS. Current platform: ${process.platform}`));
+    console.log(chalk.yellow(`Desktop automation prerequisites only apply on macOS. Current platform: ${process.platform}`));
     process.exit(0);
   }
   const {
     isCliclickInstalled: isCliclickInstalled2,
     hasAccessibilityPermissions: hasAccessibilityPermissions2,
     hasScreenRecordingPermissions: hasScreenRecordingPermissions2,
-    detectScreenSize: detectScreenSize2
-  } = await Promise.resolve().then(() => (init_computer_use(), computer_use_exports));
-  console.log(chalk.bold("\nComputer use prerequisites:\n"));
+    detectScreenSize: detectScreenSize2,
+    getResponsibleAppName: getResponsibleAppName2
+  } = await Promise.resolve().then(() => (init_desktop_permissions(), desktop_permissions_exports));
+  console.log(chalk.bold("\nDesktop-automation prerequisites:\n"));
+  const responsibleApp = await getResponsibleAppName2();
+  console.log(`  ${chalk.dim("\u2022")} Responsible process (the app TCC tracks): ${chalk.cyan(responsibleApp)}`);
   const cliclick = await isCliclickInstalled2();
   if (cliclick) {
     console.log(`  ${chalk.green("\u2713")} cliclick installed`);
@@ -18189,25 +17774,28 @@ program.command("check-permissions").description("Check macOS permissions requir
   }
   const acc = cliclick ? await hasAccessibilityPermissions2() : { ok: false, error: "cliclick not installed" };
   if (acc.ok) {
-    console.log(`  ${chalk.green("\u2713")} Accessibility permissions granted`);
+    console.log(`  ${chalk.green("\u2713")} Accessibility permission granted (for ${responsibleApp})`);
   } else {
-    console.log(`  ${chalk.red("\u2717")} Accessibility permissions missing`);
-    console.log(`    ${chalk.dim(acc.error?.split("\n")[0] || "")}`);
+    console.log(`  ${chalk.red("\u2717")} Accessibility permission missing`);
+    if (acc.error) console.log(`    ${chalk.dim(acc.error.split("\n")[0])}`);
   }
   const screen = await hasScreenRecordingPermissions2();
   if (screen) {
-    console.log(`  ${chalk.green("\u2713")} Screen Recording permissions granted`);
+    console.log(`  ${chalk.green("\u2713")} Screen Recording permission granted (for ${responsibleApp})`);
   } else {
-    console.log(`  ${chalk.red("\u2717")} Screen Recording permissions missing`);
+    console.log(`  ${chalk.red("\u2717")} Screen Recording permission missing`);
+    console.log(`    ${chalk.dim("macOS 15 (Sequoia) re-prompts weekly even when granted \u2014 dismiss the dialog and the API still returns true.")}`);
   }
   const size = await detectScreenSize2();
   if (size) {
-    console.log(`  ${chalk.dim("\u2022")} Detected display: ${size.width}x${size.height} points`);
+    console.log(`  ${chalk.dim("\u2022")} Main display: ${formatDisplaySize(size)}`);
+    console.log(`    ${chalk.dim("cliclick coordinates are POINTS, not pixels. (0,0) = top-left.")}`);
   }
   const allOk = cliclick && acc.ok && screen;
   console.log();
   if (allOk) {
-    console.log(chalk.green("All checks passed. The agent can use computer use."));
+    console.log(chalk.green("All checks passed. The agent can drive the desktop via cliclick/screencapture/osascript."));
+    console.log(chalk.dim("See the `desktop-automation` skill for recipes."));
   } else {
     console.log(chalk.yellow("Some prerequisites are missing."));
     console.log(chalk.dim("Run: sparkecoder request-permissions"));
@@ -18215,74 +17803,83 @@ program.command("check-permissions").description("Check macOS permissions requir
   console.log();
   process.exit(allOk ? 0 : 1);
 });
-program.command("request-permissions").description("Request macOS permissions for the computer use tool \u2014 triggers system prompts and opens System Settings").action(async () => {
+program.command("request-permissions").description("Open System Settings to the right panes so you can grant macOS desktop-automation permissions to the responsible app").action(async () => {
   if (process.platform !== "darwin") {
-    console.log(chalk.yellow(`Computer use is only supported on macOS. Current platform: ${process.platform}`));
+    console.log(chalk.yellow(`Desktop automation prerequisites only apply on macOS. Current platform: ${process.platform}`));
     process.exit(0);
   }
   const {
     isCliclickInstalled: isCliclickInstalled2,
     hasAccessibilityPermissions: hasAccessibilityPermissions2,
     hasScreenRecordingPermissions: hasScreenRecordingPermissions2,
-    requestAccessibilityPrompt: requestAccessibilityPrompt2,
-    requestScreenRecordingPrompt: requestScreenRecordingPrompt2,
     openSystemSettings: openSystemSettings2,
-    detectScreenSize: detectScreenSize2
-  } = await Promise.resolve().then(() => (init_computer_use(), computer_use_exports));
-  console.log(chalk.bold("\nRequesting computer use permissions...\n"));
+    detectScreenSize: detectScreenSize2,
+    getResponsibleAppName: getResponsibleAppName2
+  } = await Promise.resolve().then(() => (init_desktop_permissions(), desktop_permissions_exports));
+  console.log(chalk.bold("\nDesktop-automation setup\n"));
+  const responsibleApp = await getResponsibleAppName2();
+  console.log(`  ${chalk.dim("\u2022")} Permissions need to be granted to: ${chalk.cyan(responsibleApp)}`);
+  console.log(`    ${chalk.dim("Not to cliclick, screencapture, osascript, or node \u2014 macOS attributes")}`);
+  console.log(`    ${chalk.dim("TCC entries to the responsible (parent GUI) process.")}`);
+  console.log();
   if (!await isCliclickInstalled2()) {
     console.log(`  ${chalk.red("\u2717")} cliclick is not installed`);
     console.log(`    ${chalk.dim("Run: brew install cliclick")}`);
     console.log(`    ${chalk.dim("Then re-run: sparkecoder request-permissions")}`);
     console.log();
     process.exit(1);
+  } else {
+    console.log(`  ${chalk.green("\u2713")} cliclick installed`);
   }
   const acc = await hasAccessibilityPermissions2();
   const screen = await hasScreenRecordingPermissions2();
-  let needsRestart = false;
+  let needsAction = false;
   if (!acc.ok) {
-    console.log(`  ${chalk.yellow("\u26A0")} Accessibility permission missing \u2014 triggering prompt and opening System Settings...`);
-    await requestAccessibilityPrompt2();
+    console.log();
+    console.log(`  ${chalk.yellow("\u26A0")} Accessibility permission missing \u2014 opening System Settings...`);
     await openSystemSettings2("accessibility");
-    console.log(`    ${chalk.dim("1. In Privacy & Security \u2192 Accessibility, click +")}`);
-    console.log(`    ${chalk.dim("2. Add the application running the agent (Terminal, iTerm, your IDE, or `node`)")}`);
-    console.log(`    ${chalk.dim("3. Toggle the switch ON")}`);
-    needsRestart = true;
+    console.log(`    ${chalk.dim("1. In Privacy & Security \u2192 Accessibility, click the ")}+${chalk.dim(" button.")}`);
+    console.log(`    ${chalk.dim("2. Add ")}${chalk.cyan(responsibleApp)}${chalk.dim(".")}`);
+    console.log(`    ${chalk.dim("3. Make sure its toggle is ON.")}`);
+    needsAction = true;
   } else {
     console.log(`  ${chalk.green("\u2713")} Accessibility already granted`);
   }
   if (!screen) {
-    console.log(`  ${chalk.yellow("\u26A0")} Screen Recording permission missing \u2014 triggering prompt and opening System Settings...`);
-    await requestScreenRecordingPrompt2();
+    console.log();
+    console.log(`  ${chalk.yellow("\u26A0")} Screen Recording permission missing \u2014 opening System Settings...`);
     await openSystemSettings2("screen-recording");
-    console.log(`    ${chalk.dim("1. In Privacy & Security \u2192 Screen Recording, click +")}`);
-    console.log(`    ${chalk.dim("2. Add the application running the agent (Terminal, iTerm, your IDE, or `node`)")}`);
-    console.log(`    ${chalk.dim("3. Toggle the switch ON")}`);
-    needsRestart = true;
+    console.log(`    ${chalk.dim("1. In Privacy & Security \u2192 Screen & System Audio Recording, click the ")}+${chalk.dim(" button.")}`);
+    console.log(`    ${chalk.dim("2. Add ")}${chalk.cyan(responsibleApp)}${chalk.dim(".")}`);
+    console.log(`    ${chalk.dim("3. Make sure its toggle is ON.")}`);
+    console.log(`    ${chalk.dim('Note: macOS 15 (Sequoia) will prompt weekly to re-confirm \u2014 just click "Allow".')}`);
+    needsAction = true;
   } else {
     console.log(`  ${chalk.green("\u2713")} Screen Recording already granted`);
   }
   const size = await detectScreenSize2();
   if (size) {
-    console.log(`  ${chalk.dim("\u2022")} Detected display: ${size.width}x${size.height} points`);
+    console.log();
+    console.log(`  ${chalk.dim("\u2022")} Main display: ${formatDisplaySize(size)}`);
   }
   console.log();
-  if (needsRestart) {
-    console.log(chalk.yellow("After granting permissions, RESTART the agent process for the new TCC entries to take effect."));
-    console.log(chalk.dim("Then run: sparkecoder check-permissions"));
+  if (needsAction) {
+    console.log(chalk.yellow(`After toggling on ${responsibleApp}, RESTART it (and the agent process inside it) so the new TCC entry takes effect.`));
+    console.log(chalk.dim("Then re-run: sparkecoder check-permissions"));
   } else {
-    console.log(chalk.green("All permissions are already granted. Computer use is ready."));
+    console.log(chalk.green("All permissions are already granted. Desktop automation is ready."));
+    console.log(chalk.dim("See the `desktop-automation` skill for recipes."));
   }
   console.log();
 });
 {
   let stateFilePath = function() {
-    return join17(ensureAppDataDirectory(), "recordings.json");
+    return join16(ensureAppDataDirectory(), "recordings.json");
   }, readState = function() {
     const p = stateFilePath();
-    if (!existsSync22(p)) return [];
+    if (!existsSync21(p)) return [];
     try {
-      return JSON.parse(readFileSync11(p, "utf-8"));
+      return JSON.parse(readFileSync10(p, "utf-8"));
     } catch {
       return [];
     }
@@ -18302,16 +17899,16 @@ program.command("request-permissions").description("Request macOS permissions fo
   const record = program.command("record").description("Start/stop screen recordings");
   record.command("start").description("Start a screen recording (returns id, path, pid as JSON)").option("--name <slug>", "Optional human-readable label for the recording").option("--dir <path>", "Output directory (default: ~/recordings)").action(async (opts) => {
     const { homedir: homedir2, platform: osPlatform } = await import("os");
-    const outDir = opts.dir ? resolve12(opts.dir.replace(/^~/, homedir2())) : join17(homedir2(), "recordings");
-    mkdirSync11(outDir, { recursive: true });
+    const outDir = opts.dir ? resolve12(opts.dir.replace(/^~/, homedir2())) : join16(homedir2(), "recordings");
+    mkdirSync10(outDir, { recursive: true });
     const id = `rec-${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 6)}`;
     const ext = osPlatform() === "darwin" ? "mov" : "mp4";
     const filename = `${id}${opts.name ? `-${String(opts.name).replace(/[^a-z0-9-]+/gi, "-").toLowerCase()}` : ""}.${ext}`;
-    const path = join17(outDir, filename);
+    const path = join16(outDir, filename);
     let cmd;
     let args;
     if (osPlatform() === "darwin") {
-      cmd = existsSync22("/usr/sbin/screencapture") ? "/usr/sbin/screencapture" : "screencapture";
+      cmd = existsSync21("/usr/sbin/screencapture") ? "/usr/sbin/screencapture" : "screencapture";
       args = ["-v", "-C", "-k", path];
     } else if (osPlatform() === "linux") {
       const display = process.env.DISPLAY || ":0.0";
@@ -18414,7 +18011,7 @@ program.command("request-permissions").description("Request macOS permissions fo
       }
     }
     writeState(rows.filter((r) => r.id !== id));
-    const fileExists = existsSync22(row.path);
+    const fileExists = existsSync21(row.path);
     const sizeMb = fileExists ? Math.round(statSync3(row.path).size / (1024 * 1024) * 10) / 10 : 0;
     console.log(JSON.stringify({
       id,
@@ -18449,7 +18046,7 @@ program.command("request-permissions").description("Request macOS permissions fo
           }
         }
       }
-      stopped.push({ id: r.id, path: r.path, ok: existsSync22(r.path) });
+      stopped.push({ id: r.id, path: r.path, ok: existsSync21(r.path) });
     }
     writeState([]);
     console.log(JSON.stringify({ stopped }));