@feynmanzhang/open-party 0.1.3-beta.0 → 0.1.4

package/dist/cli/index.js

@@ -11,27 +11,10 @@ var __export = (target, all) => {
 };
 
 // src/infra/tailscale.ts
-var tailscale_exports = {};
-__export(tailscale_exports, {
-  WhoisIdentity: () => WhoisIdentity,
-  disableFunnel: () => disableFunnel,
-  disableServe: () => disableServe,
-  enableFunnel: () => enableFunnel,
-  enableServe: () => enableServe,
-  getInstallInstructions: () => getInstallInstructions,
-  getTailnetHostname: () => getTailnetHostname,
-  getTailscaleBinary: () => getTailscaleBinary,
-  getTailscaleConnectionStatus: () => getTailscaleConnectionStatus,
-  getTailscaleInstallationStatus: () => getTailscaleInstallationStatus,
-  getTailscaleIps: () => getTailscaleIps,
-  joinTailnet: () => joinTailnet,
-  readTailscaleStatus: () => readTailscaleStatus,
-  readWhoisIdentity: () => readWhoisIdentity,
-  resetTailscaleBinaryCache: () => resetTailscaleBinaryCache
-});
 import { execFileSync, execSync } from "child_process";
 import { existsSync } from "fs";
 import { join } from "path";
+import { spawn as nodeSpawn } from "child_process";
 function parsePossiblyNoisyJson(raw2) {
   const trimmed = raw2.trim();
   const start = trimmed.indexOf("{");
@@ -137,35 +120,6 @@ function getTailscaleIps() {
   }
   return [];
 }
-function parseWhoisIdentity(payload) {
-  const userProfile = payload.UserProfile ?? payload.userProfile ?? payload.User ?? {};
-  const login = userProfile.LoginName || userProfile.Login || userProfile.login || payload.LoginName || payload.login;
-  if (typeof login !== "string" || !login.trim()) return null;
-  const rawName = userProfile.DisplayName || userProfile.Name || userProfile.displayName || payload.DisplayName || payload.name;
-  const name = typeof rawName === "string" ? rawName.trim() : void 0;
-  return new WhoisIdentity(login.trim(), name);
-}
-function readWhoisIdentity(ip, timeout = 5e3, cacheTtl = 60, errorTtl = 5) {
-  const normalized = ip.trim();
-  if (!normalized) return null;
-  const now = performance.now() / 1e3;
-  const cached = whoisCache.get(normalized);
-  if (cached) {
-    if (cached.expiresAt > now) return cached.value;
-    whoisCache.delete(normalized);
-  }
-  const binary = getTailscaleBinary();
-  let identity = null;
-  try {
-    const stdout = runExec([binary, "whois", "--json", normalized], timeout);
-    const parsed = stdout.trim() ? parsePossiblyNoisyJson(stdout) : {};
-    identity = parseWhoisIdentity(parsed);
-  } catch {
-  }
-  const ttl = identity ? cacheTtl : errorTtl;
-  whoisCache.set(normalized, { value: identity, expiresAt: now + ttl });
-  return identity;
-}
 function execWithSudoFallback(cmd, timeout = 15e3) {
   try {
     return runExec(cmd, timeout);
@@ -181,22 +135,6 @@ function execWithSudoFallback(cmd, timeout = 15e3) {
     throw exc;
   }
 }
-function enableServe(port, timeout = 15e3) {
-  const binary = getTailscaleBinary();
-  execWithSudoFallback([binary, "serve", "--bg", "--yes", String(port)], timeout);
-}
-function disableServe(timeout = 15e3) {
-  const binary = getTailscaleBinary();
-  execWithSudoFallback([binary, "serve", "reset"], timeout);
-}
-function enableFunnel(port, timeout = 15e3) {
-  const binary = getTailscaleBinary();
-  execWithSudoFallback([binary, "funnel", "--bg", "--yes", String(port)], timeout);
-}
-function disableFunnel(timeout = 15e3) {
-  const binary = getTailscaleBinary();
-  execWithSudoFallback([binary, "funnel", "reset"], timeout);
-}
 function joinTailnet(authKey, timeout = 3e4) {
   const binary = getTailscaleBinary();
   try {
@@ -210,27 +148,6 @@ function joinTailnet(authKey, timeout = 3e4) {
     return { success: false, output: (err.stderr ?? err.message ?? "").trim() };
   }
 }
-function getTailscaleConnectionStatus() {
-  try {
-    const status = readTailscaleStatus();
-    const self = status.Self ?? {};
-    const online = self.Online === true;
-    const ips = self.TailscaleIPs;
-    const dns = self.DNSName?.replace(/\.$/, "");
-    return {
-      connected: online,
-      tailscale_ip: ips?.[0] ?? null,
-      hostname: dns ?? null
-    };
-  } catch (e) {
-    return {
-      connected: false,
-      tailscale_ip: null,
-      hostname: null,
-      error: e.message
-    };
-  }
-}
 function getTailscaleInstallationStatus() {
   const binary = findTailscaleBinary();
   if (!binary) {
@@ -262,6 +179,62 @@ function getTailscaleInstallationStatus() {
 function resetTailscaleBinaryCache() {
   cachedBinary = null;
 }
+function logoutTailscale(timeout = 15e3) {
+  const binary = getTailscaleBinary();
+  try {
+    const output = runExec([binary, "logout"], timeout);
+    resetTailscaleBinaryCache();
+    return { success: true, output: output.trim() };
+  } catch (e) {
+    const err = e;
+    return { success: false, output: (err.stderr ?? err.message ?? "").trim() };
+  }
+}
+function startInteractiveLogin() {
+  const binary = getTailscaleBinary();
+  const child = nodeSpawn(binary, ["login"], {
+    stdio: ["pipe", "pipe", "pipe"],
+    windowsHide: true
+  });
+  const urlRegex = /https:\/\/login\.tailscale\.com\/a\/[^\s]+/;
+  const promise = new Promise((resolve4) => {
+    let stdout = "";
+    let resolved = false;
+    const done = (result) => {
+      if (resolved) return;
+      resolved = true;
+      resolve4(result);
+    };
+    child.stdout?.on("data", (data) => {
+      stdout += data.toString();
+      const match2 = stdout.match(urlRegex);
+      if (match2) {
+        done({ success: true, url: match2[0], output: stdout.trim() });
+      }
+    });
+    child.stderr?.on("data", (data) => {
+      stdout += data.toString();
+    });
+    child.on("close", (code) => {
+      if (code === 0) {
+        done({ success: true, output: stdout.trim() });
+      } else {
+        done({ success: false, output: stdout.trim() || `Exited with code ${code}` });
+      }
+    });
+    child.on("error", (err) => {
+      done({ success: false, output: err.message });
+    });
+    setTimeout(() => {
+      done({ success: false, output: "Timeout waiting for login URL" });
+      try {
+        child.kill();
+      } catch {
+      }
+    }, 3e4);
+  });
+  return { promise, process: child };
+}
 function getInstallInstructions(platform) {
   switch (platform) {
     case "linux":
@@ -294,20 +267,11 @@ function getInstallInstructions(platform) {
       };
   }
 }
-var cachedBinary, WhoisIdentity, whoisCache, PERMISSION_KEYWORDS;
+var cachedBinary, PERMISSION_KEYWORDS;
 var init_tailscale = __esm({
   "src/infra/tailscale.ts"() {
     "use strict";
     cachedBinary = null;
-    WhoisIdentity = class {
-      constructor(login, name) {
-        this.login = login;
-        this.name = name;
-      }
-      login;
-      name;
-    };
-    whoisCache = /* @__PURE__ */ new Map();
     PERMISSION_KEYWORDS = [
       "permission denied",
       "access denied",
@@ -322,6 +286,58 @@ var init_tailscale = __esm({
   }
 });
 
+// src/cli/tailscale-installer.ts
+var tailscale_installer_exports = {};
+__export(tailscale_installer_exports, {
+  installTailscale: () => installTailscale
+});
+import { spawn } from "child_process";
+async function installTailscale(platform) {
+  const entry = INSTALL_COMMANDS[platform];
+  if (!entry) {
+    return {
+      success: false,
+      output: `Unsupported platform: ${platform}. Please install manually from https://tailscale.com/download`
+    };
+  }
+  const cmd = entry.needsSudo ? "sudo" : entry.cmd;
+  const args2 = entry.needsSudo ? [entry.cmd, ...entry.args] : entry.args;
+  console.log(`Running: ${cmd} ${args2.join(" ")}
+`);
+  return new Promise((resolve4) => {
+    const child = spawn(cmd, args2, {
+      stdio: "inherit",
+      windowsHide: true
+    });
+    let exited = false;
+    child.on("close", (code) => {
+      if (exited) return;
+      exited = true;
+      if (code === 0) {
+        resolve4({ success: true, output: "Installation completed." });
+      } else {
+        resolve4({ success: false, output: `Installation exited with code ${code}` });
+      }
+    });
+    child.on("error", (err) => {
+      if (exited) return;
+      exited = true;
+      resolve4({ success: false, output: err.message });
+    });
+  });
+}
+var INSTALL_COMMANDS;
+var init_tailscale_installer = __esm({
+  "src/cli/tailscale-installer.ts"() {
+    "use strict";
+    INSTALL_COMMANDS = {
+      linux: { cmd: "bash", args: ["-c", "curl -fsSL https://tailscale.com/install.sh | sh"], needsSudo: true },
+      darwin: { cmd: "brew", args: ["install", "tailscale"], needsSudo: false },
+      win32: { cmd: "winget", args: ["install", "Tailscale.Tailscale", "--accept-source-agreements"], needsSudo: false }
+    };
+  }
+});
+
 // node_modules/hono/dist/compose.js
 var compose;
 var init_compose = __esm({
@@ -3171,7 +3187,7 @@ var init_dist2 = __esm({
             });
             if (!chunk) {
               if (i === 1) {
-                await new Promise((resolve3) => setTimeout(resolve3));
+                await new Promise((resolve4) => setTimeout(resolve4));
                 maxReadCount = 3;
                 continue;
               }
@@ -3411,7 +3427,7 @@ function classifyFetchError(error) {
   return null;
 }
 function sleep2(ms) {
-  return new Promise((resolve3) => setTimeout(resolve3, ms));
+  return new Promise((resolve4) => setTimeout(resolve4, ms));
 }
 var UNKNOWN, PARTY_SERVER, DEGRADED, SUSPECT, DOWN, NOT_SERVER, MAYBE, MAYBE_MAX_RETRIES, BACKOFF_BASE, BACKOFF_CAP, FAILURE_SUSPECT, FAILURE_DOWN, PeerDiscovery;
 var init_peer_discovery = __esm({
@@ -4178,7 +4194,21 @@ body::after{
 }
 .btn-join:hover{background:rgba(0,255,240,0.18);box-shadow:0 0 10px rgba(0,255,240,0.2)}
 .btn-join:active{transform:scale(0.97)}
-.btn-join.connected{border-color:var(--green);color:var(--green);background:rgba(0,255,136,0.08)}
+.btn-logout{border-color:var(--red);color:var(--red);background:rgba(255,51,102,0.08)}
+.btn-logout:hover{background:rgba(255,51,102,0.18);box-shadow:0 0 10px rgba(255,51,102,0.2)}
+.btn-install{border-color:var(--yellow);color:var(--yellow);background:rgba(255,170,0,0.08)}
+.btn-install:hover{background:rgba(255,170,0,0.18);box-shadow:0 0 10px rgba(255,170,0,0.2)}
+
+/* Tab bar inside modal */
+.tab-bar{display:flex;gap:0;margin-bottom:18px;border-bottom:1px solid var(--border)}
+.tab-bar .tab{
+  font-family:var(--font-mono);font-size:0.8rem;padding:8px 16px;cursor:pointer;
+  color:var(--muted);border-bottom:2px solid transparent;transition:all 0.2s;
+}
+.tab-bar .tab:hover{color:var(--text)}
+.tab-bar .tab.active{color:var(--cyan);border-bottom-color:var(--cyan)}
+.tab-content{display:none}
+.tab-content.active{display:block}
 
 /* Modal */
 .modal-overlay{
@@ -4351,16 +4381,47 @@ body::after{
 
   <div class="footer">OPEN PARTY v0.1 // DECENTRALIZED AGENT NETWORK</div>
 
-  <!-- Join Network Modal -->
+  <!-- Join Network / Login Modal (two tabs: Interactive + Auth Key) -->
   <div class="modal-overlay" id="joinModal">
     <div class="modal">
-      <div class="modal-title">JOIN TAILNET</div>
-      <div class="modal-desc">Enter your Tailscale auth key to join the network.<br>You can generate one from the Tailscale admin console.</div>
-      <input type="password" class="modal-input" id="authKeyInput" placeholder="tskey-auth-xxxxx..." autocomplete="off" spellcheck="false" />
-      <div class="modal-status" id="joinStatus"></div>
+      <div class="modal-title">CONNECT TO TAILNET</div>
+      <div class="tab-bar" id="joinTabs">
+        <div class="tab active" data-tab="interactive">Interactive</div>
+        <div class="tab" data-tab="authkey">Auth Key</div>
+      </div>
+
+      <!-- Interactive tab -->
+      <div class="tab-content active" id="tabInteractive">
+        <div class="modal-desc">Click the button below to open a browser authentication page.<br>Your Tailscale connection will be established once you authenticate.</div>
+        <div class="modal-status" id="interactiveStatus"></div>
+        <div class="modal-actions">
+          <button class="modal-btn modal-btn-cancel" id="btnCancelJoin">Cancel</button>
+          <button class="modal-btn modal-btn-submit" id="btnInteractiveLogin">Open Browser Login</button>
+        </div>
+      </div>
+
+      <!-- Auth Key tab -->
+      <div class="tab-content" id="tabAuthkey">
+        <div class="modal-desc">Enter your Tailscale auth key to join the network.<br>You can generate one from the Tailscale admin console.</div>
+        <input type="password" class="modal-input" id="authKeyInput" placeholder="tskey-auth-xxxxx..." autocomplete="off" spellcheck="false" />
+        <div class="modal-status" id="joinStatus"></div>
+        <div class="modal-actions">
+          <button class="modal-btn modal-btn-cancel" id="btnCancelAuthkey">Cancel</button>
+          <button class="modal-btn modal-btn-submit" id="btnSubmitJoin">Connect</button>
+        </div>
+      </div>
+    </div>
+  </div>
+
+  <!-- Logout Confirmation Modal -->
+  <div class="modal-overlay" id="logoutModal">
+    <div class="modal">
+      <div class="modal-title" style="color:var(--red)">LOG OUT OF TAILNET</div>
+      <div class="modal-desc">This will disconnect from Tailscale and remove your credentials.<br>You will need to re-authenticate to reconnect.</div>
+      <div class="modal-status" id="logoutStatus"></div>
       <div class="modal-actions">
-        <button class="modal-btn modal-btn-cancel" id="btnCancelJoin">Cancel</button>
-        <button class="modal-btn modal-btn-submit" id="btnSubmitJoin">Connect</button>
+        <button class="modal-btn modal-btn-cancel" id="btnCancelLogout">Cancel</button>
+        <button class="modal-btn modal-btn-submit" style="border-color:var(--red);color:var(--red);background:rgba(255,51,102,0.12)" id="btnConfirmLogout">Log Out</button>
       </div>
     </div>
   </div>
@@ -4660,28 +4721,63 @@ body::after{
     }
   }, 1000);
 
-  // ---- Join Network Modal ----
+  // ---- Join Modal Tabs ----
+  const joinTabs = $$('#joinTabs .tab');
+  joinTabs.forEach(function(tab) {
+    tab.addEventListener('click', function() {
+      joinTabs.forEach(function(t) { t.classList.remove('active'); });
+      tab.classList.add('active');
+      // Toggle tab contents
+      const target = tab.getAttribute('data-tab');
+      $$('.tab-content').forEach(function(tc) { tc.classList.remove('active'); });
+      if (target === 'interactive') {
+        $('#tabInteractive').classList.add('active');
+      } else {
+        $('#tabAuthkey').classList.add('active');
+      }
+    });
+  });
+
+  // ---- Join Network Modal (open/close) ----
   const joinModal = $('#joinModal');
   const btnJoin = $('#btnJoinNetwork');
   const btnCancel = $('#btnCancelJoin');
+  const btnCancelAuthkey = $('#btnCancelAuthkey');
   const btnSubmit = $('#btnSubmitJoin');
   const authKeyInput = $('#authKeyInput');
   const joinStatus = $('#joinStatus');
 
   function openJoinModal() {
+    // Reset both tabs
     joinStatus.className = 'modal-status';
     joinStatus.textContent = '';
     authKeyInput.value = '';
+    $('#interactiveStatus').className = 'modal-status';
+    $('#interactiveStatus').textContent = '';
+    // Default to Interactive tab
+    $$('#joinTabs .tab').forEach(function(t) { t.classList.remove('active'); });
+    $$('#joinTabs .tab')[0].classList.add('active');
+    $$('.tab-content').forEach(function(tc) { tc.classList.remove('active'); });
+    $('#tabInteractive').classList.add('active');
     joinModal.classList.add('open');
-    setTimeout(function() { authKeyInput.focus(); }, 100);
   }
 
   function closeJoinModal() {
     joinModal.classList.remove('open');
   }
 
-  btnJoin.addEventListener('click', openJoinModal);
+  btnJoin.addEventListener('click', function() {
+    // Decide action based on Tailscale state
+    if (tsState && tsState.state === 'connected') {
+      openLogoutModal();
+    } else if (tsState && tsState.state === 'not_installed') {
+      doInstallTailscale();
+    } else {
+      openJoinModal();
+    }
+  });
   btnCancel.addEventListener('click', closeJoinModal);
+  btnCancelAuthkey.addEventListener('click', closeJoinModal);
   joinModal.addEventListener('click', function(e) {
     if (e.target === joinModal) closeJoinModal();
   });
@@ -4690,6 +4786,7 @@ body::after{
     if (e.key === 'Escape') closeJoinModal();
   });
 
+  // ---- Auth Key submit ----
   btnSubmit.addEventListener('click', async function() {
     const key = authKeyInput.value.trim();
     if (!key) {
@@ -4711,9 +4808,9 @@ body::after{
       if (data.success) {
         joinStatus.className = 'modal-status success';
         joinStatus.textContent = 'Successfully joined network!';
-        btnJoin.textContent = 'Connected';
-        btnJoin.classList.add('connected');
-        setTimeout(function() { closeJoinModal(); fullRefresh(); }, 1500);
+        btnJoin.textContent = 'Logout';
+        btnJoin.className = 'btn-join btn-logout';
+        setTimeout(function() { closeJoinModal(); checkTailscaleStatus(); fullRefresh(); }, 1500);
       } else {
         joinStatus.className = 'modal-status error';
         joinStatus.textContent = data.output || 'Failed to join network';
@@ -4726,6 +4823,133 @@ body::after{
     btnSubmit.textContent = 'Connect';
   });
 
+  // ---- Interactive Login ----
+  const btnInteractiveLogin = $('#btnInteractiveLogin');
+  btnInteractiveLogin.addEventListener('click', async function() {
+    const statusEl = $('#interactiveStatus');
+    statusEl.className = 'modal-status';
+    statusEl.textContent = '';
+    btnInteractiveLogin.disabled = true;
+    btnInteractiveLogin.innerHTML = '<span class="spinner"></span>Opening browser...';
+
+    try {
+      const r = await fetch('/dashboard/api/tailscale-login', { method: 'POST' });
+      const data = await r.json();
+
+      if (data.success && data.url) {
+        // Open the auth URL in a new tab
+        window.open(data.url, '_blank');
+        statusEl.className = 'modal-status success';
+        statusEl.textContent = 'Authentication page opened in your browser. Waiting for connection...';
+
+        // Poll for connection
+        var pollCount = 0;
+        var pollInterval = setInterval(async function() {
+          pollCount++;
+          if (pollCount > 40) { // 2 minutes timeout
+            clearInterval(pollInterval);
+            statusEl.className = 'modal-status error';
+            statusEl.textContent = 'Timed out waiting for authentication. Please try again.';
+            btnInteractiveLogin.disabled = false;
+            btnInteractiveLogin.textContent = 'Open Browser Login';
+            return;
+          }
+          try {
+            var sr = await fetch('/dashboard/api/tailscale-status');
+            var sd = await sr.json();
+            if (sd.state === 'connected') {
+              clearInterval(pollInterval);
+              btnJoin.textContent = 'Logout';
+              btnJoin.className = 'btn-join btn-logout';
+              closeJoinModal();
+              checkTailscaleStatus();
+              fullRefresh();
+              return;
+            }
+          } catch { /* poll error, continue */ }
+        }, 3000);
+      } else {
+        statusEl.className = 'modal-status error';
+        statusEl.textContent = data.output || 'Failed to start interactive login';
+        btnInteractiveLogin.disabled = false;
+        btnInteractiveLogin.textContent = 'Open Browser Login';
+      }
+    } catch (e) {
+      statusEl.className = 'modal-status error';
+      statusEl.textContent = 'Network error: ' + (e.message || 'unknown');
+      btnInteractiveLogin.disabled = false;
+      btnInteractiveLogin.textContent = 'Open Browser Login';
+    }
+  });
+
+  // ---- Logout Modal ----
+  const logoutModal = $('#logoutModal');
+  const btnConfirmLogout = $('#btnConfirmLogout');
+  const btnCancelLogout = $('#btnCancelLogout');
+  const logoutStatus = $('#logoutStatus');
+
+  function openLogoutModal() {
+    logoutStatus.className = 'modal-status';
+    logoutStatus.textContent = '';
+    logoutModal.classList.add('open');
+  }
+
+  btnCancelLogout.addEventListener('click', function() { logoutModal.classList.remove('open'); });
+  logoutModal.addEventListener('click', function(e) { if (e.target === logoutModal) logoutModal.classList.remove('open'); });
+
+  btnConfirmLogout.addEventListener('click', async function() {
+    btnConfirmLogout.disabled = true;
+    btnConfirmLogout.innerHTML = '<span class="spinner"></span>Logging out...';
+    logoutStatus.className = 'modal-status';
+    logoutStatus.textContent = '';
+
+    try {
+      const r = await fetch('/dashboard/api/logout', { method: 'POST' });
+      const data = await r.json();
+      logoutModal.classList.remove('open');
+      if (data.success) {
+        checkTailscaleStatus();
+        fullRefresh();
+      } else {
+        alert('Logout failed: ' + (data.output || 'unknown error'));
+      }
+    } catch (e) {
+      logoutModal.classList.remove('open');
+      alert('Network error: ' + (e.message || 'unknown'));
+    }
+    btnConfirmLogout.disabled = false;
+    btnConfirmLogout.textContent = 'Log Out';
+  });
+
+  // ---- Install Tailscale ----
+  async function doInstallTailscale() {
+    if (!confirm('Install Tailscale on this machine?')) return;
+
+    btnJoin.disabled = true;
+    btnJoin.innerHTML = '<span class="spinner"></span>Installing...';
+
+    try {
+      const r = await fetch('/dashboard/api/install-tailscale', { method: 'POST' });
+      const data = await r.json();
+      if (data.success) {
+        btnJoin.textContent = 'Installed';
+        btnJoin.disabled = false;
+        checkTailscaleStatus();
+        fullRefresh();
+      } else {
+        alert('Installation failed: ' + (data.output || 'unknown error'));
+        btnJoin.textContent = 'Install Tailscale';
+        btnJoin.className = 'btn-join btn-install';
+        btnJoin.disabled = false;
+      }
+    } catch (e) {
+      alert('Network error: ' + (e.message || 'unknown'));
+      btnJoin.textContent = 'Install Tailscale';
+      btnJoin.className = 'btn-join btn-install';
+      btnJoin.disabled = false;
+    }
+  }
+
   // Check initial Tailscale status (tri-state)
   let tsState = null;
   let tsInstallInfo = null;
@@ -4744,17 +4968,23 @@ body::after{
     if (tsState.state === 'connected') {
       dot.className = 'status-dot';
       text.textContent = 'ONLINE';
-      btnJoin.textContent = 'Connected';
-      btnJoin.classList.add('connected');
+      btnJoin.textContent = 'Logout';
+      btnJoin.className = 'btn-join btn-logout';
+      btnJoin.style.display = '';
       panel.style.display = 'none';
     } else if (tsState.state === 'not_installed') {
       dot.className = 'status-dot not-installed';
       text.textContent = 'NOT INSTALLED';
-      btnJoin.style.display = 'none';
+      btnJoin.textContent = 'Install Tailscale';
+      btnJoin.className = 'btn-join btn-install';
+      btnJoin.style.display = '';
       await renderNotInstalledPanel();
     } else {
       dot.className = 'status-dot not-connected';
       text.textContent = 'NOT CONNECTED';
+      btnJoin.textContent = 'Join Network';
+      btnJoin.className = 'btn-join';
+      btnJoin.style.display = '';
       await renderNotConnectedPanel();
     }
   }
@@ -4788,7 +5018,7 @@ body::after{
       html += '</div>';
     }
 
-    html += '<div class="ts-setup-hint">Or run <code style="color:var(--cyan)">npx open-party setup</code> for guided installation</div>';
+    html += '<div class="ts-setup-hint">Or click the <strong>Install Tailscale</strong> button above, or run <code style="color:var(--cyan)">npx open-party setup</code></div>';
     html += '<button class="btn-redetect" onclick="window.__redetectTailscale()">Re-detect</button>';
     panel.innerHTML = html;
     panel.style.display = 'block';
@@ -4796,14 +5026,10 @@ body::after{
 
   async function renderNotConnectedPanel() {
     const panel = $('#tsPanel');
-    const btnJoin = $('#btnJoinNetwork');
-    btnJoin.style.display = '';
-    btnJoin.textContent = 'Join Network';
-    btnJoin.classList.remove('connected');
 
     let html = '<div class="ts-panel-title not-connected">Tailscale Not Connected</div>';
     html += '<div class="ts-info-row"><span class="label">Status:</span><span class="value" style="color:var(--yellow)">Installed but not authenticated</span></div>';
-    html += '<div class="ts-setup-hint">Run <code style="color:var(--cyan)">npx open-party setup</code> to log in, or use the Join Network button to enter an Auth Key</div>';
+    html += '<div class="ts-setup-hint">Use the <strong>Join Network</strong> button above to log in</div>';
     html += '<button class="btn-redetect" onclick="window.__redetectTailscale()">Re-detect</button>';
     panel.innerHTML = html;
     panel.style.display = 'block';
@@ -4829,7 +5055,7 @@ body::after{
 });
 
 // src/server/routes/dashboard.ts
-var dashboardRoutes;
+var dashboardRoutes, activeLogin;
 var init_dashboard = __esm({
   "src/server/routes/dashboard.ts"() {
     "use strict";
@@ -4935,6 +5161,37 @@ var init_dashboard = __esm({
         return c.json({ success: false, output: e.message }, 500);
       }
     });
+    activeLogin = null;
+    dashboardRoutes.post("/api/logout", async (c) => {
+      const result = logoutTailscale();
+      if (result.success) {
+        resetTailscaleBinaryCache();
+        refreshSelfIp();
+      }
+      return c.json(result, result.success ? 200 : 500);
+    });
+    dashboardRoutes.post("/api/tailscale-login", async (c) => {
+      if (activeLogin?.url) {
+        return c.json({ success: true, url: activeLogin.url });
+      }
+      const { promise, process: process2 } = startInteractiveLogin();
+      activeLogin = { process: process2 };
+      const result = await promise;
+      if (result.success && result.url) {
+        activeLogin.url = result.url;
+        return c.json({ success: true, url: result.url });
+      }
+      activeLogin = null;
+      return c.json({ success: false, output: result.output }, 500);
+    });
+    dashboardRoutes.post("/api/install-tailscale", async (c) => {
+      const { installTailscale: installTailscale2 } = await Promise.resolve().then(() => (init_tailscale_installer(), tailscale_installer_exports));
+      const result = await installTailscale2(process.platform);
+      if (result.success) {
+        resetTailscaleBinaryCache();
+      }
+      return c.json(result, result.success ? 200 : 500);
+    });
   }
 });
 
@@ -5005,49 +5262,7 @@ var init_server = __esm({
 
 // src/cli/setup.ts
 init_tailscale();
-import { createInterface } from "readline";
-
-// src/cli/tailscale-installer.ts
-import { spawn } from "child_process";
-var INSTALL_COMMANDS = {
-  linux: { cmd: "bash", args: ["-c", "curl -fsSL https://tailscale.com/install.sh | sh"], needsSudo: true },
-  darwin: { cmd: "brew", args: ["install", "tailscale"], needsSudo: false },
-  win32: { cmd: "winget", args: ["install", "Tailscale.Tailscale", "--accept-source-agreements"], needsSudo: false }
-};
-async function installTailscale(platform) {
-  const entry = INSTALL_COMMANDS[platform];
-  if (!entry) {
-    return {
-      success: false,
-      output: `Unsupported platform: ${platform}. Please install manually from https://tailscale.com/download`
-    };
-  }
-  const cmd = entry.needsSudo ? "sudo" : entry.cmd;
-  const args2 = entry.needsSudo ? [entry.cmd, ...entry.args] : entry.args;
-  console.log(`Running: ${cmd} ${args2.join(" ")}
-`);
-  return new Promise((resolve3) => {
-    const child = spawn(cmd, args2, {
-      stdio: "inherit",
-      windowsHide: true
-    });
-    let exited = false;
-    child.on("close", (code) => {
-      if (exited) return;
-      exited = true;
-      if (code === 0) {
-        resolve3({ success: true, output: "Installation completed." });
-      } else {
-        resolve3({ success: false, output: `Installation exited with code ${code}` });
-      }
-    });
-    child.on("error", (err) => {
-      if (exited) return;
-      exited = true;
-      resolve3({ success: false, output: err.message });
-    });
-  });
-}
+init_tailscale_installer();
 
 // src/cli/agent-detector.ts
 import { existsSync as existsSync2 } from "fs";
@@ -5332,11 +5547,12 @@ async function installPluginToAgent(agentType) {
   }
 }
 
-// src/cli/setup.ts
-var rl = createInterface({ input: process.stdin, output: process.stdout });
-function prompt(question) {
-  return new Promise((resolve3) => rl.question(question, (answer) => resolve3(answer.trim())));
-}
+// src/cli/tailscale-login.ts
+init_tailscale();
+import { spawn as spawn2 } from "child_process";
+
+// src/cli/tty-utils.ts
+import { createInterface } from "readline";
 function cyan(text) {
   return `\x1B[36m${text}\x1B[0m`;
 }
@@ -5352,10 +5568,222 @@ function red(text) {
 function bold(text) {
   return `\x1B[1m${text}\x1B[0m`;
 }
+function dim(text) {
+  return `\x1B[2m${text}\x1B[0m`;
+}
+function createRl() {
+  return createInterface({ input: process.stdin, output: process.stdout });
+}
+function closeRl(rl) {
+  rl.close();
+}
+async function prompt(question) {
+  const rl = createInterface({ input: process.stdin, output: process.stdout });
+  return new Promise((resolve4) => {
+    rl.question(question, (answer) => {
+      rl.close();
+      resolve4(answer.trim());
+    });
+  });
+}
+async function select(options, opts) {
+  if (options.length === 0) throw new Error("select() requires at least one option");
+  if (options.length === 1) return options[0].value;
+  const message = opts?.message ?? "";
+  const wasRaw = process.stdin.isRaw;
+  if (process.stdin.isTTY) process.stdin.setRawMode(true);
+  try {
+    let cursor = 0;
+    const render = () => {
+      const lines = options.length + (message ? 1 : 0);
+      process.stdout.write(`\x1B[${lines}A\x1B[0J`);
+      if (message) {
+        process.stdout.write(`${message}
+`);
+      }
+      for (let i = 0; i < options.length; i++) {
+        const opt = options[i];
+        const prefix = i === cursor ? `${cyan("\u276F")} ` : "  ";
+        const label = i === cursor ? bold(opt.label) : opt.label;
+        const hintStr = opt.hint ? ` ${dim(opt.hint)}` : "";
+        process.stdout.write(`${prefix}${label}${hintStr}
+`);
+      }
+    };
+    if (message) {
+      process.stdout.write(`${message}
+`);
+    }
+    for (let i = 0; i < options.length; i++) {
+      const opt = options[i];
+      const prefix = i === cursor ? `${cyan("\u276F")} ` : "  ";
+      const label = i === cursor ? bold(opt.label) : opt.label;
+      const hintStr = opt.hint ? ` ${dim(opt.hint)}` : "";
+      process.stdout.write(`${prefix}${label}${hintStr}
+`);
+    }
+    return new Promise((resolve4) => {
+      const onKey = (ch, key) => {
+        if (key.name === "up" || key.sequence === "\x1B[A") {
+          cursor = (cursor - 1 + options.length) % options.length;
+          render();
+        } else if (key.name === "down" || key.sequence === "\x1B[B") {
+          cursor = (cursor + 1) % options.length;
+          render();
+        } else if (key.name === "return" || key.sequence === "\r") {
+          process.stdin.removeListener("keypress", onKey);
+          process.stdout.write("\n");
+          resolve4(options[cursor].value);
+        }
+      };
+      process.stdin.on("keypress", onKey);
+      if (process.stdin.isTTY) {
+        process.stdin.resume();
+      }
+    });
+  } finally {
+    if (process.stdin.isTTY) process.stdin.setRawMode(wasRaw ?? false);
+  }
+}
+async function multiSelect(options, opts) {
+  if (options.length === 0) return [];
+  const message = opts?.message ?? "";
+  const wasRaw = process.stdin.isRaw;
+  if (process.stdin.isTTY) process.stdin.setRawMode(true);
+  try {
+    let cursor = 0;
+    const selected = /* @__PURE__ */ new Set();
+    const render = () => {
+      const lines = options.length + (message ? 1 : 0) + 1;
+      process.stdout.write(`\x1B[${lines}A\x1B[0J`);
+      if (message) {
+        process.stdout.write(`${message}
+`);
+      }
+      process.stdout.write(`${dim("  \u2191/\u2193 navigate, space to select, enter to confirm")}
+`);
+      for (let i = 0; i < options.length; i++) {
+        const opt = options[i];
+        const prefix = i === cursor ? `${cyan("\u276F")} ` : "  ";
+        const check = selected.has(i) ? green("\u25C9") : "\u25CB";
+        const label = i === cursor ? bold(opt.label) : opt.label;
+        process.stdout.write(`${prefix}${check} ${label}
+`);
+      }
+    };
+    if (message) {
+      process.stdout.write(`${message}
+`);
+    }
+    process.stdout.write(`${dim("  \u2191/\u2193 navigate, space to select, enter to confirm")}
+`);
+    for (let i = 0; i < options.length; i++) {
+      const opt = options[i];
+      const prefix = i === cursor ? `${cyan("\u276F")} ` : "  ";
+      const check = selected.has(i) ? green("\u25C9") : "\u25CB";
+      const label = i === cursor ? bold(opt.label) : opt.label;
+      process.stdout.write(`${prefix}${check} ${label}
+`);
+    }
+    return new Promise((resolve4) => {
+      const onKey = (_ch, key) => {
+        if (key.name === "up" || key.sequence === "\x1B[A") {
+          cursor = (cursor - 1 + options.length) % options.length;
+          render();
+        } else if (key.name === "down" || key.sequence === "\x1B[B") {
+          cursor = (cursor + 1) % options.length;
+          render();
+        } else if (key.name === "space") {
+          if (selected.has(cursor)) {
+            selected.delete(cursor);
+          } else {
+            selected.add(cursor);
+          }
+          render();
+        } else if (key.name === "return" || key.sequence === "\r") {
+          process.stdin.removeListener("keypress", onKey);
+          process.stdout.write("\n");
+          const result = Array.from(selected).sort((a, b) => a - b).map((i) => options[i].value);
+          resolve4(result);
+        }
+      };
+      process.stdin.on("keypress", onKey);
+      if (process.stdin.isTTY) {
+        process.stdin.resume();
+      }
+    });
+  } finally {
+    if (process.stdin.isTTY) process.stdin.setRawMode(wasRaw ?? false);
+  }
+}
+
+// src/cli/tailscale-login.ts
+async function interactiveLogin(binary) {
+  console.log(`
+${cyan("Running interactive login...")}`);
+  console.log("A browser window should open. Authenticate in the browser, then return here.\n");
+  const child = spawn2(binary, ["login"], { stdio: "inherit" });
+  const exitCode = await new Promise((resolve4) => {
+    child.on("close", resolve4);
+  });
+  resetTailscaleBinaryCache();
+  const status = getTailscaleInstallationStatus();
+  if (exitCode === 0 && status.state === "connected") {
+    console.log(`
+${green("\u2705 Login successful!")} IP: ${status.tailscale_ip}`);
+    showAuthKeyTip();
+    return true;
+  }
+  console.log(`
+${yellow("\u26A0\uFE0F  Login may not have completed. Status: " + status.state)}`);
+  console.log("  Try running: open-party login");
+  return false;
+}
+async function authKeyLogin(binary) {
+  console.log("");
+  console.log("Ask the network creator to generate an Auth Key at:");
+  console.log(`${cyan("  https://login.tailscale.com/admin/settings/keys")}
+`);
+  const authKey = await prompt("Enter Auth Key: ");
+  if (!authKey) {
+    console.log(yellow("No auth key provided, skipping login."));
+    return false;
+  }
+  const result = joinTailnet(authKey);
+  if (result.success) {
+    resetTailscaleBinaryCache();
+    const status = getTailscaleInstallationStatus();
+    console.log(`
+${green("\u2705 Login successful!")} IP: ${status.state === "connected" ? status.tailscale_ip : "unknown"}`);
+    showAuthKeyTip();
+    return true;
+  }
+  console.log(`
+${red("\u274C Login failed:")}
+${result.output}`);
+  console.log("  Check your auth key and try again.");
+  return false;
+}
+function showAuthKeyTip() {
+  console.log("");
+  console.log(`${bold("\u{1F4A1} To share network access with teammates:")}`);
+  console.log("  1. Go to https://login.tailscale.com/admin/settings/keys");
+  console.log("  2. Generate an Auth Key");
+  console.log("  3. Share it with teammates \u2014 they can run: open-party login");
+}
+
+// src/cli/setup.ts
 async function stepTailscale() {
   console.log(`
-${bold(cyan("\u{1F50D} Step 1: Detecting Tailscale..."))}
+${bold(cyan("\u{1F50D} Step 1: Tailscale Network"))}
 `);
+  console.log(
+    "Tailscale enables agents across different machines to discover and\ncommunicate with each other over a secure network.\n"
+  );
+  console.log(
+    `${dim("Without Tailscale, Open Party runs in local mode \u2014 connecting only\nto agents on this machine.")}
+`
+  );
   const status = getTailscaleInstallationStatus();
   if (status.state === "connected") {
     console.log(`${green("\u2705 Tailscale is connected!")}`);
@@ -5363,12 +5791,10 @@ ${bold(cyan("\u{1F50D} Step 1: Detecting Tailscale..."))}
     return;
   }
   if (status.state === "not_installed") {
-    console.log(`${red("\u274C Tailscale is not installed.")}`);
     await handleNotInstalled(status.platform);
     const newStatus = getTailscaleInstallationStatus();
     if (newStatus.state === "not_installed") {
-      console.log(`
-${yellow("\u26A0\uFE0F  Tailscale still not detected. Please install manually and re-run setup.")}`);
+      showLocalModeNotice();
       return;
     }
     if (newStatus.state === "connected") {
@@ -5383,6 +5809,7 @@ ${green("\u2705 Tailscale is connected!")} IP: ${newStatus.tailscale_ip}`);
 }
 async function handleNotInstalled(platform) {
   const info = getInstallInstructions(platform);
+  console.log(`${red("\u274C Tailscale is not installed.")}`);
   console.log(`
 Install Tailscale for ${bold(info.os)}:
 `);
@@ -5393,99 +5820,61 @@ Install Tailscale for ${bold(info.os)}:
     }
   }
   console.log(`
-  Download: ${info.download_url}`);
-  const autoInstall = info.commands.length > 0 && platform !== "win32";
-  if (autoInstall) {
-    const answer = await prompt(`
-${bold("Install Tailscale automatically?")} [yes/no]: `);
-    if (answer.toLowerCase() === "yes" || answer.toLowerCase() === "y") {
-      console.log("");
-      const result = await installTailscale(platform);
-      if (result.success) {
-        console.log(`${green("\u2705 Tailscale installed successfully!")}`);
-      } else {
-        console.log(`${red("\u274C Installation failed:")}
+  Download: ${info.download_url}
+`);
+  const options = [];
+  if (info.commands.length > 0 && platform !== "win32") {
+    options.push({ label: "Install Tailscale automatically", value: "auto", hint: "recommended" });
+  }
+  options.push({ label: "I've installed Tailscale, re-detect", value: "redetect" });
+  options.push({ label: "Skip \u2014 use local mode only", value: "skip", hint: "agents on this machine only" });
+  const choice = await select(options, { message: "Choose:" });
+  if (choice === "skip") {
+    return;
+  }
+  if (choice === "auto") {
+    console.log("");
+    const result = await installTailscale(platform);
+    if (result.success) {
+      console.log(`${green("\u2705 Tailscale installed successfully!")}`);
+    } else {
+      console.log(`${red("\u274C Installation failed:")}
 ${result.output}`);
-        console.log(`
-  Please install manually and re-run \x1B[36mnpx open-party setup\x1B[0m`);
-      }
-      return;
+      console.log(`
+  Please install manually and re-run: ${cyan("open-party setup")}`);
     }
+    return;
   }
-  console.log(`
-  Or run: ${cyan("npx open-party setup")}  (after installing manually)`);
-  if (autoInstall) {
-    const cont = await prompt('Press Enter when installation is complete, or type "skip" to skip...');
-    if (cont.toLowerCase() === "skip") return;
+  if (choice === "redetect") {
     resetTailscaleBinaryCache();
+    return;
   }
 }
 async function handleNotConnected(binary) {
-  console.log(`${yellow("\u{1F512} Tailscale is installed but not connected.")}`);
-  console.log("");
-  console.log("Choose a login method:\n");
-  console.log("  1. Interactive login (opens browser to authenticate)");
-  console.log("  2. Auth key (enter from Tailscale admin console)");
-  console.log("");
-  const choice = await prompt("Select [1/2]: ");
-  if (choice === "1") {
-    await handleInteractiveLogin(binary);
-  } else {
-    await handleAuthKeyLogin(binary);
-  }
-}
-async function handleInteractiveLogin(binary) {
-  console.log(`
-${cyan("Running interactive login...")}`);
-  console.log("A browser window should open. Authenticate in the browser, then return here.\n");
-  const { spawn: spawn3 } = await import("child_process");
-  const child = spawn3(binary, ["login"], { stdio: "inherit" });
-  const exitCode = await new Promise((resolve3) => {
-    child.on("close", resolve3);
-  });
-  resetTailscaleBinaryCache();
-  const status = getTailscaleInstallationStatus();
-  if (exitCode === 0 && status.state === "connected") {
-    console.log(`
-${green("\u2705 Login successful!")} IP: ${status.tailscale_ip}`);
-    showAuthKeyTip();
-  } else {
-    console.log(`
-${yellow("\u26A0\uFE0F  Login may not have completed. Status: " + status.state)}`);
-    console.log("  Try running: npx open-party setup");
-  }
-}
-async function handleAuthKeyLogin(binary) {
-  console.log("");
-  console.log("Ask the network creator to generate an Auth Key at:");
-  console.log(`${cyan("  https://login.tailscale.com/admin/settings/keys")}
+  console.log(`${yellow("\u{1F512} Tailscale is installed but not connected.")}
 `);
-  const authKey = await prompt("Enter Auth Key: ");
-  if (!authKey) {
-    console.log(yellow("No auth key provided, skipping login."));
-    return;
-  }
-  const { joinTailnet: joinTailnet2 } = await Promise.resolve().then(() => (init_tailscale(), tailscale_exports));
-  const result = joinTailnet2(authKey);
-  if (result.success) {
-    resetTailscaleBinaryCache();
-    const status = getTailscaleInstallationStatus();
-    console.log(`
-${green("\u2705 Login successful!")} IP: ${status.state === "connected" ? status.tailscale_ip : "unknown"}`);
-    showAuthKeyTip();
+  const options = [
+    { label: "Interactive login", value: "interactive", hint: "opens browser to authenticate" },
+    { label: "Auth key", value: "authkey", hint: "from network creator" },
+    { label: "Skip", value: "skip", hint: "login later with: open-party login" }
+  ];
+  const choice = await select(options, { message: "Choose a login method:" });
+  if (choice === "interactive") {
+    await interactiveLogin(binary);
+  } else if (choice === "authkey") {
+    await authKeyLogin(binary);
   } else {
     console.log(`
-${red("\u274C Login failed:")}
-${result.output}`);
-    console.log("  Check your auth key and try again.");
+${yellow("\u26A0\uFE0F  Tailscale not connected. Running in local mode.")}`);
+    console.log(`   To connect later, run: ${cyan("open-party login")}`);
   }
 }
-function showAuthKeyTip() {
-  console.log("");
-  console.log(`${bold("\u{1F4A1} To share network access with teammates:")}`);
-  console.log("  1. Go to https://login.tailscale.com/admin/settings/keys");
-  console.log("  2. Generate an Auth Key");
-  console.log("  3. Share it with teammates \u2014 they can run: npx open-party setup");
+function showLocalModeNotice() {
+  console.log(`
+${yellow("\u26A0\uFE0F  Running in local mode \u2014 connecting to agents on this machine only.")}`);
+  console.log("   To enable cross-machine communication later:");
+  console.log(`     1. Install Tailscale: ${cyan("https://tailscale.com/download")}`);
+  console.log(`     2. Run: ${cyan("open-party login")}`);
 }
 async function stepAgentPlugin() {
   console.log(`
@@ -5497,7 +5886,7 @@ ${bold(cyan("\u{1F50D} Step 2: Detecting AI agents in your environment..."))}
     console.log(yellow("No supported AI agents detected in this environment."));
     console.log("  Supported agents: Claude Code, Cursor, Gemini CLI");
     console.log("");
-    console.log("  Install one and re-run: npx open-party setup");
+    console.log("  Install one and re-run: open-party setup");
     return;
   }
   console.log("Detected agents:\n");
@@ -5505,7 +5894,10 @@ ${bold(cyan("\u{1F50D} Step 2: Detecting AI agents in your environment..."))}
     console.log(`  ${green("\u2713")} ${agent.name}`);
   }
   console.log("");
-  const selected = await selectAgents(detected);
+  const options = detected.map((a) => ({ label: a.name, value: a }));
+  const selected = await multiSelect(options, {
+    message: "Select agents to install Open Party plugin:"
+  });
   if (selected.length === 0) {
     console.log(yellow("No agents selected, skipping plugin installation."));
     return;
@@ -5527,32 +5919,19 @@ Installing Open Party plugin for ${agent.name}...`);
     }
   }
 }
-async function selectAgents(agents) {
-  console.log("Select agents to install Open Party plugin:\n");
-  for (let i = 0; i < agents.length; i++) {
-    console.log(`  [${i + 1}] ${agents[i].name}`);
-  }
-  console.log(`  [a] All`);
-  console.log(`  [n] None (skip)`);
-  console.log("");
-  const answer = await prompt('Enter selection (e.g. "1 2" or "a" or "n"): ');
-  if (answer.toLowerCase() === "n" || answer === "") return [];
-  if (answer.toLowerCase() === "a") return agents;
-  const indices = answer.split(/[\s,]+/).map((s) => parseInt(s, 10) - 1).filter((i) => i >= 0 && i < agents.length);
-  return indices.map((i) => agents[i]);
-}
 async function setupCommand() {
   console.log(bold(cyan("\n\u{1F680} Open Party Setup Wizard\n")));
+  const rl = createRl();
   await stepTailscale();
   await stepAgentPlugin();
   console.log(`
 ${bold(cyan("\u{1F680} Starting Party Server..."))}`);
-  const { spawn: spawn3 } = await import("child_process");
-  const { resolve: resolve3, dirname: dirname4 } = await import("path");
-  const { fileURLToPath: fileURLToPath2 } = await import("url");
-  const __dirname2 = dirname4(fileURLToPath2(import.meta.url));
-  const serverScript = resolve3(__dirname2, "..", "party-server.js");
-  const serverProc = spawn3(process.execPath, [serverScript], {
+  const { spawn: spawn4 } = await import("child_process");
+  const { resolve: resolve4, dirname: dirname5 } = await import("path");
+  const { fileURLToPath: fileURLToPath3 } = await import("url");
+  const __dirname2 = dirname5(fileURLToPath3(import.meta.url));
+  const serverScript = resolve4(__dirname2, "..", "party-server.js");
+  const serverProc = spawn4(process.execPath, [serverScript], {
     detached: true,
     stdio: "ignore",
     windowsHide: true
@@ -5563,11 +5942,70 @@ ${bold(cyan("\u{1F680} Starting Party Server..."))}`);
 ${bold(green("\u{1F389} Setup complete!"))}`);
   console.log(`  Dashboard: http://127.0.0.1:8000/dashboard`);
   console.log("  Other agents can join with: npx @feynmanzhang/open-party setup\n");
-  rl.close();
+  closeRl(rl);
+}
+
+// src/cli/login.ts
+init_tailscale();
+async function loginCommand() {
+  const status = getTailscaleInstallationStatus();
+  if (status.state === "connected") {
+    console.log(`${green("\u2705 Tailscale is already connected!")}`);
+    console.log(`   IP: ${status.tailscale_ip}  Hostname: ${status.hostname}`);
+    return;
+  }
+  if (status.state === "not_installed") {
+    console.log(`${red("\u274C Tailscale is not installed.")}`);
+    console.log("  Install it first: https://tailscale.com/download");
+    console.log(`  Then run: ${cyan("open-party login")}`);
+    return;
+  }
+  console.log(`${yellow("\u{1F512} Tailscale is installed but not connected.")}
+`);
+  const options = [
+    { label: "Interactive login", value: "interactive", hint: "opens browser to authenticate" },
+    { label: "Auth key", value: "authkey", hint: "from network creator" }
+  ];
+  const choice = await select(options, { message: "Choose a login method:" });
+  if (choice === "interactive") {
+    await interactiveLogin(status.binary);
+  } else {
+    await authKeyLogin(status.binary);
+  }
+}
+
+// src/cli/logout.ts
+init_tailscale();
+async function logoutCommand() {
+  const status = getTailscaleInstallationStatus();
+  if (status.state === "not_installed") {
+    console.log(red("\u274C Tailscale is not installed."));
+    return;
+  }
+  if (status.state === "not_connected") {
+    console.log(yellow("\u26A0\uFE0F  Tailscale is not connected \u2014 nothing to log out from."));
+    return;
+  }
+  const choice = await select(
+    [
+      { label: "Log out (remove credentials)", value: "logout", hint: "need to re-authenticate next time" },
+      { label: "Cancel", value: "cancel" }
+    ],
+    { message: "Are you sure you want to log out?" }
+  );
+  if (choice === "cancel") return;
+  console.log("Logging out of Tailscale...");
+  const result = logoutTailscale();
+  if (result.success) {
+    console.log(green("\u2705 Logged out successfully."));
+    console.log("  To reconnect, run: open-party login");
+  } else {
+    console.log(red("\u274C Logout failed:"), result.output);
+  }
 }
 
 // src/cli/server-utils.ts
-import { spawn as spawn2, execSync as execSync3 } from "child_process";
+import { spawn as spawn3, execSync as execSync3 } from "child_process";
 import { existsSync as existsSync4, readFileSync as readFileSync2, writeFileSync as writeFileSync2, unlinkSync, mkdirSync as mkdirSync2, openSync } from "fs";
 import { join as join4, dirname as dirname2, resolve as resolve2 } from "path";
 import { homedir as homedir3 } from "os";
@@ -5665,7 +6103,7 @@ async function spawnServerInBackground(port) {
   mkdirSync2(dirname2(logPath), { recursive: true });
   const logFd = openSync(logPath, "a");
   const env = { ...process.env, PARTY_PORT: String(port) };
-  const proc = spawn2(process.execPath, [script], {
+  const proc = spawn3(process.execPath, [script], {
     stdio: ["ignore", logFd, logFd],
     detached: true,
     windowsHide: true,
@@ -5717,7 +6155,7 @@ function parseStartArgs(args2) {
   return { daemon, port };
 }
 function sleep(ms) {
-  return new Promise((resolve3) => setTimeout(resolve3, ms));
+  return new Promise((resolve4) => setTimeout(resolve4, ms));
 }
 
 // src/cli/start-server.ts
@@ -5845,6 +6283,151 @@ async function statusCommand() {
   }
 }
 
+// src/cli/version.ts
+import { readFileSync as readFileSync3 } from "fs";
+import { resolve as resolve3, dirname as dirname4 } from "path";
+import { fileURLToPath as fileURLToPath2 } from "url";
+function showVersion() {
+  const pkgPath = resolve3(dirname4(fileURLToPath2(import.meta.url)), "..", "..", "package.json");
+  const pkg = JSON.parse(readFileSync3(pkgPath, "utf-8"));
+  console.log(`open-party v${pkg.version}`);
+}
+
+// src/cli/agents.ts
+async function agentsCommand() {
+  const port = resolvePort();
+  if (!await isServerHealthy(port)) {
+    console.log("Party Server is not running.");
+    console.log("  Use 'open-party start' to start it.");
+    return;
+  }
+  const overview = await getServerOverview(port);
+  if (!overview) {
+    console.log("Failed to get server overview.");
+    return;
+  }
+  const agents = overview.agents;
+  if (!agents) {
+    console.log("No agent data available.");
+    return;
+  }
+  const localAgents = agents.local_agents ?? [];
+  const remoteAgents = agents.remote_agents ?? [];
+  const localCount = agents.local_count ?? localAgents.length;
+  const remoteCount = agents.remote_count ?? remoteAgents.length;
+  if (localCount === 0) {
+    console.log("Local agents: (none)");
+  } else {
+    console.log(`Local agents (${localCount}):`);
+    for (const agent of localAgents) {
+      const id = agent.agent_id ?? "?";
+      const name = agent.display_name ?? id;
+      const ago = formatTimeAgo(agent.last_heartbeat);
+      console.log(`  ${id.padEnd(20)} ${name.padEnd(16)} ${ago}`);
+    }
+  }
+  if (remoteCount > 0) {
+    console.log(`
+Remote agents (${remoteCount}):`);
+    for (const agent of remoteAgents) {
+      const id = agent.agent_id ?? "?";
+      const name = agent.display_name ?? id;
+      const via = agent.source_peer_ip ?? "?";
+      const ago = formatTimeAgo(agent.last_heartbeat);
+      console.log(`  ${id.padEnd(20)} ${name.padEnd(16)} (via ${via})  ${ago}`);
+    }
+  }
+  if (localCount === 0 && remoteCount === 0) {
+    console.log("\nNo agents connected yet.");
+  }
+}
+function formatTimeAgo(timestamp) {
+  if (!timestamp) return "\u2014";
+  const diff = Date.now() / 1e3 - timestamp / 1e3;
+  if (diff < 60) return "just now";
+  if (diff < 3600) return `${Math.floor(diff / 60)} min ago`;
+  if (diff < 86400) return `${Math.floor(diff / 3600)} hr ago`;
+  return `${Math.floor(diff / 86400)}d ago`;
+}
+
+// src/cli/peers.ts
+async function peersCommand() {
+  const port = resolvePort();
+  if (!await isServerHealthy(port)) {
+    console.log("Party Server is not running.");
+    console.log("  Use 'open-party start' to start it.");
+    return;
+  }
+  const overview = await getServerOverview(port);
+  if (!overview) {
+    console.log("Failed to get server overview.");
+    return;
+  }
+  const peers = overview.peers;
+  if (!peers) {
+    console.log("No peer data available.");
+    return;
+  }
+  const details = peers.details ?? [];
+  const remoteAgents = overview.agents?.remote_agents ?? [];
+  const peerAgentCounts = /* @__PURE__ */ new Map();
+  for (const agent of remoteAgents) {
+    const ip = agent.source_peer_ip;
+    peerAgentCounts.set(ip, (peerAgentCounts.get(ip) ?? 0) + 1);
+  }
+  const total = peers.total ?? details.length;
+  if (details.length === 0) {
+    console.log("No peers discovered yet.");
+    return;
+  }
+  console.log(`Peers (${total}):
+`);
+  for (const peer of details) {
+    const agentCount = peerAgentCounts.get(peer.ip);
+    const agentStr = agentCount != null ? String(agentCount) : "\u2014";
+    const statusStr = formatStatus(peer.status);
+    console.log(`  ${peer.ip.padEnd(18)} ${statusStr.padEnd(16)} ${agentStr} agents`);
+  }
+}
+function formatStatus(status) {
+  const map = {
+    PARTY_SERVER: "Online",
+    DEGRADED: "Degraded",
+    SUSPECT: "Suspect",
+    DOWN: "Down",
+    UNKNOWN: "Unknown",
+    MAYBE: "Probing",
+    NOT_SERVER: "Not a server"
+  };
+  return map[status] ?? status;
+}
+
+// src/cli/install.ts
+init_tailscale();
+init_tailscale_installer();
+async function installCommand() {
+  const status = getTailscaleInstallationStatus();
+  if (status.state === "connected" || status.state === "not_connected") {
+    console.log(green("\u2705 Tailscale is already installed!"), `Binary: ${status.binary}`);
+    if (status.state === "connected") {
+      console.log(`   IP: ${status.tailscale_ip}  Hostname: ${status.hostname}`);
+    }
+    return;
+  }
+  const platform = process.platform;
+  const info = getInstallInstructions(platform);
+  console.log(bold(cyan("Installing Tailscale...\n")));
+  console.log(`  Platform: ${info.os}`);
+  const result = await installTailscale(platform);
+  if (result.success) {
+    console.log(green("\n\u2705 Tailscale installed successfully!"));
+    console.log("  Run: open-party login");
+  } else {
+    console.log(red("\n\u274C Installation failed:"), result.output);
+    console.log("  Install manually: https://tailscale.com/download");
+  }
+}
+
 // src/cli/index.ts
 function showHelp() {
   console.log(`Usage: open-party <command> [options]
@@ -5854,28 +6437,54 @@ Commands:
   stop      Stop the Party Server
   status    Show server status
   setup     Interactive setup wizard (Tailscale + agent plugins)
+  login     Login to Tailscale network
+  logout    Log out of Tailscale network
+  install   Install Tailscale
+  agents    List connected agents
+  peers     List discovered peer nodes
   help      Show this help message
 
 Options for 'start':
   -d, --daemon          Run in background (daemon mode)
   -p, --port <port>     Override port (default: 8000, env: PARTY_PORT)
 
+Global options:
+  -v, --version         Show version number
+
 Examples:
   open-party                    Start server in foreground
   open-party start              Start server in foreground
   open-party start -d           Start server in background
   open-party start -d -p 9000   Start server in background on port 9000
   open-party stop               Stop the server
-  open-party status             Check if the server is running`);
+  open-party status             Check if the server is running
+  open-party login              Login to Tailscale
+  open-party logout             Log out of Tailscale
+  open-party install            Install Tailscale
+  open-party agents             List connected agents
+  open-party peers              List discovered peer nodes`);
 }
 var args = process.argv.slice(2);
 var command = args[0] ?? "start";
 var commandArgs = args.slice(1);
 async function main2() {
+  if (command === "--version" || command === "-v") {
+    showVersion();
+    process.exit(0);
+  }
   switch (command) {
     case "setup":
       await setupCommand();
       break;
+    case "login":
+      await loginCommand();
+      break;
+    case "logout":
+      await logoutCommand();
+      break;
+    case "install":
+      await installCommand();
+      break;
     case "start":
       await startServer(commandArgs);
       break;
@@ -5885,6 +6494,12 @@ async function main2() {
     case "status":
       await statusCommand();
       break;
+    case "agents":
+      await agentsCommand();
+      break;
+    case "peers":
+      await peersCommand();
+      break;
     case "help":
     case "--help":
     case "-h":