@getpaseo/server 0.1.88 → 0.1.90

package/dist/server/server/loop-service.d.ts

@@ -2,6 +2,7 @@ import { z } from "zod";
 import type { Logger } from "pino";
 import type { AgentManager } from "./agent/agent-manager.js";
 import type { AgentProvider } from "./agent/agent-sdk-types.js";
+import type { ProviderSnapshotManager } from "./agent/provider-snapshot-manager.js";
 declare const LoopLogEntrySchema: z.ZodObject<{
     seq: z.ZodNumber;
     timestamp: z.ZodString;
@@ -10,16 +11,16 @@ declare const LoopLogEntrySchema: z.ZodObject<{
     level: z.ZodEnum<["info", "error"]>;
     text: z.ZodString;
 }, "strip", z.ZodTypeAny, {
+    text: string;
     level: "error" | "info";
     source: "worker" | "loop" | "verifier" | "verify-check";
-    text: string;
     timestamp: string;
     seq: number;
     iteration: number | null;
 }, {
+    text: string;
     level: "error" | "info";
     source: "worker" | "loop" | "verifier" | "verify-check";
-    text: string;
     timestamp: string;
     seq: number;
     iteration: number | null;
@@ -33,16 +34,16 @@ declare const LoopVerifyCheckResultSchema: z.ZodObject<{
     startedAt: z.ZodString;
     completedAt: z.ZodString;
 }, "strip", z.ZodTypeAny, {
-    command: string;
     exitCode: number;
+    command: string;
     stdout: string;
     stderr: string;
     startedAt: string;
     completedAt: string;
     passed: boolean;
 }, {
-    command: string;
     exitCode: number;
+    command: string;
     stdout: string;
     stderr: string;
     startedAt: string;
@@ -86,16 +87,16 @@ declare const LoopIterationRecordSchema: z.ZodObject<{
         startedAt: z.ZodString;
         completedAt: z.ZodString;
     }, "strip", z.ZodTypeAny, {
-        command: string;
         exitCode: number;
+        command: string;
         stdout: string;
         stderr: string;
         startedAt: string;
         completedAt: string;
         passed: boolean;
     }, {
-        command: string;
         exitCode: number;
+        command: string;
         stdout: string;
         stderr: string;
         startedAt: string;
@@ -131,8 +132,8 @@ declare const LoopIterationRecordSchema: z.ZodObject<{
     workerOutcome: "completed" | "failed" | "canceled" | null;
     failureReason: string | null;
     verifyChecks: {
-        command: string;
         exitCode: number;
+        command: string;
         stdout: string;
         stderr: string;
         startedAt: string;
@@ -156,8 +157,8 @@ declare const LoopIterationRecordSchema: z.ZodObject<{
     workerOutcome: "completed" | "failed" | "canceled" | null;
     failureReason: string | null;
     verifyChecks: {
-        command: string;
         exitCode: number;
+        command: string;
         stdout: string;
         stderr: string;
         startedAt: string;
@@ -215,16 +216,16 @@ declare const LoopRecordSchema: z.ZodObject<{
             startedAt: z.ZodString;
             completedAt: z.ZodString;
         }, "strip", z.ZodTypeAny, {
-            command: string;
             exitCode: number;
+            command: string;
             stdout: string;
             stderr: string;
             startedAt: string;
             completedAt: string;
             passed: boolean;
         }, {
-            command: string;
             exitCode: number;
+            command: string;
             stdout: string;
             stderr: string;
             startedAt: string;
@@ -260,8 +261,8 @@ declare const LoopRecordSchema: z.ZodObject<{
         workerOutcome: "completed" | "failed" | "canceled" | null;
         failureReason: string | null;
         verifyChecks: {
-            command: string;
             exitCode: number;
+            command: string;
             stdout: string;
             stderr: string;
             startedAt: string;
@@ -285,8 +286,8 @@ declare const LoopRecordSchema: z.ZodObject<{
         workerOutcome: "completed" | "failed" | "canceled" | null;
         failureReason: string | null;
         verifyChecks: {
-            command: string;
             exitCode: number;
+            command: string;
             stdout: string;
             stderr: string;
             startedAt: string;
@@ -309,16 +310,16 @@ declare const LoopRecordSchema: z.ZodObject<{
         level: z.ZodEnum<["info", "error"]>;
         text: z.ZodString;
     }, "strip", z.ZodTypeAny, {
+        text: string;
         level: "error" | "info";
         source: "worker" | "loop" | "verifier" | "verify-check";
-        text: string;
         timestamp: string;
         seq: number;
         iteration: number | null;
     }, {
+        text: string;
         level: "error" | "info";
         source: "worker" | "loop" | "verifier" | "verify-check";
-        text: string;
         timestamp: string;
         seq: number;
         iteration: number | null;
@@ -328,12 +329,12 @@ declare const LoopRecordSchema: z.ZodObject<{
     activeWorkerAgentId: z.ZodNullable<z.ZodString>;
     activeVerifierAgentId: z.ZodNullable<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
-    status: "running" | "failed" | "succeeded" | "stopped";
     cwd: string;
     name: string | null;
-    createdAt: string;
     id: string;
+    status: "running" | "failed" | "succeeded" | "stopped";
     provider: string;
+    createdAt: string;
     updatedAt: string;
     modeId: string | null;
     model: string | null;
@@ -350,8 +351,8 @@ declare const LoopRecordSchema: z.ZodObject<{
         workerOutcome: "completed" | "failed" | "canceled" | null;
         failureReason: string | null;
         verifyChecks: {
-            command: string;
             exitCode: number;
+            command: string;
             stdout: string;
             stderr: string;
             startedAt: string;
@@ -379,9 +380,9 @@ declare const LoopRecordSchema: z.ZodObject<{
     maxTimeMs: number | null;
     stopRequestedAt: string | null;
     logs: {
+        text: string;
         level: "error" | "info";
         source: "worker" | "loop" | "verifier" | "verify-check";
-        text: string;
         timestamp: string;
         seq: number;
         iteration: number | null;
@@ -391,12 +392,12 @@ declare const LoopRecordSchema: z.ZodObject<{
     activeWorkerAgentId: string | null;
     activeVerifierAgentId: string | null;
 }, {
-    status: "running" | "failed" | "succeeded" | "stopped";
     cwd: string;
     name: string | null;
-    createdAt: string;
     id: string;
+    status: "running" | "failed" | "succeeded" | "stopped";
     provider: string;
+    createdAt: string;
     updatedAt: string;
     model: string | null;
     startedAt: string;
@@ -412,8 +413,8 @@ declare const LoopRecordSchema: z.ZodObject<{
         workerOutcome: "completed" | "failed" | "canceled" | null;
         failureReason: string | null;
         verifyChecks: {
-            command: string;
             exitCode: number;
+            command: string;
             stdout: string;
             stderr: string;
             startedAt: string;
@@ -440,9 +441,9 @@ declare const LoopRecordSchema: z.ZodObject<{
     maxTimeMs: number | null;
     stopRequestedAt: string | null;
     logs: {
+        text: string;
         level: "error" | "info";
         source: "worker" | "loop" | "verifier" | "verify-check";
-        text: string;
         timestamp: string;
         seq: number;
         iteration: number | null;
@@ -493,6 +494,7 @@ export interface LoopLogsResult {
     entries: LoopLogEntry[];
     nextCursor: number;
 }
+type CreateConfigResolver = Pick<ProviderSnapshotManager, "resolveCreateConfig">;
 export declare class LoopService {
     private readonly options;
     private readonly storePath;
@@ -505,6 +507,7 @@ export declare class LoopService {
         paseoHome: string;
         agentManager: AgentManager;
         logger: Logger;
+        providerSnapshotManager: CreateConfigResolver;
     });
     initialize(): Promise<void>;
     runLoop(input: LoopRunOptions): Promise<LoopRecord>;
@@ -518,6 +521,7 @@ export declare class LoopService {
     private runVerification;
     private buildWorkerConfig;
     private buildVerifierConfig;
+    private resolveProviderCreateConfig;
     private resolveFinalText;
     private toPrompt;
     private finishLoop;

package/dist/server/server/loop-service.js

@@ -2,10 +2,10 @@ import { randomUUID } from "node:crypto";
 import { promises as fs } from "node:fs";
 import path from "node:path";
 import { z } from "zod";
+import { writeJsonFileAtomic } from "./atomic-file.js";
 import { curateAgentActivity } from "./agent/activity-curator.js";
 import { getStructuredAgentResponse } from "./agent/agent-response-loop.js";
 import { execCommand, platformShell } from "../utils/spawn.js";
-import { getUnattendedModeId } from "@getpaseo/protocol/provider-manifest";
 const LOOP_ID_LENGTH = 8;
 const DEFAULT_LOOP_PROVIDER = "claude";
 const MAX_VERIFY_OUTPUT_BYTES = 64 * 1024;
@@ -494,7 +494,7 @@ export class LoopService {
         await this.persist();
     }
     async runWorkerIteration(loop, iteration, signal) {
-        const agent = await this.options.agentManager.createAgent(this.buildWorkerConfig(loop, iteration));
+        const agent = await this.options.agentManager.createAgent(await this.buildWorkerConfig(loop, iteration));
         iteration.workerAgentId = agent.id;
         loop.activeWorkerAgentId = agent.id;
         loop.updatedAt = nowIso();
@@ -591,7 +591,7 @@ export class LoopService {
             return true;
         }
         const startedAt = nowIso();
-        const verifierAgent = await this.options.agentManager.createAgent(this.buildVerifierConfig(loop, iteration));
+        const verifierAgent = await this.options.agentManager.createAgent(await this.buildVerifierConfig(loop, iteration));
         iteration.verifierAgentId = verifierAgent.id;
         loop.activeVerifierAgentId = verifierAgent.id;
         loop.updatedAt = nowIso();
@@ -659,28 +659,47 @@ export class LoopService {
             }
         }
     }
-    buildWorkerConfig(loop, iteration) {
+    async buildWorkerConfig(loop, iteration) {
         const provider = loop.workerProvider ?? loop.provider;
+        const resolvedUnattendedConfig = loop.modeId
+            ? { modeId: loop.modeId, featureValues: undefined }
+            : await this.resolveProviderCreateConfig({ provider, cwd: loop.cwd });
         return {
             provider,
             cwd: loop.cwd,
             model: loop.workerModel ?? loop.model ?? undefined,
-            modeId: loop.modeId ?? getUnattendedModeId(provider),
+            modeId: resolvedUnattendedConfig.modeId,
+            featureValues: resolvedUnattendedConfig.featureValues,
             title: buildWorkerTitle(loop, iteration.index),
             internal: true,
         };
     }
-    buildVerifierConfig(loop, iteration) {
+    async buildVerifierConfig(loop, iteration) {
         const provider = loop.verifierProvider ?? loop.provider;
+        const explicitModeId = loop.verifierModeId ?? loop.modeId;
+        const resolvedUnattendedConfig = explicitModeId
+            ? { modeId: explicitModeId, featureValues: undefined }
+            : await this.resolveProviderCreateConfig({ provider, cwd: loop.cwd });
         return {
             provider,
             cwd: loop.cwd,
             model: loop.verifierModel ?? loop.model ?? undefined,
-            modeId: loop.verifierModeId ?? loop.modeId ?? getUnattendedModeId(provider),
+            modeId: resolvedUnattendedConfig.modeId,
+            featureValues: resolvedUnattendedConfig.featureValues,
             title: buildVerifierTitle(loop, iteration.index),
             internal: true,
         };
     }
+    resolveProviderCreateConfig(input) {
+        return this.options.providerSnapshotManager.resolveCreateConfig({
+            provider: input.provider,
+            cwd: input.cwd,
+            requestedMode: undefined,
+            featureValues: undefined,
+            parent: null,
+            unattended: true,
+        });
+    }
     resolveFinalText(timeline, finalText) {
         if (finalText.trim()) {
             return finalText;
@@ -739,9 +758,8 @@ export class LoopService {
     }
     async persist() {
         const nextPersist = this.persistQueue.then(async () => {
-            await fs.mkdir(path.dirname(this.storePath), { recursive: true });
             const records = Array.from(this.loops.values()).sort((left, right) => left.createdAt.localeCompare(right.createdAt));
-            await fs.writeFile(this.storePath, JSON.stringify(records, null, 2), "utf8");
+            await writeJsonFileAtomic(this.storePath, records);
             return;
         });
         this.persistQueue = nextPersist.catch(() => { });

package/dist/server/server/package-version.d.ts

@@ -7,11 +7,11 @@ export declare const packageJsonSchema: z.ZodObject<{
     name: z.ZodOptional<z.ZodString>;
     version: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
-    version?: string | undefined;
     name?: string | undefined;
-}, {
     version?: string | undefined;
+}, {
     name?: string | undefined;
+    version?: string | undefined;
 }>;
 export type PackageJson = z.infer<typeof packageJsonSchema>;
 export declare class PackageVersionResolutionError extends Error {

package/dist/server/server/paseo-worktree-archive-service.d.ts

@@ -6,6 +6,7 @@ import type { GitHubService } from "../services/github-service.js";
 import type { TerminalManager } from "../terminal/terminal-manager.js";
 export interface ArchivePaseoWorktreeDependencies {
     paseoHome?: string;
+    worktreesRoot?: string;
     github: GitHubService;
     workspaceGitService: Pick<WorkspaceGitService, "getSnapshot">;
     agentManager: Pick<AgentManager, "listAgents" | "archiveAgent" | "archiveSnapshot">;
@@ -33,6 +34,7 @@ export declare function archivePaseoWorktree(dependencies: ArchivePaseoWorktreeD
     targetPath: string;
     repoRoot: string | null;
     worktreesRoot?: string;
+    worktreesBaseRoot?: string;
     requestId: string;
 }): Promise<string[]>;
 export declare function killTerminalsUnderPath(dependencies: KillTerminalsUnderPathDependencies, rootPath: string): Promise<void>;

package/dist/server/server/paseo-worktree-archive-service.js

@@ -1,9 +1,10 @@
 import { normalizeWorkspaceId as normalizePersistedWorkspaceId } from "./workspace-registry-model.js";
-import { deletePaseoWorktree, resolvePaseoWorktreeRootForCwd } from "../utils/worktree.js";
+import { deletePaseoWorktree, resolvePaseoWorktreeRootForCwd, WorktreeTeardownError, } from "../utils/worktree.js";
 export async function archivePaseoWorktree(dependencies, options) {
     let targetPath = options.targetPath;
     const resolvedWorktree = await resolvePaseoWorktreeRootForCwd(targetPath, {
         paseoHome: dependencies.paseoHome,
+        worktreesRoot: options.worktreesBaseRoot ?? dependencies.worktreesRoot,
     });
     if (resolvedWorktree) {
         targetPath = resolvedWorktree.worktreePath;
@@ -50,13 +51,26 @@ export async function archivePaseoWorktree(dependencies, options) {
                 dependencies.sessionLogger?.warn({ err: result.reason, targetPath }, "Worktree archive teardown step failed; continuing");
             }
         }
-        await deletePaseoWorktree({
-            cwd: options.repoRoot,
-            worktreePath: targetPath,
-            worktreesRoot: options.worktreesRoot,
-            paseoHome: dependencies.paseoHome,
-        });
-        if (options.repoRoot) {
+        let teardownError = null;
+        try {
+            await deletePaseoWorktree({
+                cwd: options.repoRoot,
+                worktreePath: targetPath,
+                worktreesRoot: options.worktreesRoot,
+                paseoHome: dependencies.paseoHome,
+                worktreesBaseRoot: options.worktreesBaseRoot ?? dependencies.worktreesRoot,
+            });
+        }
+        catch (error) {
+            if (error instanceof WorktreeTeardownError) {
+                teardownError = error;
+                dependencies.sessionLogger?.warn({ err: error, targetPath }, "Worktree teardown failed during archive; archiving workspace record anyway");
+            }
+            else {
+                throw error;
+            }
+        }
+        if (!teardownError && options.repoRoot) {
             try {
                 await dependencies.workspaceGitService.getSnapshot(options.repoRoot, {
                     force: true,
@@ -75,9 +89,14 @@ export async function archivePaseoWorktree(dependencies, options) {
                 await dependencies.archiveWorkspaceRecord(workspaceId);
             }
             catch (error) {
-                dependencies.sessionLogger?.warn({ err: error, workspaceId }, "Failed to archive workspace record; worktree FS already removed");
+                dependencies.sessionLogger?.warn({ err: error, workspaceId }, teardownError
+                    ? "Failed to archive workspace record after teardown failed"
+                    : "Failed to archive workspace record; worktree FS already removed");
             }
         }));
+        if (teardownError) {
+            throw teardownError;
+        }
     }
     finally {
         dependencies.clearWorkspaceArchiving(affectedWorkspaceIdList);

package/dist/server/server/persisted-config.d.ts

@@ -46,6 +46,19 @@ export declare const PersistedConfigSchema: z.ZodObject<{
             useTls?: boolean | undefined;
             publicUseTls?: boolean | undefined;
         }>>;
+        serviceProxy: z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodOptional<z.ZodBoolean>;
+            listen: z.ZodOptional<z.ZodString>;
+            publicBaseUrl: z.ZodOptional<z.ZodString>;
+        }, "strict", z.ZodTypeAny, {
+            publicBaseUrl?: string | undefined;
+            enabled?: boolean | undefined;
+            listen?: string | undefined;
+        }, {
+            publicBaseUrl?: string | undefined;
+            enabled?: boolean | undefined;
+            listen?: string | undefined;
+        }>>;
         auth: z.ZodOptional<z.ZodObject<{
             password: z.ZodOptional<z.ZodString>;
         }, "strict", z.ZodTypeAny, {
@@ -76,6 +89,11 @@ export declare const PersistedConfigSchema: z.ZodObject<{
             useTls?: boolean | undefined;
             publicUseTls?: boolean | undefined;
         } | undefined;
+        serviceProxy?: {
+            publicBaseUrl?: string | undefined;
+            enabled?: boolean | undefined;
+            listen?: string | undefined;
+        } | undefined;
     }, {
         auth?: {
             password?: string | undefined;
@@ -99,6 +117,11 @@ export declare const PersistedConfigSchema: z.ZodObject<{
             useTls?: boolean | undefined;
             publicUseTls?: boolean | undefined;
         } | undefined;
+        serviceProxy?: {
+            publicBaseUrl?: string | undefined;
+            enabled?: boolean | undefined;
+            listen?: string | undefined;
+        } | undefined;
     }>, {
         auth?: {
             password?: string | undefined;
@@ -121,6 +144,11 @@ export declare const PersistedConfigSchema: z.ZodObject<{
             useTls?: boolean | undefined;
             publicUseTls?: boolean | undefined;
         } | undefined;
+        serviceProxy?: {
+            publicBaseUrl?: string | undefined;
+            enabled?: boolean | undefined;
+            listen?: string | undefined;
+        } | undefined;
     }, {
         auth?: {
             password?: string | undefined;
@@ -144,6 +172,11 @@ export declare const PersistedConfigSchema: z.ZodObject<{
             useTls?: boolean | undefined;
             publicUseTls?: boolean | undefined;
         } | undefined;
+        serviceProxy?: {
+            publicBaseUrl?: string | undefined;
+            enabled?: boolean | undefined;
+            listen?: string | undefined;
+        } | undefined;
     }>>;
     app: z.ZodOptional<z.ZodObject<{
         baseUrl: z.ZodOptional<z.ZodString>;
@@ -182,6 +215,13 @@ export declare const PersistedConfigSchema: z.ZodObject<{
             apiKey?: string | undefined;
         } | undefined;
     }>>;
+    worktrees: z.ZodOptional<z.ZodObject<{
+        root: z.ZodOptional<z.ZodString>;
+    }, "strict", z.ZodTypeAny, {
+        root?: string | undefined;
+    }, {
+        root?: string | undefined;
+    }>>;
     agents: z.ZodOptional<z.ZodObject<{
         providers: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodRecord<z.ZodString, z.ZodObject<{
             extends: z.ZodOptional<z.ZodString>;
@@ -793,7 +833,34 @@ export declare const PersistedConfigSchema: z.ZodObject<{
         format?: "json" | "pretty" | undefined;
     }>>;
 }, "strict", z.ZodTypeAny, {
-    version?: 1 | undefined;
+    daemon?: {
+        auth?: {
+            password?: string | undefined;
+        } | undefined;
+        mcp?: z.objectOutputType<{
+            enabled: z.ZodOptional<z.ZodBoolean>;
+            injectIntoAgents: z.ZodOptional<z.ZodBoolean>;
+        }, z.ZodTypeAny, "passthrough"> | undefined;
+        listen?: string | undefined;
+        hostnames?: true | string[] | undefined;
+        autoArchiveAfterMerge?: boolean | undefined;
+        appendSystemPrompt?: string | undefined;
+        cors?: {
+            allowedOrigins?: string[] | undefined;
+        } | undefined;
+        relay?: {
+            enabled?: boolean | undefined;
+            endpoint?: string | undefined;
+            publicEndpoint?: string | undefined;
+            useTls?: boolean | undefined;
+            publicUseTls?: boolean | undefined;
+        } | undefined;
+        serviceProxy?: {
+            publicBaseUrl?: string | undefined;
+            enabled?: boolean | undefined;
+            listen?: string | undefined;
+        } | undefined;
+    } | undefined;
     features?: {
         dictation?: {
             enabled?: boolean | undefined;
@@ -827,6 +894,10 @@ export declare const PersistedConfigSchema: z.ZodObject<{
             } | undefined;
         } | undefined;
     } | undefined;
+    version?: 1 | undefined;
+    worktrees?: {
+        root?: string | undefined;
+    } | undefined;
     log?: {
         level?: "error" | "fatal" | "warn" | "info" | "debug" | "trace" | undefined;
         console?: {
@@ -897,16 +968,18 @@ export declare const PersistedConfigSchema: z.ZodObject<{
             apiKey?: string | undefined;
         } | undefined;
     } | undefined;
+}, {
     daemon?: {
         auth?: {
             password?: string | undefined;
         } | undefined;
-        mcp?: z.objectOutputType<{
+        mcp?: z.objectInputType<{
             enabled: z.ZodOptional<z.ZodBoolean>;
             injectIntoAgents: z.ZodOptional<z.ZodBoolean>;
         }, z.ZodTypeAny, "passthrough"> | undefined;
         listen?: string | undefined;
         hostnames?: true | string[] | undefined;
+        allowedHosts?: true | string[] | undefined;
         autoArchiveAfterMerge?: boolean | undefined;
         appendSystemPrompt?: string | undefined;
         cors?: {
@@ -919,9 +992,12 @@ export declare const PersistedConfigSchema: z.ZodObject<{
             useTls?: boolean | undefined;
             publicUseTls?: boolean | undefined;
         } | undefined;
+        serviceProxy?: {
+            publicBaseUrl?: string | undefined;
+            enabled?: boolean | undefined;
+            listen?: string | undefined;
+        } | undefined;
     } | undefined;
-}, {
-    version?: 1 | undefined;
     features?: {
         dictation?: {
             enabled?: boolean | undefined;
@@ -955,6 +1031,10 @@ export declare const PersistedConfigSchema: z.ZodObject<{
             } | undefined;
         } | undefined;
     } | undefined;
+    version?: 1 | undefined;
+    worktrees?: {
+        root?: string | undefined;
+    } | undefined;
     log?: {
         level?: "error" | "fatal" | "warn" | "info" | "debug" | "trace" | undefined;
         console?: {
@@ -992,30 +1072,6 @@ export declare const PersistedConfigSchema: z.ZodObject<{
             apiKey?: string | undefined;
         } | undefined;
     } | undefined;
-    daemon?: {
-        auth?: {
-            password?: string | undefined;
-        } | undefined;
-        mcp?: z.objectInputType<{
-            enabled: z.ZodOptional<z.ZodBoolean>;
-            injectIntoAgents: z.ZodOptional<z.ZodBoolean>;
-        }, z.ZodTypeAny, "passthrough"> | undefined;
-        listen?: string | undefined;
-        hostnames?: true | string[] | undefined;
-        allowedHosts?: true | string[] | undefined;
-        autoArchiveAfterMerge?: boolean | undefined;
-        appendSystemPrompt?: string | undefined;
-        cors?: {
-            allowedOrigins?: string[] | undefined;
-        } | undefined;
-        relay?: {
-            enabled?: boolean | undefined;
-            endpoint?: string | undefined;
-            publicEndpoint?: string | undefined;
-            useTls?: boolean | undefined;
-            publicUseTls?: boolean | undefined;
-        } | undefined;
-    } | undefined;
 }>;
 type PersistedConfigSchemaOutput = z.infer<typeof PersistedConfigSchema>;
 export type PersistedConfig = Omit<PersistedConfigSchemaOutput, "agents"> & {

package/dist/server/server/persisted-config.js

@@ -2,7 +2,7 @@ import { existsSync, readFileSync } from "node:fs";
 import path from "node:path";
 import { z } from "zod";
 import { AgentProviderRuntimeSettingsMapSchema, migrateProviderSettings, ProviderOverridesSchema, } from "./agent/provider-launch-config.js";
-import { ensurePrivateFile, writePrivateFileSync } from "./private-files.js";
+import { ensurePrivateFile, writePrivateFileAtomicSync } from "./private-files.js";
 export const LogLevelSchema = z.enum(["trace", "debug", "info", "warn", "error", "fatal"]);
 export const LogFormatSchema = z.enum(["pretty", "json"]);
 const LogConfigSchema = z
@@ -49,6 +49,11 @@ const ProvidersSchema = z
     local: LocalSpeechProviderSchema.optional(),
 })
     .strict();
+const WorktreesConfigSchema = z
+    .object({
+    root: z.string().min(1).optional(),
+})
+    .strict();
 const BcryptHashSchema = z.string().regex(/^\$2[aby]\$\d{2}\$[./A-Za-z0-9]{53}$/, {
     message: "Expected a bcrypt hash",
 });
@@ -197,6 +202,17 @@ export const PersistedConfigSchema = z
         })
             .strict()
             .optional(),
+        serviceProxy: z
+            .object({
+            // COMPAT(serviceProxyEnabled): added 2026-06-02, remove after 2026-12-02.
+            // Parsed only to suppress optional public/listen layers for old configs;
+            // localhost service proxying remains always enabled.
+            enabled: z.boolean().optional(),
+            listen: z.string().optional(),
+            publicBaseUrl: z.string().url().optional(),
+        })
+            .strict()
+            .optional(),
         auth: DaemonAuthSchema.optional(),
     })
         .strict()
@@ -212,6 +228,7 @@ export const PersistedConfigSchema = z
         .strict()
         .optional(),
     providers: ProvidersSchema.optional(),
+    worktrees: WorktreesConfigSchema.optional(),
     agents: z
         .object({
         providers: z.preprocess(normalizeAgentProviders, ProviderOverridesSchema).optional(),
@@ -279,7 +296,7 @@ export function loadPersistedConfig(paseoHome, logger) {
     const configPath = getConfigPath(paseoHome);
     if (!existsSync(configPath)) {
         try {
-            writePrivateFileSync(configPath, JSON.stringify(DEFAULT_PERSISTED_CONFIG, null, 2) + "\n");
+            writePrivateFileAtomicSync(configPath, JSON.stringify(DEFAULT_PERSISTED_CONFIG, null, 2) + "\n");
             log?.info(`Initialized config file at ${configPath}`);
         }
         catch (err) {
@@ -330,7 +347,7 @@ export function savePersistedConfig(paseoHome, config, logger) {
         throw new Error(`[Config] Invalid config to save:\n${issues}`);
     }
     try {
-        writePrivateFileSync(configPath, JSON.stringify(result.data, null, 2) + "\n");
+        writePrivateFileAtomicSync(configPath, JSON.stringify(result.data, null, 2) + "\n");
         log?.info(`Saved to ${configPath}`);
     }
     catch (err) {