@feynmanzhang/open-party 0.1.2 → 0.1.3

package/dist/cli/index.js

@@ -11,27 +11,10 @@ var __export = (target, all) => {
 };
 
 // src/infra/tailscale.ts
-var tailscale_exports = {};
-__export(tailscale_exports, {
-  WhoisIdentity: () => WhoisIdentity,
-  disableFunnel: () => disableFunnel,
-  disableServe: () => disableServe,
-  enableFunnel: () => enableFunnel,
-  enableServe: () => enableServe,
-  getInstallInstructions: () => getInstallInstructions,
-  getTailnetHostname: () => getTailnetHostname,
-  getTailscaleBinary: () => getTailscaleBinary,
-  getTailscaleConnectionStatus: () => getTailscaleConnectionStatus,
-  getTailscaleInstallationStatus: () => getTailscaleInstallationStatus,
-  getTailscaleIps: () => getTailscaleIps,
-  joinTailnet: () => joinTailnet,
-  readTailscaleStatus: () => readTailscaleStatus,
-  readWhoisIdentity: () => readWhoisIdentity,
-  resetTailscaleBinaryCache: () => resetTailscaleBinaryCache
-});
 import { execFileSync, execSync } from "child_process";
 import { existsSync } from "fs";
 import { join } from "path";
+import { spawn as nodeSpawn } from "child_process";
 function parsePossiblyNoisyJson(raw2) {
   const trimmed = raw2.trim();
   const start = trimmed.indexOf("{");
@@ -137,35 +120,6 @@ function getTailscaleIps() {
   }
   return [];
 }
-function parseWhoisIdentity(payload) {
-  const userProfile = payload.UserProfile ?? payload.userProfile ?? payload.User ?? {};
-  const login = userProfile.LoginName || userProfile.Login || userProfile.login || payload.LoginName || payload.login;
-  if (typeof login !== "string" || !login.trim()) return null;
-  const rawName = userProfile.DisplayName || userProfile.Name || userProfile.displayName || payload.DisplayName || payload.name;
-  const name = typeof rawName === "string" ? rawName.trim() : void 0;
-  return new WhoisIdentity(login.trim(), name);
-}
-function readWhoisIdentity(ip, timeout = 5e3, cacheTtl = 60, errorTtl = 5) {
-  const normalized = ip.trim();
-  if (!normalized) return null;
-  const now = performance.now() / 1e3;
-  const cached = whoisCache.get(normalized);
-  if (cached) {
-    if (cached.expiresAt > now) return cached.value;
-    whoisCache.delete(normalized);
-  }
-  const binary = getTailscaleBinary();
-  let identity = null;
-  try {
-    const stdout = runExec([binary, "whois", "--json", normalized], timeout);
-    const parsed = stdout.trim() ? parsePossiblyNoisyJson(stdout) : {};
-    identity = parseWhoisIdentity(parsed);
-  } catch {
-  }
-  const ttl = identity ? cacheTtl : errorTtl;
-  whoisCache.set(normalized, { value: identity, expiresAt: now + ttl });
-  return identity;
-}
 function execWithSudoFallback(cmd, timeout = 15e3) {
   try {
     return runExec(cmd, timeout);
@@ -181,27 +135,11 @@ function execWithSudoFallback(cmd, timeout = 15e3) {
     throw exc;
   }
 }
-function enableServe(port, timeout = 15e3) {
-  const binary = getTailscaleBinary();
-  execWithSudoFallback([binary, "serve", "--bg", "--yes", String(port)], timeout);
-}
-function disableServe(timeout = 15e3) {
-  const binary = getTailscaleBinary();
-  execWithSudoFallback([binary, "serve", "reset"], timeout);
-}
-function enableFunnel(port, timeout = 15e3) {
-  const binary = getTailscaleBinary();
-  execWithSudoFallback([binary, "funnel", "--bg", "--yes", String(port)], timeout);
-}
-function disableFunnel(timeout = 15e3) {
-  const binary = getTailscaleBinary();
-  execWithSudoFallback([binary, "funnel", "reset"], timeout);
-}
 function joinTailnet(authKey, timeout = 3e4) {
   const binary = getTailscaleBinary();
   try {
     const output = execWithSudoFallback(
-      [binary, "up", "--authkey", authKey, "--accept-routes"],
+      [binary, "up", "--authkey", authKey],
       timeout
     );
     return { success: true, output: output.trim() };
@@ -210,27 +148,6 @@ function joinTailnet(authKey, timeout = 3e4) {
     return { success: false, output: (err.stderr ?? err.message ?? "").trim() };
   }
 }
-function getTailscaleConnectionStatus() {
-  try {
-    const status = readTailscaleStatus();
-    const self = status.Self ?? {};
-    const online = self.Online === true;
-    const ips = self.TailscaleIPs;
-    const dns = self.DNSName?.replace(/\.$/, "");
-    return {
-      connected: online,
-      tailscale_ip: ips?.[0] ?? null,
-      hostname: dns ?? null
-    };
-  } catch (e) {
-    return {
-      connected: false,
-      tailscale_ip: null,
-      hostname: null,
-      error: e.message
-    };
-  }
-}
 function getTailscaleInstallationStatus() {
   const binary = findTailscaleBinary();
   if (!binary) {
@@ -262,6 +179,62 @@ function getTailscaleInstallationStatus() {
 function resetTailscaleBinaryCache() {
   cachedBinary = null;
 }
+function logoutTailscale(timeout = 15e3) {
+  const binary = getTailscaleBinary();
+  try {
+    const output = runExec([binary, "logout"], timeout);
+    resetTailscaleBinaryCache();
+    return { success: true, output: output.trim() };
+  } catch (e) {
+    const err = e;
+    return { success: false, output: (err.stderr ?? err.message ?? "").trim() };
+  }
+}
+function startInteractiveLogin() {
+  const binary = getTailscaleBinary();
+  const child = nodeSpawn(binary, ["login"], {
+    stdio: ["pipe", "pipe", "pipe"],
+    windowsHide: true
+  });
+  const urlRegex = /https:\/\/login\.tailscale\.com\/a\/[^\s]+/;
+  const promise = new Promise((resolve4) => {
+    let stdout = "";
+    let resolved = false;
+    const done = (result) => {
+      if (resolved) return;
+      resolved = true;
+      resolve4(result);
+    };
+    child.stdout?.on("data", (data) => {
+      stdout += data.toString();
+      const match2 = stdout.match(urlRegex);
+      if (match2) {
+        done({ success: true, url: match2[0], output: stdout.trim() });
+      }
+    });
+    child.stderr?.on("data", (data) => {
+      stdout += data.toString();
+    });
+    child.on("close", (code) => {
+      if (code === 0) {
+        done({ success: true, output: stdout.trim() });
+      } else {
+        done({ success: false, output: stdout.trim() || `Exited with code ${code}` });
+      }
+    });
+    child.on("error", (err) => {
+      done({ success: false, output: err.message });
+    });
+    setTimeout(() => {
+      done({ success: false, output: "Timeout waiting for login URL" });
+      try {
+        child.kill();
+      } catch {
+      }
+    }, 3e4);
+  });
+  return { promise, process: child };
+}
 function getInstallInstructions(platform) {
   switch (platform) {
     case "linux":
@@ -294,20 +267,11 @@ function getInstallInstructions(platform) {
       };
   }
 }
-var cachedBinary, WhoisIdentity, whoisCache, PERMISSION_KEYWORDS;
+var cachedBinary, PERMISSION_KEYWORDS;
 var init_tailscale = __esm({
   "src/infra/tailscale.ts"() {
     "use strict";
     cachedBinary = null;
-    WhoisIdentity = class {
-      constructor(login, name) {
-        this.login = login;
-        this.name = name;
-      }
-      login;
-      name;
-    };
-    whoisCache = /* @__PURE__ */ new Map();
     PERMISSION_KEYWORDS = [
       "permission denied",
       "access denied",
@@ -322,6 +286,58 @@ var init_tailscale = __esm({
   }
 });
 
+// src/cli/tailscale-installer.ts
+var tailscale_installer_exports = {};
+__export(tailscale_installer_exports, {
+  installTailscale: () => installTailscale
+});
+import { spawn } from "child_process";
+async function installTailscale(platform) {
+  const entry = INSTALL_COMMANDS[platform];
+  if (!entry) {
+    return {
+      success: false,
+      output: `Unsupported platform: ${platform}. Please install manually from https://tailscale.com/download`
+    };
+  }
+  const cmd = entry.needsSudo ? "sudo" : entry.cmd;
+  const args2 = entry.needsSudo ? [entry.cmd, ...entry.args] : entry.args;
+  console.log(`Running: ${cmd} ${args2.join(" ")}
+`);
+  return new Promise((resolve4) => {
+    const child = spawn(cmd, args2, {
+      stdio: "inherit",
+      windowsHide: true
+    });
+    let exited = false;
+    child.on("close", (code) => {
+      if (exited) return;
+      exited = true;
+      if (code === 0) {
+        resolve4({ success: true, output: "Installation completed." });
+      } else {
+        resolve4({ success: false, output: `Installation exited with code ${code}` });
+      }
+    });
+    child.on("error", (err) => {
+      if (exited) return;
+      exited = true;
+      resolve4({ success: false, output: err.message });
+    });
+  });
+}
+var INSTALL_COMMANDS;
+var init_tailscale_installer = __esm({
+  "src/cli/tailscale-installer.ts"() {
+    "use strict";
+    INSTALL_COMMANDS = {
+      linux: { cmd: "bash", args: ["-c", "curl -fsSL https://tailscale.com/install.sh | sh"], needsSudo: true },
+      darwin: { cmd: "brew", args: ["install", "tailscale"], needsSudo: false },
+      win32: { cmd: "winget", args: ["install", "Tailscale.Tailscale", "--accept-source-agreements"], needsSudo: false }
+    };
+  }
+});
+
 // node_modules/hono/dist/compose.js
 var compose;
 var init_compose = __esm({
@@ -3171,7 +3187,7 @@ var init_dist2 = __esm({
             });
             if (!chunk) {
               if (i === 1) {
-                await new Promise((resolve2) => setTimeout(resolve2));
+                await new Promise((resolve4) => setTimeout(resolve4));
                 maxReadCount = 3;
                 continue;
               }
@@ -3410,8 +3426,8 @@ function classifyFetchError(error) {
   if (error instanceof DOMException && error.name === "AbortError") return null;
   return null;
 }
-function sleep(ms) {
-  return new Promise((resolve2) => setTimeout(resolve2, ms));
+function sleep2(ms) {
+  return new Promise((resolve4) => setTimeout(resolve4, ms));
 }
 var UNKNOWN, PARTY_SERVER, DEGRADED, SUSPECT, DOWN, NOT_SERVER, MAYBE, MAYBE_MAX_RETRIES, BACKOFF_BASE, BACKOFF_CAP, FAILURE_SUSPECT, FAILURE_DOWN, PeerDiscovery;
 var init_peer_discovery = __esm({
@@ -3487,7 +3503,7 @@ var init_peer_discovery = __esm({
           } catch (e) {
             console.error("[Discovery] Cycle failed:", e);
           }
-          await sleep(DISCOVERY_INTERVAL * 1e3);
+          await sleep2(DISCOVERY_INTERVAL * 1e3);
         }
       }
       async discoveryCycle() {
@@ -4178,7 +4194,21 @@ body::after{
 }
 .btn-join:hover{background:rgba(0,255,240,0.18);box-shadow:0 0 10px rgba(0,255,240,0.2)}
 .btn-join:active{transform:scale(0.97)}
-.btn-join.connected{border-color:var(--green);color:var(--green);background:rgba(0,255,136,0.08)}
+.btn-logout{border-color:var(--red);color:var(--red);background:rgba(255,51,102,0.08)}
+.btn-logout:hover{background:rgba(255,51,102,0.18);box-shadow:0 0 10px rgba(255,51,102,0.2)}
+.btn-install{border-color:var(--yellow);color:var(--yellow);background:rgba(255,170,0,0.08)}
+.btn-install:hover{background:rgba(255,170,0,0.18);box-shadow:0 0 10px rgba(255,170,0,0.2)}
+
+/* Tab bar inside modal */
+.tab-bar{display:flex;gap:0;margin-bottom:18px;border-bottom:1px solid var(--border)}
+.tab-bar .tab{
+  font-family:var(--font-mono);font-size:0.8rem;padding:8px 16px;cursor:pointer;
+  color:var(--muted);border-bottom:2px solid transparent;transition:all 0.2s;
+}
+.tab-bar .tab:hover{color:var(--text)}
+.tab-bar .tab.active{color:var(--cyan);border-bottom-color:var(--cyan)}
+.tab-content{display:none}
+.tab-content.active{display:block}
 
 /* Modal */
 .modal-overlay{
@@ -4351,16 +4381,47 @@ body::after{
 
   <div class="footer">OPEN PARTY v0.1 // DECENTRALIZED AGENT NETWORK</div>
 
-  <!-- Join Network Modal -->
+  <!-- Join Network / Login Modal (two tabs: Interactive + Auth Key) -->
   <div class="modal-overlay" id="joinModal">
     <div class="modal">
-      <div class="modal-title">JOIN TAILNET</div>
-      <div class="modal-desc">Enter your Tailscale auth key to join the network.<br>You can generate one from the Tailscale admin console.</div>
-      <input type="password" class="modal-input" id="authKeyInput" placeholder="tskey-auth-xxxxx..." autocomplete="off" spellcheck="false" />
-      <div class="modal-status" id="joinStatus"></div>
+      <div class="modal-title">CONNECT TO TAILNET</div>
+      <div class="tab-bar" id="joinTabs">
+        <div class="tab active" data-tab="interactive">Interactive</div>
+        <div class="tab" data-tab="authkey">Auth Key</div>
+      </div>
+
+      <!-- Interactive tab -->
+      <div class="tab-content active" id="tabInteractive">
+        <div class="modal-desc">Click the button below to open a browser authentication page.<br>Your Tailscale connection will be established once you authenticate.</div>
+        <div class="modal-status" id="interactiveStatus"></div>
+        <div class="modal-actions">
+          <button class="modal-btn modal-btn-cancel" id="btnCancelJoin">Cancel</button>
+          <button class="modal-btn modal-btn-submit" id="btnInteractiveLogin">Open Browser Login</button>
+        </div>
+      </div>
+
+      <!-- Auth Key tab -->
+      <div class="tab-content" id="tabAuthkey">
+        <div class="modal-desc">Enter your Tailscale auth key to join the network.<br>You can generate one from the Tailscale admin console.</div>
+        <input type="password" class="modal-input" id="authKeyInput" placeholder="tskey-auth-xxxxx..." autocomplete="off" spellcheck="false" />
+        <div class="modal-status" id="joinStatus"></div>
+        <div class="modal-actions">
+          <button class="modal-btn modal-btn-cancel" id="btnCancelAuthkey">Cancel</button>
+          <button class="modal-btn modal-btn-submit" id="btnSubmitJoin">Connect</button>
+        </div>
+      </div>
+    </div>
+  </div>
+
+  <!-- Logout Confirmation Modal -->
+  <div class="modal-overlay" id="logoutModal">
+    <div class="modal">
+      <div class="modal-title" style="color:var(--red)">LOG OUT OF TAILNET</div>
+      <div class="modal-desc">This will disconnect from Tailscale and remove your credentials.<br>You will need to re-authenticate to reconnect.</div>
+      <div class="modal-status" id="logoutStatus"></div>
       <div class="modal-actions">
-        <button class="modal-btn modal-btn-cancel" id="btnCancelJoin">Cancel</button>
-        <button class="modal-btn modal-btn-submit" id="btnSubmitJoin">Connect</button>
+        <button class="modal-btn modal-btn-cancel" id="btnCancelLogout">Cancel</button>
+        <button class="modal-btn modal-btn-submit" style="border-color:var(--red);color:var(--red);background:rgba(255,51,102,0.12)" id="btnConfirmLogout">Log Out</button>
       </div>
     </div>
   </div>
@@ -4660,28 +4721,63 @@ body::after{
     }
   }, 1000);
 
-  // ---- Join Network Modal ----
+  // ---- Join Modal Tabs ----
+  const joinTabs = $$('#joinTabs .tab');
+  joinTabs.forEach(function(tab) {
+    tab.addEventListener('click', function() {
+      joinTabs.forEach(function(t) { t.classList.remove('active'); });
+      tab.classList.add('active');
+      // Toggle tab contents
+      const target = tab.getAttribute('data-tab');
+      $$('.tab-content').forEach(function(tc) { tc.classList.remove('active'); });
+      if (target === 'interactive') {
+        $('#tabInteractive').classList.add('active');
+      } else {
+        $('#tabAuthkey').classList.add('active');
+      }
+    });
+  });
+
+  // ---- Join Network Modal (open/close) ----
   const joinModal = $('#joinModal');
   const btnJoin = $('#btnJoinNetwork');
   const btnCancel = $('#btnCancelJoin');
+  const btnCancelAuthkey = $('#btnCancelAuthkey');
   const btnSubmit = $('#btnSubmitJoin');
   const authKeyInput = $('#authKeyInput');
   const joinStatus = $('#joinStatus');
 
   function openJoinModal() {
+    // Reset both tabs
     joinStatus.className = 'modal-status';
     joinStatus.textContent = '';
     authKeyInput.value = '';
+    $('#interactiveStatus').className = 'modal-status';
+    $('#interactiveStatus').textContent = '';
+    // Default to Interactive tab
+    $$('#joinTabs .tab').forEach(function(t) { t.classList.remove('active'); });
+    $$('#joinTabs .tab')[0].classList.add('active');
+    $$('.tab-content').forEach(function(tc) { tc.classList.remove('active'); });
+    $('#tabInteractive').classList.add('active');
     joinModal.classList.add('open');
-    setTimeout(function() { authKeyInput.focus(); }, 100);
   }
 
   function closeJoinModal() {
     joinModal.classList.remove('open');
   }
 
-  btnJoin.addEventListener('click', openJoinModal);
+  btnJoin.addEventListener('click', function() {
+    // Decide action based on Tailscale state
+    if (tsState && tsState.state === 'connected') {
+      openLogoutModal();
+    } else if (tsState && tsState.state === 'not_installed') {
+      doInstallTailscale();
+    } else {
+      openJoinModal();
+    }
+  });
   btnCancel.addEventListener('click', closeJoinModal);
+  btnCancelAuthkey.addEventListener('click', closeJoinModal);
   joinModal.addEventListener('click', function(e) {
     if (e.target === joinModal) closeJoinModal();
   });
@@ -4690,6 +4786,7 @@ body::after{
     if (e.key === 'Escape') closeJoinModal();
   });
 
+  // ---- Auth Key submit ----
   btnSubmit.addEventListener('click', async function() {
     const key = authKeyInput.value.trim();
     if (!key) {
@@ -4711,9 +4808,9 @@ body::after{
       if (data.success) {
         joinStatus.className = 'modal-status success';
         joinStatus.textContent = 'Successfully joined network!';
-        btnJoin.textContent = 'Connected';
-        btnJoin.classList.add('connected');
-        setTimeout(function() { closeJoinModal(); fullRefresh(); }, 1500);
+        btnJoin.textContent = 'Logout';
+        btnJoin.className = 'btn-join btn-logout';
+        setTimeout(function() { closeJoinModal(); checkTailscaleStatus(); fullRefresh(); }, 1500);
       } else {
         joinStatus.className = 'modal-status error';
         joinStatus.textContent = data.output || 'Failed to join network';
@@ -4726,6 +4823,133 @@ body::after{
     btnSubmit.textContent = 'Connect';
   });
 
+  // ---- Interactive Login ----
+  const btnInteractiveLogin = $('#btnInteractiveLogin');
+  btnInteractiveLogin.addEventListener('click', async function() {
+    const statusEl = $('#interactiveStatus');
+    statusEl.className = 'modal-status';
+    statusEl.textContent = '';
+    btnInteractiveLogin.disabled = true;
+    btnInteractiveLogin.innerHTML = '<span class="spinner"></span>Opening browser...';
+
+    try {
+      const r = await fetch('/dashboard/api/tailscale-login', { method: 'POST' });
+      const data = await r.json();
+
+      if (data.success && data.url) {
+        // Open the auth URL in a new tab
+        window.open(data.url, '_blank');
+        statusEl.className = 'modal-status success';
+        statusEl.textContent = 'Authentication page opened in your browser. Waiting for connection...';
+
+        // Poll for connection
+        var pollCount = 0;
+        var pollInterval = setInterval(async function() {
+          pollCount++;
+          if (pollCount > 40) { // 2 minutes timeout
+            clearInterval(pollInterval);
+            statusEl.className = 'modal-status error';
+            statusEl.textContent = 'Timed out waiting for authentication. Please try again.';
+            btnInteractiveLogin.disabled = false;
+            btnInteractiveLogin.textContent = 'Open Browser Login';
+            return;
+          }
+          try {
+            var sr = await fetch('/dashboard/api/tailscale-status');
+            var sd = await sr.json();
+            if (sd.state === 'connected') {
+              clearInterval(pollInterval);
+              btnJoin.textContent = 'Logout';
+              btnJoin.className = 'btn-join btn-logout';
+              closeJoinModal();
+              checkTailscaleStatus();
+              fullRefresh();
+              return;
+            }
+          } catch { /* poll error, continue */ }
+        }, 3000);
+      } else {
+        statusEl.className = 'modal-status error';
+        statusEl.textContent = data.output || 'Failed to start interactive login';
+        btnInteractiveLogin.disabled = false;
+        btnInteractiveLogin.textContent = 'Open Browser Login';
+      }
+    } catch (e) {
+      statusEl.className = 'modal-status error';
+      statusEl.textContent = 'Network error: ' + (e.message || 'unknown');
+      btnInteractiveLogin.disabled = false;
+      btnInteractiveLogin.textContent = 'Open Browser Login';
+    }
+  });
+
+  // ---- Logout Modal ----
+  const logoutModal = $('#logoutModal');
+  const btnConfirmLogout = $('#btnConfirmLogout');
+  const btnCancelLogout = $('#btnCancelLogout');
+  const logoutStatus = $('#logoutStatus');
+
+  function openLogoutModal() {
+    logoutStatus.className = 'modal-status';
+    logoutStatus.textContent = '';
+    logoutModal.classList.add('open');
+  }
+
+  btnCancelLogout.addEventListener('click', function() { logoutModal.classList.remove('open'); });
+  logoutModal.addEventListener('click', function(e) { if (e.target === logoutModal) logoutModal.classList.remove('open'); });
+
+  btnConfirmLogout.addEventListener('click', async function() {
+    btnConfirmLogout.disabled = true;
+    btnConfirmLogout.innerHTML = '<span class="spinner"></span>Logging out...';
+    logoutStatus.className = 'modal-status';
+    logoutStatus.textContent = '';
+
+    try {
+      const r = await fetch('/dashboard/api/logout', { method: 'POST' });
+      const data = await r.json();
+      logoutModal.classList.remove('open');
+      if (data.success) {
+        checkTailscaleStatus();
+        fullRefresh();
+      } else {
+        alert('Logout failed: ' + (data.output || 'unknown error'));
+      }
+    } catch (e) {
+      logoutModal.classList.remove('open');
+      alert('Network error: ' + (e.message || 'unknown'));
+    }
+    btnConfirmLogout.disabled = false;
+    btnConfirmLogout.textContent = 'Log Out';
+  });
+
+  // ---- Install Tailscale ----
+  async function doInstallTailscale() {
+    if (!confirm('Install Tailscale on this machine?')) return;
+
+    btnJoin.disabled = true;
+    btnJoin.innerHTML = '<span class="spinner"></span>Installing...';
+
+    try {
+      const r = await fetch('/dashboard/api/install-tailscale', { method: 'POST' });
+      const data = await r.json();
+      if (data.success) {
+        btnJoin.textContent = 'Installed';
+        btnJoin.disabled = false;
+        checkTailscaleStatus();
+        fullRefresh();
+      } else {
+        alert('Installation failed: ' + (data.output || 'unknown error'));
+        btnJoin.textContent = 'Install Tailscale';
+        btnJoin.className = 'btn-join btn-install';
+        btnJoin.disabled = false;
+      }
+    } catch (e) {
+      alert('Network error: ' + (e.message || 'unknown'));
+      btnJoin.textContent = 'Install Tailscale';
+      btnJoin.className = 'btn-join btn-install';
+      btnJoin.disabled = false;
+    }
+  }
+
   // Check initial Tailscale status (tri-state)
   let tsState = null;
   let tsInstallInfo = null;
@@ -4744,17 +4968,23 @@ body::after{
     if (tsState.state === 'connected') {
       dot.className = 'status-dot';
       text.textContent = 'ONLINE';
-      btnJoin.textContent = 'Connected';
-      btnJoin.classList.add('connected');
+      btnJoin.textContent = 'Logout';
+      btnJoin.className = 'btn-join btn-logout';
+      btnJoin.style.display = '';
       panel.style.display = 'none';
     } else if (tsState.state === 'not_installed') {
       dot.className = 'status-dot not-installed';
       text.textContent = 'NOT INSTALLED';
-      btnJoin.style.display = 'none';
+      btnJoin.textContent = 'Install Tailscale';
+      btnJoin.className = 'btn-join btn-install';
+      btnJoin.style.display = '';
       await renderNotInstalledPanel();
     } else {
       dot.className = 'status-dot not-connected';
       text.textContent = 'NOT CONNECTED';
+      btnJoin.textContent = 'Join Network';
+      btnJoin.className = 'btn-join';
+      btnJoin.style.display = '';
       await renderNotConnectedPanel();
     }
   }
@@ -4788,7 +5018,7 @@ body::after{
       html += '</div>';
     }
 
-    html += '<div class="ts-setup-hint">Or run <code style="color:var(--cyan)">npx open-party setup</code> for guided installation</div>';
+    html += '<div class="ts-setup-hint">Or click the <strong>Install Tailscale</strong> button above, or run <code style="color:var(--cyan)">npx open-party setup</code></div>';
     html += '<button class="btn-redetect" onclick="window.__redetectTailscale()">Re-detect</button>';
     panel.innerHTML = html;
     panel.style.display = 'block';
@@ -4796,14 +5026,10 @@ body::after{
 
   async function renderNotConnectedPanel() {
     const panel = $('#tsPanel');
-    const btnJoin = $('#btnJoinNetwork');
-    btnJoin.style.display = '';
-    btnJoin.textContent = 'Join Network';
-    btnJoin.classList.remove('connected');
 
     let html = '<div class="ts-panel-title not-connected">Tailscale Not Connected</div>';
     html += '<div class="ts-info-row"><span class="label">Status:</span><span class="value" style="color:var(--yellow)">Installed but not authenticated</span></div>';
-    html += '<div class="ts-setup-hint">Run <code style="color:var(--cyan)">npx open-party setup</code> to log in, or use the Join Network button to enter an Auth Key</div>';
+    html += '<div class="ts-setup-hint">Use the <strong>Join Network</strong> button above to log in</div>';
     html += '<button class="btn-redetect" onclick="window.__redetectTailscale()">Re-detect</button>';
     panel.innerHTML = html;
     panel.style.display = 'block';
@@ -4829,7 +5055,7 @@ body::after{
 });
 
 // src/server/routes/dashboard.ts
-var dashboardRoutes;
+var dashboardRoutes, activeLogin;
 var init_dashboard = __esm({
   "src/server/routes/dashboard.ts"() {
     "use strict";
@@ -4935,14 +5161,56 @@ var init_dashboard = __esm({
         return c.json({ success: false, output: e.message }, 500);
       }
     });
+    activeLogin = null;
+    dashboardRoutes.post("/api/logout", async (c) => {
+      const result = logoutTailscale();
+      if (result.success) {
+        resetTailscaleBinaryCache();
+        refreshSelfIp();
+      }
+      return c.json(result, result.success ? 200 : 500);
+    });
+    dashboardRoutes.post("/api/tailscale-login", async (c) => {
+      if (activeLogin?.url) {
+        return c.json({ success: true, url: activeLogin.url });
+      }
+      const { promise, process: process2 } = startInteractiveLogin();
+      activeLogin = { process: process2 };
+      const result = await promise;
+      if (result.success && result.url) {
+        activeLogin.url = result.url;
+        return c.json({ success: true, url: result.url });
+      }
+      activeLogin = null;
+      return c.json({ success: false, output: result.output }, 500);
+    });
+    dashboardRoutes.post("/api/install-tailscale", async (c) => {
+      const { installTailscale: installTailscale2 } = await Promise.resolve().then(() => (init_tailscale_installer(), tailscale_installer_exports));
+      const result = await installTailscale2(process.platform);
+      if (result.success) {
+        resetTailscaleBinaryCache();
+      }
+      return c.json(result, result.success ? 200 : 500);
+    });
   }
 });
 
 // src/server/index.ts
 var server_exports = {};
+import { mkdirSync as mkdirSync3, writeFileSync as writeFileSync3, unlinkSync as unlinkSync2 } from "fs";
+import { join as join5, dirname as dirname3 } from "path";
+import { homedir as homedir4 } from "os";
 async function periodicCleanup() {
 }
+function pidFilePath2() {
+  const pluginData = process.env.CLAUDE_PLUGIN_DATA || "";
+  if (pluginData) return join5(pluginData, "server.pid");
+  return join5(homedir4(), ".open-party", "server.pid");
+}
 async function main() {
+  const pidPath = pidFilePath2();
+  mkdirSync3(dirname3(pidPath), { recursive: true });
+  writeFileSync3(pidPath, String(process.pid));
   console.log(`Starting Party Server on port ${PARTY_PORT} (Tailscale IP: ${getSelfIp()})`);
   process.on("SIGHUP", () => {
   });
@@ -4951,6 +5219,10 @@ async function main() {
   const cleanupPromise = periodicCleanup();
   const shutdown = () => {
     console.log("\nShutting down Party Server...");
+    try {
+      unlinkSync2(pidPath);
+    } catch {
+    }
     server.close();
     process.exit(0);
   };
@@ -4990,49 +5262,7 @@ var init_server = __esm({
 
 // src/cli/setup.ts
 init_tailscale();
-import { createInterface } from "readline";
-
-// src/cli/tailscale-installer.ts
-import { spawn } from "child_process";
-var INSTALL_COMMANDS = {
-  linux: { cmd: "bash", args: ["-c", "curl -fsSL https://tailscale.com/install.sh | sh"], needsSudo: true },
-  darwin: { cmd: "brew", args: ["install", "tailscale"], needsSudo: false },
-  win32: { cmd: "winget", args: ["install", "Tailscale.Tailscale", "--accept-source-agreements"], needsSudo: false }
-};
-async function installTailscale(platform) {
-  const entry = INSTALL_COMMANDS[platform];
-  if (!entry) {
-    return {
-      success: false,
-      output: `Unsupported platform: ${platform}. Please install manually from https://tailscale.com/download`
-    };
-  }
-  const cmd = entry.needsSudo ? "sudo" : entry.cmd;
-  const args2 = entry.needsSudo ? [entry.cmd, ...entry.args] : entry.args;
-  console.log(`Running: ${cmd} ${args2.join(" ")}
-`);
-  return new Promise((resolve2) => {
-    const child = spawn(cmd, args2, {
-      stdio: "inherit",
-      windowsHide: true
-    });
-    let exited = false;
-    child.on("close", (code) => {
-      if (exited) return;
-      exited = true;
-      if (code === 0) {
-        resolve2({ success: true, output: "Installation completed." });
-      } else {
-        resolve2({ success: false, output: `Installation exited with code ${code}` });
-      }
-    });
-    child.on("error", (err) => {
-      if (exited) return;
-      exited = true;
-      resolve2({ success: false, output: err.message });
-    });
-  });
-}
+init_tailscale_installer();
 
 // src/cli/agent-detector.ts
 import { existsSync as existsSync2 } from "fs";
@@ -5317,11 +5547,12 @@ async function installPluginToAgent(agentType) {
   }
 }
 
-// src/cli/setup.ts
-var rl = createInterface({ input: process.stdin, output: process.stdout });
-function prompt(question) {
-  return new Promise((resolve2) => rl.question(question, (answer) => resolve2(answer.trim())));
-}
+// src/cli/tailscale-login.ts
+init_tailscale();
+import { spawn as spawn2 } from "child_process";
+
+// src/cli/tty-utils.ts
+import { createInterface } from "readline";
 function cyan(text) {
   return `\x1B[36m${text}\x1B[0m`;
 }
@@ -5337,96 +5568,163 @@ function red(text) {
 function bold(text) {
   return `\x1B[1m${text}\x1B[0m`;
 }
-async function stepTailscale() {
-  console.log(`
-${bold(cyan("\u{1F50D} Step 1: Detecting Tailscale..."))}
+function dim(text) {
+  return `\x1B[2m${text}\x1B[0m`;
+}
+function createRl() {
+  return createInterface({ input: process.stdin, output: process.stdout });
+}
+function closeRl(rl) {
+  rl.close();
+}
+async function prompt(question) {
+  const rl = createInterface({ input: process.stdin, output: process.stdout });
+  return new Promise((resolve4) => {
+    rl.question(question, (answer) => {
+      rl.close();
+      resolve4(answer.trim());
+    });
+  });
+}
+async function select(options, opts) {
+  if (options.length === 0) throw new Error("select() requires at least one option");
+  if (options.length === 1) return options[0].value;
+  const message = opts?.message ?? "";
+  const wasRaw = process.stdin.isRaw;
+  if (process.stdin.isTTY) process.stdin.setRawMode(true);
+  try {
+    let cursor = 0;
+    const render = () => {
+      const lines = options.length + (message ? 1 : 0);
+      process.stdout.write(`\x1B[${lines}A\x1B[0J`);
+      if (message) {
+        process.stdout.write(`${message}
+`);
+      }
+      for (let i = 0; i < options.length; i++) {
+        const opt = options[i];
+        const prefix = i === cursor ? `${cyan("\u276F")} ` : "  ";
+        const label = i === cursor ? bold(opt.label) : opt.label;
+        const hintStr = opt.hint ? ` ${dim(opt.hint)}` : "";
+        process.stdout.write(`${prefix}${label}${hintStr}
+`);
+      }
+    };
+    if (message) {
+      process.stdout.write(`${message}
 `);
-  const status = getTailscaleInstallationStatus();
-  if (status.state === "connected") {
-    console.log(`${green("\u2705 Tailscale is connected!")}`);
-    console.log(`   IP: ${status.tailscale_ip}  Hostname: ${status.hostname}`);
-    return;
-  }
-  if (status.state === "not_installed") {
-    console.log(`${red("\u274C Tailscale is not installed.")}`);
-    await handleNotInstalled(status.platform);
-    const newStatus = getTailscaleInstallationStatus();
-    if (newStatus.state === "not_installed") {
-      console.log(`
-${yellow("\u26A0\uFE0F  Tailscale still not detected. Please install manually and re-run setup.")}`);
-      return;
     }
-    if (newStatus.state === "connected") {
-      console.log(`
-${green("\u2705 Tailscale is connected!")} IP: ${newStatus.tailscale_ip}`);
-      return;
+    for (let i = 0; i < options.length; i++) {
+      const opt = options[i];
+      const prefix = i === cursor ? `${cyan("\u276F")} ` : "  ";
+      const label = i === cursor ? bold(opt.label) : opt.label;
+      const hintStr = opt.hint ? ` ${dim(opt.hint)}` : "";
+      process.stdout.write(`${prefix}${label}${hintStr}
+`);
     }
-    await handleNotConnected(newStatus.binary);
-    return;
+    return new Promise((resolve4) => {
+      const onKey = (ch, key) => {
+        if (key.name === "up" || key.sequence === "\x1B[A") {
+          cursor = (cursor - 1 + options.length) % options.length;
+          render();
+        } else if (key.name === "down" || key.sequence === "\x1B[B") {
+          cursor = (cursor + 1) % options.length;
+          render();
+        } else if (key.name === "return" || key.sequence === "\r") {
+          process.stdin.removeListener("keypress", onKey);
+          process.stdout.write("\n");
+          resolve4(options[cursor].value);
+        }
+      };
+      process.stdin.on("keypress", onKey);
+      if (process.stdin.isTTY) {
+        process.stdin.resume();
+      }
+    });
+  } finally {
+    if (process.stdin.isTTY) process.stdin.setRawMode(wasRaw ?? false);
   }
-  await handleNotConnected(status.binary);
 }
-async function handleNotInstalled(platform) {
-  const info = getInstallInstructions(platform);
-  console.log(`
-Install Tailscale for ${bold(info.os)}:
+async function multiSelect(options, opts) {
+  if (options.length === 0) return [];
+  const message = opts?.message ?? "";
+  const wasRaw = process.stdin.isRaw;
+  if (process.stdin.isTTY) process.stdin.setRawMode(true);
+  try {
+    let cursor = 0;
+    const selected = /* @__PURE__ */ new Set();
+    const render = () => {
+      const lines = options.length + (message ? 1 : 0) + 1;
+      process.stdout.write(`\x1B[${lines}A\x1B[0J`);
+      if (message) {
+        process.stdout.write(`${message}
 `);
-  if (info.commands.length > 0) {
-    for (const cmd of info.commands) {
-      const prefix = info.needs_sudo ? "sudo " : "";
-      console.log(`  ${cyan(prefix + cmd)}`);
-    }
-  }
-  console.log(`
-  Download: ${info.download_url}`);
-  const autoInstall = info.commands.length > 0 && platform !== "win32";
-  if (autoInstall) {
-    const answer = await prompt(`
-${bold("Install Tailscale automatically?")} [yes/no]: `);
-    if (answer.toLowerCase() === "yes" || answer.toLowerCase() === "y") {
-      console.log("");
-      const result = await installTailscale(platform);
-      if (result.success) {
-        console.log(`${green("\u2705 Tailscale installed successfully!")}`);
-      } else {
-        console.log(`${red("\u274C Installation failed:")}
-${result.output}`);
-        console.log(`
-  Please install manually and re-run \x1B[36mnpx open-party setup\x1B[0m`);
       }
-      return;
+      process.stdout.write(`${dim("  \u2191/\u2193 navigate, space to select, enter to confirm")}
+`);
+      for (let i = 0; i < options.length; i++) {
+        const opt = options[i];
+        const prefix = i === cursor ? `${cyan("\u276F")} ` : "  ";
+        const check = selected.has(i) ? green("\u25C9") : "\u25CB";
+        const label = i === cursor ? bold(opt.label) : opt.label;
+        process.stdout.write(`${prefix}${check} ${label}
+`);
+      }
+    };
+    if (message) {
+      process.stdout.write(`${message}
+`);
     }
-  }
-  console.log(`
-  Or run: ${cyan("npx open-party setup")}  (after installing manually)`);
-  if (autoInstall) {
-    const cont = await prompt('Press Enter when installation is complete, or type "skip" to skip...');
-    if (cont.toLowerCase() === "skip") return;
-    resetTailscaleBinaryCache();
-  }
-}
-async function handleNotConnected(binary) {
-  console.log(`${yellow("\u{1F512} Tailscale is installed but not connected.")}`);
-  console.log("");
-  console.log("Choose a login method:\n");
-  console.log("  1. Interactive login (opens browser to authenticate)");
-  console.log("  2. Auth key (enter from Tailscale admin console)");
-  console.log("");
-  const choice = await prompt("Select [1/2]: ");
-  if (choice === "1") {
-    await handleInteractiveLogin(binary);
-  } else {
-    await handleAuthKeyLogin(binary);
+    process.stdout.write(`${dim("  \u2191/\u2193 navigate, space to select, enter to confirm")}
+`);
+    for (let i = 0; i < options.length; i++) {
+      const opt = options[i];
+      const prefix = i === cursor ? `${cyan("\u276F")} ` : "  ";
+      const check = selected.has(i) ? green("\u25C9") : "\u25CB";
+      const label = i === cursor ? bold(opt.label) : opt.label;
+      process.stdout.write(`${prefix}${check} ${label}
+`);
+    }
+    return new Promise((resolve4) => {
+      const onKey = (_ch, key) => {
+        if (key.name === "up" || key.sequence === "\x1B[A") {
+          cursor = (cursor - 1 + options.length) % options.length;
+          render();
+        } else if (key.name === "down" || key.sequence === "\x1B[B") {
+          cursor = (cursor + 1) % options.length;
+          render();
+        } else if (key.name === "space") {
+          if (selected.has(cursor)) {
+            selected.delete(cursor);
+          } else {
+            selected.add(cursor);
+          }
+          render();
+        } else if (key.name === "return" || key.sequence === "\r") {
+          process.stdin.removeListener("keypress", onKey);
+          process.stdout.write("\n");
+          const result = Array.from(selected).sort((a, b) => a - b).map((i) => options[i].value);
+          resolve4(result);
+        }
+      };
+      process.stdin.on("keypress", onKey);
+      if (process.stdin.isTTY) {
+        process.stdin.resume();
+      }
+    });
+  } finally {
+    if (process.stdin.isTTY) process.stdin.setRawMode(wasRaw ?? false);
   }
 }
-async function handleInteractiveLogin(binary) {
+
+// src/cli/tailscale-login.ts
+async function interactiveLogin(binary) {
   console.log(`
 ${cyan("Running interactive login...")}`);
   console.log("A browser window should open. Authenticate in the browser, then return here.\n");
-  const { spawn: spawn2 } = await import("child_process");
   const child = spawn2(binary, ["login"], { stdio: "inherit" });
-  const exitCode = await new Promise((resolve2) => {
-    child.on("close", resolve2);
+  const exitCode = await new Promise((resolve4) => {
+    child.on("close", resolve4);
   });
   resetTailscaleBinaryCache();
   const status = getTailscaleInstallationStatus();
@@ -5434,43 +5732,149 @@ ${cyan("Running interactive login...")}`);
     console.log(`
 ${green("\u2705 Login successful!")} IP: ${status.tailscale_ip}`);
     showAuthKeyTip();
-  } else {
-    console.log(`
-${yellow("\u26A0\uFE0F  Login may not have completed. Status: " + status.state)}`);
-    console.log("  Try running: npx open-party setup");
+    return true;
   }
+  console.log(`
+${yellow("\u26A0\uFE0F  Login may not have completed. Status: " + status.state)}`);
+  console.log("  Try running: open-party login");
+  return false;
 }
-async function handleAuthKeyLogin(binary) {
+async function authKeyLogin(binary) {
   console.log("");
-  console.log("You can generate an Auth Key at:");
+  console.log("Ask the network creator to generate an Auth Key at:");
   console.log(`${cyan("  https://login.tailscale.com/admin/settings/keys")}
 `);
   const authKey = await prompt("Enter Auth Key: ");
   if (!authKey) {
     console.log(yellow("No auth key provided, skipping login."));
-    return;
+    return false;
   }
-  const { joinTailnet: joinTailnet2 } = await Promise.resolve().then(() => (init_tailscale(), tailscale_exports));
-  const result = joinTailnet2(authKey);
+  const result = joinTailnet(authKey);
   if (result.success) {
     resetTailscaleBinaryCache();
     const status = getTailscaleInstallationStatus();
     console.log(`
 ${green("\u2705 Login successful!")} IP: ${status.state === "connected" ? status.tailscale_ip : "unknown"}`);
     showAuthKeyTip();
-  } else {
-    console.log(`
+    return true;
+  }
+  console.log(`
 ${red("\u274C Login failed:")}
 ${result.output}`);
-    console.log("  Check your auth key and try again.");
-  }
+  console.log("  Check your auth key and try again.");
+  return false;
 }
 function showAuthKeyTip() {
   console.log("");
   console.log(`${bold("\u{1F4A1} To share network access with teammates:")}`);
   console.log("  1. Go to https://login.tailscale.com/admin/settings/keys");
   console.log("  2. Generate an Auth Key");
-  console.log("  3. Share it with teammates \u2014 they can run: npx open-party setup");
+  console.log("  3. Share it with teammates \u2014 they can run: open-party login");
+}
+
+// src/cli/setup.ts
+async function stepTailscale() {
+  console.log(`
+${bold(cyan("\u{1F50D} Step 1: Tailscale Network"))}
+`);
+  console.log(
+    "Tailscale enables agents across different machines to discover and\ncommunicate with each other over a secure network.\n"
+  );
+  console.log(
+    `${dim("Without Tailscale, Open Party runs in local mode \u2014 connecting only\nto agents on this machine.")}
+`
+  );
+  const status = getTailscaleInstallationStatus();
+  if (status.state === "connected") {
+    console.log(`${green("\u2705 Tailscale is connected!")}`);
+    console.log(`   IP: ${status.tailscale_ip}  Hostname: ${status.hostname}`);
+    return;
+  }
+  if (status.state === "not_installed") {
+    await handleNotInstalled(status.platform);
+    const newStatus = getTailscaleInstallationStatus();
+    if (newStatus.state === "not_installed") {
+      showLocalModeNotice();
+      return;
+    }
+    if (newStatus.state === "connected") {
+      console.log(`
+${green("\u2705 Tailscale is connected!")} IP: ${newStatus.tailscale_ip}`);
+      return;
+    }
+    await handleNotConnected(newStatus.binary);
+    return;
+  }
+  await handleNotConnected(status.binary);
+}
+async function handleNotInstalled(platform) {
+  const info = getInstallInstructions(platform);
+  console.log(`${red("\u274C Tailscale is not installed.")}`);
+  console.log(`
+Install Tailscale for ${bold(info.os)}:
+`);
+  if (info.commands.length > 0) {
+    for (const cmd of info.commands) {
+      const prefix = info.needs_sudo ? "sudo " : "";
+      console.log(`  ${cyan(prefix + cmd)}`);
+    }
+  }
+  console.log(`
+  Download: ${info.download_url}
+`);
+  const options = [];
+  if (info.commands.length > 0 && platform !== "win32") {
+    options.push({ label: "Install Tailscale automatically", value: "auto", hint: "recommended" });
+  }
+  options.push({ label: "I've installed Tailscale, re-detect", value: "redetect" });
+  options.push({ label: "Skip \u2014 use local mode only", value: "skip", hint: "agents on this machine only" });
+  const choice = await select(options, { message: "Choose:" });
+  if (choice === "skip") {
+    return;
+  }
+  if (choice === "auto") {
+    console.log("");
+    const result = await installTailscale(platform);
+    if (result.success) {
+      console.log(`${green("\u2705 Tailscale installed successfully!")}`);
+    } else {
+      console.log(`${red("\u274C Installation failed:")}
+${result.output}`);
+      console.log(`
+  Please install manually and re-run: ${cyan("open-party setup")}`);
+    }
+    return;
+  }
+  if (choice === "redetect") {
+    resetTailscaleBinaryCache();
+    return;
+  }
+}
+async function handleNotConnected(binary) {
+  console.log(`${yellow("\u{1F512} Tailscale is installed but not connected.")}
+`);
+  const options = [
+    { label: "Interactive login", value: "interactive", hint: "opens browser to authenticate" },
+    { label: "Auth key", value: "authkey", hint: "from network creator" },
+    { label: "Skip", value: "skip", hint: "login later with: open-party login" }
+  ];
+  const choice = await select(options, { message: "Choose a login method:" });
+  if (choice === "interactive") {
+    await interactiveLogin(binary);
+  } else if (choice === "authkey") {
+    await authKeyLogin(binary);
+  } else {
+    console.log(`
+${yellow("\u26A0\uFE0F  Tailscale not connected. Running in local mode.")}`);
+    console.log(`   To connect later, run: ${cyan("open-party login")}`);
+  }
+}
+function showLocalModeNotice() {
+  console.log(`
+${yellow("\u26A0\uFE0F  Running in local mode \u2014 connecting to agents on this machine only.")}`);
+  console.log("   To enable cross-machine communication later:");
+  console.log(`     1. Install Tailscale: ${cyan("https://tailscale.com/download")}`);
+  console.log(`     2. Run: ${cyan("open-party login")}`);
 }
 async function stepAgentPlugin() {
   console.log(`
@@ -5482,7 +5886,7 @@ ${bold(cyan("\u{1F50D} Step 2: Detecting AI agents in your environment..."))}
     console.log(yellow("No supported AI agents detected in this environment."));
     console.log("  Supported agents: Claude Code, Cursor, Gemini CLI");
     console.log("");
-    console.log("  Install one and re-run: npx open-party setup");
+    console.log("  Install one and re-run: open-party setup");
     return;
   }
   console.log("Detected agents:\n");
@@ -5490,7 +5894,10 @@ ${bold(cyan("\u{1F50D} Step 2: Detecting AI agents in your environment..."))}
     console.log(`  ${green("\u2713")} ${agent.name}`);
   }
   console.log("");
-  const selected = await selectAgents(detected);
+  const options = detected.map((a) => ({ label: a.name, value: a }));
+  const selected = await multiSelect(options, {
+    message: "Select agents to install Open Party plugin:"
+  });
   if (selected.length === 0) {
     console.log(yellow("No agents selected, skipping plugin installation."));
     return;
@@ -5512,32 +5919,19 @@ Installing Open Party plugin for ${agent.name}...`);
     }
   }
 }
-async function selectAgents(agents) {
-  console.log("Select agents to install Open Party plugin:\n");
-  for (let i = 0; i < agents.length; i++) {
-    console.log(`  [${i + 1}] ${agents[i].name}`);
-  }
-  console.log(`  [a] All`);
-  console.log(`  [n] None (skip)`);
-  console.log("");
-  const answer = await prompt('Enter selection (e.g. "1 2" or "a" or "n"): ');
-  if (answer.toLowerCase() === "n" || answer === "") return [];
-  if (answer.toLowerCase() === "a") return agents;
-  const indices = answer.split(/[\s,]+/).map((s) => parseInt(s, 10) - 1).filter((i) => i >= 0 && i < agents.length);
-  return indices.map((i) => agents[i]);
-}
 async function setupCommand() {
   console.log(bold(cyan("\n\u{1F680} Open Party Setup Wizard\n")));
+  const rl = createRl();
   await stepTailscale();
   await stepAgentPlugin();
   console.log(`
 ${bold(cyan("\u{1F680} Starting Party Server..."))}`);
-  const { spawn: spawn2 } = await import("child_process");
-  const { resolve: resolve2, dirname: dirname2 } = await import("path");
-  const { fileURLToPath } = await import("url");
-  const __dirname = dirname2(fileURLToPath(import.meta.url));
-  const serverScript = resolve2(__dirname, "..", "party-server.js");
-  const serverProc = spawn2(process.execPath, [serverScript], {
+  const { spawn: spawn4 } = await import("child_process");
+  const { resolve: resolve4, dirname: dirname5 } = await import("path");
+  const { fileURLToPath: fileURLToPath3 } = await import("url");
+  const __dirname2 = dirname5(fileURLToPath3(import.meta.url));
+  const serverScript = resolve4(__dirname2, "..", "party-server.js");
+  const serverProc = spawn4(process.execPath, [serverScript], {
     detached: true,
     stdio: "ignore",
     windowsHide: true
@@ -5548,31 +5942,573 @@ ${bold(cyan("\u{1F680} Starting Party Server..."))}`);
 ${bold(green("\u{1F389} Setup complete!"))}`);
   console.log(`  Dashboard: http://127.0.0.1:8000/dashboard`);
   console.log("  Other agents can join with: npx @feynmanzhang/open-party setup\n");
-  rl.close();
+  closeRl(rl);
+}
+
+// src/cli/login.ts
+init_tailscale();
+async function loginCommand() {
+  const status = getTailscaleInstallationStatus();
+  if (status.state === "connected") {
+    console.log(`${green("\u2705 Tailscale is already connected!")}`);
+    console.log(`   IP: ${status.tailscale_ip}  Hostname: ${status.hostname}`);
+    return;
+  }
+  if (status.state === "not_installed") {
+    console.log(`${red("\u274C Tailscale is not installed.")}`);
+    console.log("  Install it first: https://tailscale.com/download");
+    console.log(`  Then run: ${cyan("open-party login")}`);
+    return;
+  }
+  console.log(`${yellow("\u{1F512} Tailscale is installed but not connected.")}
+`);
+  const options = [
+    { label: "Interactive login", value: "interactive", hint: "opens browser to authenticate" },
+    { label: "Auth key", value: "authkey", hint: "from network creator" }
+  ];
+  const choice = await select(options, { message: "Choose a login method:" });
+  if (choice === "interactive") {
+    await interactiveLogin(status.binary);
+  } else {
+    await authKeyLogin(status.binary);
+  }
+}
+
+// src/cli/logout.ts
+init_tailscale();
+async function logoutCommand() {
+  const status = getTailscaleInstallationStatus();
+  if (status.state === "not_installed") {
+    console.log(red("\u274C Tailscale is not installed."));
+    return;
+  }
+  if (status.state === "not_connected") {
+    console.log(yellow("\u26A0\uFE0F  Tailscale is not connected \u2014 nothing to log out from."));
+    return;
+  }
+  const choice = await select(
+    [
+      { label: "Log out (remove credentials)", value: "logout", hint: "need to re-authenticate next time" },
+      { label: "Cancel", value: "cancel" }
+    ],
+    { message: "Are you sure you want to log out?" }
+  );
+  if (choice === "cancel") return;
+  console.log("Logging out of Tailscale...");
+  const result = logoutTailscale();
+  if (result.success) {
+    console.log(green("\u2705 Logged out successfully."));
+    console.log("  To reconnect, run: open-party login");
+  } else {
+    console.log(red("\u274C Logout failed:"), result.output);
+  }
+}
+
+// src/cli/server-utils.ts
+import { spawn as spawn3, execSync as execSync3 } from "child_process";
+import { existsSync as existsSync4, readFileSync as readFileSync2, writeFileSync as writeFileSync2, unlinkSync, mkdirSync as mkdirSync2, openSync } from "fs";
+import { join as join4, dirname as dirname2, resolve as resolve2 } from "path";
+import { homedir as homedir3 } from "os";
+import { fileURLToPath } from "url";
+var __dirname = dirname2(fileURLToPath(import.meta.url));
+function pidFilePath() {
+  const pluginData = process.env.CLAUDE_PLUGIN_DATA || "";
+  if (pluginData) return join4(pluginData, "server.pid");
+  return join4(homedir3(), ".open-party", "server.pid");
+}
+function logFilePath() {
+  const pluginData = process.env.CLAUDE_PLUGIN_DATA || "";
+  if (pluginData) return join4(pluginData, "server.log");
+  return join4(homedir3(), ".open-party", "server.log");
+}
+function serverScriptPath() {
+  return resolve2(__dirname, "..", "party-server.js");
+}
+function readPid() {
+  const path = pidFilePath();
+  if (!existsSync4(path)) return null;
+  try {
+    return parseInt(readFileSync2(path, "utf-8").trim(), 10);
+  } catch {
+    return null;
+  }
+}
+function writePid(pid) {
+  const path = pidFilePath();
+  const dir = dirname2(path);
+  if (!existsSync4(dir)) mkdirSync2(dir, { recursive: true });
+  writeFileSync2(path, String(pid));
+}
+function removePidFile() {
+  try {
+    unlinkSync(pidFilePath());
+  } catch {
+  }
+}
+function isProcessRunning(pid) {
+  if (process.platform === "win32") {
+    try {
+      const output = execSync3(`tasklist /FI "PID eq ${pid}" /NH`, {
+        encoding: "utf-8",
+        windowsHide: true,
+        stdio: ["pipe", "pipe", "pipe"]
+      });
+      return output.includes(String(pid));
+    } catch {
+      return false;
+    }
+  }
+  try {
+    process.kill(pid, 0);
+    return true;
+  } catch {
+    return false;
+  }
+}
+function resolvePort() {
+  return parseInt(process.env.PARTY_PORT || "8000", 10);
+}
+async function fetchJson(url, timeoutMs = 2e3) {
+  try {
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), timeoutMs);
+    const resp = await fetch(url, { signal: controller.signal });
+    clearTimeout(timer);
+    if (!resp.ok) return null;
+    return await resp.json();
+  } catch {
+    return null;
+  }
+}
+async function isServerHealthy(port) {
+  const p = port ?? resolvePort();
+  const data = await fetchJson(`http://127.0.0.1:${p}/proxy/health`);
+  return data !== null && data.status === "ok";
+}
+async function getServerHealth(port) {
+  const p = port ?? resolvePort();
+  return fetchJson(`http://127.0.0.1:${p}/proxy/health`);
+}
+async function getServerOverview(port) {
+  const p = port ?? resolvePort();
+  return fetchJson(`http://127.0.0.1:${p}/dashboard/api/overview`, 3e3);
+}
+async function spawnServerInBackground(port) {
+  const script = serverScriptPath();
+  if (!existsSync4(script)) {
+    console.error(`Server script not found: ${script}`);
+    return { pid: 0, ok: false };
+  }
+  const logPath = logFilePath();
+  mkdirSync2(dirname2(logPath), { recursive: true });
+  const logFd = openSync(logPath, "a");
+  const env = { ...process.env, PARTY_PORT: String(port) };
+  const proc = spawn3(process.execPath, [script], {
+    stdio: ["ignore", logFd, logFd],
+    detached: true,
+    windowsHide: true,
+    env
+  });
+  proc.unref();
+  const pid = proc.pid;
+  writePid(pid);
+  proc.on("error", (err) => {
+    console.error(`Failed to start server: ${err.message}`);
+  });
+  return { pid, ok: true };
+}
+async function waitForServerReady(port, timeoutMs = 1e4) {
+  const deadline = Date.now() + timeoutMs;
+  while (Date.now() < deadline) {
+    if (await isServerHealthy(port)) return true;
+    const pid = readPid();
+    if (pid !== null && !isProcessRunning(pid)) {
+      return false;
+    }
+    await sleep(500);
+  }
+  return false;
+}
+function killServer(pid) {
+  try {
+    if (process.platform === "win32") {
+      execSync3(`taskkill /F /T /PID ${pid}`, { stdio: "ignore", windowsHide: true });
+    } else {
+      process.kill(pid, "SIGTERM");
+    }
+  } catch {
+  }
+}
+function parseStartArgs(args2) {
+  let daemon = false;
+  let port = null;
+  for (let i = 0; i < args2.length; i++) {
+    if (args2[i] === "-d" || args2[i] === "--daemon") {
+      daemon = true;
+    } else if (args2[i] === "-p" || args2[i] === "--port") {
+      const val = args2[++i];
+      if (val) port = parseInt(val, 10);
+    } else if (args2[i].startsWith("--port=")) {
+      port = parseInt(args2[i].split("=")[1], 10);
+    }
+  }
+  return { daemon, port };
+}
+function sleep(ms) {
+  return new Promise((resolve4) => setTimeout(resolve4, ms));
 }
 
 // src/cli/start-server.ts
-async function startServer() {
+async function startServer(args2 = []) {
+  const opts = parseStartArgs(args2);
+  const port = opts.port ?? resolvePort();
+  if (opts.daemon) {
+    await startDaemon(port);
+  } else {
+    await startForeground();
+  }
+}
+async function startForeground() {
+  writePid(process.pid);
+  process.on("exit", () => {
+    removePidFile();
+  });
   await Promise.resolve().then(() => (init_server(), server_exports));
 }
+async function startDaemon(port) {
+  if (await isServerHealthy(port)) {
+    const pid2 = readPid();
+    console.log(`Party Server is already running (PID ${pid2 ?? "unknown"}, port ${port}).`);
+    process.exit(0);
+  }
+  const existingPid = readPid();
+  if (existingPid !== null && !isProcessRunning(existingPid)) {
+    removePidFile();
+  }
+  const { pid, ok } = await spawnServerInBackground(port);
+  if (!ok) {
+    process.exit(1);
+  }
+  console.log(`Starting Party Server in background (PID ${pid})...`);
+  const ready = await waitForServerReady(port);
+  if (ready) {
+    console.log(`Party Server is running on port ${port}.`);
+    console.log(`  Dashboard: http://127.0.0.1:${port}/dashboard`);
+    console.log(`  Logs: ${logFilePath()}`);
+    console.log(`  Use 'open-party stop' to stop the server.`);
+  } else {
+    console.error("Party Server failed to start within timeout.");
+    console.error(`Check logs: ${logFilePath()}`);
+    process.exit(1);
+  }
+}
+
+// src/cli/stop-server.ts
+async function stopServer() {
+  const pid = readPid();
+  if (pid === null) {
+    const port2 = resolvePort();
+    const healthy = await isServerHealthy(port2);
+    if (healthy) {
+      console.log(`No PID file found, but a server is responding on port ${port2}.`);
+      console.log("It may have been started manually. Kill it by port or process name.");
+    } else {
+      console.log("Party Server is not running (no PID file found).");
+    }
+    return;
+  }
+  if (!isProcessRunning(pid)) {
+    console.log(`Stale PID file found (PID ${pid} is not running). Cleaning up.`);
+    removePidFile();
+    return;
+  }
+  console.log(`Stopping Party Server (PID ${pid})...`);
+  killServer(pid);
+  removePidFile();
+  const port = resolvePort();
+  const stillUp = await isServerHealthy(port);
+  if (stillUp) {
+    console.warn(`Process ${pid} was killed, but port ${port} is still responding.`);
+    console.warn("Another process may be using this port.");
+  } else {
+    console.log("Party Server stopped.");
+  }
+}
+
+// src/cli/status.ts
+async function statusCommand() {
+  const port = resolvePort();
+  const pid = readPid();
+  let processAlive = false;
+  if (pid !== null) {
+    processAlive = isProcessRunning(pid);
+  }
+  const healthy = await isServerHealthy(port);
+  if (healthy) {
+    const health = await getServerHealth(port);
+    const overview = await getServerOverview(port);
+    console.log("Party Server is running.");
+    console.log(`  PID:           ${pid ?? "unknown (no PID file)"}`);
+    console.log(`  Port:          ${port}`);
+    console.log(`  Tailscale IP:  ${health?.tailscale_ip ?? "N/A"}`);
+    console.log(`  Hostname:      ${health?.hostname ?? "N/A"}`);
+    if (overview) {
+      const server = overview.server;
+      const agents = overview.agents;
+      if (server?.uptime_seconds != null) {
+        const uptime = server.uptime_seconds;
+        const mins = Math.floor(uptime / 60);
+        const secs = Math.floor(uptime % 60);
+        console.log(`  Uptime:        ${mins}m ${secs}s`);
+      }
+      console.log(`  Local agents:  ${agents?.local_count ?? "N/A"}`);
+      console.log(`  Remote agents: ${agents?.remote_count ?? "N/A"}`);
+    } else {
+      console.log(`  Local agents:  ${health?.agent_count ?? "N/A"}`);
+    }
+    console.log(`  Dashboard:    http://127.0.0.1:${port}/dashboard`);
+  } else if (processAlive && pid !== null) {
+    console.log("Party Server process exists but is not responding on health endpoint.");
+    console.log(`  PID:    ${pid}`);
+    console.log("  The server may be starting up or has crashed.");
+    console.log(`  Logs:   ~/.open-party/server.log`);
+  } else if (pid !== null) {
+    console.log("Party Server is NOT running (stale PID file).");
+    console.log(`  PID file references PID ${pid}, which is not a live process.`);
+    console.log("  Use: open-party start   to start the server.");
+  } else {
+    console.log("Party Server is NOT running.");
+    console.log("  No PID file found.");
+    console.log("  Use: open-party start   to start the server.");
+  }
+}
+
+// src/cli/version.ts
+import { readFileSync as readFileSync3 } from "fs";
+import { resolve as resolve3, dirname as dirname4 } from "path";
+import { fileURLToPath as fileURLToPath2 } from "url";
+function showVersion() {
+  const pkgPath = resolve3(dirname4(fileURLToPath2(import.meta.url)), "..", "..", "package.json");
+  const pkg = JSON.parse(readFileSync3(pkgPath, "utf-8"));
+  console.log(`open-party v${pkg.version}`);
+}
+
+// src/cli/agents.ts
+async function agentsCommand() {
+  const port = resolvePort();
+  if (!await isServerHealthy(port)) {
+    console.log("Party Server is not running.");
+    console.log("  Use 'open-party start' to start it.");
+    return;
+  }
+  const overview = await getServerOverview(port);
+  if (!overview) {
+    console.log("Failed to get server overview.");
+    return;
+  }
+  const agents = overview.agents;
+  if (!agents) {
+    console.log("No agent data available.");
+    return;
+  }
+  const localAgents = agents.local_agents ?? [];
+  const remoteAgents = agents.remote_agents ?? [];
+  const localCount = agents.local_count ?? localAgents.length;
+  const remoteCount = agents.remote_count ?? remoteAgents.length;
+  if (localCount === 0) {
+    console.log("Local agents: (none)");
+  } else {
+    console.log(`Local agents (${localCount}):`);
+    for (const agent of localAgents) {
+      const id = agent.agent_id ?? "?";
+      const name = agent.display_name ?? id;
+      const ago = formatTimeAgo(agent.last_heartbeat);
+      console.log(`  ${id.padEnd(20)} ${name.padEnd(16)} ${ago}`);
+    }
+  }
+  if (remoteCount > 0) {
+    console.log(`
+Remote agents (${remoteCount}):`);
+    for (const agent of remoteAgents) {
+      const id = agent.agent_id ?? "?";
+      const name = agent.display_name ?? id;
+      const via = agent.source_peer_ip ?? "?";
+      const ago = formatTimeAgo(agent.last_heartbeat);
+      console.log(`  ${id.padEnd(20)} ${name.padEnd(16)} (via ${via})  ${ago}`);
+    }
+  }
+  if (localCount === 0 && remoteCount === 0) {
+    console.log("\nNo agents connected yet.");
+  }
+}
+function formatTimeAgo(timestamp) {
+  if (!timestamp) return "\u2014";
+  const diff = Date.now() / 1e3 - timestamp / 1e3;
+  if (diff < 60) return "just now";
+  if (diff < 3600) return `${Math.floor(diff / 60)} min ago`;
+  if (diff < 86400) return `${Math.floor(diff / 3600)} hr ago`;
+  return `${Math.floor(diff / 86400)}d ago`;
+}
+
+// src/cli/peers.ts
+async function peersCommand() {
+  const port = resolvePort();
+  if (!await isServerHealthy(port)) {
+    console.log("Party Server is not running.");
+    console.log("  Use 'open-party start' to start it.");
+    return;
+  }
+  const overview = await getServerOverview(port);
+  if (!overview) {
+    console.log("Failed to get server overview.");
+    return;
+  }
+  const peers = overview.peers;
+  if (!peers) {
+    console.log("No peer data available.");
+    return;
+  }
+  const details = peers.details ?? [];
+  const remoteAgents = overview.agents?.remote_agents ?? [];
+  const peerAgentCounts = /* @__PURE__ */ new Map();
+  for (const agent of remoteAgents) {
+    const ip = agent.source_peer_ip;
+    peerAgentCounts.set(ip, (peerAgentCounts.get(ip) ?? 0) + 1);
+  }
+  const total = peers.total ?? details.length;
+  if (details.length === 0) {
+    console.log("No peers discovered yet.");
+    return;
+  }
+  console.log(`Peers (${total}):
+`);
+  for (const peer of details) {
+    const agentCount = peerAgentCounts.get(peer.ip);
+    const agentStr = agentCount != null ? String(agentCount) : "\u2014";
+    const statusStr = formatStatus(peer.status);
+    console.log(`  ${peer.ip.padEnd(18)} ${statusStr.padEnd(16)} ${agentStr} agents`);
+  }
+}
+function formatStatus(status) {
+  const map = {
+    PARTY_SERVER: "Online",
+    DEGRADED: "Degraded",
+    SUSPECT: "Suspect",
+    DOWN: "Down",
+    UNKNOWN: "Unknown",
+    MAYBE: "Probing",
+    NOT_SERVER: "Not a server"
+  };
+  return map[status] ?? status;
+}
+
+// src/cli/install.ts
+init_tailscale();
+init_tailscale_installer();
+async function installCommand() {
+  const status = getTailscaleInstallationStatus();
+  if (status.state === "connected" || status.state === "not_connected") {
+    console.log(green("\u2705 Tailscale is already installed!"), `Binary: ${status.binary}`);
+    if (status.state === "connected") {
+      console.log(`   IP: ${status.tailscale_ip}  Hostname: ${status.hostname}`);
+    }
+    return;
+  }
+  const platform = process.platform;
+  const info = getInstallInstructions(platform);
+  console.log(bold(cyan("Installing Tailscale...\n")));
+  console.log(`  Platform: ${info.os}`);
+  const result = await installTailscale(platform);
+  if (result.success) {
+    console.log(green("\n\u2705 Tailscale installed successfully!"));
+    console.log("  Run: open-party login");
+  } else {
+    console.log(red("\n\u274C Installation failed:"), result.output);
+    console.log("  Install manually: https://tailscale.com/download");
+  }
+}
 
 // src/cli/index.ts
+function showHelp() {
+  console.log(`Usage: open-party <command> [options]
+
+Commands:
+  start     Start the Party Server (default when no command given)
+  stop      Stop the Party Server
+  status    Show server status
+  setup     Interactive setup wizard (Tailscale + agent plugins)
+  login     Login to Tailscale network
+  logout    Log out of Tailscale network
+  install   Install Tailscale
+  agents    List connected agents
+  peers     List discovered peer nodes
+  help      Show this help message
+
+Options for 'start':
+  -d, --daemon          Run in background (daemon mode)
+  -p, --port <port>     Override port (default: 8000, env: PARTY_PORT)
+
+Global options:
+  -v, --version         Show version number
+
+Examples:
+  open-party                    Start server in foreground
+  open-party start              Start server in foreground
+  open-party start -d           Start server in background
+  open-party start -d -p 9000   Start server in background on port 9000
+  open-party stop               Stop the server
+  open-party status             Check if the server is running
+  open-party login              Login to Tailscale
+  open-party logout             Log out of Tailscale
+  open-party install            Install Tailscale
+  open-party agents             List connected agents
+  open-party peers              List discovered peer nodes`);
+}
 var args = process.argv.slice(2);
 var command = args[0] ?? "start";
+var commandArgs = args.slice(1);
 async function main2() {
+  if (command === "--version" || command === "-v") {
+    showVersion();
+    process.exit(0);
+  }
   switch (command) {
     case "setup":
       await setupCommand();
       break;
+    case "login":
+      await loginCommand();
+      break;
+    case "logout":
+      await logoutCommand();
+      break;
+    case "install":
+      await installCommand();
+      break;
     case "start":
-      await startServer();
+      await startServer(commandArgs);
+      break;
+    case "stop":
+      await stopServer();
+      break;
+    case "status":
+      await statusCommand();
+      break;
+    case "agents":
+      await agentsCommand();
+      break;
+    case "peers":
+      await peersCommand();
+      break;
+    case "help":
+    case "--help":
+    case "-h":
+      showHelp();
       break;
     default:
-      console.log(`Usage: npx open-party [setup|start]`);
-      console.log("");
-      console.log("Commands:");
-      console.log("  setup   Interactive setup wizard (Tailscale + agent plugins)");
-      console.log("  start   Start the Party Server (default)");
+      console.log(`Unknown command: ${command}
+`);
+      showHelp();
       process.exit(1);
   }
 }