@band-app/server 0.20.0 → 0.20.1

package/dist/start-server.mjs

@@ -6070,7 +6070,7 @@ var require_transport = __commonJS({
     "use strict";
     var { createRequire: createRequire2 } = __require("module");
     var getCallers = require_caller();
-    var { join: join33, isAbsolute: isAbsolute5, sep: sep8 } = __require("node:path");
+    var { join: join33, isAbsolute: isAbsolute5, sep: sep9 } = __require("node:path");
     var sleep2 = require_atomic_sleep();
     var onExit = require_on_exit_leak_free();
     var ThreadStream = require_thread_stream();
@@ -6178,7 +6178,7 @@ var require_transport = __commonJS({
         let fixTarget2;
         for (const filePath of callers) {
           try {
-            const context = filePath === "node:repl" ? process.cwd() + sep8 : filePath;
+            const context = filePath === "node:repl" ? process.cwd() + sep9 : filePath;
             fixTarget2 = createRequire2(context).resolve(origin);
             break;
           } catch (err) {
@@ -29490,6 +29490,16 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
   }
 });
 
+// ../../packages/coding-agent/src/adapter-env.ts
+var AGENT_DISPATCH_ENV;
+var init_adapter_env = __esm({
+  "../../packages/coding-agent/src/adapter-env.ts"() {
+    AGENT_DISPATCH_ENV = {
+      BAND_DISPATCH: "chat"
+    };
+  }
+});
+
 // ../../packages/coding-agent/src/pricing.ts
 function computeCost(model, tokens) {
   if (!model) return 0;
@@ -29961,6 +29971,7 @@ var init_claude_code = __esm({
   "../../packages/coding-agent/src/adapters/claude-code.ts"() {
     init_sdk();
     init_src();
+    init_adapter_env();
     init_pricing();
     init_skills();
     log2 = createLogger("coding-agent:claude-code");
@@ -29996,7 +30007,7 @@ var init_claude_code = __esm({
         }
       }
       async *runSession(prompt, sessionId, options2) {
-        const env = { ...process.env };
+        const env = { ...process.env, ...AGENT_DISPATCH_ENV };
         env.CLAUDECODE = void 0;
         env.CLAUDE_CODE_ENTRYPOINT = void 0;
         env.ANTHROPIC_CUSTOM_HEADERS = void 0;
@@ -30370,6 +30381,18 @@ var init_claude_code = __esm({
           args: [prompt]
         };
       }
+      /**
+       * Resume CLI invocation for the chat tab's "Continue in terminal" action.
+       * `claude --resume <session-id>` reopens the interactive REPL with that
+       * exact conversation restored (session-ID lookup is scoped to the
+       * project directory + its worktrees, which is where we spawn the PTY).
+       */
+      resumeCliInvocation(sessionId) {
+        return {
+          command: this.executablePath ?? CLAUDE_CODE_DEFAULT_BINARY,
+          args: ["--resume", sessionId]
+        };
+      }
       /**
        * No static fallback. The live `supportedModels()` SDK call is the
        * single source of truth; `refreshModels()` populates
@@ -31112,6 +31135,18 @@ var init_cursor_cli = __esm({
           reason: "Cursor CLI has no interactive prompt-loading invocation; falling back to chat."
         };
       }
+      /**
+       * The chat tab's "Continue in terminal" action has no Cursor equivalent:
+       * the agent runs over the SDK's managed JSON subprocess, with no
+       * interactive by-id resume CLI. Returning the `unsupported` sentinel
+       * keeps the menu item disabled.
+       */
+      resumeCliInvocation(_sessionId) {
+        return {
+          unsupported: true,
+          reason: "Cursor CLI has no interactive session-resume invocation."
+        };
+      }
     };
     CURSOR_MODELS = [
       { id: "auto", name: "Auto", description: "Cursor chooses the best model" }
@@ -31951,6 +31986,7 @@ var init_codex = __esm({
     init_src();
     init_dist2();
     init_zod();
+    init_adapter_env();
     init_pricing();
     init_skills();
     log4 = createLogger("coding-agent:codex");
@@ -31999,6 +32035,7 @@ var init_codex = __esm({
           }
           cleanEnv[key] = value;
         }
+        Object.assign(cleanEnv, AGENT_DISPATCH_ENV);
         const codex = new Codex({
           ...this.executablePath ? { codexPathOverride: this.executablePath } : {},
           env: cleanEnv
@@ -32296,6 +32333,17 @@ var init_codex = __esm({
           args: [prompt]
         };
       }
+      /**
+       * Resume CLI invocation for the chat tab's "Continue in terminal" action.
+       * `codex resume <session-id>` reopens the interactive Codex TUI with that
+       * thread restored.
+       */
+      resumeCliInvocation(sessionId) {
+        return {
+          command: this.executablePath ?? CODEX_DEFAULT_BINARY,
+          args: ["resume", sessionId]
+        };
+      }
       async listSessions(dir) {
         log4.info({ dir }, "listSessions");
         const sessions = await readCodexSessions();
@@ -32497,6 +32545,7 @@ var log5, GeminiCliAdapter, GEMINI_CLI_DEFAULT_BINARY, GEMINI_MODELS;
 var init_gemini_cli = __esm({
   "../../packages/coding-agent/src/adapters/gemini-cli.ts"() {
     init_src();
+    init_adapter_env();
     init_skills();
     log5 = createLogger("coding-agent:gemini-cli");
     GeminiCliAdapter = class {
@@ -32541,7 +32590,9 @@ var init_gemini_cli = __esm({
         const child = spawn3(this.executablePath, args, {
           cwd: this.workspaceDir,
           stdio: ["ignore", "pipe", "pipe"],
-          env: { ...process.env }
+          // BAND_DISPATCH=chat so a nested `band` CLI call from this agent
+          // dispatches back into a chat pane (see adapter-env.ts).
+          env: { ...process.env, ...AGENT_DISPATCH_ENV }
         });
         this.activeChild = child;
         let spawnError = null;
@@ -32671,6 +32722,17 @@ var init_gemini_cli = __esm({
           args: ["--", prompt]
         };
       }
+      /**
+       * The chat tab's "Continue in terminal" action has no Gemini equivalent:
+       * the Gemini CLI has no session model, so there's no session ID to resume
+       * by. Returning the `unsupported` sentinel keeps the menu item disabled.
+       */
+      resumeCliInvocation(_sessionId) {
+        return {
+          unsupported: true,
+          reason: "Gemini CLI has no session-resume invocation."
+        };
+      }
     };
     GEMINI_CLI_DEFAULT_BINARY = "gemini";
     GEMINI_MODELS = [
@@ -32888,6 +32950,7 @@ var log6, OpenCodeAdapter, OPENCODE_DEFAULT_BINARY;
 var init_opencode = __esm({
   "../../packages/coding-agent/src/adapters/opencode.ts"() {
     init_src();
+    init_adapter_env();
     init_skills();
     log6 = createLogger("coding-agent:opencode");
     OpenCodeAdapter = class {
@@ -32952,7 +33015,9 @@ var init_opencode = __esm({
           const child = spawn4(this.executablePath, args, {
             cwd: this.workspaceDir,
             stdio: ["ignore", "pipe", "pipe"],
-            env: { ...process.env }
+            // BAND_DISPATCH=chat so a nested `band` CLI call from this agent
+            // dispatches back into a chat pane (see adapter-env.ts).
+            env: { ...process.env, ...AGENT_DISPATCH_ENV }
           });
           this.activeChild = child;
           child.on("error", (err) => {
@@ -33152,6 +33217,18 @@ var init_opencode = __esm({
           args: ["--prompt", prompt]
         };
       }
+      /**
+       * Resume CLI invocation for the chat tab's "Continue in terminal" action.
+       * `opencode --session <id>` launches the interactive TUI on that exact
+       * session (the same `--session` flag `runSession` uses for headless
+       * `opencode run`).
+       */
+      resumeCliInvocation(sessionId) {
+        return {
+          command: this.executablePath,
+          args: ["--session", sessionId]
+        };
+      }
       async listSessions(dir) {
         const sessions = await fetchOpenCodeSessions(this.executablePath, dir);
         log6.info({ dir, count: sessions.length }, "listSessions");
@@ -89610,7 +89687,7 @@ var require_dist5 = __commonJS({
 // start-server.ts
 import { appendFileSync as appendFileSync2, createReadStream as createReadStream3, mkdirSync as mkdirSync9, readFileSync as readFileSync10, statSync as statSync9 } from "node:fs";
 import { createServer } from "node:http";
-import { basename as basename3, join as join32, resolve as resolve11, sep as sep7 } from "node:path";
+import { basename as basename3, join as join32, resolve as resolve11, sep as sep8 } from "node:path";
 
 // ../../node_modules/.pnpm/@trpc+server@11.12.0_typescript@5.9.3/node_modules/@trpc/server/dist/codes-DagpWZLc.mjs
 function mergeWithoutOverrides(obj1, ...objs) {
@@ -114371,6 +114448,13 @@ var import_jsx_runtime52 = __toESM(require_jsx_runtime(), 1);
 
 // src/dashboard/components/NewWorkspaceForm.tsx
 var import_react20 = __toESM(require_react(), 1);
+
+// src/lib/branch-name.ts
+function slugifyBranchName(input) {
+  return input.toLowerCase().replace(/\s+/g, "-").replace(/[^a-z0-9\-/]/g, "").replace(/-{2,}/g, "-").replace(/\/+/g, "/").replace(/^[-/]+|[-/]+$/g, "");
+}
+
+// src/dashboard/components/NewWorkspaceForm.tsx
 var import_jsx_runtime53 = __toESM(require_jsx_runtime(), 1);
 
 // src/dashboard/components/PromoteToGitDialog.tsx
@@ -120218,8 +120302,8 @@ function mimeTypeFromFilename(filename) {
 init_src();
 init_zod();
 import { execFile as execFile6 } from "node:child_process";
-import { randomUUID as randomUUID2 } from "node:crypto";
-import { existsSync as existsSync8, mkdirSync as mkdirSync5, unlinkSync as unlinkSync2 } from "node:fs";
+import { randomUUID as randomUUID3 } from "node:crypto";
+import { existsSync as existsSync8, mkdirSync as mkdirSync5, unlinkSync as unlinkSync3 } from "node:fs";
 import { rm } from "node:fs/promises";
 import { join as join20 } from "node:path";
 import { promisify as promisify2 } from "node:util";
@@ -120802,6 +120886,21 @@ function hasGlobMeta(pattern) {
   return /[*?[\]{}]/.test(pattern);
 }
 
+// src/server/services/_utils/format-shell-command.ts
+var PTY_CONTROL_CHAR_RANGE = new RegExp(
+  `[${String.fromCharCode(0)}-${String.fromCharCode(31)}${String.fromCharCode(
+    127
+  )}-${String.fromCharCode(159)}]`,
+  "g"
+);
+function formatShellCommand(command, args) {
+  const stripControls = (s6) => s6.replace(PTY_CONTROL_CHAR_RANGE, "");
+  const quoted = [command, ...args].map(
+    (token) => `'${stripControls(token).replace(/'/g, "'\\''")}'`
+  );
+  return quoted.join(" ");
+}
+
 // src/server/services/browser-service.ts
 init_src();
 
@@ -122357,8 +122456,10 @@ init_zod();
 
 // src/server/infra/terminals/terminal-pool.ts
 init_src();
-import { existsSync as existsSync7 } from "node:fs";
-import { join as join19 } from "node:path";
+import { randomUUID as randomUUID2 } from "node:crypto";
+import { existsSync as existsSync7, unlinkSync as unlinkSync2, writeFileSync as writeFileSync2 } from "node:fs";
+import { tmpdir } from "node:os";
+import { join as join19, sep as sep3 } from "node:path";
 var log21 = createLogger("terminal-pool");
 var MAX_SCROLLBACK_SIZE = 1e5;
 var TerminalPool = class {
@@ -122392,10 +122493,11 @@ var TerminalPool = class {
     if (options2?.env) {
       Object.assign(env, options2.env);
     }
+    env.BAND_DISPATCH = "terminal";
     let cwd = workspaceRoot;
     if (options2?.cwd) {
       const resolved = join19(workspaceRoot, options2.cwd);
-      if (!resolved.startsWith(workspaceRoot)) {
+      if (resolved !== workspaceRoot && !resolved.startsWith(workspaceRoot + sep3)) {
         log21.warn(
           "Ignoring cwd %s \u2014 resolves outside workspace root %s",
           options2.cwd,
@@ -122438,8 +122540,7 @@ var TerminalPool = class {
     const session = { pty: ptyProcess, scrollback: "", workspaceId };
     this.terminals.set(terminalId, session);
     if (options2?.command) {
-      ptyProcess.write(`${options2.command}
-`);
+      this.autoRunCommand(session, options2.command);
     }
     let ids = this.workspaceTerminals.get(workspaceId);
     if (!ids) {
@@ -122473,9 +122574,94 @@ var TerminalPool = class {
           this.workspaceTerminals.delete(workspaceId);
         }
       }
+      if (session.autoRunFile) {
+        try {
+          unlinkSync2(session.autoRunFile);
+        } catch {
+        }
+      }
     });
     return session;
   }
+  /**
+   * Auto-run the workspace's initial command inside a freshly spawned PTY,
+   * robustly.
+   *
+   * Writing a long command line straight into a cold PTY is racy on three
+   * fronts, all of which surfaced in production with `via=terminal`
+   * prompt-as-argv launches (`'<agent-binary>' '<entire-prompt>'`):
+   *
+   *   1. **Dropped newline.** The shell may not have finished sourcing its
+   *      rc files, and the tty can still be in its startup canonical-mode
+   *      window. A trailing `\n` written then is swallowed — the command
+   *      is typed at the prompt but never executed.
+   *   2. **Truncation.** A single input line longer than the tty's
+   *      canonical buffer (`MAX_CANON`, ~4 KB) is clipped. Long prompts
+   *      blow past that easily.
+   *   3. **UTF-8 corruption.** A multi-byte sequence split across a tty
+   *      buffer boundary is mangled (the classic em-dash → mojibake).
+   *
+   * Fix both layers: (1) stage the command's bytes in a temp file so they
+   * never traverse the tty's canonical input buffer — sidestepping the
+   * truncation and UTF-8-split failures entirely — and (2) wait for the
+   * shell to emit its first output (its prompt) before writing the
+   * *short* `source <file>` line. The short line is well under the
+   * canonical limit and lands after the cold-start window, so its newline
+   * survives. `source` runs the command in the current interactive shell,
+   * so the user keeps their session afterwards.
+   */
+  autoRunCommand(session, command) {
+    const pty = session.pty;
+    let cmdFile;
+    try {
+      cmdFile = join19(tmpdir(), `band-autorun-${randomUUID2()}.sh`);
+      writeFileSync2(cmdFile, `${command}
+`, { encoding: "utf-8", mode: 384, flag: "wx" });
+      session.autoRunFile = cmdFile;
+    } catch (err) {
+      log21.warn(
+        "autoRunCommand: temp-file staging failed (%s); writing command directly",
+        err instanceof Error ? err.message : String(err)
+      );
+      pty.write(`${command}
+`);
+      return;
+    }
+    const quotedPath = cmdFile.replace(/'/g, `'\\''`);
+    const sourceLine = `. '${quotedPath}'
+`;
+    let done = false;
+    const inject = () => {
+      if (done) return;
+      done = true;
+      try {
+        pty.write(sourceLine);
+      } catch (err) {
+        log21.warn("autoRunCommand: failed to inject command line (%s)", err);
+      }
+    };
+    let dataDisposed = false;
+    const disposeData = () => {
+      if (dataDisposed) return;
+      dataDisposed = true;
+      dataDisposable.dispose();
+    };
+    const dataDisposable = pty.onData(() => {
+      disposeData();
+      inject();
+    });
+    const timer = setTimeout(inject, 750);
+    timer.unref();
+    let exitDisposed = false;
+    const exitDisposable = pty.onExit(() => {
+      done = true;
+      clearTimeout(timer);
+      disposeData();
+      if (exitDisposed) return;
+      exitDisposed = true;
+      exitDisposable.dispose();
+    });
+  }
   /**
    * Returns an existing PTY session by terminalId, or undefined.
    */
@@ -122851,19 +123037,6 @@ var PlainProjectError = class extends Error {
 function isRebaseCollision(err) {
   return String(err).includes("Cannot rebase onto multiple branches");
 }
-var PTY_CONTROL_CHAR_RANGE = new RegExp(
-  `[${String.fromCharCode(0)}-${String.fromCharCode(31)}${String.fromCharCode(
-    127
-  )}-${String.fromCharCode(159)}]`,
-  "g"
-);
-function formatShellCommand(command, args) {
-  const stripControls = (s6) => s6.replace(PTY_CONTROL_CHAR_RANGE, "");
-  const quoted = [command, ...args].map(
-    (token) => `'${stripControls(token).replace(/'/g, "'\\''")}'`
-  );
-  return quoted.join(" ");
-}
 var WorkspaceService = class {
   constructor(queries = new WorkspaceQueries(), usageEventQueries = new UsageEventQueries(), usageScanStateQueries = new UsageScanStateQueries()) {
     this.queries = queries;
@@ -122956,6 +123129,13 @@ var WorkspaceService = class {
    * no dispatch."
    */
   async create(input) {
+    const sanitizedBranch = slugifyBranchName(input.branch);
+    if (!sanitizedBranch) {
+      throw new Error(
+        `Branch name "${input.branch}" is invalid \u2014 it contains no valid characters after sanitization.`
+      );
+    }
+    input = { ...input, branch: sanitizedBranch };
     const state = loadState();
     const project = state.projects.find((p6) => p6.name === input.project);
     if (!project) {
@@ -123014,7 +123194,7 @@ var WorkspaceService = class {
           via = "chat";
         } else {
           terminalCommand = formatShellCommand(invocation.command, invocation.args);
-          terminalId = randomUUID2();
+          terminalId = randomUUID3();
         }
       } catch (err) {
         log23.warn(
@@ -123061,6 +123241,57 @@ var WorkspaceService = class {
     }
     return { ok: true, path: worktreePath, via, terminalId };
   }
+  /**
+   * Continue a chat's coding-agent session in a terminal pane.
+   *
+   * Resolves the chat's underlying session id + the adapter for whichever
+   * agent it ran, asks the adapter for the vendor CLI's *resume* invocation
+   * (`claude --resume <id>`, `codex resume <id>`, `opencode --session <id>`),
+   * composes it into a shell-safe command, and spawns a fresh terminal pane
+   * running it — so the user keeps working in the very session the web chat
+   * was running. Shares the spawn + `terminal-created` emit shape with the
+   * `via=terminal` branch of {@link create} (issue #551).
+   *
+   * Returns a discriminated result rather than throwing so the tRPC router
+   * stays a thin mapping layer — it validates input, delegates here, maps a
+   * `{ ok: false, code }` straight onto a `TRPCError`, and echoes
+   * `{ ok: true, … }` back to the client.
+   */
+  async continueChatInTerminal(chatId) {
+    const chat = chatService.get(chatId);
+    if (!chat) {
+      return { ok: false, code: "NOT_FOUND", message: "Chat not found" };
+    }
+    if (!chat.activeSessionId) {
+      return {
+        ok: false,
+        code: "PRECONDITION_FAILED",
+        message: "Chat has no active session to continue"
+      };
+    }
+    const workspace = this.resolve(chat.workspaceId);
+    if (!workspace) {
+      return { ok: false, code: "NOT_FOUND", message: "Workspace not found" };
+    }
+    const agent = await agentService.getOrCreateAgent(chatId, workspace.worktree.path, chat.agent);
+    const invocation = agent.resumeCliInvocation?.(chat.activeSessionId);
+    if (!invocation || invocation.unsupported) {
+      return {
+        ok: false,
+        code: "BAD_REQUEST",
+        message: invocation?.reason ?? "Agent does not support resuming in a terminal"
+      };
+    }
+    const command = formatShellCommand(invocation.command, invocation.args);
+    const terminalId = randomUUID3();
+    await terminalService.spawn(chat.workspaceId, terminalId, { command });
+    emit({ kind: "terminal-created", workspaceId: chat.workspaceId, terminalId });
+    log23.info(
+      { chatId, workspaceId: chat.workspaceId, terminalId },
+      "continue chat session in terminal"
+    );
+    return { ok: true, terminalId, workspaceId: chat.workspaceId, sessionId: chat.activeSessionId };
+  }
   /**
    * Remove a workspace (git worktree) and its workspace-scoped state.
    *
@@ -123112,7 +123343,7 @@ var WorkspaceService = class {
     saveState(state);
     const workspaceId = toWorkspaceId(input.project, input.branch);
     try {
-      unlinkSync2(join20(bandHome(), "workspace-prompts", `${workspaceId}.json`));
+      unlinkSync3(join20(bandHome(), "workspace-prompts", `${workspaceId}.json`));
     } catch {
     }
     deleteWorkspaceStatus(workspaceId);
@@ -124049,6 +124280,14 @@ async function runTask(chatId, task) {
             task.sessionId = event.resolvedSessionId;
             persistTask(task);
           }
+          const resolvedChat = chatService.get(chatId);
+          if (resolvedChat?.activeSessionId === event.previousSessionId) {
+            chatService.updateActiveSession(chatId, {
+              activeSessionId: event.resolvedSessionId,
+              summary: resolvedChat.activeSessionSummary,
+              lastModified: resolvedChat.activeSessionLastModified ?? Date.now()
+            });
+          }
           broadcast(chatId, {
             type: "data-session",
             data: { sessionId: event.resolvedSessionId }
@@ -136618,7 +136857,10 @@ var chatsRouter = t2.router({
     external_exports.object({
       workspaceId: external_exports.string(),
       chatId: external_exports.string(),
-      sessionId: external_exports.string().optional()
+      // Cap the length: this id is persisted as `activeSessionId` and later
+      // flows into the resume command line (`continueInTerminal` →
+      // `formatShellCommand` → PTY). Real provider ids are well under this.
+      sessionId: external_exports.string().max(512).optional()
     })
   ).mutation(async ({ input }) => {
     let chat = chatService.get(input.chatId);
@@ -136661,7 +136903,7 @@ var chatsRouter = t2.router({
       workspaceId: external_exports.string(),
       chatId: external_exports.string(),
       message: external_exports.string(),
-      sessionId: external_exports.string().optional()
+      sessionId: external_exports.string().max(512).optional()
     })
   ).mutation(({ input }) => {
     let chat = chatService.get(input.chatId);
@@ -136694,6 +136936,33 @@ var chatsRouter = t2.router({
   resume: publicProcedure.input(external_exports.object({ chatId: external_exports.string() })).mutation(({ input }) => {
     chatService.updateStatus(input.chatId, "idle");
     return { ok: true };
+  }),
+  /**
+   * Continue this chat's coding-agent session in a terminal pane.
+   *
+   * Resolves the chat's underlying agent session ID (`activeSessionId`) and
+   * the adapter for whichever coding agent it ran, asks the adapter for the
+   * vendor CLI's *resume* invocation (`claude --resume <id>`,
+   * `codex resume <id>`, `opencode --session <id>`), composes it into a
+   * shell-safe command, and spawns a fresh terminal pane running it — so the
+   * user keeps working in the very session the web chat was running.
+   *
+   * Mirrors the spawn+emit pair in `WorkspaceService.create`'s
+   * `via=terminal` branch (issue #551), and resolves the agent inline the
+   * same way `setActiveSession` above does. Errors surface to the client so
+   * the UI can keep the menu item disabled for agents that can't resume
+   * (Gemini CLI / Cursor CLI) or chats with no session yet.
+   */
+  continueInTerminal: publicProcedure.input(external_exports.object({ chatId: external_exports.string().max(512) })).mutation(async ({ input }) => {
+    const result = await workspaceService.continueChatInTerminal(input.chatId);
+    if (!result.ok) {
+      throw new TRPCError({ code: result.code, message: result.message });
+    }
+    return {
+      terminalId: result.terminalId,
+      workspaceId: result.workspaceId,
+      sessionId: result.sessionId
+    };
   })
 });
 
@@ -136701,7 +136970,7 @@ var chatsRouter = t2.router({
 init_zod();
 
 // src/server/services/cli-service.ts
-import { accessSync, constants, lstatSync as lstatSync2, realpathSync as realpathSync3, symlinkSync as symlinkSync2, unlinkSync as unlinkSync3 } from "node:fs";
+import { accessSync, constants, lstatSync as lstatSync2, realpathSync as realpathSync3, symlinkSync as symlinkSync2, unlinkSync as unlinkSync4 } from "node:fs";
 import { platform as platform2 } from "node:os";
 import { dirname as dirname4, join as join23, resolve as resolve5 } from "node:path";
 var SYMLINK_PATH = "/usr/local/bin/band";
@@ -136816,7 +137085,7 @@ async function installCli(_opts = {}) {
   if (isDirWritable(dir)) {
     try {
       lstatSync2(SYMLINK_PATH);
-      unlinkSync3(SYMLINK_PATH);
+      unlinkSync4(SYMLINK_PATH);
     } catch (err) {
       const code = err.code;
       if (code !== "ENOENT") throw err;
@@ -136922,7 +137191,7 @@ init_zod();
 
 // src/server/services/editor-service.ts
 import { existsSync as existsSync10, realpathSync as realpathSync5, statSync as statSync7 } from "node:fs";
-import { isAbsolute as isAbsolute4, join as join25, resolve as resolve6, sep as sep3 } from "node:path";
+import { isAbsolute as isAbsolute4, join as join25, resolve as resolve6, sep as sep4 } from "node:path";
 
 // src/server/services/file-watcher.ts
 import { watch as fsWatch } from "node:fs";
@@ -137193,11 +137462,11 @@ var EditorService = class {
       throw new EditorOpenError("BAD_REQUEST", `Not a file: ${input.filePath}`);
     }
     const normalizedRoot = canonicalRoot.replace(/\/+$/, "");
-    const isInside = canonicalTarget === normalizedRoot || canonicalTarget.startsWith(`${normalizedRoot}${sep3}`);
+    const isInside = canonicalTarget === normalizedRoot || canonicalTarget.startsWith(`${normalizedRoot}${sep4}`);
     let payloadPath;
     if (isInside) {
       const relativePath = canonicalTarget === normalizedRoot ? "" : canonicalTarget.slice(normalizedRoot.length + 1);
-      payloadPath = relativePath.split(sep3).join("/");
+      payloadPath = relativePath.split(sep4).join("/");
     } else {
       payloadPath = canonicalTarget;
     }
@@ -137236,9 +137505,9 @@ function canonicalizeMaybeMissing(p6) {
       return p6;
     }
   }
-  const parts = p6.split(sep3);
+  const parts = p6.split(sep4);
   for (let i2 = parts.length - 1; i2 > 0; i2--) {
-    const prefix = parts.slice(0, i2).join(sep3) || sep3;
+    const prefix = parts.slice(0, i2).join(sep4) || sep4;
     if (existsSync10(prefix)) {
       try {
         const canonicalPrefix = realpathSync5(prefix);
@@ -137539,7 +137808,7 @@ var historyRouter = t2.router({
 });
 
 // src/server/services/hooks-service.ts
-import { mkdirSync as mkdirSync7, readFileSync as readFileSync8, writeFileSync as writeFileSync2 } from "node:fs";
+import { mkdirSync as mkdirSync7, readFileSync as readFileSync8, writeFileSync as writeFileSync3 } from "node:fs";
 import { homedir as homedir8 } from "node:os";
 import { dirname as dirname6, join as join26 } from "node:path";
 
@@ -137748,7 +138017,7 @@ async function installHooks() {
     hooks[event] = filtered;
   }
   settings.hooks = hooks;
-  writeFileSync2(settingsPath, JSON.stringify(settings, null, 2), "utf-8");
+  writeFileSync3(settingsPath, JSON.stringify(settings, null, 2), "utf-8");
 }
 
 // src/server/api/hooks/router.ts
@@ -138371,7 +138640,7 @@ var projectsRouter = t2.router({
 init_src();
 init_zod();
 import { realpathSync as realpathSync6 } from "node:fs";
-import { join as join28, resolve as resolve8, sep as sep4 } from "node:path";
+import { join as join28, resolve as resolve8, sep as sep5 } from "node:path";
 var log32 = createLogger("trpc.queue");
 var queuedFileSchema = external_exports.object({
   mediaType: external_exports.string(),
@@ -138382,13 +138651,13 @@ var queuedFileSchema = external_exports.object({
 function isPathWithinUploadDir(p6) {
   const uploadDir = join28(bandHome(), "uploads");
   const normalized2 = resolve8(p6);
-  if (normalized2 !== uploadDir && !normalized2.startsWith(uploadDir + sep4)) {
+  if (normalized2 !== uploadDir && !normalized2.startsWith(uploadDir + sep5)) {
     return false;
   }
   try {
     const canonicalUploadDir = realpathSync6(uploadDir);
     const canonicalPath = realpathSync6(p6);
-    return canonicalPath === canonicalUploadDir || canonicalPath.startsWith(canonicalUploadDir + sep4);
+    return canonicalPath === canonicalUploadDir || canonicalPath.startsWith(canonicalUploadDir + sep5);
   } catch {
     return true;
   }
@@ -139176,8 +139445,8 @@ var TunnelClient = class _TunnelClient {
     return match ? match[0] : null;
   }
   static appendToken(baseUrl, token) {
-    const sep8 = baseUrl.includes("?") ? "&" : "?";
-    return `${baseUrl}${sep8}token=${token}`;
+    const sep9 = baseUrl.includes("?") ? "&" : "?";
+    return `${baseUrl}${sep9}token=${token}`;
   }
   spawnTunnel(options2, resolvedPath) {
     const args = ["tunnel", "--config", "/dev/null", "--url", `http://localhost:${options2.port}`];
@@ -139632,7 +139901,7 @@ function throwAsTrpcError2(err) {
 }
 
 // src/server/api/terminals/router.ts
-import { randomUUID as randomUUID3 } from "node:crypto";
+import { randomUUID as randomUUID4 } from "node:crypto";
 init_zod();
 var terminalRouter = t2.router({
   list: publicProcedure.input(external_exports.object({ workspaceId: external_exports.string() })).query(({ input }) => {
@@ -139641,13 +139910,17 @@ var terminalRouter = t2.router({
   create: publicProcedure.input(
     external_exports.object({
       workspaceId: external_exports.string(),
-      id: external_exports.string().optional(),
+      // Constrain to a UUID: every caller (the dashboard's
+      // `newTerminalId()` and the server's `randomUUID()` fallback)
+      // already sends one, and it stops a hostile id from being used
+      // anywhere the pool derives a filesystem path from it.
+      id: external_exports.string().uuid().optional(),
       command: external_exports.string().optional(),
       cwd: external_exports.string().optional(),
       env: external_exports.record(external_exports.string()).optional()
     })
   ).mutation(async ({ input }) => {
-    const terminalId = input.id ?? randomUUID3();
+    const terminalId = input.id ?? randomUUID4();
     const session = await terminalService.spawn(input.workspaceId, terminalId, {
       command: input.command,
       cwd: input.cwd,
@@ -139775,7 +140048,7 @@ init_zod();
 init_src();
 import { existsSync as existsSync12 } from "node:fs";
 import { readFile as readFile2, rm as rm2 } from "node:fs/promises";
-import { join as join29, resolve as resolve9, sep as sep5 } from "node:path";
+import { join as join29, resolve as resolve9, sep as sep6 } from "node:path";
 var log39 = createLogger("diff-service");
 var EMPTY_TREE_ARGS = ["hash-object", "-t", "tree", "/dev/null"];
 var EMPTY_TREE_SHA = "4b825dc642cb6eb9a060e54bf8d69288fbee4904";
@@ -139830,14 +140103,14 @@ function parseFileStatuses(nameStatusOutput) {
 }
 function assertWorktreeRelative(cwd, filePath) {
   const target = resolve9(join29(cwd, filePath));
-  if (target !== cwd && !target.startsWith(cwd + sep5)) {
+  if (target !== cwd && !target.startsWith(cwd + sep6)) {
     throw new Error("Invalid path");
   }
   if (target === cwd) {
     throw new Error("Invalid path");
   }
   const relative2 = target.slice(cwd.length + 1);
-  if (relative2 === ".git" || relative2.startsWith(`.git${sep5}`) || relative2.startsWith(".git/")) {
+  if (relative2 === ".git" || relative2.startsWith(`.git${sep6}`) || relative2.startsWith(".git/")) {
     throw new Error("Refusing to touch .git internals");
   }
   return target;
@@ -140114,7 +140387,7 @@ var diffService = new DiffService();
 // src/server/services/files-service.ts
 import { existsSync as existsSync13 } from "node:fs";
 import { cp, mkdir as mkdir2, readdir as readdir2, readFile as readFile3, rename, rm as rm3, stat as stat4, writeFile as writeFile2 } from "node:fs/promises";
-import { dirname as dirname7, extname as extname3, join as join30, resolve as resolve10, sep as sep6 } from "node:path";
+import { dirname as dirname7, extname as extname3, join as join30, resolve as resolve10, sep as sep7 } from "node:path";
 var MAX_FILE_SIZE2 = 1024 * 1024;
 var LANG_MAP2 = {
   ".js": "javascript",
@@ -140163,7 +140436,7 @@ var FilesService = class {
     }
     const root = workspace.worktree.path;
     const target = resolve10(join30(root, relative2));
-    const insideRoot = target === root || target.startsWith(root + sep6);
+    const insideRoot = target === root || target.startsWith(root + sep7);
     if (!insideRoot) {
       throw new Error("Invalid path");
     }
@@ -140181,7 +140454,7 @@ var FilesService = class {
       throw new Error(`Refusing to ${label} worktree root`);
     }
     const relative2 = target.slice(root.length + 1);
-    if (relative2 === ".git" || relative2.startsWith(`.git${sep6}`) || relative2.startsWith(".git/")) {
+    if (relative2 === ".git" || relative2.startsWith(`.git${sep7}`) || relative2.startsWith(".git/")) {
       throw new Error(`Refusing to ${label} .git internals`);
     }
   }
@@ -140326,7 +140599,7 @@ var FilesService = class {
     } catch {
       throw new Error("Source path does not exist");
     }
-    if (entryStat.isDirectory() && toTarget.startsWith(fromTarget + sep6)) {
+    if (entryStat.isDirectory() && toTarget.startsWith(fromTarget + sep7)) {
       throw new Error("Cannot copy a directory into itself");
     }
     if (existsSync13(toTarget)) {
@@ -142520,9 +142793,9 @@ import {
   rmSync as rmSync2,
   statSync as statSync8,
   symlinkSync as symlinkSync3,
-  writeFileSync as writeFileSync3
+  writeFileSync as writeFileSync4
 } from "node:fs";
-import { homedir as homedir9, tmpdir } from "node:os";
+import { homedir as homedir9, tmpdir as tmpdir2 } from "node:os";
 import { dirname as dirname8, join as join31 } from "node:path";
 var BAND_SKILL_NAMES = [
   "band",
@@ -142603,7 +142876,7 @@ async function installSkills(opts = {}) {
     }
     return result;
   }
-  const stagingDir = mkdtempSync(join31(tmpdir(), "band-skills-"));
+  const stagingDir = mkdtempSync(join31(tmpdir2(), "band-skills-"));
   try {
     await generateSkills(bandPath, stagingDir);
     for (const name3 of BAND_SKILL_NAMES) {
@@ -142633,7 +142906,7 @@ async function installSkills(opts = {}) {
         continue;
       }
       mkdirSync8(dirname8(destPath), { recursive: true });
-      writeFileSync3(destPath, sourceContent);
+      writeFileSync4(destPath, sourceContent);
       if (existingContent) {
         result.updated.push(destPath);
         opts.log?.info(
@@ -143055,7 +143328,7 @@ function serveWorkspaceFile(res, workspaceId, rawPath) {
   }
   const root = workspace.worktree.path;
   const target = resolve11(join32(root, rawPath));
-  if (!target.startsWith(root + sep7) && target !== root) {
+  if (!target.startsWith(root + sep8) && target !== root) {
     res.writeHead(400);
     res.end("Bad request");
     return;
@@ -143466,6 +143739,7 @@ Failed to bind any port in ${initialPort}..${initialPort + 19}:
     throw err;
   }
   process.env.BAND_PORT = String(boundPort);
+  process.env.BAND_SERVER_URL = `http://127.0.0.1:${boundPort}`;
   console.log(`Web server listening on http://0.0.0.0:${boundPort}`);
   if (boundPort !== initialPort) {
     console.log(