@promptbook/cli 0.112.0-97 → 0.112.0-99

package/apps/agents-server/README.md

@@ -12,10 +12,10 @@ ptbk agents-server init
 ptbk agents-server start --agent github-copilot --model gpt-5.4 --thinking-level xhigh
 ```
 
-`ptbk agents-server init` adds missing placeholders to `.env` and local runtime exclusions to `.gitignore` without deleting existing configuration. Use `PTBK_AGENTS_SERVER_DATABASE=supabase` for a Supabase-backed server, `PTBK_AGENTS_SERVER_DATABASE=postgres` for a standalone PostgreSQL server, or `PTBK_AGENTS_SERVER_DATABASE=sqlite` for a standalone local database in `.promptbook`. When using Supabase, fill the initialized values from your project before starting the server. When using standalone PostgreSQL, set `POSTGRES_URL` (or `DATABASE_URL`) to your local connection string. The Supabase project URL and API keys are available in the [Supabase project API settings](https://supabase.com/docs/guides/api/api-keys), and the PostgreSQL connection string is available from the [Supabase database connection guide](https://supabase.com/docs/guides/database/connecting-to-postgres).
+`ptbk agents-server init` adds missing placeholders to `.env` and local runtime exclusions to `.gitignore` without deleting existing configuration. Use `PTBK_AGENTS_SERVER_DATABASE=supabase` for a Supabase-backed server or `PTBK_AGENTS_SERVER_DATABASE=sqlite` for a standalone local database in `.promptbook`. When using Supabase, fill the initialized values from your project before starting the server. The Supabase project URL and API keys are available in the [Supabase project API settings](https://supabase.com/docs/guides/api/api-keys), and the PostgreSQL connection string is available from the [Supabase database connection guide](https://supabase.com/docs/guides/database/connecting-to-postgres).
 
 <a id="agents-server-env-ptbk-agents-server-database"></a>
--   `PTBK_AGENTS_SERVER_DATABASE`: Database backend used by Agents Server. Use `supabase` for the current hosted setup, `postgres` for standalone PostgreSQL, or `sqlite` for a standalone SQLite database.
+-   `PTBK_AGENTS_SERVER_DATABASE`: Database backend used by Agents Server. Use `supabase` for the current hosted setup or `sqlite` for a standalone local database.
 
 <a id="agents-server-env-ptbk-agents-server-sqlite-path"></a>
 -   `PTBK_AGENTS_SERVER_SQLITE_PATH`: SQLite database file used when `PTBK_AGENTS_SERVER_DATABASE=sqlite`. Defaults to `.promptbook/agents-server.sqlite` in the launch directory.
@@ -24,7 +24,7 @@ ptbk agents-server start --agent github-copilot --model gpt-5.4 --thinking-level
 -   `OPENAI_API_KEY`: OpenAI API key used for Agents Server chat and agent execution. Create one in the [OpenAI API key settings](https://platform.openai.com/api-keys).
 
 <a id="agents-server-env-postgres-url"></a>
--   `POSTGRES_URL`: PostgreSQL connection string used by Agents Server SQL access and migrations. Use this for standalone PostgreSQL installs or copy a connection string from your Supabase database connection settings.
+-   `POSTGRES_URL`: PostgreSQL connection string used by Agents Server SQL access and migrations. Copy a connection string from your Supabase database connection settings.
 
 <a id="agents-server-env-next-public-supabase-url"></a>
 -   `NEXT_PUBLIC_SUPABASE_URL`: Public Supabase project URL used by Agents Server clients. Copy the project URL from your Supabase project API settings.

package/apps/agents-server/src/app/admin/cli-access/CliAccessClient.tsx

@@ -0,0 +1,99 @@
+'use client';
+
+import { AlertTriangle } from 'lucide-react';
+import { AdminTerminalCard } from '../../../components/AdminTerminal/AdminTerminalCard';
+import { useAdminTerminalSession } from '../../../components/AdminTerminal/useAdminTerminalSession';
+
+/**
+ * Browser-safe snapshot of one raw CLI access session.
+ */
+type CliAccessSession = {
+    readonly id: string;
+    readonly title: string;
+    readonly shell: string;
+    readonly workingDirectory: string;
+    readonly isRunning: boolean;
+    readonly output: string;
+    readonly startedAt: string;
+    readonly finishedAt: string | null;
+    readonly exitCode: number | null;
+    readonly signal: string | null;
+};
+
+/**
+ * Super-admin UI for the unrestricted standalone VPS shell.
+ */
+export function CliAccessClient() {
+    const terminal = useAdminTerminalSession<CliAccessSession>({
+        basePath: '/api/admin/cli-access',
+        loadErrorMessage: 'Failed to load the CLI access session.',
+        startErrorMessage: 'Failed to start the CLI access session.',
+        sendErrorMessage: 'Failed to send CLI access input.',
+        stopErrorMessage: 'Failed to stop the CLI access session.',
+        startSuccessMessage: 'CLI access terminal started.',
+        finishSuccessMessage: 'CLI access session finished.',
+        finishErrorMessage: 'CLI access session ended with an error.',
+    });
+
+    return (
+        <div className="container mx-auto space-y-6 px-4 py-8">
+            <div className="mt-20">
+                <h1 className="text-3xl font-light text-gray-900">CLI Access</h1>
+                <p className="mt-1 max-w-4xl text-sm text-gray-500">
+                    Open the live server shell directly in the Agents Server UI and run raw commands with the same
+                    permissions as the running Agents Server process.
+                </p>
+            </div>
+
+            {terminal.errorMessage ? (
+                <div className="rounded-xl border border-rose-200 bg-rose-50 px-4 py-3 text-sm text-rose-700">
+                    {terminal.errorMessage}
+                </div>
+            ) : null}
+            {terminal.successMessage ? (
+                <div className="rounded-xl border border-emerald-200 bg-emerald-50 px-4 py-3 text-sm text-emerald-700">
+                    {terminal.successMessage}
+                </div>
+            ) : null}
+
+            <div className="rounded-2xl border border-amber-200 bg-amber-50 px-4 py-4 text-sm text-amber-900">
+                <div className="flex items-start gap-3">
+                    <AlertTriangle className="mt-0.5 h-5 w-5 flex-none" />
+                    <div className="space-y-1">
+                        <p className="font-semibold">Super-admin only</p>
+                        <p>
+                            This terminal is intentionally unrestricted. Every command runs directly on the server as the
+                            same operating-system user that runs the Agents Server.
+                        </p>
+                    </div>
+                </div>
+            </div>
+
+            <AdminTerminalCard
+                title="Raw server shell"
+                description="Start one shared shell session in the managed installation directory, run any command you need, and stop the session when you are done."
+                hint={`Shell: ${terminal.session?.shell || 'bash'}${terminal.session?.workingDirectory ? ` • Working directory: ${terminal.session.workingDirectory}` : ''}`}
+                session={terminal.session}
+                input={terminal.input}
+                onInputChange={terminal.setInput}
+                onStart={() => void terminal.startSession()}
+                onStop={() => void terminal.stopSession()}
+                onSend={(input) => void terminal.sendInput(input)}
+                isLoading={terminal.isLoadingSession}
+                isStarting={terminal.isStarting}
+                isSending={terminal.isSending}
+                isStopping={terminal.isStopping}
+                startLabel="Start CLI session"
+                runningLabel="CLI session running"
+                stopLabel="Stop session"
+                outputLabel="Live shell output"
+                outputEmptyState="No shell output yet. Start the CLI session to see the live server console here."
+                inputPlaceholder="Type any shell command, for example pm2 status, git pull, npm run build, or bash scripts"
+                quickActions={[
+                    { label: 'Send Enter', input: '\n' },
+                    { label: 'Send Ctrl+C', input: '\u0003' },
+                ]}
+            />
+        </div>
+    );
+}

package/apps/agents-server/src/app/admin/cli-access/page.tsx

@@ -0,0 +1,14 @@
+import { ForbiddenPage } from '../../../components/ForbiddenPage/ForbiddenPage';
+import { isUserGlobalAdmin } from '../../../utils/isUserGlobalAdmin';
+import { CliAccessClient } from './CliAccessClient';
+
+/**
+ * Super-admin page for raw browser-based access to the VPS shell.
+ */
+export default async function CliAccessPage() {
+    if (!(await isUserGlobalAdmin())) {
+        return <ForbiddenPage />;
+    }
+
+    return <CliAccessClient />;
+}

package/apps/agents-server/src/app/admin/code-runners/CodeRunnersClient.tsx

@@ -1,7 +1,9 @@
 'use client';
 
-import { Loader2, Play, Save, Send, ServerCog, SquareTerminal } from 'lucide-react';
-import { useCallback, useEffect, useRef, useState } from 'react';
+import { Loader2, Save, ServerCog } from 'lucide-react';
+import { useCallback, useEffect, useState } from 'react';
+import { AdminTerminalCard } from '../../../components/AdminTerminal/AdminTerminalCard';
+import { useAdminTerminalSession } from '../../../components/AdminTerminal/useAdminTerminalSession';
 import { Card } from '../../../components/Homepage/Card';
 
 /**
@@ -33,14 +35,6 @@ type CodeRunnerAuthenticationSession = {
     readonly signal: string | null;
 };
 
-/**
- * Authentication session API response.
- */
-type CodeRunnerAuthenticationResponse = {
-    readonly session: CodeRunnerAuthenticationSession | null;
-    readonly error?: string;
-};
-
 /**
  * Supported runner options shown by the standalone UI.
  */
@@ -84,29 +78,39 @@ export function CodeRunnersClient() {
     const [status, setStatus] = useState('');
     const [isLoading, setIsLoading] = useState(true);
     const [isSaving, setIsSaving] = useState(false);
-    const [isStartingAuthentication, setIsStartingAuthentication] = useState(false);
-    const [isSendingAuthenticationInput, setIsSendingAuthenticationInput] = useState(false);
-    const [isStoppingAuthentication, setIsStoppingAuthentication] = useState(false);
-    const [errorMessage, setErrorMessage] = useState<string | null>(null);
-    const [successMessage, setSuccessMessage] = useState<string | null>(null);
+    const [configurationErrorMessage, setConfigurationErrorMessage] = useState<string | null>(null);
+    const [configurationSuccessMessage, setConfigurationSuccessMessage] = useState<string | null>(null);
     const [applyOutput, setApplyOutput] = useState<string | null>(null);
-    const [authenticationSession, setAuthenticationSession] = useState<CodeRunnerAuthenticationSession | null>(null);
-    const [authenticationInput, setAuthenticationInput] = useState('');
-    const authenticationOutputReference = useRef<HTMLPreElement | null>(null);
-
-    /**
-     * Loads the latest saved-runner authentication session snapshot.
-     */
-    const loadAuthenticationSession = useCallback(async (): Promise<void> => {
-        const response = await fetch('/api/admin/code-runners/authentication', { cache: 'no-store' });
-        const payload = (await response.json()) as CodeRunnerAuthenticationResponse;
-
-        if (!response.ok) {
-            throw new Error(payload.error || 'Failed to load the authentication session.');
-        }
-
-        setAuthenticationSession(payload.session);
-    }, []);
+    const authenticationTerminal = useAdminTerminalSession<CodeRunnerAuthenticationSession>({
+        basePath: '/api/admin/code-runners/authentication',
+        loadErrorMessage: 'Failed to load the authentication session.',
+        startErrorMessage: 'Failed to start the authentication session.',
+        sendErrorMessage: 'Failed to send authentication input.',
+        stopErrorMessage: 'Failed to stop the authentication session.',
+        startSuccessMessage: 'Runner authentication terminal started.',
+        finishSuccessMessage: 'Runner authentication finished.',
+        finishErrorMessage: 'Runner authentication session ended with an error.',
+    });
+    const {
+        session: authenticationSession,
+        input: authenticationInput,
+        setInput: setAuthenticationInput,
+        isStarting: isStartingAuthentication,
+        isSending: isSendingAuthenticationInput,
+        isStopping: isStoppingAuthentication,
+        errorMessage: authenticationErrorMessage,
+        successMessage: authenticationSuccessMessage,
+        clearMessages: clearAuthenticationMessages,
+        loadSession: loadAuthenticationSession,
+        startSession: startAuthenticationSession,
+        sendInput: sendAuthenticationInput,
+        stopSession: stopAuthenticationSession,
+    } = authenticationTerminal;
+    const authenticationHint =
+        AUTHENTICATION_HINTS[agent] ||
+        'Start the terminal, complete the runner authentication flow there, and exit the CLI when the runner is ready.';
+    const errorMessage = configurationErrorMessage ?? authenticationErrorMessage;
+    const successMessage = configurationSuccessMessage ?? authenticationSuccessMessage;
 
     /**
      * Loads current code-runner settings.
@@ -114,7 +118,7 @@ export function CodeRunnersClient() {
     const loadConfiguration = useCallback(async (): Promise<void> => {
         try {
             setIsLoading(true);
-            setErrorMessage(null);
+            setConfigurationErrorMessage(null);
 
             const response = await fetch('/api/admin/code-runners', { cache: 'no-store' });
             const payload = (await response.json()) as CodeRunnersResponse;
@@ -130,7 +134,9 @@ export function CodeRunnersClient() {
 
             await loadAuthenticationSession();
         } catch (error) {
-            setErrorMessage(error instanceof Error ? error.message : 'Failed to load code-runner configuration.');
+            setConfigurationErrorMessage(
+                error instanceof Error ? error.message : 'Failed to load code-runner configuration.',
+            );
         } finally {
             setIsLoading(false);
         }
@@ -141,72 +147,12 @@ export function CodeRunnersClient() {
     }, [loadConfiguration]);
 
     useEffect(() => {
-        const sessionId = authenticationSession?.id;
-        if (!sessionId) {
-            return;
-        }
-
-        const eventSource = new EventSource(
-            `/api/admin/code-runners/authentication?sessionId=${encodeURIComponent(sessionId)}&stream=1`,
-        );
-
-        const handleSnapshot = (event: MessageEvent<string>) => {
-            const payload = JSON.parse(event.data) as CodeRunnerAuthenticationSession;
-            setAuthenticationSession(payload);
-        };
-        const handleOutput = (event: MessageEvent<string>) => {
-            const payload = JSON.parse(event.data) as { readonly chunk: string };
-            setAuthenticationSession((currentSession) => {
-                if (!currentSession || currentSession.id !== sessionId) {
-                    return currentSession;
-                }
-
-                return {
-                    ...currentSession,
-                    output: currentSession.output + payload.chunk,
-                };
-            });
-        };
-        const handleExit = (event: MessageEvent<string>) => {
-            const payload = JSON.parse(event.data) as CodeRunnerAuthenticationSession;
-            setAuthenticationSession(payload);
-            setIsStartingAuthentication(false);
-            setIsSendingAuthenticationInput(false);
-            setIsStoppingAuthentication(false);
-
-            if (payload.exitCode === 0) {
-                setSuccessMessage('Runner authentication finished.');
-            } else {
-                setErrorMessage('Runner authentication session ended with an error.');
-            }
-
-            eventSource.close();
-            void loadConfiguration();
-        };
-
-        eventSource.addEventListener('snapshot', handleSnapshot as EventListener);
-        eventSource.addEventListener('output', handleOutput as EventListener);
-        eventSource.addEventListener('exit', handleExit as EventListener);
-        eventSource.onerror = () => {
-            eventSource.close();
-        };
-
-        return () => {
-            eventSource.close();
-        };
-    }, [authenticationSession?.id, loadConfiguration]);
-
-    useEffect(() => {
-        if (!authenticationOutputReference.current) {
+        if (!authenticationSession?.finishedAt) {
             return;
         }
 
-        authenticationOutputReference.current.scrollTop = authenticationOutputReference.current.scrollHeight;
-    }, [authenticationSession?.output]);
-
-    const authenticationHint =
-        AUTHENTICATION_HINTS[agent] ||
-        'Start the terminal, complete the runner authentication flow there, and exit the CLI when the runner is ready.';
+        void loadConfiguration();
+    }, [authenticationSession?.finishedAt, loadConfiguration]);
 
     /**
      * Saves code-runner settings into `.env`.
@@ -214,8 +160,9 @@ export function CodeRunnersClient() {
     async function saveConfiguration(applyRuntimeConfiguration: boolean): Promise<void> {
         try {
             setIsSaving(true);
-            setErrorMessage(null);
-            setSuccessMessage(null);
+            setConfigurationErrorMessage(null);
+            setConfigurationSuccessMessage(null);
+            clearAuthenticationMessages();
             setApplyOutput(null);
 
             const response = await fetch('/api/admin/code-runners', {
@@ -236,120 +183,20 @@ export function CodeRunnersClient() {
             setThinkingLevel(payload.thinkingLevel || thinkingLevel);
             setStatus(payload.status || '');
             setApplyOutput(payload.applyResult?.output || null);
-            setSuccessMessage(
+            setConfigurationSuccessMessage(
                 applyRuntimeConfiguration
                     ? 'Code-runner configuration was saved and applied.'
                     : 'Code-runner configuration was saved.',
             );
         } catch (error) {
-            setErrorMessage(error instanceof Error ? error.message : 'Failed to save code-runner configuration.');
+            setConfigurationErrorMessage(
+                error instanceof Error ? error.message : 'Failed to save code-runner configuration.',
+            );
         } finally {
             setIsSaving(false);
         }
     }
 
-    /**
-     * Starts or reconnects to the saved-runner authentication terminal.
-     */
-    async function startAuthenticationSession(): Promise<void> {
-        try {
-            setIsStartingAuthentication(true);
-            setErrorMessage(null);
-            setSuccessMessage(null);
-
-            const response = await fetch('/api/admin/code-runners/authentication', {
-                method: 'POST',
-            });
-            const payload = (await response.json()) as CodeRunnerAuthenticationResponse;
-
-            if (!response.ok || !payload.session) {
-                throw new Error(payload.error || 'Failed to start the authentication session.');
-            }
-
-            setAuthenticationSession(payload.session);
-            setSuccessMessage('Runner authentication terminal started.');
-        } catch (error) {
-            setErrorMessage(error instanceof Error ? error.message : 'Failed to start the authentication session.');
-        } finally {
-            setIsStartingAuthentication(false);
-        }
-    }
-
-    /**
-     * Sends one line of text to the running authentication terminal.
-     */
-    async function sendAuthenticationInput(input: string): Promise<void> {
-        if (!authenticationSession) {
-            return;
-        }
-
-        try {
-            setIsSendingAuthenticationInput(true);
-            setErrorMessage(null);
-
-            const response = await fetch('/api/admin/code-runners/authentication', {
-                method: 'PATCH',
-                headers: {
-                    'Content-Type': 'application/json',
-                },
-                body: JSON.stringify({
-                    sessionId: authenticationSession.id,
-                    input,
-                }),
-            });
-            const payload = (await response.json()) as CodeRunnerAuthenticationResponse;
-
-            if (!response.ok) {
-                throw new Error(payload.error || 'Failed to send authentication input.');
-            }
-
-            if (payload.session) {
-                setAuthenticationSession(payload.session);
-            }
-        } catch (error) {
-            setErrorMessage(error instanceof Error ? error.message : 'Failed to send authentication input.');
-        } finally {
-            setIsSendingAuthenticationInput(false);
-        }
-    }
-
-    /**
-     * Stops the active authentication terminal.
-     */
-    async function stopAuthenticationSession(): Promise<void> {
-        if (!authenticationSession) {
-            return;
-        }
-
-        try {
-            setIsStoppingAuthentication(true);
-            setErrorMessage(null);
-
-            const response = await fetch('/api/admin/code-runners/authentication', {
-                method: 'DELETE',
-                headers: {
-                    'Content-Type': 'application/json',
-                },
-                body: JSON.stringify({
-                    sessionId: authenticationSession.id,
-                }),
-            });
-            const payload = (await response.json()) as CodeRunnerAuthenticationResponse;
-
-            if (!response.ok) {
-                throw new Error(payload.error || 'Failed to stop the authentication session.');
-            }
-
-            if (payload.session) {
-                setAuthenticationSession(payload.session);
-            }
-        } catch (error) {
-            setErrorMessage(error instanceof Error ? error.message : 'Failed to stop the authentication session.');
-        } finally {
-            setIsStoppingAuthentication(false);
-        }
-    }
-
     return (
         <div className="container mx-auto space-y-6 px-4 py-8">
             <div className="mt-20">
@@ -437,128 +284,32 @@ export function CodeRunnersClient() {
                 </pre>
             ) : null}
 
-            <Card className="hover:border-gray-200 hover:shadow-md">
-                <div className="space-y-4">
-                    <div className="space-y-2">
-                        <h2 className="text-lg font-semibold text-slate-900">Authentication</h2>
-                        <p className="text-sm text-slate-600">
-                            Save runner changes first if you want to authenticate a different CLI, then start the saved-runner
-                            terminal here instead of SSHing into the VPS.
-                        </p>
-                        <p className="text-sm text-slate-600">{authenticationHint}</p>
-                    </div>
-
-                    <div className="flex flex-wrap items-center gap-3">
-                        <button
-                            type="button"
-                            onClick={() => void startAuthenticationSession()}
-                            disabled={isLoading || isSaving || isStartingAuthentication || authenticationSession?.isRunning}
-                            className="inline-flex items-center gap-2 rounded-md bg-slate-900 px-4 py-2 text-sm font-semibold text-white hover:bg-slate-800 disabled:cursor-not-allowed disabled:opacity-60"
-                        >
-                            {isStartingAuthentication ? (
-                                <Loader2 className="h-4 w-4 animate-spin" />
-                            ) : (
-                                <Play className="h-4 w-4" />
-                            )}
-                            {authenticationSession?.isRunning ? 'Authentication running' : 'Authenticate saved runner'}
-                        </button>
-                        <button
-                            type="button"
-                            onClick={() => void stopAuthenticationSession()}
-                            disabled={!authenticationSession?.isRunning || isStoppingAuthentication}
-                            className="inline-flex items-center gap-2 rounded-md border border-slate-300 bg-white px-4 py-2 text-sm font-semibold text-slate-700 hover:bg-slate-50 disabled:cursor-not-allowed disabled:opacity-60"
-                        >
-                            {isStoppingAuthentication ? (
-                                <Loader2 className="h-4 w-4 animate-spin" />
-                            ) : (
-                                <SquareTerminal className="h-4 w-4" />
-                            )}
-                            Stop terminal
-                        </button>
-                    </div>
-
-                    <pre className="max-h-64 overflow-auto rounded-xl border border-slate-200 bg-slate-950 p-4 text-xs text-slate-100">
-                        {status || 'Runner status was not available.'}
-                    </pre>
-
-                    <div className="space-y-2">
-                        <div className="flex flex-wrap items-center justify-between gap-3">
-                            <h3 className="text-sm font-semibold text-slate-700">Live authentication terminal</h3>
-                            {authenticationSession ? (
-                                <span className="text-xs text-slate-500">
-                                    {authenticationSession.isRunning
-                                        ? 'Running'
-                                        : authenticationSession.exitCode === 0
-                                          ? 'Finished successfully'
-                                          : 'Finished with an error'}
-                                </span>
-                            ) : (
-                                <span className="text-xs text-slate-500">No session started yet.</span>
-                            )}
-                        </div>
-                        <pre
-                            ref={authenticationOutputReference}
-                            className="max-h-96 overflow-auto rounded-xl border border-slate-200 bg-slate-950 p-4 text-xs text-slate-100"
-                        >
-                            {authenticationSession?.output ||
-                                'No authentication session output yet. Start the saved-runner terminal to see the live authentication log here.'}
-                        </pre>
-                    </div>
-
-                    <form
-                        className="flex flex-col gap-3 md:flex-row"
-                        onSubmit={(event) => {
-                            event.preventDefault();
-
-                            if (!authenticationInput.trim()) {
-                                return;
-                            }
-
-                            const input = authenticationInput.endsWith('\n')
-                                ? authenticationInput
-                                : `${authenticationInput}\n`;
-
-                            void sendAuthenticationInput(input);
-                            setAuthenticationInput('');
-                        }}
-                    >
-                        <input
-                            type="text"
-                            value={authenticationInput}
-                            onChange={(event) => setAuthenticationInput(event.target.value)}
-                            disabled={!authenticationSession?.isRunning || isSendingAuthenticationInput}
-                            placeholder="Type a terminal command such as /login and send it to the running runner CLI"
-                            className={INPUT_CLASS_NAME}
-                        />
-                        <div className="flex gap-3">
-                            <button
-                                type="submit"
-                                disabled={
-                                    !authenticationSession?.isRunning ||
-                                    isSendingAuthenticationInput ||
-                                    authenticationInput.trim() === ''
-                                }
-                                className="inline-flex items-center justify-center gap-2 rounded-md bg-blue-600 px-4 py-2 text-sm font-semibold text-white hover:bg-blue-700 disabled:cursor-not-allowed disabled:opacity-60"
-                            >
-                                {isSendingAuthenticationInput ? (
-                                    <Loader2 className="h-4 w-4 animate-spin" />
-                                ) : (
-                                    <Send className="h-4 w-4" />
-                                )}
-                                Send
-                            </button>
-                            <button
-                                type="button"
-                                onClick={() => void sendAuthenticationInput('\n')}
-                                disabled={!authenticationSession?.isRunning || isSendingAuthenticationInput}
-                                className="inline-flex items-center justify-center rounded-md border border-slate-300 bg-white px-4 py-2 text-sm font-semibold text-slate-700 hover:bg-slate-50 disabled:cursor-not-allowed disabled:opacity-60"
-                            >
-                                Send Enter
-                            </button>
-                        </div>
-                    </form>
-                </div>
-            </Card>
+            <AdminTerminalCard
+                title="Authentication"
+                description="Save runner changes first if you want to authenticate a different CLI, then start the saved-runner terminal here instead of SSHing into the VPS."
+                hint={authenticationHint}
+                session={authenticationSession}
+                input={authenticationInput}
+                onInputChange={setAuthenticationInput}
+                onStart={() => void startAuthenticationSession()}
+                onStop={() => void stopAuthenticationSession()}
+                onSend={(input) => void sendAuthenticationInput(input)}
+                isLoading={isLoading}
+                isStarting={isStartingAuthentication}
+                isSending={isSendingAuthenticationInput}
+                isStopping={isStoppingAuthentication}
+                startLabel="Authenticate saved runner"
+                runningLabel="Authentication running"
+                stopLabel="Stop terminal"
+                outputLabel="Live authentication terminal"
+                outputEmptyState="No authentication session output yet. Start the saved-runner terminal to see the live authentication log here."
+                inputPlaceholder="Type a terminal command such as /login and send it to the running runner CLI"
+                quickActions={[{ label: 'Send Enter', input: '\n' }]}
+            >
+                <pre className="max-h-64 overflow-auto rounded-xl border border-slate-200 bg-slate-950 p-4 text-xs text-slate-100">
+                    {status || 'Runner status was not available.'}
+                </pre>
+            </AdminTerminalCard>
         </div>
     );
 }

package/apps/agents-server/src/app/admin/database/page.tsx

@@ -12,8 +12,7 @@ export default async function DatabaseAdminPage() {
     }
 
     const databaseMode = resolveAgentsServerDatabaseMode();
-    const databaseModeLabel =
-        databaseMode === 'sqlite' ? 'SQLite' : databaseMode === 'postgres' ? 'PostgreSQL' : 'Supabase';
+    const databaseModeLabel = databaseMode === 'sqlite' ? 'SQLite' : 'Supabase';
 
     return (
         <div className="flex h-[calc(100vh-60px)] flex-col overflow-hidden bg-white text-gray-900 dark:bg-gray-950 dark:text-gray-100">