pinomad 0.6.0 → 0.8.0

package/README.md

@@ -20,74 +20,21 @@ The host needs Node 25+ on macOS or Linux.
 
 ```sh
 npm i -g pinomad
-pinomad host        # uses the models and credentials you set up in pi (~/.pi/agent)
+pinomad host        # data and credentials live in ~/.pinomad
 pinomad link        # in another terminal: prints a browser link to the web client
 ```
 
-Haven't set up pi yet? `pinomad host --faux "hi"` runs a scripted fake model so you can click around.
-
-## Connect your other devices
-
-Open a port for paired devices, then pair each device with its own QR code:
-
-```sh
-pinomad host --remote-port 7422
-pinomad pair        # one-time QR code and link, expires after 5 minutes
-```
-
-Scan the code with the iPhone app, or paste the link into the Mac app. The remote port accepts paired devices only; revoke them under Devices in the sidebar.
-
-The pairing link uses the LAN address the host detects. On a tailnet or behind a tunnel, add `--public-url http://<tailnet-ip>:7422` so the link points there. To reach a host at home from anywhere, run the relay on a VPS: see [Remote access](docs/remote-access.md).
-
-## Keep it running
-
-Install the host as a user service (LaunchAgent on macOS, systemd user unit on Linux) so it starts at boot and restarts on crash:
-
-```sh
-pinomad service install --remote-port 7422
-pinomad service status
-pinomad upgrade     # install pinomad@latest, wait for running tasks, restart
-```
-
-Service flags, logs, and platform caveats: [Running as a service](docs/service.md).
-
-## Clients
-
-| Client | How to get it |
-|---|---|
-| Web | Served by the host itself (`pinomad link`) and by the relay; any modern browser |
-| macOS (Apple silicon) | Signed DMG from [GitHub Releases](https://github.com/bubbleptr/pinomad/releases); updates itself |
-| iOS | Internal TestFlight only for now |
-| Linux, Windows | Use the web client |
-
-## What the agent can do
-
-The agent has pi's four tools (read, bash, edit, write) plus:
-
-| Feature | What it does |
-|---|---|
-| Projects and worktrees | Register a directory as a project. In a Git repo each conversation works in its own worktree and branch, so your checkout stays untouched |
-| Forks | Branch off from a message and keep both lines going |
-| Subagents | Hand self-contained tasks to subagents that run in parallel |
-| Named agents | Reusable roles in `<data dir>/agents/<name>.md` — a `subagent` call or an `@name` mention delegates to one, optionally pinning its model and thinking level |
-| Questions, not approvals | Tools run without approval prompts; when the direction is unclear, the agent asks 1–4 multiple-choice questions |
-| codemode | The model writes JavaScript that calls other tools in a QuickJS sandbox; only the script's output enters the context |
-| MCP | Servers configured in `~/.agents/mcp.json`, in the usual `mcpServers` format |
-| Images | Paste, drop, or pick up to 4 images per message in the Web/desktop composer — resized to JPEG before sending |
-| AGENTS.md and skills | Reads `AGENTS.md` / `CLAUDE.md` and skills from `~/.agents` and the project, on every request |
-
-Details and the MCP config reference: [Usage](docs/usage.md).
+Sign in to a model provider under Settings → Providers: a subscription you already pay for (Claude, ChatGPT, Copilot, …), an API key, or your own OpenAI- or Anthropic-compatible endpoint. To click around without one, `pinomad host --faux "hi"` runs a scripted fake model.
 
 ## Documentation
 
-These docs are written in Chinese.
+User docs live on **[pinomad.si/docs](https://pinomad.si/docs/)**: [getting started](https://pinomad.si/docs/) (connecting your other devices, keeping the host running, clients) and [what the agent can do](https://pinomad.si/docs/features/). Usage, remote access, and the service reference are in Chinese for now: [中文文档](https://pinomad.si/zh/docs/).
+
+For contributors (in Chinese):
 
 | Doc | Covers |
 |---|---|
-| [Usage](docs/usage.md) | Projects, worktrees, tools, MCP configuration |
-| [Remote access](docs/remote-access.md) | Pairing, tunnels, self-hosted relay (VPS or container platforms) |
-| [Running as a service](docs/service.md) | `service` and `upgrade` commands, platform notes |
-| [Website](docs/website.md) | The pinomad.si landing page and the hosted app.pinomad.si instance |
+| [Website](docs/website.md) | The pinomad.si site and the hosted app.pinomad.si instance |
 | [Architecture overview](docs/architecture.md) | How the parts and languages fit together, with send/receive diagrams |
 | [Architecture decisions](docs/adr/README.md) | Why things are the way they are |
 | [Roadmap](docs/roadmap.md) | Direction and order; items live in GitHub Issues |

package/dist/{chunk-wqvp1fwh.js → chunk-1r8a2434.js}

@@ -9,14 +9,14 @@ import {
   relayWsBase,
   verifyRelayChallenge,
   verifyRelayChallengeV2
-} from "./chunk-7qb9tq54.js";
+} from "./chunk-khcpv54k.js";
 import {
   commandHint,
   webRoot
-} from "./chunk-c8nxym2z.js";
+} from "./chunk-p56xf1r8.js";
 import {
   normalizeHostName
-} from "./chunk-znhn8af7.js";
+} from "./chunk-sygeb9qb.js";
 import"./chunk-df32avw6.js";
 
 // apps/server/src/main.ts
@@ -402,7 +402,7 @@ async function changePassword(options) {
 
 // apps/server/src/apns.ts
 import { createPrivateKey, sign } from "node:crypto";
-import { connect } from "node:http2";
+import { connect, constants } from "node:http2";
 var AUTHORITIES = {
   production: "https://api.push.apple.com",
   development: "https://api.sandbox.push.apple.com"
@@ -471,19 +471,25 @@ function openApns(config) {
     state.token = { jwt, issuedAt: now };
     return jwt;
   };
+  const dropSession = (state, session) => {
+    if (state.session === session)
+      state.session = undefined;
+    if (!session.destroyed)
+      session.destroy();
+  };
+  const retireSession = (state, session) => {
+    if (state.session === session)
+      state.session = undefined;
+    if (!session.closed && !session.destroyed)
+      session.close();
+  };
   const sessionFor = (environment, state) => {
     const existing = state.session;
     if (existing !== undefined && !existing.destroyed && !existing.closed)
       return existing;
     const session = connect(state.authority);
-    const drop = () => {
-      if (state.session === session)
-        state.session = undefined;
-      if (!session.destroyed)
-        session.destroy();
-    };
-    session.once("goaway", drop);
-    session.once("error", drop);
+    session.once("goaway", () => dropSession(state, session));
+    session.once("error", () => dropSession(state, session));
     session.once("close", () => {
       if (state.session === session)
         state.session = undefined;
@@ -566,6 +572,7 @@ function openApns(config) {
           resolve({ result: "retry", reason: "session unavailable" });
           return;
         }
+        let responded = false;
         let status = 0;
         let responseHeaders = {};
         const chunks = [];
@@ -580,11 +587,16 @@ function openApns(config) {
         };
         const timer = setTimeout(() => finish({ result: "retry", reason: "apns timeout" }), REQUEST_TIMEOUT_MS);
         stream.on("response", (headers) => {
+          responded = true;
           status = Number(headers[":status"] ?? 0);
           responseHeaders = headers;
         });
         stream.on("data", (chunk) => chunks.push(chunk));
         stream.on("end", () => {
+          if (!responded) {
+            finish({ result: "retry", reason: "connection closed" });
+            return;
+          }
           let body2;
           try {
             body2 = JSON.parse(Buffer.concat(chunks).toString("utf8"));
@@ -593,7 +605,12 @@ function openApns(config) {
           }
           finish(classify(request.environment, status, responseHeaders, body2, state));
         });
-        stream.on("error", () => finish({ result: "retry", reason: "connection error" }));
+        stream.on("error", () => {
+          const refused = stream.rstCode === constants.NGHTTP2_REFUSED_STREAM;
+          finish({ result: "retry", reason: "connection error" });
+          if (refused)
+            retireSession(state, session);
+        });
         stream.on("aborted", () => finish({ result: "retry", reason: "connection aborted" }));
         stream.end(body);
       });
@@ -793,7 +810,8 @@ async function handleApiRequest(request, response, ctx) {
           url: `${relayWsBase(ctx.publicOrigin)}/c/${row.hostId}`,
           hostKey: row.noisePublicKey,
           secret: result.secret,
-          expiresAt: result.expiresAt
+          expiresAt: result.expiresAt,
+          ...result.endpointSet === undefined ? {} : { endpointSet: result.endpointSet }
         });
         return;
       case "refused":
@@ -1056,7 +1074,12 @@ async function startRelay(options) {
           const request = pairingRequests.get(answer.requestId);
           if (request === undefined || request.control !== socket)
             return;
-          request.settle(answer.t === "pairing" ? { status: "ok", secret: answer.secret, expiresAt: answer.expiresAt } : { status: "refused", reason: answer.reason });
+          request.settle(answer.t === "pairing" ? {
+            status: "ok",
+            secret: answer.secret,
+            expiresAt: answer.expiresAt,
+            ...answer.endpointSet === undefined ? {} : { endpointSet: answer.endpointSet }
+          } : { status: "refused", reason: answer.reason });
           return;
         }
         socket.close(1008, "unexpected frame");

package/dist/{chunk-ywmm63ks.js → chunk-3p1eysm9.js}

@@ -5,9 +5,11 @@ import {
   relayHostId,
   relayWsBase,
   signRelayChallenge,
-  signRelayChallengeV2,
+  signRelayChallengeV2
+} from "./chunk-khcpv54k.js";
+import {
   toBase64Url
-} from "./chunk-7qb9tq54.js";
+} from "./chunk-sygeb9qb.js";
 
 // apps/host/src/cli/server-ops.ts
 import { WebSocket } from "ws";

package/dist/{chunk-d5ypmmr7.js → chunk-73vxwjs7.js}

@@ -5,11 +5,11 @@ import {
   commandHint,
   hostEntry,
   packagedVersion
-} from "./chunk-c8nxym2z.js";
+} from "./chunk-p56xf1r8.js";
 import {
   ProtocolMismatchError,
   connectRemoteDurable
-} from "./chunk-d93kvxvc.js";
+} from "./chunk-a4b61tx5.js";
 import {
   DEFAULT_DATA_DIR,
   hostAddress