@agentdocumentformat/cli 0.7.8 → 0.8.1

package/dist/chunks/daemon-control-MKN7G5M3.mjs

@@ -0,0 +1,59 @@
+import { createRequire as __adfCreateRequire } from 'node:module';
+import { fileURLToPath as __adfFileURLToPath } from 'node:url';
+import { dirname as __adfDirname } from 'node:path';
+const require = __adfCreateRequire(import.meta.url);
+const __filename = __adfFileURLToPath(import.meta.url);
+const __dirname = __adfDirname(__filename);
+import {
+  DaemonStartError,
+  STUDIO_ADVICE,
+  daemonLaunch,
+  daemonPaths,
+  daemonStatus,
+  daemonTarget,
+  daemonUrlFrom,
+  ensureDaemon,
+  followLog,
+  hostControlToken,
+  hostOnlyRefusal,
+  isHealthy,
+  isLoopbackHost,
+  processAlive,
+  readPidFile,
+  startDaemon,
+  stopDaemon,
+  studioConflict,
+  tailLines
+} from "./chunk-RHBGCOS3.mjs";
+import "./chunk-D7A77SNL.mjs";
+import {
+  DEFAULT_DAEMON_PORT
+} from "./chunk-AEAJDCVK.mjs";
+import "./chunk-BS3USVEA.mjs";
+import "./chunk-WJGPNHGX.mjs";
+import "./chunk-PAK5JCO2.mjs";
+import "./chunk-ZPB3HYM7.mjs";
+import "./chunk-LTX74NU6.mjs";
+import "./chunk-M2RX3S2T.mjs";
+export {
+  DEFAULT_DAEMON_PORT,
+  DaemonStartError,
+  STUDIO_ADVICE,
+  daemonLaunch,
+  daemonPaths,
+  daemonStatus,
+  daemonTarget,
+  daemonUrlFrom,
+  ensureDaemon,
+  followLog,
+  hostControlToken,
+  hostOnlyRefusal,
+  isHealthy,
+  isLoopbackHost,
+  processAlive,
+  readPidFile,
+  startDaemon,
+  stopDaemon,
+  studioConflict,
+  tailLines
+};

package/dist/chunks/{daemon-token-WRSULP7G.mjs → daemon-token-L5QKTHU5.mjs}

@@ -11,7 +11,9 @@ import {
   ensureDaemonToken,
   readDaemonToken,
   tokensEqual
-} from "./chunk-IHDDCZBS.mjs";
+} from "./chunk-WJGPNHGX.mjs";
+import "./chunk-PAK5JCO2.mjs";
+import "./chunk-LTX74NU6.mjs";
 import "./chunk-M2RX3S2T.mjs";
 export {
   DAEMON_TOKEN_FILENAME,

package/dist/chunks/{discord-DSP4HUWI.mjs → discord-IR62565M.mjs}

@@ -7,6 +7,9 @@ const __dirname = __adfDirname(__filename);
 import {
   require_fast_deep_equal
 } from "./chunk-64OKE4X3.mjs";
+import {
+  require_es6
+} from "./chunk-KDDVQKCG.mjs";
 import {
   require_ws
 } from "./chunk-6XUV6EK6.mjs";
@@ -42391,58 +42394,6 @@ var require_get = __commonJS({
   }
 });
 
-// node_modules/fast-deep-equal/es6/index.js
-var require_es6 = __commonJS({
-  "node_modules/fast-deep-equal/es6/index.js"(exports2, module2) {
-    "use strict";
-    module2.exports = function equal(a, b) {
-      if (a === b) return !0;
-      if (a && b && typeof a == "object" && typeof b == "object") {
-        if (a.constructor !== b.constructor) return !1;
-        var length, i, keys;
-        if (Array.isArray(a)) {
-          if (length = a.length, length != b.length) return !1;
-          for (i = length; i-- !== 0; )
-            if (!equal(a[i], b[i])) return !1;
-          return !0;
-        }
-        if (a instanceof Map && b instanceof Map) {
-          if (a.size !== b.size) return !1;
-          for (i of a.entries())
-            if (!b.has(i[0])) return !1;
-          for (i of a.entries())
-            if (!equal(i[1], b.get(i[0]))) return !1;
-          return !0;
-        }
-        if (a instanceof Set && b instanceof Set) {
-          if (a.size !== b.size) return !1;
-          for (i of a.entries())
-            if (!b.has(i[0])) return !1;
-          return !0;
-        }
-        if (ArrayBuffer.isView(a) && ArrayBuffer.isView(b)) {
-          if (length = a.length, length != b.length) return !1;
-          for (i = length; i-- !== 0; )
-            if (a[i] !== b[i]) return !1;
-          return !0;
-        }
-        if (a.constructor === RegExp) return a.source === b.source && a.flags === b.flags;
-        if (a.valueOf !== Object.prototype.valueOf) return a.valueOf() === b.valueOf();
-        if (a.toString !== Object.prototype.toString) return a.toString() === b.toString();
-        if (keys = Object.keys(a), length = keys.length, length !== Object.keys(b).length) return !1;
-        for (i = length; i-- !== 0; )
-          if (!Object.prototype.hasOwnProperty.call(b, keys[i])) return !1;
-        for (i = length; i-- !== 0; ) {
-          var key = keys[i];
-          if (!equal(a[key], b[key])) return !1;
-        }
-        return !0;
-      }
-      return a !== a && b !== b;
-    };
-  }
-});
-
 // node_modules/lodash/_setCacheAdd.js
 var require_setCacheAdd = __commonJS({
   "node_modules/lodash/_setCacheAdd.js"(exports2, module2) {

package/dist/chunks/{email-BRG7KUO2.mjs → email-KHHTJBDW.mjs}

@@ -58496,6 +58496,8 @@ var EmailAdapter = class {
   }
   async processMessage(msg, policy, maxAttachmentSize) {
     if (!this.ctx) return;
+    if (!msg.source)
+      throw new Error(`IMAP did not return the source for email UID ${msg.uid}`);
     let parsed = await (0, import_mailparser.simpleParser)(msg.source), senderAddress = parsed.from?.value?.[0]?.address;
     if (!senderAddress) return;
     let dmPolicy = policy.dm ?? "all";
@@ -58538,10 +58540,10 @@ var EmailAdapter = class {
         );
       }
     }
-    let references = Array.isArray(parsed.references) ? parsed.references : parsed.references ? [parsed.references] : [], threadRoot = references.length > 0 ? references[0] : parsed.messageId, toAddrs = parsed.to?.value?.map((v2) => v2.address).filter(Boolean) ?? [], ccAddrs = parsed.cc?.value?.map((v2) => v2.address).filter(Boolean) ?? [], allRecipients = [...toAddrs, ...ccAddrs], meta;
+    let references = Array.isArray(parsed.references) ? parsed.references : parsed.references ? [parsed.references] : [], threadRoot = references.length > 0 ? references[0] : parsed.messageId, addresses = (value) => (Array.isArray(value) ? value : value ? [value] : []).flatMap((group) => group.value), to = addresses(parsed.to), cc = addresses(parsed.cc), toAddrs = to.flatMap((v2) => v2.address ? [v2.address] : []), ccAddrs = cc.flatMap((v2) => v2.address ? [v2.address] : []), allRecipients = [...toAddrs, ...ccAddrs], meta;
     if (allRecipients.length > 1) {
       let named = /* @__PURE__ */ new Map();
-      for (let v2 of [...parsed.to?.value ?? [], ...parsed.cc?.value ?? []])
+      for (let v2 of [...to, ...cc])
         v2.address && named.set(v2.address, v2.name || void 0);
       meta = {
         group: buildGroupMeta({

package/dist/chunks/{grok-subscription-4PYX7TBF.mjs → grok-subscription-E74FS5EG.mjs}

@@ -5,14 +5,17 @@ const require = __adfCreateRequire(import.meta.url);
 const __filename = __adfFileURLToPath(import.meta.url);
 const __dirname = __adfDirname(__filename);
 import {
+  GROK_SUBSCRIPTION_MEDIA,
   GROK_SUBSCRIPTION_MODELS,
   createGrokSubscriptionProvider,
   listGrokSubscriptionModels
-} from "./chunk-Y5ZLKFLE.mjs";
-import "./chunk-LFMB4PAA.mjs";
+} from "./chunk-XNNJQCZP.mjs";
+import "./chunk-TKXIH27X.mjs";
+import "./chunk-LKFHERRV.mjs";
 import "./chunk-RIX34QHC.mjs";
 import "./chunk-M2RX3S2T.mjs";
 export {
+  GROK_SUBSCRIPTION_MEDIA,
   GROK_SUBSCRIPTION_MODELS,
   createGrokSubscriptionProvider,
   listGrokSubscriptionModels

package/dist/chunks/{layout-EPJQNFAI.mjs → layout-ECWGJF6M.mjs}

@@ -9,9 +9,9 @@ import {
   readLayout,
   setMouse,
   setSidebarHidden
-} from "./chunk-APRU6PHC.mjs";
-import "./chunk-5QU5VY7N.mjs";
+} from "./chunk-JZ7AQNPM.mjs";
 import "./chunk-7XYNI52E.mjs";
+import "./chunk-5QU5VY7N.mjs";
 import "./chunk-6GJ4QHRI.mjs";
 import "./chunk-M2RX3S2T.mjs";
 export {

package/dist/chunks/{lib-N7FCZWKH.mjs → lib-L27L5PXM.mjs}

@@ -11,19 +11,10 @@ import {
 } from "./chunk-EWL5FG4I.mjs";
 import {
   hasID3v1Header
-} from "./chunk-VAUOM3IN.mjs";
-import {
-  LyricsContentType,
-  TimestampFormat
-} from "./chunk-DXWDD5XJ.mjs";
+} from "./chunk-DLWCKKIO.mjs";
 import {
   APEv2Parser
-} from "./chunk-NBTUWMGP.mjs";
-import {
-  decodeString,
-  getUintBE,
-  toRatio
-} from "./chunk-XX7OSWTO.mjs";
+} from "./chunk-2MTE22CR.mjs";
 import {
   EndOfStreamError,
   fromBlob,
@@ -32,6 +23,15 @@ import {
   fromStream,
   fromWebStream
 } from "./chunk-HBUENVQL.mjs";
+import {
+  LyricsContentType,
+  TimestampFormat
+} from "./chunk-DXWDD5XJ.mjs";
+import {
+  decodeString,
+  getUintBE,
+  toRatio
+} from "./chunk-XX7OSWTO.mjs";
 import {
   CouldNotDetermineFileTypeError,
   FieldDecodingError,
@@ -3715,7 +3715,7 @@ var mpegParserLoader = {
   extensions: [".mp2", ".mp3", ".m2a", ".aac", "aacp"],
   mimeTypes: ["audio/mpeg", "audio/mp3", "audio/aacs", "audio/aacp"],
   async load() {
-    return (await import("./MpegParser-YW6LIUEW.mjs")).MpegParser;
+    return (await import("./MpegParser-XIIPAZVM.mjs")).MpegParser;
   }
 };
 
@@ -3725,7 +3725,7 @@ var apeParserLoader = {
   extensions: [".ape"],
   mimeTypes: ["audio/ape", "audio/monkeys-audio"],
   async load() {
-    return (await import("./APEv2Parser-2CNNHMXV.mjs")).APEv2Parser;
+    return (await import("./APEv2Parser-WIXRJLHB.mjs")).APEv2Parser;
   }
 };
 
@@ -3745,7 +3745,7 @@ var dsdiffParserLoader = {
   extensions: [".dff"],
   mimeTypes: ["audio/dsf", "audio/dsd"],
   async load() {
-    return (await import("./DsdiffParser-CMD4AX7A.mjs")).DsdiffParser;
+    return (await import("./DsdiffParser-UAPAJHFX.mjs")).DsdiffParser;
   }
 };
 
@@ -3755,7 +3755,7 @@ var aiffParserLoader = {
   extensions: [".aif", "aiff", "aifc"],
   mimeTypes: ["audio/aiff", "audio/aif", "audio/aifc", "application/aiff"],
   async load() {
-    return (await import("./AiffParser-7BR4RL6G.mjs")).AIFFParser;
+    return (await import("./AiffParser-ZC4QFOVJ.mjs")).AIFFParser;
   }
 };
 
@@ -3765,7 +3765,7 @@ var dsfParserLoader = {
   extensions: [".dsf"],
   mimeTypes: ["audio/dsf"],
   async load() {
-    return (await import("./DsfParser-UOGZDS2M.mjs")).DsfParser;
+    return (await import("./DsfParser-NNYZK2QX.mjs")).DsfParser;
   }
 };
 
@@ -3775,7 +3775,7 @@ var flacParserLoader = {
   extensions: [".flac"],
   mimeTypes: ["audio/flac"],
   async load() {
-    return (await import("./FlacParser-HB3T3CD4.mjs")).FlacParser;
+    return (await import("./FlacParser-MW2W4LO3.mjs")).FlacParser;
   }
 };
 
@@ -3795,7 +3795,7 @@ var mp4ParserLoader = {
   extensions: [".mp4", ".m4a", ".m4b", ".m4pa", "m4v", "m4r", "3gp", ".mov", ".movie", ".qt"],
   mimeTypes: ["audio/mp4", "audio/m4a", "video/m4v", "video/mp4", "video/quicktime"],
   async load() {
-    return (await import("./MP4Parser-66HBRUSX.mjs")).MP4Parser;
+    return (await import("./MP4Parser-Z57SYOOQ.mjs")).MP4Parser;
   }
 };
 
@@ -3805,7 +3805,7 @@ var musepackParserLoader = {
   extensions: [".mpc"],
   mimeTypes: ["audio/musepack"],
   async load() {
-    return (await import("./MusepackParser-PAUSXP7D.mjs")).MusepackParser;
+    return (await import("./MusepackParser-QWNDEYHJ.mjs")).MusepackParser;
   }
 };
 
@@ -3816,7 +3816,7 @@ var oggParserLoader = {
   mimeTypes: ["audio/ogg", "audio/opus", "audio/speex", "video/ogg"],
   // RFC 7845, RFC 6716, RFC 5574
   async load() {
-    return (await import("./OggParser-NUBV3GWC.mjs")).OggParser;
+    return (await import("./OggParser-WRX53F77.mjs")).OggParser;
   }
 };
 
@@ -3826,7 +3826,7 @@ var wavpackParserLoader = {
   extensions: [".wv", ".wvp"],
   mimeTypes: ["audio/wavpack"],
   async load() {
-    return (await import("./WavPackParser-WQAGT7TC.mjs")).WavPackParser;
+    return (await import("./WavPackParser-MJ7WCSJ5.mjs")).WavPackParser;
   }
 };
 
@@ -3836,7 +3836,7 @@ var riffParserLoader = {
   extensions: [".wav", "wave", ".bwf"],
   mimeTypes: ["audio/vnd.wave", "audio/wav", "audio/wave"],
   async load() {
-    return (await import("./WaveParser-EWLQVDX4.mjs")).WaveParser;
+    return (await import("./WaveParser-RAVLHZ5S.mjs")).WaveParser;
   }
 };
 

package/dist/chunks/{open-VAU7PXT6.mjs → open-3OR6WT4T.mjs}

@@ -12,14 +12,14 @@ import {
   openProviderAdd,
   openWelcome,
   secretStoreReady
-} from "./chunk-QPLEAE6V.mjs";
-import "./chunk-7CV2SA3H.mjs";
-import "./chunk-I3UYSITV.mjs";
-import "./chunk-SGUTYISF.mjs";
+} from "./chunk-2Z7X3UUR.mjs";
+import "./chunk-O7XKQ6CH.mjs";
 import "./chunk-5QU5VY7N.mjs";
-import "./chunk-VMHTYDH4.mjs";
+import "./chunk-SOSPQPEN.mjs";
 import "./chunk-3AT7IIP7.mjs";
-import "./chunk-PRMGZZM5.mjs";
+import "./chunk-NZLEPJ5M.mjs";
+import "./chunk-7CV2SA3H.mjs";
+import "./chunk-SGUTYISF.mjs";
 import "./chunk-6GJ4QHRI.mjs";
 import "./chunk-UYY5M2PB.mjs";
 import "./chunk-ZJKXHM4Q.mjs";

package/dist/chunks/{parser-JVY2PWSM.mjs → parser-7GARNT5L.mjs}

@@ -9,7 +9,7 @@ import {
   classifyRedirectTarget,
   parse,
   unsupportedDevTargetMessage
-} from "./chunk-5W7KES6P.mjs";
+} from "./chunk-UZPDETEU.mjs";
 import "./chunk-M2RX3S2T.mjs";
 export {
   ParseError,

package/dist/chunks/{pipeline-executor-O77NTGLP.mjs → pipeline-executor-DRYEEFDR.mjs}

@@ -7,13 +7,14 @@ const __dirname = __adfDirname(__filename);
 import {
   MAX_SHELL_DEPTH,
   executeNode
-} from "./chunk-ZESQMP66.mjs";
-import "./chunk-5W7KES6P.mjs";
+} from "./chunk-F3WSCAJD.mjs";
+import "./chunk-UZPDETEU.mjs";
 import "./chunk-ESP3VNMX.mjs";
-import "./chunk-HSBV6YFU.mjs";
-import "./chunk-G6PH7RPW.mjs";
+import "./chunk-LVF2DRBR.mjs";
+import "./chunk-E7LC6SHP.mjs";
 import "./chunk-3GNIDM53.mjs";
-import "./chunk-CD3ATSXE.mjs";
+import "./chunk-LKFHERRV.mjs";
+import "./chunk-BR3AD5QZ.mjs";
 import "./chunk-M2RX3S2T.mjs";
 export {
   MAX_SHELL_DEPTH,

package/dist/chunks/prompt-RRHZX4YT.mjs

@@ -0,0 +1,13 @@
+import { createRequire as __adfCreateRequire } from 'node:module';
+import { fileURLToPath as __adfFileURLToPath } from 'node:url';
+import { dirname as __adfDirname } from 'node:path';
+const require = __adfCreateRequire(import.meta.url);
+const __filename = __adfFileURLToPath(import.meta.url);
+const __dirname = __adfDirname(__filename);
+import {
+  stdinPrompt
+} from "./chunk-PC63YFB7.mjs";
+import "./chunk-M2RX3S2T.mjs";
+export {
+  stdinPrompt
+};

package/dist/chunks/remote-access-cli-GLEEP7DI.mjs

@@ -0,0 +1,268 @@
+import { createRequire as __adfCreateRequire } from 'node:module';
+import { fileURLToPath as __adfFileURLToPath } from 'node:url';
+import { dirname as __adfDirname } from 'node:path';
+const require = __adfCreateRequire(import.meta.url);
+const __filename = __adfFileURLToPath(import.meta.url);
+const __dirname = __adfDirname(__filename);
+import {
+  PUBLIC_WARNING,
+  unidentifiedText
+} from "./chunk-3UGZFWIF.mjs";
+import {
+  DEFAULT_DAEMON_PORT,
+  loopbackPort
+} from "./chunk-AEAJDCVK.mjs";
+import {
+  readLocalProof
+} from "./chunk-BS3USVEA.mjs";
+import {
+  readDaemonToken
+} from "./chunk-WJGPNHGX.mjs";
+import "./chunk-PAK5JCO2.mjs";
+import "./chunk-ZPB3HYM7.mjs";
+import "./chunk-LTX74NU6.mjs";
+import "./chunk-M2RX3S2T.mjs";
+
+// src/main/cli/remote-access-cli.ts
+var REMOTE_USAGE = `Usage: adf daemon remote on [--name <name>] | off | status [--json]
+       adf daemon remote allow-network [<id|label>]   Allow on this network (default: the one network not allowed)
+       adf daemon remote forget-network <id|label>    Remove an allowed network; its listeners close now
+       adf daemon remote serve on | off      https through tailscale serve
+       adf daemon devices [list] [--json]
+       adf daemon devices add <label>        Print a new device token (shown once)
+       adf daemon devices revoke <id|label>  Disconnect that computer and void its token
+       adf daemon pair                       Open a pairing window and show its code
+
+Remote access: devices you pair or add use this computer's ADF daemon (no
+restart; agents keep running). It listens only on private and Tailscale
+addresses, and only on a network you allowed (once per network; the mesh's LAN
+mode uses the same list). A device token gives full control of this
+computer's agents: it is as powerful as your owner seed phrase.`, ManageError = class extends Error {
+  constructor(message, status, code) {
+    super(message);
+    this.status = status;
+    this.code = code;
+  }
+  status;
+  code;
+};
+async function call(io, target, method, path, body) {
+  if (loopbackPort(target.url) === null) throw new ManageError(`adf daemon remote, devices and pair manage this computer's ADF daemon only; ${target.url} is not on this computer.`, 0, "not_local");
+  let token = readDaemonToken(target.dataDir), proof = readLocalProof(target.dataDir, target.port), res = await io.fetch(`${target.url}${path}`, {
+    method,
+    headers: {
+      Accept: "application/json",
+      ...body !== void 0 ? { "Content-Type": "application/json" } : {},
+      ...token ? { Authorization: `Bearer ${token}` } : {},
+      ...proof ? { "X-ADF-Local-Proof": proof } : {}
+    },
+    ...body !== void 0 ? { body: JSON.stringify(body) } : {}
+  }), text = await res.text(), parsed = text ? JSON.parse(text) : {};
+  if (!res.ok) {
+    let code = typeof parsed.code == "string" ? parsed.code : null, message = typeof parsed.error == "string" ? parsed.error : `HTTP ${res.status}`;
+    throw new ManageError(res.status === 404 && (code === null || code === "not_found") ? `The ADF daemon at ${target.url} does not support remote access. Update it (adf daemon restart after updating adf).` : message, res.status, code);
+  }
+  return parsed;
+}
+function ago(iso) {
+  if (!iso) return "never";
+  let s = Math.max(0, Math.round((Date.now() - Date.parse(iso)) / 1e3));
+  return s < 60 ? `${s} s ago` : s < 3600 ? `${Math.round(s / 60)} min ago` : s < 86400 ? `${Math.round(s / 3600)} h ago` : `${Math.round(s / 86400)} d ago`;
+}
+function formatDevices(devices) {
+  if (devices.length === 0) return `No computers yet. Pair one: adf daemon pair (or adf daemon devices add <label>).
+`;
+  let rows = devices.map((d) => [d.id, d.label, d.origin === "paired" ? "paired" : "token", d.connected ? "connected now" : `last seen ${ago(d.lastSeenAt)}${d.lastSeenAddress ? ` from ${d.lastSeenAddress}` : ""}`]), widths = [0, 1, 2].map((i) => Math.max(...rows.map((r) => r[i].length), ["id", "label", "kind"][i].length)), line = (r) => `${r.slice(0, 3).map((c, i) => c.padEnd(widths[i])).join("  ")}  ${r[3]}`.trimEnd();
+  return `${[line(["id", "label", "kind", "status"]), ...rows.map(line)].join(`
+`)}
+`;
+}
+function formatRemoteStatus(s) {
+  let lines = [];
+  if (lines.push(`Remote access: ${s.enabled ? "on" : "off"}`), s.state !== "off" && lines.push(s.message), s.problem && lines.push(`Problem: ${s.problem}`), lines.push(`Name: ${s.name}${s.fingerprint ? `   Fingerprint: ${s.fingerprint}` : ""}`), s.urls.length) {
+    lines.push("Addresses:");
+    for (let u of s.urls) lines.push(`  ${u.url}  ${u.encrypted ? "encrypted" : "not encrypted"}${u.kind === "tailscale-https" ? " (tailscale serve)" : u.kind === "tailnet" ? " (tailnet)" : ""}`);
+  }
+  for (let a of s.addresses.filter((x) => !x.listening)) lines.push(`Not listening on ${a.address} (${a.iface}): ${a.problem ?? "not available"}`);
+  if (s.networks.length) {
+    lines.push("Networks now:");
+    for (let n of s.networks) {
+      let warn = n.kind === "lan" && !!n.id && n.osCategory !== "private" && (!n.allowed || s.enabled) ? ` ${PUBLIC_WARNING}` : "";
+      lines.push(`  ${n.label}  ${n.allowed ? `allowed${warn ? `.${warn}` : ""}` : n.id ? `not allowed (allow: adf daemon remote allow-network ${n.id})${warn}` : `not allowed. ${unidentifiedText(n.problem, "ADF")}${n.problem?.detail ? ` (${n.problem.detail})` : ""}`}`);
+    }
+  }
+  lines.push(`Allowed networks (${s.allowedNetworks.length}):`);
+  for (let n of s.allowedNetworks) lines.push(`  ${n.id}  ${n.label}`);
+  if (s.enabled) {
+    s.tailscale.state === "running" && lines.push(`Tailscale: https through tailscale serve is ${s.tailscale.serve}${s.tailscale.httpsUrl ? ` at ${s.tailscale.httpsUrl}` : s.tailscale.serve === "off" ? " (turn on: adf daemon remote serve on)" : ""}`), lines.push(`mDNS: ${s.mdns.announcing ? "announcing" : `not announcing${s.mdns.problem ? ` (${s.mdns.problem})` : ""}`}`), lines.push(`Firewall: ${s.firewall.message}`);
+    for (let c of s.firewall.commands) lines.push(`  ${c}`);
+  }
+  return s.pairing && lines.push(`Pairing window open until ${new Date(s.pairing.expiresAt).toLocaleTimeString()}${s.pairing.claim ? `; "${s.pairing.claim.deviceName}" is waiting for your answer (adf daemon pair)` : ""}`), lines.push(`Computers (${s.devices.length}):`), lines.push(formatDevices(s.devices).trimEnd().split(`
+`).map((l) => `  ${l}`).join(`
+`)), `${lines.join(`
+`)}
+`;
+}
+async function remoteCommand(args, io, target) {
+  let [action, ...rest] = args, json = rest.includes("--json") || action === "--json";
+  if (!action || action === "status" || action === "--json") {
+    let status = await call(io, target, "GET", "/remote-access?refresh=1");
+    return io.stdout(json ? `${JSON.stringify(status, null, 2)}
+` : formatRemoteStatus(status)), 0;
+  }
+  if (action === "on" || action === "off") {
+    let at = rest.indexOf("--name"), name = at >= 0 ? rest[at + 1] : void 0;
+    if (at >= 0 && !name)
+      return io.stderr(`--name requires a value
+`), 2;
+    let status = await call(io, target, "PUT", "/remote-access", { enabled: action === "on", ...name ? { name } : {} });
+    return io.stdout(json ? `${JSON.stringify(status, null, 2)}
+` : formatRemoteStatus(status)), action === "on" && !json && (io.stderr(`Other computers you pair or give a token get full control of this computer's agents, with the same power as your seed phrase.
+`), io.stderr(`Add one: adf daemon pair (or adf daemon devices add <label>). It works while this daemon runs.
+`)), 0;
+  }
+  if (action === "allow-network" || action === "forget-network") {
+    let which = rest.filter((a) => a !== "--json").join(" ").trim(), current = await call(io, target, "GET", "/remote-access?refresh=1"), id = null;
+    if (action === "allow-network") {
+      let candidates = current.networks.filter((n) => n.id && (which ? n.id === which || n.label === which : !n.allowed));
+      if (candidates.length !== 1)
+        return io.stderr(candidates.length === 0 ? `${which ? `No current network "${which}".` : "No network waiting to be allowed."} Networks now: ${current.networks.map((n) => `${n.label} (${n.id ?? unidentifiedText(n.problem, "ADF")}${n.allowed ? ", allowed" : ""})`).join(", ") || "none"}
+` : `More than one network is not allowed; name one: ${candidates.map((n) => n.id).join(", ")}
+`), 1;
+      id = candidates[0].id;
+    } else {
+      if (!which)
+        return io.stderr(`${REMOTE_USAGE}
+`), 2;
+      let found = current.allowedNetworks.filter((n) => n.id === which || n.label === which);
+      if (found.length !== 1)
+        return io.stderr(`${found.length ? "More than one allowed network has that name; use its id." : `No allowed network "${which}".`}
+`), 1;
+      id = found[0].id;
+    }
+    let status = action === "allow-network" ? await call(io, target, "POST", "/remote-access/networks", { id }) : await call(io, target, "DELETE", `/remote-access/networks/${encodeURIComponent(id)}`);
+    return io.stdout(json ? `${JSON.stringify(status, null, 2)}
+` : formatRemoteStatus(status)), 0;
+  }
+  if (action === "serve") {
+    let mode = rest[0];
+    if (mode !== "on" && mode !== "off")
+      return io.stderr(`${REMOTE_USAGE}
+`), 2;
+    let out = await call(io, target, "POST", "/remote-access/tailscale-serve", { enabled: mode === "on" });
+    return out.output && io.stderr(`${out.output}
+`), io.stdout(`tailscale serve is ${out.tailscale.serve}${out.tailscale.httpsUrl ? ` at ${out.tailscale.httpsUrl}` : ""}
+`), 0;
+  }
+  return io.stderr(`${REMOTE_USAGE}
+`), 2;
+}
+async function devicesCommand(args, io, target) {
+  let [action, ...rest] = args, json = args.includes("--json");
+  if (!action || action === "list" || action === "--json") {
+    let status = await call(io, target, "GET", "/remote-access");
+    return io.stdout(json ? `${JSON.stringify(status.devices, null, 2)}
+` : formatDevices(status.devices)), 0;
+  }
+  if (action === "add") {
+    let label = rest.filter((a) => a !== "--json").join(" ").trim();
+    if (!label)
+      return io.stderr(`Usage: adf daemon devices add <label>
+`), 2;
+    let created = await call(io, target, "POST", "/remote-access/devices", { label });
+    io.stdout(`${created.token}
+`);
+    let status = await call(io, target, "GET", "/remote-access"), url = status.urls.find((u) => u.encrypted)?.url ?? status.urls[0]?.url ?? "<this computer's address>";
+    return io.stderr(`Device token for "${created.device.label}" (id ${created.device.id}). It is shown once and is as powerful as your seed phrase.
+`), io.stderr(`On the other computer: adf --url ${url} --token <token>, or paste both in ADF Studio \u2192 Settings \u2192 Connections \u2192 Add.
+`), status.enabled || io.stderr(`Remote access is off: turn it on with adf daemon remote on.
+`), 0;
+  }
+  if (action === "revoke" || action === "remove") {
+    let key = rest.join(" ").trim();
+    if (!key)
+      return io.stderr(`Usage: adf daemon devices revoke <id|label>
+`), 2;
+    let status = await call(io, target, "GET", "/remote-access"), byId = status.devices.find((d) => d.id === key), byLabel = status.devices.filter((d) => d.label === key);
+    if (!byId && byLabel.length > 1)
+      return io.stderr(`Several computers are labelled "${key}"; give the id:
+${formatDevices(byLabel)}`), 1;
+    let device = byId ?? byLabel[0];
+    if (!device)
+      return io.stderr(`No computer "${key}". List them with: adf daemon devices
+`), 1;
+    let out = await call(io, target, "DELETE", `/remote-access/devices/${encodeURIComponent(device.id)}`);
+    return io.stdout(`Removed "${out.device.label}" (${out.device.id}): its token no longer works; closed ${out.closedSessions} session(s) and ${out.closedConnections} connection(s).
+`), 0;
+  }
+  return io.stderr(`${REMOTE_USAGE}
+`), 2;
+}
+async function pairCommand(io, target) {
+  let sleep = io.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms))), window;
+  try {
+    window = await call(io, target, "POST", "/remote-access/pairing");
+  } catch (err) {
+    if (err instanceof ManageError && err.code === "remote_access_off")
+      return io.stderr(`Remote access is off. Turn it on first: adf daemon remote on
+`), 1;
+    if (err instanceof ManageError && err.code === "remote_access_paused")
+      return io.stderr(`${err.message.replace(/\.$/, "")}: adf daemon remote allow-network
+`), 1;
+    if (err instanceof ManageError && err.code === "remote_access_not_listening")
+      return io.stderr(`${err.message} See: adf daemon remote status
+`), 1;
+    throw err;
+  }
+  let host = (await call(io, target, "GET", "/remote-access")).urls.find((u) => u.kind === "tailnet" || u.kind === "lan")?.url.replace(/^http:\/\//, "").replace(new RegExp(`:${DEFAULT_DAEMON_PORT}$`), "");
+  io.stdout(`Pairing with "${window.name}" (fingerprint ${window.fingerprint}) is open for 2 minutes.
+`), io.stdout(`On the other computer: adf pair${host ? ` ${host}` : ""}, or pair with this computer in ADF Studio \u2192 Settings \u2192 Connections.
+`), io.stdout(`Code: ${window.code.slice(0, 3)} ${window.code.slice(3)}
+`), io.stderr(`Waiting for the other computer\u2026 (Ctrl+C closes the window)
+`);
+  let interrupted = !1, stop = io.onInterrupt?.(() => {
+    interrupted = !0;
+  }), lastAttempts = window.attemptsLeft, lastLocked = window.lockedSources ?? 0;
+  try {
+    for (; ; ) {
+      if (interrupted)
+        return await call(io, target, "DELETE", "/remote-access/pairing").catch(() => {
+        }), io.stderr(`Pairing window closed.
+`), 130;
+      let p = (await call(io, target, "GET", "/remote-access")).pairing;
+      if (!p || p.openedAt !== window.openedAt)
+        return io.stderr(lastAttempts <= 1 && Date.now() < Date.parse(window.expiresAt) ? `Pairing closed after 20 wrong codes. Open a new window when you are ready: adf daemon pair
+` : `Pairing closed: the 2 minutes are over. Open a new window: adf daemon pair
+`), 1;
+      if (p.attemptsLeft < lastAttempts && io.stderr(`A wrong code was entered (${p.attemptsLeft} left in this window).
+`), lastAttempts = p.attemptsLeft, p.lockedSources > lastLocked && (io.stderr(`A computer entered 5 wrong codes and is locked out of this window (${p.lockedSources} so far). Others can still pair.
+`), lastLocked = p.lockedSources), p.claim) {
+        let c = p.claim, where = `${c.address}, ${c.via === "tailnet" ? "tailnet" : c.via === "proxy" ? "through a proxy on this computer" : "this network"}${c.tailnetLogin ? `, ${c.tailnetLogin}` : ""}`, answer = await io.prompt(`Allow "${c.deviceName}" (${where}) to control this computer's ADF daemon? It gets the same power as your seed phrase. [y/N] `), allow = answer !== null && /^\s*y(es)?\s*$/i.test(answer), decided = await call(io, target, "POST", `/remote-access/pairing/claims/${encodeURIComponent(c.claimId)}`, { allow });
+        return decided.state === "approved" ? (io.stdout(`Allowed: "${decided.device.label}" (${decided.device.id}) can now connect. Remove it any time: adf daemon devices revoke ${decided.device.id}
+`), 0) : (io.stdout(`Denied: "${c.deviceName}" was not allowed.
+`), 1);
+      }
+      await sleep(1e3);
+    }
+  } finally {
+    stop?.();
+  }
+}
+async function runHostRemoteCommand(sub, args, io, target) {
+  if (args.includes("--help") || args.includes("-h"))
+    return io.stdout(`${REMOTE_USAGE}
+`), 0;
+  try {
+    return sub === "remote" ? await remoteCommand(args, io, target) : sub === "devices" ? await devicesCommand(args, io, target) : await pairCommand(io, target);
+  } catch (err) {
+    return err instanceof TypeError ? (io.stderr(`Cannot reach the ADF daemon at ${target.url} (${err.message}). Start it with: adf daemon start
+`), 1) : (io.stderr(`${err instanceof Error ? err.message : String(err)}
+`), 1);
+  }
+}
+export {
+  REMOTE_USAGE,
+  formatDevices,
+  formatRemoteStatus,
+  runHostRemoteCommand
+};