@agent-native/core 0.4.1 → 0.4.3

package/dist/terminal/pty-server.js

@@ -0,0 +1,252 @@
+/**
+ * PTY WebSocket Server
+ *
+ * Creates an HTTP server with WebSocket support that spawns PTY processes
+ * for AI CLI tools. Each WebSocket connection gets its own PTY.
+ *
+ * Used by both the embedded AgentTerminal component and the CLI harness.
+ */
+import { createServer as createHttpServer, } from "http";
+import os from "os";
+import path from "path";
+import fs from "fs";
+import { CLI_REGISTRY, commandExists, isAllowedCommand, } from "./cli-registry.js";
+export async function createPtyWebSocketServer(options = {}) {
+    const { appDir = process.cwd(), command: defaultCommand = "claude", port = 0, authCheck, logPrefix = "[terminal]", } = options;
+    // Dynamic imports for optional native dependencies
+    const { WebSocketServer, WebSocket } = await import("ws");
+    const pty = await import("node-pty");
+    const resolvedAppDir = path.resolve(appDir);
+    const shell = os.platform() === "win32" ? "cmd.exe" : process.env.SHELL || "/bin/zsh";
+    const server = createHttpServer((req, res) => {
+        // CORS headers
+        res.setHeader("Access-Control-Allow-Origin", "*");
+        res.setHeader("Access-Control-Allow-Methods", "GET, POST, OPTIONS");
+        res.setHeader("Access-Control-Allow-Headers", "Content-Type");
+        if (req.method === "OPTIONS") {
+            res.writeHead(204);
+            res.end();
+            return;
+        }
+        res.writeHead(404);
+        res.end();
+    });
+    const wss = new WebSocketServer({ noServer: true });
+    // Handle WebSocket upgrades with optional auth
+    server.on("upgrade", async (req, socket, head) => {
+        if (authCheck) {
+            try {
+                const allowed = await authCheck(req);
+                if (!allowed) {
+                    socket.write("HTTP/1.1 401 Unauthorized\r\n\r\n");
+                    socket.destroy();
+                    return;
+                }
+            }
+            catch {
+                socket.write("HTTP/1.1 500 Internal Server Error\r\n\r\n");
+                socket.destroy();
+                return;
+            }
+        }
+        wss.handleUpgrade(req, socket, head, (ws) => {
+            wss.emit("connection", ws, req);
+        });
+    });
+    // Track active PTY processes for cleanup
+    const activePtys = new Set();
+    wss.on("connection", (ws, req) => {
+        const url = new URL(req.url || "", `http://${req.headers.host}`);
+        const command = url.searchParams.get("command") || defaultCommand;
+        const extraFlags = url.searchParams.get("flags") || "";
+        console.log(`${logPrefix} WebSocket connected for command: ${command}`);
+        const sendStatus = (status, message) => {
+            if (ws.readyState === WebSocket.OPEN) {
+                ws.send(JSON.stringify({ type: "setup-status", status, message }));
+            }
+        };
+        // Validate command against allowlist to prevent injection
+        if (!isAllowedCommand(command)) {
+            sendStatus("not-found", `"${command}" is not a recognized CLI. Allowed: ${Object.keys(CLI_REGISTRY).join(", ")}`);
+            if (ws.readyState === WebSocket.OPEN)
+                ws.close();
+            return;
+        }
+        // Reject flags containing shell metacharacters
+        if (extraFlags && /[;&|`$(){}\n\r<>]/.test(extraFlags)) {
+            sendStatus("failed", "Invalid flags: shell metacharacters not allowed");
+            if (ws.readyState === WebSocket.OPEN)
+                ws.close();
+            return;
+        }
+        // Check if CLI is installed; if not, use npx to run it
+        let useNpx = false;
+        if (!commandExists(command)) {
+            const registry = CLI_REGISTRY[command];
+            if (registry?.installPackage) {
+                console.log(`${logPrefix} ${command} CLI not found, will use npx`);
+                useNpx = true;
+            }
+            else {
+                sendStatus("not-found", `"${command}" not found on PATH. Please install it manually.`);
+                if (ws.readyState === WebSocket.OPEN)
+                    ws.close();
+                return;
+            }
+        }
+        // Build the command — use npx if CLI not found locally
+        const baseCommand = useNpx
+            ? `npx --yes ${CLI_REGISTRY[command].installPackage}`
+            : command;
+        const fullCommand = extraFlags
+            ? `${baseCommand} ${extraFlags}`
+            : baseCommand;
+        console.log(`${logPrefix} Spawning PTY: ${fullCommand}`);
+        // Build env, stripping CLI-specific nesting vars
+        const registry = CLI_REGISTRY[command];
+        const env = {
+            ...process.env,
+            TERM: "xterm-256color",
+        };
+        if (registry) {
+            for (const v of registry.stripEnv)
+                delete env[v];
+        }
+        let ptyProcess;
+        try {
+            ptyProcess = pty.spawn(shell, ["-l", "-c", fullCommand], {
+                name: "xterm-256color",
+                cols: 120,
+                rows: 40,
+                cwd: resolvedAppDir,
+                env: env,
+            });
+        }
+        catch (err) {
+            console.error(`${logPrefix} Failed to spawn PTY:`, err);
+            if (ws.readyState === WebSocket.OPEN) {
+                ws.send(`\r\n\x1b[31m${logPrefix} Failed to spawn PTY: ${err}\x1b[0m\r\n`);
+                ws.close();
+            }
+            return;
+        }
+        activePtys.add(ptyProcess);
+        console.log(`${logPrefix} PTY spawned (pid: ${ptyProcess.pid})`);
+        ptyProcess.onData((data) => {
+            if (ws.readyState === WebSocket.OPEN) {
+                ws.send(data);
+            }
+        });
+        ptyProcess.onExit(({ exitCode }) => {
+            console.log(`${logPrefix} PTY exited with code ${exitCode}`);
+            activePtys.delete(ptyProcess);
+            if (exitCode === 127 && ws.readyState === WebSocket.OPEN) {
+                ws.send(JSON.stringify({
+                    type: "setup-status",
+                    status: "not-found",
+                    message: `Command "${command}" not found. Please install it first.`,
+                }));
+            }
+            if (ws.readyState === WebSocket.OPEN) {
+                ws.close();
+            }
+        });
+        ws.on("message", (data) => {
+            const str = typeof data === "string" ? data : data.toString();
+            try {
+                const msg = JSON.parse(str);
+                if (msg.type === "builder.setEnvVars" &&
+                    Array.isArray(msg.data?.vars)) {
+                    const envPath = path.join(resolvedAppDir, ".env");
+                    const vars = msg.data.vars;
+                    // Validate env var names and sanitize values
+                    const validKeyPattern = /^[A-Za-z_][A-Za-z0-9_]*$/;
+                    const sanitizedVars = vars.filter(({ key }) => {
+                        if (!validKeyPattern.test(key)) {
+                            console.warn(`${logPrefix} Rejected invalid env var key: ${key}`);
+                            return false;
+                        }
+                        return true;
+                    });
+                    let lines = [];
+                    try {
+                        lines = fs.readFileSync(envPath, "utf-8").split("\n");
+                    }
+                    catch { }
+                    for (const { key, value } of sanitizedVars) {
+                        // Strip newlines/null bytes to prevent line injection
+                        const safeValue = value.replace(/[\r\n\0]/g, "");
+                        // Quote values containing #, spaces, or quotes so dotenv parses correctly
+                        const needsQuoting = /[# "']/.test(safeValue);
+                        const quotedValue = needsQuoting
+                            ? `"${safeValue.replace(/"/g, '\\"')}"`
+                            : safeValue;
+                        const idx = lines.findIndex((l) => l.startsWith(`${key}=`));
+                        const entry = `${key}=${quotedValue}`;
+                        if (idx !== -1) {
+                            lines[idx] = entry;
+                        }
+                        else {
+                            lines.push(entry);
+                        }
+                    }
+                    while (lines.length > 0 && lines[lines.length - 1] === "") {
+                        lines.pop();
+                    }
+                    fs.writeFileSync(envPath, lines.join("\n") + "\n", "utf-8");
+                    if (ws.readyState === WebSocket.OPEN) {
+                        ws.send(JSON.stringify({
+                            type: "env-vars-saved",
+                            keys: sanitizedVars.map((v) => v.key),
+                        }));
+                    }
+                    return;
+                }
+                if (msg.type === "resize" && msg.cols && msg.rows) {
+                    ptyProcess.resize(msg.cols, msg.rows);
+                    return;
+                }
+            }
+            catch {
+                // Not JSON — regular terminal input
+            }
+            ptyProcess.write(str);
+        });
+        ws.on("close", () => {
+            console.log(`${logPrefix} WebSocket closed, killing PTY`);
+            activePtys.delete(ptyProcess);
+            try {
+                ptyProcess.kill();
+            }
+            catch {
+                // Process may have already exited
+            }
+        });
+    });
+    return new Promise((resolve, reject) => {
+        server.once("error", (err) => {
+            reject(err);
+        });
+        server.listen(port, "127.0.0.1", () => {
+            const addr = server.address();
+            const actualPort = typeof addr === "object" && addr ? addr.port : port;
+            console.log(`${logPrefix} PTY WebSocket server on ws://localhost:${actualPort}/ws`);
+            resolve({
+                server,
+                port: actualPort,
+                close: () => {
+                    for (const p of activePtys) {
+                        try {
+                            p.kill();
+                        }
+                        catch { }
+                    }
+                    activePtys.clear();
+                    wss.close();
+                    server.close();
+                },
+            });
+        });
+    });
+}
+//# sourceMappingURL=pty-server.js.map

package/dist/terminal/pty-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pty-server.js","sourceRoot":"","sources":["../../src/terminal/pty-server.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EACL,YAAY,IAAI,gBAAgB,GAGjC,MAAM,MAAM,CAAC;AACd,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,EACL,YAAY,EACZ,aAAa,EACb,gBAAgB,GACjB,MAAM,mBAAmB,CAAC;AAwB3B,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,UAA4B,EAAE;IAE9B,MAAM,EACJ,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,EACtB,OAAO,EAAE,cAAc,GAAG,QAAQ,EAClC,IAAI,GAAG,CAAC,EACR,SAAS,EACT,SAAS,GAAG,YAAY,GACzB,GAAG,OAAO,CAAC;IAEZ,mDAAmD;IACnD,MAAM,EAAE,eAAe,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;IAC1D,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC;IAErC,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,KAAK,GACT,EAAE,CAAC,QAAQ,EAAE,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,UAAU,CAAC;IAE1E,MAAM,MAAM,GAAG,gBAAgB,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC3C,eAAe;QACf,GAAG,CAAC,SAAS,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC;QAClD,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,oBAAoB,CAAC,CAAC;QACpE,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,cAAc,CAAC,CAAC;QAE9D,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC7B,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACnB,GAAG,CAAC,GAAG,EAAE,CAAC;YACV,OAAO;QACT,CAAC;QAED,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACnB,GAAG,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,IAAI,eAAe,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAEpD,+CAA+C;IAC/C,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;QAC/C,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC;gBACrC,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,MAAM,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;oBAClD,MAAM,CAAC,OAAO,EAAE,CAAC;oBACjB,OAAO;gBACT,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,CAAC,KAAK,CAAC,4CAA4C,CAAC,CAAC;gBAC3D,MAAM,CAAC,OAAO,EAAE,CAAC;gBACjB,OAAO;YACT,CAAC;QACH,CAAC;QAED,GAAG,CAAC,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE;YAC1C,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,yCAAyC;IACzC,MAAM,UAAU,GAAG,IAAI,GAAG,EAAgC,CAAC;IAE3D,GAAG,CAAC,EAAE,CAAC,YAAY,EAAE,CAAC,EAAkC,EAAE,GAAG,EAAE,EAAE;QAC/D,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,EAAE,UAAU,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QACjE,MAAM,OAAO,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,cAAc,CAAC;QAClE,MAAM,UAAU,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QACvD,OAAO,CAAC,GAAG,CAAC,GAAG,SAAS,qCAAqC,OAAO,EAAE,CAAC,CAAC;QAExE,MAAM,UAAU,GAAG,CAAC,MAAc,EAAE,OAAe,EAAE,EAAE;YACrD,IAAI,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;gBACrC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;YACrE,CAAC;QACH,CAAC,CAAC;QAEF,0DAA0D;QAC1D,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/B,UAAU,CACR,WAAW,EACX,IAAI,OAAO,uCAAuC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACzF,CAAC;YACF,IAAI,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI;gBAAE,EAAE,CAAC,KAAK,EAAE,CAAC;YACjD,OAAO;QACT,CAAC;QAED,+CAA+C;QAC/C,IAAI,UAAU,IAAI,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YACvD,UAAU,CAAC,QAAQ,EAAE,iDAAiD,CAAC,CAAC;YACxE,IAAI,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI;gBAAE,EAAE,CAAC,KAAK,EAAE,CAAC;YACjD,OAAO;QACT,CAAC;QAED,uDAAuD;QACvD,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5B,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;YACvC,IAAI,QAAQ,EAAE,cAAc,EAAE,CAAC;gBAC7B,OAAO,CAAC,GAAG,CAAC,GAAG,SAAS,IAAI,OAAO,8BAA8B,CAAC,CAAC;gBACnE,MAAM,GAAG,IAAI,CAAC;YAChB,CAAC;iBAAM,CAAC;gBACN,UAAU,CACR,WAAW,EACX,IAAI,OAAO,kDAAkD,CAC9D,CAAC;gBACF,IAAI,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI;oBAAE,EAAE,CAAC,KAAK,EAAE,CAAC;gBACjD,OAAO;YACT,CAAC;QACH,CAAC;QAED,uDAAuD;QACvD,MAAM,WAAW,GAAG,MAAM;YACxB,CAAC,CAAC,aAAa,YAAY,CAAC,OAAO,CAAC,CAAC,cAAc,EAAE;YACrD,CAAC,CAAC,OAAO,CAAC;QACZ,MAAM,WAAW,GAAG,UAAU;YAC5B,CAAC,CAAC,GAAG,WAAW,IAAI,UAAU,EAAE;YAChC,CAAC,CAAC,WAAW,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,GAAG,SAAS,kBAAkB,WAAW,EAAE,CAAC,CAAC;QAEzD,iDAAiD;QACjD,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;QACvC,MAAM,GAAG,GAAuC;YAC9C,GAAG,OAAO,CAAC,GAAG;YACd,IAAI,EAAE,gBAAgB;SACvB,CAAC;QACF,IAAI,QAAQ,EAAE,CAAC;YACb,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,QAAQ;gBAAE,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;QACnD,CAAC;QAED,IAAI,UAAwC,CAAC;QAC7C,IAAI,CAAC;YACH,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,CAAC,EAAE;gBACvD,IAAI,EAAE,gBAAgB;gBACtB,IAAI,EAAE,GAAG;gBACT,IAAI,EAAE,EAAE;gBACR,GAAG,EAAE,cAAc;gBACnB,GAAG,EAAE,GAA6B;aACnC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,GAAG,SAAS,uBAAuB,EAAE,GAAG,CAAC,CAAC;YACxD,IAAI,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;gBACrC,EAAE,CAAC,IAAI,CACL,eAAe,SAAS,yBAAyB,GAAG,aAAa,CAClE,CAAC;gBACF,EAAE,CAAC,KAAK,EAAE,CAAC;YACb,CAAC;YACD,OAAO;QACT,CAAC;QAED,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,GAAG,SAAS,sBAAsB,UAAU,CAAC,GAAG,GAAG,CAAC,CAAC;QAEjE,UAAU,CAAC,MAAM,CAAC,CAAC,IAAY,EAAE,EAAE;YACjC,IAAI,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;gBACrC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAChB,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE;YACjC,OAAO,CAAC,GAAG,CAAC,GAAG,SAAS,yBAAyB,QAAQ,EAAE,CAAC,CAAC;YAC7D,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAC9B,IAAI,QAAQ,KAAK,GAAG,IAAI,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;gBACzD,EAAE,CAAC,IAAI,CACL,IAAI,CAAC,SAAS,CAAC;oBACb,IAAI,EAAE,cAAc;oBACpB,MAAM,EAAE,WAAW;oBACnB,OAAO,EAAE,YAAY,OAAO,uCAAuC;iBACpE,CAAC,CACH,CAAC;YACJ,CAAC;YACD,IAAI,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;gBACrC,EAAE,CAAC,KAAK,EAAE,CAAC;YACb,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,IAAqB,EAAE,EAAE;YACzC,MAAM,GAAG,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YAE9D,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBAE5B,IACE,GAAG,CAAC,IAAI,KAAK,oBAAoB;oBACjC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,EAC7B,CAAC;oBACD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;oBAClD,MAAM,IAAI,GAA0C,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;oBAElE,6CAA6C;oBAC7C,MAAM,eAAe,GAAG,0BAA0B,CAAC;oBACnD,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE;wBAC5C,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;4BAC/B,OAAO,CAAC,IAAI,CAAC,GAAG,SAAS,kCAAkC,GAAG,EAAE,CAAC,CAAC;4BAClE,OAAO,KAAK,CAAC;wBACf,CAAC;wBACD,OAAO,IAAI,CAAC;oBACd,CAAC,CAAC,CAAC;oBAEH,IAAI,KAAK,GAAa,EAAE,CAAC;oBACzB,IAAI,CAAC;wBACH,KAAK,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBACxD,CAAC;oBAAC,MAAM,CAAC,CAAA,CAAC;oBAEV,KAAK,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,aAAa,EAAE,CAAC;wBAC3C,sDAAsD;wBACtD,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;wBACjD,0EAA0E;wBAC1E,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;wBAC9C,MAAM,WAAW,GAAG,YAAY;4BAC9B,CAAC,CAAC,IAAI,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG;4BACvC,CAAC,CAAC,SAAS,CAAC;wBACd,MAAM,GAAG,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC;wBAC5D,MAAM,KAAK,GAAG,GAAG,GAAG,IAAI,WAAW,EAAE,CAAC;wBACtC,IAAI,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;4BACf,KAAK,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;wBACrB,CAAC;6BAAM,CAAC;4BACN,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;wBACpB,CAAC;oBACH,CAAC;oBAED,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;wBAC1D,KAAK,CAAC,GAAG,EAAE,CAAC;oBACd,CAAC;oBACD,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;oBAE5D,IAAI,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;wBACrC,EAAE,CAAC,IAAI,CACL,IAAI,CAAC,SAAS,CAAC;4BACb,IAAI,EAAE,gBAAgB;4BACtB,IAAI,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;yBACtC,CAAC,CACH,CAAC;oBACJ,CAAC;oBACD,OAAO;gBACT,CAAC;gBAED,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;oBAClD,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;oBACtC,OAAO;gBACT,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,oCAAoC;YACtC,CAAC;YAED,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YAClB,OAAO,CAAC,GAAG,CAAC,GAAG,SAAS,gCAAgC,CAAC,CAAC;YAC1D,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAC9B,IAAI,CAAC;gBACH,UAAU,CAAC,IAAI,EAAE,CAAC;YACpB,CAAC;YAAC,MAAM,CAAC;gBACP,kCAAkC;YACpC,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YAC3B,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE;YACpC,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;YAC9B,MAAM,UAAU,GAAG,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YACvE,OAAO,CAAC,GAAG,CACT,GAAG,SAAS,2CAA2C,UAAU,KAAK,CACvE,CAAC;YAEF,OAAO,CAAC;gBACN,MAAM;gBACN,IAAI,EAAE,UAAU;gBAChB,KAAK,EAAE,GAAG,EAAE;oBACV,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;wBAC3B,IAAI,CAAC;4BACH,CAAC,CAAC,IAAI,EAAE,CAAC;wBACX,CAAC;wBAAC,MAAM,CAAC,CAAA,CAAC;oBACZ,CAAC;oBACD,UAAU,CAAC,KAAK,EAAE,CAAC;oBACnB,GAAG,CAAC,KAAK,EAAE,CAAC;oBACZ,MAAM,CAAC,KAAK,EAAE,CAAC;gBACjB,CAAC;aACF,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/terminal/terminal-plugin.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Nitro Plugin — Agent Terminal
+ *
+ * Starts a PTY WebSocket server alongside the app so the <AgentTerminal />
+ * component can connect to a real CLI. Mounts a discovery endpoint at
+ * /api/agent-terminal-info for the client component.
+ *
+ * Skips activation when running inside a harness (HARNESS_PORT is set).
+ */
+export interface TerminalPluginOptions {
+    /** CLI command to run. Defaults to AGENT_CLI_COMMAND env or 'claude' */
+    command?: string;
+    /** Port for the WebSocket server. Defaults to AGENT_TERMINAL_PORT env or auto-assigned */
+    port?: number;
+    /** Enable in production. Defaults to AGENT_TERMINAL_ENABLED env or false in prod */
+    enabledInProduction?: boolean;
+    /** Auth check for WebSocket connections in production */
+    authCheck?: (req: any) => boolean | Promise<boolean>;
+}
+export declare function createTerminalPlugin(options?: TerminalPluginOptions): (nitroApp: any) => Promise<void>;
+/** Pre-configured terminal plugin with defaults */
+export declare const defaultTerminalPlugin: (nitroApp: any) => Promise<void>;
+//# sourceMappingURL=terminal-plugin.d.ts.map

package/dist/terminal/terminal-plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminal-plugin.d.ts","sourceRoot":"","sources":["../../src/terminal/terminal-plugin.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,MAAM,WAAW,qBAAqB;IACpC,wEAAwE;IACxE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,0FAA0F;IAC1F,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,oFAAoF;IACpF,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,yDAAyD;IACzD,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACtD;AAED,wBAAgB,oBAAoB,CAAC,OAAO,GAAE,qBAA0B,IACxD,UAAU,GAAG,mBAkH5B;AAED,mDAAmD;AACnD,eAAO,MAAM,qBAAqB,aArHR,GAAG,kBAqH8B,CAAC"}

package/dist/terminal/terminal-plugin.js

@@ -0,0 +1,90 @@
+/**
+ * Nitro Plugin — Agent Terminal
+ *
+ * Starts a PTY WebSocket server alongside the app so the <AgentTerminal />
+ * component can connect to a real CLI. Mounts a discovery endpoint at
+ * /api/agent-terminal-info for the client component.
+ *
+ * Skips activation when running inside a harness (HARNESS_PORT is set).
+ */
+import { defineEventHandler } from "h3";
+export function createTerminalPlugin(options = {}) {
+    return async (nitroApp) => {
+        // Skip if running inside a harness
+        if (process.env.HARNESS_PORT) {
+            console.log("[terminal] Harness detected, skipping embedded terminal");
+            return;
+        }
+        const isProd = process.env.NODE_ENV === "production";
+        const enabled = options.enabledInProduction ??
+            (process.env.AGENT_TERMINAL_ENABLED === "true" || !isProd);
+        if (!enabled) {
+            console.log("[terminal] Disabled in production (set AGENT_TERMINAL_ENABLED=true to enable)");
+            // Mount a disabled info endpoint
+            nitroApp.h3App.use("/api/agent-terminal-info", defineEventHandler(() => ({ available: false })));
+            return;
+        }
+        // Require authCheck in production to prevent unauthenticated shell access
+        if (isProd && !options.authCheck) {
+            console.error("[terminal] FATAL: authCheck is required when enabling the terminal in production. " +
+                "Pass an authCheck function to createTerminalPlugin().");
+            nitroApp.h3App.use("/api/agent-terminal-info", defineEventHandler(() => ({
+                available: false,
+                error: "Terminal requires authCheck in production",
+            })));
+            return;
+        }
+        // Skip if a PTY server is already running (prevents leak on HMR rebuild)
+        if (process.env.__AGENT_TERMINAL_RUNNING === "true") {
+            const existingPort = process.env.AGENT_TERMINAL_PORT;
+            console.log(`[terminal] PTY server already running on port ${existingPort}, skipping`);
+            nitroApp.h3App.use("/api/agent-terminal-info", defineEventHandler(() => ({
+                available: true,
+                wsPort: existingPort ? parseInt(existingPort, 10) : 0,
+                command: options.command || process.env.AGENT_CLI_COMMAND || "claude",
+            })));
+            return;
+        }
+        const command = options.command || process.env.AGENT_CLI_COMMAND || "claude";
+        const port = options.port ??
+            (process.env.AGENT_TERMINAL_PORT
+                ? parseInt(process.env.AGENT_TERMINAL_PORT, 10)
+                : 0);
+        try {
+            const { createPtyWebSocketServer } = await import("./pty-server.js");
+            const result = await createPtyWebSocketServer({
+                appDir: process.cwd(),
+                command,
+                port,
+                authCheck: isProd ? options.authCheck : undefined,
+                logPrefix: "[terminal]",
+            });
+            // Store port for other consumers and mark as running to prevent HMR duplication
+            process.env.AGENT_TERMINAL_PORT = String(result.port);
+            process.env.__AGENT_TERMINAL_RUNNING = "true";
+            // Mount discovery endpoint
+            nitroApp.h3App.use("/api/agent-terminal-info", defineEventHandler(() => ({
+                available: true,
+                wsPort: result.port,
+                command,
+            })));
+            // Cleanup on shutdown (use once to avoid listener leak on hot-reload)
+            const cleanup = () => result.close();
+            process.once("SIGTERM", cleanup);
+            process.once("SIGINT", cleanup);
+            console.log(`[terminal] Agent terminal ready (command: ${command}, port: ${result.port})`);
+        }
+        catch (err) {
+            console.error("[terminal] Failed to start PTY server:", err);
+            console.error("[terminal] Make sure node-pty is installed: pnpm add node-pty");
+            // Mount a fallback info endpoint
+            nitroApp.h3App.use("/api/agent-terminal-info", defineEventHandler(() => ({
+                available: false,
+                error: "PTY server failed to start",
+            })));
+        }
+    };
+}
+/** Pre-configured terminal plugin with defaults */
+export const defaultTerminalPlugin = createTerminalPlugin();
+//# sourceMappingURL=terminal-plugin.js.map

package/dist/terminal/terminal-plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminal-plugin.js","sourceRoot":"","sources":["../../src/terminal/terminal-plugin.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,IAAI,CAAC;AAaxC,MAAM,UAAU,oBAAoB,CAAC,UAAiC,EAAE;IACtE,OAAO,KAAK,EAAE,QAAa,EAAE,EAAE;QAC7B,mCAAmC;QACnC,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC;YAC7B,OAAO,CAAC,GAAG,CAAC,yDAAyD,CAAC,CAAC;YACvE,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,CAAC;QACrD,MAAM,OAAO,GACX,OAAO,CAAC,mBAAmB;YAC3B,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,KAAK,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC;QAE7D,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,CAAC,GAAG,CACT,+EAA+E,CAChF,CAAC;YACF,iCAAiC;YACjC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAChB,0BAA0B,EAC1B,kBAAkB,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,CACjD,CAAC;YACF,OAAO;QACT,CAAC;QAED,0EAA0E;QAC1E,IAAI,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;YACjC,OAAO,CAAC,KAAK,CACX,oFAAoF;gBAClF,uDAAuD,CAC1D,CAAC;YACF,QAAQ,CAAC,KAAK,CAAC,GAAG,CAChB,0BAA0B,EAC1B,kBAAkB,CAAC,GAAG,EAAE,CAAC,CAAC;gBACxB,SAAS,EAAE,KAAK;gBAChB,KAAK,EAAE,2CAA2C;aACnD,CAAC,CAAC,CACJ,CAAC;YACF,OAAO;QACT,CAAC;QAED,yEAAyE;QACzE,IAAI,OAAO,CAAC,GAAG,CAAC,wBAAwB,KAAK,MAAM,EAAE,CAAC;YACpD,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;YACrD,OAAO,CAAC,GAAG,CACT,iDAAiD,YAAY,YAAY,CAC1E,CAAC;YACF,QAAQ,CAAC,KAAK,CAAC,GAAG,CAChB,0BAA0B,EAC1B,kBAAkB,CAAC,GAAG,EAAE,CAAC,CAAC;gBACxB,SAAS,EAAE,IAAI;gBACf,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;gBACrD,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,QAAQ;aACtE,CAAC,CAAC,CACJ,CAAC;YACF,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GACX,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,QAAQ,CAAC;QAC/D,MAAM,IAAI,GACR,OAAO,CAAC,IAAI;YACZ,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB;gBAC9B,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,EAAE,CAAC;gBAC/C,CAAC,CAAC,CAAC,CAAC,CAAC;QAET,IAAI,CAAC;YACH,MAAM,EAAE,wBAAwB,EAAE,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC;YAErE,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC;gBAC5C,MAAM,EAAE,OAAO,CAAC,GAAG,EAAE;gBACrB,OAAO;gBACP,IAAI;gBACJ,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;gBACjD,SAAS,EAAE,YAAY;aACxB,CAAC,CAAC;YAEH,gFAAgF;YAChF,OAAO,CAAC,GAAG,CAAC,mBAAmB,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACtD,OAAO,CAAC,GAAG,CAAC,wBAAwB,GAAG,MAAM,CAAC;YAE9C,2BAA2B;YAC3B,QAAQ,CAAC,KAAK,CAAC,GAAG,CAChB,0BAA0B,EAC1B,kBAAkB,CAAC,GAAG,EAAE,CAAC,CAAC;gBACxB,SAAS,EAAE,IAAI;gBACf,MAAM,EAAE,MAAM,CAAC,IAAI;gBACnB,OAAO;aACR,CAAC,CAAC,CACJ,CAAC;YAEF,sEAAsE;YACtE,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACrC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YACjC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAEhC,OAAO,CAAC,GAAG,CACT,6CAA6C,OAAO,WAAW,MAAM,CAAC,IAAI,GAAG,CAC9E,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,wCAAwC,EAAE,GAAG,CAAC,CAAC;YAC7D,OAAO,CAAC,KAAK,CACX,+DAA+D,CAChE,CAAC;YAEF,iCAAiC;YACjC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAChB,0BAA0B,EAC1B,kBAAkB,CAAC,GAAG,EAAE,CAAC,CAAC;gBACxB,SAAS,EAAE,KAAK;gBAChB,KAAK,EAAE,4BAA4B;aACpC,CAAC,CAAC,CACJ,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,mDAAmD;AACnD,MAAM,CAAC,MAAM,qBAAqB,GAAG,oBAAoB,EAAE,CAAC"}

package/dist/vite/client.d.ts

@@ -1,12 +1,21 @@
 import type { UserConfig } from "vite";
-import { type ExpressPluginOptions } from "./express-plugin.js";
+export interface NitroOptions {
+    /** Nitro deployment preset (e.g. "node", "vercel", "netlify", "cloudflare_pages"). Default: "node" */
+    preset?: string;
+    /** Source directory for server files. Default: "./server" */
+    srcDir?: string;
+    /** Routes directory name (relative to srcDir). Default: "routes" */
+    routesDir?: string;
+    /** Any additional Nitro config overrides */
+    [key: string]: unknown;
+}
 export interface ClientConfigOptions {
     /** Port for dev server. Default: 8080 */
     port?: number;
     /** Additional Vite plugins */
     plugins?: any[];
-    /** Express plugin options (serverEntry, etc) */
-    express?: ExpressPluginOptions;
+    /** Nitro plugin options (preset, srcDir, etc) */
+    nitro?: NitroOptions;
     /** Override resolve aliases */
     aliases?: Record<string, string>;
     /** Override build.outDir. Default: "dist/spa" */
@@ -15,10 +24,24 @@ export interface ClientConfigOptions {
     fsAllow?: string[];
     /** Additional fs.deny patterns */
     fsDeny?: string[];
+    /**
+     * @deprecated Pass `reactRouter()` directly in the `plugins` array instead.
+     * Previously used to auto-load the React Router Vite plugin via require(),
+     * but this fails in ESM contexts. Templates should now do:
+     * ```ts
+     * import { reactRouter } from "@react-router/dev/vite";
+     * defineConfig({ plugins: [reactRouter()] })
+     * ```
+     */
+    reactRouter?: boolean | Record<string, unknown>;
 }
 /**
- * Create the client/SPA Vite config with sensible agent-native defaults.
- * Includes React SWC, path aliases, fs restrictions, and the Express dev plugin.
+ * Create the client Vite config with sensible agent-native defaults.
+ * Supports two modes:
+ * - Legacy SPA mode (default): React SWC plugin, client-only routing
+ * - React Router framework mode: SSR-capable with file-based routing
+ *
+ * Both modes include Nitro for API routes, path aliases, and fs restrictions.
  */
 export declare function defineConfig(options?: ClientConfigOptions): UserConfig;
 //# sourceMappingURL=client.d.ts.map

package/dist/vite/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/vite/client.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAU,UAAU,EAAE,MAAM,MAAM,CAAC;AAC/C,OAAO,EAAiB,KAAK,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAE/E,MAAM,WAAW,mBAAmB;IAClC,yCAAyC;IACzC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,8BAA8B;IAC9B,OAAO,CAAC,EAAE,GAAG,EAAE,CAAC;IAChB,gDAAgD;IAChD,OAAO,CAAC,EAAE,oBAAoB,CAAC;IAC/B,+BAA+B;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,iDAAiD;IACjD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gCAAgC;IAChC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,kCAAkC;IAClC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CACnB;AAmCD;;;GAGG;AACH,wBAAgB,YAAY,CAAC,OAAO,GAAE,mBAAwB,GAAG,UAAU,CA6C1E"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/vite/client.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAU,UAAU,EAAE,MAAM,MAAM,CAAC;AAqB/C,MAAM,WAAW,YAAY;IAC3B,sGAAsG;IACtG,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,6DAA6D;IAC7D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oEAAoE;IACpE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,4CAA4C;IAC5C,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,mBAAmB;IAClC,yCAAyC;IACzC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,8BAA8B;IAC9B,OAAO,CAAC,EAAE,GAAG,EAAE,CAAC;IAChB,iDAAiD;IACjD,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB,+BAA+B;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,iDAAiD;IACjD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gCAAgC;IAChC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,kCAAkC;IAClC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB;;;;;;;;OAQG;IACH,WAAW,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjD;AAmCD;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,OAAO,GAAE,mBAAwB,GAAG,UAAU,CAyE1E"}

package/dist/vite/client.js

@@ -1,5 +1,20 @@
 import path from "path";
-import { expressPlugin } from "./express-plugin.js";
+import fs from "fs";
+import { createRequire } from "module";
+import { devApiServer } from "./dev-api-server.js";
+const require = createRequire(import.meta.url);
+/** Check if a package is installed in the project */
+function hasDep(pkg, cwd) {
+    try {
+        const pkgJson = JSON.parse(fs.readFileSync(path.join(cwd, "package.json"), "utf-8"));
+        return !!(pkgJson.dependencies?.[pkg] ||
+            pkgJson.devDependencies?.[pkg] ||
+            pkgJson.peerDependencies?.[pkg]);
+    }
+    catch {
+        return false;
+    }
+}
 /**
  * Vite plugin that prevents the built-in base middleware from redirecting
  * "/" → "/app/" (or whatever the base is). When agent-native apps run with
@@ -31,21 +46,40 @@ function baseRedirectGuard() {
     };
 }
 /**
- * Create the client/SPA Vite config with sensible agent-native defaults.
- * Includes React SWC, path aliases, fs restrictions, and the Express dev plugin.
+ * Create the client Vite config with sensible agent-native defaults.
+ * Supports two modes:
+ * - Legacy SPA mode (default): React SWC plugin, client-only routing
+ * - React Router framework mode: SSR-capable with file-based routing
+ *
+ * Both modes include Nitro for API routes, path aliases, and fs restrictions.
  */
 export function defineConfig(options = {}) {
-    // Dynamic import to keep it optional
-    let reactPlugin;
-    try {
-        reactPlugin = require("@vitejs/plugin-react-swc");
-        if (reactPlugin.default)
-            reactPlugin = reactPlugin.default;
-    }
-    catch {
-        // Will be resolved at runtime by Vite
+    // Check if React Router plugin was passed directly in plugins array
+    const hasReactRouterPlugin = options.plugins?.some((p) => p?.name === "react-router" ||
+        (Array.isArray(p) && p.some((pp) => pp?.name === "react-router")));
+    let reactTransformPlugin;
+    if (!hasReactRouterPlugin && !options.reactRouter) {
+        // Legacy SPA mode — use React SWC plugin (only when React Router is not used)
+        try {
+            reactTransformPlugin = require("@vitejs/plugin-react-swc");
+            if (reactTransformPlugin.default)
+                reactTransformPlugin = reactTransformPlugin.default;
+        }
+        catch {
+            // Will be resolved at runtime by Vite
+        }
     }
+    // Nitro 3.0's Vite plugin (nitro/vite) uses a FetchableDevEnvironment
+    // that is incompatible with Vite 7/8's DevEnvironment API. Loading it
+    // crashes typecheck, build, and any Vite server creation. Nitro's
+    // file-based routes are handled by its runtime (via the server/routes/
+    // directory) independently of this plugin, so we skip it entirely.
+    // The Nitro plugin can be re-enabled once Nitro ships a Vite 7+ compatible
+    // release.
+    const nitroPlugin = null;
     const cwd = process.cwd();
+    // Build the React transform plugin (only for legacy SPA mode)
+    const reactPluginInstance = reactTransformPlugin?.();
     return {
         server: {
             host: "::",
@@ -57,7 +91,6 @@ export function defineConfig(options = {}) {
                     ".env.*",
                     "*.{crt,pem}",
                     "**/.git/**",
-                    "server/**",
                     ...(options.fsDeny ?? []),
                 ],
             },
@@ -67,13 +100,19 @@ export function defineConfig(options = {}) {
         },
         plugins: [
             baseRedirectGuard(),
-            reactPlugin?.(),
-            expressPlugin(options.express),
+            devApiServer(),
+            reactPluginInstance,
+            nitroPlugin?.(),
             ...(options.plugins ?? []),
         ].filter(Boolean),
+        optimizeDeps: {
+            include: hasDep("@agent-native/pinpoint", cwd)
+                ? ["@agent-native/pinpoint/react"]
+                : [],
+        },
         resolve: {
             alias: {
-                "@": path.resolve(cwd, "./client"),
+                "@": path.resolve(cwd, "./app"),
                 "@shared": path.resolve(cwd, "./shared"),
                 ...options.aliases,
             },

package/dist/vite/client.js.map

@@ -1 +1 @@
-{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/vite/client.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,MAAM,CAAC;AAExB,OAAO,EAAE,aAAa,EAA6B,MAAM,qBAAqB,CAAC;AAmB/E;;;;;;;GAOG;AACH,SAAS,iBAAiB;IACxB,OAAO;QACL,IAAI,EAAE,kCAAkC;QACxC,KAAK,EAAE,OAAO;QACd,eAAe,CAAC,MAAM;YACpB,qEAAqE;YACrE,mEAAmE;YACnE,iEAAiE;YACjE,uBAAuB;YACvB,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;gBACzC,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;gBAChC,IACE,IAAI;oBACJ,IAAI,KAAK,GAAG;oBACZ,CAAC,GAAG,CAAC,GAAG,KAAK,GAAG,IAAI,GAAG,CAAC,GAAG,KAAK,aAAa,CAAC,EAC9C,CAAC;oBACD,2DAA2D;oBAC3D,GAAG,CAAC,GAAG,GAAG,IAAI,CAAC;gBACjB,CAAC;gBACD,IAAI,EAAE,CAAC;YACT,CAAC,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,UAA+B,EAAE;IAC5D,qCAAqC;IACrC,IAAI,WAAgB,CAAC;IACrB,IAAI,CAAC;QACH,WAAW,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAAC;QAClD,IAAI,WAAW,CAAC,OAAO;YAAE,WAAW,GAAG,WAAW,CAAC,OAAO,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,sCAAsC;IACxC,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAE1B,OAAO;QACL,MAAM,EAAE;YACN,IAAI,EAAE,IAAI;YACV,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,IAAI;YAC1B,EAAE,EAAE;gBACF,KAAK,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;gBACxC,IAAI,EAAE;oBACJ,MAAM;oBACN,QAAQ;oBACR,aAAa;oBACb,YAAY;oBACZ,WAAW;oBACX,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;iBAC1B;aACF;SACF;QACD,KAAK,EAAE;YACL,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,UAAU;SACrC;QACD,OAAO,EAAE;YACP,iBAAiB,EAAE;YACnB,WAAW,EAAE,EAAE;YACf,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC;YAC9B,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;SAC3B,CAAC,MAAM,CAAC,OAAO,CAAC;QACjB,OAAO,EAAE;YACP,KAAK,EAAE;gBACL,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,UAAU,CAAC;gBAClC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,UAAU,CAAC;gBACxC,GAAG,OAAO,CAAC,OAAO;aACnB;SACF;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/vite/client.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,EAAE,aAAa,EAAE,MAAM,QAAQ,CAAC;AAEvC,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEnD,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAE/C,qDAAqD;AACrD,SAAS,MAAM,CAAC,GAAW,EAAE,GAAW;IACtC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CACxB,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,OAAO,CAAC,CACzD,CAAC;QACF,OAAO,CAAC,CAAC,CACP,OAAO,CAAC,YAAY,EAAE,CAAC,GAAG,CAAC;YAC3B,OAAO,CAAC,eAAe,EAAE,CAAC,GAAG,CAAC;YAC9B,OAAO,CAAC,gBAAgB,EAAE,CAAC,GAAG,CAAC,CAChC,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAwCD;;;;;;;GAOG;AACH,SAAS,iBAAiB;IACxB,OAAO;QACL,IAAI,EAAE,kCAAkC;QACxC,KAAK,EAAE,OAAO;QACd,eAAe,CAAC,MAAM;YACpB,qEAAqE;YACrE,mEAAmE;YACnE,iEAAiE;YACjE,uBAAuB;YACvB,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;gBACzC,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;gBAChC,IACE,IAAI;oBACJ,IAAI,KAAK,GAAG;oBACZ,CAAC,GAAG,CAAC,GAAG,KAAK,GAAG,IAAI,GAAG,CAAC,GAAG,KAAK,aAAa,CAAC,EAC9C,CAAC;oBACD,2DAA2D;oBAC3D,GAAG,CAAC,GAAG,GAAG,IAAI,CAAC;gBACjB,CAAC;gBACD,IAAI,EAAE,CAAC;YACT,CAAC,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAAC,UAA+B,EAAE;IAC5D,oEAAoE;IACpE,MAAM,oBAAoB,GAAG,OAAO,CAAC,OAAO,EAAE,IAAI,CAChD,CAAC,CAAM,EAAE,EAAE,CACT,CAAC,EAAE,IAAI,KAAK,cAAc;QAC1B,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,EAAO,EAAE,EAAE,CAAC,EAAE,EAAE,IAAI,KAAK,cAAc,CAAC,CAAC,CACzE,CAAC;IAEF,IAAI,oBAAyB,CAAC;IAE9B,IAAI,CAAC,oBAAoB,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;QAClD,8EAA8E;QAC9E,IAAI,CAAC;YACH,oBAAoB,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAAC;YAC3D,IAAI,oBAAoB,CAAC,OAAO;gBAC9B,oBAAoB,GAAG,oBAAoB,CAAC,OAAO,CAAC;QACxD,CAAC;QAAC,MAAM,CAAC;YACP,sCAAsC;QACxC,CAAC;IACH,CAAC;IAED,sEAAsE;IACtE,sEAAsE;IACtE,kEAAkE;IAClE,uEAAuE;IACvE,mEAAmE;IACnE,2EAA2E;IAC3E,WAAW;IACX,MAAM,WAAW,GAAQ,IAAI,CAAC;IAE9B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAE1B,8DAA8D;IAC9D,MAAM,mBAAmB,GAAG,oBAAoB,EAAE,EAAE,CAAC;IAErD,OAAO;QACL,MAAM,EAAE;YACN,IAAI,EAAE,IAAI;YACV,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,IAAI;YAC1B,EAAE,EAAE;gBACF,KAAK,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;gBACxC,IAAI,EAAE;oBACJ,MAAM;oBACN,QAAQ;oBACR,aAAa;oBACb,YAAY;oBACZ,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;iBAC1B;aACF;SACF;QACD,KAAK,EAAE;YACL,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,UAAU;SACrC;QACD,OAAO,EAAE;YACP,iBAAiB,EAAE;YACnB,YAAY,EAAE;YACd,mBAAmB;YACnB,WAAW,EAAE,EAAE;YACf,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;SAC3B,CAAC,MAAM,CAAC,OAAO,CAAC;QACjB,YAAY,EAAE;YACZ,OAAO,EAAE,MAAM,CAAC,wBAAwB,EAAE,GAAG,CAAC;gBAC5C,CAAC,CAAC,CAAC,8BAA8B,CAAC;gBAClC,CAAC,CAAC,EAAE;SACP;QACD,OAAO,EAAE;YACP,KAAK,EAAE;gBACL,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC;gBAC/B,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,UAAU,CAAC;gBACxC,GAAG,OAAO,CAAC,OAAO;aACnB;SACF;KACF,CAAC;AACJ,CAAC"}

package/dist/vite/dev-api-server.d.ts

@@ -0,0 +1,10 @@
+import type { Plugin } from "vite";
+/**
+ * Vite plugin that serves H3 API routes from server/routes/api/ during dev.
+ *
+ * This replaces the disabled Nitro Vite plugin for dev-mode API route serving.
+ * It scans the file-based routes, imports them, and mounts them on an H3 app
+ * that handles /api/* requests before React Router's SSR handler.
+ */
+export declare function devApiServer(): Plugin;
+//# sourceMappingURL=dev-api-server.d.ts.map

package/dist/vite/dev-api-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dev-api-server.d.ts","sourceRoot":"","sources":["../../src/vite/dev-api-server.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,MAAM,EAAiB,MAAM,MAAM,CAAC;AAkIlD;;;;;;GAMG;AACH,wBAAgB,YAAY,IAAI,MAAM,CAyDrC"}