overmux 0.0.4 → 0.0.6

package/CHANGELOG.md

@@ -1,5 +1,48 @@
 # overmux
 
+## 0.0.6
+
+### Patch Changes
+
+- [`a84e0c8`](https://github.com/richardgill/overmux/commit/a84e0c82d6d259a650af7c52b18dfb79c76562f6) Thanks [@richardgill](https://github.com/richardgill)! - Republish all npm packages with the latest changes.
+
+- Updated dependencies [[`a84e0c8`](https://github.com/richardgill/overmux/commit/a84e0c82d6d259a650af7c52b18dfb79c76562f6)]:
+  - @overmux/keybindings@0.0.4
+
+## 0.0.5
+
+### Patch Changes
+
+- [#149](https://github.com/richardgill/overmux/pull/149) [`99221b3`](https://github.com/richardgill/overmux/commit/99221b393196a714bd48b54c34eb5d848e8dbb85) Thanks [@richardgill](https://github.com/richardgill)! - Group documentation commands under `overmux docs`: use `overmux docs path` to locate installed documentation and `overmux docs ai-context` to print coding-agent guidance. Bare `overmux docs` now shows subcommand help; the top-level `ai` command is removed. Update generated agent instructions and clarify that documentation paths are not package source paths.
+
+- [#148](https://github.com/richardgill/overmux/pull/148) [`3d50362`](https://github.com/richardgill/overmux/commit/3d503621030efeb39440a4180d58f67edf2dac94) Thanks [@richardgill](https://github.com/richardgill)! - Format inline code in documentation frontmatter titles.
+
+- [#142](https://github.com/richardgill/overmux/pull/142) [`358649f`](https://github.com/richardgill/overmux/commit/358649fc9a681bd5aa89e240da12ddce694bde10) Thanks [@richardgill](https://github.com/richardgill)! - Navigate same-instance Overmux terminal links and HTML anchors internally in browsers and PWAs, with optional application-router integration and shared Desktop URL validation.
+
+- [#144](https://github.com/richardgill/overmux/pull/144) [`c60a41b`](https://github.com/richardgill/overmux/commit/c60a41b26fcc7cf76fdf35fe21fe8cd02f552419) Thanks [@richardgill](https://github.com/richardgill)! - Use deterministic, owner-only `/tmp/overmux-<uid>` runtime directories when XDG runtime storage is unset, and a hashed `/tmp` path when it is too long for Unix sockets. Reject unsafe runtime directories and registration files. Restart existing servers after upgrading to make them discoverable at the new fallback location.
+
+- [#153](https://github.com/richardgill/overmux/pull/153) [`7635e69`](https://github.com/richardgill/overmux/commit/7635e69458458b2ef752e6ac7aed6ee96897dbe4) Thanks [@richardgill](https://github.com/richardgill)! - Remove `checkOvermux`, `getOvermuxPaths`, `startOvermuxServer`, and their associated types from the public `overmux/server` entry point. The entry point remains importable as an empty module. Server lifecycle and inspection remain internal; use the CLI to start the server or check configuration.
+
+- [#143](https://github.com/richardgill/overmux/pull/143) [`88cc80e`](https://github.com/richardgill/overmux/commit/88cc80e15ccfaa64c0e1cdfbe1e5729409451362) Thanks [@richardgill](https://github.com/richardgill)! - Make login output easier to scan with grouped URLs, shorter instructions and privacy warnings, and the remaining lifetime before the expiry timestamp. Only show the hint to create another login grant during serve.
+
+- [`c5a5b8d`](https://github.com/richardgill/overmux/commit/c5a5b8dfc612c8ba784852d301b5c7ea5cb856f7) Thanks [@richardgill](https://github.com/richardgill)! - Simplify the CLI login privacy warning for multiple links.
+
+- [#152](https://github.com/richardgill/overmux/pull/152) [`e01a8d9`](https://github.com/richardgill/overmux/commit/e01a8d9d5c11db4d65e2eb440d50b269fa807a56) Thanks [@richardgill](https://github.com/richardgill)! - Breaking API change: invalidate resources with `context.invalidate("resourceId", input?)` instead of passing a resource contract. IDs select exactly one registered resource and its derived dependants; unknown IDs throw. Optional input targeting is unchanged.
+
+  Inline `defineOvermuxServer` operations are now plain definitions rather than `defineOperation(...)` calls. Their handlers infer registered resource IDs and raw input types for invalidation. Independently defined reusable operations retain `defineOperation`, and operations that invalidate resources must declare their required resource inputs with `OperationContext`.
+
+  Git operation handlers now require `gitOperationHandlers({ repositories, resourceId: "sourceControl" })`, where `resourceId` matches the application's source-control resource key.
+
+- [#156](https://github.com/richardgill/overmux/pull/156) [`ab2942a`](https://github.com/richardgill/overmux/commit/ab2942a035e9bff95b6fc150430ba2d7757b82bb) Thanks [@richardgill](https://github.com/richardgill)! - Restore `getOvermuxPaths` from the `overmux/server` public API.
+
+- [#146](https://github.com/richardgill/overmux/pull/146) [`0acc04b`](https://github.com/richardgill/overmux/commit/0acc04b19ad5c123bc76aebb3933d9a767b0863c) Thanks [@richardgill](https://github.com/richardgill)! - Write server logs to the standard state-directory destination, removing the configurable log-file setting. Resolve debug logging and instance identity defaults explicitly; identity still evaluates its hostname-port value only after the listener binds.
+
+- [#145](https://github.com/richardgill/overmux/pull/145) [`b1cdc75`](https://github.com/richardgill/overmux/commit/b1cdc75ab28c0637431d86a351bfcd6655b762d8) Thanks [@richardgill](https://github.com/richardgill)! - Rename the unlimited `auth.sessionLifetime` value from `"never"` to `"forever"`. The default is now `"forever"`; `"never"` is no longer accepted.
+
+- [#139](https://github.com/richardgill/overmux/pull/139) [`719b27c`](https://github.com/richardgill/overmux/commit/719b27c31a81c648f264a683be3a064fb8718bec) Thanks [@richardgill](https://github.com/richardgill)! - Expose a server-confirmed `connectionId` on stream hooks and require it on custom tmux transports. Keep readiness scoped to the actual stream lifetime across reconnects and hot reloads; method rebinding no longer closes reused streams. Make `useTmuxTerminal` automatically reattach to its last confirmed session, following tmux's current window and pane. Explicit `goTo` requests may wait for opening, but reject on interruption and are not replayed. Automatic attachment failures are exposed through `error` and `onError` without endless retries. Custom stream owners retire replaced handles; the hook closes only its current stream on final unmount.
+
+- [#154](https://github.com/richardgill/overmux/pull/154) [`376690d`](https://github.com/richardgill/overmux/commit/376690dbc752706c086dab5385a0a311c7a63780) Thanks [@richardgill](https://github.com/richardgill)! - Remove redundant keybinding exports from `overmux/client`.
+
 ## 0.0.4
 
 ### Patch Changes

package/README.md

@@ -2,6 +2,20 @@
 
 Overmux is a local or self-hosted web UI for terminal sessions, agents, and Git workspaces.
 
-Documentation for this exact package version is included in [`docs`](./docs). Run `overmux docs` to print the absolute path to the installed documentation directory.
+## Installation
 
-Start with [What is Overmux?](./docs/100-introduction/100-what-is-overmux.md) and [Install and Run Overmux](./docs/200-getting-started/100-install-and-run-overmux.md).
+Install the CLI with Mise:
+
+```sh
+mise use --global npm:overmux
+```
+
+Or with pnpm:
+
+```sh
+pnpm add --global overmux
+```
+
+## Documentation
+
+See the [Overmux documentation](./docs/000-index.md).

package/dist/bin.js

@@ -1,17 +1,17 @@
 #!/usr/bin/env node
 import { createRequire, findPackageJSON } from "node:module";
-import { access, chmod, readFile, readdir, realpath } from "node:fs/promises";
+import { createHash } from "node:crypto";
+import { constants, cpSync, createWriteStream, existsSync, lstatSync, mkdirSync, mkdtempSync, readFileSync, readdirSync, readlinkSync, renameSync, rmSync, statSync, watch, writeFileSync } from "node:fs";
+import { access, open, readFile, readdir, realpath } from "node:fs/promises";
 import { createConnection, isIP } from "node:net";
 import { basename, dirname, isAbsolute, join, relative, resolve } from "node:path";
-import { createJiti } from "jiti";
 import { ZodError, z } from "zod";
-import { homedir, hostname, tmpdir } from "node:os";
-import { createHash } from "node:crypto";
+import { createJiti } from "jiti";
+import { homedir, hostname } from "node:os";
 import ts from "typescript";
 import { isDeepStrictEqual } from "node:util";
 import { fork, spawnSync } from "node:child_process";
 import { fileURLToPath, pathToFileURL } from "node:url";
-import { cpSync, createWriteStream, existsSync, lstatSync, mkdirSync, mkdtempSync, readFileSync, readdirSync, readlinkSync, renameSync, rmSync, statSync, watch, writeFileSync } from "node:fs";
 import { createInterface } from "node:readline/promises";
 import { Readable, Transform } from "node:stream";
 import { pipeline } from "node:stream/promises";
@@ -1825,6 +1825,35 @@ async function run(app, inputs, context) {
 /* v8 ignore if -- @preserve */
 /* v8 ignore else -- @preserve */
 //#endregion
+//#region ../shared/dist/index.js
+var safeRelativeNotificationLink = (link) => {
+	let decoded;
+	try {
+		decoded = decodeURIComponent(link);
+	} catch {
+		return false;
+	}
+	return !decoded.startsWith("//") && !decoded.includes("\\") && ![...decoded].some((character) => {
+		const codePoint = character.codePointAt(0) ?? 0;
+		return codePoint < 32 || codePoint === 127;
+	});
+};
+var notificationLinkSchema = z.union([z.string().max(4096).startsWith("/").refine(safeRelativeNotificationLink), z.string().max(4096).url().refine((link) => {
+	if (!URL.canParse(link)) return false;
+	const url = new URL(link);
+	return ["http:", "https:"].includes(url.protocol) && !url.username && !url.password;
+})]);
+var notificationSchema = z.object({
+	body: z.string().max(4096).optional(),
+	open: z.object({ link: notificationLinkSchema }).strict().optional(),
+	title: z.string().min(1).max(4096)
+}).strict();
+var instanceIdSchema$1 = z.string().max(253).regex(/^[a-z0-9](?:[a-z0-9.-]*[a-z0-9])?(?![\s\S])/, "Expected a lowercase instance ID with only ASCII letters, digits, internal dots and hyphens");
+var createInstanceIdentity = (instanceId) => ({
+	instanceId: instanceIdSchema$1.parse(instanceId),
+	deepLinkPrefix: `overmux://${instanceId}`
+});
+//#endregion
 //#region ../shared/dist/node/index.js
 var durationPattern = /^([1-9]\d*)(ms|s|m|h|d)$/;
 var millisecondsByUnit = {
@@ -1842,7 +1871,7 @@ var durationToMilliseconds = (duration) => {
 	return Number.isSafeInteger(milliseconds) ? milliseconds : void 0;
 };
 var aiContextSnippets = ["package-source", "tech-stack-recommendations"];
-var instanceIdSchema$1 = z.string().max(253).regex(/^[a-z0-9](?:[a-z0-9.-]*[a-z0-9])?(?![\s\S])/, "Expected a lowercase instance ID with only ASCII letters, digits, internal dots and hyphens");
+var instanceIdSchema = z.string().max(253).regex(/^[a-z0-9](?:[a-z0-9.-]*[a-z0-9])?(?![\s\S])/, "Expected a lowercase instance ID with only ASCII letters, digits, internal dots and hyphens");
 var zodTypeSchema = z.custom((value) => value instanceof z.ZodType, "Expected a Zod schema");
 var functionSchema = z.custom((value) => typeof value === "function", "Expected a function");
 var contractRuntimeSchema = z.object({
@@ -1891,12 +1920,11 @@ var loopbackPeerSchema = z.string().refine((value) => isIP(value) !== 0 && (valu
 var authConfigRuntimeSchema = z.object({
 	mode: z.literal("cli-login"),
 	origins: z.array(exactOriginSchema).min(1).refine((origins) => new Set(origins).size === origins.length, "Expected unique origins").optional(),
-	sessionLifetime: z.union([z.literal("never"), authDurationSchema]).default("never"),
+	sessionLifetime: z.union([z.literal("forever"), authDurationSchema]).default("forever"),
 	trustedProxyPeer: loopbackPeerSchema.optional()
 }).strict();
 var serverConfigRuntimeSchema = z.object({
 	host: z.string().min(1).optional(),
-	logFile: z.string().min(1).optional(),
 	port: z.number().int().min(1).max(65535).optional(),
 	productionWebAssetsDir: z.string().min(1).optional(),
 	watch: z.boolean().optional()
@@ -1910,7 +1938,7 @@ var configDefinitionRuntimeSchema = serverConfigRuntimeSchema.extend({
 	aiContextSnippets: z.array(z.enum(aiContextSnippets)).optional(),
 	auth: authConfigRuntimeSchema,
 	debug: z.boolean().optional(),
-	instanceId: z.union([instanceIdSchema$1, z.custom((value) => typeof value === "function", "Expected an instance ID or a function of the bound port")]).optional(),
+	instanceId: z.union([instanceIdSchema, z.custom((value) => typeof value === "function", "Expected an instance ID or a function of the bound port")]).optional(),
 	server: serverDefinitionRuntimeSchema,
 	vite: z.string().min(1).optional()
 });
@@ -1966,91 +1994,9 @@ var getOvermuxPaths = ({ environment = process.env, homeDir = homedir(), xdgCach
 	};
 };
 //#endregion
-//#region ../shared/dist/index.js
-var packageSourceSnippet = "package-source";
-var techStackRecommendationsSnippet = "tech-stack-recommendations";
-var safeRelativeNotificationLink = (link) => {
-	let decoded;
-	try {
-		decoded = decodeURIComponent(link);
-	} catch {
-		return false;
-	}
-	return !decoded.startsWith("//") && !decoded.includes("\\") && ![...decoded].some((character) => {
-		const codePoint = character.codePointAt(0) ?? 0;
-		return codePoint < 32 || codePoint === 127;
-	});
-};
-var notificationLinkSchema = z.union([z.string().max(4096).startsWith("/").refine(safeRelativeNotificationLink), z.string().max(4096).url().refine((link) => {
-	if (!URL.canParse(link)) return false;
-	const url = new URL(link);
-	return ["http:", "https:"].includes(url.protocol) && !url.username && !url.password;
-})]);
-var notificationSchema = z.object({
-	body: z.string().max(4096).optional(),
-	open: z.object({ link: notificationLinkSchema }).strict().optional(),
-	title: z.string().min(1).max(4096)
-}).strict();
-var instanceIdSchema = z.string().max(253).regex(/^[a-z0-9](?:[a-z0-9.-]*[a-z0-9])?(?![\s\S])/, "Expected a lowercase instance ID with only ASCII letters, digits, internal dots and hyphens");
-var createInstanceIdentity = (instanceId) => ({
-	instanceId: instanceIdSchema.parse(instanceId),
-	deepLinkPrefix: `overmux://${instanceId}`
-});
-var defaultAiContextSnippets = [...[packageSourceSnippet], techStackRecommendationsSnippet];
-var packageSourceSnippetContent = `Overmux ships with documentation and TypeScript source.
-
-Run \`overmux docs\` to find the installed documentation and source for the overmux cli.
-
-E.g. \`node_modules/overmux\` and \`node_modules/@overmux/xterm\`.
-
-Inspect these files so guidance matches the versions used by the application.`;
-var techStackRecommendationsSnippetContent = `Prefer pnpm as the package manager, TanStack Router for routing, shadcn/ui for UI components, and Zod for schemas and runtime validation. Follow the application's established stack when it already differs.`;
-var aiContextContentBySnippet = {
-	[packageSourceSnippet]: packageSourceSnippetContent,
-	[techStackRecommendationsSnippet]: techStackRecommendationsSnippetContent
-};
-var composeAiContext = (snippets) => snippets.length === 0 ? "" : `${snippets.map((snippet) => `## ${snippet}\n\n${aiContextContentBySnippet[snippet]}`).join("\n\n")}\n`;
-//#endregion
 //#region src/internal/server/paths.ts
 var getDefaultConfigPath = (options = {}) => join(getOvermuxPaths(options).configDir, "overmux.config.ts");
 //#endregion
-//#region src/internal/cli/commands/ai.ts
-var printAiContext = async (flags, process) => {
-	const { config } = await loadOvermuxConfig({ configPath: flags.config });
-	process.stdout.write(composeAiContext(config.aiContextSnippets ?? defaultAiContextSnippets));
-};
-var createAiContextCommand = (process) => buildCommand({
-	func: (flags) => printAiContext(flags, process),
-	parameters: {
-		aliases: { c: "config" },
-		flags: { config: {
-			brief: "Configuration file",
-			default: getDefaultConfigPath(),
-			kind: "parsed",
-			parse: String,
-			placeholder: "path"
-		} }
-	},
-	docs: { brief: "Print the configured Overmux AI context" }
-});
-var createAiRoute = (process) => buildRouteMap({
-	docs: { brief: "Print Overmux AI context" },
-	routes: { context: createAiContextCommand(process) }
-});
-//#endregion
-//#region src/internal/server/notifications/private-json-file.ts
-var missingFile = (cause) => cause.code === "ENOENT";
-var readPrivateJson = async (path, schema) => {
-	try {
-		const contents = await readFile(path, "utf8");
-		await chmod(path, 384);
-		return schema.parse(JSON.parse(contents));
-	} catch (cause) {
-		if (missingFile(cause)) return;
-		throw cause;
-	}
-};
-//#endregion
 //#region src/internal/server/auth/instance-control.ts
 var maxControlMessageBytes = 16384;
 z.discriminatedUnion("type", [
@@ -2081,7 +2027,7 @@ var sessionSchema = z.object({
 }).strict();
 var controlResponseSchemas = {
 	"get-instance": z.object({
-		instanceId: instanceIdSchema,
+		instanceId: instanceIdSchema$1,
 		ok: z.literal(true)
 	}).strict(),
 	"create-login": z.object({
@@ -2121,12 +2067,36 @@ var registrationSchema = z.object({
 	port: z.number().int().min(1).max(65535),
 	url: z.string().url()
 });
+var currentUid = () => {
+	if (!process.getuid) throw new Error("Overmux instance control requires a Unix user ID");
+	return process.getuid();
+};
 var runtimeDirectory = () => {
-	const paths = getOvermuxPaths();
-	const preferred = paths.runtimeDir ?? join(paths.stateDir, "runtime");
+	const fallback = `/tmp/overmux-${currentUid()}`;
+	const preferred = getOvermuxPaths().runtimeDir;
+	if (!preferred) return fallback;
 	if (Buffer.byteLength(preferred) <= 80) return preferred;
-	const suffix = createHash("sha256").update(preferred).digest("hex").slice(0, 12);
-	return join(tmpdir(), `overmux-${process.getuid?.() ?? "user"}-${suffix}`);
+	return `${fallback}-${createHash("sha256").update(preferred).digest("hex").slice(0, 12)}`;
+};
+var secureRuntimeDirectory = async (directory) => {
+	const handle = await open(directory, constants.O_RDONLY | constants.O_DIRECTORY | constants.O_NOFOLLOW);
+	try {
+		const metadata = await handle.stat();
+		if (!metadata.isDirectory() || metadata.uid !== currentUid()) throw new Error(`Unsafe Overmux runtime directory: ${directory}`);
+		await handle.chmod(448);
+	} finally {
+		await handle.close();
+	}
+};
+var readRegistration = async (path) => {
+	const handle = await open(path, constants.O_RDONLY | constants.O_NOFOLLOW | constants.O_NONBLOCK);
+	try {
+		const metadata = await handle.stat();
+		if (!metadata.isFile() || metadata.uid !== currentUid() || (metadata.mode & 63) !== 0) return;
+		return registrationSchema.parse(JSON.parse(await handle.readFile("utf8")));
+	} finally {
+		await handle.close();
+	}
 };
 var readNewlineFrame = ({ maximumBytes, socket, timeout }) => new Promise((resolve, reject) => {
 	let buffer = Buffer.alloc(0);
@@ -2178,12 +2148,13 @@ var discoverInstance = async (port) => {
 	const directory = runtimeDirectory();
 	let names;
 	try {
+		await secureRuntimeDirectory(directory);
 		names = await readdir(directory);
 	} catch (cause) {
 		if (cause.code === "ENOENT") throw new Error("No running Overmux server was found");
 		throw cause;
 	}
-	const candidates = (await Promise.all(names.filter((name) => name.endsWith(".json")).map((name) => readPrivateJson(join(directory, name), registrationSchema).catch(() => void 0)))).filter((registration) => Boolean(registration && processIsLive(registration.pid) && (port === void 0 || registration.port === port)));
+	const candidates = (await Promise.all(names.filter((name) => name.endsWith(".json")).map((name) => readRegistration(join(directory, name)).catch(() => void 0)))).filter((registration) => Boolean(registration && processIsLive(registration.pid) && (port === void 0 || registration.port === port)));
 	const registrations = (await Promise.all(candidates.map(async (registration) => {
 		try {
 			await sendControlRequest(registration, { type: "ping" });
@@ -2229,18 +2200,18 @@ var issueLoginGrant = async (port) => {
 var printLoginFallback = (port, { stdout }) => {
 	stdout.write(`Login with \`overmux auth login --port ${port}\`\n`);
 };
-var printLoginGrant = ({ login, output, port }) => {
+var printLoginGrant = ({ login, output }) => {
 	const expiresIn = Math.max(0, Math.ceil((Date.parse(login.expiresAt) - Date.now()) / 6e4));
 	output.stdout.write([
-		`Code: ${login.code}`,
-		...login.urls.map((url) => `Open: ${url}`),
-		"This single-use grant authenticates one origin. Create another grant to authenticate another origin.",
-		"Enter the code on the login page shown by an unauthenticated Overmux origin.",
-		`Expires at ${login.expiresAt} (in ${expiresIn} minutes).`,
-		`Need another grant? Run \`overmux auth login --port ${port}\`.`,
+		`Code: ${login.code} (enter on the login page)`,
+		"",
+		...login.urls.length === 1 ? [`Login URL: ${login.urls[0]}`] : ["Login URLs:", ...login.urls.map((url) => `  ${url}`)],
+		"",
+		`Expiry in ${expiresIn} minutes (at ${login.expiresAt}).`,
+		"",
 		""
 	].join("\n"));
-	output.stderr.write("The login URL is a temporary credential; avoid sharing terminal output or screenshots.\n");
+	output.stderr.write(`Keep the code and link${login.urls.length === 1 ? "" : "s"} private.\n`);
 };
 //#endregion
 //#region src/internal/cli/parse-port.ts
@@ -2535,7 +2506,7 @@ var protocolErrorMessageSchema = z.object({
 });
 var serverInfoMessageSchema = z.object({
 	type: z.literal("server-info"),
-	instanceId: instanceIdSchema
+	instanceId: instanceIdSchema$1
 }).strict();
 z.discriminatedUnion("type", [
 	serverInfoMessageSchema,
@@ -2551,6 +2522,7 @@ z.discriminatedUnion("type", [
 ]);
 //#endregion
 //#region src/internal/server/runtime/runtime-instance.ts
+var defaultInstanceId = ({ port }) => `${hostname()}-${port}`;
 var createRuntimeInstance = (configured) => {
 	let identity;
 	const get = () => {
@@ -2565,7 +2537,7 @@ var createRuntimeInstance = (configured) => {
 		establish: (port) => {
 			if (identity) throw new Error("Overmux instance identity is already established");
 			try {
-				identity = createInstanceIdentity(typeof configured === "function" ? configured({ port }) : configured ?? `${hostname()}-${port}`);
+				identity = createInstanceIdentity(typeof configured === "function" ? configured({ port }) : configured);
 			} catch (cause) {
 				throw new Error("Invalid Overmux instance ID; configure instanceId with a canonical lowercase ID", { cause });
 			}
@@ -2664,6 +2636,26 @@ var createRuntimeOperations = ({ context, definitions, notifications }) => {
 		names: [...operations.keys()]
 	};
 };
+//#endregion
+//#region ../ai-context/dist/index.js
+var packageSourceSnippet = "package-source";
+var techStackRecommendationsSnippet = "tech-stack-recommendations";
+var defaultAiContextSnippets = [...[packageSourceSnippet], techStackRecommendationsSnippet];
+var packageSourceSnippetContent = `Overmux ships with documentation and TypeScript source.
+
+Run \`overmux docs path\` to find the installed documentation directory for the Overmux CLI. This prints a documentation directory, not source paths.
+
+Inspect TypeScript source in installed packages, e.g. \`node_modules/overmux/src\` and \`node_modules/@overmux/xterm/src\`.
+
+Inspect these files so guidance matches the versions used by the application.`;
+var techStackRecommendationsSnippetContent = `Prefer pnpm as the package manager, TanStack Router for routing, shadcn/ui for UI components, and Zod for schemas and runtime validation. Follow the application's established stack when it already differs.`;
+var aiContextContentBySnippet = {
+	[packageSourceSnippet]: packageSourceSnippetContent,
+	[techStackRecommendationsSnippet]: techStackRecommendationsSnippetContent
+};
+//#endregion
+//#region src/public/ai-context.ts
+var composeAiContext = (snippets) => snippets.length === 0 ? "" : `${snippets.map((snippet) => `## ${snippet}\n\n${aiContextContentBySnippet[snippet]}`).join("\n\n")}\n`;
 z.void();
 var jsonValueSchema = z.lazy(() => z.union([
 	z.string(),
@@ -2743,11 +2735,7 @@ var getInvalidatedResourceIds = (graph, resourceId) => {
 var createRuntimeResources = ({ definitions, instance, lifecycle }) => {
 	const graph = createResourceDependencyGraph(definitions);
 	const invalidationListeners = /* @__PURE__ */ new Set();
-	const contracts = /* @__PURE__ */ new Map();
 	const resources = /* @__PURE__ */ new Map();
-	Object.entries(definitions).forEach(([id, definition]) => {
-		contracts.set(definition.contract, [...contracts.get(definition.contract) ?? [], id]);
-	});
 	const invalidateResource = (id, input, allInputs = false) => {
 		if (lifecycle.signal.aborted) return;
 		const ids = getInvalidatedResourceIds(graph, id);
@@ -2755,14 +2743,11 @@ var createRuntimeResources = ({ definitions, instance, lifecycle }) => {
 			if (ids.has(entry.resourceId) && (allInputs || isDeepStrictEqual(entry.input, input))) entry.listener();
 		});
 	};
-	const invalidate = (contract, input) => {
-		const ids = contracts.get(contract) ?? Object.entries(definitions).filter(([, definition]) => definition.contract.input === contract.input && definition.contract.output === contract.output).map(([id]) => id);
-		if (!ids.length) throw new Error("Cannot invalidate a resource outside this runtime");
-		ids.forEach((id) => {
-			const definition = definitions[id];
-			const parsedInput = input === void 0 ? void 0 : definition.contract.input.parse(input);
-			invalidateResource(id, parsedInput, input === void 0);
-		});
+	const invalidate = (resourceId, input) => {
+		if (!resources.has(resourceId)) throw new Error(`Unknown resource ID: ${resourceId}`);
+		const definition = definitions[resourceId];
+		const parsedInput = input === void 0 ? void 0 : definition.contract.input.parse(input);
+		invalidateResource(resourceId, parsedInput, input === void 0);
 	};
 	const context = (signal) => ({
 		instance,
@@ -2898,9 +2883,9 @@ var createRuntimeStreams = ({ context, definitions, lifecycle }) => {
 };
 //#endregion
 //#region src/internal/server/runtime/create-runtime.ts
-var createRuntime = async ({ config, debug = false, notifications = { send: async () => void 0 }, signal }) => {
+var createRuntime = async ({ config, debug = true, notifications = { send: async () => void 0 }, signal }) => {
 	const lifecycle = createRuntimeLifecycle(signal);
-	const instance = createRuntimeInstance(config.instanceId);
+	const instance = createRuntimeInstance(config.instanceId ?? defaultInstanceId);
 	try {
 		const resources = createRuntimeResources({
 			definitions: config.server.resources ?? {},
@@ -3145,7 +3130,6 @@ var childOptionsSchema = z.object({
 	debug: z.boolean().optional(),
 	developmentWebTarget: z.url().optional(),
 	host: z.string().optional(),
-	logFile: z.string().optional(),
 	port: z.number().int().min(0).max(65535).optional(),
 	productionWebAssetsDir: z.string().optional(),
 	watch: z.boolean().optional()
@@ -3843,6 +3827,25 @@ var desktopRoute = buildRouteMap({
 	}
 });
 //#endregion
+//#region src/internal/cli/commands/docs-ai-context.ts
+var createAiContextCommand = (process) => buildCommand({
+	func: async (flags) => {
+		const { config } = await loadOvermuxConfig({ configPath: flags.config });
+		process.stdout.write(composeAiContext(config.aiContextSnippets ?? defaultAiContextSnippets));
+	},
+	parameters: {
+		aliases: { c: "config" },
+		flags: { config: {
+			brief: "Configuration file",
+			default: getDefaultConfigPath(),
+			kind: "parsed",
+			parse: String,
+			placeholder: "path"
+		} }
+	},
+	docs: { brief: "Print the configured Overmux AI context" }
+});
+//#endregion
 //#region src/internal/cli/commands/docs.ts
 var resolveInstalledDocsRoot = (moduleUrl) => {
 	const docsRoot = [
@@ -3853,13 +3856,23 @@ var resolveInstalledDocsRoot = (moduleUrl) => {
 	if (!docsRoot) throw new Error("Installed Overmux documentation is missing");
 	return resolve(docsRoot);
 };
-var createDocsCommand = ({ docsRoot, output }) => buildCommand({
+var createDocsPathCommand = ({ docsRoot, output }) => buildCommand({
 	func: () => {
 		output.write(`${resolve(docsRoot)}\n`);
 	},
 	parameters: {},
 	docs: { brief: "Print the installed documentation directory" }
 });
+var createDocsRoute = ({ docsRoot, process }) => buildRouteMap({
+	docs: { brief: "Find documentation and print coding-agent guidance" },
+	routes: {
+		path: createDocsPathCommand({
+			docsRoot,
+			output: process.stdout
+		}),
+		"ai-context": createAiContextCommand(process)
+	}
+});
 //#endregion
 //#region src/internal/cli/commands/init-template.ts
 var initScaffoldPaths = [
@@ -3901,7 +3914,7 @@ var packageJson = (overmuxVersion) => `${JSON.stringify({
 }, null, 2)}\n`;
 var createInitScaffold = ({ overmuxVersion, toolchain }) => ({
 	".gitignore": "node_modules\ndist\n",
-	"AGENTS.md": "Immediately run `overmux ai context` for documentation about Overmux.\n",
+	"AGENTS.md": "Immediately run `overmux docs ai-context` for documentation about Overmux.\n",
 	"CLAUDE.md": "@AGENTS.md\n",
 	...toolchain === "mise" ? { "mise.toml": `[tools]
 node = "22"
@@ -4472,6 +4485,7 @@ var announceServeLogin = async ({ createLogin, port, process }) => {
 		...await issueLoginGrant(port),
 		output: process
 	});
+	process.stdout.write(`\nNeed another grant? Run \`overmux auth login --port ${port}\`.\n`);
 };
 var runServe = async ({ environment, flags, process }) => {
 	if (flags.noBuild && !flags.production) throw new Error("--no-build requires --production");
@@ -5132,14 +5146,13 @@ var detectCliEnvironment = async (process = globalThis.process) => {
 var createCliApp = (process = globalThis.process) => buildApplication(buildRouteMap({
 	docs: { brief: "Initialize and manage Overmux applications" },
 	routes: {
-		ai: createAiRoute(process),
 		auth: authRoute,
 		check: checkCommand,
 		call: callCommand,
 		desktop: desktopRoute,
-		docs: createDocsCommand({
+		docs: createDocsRoute({
 			docsRoot: resolveInstalledDocsRoot(import.meta.url),
-			output: process.stdout
+			process
 		}),
 		init: createInitCommand(process),
 		integration: integrationCommand,