pinomad 0.10.0 → 0.11.0

package/dist/{chunk-8gywfw5n.js → chunk-t91zt5f0.js}

@@ -3,7 +3,7 @@ import {
   generateKeyPair,
   keyPairFromPrivate,
   toBase64Url
-} from "./chunk-sygeb9qb.js";
+} from "./chunk-pqe7q1s7.js";
 
 // apps/host/src/devices.ts
 import { link, readFile, unlink, writeFile } from "node:fs/promises";
@@ -140,53 +140,4 @@ function pairingOffers(ttlMs = 5 * 60 * 1000) {
   };
 }
 
-// apps/host/src/server-config.ts
-import { randomBytes as randomBytes2 } from "node:crypto";
-import { readFile as readFile2, rename, rm, writeFile as writeFile2 } from "node:fs/promises";
-import { join as join2 } from "node:path";
-var SERVER_CONFIG_FILE = "server.json";
-var normalizeOrigin = (origin) => origin.replace(/\/+$/, "");
-async function readServerConfig(dataDir) {
-  let text;
-  try {
-    text = await readFile2(join2(dataDir, SERVER_CONFIG_FILE), "utf8");
-  } catch (error) {
-    if (error.code === "ENOENT")
-      return;
-    throw error;
-  }
-  let value;
-  try {
-    value = JSON.parse(text);
-  } catch {
-    throw new Error(`${join2(dataDir, SERVER_CONFIG_FILE)} is not valid JSON — delete it or run \`pinomad leave\``);
-  }
-  const origin = value?.origin;
-  if (typeof origin !== "string" || origin.trim() === "") {
-    throw new Error(`${join2(dataDir, SERVER_CONFIG_FILE)} is missing a string "origin"`);
-  }
-  const binding = value.binding;
-  return {
-    origin,
-    ...typeof binding === "string" && binding !== "" ? { binding } : {}
-  };
-}
-async function writeServerConfig(dataDir, config) {
-  const path = join2(dataDir, SERVER_CONFIG_FILE);
-  const tmp = `${path}.tmp-${process.pid}`;
-  await writeFile2(tmp, `${JSON.stringify({ origin: normalizeOrigin(config.origin), binding: randomBytes2(16).toString("base64url") })}
-`, { mode: 384 });
-  await rename(tmp, path);
-}
-var removeServerConfig = (dataDir) => rm(join2(dataDir, SERVER_CONFIG_FILE), { force: true });
-async function readServerBinding(dataDir) {
-  return (await readServerConfig(dataDir))?.binding;
-}
-function resolveRelayOrigin(flag, config) {
-  if (flag !== undefined && config !== undefined && normalizeOrigin(flag) !== normalizeOrigin(config.origin)) {
-    throw new Error(`--relay ${flag} disagrees with ${SERVER_CONFIG_FILE} (${config.origin}) — remove one`);
-  }
-  return flag ?? config?.origin;
-}
-
-export { DevicesDoc, ensureDevices, RevocationsDoc, admitDevice, loadHostKey, loadRelayKey, pairingOffers, normalizeOrigin, readServerConfig, writeServerConfig, removeServerConfig, readServerBinding, resolveRelayOrigin };
+export { DevicesDoc, ensureDevices, RevocationsDoc, admitDevice, loadHostKey, loadRelayKey, pairingOffers };

package/dist/{chunk-vax4zspw.js → chunk-tj57aqav.js}

@@ -1,10 +1,10 @@
 import {
   connectRemoteDurable
-} from "./chunk-4sepcfpy.js";
-import"./chunk-jgd38rna.js";
+} from "./chunk-jt34g8st.js";
+import"./chunk-xqycs43g.js";
 import {
   isLoopbackUrl
-} from "./chunk-sygeb9qb.js";
+} from "./chunk-pqe7q1s7.js";
 import {
   hostAddress
 } from "./chunk-ngf1zatm.js";

package/dist/{chunk-w2m9xkks.js → chunk-vvj9b1gc.js}

@@ -1,19 +1,19 @@
-import {
-  isParseArgsError
-} from "./chunk-kzbzacz9.js";
-import {
-  commandHint,
-  hostEntry,
-  packagedVersion
-} from "./chunk-zehwx009.js";
 import {
   ProtocolMismatchError,
   connectRemoteDurable
-} from "./chunk-4sepcfpy.js";
+} from "./chunk-jt34g8st.js";
+import {
+  isParseArgsError
+} from "./chunk-kzbzacz9.js";
 import {
   DEFAULT_DATA_DIR,
   hostAddress
 } from "./chunk-ngf1zatm.js";
+import {
+  commandHint,
+  hostEntry,
+  packagedVersion
+} from "./chunk-sd5fkxjj.js";
 
 // apps/host/src/cli/service.ts
 import { execFile as execFile2 } from "node:child_process";
@@ -81,20 +81,21 @@ function argValue(args, flag) {
   }
   return value;
 }
-function withoutRelayArgs(args) {
+function withoutArg(args, flag) {
   const out = [];
   for (let i = 0;i < args.length; i += 1) {
     const arg = args[i];
-    if (arg === "--relay") {
+    if (arg === flag) {
       i += 1;
       continue;
     }
-    if (arg.startsWith("--relay="))
+    if (arg.startsWith(`${flag}=`))
       continue;
     out.push(arg);
   }
   return out;
 }
+var withoutRelayArgs = (args) => withoutArg(args, "--relay");
 var unescapeExec = (value) => value.replace(/\\(.)/g, "$1");
 var unspecify = (value) => value.replace(/%%/g, "%").replace(/\$\$/g, "$");
 var xmlUnescape = (value) => value.replace(/&quot;/g, '"').replace(/&apos;/g, "'").replace(/&lt;/g, "<").replace(/&gt;/g, ">").replace(/&amp;/g, "&");
@@ -409,15 +410,13 @@ async function install(argv) {
   console.log(`data dir: ${spec.dataDir}`);
   console.log(`browser link: ${commandHint("link")}    pairing QR: ${commandHint("pair")}`);
 }
-async function status(argv) {
-  const state = await serviceManager().state();
-  console.log(`service: ${state.installed ? state.detail : "not installed"}`);
-  if (packagedVersion === undefined) {
-    const head = await run2("git", ["rev-parse", "--short", "HEAD"], { cwd: repoRoot }).then(({ stdout }) => stdout.trim(), () => "unknown");
-    console.log(`checkout: ${head}`);
-  } else {
-    console.log(`version: ${packagedVersion}`);
-  }
+async function versionLine() {
+  if (packagedVersion !== undefined)
+    return `version: ${packagedVersion}`;
+  const head = await run2("git", ["rev-parse", "--short", "HEAD"], { cwd: repoRoot }).then(({ stdout }) => stdout.trim(), () => "unknown");
+  return `checkout: ${head}`;
+}
+async function reachabilityLine(argv) {
   try {
     const { url, token } = await hostAddress(argv);
     const remote = await connectToHost(url, token);
@@ -425,14 +424,20 @@ async function status(argv) {
       await remote.controller.toggleTasks();
     const tasks = remote.view.current().tasks;
     const count = tasks === undefined ? 0 : Object.keys(tasks.tasks).length;
-    console.log(`host: reachable at ${url}, ${count} live task${count === 1 ? "" : "s"}`);
     remote.close();
+    return `host: reachable at ${url}, ${count} live task${count === 1 ? "" : "s"}`;
   } catch (error) {
     if (isParseArgsError(error))
       throw error;
-    console.log(`host: unreachable (${message(error)})`);
+    return `host: unreachable (${message(error)})`;
   }
 }
+async function status(argv) {
+  const state = await serviceManager().state();
+  console.log(`service: ${state.installed ? state.detail : "not installed"}`);
+  console.log(await versionLine());
+  console.log(await reachabilityLine(argv));
+}
 async function restartService({
   force,
   argv,
@@ -536,4 +541,4 @@ async function main(argv) {
 }
 if (false) {}
 
-export { installSpec, argValue, withoutRelayArgs, serviceManager, restartService, main };
+export { installSpec, argValue, withoutArg, withoutRelayArgs, serviceManager, versionLine, reachabilityLine, restartService, main };

package/dist/{chunk-jgd38rna.js → chunk-xqycs43g.js}

@@ -2,7 +2,176 @@ import {
   HOST_SETTING_KEYS,
   isQueueMode,
   isThinkingLevel
-} from "./chunk-sygeb9qb.js";
+} from "./chunk-pqe7q1s7.js";
+
+// packages/protocol/src/rtc.ts
+function rtcAddressScope(address) {
+  const ip = parseRtcAddress(address);
+  if (ip === undefined)
+    return "unknown";
+  if (ip.family === 4)
+    return ipv4Scope(ip.octets);
+  const octets = mappedIpv4(ip.segments);
+  return octets === undefined ? ipv6Scope(ip.segments) : ipv4Scope(octets);
+}
+function rtcCandidateEnd(info) {
+  return {
+    ...info.type === undefined ? {} : { type: info.type },
+    ...info.address === undefined ? {} : { address: info.address },
+    scope: rtcAddressScope(info.address)
+  };
+}
+function rtcSelectedPair(local, remote) {
+  return { local: rtcCandidateEnd(local), remote: rtcCandidateEnd(remote) };
+}
+function parseRtcAddress(address) {
+  if (address === undefined)
+    return;
+  const text = address.trim();
+  if (text === "")
+    return;
+  let host = text;
+  if (text.startsWith("[")) {
+    const close = text.indexOf("]");
+    if (close === -1)
+      return;
+    const tail = text.slice(close + 1);
+    if (tail !== "" && !/^:\d+$/.test(tail))
+      return;
+    host = text.slice(1, close);
+  } else if (text.split(":").length === 2) {
+    const [candidate, port] = text.split(":");
+    if (/^\d+$/.test(port))
+      host = candidate;
+  }
+  const zone = host.indexOf("%");
+  if (zone !== -1)
+    host = host.slice(0, zone);
+  const ipv4 = parseIpv4(host);
+  if (ipv4 !== undefined)
+    return { family: 4, octets: ipv4 };
+  const ipv6 = parseIpv6(host);
+  return ipv6 === undefined ? undefined : { family: 6, segments: ipv6 };
+}
+function parseIpv4(text) {
+  const parts = text.split(".");
+  if (parts.length !== 4)
+    return;
+  const octets = [];
+  for (const part of parts) {
+    if (!/^(?:0|[1-9]\d{0,2})$/.test(part))
+      return;
+    const value = Number(part);
+    if (value > 255)
+      return;
+    octets.push(value);
+  }
+  return octets;
+}
+function parseIpv6(text) {
+  const halves = text.split("::");
+  if (halves.length > 2)
+    return;
+  const parsePart = (part, allowIpv4) => {
+    if (part === "")
+      return [];
+    const tokens = part.split(":");
+    const groups = [];
+    for (let index = 0;index < tokens.length; index++) {
+      const token = tokens[index];
+      if (allowIpv4 && index === tokens.length - 1 && token.includes(".")) {
+        const v4 = parseIpv4(token);
+        if (v4 === undefined)
+          return;
+        groups.push(v4[0] << 8 | v4[1], v4[2] << 8 | v4[3]);
+        continue;
+      }
+      if (!/^[0-9a-fA-F]{1,4}$/.test(token))
+        return;
+      groups.push(Number.parseInt(token, 16));
+    }
+    return groups;
+  };
+  if (halves.length === 1) {
+    const groups = parsePart(text, true);
+    return groups?.length === 8 ? groups : undefined;
+  }
+  const left = parsePart(halves[0], false);
+  const right = parsePart(halves[1], true);
+  if (left === undefined || right === undefined)
+    return;
+  const zeros = 8 - left.length - right.length;
+  if (zeros < 1)
+    return;
+  return [...left, ...new Array(zeros).fill(0), ...right];
+}
+function mappedIpv4(segments) {
+  if (!segments.slice(0, 5).every((group) => group === 0) || segments[5] !== 65535)
+    return;
+  return [segments[6] >> 8, segments[6] & 255, segments[7] >> 8, segments[7] & 255];
+}
+function ipv4Scope(octets) {
+  const [a, b] = octets;
+  if (a === 127)
+    return "loopback";
+  if (a === 100 && b >= 64 && b <= 127)
+    return "tailnet";
+  if (a === 10 || a === 172 && b >= 16 && b <= 31 || a === 192 && b === 168 || a === 169 && b === 254) {
+    return "lan";
+  }
+  return "public";
+}
+function ipv6Scope(segments) {
+  if (segments[0] === 64890 && segments[1] === 4444 && segments[2] === 41440)
+    return "tailnet";
+  if ((segments[0] & 65024) === 64512 || (segments[0] & 65472) === 65152)
+    return "lan";
+  if (segments.slice(0, 7).every((group) => group === 0) && segments[7] === 1)
+    return "loopback";
+  return "public";
+}
+var RTC_DEFAULT_STUN = ["stun:stun.cloudflare.com:3478"];
+var RTC_DATA_CHANNEL_LABEL = "pinomad";
+var RTC_MAX_RECORD_BYTES = 65535;
+var RTC_DEFAULT_MAX_MESSAGE_SIZE = 65536;
+var RTC_MIN_MAX_MESSAGE_SIZE = RTC_MAX_RECORD_BYTES;
+function isRtcHello(value) {
+  if (typeof value !== "object" || value === null || Array.isArray(value))
+    return false;
+  const hello = value;
+  return Array.isArray(hello.stun) && hello.stun.every((server) => typeof server === "string" && server.length > 0) && hello.signalOnly === true;
+}
+function rtcCandidateType(candidate) {
+  const parts = candidate.trim().split(/\s+/);
+  const at = parts.indexOf("typ");
+  return at === -1 ? undefined : parts[at + 1];
+}
+function sdpCandidates(sdp) {
+  return sdp.split(/\r?\n/).filter((line) => line.startsWith("a=candidate:")).map((line) => line.slice("a=".length));
+}
+function withRtcCandidates(sdp, candidates) {
+  const lines = sdp.split(/\r?\n/).filter((line) => line !== "" && !line.startsWith("a=candidate:") && line !== "a=end-of-candidates");
+  const unique = [...new Set(candidates.map((candidate) => candidate.replace(/^a=/, "")))];
+  return [...lines, ...unique.map((candidate) => `a=${candidate}`), "a=end-of-candidates", ""].join(`\r
+`);
+}
+function parseRtcMaxMessageSize(sdp) {
+  const line = sdp.split(/\r?\n/).find((entry) => entry.startsWith("a=max-message-size:"));
+  if (line === undefined)
+    return { kind: "bounded", bytes: RTC_DEFAULT_MAX_MESSAGE_SIZE };
+  const raw = line.slice("a=max-message-size:".length).trim();
+  if (!/^\d+$/.test(raw))
+    return { kind: "invalid", reason: `malformed a=max-message-size: ${raw}` };
+  const bytes = Number(raw);
+  if (!Number.isSafeInteger(bytes))
+    return { kind: "invalid", reason: `a=max-message-size is not a safe integer: ${raw}` };
+  if (bytes === 0)
+    return { kind: "unlimited" };
+  if (bytes < RTC_MIN_MAX_MESSAGE_SIZE) {
+    return { kind: "invalid", reason: `a=max-message-size ${bytes} cannot carry a ${RTC_MIN_MAX_MESSAGE_SIZE}-byte record` };
+  }
+  return { kind: "bounded", bytes };
+}
 
 // packages/protocol/src/auth.ts
 var CUSTOM_PROVIDER_APIS = ["openai-completions", "openai-responses", "anthropic-messages", "google-generative-ai"];
@@ -218,175 +387,6 @@ function nonempty(value) {
   return typeof value === "string" && value.length > 0;
 }
 
-// packages/protocol/src/rtc.ts
-function rtcAddressScope(address) {
-  const ip = parseRtcAddress(address);
-  if (ip === undefined)
-    return "unknown";
-  if (ip.family === 4)
-    return ipv4Scope(ip.octets);
-  const octets = mappedIpv4(ip.segments);
-  return octets === undefined ? ipv6Scope(ip.segments) : ipv4Scope(octets);
-}
-function rtcCandidateEnd(info) {
-  return {
-    ...info.type === undefined ? {} : { type: info.type },
-    ...info.address === undefined ? {} : { address: info.address },
-    scope: rtcAddressScope(info.address)
-  };
-}
-function rtcSelectedPair(local, remote) {
-  return { local: rtcCandidateEnd(local), remote: rtcCandidateEnd(remote) };
-}
-function parseRtcAddress(address) {
-  if (address === undefined)
-    return;
-  const text = address.trim();
-  if (text === "")
-    return;
-  let host = text;
-  if (text.startsWith("[")) {
-    const close = text.indexOf("]");
-    if (close === -1)
-      return;
-    const tail = text.slice(close + 1);
-    if (tail !== "" && !/^:\d+$/.test(tail))
-      return;
-    host = text.slice(1, close);
-  } else if (text.split(":").length === 2) {
-    const [candidate, port] = text.split(":");
-    if (/^\d+$/.test(port))
-      host = candidate;
-  }
-  const zone = host.indexOf("%");
-  if (zone !== -1)
-    host = host.slice(0, zone);
-  const ipv4 = parseIpv4(host);
-  if (ipv4 !== undefined)
-    return { family: 4, octets: ipv4 };
-  const ipv6 = parseIpv6(host);
-  return ipv6 === undefined ? undefined : { family: 6, segments: ipv6 };
-}
-function parseIpv4(text) {
-  const parts = text.split(".");
-  if (parts.length !== 4)
-    return;
-  const octets = [];
-  for (const part of parts) {
-    if (!/^(?:0|[1-9]\d{0,2})$/.test(part))
-      return;
-    const value = Number(part);
-    if (value > 255)
-      return;
-    octets.push(value);
-  }
-  return octets;
-}
-function parseIpv6(text) {
-  const halves = text.split("::");
-  if (halves.length > 2)
-    return;
-  const parsePart = (part, allowIpv4) => {
-    if (part === "")
-      return [];
-    const tokens = part.split(":");
-    const groups = [];
-    for (let index = 0;index < tokens.length; index++) {
-      const token = tokens[index];
-      if (allowIpv4 && index === tokens.length - 1 && token.includes(".")) {
-        const v4 = parseIpv4(token);
-        if (v4 === undefined)
-          return;
-        groups.push(v4[0] << 8 | v4[1], v4[2] << 8 | v4[3]);
-        continue;
-      }
-      if (!/^[0-9a-fA-F]{1,4}$/.test(token))
-        return;
-      groups.push(Number.parseInt(token, 16));
-    }
-    return groups;
-  };
-  if (halves.length === 1) {
-    const groups = parsePart(text, true);
-    return groups?.length === 8 ? groups : undefined;
-  }
-  const left = parsePart(halves[0], false);
-  const right = parsePart(halves[1], true);
-  if (left === undefined || right === undefined)
-    return;
-  const zeros = 8 - left.length - right.length;
-  if (zeros < 1)
-    return;
-  return [...left, ...new Array(zeros).fill(0), ...right];
-}
-function mappedIpv4(segments) {
-  if (!segments.slice(0, 5).every((group) => group === 0) || segments[5] !== 65535)
-    return;
-  return [segments[6] >> 8, segments[6] & 255, segments[7] >> 8, segments[7] & 255];
-}
-function ipv4Scope(octets) {
-  const [a, b] = octets;
-  if (a === 127)
-    return "loopback";
-  if (a === 100 && b >= 64 && b <= 127)
-    return "tailnet";
-  if (a === 10 || a === 172 && b >= 16 && b <= 31 || a === 192 && b === 168 || a === 169 && b === 254) {
-    return "lan";
-  }
-  return "public";
-}
-function ipv6Scope(segments) {
-  if (segments[0] === 64890 && segments[1] === 4444 && segments[2] === 41440)
-    return "tailnet";
-  if ((segments[0] & 65024) === 64512 || (segments[0] & 65472) === 65152)
-    return "lan";
-  if (segments.slice(0, 7).every((group) => group === 0) && segments[7] === 1)
-    return "loopback";
-  return "public";
-}
-var RTC_DEFAULT_STUN = ["stun:stun.cloudflare.com:3478"];
-var RTC_DATA_CHANNEL_LABEL = "pinomad";
-var RTC_MAX_RECORD_BYTES = 65535;
-var RTC_DEFAULT_MAX_MESSAGE_SIZE = 65536;
-var RTC_MIN_MAX_MESSAGE_SIZE = RTC_MAX_RECORD_BYTES;
-function isRtcHello(value) {
-  if (typeof value !== "object" || value === null || Array.isArray(value))
-    return false;
-  const hello = value;
-  return Array.isArray(hello.stun) && hello.stun.every((server) => typeof server === "string" && server.length > 0) && hello.signalOnly === true;
-}
-function rtcCandidateType(candidate) {
-  const parts = candidate.trim().split(/\s+/);
-  const at = parts.indexOf("typ");
-  return at === -1 ? undefined : parts[at + 1];
-}
-function sdpCandidates(sdp) {
-  return sdp.split(/\r?\n/).filter((line) => line.startsWith("a=candidate:")).map((line) => line.slice("a=".length));
-}
-function withRtcCandidates(sdp, candidates) {
-  const lines = sdp.split(/\r?\n/).filter((line) => line !== "" && !line.startsWith("a=candidate:") && line !== "a=end-of-candidates");
-  const unique = [...new Set(candidates.map((candidate) => candidate.replace(/^a=/, "")))];
-  return [...lines, ...unique.map((candidate) => `a=${candidate}`), "a=end-of-candidates", ""].join(`\r
-`);
-}
-function parseRtcMaxMessageSize(sdp) {
-  const line = sdp.split(/\r?\n/).find((entry) => entry.startsWith("a=max-message-size:"));
-  if (line === undefined)
-    return { kind: "bounded", bytes: RTC_DEFAULT_MAX_MESSAGE_SIZE };
-  const raw = line.slice("a=max-message-size:".length).trim();
-  if (!/^\d+$/.test(raw))
-    return { kind: "invalid", reason: `malformed a=max-message-size: ${raw}` };
-  const bytes = Number(raw);
-  if (!Number.isSafeInteger(bytes))
-    return { kind: "invalid", reason: `a=max-message-size is not a safe integer: ${raw}` };
-  if (bytes === 0)
-    return { kind: "unlimited" };
-  if (bytes < RTC_MIN_MAX_MESSAGE_SIZE) {
-    return { kind: "invalid", reason: `a=max-message-size ${bytes} cannot carry a ${RTC_MIN_MAX_MESSAGE_SIZE}-byte record` };
-  }
-  return { kind: "bounded", bytes };
-}
-
 // packages/protocol/src/attachments.ts
 var MAX_ATTACHMENT_BYTES = 10 * 1024 * 1024;
 var MAX_ATTACHMENTS_PER_MESSAGE = 10;
@@ -619,4 +619,4 @@ function homeOf(index, summaries, id) {
   return;
 }
 
-export { isCustomProviderApi, HOST_STREAM_NAMES, hostStreams, conversationStream, docStream, UNAUTHORIZED_CLOSE_CODE, INVALID_FRAME_CLOSE_CODE, PROTOCOL, hostSupportsCall, hostSupportsFeature, parseClientFrame, rtcSelectedPair, RTC_DEFAULT_STUN, RTC_DATA_CHANNEL_LABEL, RTC_MAX_RECORD_BYTES, isRtcHello, rtcCandidateType, sdpCandidates, withRtcCandidates, parseRtcMaxMessageSize, MAX_ATTACHMENTS_PER_MESSAGE, MAX_PENDING_ATTACHMENTS, MAX_PENDING_ATTACHMENT_BYTES, ATTACHMENT_TTL_MS, MAX_ATTACHMENT_NAME_LENGTH, isAttachmentId, base64DecodedLength, attachmentBeginProblem, attachmentChunkProblem, attachmentBlock, parseAttachmentBlock, organize, checkoutOf, homeOf };
+export { rtcSelectedPair, RTC_DEFAULT_STUN, RTC_DATA_CHANNEL_LABEL, RTC_MAX_RECORD_BYTES, isRtcHello, rtcCandidateType, sdpCandidates, withRtcCandidates, parseRtcMaxMessageSize, isCustomProviderApi, HOST_STREAM_NAMES, hostStreams, conversationStream, docStream, UNAUTHORIZED_CLOSE_CODE, INVALID_FRAME_CLOSE_CODE, PROTOCOL, hostSupportsCall, hostSupportsFeature, parseClientFrame, MAX_ATTACHMENTS_PER_MESSAGE, MAX_PENDING_ATTACHMENTS, MAX_PENDING_ATTACHMENT_BYTES, ATTACHMENT_TTL_MS, MAX_ATTACHMENT_NAME_LENGTH, isAttachmentId, base64DecodedLength, attachmentBeginProblem, attachmentChunkProblem, attachmentBlock, parseAttachmentBlock, organize, checkoutOf, homeOf };

package/dist/{chunk-cx8k63by.js → chunk-y127fe1a.js}

@@ -3,7 +3,7 @@ import {
   fromBase64Url,
   parseEndpointSet,
   toBase64Url
-} from "./chunk-sygeb9qb.js";
+} from "./chunk-pqe7q1s7.js";
 
 // packages/protocol/src/relay.ts
 import { ed25519 } from "@noble/curves/ed25519.js";

package/dist/pinomad.js

@@ -5,27 +5,33 @@ import {
 } from "./chunk-kzbzacz9.js";
 import {
   packagedVersion
-} from "./chunk-zehwx009.js";
+} from "./chunk-sd5fkxjj.js";
 import {
   __require
 } from "./chunk-df32avw6.js";
 
 // apps/cli/src/pinomad.ts
 var COMMANDS = {
-  host: () => import("./chunk-czj9nfrz.js"),
-  server: () => import("./chunk-p978qj9m.js"),
-  relay: () => import("./chunk-p978qj9m.js"),
-  service: () => import("./chunk-bhtx2c8a.js"),
-  upgrade: () => import("./chunk-73efzaf1.js"),
-  link: () => import("./chunk-c5p9xkd8.js"),
-  pair: () => import("./chunk-vax4zspw.js"),
-  join: () => import("./chunk-c05g401k.js"),
-  leave: () => import("./chunk-5791mb0b.js")
+  up: () => import("./chunk-n1m1tjrk.js"),
+  status: () => import("./chunk-b457q0tm.js"),
+  host: () => import("./chunk-67gq282t.js"),
+  server: () => import("./chunk-9h5vawnm.js"),
+  relay: () => import("./chunk-9h5vawnm.js"),
+  service: () => import("./chunk-h5q2y57m.js"),
+  upgrade: () => import("./chunk-6d16c2fv.js"),
+  link: () => import("./chunk-as6pyf00.js"),
+  pair: () => import("./chunk-tj57aqav.js"),
+  join: () => import("./chunk-greb3dp6.js"),
+  leave: () => import("./chunk-4dcs8sbj.js")
 };
 var USAGE = `pinomad — PiNomad host, server, and utilities
 
 usage: pinomad <command> [args…]
 
+  up [--server] [--lan] [--yes]        set this host up: account, LAN, service
+  up --origin URL --remote-port N      server to join (app.pinomad.si), LAN port (7422)
+  up --no-server|--no-lan [--data-dir D]   turn a path off; with no flags, up asks
+  status [--data-dir D]                joined server and account, LAN, service, host
   host [--data-dir DIR] [--port 7420] [--project DIR]…   run the host in the foreground
   host --remote-port PORT [--public-url URL]   remote access, LAN (ADR-0008)
   host --relay URL   remote access via relay (ADR-0015)
@@ -37,7 +43,7 @@ usage: pinomad <command> [args…]
   upgrade [--force] [address flags]    upgrade the package and restart the service
   link [--data-dir D|--url U …]        print the browser link
   pair [--data-dir D|--url U …]        print a pairing QR
-  join <origin> <token> [--data-dir D] join this host to a server account
+  join <origin> [token] [--data-dir D] join this host to a server account
   leave [--data-dir D]                 leave the server account
   --version, -v                        print the version
 `;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pinomad",
-  "version": "0.10.0",
+  "version": "0.11.0",
   "description": "PiNomad — self-hosted coding agent: host, relay, and web client in one package",
   "license": "Apache-2.0",
   "type": "module",