@agentrific/server 0.1.5 → 0.2.0

package/cli.js

@@ -30,7 +30,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@agentrific/server",
-      version: "0.1.5",
+      version: "0.2.0",
       description: "Self-hosted control plane for long-running coding agents",
       keywords: [
         "agentrific",
@@ -67,6 +67,7 @@ var init_package = __esm({
         "@fastify/cors": "^11.3.0",
         "@fastify/multipart": "^10.1.2",
         "@inquirer/select": "^5.2.5",
+        diff: "^9.0.0",
         effect: "4.0.0-rc.117",
         fastify: "^5.6.2",
         "pino-pretty": "^13.1.3",
@@ -245,7 +246,7 @@ function createPairingLink(payload) {
   link.searchParams.set("data", JSON.stringify(PairingPayloadSchema.parse(payload)));
   return link.toString();
 }
-var cronBounds, AutomationConfigSchema, AutomationStateSchema, SessionStatusSchema, AgentKindSchema, ModelReferenceSchema, ModelIdentitySchema, ModelOptionSchema, ModelCatalogSchema, GitFlowSchema, GitDeliverySchema, DeliveryRequestSchema, RunPreparationSchema, SessionSchema, MAX_ATTACHMENTS, MAX_ATTACHMENT_BYTES, AttachmentSchema, AttachmentIdsSchema, CreateSessionSchema, SendMessageSchema, SessionEventSchema, RecordedEventSchema, EventHistorySchema, ServerEventSchema, ServerSettingsSchema, ConnectionsStatusSchema, UpdateSettingsSchema, ProjectSchema, TaskStatusSchema, TaskSchema, CreateTaskSchema, UpdateTaskSchema, PROTOCOL_VERSION, ServerUpdateStatusSchema, ServerHealthSchema, PairingPayloadSchema, PairingRequestSchema, DeviceSchema, PairingResultSchema, HandshakeSchema, HandshakeAckSchema;
+var cronBounds, AutomationConfigSchema, AutomationStateSchema, SessionStatusSchema, AgentKindSchema, ModelReferenceSchema, ModelIdentitySchema, ModelOptionSchema, ModelCatalogSchema, GitFlowSchema, GitDeliverySchema, DeliveryRequestSchema, RunPreparationSchema, SessionSchema, MAX_ATTACHMENTS, MAX_ATTACHMENT_BYTES, AttachmentSchema, AttachmentIdsSchema, CreateSessionSchema, SendMessageSchema, FileChangeSchema, SessionEventSchema, RecordedEventSchema, EventHistorySchema, ServerEventSchema, ServerSettingsSchema, ConnectionsStatusSchema, UpdateSettingsSchema, ProjectSchema, TaskStatusSchema, TaskSchema, CreateTaskSchema, UpdateTaskSchema, PROTOCOL_VERSION, ServerUpdateStatusSchema, ServerHealthSchema, PairingPayloadSchema, PairingInvitationSchema, PairingRequestSchema, DeviceSchema, PairingResultSchema, HandshakeSchema, HandshakeAckSchema;
 var init_src = __esm({
   "../../packages/contracts/src/index.ts"() {
     cronBounds = [
@@ -381,11 +382,18 @@ var init_src = __esm({
     SendMessageSchema = z2.object({
       message: z2.string().trim().max(2e4),
       attachmentIds: AttachmentIdsSchema.optional(),
-      clientMessageId: z2.string().min(1).max(120).optional()
+      clientMessageId: z2.string().min(1).max(120).optional(),
+      mode: z2.enum(["followUp", "steer"]).optional()
     }).refine(
       (input) => input.message.length > 0 || (input.attachmentIds?.length ?? 0) > 0,
       "Write a message or attach a file."
     );
+    FileChangeSchema = z2.object({
+      path: z2.string(),
+      patch: z2.string().optional(),
+      content: z2.string().optional(),
+      omitted: z2.boolean().optional()
+    });
     SessionEventSchema = z2.discriminatedUnion("type", [
       z2.object({ type: z2.literal("session.updated"), session: SessionSchema }),
       z2.object({
@@ -420,7 +428,8 @@ var init_src = __esm({
         sessionId: z2.string(),
         toolCallId: z2.string().optional(),
         tool: z2.string(),
-        input: z2.string()
+        input: z2.string(),
+        filePath: z2.string().optional()
       }),
       z2.object({
         type: z2.literal("tool.completed"),
@@ -428,6 +437,7 @@ var init_src = __esm({
         toolCallId: z2.string().optional(),
         tool: z2.string(),
         output: z2.string(),
+        fileChange: FileChangeSchema.optional(),
         isError: z2.boolean().default(false)
       }),
       z2.object({
@@ -519,6 +529,11 @@ var init_src = __esm({
       serverId: z2.string().uuid(),
       pairingId: z2.string().regex(/^[a-f0-9]{64}$/)
     });
+    PairingInvitationSchema = z2.object({
+      payload: PairingPayloadSchema,
+      pin: z2.string().regex(/^\d{6}$/),
+      expiresAt: z2.number()
+    });
     PairingRequestSchema = z2.object({
       pairingId: z2.string().regex(/^[a-f0-9]{64}$/),
       pin: z2.string().regex(/^\d{6}$/),
@@ -727,6 +742,202 @@ var init_control = __esm({
   }
 });
 
+// src/cli-output.ts
+import { styleText } from "node:util";
+function printHeading(title) {
+  console.log();
+  console.log(styleText("bold", "      #######  ##"));
+  console.log(styleText("bold", "    ###     #####"));
+  console.log(`    ${styleText("bold", "##       ####")}    ${styleText("bold", "AGENTRIFIC")}`);
+  console.log(
+    `    ${styleText("bold", "##   ")}${styleText(["bold", "yellow"], "o")}${styleText("bold", "   ####")}    ${styleText("dim", `${title} \xB7 v${serverVersion}`)}`
+  );
+  console.log(styleText("bold", "    ##       ####"));
+  console.log(styleText("bold", "    ###     #####"));
+  console.log(styleText("bold", "      #######  ##"));
+  console.log();
+}
+function printDetail(label2, value) {
+  console.log(`  ${styleText("dim", "\u203A")} ${styleText("dim", label2.padEnd(10))} ${value}`);
+}
+function printShortcuts(pairingAvailable = false) {
+  console.log();
+  console.log(`  ${styleText("dim", "\u203A")} Press ${styleText("bold", "p")}       \u2502 pair a device`);
+  if (pairingAvailable)
+    console.log(
+      `  ${styleText("dim", "\u203A")} Press ${styleText("bold", "j")}       \u2502 show pairing JSON`
+    );
+  console.log(`  ${styleText("dim", "\u203A")} Press ${styleText("bold", "?")}       \u2502 show shortcuts`);
+  console.log(
+    `  ${styleText("dim", "\u203A")} Press ${styleText("bold", "Ctrl+C")}  \u2502 stop the server
+`
+  );
+}
+function printError(message) {
+  console.error(`
+  ${styleText(["bold", "red"], "Error")} ${message}
+`);
+}
+function printHelp() {
+  printHeading("server");
+  console.log(`  ${styleText("bold", "Usage")} agentrific <command> [options]
+`);
+  for (const [command, description] of [
+    ["init", "Configure the server"],
+    ["start", "Start the server \xB7 press p to pair"],
+    ["pair", "Print a fresh pairing QR code and PIN"],
+    ["devices", "List enrolled devices"],
+    ["revoke <id>", "Revoke a device's access"],
+    ["status", "Show server status"],
+    ["maintenance enter/resume/drain", "Pause new work, resume, or wait for work to finish"],
+    ["service install/uninstall/restart", "Manage the background service"],
+    ["logs", "Follow server logs"],
+    ["update --check", "Check for a newer release"]
+  ])
+    console.log(`  ${styleText("cyan", command.padEnd(34))}${description}`);
+  console.log(`
+  ${styleText("bold", "Options")}
+`);
+  for (const [option, description] of [
+    ["--data-dir <path>", "Use a specific server data directory"],
+    ["--public-url <https-url>", "Use your tunnel URL without prompting"],
+    ["--no-interactive", "Disable prompts and keyboard shortcuts"],
+    ["--show-payload", "Print manual JSON with the pairing QR code"],
+    ["--timeout-ms <0-60000>", "Set the maintenance drain timeout"],
+    ["--version", "Print the server version"],
+    ["--help", "Show this help"]
+  ])
+    console.log(`  ${styleText("cyan", option.padEnd(34))}${description}`);
+  console.log("\n  Connect using Tailscale Serve, cloudflared, or another HTTPS tunnel.\n");
+}
+var init_cli_output = __esm({
+  "src/cli-output.ts"() {
+    "use strict";
+    init_version();
+  }
+});
+
+// src/pairing.ts
+import { z as z4 } from "zod";
+import { styleText as styleText2 } from "node:util";
+import { emitKeypressEvents } from "node:readline";
+import qrcode from "qrcode-terminal";
+function printManualPairing(invitation) {
+  if (Date.now() >= invitation.expiresAt) {
+    printError("This invitation expired. Generate a fresh pairing QR code.");
+    return;
+  }
+  console.log(styleText2("dim", "\n  Manual entry \xB7 paste this JSON into Pairing payload:\n"));
+  console.log(`  ${invitation.payload}
+`);
+}
+function waitForManualPairing(invitation) {
+  console.log(styleText2("dim", "  Press j to show manual entry \xB7 Enter or q to finish.\n"));
+  return new Promise((resolve) => {
+    const input = process.stdin;
+    const previousRaw = input.isRaw;
+    const timeout = setTimeout(
+      () => {
+        console.log(
+          styleText2("dim", "\n  Pairing invitation expired. Run agentrific pair again.\n")
+        );
+        close();
+      },
+      Math.max(0, invitation.expiresAt - Date.now())
+    );
+    function close() {
+      clearTimeout(timeout);
+      input.removeListener("keypress", pressed);
+      input.removeListener("end", close);
+      process.removeListener("SIGINT", interrupted);
+      process.removeListener("SIGTERM", terminated);
+      input.setRawMode(previousRaw);
+      input.pause();
+      resolve();
+    }
+    function interrupted() {
+      process.exitCode = 130;
+      close();
+    }
+    function terminated() {
+      process.exitCode = 143;
+      close();
+    }
+    function pressed(text, key) {
+      if (key.ctrl && key.name === "c") {
+        interrupted();
+        return;
+      }
+      if (key.ctrl || key.meta) return;
+      if (text?.toLowerCase() === "j") {
+        printManualPairing(invitation);
+        close();
+      } else if (text?.toLowerCase() === "q" || key.name === "return" || key.name === "escape") {
+        close();
+      }
+    }
+    emitKeypressEvents(input);
+    input.setRawMode(true);
+    input.on("keypress", pressed);
+    input.once("end", close);
+    process.once("SIGINT", interrupted);
+    process.once("SIGTERM", terminated);
+    input.resume();
+  });
+}
+function pairingOrigin(url) {
+  const endpoint = new URL(url);
+  if (endpoint.username || endpoint.password || endpoint.search || endpoint.hash || endpoint.pathname !== "/")
+    throw new Error("Use the HTTPS server origin without a path or credentials.");
+  if (endpoint.protocol !== "https:" && !(process.env.NODE_ENV !== "production" && endpoint.protocol === "http:" && ["127.0.0.1", "localhost", "[::1]"].includes(endpoint.hostname)))
+    throw new Error("Use HTTPS. Localhost HTTP is for development builds only.");
+  return endpoint.origin;
+}
+async function printPairing(dataDir, url) {
+  if (!url)
+    throw new Error(
+      "Specify --public-url with your Tailscale Serve or Cloudflare Tunnel HTTPS address."
+    );
+  const origin = pairingOrigin(url);
+  const grant = z4.object({
+    pairingId: z4.string(),
+    pin: z4.string(),
+    expiresAt: z4.number(),
+    serverId: z4.string()
+  }).parse(await controlRequest(dataDir, { command: "pair" }));
+  const invitation = {
+    v: 1,
+    url: origin,
+    serverId: grant.serverId,
+    pairingId: grant.pairingId
+  };
+  const payload = JSON.stringify(invitation);
+  const link = createPairingLink(invitation);
+  printHeading("pairing");
+  console.log("  1. Scan below with your phone camera and tap Open Agentrific if offered.");
+  console.log("  2. Or open Agentrific and choose Scan pairing QR code.");
+  console.log("  3. Enter the PIN, then confirm pairing.\n");
+  qrcode.generate(link, { small: true }, (code) => {
+    console.log(
+      code.split("\n").map((line) => `  ${line}`).join("\n")
+    );
+  });
+  console.log();
+  printDetail("PIN:", styleText2(["bold", "yellow"], grant.pin));
+  printDetail("Server", styleText2("cyan", origin));
+  printDetail("Expires", "In five minutes \xB7 one device per code");
+  console.log("\n  Pairing grants this device access to run agents as your host user.\n");
+  return { payload, expiresAt: grant.expiresAt };
+}
+var init_pairing = __esm({
+  "src/pairing.ts"() {
+    "use strict";
+    init_src();
+    init_control();
+    init_cli_output();
+  }
+});
+
 // ../../packages/contracts/src/push.ts
 import { z as z6 } from "zod";
 function pushSigningText(installationId, operation, request) {
@@ -740,7 +951,7 @@ function pushSigningText(installationId, operation, request) {
     request.payload
   ].join("\n");
 }
-var PUSH_API_URL, PushKindSchema, PushPreferencesSchema, PushPublicKeySchema, PushInstallationSchema, PushRegistrationSchema, PushEnrollmentSchema, PushGrantSchema, PushEventSchema, PushSignedRequestSchema, PushEntitlementSchema, PushServerStatusSchema;
+var PUSH_API_URL, PushKindSchema, PushPreferencesSchema, PushPublicKeySchema, PushInstallationSchema, PushRegistrationSchema, PushEnrollmentSchema, PushGrantSchema, PushPullRequestUrlSchema, PushEventSchema, PushSignedRequestSchema, PushEntitlementSchema, PushServerStatusSchema;
 var init_push = __esm({
   "../../packages/contracts/src/push.ts"() {
     "use strict";
@@ -768,7 +979,14 @@ var init_push = __esm({
       grant: z6.string().regex(/^[a-f0-9]{64}$/),
       expiresAt: z6.number()
     }).strict();
-    PushEventSchema = z6.object({ eventId: z6.string().uuid(), sessionId: z6.string().uuid(), kind: PushKindSchema }).strict();
+    PushPullRequestUrlSchema = z6.string().max(512).regex(/^https:\/\/github\.com\/[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+\/pull\/[1-9][0-9]*$/);
+    PushEventSchema = z6.object({
+      eventId: z6.string().uuid(),
+      sessionId: z6.string().uuid(),
+      kind: PushKindSchema,
+      taskTitle: z6.string().trim().min(1).max(160).optional(),
+      prUrl: PushPullRequestUrlSchema.optional()
+    }).strict();
     PushSignedRequestSchema = z6.object({
       bindingId: z6.string().uuid(),
       timestamp: z6.number().int(),
@@ -855,10 +1073,11 @@ var init_push2 = __esm({
     "use strict";
     init_push();
     ServerPush = class {
-      constructor(store2, serverId, directory, transport = fetch) {
+      constructor(store2, serverId, directory, transport = fetch, apiUrl = PUSH_API_URL) {
         this.store = store2;
         this.serverId = serverId;
         this.transport = transport;
+        this.apiUrl = apiUrl;
         mkdirSync(directory, { recursive: true, mode: 448 });
         const filename = path4.join(directory, "push-signing-key.pem");
         if (!existsSync(filename))
@@ -873,6 +1092,7 @@ var init_push2 = __esm({
       store;
       serverId;
       transport;
+      apiUrl;
       key;
       publicKey;
       draining;
@@ -886,6 +1106,8 @@ var init_push2 = __esm({
           eventId: randomUUID(),
           sessionId: session.id,
           kind,
+          taskTitle: session.title.replace(/[\r\n\t]+/g, " ").trim().slice(0, 160) || void 0,
+          prUrl: kind === "pr_created" ? PushPullRequestUrlSchema.safeParse(session.gitDelivery?.url).data : void 0,
           remaining: state.bindings,
           createdAt: Date.now(),
           attempts: 0,
@@ -908,7 +1130,7 @@ var init_push2 = __esm({
           Buffer.from(pushSigningText(installationId, operation, request)),
           this.key
         ).toString("hex");
-        return this.transport(`${PUSH_API_URL}/v1/installations/${installationId}/${operation}`, {
+        return this.transport(`${this.apiUrl}/v1/installations/${installationId}/${operation}`, {
           method: "POST",
           headers: { "Content-Type": "application/json" },
           body: JSON.stringify({ ...request, signature }),
@@ -982,7 +1204,13 @@ var init_push2 = __esm({
                 binding.installationId,
                 binding.bindingId,
                 "events",
-                JSON.stringify({ eventId: job.eventId, sessionId: job.sessionId, kind: job.kind })
+                JSON.stringify({
+                  eventId: job.eventId,
+                  sessionId: job.sessionId,
+                  kind: job.kind,
+                  taskTitle: job.taskTitle,
+                  prUrl: job.prUrl
+                })
               );
               if (response.ok) continue;
               if ([401, 403, 404].includes(response.status)) {
@@ -1332,6 +1560,29 @@ async function registerSecurity(app2, security2, version, allowedOrigins2) {
     const result = await security2.pair(input.data, request.ip);
     return result ?? reply.code(401).send({ error: "Pairing expired, locked, or invalid. Run agentrific pair again." });
   });
+  app2.post("/api/auth/pairing-invitation", (_request, reply) => {
+    const publicUrl = process.env.AGENTRIFIC_PUBLIC_URL;
+    if (!publicUrl)
+      return reply.code(503).send({
+        error: "Configure the server\u2019s public HTTPS URL and restart the server before pairing a device."
+      });
+    let url;
+    try {
+      url = pairingOrigin(publicUrl);
+    } catch {
+      return reply.code(503).send({ error: "The server\u2019s public URL is invalid. Configure a public HTTPS origin." });
+    }
+    try {
+      const grant = security2.createPairing();
+      return {
+        payload: { v: 1, url, serverId: grant.serverId, pairingId: grant.pairingId },
+        pin: grant.pin,
+        expiresAt: grant.expiresAt
+      };
+    } catch {
+      return reply.code(429).send({ error: "Too many pending pairing codes. Wait five minutes and try again." });
+    }
+  });
   app2.get("/api/auth/session", (request) => ({
     serverId: security2.serverId,
     device: security2.authenticate((request.headers.authorization ?? "").slice(7))
@@ -1354,6 +1605,7 @@ var init_security = __esm({
   "src/security.ts"() {
     "use strict";
     init_src();
+    init_pairing();
     secret = () => randomBytes(32).toString("hex");
     digest = (value) => createHash("sha256").update(value).digest("hex");
     ServerSecurity = class {
@@ -1883,7 +2135,7 @@ var init_runtime = __esm({
           Effect8.ensuring(Effect8.sync(() => this.working.delete(entry.session.id)))
         );
       }
-      send(session, message, attachments2 = [], messageId = randomUUID4()) {
+      send(session, message, attachments2 = [], messageId = randomUUID4(), mode = "followUp") {
         return this.lock(session.id).withPermit(
           Effect8.gen({ self: this }, function* () {
             if (this.closed)
@@ -1893,6 +2145,16 @@ var init_runtime = __esm({
             if (this.hasMessage(session.id, messageId)) return;
             const entry = yield* this.open(session);
             yield* this.operation(async () => entry.agent.validateAttachments?.(attachments2));
+            const steering = entry.running && mode === "steer";
+            if (steering) {
+              if (!entry.agent.steer)
+                return yield* Effect8.fail(
+                  new AgentError({ message: "This agent does not support steering." })
+                );
+              yield* this.operation(
+                () => entry.agent.steer(gitFlowPrompt(entry.session, message), attachments2)
+              );
+            }
             this.emit({
               type: "message.user",
               sessionId: session.id,
@@ -1900,6 +2162,7 @@ var init_runtime = __esm({
               text: message,
               attachments: attachments2
             });
+            if (steering) return;
             if (entry.running) {
               entry.pending.push({ text: message, attachments: attachments2 });
               return;
@@ -2874,6 +3137,74 @@ var init_delivery_tool = __esm({
   }
 });
 
+// src/file-change.ts
+import { createWriteToolDefinition, defineTool as defineTool2 } from "@earendil-works/pi-coding-agent";
+import { createTwoFilesPatch } from "diff";
+import { mkdir as mkdir5, readFile as readFile4, writeFile as writeFile3 } from "node:fs/promises";
+import { z as z13 } from "zod";
+function boundFileChange(change) {
+  if ((change.patch?.length ?? 0) + (change.content?.length ?? 0) > previewLimit)
+    return { path: change.path, omitted: true };
+  return change;
+}
+function completedFileChange(result, path13) {
+  const parsed = EditResultSchema.safeParse(result);
+  if (!parsed.success) return;
+  const details = parsed.data.details;
+  if (details?.fileChange) return boundFileChange(details.fileChange);
+  if (path13 && details?.patch) return boundFileChange({ path: path13, patch: details.patch });
+}
+function fileWriteTool(cwd) {
+  const base = createWriteToolDefinition(cwd);
+  return defineTool2({
+    name: base.name,
+    label: base.label,
+    description: base.description,
+    promptSnippet: base.promptSnippet,
+    promptGuidelines: base.promptGuidelines,
+    parameters: base.parameters,
+    constrainedSampling: base.constrainedSampling,
+    async execute(toolCallId, args, signal, _onUpdate, ctx) {
+      let fileChange;
+      const tool = createWriteToolDefinition(cwd, {
+        operations: {
+          mkdir: async (dir) => {
+            await mkdir5(dir, { recursive: true });
+          },
+          // Pi invokes this inside its per-file mutation queue, so the snapshot
+          // and write cannot race another built-in edit/write on the same file.
+          writeFile: async (path13, content) => {
+            const previous = await readFile4(path13, "utf8").catch((error) => {
+              if (error.code === "ENOENT") return void 0;
+              throw error;
+            });
+            await writeFile3(path13, content, "utf8");
+            fileChange = boundFileChange(
+              previous === void 0 ? { path: args.path, content } : {
+                path: args.path,
+                patch: createTwoFilesPatch(args.path, args.path, previous, content)
+              }
+            );
+          }
+        }
+      });
+      const result = await tool.execute(toolCallId, args, signal, void 0, ctx);
+      return { ...result, details: { fileChange } };
+    }
+  });
+}
+var previewLimit, EditResultSchema;
+var init_file_change = __esm({
+  "src/file-change.ts"() {
+    "use strict";
+    init_src();
+    previewLimit = 256e3;
+    EditResultSchema = z13.object({
+      details: z13.object({ patch: z13.string().optional(), fileChange: FileChangeSchema.optional() }).optional()
+    });
+  }
+});
+
 // src/pi.ts
 import { Effect as Effect12 } from "effect";
 import { randomUUID as randomUUID5 } from "node:crypto";
@@ -2881,7 +3212,7 @@ import {
   createAgentSession as createAgentSession2,
   SessionManager as SessionManager2
 } from "@earendil-works/pi-coding-agent";
-import { z as z13 } from "zod";
+import { z as z14 } from "zod";
 function toolOutput(value) {
   const parsed = ToolResultSchema.safeParse(value);
   const text = parsed.success ? parsed.data.content?.filter((part) => part.type === "text").map((part) => part.text || "").join("\n") || "Completed without text output." : boundedJson(value, 4e3);
@@ -2896,7 +3227,10 @@ function createPiFactory(files, models2, delivery2, createSession = createAgentS
         model,
         modelRuntime: models2.runtime,
         sessionManager: SessionManager2.continueRecent(cwd, sessionDirectory),
-        customTools: run?.gitFlow && delivery2 ? [deliveryTool(sessionId, delivery2)] : []
+        customTools: [
+          fileWriteTool(cwd),
+          ...run?.gitFlow && delivery2 ? [deliveryTool(sessionId, delivery2)] : []
+        ]
       });
       return {
         get model() {
@@ -2920,6 +3254,12 @@ function createPiFactory(files, models2, delivery2, createSession = createAgentS
             throw new Error(last.errorMessage ?? "The model request failed");
           }
         },
+        async steer(message, attachments2 = []) {
+          const context = await Effect12.runPromise(files.prepare(attachments2));
+          if (!session.isStreaming)
+            throw new Error("The response has finished. Send this message as a follow-up instead.");
+          await session.steer(message + context.context, context.images);
+        },
         async abort() {
           session.clearQueue();
           await session.abort();
@@ -2984,16 +3324,23 @@ function createPiFactory(files, models2, delivery2, createSession = createAgentS
             }
             return false;
           }
+          const filePaths = /* @__PURE__ */ new Map();
+          const FileArgsSchema = z14.object({ path: z14.string() });
           function handleTool(event) {
             if (event.type === "tool_execution_start") {
               flushText();
               setActivity("thinking");
+              if (event.toolName === "edit" || event.toolName === "write") {
+                const args = FileArgsSchema.safeParse(event.args);
+                if (args.success) filePaths.set(event.toolCallId, args.data.path);
+              }
               emit({
                 type: "tool.started",
                 sessionId,
                 toolCallId: event.toolCallId,
                 tool: event.toolName,
-                input: boundedJson(event.args, 1200)
+                input: boundedJson(event.args, 1200),
+                filePath: filePaths.get(event.toolCallId)
               });
               return true;
             }
@@ -3005,8 +3352,10 @@ function createPiFactory(files, models2, delivery2, createSession = createAgentS
                 toolCallId: event.toolCallId,
                 tool: event.toolName,
                 output: toolOutput(event.result),
+                fileChange: event.isError ? void 0 : completedFileChange(event.result, filePaths.get(event.toolCallId)),
                 isError: event.isError
               });
+              filePaths.delete(event.toolCallId);
               setActivity("thinking");
               return true;
             }
@@ -3039,8 +3388,9 @@ var init_pi = __esm({
     "use strict";
     init_models();
     init_delivery_tool();
-    ToolResultSchema = z13.object({
-      content: z13.array(z13.object({ type: z13.string(), text: z13.string().optional() })).optional()
+    init_file_change();
+    ToolResultSchema = z14.object({
+      content: z14.array(z14.object({ type: z14.string(), text: z14.string().optional() })).optional()
     }).passthrough();
     boundedJson = (value, limit) => {
       let text;
@@ -3055,9 +3405,9 @@ var init_pi = __esm({
 });
 
 // src/projects.ts
-import { access as access2, readdir as readdir2, realpath, stat as stat3, readFile as readFile4, writeFile as writeFile3 } from "node:fs/promises";
+import { access as access2, readdir as readdir2, realpath, stat as stat3, readFile as readFile5, writeFile as writeFile4 } from "node:fs/promises";
 import { randomUUID as randomUUID6 } from "node:crypto";
-import { z as z14 } from "zod";
+import { z as z15 } from "zod";
 import { constants as constants2 } from "node:fs";
 import { homedir as homedir3 } from "node:os";
 import path8 from "node:path";
@@ -3092,7 +3442,7 @@ async function gitDirectory(directory) {
   const location = path8.join(directory, ".git");
   const info = await stat3(location);
   if (info.isDirectory()) return location;
-  const contents = await readFile4(location, "utf8");
+  const contents = await readFile5(location, "utf8");
   const match = /^gitdir: (.+)\s*$/m.exec(contents);
   if (!match) throw new Error("Invalid Git worktree metadata.");
   const resolved = await realpath(path8.resolve(directory, match[1].trim()));
@@ -3102,21 +3452,21 @@ async function gitDirectory(directory) {
 async function identity(directory, preferred) {
   const filename = path8.join(await gitDirectory(directory), "agentrific-project-id");
   try {
-    return ProjectId.parse(await readFile4(filename, "utf8"));
+    return ProjectId.parse(await readFile5(filename, "utf8"));
   } catch (error) {
-    if (!z14.object({ code: z14.literal("ENOENT") }).safeParse(error).success) throw error;
+    if (!z15.object({ code: z15.literal("ENOENT") }).safeParse(error).success) throw error;
     const legacyFilename = path8.join(await gitDirectory(directory), "chatplans-project-id");
-    const legacy = await readFile4(legacyFilename, "utf8").catch((cause) => {
-      if (!z14.object({ code: z14.literal("ENOENT") }).safeParse(cause).success) throw cause;
+    const legacy = await readFile5(legacyFilename, "utf8").catch((cause) => {
+      if (!z15.object({ code: z15.literal("ENOENT") }).safeParse(cause).success) throw cause;
       return null;
     });
     const id = legacy === null ? preferred ?? randomUUID6() : ProjectId.parse(legacy);
     try {
-      await writeFile3(filename, id + "\n", { flag: "wx" });
+      await writeFile4(filename, id + "\n", { flag: "wx" });
       return id;
     } catch (writeError) {
-      if (!z14.object({ code: z14.literal("EEXIST") }).safeParse(writeError).success) throw writeError;
-      return ProjectId.parse(await readFile4(filename, "utf8"));
+      if (!z15.object({ code: z15.literal("EEXIST") }).safeParse(writeError).success) throw writeError;
+      return ProjectId.parse(await readFile5(filename, "utf8"));
     }
   }
 }
@@ -3136,7 +3486,7 @@ function scanProjects(root, store2) {
         let existing = registered.find((project2) => project2.id === id);
         if (found.some((project2) => project2.id === id) || existing && existing.path !== directory && await stat3(path8.join(existing.path, ".git")).catch(() => null)) {
           id = randomUUID6();
-          await writeFile3(
+          await writeFile4(
             path8.join(await gitDirectory(directory), "agentrific-project-id"),
             id + "\n"
           );
@@ -3175,11 +3525,11 @@ function reconnectProject(root, id, input, store2) {
       const filename = path8.join(await gitDirectory(directory), "agentrific-project-id");
       const replacedId = await identity(directory);
       const project = { id, name: path8.basename(directory), path: directory, available: true };
-      await writeFile3(filename, id + "\n");
+      await writeFile4(filename, id + "\n");
       try {
         await Effect13.runPromise(store2.relocateProject(project, previous.path, replacedId));
       } catch (error) {
-        await writeFile3(filename, replacedId + "\n");
+        await writeFile4(filename, replacedId + "\n");
         throw error;
       }
       return project;
@@ -3192,31 +3542,31 @@ var init_projects = __esm({
   "src/projects.ts"() {
     "use strict";
     locks2 = /* @__PURE__ */ new WeakMap();
-    ProjectId = z14.string().trim().min(1).max(255);
+    ProjectId = z15.string().trim().min(1).max(255);
   }
 });
 
 // src/push-schema.ts
-import { z as z15 } from "zod";
+import { z as z16 } from "zod";
 var PushBindingSchema, PushStateSchema, PendingPushSchema;
 var init_push_schema = __esm({
   "src/push-schema.ts"() {
     "use strict";
     init_push();
-    PushBindingSchema = z15.object({
-      bindingId: z15.string().uuid(),
-      installationId: z15.string().uuid(),
-      deviceId: z15.string().uuid()
+    PushBindingSchema = z16.object({
+      bindingId: z16.string().uuid(),
+      installationId: z16.string().uuid(),
+      deviceId: z16.string().uuid()
     });
-    PushStateSchema = z15.object({
-      bindings: z15.array(PushBindingSchema).max(10),
-      error: z15.string().nullable()
+    PushStateSchema = z16.object({
+      bindings: z16.array(PushBindingSchema).max(10),
+      error: z16.string().nullable()
     });
     PendingPushSchema = PushEventSchema.extend({
-      remaining: z15.array(PushBindingSchema),
-      createdAt: z15.number(),
-      attempts: z15.number().int().nonnegative(),
-      nextAt: z15.number()
+      remaining: z16.array(PushBindingSchema),
+      createdAt: z16.number(),
+      attempts: z16.number().int().nonnegative(),
+      nextAt: z16.number()
     });
   }
 });
@@ -3226,7 +3576,7 @@ import { chmodSync, existsSync as existsSync2, mkdirSync as mkdirSync2 } from "n
 import path9 from "node:path";
 import { DatabaseSync } from "node:sqlite";
 import { Context as Context3, Data as Data3, Effect as Effect14, Layer as Layer3 } from "effect";
-import { z as z16 } from "zod";
+import { z as z17 } from "zod";
 import { randomUUID as randomUUID7 } from "node:crypto";
 var StorageError, PayloadRow, EventRow, SqliteSessionStore, SessionStore;
 var init_store = __esm({
@@ -3239,8 +3589,8 @@ var init_store = __esm({
     init_src();
     StorageError = class extends Data3.TaggedError("StorageError") {
     };
-    PayloadRow = z16.object({ payload: z16.string() });
-    EventRow = z16.object({ sequence: z16.number(), recorded_at: z16.string(), payload: z16.string() });
+    PayloadRow = z17.object({ payload: z17.string() });
+    EventRow = z17.object({ sequence: z17.number(), recorded_at: z17.string(), payload: z17.string() });
     SqliteSessionStore = class {
       constructor(db) {
         this.db = db;
@@ -3291,7 +3641,7 @@ var init_store = __esm({
           const row = PayloadRow.parse(
             this.db.prepare("SELECT payload FROM settings WHERE id = 'server-id'").get()
           );
-          return z16.string().uuid().parse(JSON.parse(row.payload));
+          return z17.string().uuid().parse(JSON.parse(row.payload));
         });
       }
       saveDevice(device, tokenHash) {
@@ -3379,7 +3729,7 @@ var init_store = __esm({
       `).all();
           const insert = this.db.prepare("INSERT OR IGNORE INTO projects(id, payload) VALUES (?, ?)");
           for (const row of legacy) {
-            const id = z16.object({ id: z16.string() }).parse(row).id;
+            const id = z17.object({ id: z17.string() }).parse(row).id;
             insert.run(
               id,
               JSON.stringify({ id, name: id, path: path9.join(root, id), available: false })
@@ -3589,7 +3939,7 @@ var init_store = __esm({
             if (event.type === "message.user") this.claimAttachments(event.attachments ?? []);
             const result = this.db.prepare("INSERT INTO events(session_id, recorded_at, payload) VALUES (?, ?, ?)").run(sessionId, recordedAt, JSON.stringify(event));
             if (notification) {
-              const count = z16.object({ total: z16.number() }).parse(this.db.prepare("SELECT COUNT(*) AS total FROM push_outbox").get());
+              const count = z17.object({ total: z17.number() }).parse(this.db.prepare("SELECT COUNT(*) AS total FROM push_outbox").get());
               if (count.total >= 1e3)
                 this.db.prepare(
                   "DELETE FROM push_outbox WHERE rowid IN (SELECT rowid FROM push_outbox ORDER BY rowid LIMIT 1)"
@@ -3641,7 +3991,7 @@ var init_store = __esm({
                 for (const suffix of ["-wal", "-shm"])
                   if (existsSync2(filename + suffix)) chmodSync(filename + suffix, 384);
                 try {
-                  const schema = z16.object({ user_version: z16.number() }).parse(db.prepare("PRAGMA user_version").get());
+                  const schema = z17.object({ user_version: z17.number() }).parse(db.prepare("PRAGMA user_version").get());
                   if (schema.user_version > 1)
                     throw new Error("This database requires a newer Agentrific server.");
                   db.exec(`
@@ -3762,7 +4112,7 @@ import { homedir as homedir4 } from "node:os";
 import path11 from "node:path";
 import { WebSocket } from "ws";
 import { Effect as Effect16, ManagedRuntime } from "effect";
-import { z as z17 } from "zod";
+import { z as z18 } from "zod";
 import { ModelRuntime } from "@earendil-works/pi-coding-agent";
 function publish(event, workflowUpdate = false) {
   const previous = event.type === "session.updated" ? Effect16.runSync(store.get(event.session.id)) : void 0;
@@ -3968,7 +4318,7 @@ async function withSessionTaskLock(id, operation) {
   const lockId = session ? await sessionTaskLockId(store, session) : `session-${id}`;
   return withTaskLock(lockId, operation);
 }
-var host, port, defaultProjectsRoot, worktreesRoot, execFileAsync, app, dataRoot, releaseLock, effects, store, security, push, allowedOrigins, attachmentEffects, attachments, attachmentCleanup, models, delivery, preparation, agentEffects, runtime, worktreeCleanup, maxWorktreeAgeDays, pruneWorktrees, worktreeCleanupTimer, updates, maintenance, stopUpdateDiscovery, HistoryQuery, StartTaskBody, automation, automationTimer, closeControl;
+var host, port, defaultProjectsRoot, worktreesRoot, execFileAsync, app, dataRoot, releaseLock, effects, store, security, testPushUrl, push, allowedOrigins, attachmentEffects, attachments, attachmentCleanup, models, delivery, preparation, agentEffects, runtime, worktreeCleanup, maxWorktreeAgeDays, pruneWorktrees, worktreeCleanupTimer, updates, maintenance, stopUpdateDiscovery, HistoryQuery, StartTaskBody, automation, automationTimer, closeControl;
 var init_index = __esm({
   async "src/index.ts"() {
     "use strict";
@@ -4025,9 +4375,13 @@ var init_index = __esm({
     effects = ManagedRuntime.make(SessionStore.layer(path11.join(dataRoot, "sessions.sqlite")));
     store = await effects.runPromise(SessionStore);
     security = new ServerSecurity(store, await Effect16.runPromise(store.serverIdentity()));
-    push = new ServerPush(store, security.serverId, dataRoot);
+    testPushUrl = process.env.AGENTRIFIC_PUSH_TEST_URL;
+    if (testPushUrl && (process.env.AGENTRIFIC_TEST_MODE !== "1" || !new URL(testPushUrl).hostname.endsWith(".ts.net") || new URL(testPushUrl).protocol !== "https:"))
+      throw new Error("Test relay requires explicit test mode and Tailscale HTTPS.");
+    push = new ServerPush(store, security.serverId, dataRoot, fetch, testPushUrl);
     allowedOrigins = [
       .../* @__PURE__ */ new Set([
+        "agentrific-desktop://app",
         ...(process.env.AGENTRIFIC_ALLOWED_ORIGINS ?? "http://localhost:8081,http://127.0.0.1:8081").split(","),
         `http://${host === "::1" ? "[::1]" : host}:${port}`,
         ...process.env.AGENTRIFIC_PUBLIC_URL ? [new URL(process.env.AGENTRIFIC_PUBLIC_URL).origin] : []
@@ -4249,7 +4603,7 @@ var init_index = __esm({
       return project ?? reply.code(404).send({ error: "Project not found on this server." });
     });
     app.post("/api/projects/:id/reconnect", async (request, reply) => {
-      const parsed = z17.object({ path: z17.string().trim().min(1).max(4096) }).safeParse(request.body);
+      const parsed = z18.object({ path: z18.string().trim().min(1).max(4096) }).safeParse(request.body);
       if (!parsed.success)
         return reply.code(400).send({ error: "Enter the project's new folder path." });
       const root = await Effect16.runPromise(store.projectsRoot(defaultProjectsRoot));
@@ -4381,9 +4735,9 @@ var init_index = __esm({
         }
       })
     );
-    HistoryQuery = z17.object({
-      after: z17.coerce.number().int().nonnegative().default(0),
-      limit: z17.coerce.number().int().min(1).max(1e3).default(500)
+    HistoryQuery = z18.object({
+      after: z18.coerce.number().int().nonnegative().default(0),
+      limit: z18.coerce.number().int().min(1).max(1e3).default(500)
     });
     app.get("/api/sessions/:id/events", async (request, reply) => {
       const query = HistoryQuery.safeParse(request.query);
@@ -4402,7 +4756,7 @@ var init_index = __esm({
       if (!result.session) return reply.code(result.status).send({ error: result.error });
       return reply.code(201).send(result.session);
     });
-    StartTaskBody = z17.object({ prompt: z17.string().trim().max(2e4).optional() }).default({});
+    StartTaskBody = z18.object({ prompt: z18.string().trim().max(2e4).optional() }).default({});
     app.post("/api/tasks/:id/start", async (request, reply) => {
       const body = StartTaskBody.safeParse(request.body ?? {});
       if (!body.success) return reply.code(400).send({ error: "The task prompt is too long." });
@@ -4437,7 +4791,7 @@ var init_index = __esm({
       return automation.configure(parsed.data);
     });
     app.patch("/api/automation/queue", async (request, reply) => {
-      const parsed = z17.object({ taskId: z17.string().min(1), beforeId: z17.string().min(1).nullable() }).safeParse(request.body);
+      const parsed = z18.object({ taskId: z18.string().min(1), beforeId: z18.string().min(1).nullable() }).safeParse(request.body);
       if (!parsed.success)
         return reply.code(400).send({ error: "Choose a task and a queue position." });
       try {
@@ -4467,7 +4821,13 @@ var init_index = __esm({
             attachments.resolve(session.projectId, parsed.data.attachmentIds ?? [])
           );
           await Effect16.runPromise(
-            runtime.send(session, parsed.data.message, files, parsed.data.clientMessageId)
+            runtime.send(
+              session,
+              parsed.data.message,
+              files,
+              parsed.data.clientMessageId,
+              parsed.data.mode
+            )
           );
           return reply.code(202).send({ accepted: true });
         } catch (error) {
@@ -4537,7 +4897,7 @@ var init_index = __esm({
 
 // src/cli.ts
 init_warnings();
-import { mkdir as mkdir5, readFile as readFile5, writeFile as writeFile4 } from "node:fs/promises";
+import { mkdir as mkdir6, readFile as readFile6, writeFile as writeFile5 } from "node:fs/promises";
 import { homedir as homedir5 } from "node:os";
 import path12 from "node:path";
 import { fileURLToPath } from "node:url";
@@ -4635,204 +4995,21 @@ async function installService(platform, directory, filename, domain, dataDir, cl
 init_updates();
 init_control();
 init_version();
+init_pairing();
 import { spawn as spawn2 } from "node:child_process";
 import { parseArgs } from "node:util";
-import { z as z18 } from "zod";
-
-// src/pairing.ts
-init_src();
-init_control();
-import { z as z4 } from "zod";
-import { styleText as styleText2 } from "node:util";
-import { emitKeypressEvents } from "node:readline";
-import qrcode from "qrcode-terminal";
-
-// src/cli-output.ts
-init_version();
-import { styleText } from "node:util";
-function printHeading(title) {
-  console.log();
-  console.log(styleText("bold", "      #######  ##"));
-  console.log(styleText("bold", "    ###     #####"));
-  console.log(`    ${styleText("bold", "##       ####")}    ${styleText("bold", "AGENTRIFIC")}`);
-  console.log(
-    `    ${styleText("bold", "##   ")}${styleText(["bold", "yellow"], "o")}${styleText("bold", "   ####")}    ${styleText("dim", `${title} \xB7 v${serverVersion}`)}`
-  );
-  console.log(styleText("bold", "    ##       ####"));
-  console.log(styleText("bold", "    ###     #####"));
-  console.log(styleText("bold", "      #######  ##"));
-  console.log();
-}
-function printDetail(label2, value) {
-  console.log(`  ${styleText("dim", "\u203A")} ${styleText("dim", label2.padEnd(10))} ${value}`);
-}
-function printShortcuts(pairingAvailable = false) {
-  console.log();
-  console.log(`  ${styleText("dim", "\u203A")} Press ${styleText("bold", "p")}       \u2502 pair a device`);
-  if (pairingAvailable)
-    console.log(
-      `  ${styleText("dim", "\u203A")} Press ${styleText("bold", "j")}       \u2502 show pairing JSON`
-    );
-  console.log(`  ${styleText("dim", "\u203A")} Press ${styleText("bold", "?")}       \u2502 show shortcuts`);
-  console.log(
-    `  ${styleText("dim", "\u203A")} Press ${styleText("bold", "Ctrl+C")}  \u2502 stop the server
-`
-  );
-}
-function printError(message) {
-  console.error(`
-  ${styleText(["bold", "red"], "Error")} ${message}
-`);
-}
-function printHelp() {
-  printHeading("server");
-  console.log(`  ${styleText("bold", "Usage")} agentrific <command> [options]
-`);
-  for (const [command, description] of [
-    ["init", "Configure the server"],
-    ["start", "Start the server \xB7 press p to pair"],
-    ["pair", "Print a fresh pairing QR code and PIN"],
-    ["devices", "List enrolled devices"],
-    ["revoke <id>", "Revoke a device's access"],
-    ["status", "Show server status"],
-    ["maintenance enter/resume/drain", "Pause new work, resume, or wait for work to finish"],
-    ["service install/uninstall/restart", "Manage the background service"],
-    ["logs", "Follow server logs"],
-    ["update --check", "Check for a newer release"]
-  ])
-    console.log(`  ${styleText("cyan", command.padEnd(34))}${description}`);
-  console.log(`
-  ${styleText("bold", "Options")}
-`);
-  for (const [option, description] of [
-    ["--data-dir <path>", "Use a specific server data directory"],
-    ["--public-url <https-url>", "Use your tunnel URL without prompting"],
-    ["--no-interactive", "Disable prompts and keyboard shortcuts"],
-    ["--show-payload", "Print manual JSON with the pairing QR code"],
-    ["--timeout-ms <0-60000>", "Set the maintenance drain timeout"],
-    ["--version", "Print the server version"],
-    ["--help", "Show this help"]
-  ])
-    console.log(`  ${styleText("cyan", option.padEnd(34))}${description}`);
-  console.log("\n  Connect using Tailscale Serve, cloudflared, or another HTTPS tunnel.\n");
-}
-
-// src/pairing.ts
-function printManualPairing(invitation) {
-  if (Date.now() >= invitation.expiresAt) {
-    printError("This invitation expired. Generate a fresh pairing QR code.");
-    return;
-  }
-  console.log(styleText2("dim", "\n  Manual entry \xB7 paste this JSON into Pairing payload:\n"));
-  console.log(`  ${invitation.payload}
-`);
-}
-function waitForManualPairing(invitation) {
-  console.log(styleText2("dim", "  Press j to show manual entry \xB7 Enter or q to finish.\n"));
-  return new Promise((resolve) => {
-    const input = process.stdin;
-    const previousRaw = input.isRaw;
-    const timeout = setTimeout(
-      () => {
-        console.log(
-          styleText2("dim", "\n  Pairing invitation expired. Run agentrific pair again.\n")
-        );
-        close();
-      },
-      Math.max(0, invitation.expiresAt - Date.now())
-    );
-    function close() {
-      clearTimeout(timeout);
-      input.removeListener("keypress", pressed);
-      input.removeListener("end", close);
-      process.removeListener("SIGINT", interrupted);
-      process.removeListener("SIGTERM", terminated);
-      input.setRawMode(previousRaw);
-      input.pause();
-      resolve();
-    }
-    function interrupted() {
-      process.exitCode = 130;
-      close();
-    }
-    function terminated() {
-      process.exitCode = 143;
-      close();
-    }
-    function pressed(text, key) {
-      if (key.ctrl && key.name === "c") {
-        interrupted();
-        return;
-      }
-      if (key.ctrl || key.meta) return;
-      if (text?.toLowerCase() === "j") {
-        printManualPairing(invitation);
-        close();
-      } else if (text?.toLowerCase() === "q" || key.name === "return" || key.name === "escape") {
-        close();
-      }
-    }
-    emitKeypressEvents(input);
-    input.setRawMode(true);
-    input.on("keypress", pressed);
-    input.once("end", close);
-    process.once("SIGINT", interrupted);
-    process.once("SIGTERM", terminated);
-    input.resume();
-  });
-}
-function pairingOrigin(url) {
-  const endpoint = new URL(url);
-  if (endpoint.username || endpoint.password || endpoint.search || endpoint.hash || endpoint.pathname !== "/")
-    throw new Error("Use the HTTPS server origin without a path or credentials.");
-  if (endpoint.protocol !== "https:" && !(process.env.NODE_ENV !== "production" && endpoint.protocol === "http:" && ["127.0.0.1", "localhost", "[::1]"].includes(endpoint.hostname)))
-    throw new Error("Use HTTPS. Localhost HTTP is for development builds only.");
-  return endpoint.origin;
-}
-async function printPairing(dataDir, url) {
-  if (!url)
-    throw new Error(
-      "Specify --public-url with your Tailscale Serve or Cloudflare Tunnel HTTPS address."
-    );
-  const origin = pairingOrigin(url);
-  const grant = z4.object({
-    pairingId: z4.string(),
-    pin: z4.string(),
-    expiresAt: z4.number(),
-    serverId: z4.string()
-  }).parse(await controlRequest(dataDir, { command: "pair" }));
-  const invitation = {
-    v: 1,
-    url: origin,
-    serverId: grant.serverId,
-    pairingId: grant.pairingId
-  };
-  const payload = JSON.stringify(invitation);
-  const link = createPairingLink(invitation);
-  printHeading("pairing");
-  console.log("  1. Scan below with your phone camera and tap Open Agentrific if offered.");
-  console.log("  2. Or open Agentrific and choose Scan pairing QR code.");
-  console.log("  3. Enter the PIN, then confirm pairing.\n");
-  qrcode.generate(link, { small: true }, (code) => {
-    console.log(
-      code.split("\n").map((line) => `  ${line}`).join("\n")
-    );
-  });
-  console.log();
-  printDetail("PIN:", styleText2(["bold", "yellow"], grant.pin));
-  printDetail("Server", styleText2("cyan", origin));
-  printDetail("Expires", "In five minutes \xB7 one device per code");
-  console.log("\n  Pairing grants this device access to run agents as your host user.\n");
-  return { payload, expiresAt: grant.expiresAt };
-}
+import { z as z19 } from "zod";
 
 // src/terminal.ts
+init_pairing();
+init_cli_output();
 import { createInterface } from "node:readline/promises";
 import select from "@inquirer/select";
 import { emitKeypressEvents as emitKeypressEvents2 } from "node:readline";
 import { styleText as styleText3 } from "node:util";
 
 // src/tunnels.ts
+init_cli_output();
 import { spawn } from "node:child_process";
 import { access, stat } from "node:fs/promises";
 import { constants } from "node:fs";
@@ -5301,10 +5478,11 @@ function startTerminal(dataDir, publicUrl, tunnel) {
 }
 
 // src/cli.ts
-var ConfigSchema = z18.object({
-  dataDir: z18.string(),
-  projectsDir: z18.string(),
-  publicUrl: z18.string().url().optional()
+init_cli_output();
+var ConfigSchema = z19.object({
+  dataDir: z19.string(),
+  projectsDir: z19.string(),
+  publicUrl: z19.string().url().optional()
 });
 function parseCommandArgs() {
   return parseArgs({
@@ -5338,8 +5516,8 @@ async function main() {
   const filename = path12.join(dataDir, "config.json");
   const config = ConfigSchema.parse(
     JSON.parse(
-      await readFile5(filename, "utf8").catch((error) => {
-        if (!z18.object({ code: z18.literal("ENOENT") }).safeParse(error).success) throw error;
+      await readFile6(filename, "utf8").catch((error) => {
+        if (!z19.object({ code: z19.literal("ENOENT") }).safeParse(error).success) throw error;
         return JSON.stringify({ dataDir, projectsDir: path12.join(homedir5(), "projects") });
       })
     )
@@ -5357,11 +5535,11 @@ async function main() {
   throw new Error("Unknown command. Run agentrific --help.");
 }
 async function initCommand({ values, dataDir, filename, config }) {
-  await mkdir5(dataDir, { recursive: true, mode: 448 });
+  await mkdir6(dataDir, { recursive: true, mode: 448 });
   const publicUrl = values["public-url"] ?? config.publicUrl;
   if (publicUrl && new URL(publicUrl).protocol !== "https:")
     throw new Error("Configure an HTTPS URL from Tailscale Serve or Cloudflare Tunnel.");
-  await writeFile4(filename, JSON.stringify({ ...config, publicUrl }, null, 2) + "\n", {
+  await writeFile5(filename, JSON.stringify({ ...config, publicUrl }, null, 2) + "\n", {
     mode: 384
   });
   console.log(`Configuration saved to ${filename}. Start with agentrific start.`);
@@ -5389,8 +5567,8 @@ async function startCommand({ values, dataDir, filename, config }) {
   const publicUrl = connection.url;
   try {
     if (connection.remember && publicUrl) {
-      await mkdir5(dataDir, { recursive: true, mode: 448 });
-      await writeFile4(filename, JSON.stringify({ ...config, publicUrl }, null, 2) + "\n", {
+      await mkdir6(dataDir, { recursive: true, mode: 448 });
+      await writeFile5(filename, JSON.stringify({ ...config, publicUrl }, null, 2) + "\n", {
         mode: 384
       });
     }
@@ -5446,11 +5624,11 @@ async function pairCommand({ values, dataDir, config }) {
   return;
 }
 async function maintenanceCommand({ values, positionals, dataDir }) {
-  const action = z18.enum(["enter", "resume", "drain"]).parse(positionals[1]);
+  const action = z19.enum(["enter", "resume", "drain"]).parse(positionals[1]);
   const result = await controlRequest(dataDir, {
     command: "maintenance",
     action,
-    timeoutMs: z18.coerce.number().int().min(0).max(6e4).parse(values["timeout-ms"] ?? 3e4)
+    timeoutMs: z19.coerce.number().int().min(0).max(6e4).parse(values["timeout-ms"] ?? 3e4)
   });
   console.log(JSON.stringify(result, null, 2));
   if (action === "drain" && "drained" in result && !result.drained) process.exitCode = 1;
@@ -5459,7 +5637,7 @@ async function maintenanceCommand({ values, positionals, dataDir }) {
 async function devicesCommand({ dataDir, command }) {
   console.log(
     JSON.stringify(
-      await controlRequest(dataDir, { command: z18.enum(["devices", "status"]).parse(command) }),
+      await controlRequest(dataDir, { command: z19.enum(["devices", "status"]).parse(command) }),
       null,
       2
     )
@@ -5467,7 +5645,7 @@ async function devicesCommand({ dataDir, command }) {
   return;
 }
 async function revokeCommand({ positionals, dataDir }) {
-  const id = z18.string().uuid().parse(positionals[1]);
+  const id = z19.string().uuid().parse(positionals[1]);
   console.log(JSON.stringify(await controlRequest(dataDir, { command: "revoke", id })));
   return;
 }