@kky42/pievo-server 2.4.14 → 4.1.0

package/drizzle/0000_baseline.sql

@@ -18,17 +18,14 @@ CREATE TABLE "blobs" (
 --> statement-breakpoint
 CREATE TABLE "connect_keys" (
 	"machine_id" text PRIMARY KEY NOT NULL,
-	"user_id" text NOT NULL,
-	"team_id" text NOT NULL,
 	"minted_at" text NOT NULL
 );
 --> statement-breakpoint
 CREATE TABLE "loops" (
 	"id" text PRIMARY KEY NOT NULL,
-	"user_id" text NOT NULL,
-	"team_id" text NOT NULL,
 	"machine_id" text NOT NULL,
 	"name" text NOT NULL,
+	"tags" text[] DEFAULT ARRAY[]::text[] NOT NULL,
 	"prompt" text NOT NULL,
 	"status_keep" text NOT NULL,
 	"status_no_change" text NOT NULL,
@@ -51,15 +48,15 @@ CREATE TABLE "loops" (
 	"last_run_index" integer DEFAULT 0 NOT NULL,
 	"created_at" text NOT NULL,
 	"updated_at" text NOT NULL,
-	CONSTRAINT "loops_agent_check" CHECK ("loops"."agent" IN ('claude-code', 'codex')),
+	CONSTRAINT "loops_agent_check" CHECK ("loops"."agent" IN ('claude-code', 'codex', 'pi')),
+	CONSTRAINT "loops_tags_count_check" CHECK (cardinality("loops"."tags") <= 4),
+	CONSTRAINT "loops_tags_reserved_check" CHECK (NOT ("loops"."tags" && ARRAY['all loops', 'active', 'paused', 'blocked']::text[])),
 	CONSTRAINT "loops_schedule_mode_check" CHECK ("loops"."schedule_mode" IN ('cron', 'continuous')),
 	CONSTRAINT "loops_cron_overlap_check" CHECK ("loops"."cron_overlap" IN ('skip', 'queue-one'))
 );
 --> statement-breakpoint
 CREATE TABLE "machines" (
 	"id" text PRIMARY KEY NOT NULL,
-	"user_id" text NOT NULL,
-	"team_id" text NOT NULL,
 	"name" text NOT NULL,
 	"hostname" text,
 	"platform" text,
@@ -125,40 +122,12 @@ CREATE TABLE "runs" (
 	"cancel_requested_at" timestamp with time zone,
 	"heartbeat_at" text,
 	"report_incident" jsonb,
-	CONSTRAINT "runs_agent_check" CHECK ("runs"."agent" IS NULL OR "runs"."agent" IN ('claude-code', 'codex')),
+	CONSTRAINT "runs_agent_check" CHECK ("runs"."agent" IS NULL OR "runs"."agent" IN ('claude-code', 'codex', 'pi')),
 	CONSTRAINT "runs_phase_check" CHECK ("runs"."phase" IN ('pending', 'running', 'done', 'error', 'canceled')),
 	CONSTRAINT "runs_requested_by_check" CHECK ("runs"."requested_by" IN ('owner', 'system')),
 	CONSTRAINT "runs_status_check" CHECK ("runs"."status" IS NULL OR "runs"."status" IN ('keep', 'no-change', 'block'))
 );
 --> statement-breakpoint
-CREATE TABLE "team_invites" (
-	"token" text PRIMARY KEY NOT NULL,
-	"team_id" text NOT NULL,
-	"role" text DEFAULT 'member' NOT NULL,
-	"invited_by_user_id" text NOT NULL,
-	"expires_at" text NOT NULL,
-	"redeemed_at" text,
-	"redeemed_by_user_id" text,
-	"created_at" text NOT NULL,
-	CONSTRAINT "team_invites_role_check" CHECK ("team_invites"."role" IN ('owner', 'member'))
-);
---> statement-breakpoint
-CREATE TABLE "team_members" (
-	"id" text PRIMARY KEY NOT NULL,
-	"team_id" text NOT NULL,
-	"user_id" text NOT NULL,
-	"role" text DEFAULT 'member' NOT NULL,
-	"created_at" text NOT NULL,
-	CONSTRAINT "team_members_role_check" CHECK ("team_members"."role" IN ('owner', 'member'))
-);
---> statement-breakpoint
-CREATE TABLE "teams" (
-	"id" text PRIMARY KEY NOT NULL,
-	"name" text NOT NULL,
-	"owner_user_id" text,
-	"created_at" text NOT NULL
-);
---> statement-breakpoint
 CREATE TABLE "terminal_report_incidents" (
 	"id" text PRIMARY KEY NOT NULL,
 	"run_id" text NOT NULL,
@@ -170,65 +139,11 @@ CREATE TABLE "terminal_report_incidents" (
 	CONSTRAINT "terminal_report_incidents_disposition_check" CHECK ("terminal_report_incidents"."disposition" IN ('run-error', 'telemetry-rejected'))
 );
 --> statement-breakpoint
-CREATE TABLE "account" (
-	"id" text PRIMARY KEY NOT NULL,
-	"account_id" text NOT NULL,
-	"provider_id" text NOT NULL,
-	"user_id" text NOT NULL,
-	"access_token" text,
-	"refresh_token" text,
-	"id_token" text,
-	"access_token_expires_at" timestamp,
-	"refresh_token_expires_at" timestamp,
-	"scope" text,
-	"password" text,
-	"created_at" timestamp DEFAULT now() NOT NULL,
-	"updated_at" timestamp NOT NULL
-);
---> statement-breakpoint
-CREATE TABLE "session" (
-	"id" text PRIMARY KEY NOT NULL,
-	"expires_at" timestamp NOT NULL,
-	"token" text NOT NULL,
-	"created_at" timestamp DEFAULT now() NOT NULL,
-	"updated_at" timestamp NOT NULL,
-	"ip_address" text,
-	"user_agent" text,
-	"user_id" text NOT NULL,
-	CONSTRAINT "session_token_unique" UNIQUE("token")
-);
---> statement-breakpoint
-CREATE TABLE "user" (
-	"id" text PRIMARY KEY NOT NULL,
-	"name" text NOT NULL,
-	"email" text NOT NULL,
-	"email_verified" boolean DEFAULT false NOT NULL,
-	"image" text,
-	"created_at" timestamp DEFAULT now() NOT NULL,
-	"updated_at" timestamp DEFAULT now() NOT NULL,
-	CONSTRAINT "user_email_unique" UNIQUE("email")
-);
---> statement-breakpoint
-CREATE TABLE "verification" (
-	"id" text PRIMARY KEY NOT NULL,
-	"identifier" text NOT NULL,
-	"value" text NOT NULL,
-	"expires_at" timestamp NOT NULL,
-	"created_at" timestamp DEFAULT now() NOT NULL,
-	"updated_at" timestamp DEFAULT now() NOT NULL
-);
---> statement-breakpoint
-ALTER TABLE "account" ADD CONSTRAINT "account_user_id_user_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."user"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "session" ADD CONSTRAINT "session_user_id_user_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."user"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
 CREATE INDEX "artifact_files_loop_idx" ON "artifact_files" USING btree ("loop_id");--> statement-breakpoint
 CREATE UNIQUE INDEX "artifact_files_loop_path_idx" ON "artifact_files" USING btree ("loop_id","path");--> statement-breakpoint
 CREATE INDEX "artifact_files_hash_idx" ON "artifact_files" USING btree ("hash");--> statement-breakpoint
-CREATE INDEX "loops_user_idx" ON "loops" USING btree ("user_id");--> statement-breakpoint
-CREATE INDEX "loops_team_idx" ON "loops" USING btree ("team_id");--> statement-breakpoint
 CREATE INDEX "loops_machine_idx" ON "loops" USING btree ("machine_id");--> statement-breakpoint
 CREATE INDEX "delete_requested_loops" ON "loops" USING btree ("delete_requested_at") WHERE "loops"."delete_requested_at" IS NOT NULL;--> statement-breakpoint
-CREATE INDEX "machines_user_idx" ON "machines" USING btree ("user_id");--> statement-breakpoint
-CREATE INDEX "machines_team_idx" ON "machines" USING btree ("team_id");--> statement-breakpoint
 CREATE INDEX "run_leases_run_idx" ON "run_leases" USING btree ("run_id");--> statement-breakpoint
 CREATE INDEX "run_leases_loop_idx" ON "run_leases" USING btree ("loop_id");--> statement-breakpoint
 CREATE INDEX "report_receipts_created" ON "run_report_receipts" USING btree ("created_at");--> statement-breakpoint
@@ -241,11 +156,5 @@ CREATE UNIQUE INDEX "runs_loop_run_index_idx" ON "runs" USING btree ("loop_id","
 CREATE INDEX "runs_loop_terminal_history_idx" ON "runs" USING btree ("loop_id","run_index") WHERE "runs"."run_index" IS NOT NULL AND "runs"."phase" IN ('done', 'error', 'canceled');--> statement-breakpoint
 CREATE UNIQUE INDEX "runs_loop_pending_idx" ON "runs" USING btree ("loop_id") WHERE "runs"."phase" = 'pending';--> statement-breakpoint
 CREATE UNIQUE INDEX "one_running_run_per_loop" ON "runs" USING btree ("loop_id") WHERE "runs"."phase" = 'running';--> statement-breakpoint
-CREATE INDEX "team_invites_team_idx" ON "team_invites" USING btree ("team_id");--> statement-breakpoint
-CREATE INDEX "team_members_team_idx" ON "team_members" USING btree ("team_id");--> statement-breakpoint
-CREATE INDEX "team_members_user_idx" ON "team_members" USING btree ("user_id");--> statement-breakpoint
 CREATE INDEX "terminal_report_incidents_report_id" ON "terminal_report_incidents" USING btree ("report_id");--> statement-breakpoint
-CREATE INDEX "terminal_report_incidents_created" ON "terminal_report_incidents" USING btree ("created_at");--> statement-breakpoint
-CREATE INDEX "account_userId_idx" ON "account" USING btree ("user_id");--> statement-breakpoint
-CREATE INDEX "session_userId_idx" ON "session" USING btree ("user_id");--> statement-breakpoint
-CREATE INDEX "verification_identifier_idx" ON "verification" USING btree ("identifier");
+CREATE INDEX "terminal_report_incidents_created" ON "terminal_report_incidents" USING btree ("created_at");

package/drizzle/0001_loop_files.sql

@@ -0,0 +1,9 @@
+-- Loop files replace workdir-relative artifact sync (protocol v5).
+-- DATA LOSS (intentional): previously synced workdir artifacts, their per-run
+-- snapshots, and every loop's configured artifact paths are dropped. Old paths
+-- are not valid loop file names; orphaned blob bytes are reclaimed by the next
+-- storage-maintenance pass. Run history and loop configuration are otherwise kept.
+DELETE FROM "artifact_files";--> statement-breakpoint
+DELETE FROM "run_snapshots";--> statement-breakpoint
+UPDATE "loops" SET "artifacts" = '[]'::jsonb;--> statement-breakpoint
+ALTER TABLE "runs" ADD COLUMN "file_notices" jsonb;

package/drizzle/meta/_journal.json

@@ -5,29 +5,15 @@
     {
       "idx": 0,
       "version": "7",
-      "when": 1785146849042,
+      "when": 1792651729223,
       "tag": "0000_baseline",
       "breakpoints": true
     },
     {
       "idx": 1,
       "version": "7",
-      "when": 1785146849043,
-      "tag": "0001_add_pi_agent",
-      "breakpoints": true
-    },
-    {
-      "idx": 2,
-      "version": "7",
-      "when": 1785146849044,
-      "tag": "0002_remove_teams",
-      "breakpoints": true
-    },
-    {
-      "idx": 3,
-      "version": "7",
-      "when": 1786301181156,
-      "tag": "0003_add_loop_tags",
+      "when": 1792900000000,
+      "tag": "0001_loop_files",
       "breakpoints": true
     }
   ]

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kky42/pievo-server",
-  "version": "2.4.14",
+  "version": "4.1.0",
   "license": "MIT",
   "repository": {
     "type": "git",
@@ -8,7 +8,7 @@
     "directory": "packages/server"
   },
   "type": "module",
-  "description": "Pievo server — a self-hostable zero-exec control plane for scheduled agent loops.",
+  "description": "Pievo server — the single-user dashboard and scheduler for Pievo loops. Usually run through `pievo server`.",
   "bin": {
     "pievo-server": "scripts/pievo-server.mjs"
   },
@@ -17,7 +17,7 @@
     "drizzle",
     "scripts/pievo-server.mjs",
     "scripts/server-cli-lib.mjs",
-    "scripts/prestart.mjs",
+    "scripts/server-network.mjs",
     "LICENSE"
   ],
   "publishConfig": {
@@ -30,28 +30,24 @@
     "dev": "vite dev",
     "build": "vite build && node scripts/copy-pglite-assets.mjs",
     "build:publish": "vite build && node scripts/copy-pglite-assets.mjs --strict",
-    "start": "node scripts/prestart.mjs && node .output/server/index.mjs",
+    "start": "node scripts/pievo-server.mjs start --foreground",
     "routes:generate": "tsr generate",
     "typecheck": "tsr generate && tsc --noEmit",
     "test": "node --test ../../scripts/dev-profile.test.mjs && vitest run",
     "db:generate": "drizzle-kit generate",
-    "db:migrate": "drizzle-kit migrate",
     "verify:package": "node scripts/verify-package.mjs",
     "prepublishOnly": "pnpm build:publish"
   },
   "dependencies": {
-    "@aws-sdk/client-s3": "^3.1075.0",
     "@base-ui/react": "^1.6.0",
     "@electric-sql/pglite": "^0.5.4",
     "@tanstack/react-router": "^1.170.16",
     "@tanstack/react-start": "^1.168.26",
-    "better-auth": "^1.6.19",
     "croner": "^10.0.1",
     "diff": "^9.0.0",
     "dompurify": "^3.4.11",
     "drizzle-orm": "^0.45.2",
     "marked": "^18.0.5",
-    "postgres": "^3.4.9",
     "pino": "^10.3.1",
     "pino-pretty": "^13.1.3",
     "react": "^19.2.7",

package/scripts/pievo-server.mjs

@@ -24,6 +24,7 @@ import {
   withLaunchNonce,
   writePidRecord,
 } from "./server-cli-lib.mjs";
+import { currentHttpsUrl, disableHttps, enableHttps, reachableUrls, tailscaleInfo } from "./server-network.mjs";
 
 const scriptFile = fileURLToPath(import.meta.url);
 const packageRoot = path.resolve(path.dirname(scriptFile), "..");
@@ -37,7 +38,6 @@ const LOCK_HANDOFF_TIMEOUT_MS = 5_000;
 function installShutdown(plan, expected) {
   let stopping = false;
   let stopSignal;
-  let prestartChild;
   let nitroLoaded = false;
   let replayedForNitro = false;
 
@@ -55,9 +55,6 @@ function installShutdown(plan, expected) {
       stopSignal = signal;
       console.log(`[pievo-server] received ${signal}; shutting down`);
       shutdownApplication();
-      if (prestartChild?.exitCode === null && prestartChild?.signalCode === null) {
-        try { prestartChild.kill(signal); } catch {}
-      }
     }
   };
 
@@ -69,8 +66,6 @@ function installShutdown(plan, expected) {
 
   return {
     get stopping() { return stopping; },
-    trackPrestart(child) { prestartChild = child; },
-    clearPrestart(child) { if (prestartChild === child) prestartChild = undefined; },
     nitroLoaded() {
       nitroLoaded = true;
       // If the first signal arrived while Nitro was importing, its graceful HTTP
@@ -94,25 +89,32 @@ function installShutdown(plan, expected) {
   };
 }
 
-async function runPrestart(plan, shutdown) {
-  const child = spawn(process.execPath, [path.join(packageRoot, "scripts", "prestart.mjs")], {
-    cwd: packageRoot,
-    env: plan.env,
-    stdio: "inherit",
-  });
-  shutdown.trackPrestart(child);
-  try {
-    const result = await new Promise((resolve, reject) => {
-      child.once("error", reject);
-      child.once("exit", (code, signal) => resolve({ code, signal }));
-    });
-    if (shutdown.stopping) throw new Error("startup interrupted by shutdown signal");
-    if (result.code !== 0) {
-      throw new Error(`migration prestart failed (${result.signal ? `signal ${result.signal}` : `exit ${result.code ?? "unknown"}`})`);
-    }
-  } finally {
-    shutdown.clearPrestart(child);
+/** Publish Tailscale HTTPS (when enabled) and pass the best connect URL to the server. */
+function publishNetwork(plan) {
+  const tailscale = tailscaleInfo();
+  let https;
+  let httpsNote;
+  if (plan.https && tailscale) {
+    const result = enableHttps(tailscale, plan.port);
+    if (result.ok) https = result.url;
+    else httpsNote = result.reason;
   }
+  const urls = reachableUrls({ host: plan.host, port: plan.port, https, tailscale });
+  return { urls, httpsNote, plan: { ...plan, env: { ...plan.env, PIEVO_PUBLIC_URL: urls.connect } } };
+}
+
+function retractHttps(record) {
+  if (record?.https === false) return;
+  const tailscale = tailscaleInfo();
+  if (tailscale) disableHttps(tailscale, record.port);
+}
+
+function printUrls(urls, httpsNote) {
+  console.log(`  local      ${urls.local}`);
+  if (urls.lan.length) console.log(`  lan        ${urls.lan.join("   ")}`);
+  if (urls.tailscale.length) console.log(`  tailscale  ${urls.tailscale.join("   ")}`);
+  if (urls.https) console.log(`  https      ${urls.https}`);
+  if (httpsNote) console.log(`  https      unavailable: ${httpsNote}`);
 }
 
 async function waitForPidAuthority(plan, expected, shutdown) {
@@ -127,7 +129,7 @@ async function waitForPidAuthority(plan, expected, shutdown) {
 
 async function serve(plan, expected) {
   // Signal handling comes first: startup remains controllable while waiting for
-  // the parent record and while the async migration child is running.
+  // the parent record.
   const shutdown = installShutdown(plan, expected);
   if (!(await waitForPidAuthority(plan, expected, shutdown))) {
     throw new Error("launcher did not establish pid authority before startup");
@@ -139,15 +141,6 @@ async function serve(plan, expected) {
     throw new Error("pid authority changed before startup");
   }
 
-  await runPrestart(plan, shutdown);
-  if (shutdown.stopping) return;
-  const afterPrestart = readPidRecord(plan.pidFile);
-  if (afterPrestart?.pid !== expected.pid
-    || afterPrestart.startTime !== expected.startTime
-    || afterPrestart.launchNonce !== expected.launchNonce) {
-    throw new Error("pid authority changed during migration prestart");
-  }
-
   try {
     await import(pathToFileURL(path.join(packageRoot, ".output", "server", "index.mjs")).href);
     shutdown.nitroLoaded();
@@ -160,7 +153,7 @@ async function serve(plan, expected) {
     if (shutdown.stopping) return;
     if (!ready) throw new Error(`server did not become ready at ${plan.readyUrl}`);
     updatePidRecordState(plan, expected, "running");
-    console.log(`[pievo-server] ready at http://${plan.host}:${plan.port} (pid ${process.pid})`);
+    console.log(`[pievo-server] ready on ${plan.host}:${plan.port} (pid ${process.pid})`);
   } catch (error) {
     // Once Nitro may own a listening socket, ask its srvx signal handler to drain
     // HTTP rather than forcing process.exit from our application handler.
@@ -196,6 +189,7 @@ async function waitForDetachedReady(plan, expected) {
 }
 
 async function cleanFailedLaunch(plan, expected) {
+  retractHttps(expected);
   const state = recordedProcessState(expected);
   if (state.state === "gone") {
     clearPidRecord(plan.pidFile, expected);
@@ -212,7 +206,7 @@ async function cleanFailedLaunch(plan, expected) {
 async function start(basePlan, foreground) {
   const existing = pidStatus(basePlan.pidFile);
   if (existing.state === "running") {
-    console.log(`pievo-server is already ${existing.record.state === "starting" ? "starting" : "running"} (pid ${existing.record.pid}, http://${existing.record.host}:${existing.record.port})`);
+    console.log(`pievo server is already ${existing.record.state === "starting" ? "starting" : "running"} (pid ${existing.record.pid}); run \`pievo server status\` for its URLs`);
     return;
   }
   if (existing.state === "unsafe") throw new Error(`${existing.error}; refusing to start over the existing pid record`);
@@ -221,13 +215,15 @@ async function start(basePlan, foreground) {
   try {
     const raced = pidStatus(basePlan.pidFile);
     if (raced.state === "running") {
-      console.log(`pievo-server is already ${raced.record.state === "starting" ? "starting" : "running"} (pid ${raced.record.pid})`);
+      console.log(`pievo server is already ${raced.record.state === "starting" ? "starting" : "running"} (pid ${raced.record.pid})`);
       return;
     }
     if (raced.state === "unsafe") throw new Error(`${raced.error}; refusing to start over the existing pid record`);
 
-    const plan = withLaunchNonce(basePlan);
+    const published = publishNetwork(basePlan);
+    const plan = withLaunchNonce(published.plan);
     if (foreground) {
+      printUrls(published.urls, published.httpsNote);
       applyProcessEnv(plan.env);
       const record = writePidRecord(plan, {
         launchNonce: plan.launchNonce,
@@ -274,8 +270,9 @@ async function start(basePlan, foreground) {
       }
       throw error;
     }
-    console.log(`pievo-server started (pid ${child.pid}, http://${plan.host}:${plan.port})`);
-    console.log(`log: ${plan.logFile}`);
+    console.log(`pievo server started (pid ${child.pid})`);
+    printUrls(published.urls, published.httpsNote);
+    console.log(`  log        ${plan.logFile}`);
   } finally {
     release();
   }
@@ -319,8 +316,10 @@ async function stop(plan) {
       clearPidRecord(plan.pidFile, stoppedRecord);
     }
 
-    if (stoppedRecord) console.log(`pievo-server stopped (pid ${stoppedRecord.pid})`);
-    else console.log("pievo-server is not running");
+    if (stoppedRecord) {
+      retractHttps(stoppedRecord);
+      console.log(`pievo server stopped (pid ${stoppedRecord.pid})`);
+    } else console.log("pievo server is not running");
   } finally {
     release?.();
   }
@@ -329,17 +328,20 @@ async function stop(plan) {
 function status(plan) {
   const current = pidStatus(plan.pidFile);
   if (current.state === "running") {
-    console.log(`pievo-server is ${current.record.state === "starting" ? "starting" : "running"} (pid ${current.record.pid})`);
-    console.log(`url: http://${current.record.host}:${current.record.port}`);
-    console.log(`data: ${plan.dataDir}`);
+    const { host, port } = current.record;
+    const tailscale = tailscaleInfo();
+    const https = tailscale ? currentHttpsUrl(tailscale, port) : undefined;
+    console.log(`pievo server is ${current.record.state === "starting" ? "starting" : "running"} (pid ${current.record.pid})`);
+    printUrls(reachableUrls({ host, port, https, tailscale }));
+    console.log(`  data       ${plan.dataDir}`);
     return 0;
   }
   if (current.state === "unsafe") {
     const pid = current.record?.pid ? ` (pid ${current.record.pid})` : "";
-    console.error(`pievo-server status is unsafe: ${current.error}${pid}`);
+    console.error(`pievo server status is unsafe: ${current.error}${pid}`);
     return 1;
   }
-  console.log(`pievo-server is stopped${current.stale ? " (cleared stale pid file)" : ""}`);
+  console.log(`pievo server is stopped${current.stale ? " (cleared stale pid file)" : ""}`);
   return 1;
 }
 

package/scripts/server-cli-lib.mjs

@@ -4,30 +4,32 @@ import fs from "node:fs";
 import os from "node:os";
 import path from "node:path";
 
-export const DEFAULT_HOST = "127.0.0.1";
-export const DEFAULT_PORT = 3000;
+const DEFAULT_HOST = "0.0.0.0";
+const DEFAULT_PORT = 3000;
 const MALFORMED_LOCK_GRACE_MS = 5_000;
 
 export function usage() {
-  return `Usage: pievo-server <start|status|restart|stop> [options]
+  return `Usage: pievo server <start|status|restart|stop> [options]
 
 Commands:
   start                 start in the background (idempotent)
   start --foreground    run in the foreground
-  status                show local process status
+  status                show process status and every URL the server is reachable at
   restart               stop, then start the currently installed server
   stop                  gracefully stop the local server
 
 Options:
-  --host <host>          bind host (default: HOST/NITRO_HOST or 127.0.0.1)
+  --host <host>          bind host (default: HOST/NITRO_HOST or 0.0.0.0)
   --port <port>          bind port (default: PORT/NITRO_PORT/PIEVO_PORT or 3000)
+  --no-https             do not publish https://<device>.ts.net via Tailscale Serve
   --data-dir <path>      select the instance (database, blobs, pid, lock, and log)
   -h, --help             show this help
   -v, --version          print the server version and exit
 
-Restart preserves the recorded instance host/port unless a flag or bind environment
-variable overrides it. The default bind is local-only. Set --host 0.0.0.0 only with
-appropriate auth and network controls.`;
+The server accepts requests only from this machine, private LAN addresses, and
+Tailscale peers. When Tailscale is running, start also publishes the dashboard at
+https://<device>.ts.net (tailnet-only). Restart preserves the recorded host, port,
+and HTTPS choice unless a flag or bind environment variable overrides it.`;
 }
 
 export function parseArgs(argv) {
@@ -44,6 +46,10 @@ export function parseArgs(argv) {
       out.foreground = true;
       continue;
     }
+    if (arg === "--no-https" && (command === "start" || command === "restart")) {
+      out.https = false;
+      continue;
+    }
     const match = arg.match(/^--(host|port|data-dir)(?:=(.*))?$/);
     if (match) {
       const key = match[1] === "data-dir" ? "dataDir" : match[1];
@@ -74,7 +80,7 @@ function firstSet(env, names) {
 }
 
 export function buildEnvPlan(options, baseEnv = process.env) {
-  const dataDir = path.resolve(options.dataDir || baseEnv.PIEVO_DATA_DIR?.trim() || path.join(os.homedir(), ".pievo"));
+  const dataDir = path.resolve(options.dataDir || baseEnv.PIEVO_DATA_DIR?.trim() || path.join(os.homedir(), ".pievo-server"));
   const host = String(options.host || firstSet(baseEnv, ["NITRO_HOST", "HOST"]) || DEFAULT_HOST).trim();
   if (!host) throw new Error("host cannot be empty");
   const port = validPort(options.port || firstSet(baseEnv, ["NITRO_PORT", "PORT", "PIEVO_PORT"]) || DEFAULT_PORT);
@@ -88,12 +94,12 @@ export function buildEnvPlan(options, baseEnv = process.env) {
     PORT: String(port),
   };
   delete env.PIEVO_SERVER_LAUNCH_NONCE;
-  if (!env.DATABASE_URL && !env.PIEVO_DB) env.PIEVO_DB = "pglite";
   return {
     env,
     dataDir,
     host,
     port,
+    https: options.https !== false,
     pidFile: path.join(dataDir, "server.pid"),
     lockFile: path.join(dataDir, "server.start.lock"),
     logFile: path.join(dataDir, "server.log"),
@@ -102,7 +108,7 @@ export function buildEnvPlan(options, baseEnv = process.env) {
 }
 
 /** Replace the current process environment with the launch plan. Foreground
- * starts need the same bind/database/nonce environment a detached child gets. */
+ * starts need the same bind/data-dir/nonce environment a detached child gets. */
 export function applyProcessEnv(nextEnv, currentEnv = process.env) {
   for (const key of Object.keys(currentEnv)) {
     if (!(key in nextEnv)) delete currentEnv[key];
@@ -118,6 +124,7 @@ export function buildRestartPlan(options, baseEnv, record) {
   if (preserved.port === undefined && firstSet(baseEnv, ["NITRO_PORT", "PORT", "PIEVO_PORT"]) === undefined && record?.port) {
     preserved.port = String(record.port);
   }
+  if (preserved.https === undefined && record?.https === false) preserved.https = false;
   return buildEnvPlan(preserved, baseEnv);
 }
 
@@ -168,7 +175,8 @@ function validPidRecord(value) {
     && ['starting', 'running'].includes(value.state)
     && typeof value.launchNonce === "string"
     && !!value.launchNonce
-    && typeof value.managedGroup === "boolean";
+    && typeof value.managedGroup === "boolean"
+    && (value.https === undefined || typeof value.https === "boolean");
 }
 
 function readPidResult(pidFile) {
@@ -219,6 +227,7 @@ export function writePidRecord(plan, options = {}) {
     startTime,
     host: plan.host,
     port: plan.port,
+    https: plan.https,
     state: options.state ?? "starting",
     launchNonce: options.launchNonce,
     managedGroup: options.managedGroup ?? false,