flowchart LR
    subgraph CLIENTS["Clients"]
        D27[".27 desktop<br/>paseo CLI"]
        D51[".51 laptop<br/>paseo CLI"]
        M["Mobile / web UI<br/>browser / Tailscale"]
    end
    subgraph N13["Native daemon on .13 (NixOS, always-on)"]
        D["Paseo daemon 0.7.2<br/>systemd user service<br/>0.0.0.0:6767"]
        PI["pi 0.82.1 (Nix)<br/>pi --mode rpc<br/>host ~/.pi + ~/.agents"]
        FS[("Host filesystem as `sam`<br/>projects: ~/paseo/projects/<br/>obsidian vault, photos, /mnt/*")]
        FW["NixOS firewall<br/>port 6767 open"]
    end
    subgraph LLM["LLM routing"]
        OR["OmniRoute .13:20129"]
        OP["OpenRouter / DeepSeek /<br/>OpenCode-Go (deferred)"]
    end
    D27 -->|"PASEO_HOST + password"| D
    D51 -->|"PASEO_HOST + password"| D
    M -->|"Tailscale / LAN :6767"| D
    D -->|"spawns / manages (no sandbox)"| PI
    PI -->|"direct access, real permissions"| FS
    D -.->|"listen allowed"| FW
    PI -->|"omni provider /v1"| OR
    OR -->|"combo routing"| OP