@agent-native/core 0.47.1 → 0.48.1

package/dist/templates/ui-primitives-sync.spec.ts

@@ -0,0 +1,399 @@
+import crypto from "node:crypto";
+import fs from "node:fs";
+import path from "node:path";
+import { describe, expect, it } from "vitest";
+
+// Guard: all templates/<name>/app/components/ui/*.tsx files that share the
+// same primitive name must be byte-identical, OR must be listed in the
+// ALLOW_LIST below with a documented reason.
+//
+// If you update a primitive, update it in EVERY template that holds it (or
+// use the canonical template as the source and copy with:
+//
+//   cp templates/analytics/app/components/ui/<file>.tsx \
+//      templates/<other>/app/components/ui/<file>.tsx
+//
+// If a template genuinely needs a behaviorally different variant, add it here
+// with a comment explaining why the deviation is intentional.
+
+// Each entry: [primitive filename, template name, reason for deviation]
+const ALLOW_LIST: Array<[string, string, string]> = [
+  // scroll-area.tsx — content always renders a horizontal ScrollBar so deeply
+  // nested page rows in the document sidebar stay reachable; guarded by
+  // templates/content/app/components/sidebar/DocumentSidebar.layout.test.ts.
+  [
+    "scroll-area.tsx",
+    "content",
+    "always renders horizontal ScrollBar for nested sidebar rows",
+  ],
+
+  // button.tsx — macros has a fully custom design theme (bg-foreground primary,
+  // rounded-2xl, active:scale press feedback, custom ghost/link palette).
+  // The canonical 13-template version uses standard bg-primary, rounded-md.
+  [
+    "button.tsx",
+    "macros",
+    "custom-themed: bg-foreground, rounded-lg, active:scale",
+  ],
+
+  // calendar.tsx — DayPicker v9 class-name API split across templates.
+  // The majority (7 templates) use the older v9 API (caption, nav_button, …).
+  // Two templates are ahead of this:
+  //   • analytics: new v9 renamed API (month_caption, button_previous, day_button)
+  //   • forms/mail: newest shadcn with getDefaultClassNames + DayButton + captionLayout
+  // Unifying these requires a coordinated DayPicker API migration; defer until
+  // the 7-template group catches up.
+  [
+    "calendar.tsx",
+    "analytics",
+    "ahead of majority: new v9 renamed classname API (month_caption, button_previous)",
+  ],
+  [
+    "calendar.tsx",
+    "forms",
+    "newest shadcn: getDefaultClassNames + DayButton + captionLayout",
+  ],
+  [
+    "calendar.tsx",
+    "mail",
+    "newest shadcn: getDefaultClassNames + DayButton + captionLayout",
+  ],
+
+  // card.tsx — macros uses rounded-2xl, border-border/40, and a custom
+  // transition. The canonical 12-template version uses rounded-lg, border.
+  [
+    "card.tsx",
+    "macros",
+    "custom-themed: rounded-2xl, border-border/40, custom transition",
+  ],
+
+  // chart.tsx — analytics adds the useChartTooltipFlip hook (which only exists
+  // in the analytics template's hooks/ dir) and uses `[_, config]` destructuring.
+  // forms/mail have a shared variant without that hook and with `[, config]`.
+  // The canonical 8-template version (calendar/clips/design/macros/plan/slides/
+  // starter/videos) has neither analytics-specific hook nor forms/mail style.
+  [
+    "chart.tsx",
+    "analytics",
+    "analytics-specific: useChartTooltipFlip hook (only exists in analytics hooks/)",
+  ],
+  [
+    "chart.tsx",
+    "forms",
+    "no useChartTooltipFlip hook (analytics-specific); minor style differences",
+  ],
+  [
+    "chart.tsx",
+    "mail",
+    "no useChartTooltipFlip hook (analytics-specific); minor style differences",
+  ],
+
+  // command.tsx — forms/mail were scaffolded with "use client" (Next.js artifact)
+  // and use `const CommandDialog = ({ children, ...props }: DialogProps)` instead
+  // of the interface-wrapped variant. Behaviorally equivalent; clean up on next
+  // major template refresh.
+  [
+    "command.tsx",
+    "forms",
+    '"use client" artifact + inline type (no interface wrapper)',
+  ],
+  [
+    "command.tsx",
+    "mail",
+    '"use client" artifact + inline type (no interface wrapper)',
+  ],
+
+  // context-menu.tsx — forms/mail add origin-[--radix-context-menu-content-
+  // transform-origin] and max-h CSS variables from a newer shadcn snapshot.
+  // Not harmful but haven't been audited for all usage sites yet.
+  [
+    "context-menu.tsx",
+    "forms",
+    "newer shadcn: origin CSS var + max-h constraint on sub-content",
+  ],
+  [
+    "context-menu.tsx",
+    "mail",
+    "newer shadcn: origin CSS var + max-h constraint on sub-content",
+  ],
+
+  // dialog.tsx — macros has a mobile-optimized layout: top-4 positioned (not
+  // centered), max-h with overflow-y-auto for tall forms, backdrop-blur-sm overlay.
+  [
+    "dialog.tsx",
+    "macros",
+    "mobile-optimized: top-positioned, scrollable, backdrop-blur overlay",
+  ],
+
+  // dropdown-menu.tsx — brain was rewritten with the new shadcn v2 function-
+  // component API (data-slot attributes, variant prop on MenuItem, gap-2 layout,
+  // overflow-x-hidden content). The canonical 13-template version uses the older
+  // React.forwardRef style.
+  [
+    "dropdown-menu.tsx",
+    "brain",
+    "shadcn v2 function-component API with data-slot + variant prop",
+  ],
+
+  // input.tsx — three intentional variants beyond the canonical 11-template version:
+  //   • macros: adds transition-all hover:border-ring/50 (custom visual polish)
+  //   • mail: uses h-9 instead of h-10 (intentional compact sizing for dense UI)
+  //   • videos: adds text-foreground class (explicit foreground color)
+  [
+    "input.tsx",
+    "macros",
+    "custom: transition-all hover:border-ring/50 animation",
+  ],
+  ["input.tsx", "mail", "intentional compact sizing: h-9 vs canonical h-10"],
+  ["input.tsx", "videos", "adds explicit text-foreground class"],
+
+  // menubar.tsx — macros uses a different trigger style. forms/mail use a newer
+  // shadcn snapshot with improved data-[state=open] focus/hover handling and
+  // function-component wrappers for MenubarMenu.
+  ["menubar.tsx", "macros", "custom-themed trigger style"],
+  [
+    "menubar.tsx",
+    "forms",
+    "newer shadcn: improved data-[state=open] states + function-component wrappers",
+  ],
+  [
+    "menubar.tsx",
+    "mail",
+    "newer shadcn: improved data-[state=open] states + function-component wrappers",
+  ],
+
+  // progress.tsx — macros uses h-1.5 (slim) instead of h-4 and bg-foreground/80
+  // instead of bg-primary. Custom design language for the macros app.
+  ["progress.tsx", "macros", "custom-themed: h-1.5 slim bar, bg-foreground/80"],
+
+  // sonner.tsx — two intentional variants:
+  //   • mail: heavily custom-styled toasts (bg-card, rounded-lg, text-13px,
+  //     custom action/cancel button styles)
+  //   • calendar: uses w-fit instead of w-[var(--width)] for a compact toast
+  [
+    "sonner.tsx",
+    "mail",
+    "heavily custom-styled toasts (bg-card, 13px, custom action styles)",
+  ],
+  ["sonner.tsx", "calendar", "compact variant: w-fit instead of fixed-width"],
+
+  // tabs.tsx — two intentional variants:
+  //   • plan: adds border border-transparent to TabsTrigger for layout stability
+  //   • macros: adds duration-200 transition and hover:text-foreground
+  [
+    "tabs.tsx",
+    "plan",
+    "border border-transparent on trigger for layout stability",
+  ],
+  [
+    "tabs.tsx",
+    "macros",
+    "adds duration-200 transition + hover:text-foreground",
+  ],
+
+  // textarea.tsx — three intentional variants beyond the canonical 10-template version:
+  //   • assets: adds autoGrow prop for auto-expanding textareas (used at call sites)
+  //   • macros: adds transition-all hover:border-ring/50 (custom visual polish)
+  //   • mail: minor whitespace/style difference; same functional behaviour
+  [
+    "textarea.tsx",
+    "assets",
+    "autoGrow prop: auto-expanding textarea, used at call sites",
+  ],
+  [
+    "textarea.tsx",
+    "macros",
+    "custom: transition-all hover:border-ring/50 animation",
+  ],
+  ["textarea.tsx", "mail", "minor whitespace/style difference from canonical"],
+];
+
+function workspaceRoot(): string {
+  let current = process.cwd();
+  while (current !== path.dirname(current)) {
+    if (fs.existsSync(path.join(current, "pnpm-workspace.yaml"))) {
+      return current;
+    }
+    current = path.dirname(current);
+  }
+  throw new Error("Could not locate workspace root.");
+}
+
+const ROOT = workspaceRoot();
+
+function md5(content: string): string {
+  return crypto.createHash("md5").update(content).digest("hex");
+}
+
+function readUiFile(template: string, filename: string): string {
+  return fs.readFileSync(
+    path.join(ROOT, "templates", template, "app", "components", "ui", filename),
+    "utf-8",
+  );
+}
+
+function getTemplates(): string[] {
+  return fs
+    .readdirSync(path.join(ROOT, "templates"))
+    .filter((t) =>
+      fs.existsSync(path.join(ROOT, "templates", t, "app", "components", "ui")),
+    );
+}
+
+function getPrimitives(template: string): string[] {
+  const dir = path.join(ROOT, "templates", template, "app", "components", "ui");
+  return fs.readdirSync(dir).filter((f) => f.endsWith(".tsx"));
+}
+
+describe("ui-primitives sync guard", () => {
+  it("keeps shared ui primitives byte-identical across templates, except documented allow-list", () => {
+    const templates = getTemplates();
+
+    // Build map: primitive → (hash → [templates])
+    const hashes = new Map<string, Map<string, string[]>>();
+
+    for (const template of templates) {
+      for (const primitive of getPrimitives(template)) {
+        const content = readUiFile(template, primitive);
+        const h = md5(content);
+
+        if (!hashes.has(primitive)) hashes.set(primitive, new Map());
+        const byHash = hashes.get(primitive)!;
+        if (!byHash.has(h)) byHash.set(h, []);
+        byHash.get(h)!.push(template);
+      }
+    }
+
+    // Build allow-list set for fast lookup: "primitive:template"
+    const allowed = new Set(ALLOW_LIST.map(([p, t]) => `${p}:${t}`));
+
+    const violations: string[] = [];
+
+    for (const [primitive, byHash] of hashes) {
+      if (byHash.size <= 1) continue; // all identical — fine
+
+      // Determine the canonical hash: the one held by the most templates.
+      let canonicalHash = "";
+      let canonicalCount = 0;
+      for (const [h, templates] of byHash) {
+        if (templates.length > canonicalCount) {
+          canonicalCount = templates.length;
+          canonicalHash = h;
+        }
+      }
+
+      for (const [h, templates] of byHash) {
+        if (h === canonicalHash) continue;
+        for (const template of templates) {
+          const key = `${primitive}:${template}`;
+          if (!allowed.has(key)) {
+            violations.push(
+              `${primitive} in "${template}" differs from canonical (held by ${canonicalCount} templates) and is not in ALLOW_LIST`,
+            );
+          }
+        }
+      }
+    }
+
+    expect(
+      violations,
+      [
+        "Some ui primitives have drifted from the canonical version.",
+        "Either update the drifted template(s) to match the canonical,",
+        "or add an entry to ALLOW_LIST in ui-primitives-sync.spec.ts",
+        "with a comment explaining why the deviation is intentional.",
+        "",
+        ...violations,
+      ].join("\n"),
+    ).toEqual([]);
+  });
+
+  it("every allow-list entry references an existing template+primitive pair", () => {
+    const templates = getTemplates();
+    const templateSet = new Set(templates);
+
+    for (const [primitive, template, reason] of ALLOW_LIST) {
+      expect(
+        reason,
+        `ALLOW_LIST entry ${primitive}:${template} has no reason`,
+      ).toBeTruthy();
+      expect(
+        templateSet.has(template),
+        `ALLOW_LIST entry ${primitive}:${template} — template "${template}" does not exist`,
+      ).toBe(true);
+
+      const primitiveExists = fs.existsSync(
+        path.join(
+          ROOT,
+          "templates",
+          template,
+          "app",
+          "components",
+          "ui",
+          primitive,
+        ),
+      );
+      expect(
+        primitiveExists,
+        `ALLOW_LIST entry ${primitive}:${template} — file does not exist; remove stale entry`,
+      ).toBe(true);
+    }
+  });
+
+  it("every allow-listed template actually diverges from canonical (no stale allow-list entries)", () => {
+    const templates = getTemplates();
+
+    // Compute hashes for all primitives
+    const hashes = new Map<string, Map<string, string[]>>();
+    for (const template of templates) {
+      for (const primitive of getPrimitives(template)) {
+        const content = readUiFile(template, primitive);
+        const h = md5(content);
+        if (!hashes.has(primitive)) hashes.set(primitive, new Map());
+        const byHash = hashes.get(primitive)!;
+        if (!byHash.has(h)) byHash.set(h, []);
+        byHash.get(h)!.push(template);
+      }
+    }
+
+    const stale: string[] = [];
+    for (const [primitive, template] of ALLOW_LIST) {
+      const byHash = hashes.get(primitive);
+      if (!byHash) continue; // file doesn't exist, caught by other test
+
+      // Find canonical hash (most templates)
+      let canonicalHash = "";
+      let canonicalCount = 0;
+      for (const [h, ts] of byHash) {
+        if (ts.length > canonicalCount) {
+          canonicalCount = ts.length;
+          canonicalHash = h;
+        }
+      }
+
+      // Find this template's hash
+      let templateHash = "";
+      for (const [h, ts] of byHash) {
+        if (ts.includes(template)) {
+          templateHash = h;
+          break;
+        }
+      }
+
+      if (templateHash === canonicalHash) {
+        stale.push(
+          `${primitive}:${template} is in ALLOW_LIST but is now identical to canonical; remove the stale entry`,
+        );
+      }
+    }
+
+    expect(
+      stale,
+      [
+        "Stale ALLOW_LIST entries detected (template now matches canonical).",
+        "Remove them from ui-primitives-sync.spec.ts:",
+        ...stale,
+      ].join("\n"),
+    ).toEqual([]);
+  });
+});

package/dist/templates/workspace-core/.agents/skills/delegate-to-agent/SKILL.md

@@ -13,7 +13,11 @@ metadata:
 
 ## Rule
 
-The UI and server never call an LLM directly. All AI work is delegated to the agent through the chat bridge.
+The UI never calls an LLM directly. Product workflows are delegated to the
+agent through the chat bridge so users can see, steer, and audit the work.
+Server-side one-shot model calls are an explicit escape hatch for narrow text
+transforms only; use `completeText()` from `@agent-native/core/server` when the
+work intentionally does not need tools, chat history, or run state.
 
 ## Why
 
@@ -33,6 +37,24 @@ sendToAgentChat({
 });
 ```
 
+**From the UI, in the background:**
+
+```ts
+import { sendToAgentChat } from "@agent-native/core";
+
+sendToAgentChat({
+  message: "Analyze this import and create any missing records",
+  context: `Import batch id: ${batchId}`,
+  submit: true,
+  newTab: true,
+  background: true,
+  openSidebar: false,
+});
+```
+
+This is still a full agent run: tools, actions, thread state, and run tracking
+all remain active. It simply does not focus or open the sidebar.
+
 **From scripts (Node):**
 
 ```ts
@@ -41,6 +63,22 @@ import { agentChat } from "@agent-native/core";
 agentChat.submit("Process the uploaded images and create thumbnails");
 ```
 
+**For narrow server-side text transforms:**
+
+```ts
+import { completeText } from "@agent-native/core/server";
+
+const result = await completeText({
+  systemPrompt: "Return exactly one sentiment label.",
+  input: messageBody,
+  maxOutputTokens: 12,
+  temperature: 0,
+});
+```
+
+Wrap user-facing uses in actions so the UI and agent share the same operation.
+Do not call provider SDKs directly.
+
 **From the UI, detecting when agent is done:**
 
 ```ts
@@ -183,10 +221,20 @@ rather than ad-hoc LLM calls.
 - Don't use AI SDK functions like `generateText()`, `streamText()`, etc.
 - Don't build "AI features" that bypass the agent chat
 - Don't auto-submit a hardcoded prompt for generative actions — capture user input first (see above)
+- Don't use `completeText()` for workflows that need tools, database writes,
+  auditability, user steering, or multi-step reasoning. Use the agent chat
+  instead, optionally with `background: true`.
 
 ## Exception
 
-Scripts may call external APIs (image generation, search, etc.) — but the AI reasoning and orchestration still goes through the agent. A script is a tool the agent uses, not a replacement for the agent.
+Scripts may call external APIs (image generation, search, etc.) — but the AI
+reasoning and orchestration still goes through the agent. A script is a tool
+the agent uses, not a replacement for the agent.
+
+`completeText()` is allowed for small server-side transforms such as
+classification, extraction, rewriting a short string, or normalizing messy
+provider text. It deliberately runs with `tools: []` and does not create chat
+thread state.
 
 ## When to Use A2A Instead
 

package/dist/terminal/pty-server.js

@@ -30,7 +30,7 @@ async function getFs() {
  * node-pty's kill() only sends a signal to the shell, but child processes
  * (like `builder`) may be in their own process group and survive as orphans.
  */
-async function killProcessTree(pid, logPrefix) {
+async function killProcessTree(pid, _logPrefix) {
     const cp = await getChildProcess();
     if (os.platform() === "win32") {
         try {

package/dist/terminal/pty-server.js.map

@@ -1 +1 @@
-{"version":3,"file":"pty-server.js","sourceRoot":"","sources":["../../src/terminal/pty-server.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EACL,YAAY,IAAI,gBAAgB,GAGjC,MAAM,MAAM,CAAC;AACd,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EACL,YAAY,EACZ,aAAa,EACb,gBAAgB,GACjB,MAAM,mBAAmB,CAAC;AAE3B,oEAAoE;AACpE,IAAI,GAA+C,CAAC;AACpD,KAAK,UAAU,eAAe;IAC5B,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,GAAG,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,IAAI,GAAoC,CAAC;AACzC,KAAK,UAAU,KAAK;IAClB,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,GAAG,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,eAAe,CAAC,GAAW,EAAE,SAAiB;IAC3D,MAAM,EAAE,GAAG,MAAM,eAAe,EAAE,CAAC;IAEnC,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,OAAO,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,EAAE,CAAC,QAAQ,CAAC,iBAAiB,GAAG,QAAQ,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QACjE,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;QACV,OAAO;IACT,CAAC;IAED,2DAA2D;IAC3D,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,SAAS,eAAe,CAAC,SAAiB;QACxC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,EAAE;iBACd,QAAQ,CAAC,YAAY,SAAS,EAAE,EAAE;gBACjC,QAAQ,EAAE,OAAO;gBACjB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC;aAClC,CAAC;iBACD,IAAI,EAAE,CAAC;YACV,IAAI,MAAM,EAAE,CAAC;gBACX,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;oBACtC,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;oBACpC,IAAI,QAAQ,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;wBACjC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;wBAC3B,eAAe,CAAC,QAAQ,CAAC,CAAC;oBAC5B,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,gDAAgD;QAClD,CAAC;IACH,CAAC;IACD,eAAe,CAAC,GAAG,CAAC,CAAC;IAErB,0DAA0D;IAC1D,KAAK,MAAM,QAAQ,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,CAAC;QAC7C,IAAI,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;IACZ,CAAC;IAED,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IAEV,+CAA+C;IAC/C,UAAU,CAAC,GAAG,EAAE;QACd,KAAK,MAAM,QAAQ,IAAI,WAAW,EAAE,CAAC;YACnC,IAAI,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;YACpC,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;QACZ,CAAC;QACD,IAAI,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;IACZ,CAAC,EAAE,GAAG,CAAC,CAAC;AACV,CAAC;AAwBD,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,UAA4B,EAAE;IAE9B,MAAM,EACJ,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,EACtB,OAAO,EAAE,cAAc,GAAG,QAAQ,EAClC,IAAI,GAAG,CAAC,EACR,SAAS,EACT,SAAS,GAAG,YAAY,GACzB,GAAG,OAAO,CAAC;IAEZ,mDAAmD;IACnD,MAAM,EAAE,eAAe,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;IAC1D,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC;IAErC,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,KAAK,GACT,EAAE,CAAC,QAAQ,EAAE,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,UAAU,CAAC;IAE1E,MAAM,MAAM,GAAG,gBAAgB,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC3C,eAAe;QACf,GAAG,CAAC,SAAS,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC;QAClD,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,oBAAoB,CAAC,CAAC;QACpE,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,cAAc,CAAC,CAAC;QAE9D,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC7B,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACnB,GAAG,CAAC,GAAG,EAAE,CAAC;YACV,OAAO;QACT,CAAC;QAED,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACnB,GAAG,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,IAAI,eAAe,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAEpD,+CAA+C;IAC/C,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;QAC/C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,UAAU,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QAClE,IAAI,GAAG,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;YAC3B,MAAM,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;YAC/C,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO;QACT,CAAC;QAED,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC;gBACrC,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,MAAM,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;oBAClD,MAAM,CAAC,OAAO,EAAE,CAAC;oBACjB,OAAO;gBACT,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,CAAC,KAAK,CAAC,4CAA4C,CAAC,CAAC;gBAC3D,MAAM,CAAC,OAAO,EAAE,CAAC;gBACjB,OAAO;YACT,CAAC;QACH,CAAC;QAED,GAAG,CAAC,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE;YAC1C,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,yCAAyC;IACzC,MAAM,UAAU,GAAG,IAAI,GAAG,EAAgC,CAAC;IAE3D,GAAG,CAAC,EAAE,CAAC,YAAY,EAAE,KAAK,EAAE,EAAkC,EAAE,GAAG,EAAE,EAAE;QACrE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,EAAE,UAAU,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QACjE,MAAM,OAAO,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,cAAc,CAAC;QAClE,MAAM,UAAU,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QACvD,OAAO,CAAC,GAAG,CAAC,GAAG,SAAS,qCAAqC,OAAO,EAAE,CAAC,CAAC;QAExE,MAAM,UAAU,GAAG,CAAC,MAAc,EAAE,OAAe,EAAE,EAAE;YACrD,IAAI,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;gBACrC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;YACrE,CAAC;QACH,CAAC,CAAC;QAEF,0DAA0D;QAC1D,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/B,UAAU,CACR,WAAW,EACX,IAAI,OAAO,uCAAuC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACzF,CAAC;YACF,IAAI,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI;gBAAE,EAAE,CAAC,KAAK,EAAE,CAAC;YACjD,OAAO;QACT,CAAC;QAED,+CAA+C;QAC/C,IAAI,UAAU,IAAI,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YACvD,UAAU,CAAC,QAAQ,EAAE,iDAAiD,CAAC,CAAC;YACxE,IAAI,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI;gBAAE,EAAE,CAAC,KAAK,EAAE,CAAC;YACjD,OAAO;QACT,CAAC;QAED,uDAAuD;QACvD,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,CAAC,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YACpC,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;YACvC,IAAI,QAAQ,EAAE,cAAc,EAAE,CAAC;gBAC7B,OAAO,CAAC,GAAG,CAAC,GAAG,SAAS,IAAI,OAAO,8BAA8B,CAAC,CAAC;gBACnE,MAAM,GAAG,IAAI,CAAC;YAChB,CAAC;iBAAM,CAAC;gBACN,UAAU,CACR,WAAW,EACX,IAAI,OAAO,kDAAkD,CAC9D,CAAC;gBACF,IAAI,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI;oBAAE,EAAE,CAAC,KAAK,EAAE,CAAC;gBACjD,OAAO;YACT,CAAC;QACH,CAAC;QAED,uDAAuD;QACvD,MAAM,WAAW,GAAG,MAAM;YACxB,CAAC,CAAC,aAAa,YAAY,CAAC,OAAO,CAAC,CAAC,cAAc,EAAE;YACrD,CAAC,CAAC,OAAO,CAAC;QACZ,MAAM,WAAW,GAAG,UAAU;YAC5B,CAAC,CAAC,GAAG,WAAW,IAAI,UAAU,EAAE;YAChC,CAAC,CAAC,WAAW,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,GAAG,SAAS,kBAAkB,WAAW,EAAE,CAAC,CAAC;QAEzD,iDAAiD;QACjD,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;QACvC,MAAM,GAAG,GAAuC;YAC9C,GAAG,OAAO,CAAC,GAAG;YACd,IAAI,EAAE,gBAAgB;SACvB,CAAC;QACF,IAAI,QAAQ,EAAE,CAAC;YACb,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,QAAQ;gBAAE,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;QACnD,CAAC;QAED,IAAI,UAAwC,CAAC;QAC7C,IAAI,CAAC;YACH,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,CAAC,EAAE;gBACvD,IAAI,EAAE,gBAAgB;gBACtB,IAAI,EAAE,GAAG;gBACT,IAAI,EAAE,EAAE;gBACR,GAAG,EAAE,cAAc;gBACnB,GAAG,EAAE,GAA6B;aACnC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,GAAG,SAAS,uBAAuB,EAAE,GAAG,CAAC,CAAC;YACxD,IAAI,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;gBACrC,EAAE,CAAC,IAAI,CACL,eAAe,SAAS,yBAAyB,GAAG,aAAa,CAClE,CAAC;gBACF,EAAE,CAAC,KAAK,EAAE,CAAC;YACb,CAAC;YACD,OAAO;QACT,CAAC;QAED,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,GAAG,SAAS,sBAAsB,UAAU,CAAC,GAAG,GAAG,CAAC,CAAC;QAEjE,UAAU,CAAC,MAAM,CAAC,CAAC,IAAY,EAAE,EAAE;YACjC,IAAI,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;gBACrC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAChB,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE;YACjC,OAAO,CAAC,GAAG,CAAC,GAAG,SAAS,yBAAyB,QAAQ,EAAE,CAAC,CAAC;YAC7D,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAC9B,IAAI,QAAQ,KAAK,GAAG,IAAI,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;gBACzD,EAAE,CAAC,IAAI,CACL,IAAI,CAAC,SAAS,CAAC;oBACb,IAAI,EAAE,cAAc;oBACpB,MAAM,EAAE,WAAW;oBACnB,OAAO,EAAE,YAAY,OAAO,uCAAuC;iBACpE,CAAC,CACH,CAAC;YACJ,CAAC;YACD,IAAI,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;gBACrC,EAAE,CAAC,KAAK,EAAE,CAAC;YACb,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,IAAqB,EAAE,EAAE;YAC/C,MAAM,GAAG,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YAE9D,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBAE5B,IACE,GAAG,CAAC,IAAI,KAAK,wBAAwB;oBACrC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,EAC7B,CAAC;oBACD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;oBAClD,MAAM,IAAI,GAA0C,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;oBAElE,6CAA6C;oBAC7C,MAAM,eAAe,GAAG,0BAA0B,CAAC;oBACnD,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE;wBAC5C,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;4BAC/B,OAAO,CAAC,IAAI,CAAC,GAAG,SAAS,kCAAkC,GAAG,EAAE,CAAC,CAAC;4BAClE,OAAO,KAAK,CAAC;wBACf,CAAC;wBACD,OAAO,IAAI,CAAC;oBACd,CAAC,CAAC,CAAC;oBAEH,MAAM,EAAE,GAAG,MAAM,KAAK,EAAE,CAAC;oBACzB,IAAI,KAAK,GAAa,EAAE,CAAC;oBACzB,IAAI,CAAC;wBACH,KAAK,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBACxD,CAAC;oBAAC,MAAM,CAAC,CAAA,CAAC;oBAEV,KAAK,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,aAAa,EAAE,CAAC;wBAC3C,sDAAsD;wBACtD,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;wBACjD,0EAA0E;wBAC1E,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;wBAC9C,MAAM,WAAW,GAAG,YAAY;4BAC9B,CAAC,CAAC,IAAI,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG;4BACvC,CAAC,CAAC,SAAS,CAAC;wBACd,MAAM,GAAG,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC;wBAC5D,MAAM,KAAK,GAAG,GAAG,GAAG,IAAI,WAAW,EAAE,CAAC;wBACtC,IAAI,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;4BACf,KAAK,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;wBACrB,CAAC;6BAAM,CAAC;4BACN,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;wBACpB,CAAC;oBACH,CAAC;oBAED,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;wBAC1D,KAAK,CAAC,GAAG,EAAE,CAAC;oBACd,CAAC;oBACD,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;oBAE5D,IAAI,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;wBACrC,EAAE,CAAC,IAAI,CACL,IAAI,CAAC,SAAS,CAAC;4BACb,IAAI,EAAE,gBAAgB;4BACtB,IAAI,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;yBACtC,CAAC,CACH,CAAC;oBACJ,CAAC;oBACD,OAAO;gBACT,CAAC;gBAED,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,IAAI,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC;oBAClE,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CACnB,CAAC,EACD,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAC9C,CAAC;oBACF,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CACnB,CAAC,EACD,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAC9C,CAAC;oBACF,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;wBAAE,OAAO;oBAC7D,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;oBAC9B,OAAO;gBACT,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,oCAAoC;YACtC,CAAC;YAED,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YAClB,OAAO,CAAC,GAAG,CACT,GAAG,SAAS,6CAA6C,UAAU,CAAC,GAAG,GAAG,CAC3E,CAAC;YACF,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAC9B,eAAe,CAAC,UAAU,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YAC3B,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE;YACpC,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;YAC9B,MAAM,UAAU,GAAG,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YACvE,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK;gBACnB,OAAO,CAAC,GAAG,CACT,GAAG,SAAS,2CAA2C,UAAU,KAAK,CACvE,CAAC;YAEJ,OAAO,CAAC;gBACN,MAAM;gBACN,IAAI,EAAE,UAAU;gBAChB,KAAK,EAAE,GAAG,EAAE;oBACV,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;wBAC3B,eAAe,CAAC,CAAC,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;oBACpC,CAAC;oBACD,UAAU,CAAC,KAAK,EAAE,CAAC;oBACnB,GAAG,CAAC,KAAK,EAAE,CAAC;oBACZ,MAAM,CAAC,KAAK,EAAE,CAAC;gBACjB,CAAC;aACF,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["/**\n * PTY WebSocket Server\n *\n * Creates an HTTP server with WebSocket support that spawns PTY processes\n * for AI CLI tools. Each WebSocket connection gets its own PTY.\n *\n * Used by both the embedded AgentTerminal component and the CLI frame.\n */\n\nimport {\n  createServer as createHttpServer,\n  type IncomingMessage,\n  type Server as HttpServer,\n} from \"http\";\nimport os from \"os\";\nimport path from \"path\";\nimport {\n  CLI_REGISTRY,\n  commandExists,\n  isAllowedCommand,\n} from \"./cli-registry.js\";\n\n// Lazy singletons for Node-only modules (only available in Node.js)\nlet _cp: typeof import(\"child_process\") | undefined;\nasync function getChildProcess(): Promise<typeof import(\"child_process\")> {\n  if (!_cp) {\n    _cp = await import(\"node:child_process\");\n  }\n  return _cp;\n}\n\nlet _fs: typeof import(\"fs\") | undefined;\nasync function getFs(): Promise<typeof import(\"fs\")> {\n  if (!_fs) {\n    _fs = await import(\"node:fs\");\n  }\n  return _fs;\n}\n\n/**\n * Kill a process and all its descendants.\n * node-pty's kill() only sends a signal to the shell, but child processes\n * (like `builder`) may be in their own process group and survive as orphans.\n */\nasync function killProcessTree(pid: number, logPrefix: string): Promise<void> {\n  const cp = await getChildProcess();\n\n  if (os.platform() === \"win32\") {\n    try {\n      cp.execSync(`taskkill /pid ${pid} /T /F`, { stdio: \"ignore\" });\n    } catch {}\n    return;\n  }\n\n  // Find all descendant PIDs (children, grandchildren, etc.)\n  const descendants: number[] = [];\n  function findDescendants(parentPid: number) {\n    try {\n      const output = cp\n        .execSync(`pgrep -P ${parentPid}`, {\n          encoding: \"utf-8\",\n          stdio: [\"pipe\", \"pipe\", \"ignore\"],\n        })\n        .trim();\n      if (output) {\n        for (const line of output.split(\"\\n\")) {\n          const childPid = parseInt(line, 10);\n          if (childPid && !isNaN(childPid)) {\n            descendants.push(childPid);\n            findDescendants(childPid);\n          }\n        }\n      }\n    } catch {\n      // pgrep returns non-zero when no children found\n    }\n  }\n  findDescendants(pid);\n\n  // Kill descendants first (deepest first), then the parent\n  for (const childPid of descendants.reverse()) {\n    try {\n      process.kill(childPid, \"SIGTERM\");\n    } catch {}\n  }\n\n  try {\n    process.kill(pid, \"SIGTERM\");\n  } catch {}\n\n  // Force-kill any survivors after a short delay\n  setTimeout(() => {\n    for (const childPid of descendants) {\n      try {\n        process.kill(childPid, \"SIGKILL\");\n      } catch {}\n    }\n    try {\n      process.kill(pid, \"SIGKILL\");\n    } catch {}\n  }, 500);\n}\n\nexport interface PtyServerOptions {\n  /** Working directory for PTY processes. Defaults to process.cwd() */\n  appDir?: string;\n  /** Default CLI command. Defaults to 'claude' */\n  command?: string;\n  /** Port to listen on. Defaults to 0 (random available port) */\n  port?: number;\n  /** Auth check for WebSocket upgrade requests. Return false to reject. */\n  authCheck?: (req: IncomingMessage) => boolean | Promise<boolean>;\n  /** Log prefix for console output. Defaults to '[terminal]' */\n  logPrefix?: string;\n}\n\nexport interface PtyServerResult {\n  /** The underlying HTTP server */\n  server: HttpServer;\n  /** The actual port the server is listening on */\n  port: number;\n  /** Shut down the server and kill all PTY processes */\n  close: () => void;\n}\n\nexport async function createPtyWebSocketServer(\n  options: PtyServerOptions = {},\n): Promise<PtyServerResult> {\n  const {\n    appDir = process.cwd(),\n    command: defaultCommand = \"claude\",\n    port = 0,\n    authCheck,\n    logPrefix = \"[terminal]\",\n  } = options;\n\n  // Dynamic imports for optional native dependencies\n  const { WebSocketServer, WebSocket } = await import(\"ws\");\n  const pty = await import(\"node-pty\");\n\n  const resolvedAppDir = path.resolve(appDir);\n  const shell =\n    os.platform() === \"win32\" ? \"cmd.exe\" : process.env.SHELL || \"/bin/zsh\";\n\n  const server = createHttpServer((req, res) => {\n    // CORS headers\n    res.setHeader(\"Access-Control-Allow-Origin\", \"*\");\n    res.setHeader(\"Access-Control-Allow-Methods\", \"GET, POST, OPTIONS\");\n    res.setHeader(\"Access-Control-Allow-Headers\", \"Content-Type\");\n\n    if (req.method === \"OPTIONS\") {\n      res.writeHead(204);\n      res.end();\n      return;\n    }\n\n    res.writeHead(404);\n    res.end();\n  });\n\n  const wss = new WebSocketServer({ noServer: true });\n\n  // Handle WebSocket upgrades with optional auth\n  server.on(\"upgrade\", async (req, socket, head) => {\n    const url = new URL(req.url || \"/\", `http://${req.headers.host}`);\n    if (url.pathname !== \"/ws\") {\n      socket.write(\"HTTP/1.1 404 Not Found\\r\\n\\r\\n\");\n      socket.destroy();\n      return;\n    }\n\n    if (authCheck) {\n      try {\n        const allowed = await authCheck(req);\n        if (!allowed) {\n          socket.write(\"HTTP/1.1 401 Unauthorized\\r\\n\\r\\n\");\n          socket.destroy();\n          return;\n        }\n      } catch {\n        socket.write(\"HTTP/1.1 500 Internal Server Error\\r\\n\\r\\n\");\n        socket.destroy();\n        return;\n      }\n    }\n\n    wss.handleUpgrade(req, socket, head, (ws) => {\n      wss.emit(\"connection\", ws, req);\n    });\n  });\n\n  // Track active PTY processes for cleanup\n  const activePtys = new Set<ReturnType<typeof pty.spawn>>();\n\n  wss.on(\"connection\", async (ws: InstanceType<typeof WebSocket>, req) => {\n    const url = new URL(req.url || \"\", `http://${req.headers.host}`);\n    const command = url.searchParams.get(\"command\") || defaultCommand;\n    const extraFlags = url.searchParams.get(\"flags\") || \"\";\n    console.log(`${logPrefix} WebSocket connected for command: ${command}`);\n\n    const sendStatus = (status: string, message: string) => {\n      if (ws.readyState === WebSocket.OPEN) {\n        ws.send(JSON.stringify({ type: \"setup-status\", status, message }));\n      }\n    };\n\n    // Validate command against allowlist to prevent injection\n    if (!isAllowedCommand(command)) {\n      sendStatus(\n        \"not-found\",\n        `\"${command}\" is not a recognized CLI. Allowed: ${Object.keys(CLI_REGISTRY).join(\", \")}`,\n      );\n      if (ws.readyState === WebSocket.OPEN) ws.close();\n      return;\n    }\n\n    // Reject flags containing shell metacharacters\n    if (extraFlags && /[;&|`$(){}\\n\\r<>]/.test(extraFlags)) {\n      sendStatus(\"failed\", \"Invalid flags: shell metacharacters not allowed\");\n      if (ws.readyState === WebSocket.OPEN) ws.close();\n      return;\n    }\n\n    // Check if CLI is installed; if not, use npx to run it\n    let useNpx = false;\n    if (!(await commandExists(command))) {\n      const registry = CLI_REGISTRY[command];\n      if (registry?.installPackage) {\n        console.log(`${logPrefix} ${command} CLI not found, will use npx`);\n        useNpx = true;\n      } else {\n        sendStatus(\n          \"not-found\",\n          `\"${command}\" not found on PATH. Please install it manually.`,\n        );\n        if (ws.readyState === WebSocket.OPEN) ws.close();\n        return;\n      }\n    }\n\n    // Build the command — use npx if CLI not found locally\n    const baseCommand = useNpx\n      ? `npx --yes ${CLI_REGISTRY[command].installPackage}`\n      : command;\n    const fullCommand = extraFlags\n      ? `${baseCommand} ${extraFlags}`\n      : baseCommand;\n    console.log(`${logPrefix} Spawning PTY: ${fullCommand}`);\n\n    // Build env, stripping CLI-specific nesting vars\n    const registry = CLI_REGISTRY[command];\n    const env: Record<string, string | undefined> = {\n      ...process.env,\n      TERM: \"xterm-256color\",\n    };\n    if (registry) {\n      for (const v of registry.stripEnv) delete env[v];\n    }\n\n    let ptyProcess: ReturnType<typeof pty.spawn>;\n    try {\n      ptyProcess = pty.spawn(shell, [\"-l\", \"-c\", fullCommand], {\n        name: \"xterm-256color\",\n        cols: 120,\n        rows: 40,\n        cwd: resolvedAppDir,\n        env: env as Record<string, string>,\n      });\n    } catch (err) {\n      console.error(`${logPrefix} Failed to spawn PTY:`, err);\n      if (ws.readyState === WebSocket.OPEN) {\n        ws.send(\n          `\\r\\n\\x1b[31m${logPrefix} Failed to spawn PTY: ${err}\\x1b[0m\\r\\n`,\n        );\n        ws.close();\n      }\n      return;\n    }\n\n    activePtys.add(ptyProcess);\n    console.log(`${logPrefix} PTY spawned (pid: ${ptyProcess.pid})`);\n\n    ptyProcess.onData((data: string) => {\n      if (ws.readyState === WebSocket.OPEN) {\n        ws.send(data);\n      }\n    });\n\n    ptyProcess.onExit(({ exitCode }) => {\n      console.log(`${logPrefix} PTY exited with code ${exitCode}`);\n      activePtys.delete(ptyProcess);\n      if (exitCode === 127 && ws.readyState === WebSocket.OPEN) {\n        ws.send(\n          JSON.stringify({\n            type: \"setup-status\",\n            status: \"not-found\",\n            message: `Command \"${command}\" not found. Please install it first.`,\n          }),\n        );\n      }\n      if (ws.readyState === WebSocket.OPEN) {\n        ws.close();\n      }\n    });\n\n    ws.on(\"message\", async (data: Buffer | string) => {\n      const str = typeof data === \"string\" ? data : data.toString();\n\n      try {\n        const msg = JSON.parse(str);\n\n        if (\n          msg.type === \"agentNative.setEnvVars\" &&\n          Array.isArray(msg.data?.vars)\n        ) {\n          const envPath = path.join(resolvedAppDir, \".env\");\n          const vars: Array<{ key: string; value: string }> = msg.data.vars;\n\n          // Validate env var names and sanitize values\n          const validKeyPattern = /^[A-Za-z_][A-Za-z0-9_]*$/;\n          const sanitizedVars = vars.filter(({ key }) => {\n            if (!validKeyPattern.test(key)) {\n              console.warn(`${logPrefix} Rejected invalid env var key: ${key}`);\n              return false;\n            }\n            return true;\n          });\n\n          const fs = await getFs();\n          let lines: string[] = [];\n          try {\n            lines = fs.readFileSync(envPath, \"utf-8\").split(\"\\n\");\n          } catch {}\n\n          for (const { key, value } of sanitizedVars) {\n            // Strip newlines/null bytes to prevent line injection\n            const safeValue = value.replace(/[\\r\\n\\0]/g, \"\");\n            // Quote values containing #, spaces, or quotes so dotenv parses correctly\n            const needsQuoting = /[# \"']/.test(safeValue);\n            const quotedValue = needsQuoting\n              ? `\"${safeValue.replace(/\"/g, '\\\\\"')}\"`\n              : safeValue;\n            const idx = lines.findIndex((l) => l.startsWith(`${key}=`));\n            const entry = `${key}=${quotedValue}`;\n            if (idx !== -1) {\n              lines[idx] = entry;\n            } else {\n              lines.push(entry);\n            }\n          }\n\n          while (lines.length > 0 && lines[lines.length - 1] === \"\") {\n            lines.pop();\n          }\n          fs.writeFileSync(envPath, lines.join(\"\\n\") + \"\\n\", \"utf-8\");\n\n          if (ws.readyState === WebSocket.OPEN) {\n            ws.send(\n              JSON.stringify({\n                type: \"env-vars-saved\",\n                keys: sanitizedVars.map((v) => v.key),\n              }),\n            );\n          }\n          return;\n        }\n\n        if (msg.type === \"resize\" && msg.cols != null && msg.rows != null) {\n          const cols = Math.max(\n            1,\n            Math.min(65535, Math.trunc(Number(msg.cols))),\n          );\n          const rows = Math.max(\n            1,\n            Math.min(65535, Math.trunc(Number(msg.rows))),\n          );\n          if (!Number.isFinite(cols) || !Number.isFinite(rows)) return;\n          ptyProcess.resize(cols, rows);\n          return;\n        }\n      } catch {\n        // Not JSON — regular terminal input\n      }\n\n      ptyProcess.write(str);\n    });\n\n    ws.on(\"close\", () => {\n      console.log(\n        `${logPrefix} WebSocket closed, killing PTY tree (pid: ${ptyProcess.pid})`,\n      );\n      activePtys.delete(ptyProcess);\n      killProcessTree(ptyProcess.pid, logPrefix);\n    });\n  });\n\n  return new Promise((resolve, reject) => {\n    server.once(\"error\", (err) => {\n      reject(err);\n    });\n    server.listen(port, \"127.0.0.1\", () => {\n      const addr = server.address();\n      const actualPort = typeof addr === \"object\" && addr ? addr.port : port;\n      if (process.env.DEBUG)\n        console.log(\n          `${logPrefix} PTY WebSocket server on ws://localhost:${actualPort}/ws`,\n        );\n\n      resolve({\n        server,\n        port: actualPort,\n        close: () => {\n          for (const p of activePtys) {\n            killProcessTree(p.pid, logPrefix);\n          }\n          activePtys.clear();\n          wss.close();\n          server.close();\n        },\n      });\n    });\n  });\n}\n"]}
+{"version":3,"file":"pty-server.js","sourceRoot":"","sources":["../../src/terminal/pty-server.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EACL,YAAY,IAAI,gBAAgB,GAGjC,MAAM,MAAM,CAAC;AACd,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EACL,YAAY,EACZ,aAAa,EACb,gBAAgB,GACjB,MAAM,mBAAmB,CAAC;AAE3B,oEAAoE;AACpE,IAAI,GAA+C,CAAC;AACpD,KAAK,UAAU,eAAe;IAC5B,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,GAAG,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,IAAI,GAAoC,CAAC;AACzC,KAAK,UAAU,KAAK;IAClB,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,GAAG,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,eAAe,CAAC,GAAW,EAAE,UAAkB;IAC5D,MAAM,EAAE,GAAG,MAAM,eAAe,EAAE,CAAC;IAEnC,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,OAAO,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,EAAE,CAAC,QAAQ,CAAC,iBAAiB,GAAG,QAAQ,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QACjE,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;QACV,OAAO;IACT,CAAC;IAED,2DAA2D;IAC3D,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,SAAS,eAAe,CAAC,SAAiB;QACxC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,EAAE;iBACd,QAAQ,CAAC,YAAY,SAAS,EAAE,EAAE;gBACjC,QAAQ,EAAE,OAAO;gBACjB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC;aAClC,CAAC;iBACD,IAAI,EAAE,CAAC;YACV,IAAI,MAAM,EAAE,CAAC;gBACX,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;oBACtC,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;oBACpC,IAAI,QAAQ,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;wBACjC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;wBAC3B,eAAe,CAAC,QAAQ,CAAC,CAAC;oBAC5B,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,gDAAgD;QAClD,CAAC;IACH,CAAC;IACD,eAAe,CAAC,GAAG,CAAC,CAAC;IAErB,0DAA0D;IAC1D,KAAK,MAAM,QAAQ,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,CAAC;QAC7C,IAAI,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;IACZ,CAAC;IAED,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IAEV,+CAA+C;IAC/C,UAAU,CAAC,GAAG,EAAE;QACd,KAAK,MAAM,QAAQ,IAAI,WAAW,EAAE,CAAC;YACnC,IAAI,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;YACpC,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;QACZ,CAAC;QACD,IAAI,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;IACZ,CAAC,EAAE,GAAG,CAAC,CAAC;AACV,CAAC;AAwBD,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,UAA4B,EAAE;IAE9B,MAAM,EACJ,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,EACtB,OAAO,EAAE,cAAc,GAAG,QAAQ,EAClC,IAAI,GAAG,CAAC,EACR,SAAS,EACT,SAAS,GAAG,YAAY,GACzB,GAAG,OAAO,CAAC;IAEZ,mDAAmD;IACnD,MAAM,EAAE,eAAe,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;IAC1D,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC;IAErC,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,KAAK,GACT,EAAE,CAAC,QAAQ,EAAE,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,UAAU,CAAC;IAE1E,MAAM,MAAM,GAAG,gBAAgB,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC3C,eAAe;QACf,GAAG,CAAC,SAAS,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC;QAClD,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,oBAAoB,CAAC,CAAC;QACpE,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,cAAc,CAAC,CAAC;QAE9D,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC7B,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACnB,GAAG,CAAC,GAAG,EAAE,CAAC;YACV,OAAO;QACT,CAAC;QAED,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACnB,GAAG,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,IAAI,eAAe,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAEpD,+CAA+C;IAC/C,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;QAC/C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,UAAU,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QAClE,IAAI,GAAG,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;YAC3B,MAAM,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;YAC/C,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO;QACT,CAAC;QAED,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC;gBACrC,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,MAAM,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;oBAClD,MAAM,CAAC,OAAO,EAAE,CAAC;oBACjB,OAAO;gBACT,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,CAAC,KAAK,CAAC,4CAA4C,CAAC,CAAC;gBAC3D,MAAM,CAAC,OAAO,EAAE,CAAC;gBACjB,OAAO;YACT,CAAC;QACH,CAAC;QAED,GAAG,CAAC,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE;YAC1C,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,yCAAyC;IACzC,MAAM,UAAU,GAAG,IAAI,GAAG,EAAgC,CAAC;IAE3D,GAAG,CAAC,EAAE,CAAC,YAAY,EAAE,KAAK,EAAE,EAAkC,EAAE,GAAG,EAAE,EAAE;QACrE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,EAAE,UAAU,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QACjE,MAAM,OAAO,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,cAAc,CAAC;QAClE,MAAM,UAAU,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QACvD,OAAO,CAAC,GAAG,CAAC,GAAG,SAAS,qCAAqC,OAAO,EAAE,CAAC,CAAC;QAExE,MAAM,UAAU,GAAG,CAAC,MAAc,EAAE,OAAe,EAAE,EAAE;YACrD,IAAI,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;gBACrC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;YACrE,CAAC;QACH,CAAC,CAAC;QAEF,0DAA0D;QAC1D,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/B,UAAU,CACR,WAAW,EACX,IAAI,OAAO,uCAAuC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACzF,CAAC;YACF,IAAI,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI;gBAAE,EAAE,CAAC,KAAK,EAAE,CAAC;YACjD,OAAO;QACT,CAAC;QAED,+CAA+C;QAC/C,IAAI,UAAU,IAAI,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YACvD,UAAU,CAAC,QAAQ,EAAE,iDAAiD,CAAC,CAAC;YACxE,IAAI,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI;gBAAE,EAAE,CAAC,KAAK,EAAE,CAAC;YACjD,OAAO;QACT,CAAC;QAED,uDAAuD;QACvD,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,CAAC,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YACpC,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;YACvC,IAAI,QAAQ,EAAE,cAAc,EAAE,CAAC;gBAC7B,OAAO,CAAC,GAAG,CAAC,GAAG,SAAS,IAAI,OAAO,8BAA8B,CAAC,CAAC;gBACnE,MAAM,GAAG,IAAI,CAAC;YAChB,CAAC;iBAAM,CAAC;gBACN,UAAU,CACR,WAAW,EACX,IAAI,OAAO,kDAAkD,CAC9D,CAAC;gBACF,IAAI,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI;oBAAE,EAAE,CAAC,KAAK,EAAE,CAAC;gBACjD,OAAO;YACT,CAAC;QACH,CAAC;QAED,uDAAuD;QACvD,MAAM,WAAW,GAAG,MAAM;YACxB,CAAC,CAAC,aAAa,YAAY,CAAC,OAAO,CAAC,CAAC,cAAc,EAAE;YACrD,CAAC,CAAC,OAAO,CAAC;QACZ,MAAM,WAAW,GAAG,UAAU;YAC5B,CAAC,CAAC,GAAG,WAAW,IAAI,UAAU,EAAE;YAChC,CAAC,CAAC,WAAW,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,GAAG,SAAS,kBAAkB,WAAW,EAAE,CAAC,CAAC;QAEzD,iDAAiD;QACjD,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;QACvC,MAAM,GAAG,GAAuC;YAC9C,GAAG,OAAO,CAAC,GAAG;YACd,IAAI,EAAE,gBAAgB;SACvB,CAAC;QACF,IAAI,QAAQ,EAAE,CAAC;YACb,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,QAAQ;gBAAE,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;QACnD,CAAC;QAED,IAAI,UAAwC,CAAC;QAC7C,IAAI,CAAC;YACH,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,CAAC,EAAE;gBACvD,IAAI,EAAE,gBAAgB;gBACtB,IAAI,EAAE,GAAG;gBACT,IAAI,EAAE,EAAE;gBACR,GAAG,EAAE,cAAc;gBACnB,GAAG,EAAE,GAA6B;aACnC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,GAAG,SAAS,uBAAuB,EAAE,GAAG,CAAC,CAAC;YACxD,IAAI,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;gBACrC,EAAE,CAAC,IAAI,CACL,eAAe,SAAS,yBAAyB,GAAG,aAAa,CAClE,CAAC;gBACF,EAAE,CAAC,KAAK,EAAE,CAAC;YACb,CAAC;YACD,OAAO;QACT,CAAC;QAED,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,GAAG,SAAS,sBAAsB,UAAU,CAAC,GAAG,GAAG,CAAC,CAAC;QAEjE,UAAU,CAAC,MAAM,CAAC,CAAC,IAAY,EAAE,EAAE;YACjC,IAAI,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;gBACrC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAChB,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE;YACjC,OAAO,CAAC,GAAG,CAAC,GAAG,SAAS,yBAAyB,QAAQ,EAAE,CAAC,CAAC;YAC7D,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAC9B,IAAI,QAAQ,KAAK,GAAG,IAAI,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;gBACzD,EAAE,CAAC,IAAI,CACL,IAAI,CAAC,SAAS,CAAC;oBACb,IAAI,EAAE,cAAc;oBACpB,MAAM,EAAE,WAAW;oBACnB,OAAO,EAAE,YAAY,OAAO,uCAAuC;iBACpE,CAAC,CACH,CAAC;YACJ,CAAC;YACD,IAAI,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;gBACrC,EAAE,CAAC,KAAK,EAAE,CAAC;YACb,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,IAAqB,EAAE,EAAE;YAC/C,MAAM,GAAG,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YAE9D,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBAE5B,IACE,GAAG,CAAC,IAAI,KAAK,wBAAwB;oBACrC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,EAC7B,CAAC;oBACD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;oBAClD,MAAM,IAAI,GAA0C,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;oBAElE,6CAA6C;oBAC7C,MAAM,eAAe,GAAG,0BAA0B,CAAC;oBACnD,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE;wBAC5C,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;4BAC/B,OAAO,CAAC,IAAI,CAAC,GAAG,SAAS,kCAAkC,GAAG,EAAE,CAAC,CAAC;4BAClE,OAAO,KAAK,CAAC;wBACf,CAAC;wBACD,OAAO,IAAI,CAAC;oBACd,CAAC,CAAC,CAAC;oBAEH,MAAM,EAAE,GAAG,MAAM,KAAK,EAAE,CAAC;oBACzB,IAAI,KAAK,GAAa,EAAE,CAAC;oBACzB,IAAI,CAAC;wBACH,KAAK,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBACxD,CAAC;oBAAC,MAAM,CAAC,CAAA,CAAC;oBAEV,KAAK,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,aAAa,EAAE,CAAC;wBAC3C,sDAAsD;wBACtD,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;wBACjD,0EAA0E;wBAC1E,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;wBAC9C,MAAM,WAAW,GAAG,YAAY;4BAC9B,CAAC,CAAC,IAAI,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG;4BACvC,CAAC,CAAC,SAAS,CAAC;wBACd,MAAM,GAAG,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC;wBAC5D,MAAM,KAAK,GAAG,GAAG,GAAG,IAAI,WAAW,EAAE,CAAC;wBACtC,IAAI,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;4BACf,KAAK,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;wBACrB,CAAC;6BAAM,CAAC;4BACN,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;wBACpB,CAAC;oBACH,CAAC;oBAED,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;wBAC1D,KAAK,CAAC,GAAG,EAAE,CAAC;oBACd,CAAC;oBACD,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;oBAE5D,IAAI,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;wBACrC,EAAE,CAAC,IAAI,CACL,IAAI,CAAC,SAAS,CAAC;4BACb,IAAI,EAAE,gBAAgB;4BACtB,IAAI,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;yBACtC,CAAC,CACH,CAAC;oBACJ,CAAC;oBACD,OAAO;gBACT,CAAC;gBAED,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,IAAI,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC;oBAClE,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CACnB,CAAC,EACD,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAC9C,CAAC;oBACF,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CACnB,CAAC,EACD,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAC9C,CAAC;oBACF,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;wBAAE,OAAO;oBAC7D,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;oBAC9B,OAAO;gBACT,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,oCAAoC;YACtC,CAAC;YAED,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YAClB,OAAO,CAAC,GAAG,CACT,GAAG,SAAS,6CAA6C,UAAU,CAAC,GAAG,GAAG,CAC3E,CAAC;YACF,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAC9B,eAAe,CAAC,UAAU,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YAC3B,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE;YACpC,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;YAC9B,MAAM,UAAU,GAAG,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YACvE,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK;gBACnB,OAAO,CAAC,GAAG,CACT,GAAG,SAAS,2CAA2C,UAAU,KAAK,CACvE,CAAC;YAEJ,OAAO,CAAC;gBACN,MAAM;gBACN,IAAI,EAAE,UAAU;gBAChB,KAAK,EAAE,GAAG,EAAE;oBACV,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;wBAC3B,eAAe,CAAC,CAAC,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;oBACpC,CAAC;oBACD,UAAU,CAAC,KAAK,EAAE,CAAC;oBACnB,GAAG,CAAC,KAAK,EAAE,CAAC;oBACZ,MAAM,CAAC,KAAK,EAAE,CAAC;gBACjB,CAAC;aACF,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["/**\n * PTY WebSocket Server\n *\n * Creates an HTTP server with WebSocket support that spawns PTY processes\n * for AI CLI tools. Each WebSocket connection gets its own PTY.\n *\n * Used by both the embedded AgentTerminal component and the CLI frame.\n */\n\nimport {\n  createServer as createHttpServer,\n  type IncomingMessage,\n  type Server as HttpServer,\n} from \"http\";\nimport os from \"os\";\nimport path from \"path\";\nimport {\n  CLI_REGISTRY,\n  commandExists,\n  isAllowedCommand,\n} from \"./cli-registry.js\";\n\n// Lazy singletons for Node-only modules (only available in Node.js)\nlet _cp: typeof import(\"child_process\") | undefined;\nasync function getChildProcess(): Promise<typeof import(\"child_process\")> {\n  if (!_cp) {\n    _cp = await import(\"node:child_process\");\n  }\n  return _cp;\n}\n\nlet _fs: typeof import(\"fs\") | undefined;\nasync function getFs(): Promise<typeof import(\"fs\")> {\n  if (!_fs) {\n    _fs = await import(\"node:fs\");\n  }\n  return _fs;\n}\n\n/**\n * Kill a process and all its descendants.\n * node-pty's kill() only sends a signal to the shell, but child processes\n * (like `builder`) may be in their own process group and survive as orphans.\n */\nasync function killProcessTree(pid: number, _logPrefix: string): Promise<void> {\n  const cp = await getChildProcess();\n\n  if (os.platform() === \"win32\") {\n    try {\n      cp.execSync(`taskkill /pid ${pid} /T /F`, { stdio: \"ignore\" });\n    } catch {}\n    return;\n  }\n\n  // Find all descendant PIDs (children, grandchildren, etc.)\n  const descendants: number[] = [];\n  function findDescendants(parentPid: number) {\n    try {\n      const output = cp\n        .execSync(`pgrep -P ${parentPid}`, {\n          encoding: \"utf-8\",\n          stdio: [\"pipe\", \"pipe\", \"ignore\"],\n        })\n        .trim();\n      if (output) {\n        for (const line of output.split(\"\\n\")) {\n          const childPid = parseInt(line, 10);\n          if (childPid && !isNaN(childPid)) {\n            descendants.push(childPid);\n            findDescendants(childPid);\n          }\n        }\n      }\n    } catch {\n      // pgrep returns non-zero when no children found\n    }\n  }\n  findDescendants(pid);\n\n  // Kill descendants first (deepest first), then the parent\n  for (const childPid of descendants.reverse()) {\n    try {\n      process.kill(childPid, \"SIGTERM\");\n    } catch {}\n  }\n\n  try {\n    process.kill(pid, \"SIGTERM\");\n  } catch {}\n\n  // Force-kill any survivors after a short delay\n  setTimeout(() => {\n    for (const childPid of descendants) {\n      try {\n        process.kill(childPid, \"SIGKILL\");\n      } catch {}\n    }\n    try {\n      process.kill(pid, \"SIGKILL\");\n    } catch {}\n  }, 500);\n}\n\nexport interface PtyServerOptions {\n  /** Working directory for PTY processes. Defaults to process.cwd() */\n  appDir?: string;\n  /** Default CLI command. Defaults to 'claude' */\n  command?: string;\n  /** Port to listen on. Defaults to 0 (random available port) */\n  port?: number;\n  /** Auth check for WebSocket upgrade requests. Return false to reject. */\n  authCheck?: (req: IncomingMessage) => boolean | Promise<boolean>;\n  /** Log prefix for console output. Defaults to '[terminal]' */\n  logPrefix?: string;\n}\n\nexport interface PtyServerResult {\n  /** The underlying HTTP server */\n  server: HttpServer;\n  /** The actual port the server is listening on */\n  port: number;\n  /** Shut down the server and kill all PTY processes */\n  close: () => void;\n}\n\nexport async function createPtyWebSocketServer(\n  options: PtyServerOptions = {},\n): Promise<PtyServerResult> {\n  const {\n    appDir = process.cwd(),\n    command: defaultCommand = \"claude\",\n    port = 0,\n    authCheck,\n    logPrefix = \"[terminal]\",\n  } = options;\n\n  // Dynamic imports for optional native dependencies\n  const { WebSocketServer, WebSocket } = await import(\"ws\");\n  const pty = await import(\"node-pty\");\n\n  const resolvedAppDir = path.resolve(appDir);\n  const shell =\n    os.platform() === \"win32\" ? \"cmd.exe\" : process.env.SHELL || \"/bin/zsh\";\n\n  const server = createHttpServer((req, res) => {\n    // CORS headers\n    res.setHeader(\"Access-Control-Allow-Origin\", \"*\");\n    res.setHeader(\"Access-Control-Allow-Methods\", \"GET, POST, OPTIONS\");\n    res.setHeader(\"Access-Control-Allow-Headers\", \"Content-Type\");\n\n    if (req.method === \"OPTIONS\") {\n      res.writeHead(204);\n      res.end();\n      return;\n    }\n\n    res.writeHead(404);\n    res.end();\n  });\n\n  const wss = new WebSocketServer({ noServer: true });\n\n  // Handle WebSocket upgrades with optional auth\n  server.on(\"upgrade\", async (req, socket, head) => {\n    const url = new URL(req.url || \"/\", `http://${req.headers.host}`);\n    if (url.pathname !== \"/ws\") {\n      socket.write(\"HTTP/1.1 404 Not Found\\r\\n\\r\\n\");\n      socket.destroy();\n      return;\n    }\n\n    if (authCheck) {\n      try {\n        const allowed = await authCheck(req);\n        if (!allowed) {\n          socket.write(\"HTTP/1.1 401 Unauthorized\\r\\n\\r\\n\");\n          socket.destroy();\n          return;\n        }\n      } catch {\n        socket.write(\"HTTP/1.1 500 Internal Server Error\\r\\n\\r\\n\");\n        socket.destroy();\n        return;\n      }\n    }\n\n    wss.handleUpgrade(req, socket, head, (ws) => {\n      wss.emit(\"connection\", ws, req);\n    });\n  });\n\n  // Track active PTY processes for cleanup\n  const activePtys = new Set<ReturnType<typeof pty.spawn>>();\n\n  wss.on(\"connection\", async (ws: InstanceType<typeof WebSocket>, req) => {\n    const url = new URL(req.url || \"\", `http://${req.headers.host}`);\n    const command = url.searchParams.get(\"command\") || defaultCommand;\n    const extraFlags = url.searchParams.get(\"flags\") || \"\";\n    console.log(`${logPrefix} WebSocket connected for command: ${command}`);\n\n    const sendStatus = (status: string, message: string) => {\n      if (ws.readyState === WebSocket.OPEN) {\n        ws.send(JSON.stringify({ type: \"setup-status\", status, message }));\n      }\n    };\n\n    // Validate command against allowlist to prevent injection\n    if (!isAllowedCommand(command)) {\n      sendStatus(\n        \"not-found\",\n        `\"${command}\" is not a recognized CLI. Allowed: ${Object.keys(CLI_REGISTRY).join(\", \")}`,\n      );\n      if (ws.readyState === WebSocket.OPEN) ws.close();\n      return;\n    }\n\n    // Reject flags containing shell metacharacters\n    if (extraFlags && /[;&|`$(){}\\n\\r<>]/.test(extraFlags)) {\n      sendStatus(\"failed\", \"Invalid flags: shell metacharacters not allowed\");\n      if (ws.readyState === WebSocket.OPEN) ws.close();\n      return;\n    }\n\n    // Check if CLI is installed; if not, use npx to run it\n    let useNpx = false;\n    if (!(await commandExists(command))) {\n      const registry = CLI_REGISTRY[command];\n      if (registry?.installPackage) {\n        console.log(`${logPrefix} ${command} CLI not found, will use npx`);\n        useNpx = true;\n      } else {\n        sendStatus(\n          \"not-found\",\n          `\"${command}\" not found on PATH. Please install it manually.`,\n        );\n        if (ws.readyState === WebSocket.OPEN) ws.close();\n        return;\n      }\n    }\n\n    // Build the command — use npx if CLI not found locally\n    const baseCommand = useNpx\n      ? `npx --yes ${CLI_REGISTRY[command].installPackage}`\n      : command;\n    const fullCommand = extraFlags\n      ? `${baseCommand} ${extraFlags}`\n      : baseCommand;\n    console.log(`${logPrefix} Spawning PTY: ${fullCommand}`);\n\n    // Build env, stripping CLI-specific nesting vars\n    const registry = CLI_REGISTRY[command];\n    const env: Record<string, string | undefined> = {\n      ...process.env,\n      TERM: \"xterm-256color\",\n    };\n    if (registry) {\n      for (const v of registry.stripEnv) delete env[v];\n    }\n\n    let ptyProcess: ReturnType<typeof pty.spawn>;\n    try {\n      ptyProcess = pty.spawn(shell, [\"-l\", \"-c\", fullCommand], {\n        name: \"xterm-256color\",\n        cols: 120,\n        rows: 40,\n        cwd: resolvedAppDir,\n        env: env as Record<string, string>,\n      });\n    } catch (err) {\n      console.error(`${logPrefix} Failed to spawn PTY:`, err);\n      if (ws.readyState === WebSocket.OPEN) {\n        ws.send(\n          `\\r\\n\\x1b[31m${logPrefix} Failed to spawn PTY: ${err}\\x1b[0m\\r\\n`,\n        );\n        ws.close();\n      }\n      return;\n    }\n\n    activePtys.add(ptyProcess);\n    console.log(`${logPrefix} PTY spawned (pid: ${ptyProcess.pid})`);\n\n    ptyProcess.onData((data: string) => {\n      if (ws.readyState === WebSocket.OPEN) {\n        ws.send(data);\n      }\n    });\n\n    ptyProcess.onExit(({ exitCode }) => {\n      console.log(`${logPrefix} PTY exited with code ${exitCode}`);\n      activePtys.delete(ptyProcess);\n      if (exitCode === 127 && ws.readyState === WebSocket.OPEN) {\n        ws.send(\n          JSON.stringify({\n            type: \"setup-status\",\n            status: \"not-found\",\n            message: `Command \"${command}\" not found. Please install it first.`,\n          }),\n        );\n      }\n      if (ws.readyState === WebSocket.OPEN) {\n        ws.close();\n      }\n    });\n\n    ws.on(\"message\", async (data: Buffer | string) => {\n      const str = typeof data === \"string\" ? data : data.toString();\n\n      try {\n        const msg = JSON.parse(str);\n\n        if (\n          msg.type === \"agentNative.setEnvVars\" &&\n          Array.isArray(msg.data?.vars)\n        ) {\n          const envPath = path.join(resolvedAppDir, \".env\");\n          const vars: Array<{ key: string; value: string }> = msg.data.vars;\n\n          // Validate env var names and sanitize values\n          const validKeyPattern = /^[A-Za-z_][A-Za-z0-9_]*$/;\n          const sanitizedVars = vars.filter(({ key }) => {\n            if (!validKeyPattern.test(key)) {\n              console.warn(`${logPrefix} Rejected invalid env var key: ${key}`);\n              return false;\n            }\n            return true;\n          });\n\n          const fs = await getFs();\n          let lines: string[] = [];\n          try {\n            lines = fs.readFileSync(envPath, \"utf-8\").split(\"\\n\");\n          } catch {}\n\n          for (const { key, value } of sanitizedVars) {\n            // Strip newlines/null bytes to prevent line injection\n            const safeValue = value.replace(/[\\r\\n\\0]/g, \"\");\n            // Quote values containing #, spaces, or quotes so dotenv parses correctly\n            const needsQuoting = /[# \"']/.test(safeValue);\n            const quotedValue = needsQuoting\n              ? `\"${safeValue.replace(/\"/g, '\\\\\"')}\"`\n              : safeValue;\n            const idx = lines.findIndex((l) => l.startsWith(`${key}=`));\n            const entry = `${key}=${quotedValue}`;\n            if (idx !== -1) {\n              lines[idx] = entry;\n            } else {\n              lines.push(entry);\n            }\n          }\n\n          while (lines.length > 0 && lines[lines.length - 1] === \"\") {\n            lines.pop();\n          }\n          fs.writeFileSync(envPath, lines.join(\"\\n\") + \"\\n\", \"utf-8\");\n\n          if (ws.readyState === WebSocket.OPEN) {\n            ws.send(\n              JSON.stringify({\n                type: \"env-vars-saved\",\n                keys: sanitizedVars.map((v) => v.key),\n              }),\n            );\n          }\n          return;\n        }\n\n        if (msg.type === \"resize\" && msg.cols != null && msg.rows != null) {\n          const cols = Math.max(\n            1,\n            Math.min(65535, Math.trunc(Number(msg.cols))),\n          );\n          const rows = Math.max(\n            1,\n            Math.min(65535, Math.trunc(Number(msg.rows))),\n          );\n          if (!Number.isFinite(cols) || !Number.isFinite(rows)) return;\n          ptyProcess.resize(cols, rows);\n          return;\n        }\n      } catch {\n        // Not JSON — regular terminal input\n      }\n\n      ptyProcess.write(str);\n    });\n\n    ws.on(\"close\", () => {\n      console.log(\n        `${logPrefix} WebSocket closed, killing PTY tree (pid: ${ptyProcess.pid})`,\n      );\n      activePtys.delete(ptyProcess);\n      killProcessTree(ptyProcess.pid, logPrefix);\n    });\n  });\n\n  return new Promise((resolve, reject) => {\n    server.once(\"error\", (err) => {\n      reject(err);\n    });\n    server.listen(port, \"127.0.0.1\", () => {\n      const addr = server.address();\n      const actualPort = typeof addr === \"object\" && addr ? addr.port : port;\n      if (process.env.DEBUG)\n        console.log(\n          `${logPrefix} PTY WebSocket server on ws://localhost:${actualPort}/ws`,\n        );\n\n      resolve({\n        server,\n        port: actualPort,\n        close: () => {\n          for (const p of activePtys) {\n            killProcessTree(p.pid, logPrefix);\n          }\n          activePtys.clear();\n          wss.close();\n          server.close();\n        },\n      });\n    });\n  });\n}\n"]}

package/dist/triggers/dispatcher.js

@@ -324,7 +324,7 @@ async function dispatchAgentic(resource, meta, body, payload, eventMeta, apiKey)
             const model = _deps.model ??
                 (await getStoredModelForEngine(engine, { appId: _deps.appId })) ??
                 engine.defaultModel;
-            const thread = await createThread(jobUserEmail, {
+            await createThread(jobUserEmail, {
                 title: `Trigger: ${triggerName} — ${now.toLocaleDateString()}`,
             });
             let payloadStr;