@getpaseo/protocol 0.2.0-beta.1 → 0.2.0-beta.3

package/dist/messages.js

@@ -425,6 +425,7 @@ export const AgentTimelineItemPayloadSchema = z.union([
         type: z.literal("user_message"),
         text: z.string(),
         messageId: z.string().optional(),
+        clientMessageId: z.string().optional(),
     }),
     z.object({
         type: z.literal("assistant_message"),
@@ -509,6 +510,7 @@ export const AgentStreamEventPayloadSchema = z.discriminatedUnion("type", [
             body: z.string(),
             data: z.object({
                 serverId: z.string(),
+                workspaceId: z.string().optional(),
                 agentId: z.string(),
                 reason: z.enum(["finished", "error", "permission"]),
             }),
@@ -789,7 +791,7 @@ function normalizeAgentAttachments(input) {
 const AgentAttachmentsSchema = z.unknown().transform(normalizeAgentAttachments).optional();
 export const ChangeRequestCheckoutSourceSchema = z.object({
     kind: z.literal("change_request"),
-    forge: z.string().optional().default("github"),
+    forge: z.string().optional(),
     number: z.number().int().positive(),
     projectPath: z.string().optional(),
 });
@@ -923,6 +925,21 @@ export const DaemonGetPairingOfferRequestSchema = z.object({
     type: z.literal("daemon.get_pairing_offer.request"),
     requestId: z.string(),
 });
+export const HubManagementDaemonConnectRequestSchema = z.object({
+    type: z.literal("hub.management.daemon.connect.request"),
+    requestId: z.string(),
+    hubUrl: z.string(),
+    token: z.string(),
+});
+export const HubManagementDaemonGetStatusRequestSchema = z.object({
+    type: z.literal("hub.management.daemon.get_status.request"),
+    requestId: z.string(),
+});
+export const HubManagementDaemonDisconnectRequestSchema = z.object({
+    type: z.literal("hub.management.daemon.disconnect.request"),
+    requestId: z.string(),
+    force: z.boolean().optional(),
+});
 export const DiagnosticsRequestSchema = z.object({
     type: z.literal("diagnostics.request"),
     requestId: z.string(),
@@ -1005,6 +1022,9 @@ export const CreateAgentRequestMessageSchema = z.object({
     config: AgentSessionConfigSchema,
     env: z.record(z.string(), z.string()).optional(),
     workspaceId: z.string().optional(),
+    // Optional caller context lets managed CLI invocations use the same daemon-owned
+    // workspace and parentage policy as agent-scoped MCP creation.
+    callerAgentId: z.string().optional(),
     worktreeName: z.string().optional(),
     initialPrompt: z.string().optional(),
     clientMessageId: z.string().optional(),
@@ -1122,6 +1142,11 @@ export const ProviderSubagentTimelineRequestMessageSchema = z.object({
     cursor: AgentTimelineCursorSchema.optional(),
     limit: z.number().int().nonnegative().optional(),
 });
+export const SetAgentTimelineSubscriptionRequestMessageSchema = z.object({
+    type: z.literal("agent.timeline.set_subscription.request"),
+    agentIds: z.array(z.string()),
+    requestId: z.string(),
+});
 export const AgentForkContextRequestMessageSchema = z.object({
     type: z.literal("agent.fork_context.request"),
     agentId: z.string(),
@@ -1440,9 +1465,9 @@ const CheckoutCheckDetailsRequestPayloadSchema = z.object({
     checkRunId: z.number().int().positive().optional(),
     workflowRunId: z.number().int().positive().optional(),
     // Permanent forge-routing field, optional because only some forges need it:
-    // GitLab routes the check-details fetch to the change request's head pipeline
-    // by iid, so a fork/detached MR pipeline (which lives in the source project,
-    // not the checkout's target project) resolves correctly. GitHub ignores it.
+    // GitLab routes check details to the MR's head pipeline; Gitea-family adapters
+    // resolve the PR head SHA by number, including after merge/close. GitHub
+    // ignores it.
     changeRequestNumber: z.number().int().positive().optional(),
     requestId: z.string(),
 });
@@ -1705,9 +1730,11 @@ export const WorkspaceCreateRequestSchema = z.object({
             cwd: z.string().optional(),
             projectId: z.string().optional(),
             action: z.enum(["branch-off", "checkout"]).optional(),
-            // Target branch name for checkout, or new branch name for branch-off.
+            // Target branch for checkout, or base ref for branch-off.
             refName: z.string().min(1).optional(),
             baseBranch: z.string().optional(),
+            // New branch name for branch-off. The worktree path may use a different slug.
+            branchName: z.string().min(1).optional(),
             checkoutSource: ChangeRequestCheckoutSourceSchema.optional(),
             // COMPAT(githubPrNumber): added in v0.1.106, remove after 2026-12-28 once
             // clients send checkoutSource.
@@ -1763,6 +1790,7 @@ const FileExplorerFileSchema = z.object({
     mimeType: z.string().optional(),
     size: z.number(),
     modifiedAt: z.string(),
+    revision: z.string().optional(),
 });
 const FileExplorerDirectorySchema = z.object({
     path: z.string(),
@@ -1776,6 +1804,48 @@ export const FileExplorerRequestSchema = z.object({
     requestId: z.string(),
     acceptBinary: z.boolean().optional(),
 });
+export const FileVersionSchema = z.discriminatedUnion("status", [
+    z.object({
+        status: z.literal("ready"),
+        cwd: z.string(),
+        path: z.string(),
+        size: z.number().int().nonnegative(),
+        modifiedAt: z.string(),
+        revision: z.string().optional(),
+    }),
+    z.object({
+        status: z.literal("missing"),
+        cwd: z.string(),
+        path: z.string(),
+    }),
+    z.object({
+        status: z.literal("error"),
+        cwd: z.string(),
+        path: z.string(),
+        error: z.string(),
+    }),
+]);
+export const FileSubscribeRequestSchema = z.object({
+    type: z.literal("fs.file.subscribe.request"),
+    cwd: z.string(),
+    path: z.string(),
+    subscriptionId: z.string(),
+    requestId: z.string(),
+});
+export const FileUnsubscribeRequestSchema = z.object({
+    type: z.literal("fs.file.unsubscribe.request"),
+    subscriptionId: z.string(),
+    requestId: z.string(),
+});
+export const FileWriteRequestSchema = z.object({
+    type: z.literal("fs.file.write.request"),
+    cwd: z.string(),
+    path: z.string(),
+    content: z.string(),
+    expectedModifiedAt: z.string(),
+    expectedRevision: z.string().optional(),
+    requestId: z.string(),
+});
 export const ProjectIconRequestSchema = z.object({
     type: z.literal("project_icon_request"),
     cwd: z.string(),
@@ -1939,7 +2009,24 @@ export const CaptureTerminalRequestSchema = z.object({
     stripAnsi: z.boolean().default(true),
     requestId: z.string(),
 });
+export const HubExecutionAgentCreateRequestSchema = z.object({
+    type: z.literal("hub.execution.agent.create.request"),
+    requestId: z.string(),
+    executionId: z.string(),
+    provider: z.string(),
+    cwd: z.string(),
+    prompt: z.string(),
+    workspaceId: z.string().optional(),
+    model: z.string().optional(),
+    modeId: z.string().optional(),
+    thinkingOptionId: z.string().optional(),
+    featureValues: z.record(z.string(), z.unknown()).optional(),
+    env: z.record(z.string(), z.string()).optional(),
+    worktree: CreateAgentWorktreeTargetSchema.optional(),
+    autoArchive: z.boolean().optional(),
+});
 export const SessionInboundMessageSchema = z.discriminatedUnion("type", [
+    HubExecutionAgentCreateRequestSchema,
     BrowserAutomationExecuteResponseSchema,
     VoiceAudioChunkMessageSchema,
     AbortRequestMessageSchema,
@@ -1964,6 +2051,9 @@ export const SessionInboundMessageSchema = z.discriminatedUnion("type", [
     WaitForFinishRequestSchema,
     DaemonGetStatusRequestSchema,
     DaemonGetPairingOfferRequestSchema,
+    HubManagementDaemonConnectRequestSchema,
+    HubManagementDaemonGetStatusRequestSchema,
+    HubManagementDaemonDisconnectRequestSchema,
     DiagnosticsRequestSchema,
     GetDaemonConfigRequestMessageSchema,
     SetDaemonConfigRequestMessageSchema,
@@ -1992,6 +2082,7 @@ export const SessionInboundMessageSchema = z.discriminatedUnion("type", [
     FetchAgentTimelineRequestMessageSchema,
     ProviderSubagentListRequestMessageSchema,
     ProviderSubagentTimelineRequestMessageSchema,
+    SetAgentTimelineSubscriptionRequestMessageSchema,
     AgentForkContextRequestMessageSchema,
     SetAgentModeRequestMessageSchema,
     SetAgentModelRequestMessageSchema,
@@ -2044,6 +2135,9 @@ export const SessionInboundMessageSchema = z.discriminatedUnion("type", [
     WorkspaceCreateRequestSchema,
     WorkspaceClearAttentionRequestSchema,
     FileExplorerRequestSchema,
+    FileSubscribeRequestSchema,
+    FileUnsubscribeRequestSchema,
+    FileWriteRequestSchema,
     ProjectIconRequestSchema,
     FileDownloadTokenRequestSchema,
     FileUploadRequestSchema,
@@ -2258,6 +2352,8 @@ export const ServerInfoStatusPayloadSchema = z
         worktreeRestore: z.boolean().optional(),
         // COMPAT(workspaceRecovery): added in v0.1.105, remove after 2027-01-11 once daemon floor >= v0.1.105.
         workspaceRecovery: z.boolean().optional(),
+        // COMPAT(workspaceFileEditing): added in v0.2.0, remove after 2027-01-18 once daemon floor >= v0.2.0.
+        workspaceFileEditing: z.boolean().optional(),
         // COMPAT(providerUsageList): added in v0.1.98, drop the gate when daemon floor >= v0.1.98.
         providerUsageList: z.boolean().optional(),
         // COMPAT(agentDetach): added in v0.1.98, remove gate after 2026-12-19 once daemon floor >= v0.1.98.
@@ -2274,6 +2370,8 @@ export const ServerInfoStatusPayloadSchema = z
         providerSubagents: z.boolean().optional(),
         // COMPAT(workspacePinning): added in v0.1.107, remove gate after 2027-01-12.
         workspacePinning: z.boolean().optional(),
+        // COMPAT(hubRelationship): added in v0.1.X, drop the gate when floor >= v0.1.X.
+        hubRelationship: z.boolean().optional(),
         // COMPAT(projectGithubClone): added in v0.1.108, remove gate after 2027-01-15.
         projectGithubClone: z.boolean().optional(),
         // COMPAT(workspaceGithubRepositorySearch): added in v0.1.108, remove gate after 2027-01-15.
@@ -2290,6 +2388,10 @@ export const ServerInfoStatusPayloadSchema = z
         // Daemon advertises pluggable non-GitHub forge support (the forge registry);
         // the client gates non-GitHub setup UI on it.
         forgeProviders: z.boolean().optional(),
+        // COMPAT(selectiveAgentTimeline): added in v0.1.106, remove after 2027-01-12.
+        selectiveAgentTimeline: z.boolean().optional(),
+        // COMPAT(stableProjectIdentity): added in v0.1.109, remove gate after 2027-01-15.
+        stableProjectIdentity: z.boolean().optional(),
     })
         .optional(),
 })
@@ -2697,6 +2799,13 @@ export const WorkspaceUpdateMessageSchema = z.object({
         }),
     ]),
 });
+export const ProjectUpdateMessageSchema = z.object({
+    type: z.literal("project.update"),
+    payload: z.discriminatedUnion("kind", [
+        z.object({ kind: z.literal("upsert"), project: WorkspaceProjectDescriptorPayloadSchema }),
+        z.object({ kind: z.literal("remove"), projectId: z.string() }),
+    ]),
+});
 export const ScriptStatusUpdateMessageSchema = z.object({
     type: z.literal("script_status_update"),
     payload: z.object({
@@ -2966,6 +3075,34 @@ export const ProviderSubagentUpdateMessageSchema = z.object({
         }),
     ]),
 });
+export const SetAgentTimelineSubscriptionResponseMessageSchema = z.object({
+    type: z.literal("agent.timeline.set_subscription.response"),
+    payload: z.object({
+        agentIds: z.array(z.string()),
+        requestId: z.string(),
+    }),
+});
+export const AgentAttentionRequiredMessageSchema = z.object({
+    type: z.literal("agent_attention_required"),
+    payload: z.object({
+        agentId: z.string(),
+        reason: z.enum(["finished", "error", "permission"]),
+        timestamp: z.string(),
+        shouldNotify: z.boolean(),
+        notification: z
+            .object({
+            title: z.string(),
+            body: z.string(),
+            data: z.object({
+                serverId: z.string(),
+                workspaceId: z.string().optional(),
+                agentId: z.string(),
+                reason: z.enum(["finished", "error", "permission"]),
+            }),
+        })
+            .optional(),
+    }),
+});
 export const AgentForkContextResponseMessageSchema = z.object({
     type: z.literal("agent.fork_context.response"),
     payload: z.object({
@@ -3078,6 +3215,37 @@ export const DaemonGetStatusResponseSchema = z.object({
     })
         .passthrough(),
 });
+export const HubRelationshipStatusSchema = z.object({
+    state: z.enum([
+        "not_connected",
+        "connecting",
+        "connected",
+        "reconnecting",
+        "disconnecting",
+        "revoked",
+    ]),
+    daemonId: z.string().nullable(),
+    hubOrigin: z.string().nullable(),
+    scopes: z.array(z.string()),
+    connectedAt: z.string().nullable(),
+    lastError: z.string().nullable(),
+});
+export const HubManagementDaemonConnectResponseSchema = z.object({
+    type: z.literal("hub.management.daemon.connect.response"),
+    payload: z.object({ requestId: z.string(), status: HubRelationshipStatusSchema }),
+});
+export const HubManagementDaemonGetStatusResponseSchema = z.object({
+    type: z.literal("hub.management.daemon.get_status.response"),
+    payload: z.object({ requestId: z.string(), status: HubRelationshipStatusSchema }),
+});
+export const HubManagementDaemonDisconnectResponseSchema = z.object({
+    type: z.literal("hub.management.daemon.disconnect.response"),
+    payload: z.object({
+        requestId: z.string(),
+        status: HubRelationshipStatusSchema,
+        warning: z.string().optional(),
+    }),
+});
 export const DaemonGetPairingOfferResponseSchema = z.object({
     type: z.literal("daemon.get_pairing_offer.response"),
     payload: z
@@ -3857,6 +4025,45 @@ export const FileExplorerResponseSchema = z.object({
         requestId: z.string(),
     }),
 });
+export const FileSubscribeResponseSchema = z.object({
+    type: z.literal("fs.file.subscribe.response"),
+    payload: z.object({
+        subscriptionId: z.string(),
+        initial: FileVersionSchema,
+        requestId: z.string(),
+    }),
+});
+export const FileUnsubscribeResponseSchema = z.object({
+    type: z.literal("fs.file.unsubscribe.response"),
+    payload: z.object({
+        subscriptionId: z.string(),
+        requestId: z.string(),
+    }),
+});
+export const FileWriteResultSchema = z.discriminatedUnion("status", [
+    z.object({
+        status: z.literal("written"),
+        modifiedAt: z.string(),
+        size: z.number(),
+        revision: z.string().optional(),
+    }),
+    z.object({ status: z.literal("conflict"), version: FileVersionSchema }),
+    z.object({ status: z.literal("error"), error: z.string() }),
+]);
+export const FileWriteResponseSchema = z.object({
+    type: z.literal("fs.file.write.response"),
+    payload: z.object({
+        result: FileWriteResultSchema,
+        requestId: z.string(),
+    }),
+});
+export const FileUpdateSchema = z.object({
+    type: z.literal("fs.file.update"),
+    payload: z.object({
+        subscriptionId: z.string(),
+        version: FileVersionSchema,
+    }),
+});
 const ProjectIconSchema = z.object({
     data: z.string(),
     mimeType: z.string(),
@@ -4181,7 +4388,60 @@ export const DaemonUpdateProgressMessageSchema = z.object({
         phase: z.enum(["starting", "downloading", "installing", "complete"]),
     }),
 });
+export const HubExecutionAgentCreateResponseSchema = z.object({
+    type: z.literal("hub.execution.agent.create.response"),
+    payload: z.object({
+        requestId: z.string(),
+        executionId: z.string(),
+        agentId: z.string().nullable(),
+        agent: AgentSnapshotPayloadSchema.nullable(),
+        success: z.boolean(),
+        error: z.string().nullable(),
+    }),
+});
+export const HubExecutionAgentUpdateSchema = z.object({
+    type: z.literal("hub.execution.agent.update"),
+    payload: z.object({
+        executionId: z.string(),
+        agentId: z.string(),
+        agent: AgentSnapshotPayloadSchema,
+    }),
+});
+export const HubExecutionAgentStreamSchema = z.object({
+    type: z.literal("hub.execution.agent.stream"),
+    payload: z.object({
+        executionId: z.string(),
+        agentId: z.string(),
+        event: AgentStreamEventPayloadSchema,
+    }),
+});
+export const HubExecutionOutboundMessageSchema = z.discriminatedUnion("type", [
+    HubExecutionAgentCreateResponseSchema,
+    HubExecutionAgentUpdateSchema,
+    HubExecutionAgentStreamSchema,
+]);
+export class HubMessageCorrelationError extends Error {
+    constructor(messageType) {
+        super(`Hub message ${messageType} has mismatched agent correlation`);
+        this.name = "HubMessageCorrelationError";
+    }
+}
+export function parseHubExecutionOutboundMessage(value) {
+    const message = HubExecutionOutboundMessageSchema.parse(value);
+    const payload = message.payload;
+    if ("agent" in payload &&
+        payload.agent !== null &&
+        "agentId" in payload &&
+        payload.agentId !== null &&
+        payload.agent.id !== payload.agentId) {
+        throw new HubMessageCorrelationError(message.type);
+    }
+    return message;
+}
 export const SessionOutboundMessageSchema = z.discriminatedUnion("type", [
+    HubExecutionAgentCreateResponseSchema,
+    HubExecutionAgentUpdateSchema,
+    HubExecutionAgentStreamSchema,
     BrowserAutomationExecuteRequestSchema,
     ActivityLogMessageSchema,
     AssistantChunkMessageSchema,
@@ -4199,6 +4459,7 @@ export const SessionOutboundMessageSchema = z.discriminatedUnion("type", [
     ArtifactMessageSchema,
     AgentUpdateMessageSchema,
     WorkspaceUpdateMessageSchema,
+    ProjectUpdateMessageSchema,
     ScriptStatusUpdateMessageSchema,
     WorkspaceSetupProgressMessageSchema,
     WorkspaceSetupStatusResponseMessageSchema,
@@ -4222,6 +4483,8 @@ export const SessionOutboundMessageSchema = z.discriminatedUnion("type", [
     ProviderSubagentListResponseMessageSchema,
     ProviderSubagentTimelineResponseMessageSchema,
     ProviderSubagentUpdateMessageSchema,
+    SetAgentTimelineSubscriptionResponseMessageSchema,
+    AgentAttentionRequiredMessageSchema,
     AgentForkContextResponseMessageSchema,
     CancelAgentResponseMessageSchema,
     ClearAgentAttentionResponseMessageSchema,
@@ -4231,6 +4494,9 @@ export const SessionOutboundMessageSchema = z.discriminatedUnion("type", [
     SetVoiceModeResponseMessageSchema,
     DaemonGetStatusResponseSchema,
     DaemonGetPairingOfferResponseSchema,
+    HubManagementDaemonConnectResponseSchema,
+    HubManagementDaemonGetStatusResponseSchema,
+    HubManagementDaemonDisconnectResponseSchema,
     DiagnosticsResponseSchema,
     GetDaemonConfigResponseMessageSchema,
     SetDaemonConfigResponseMessageSchema,
@@ -4289,6 +4555,10 @@ export const SessionOutboundMessageSchema = z.discriminatedUnion("type", [
     PaseoWorktreeArchiveResponseSchema,
     CreatePaseoWorktreeResponseSchema,
     FileExplorerResponseSchema,
+    FileSubscribeResponseSchema,
+    FileUnsubscribeResponseSchema,
+    FileWriteResponseSchema,
+    FileUpdateSchema,
     ProjectIconResponseSchema,
     FileDownloadTokenResponseSchema,
     FileUploadResponseSchema,
@@ -4356,9 +4626,11 @@ export const WSHelloMessageSchema = z.object({
         voice: z.boolean().optional(),
         pushNotifications: z.boolean().optional(),
         [CLIENT_CAPS.reasoningMergeEnum]: z.boolean().optional(),
+        [CLIENT_CAPS.selectiveAgentTimeline]: z.boolean().optional(),
         [CLIENT_CAPS.customModeIcons]: z.boolean().optional(),
         [CLIENT_CAPS.terminalReflowableSnapshot]: z.boolean().optional(),
         [CLIENT_CAPS.providerSubagents]: z.boolean().optional(),
+        [CLIENT_CAPS.projectUpdates]: z.boolean().optional(),
         [CLIENT_CAPS.browserHost]: BrowserAutomationHostCapabilitySchema.optional(),
     })
         .passthrough()

package/dist/paseo-config-schema.d.ts

@@ -1,4 +1,8 @@
 import { z } from "zod";
+export declare const PaseoServicePortAllocationSchema: z.ZodObject<{
+    range: z.ZodOptional<z.ZodString>;
+    portScript: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
 export declare function normalizeLifecycleCommands(commands: unknown): string[];
 export declare const PaseoLifecycleCommandRawSchema: z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>;
 export declare const PaseoScriptEntryRawSchema: z.ZodObject<{
@@ -10,6 +14,10 @@ export declare const PaseoWorktreeConfigRawSchema: z.ZodObject<{
     setup: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
     teardown: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
     terminals: z.ZodOptional<z.ZodUnknown>;
+    servicePorts: z.ZodOptional<z.ZodObject<{
+        range: z.ZodOptional<z.ZodString>;
+        portScript: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
 }, z.core.$loose>;
 export declare const PaseoMetadataGenerationEntrySchema: z.ZodCatch<z.ZodObject<{
     instructions: z.ZodOptional<z.ZodString>;
@@ -33,6 +41,10 @@ export declare const PaseoConfigRawSchema: z.ZodObject<{
         setup: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
         teardown: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
         terminals: z.ZodOptional<z.ZodUnknown>;
+        servicePorts: z.ZodOptional<z.ZodObject<{
+            range: z.ZodOptional<z.ZodString>;
+            portScript: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>;
     }, z.core.$loose>>;
     scripts: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
         type: z.ZodOptional<z.ZodUnknown>;
@@ -56,6 +68,10 @@ export declare const PaseoConfigRawSchema: z.ZodObject<{
 }, z.core.$loose>;
 export declare const WorktreeConfigSchema: z.ZodCatch<z.ZodObject<{
     terminals: z.ZodOptional<z.ZodUnknown>;
+    servicePorts: z.ZodOptional<z.ZodObject<{
+        range: z.ZodOptional<z.ZodString>;
+        portScript: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
     setup: z.ZodPipe<z.ZodOptional<z.ZodUnknown>, z.ZodTransform<string[], unknown>>;
     teardown: z.ZodPipe<z.ZodOptional<z.ZodUnknown>, z.ZodTransform<string[], unknown>>;
 }, z.core.$loose>>;
@@ -67,6 +83,10 @@ export declare const ScriptEntrySchema: z.ZodCatch<z.ZodObject<{
 export declare const PaseoConfigSchema: z.ZodCatch<z.ZodObject<{
     worktree: z.ZodOptional<z.ZodCatch<z.ZodObject<{
         terminals: z.ZodOptional<z.ZodUnknown>;
+        servicePorts: z.ZodOptional<z.ZodObject<{
+            range: z.ZodOptional<z.ZodString>;
+            portScript: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>;
         setup: z.ZodPipe<z.ZodOptional<z.ZodUnknown>, z.ZodTransform<string[], unknown>>;
         teardown: z.ZodPipe<z.ZodOptional<z.ZodUnknown>, z.ZodTransform<string[], unknown>>;
     }, z.core.$loose>>>;
@@ -110,6 +130,7 @@ export declare const ProjectConfigRpcErrorSchema: z.ZodDiscriminatedUnion<[z.Zod
 export type PaseoScriptEntryRaw = z.infer<typeof PaseoScriptEntryRawSchema>;
 export type PaseoMetadataGenerationEntry = z.infer<typeof PaseoMetadataGenerationEntrySchema>;
 export type PaseoMetadataGeneration = z.infer<typeof PaseoMetadataGenerationSchema>;
+export type PaseoServicePortAllocation = z.infer<typeof PaseoServicePortAllocationSchema>;
 export type PaseoConfigRaw = z.infer<typeof PaseoConfigRawSchema>;
 export type PaseoConfig = z.infer<typeof PaseoConfigSchema>;
 export type PaseoConfigRevision = z.infer<typeof PaseoConfigRevisionSchema>;

package/dist/paseo-config-schema.js

@@ -1,4 +1,22 @@
 import { z } from "zod";
+const TCP_PORT_RANGE_PATTERN = /^(\d{1,5})-(\d{1,5})$/;
+export const PaseoServicePortAllocationSchema = z
+    .object({
+    range: z.string().trim().regex(TCP_PORT_RANGE_PATTERN).optional(),
+    portScript: z.string().trim().min(1).optional(),
+})
+    .strict()
+    .refine((value) => value.range !== undefined || value.portScript !== undefined, "Expected range or portScript")
+    .refine((value) => {
+    if (!value.range)
+        return true;
+    const match = TCP_PORT_RANGE_PATTERN.exec(value.range);
+    if (!match)
+        return false;
+    const start = Number(match[1]);
+    const end = Number(match[2]);
+    return start >= 1 && end <= 65535 && start <= end;
+}, "Expected an inclusive TCP port range from 1-65535");
 export function normalizeLifecycleCommands(commands) {
     if (typeof commands === "string") {
         return commands.trim().length > 0 ? [commands] : [];
@@ -23,6 +41,7 @@ export const PaseoWorktreeConfigRawSchema = z
     setup: PaseoLifecycleCommandRawSchema.optional(),
     teardown: PaseoLifecycleCommandRawSchema.optional(),
     terminals: z.unknown().optional(),
+    servicePorts: PaseoServicePortAllocationSchema.optional(),
 })
     .passthrough();
 export const PaseoMetadataGenerationEntrySchema = z

package/dist/provider-manifest.js

@@ -110,6 +110,13 @@ export const OMP_MODES = [
         colorTier: "dangerous",
         isUnattended: true,
     },
+    {
+        id: "write",
+        label: "Write Approval",
+        description: "Launches OMP with write approval mode — reads are free, writes require approval.",
+        icon: "ShieldAlert",
+        colorTier: "moderate",
+    },
     {
         id: "ask",
         label: "Always Ask",
@@ -141,7 +148,7 @@ export const AGENT_PROVIDER_DEFINITIONS = [
         id: "claude",
         label: "Claude",
         description: "Anthropic's multi-tool assistant with MCP support, streaming, and deep reasoning",
-        defaultModeId: "default",
+        defaultModeId: "auto",
         modes: CLAUDE_MODES,
         voice: {
             enabled: true,
@@ -153,7 +160,7 @@ export const AGENT_PROVIDER_DEFINITIONS = [
         id: "codex",
         label: "Codex",
         description: "OpenAI's Codex workspace agent with sandbox controls and optional network access",
-        defaultModeId: "auto",
+        defaultModeId: "auto-review",
         modes: CODEX_MODES,
         voice: {
             enabled: true,

package/dist/schedule/cadence.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Convert an exact rolling interval to an equivalent five-field cron cadence.
+ * Returns null when cron's calendar boundaries would change the interval.
+ */
+export declare function everyMsToFiveFieldCron(everyMs: number): string | null;
+//# sourceMappingURL=cadence.d.ts.map

package/dist/schedule/cadence.js

@@ -0,0 +1,28 @@
+/**
+ * Convert an exact rolling interval to an equivalent five-field cron cadence.
+ * Returns null when cron's calendar boundaries would change the interval.
+ */
+export function everyMsToFiveFieldCron(everyMs) {
+    const minutes = everyMs / 60000;
+    if (!Number.isInteger(minutes) || minutes <= 0) {
+        return null;
+    }
+    if (minutes < 60 && 60 % minutes === 0) {
+        return `*/${minutes} * * * *`;
+    }
+    if (minutes === 60) {
+        return "0 * * * *";
+    }
+    if (minutes % 60 !== 0) {
+        return null;
+    }
+    const hours = minutes / 60;
+    if (hours < 24 && 24 % hours === 0) {
+        return `0 */${hours} * * *`;
+    }
+    if (hours === 24) {
+        return "0 0 * * *";
+    }
+    return null;
+}
+//# sourceMappingURL=cadence.js.map