feat: project settings page with paseo.json editor

Adds a Projects settings flow for inspecting and editing per-project
paseo.json (worktree setup/teardown, scripts, terminals) directly from the
app. Reads/writes go through new daemon RPCs with revision-based optimistic
concurrency, and the screen always keeps its header and host picker visible
so a hung host doesn't trap the user.

packages/server/src/shared/messages.test.ts

@@ -0,0 +1,128 @@
+import { describe, expect, test } from "vitest";
+import { SessionOutboundMessageSchema } from "./messages.js";
+
+function workspaceDescriptor(overrides: Record<string, unknown> = {}) {
+  return {
+    id: "ws-1",
+    projectId: "remote:github.com/acme/app",
+    projectDisplayName: "acme/app",
+    projectRootPath: "/repo/app",
+    workspaceDirectory: "/repo/app",
+    projectKind: "git",
+    workspaceKind: "local_checkout",
+    name: "app",
+    status: "done",
+    activityAt: null,
+    diffStat: null,
+    scripts: [],
+    ...overrides,
+  };
+}
+
+function fetchWorkspacesResponse(workspace: Record<string, unknown>) {
+  return {
+    type: "fetch_workspaces_response",
+    payload: {
+      requestId: "req-1",
+      entries: [workspace],
+      pageInfo: {
+        nextCursor: null,
+        prevCursor: null,
+        hasMore: false,
+      },
+    },
+  };
+}
+
+describe("workspace descriptor message compatibility", () => {
+  test("old-shaped fetch_workspaces_response without project still parses", () => {
+    const parsed = SessionOutboundMessageSchema.parse(
+      fetchWorkspacesResponse(workspaceDescriptor()),
+    );
+
+    expect(parsed.type).toBe("fetch_workspaces_response");
+    if (parsed.type !== "fetch_workspaces_response") {
+      throw new Error("Expected fetch_workspaces_response");
+    }
+    expect(parsed.payload.entries[0]?.project).toBeUndefined();
+  });
+
+  test("new-shaped fetch_workspaces_response with project placement parses", () => {
+    const parsed = SessionOutboundMessageSchema.parse(
+      fetchWorkspacesResponse(
+        workspaceDescriptor({
+          project: {
+            projectKey: "remote:github.com/acme/app",
+            projectName: "acme/app",
+            checkout: {
+              cwd: "/repo/app",
+              isGit: true,
+              currentBranch: "main",
+              remoteUrl: "https://github.com/acme/app.git",
+              worktreeRoot: "/repo/app",
+              isPaseoOwnedWorktree: false,
+              mainRepoRoot: null,
+            },
+          },
+        }),
+      ),
+    );
+
+    expect(parsed.type).toBe("fetch_workspaces_response");
+    if (parsed.type !== "fetch_workspaces_response") {
+      throw new Error("Expected fetch_workspaces_response");
+    }
+    expect(parsed.payload.entries[0]?.project).toEqual({
+      projectKey: "remote:github.com/acme/app",
+      projectName: "acme/app",
+      checkout: {
+        cwd: "/repo/app",
+        isGit: true,
+        currentBranch: "main",
+        remoteUrl: "https://github.com/acme/app.git",
+        worktreeRoot: "/repo/app",
+        isPaseoOwnedWorktree: false,
+        mainRepoRoot: null,
+      },
+    });
+  });
+
+  test("adding project does not narrow existing descriptor fields", () => {
+    const parsed = SessionOutboundMessageSchema.parse(
+      fetchWorkspacesResponse(
+        workspaceDescriptor({
+          workspaceDirectory: undefined,
+          projectKind: "non_git",
+          workspaceKind: "directory",
+          gitRuntime: null,
+          githubRuntime: null,
+          project: {
+            projectKey: "/repo/local",
+            projectName: "local",
+            checkout: {
+              cwd: "/repo/local",
+              isGit: false,
+              currentBranch: null,
+              remoteUrl: null,
+              worktreeRoot: null,
+              isPaseoOwnedWorktree: false,
+              mainRepoRoot: null,
+            },
+          },
+        }),
+      ),
+    );
+
+    expect(parsed.type).toBe("fetch_workspaces_response");
+    if (parsed.type !== "fetch_workspaces_response") {
+      throw new Error("Expected fetch_workspaces_response");
+    }
+    expect(parsed.payload.entries[0]).toMatchObject({
+      projectKind: "non_git",
+      workspaceKind: "directory",
+      workspaceDirectory: "/repo/app",
+      gitRuntime: null,
+      githubRuntime: null,
+    });
+  });
+});

packages/server/src/shared/messages.ts

@@ -47,6 +47,28 @@ import {
   LoopLogsResponseSchema,
   LoopStopResponseSchema,
 } from "../server/loop/rpc-schemas.js";
+import {
+  PaseoConfigRawSchema,
+  PaseoLifecycleCommandRawSchema,
+  PaseoScriptEntryRawSchema,
+  PaseoWorktreeConfigRawSchema,
+  PaseoConfigRevisionSchema,
+  ProjectConfigRpcErrorSchema,
+  type PaseoConfigRaw,
+  type PaseoConfigRevision,
+  type PaseoScriptEntryRaw,
+  type ProjectConfigRpcError,
+} from "../utils/paseo-config-schema.js";
+export {
+  PaseoConfigRawSchema,
+  PaseoLifecycleCommandRawSchema,
+  PaseoScriptEntryRawSchema,
+  PaseoWorktreeConfigRawSchema,
+  type PaseoConfigRaw,
+  type PaseoConfigRevision,
+  type PaseoScriptEntryRaw,
+  type ProjectConfigRpcError,
+};
 // ---------------------------------------------------------------------------
 // Mutable daemon config schemas (shared between server store and client)
 // ---------------------------------------------------------------------------
@@ -872,6 +894,20 @@ export const SetDaemonConfigRequestMessageSchema = z.object({
   config: MutableDaemonConfigPatchSchema,
 });
 
+export const ReadProjectConfigRequestMessageSchema = z.object({
+  type: z.literal("read_project_config_request"),
+  requestId: z.string(),
+  repoRoot: z.string(),
+});
+
+export const WriteProjectConfigRequestMessageSchema = z.object({
+  type: z.literal("write_project_config_request"),
+  requestId: z.string(),
+  repoRoot: z.string(),
+  config: PaseoConfigRawSchema,
+  expectedRevision: PaseoConfigRevisionSchema.nullable(),
+});
+
 // ============================================================================
 // Dictation Streaming (lossless, resumable)
 // ============================================================================
@@ -1601,6 +1637,8 @@ export const SessionInboundMessageSchema = z.discriminatedUnion("type", [
   WaitForFinishRequestSchema,
   GetDaemonConfigRequestMessageSchema,
   SetDaemonConfigRequestMessageSchema,
+  ReadProjectConfigRequestMessageSchema,
+  WriteProjectConfigRequestMessageSchema,
   DictationStreamStartMessageSchema,
   DictationStreamChunkMessageSchema,
   DictationStreamFinishMessageSchema,
@@ -2110,6 +2148,7 @@ export const WorkspaceDescriptorPayloadSchema = z
     scripts: z.array(WorkspaceScriptPayloadSchema).default([]),
     gitRuntime: WorkspaceGitRuntimePayloadSchema,
     githubRuntime: WorkspaceGitHubRuntimePayloadSchema,
+    project: ProjectPlacementPayloadSchema.optional(),
   })
   .transform((workspace) => ({
     ...workspace,
@@ -2407,6 +2446,44 @@ export const SetDaemonConfigResponseMessageSchema = z.object({
     .passthrough(),
 });
 
+export const ReadProjectConfigResponseMessageSchema = z.object({
+  type: z.literal("read_project_config_response"),
+  payload: z.discriminatedUnion("ok", [
+    z.object({
+      requestId: z.string(),
+      repoRoot: z.string(),
+      ok: z.literal(true),
+      config: PaseoConfigRawSchema.nullable(),
+      revision: PaseoConfigRevisionSchema.nullable(),
+    }),
+    z.object({
+      requestId: z.string(),
+      repoRoot: z.string(),
+      ok: z.literal(false),
+      error: ProjectConfigRpcErrorSchema,
+    }),
+  ]),
+});
+
+export const WriteProjectConfigResponseMessageSchema = z.object({
+  type: z.literal("write_project_config_response"),
+  payload: z.discriminatedUnion("ok", [
+    z.object({
+      requestId: z.string(),
+      repoRoot: z.string(),
+      ok: z.literal(true),
+      config: PaseoConfigRawSchema,
+      revision: PaseoConfigRevisionSchema,
+    }),
+    z.object({
+      requestId: z.string(),
+      repoRoot: z.string(),
+      ok: z.literal(false),
+      error: ProjectConfigRpcErrorSchema,
+    }),
+  ]),
+});
+
 export const AgentPermissionRequestMessageSchema = z.object({
   type: z.literal("agent_permission_request"),
   payload: z.object({
@@ -3187,6 +3264,8 @@ export const SessionOutboundMessageSchema = z.discriminatedUnion("type", [
   SetVoiceModeResponseMessageSchema,
   GetDaemonConfigResponseMessageSchema,
   SetDaemonConfigResponseMessageSchema,
+  ReadProjectConfigResponseMessageSchema,
+  WriteProjectConfigResponseMessageSchema,
   SetAgentModeResponseMessageSchema,
   SetAgentModelResponseMessageSchema,
   SetAgentThinkingResponseMessageSchema,