pi2web 0.2.0 → 0.2.1

package/dist/collab/validate.js

@@ -0,0 +1,148 @@
+export class ValidationError extends Error {
+    fieldErrors;
+    code = 'VALIDATION_FAILED';
+    constructor(fieldErrors) {
+        super(`Invalid request: ${fieldErrors.map(e => `${e.path} ${e.code}`).join(', ')}`);
+        this.fieldErrors = fieldErrors;
+    }
+}
+const fail = (ctx, code, message, expected) => { ctx.errors.push({ path: ctx.path || '(root)', code, message, ...(expected ? { expected } : {}) }); };
+const child = (ctx, key) => ({ path: typeof key === 'number' ? `${ctx.path}[${key}]` : ctx.path ? `${ctx.path}.${key}` : key, errors: ctx.errors });
+export const str = (options = {}) => ({ parse(value, ctx) {
+        if (typeof value !== 'string') {
+            fail(ctx, 'NOT_A_STRING', 'Expected a string', 'string');
+            return '';
+        }
+        const text = options.trim === false ? value : value.trim();
+        const min = options.min ?? 1, max = options.max ?? 4000;
+        if (text.length < min)
+            fail(ctx, 'TOO_SHORT', `Expected at least ${min} characters, received ${text.length}`, `length >= ${min}`);
+        if (text.length > max)
+            fail(ctx, 'TOO_LONG', `Expected at most ${max} characters, received ${text.length}`, `length <= ${max}`);
+        if (options.pattern && !options.pattern.test(text))
+            fail(ctx, 'PATTERN_MISMATCH', `Expected a value matching ${options.pattern}`, String(options.pattern));
+        return text;
+    } });
+export const num = (options = {}) => ({ parse(value, ctx) {
+        const parsed = typeof value === 'number' ? value : typeof value === 'string' && value.trim() !== '' ? Number(value) : NaN;
+        if (!Number.isFinite(parsed)) {
+            fail(ctx, 'NOT_A_NUMBER', 'Expected a finite number', 'number');
+            return 0;
+        }
+        if (options.integer && !Number.isInteger(parsed))
+            fail(ctx, 'NOT_AN_INTEGER', 'Expected an integer', 'integer');
+        if (options.min !== undefined && parsed < options.min)
+            fail(ctx, 'TOO_SMALL', `Expected a value >= ${options.min}`, `>= ${options.min}`);
+        if (options.max !== undefined && parsed > options.max)
+            fail(ctx, 'TOO_LARGE', `Expected a value <= ${options.max}`, `<= ${options.max}`);
+        // Floating point: 6.5 / 0.5 must be treated as an exact multiple, so compare against a rounded quotient.
+        if (options.step) {
+            const quotient = parsed / options.step;
+            if (Math.abs(quotient - Math.round(quotient)) > 1e-9)
+                fail(ctx, 'NOT_A_MULTIPLE', `Expected a multiple of ${options.step}`, `multiple of ${options.step}`);
+        }
+        return parsed;
+    } });
+export const bool = () => ({ parse(value, ctx) { if (typeof value !== 'boolean') {
+        fail(ctx, 'NOT_A_BOOLEAN', 'Expected true or false', 'boolean');
+        return false;
+    } return value; } });
+export const oneOf = (values) => ({ parse(value, ctx) {
+        if (typeof value !== 'string' || !values.includes(value)) {
+            fail(ctx, 'NOT_ALLOWED', `Expected one of: ${values.join(', ')}`, values.join('|'));
+            return values[0];
+        }
+        return value;
+    } });
+export const arr = (item, options = {}) => ({ parse(value, ctx) {
+        if (!Array.isArray(value)) {
+            fail(ctx, 'NOT_AN_ARRAY', 'Expected an array', 'array');
+            return [];
+        }
+        const min = options.min ?? 0, max = options.max ?? 200;
+        if (value.length < min)
+            fail(ctx, 'TOO_FEW_ITEMS', `Expected at least ${min} items, received ${value.length}`, `length >= ${min}`);
+        if (value.length > max) {
+            fail(ctx, 'TOO_MANY_ITEMS', `Expected at most ${max} items, received ${value.length}`, `length <= ${max}`);
+            return [];
+        }
+        return value.map((entry, index) => item.parse(entry, child(ctx, index)));
+    } });
+/**
+ * A map whose keys are data, not schema - rubric anchors are `{"0":"...","10":"..."}`. `obj()` cannot express
+ * this: it only ever copies the fields its shape declares, so an empty shape silently parses to `{}`.
+ */
+export const record = (value, limits = {}) => ({ parse(input, ctx) {
+        if (!input || typeof input !== 'object' || Array.isArray(input)) {
+            fail(ctx, 'NOT_AN_OBJECT', 'Expected an object', 'object');
+            return {};
+        }
+        const source = input, keys = Object.keys(source), result = {};
+        if (limits.maxKeys !== undefined && keys.length > limits.maxKeys)
+            fail(ctx, 'TOO_LONG', `At most ${limits.maxKeys} entries are accepted`, `<= ${limits.maxKeys} entries`);
+        for (const key of keys) {
+            if (limits.maxKeyLength !== undefined && key.length > limits.maxKeyLength)
+                fail(child(ctx, key), 'TOO_LONG', `A key may be at most ${limits.maxKeyLength} characters`);
+            result[key] = value.parse(source[key], child(ctx, key));
+        }
+        return result;
+    } });
+export const obj = (shape) => ({ parse(value, ctx) {
+        if (!value || typeof value !== 'object' || Array.isArray(value)) {
+            fail(ctx, 'NOT_AN_OBJECT', 'Expected an object', 'object');
+            return {};
+        }
+        const source = value, result = {};
+        for (const [key, validator] of Object.entries(shape)) {
+            const entry = source[key];
+            if (entry === undefined || entry === null) {
+                if (validator.optional) {
+                    if (validator.fallback)
+                        result[key] = validator.fallback();
+                    continue;
+                }
+                fail(child(ctx, key), 'REQUIRED', 'This field is required');
+                continue;
+            }
+            result[key] = validator.parse(entry, child(ctx, key));
+        }
+        for (const key of Object.keys(source))
+            if (!(key in shape))
+                fail(child(ctx, key), 'UNKNOWN_FIELD', `Unknown field. Allowed fields: ${Object.keys(shape).join(', ')}`);
+        return result;
+    } });
+/**
+ * Cross-field rule on top of a structurally valid value. Field-by-field checks cannot catch
+ * `{min:10,max:1}`: every field is in range, yet the combination is unusable.
+ * The check only runs when the inner validator produced no errors, so it never reports on garbage.
+ */
+export const refine = (inner, check) => ({ parse(value, ctx) {
+        const before = ctx.errors.length, result = inner.parse(value, ctx);
+        if (ctx.errors.length > before)
+            return result;
+        for (const error of check(result) ?? [])
+            ctx.errors.push({ ...error, path: ctx.path ? `${ctx.path}.${error.path}` : error.path });
+        return result;
+    } });
+export const optional = (inner) => ({ parse: (value, ctx) => inner.parse(value, ctx), optional: true });
+export const withDefault = (inner, fallback) => ({ parse: (value, ctx) => inner.parse(value, ctx), optional: true, fallback });
+/** Accepts any JSON value. Used for opaque payloads the hub stores but never interprets. */
+export const anyJson = (maxBytes = 64 * 1024) => ({ parse(value, ctx) {
+        let size = 0;
+        try {
+            size = JSON.stringify(value)?.length ?? 0;
+        }
+        catch {
+            fail(ctx, 'NOT_SERIALIZABLE', 'Expected JSON-serializable data');
+            return null;
+        }
+        if (size > maxBytes)
+            fail(ctx, 'TOO_LARGE', `Expected at most ${maxBytes} serialized bytes, received ${size}`);
+        return value;
+    } });
+export function parse(validator, value) {
+    const errors = [], result = validator.parse(value, { path: '', errors });
+    if (errors.length)
+        throw new ValidationError(errors.slice(0, 50));
+    return result;
+}

package/dist/drafts.js

@@ -0,0 +1,30 @@
+import { randomUUID } from 'node:crypto';
+export class DraftHub {
+    pending = [];
+    listeners = new Set();
+    max = 50;
+    ttlMs = 60 * 60_000;
+    /** Returns the stored draft and how many Web UIs were reached right now. */
+    add(input) {
+        this.expire();
+        const draft = { id: `draft-${randomUUID()}`, text: input.text, mode: input.mode ?? 'append', source: input.source, createdAt: new Date().toISOString() };
+        this.pending.push(draft);
+        while (this.pending.length > this.max)
+            this.pending.shift();
+        const delivered = this.listeners.size;
+        for (const listener of [...this.listeners])
+            listener(draft, false);
+        return { draft, delivered };
+    }
+    /** First acknowledgement wins: other tabs that already received it simply keep their copy. */
+    ack(id) { const before = this.pending.length; this.pending = this.pending.filter(d => d.id !== id); return this.pending.length < before; }
+    list() { this.expire(); return [...this.pending]; }
+    subscriberCount() { return this.listeners.size; }
+    subscribe(listener) {
+        this.listeners.add(listener);
+        for (const draft of this.list())
+            listener(draft, true);
+        return () => { this.listeners.delete(listener); };
+    }
+    expire() { const cutoff = Date.now() - this.ttlMs; this.pending = this.pending.filter(d => Date.parse(d.createdAt) >= cutoff); }
+}

package/dist/mail-notifier.js

@@ -1,11 +1,13 @@
 import { randomUUID } from 'node:crypto';
 import { assistantText } from './voice.js';
-const defaultSettings = { enabled: true, aggregationDelaySeconds: 0, includeResponse: true, includeSessionDetails: true };
+const defaultSettings = { enabled: true, aggregationDelaySeconds: 0, includeResponse: true, includeSessionDetails: true, collabEscalations: true };
 const clip = (value, max) => value.length <= max ? value : `${value.slice(0, max)}\n\n[内容过长，已截断]`;
 const oneLine = (value, max) => value.replace(/[\r\n\t]+/g, ' ').replace(/\s{2,}/g, ' ').trim().slice(0, max);
 export class MailNotifier {
     fetcher;
     lastAssistant = new Map();
+    /** Agents with a run in progress. A run may emit duplicate settled events; notify only once. */
+    activeRuns = new Set();
     queue = [];
     timer;
     pending = new Set();
@@ -22,6 +24,7 @@ export class MailNotifier {
         next.enabled = Boolean(next.enabled);
         next.includeResponse = Boolean(next.includeResponse);
         next.includeSessionDetails = Boolean(next.includeSessionDetails);
+        next.collabEscalations = Boolean(next.collabEscalations);
         next.aggregationDelaySeconds = Math.trunc(Number(next.aggregationDelaySeconds));
         if (!Number.isFinite(next.aggregationDelaySeconds) || next.aggregationDelaySeconds < 0 || next.aggregationDelaySeconds > 86400)
             throw Object.assign(new Error('aggregationDelaySeconds must be an integer between 0 and 86400'), { code: 'INVALID_MAIL_NOTIFICATION_SETTINGS' });
@@ -40,22 +43,40 @@ export class MailNotifier {
     handleAgentEvent(agentId, event, context = {}) {
         if (this.closed)
             return;
+        if (event.type === 'before_agent_start' || event.type === 'agent_start') {
+            this.activeRuns.add(agentId);
+            return;
+        }
         if (event.type === 'message_end') {
+            this.activeRuns.add(agentId);
             const text = assistantText(event.message);
             if (text)
                 this.lastAssistant.set(agentId, text);
             return;
         }
-        if (event.type !== 'agent_settled')
+        if (event.type !== 'agent_settled' || !this.activeRuns.delete(agentId))
             return;
         const finalOutput = this.lastAssistant.get(agentId) ?? '';
         this.lastAssistant.delete(agentId);
         if (!this.settings.enabled)
             return;
-        this.queue.push({ agentId, finalOutput, context });
+        // Pi 0.99+ reports whether the run was cancelled; a cancelled run is not a completed task.
+        this.queue.push({ agentId, finalOutput, context, aborted: event.aborted === true });
         if (!this.timer)
             this.scheduleFlush();
     }
+    /**
+     * Fire-and-forget notification that bypasses the agent-completion queue. Used by the collaboration hub:
+     * a pending human ruling blocks the whole session, so it must not wait for the aggregation window.
+     */
+    notifyCollab(input) {
+        if (this.closed || !this.settings.enabled || !this.settings.collabEscalations)
+            return;
+        const job = this.sendMail(input.subject, clip(input.text, 24_000), { kind: 'collab' }).catch(error => console.error(`MailDispatch collaboration notification failed: ${error.message}`));
+        this.pending.add(job);
+        void job.finally(() => this.pending.delete(job));
+        return job;
+    }
     async close() {
         this.closed = true;
         this.clearTimer();
@@ -63,6 +84,7 @@ export class MailNotifier {
             await this.flushQueue();
         await Promise.allSettled([...this.pending]);
         this.lastAssistant.clear();
+        this.activeRuns.clear();
     }
     scheduleFlush() {
         const delay = this.settings.aggregationDelaySeconds * 1000;
@@ -92,18 +114,21 @@ export class MailNotifier {
     } }
     async sendBatch(items) {
         const includeResponse = this.settings.includeResponse, includeSessionDetails = this.settings.includeSessionDetails, count = items.length;
-        let subject = `[Remote Pi] ${count > 1 ? `${count} 个 Agent 任务` : 'Agent 任务'}已完成`;
+        const aborted = items.filter(item => item.aborted).length;
+        // A mixed batch is neither completed nor interrupted, so it says how many of each.
+        const verb = aborted === count ? '已中断' : aborted ? `已结束（${aborted} 个被中断）` : '已完成';
+        let subject = `[Remote Pi] ${count > 1 ? `${count} 个 Agent 任务` : 'Agent 任务'}${verb}`;
         if (count === 1 && includeSessionDetails) {
             const label = oneLine(items[0].context.sessionName || '', 80);
             if (label)
-                subject = `[Remote Pi] ${label}已完成`;
+                subject = `[Remote Pi] ${label}${verb}`;
         }
         let text;
         if (!includeResponse && !includeSessionDetails)
-            text = count > 1 ? `${count} 个 Agent 任务已完成。` : '有 Agent 任务完成。';
+            text = count > 1 ? `${count} 个 Agent 任务${verb}。` : aborted ? '有 Agent 任务被中断。' : '有 Agent 任务完成。';
         else
             text = items.map((item, index) => {
-                const lines = count > 1 ? [`任务 ${index + 1}`] : [];
+                const lines = count > 1 ? [`任务 ${index + 1}${item.aborted ? '（已中断）' : ''}`] : item.aborted ? ['任务已中断'] : [];
                 if (includeSessionDetails) {
                     lines.push(`Session：${item.context.sessionName?.trim() || '未命名'}`);
                     if (item.context.cwd)
@@ -116,9 +141,12 @@ export class MailNotifier {
                 }
                 return lines.join('\n');
             }).join('\n\n--------------------\n\n');
+        await this.sendMail(subject, text, { task_count: count, aborted_count: aborted });
+    }
+    async sendMail(subject, text, metadata = {}) {
         const payload = {
             to: [this.config.recipient], subject, text, priority: this.config.priority, purpose: 'transactional',
-            metadata: { source: 'remote-pi', task_count: count, notification_id: randomUUID() }
+            metadata: { source: 'remote-pi', ...metadata, notification_id: randomUUID() }
         };
         if (this.config.senderId)
             payload.sender_id = this.config.senderId;

package/dist/main.js

@@ -1,6 +1,7 @@
 #!/usr/bin/env node
-import { RemotePiServer } from './server.js';
+import { RemotePiServer, LOOPBACK_HOSTS } from './server.js';
 import { VoiceManager } from './voice.js';
+import { SessionNamer, DEFAULT_SESSION_NAMER } from './session-namer.js';
 import { MailNotifier } from './mail-notifier.js';
 import pkg from '../package.json' with { type: 'json' };
 const args = process.argv.slice(2);
@@ -11,7 +12,9 @@ const envSecret = (flag) => { const name = value(flag, '').trim(); if (!name)
     process.exit(1);
 } return result; };
 if (args.includes('--help') || args.includes('-h')) {
-    console.log(`pi2web ${pkg.version}\n\nUsage: pi2web [options]\n\nOptions:\n  --host <address>                    Listen address (default: 127.0.0.1)\n  --port <number>                     Listen port (default: 11318)\n  --data-dir <path>                   Metadata directory (default: ~/.pi/remote-pi)\n  --maildispatch-endpoint <url>       MailDispatch message API endpoint\n  --maildispatch-api-key-env <name>   Environment variable containing the MailDispatch API key\n  --maildispatch-notify-to <email>    Email address notified when an Agent task settles\n  --maildispatch-sender-id <id>       Optional MailDispatch sender ID\n  --voice-base-url <url>              OpenAI-compatible TTS endpoint, e.g. Speaches or openai-edge-tts\n  --voice-stt-model <id>              Optional speech-to-text model ID; omit for TTS-only mode\n  --voice-tts-model <id>              Text-to-speech model ID\n  --voice-tts-voice <id>              TTS voice ID\n  --voice-tts-format <pcm|mp3>         TTS response format (default: pcm)\n  --voice-api-key-env <name>          Environment variable containing the speech API key\n  --voice-summary-base-url <url>      OpenAI-compatible summary LLM endpoint\n  --voice-summary-model <id>          Summary LLM model ID\n  --voice-summary-api-key-env <name>  Environment variable containing the summary API key\n  --voice-language <tag>              Spoken summary language (default: zh-CN)\n  --voice-request-timeout <ms>        Speech and summary request timeout (default: 120000)\n  --rotate-access-token               Generate a new pairing code and exit\n  --version                           Print version\n  -h, --help                          Show help\n\nMail notifications require endpoint, API-key environment variable, and recipient. Voice is disabled unless --voice-base-url is set. The Web UI is served at the same address. Its pairing code must be entered manually; the browser asks before saving it locally.`);
+    console.log(`pi2web ${pkg.version}\n\nUsage: pi2web [options]\n\nOptions:\n  --host <address>                    Listen address (default: 127.0.0.1)\n  --port <number>                     Listen port (default: 11318)\n  --data-dir <path>                   Metadata directory (default: ~/.pi/remote-pi)\n  --maildispatch-endpoint <url>       MailDispatch message API endpoint\n  --maildispatch-api-key-env <name>   Environment variable containing the MailDispatch API key\n  --maildispatch-notify-to <email>    Email address notified when an Agent task settles\n  --maildispatch-sender-id <id>       Optional MailDispatch sender ID\n  --voice-base-url <url>              OpenAI-compatible TTS endpoint, e.g. Speaches or openai-edge-tts\n  --voice-stt-model <id>              Optional speech-to-text model ID; omit for TTS-only mode\n  --voice-tts-model <id>              Text-to-speech model ID\n  --voice-tts-voice <id>              TTS voice ID\n  --voice-tts-format <pcm|mp3>         TTS response format (default: pcm)\n  --voice-api-key-env <name>          Environment variable containing the speech API key\n  --voice-summary-base-url <url>      OpenAI-compatible summary LLM endpoint\n  --voice-summary-model <id>          Summary LLM model ID\n  --voice-summary-api-key-env <name>  Environment variable containing the summary API key\n  --voice-language <tag>              Spoken summary language (default: zh-CN)\n  --voice-request-timeout <ms>        Speech and summary request timeout (default: 120000)\n  --session-naming <on|off>           Automatic session naming (default: on)\n  --session-name-base-url <url>       OpenAI-compatible naming LLM endpoint (default: ${DEFAULT_SESSION_NAMER.baseUrl})\n  --session-name-model <id>           Naming LLM model ID (default: ${DEFAULT_SESSION_NAMER.model})\n  --session-name-api-key-env <name>   Environment variable containing the naming API key (default: none)\n  --session-name-language <tag>       Session name language (default: zh-CN)\n  --session-name-request-timeout <ms> Naming request timeout (default: 60000)\n  --session-name-max-output-tokens <n> Naming output token budget (default: ${DEFAULT_SESSION_NAMER.maxOutputTokens})\n  --rotate-access-token               Generate a new pairing code and exit\n  --create-voice-token                Create or replace a restricted voice token and exit\n  --revoke-voice-token                Revoke the restricted voice token and exit
+  --set-access-token <token>          Set a specific pairing code and exit
+  --set-access-token-env <name>       Set the pairing code from an environment variable and exit\n  --no-auth                           Disable pairing-code auth (loopback only by default)\n  --allow-insecure-no-auth             Allow non-loopback binds and any Host/Origin (requires --no-auth; DANGEROUS)\n  --version                           Print version\n  -h, --help                          Show help\n\nMail notifications require endpoint, API-key environment variable, and recipient. Voice is disabled unless --voice-base-url is set. Automatic session naming is independent of voice and on by default; disable it with --session-naming off. The Web UI is served at the same address. Its pairing code must be entered manually; the browser asks before saving it locally.`);
     process.exit(0);
 }
 if (args.includes('--version') || args.includes('-v')) {
@@ -23,6 +26,15 @@ if (!Number.isInteger(port) || port < 0 || port > 65535) {
     console.error('Invalid --port');
     process.exit(1);
 }
+const noAuth = args.includes('--no-auth'), allowInsecureNoAuth = args.includes('--allow-insecure-no-auth');
+if (allowInsecureNoAuth && !noAuth) {
+    console.error('--allow-insecure-no-auth requires --no-auth');
+    process.exit(1);
+}
+if (noAuth && !allowInsecureNoAuth && !LOOPBACK_HOSTS.includes(host.trim())) {
+    console.error('--no-auth requires --host 127.0.0.1, ::1 or localhost; use --allow-insecure-no-auth to explicitly allow remote access without authentication');
+    process.exit(1);
+}
 const voiceBaseUrl = value('--voice-base-url', '');
 let voice;
 if (voiceBaseUrl) {
@@ -43,6 +55,32 @@ if (voiceBaseUrl) {
     const config = { speechBaseUrl: voiceBaseUrl, sttModel: value('--voice-stt-model', '').trim() || undefined, ttsModel: required('--voice-tts-model'), ttsVoice: required('--voice-tts-voice'), ttsFormat, speechApiKey: envSecret('--voice-api-key-env'), summaryBaseUrl: required('--voice-summary-base-url'), summaryModel: required('--voice-summary-model'), summaryApiKey: envSecret('--voice-summary-api-key-env'), language: value('--voice-language', 'zh-CN'), requestTimeoutMs };
     voice = new VoiceManager(config);
 }
+const namingMode = value('--session-naming', 'on').trim().toLowerCase();
+if (!['on', 'off'].includes(namingMode)) {
+    console.error('--session-naming must be on or off');
+    process.exit(1);
+}
+let sessionNamer;
+if (namingMode === 'on') {
+    const namingTimeoutMs = Number(value('--session-name-request-timeout', String(DEFAULT_SESSION_NAMER.requestTimeoutMs)));
+    if (!Number.isInteger(namingTimeoutMs) || namingTimeoutMs < 1000) {
+        console.error('--session-name-request-timeout must be an integer of at least 1000 milliseconds');
+        process.exit(1);
+    }
+    const namingMaxTokens = Number(value('--session-name-max-output-tokens', String(DEFAULT_SESSION_NAMER.maxOutputTokens)));
+    if (!Number.isInteger(namingMaxTokens) || namingMaxTokens < 16) {
+        console.error('--session-name-max-output-tokens must be an integer of at least 16');
+        process.exit(1);
+    }
+    sessionNamer = new SessionNamer({
+        baseUrl: value('--session-name-base-url', DEFAULT_SESSION_NAMER.baseUrl).trim() || DEFAULT_SESSION_NAMER.baseUrl,
+        model: value('--session-name-model', DEFAULT_SESSION_NAMER.model).trim() || DEFAULT_SESSION_NAMER.model,
+        apiKey: envSecret('--session-name-api-key-env'),
+        language: value('--session-name-language', DEFAULT_SESSION_NAMER.language),
+        requestTimeoutMs: namingTimeoutMs,
+        maxOutputTokens: namingMaxTokens
+    });
+}
 const mailEndpoint = value('--maildispatch-endpoint', '').trim(), mailKeyEnv = value('--maildispatch-api-key-env', '').trim(), mailRecipient = value('--maildispatch-notify-to', '').trim();
 const mailParts = [mailEndpoint, mailKeyEnv, mailRecipient].filter(Boolean).length;
 if (mailParts > 0 && mailParts < 3) {
@@ -65,12 +103,53 @@ if (mailParts === 3) {
     }
     mailNotifier = new MailNotifier({ endpoint: endpoint.toString(), apiKey: envSecret('--maildispatch-api-key-env'), recipient: mailRecipient, senderId: value('--maildispatch-sender-id', '').trim() || undefined });
 }
-const server = new RemotePiServer({ host, port, dataDir: value('--data-dir', process.env.PI_REMOTE_DIR ?? `${process.env.HOME ?? '.'}/.pi/remote-pi`), voice, mailNotifier });
+const server = new RemotePiServer({ host, port, noAuth, allowInsecureNoAuth, dataDir: value('--data-dir', process.env.PI_REMOTE_DIR ?? `${process.env.HOME ?? '.'}/.pi/remote-pi`), voice, sessionNamer, mailNotifier });
 if (args.includes('--rotate-access-token')) {
     await server.auth.init();
     console.log(await server.auth.rotate());
     process.exit(0);
 }
+if (args.includes('--create-voice-token')) {
+    const first = await server.auth.init();
+    if (first.token)
+        console.error(`Remote Pi pairing code (shown once; save it securely): ${first.token}`);
+    console.error('Draft-only voice token (shown once):');
+    console.log(await server.auth.rotateVoice());
+    process.exit(0);
+}
+if (args.includes('--revoke-voice-token')) {
+    const first = await server.auth.init();
+    if (first.token)
+        console.error(`Remote Pi pairing code (shown once; save it securely): ${first.token}`);
+    await server.auth.revokeVoice();
+    console.error('Voice token revoked.');
+    process.exit(0);
+}
+if (args.includes('--set-access-token') || args.includes('--set-access-token-env')) {
+    const fromEnv = args.includes('--set-access-token-env'), flag = fromEnv ? '--set-access-token-env' : '--set-access-token';
+    let token = value(flag, '');
+    if (!token) {
+        console.error(`${flag} requires a value`);
+        process.exit(1);
+    }
+    if (fromEnv) {
+        const name = token;
+        token = process.env[name] ?? '';
+        if (!token) {
+            console.error(`${flag} references missing or empty environment variable ${name}`);
+            process.exit(1);
+        }
+    }
+    try {
+        await server.auth.setToken(token);
+        console.log('Pairing code updated. Use it to pair Web UI clients.');
+    }
+    catch (error) {
+        console.error(error.message);
+        process.exit(1);
+    }
+    process.exit(0);
+}
 if (args.includes('--print-access-token')) {
     console.error('The pairing code is only shown on first startup or rotation.');
     process.exit(1);
@@ -79,7 +158,7 @@ try {
     await server.start();
     const address = server.address();
     console.log(`Remote Pi is ready: http://${host}:${address?.port ?? port}`);
-    console.log('Open this URL and enter the pairing code manually.');
+    console.log(noAuth ? 'Auth is disabled (--no-auth). Anyone who can reach this address can control the agents; leave the pairing code empty in the Web UI.' : 'Open this URL and enter the pairing code manually.');
 }
 catch (error) {
     console.error(`Failed to start Remote Pi: ${error.message}`);

package/dist/mcp.js

@@ -0,0 +1,113 @@
+import { readFileSync, writeFileSync, mkdirSync } from 'node:fs';
+import path from 'node:path';
+import { getAgentDir, hasTrustRequiringProjectResources, ProjectTrustStore } from '@earendil-works/pi-coding-agent';
+const globalConfigPath = () => path.join(getAgentDir(), 'mcp.json');
+const projectConfigPath = (cwd) => path.join(cwd, '.pi', 'mcp.json');
+/** A project entry without transport fields only overrides settings of the global server. */
+const isOverrideOnly = (config) => config.command === undefined && config.url === undefined && config.type === undefined;
+function readConfig(file, errors) {
+    let text;
+    try {
+        text = readFileSync(file, 'utf8');
+    }
+    catch {
+        return {};
+    }
+    try {
+        const value = JSON.parse(text)?.mcpServers;
+        if (!value || typeof value !== 'object')
+            return {};
+        // One malformed entry must not hide the servers next to it.
+        const servers = {};
+        for (const [name, config] of Object.entries(value)) {
+            if (config && typeof config === 'object' && !Array.isArray(config))
+                servers[name] = config;
+            else
+                errors.push(`${file}: “${name}” is not a server configuration`);
+        }
+        return servers;
+    }
+    catch (error) {
+        errors.push(`${file}: ${error.message}`);
+        return {};
+    }
+}
+function summarize(entry) {
+    const config = entry.config, http = typeof config.url === 'string';
+    return {
+        name: entry.name,
+        enabled: config.enabled !== false,
+        exposure: typeof config.exposure === 'string' ? config.exposure : 'codemode',
+        transport: http ? 'http' : 'stdio',
+        target: http ? String(config.url) : [config.command, ...(Array.isArray(config.args) ? config.args : [])].filter(Boolean).join(' ').trim(),
+        description: typeof config.description === 'string' ? config.description : undefined,
+        scope: entry.scope,
+        source: entry.source,
+        override: entry.override
+    };
+}
+function load(cwd) {
+    const errors = [], globalFile = globalConfigPath(), projectFile = projectConfigPath(cwd);
+    let projectTrusted = false, explicitlyTrusted = false;
+    // Pi only reads project files such as .pi/mcp.json after the project was trusted interactively.
+    // A project without trust-requiring resources is read, but writing one into it would make Pi ask
+    // for trust first, so project overrides are only written where trust was actually granted.
+    try {
+        explicitlyTrusted = new ProjectTrustStore(getAgentDir()).get(cwd) === true;
+        projectTrusted = explicitlyTrusted || !hasTrustRequiringProjectResources(cwd);
+    }
+    catch { /* Untrusted is the safe default. */ }
+    const globals = readConfig(globalFile, errors), project = projectTrusted ? readConfig(projectFile, errors) : {};
+    const entries = new Map();
+    for (const [name, config] of Object.entries(globals))
+        entries.set(name, { name, config, scope: 'global', source: globalFile });
+    for (const [name, config] of Object.entries(project)) {
+        const existing = entries.get(name);
+        if (existing && isOverrideOnly(config))
+            entries.set(name, { ...existing, config: { ...existing.config, ...config }, override: projectFile });
+        else
+            entries.set(name, { name, config, scope: 'project', source: projectFile });
+    }
+    return { entries: [...entries.values()], globalFile, projectFile: projectTrusted ? projectFile : undefined, projectTrusted, explicitlyTrusted, errors };
+}
+/** Every configured MCP server for `cwd`, including disabled ones. */
+export function listMcpServers(cwd) {
+    const config = load(cwd);
+    return { servers: config.entries.map(summarize), globalConfig: config.globalFile, projectConfig: config.projectFile, projectTrusted: config.projectTrusted, errors: config.errors };
+}
+/** Write one server's `enabled` flag into `file`, keeping the rest of the file as it is. */
+function writeEnabled(file, name, enabled, explicit = false) {
+    // Only a missing file starts a new one: a file that cannot be read or parsed must not be overwritten.
+    let text;
+    try {
+        text = readFileSync(file, 'utf8');
+    }
+    catch (error) {
+        if (error.code !== 'ENOENT')
+            throw error;
+    }
+    const document = text?.trim() ? JSON.parse(text) : {};
+    const servers = document.mcpServers && typeof document.mcpServers === 'object' ? document.mcpServers : (document.mcpServers = {});
+    const current = servers[name] && typeof servers[name] === 'object' ? servers[name] : (servers[name] = {});
+    // `enabled: true` is the default, so it is dropped where the server itself is defined. A project
+    // override only changes what it states, so there the flag is always written out.
+    if (enabled && !explicit)
+        delete current.enabled;
+    else
+        current.enabled = enabled;
+    mkdirSync(path.dirname(file), { recursive: true });
+    writeFileSync(file, `${JSON.stringify(document, null, 2)}\n`);
+}
+/**
+ * Enable or disable one server. A global server is changed with a project override when the project is
+ * trusted, which keeps the change local to this project, and in the global file otherwise.
+ */
+export function setMcpServerEnabled(cwd, name, enabled) {
+    const config = load(cwd);
+    const entry = config.entries.find(item => item.name === name);
+    if (!entry)
+        throw Object.assign(new Error('MCP server not found'), { code: 'MCP_SERVER_NOT_FOUND' });
+    const asOverride = entry.scope === 'global' && config.explicitlyTrusted && !!config.projectFile;
+    writeEnabled(asOverride ? config.projectFile : entry.source, name, enabled, asOverride);
+    return listMcpServers(cwd);
+}

package/dist/metadata-store.js

@@ -45,6 +45,7 @@ export class MetadataStore {
         session_name TEXT,
         cwd TEXT NOT NULL,
         status TEXT NOT NULL,
+        profile TEXT NOT NULL DEFAULT 'default',
         created_at INTEGER NOT NULL,
         last_active_at INTEGER NOT NULL,
         archived_at INTEGER,
@@ -77,11 +78,19 @@ export class MetadataStore {
       CREATE INDEX IF NOT EXISTS sessions_workspace_active_recent ON sessions(workspace_id,last_active_at DESC,session_id DESC) WHERE archived_at IS NULL;
       CREATE INDEX IF NOT EXISTS sessions_cwd_active_recent ON sessions(cwd,last_active_at DESC,session_id DESC) WHERE archived_at IS NULL;
     `);
-        db.pragma('user_version = 1');
+        // Additive migration: old normal Agents stay normal after an upgrade.
+        const agentColumns = db.prepare('PRAGMA table_info(agents)').all();
+        if (!agentColumns.some(column => column.name === 'profile'))
+            db.exec("ALTER TABLE agents ADD COLUMN profile TEXT NOT NULL DEFAULT 'default'");
+        // Only stamp the initial version: later migrations (collaboration tables) raise it and must not be reset on restart.
+        if (Number(db.pragma('user_version', { simple: true })) < 1)
+            db.pragma('user_version = 1');
         this.archivedAgents = new Set(db.prepare('SELECT id FROM agents WHERE archived_at IS NOT NULL').all().map(row => row.id));
     }
     get database() { if (!this.db)
         throw new Error('Metadata store is not initialized'); return this.db; }
+    /** Shared handle so collaboration tables live in the same file and the same backup. */
+    get connection() { return this.database; }
     getSetting(key) { const row = this.database.prepare('SELECT value FROM settings WHERE key=?').get(key); if (!row)
         return; try {
         return JSON.parse(row.value);
@@ -92,8 +101,8 @@ export class MetadataStore {
     setSetting(key, value) { this.database.prepare('INSERT INTO settings(key,value,updated_at) VALUES(?,?,?) ON CONFLICT(key) DO UPDATE SET value=excluded.value,updated_at=excluded.updated_at').run(key, JSON.stringify(value), Date.now()); }
     listWorkspaces() { return this.database.prepare('SELECT id,label,root_path,created_at FROM workspaces ORDER BY created_at,id').all().map(row => ({ id: row.id, label: row.label, rootPath: row.root_path, createdAt: new Date(row.created_at).toISOString() })); }
     saveWorkspace(workspace) { this.database.prepare(`INSERT INTO workspaces(id,label,root_path,created_at) VALUES(?,?,?,?) ON CONFLICT(id) DO UPDATE SET label=excluded.label,root_path=excluded.root_path`).run(workspace.id, workspace.label, workspace.rootPath, asTime(workspace.createdAt)); }
-    listAgents() { return this.database.prepare('SELECT * FROM agents WHERE archived_at IS NULL ORDER BY last_active_at DESC,id DESC').all().map(row => ({ agentId: row.id, workspaceId: row.workspace_id, sessionId: row.session_id, sessionFile: row.session_file ?? undefined, sessionName: row.session_name ?? undefined, cwd: row.cwd, status: row.status, createdAt: new Date(row.created_at).toISOString(), lastActiveAt: new Date(row.last_active_at).toISOString() })); }
-    writeAgent(record, archivedAt) { this.database.prepare(`INSERT INTO agents(id,workspace_id,session_id,session_file,session_name,cwd,status,created_at,last_active_at,archived_at) VALUES(?,?,?,?,?,?,?,?,?,?) ON CONFLICT(id) DO UPDATE SET workspace_id=excluded.workspace_id,session_id=excluded.session_id,session_file=excluded.session_file,session_name=excluded.session_name,cwd=excluded.cwd,status=excluded.status,last_active_at=excluded.last_active_at,archived_at=excluded.archived_at`).run(record.agentId, record.workspaceId, record.sessionId, record.sessionFile ?? null, record.sessionName ?? null, record.cwd, record.status, asTime(record.createdAt), asTime(record.lastActiveAt), archivedAt); }
+    listAgents() { return this.database.prepare('SELECT * FROM agents WHERE archived_at IS NULL ORDER BY last_active_at DESC,id DESC').all().map(row => ({ agentId: row.id, workspaceId: row.workspace_id, sessionId: row.session_id, sessionFile: row.session_file ?? undefined, sessionName: row.session_name ?? undefined, cwd: row.cwd, status: row.status, profile: row.profile === 'collab' ? 'collab' : 'default', createdAt: new Date(row.created_at).toISOString(), lastActiveAt: new Date(row.last_active_at).toISOString() })); }
+    writeAgent(record, archivedAt) { this.database.prepare(`INSERT INTO agents(id,workspace_id,session_id,session_file,session_name,cwd,status,profile,created_at,last_active_at,archived_at) VALUES(?,?,?,?,?,?,?,?,?,?,?) ON CONFLICT(id) DO UPDATE SET workspace_id=excluded.workspace_id,session_id=excluded.session_id,session_file=excluded.session_file,session_name=excluded.session_name,cwd=excluded.cwd,status=excluded.status,profile=excluded.profile,last_active_at=excluded.last_active_at,archived_at=excluded.archived_at`).run(record.agentId, record.workspaceId, record.sessionId, record.sessionFile ?? null, record.sessionName ?? null, record.cwd, record.status, record.profile ?? 'default', asTime(record.createdAt), asTime(record.lastActiveAt), archivedAt); }
     saveAgent(record) { if (this.archivedAgents.has(record.agentId))
         return; this.pendingAgents.delete(record.agentId); this.writeAgent(record, null); }
     scheduleAgent(record) { if (this.archivedAgents.has(record.agentId))