@repo-os/repoos 0.5.58 → 0.5.59

package/dist/.build-info.json

@@ -1,5 +1,5 @@
 {
-  "hash": "6231b4db3b8903881a94953190689ef5b00ce6583415cf10eb1b86fe1211e1f1",
-  "version": "0.5.58",
+  "hash": "54bb7cbb6f6758af0e4594f62905c10fa0aa98c53e313ec47f2d21da7c028692",
+  "version": "0.5.59",
   "devUi": false
 }

package/dist/.build-stamp.json

@@ -1,3 +1,3 @@
 {
-  "generatedAt": "2026-09-29T22:20:00.607Z"
+  "generatedAt": "2026-09-29T23:17:06.252Z"
 }

package/dist/cli/index.js

@@ -23,9 +23,7 @@ import { checkBuild } from "../core/build.js";
 import { loadConfig } from "../core/config.js";
 import { reexecAfterStaleBuild, reexecUnderBunIfRequested } from "../core/runtime.js";
 import { c } from "./colors.js";
-import { readFileSync } from "node:fs";
-import { dirname, join } from "node:path";
-import { fileURLToPath } from "node:url";
+import { readVersion } from "../core/version.js";
 // node:sqlite (used by db.ts/auth-store.ts) is still marked experimental on
 // supported Node versions and prints a warning the first time it's loaded.
 // That's expected/stable usage here, not something a user needs to see —
@@ -40,19 +38,6 @@ process.on("warning", (warning) => {
         return;
     console.warn(warning);
 });
-/** Reads the version stamped into .build-info.json at build time; falls back for dev/source runs. */
-function readVersion() {
-    try {
-        const root = dirname(dirname(fileURLToPath(import.meta.url)));
-        const info = JSON.parse(readFileSync(join(root, ".build-info.json"), "utf8"));
-        if (info.version)
-            return info.version;
-    }
-    catch {
-        /* fall through */
-    }
-    return "0.0.0-dev";
-}
 const VERSION = readVersion();
 // Column where COMMANDS descriptions start, measured from the start of the
 // command text (not counting the leading 4-space indent). Wide enough for

package/dist/commands/serve-banner.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/commands/serve-banner.test.js

@@ -0,0 +1,26 @@
+import { describe, expect, it } from "vitest";
+import { renderServeBanner } from "./serve.js";
+describe("renderServeBanner", () => {
+    const rows = [
+        { label: "Local", value: "http://127.0.0.1:7515" },
+        { label: "Tailnet HTTPS", value: "x" },
+    ];
+    it("shows the version and aligns labels", () => {
+        const out = renderServeBanner("1.2.3", rows);
+        expect(out).toContain("RepoOS v1.2.3");
+        expect(out).toContain("Local          http://127.0.0.1:7515");
+    });
+    it("splits an HTTPS warning into problem, fix and link", () => {
+        const out = renderServeBanner("1.2.3", rows, "HTTPS certificates aren't enabled for your tailnet — turn on MagicDNS and HTTPS Certificates at https://login.tailscale.com/admin/dns");
+        expect(out).toContain("Tailscale HTTPS unavailable");
+        expect(out).toContain("HTTPS certificates aren't enabled for your tailnet");
+        expect(out).toContain("Fix: turn on MagicDNS and HTTPS Certificates at");
+        expect(out).toContain("https://login.tailscale.com/admin/dns");
+        expect(out).toContain("--no-tailscale-https");
+    });
+    it("handles a reason without a fix link", () => {
+        const out = renderServeBanner("1", rows, "all ports in use");
+        expect(out).toContain("all ports in use");
+        expect(out).not.toContain("Fix:");
+    });
+});

package/dist/commands/serve.d.ts

@@ -59,6 +59,18 @@ export declare function resolvePreviewOverrides(args: readonly string[], env?: N
  * processes keep working. Exported for the defense-in-depth tests (#0096).
  */
 export declare function directServeBlockedByAgent(env?: NodeJS.ProcessEnv): boolean;
+export interface BannerRow {
+    label: string;
+    /** May contain ANSI codes. */
+    value: string;
+}
+/**
+ * The startup banner: a title line with the running version, an aligned
+ * label/value table, and — when Tailscale HTTPS could not be set up — a
+ * highlighted warning block that separates the problem from its fix. Pure
+ * (returns a string) so tests can assert on it with colors off.
+ */
+export declare function renderServeBanner(version: string, rows: readonly BannerRow[], httpsWarning?: string): string;
 export declare function cmdServe(args: string[], opts?: {
     onShutdown?: () => void;
     onReady?: (url: string) => void;

package/dist/commands/serve.js

@@ -8,6 +8,7 @@ import { PREVIEW_REQUEST_SIGNAL } from "../server/agents.js";
 import { isBun } from "../core/runtime.js";
 import { findRepoRoot } from "../core/config.js";
 import { c, statusColor } from "../cli/colors.js";
+import { readVersion } from "../core/version.js";
 import { detectTailscaleIPv4, ensureTailscaleHttps } from "../core/tailscale.js";
 /**
  * The OS-visible process title for a `repoos serve` instance:
@@ -109,6 +110,39 @@ export function resolvePreviewOverrides(args, env = process.env) {
 export function directServeBlockedByAgent(env = process.env) {
     return env.REPOOS_AGENT === "1" && env.REPOOS_PREVIEW_CHILD !== "1" && env.REPOOS_RELOAD !== "1";
 }
+/**
+ * The startup banner: a title line with the running version, an aligned
+ * label/value table, and — when Tailscale HTTPS could not be set up — a
+ * highlighted warning block that separates the problem from its fix. Pure
+ * (returns a string) so tests can assert on it with colors off.
+ */
+export function renderServeBanner(version, rows, httpsWarning) {
+    const width = Math.max(...rows.map((r) => r.label.length));
+    const out = [
+        "",
+        `  ${c.bold(c.cyan("◆ RepoOS"))} ${c.dim("v" + version)}  ${c.green("● running")}`,
+        "",
+    ];
+    for (const r of rows)
+        out.push(`  ${c.dim(r.label.padEnd(width))}  ${r.value}`);
+    if (httpsWarning) {
+        // Reasons read "<problem> — <fix> <url>": put the problem, the fix and the
+        // link on their own lines so the actionable part isn't buried.
+        const [problem, ...rest] = httpsWarning.split(" — ");
+        const fixText = rest.join(" — ");
+        const url = /https?:\/\/\S+/.exec(fixText)?.[0];
+        const fix = (url ? fixText.replace(url, "") : fixText).replace(/\s*\bat\s*$/, "").trim();
+        out.push("", `  ${c.yellow("▲")} ${c.bold(c.yellow("Tailscale HTTPS unavailable"))}`);
+        out.push(`    ${c.dim(problem ?? "")}`);
+        if (fix)
+            out.push(`    ${c.bold("Fix:")} ${fix}${url ? c.dim(" at") : ""}`);
+        if (url)
+            out.push(`         ${c.cyan(url)}`);
+        out.push(`    ${c.dim("or pass")} ${c.cyan("--no-tailscale-https")} ${c.dim("to silence this")}`);
+    }
+    out.push("", c.dim("  press ^C to stop"), "");
+    return out.join("\n");
+}
 export async function cmdServe(args, opts = {}) {
     // Defense in depth (#0096): a managed agent process must never start its own
     // `repoos serve`. An agent that ignores the mission and runs `repoos serve`
@@ -174,48 +208,46 @@ export async function cmdServe(args, opts = {}) {
         return;
     }
     const snap = handle.index.snapshot();
-    console.log(c.bold(c.cyan("\n  RepoOS server")) + c.dim("  ·  ") + c.bold(handle.url));
-    console.log(c.dim("  open ") + c.cyan(handle.url) + c.dim(" in your browser for the UI"));
-    console.log(c.dim("  watching ") +
-        snap.taskCount +
-        c.dim(" tasks  ·  SSE stream at ") +
-        c.cyan(handle.url + "/api/events"));
+    const rt = isBun()
+        ? `Bun ${process.versions.bun ?? ""}`.trim()
+        : `Node ${process.versions.node}`;
+    const rows = [
+        { label: "Local", value: c.cyan(c.bold(handle.url)) },
+        { label: "Events", value: c.cyan(handle.url + "/api/events") + c.dim("  (SSE)") },
+        { label: "Watching", value: `${snap.taskCount} tasks` },
+        { label: "Runtime", value: rt },
+    ];
     // Report an active preview-only overlay and its effective keys (#0464), so a
     // preview that deliberately differs from the base config is never silent.
     if (handle.previewOverrides?.length) {
-        console.log(c.yellow("  preview overrides active: ") + c.dim(handle.previewOverrides.join(", ")));
+        rows.push({ label: "Preview", value: c.yellow(handle.previewOverrides.join(", ")) });
     }
-    const rt = isBun()
-        ? `Bun ${process.versions.bun ?? ""}`.trim()
-        : `Node ${process.versions.node}`;
-    console.log(c.dim("  runtime ") + rt);
-    console.log(c.dim("  api: ") + c.dim("/api/tasks  /api/tasks/:id  /api/counts  /api/index  /api/docs"));
     if (tailscaleDetected) {
-        console.log(c.dim("  Tailscale detected — listening on all interfaces (") +
-            c.cyan("0.0.0.0") +
-            c.dim("), reachable from other Tailscale devices at ") +
-            c.cyan(`http://${tailscaleIP}:${handle.port}`) +
-            c.dim(". Use ") +
-            c.cyan("--host 127.0.0.1") +
-            c.dim(" to restrict to localhost only."));
+        rows.push({
+            label: "Tailnet",
+            value: c.cyan(`http://${tailscaleIP}:${handle.port}`) +
+                c.dim("  (all interfaces; ") +
+                c.cyan("--host 127.0.0.1") +
+                c.dim(" to restrict)"),
+        });
     }
     // HTTPS for tailnet devices (a plain-http IP isn't a secure context, so
     // crypto.randomUUID etc. are missing). Skipped for managed previews, which
     // must not touch the machine's `tailscale serve` config.
+    let httpsWarning;
     if (tailscaleDetected && tailscaleHttps && process.env.REPOOS_PREVIEW_CHILD !== "1") {
         const https = await ensureTailscaleHttps(handle.port);
         if (https.url) {
-            console.log(c.dim("  Tailscale HTTPS — open ") +
-                c.cyan(https.url) +
-                c.dim(" from your tailnet (secure context; ") +
-                c.cyan("--no-tailscale-https") +
-                c.dim(" to skip)."));
+            rows.push({
+                label: "Tailnet HTTPS",
+                value: c.green(c.bold(https.url)) + c.dim("  (secure context)"),
+            });
         }
         else if (https.reason) {
-            console.log(c.yellow("  Tailscale HTTPS unavailable: ") + c.dim(https.reason));
+            httpsWarning = https.reason;
         }
     }
-    console.log(c.dim("  press ^C to stop\n"));
+    console.log(renderServeBanner(readVersion(), rows, httpsWarning));
     // Fires only now that the server is actually listening (handle.url is a
     // live, bound address) — a caller opening a browser tab any earlier races
     // the server's own startup and shows connection errors until a manual

package/dist/core/version.d.ts

@@ -0,0 +1,2 @@
+/** Reads the version stamped into .build-info.json at build time; falls back for dev/source runs. */
+export declare function readVersion(): string;

package/dist/core/version.js

@@ -0,0 +1,16 @@
+import { readFileSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+/** Reads the version stamped into .build-info.json at build time; falls back for dev/source runs. */
+export function readVersion() {
+    try {
+        const root = dirname(dirname(fileURLToPath(import.meta.url)));
+        const info = JSON.parse(readFileSync(join(root, ".build-info.json"), "utf8"));
+        if (info.version)
+            return info.version;
+    }
+    catch {
+        /* fall through */
+    }
+    return "0.0.0-dev";
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@repo-os/repoos",
-  "version": "0.5.58",
+  "version": "0.5.59",
   "description": "The repo is the operating system. Repo-native, AI-agent-friendly task tracking that lives as markdown files in your monorepo.",
   "type": "module",
   "bin": {