@kky42/pievo-server 2.4.14 → 3.0.0

package/.output/server/drizzle/meta/_journal.json

@@ -5,30 +5,9 @@
     {
       "idx": 0,
       "version": "7",
-      "when": 1785146849042,
+      "when": 1792651729223,
       "tag": "0000_baseline",
       "breakpoints": true
-    },
-    {
-      "idx": 1,
-      "version": "7",
-      "when": 1785146849043,
-      "tag": "0001_add_pi_agent",
-      "breakpoints": true
-    },
-    {
-      "idx": 2,
-      "version": "7",
-      "when": 1785146849044,
-      "tag": "0002_remove_teams",
-      "breakpoints": true
-    },
-    {
-      "idx": 3,
-      "version": "7",
-      "when": 1786301181156,
-      "tag": "0003_add_loop_tags",
-      "breakpoints": true
     }
   ]
-}
+}

package/.output/server/index.mjs

@@ -11,80 +11,73 @@ var headers = ((m) => function headersRouteRule(event) {
 //#endregion
 //#region #nitro/virtual/public-assets-data
 var public_assets_data_default = {
+	"/assets/actionUi-BZrLpgHT.js": {
+		"type": "text/javascript; charset=utf-8",
+		"etag": "\"4286-Qit0x3bDDnN7vmOhgEqWGOFur4I\"",
+		"mtime": "2026-10-22T07:10:25.845Z",
+		"size": 17030,
+		"path": "../public/assets/actionUi-BZrLpgHT.js"
+	},
+	"/assets/app-DXLuQNb9.css": {
+		"type": "text/css; charset=utf-8",
+		"etag": "\"982e-ISvSlt1vwctZ1Z6CMWC173FpzQY\"",
+		"mtime": "2026-10-22T07:10:25.845Z",
+		"size": 38958,
+		"path": "../public/assets/app-DXLuQNb9.css"
+	},
 	"/favicon.svg": {
 		"type": "image/svg+xml",
 		"etag": "\"2f9-diQHMODwkdsIQ2ssl9fzDaFKaXE\"",
-		"mtime": "2026-08-10T01:06:28.350Z",
+		"mtime": "2026-10-22T07:10:26.305Z",
 		"size": 761,
 		"path": "../public/favicon.svg"
 	},
-	"/assets/SignIn-CIFwnZtF.js": {
-		"type": "text/javascript; charset=utf-8",
-		"etag": "\"40c-2rs0DSexiNCb72JsSSpXd0NasjQ\"",
-		"mtime": "2026-08-10T01:06:27.499Z",
-		"size": 1036,
-		"path": "../public/assets/SignIn-CIFwnZtF.js"
-	},
-	"/assets/actionUi-5PtES4q0.js": {
+	"/assets/loops._loopId_.runs._runId-ByU2BSyF.js": {
 		"type": "text/javascript; charset=utf-8",
-		"etag": "\"4291-Qip7gU3oZ0DhRdO+agF1M/wjQdk\"",
-		"mtime": "2026-08-10T01:06:27.499Z",
-		"size": 17041,
-		"path": "../public/assets/actionUi-5PtES4q0.js"
-	},
-	"/assets/app-DvHMhs7S.css": {
-		"type": "text/css; charset=utf-8",
-		"etag": "\"9b16-2OiJVtJYlZqGnZ1zxya8M2r8dwo\"",
-		"mtime": "2026-08-10T01:06:27.500Z",
-		"size": 39702,
-		"path": "../public/assets/app-DvHMhs7S.css"
+		"etag": "\"329d-FjaefYK56yjpjbOEISrMQmnn39E\"",
+		"mtime": "2026-10-22T07:10:25.845Z",
+		"size": 12957,
+		"path": "../public/assets/loops._loopId_.runs._runId-ByU2BSyF.js"
 	},
-	"/assets/loops._loopId-BsuV-Rmf.js": {
+	"/assets/preload-helper-hRTYB_ju.js": {
 		"type": "text/javascript; charset=utf-8",
-		"etag": "\"1764c-nikBeaC2+r4UoKv9zhAqMGPFxGc\"",
-		"mtime": "2026-08-10T01:06:27.499Z",
-		"size": 95820,
-		"path": "../public/assets/loops._loopId-BsuV-Rmf.js"
+		"etag": "\"11674-LVTbrEq23Rxhef/ahfiBpq1pgSo\"",
+		"mtime": "2026-10-22T07:10:25.845Z",
+		"size": 71284,
+		"path": "../public/assets/preload-helper-hRTYB_ju.js"
 	},
-	"/assets/loops._loopId_.runs._runId-DpK_fzmZ.js": {
+	"/assets/index-Di_wpAtL.js": {
 		"type": "text/javascript; charset=utf-8",
-		"etag": "\"33f3-kdFmoz9qUQuwLYEywD9Ly5ZD6iE\"",
-		"mtime": "2026-08-10T01:06:27.499Z",
-		"size": 13299,
-		"path": "../public/assets/loops._loopId_.runs._runId-DpK_fzmZ.js"
+		"etag": "\"5e2fa-fuWeczqLYxjWaK1uhVFAhHesD/M\"",
+		"mtime": "2026-10-22T07:10:25.844Z",
+		"size": 385786,
+		"path": "../public/assets/index-Di_wpAtL.js"
 	},
-	"/assets/index-CRX2pu0W.js": {
+	"/assets/loops._loopId-X3ClNPMY.js": {
 		"type": "text/javascript; charset=utf-8",
-		"etag": "\"5def1-sVvbabEyPmXuKmSaK1pWDF1HSPg\"",
-		"mtime": "2026-08-10T01:06:27.499Z",
-		"size": 384753,
-		"path": "../public/assets/index-CRX2pu0W.js"
+		"etag": "\"1749a-wvaPKbjZ5o8Gbh6hWtl3zld70zs\"",
+		"mtime": "2026-10-22T07:10:25.845Z",
+		"size": 95386,
+		"path": "../public/assets/loops._loopId-X3ClNPMY.js"
 	},
-	"/assets/routes-Dm_3J2aV.js": {
+	"/assets/routes-BIOJZsig.js": {
 		"type": "text/javascript; charset=utf-8",
-		"etag": "\"135-m+5pzcK0mToJrOEQv+dqjYiJYEs\"",
-		"mtime": "2026-08-10T01:06:27.500Z",
+		"etag": "\"135-XoZP43FtQXsg+qNy3Rq8mg5WHbw\"",
+		"mtime": "2026-10-22T07:10:25.845Z",
 		"size": 309,
-		"path": "../public/assets/routes-Dm_3J2aV.js"
-	},
-	"/assets/routes-DxF_s3cD.js": {
-		"type": "text/javascript; charset=utf-8",
-		"etag": "\"1f4-3t0cgqrPmuajC0RY2kyeo64RxDQ\"",
-		"mtime": "2026-08-10T01:06:27.500Z",
-		"size": 500,
-		"path": "../public/assets/routes-DxF_s3cD.js"
+		"path": "../public/assets/routes-BIOJZsig.js"
 	},
-	"/assets/preload-helper-sAZOZb3G.js": {
+	"/assets/routes-K8D5uBiV.js": {
 		"type": "text/javascript; charset=utf-8",
-		"etag": "\"18d18-g49yLMFDSKWfjoY0LWsdw76xYUU\"",
-		"mtime": "2026-08-10T01:06:27.499Z",
-		"size": 101656,
-		"path": "../public/assets/preload-helper-sAZOZb3G.js"
+		"etag": "\"b7-hAMu5A8ozNBh8/2rgmiGEhnAvIs\"",
+		"mtime": "2026-10-22T07:10:25.845Z",
+		"size": 183,
+		"path": "../public/assets/routes-K8D5uBiV.js"
 	},
 	"/fonts/GeistPixel-Square.woff2": {
 		"type": "font/woff2",
 		"etag": "\"6f7c-IQXyklzDeInO8O/YtOs5/0tckOE\"",
-		"mtime": "2026-08-10T01:06:28.350Z",
+		"mtime": "2026-10-22T07:10:26.305Z",
 		"size": 28540,
 		"path": "../public/fonts/GeistPixel-Square.woff2"
 	}

package/drizzle/0000_baseline.sql

@@ -18,17 +18,14 @@ CREATE TABLE "blobs" (
 --> statement-breakpoint
 CREATE TABLE "connect_keys" (
 	"machine_id" text PRIMARY KEY NOT NULL,
-	"user_id" text NOT NULL,
-	"team_id" text NOT NULL,
 	"minted_at" text NOT NULL
 );
 --> statement-breakpoint
 CREATE TABLE "loops" (
 	"id" text PRIMARY KEY NOT NULL,
-	"user_id" text NOT NULL,
-	"team_id" text NOT NULL,
 	"machine_id" text NOT NULL,
 	"name" text NOT NULL,
+	"tags" text[] DEFAULT ARRAY[]::text[] NOT NULL,
 	"prompt" text NOT NULL,
 	"status_keep" text NOT NULL,
 	"status_no_change" text NOT NULL,
@@ -51,15 +48,15 @@ CREATE TABLE "loops" (
 	"last_run_index" integer DEFAULT 0 NOT NULL,
 	"created_at" text NOT NULL,
 	"updated_at" text NOT NULL,
-	CONSTRAINT "loops_agent_check" CHECK ("loops"."agent" IN ('claude-code', 'codex')),
+	CONSTRAINT "loops_agent_check" CHECK ("loops"."agent" IN ('claude-code', 'codex', 'pi')),
+	CONSTRAINT "loops_tags_count_check" CHECK (cardinality("loops"."tags") <= 4),
+	CONSTRAINT "loops_tags_reserved_check" CHECK (NOT ("loops"."tags" && ARRAY['all loops', 'active', 'paused', 'blocked']::text[])),
 	CONSTRAINT "loops_schedule_mode_check" CHECK ("loops"."schedule_mode" IN ('cron', 'continuous')),
 	CONSTRAINT "loops_cron_overlap_check" CHECK ("loops"."cron_overlap" IN ('skip', 'queue-one'))
 );
 --> statement-breakpoint
 CREATE TABLE "machines" (
 	"id" text PRIMARY KEY NOT NULL,
-	"user_id" text NOT NULL,
-	"team_id" text NOT NULL,
 	"name" text NOT NULL,
 	"hostname" text,
 	"platform" text,
@@ -125,40 +122,12 @@ CREATE TABLE "runs" (
 	"cancel_requested_at" timestamp with time zone,
 	"heartbeat_at" text,
 	"report_incident" jsonb,
-	CONSTRAINT "runs_agent_check" CHECK ("runs"."agent" IS NULL OR "runs"."agent" IN ('claude-code', 'codex')),
+	CONSTRAINT "runs_agent_check" CHECK ("runs"."agent" IS NULL OR "runs"."agent" IN ('claude-code', 'codex', 'pi')),
 	CONSTRAINT "runs_phase_check" CHECK ("runs"."phase" IN ('pending', 'running', 'done', 'error', 'canceled')),
 	CONSTRAINT "runs_requested_by_check" CHECK ("runs"."requested_by" IN ('owner', 'system')),
 	CONSTRAINT "runs_status_check" CHECK ("runs"."status" IS NULL OR "runs"."status" IN ('keep', 'no-change', 'block'))
 );
 --> statement-breakpoint
-CREATE TABLE "team_invites" (
-	"token" text PRIMARY KEY NOT NULL,
-	"team_id" text NOT NULL,
-	"role" text DEFAULT 'member' NOT NULL,
-	"invited_by_user_id" text NOT NULL,
-	"expires_at" text NOT NULL,
-	"redeemed_at" text,
-	"redeemed_by_user_id" text,
-	"created_at" text NOT NULL,
-	CONSTRAINT "team_invites_role_check" CHECK ("team_invites"."role" IN ('owner', 'member'))
-);
---> statement-breakpoint
-CREATE TABLE "team_members" (
-	"id" text PRIMARY KEY NOT NULL,
-	"team_id" text NOT NULL,
-	"user_id" text NOT NULL,
-	"role" text DEFAULT 'member' NOT NULL,
-	"created_at" text NOT NULL,
-	CONSTRAINT "team_members_role_check" CHECK ("team_members"."role" IN ('owner', 'member'))
-);
---> statement-breakpoint
-CREATE TABLE "teams" (
-	"id" text PRIMARY KEY NOT NULL,
-	"name" text NOT NULL,
-	"owner_user_id" text,
-	"created_at" text NOT NULL
-);
---> statement-breakpoint
 CREATE TABLE "terminal_report_incidents" (
 	"id" text PRIMARY KEY NOT NULL,
 	"run_id" text NOT NULL,
@@ -170,65 +139,11 @@ CREATE TABLE "terminal_report_incidents" (
 	CONSTRAINT "terminal_report_incidents_disposition_check" CHECK ("terminal_report_incidents"."disposition" IN ('run-error', 'telemetry-rejected'))
 );
 --> statement-breakpoint
-CREATE TABLE "account" (
-	"id" text PRIMARY KEY NOT NULL,
-	"account_id" text NOT NULL,
-	"provider_id" text NOT NULL,
-	"user_id" text NOT NULL,
-	"access_token" text,
-	"refresh_token" text,
-	"id_token" text,
-	"access_token_expires_at" timestamp,
-	"refresh_token_expires_at" timestamp,
-	"scope" text,
-	"password" text,
-	"created_at" timestamp DEFAULT now() NOT NULL,
-	"updated_at" timestamp NOT NULL
-);
---> statement-breakpoint
-CREATE TABLE "session" (
-	"id" text PRIMARY KEY NOT NULL,
-	"expires_at" timestamp NOT NULL,
-	"token" text NOT NULL,
-	"created_at" timestamp DEFAULT now() NOT NULL,
-	"updated_at" timestamp NOT NULL,
-	"ip_address" text,
-	"user_agent" text,
-	"user_id" text NOT NULL,
-	CONSTRAINT "session_token_unique" UNIQUE("token")
-);
---> statement-breakpoint
-CREATE TABLE "user" (
-	"id" text PRIMARY KEY NOT NULL,
-	"name" text NOT NULL,
-	"email" text NOT NULL,
-	"email_verified" boolean DEFAULT false NOT NULL,
-	"image" text,
-	"created_at" timestamp DEFAULT now() NOT NULL,
-	"updated_at" timestamp DEFAULT now() NOT NULL,
-	CONSTRAINT "user_email_unique" UNIQUE("email")
-);
---> statement-breakpoint
-CREATE TABLE "verification" (
-	"id" text PRIMARY KEY NOT NULL,
-	"identifier" text NOT NULL,
-	"value" text NOT NULL,
-	"expires_at" timestamp NOT NULL,
-	"created_at" timestamp DEFAULT now() NOT NULL,
-	"updated_at" timestamp DEFAULT now() NOT NULL
-);
---> statement-breakpoint
-ALTER TABLE "account" ADD CONSTRAINT "account_user_id_user_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."user"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "session" ADD CONSTRAINT "session_user_id_user_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."user"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
 CREATE INDEX "artifact_files_loop_idx" ON "artifact_files" USING btree ("loop_id");--> statement-breakpoint
 CREATE UNIQUE INDEX "artifact_files_loop_path_idx" ON "artifact_files" USING btree ("loop_id","path");--> statement-breakpoint
 CREATE INDEX "artifact_files_hash_idx" ON "artifact_files" USING btree ("hash");--> statement-breakpoint
-CREATE INDEX "loops_user_idx" ON "loops" USING btree ("user_id");--> statement-breakpoint
-CREATE INDEX "loops_team_idx" ON "loops" USING btree ("team_id");--> statement-breakpoint
 CREATE INDEX "loops_machine_idx" ON "loops" USING btree ("machine_id");--> statement-breakpoint
 CREATE INDEX "delete_requested_loops" ON "loops" USING btree ("delete_requested_at") WHERE "loops"."delete_requested_at" IS NOT NULL;--> statement-breakpoint
-CREATE INDEX "machines_user_idx" ON "machines" USING btree ("user_id");--> statement-breakpoint
-CREATE INDEX "machines_team_idx" ON "machines" USING btree ("team_id");--> statement-breakpoint
 CREATE INDEX "run_leases_run_idx" ON "run_leases" USING btree ("run_id");--> statement-breakpoint
 CREATE INDEX "run_leases_loop_idx" ON "run_leases" USING btree ("loop_id");--> statement-breakpoint
 CREATE INDEX "report_receipts_created" ON "run_report_receipts" USING btree ("created_at");--> statement-breakpoint
@@ -241,11 +156,5 @@ CREATE UNIQUE INDEX "runs_loop_run_index_idx" ON "runs" USING btree ("loop_id","
 CREATE INDEX "runs_loop_terminal_history_idx" ON "runs" USING btree ("loop_id","run_index") WHERE "runs"."run_index" IS NOT NULL AND "runs"."phase" IN ('done', 'error', 'canceled');--> statement-breakpoint
 CREATE UNIQUE INDEX "runs_loop_pending_idx" ON "runs" USING btree ("loop_id") WHERE "runs"."phase" = 'pending';--> statement-breakpoint
 CREATE UNIQUE INDEX "one_running_run_per_loop" ON "runs" USING btree ("loop_id") WHERE "runs"."phase" = 'running';--> statement-breakpoint
-CREATE INDEX "team_invites_team_idx" ON "team_invites" USING btree ("team_id");--> statement-breakpoint
-CREATE INDEX "team_members_team_idx" ON "team_members" USING btree ("team_id");--> statement-breakpoint
-CREATE INDEX "team_members_user_idx" ON "team_members" USING btree ("user_id");--> statement-breakpoint
 CREATE INDEX "terminal_report_incidents_report_id" ON "terminal_report_incidents" USING btree ("report_id");--> statement-breakpoint
-CREATE INDEX "terminal_report_incidents_created" ON "terminal_report_incidents" USING btree ("created_at");--> statement-breakpoint
-CREATE INDEX "account_userId_idx" ON "account" USING btree ("user_id");--> statement-breakpoint
-CREATE INDEX "session_userId_idx" ON "session" USING btree ("user_id");--> statement-breakpoint
-CREATE INDEX "verification_identifier_idx" ON "verification" USING btree ("identifier");
+CREATE INDEX "terminal_report_incidents_created" ON "terminal_report_incidents" USING btree ("created_at");

package/drizzle/meta/_journal.json

@@ -5,30 +5,9 @@
     {
       "idx": 0,
       "version": "7",
-      "when": 1785146849042,
+      "when": 1792651729223,
       "tag": "0000_baseline",
       "breakpoints": true
-    },
-    {
-      "idx": 1,
-      "version": "7",
-      "when": 1785146849043,
-      "tag": "0001_add_pi_agent",
-      "breakpoints": true
-    },
-    {
-      "idx": 2,
-      "version": "7",
-      "when": 1785146849044,
-      "tag": "0002_remove_teams",
-      "breakpoints": true
-    },
-    {
-      "idx": 3,
-      "version": "7",
-      "when": 1786301181156,
-      "tag": "0003_add_loop_tags",
-      "breakpoints": true
     }
   ]
-}
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kky42/pievo-server",
-  "version": "2.4.14",
+  "version": "3.0.0",
   "license": "MIT",
   "repository": {
     "type": "git",
@@ -8,7 +8,7 @@
     "directory": "packages/server"
   },
   "type": "module",
-  "description": "Pievo server — a self-hostable zero-exec control plane for scheduled agent loops.",
+  "description": "Pievo server — the single-user dashboard and scheduler for Pievo loops. Usually run through `pievo server`.",
   "bin": {
     "pievo-server": "scripts/pievo-server.mjs"
   },
@@ -17,7 +17,7 @@
     "drizzle",
     "scripts/pievo-server.mjs",
     "scripts/server-cli-lib.mjs",
-    "scripts/prestart.mjs",
+    "scripts/server-network.mjs",
     "LICENSE"
   ],
   "publishConfig": {
@@ -30,28 +30,24 @@
     "dev": "vite dev",
     "build": "vite build && node scripts/copy-pglite-assets.mjs",
     "build:publish": "vite build && node scripts/copy-pglite-assets.mjs --strict",
-    "start": "node scripts/prestart.mjs && node .output/server/index.mjs",
+    "start": "node scripts/pievo-server.mjs start --foreground",
     "routes:generate": "tsr generate",
     "typecheck": "tsr generate && tsc --noEmit",
     "test": "node --test ../../scripts/dev-profile.test.mjs && vitest run",
     "db:generate": "drizzle-kit generate",
-    "db:migrate": "drizzle-kit migrate",
     "verify:package": "node scripts/verify-package.mjs",
     "prepublishOnly": "pnpm build:publish"
   },
   "dependencies": {
-    "@aws-sdk/client-s3": "^3.1075.0",
     "@base-ui/react": "^1.6.0",
     "@electric-sql/pglite": "^0.5.4",
     "@tanstack/react-router": "^1.170.16",
     "@tanstack/react-start": "^1.168.26",
-    "better-auth": "^1.6.19",
     "croner": "^10.0.1",
     "diff": "^9.0.0",
     "dompurify": "^3.4.11",
     "drizzle-orm": "^0.45.2",
     "marked": "^18.0.5",
-    "postgres": "^3.4.9",
     "pino": "^10.3.1",
     "pino-pretty": "^13.1.3",
     "react": "^19.2.7",

package/scripts/pievo-server.mjs

@@ -24,6 +24,7 @@ import {
   withLaunchNonce,
   writePidRecord,
 } from "./server-cli-lib.mjs";
+import { currentHttpsUrl, disableHttps, enableHttps, reachableUrls, tailscaleInfo } from "./server-network.mjs";
 
 const scriptFile = fileURLToPath(import.meta.url);
 const packageRoot = path.resolve(path.dirname(scriptFile), "..");
@@ -37,7 +38,6 @@ const LOCK_HANDOFF_TIMEOUT_MS = 5_000;
 function installShutdown(plan, expected) {
   let stopping = false;
   let stopSignal;
-  let prestartChild;
   let nitroLoaded = false;
   let replayedForNitro = false;
 
@@ -55,9 +55,6 @@ function installShutdown(plan, expected) {
       stopSignal = signal;
       console.log(`[pievo-server] received ${signal}; shutting down`);
       shutdownApplication();
-      if (prestartChild?.exitCode === null && prestartChild?.signalCode === null) {
-        try { prestartChild.kill(signal); } catch {}
-      }
     }
   };
 
@@ -69,8 +66,6 @@ function installShutdown(plan, expected) {
 
   return {
     get stopping() { return stopping; },
-    trackPrestart(child) { prestartChild = child; },
-    clearPrestart(child) { if (prestartChild === child) prestartChild = undefined; },
     nitroLoaded() {
       nitroLoaded = true;
       // If the first signal arrived while Nitro was importing, its graceful HTTP
@@ -94,25 +89,32 @@ function installShutdown(plan, expected) {
   };
 }
 
-async function runPrestart(plan, shutdown) {
-  const child = spawn(process.execPath, [path.join(packageRoot, "scripts", "prestart.mjs")], {
-    cwd: packageRoot,
-    env: plan.env,
-    stdio: "inherit",
-  });
-  shutdown.trackPrestart(child);
-  try {
-    const result = await new Promise((resolve, reject) => {
-      child.once("error", reject);
-      child.once("exit", (code, signal) => resolve({ code, signal }));
-    });
-    if (shutdown.stopping) throw new Error("startup interrupted by shutdown signal");
-    if (result.code !== 0) {
-      throw new Error(`migration prestart failed (${result.signal ? `signal ${result.signal}` : `exit ${result.code ?? "unknown"}`})`);
-    }
-  } finally {
-    shutdown.clearPrestart(child);
+/** Publish Tailscale HTTPS (when enabled) and pass the best connect URL to the server. */
+function publishNetwork(plan) {
+  const tailscale = tailscaleInfo();
+  let https;
+  let httpsNote;
+  if (plan.https && tailscale) {
+    const result = enableHttps(tailscale, plan.port);
+    if (result.ok) https = result.url;
+    else httpsNote = result.reason;
   }
+  const urls = reachableUrls({ host: plan.host, port: plan.port, https, tailscale });
+  return { urls, httpsNote, plan: { ...plan, env: { ...plan.env, PIEVO_PUBLIC_URL: urls.connect } } };
+}
+
+function retractHttps(record) {
+  if (record?.https === false) return;
+  const tailscale = tailscaleInfo();
+  if (tailscale) disableHttps(tailscale, record.port);
+}
+
+function printUrls(urls, httpsNote) {
+  console.log(`  local      ${urls.local}`);
+  if (urls.lan.length) console.log(`  lan        ${urls.lan.join("   ")}`);
+  if (urls.tailscale.length) console.log(`  tailscale  ${urls.tailscale.join("   ")}`);
+  if (urls.https) console.log(`  https      ${urls.https}`);
+  if (httpsNote) console.log(`  https      unavailable: ${httpsNote}`);
 }
 
 async function waitForPidAuthority(plan, expected, shutdown) {
@@ -127,7 +129,7 @@ async function waitForPidAuthority(plan, expected, shutdown) {
 
 async function serve(plan, expected) {
   // Signal handling comes first: startup remains controllable while waiting for
-  // the parent record and while the async migration child is running.
+  // the parent record.
   const shutdown = installShutdown(plan, expected);
   if (!(await waitForPidAuthority(plan, expected, shutdown))) {
     throw new Error("launcher did not establish pid authority before startup");
@@ -139,15 +141,6 @@ async function serve(plan, expected) {
     throw new Error("pid authority changed before startup");
   }
 
-  await runPrestart(plan, shutdown);
-  if (shutdown.stopping) return;
-  const afterPrestart = readPidRecord(plan.pidFile);
-  if (afterPrestart?.pid !== expected.pid
-    || afterPrestart.startTime !== expected.startTime
-    || afterPrestart.launchNonce !== expected.launchNonce) {
-    throw new Error("pid authority changed during migration prestart");
-  }
-
   try {
     await import(pathToFileURL(path.join(packageRoot, ".output", "server", "index.mjs")).href);
     shutdown.nitroLoaded();
@@ -160,7 +153,7 @@ async function serve(plan, expected) {
     if (shutdown.stopping) return;
     if (!ready) throw new Error(`server did not become ready at ${plan.readyUrl}`);
     updatePidRecordState(plan, expected, "running");
-    console.log(`[pievo-server] ready at http://${plan.host}:${plan.port} (pid ${process.pid})`);
+    console.log(`[pievo-server] ready on ${plan.host}:${plan.port} (pid ${process.pid})`);
   } catch (error) {
     // Once Nitro may own a listening socket, ask its srvx signal handler to drain
     // HTTP rather than forcing process.exit from our application handler.
@@ -196,6 +189,7 @@ async function waitForDetachedReady(plan, expected) {
 }
 
 async function cleanFailedLaunch(plan, expected) {
+  retractHttps(expected);
   const state = recordedProcessState(expected);
   if (state.state === "gone") {
     clearPidRecord(plan.pidFile, expected);
@@ -212,7 +206,7 @@ async function cleanFailedLaunch(plan, expected) {
 async function start(basePlan, foreground) {
   const existing = pidStatus(basePlan.pidFile);
   if (existing.state === "running") {
-    console.log(`pievo-server is already ${existing.record.state === "starting" ? "starting" : "running"} (pid ${existing.record.pid}, http://${existing.record.host}:${existing.record.port})`);
+    console.log(`pievo server is already ${existing.record.state === "starting" ? "starting" : "running"} (pid ${existing.record.pid}); run \`pievo server status\` for its URLs`);
     return;
   }
   if (existing.state === "unsafe") throw new Error(`${existing.error}; refusing to start over the existing pid record`);
@@ -221,13 +215,15 @@ async function start(basePlan, foreground) {
   try {
     const raced = pidStatus(basePlan.pidFile);
     if (raced.state === "running") {
-      console.log(`pievo-server is already ${raced.record.state === "starting" ? "starting" : "running"} (pid ${raced.record.pid})`);
+      console.log(`pievo server is already ${raced.record.state === "starting" ? "starting" : "running"} (pid ${raced.record.pid})`);
       return;
     }
     if (raced.state === "unsafe") throw new Error(`${raced.error}; refusing to start over the existing pid record`);
 
-    const plan = withLaunchNonce(basePlan);
+    const published = publishNetwork(basePlan);
+    const plan = withLaunchNonce(published.plan);
     if (foreground) {
+      printUrls(published.urls, published.httpsNote);
       applyProcessEnv(plan.env);
       const record = writePidRecord(plan, {
         launchNonce: plan.launchNonce,
@@ -274,8 +270,9 @@ async function start(basePlan, foreground) {
       }
       throw error;
     }
-    console.log(`pievo-server started (pid ${child.pid}, http://${plan.host}:${plan.port})`);
-    console.log(`log: ${plan.logFile}`);
+    console.log(`pievo server started (pid ${child.pid})`);
+    printUrls(published.urls, published.httpsNote);
+    console.log(`  log        ${plan.logFile}`);
   } finally {
     release();
   }
@@ -319,8 +316,10 @@ async function stop(plan) {
       clearPidRecord(plan.pidFile, stoppedRecord);
     }
 
-    if (stoppedRecord) console.log(`pievo-server stopped (pid ${stoppedRecord.pid})`);
-    else console.log("pievo-server is not running");
+    if (stoppedRecord) {
+      retractHttps(stoppedRecord);
+      console.log(`pievo server stopped (pid ${stoppedRecord.pid})`);
+    } else console.log("pievo server is not running");
   } finally {
     release?.();
   }
@@ -329,17 +328,20 @@ async function stop(plan) {
 function status(plan) {
   const current = pidStatus(plan.pidFile);
   if (current.state === "running") {
-    console.log(`pievo-server is ${current.record.state === "starting" ? "starting" : "running"} (pid ${current.record.pid})`);
-    console.log(`url: http://${current.record.host}:${current.record.port}`);
-    console.log(`data: ${plan.dataDir}`);
+    const { host, port } = current.record;
+    const tailscale = tailscaleInfo();
+    const https = tailscale ? currentHttpsUrl(tailscale, port) : undefined;
+    console.log(`pievo server is ${current.record.state === "starting" ? "starting" : "running"} (pid ${current.record.pid})`);
+    printUrls(reachableUrls({ host, port, https, tailscale }));
+    console.log(`  data       ${plan.dataDir}`);
     return 0;
   }
   if (current.state === "unsafe") {
     const pid = current.record?.pid ? ` (pid ${current.record.pid})` : "";
-    console.error(`pievo-server status is unsafe: ${current.error}${pid}`);
+    console.error(`pievo server status is unsafe: ${current.error}${pid}`);
     return 1;
   }
-  console.log(`pievo-server is stopped${current.stale ? " (cleared stale pid file)" : ""}`);
+  console.log(`pievo server is stopped${current.stale ? " (cleared stale pid file)" : ""}`);
   return 1;
 }