install.sh

#!/usr/bin/env bash
set -euo pipefail

# ============================================================================
# ArgentOS Installer
#
# Works from a tarball extract OR the git repo root.
# No sudo required. Safe to run multiple times (idempotent).
#
# Usage (from extracted archive):
#   tar xzf argent-*.tar.gz && cd argentos && bash install.sh
#
# Usage (from git repo with a build present):
#   bash install.sh
#
# What this does:
#   1. Creates ~/.argentos (state) and ~/argent (workspace)
#   2. Writes a default config if none exists
#   3. Installs ~/bin/argent + ~/bin/argentos CLI wrappers
#   4. Adds ~/bin to PATH in your shell profile
#   5. Installs LaunchAgents (gateway + dashboard)
#   6. Starts the gateway + dashboard services
# ============================================================================

# -- Colors --
RED='\033[0;31m'
GREEN='\033[0;32m'
YELLOW='\033[1;33m'
CYAN='\033[0;36m'
BOLD='\033[1m'
RESET='\033[0m'

ok()   { printf "${GREEN}  ✓${RESET} %s\n" "$1"; }
warn() { printf "${YELLOW}  ⚠${RESET} %s\n" "$1"; }
err()  { printf "${RED}  ✗${RESET} %s\n" "$1" >&2; }
info() { printf "${CYAN}  →${RESET} %s\n" "$1"; }
step() { printf "\n${BOLD}[$1/$TOTAL_STEPS] %s${RESET}\n" "$2"; }
is_truthy() {
  case "${1:-}" in
    1|true|TRUE|yes|YES|on|ON) return 0 ;;
    *) return 1 ;;
  esac
}

TOTAL_STEPS=11
DASHBOARD_PORT="${DASHBOARD_PORT:-8080}"
FULL_STACK_INSTALL="${ARGENT_FULL_STACK_INSTALL:-0}"
INSTALL_STEIPETE_TOOLS="${ARGENT_INSTALL_STEIPETE_TOOLS:-1}"
INSTALL_NOTEBOOKLM_TOOLS="${ARGENT_INSTALL_NOTEBOOKLM_TOOLS:-1}"
INSTALL_NOTEBOOKLM_BROWSER="${ARGENT_INSTALL_NOTEBOOKLM_BROWSER:-1}"
PULL_OLLAMA_MODELS="${ARGENT_PULL_OLLAMA_MODELS:-1}"
OLLAMA_MODELS="${ARGENT_OLLAMA_MODELS:-qwen3:30b-a3b,qwen3:1.7b}"
SKIP_PROFILE_PATH="${ARGENT_SKIP_PROFILE_PATH:-0}"
SKIP_APP_INSTALL="${ARGENT_SKIP_APP_INSTALL:-0}"
SKIP_CORE_DOCS_VAULT="${ARGENT_SKIP_CORE_DOCS_VAULT:-0}"
SKIP_DASHBOARD_DEPS="${ARGENT_SKIP_DASHBOARD_DEPS:-0}"
SKIP_LAUNCH_AGENTS="${ARGENT_SKIP_LAUNCH_AGENTS:-0}"
SKIP_SERVICE_START="${ARGENT_SKIP_SERVICE_START:-0}"
# [Phase B] Default-on Ollama install — the local-LLM runtime ArgentOS targets
# by default on Mac (per Obsidian "Ollama+MLX as Mac Default Stack" decision).
# Set ARGENT_SKIP_OLLAMA_INSTALL=1 to opt out (operators who already have a
# different runtime, or who genuinely want a cloud-only setup).
SKIP_OLLAMA_INSTALL="${ARGENT_SKIP_OLLAMA_INSTALL:-0}"
# Optional pre-pull of a starter model — opt-in because it's a 9GB+ download
# that some operators won't want as part of first install. Set to a model tag
# (e.g. "qwen3.5:9b-mlx") to run `ollama pull <tag>` after the install step.
OLLAMA_PREPULL_MODEL="${ARGENT_OLLAMA_PREPULL_MODEL:-}"

# -- macOS only --
if [[ "$(uname -s)" != "Darwin" ]]; then
  err "ArgentOS currently supports macOS only."
  exit 1
fi

ARCH="$(uname -m)"
if [[ "$ARCH" != "arm64" && "$ARCH" != "x86_64" ]]; then
  err "Unsupported architecture: $ARCH"
  exit 1
fi

printf "\n${BOLD}  ArgentOS Installer${RESET}\n"
info "Detected macOS ($ARCH)"

# -- Determine ARGENT_HOME --
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"

if [[ -f "$SCRIPT_DIR/bin/node" && -f "$SCRIPT_DIR/argent.mjs" ]]; then
  # Running from extracted tarball
  ARGENT_HOME="$SCRIPT_DIR"
  info "Source: extracted tarball → $ARGENT_HOME"
elif [[ -f "$SCRIPT_DIR/argent.mjs" && -d "$SCRIPT_DIR/dist" ]]; then
  # Running from repo root with a build present
  ARGENT_HOME="$SCRIPT_DIR"
  info "Source: git checkout → $ARGENT_HOME"
elif [[ -f "$SCRIPT_DIR/../argent.mjs" && -d "$SCRIPT_DIR/../dist" ]]; then
  # Invoked from scripts/ inside the repo
  ARGENT_HOME="$(cd "$SCRIPT_DIR/.." && pwd)"
  info "Source: git checkout (scripts/) → $ARGENT_HOME"
else
  err "Cannot locate ArgentOS runtime."
  err "Run this script from an extracted tarball or a built git checkout."
  exit 1
fi

# ============================================================================
# Step 1: Directory structure
# ============================================================================
step 1 "Creating directory structure"

STATE_DIR="${ARGENT_STATE_DIR:-$HOME/.argentos}"
WORKSPACE_DIR="${ARGENT_WORKSPACE_DIR:-$HOME/argent}"

mkdir -p "$STATE_DIR/data"
ok "State dir: $STATE_DIR"

mkdir -p "$WORKSPACE_DIR/memory/journal"
ok "Workspace: $WORKSPACE_DIR"

CORE_DOCS_VAULT_SOURCE="$ARGENT_HOME/docs/obsidian-vault/ArgentOS Core Docs"
CORE_DOCS_VAULT_DEST="$STATE_DIR/vaults/ArgentOS Core Docs"
if is_truthy "$SKIP_CORE_DOCS_VAULT"; then
  info "Skipping Core docs vault install (ARGENT_SKIP_CORE_DOCS_VAULT=1)"
elif [[ -d "$CORE_DOCS_VAULT_SOURCE" ]]; then
  mkdir -p "$(dirname "$CORE_DOCS_VAULT_DEST")"
  rm -rf "$CORE_DOCS_VAULT_DEST"
  cp -R "$CORE_DOCS_VAULT_SOURCE" "$CORE_DOCS_VAULT_DEST"
  ok "Core docs vault: $CORE_DOCS_VAULT_DEST"
else
  warn "Core docs vault not found at $CORE_DOCS_VAULT_SOURCE"
fi

# ============================================================================
# Step 2: Minimal config
# ============================================================================
step 2 "Checking configuration"

CONFIG_FILE="$STATE_DIR/argent.json"
if [[ -f "$CONFIG_FILE" ]]; then
  ok "Config already exists: $CONFIG_FILE"
else
  # Generate a random 64-char hex token for gateway auth
  GW_TOKEN="$(openssl rand -hex 32 2>/dev/null || head -c 32 /dev/urandom | xxd -p -c 64 2>/dev/null || cat /dev/urandom | LC_ALL=C tr -dc 'a-f0-9' | head -c 64)"
  cat > "$CONFIG_FILE" << CONFIGJSON
{
  "gateway": {
    "mode": "local",
    "port": 18789,
    "auth": { "mode": "token", "token": "${GW_TOKEN}" }
  }
}
CONFIGJSON
  ok "Created default config: $CONFIG_FILE"
fi

# ============================================================================
# Step 3: CLI wrapper
# ============================================================================
step 3 "Installing CLI wrapper"

BIN_DIR="${ARGENT_BIN_DIR:-$HOME/bin}"
CLI_WRAPPER="$BIN_DIR/argent"
mkdir -p "$BIN_DIR"

# Pick the Node binary
if [[ -x "$ARGENT_HOME/bin/node" ]]; then
  NODE_BIN="$ARGENT_HOME/bin/node"
  WRAPPER_NODE_BIN="\$ARGENT_HOME/bin/node"
  PATH_LINE='export PATH="$ARGENT_HOME/bin:$PATH"'
else
  RESOLVED_NODE="$(command -v node 2>/dev/null || true)"
  if [[ -z "$RESOLVED_NODE" ]]; then
    err "No Node binary found. Install Node 22+ (e.g. via nvm) and retry."
    exit 1
  fi
  NODE_BIN="$RESOLVED_NODE"
  WRAPPER_NODE_BIN="$RESOLVED_NODE"
  NODE_DIR="$(dirname "$RESOLVED_NODE")"
  PATH_LINE="export PATH=\"$NODE_DIR:\$PATH\""
  info "Using system Node: $RESOLVED_NODE ($(node --version))"
fi

cat > "$CLI_WRAPPER" << WRAPPER
#!/bin/bash
ARGENT_HOME="${ARGENT_HOME}"
${PATH_LINE}
cd "\$ARGENT_HOME"
exec "${WRAPPER_NODE_BIN}" argent.mjs "\$@"
WRAPPER
chmod +x "$CLI_WRAPPER"
ok "CLI wrapper: $CLI_WRAPPER"

# argentos alias
if [[ ! -f "$BIN_DIR/argentos" ]] || [[ -L "$BIN_DIR/argentos" ]]; then
  ln -sf "$CLI_WRAPPER" "$BIN_DIR/argentos"
  ok "Alias: $BIN_DIR/argentos → argent"
fi

# -- Add ~/bin to PATH in shell profile --
add_to_path() {
  local profile="$1"
  local bin_path="$2"
  [[ ! -f "$profile" ]] && touch "$profile"
  if ! grep -Fq "$bin_path" "$profile" 2>/dev/null; then
    printf '\n# ArgentOS\nexport PATH="%s:$PATH"\n' "$bin_path" >> "$profile"
    ok "Added $bin_path to PATH in $(basename "$profile")"
  else
    ok "$bin_path already in PATH ($(basename "$profile"))"
  fi
}

add_explicit_path_to_profile() {
  local profile="$1"
  local bin_path="$2"
  [[ ! -f "$profile" ]] && touch "$profile"
  if ! grep -Fq "$bin_path" "$profile" 2>/dev/null; then
    printf '\n# ArgentOS Python tools\nexport PATH="%s:$PATH"\n' "$bin_path" >> "$profile"
    ok "Added $bin_path to PATH in $(basename "$profile")"
  fi
}

SHELL_NAME="$(basename "$SHELL")"
if is_truthy "$SKIP_PROFILE_PATH"; then
  info "Skipping shell profile PATH edits (ARGENT_SKIP_PROFILE_PATH=1)"
else
  case "$SHELL_NAME" in
    zsh)  add_to_path "$HOME/.zshrc" "$BIN_DIR" ;;
    bash) add_to_path "$HOME/.bash_profile" "$BIN_DIR"
          add_to_path "$HOME/.bashrc" "$BIN_DIR" ;;
    *)    warn "Unknown shell ($SHELL_NAME). Add $BIN_DIR to your PATH manually." ;;
  esac
fi

export PATH="$BIN_DIR:$PATH"

# ============================================================================
# Step 4: Install optional macOS app bundle (Swift menu bar)
# ============================================================================
step 4 "Installing optional macOS app bundle"

APP_BUNDLE_NEW="$ARGENT_HOME/app/Argent.app"
APP_BUNDLE_LEGACY="$ARGENT_HOME/app/ArgentOS.app"
APP_DEST="${ARGENT_APP_DEST:-/Applications/Argent.app}"
APP_SOURCE=""

if [[ -d "$APP_BUNDLE_NEW" ]]; then
  APP_SOURCE="$APP_BUNDLE_NEW"
elif [[ -d "$APP_BUNDLE_LEGACY" ]]; then
  APP_SOURCE="$APP_BUNDLE_LEGACY"
fi

if is_truthy "$SKIP_APP_INSTALL"; then
  info "Skipping app bundle install (ARGENT_SKIP_APP_INSTALL=1)"
elif [[ -n "$APP_SOURCE" ]]; then
  if [[ -d "$APP_DEST" ]]; then
    rm -rf "$APP_DEST"
  fi
  cp -R "$APP_SOURCE" "$APP_DEST"
  ok "Argent.app → $APP_DEST"
  # Launch it so it appears in menu bar
  open -a "$APP_DEST" 2>/dev/null || true
elif [[ -f "$ARGENT_HOME/scripts/install-macos-app.sh" ]]; then
  ARGENT_APP_DEST="$APP_DEST" \
    ARGENT_APP_OPEN="${ARGENT_APP_OPEN:-1}" \
    ARGENT_APP_RELEASE_CHANNEL="${ARGENT_APP_RELEASE_CHANNEL:-${ARGENTOS_INSTALL_CHANNEL:-${ARGENT_INSTALL_CHANNEL:-stable}}}" \
    bash "$ARGENT_HOME/scripts/install-macos-app.sh" || \
      warn "Could not install Argent.app from the public release manifest"
else
  warn "No embedded app bundle or release artifact installer found — download Argent.app later from https://argentos.ai"
fi

# ============================================================================
# Step 5: Dashboard dependencies
# ============================================================================
step 5 "Installing dashboard dependencies"

DASHBOARD_DIR="$ARGENT_HOME/dashboard"
if [[ -d "$DASHBOARD_DIR" ]]; then
  if is_truthy "$SKIP_DASHBOARD_DEPS"; then
    info "Skipping dashboard dependency install/rebuild (ARGENT_SKIP_DASHBOARD_DEPS=1)"
  elif [[ ! -d "$DASHBOARD_DIR/node_modules" ]]; then
    info "Running npm install (compiles native addons for this machine)..."
    # Use the system npm — bundled Node doesn't ship npm
    if command -v npm &>/dev/null; then
      # Full install (not --production) — vite+react are devDeps needed at runtime
      (cd "$DASHBOARD_DIR" && npm install 2>&1 | tail -5) && \
        ok "Dashboard dependencies installed" || \
        warn "npm install had errors — dashboard may not start cleanly"
    else
      warn "npm not found — skipping dashboard deps (run 'npm install' in $DASHBOARD_DIR manually)"
    fi
  else
    ok "Dashboard dependencies already installed"
  fi

  if ! is_truthy "$SKIP_DASHBOARD_DEPS"; then
    # Rebuild native addons for the Node binary that will actually run them.
    # If the bundled Node exists, use it; otherwise fall back to system Node.
    if [[ -x "$ARGENT_HOME/bin/node" ]]; then
      REBUILD_NODE="$ARGENT_HOME/bin/node"
      REBUILD_PATH="$ARGENT_HOME/bin:$PATH"
    else
      REBUILD_NODE="$NODE_BIN"
      REBUILD_PATH="$PATH"
    fi
    info "Rebuilding native addons for $("$REBUILD_NODE" --version)..."
    (cd "$DASHBOARD_DIR" && PATH="$REBUILD_PATH" npm rebuild 2>&1 | tail -3) && \
      ok "Native addons rebuilt" || \
      warn "npm rebuild had errors — dashboard API may fail to load better-sqlite3"
  fi
else
  warn "Dashboard directory not found at $DASHBOARD_DIR"
fi

# ============================================================================
# Step 6: Research CLI requirements + optional full-stack provisioning
# ============================================================================
step 6 "Research CLI requirements + optional full-stack provisioning"

if is_truthy "$INSTALL_NOTEBOOKLM_TOOLS"; then
  info "Checking YouTube + NotebookLM research prerequisites (yt-dlp, notebooklm)"
  PYTHON_BIN="$(command -v python3 2>/dev/null || true)"
  if [[ -z "$PYTHON_BIN" ]]; then
    warn "python3 not found — cannot auto-install yt-dlp/notebooklm CLI"
  elif ! "$PYTHON_BIN" -m pip --version >/dev/null 2>&1; then
    warn "python3 -m pip unavailable — cannot auto-install yt-dlp/notebooklm CLI"
  else
    PY_USER_BIN="$("$PYTHON_BIN" -c 'import site; print(site.USER_BASE + "/bin")' 2>/dev/null || true)"
    if [[ -n "$PY_USER_BIN" ]]; then
      mkdir -p "$PY_USER_BIN"
      export PATH="$PY_USER_BIN:$PATH"
      case "$SHELL_NAME" in
        zsh)  add_explicit_path_to_profile "$HOME/.zshrc" "$PY_USER_BIN" ;;
        bash) add_explicit_path_to_profile "$HOME/.bash_profile" "$PY_USER_BIN"
              add_explicit_path_to_profile "$HOME/.bashrc" "$PY_USER_BIN" ;;
        *)    warn "Unknown shell ($SHELL_NAME). Add $PY_USER_BIN to PATH manually if needed." ;;
      esac
    fi

    if command -v yt-dlp >/dev/null 2>&1; then
      ok "yt-dlp already installed"
    else
      info "Installing yt-dlp with python user packages"
      if "$PYTHON_BIN" -m pip install --user --upgrade yt-dlp >/dev/null 2>&1; then
        ok "Installed yt-dlp"
      else
        warn "Failed to install yt-dlp automatically (run: python3 -m pip install --user yt-dlp)"
      fi
    fi

    if command -v notebooklm >/dev/null 2>&1; then
      ok "notebooklm CLI already installed"
    else
      info "Installing notebooklm-py[browser] with python user packages"
      if "$PYTHON_BIN" -m pip install --user --upgrade "notebooklm-py[browser]" >/dev/null 2>&1; then
        ok "Installed notebooklm CLI"
      else
        warn "Failed to install notebooklm CLI automatically (run: python3 -m pip install --user \"notebooklm-py[browser]\")"
      fi
    fi

    if command -v notebooklm >/dev/null 2>&1; then
      if is_truthy "$INSTALL_NOTEBOOKLM_BROWSER"; then
        info "Ensuring Playwright Chromium for NotebookLM login flow"
        if "$PYTHON_BIN" -m playwright install chromium >/dev/null 2>&1; then
          ok "Playwright Chromium ready"
        else
          warn "Failed to install Playwright Chromium (run: python3 -m playwright install chromium)"
        fi
      else
        info "Skipping Playwright Chromium install (ARGENT_INSTALL_NOTEBOOKLM_BROWSER=0)"
      fi
      info "NotebookLM requires one-time auth. Run: notebooklm login"
    fi
  fi
else
  info "Skipping NotebookLM/yt-dlp setup (ARGENT_INSTALL_NOTEBOOKLM_TOOLS=0)"
fi

if ! is_truthy "$FULL_STACK_INSTALL"; then
  info "Skipping full-stack provisioning (set ARGENT_FULL_STACK_INSTALL=1 to enable)"
else
  if ! command -v brew >/dev/null 2>&1; then
    warn "Homebrew not found — skipping PostgreSQL/Redis/Ollama/tool provisioning"
    warn "Install Homebrew first, then rerun with ARGENT_FULL_STACK_INSTALL=1"
  else
    BREW_PREFIX="$(brew --prefix)"
    info "Using Homebrew at $BREW_PREFIX"

    CORE_FORMULAE=(
      postgresql@17
      pgvector
      redis
      jq
      ripgrep
      fd
      ffmpeg
      ollama
    )
    for formula in "${CORE_FORMULAE[@]}"; do
      if brew list "$formula" >/dev/null 2>&1; then
        ok "brew formula present: $formula"
      else
        info "Installing brew formula: $formula"
        if brew install "$formula" >/dev/null 2>&1; then
          ok "Installed: $formula"
        else
          warn "Failed to install $formula"
        fi
      fi
    done

    if is_truthy "$INSTALL_STEIPETE_TOOLS"; then
      info "Installing steipete CLI toolchain"
      brew tap steipete/tap >/dev/null 2>&1 || true
      STEIPETE_FORMULAE=(
        imsg
        peekaboo
        oracle
        sag
        camsnap
        summarize
        blucli
        wacli
        gifgrep
        mcporter
        ordercli
        songsee
        sonoscli
        codexbar
        spogo
      )
      for formula in "${STEIPETE_FORMULAE[@]}"; do
        tap_formula="steipete/tap/$formula"
        if brew list "$tap_formula" >/dev/null 2>&1 || brew list "$formula" >/dev/null 2>&1; then
          ok "steipete tool present: $formula"
        else
          if ! brew info "$tap_formula" >/dev/null 2>&1; then
            warn "steipete tool unavailable on this platform: $formula"
            continue
          fi
          info "Installing steipete tool: $formula"
          if brew install "$tap_formula" >/dev/null 2>&1; then
            ok "Installed: $formula"
          else
            warn "Failed to install steipete tool: $formula"
          fi
        fi
      done
    else
      info "Skipping steipete toolchain (ARGENT_INSTALL_STEIPETE_TOOLS=0)"
    fi

    ARGENT_PG_PORT=5433
    ARGENT_PG_DB="argentos"
    PG_DATA="$BREW_PREFIX/var/postgresql@17"
    PG_CONF="$PG_DATA/postgresql.conf"
    INITDB="$BREW_PREFIX/opt/postgresql@17/bin/initdb"
    PSQL="$BREW_PREFIX/opt/postgresql@17/bin/psql"

    if [[ ! -f "$PG_CONF" ]]; then
      info "Initializing PostgreSQL 17 data dir"
      mkdir -p "$PG_DATA"
      if "$INITDB" -D "$PG_DATA" >/dev/null 2>&1; then
        ok "PostgreSQL cluster initialized"
      else
        warn "Failed to initialize PostgreSQL cluster"
      fi
    fi

    if [[ -f "$PG_CONF" ]]; then
      if ! grep -Eq "^[[:space:]]*port[[:space:]]*=[[:space:]]*${ARGENT_PG_PORT}([[:space:]]|$)" "$PG_CONF" 2>/dev/null; then
        sed -E -i '' "s/^[[:space:]]*#?[[:space:]]*port[[:space:]]*=.*/port = ${ARGENT_PG_PORT}/" "$PG_CONF" || true
      fi
    fi

    wait_for_pg() {
      local pg_port="$1"
      for _ in {1..30}; do
        if "$PSQL" -h 127.0.0.1 -p "$pg_port" -d postgres -c "SELECT 1;" >/dev/null 2>&1; then
          return 0
        fi
        sleep 1
      done
      return 1
    }

    if brew services restart postgresql@17 >/dev/null 2>&1 || brew services start postgresql@17 >/dev/null 2>&1; then
      ok "PostgreSQL service started"
    else
      warn "Failed to start PostgreSQL service"
    fi

    if ! wait_for_pg "$ARGENT_PG_PORT"; then
      if wait_for_pg 5432; then
        warn "PostgreSQL is reachable on 5432 (expected ${ARGENT_PG_PORT}); forcing port override + restart"
        if [[ -f "$PG_CONF" ]]; then
          sed -E -i '' "s/^[[:space:]]*#?[[:space:]]*port[[:space:]]*=.*/port = ${ARGENT_PG_PORT}/" "$PG_CONF" || true
        fi
        brew services restart postgresql@17 >/dev/null 2>&1 || true
      fi
    fi

    if wait_for_pg "$ARGENT_PG_PORT"; then
      "$PSQL" -p "$ARGENT_PG_PORT" -d postgres -c "CREATE DATABASE ${ARGENT_PG_DB};" >/dev/null 2>&1 || true
      "$PSQL" -p "$ARGENT_PG_PORT" -d "$ARGENT_PG_DB" -c "CREATE EXTENSION IF NOT EXISTS vector;" >/dev/null 2>&1 || true
      "$PSQL" -p "$ARGENT_PG_PORT" -d "$ARGENT_PG_DB" -c "CREATE EXTENSION IF NOT EXISTS pg_trgm;" >/dev/null 2>&1 || true
      ok "PostgreSQL ready at postgres://localhost:${ARGENT_PG_PORT}/${ARGENT_PG_DB}"
    else
      warn "PostgreSQL not reachable on port ${ARGENT_PG_PORT}"
    fi

    ARGENT_REDIS_PORT=6380
    LAUNCH_AGENTS_DIR="${ARGENT_LAUNCH_AGENTS_DIR:-$HOME/Library/LaunchAgents}"
    ARGENT_REDIS_CONF_DIR="${STATE_DIR}/redis"
    ARGENT_REDIS_CONF="${ARGENT_REDIS_CONF_DIR}/redis.conf"
    ARGENT_REDIS_DATA="${STATE_DIR}/redis/data"
    ARGENT_REDIS_LOG="${STATE_DIR}/logs/redis.log"
    REDIS_SERVER="$BREW_PREFIX/bin/redis-server"
    REDIS_CLI="$BREW_PREFIX/bin/redis-cli"
    REDIS_PLIST="${LAUNCH_AGENTS_DIR}/ai.argent.redis.plist"

    mkdir -p "$ARGENT_REDIS_CONF_DIR" "$ARGENT_REDIS_DATA" "$(dirname "$ARGENT_REDIS_LOG")" "$LAUNCH_AGENTS_DIR"
    cat > "$ARGENT_REDIS_CONF" << REDISCONF
port ${ARGENT_REDIS_PORT}
bind 127.0.0.1
protected-mode yes
daemonize no
appendonly yes
appendfilename "argentos.aof"
dir ${ARGENT_REDIS_DATA}
maxmemory 256mb
maxmemory-policy allkeys-lru
loglevel notice
logfile ${ARGENT_REDIS_LOG}
stream-node-max-bytes 4096
stream-node-max-entries 100
REDISCONF

    cat > "$REDIS_PLIST" << REDISPLIST
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>Label</key>
    <string>ai.argent.redis</string>
    <key>ProgramArguments</key>
    <array>
        <string>${REDIS_SERVER}</string>
        <string>${ARGENT_REDIS_CONF}</string>
    </array>
    <key>RunAtLoad</key>
    <true/>
    <key>KeepAlive</key>
    <true/>
    <key>StandardErrorPath</key>
    <string>${ARGENT_REDIS_LOG}</string>
    <key>StandardOutPath</key>
    <string>${ARGENT_REDIS_LOG}</string>
</dict>
</plist>
REDISPLIST

    wait_for_redis() {
      local redis_port="$1"
      for _ in {1..30}; do
        if "$REDIS_CLI" -p "$redis_port" ping 2>/dev/null | grep -q "PONG"; then
          return 0
        fi
        sleep 1
      done
      return 1
    }

    launchctl bootout "gui/$(id -u)/ai.argent.redis" >/dev/null 2>&1 || true
    launchctl bootstrap "gui/$(id -u)" "$REDIS_PLIST" >/dev/null 2>&1 || true
    launchctl kickstart "gui/$(id -u)/ai.argent.redis" >/dev/null 2>&1 || true
    if wait_for_redis "$ARGENT_REDIS_PORT"; then
      ok "Redis ready on port ${ARGENT_REDIS_PORT}"
    else
      warn "Redis failed to start on port ${ARGENT_REDIS_PORT}"
      if wait_for_redis 6379; then
        warn "Redis appears to be running on default port 6379; ArgentOS expects ${ARGENT_REDIS_PORT}"
      fi
      launchctl print "gui/$(id -u)/ai.argent.redis" >/dev/null 2>&1 || warn "LaunchAgent ai.argent.redis did not load cleanly"
    fi

    if brew services start ollama >/dev/null 2>&1; then
      ok "Ollama service started"
    else
      warn "Failed to start Ollama via brew services"
    fi

    if command -v ollama >/dev/null 2>&1; then
      OLLAMA_READY=0
      for _ in {1..20}; do
        if ollama list >/dev/null 2>&1; then
          OLLAMA_READY=1
          break
        fi
        sleep 1
      done

      if [[ "$OLLAMA_READY" -eq 1 ]]; then
        ok "Ollama API reachable"
        if is_truthy "$PULL_OLLAMA_MODELS"; then
          IFS=',' read -r -a OLLAMA_MODEL_LIST <<< "$OLLAMA_MODELS"
          for model in "${OLLAMA_MODEL_LIST[@]}"; do
            model="$(echo "$model" | xargs)"
            [[ -z "$model" ]] && continue
            if ollama list 2>/dev/null | awk 'NR>1 {print $1}' | grep -Fxq "$model"; then
              ok "Ollama model present: $model"
            else
              info "Pulling Ollama model: $model"
              if ollama pull "$model" >/dev/null 2>&1; then
                ok "Pulled model: $model"
              else
                warn "Failed to pull Ollama model: $model"
              fi
            fi
          done
        else
          info "Skipping Ollama model pull (ARGENT_PULL_OLLAMA_MODELS=0)"
        fi
      else
        warn "Ollama API not reachable; skipping model checks"
      fi
    else
      warn "Ollama CLI not found after install attempt"
    fi

    if [[ -f "$CONFIG_FILE" ]]; then
      ARGENT_CONFIG_FILE="$CONFIG_FILE" ARGENT_PG_PORT="$ARGENT_PG_PORT" ARGENT_PG_DB="$ARGENT_PG_DB" node << 'NODE'
const fs = require("node:fs");
const path = process.env.ARGENT_CONFIG_FILE;
if (!path) process.exit(0);
let raw = "";
try {
  raw = fs.readFileSync(path, "utf-8");
} catch {
  process.exit(0);
}
let cfg;
try {
  cfg = JSON.parse(raw);
} catch {
  process.exit(0);
}
const next = { ...cfg };
const storage = typeof next.storage === "object" && next.storage ? { ...next.storage } : {};
if (!storage.backend) storage.backend = "dual";
if (!storage.readFrom) storage.readFrom = "sqlite";
if (!Array.isArray(storage.writeTo) || storage.writeTo.length === 0) {
  storage.writeTo = ["sqlite", "postgres"];
}
if (!storage.postgres || typeof storage.postgres !== "object") storage.postgres = {};
if (!storage.postgres.connectionString) {
  storage.postgres.connectionString = `postgres://localhost:${process.env.ARGENT_PG_PORT || "5433"}/${process.env.ARGENT_PG_DB || "argentos"}`;
}
if (!storage.redis || typeof storage.redis !== "object") storage.redis = {};
if (!storage.redis.host) storage.redis.host = "127.0.0.1";
if (!storage.redis.port) storage.redis.port = 6380;
next.storage = storage;
if (JSON.stringify(next) !== JSON.stringify(cfg)) {
  fs.writeFileSync(path, `${JSON.stringify(next, null, 2)}\n`, "utf-8");
}
NODE
      ok "Config checked for PostgreSQL/Redis defaults"
    fi
  fi
fi

# ============================================================================
# Step 7: Set up local LLM runtime (Ollama)
# ============================================================================
# Per the 2026-05-24 thermal investigation (PRs #382/#384/#387/#388 and the
# Obsidian "Ollama+MLX as Mac Default Stack" decision doc), Ollama is the
# recommended local-LLM runtime for ArgentOS on Mac. It's headless (no GUI
# overhead like LM Studio), MLX-native on Apple Silicon, and the consciousness
# kernel's localModel slot is wizard-defaulted to an ollama/ prefix.
#
# Default behaviour: if ollama isn't already on PATH, install it via the
# official one-liner. The official installer is signed and idempotent.
# Set ARGENT_SKIP_OLLAMA_INSTALL=1 to opt out entirely. Set
# ARGENT_OLLAMA_PREPULL_MODEL=qwen3.5:9b-mlx (or another tag) to also
# download a starter model so the first kernel reflection isn't blocked.
step 7 "Setting up local LLM runtime (Ollama)"

if is_truthy "$SKIP_OLLAMA_INSTALL"; then
  info "Skipping Ollama install (ARGENT_SKIP_OLLAMA_INSTALL=1)"
elif command -v ollama >/dev/null 2>&1; then
  ok "Ollama already installed ($(ollama --version 2>/dev/null | head -1 || echo 'version unknown'))"
else
  info "Installing Ollama via official installer (curl -fsSL https://ollama.com/install.sh | sh)"
  if curl -fsSL https://ollama.com/install.sh | sh; then
    if command -v ollama >/dev/null 2>&1; then
      ok "Ollama installed"
    else
      warn "Ollama installer reported success but 'ollama' is not on PATH yet"
      warn "Open a new shell or run: export PATH=\"/usr/local/bin:\$PATH\""
    fi
  else
    warn "Ollama install failed — you can install it manually later (https://ollama.com/download)"
    warn "Or rerun with ARGENT_SKIP_OLLAMA_INSTALL=1 to skip this step"
  fi
fi

if [[ -n "$OLLAMA_PREPULL_MODEL" ]] && command -v ollama >/dev/null 2>&1; then
  info "Pre-pulling Ollama model: $OLLAMA_PREPULL_MODEL"
  info "(this can take a while depending on model size and connection)"
  if ollama pull "$OLLAMA_PREPULL_MODEL"; then
    ok "Model ready: $OLLAMA_PREPULL_MODEL"
  else
    warn "Model pull failed — you can retry later: ollama pull $OLLAMA_PREPULL_MODEL"
  fi
elif [[ -n "$OLLAMA_PREPULL_MODEL" ]]; then
  warn "ARGENT_OLLAMA_PREPULL_MODEL was set but 'ollama' isn't on PATH; skipping pre-pull"
fi

# ============================================================================
# Step 8: Port conflict check
# ============================================================================
step 8 "Checking for port conflicts"

check_port() {
  local port=$1 label=$2
  if lsof -iTCP:"$port" -sTCP:LISTEN -t &>/dev/null; then
    warn "Port $port ($label) is already in use — service may fail to bind"
  else
    ok "Port $port ($label) is free"
  fi
}
check_port 18789 "Gateway"
check_port 9242  "Dashboard API"
check_port 8080  "Dashboard UI"
step 9 "Installing LaunchAgents"

LAUNCH_AGENTS_DIR="${ARGENT_LAUNCH_AGENTS_DIR:-$HOME/Library/LaunchAgents}"
PLIST_PATH="$LAUNCH_AGENTS_DIR/ai.argent.gateway.plist"
UI_PLIST_PATH="$LAUNCH_AGENTS_DIR/ai.argent.dashboard-ui.plist"
API_PLIST_PATH="$LAUNCH_AGENTS_DIR/ai.argent.dashboard-api.plist"

if is_truthy "$SKIP_LAUNCH_AGENTS"; then
  info "Skipping LaunchAgent install (ARGENT_SKIP_LAUNCH_AGENTS=1)"
else
  info "Installing gateway LaunchAgent..."
  "$NODE_BIN" "$ARGENT_HOME/argent.mjs" daemon install 2>&1 | while IFS= read -r line; do
    info "$line"
  done

  if [[ -f "$PLIST_PATH" ]]; then
    ok "Gateway LaunchAgent installed"
  else
    warn "Gateway LaunchAgent plist not found — check 'argent daemon install' output"
  fi

  info "Installing dashboard LaunchAgents..."
  "$NODE_BIN" "$ARGENT_HOME/argent.mjs" cs install 2>&1 | while IFS= read -r line; do
    info "$line"
  done

  if [[ -f "$UI_PLIST_PATH" && -f "$API_PLIST_PATH" ]]; then
    ok "Dashboard LaunchAgents installed"
  else
    warn "Dashboard LaunchAgent plists missing — check 'argent cs install' output"
  fi
fi

# ============================================================================
# Step 10: Start gateway
# ============================================================================
step 10 "Starting gateway"

if is_truthy "$SKIP_LAUNCH_AGENTS" || is_truthy "$SKIP_SERVICE_START"; then
  info "Skipping gateway start (LaunchAgents/services disabled for this run)"
elif launchctl list 2>/dev/null | grep -q "ai.argent.gateway"; then
  ok "Gateway already running"
else
  if [[ -f "$PLIST_PATH" ]]; then
    launchctl bootstrap "gui/$(id -u)" "$PLIST_PATH" 2>/dev/null || true
    launchctl kickstart "gui/$(id -u)/ai.argent.gateway" 2>/dev/null || true
    sleep 1
    if launchctl list 2>/dev/null | grep -q "ai.argent.gateway"; then
      ok "Gateway started"
    else
      warn "Gateway may not have started — check 'argent gateway status'"
    fi
  else
    warn "No LaunchAgent plist — skipping gateway start"
  fi
fi

# ============================================================================
# Step 11: Start dashboard services
# ============================================================================
step 11 "Starting dashboard services"

if is_truthy "$SKIP_LAUNCH_AGENTS" || is_truthy "$SKIP_SERVICE_START"; then
  info "Skipping dashboard service start (LaunchAgents/services disabled for this run)"
elif [[ ! -f "$UI_PLIST_PATH" || ! -f "$API_PLIST_PATH" ]]; then
  warn "Dashboard LaunchAgent plist(s) missing — skipping dashboard service start"
else
  if launchctl list 2>/dev/null | grep -q "ai.argent.dashboard-ui"; then
    ok "Dashboard UI service already running"
  else
    launchctl bootstrap "gui/$(id -u)" "$UI_PLIST_PATH" 2>/dev/null || true
    launchctl kickstart "gui/$(id -u)/ai.argent.dashboard-ui" 2>/dev/null || true
  fi

  if launchctl list 2>/dev/null | grep -q "ai.argent.dashboard-api"; then
    ok "Dashboard API service already running"
  else
    launchctl bootstrap "gui/$(id -u)" "$API_PLIST_PATH" 2>/dev/null || true
    launchctl kickstart "gui/$(id -u)/ai.argent.dashboard-api" 2>/dev/null || true
  fi

  sleep 1
  if launchctl list 2>/dev/null | grep -q "ai.argent.dashboard-ui"; then
    ok "Dashboard UI service started"
  else
    warn "Dashboard UI may not have started — check: launchctl print gui/$(id -u)/ai.argent.dashboard-ui"
  fi
  if launchctl list 2>/dev/null | grep -q "ai.argent.dashboard-api"; then
    ok "Dashboard API service started"
  else
    warn "Dashboard API may not have started — check: launchctl print gui/$(id -u)/ai.argent.dashboard-api"
  fi
fi

# ============================================================================
# Gateway health verification
# ============================================================================
if ! is_truthy "$SKIP_LAUNCH_AGENTS" && ! is_truthy "$SKIP_SERVICE_START"; then
  info "Verifying gateway health..."
  GW_HEALTHY=false
  for i in 1 2 3 4 5 6 7 8 9 10; do
    if nc -z 127.0.0.1 18789 2>/dev/null; then
      GW_HEALTHY=true
      break
    fi
    sleep 2
  done
  if $GW_HEALTHY; then
    ok "Gateway is healthy"
  else
    warn "Gateway did not become healthy within 20s — check 'argent gateway status'"
  fi
fi

# ============================================================================
# Done
# ============================================================================
printf "\n${BOLD}  ✓ All steps complete${RESET}\n"

printf "\n"
printf "${BOLD}  ArgentOS is ready!${RESET}\n"
printf "\n"
printf "  ${CYAN}Dashboard:${RESET}  http://localhost:${DASHBOARD_PORT}\n"
printf "  ${CYAN}CLI:${RESET}        argent --help\n"
printf "  ${CYAN}Gateway:${RESET}    argent gateway status\n"
printf "  ${CYAN}State dir:${RESET}  ${STATE_DIR}\n"
printf "  ${CYAN}Workspace:${RESET}  ${WORKSPACE_DIR}\n"
printf "\n"
printf "  Open ${BOLD}http://localhost:${DASHBOARD_PORT}${RESET} in your browser to get started.\n"
printf "\n"

if command -v notebooklm >/dev/null 2>&1; then
  info "NotebookLM CLI detected. Run 'notebooklm login' once before using youtube_notebooklm."
fi

if ! echo "$PATH" | tr ':' '\n' | grep -qx "$BIN_DIR"; then
  warn "Restart your terminal (or run: export PATH=\"$BIN_DIR:\$PATH\")"
fi