squidclaw 3.0.8 → 3.0.10

package/dist/{agents-6aZ5MtwI.js → agents-D1Kh-fk3.js}

@@ -17,7 +17,7 @@ import { a as pruneAgentConfig, i as loadAgentIdentity, n as buildAgentSummaries
 import { r as setupChannels } from "./onboard-channels-Dt3KBZ1w.js";
 import { n as logConfigUpdated } from "./logging-ZAeFsd9K.js";
 import { n as promptAuthChoiceGrouped } from "./auth-choice-prompt-4mupmvzh.js";
-import { i as applyAuthChoice, r as warnIfModelConfigLooksOff } from "./auth-choice-BoDJ6TOl.js";
+import { i as applyAuthChoice, r as warnIfModelConfigLooksOff } from "./auth-choice-DLlZ8SJr.js";
 import path from "node:path";
 import fs from "node:fs/promises";
 

package/dist/{audio-preflight-BTYxAJjy.js → audio-preflight-BKgdc7dS.js}

@@ -11,8 +11,8 @@ import "./plugins-DXkm70nK.js";
 import "./accounts-CkF7YwoF.js";
 import "./accounts-DbloMfwT.js";
 import "./image-ops-CdgypS_g.js";
-import "./pi-embedded-helpers-CmLnmKlb.js";
-import "./chrome-pBkBuWci.js";
+import "./pi-embedded-helpers-Bse_QhEf.js";
+import "./chrome-CjxCwFA9.js";
 import "./frontmatter-Cq1TcIQ2.js";
 import "./skills-CTV78w4q.js";
 import "./path-alias-guards-DORgbZ1w.js";
@@ -24,8 +24,8 @@ import "./store-B89Hj8Ub.js";
 import "./accounts-CK_sHUyT.js";
 import "./paths-DSd911Oe.js";
 import "./tool-images-8BKrL7Bn.js";
-import "./image-j_UomzVG.js";
-import { g as isAudioAttachment, i as normalizeMediaAttachments, o as resolveMediaAttachmentLocalRoots, t as runAudioTranscription } from "./audio-transcription-runner-DBkDgluo.js";
+import "./image-C-C7hQ26.js";
+import { g as isAudioAttachment, i as normalizeMediaAttachments, o as resolveMediaAttachmentLocalRoots, t as runAudioTranscription } from "./audio-transcription-runner-BnbdYMDl.js";
 import "./fetch-BLS7EMnx.js";
 import "./fetch-guard-D0fXNJls.js";
 import "./api-key-rotation-BHFJiYbw.js";

package/dist/{audio-transcription-runner-DBkDgluo.js → audio-transcription-runner-BnbdYMDl.js}

@@ -4,7 +4,7 @@ import { _ as runExec } from "./workspace-kVMIaBrV.js";
 import { M as resolveApiKeyForProvider, X as loadConfig, at as DEFAULT_IMESSAGE_ATTACHMENT_ROOTS, c as normalizeProviderId, ct as resolveIMessageAttachmentRoots, g as normalizeGoogleModelId, ir as resolveSquidClawAgentDir, j as requireApiKey, ot as isInboundPathAllowed, st as mergeInboundPathRoots } from "./model-selection-ag9BmVct.js";
 import { _ as normalizeChatType } from "./plugins-DXkm70nK.js";
 import { E as kindFromMime, S as getFileExtension, b as detectMime, w as isAudioFileName } from "./image-ops-CdgypS_g.js";
-import { t as describeImageWithModel, w as ensureSquidClawModelsJson } from "./image-j_UomzVG.js";
+import { t as describeImageWithModel, w as ensureSquidClawModelsJson } from "./image-C-C7hQ26.js";
 import { a as getDefaultMediaLocalRoots, n as fetchRemoteMedia, t as MediaFetchError } from "./fetch-BLS7EMnx.js";
 import { n as fetchWithTimeout } from "./fetch-timeout-Wgx3OXYj.js";
 import { t as fetchWithSsrFGuard } from "./fetch-guard-D0fXNJls.js";

package/dist/{auth-choice-BoDJ6TOl.js → auth-choice-DLlZ8SJr.js}

@@ -9,7 +9,7 @@ import { a as normalizeSecretInputModeInput, c as resolveSecretInputModeForEnvSe
 import { $ as ZAI_DEFAULT_MODEL_REF, A as applyTogetherConfig, B as applyLitellmConfig, C as applyMoonshotProviderConfigCn, Ct as writeOAuthCredentials, D as applyQianfanProviderConfig, Dt as QIANFAN_DEFAULT_MODEL_REF, E as applyQianfanConfig, Et as MOONSHOT_DEFAULT_MODEL_REF, F as applyXaiProviderConfig, G as applyVercelAiGatewayProviderConfig, H as applyCloudflareAiGatewayConfig, I as applyXiaomiConfig, J as LITELLM_DEFAULT_MODEL_REF, K as applyAgentDefaultModelPrimary, L as applyXiaomiProviderConfig, M as applyVeniceConfig, N as applyVeniceProviderConfig, O as applySyntheticConfig, Ot as XAI_DEFAULT_MODEL_REF, P as applyXaiConfig, Q as XIAOMI_DEFAULT_MODEL_REF, R as applyZaiConfig, S as applyMoonshotProviderConfig, St as setZaiApiKey, T as applyOpenrouterProviderConfig, Tt as MISTRAL_DEFAULT_MODEL_REF, U as applyCloudflareAiGatewayProviderConfig, V as applyLitellmProviderConfig, W as applyVercelAiGatewayConfig, X as TOGETHER_DEFAULT_MODEL_REF, Y as OPENROUTER_DEFAULT_MODEL_REF, Z as VERCEL_AI_GATEWAY_DEFAULT_MODEL_REF, _ as applyKimiCodeProviderConfig, _t as setVeniceApiKey, a as applyMinimaxApiConfig, at as setKilocodeApiKey, b as applyMoonshotConfig, bt as setXaiApiKey, c as applyMinimaxApiProviderConfigCn, ct as setMinimaxApiKey, d as applyAuthProfileConfig, dt as setOpenaiApiKey, et as setAnthropicApiKey, ft as setOpencodeZenApiKey, g as applyKimiCodeConfig, gt as setTogetherApiKey, h as applyKilocodeProviderConfig, ht as setSyntheticApiKey, i as applyOpencodeZenProviderConfig, it as setHuggingfaceApiKey, j as applyTogetherProviderConfig, k as applySyntheticProviderConfig, l as applyMinimaxConfig, lt as setMistralApiKey, m as applyKilocodeConfig, mt as setQianfanApiKey, n as validateAnthropicSetupToken, nt as setCloudflareAiGatewayConfig, o as applyMinimaxApiConfigCn, ot as setKimiCodingApiKey, p as applyHuggingfaceProviderConfig, pt as setOpenrouterApiKey, q as HUGGINGFACE_DEFAULT_MODEL_REF, r as applyOpencodeZenConfig, rt as setGeminiApiKey, s as applyMinimaxApiProviderConfig, st as setLitellmApiKey, t as buildTokenProfileId, tt as setByteplusApiKey, u as applyMinimaxProviderConfig, ut as setMoonshotApiKey, v as applyMistralConfig, vt as setVercelAiGatewayApiKey, w as applyOpenrouterConfig, wt as KIMI_CODING_MODEL_REF, x as applyMoonshotConfigCn, xt as setXiaomiApiKey, y as applyMistralProviderConfig, yt as setVolcengineApiKey, z as applyZaiProviderConfig } from "./auth-token-D8eHvwMb.js";
 import { a as createVpsAwareOAuthHandlers, c as githubCopilotLoginCommand, i as resolveProviderMatch, n as mergeConfigPatch, o as isRemoteEnvironment, r as pickAuthMethod, s as resolvePluginProviders, t as applyDefaultModel } from "./provider-auth-helpers-HUTJPJzR.js";
 import { a as GOOGLE_GEMINI_DEFAULT_MODEL, i as detectZaiEndpoint, n as applyOpenAIConfig, o as applyGoogleGeminiModelDefault, r as applyOpenAIProviderConfig, t as OPENAI_DEFAULT_MODEL } from "./openai-model-default-BYZDBOLH.js";
-import { c as OPENAI_CODEX_DEFAULT_MODEL, l as applyOpenAICodexModelDefault, r as applyPrimaryModel, s as promptAndConfigureVllm } from "./model-picker-MhyQtM_M.js";
+import { c as OPENAI_CODEX_DEFAULT_MODEL, l as applyOpenAICodexModelDefault, r as applyPrimaryModel, s as promptAndConfigureVllm } from "./model-picker-CeqG7aGB.js";
 import { r as runOpenAIOAuthTlsPreflight, t as formatOpenAIOAuthTlsPreflightFix } from "./oauth-tls-preflight-6-9iUInB.js";
 import { loginOpenAICodex } from "@mariozechner/pi-ai";
 import { randomBytes } from "node:crypto";

package/dist/{auth-choice-DYgXmh79.js → auth-choice-DqZroYac.js}

@@ -21,8 +21,8 @@ import "./issue-format-CJF4zrPW.js";
 import "./shared-DVCd_nv2.js";
 import { A as applyTogetherConfig, B as applyLitellmConfig, E as applyQianfanConfig, H as applyCloudflareAiGatewayConfig, I as applyXiaomiConfig, M as applyVeniceConfig, O as applySyntheticConfig, P as applyXaiConfig, R as applyZaiConfig, St as setZaiApiKey, W as applyVercelAiGatewayConfig, _t as setVeniceApiKey, a as applyMinimaxApiConfig, at as setKilocodeApiKey, b as applyMoonshotConfig, bt as setXaiApiKey, ct as setMinimaxApiKey, d as applyAuthProfileConfig, dt as setOpenaiApiKey, et as setAnthropicApiKey, f as applyHuggingfaceConfig, ft as setOpencodeZenApiKey, g as applyKimiCodeConfig, gt as setTogetherApiKey, ht as setSyntheticApiKey, it as setHuggingfaceApiKey, l as applyMinimaxConfig, lt as setMistralApiKey, m as applyKilocodeConfig, mt as setQianfanApiKey, n as validateAnthropicSetupToken, nt as setCloudflareAiGatewayConfig, o as applyMinimaxApiConfigCn, ot as setKimiCodingApiKey, pt as setOpenrouterApiKey, r as applyOpencodeZenConfig, rt as setGeminiApiKey, st as setLitellmApiKey, t as buildTokenProfileId, tt as setByteplusApiKey, ut as setMoonshotApiKey, v as applyMistralConfig, vt as setVercelAiGatewayApiKey, w as applyOpenrouterConfig, x as applyMoonshotConfigCn, xt as setXiaomiApiKey, yt as setVolcengineApiKey } from "./auth-token-Rzhjv-mo.js";
 import { i as detectZaiEndpoint, n as applyOpenAIConfig, o as applyGoogleGeminiModelDefault } from "./openai-model-default-BJvl-wjq.js";
-import { r as applyPrimaryModel } from "./model-picker-BMUukKtX.js";
-import { i as parseNonInteractiveCustomApiFlags, n as applyCustomApiConfig, o as resolveCustomProviderId, t as CustomApiError } from "./onboard-custom-xZqh5J3l.js";
+import { r as applyPrimaryModel } from "./model-picker-DVY4bpQj.js";
+import { i as parseNonInteractiveCustomApiFlags, n as applyCustomApiConfig, o as resolveCustomProviderId, t as CustomApiError } from "./onboard-custom-Cq4RYUaZ.js";
 
 //#region src/commands/onboard-non-interactive/api-keys.ts
 function parseEnvVarNameFromSourceLabel(source) {

package/dist/{auth-choice-CKWbxSjp.js → auth-choice-JF7Gy6QB.js}

@@ -21,8 +21,8 @@ import "./issue-format-CVVBG2XC.js";
 import "./shared-DIMaxrU0.js";
 import { A as applyTogetherConfig, B as applyLitellmConfig, E as applyQianfanConfig, H as applyCloudflareAiGatewayConfig, I as applyXiaomiConfig, M as applyVeniceConfig, O as applySyntheticConfig, P as applyXaiConfig, R as applyZaiConfig, St as setZaiApiKey, W as applyVercelAiGatewayConfig, _t as setVeniceApiKey, a as applyMinimaxApiConfig, at as setKilocodeApiKey, b as applyMoonshotConfig, bt as setXaiApiKey, ct as setMinimaxApiKey, d as applyAuthProfileConfig, dt as setOpenaiApiKey, et as setAnthropicApiKey, f as applyHuggingfaceConfig, ft as setOpencodeZenApiKey, g as applyKimiCodeConfig, gt as setTogetherApiKey, ht as setSyntheticApiKey, it as setHuggingfaceApiKey, l as applyMinimaxConfig, lt as setMistralApiKey, m as applyKilocodeConfig, mt as setQianfanApiKey, n as validateAnthropicSetupToken, nt as setCloudflareAiGatewayConfig, o as applyMinimaxApiConfigCn, ot as setKimiCodingApiKey, pt as setOpenrouterApiKey, r as applyOpencodeZenConfig, rt as setGeminiApiKey, st as setLitellmApiKey, t as buildTokenProfileId, tt as setByteplusApiKey, ut as setMoonshotApiKey, v as applyMistralConfig, vt as setVercelAiGatewayApiKey, w as applyOpenrouterConfig, x as applyMoonshotConfigCn, xt as setXiaomiApiKey, yt as setVolcengineApiKey } from "./auth-token-D8eHvwMb.js";
 import { i as detectZaiEndpoint, n as applyOpenAIConfig, o as applyGoogleGeminiModelDefault } from "./openai-model-default-BYZDBOLH.js";
-import { r as applyPrimaryModel } from "./model-picker-MhyQtM_M.js";
-import { i as parseNonInteractiveCustomApiFlags, n as applyCustomApiConfig, o as resolveCustomProviderId, t as CustomApiError } from "./onboard-custom-DRKG6mwB.js";
+import { r as applyPrimaryModel } from "./model-picker-CeqG7aGB.js";
+import { i as parseNonInteractiveCustomApiFlags, n as applyCustomApiConfig, o as resolveCustomProviderId, t as CustomApiError } from "./onboard-custom-DvQCIxyh.js";
 
 //#region src/commands/onboard-non-interactive/api-keys.ts
 function parseEnvVarNameFromSourceLabel(source) {

package/dist/{auth-choice-FjsBJLJF.js → auth-choice-Qh2aWSu3.js}

@@ -9,7 +9,7 @@ import { a as normalizeSecretInputModeInput, c as resolveSecretInputModeForEnvSe
 import { $ as ZAI_DEFAULT_MODEL_REF, A as applyTogetherConfig, B as applyLitellmConfig, C as applyMoonshotProviderConfigCn, Ct as writeOAuthCredentials, D as applyQianfanProviderConfig, Dt as QIANFAN_DEFAULT_MODEL_REF, E as applyQianfanConfig, Et as MOONSHOT_DEFAULT_MODEL_REF, F as applyXaiProviderConfig, G as applyVercelAiGatewayProviderConfig, H as applyCloudflareAiGatewayConfig, I as applyXiaomiConfig, J as LITELLM_DEFAULT_MODEL_REF, K as applyAgentDefaultModelPrimary, L as applyXiaomiProviderConfig, M as applyVeniceConfig, N as applyVeniceProviderConfig, O as applySyntheticConfig, Ot as XAI_DEFAULT_MODEL_REF, P as applyXaiConfig, Q as XIAOMI_DEFAULT_MODEL_REF, R as applyZaiConfig, S as applyMoonshotProviderConfig, St as setZaiApiKey, T as applyOpenrouterProviderConfig, Tt as MISTRAL_DEFAULT_MODEL_REF, U as applyCloudflareAiGatewayProviderConfig, V as applyLitellmProviderConfig, W as applyVercelAiGatewayConfig, X as TOGETHER_DEFAULT_MODEL_REF, Y as OPENROUTER_DEFAULT_MODEL_REF, Z as VERCEL_AI_GATEWAY_DEFAULT_MODEL_REF, _ as applyKimiCodeProviderConfig, _t as setVeniceApiKey, a as applyMinimaxApiConfig, at as setKilocodeApiKey, b as applyMoonshotConfig, bt as setXaiApiKey, c as applyMinimaxApiProviderConfigCn, ct as setMinimaxApiKey, d as applyAuthProfileConfig, dt as setOpenaiApiKey, et as setAnthropicApiKey, ft as setOpencodeZenApiKey, g as applyKimiCodeConfig, gt as setTogetherApiKey, h as applyKilocodeProviderConfig, ht as setSyntheticApiKey, i as applyOpencodeZenProviderConfig, it as setHuggingfaceApiKey, j as applyTogetherProviderConfig, k as applySyntheticProviderConfig, l as applyMinimaxConfig, lt as setMistralApiKey, m as applyKilocodeConfig, mt as setQianfanApiKey, n as validateAnthropicSetupToken, nt as setCloudflareAiGatewayConfig, o as applyMinimaxApiConfigCn, ot as setKimiCodingApiKey, p as applyHuggingfaceProviderConfig, pt as setOpenrouterApiKey, q as HUGGINGFACE_DEFAULT_MODEL_REF, r as applyOpencodeZenConfig, rt as setGeminiApiKey, s as applyMinimaxApiProviderConfig, st as setLitellmApiKey, t as buildTokenProfileId, tt as setByteplusApiKey, u as applyMinimaxProviderConfig, ut as setMoonshotApiKey, v as applyMistralConfig, vt as setVercelAiGatewayApiKey, w as applyOpenrouterConfig, wt as KIMI_CODING_MODEL_REF, x as applyMoonshotConfigCn, xt as setXiaomiApiKey, y as applyMistralProviderConfig, yt as setVolcengineApiKey, z as applyZaiProviderConfig } from "./auth-token-Rzhjv-mo.js";
 import { a as createVpsAwareOAuthHandlers, c as githubCopilotLoginCommand, i as resolveProviderMatch, n as mergeConfigPatch, o as isRemoteEnvironment, r as pickAuthMethod, s as resolvePluginProviders, t as applyDefaultModel } from "./provider-auth-helpers-BdoxZkJ5.js";
 import { a as GOOGLE_GEMINI_DEFAULT_MODEL, i as detectZaiEndpoint, n as applyOpenAIConfig, o as applyGoogleGeminiModelDefault, r as applyOpenAIProviderConfig, t as OPENAI_DEFAULT_MODEL } from "./openai-model-default-BJvl-wjq.js";
-import { c as OPENAI_CODEX_DEFAULT_MODEL, l as applyOpenAICodexModelDefault, r as applyPrimaryModel, s as promptAndConfigureVllm } from "./model-picker-BMUukKtX.js";
+import { c as OPENAI_CODEX_DEFAULT_MODEL, l as applyOpenAICodexModelDefault, r as applyPrimaryModel, s as promptAndConfigureVllm } from "./model-picker-DVY4bpQj.js";
 import { r as runOpenAIOAuthTlsPreflight, t as formatOpenAIOAuthTlsPreflightFix } from "./oauth-tls-preflight-CqqomOFQ.js";
 import { randomBytes } from "node:crypto";
 import { loginOpenAICodex } from "@mariozechner/pi-ai";

package/dist/build-info.json

@@ -1,5 +1,5 @@
 {
-  "version": "3.0.8",
-  "commit": "5f6a695c654a345bd78619462dd8adfd7eccecf5",
-  "builtAt": "2026-03-13T14:51:52.588Z"
+  "version": "3.0.10",
+  "commit": "9a0f7b2b47cc5b449df369a661a1f0b3934e5ee9",
+  "builtAt": "2026-03-13T17:38:54.488Z"
 }

package/dist/bundled/boot-md/handler.js

@@ -8,19 +8,19 @@ import "../../github-copilot-token-B5cPlwaz.js";
 import { a as isGatewayStartupEvent } from "../../legacy-names-aGJJuzM_.js";
 import "../../thinking-SdNGqtJE.js";
 import { n as SILENT_REPLY_TOKEN } from "../../tokens-DfbMVF9y.js";
-import { a as agentCommand, o as createDefaultDeps } from "../../pi-embedded-BP2UlUm_.js";
+import { a as agentCommand, o as createDefaultDeps } from "../../pi-embedded-CHzwPt6X.js";
 import "../../plugins-DXkm70nK.js";
 import "../../accounts-CkF7YwoF.js";
 import "../../send-Co5Bqwuo.js";
 import "../../send-DjL7KlMV.js";
-import "../../deliver-DBXe-ZmL.js";
+import "../../deliver-D-f6Wa3i.js";
 import "../../diagnostic-ySwZga6c.js";
 import "../../accounts-DbloMfwT.js";
 import "../../image-ops-CdgypS_g.js";
 import "../../send-bW7jDv8D.js";
 import "../../pi-model-discovery-DAzuqPoG.js";
-import { Dt as resolveMainSessionKey, J as updateSessionStore, Tt as resolveAgentMainSessionKey, W as loadSessionStore } from "../../pi-embedded-helpers-CmLnmKlb.js";
-import "../../chrome-pBkBuWci.js";
+import { Dt as resolveMainSessionKey, J as updateSessionStore, Tt as resolveAgentMainSessionKey, W as loadSessionStore } from "../../pi-embedded-helpers-Bse_QhEf.js";
+import "../../chrome-CjxCwFA9.js";
 import "../../frontmatter-Cq1TcIQ2.js";
 import "../../skills-CTV78w4q.js";
 import "../../path-alias-guards-DORgbZ1w.js";
@@ -32,8 +32,8 @@ import "../../store-B89Hj8Ub.js";
 import "../../accounts-CK_sHUyT.js";
 import { s as resolveStorePath } from "../../paths-DSd911Oe.js";
 import "../../tool-images-8BKrL7Bn.js";
-import "../../image-j_UomzVG.js";
-import "../../audio-transcription-runner-DBkDgluo.js";
+import "../../image-C-C7hQ26.js";
+import "../../audio-transcription-runner-BnbdYMDl.js";
 import "../../fetch-BLS7EMnx.js";
 import "../../fetch-guard-D0fXNJls.js";
 import "../../api-key-rotation-BHFJiYbw.js";

package/dist/bundled/session-memory/handler.js

@@ -8,19 +8,19 @@ import "../../github-copilot-token-B5cPlwaz.js";
 import "../../legacy-names-aGJJuzM_.js";
 import "../../thinking-SdNGqtJE.js";
 import "../../tokens-DfbMVF9y.js";
-import "../../pi-embedded-BP2UlUm_.js";
+import "../../pi-embedded-CHzwPt6X.js";
 import "../../plugins-DXkm70nK.js";
 import "../../accounts-CkF7YwoF.js";
 import "../../send-Co5Bqwuo.js";
 import "../../send-DjL7KlMV.js";
-import "../../deliver-DBXe-ZmL.js";
+import "../../deliver-D-f6Wa3i.js";
 import "../../diagnostic-ySwZga6c.js";
 import "../../accounts-DbloMfwT.js";
 import "../../image-ops-CdgypS_g.js";
 import "../../send-bW7jDv8D.js";
 import "../../pi-model-discovery-DAzuqPoG.js";
-import { dt as hasInterSessionUserProvenance } from "../../pi-embedded-helpers-CmLnmKlb.js";
-import "../../chrome-pBkBuWci.js";
+import { dt as hasInterSessionUserProvenance } from "../../pi-embedded-helpers-Bse_QhEf.js";
+import "../../chrome-CjxCwFA9.js";
 import "../../frontmatter-Cq1TcIQ2.js";
 import "../../skills-CTV78w4q.js";
 import "../../path-alias-guards-DORgbZ1w.js";
@@ -32,8 +32,8 @@ import "../../store-B89Hj8Ub.js";
 import "../../accounts-CK_sHUyT.js";
 import "../../paths-DSd911Oe.js";
 import "../../tool-images-8BKrL7Bn.js";
-import "../../image-j_UomzVG.js";
-import "../../audio-transcription-runner-DBkDgluo.js";
+import "../../image-C-C7hQ26.js";
+import "../../audio-transcription-runner-BnbdYMDl.js";
 import "../../fetch-BLS7EMnx.js";
 import "../../fetch-guard-D0fXNJls.js";
 import "../../api-key-rotation-BHFJiYbw.js";

package/dist/canvas-host/a2ui/.bundle.hash

@@ -1 +1 @@
-ebaf7497fd7876a628d11978310ce2136e0e7ec0d828b4caa42b868aa54b1e8c
+4d39ce0e25ac18c0e37c013a96c8c1a63ac8f5ec0ca5eaadcb84c38798688215

package/dist/{chrome-pBkBuWci.js → chrome-CjxCwFA9.js}

@@ -14,7 +14,7 @@ import { createHmac } from "node:crypto";
 import net from "node:net";
 import http, { createServer } from "node:http";
 import https from "node:https";
-import WebSocket, { WebSocketServer } from "ws";
+import WebSocket$1, { WebSocketServer } from "ws";
 import { Buffer as Buffer$1 } from "node:buffer";
 
 //#region src/browser/constants.ts
@@ -593,7 +593,7 @@ async function ensureChromeExtensionRelayServer(opts) {
 		let extensionWs = null;
 		const cdpClients = /* @__PURE__ */ new Set();
 		const connectedTargets = /* @__PURE__ */ new Map();
-		const extensionConnected = () => extensionWs?.readyState === WebSocket.OPEN;
+		const extensionConnected = () => extensionWs?.readyState === WebSocket$1.OPEN;
 		const hasConnectedTargets = () => connectedTargets.size > 0;
 		let extensionDisconnectCleanupTimer = null;
 		const extensionReconnectWaiters = /* @__PURE__ */ new Set();
@@ -645,7 +645,7 @@ async function ensureChromeExtensionRelayServer(opts) {
 		let nextExtensionId = 1;
 		const sendToExtension = async (payload) => {
 			const ws = extensionWs;
-			if (!ws || ws.readyState !== WebSocket.OPEN) throw new Error("Chrome extension not connected");
+			if (!ws || ws.readyState !== WebSocket$1.OPEN) throw new Error("Chrome extension not connected");
 			ws.send(JSON.stringify(payload));
 			return await new Promise((resolve, reject) => {
 				const timer = setTimeout(() => {
@@ -662,12 +662,12 @@ async function ensureChromeExtensionRelayServer(opts) {
 		const broadcastToCdpClients = (evt) => {
 			const msg = JSON.stringify(evt);
 			for (const ws of cdpClients) {
-				if (ws.readyState !== WebSocket.OPEN) continue;
+				if (ws.readyState !== WebSocket$1.OPEN) continue;
 				ws.send(msg);
 			}
 		};
 		const sendResponseToCdp = (ws, res) => {
-			if (ws.readyState !== WebSocket.OPEN) return;
+			if (ws.readyState !== WebSocket$1.OPEN) return;
 			ws.send(JSON.stringify(res));
 		};
 		const dropConnectedTargetSession = (sessionId) => {
@@ -921,7 +921,7 @@ async function ensureChromeExtensionRelayServer(opts) {
 					rejectUpgrade(socket, 401, "Unauthorized");
 					return;
 				}
-				if (extensionWs && extensionWs.readyState !== WebSocket.OPEN) {
+				if (extensionWs && extensionWs.readyState !== WebSocket$1.OPEN) {
 					try {
 						extensionWs.terminate();
 					} catch {}
@@ -954,7 +954,7 @@ async function ensureChromeExtensionRelayServer(opts) {
 			clearExtensionDisconnectCleanupTimer();
 			flushExtensionReconnectWaiters(true);
 			const ping = setInterval(() => {
-				if (ws.readyState !== WebSocket.OPEN) return;
+				if (ws.readyState !== WebSocket$1.OPEN) return;
 				ws.send(JSON.stringify({ method: "ping" }));
 			}, 5e3);
 			ws.on("message", (data) => {
@@ -1310,7 +1310,7 @@ function openCdpWebSocket(wsUrl, opts) {
 	const headers = getHeadersWithAuth(wsUrl, opts?.headers ?? {});
 	const handshakeTimeoutMs = typeof opts?.handshakeTimeoutMs === "number" && Number.isFinite(opts.handshakeTimeoutMs) ? Math.max(1, Math.floor(opts.handshakeTimeoutMs)) : CDP_WS_HANDSHAKE_TIMEOUT_MS;
 	const agent = getDirectAgentForCdp(wsUrl);
-	return new WebSocket(wsUrl, {
+	return new WebSocket$1(wsUrl, {
 		handshakeTimeout: handshakeTimeoutMs,
 		...Object.keys(headers).length ? { headers } : {},
 		...agent ? { agent } : {}

package/dist/cli/daemon-cli.js

@@ -1,5 +1,5 @@
 // Legacy shim for pre-tsdown update-cli imports.
-import * as daemonCli from "../daemon-cli-B7j3r4qt.js";
+import * as daemonCli from "../daemon-cli-DFPaz9xP.js";
 export const registerDaemonCli = daemonCli.t.registerDaemonCli;
 export const runDaemonInstall = daemonCli.s;
 export const runDaemonRestart = daemonCli.r;

package/dist/{command-registry-CGSJnTGc.js → command-registry-DUCyOBd1.js}

@@ -1,6 +1,6 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
 import { F as getPrimaryCommand, R as hasHelpOrVersion } from "./globals-BrhVUl-N.js";
-import { i as registerSubCliCommands, o as removeCommandByName, s as reparseProgramFromActionArgs } from "./register.subclis-B2-bYRai.js";
+import { i as registerSubCliCommands, o as removeCommandByName, s as reparseProgramFromActionArgs } from "./register.subclis-CdhuSeWY.js";
 
 //#region src/cli/program/command-registry.ts
 var command_registry_exports = /* @__PURE__ */ __exportAll({
@@ -22,7 +22,7 @@ const coreEntries = [
 			hasSubcommands: false
 		}],
 		register: async ({ program }) => {
-			(await import("./register.setup-DOBBtw-F.js")).registerSetupCommand(program);
+			(await import("./register.setup-BQA072ul.js")).registerSetupCommand(program);
 		}
 	},
 	{
@@ -32,7 +32,7 @@ const coreEntries = [
 			hasSubcommands: false
 		}],
 		register: async ({ program }) => {
-			(await import("./register.onboard-DQ-fbOHv.js")).registerOnboardCommand(program);
+			(await import("./register.onboard-B1V4Jit6.js")).registerOnboardCommand(program);
 		}
 	},
 	{
@@ -42,7 +42,7 @@ const coreEntries = [
 			hasSubcommands: false
 		}],
 		register: async ({ program }) => {
-			(await import("./register.configure-CRVwhLCu.js")).registerConfigureCommand(program);
+			(await import("./register.configure-CXK0g5TX.js")).registerConfigureCommand(program);
 		}
 	},
 	{
@@ -52,7 +52,7 @@ const coreEntries = [
 			hasSubcommands: true
 		}],
 		register: async ({ program }) => {
-			(await import("./config-cli-DvcyIvFj.js")).registerConfigCli(program);
+			(await import("./config-cli-Dr_JIBrw.js")).registerConfigCli(program);
 		}
 	},
 	{
@@ -79,7 +79,7 @@ const coreEntries = [
 			}
 		],
 		register: async ({ program }) => {
-			(await import("./register.maintenance-C4XxOMVa.js")).registerMaintenanceCommands(program);
+			(await import("./register.maintenance-CKOdhzP0.js")).registerMaintenanceCommands(program);
 		}
 	},
 	{
@@ -113,7 +113,7 @@ const coreEntries = [
 			hasSubcommands: true
 		}],
 		register: async ({ program, ctx }) => {
-			(await import("./register.agent-CKQDO-Ln.js")).registerAgentCommands(program, { agentChannelOptions: ctx.agentChannelOptions });
+			(await import("./register.agent-Bgdw1l9e.js")).registerAgentCommands(program, { agentChannelOptions: ctx.agentChannelOptions });
 		}
 	},
 	{
@@ -135,7 +135,7 @@ const coreEntries = [
 			}
 		],
 		register: async ({ program }) => {
-			(await import("./register.status-health-sessions-B3hsvwPb.js")).registerStatusHealthSessionsCommands(program);
+			(await import("./register.status-health-sessions-BKbPZSFr.js")).registerStatusHealthSessionsCommands(program);
 		}
 	},
 	{

package/dist/{completion-cli-CnnbGfPk.js → completion-cli-BvLg6TUR.js}

@@ -4,7 +4,7 @@ import { p as theme } from "./globals-xfUIfxbE.js";
 import { h as pathExists } from "./utils-DMGXr25O.js";
 import { i as routeLogsToStderr } from "./subsystem-DC87CPVS.js";
 import { t as formatDocsLink } from "./links-De9M3AmU.js";
-import { a as registerCoreCliByName, c as getSubCliEntries, l as registerSubCliByName, r as getCoreCliCommandNames, t as getProgramContext } from "./program-context-BI4RLPKE.js";
+import { a as registerCoreCliByName, c as getSubCliEntries, l as registerSubCliByName, r as getCoreCliCommandNames, t as getProgramContext } from "./program-context-YzgE3bAD.js";
 import os from "node:os";
 import path from "node:path";
 import fs from "node:fs/promises";

package/dist/{completion-cli-6rDw9Vgd.js → completion-cli-CSUrTCzX.js}

@@ -4,8 +4,8 @@ import { g as resolveStateDir } from "./paths-CHIu6D1E.js";
 import { i as routeLogsToStderr } from "./subsystem-Bw5n50gj.js";
 import { m as pathExists } from "./utils-D6vohX1h.js";
 import { t as formatDocsLink } from "./links-Dye6HsRG.js";
-import { n as getSubCliEntries, r as registerSubCliByName } from "./register.subclis-B2-bYRai.js";
-import { i as registerCoreCliByName, n as getCoreCliCommandNames } from "./command-registry-CGSJnTGc.js";
+import { n as getSubCliEntries, r as registerSubCliByName } from "./register.subclis-CdhuSeWY.js";
+import { i as registerCoreCliByName, n as getCoreCliCommandNames } from "./command-registry-DUCyOBd1.js";
 import { t as getProgramContext } from "./program-context-DKVuITe2.js";
 import os from "node:os";
 import path from "node:path";

package/dist/{config-cli-Bb8GJwFr.js → config-cli-Cd-bBJEj.js}

@@ -305,7 +305,7 @@ async function runConfigValidate(opts = {}) {
 }
 function registerConfigCli(program) {
 	const cmd = program.command("config").description("Non-interactive config helpers (get/set/unset/file/validate). Run without subcommand for the setup wizard.").addHelpText("after", () => `\n${theme.muted("Docs:")} ${formatDocsLink("/cli/config", "docs.squidclaw.dev/cli/config")}\n`).option("--section <section>", "Configure wizard sections (repeatable). Use with no subcommand.", (value, previous) => [...previous, value], []).action(async (opts) => {
-		const { configureCommandFromSectionsArg } = await import("./configure-BvLhk-vk.js").then((n) => n.t);
+		const { configureCommandFromSectionsArg } = await import("./configure-SygAFeSR.js").then((n) => n.t);
 		await configureCommandFromSectionsArg(opts.section, defaultRuntime);
 	});
 	cmd.command("get").description("Get a config value by dot path").argument("<path>", "Config path (dot or bracket notation)").option("--json", "Output JSON", false).action(async (path, opts) => {

package/dist/{config-cli-DvcyIvFj.js → config-cli-Dr_JIBrw.js}

@@ -305,7 +305,7 @@ async function runConfigValidate(opts = {}) {
 }
 function registerConfigCli(program) {
 	const cmd = program.command("config").description("Non-interactive config helpers (get/set/unset/file/validate). Run without subcommand for the setup wizard.").addHelpText("after", () => `\n${theme.muted("Docs:")} ${formatDocsLink("/cli/config", "docs.squidclaw.dev/cli/config")}\n`).option("--section <section>", "Configure wizard sections (repeatable). Use with no subcommand.", (value, previous) => [...previous, value], []).action(async (opts) => {
-		const { configureCommandFromSectionsArg } = await import("./configure-CR_H0TGw.js").then((n) => n.t);
+		const { configureCommandFromSectionsArg } = await import("./configure-BZ6ItDDb.js").then((n) => n.t);
 		await configureCommandFromSectionsArg(opts.section, defaultRuntime);
 	});
 	cmd.command("get").description("Get a config value by dot path").argument("<path>", "Config path (dot or bracket notation)").option("--json", "Output JSON", false).action(async (path, opts) => {

package/dist/{configure-CR_H0TGw.js → configure-BZ6ItDDb.js}

@@ -16,15 +16,15 @@ import { t as createClackPrompter } from "./clack-prompter-DU01bRlk.js";
 import { r as setupChannels, t as noteChannelStatus } from "./onboard-channels-Dt3KBZ1w.js";
 import { n as gatewayInstallErrorHint, t as buildGatewayInstallPlan } from "./daemon-install-helpers-CJtiW2RE.js";
 import { n as GATEWAY_DAEMON_RUNTIME_OPTIONS, t as DEFAULT_GATEWAY_DAEMON_RUNTIME } from "./daemon-runtime-Dgg-ogyc.js";
-import { t as resolveGatewayService } from "./service-D6lUMZKF.js";
+import { t as resolveGatewayService } from "./service-C7cnow9v.js";
 import { r as healthCommand } from "./health-xBOt7lp3.js";
 import { t as ensureControlUiAssetsBuilt } from "./control-ui-assets-BYEy341x.js";
 import { n as logConfigUpdated } from "./logging-ZAeFsd9K.js";
 import { n as promptAuthChoiceGrouped } from "./auth-choice-prompt-4mupmvzh.js";
-import { i as applyAuthChoice, n as resolvePreferredProviderForAuthChoice } from "./auth-choice-BoDJ6TOl.js";
-import { a as promptDefaultModel, n as applyModelFallbacksFromSelection, o as promptModelAllowlist, r as applyPrimaryModel, t as applyModelAllowlist } from "./model-picker-MhyQtM_M.js";
-import { t as ensureSystemdUserLingerInteractive } from "./systemd-linger-BVu_9dOp.js";
-import { a as promptCustomApiConfig } from "./onboard-custom-DRKG6mwB.js";
+import { i as applyAuthChoice, n as resolvePreferredProviderForAuthChoice } from "./auth-choice-DLlZ8SJr.js";
+import { a as promptDefaultModel, n as applyModelFallbacksFromSelection, o as promptModelAllowlist, r as applyPrimaryModel, t as applyModelAllowlist } from "./model-picker-CeqG7aGB.js";
+import { t as ensureSystemdUserLingerInteractive } from "./systemd-linger-iIqcMjee.js";
+import { a as promptCustomApiConfig } from "./onboard-custom-DvQCIxyh.js";
 import { a as maybeAddTailnetOriginToControlUiAllowedOrigins, i as TAILSCALE_MISSING_BIN_NOTE_LINES, n as TAILSCALE_DOCS_LINES, r as TAILSCALE_EXPOSURE_OPTIONS, t as validateIPv4AddressInput } from "./ipv4-Cl0LHiMy.js";
 import { t as formatHealthCheckFailure } from "./health-format-eNDYxTNS.js";
 import { n as promptRemoteGatewayConfig } from "./onboard-remote-B5pb0k_J.js";

package/dist/{configure-BvLhk-vk.js → configure-SygAFeSR.js}

@@ -16,15 +16,15 @@ import { t as createClackPrompter } from "./clack-prompter-Bx0vssUh.js";
 import { r as setupChannels, t as noteChannelStatus } from "./onboard-channels-BB39kGye.js";
 import { n as gatewayInstallErrorHint, t as buildGatewayInstallPlan } from "./daemon-install-helpers-a4pGEsbA.js";
 import { n as GATEWAY_DAEMON_RUNTIME_OPTIONS, t as DEFAULT_GATEWAY_DAEMON_RUNTIME } from "./daemon-runtime-Di8BSZyD.js";
-import { t as resolveGatewayService } from "./service-DWcwQCyr.js";
+import { t as resolveGatewayService } from "./service-Dzjv6Q-l.js";
 import { r as healthCommand } from "./health-CrEBegrW.js";
 import { t as ensureControlUiAssetsBuilt } from "./control-ui-assets-Bz7TCLpb.js";
 import { n as logConfigUpdated } from "./logging-AGpu_2Pc.js";
 import { n as promptAuthChoiceGrouped } from "./auth-choice-prompt-D8RKb8oM.js";
-import { i as applyAuthChoice, n as resolvePreferredProviderForAuthChoice } from "./auth-choice-FjsBJLJF.js";
-import { a as promptDefaultModel, n as applyModelFallbacksFromSelection, o as promptModelAllowlist, r as applyPrimaryModel, t as applyModelAllowlist } from "./model-picker-BMUukKtX.js";
-import { t as ensureSystemdUserLingerInteractive } from "./systemd-linger-BL2Ex5My.js";
-import { a as promptCustomApiConfig } from "./onboard-custom-xZqh5J3l.js";
+import { i as applyAuthChoice, n as resolvePreferredProviderForAuthChoice } from "./auth-choice-Qh2aWSu3.js";
+import { a as promptDefaultModel, n as applyModelFallbacksFromSelection, o as promptModelAllowlist, r as applyPrimaryModel, t as applyModelAllowlist } from "./model-picker-DVY4bpQj.js";
+import { t as ensureSystemdUserLingerInteractive } from "./systemd-linger-B7J3aXhx.js";
+import { a as promptCustomApiConfig } from "./onboard-custom-Cq4RYUaZ.js";
 import { a as maybeAddTailnetOriginToControlUiAllowedOrigins, i as TAILSCALE_MISSING_BIN_NOTE_LINES, n as TAILSCALE_DOCS_LINES, r as TAILSCALE_EXPOSURE_OPTIONS, t as validateIPv4AddressInput } from "./ipv4-BLo8Kwlg.js";
 import { t as formatHealthCheckFailure } from "./health-format-B3bJdIC6.js";
 import { n as promptRemoteGatewayConfig } from "./onboard-remote-BcqJ3Tz_.js";

package/dist/{daemon-cli-B7j3r4qt.js → daemon-cli-DFPaz9xP.js}

@@ -22,12 +22,12 @@ import { n as inheritOptionFromParent } from "./command-options-D0bXi5Pl.js";
 import { t as formatConfigIssueLine } from "./issue-format-CJF4zrPW.js";
 import { t as buildGatewayInstallPlan } from "./daemon-install-helpers-a4pGEsbA.js";
 import { r as isGatewayDaemonRuntime, t as DEFAULT_GATEWAY_DAEMON_RUNTIME } from "./daemon-runtime-Di8BSZyD.js";
-import { s as resolveGatewayLogPaths, t as resolveGatewayService } from "./service-DWcwQCyr.js";
-import { a as createCliStatusTextStyles, c as parsePortFromArgs, d as renderRuntimeHints, f as resolveRuntimeStatusColor, g as installDaemonServiceAndEmit, h as createDaemonActionContext, i as runServiceUninstall, l as pickProbeHostForBind, m as buildDaemonServiceSnapshot, n as runServiceStart, o as filterDaemonEnv, p as safeDaemonEnv, r as runServiceStop, s as normalizeListenerAddress, t as runServiceRestart, u as renderGatewayServiceStartHints } from "./lifecycle-core-C3gBUQyA.js";
-import { i as auditGatewayServiceConfig, n as renderSystemdUnavailableHints, s as formatRuntimeStatus, t as isSystemdUnavailableDetail } from "./systemd-hints-BylRxjER.js";
+import { s as resolveGatewayLogPaths, t as resolveGatewayService } from "./service-Dzjv6Q-l.js";
+import { a as createCliStatusTextStyles, c as parsePortFromArgs, d as renderRuntimeHints, f as resolveRuntimeStatusColor, g as installDaemonServiceAndEmit, h as createDaemonActionContext, i as runServiceUninstall, l as pickProbeHostForBind, m as buildDaemonServiceSnapshot, n as runServiceStart, o as filterDaemonEnv, p as safeDaemonEnv, r as runServiceStop, s as normalizeListenerAddress, t as runServiceRestart, u as renderGatewayServiceStartHints } from "./lifecycle-core-DMMLEqYN.js";
+import { i as auditGatewayServiceConfig, n as renderSystemdUnavailableHints, s as formatRuntimeStatus, t as isSystemdUnavailableDetail } from "./systemd-hints-DDOoq1Ph.js";
 import { t as parsePort } from "./parse-port-OBGBQwYB.js";
-import { t as readLastGatewayErrorLine } from "./diagnostics-DvOqta_6.js";
-import { n as renderGatewayServiceCleanupHints, t as findExtraGatewayServices } from "./inspect-Dv0VyA0s.js";
+import { t as readLastGatewayErrorLine } from "./diagnostics-0TAnpHSE.js";
+import { n as renderGatewayServiceCleanupHints, t as findExtraGatewayServices } from "./inspect-FnsCebWG.js";
 
 //#region src/cli/daemon-cli/install.ts
 async function runDaemonInstall(opts) {

package/dist/{daemon-cli-BPphu66E.js → daemon-cli-DJZIKYzT.js}

@@ -22,12 +22,12 @@ import { n as inheritOptionFromParent } from "./command-options-DVCpMofi.js";
 import { t as formatConfigIssueLine } from "./issue-format-CVVBG2XC.js";
 import { t as buildGatewayInstallPlan } from "./daemon-install-helpers-CJtiW2RE.js";
 import { r as isGatewayDaemonRuntime, t as DEFAULT_GATEWAY_DAEMON_RUNTIME } from "./daemon-runtime-Dgg-ogyc.js";
-import { s as resolveGatewayLogPaths, t as resolveGatewayService } from "./service-D6lUMZKF.js";
-import { a as createCliStatusTextStyles, c as parsePortFromArgs, d as renderRuntimeHints, f as resolveRuntimeStatusColor, g as installDaemonServiceAndEmit, h as createDaemonActionContext, i as runServiceUninstall, l as pickProbeHostForBind, m as buildDaemonServiceSnapshot, n as runServiceStart, o as filterDaemonEnv, p as safeDaemonEnv, r as runServiceStop, s as normalizeListenerAddress, t as runServiceRestart, u as renderGatewayServiceStartHints } from "./lifecycle-core-C6bIL3hq.js";
-import { i as auditGatewayServiceConfig, n as renderSystemdUnavailableHints, s as formatRuntimeStatus, t as isSystemdUnavailableDetail } from "./systemd-hints-CuQVI0A1.js";
+import { s as resolveGatewayLogPaths, t as resolveGatewayService } from "./service-C7cnow9v.js";
+import { a as createCliStatusTextStyles, c as parsePortFromArgs, d as renderRuntimeHints, f as resolveRuntimeStatusColor, g as installDaemonServiceAndEmit, h as createDaemonActionContext, i as runServiceUninstall, l as pickProbeHostForBind, m as buildDaemonServiceSnapshot, n as runServiceStart, o as filterDaemonEnv, p as safeDaemonEnv, r as runServiceStop, s as normalizeListenerAddress, t as runServiceRestart, u as renderGatewayServiceStartHints } from "./lifecycle-core-DtY6w3ub.js";
+import { i as auditGatewayServiceConfig, n as renderSystemdUnavailableHints, s as formatRuntimeStatus, t as isSystemdUnavailableDetail } from "./systemd-hints-F4o_ziad.js";
 import { t as parsePort } from "./parse-port-CboE2EQm.js";
-import { t as readLastGatewayErrorLine } from "./diagnostics-B7TvAs1Y.js";
-import { n as renderGatewayServiceCleanupHints, t as findExtraGatewayServices } from "./inspect-Bwnw_UjM.js";
+import { t as readLastGatewayErrorLine } from "./diagnostics-DG2Lz77X.js";
+import { n as renderGatewayServiceCleanupHints, t as findExtraGatewayServices } from "./inspect-DLik2FMq.js";
 
 //#region src/cli/daemon-cli/install.ts
 async function runDaemonInstall(opts) {

package/dist/daemon-cli.js

@@ -17752,7 +17752,18 @@ function parseSystemdEnvAssignment(raw) {
 
 //#endregion
 //#region src/daemon/systemd.ts
+function isSystemRoot() {
+	try {
+		return process.getuid?.() === 0;
+	} catch {
+		return false;
+	}
+}
+function sysArgs(args) {
+	return isSystemRoot() ? args : ["--user", ...args];
+}
 function resolveSystemdUnitPathForName(env, name) {
+	if (isSystemRoot()) return `/etc/systemd/system/${name}.service`;
 	const home = toPosixPath(resolveHomeDir$1(env));
 	return path.posix.join(home, ".config", "systemd", "user", `${name}.service`);
 }
@@ -17833,7 +17844,7 @@ function isSystemdUnitNotEnabled(detail) {
 	return normalized.includes("disabled") || normalized.includes("static") || normalized.includes("indirect") || normalized.includes("masked") || normalized.includes("not-found") || normalized.includes("could not be found") || normalized.includes("failed to get unit file state");
 }
 async function isSystemdUserServiceAvailable() {
-	const res = await execSystemctl(["--user", "status"]);
+	const res = await execSystemctl(sysArgs(["status"]));
 	if (res.code === 0) return true;
 	const detail = `${res.stderr} ${res.stdout}`.toLowerCase();
 	if (!detail) return false;
@@ -17845,10 +17856,10 @@ async function isSystemdUserServiceAvailable() {
 	return false;
 }
 async function assertSystemdAvailable() {
-	const res = await execSystemctl(["--user", "status"]);
+	const res = await execSystemctl(sysArgs(["status"]));
 	if (res.code === 0) return;
 	const detail = readSystemctlDetail(res);
-	if (isSystemctlMissing(detail)) throw new Error("systemctl not available; systemd user services are required on Linux.");
+	if (isSystemctlMissing(detail)) throw new Error("systemctl not available on this system.");
 	throw new Error(`systemctl --user unavailable: ${detail || "unknown error"}`.trim());
 }
 async function installSystemdService({ env, stdout, programArguments, workingDirectory, environment, description }) {
@@ -17874,19 +17885,11 @@ async function installSystemdService({ env, stdout, programArguments, workingDir
 	});
 	await fs$1.writeFile(unitPath, unit, "utf8");
 	const unitName = `${resolveGatewaySystemdServiceName(env.SQUIDCLAW_PROFILE)}.service`;
-	const reload = await execSystemctl(["--user", "daemon-reload"]);
+	const reload = await execSystemctl(sysArgs(["daemon-reload"]));
 	if (reload.code !== 0) throw new Error(`systemctl daemon-reload failed: ${reload.stderr || reload.stdout}`.trim());
-	const enable = await execSystemctl([
-		"--user",
-		"enable",
-		unitName
-	]);
+	const enable = await execSystemctl(sysArgs(["enable", unitName]));
 	if (enable.code !== 0) throw new Error(`systemctl enable failed: ${enable.stderr || enable.stdout}`.trim());
-	const restart = await execSystemctl([
-		"--user",
-		"restart",
-		unitName
-	]);
+	const restart = await execSystemctl(sysArgs(["restart", unitName]));
 	if (restart.code !== 0) throw new Error(`systemctl restart failed: ${restart.stderr || restart.stdout}`.trim());
 	writeFormattedLines(stdout, [{
 		label: "Installed systemd service",
@@ -17899,12 +17902,11 @@ async function installSystemdService({ env, stdout, programArguments, workingDir
 }
 async function uninstallSystemdService({ env, stdout }) {
 	await assertSystemdAvailable();
-	await execSystemctl([
-		"--user",
+	await execSystemctl(sysArgs([
 		"disable",
 		"--now",
 		`${resolveGatewaySystemdServiceName(env.SQUIDCLAW_PROFILE)}.service`
-	]);
+	]));
 	const unitPath = resolveSystemdUnitPath(env);
 	try {
 		await fs$1.unlink(unitPath);
@@ -17916,11 +17918,7 @@ async function uninstallSystemdService({ env, stdout }) {
 async function runSystemdServiceAction(params) {
 	await assertSystemdAvailable();
 	const unitName = `${resolveSystemdServiceName(params.env ?? {})}.service`;
-	const res = await execSystemctl([
-		"--user",
-		params.action,
-		unitName
-	]);
+	const res = await execSystemctl(sysArgs([params.action, unitName]));
 	if (res.code !== 0) throw new Error(`systemctl ${params.action} failed: ${res.stderr || res.stdout}`.trim());
 	params.stdout.write(`${formatLine(params.label, unitName)}\n`);
 }
@@ -17941,11 +17939,7 @@ async function restartSystemdService({ stdout, env }) {
 	});
 }
 async function isSystemdServiceEnabled(args) {
-	const res = await execSystemctl([
-		"--user",
-		"is-enabled",
-		`${resolveSystemdServiceName(args.env ?? {})}.service`
-	]);
+	const res = await execSystemctl(sysArgs(["is-enabled", `${resolveSystemdServiceName(args.env ?? {})}.service`]));
 	if (res.code === 0) return true;
 	const detail = readSystemctlDetail(res);
 	if (isSystemctlMissing(detail) || isSystemdUnitNotEnabled(detail)) return false;
@@ -17960,14 +17954,13 @@ async function readSystemdServiceRuntime(env = process.env) {
 			detail: err instanceof Error ? err.message : String(err)
 		};
 	}
-	const res = await execSystemctl([
-		"--user",
+	const res = await execSystemctl(sysArgs([
 		"show",
 		`${resolveSystemdServiceName(env)}.service`,
 		"--no-page",
 		"--property",
 		"ActiveState,SubState,MainPID,ExecMainStatus,ExecMainCode"
-	]);
+	]));
 	if (res.code !== 0) {
 		const detail = (res.stderr || res.stdout).trim();
 		const missing = detail.toLowerCase().includes("not found");

package/dist/{daemon-install-MOrssUh2.js → daemon-install-CCOOGwxT.js}

@@ -11,9 +11,9 @@ import "./note-IoQo8Ol0.js";
 import { n as gatewayInstallErrorHint, t as buildGatewayInstallPlan } from "./daemon-install-helpers-CJtiW2RE.js";
 import "./runtime-guard-BPoq8vFM.js";
 import { r as isGatewayDaemonRuntime, t as DEFAULT_GATEWAY_DAEMON_RUNTIME } from "./daemon-runtime-Dgg-ogyc.js";
-import { r as isSystemdUserServiceAvailable } from "./systemd-CD8s-qZ_.js";
-import { t as resolveGatewayService } from "./service-D6lUMZKF.js";
-import { n as ensureSystemdUserLingerNonInteractive } from "./systemd-linger-BVu_9dOp.js";
+import { r as isSystemdUserServiceAvailable } from "./systemd-BqXjET4w.js";
+import { t as resolveGatewayService } from "./service-C7cnow9v.js";
+import { n as ensureSystemdUserLingerNonInteractive } from "./systemd-linger-iIqcMjee.js";
 
 //#region src/commands/onboard-non-interactive/local/daemon-install.ts
 async function installGatewayDaemonNonInteractive(params) {