@band-app/server 0.54.2 → 0.54.4

package/dist/start-server.mjs

@@ -2556,7 +2556,7 @@ var require_thread_stream = __commonJS({
 var require_transport = __commonJS({
   "../../node_modules/.pnpm/pino@9.14.0/node_modules/pino/lib/transport.js"(exports, module) {
     "use strict";
-    var { createRequire: createRequire2 } = __require("module");
+    var { createRequire: createRequire3 } = __require("module");
     var getCallers = require_caller();
     var { join: join59, isAbsolute: isAbsolute7, sep: sep11 } = __require("node:path");
     var sleep3 = require_atomic_sleep();
@@ -2667,7 +2667,7 @@ var require_transport = __commonJS({
         for (const filePath of callers) {
           try {
             const context = filePath === "node:repl" ? process.cwd() + sep11 : filePath;
-            fixTarget2 = createRequire2(context).resolve(origin);
+            fixTarget2 = createRequire3(context).resolve(origin);
             break;
           } catch (err) {
             continue;
@@ -51994,6 +51994,11 @@ var init_schema2 = __esm({
       // id with no foreign key, like the origin columns: only `RepoQueries.setGroup` writes it, and
       // deleting a group nulls it.
       groupId: text3("group_id"),
+      // Marked unread by a person: the sidebar shows a dot on every device until the worktree is
+      // opened or marked read. Only `RepoQueries.setUnread` writes it.
+      unread: integer4("unread", { mode: "boolean" }).notNull().default(false),
+      // A custom title shown in place of the name, or null. Only `RepoQueries.setTitle` writes it.
+      title: text3("title"),
       // Set when the worktree was restored on another host: the id of the replacement. The copy
       // stays on disk untouched and is listed as superseded until a person removes it.
       supersededBy: text3("superseded_by"),
@@ -54078,8 +54083,12 @@ var init_mcp_stdio = __esm({
 
 // ../../packages/host-local/src/process/cli-binary.ts
 import { lstatSync as lstatSync3, realpathSync as realpathSync4 } from "node:fs";
+import { createRequire as createRequire2 } from "node:module";
 import { platform } from "node:os";
-import { delimiter as delimiter3, join as join19, resolve as resolve4 } from "node:path";
+import { delimiter as delimiter3, dirname as dirOf, join as join19, resolve as resolve4 } from "node:path";
+function cliPackageName(os = platform(), arch = process.arch) {
+  return `@band-app/worker-cli-${os}-${arch}`;
+}
 function findCliBinaryAt(opts) {
   const { cwd, dirname: dirname18 } = opts;
   const exe = platform() === "win32" ? "band.exe" : "band";
@@ -54131,6 +54140,15 @@ function findCliBinaryAt(opts) {
     } catch {
     }
   }
+  try {
+    const pkgJson = createRequire2(join19(dirname18, "noop.js")).resolve(
+      `${cliPackageName()}/package.json`
+    );
+    const p2 = join19(dirOf(pkgJson), "bin", exe);
+    lstatSync3(p2);
+    return p2;
+  } catch {
+  }
   for (const dir of (process.env.PATH ?? "").split(delimiter3)) {
     if (!dir) continue;
     try {
@@ -61047,8 +61065,42 @@ import {
 import { homedir as homedir16, hostname as hostname4, tmpdir as tmpdir2 } from "node:os";
 import { join as join34 } from "node:path";
 async function createWorktree(spec) {
+  const refs = await execGit(
+    ["for-each-ref", "--format=%(refname)", "refs/heads", "refs/remotes/origin"],
+    spec.repoPath
+  );
+  const local = [];
+  const known = [];
+  for (const ref of refs.split("\n").filter(Boolean)) {
+    if (ref.startsWith("refs/heads/")) {
+      local.push(ref.slice("refs/heads/".length));
+      known.push(ref.slice("refs/heads/".length));
+    } else if (ref.startsWith("refs/remotes/origin/")) {
+      known.push(ref.slice("refs/remotes/origin/".length));
+    }
+  }
+  const clash = known.find(
+    (b2) => b2 !== spec.branch && b2.toLowerCase() === spec.branch.toLowerCase()
+  );
+  if (clash) {
+    throw new Error(
+      `Branch "${spec.branch}" differs only in case from the existing branch "${clash}". Use "${clash}" or pick another name.`
+    );
+  }
   const args = ["worktree", "add", "-b", spec.branch, spec.path];
-  if (spec.base) args.push(spec.base);
+  if (spec.base) {
+    args.push(spec.base);
+  } else if (!local.includes(spec.branch)) {
+    const remote = `origin/${spec.branch}`;
+    const found = await execGit(
+      ["rev-parse", "--verify", "--quiet", `refs/remotes/${remote}`],
+      spec.repoPath
+    ).then(() => true).catch(() => false);
+    if (found) {
+      args.splice(2, 0, "--track");
+      args.push(remote);
+    }
+  }
   await execGit(args, spec.repoPath);
   return { path: spec.path, branch: spec.branch };
 }
@@ -61379,8 +61431,8 @@ var init_local_host = __esm({
         return new Uint8Array(await readFile8(path2));
       },
       realpath: (path2) => realpath3(path2),
-      async *readStream(path2) {
-        for await (const chunk of createReadStream3(path2)) {
+      async *readStream(path2, range) {
+        for await (const chunk of createReadStream3(path2, range)) {
           const buffer = chunk;
           yield new Uint8Array(buffer.buffer, buffer.byteOffset, buffer.byteLength);
         }
@@ -61443,7 +61495,21 @@ function reconcileKindForRepo(repo) {
   if (detectedKind === repo.kind) return false;
   repo.kind = detectedKind;
   if (detectedKind === "plain") {
-    repo.worktrees = [{ name: "main", branch: "main", path: repo.path, pinned: false }];
+    const main2 = repo.worktrees.find(
+      (wt) => wt.name === "main" && (wt.hostId ?? "local") === "local"
+    );
+    repo.worktrees = [
+      {
+        name: "main",
+        branch: "main",
+        path: repo.path,
+        pinned: false,
+        ...main2?.origin ? { origin: main2.origin } : {},
+        ...main2?.groupId ? { groupId: main2.groupId } : {},
+        ...main2?.unread ? { unread: true } : {},
+        ...main2?.title ? { title: main2.title } : {}
+      }
+    ];
   }
   return true;
 }
@@ -61492,6 +61558,8 @@ var init_repos = __esm({
               }
             } : {},
             ...row.groupId ? { groupId: row.groupId } : {},
+            ...row.unread ? { unread: true } : {},
+            ...row.title ? { title: row.title } : {},
             ...row.supersededBy ? { supersededBy: row.supersededBy } : {},
             ...row.continuedFrom ? { continuedFrom: row.continuedFrom } : {},
             ...row.divergence ? { divergence: row.divergence } : {}
@@ -61545,7 +61613,9 @@ var init_repos = __esm({
               originWorktreeId: worktrees.originWorktreeId,
               originChatId: worktrees.originChatId,
               originTerminalId: worktrees.originTerminalId,
-              groupId: worktrees.groupId
+              groupId: worktrees.groupId,
+              unread: worktrees.unread,
+              title: worktrees.title
             }).from(worktrees).all().map((w2) => [`${w2.repoName}\0${w2.name}`, w2])
           );
           const continuation = new Map(
@@ -61587,6 +61657,8 @@ var init_repos = __esm({
                 originChatId: origin?.originChatId ?? null,
                 originTerminalId: origin?.originTerminalId ?? null,
                 groupId: origin?.groupId ?? null,
+                unread: origin?.unread ?? false,
+                title: origin?.title ?? null,
                 repoName: repo.name,
                 name: wt.name,
                 branch: wt.branch,
@@ -61795,6 +61867,16 @@ var init_repos = __esm({
         }).from(repos).where(eq2(repos.name, name5)).get();
         return row ? { allowedHostIds: row.allowedHostIds ?? null, primaryHostId: row.primaryHostId ?? null } : void 0;
       }
+      /** Sets a worktree's custom title, or clears it with `null`. Focused UPDATE, like `setGroup`. */
+      setTitle(repoName, name5, title, hostId2) {
+        getDb().update(worktrees).set({ title }).where(
+          and2(
+            eq2(worktrees.repoName, repoName),
+            eq2(worktrees.name, name5),
+            ...hostId2 === void 0 ? [] : [eq2(worktrees.hostId, hostId2)]
+          )
+        ).run();
+      }
       /**
        * Puts a worktree in a group, or in none with `null`. Focused UPDATE, because `saveAll` keeps
        * the stored group and never writes the one in its snapshot.
@@ -61808,6 +61890,19 @@ var init_repos = __esm({
           )
         ).run();
       }
+      /**
+       * Marks a worktree unread or read. Focused UPDATE, because `saveAll` keeps the stored flag and
+       * never writes the one in its snapshot.
+       */
+      setUnread(repoName, name5, unread, hostId2) {
+        getDb().update(worktrees).set({ unread }).where(
+          and2(
+            eq2(worktrees.repoName, repoName),
+            eq2(worktrees.name, name5),
+            ...hostId2 === void 0 ? [] : [eq2(worktrees.hostId, hostId2)]
+          )
+        ).run();
+      }
       /**
        * Records where a worktree was started from, or clears it with `null`. Focused UPDATE, because
        * `saveAll` keeps the stored origin and never writes the one in its snapshot.
@@ -66889,13 +66984,28 @@ var init_git_refusals = __esm({
 
 // ../../packages/shared/src/branch-name.ts
 function slugifyBranchName(input2) {
-  return input2.toLowerCase().replace(/\s+/g, "-").replace(/[^a-z0-9\-/]/g, "").replace(/-{2,}/g, "-").replace(/\/+/g, "/").replace(/^[-/]+|[-/]+$/g, "");
+  let name5 = input2.trim().replace(/\s+/g, "-").replace(/[\x00-\x1f\x7f~^:?*[\\]/g, "").replace(/@\{/g, "").replace(/^@$/, "");
+  let previous;
+  do {
+    previous = name5;
+    name5 = name5.replace(/\.{2,}/g, ".").replace(/@\{/g, "").replace(/-{2,}/g, "-").replace(/\/+/g, "/").replace(/\/\./g, "/").replace(/\.lock(?=\/|$)/g, "").replace(/\.+(?=\/|$)/g, "").replace(/^[-/.]+|[-/.]+$/g, "");
+  } while (name5 !== previous);
+  return name5;
 }
 var init_branch_name = __esm({
   "../../packages/shared/src/branch-name.ts"() {
   }
 });
 
+// ../../packages/shared/src/worktree-display.ts
+var WORKTREE_TITLE_MAX;
+var init_worktree_display = __esm({
+  "../../packages/shared/src/worktree-display.ts"() {
+    init_worktree_id();
+    WORKTREE_TITLE_MAX = 100;
+  }
+});
+
 // src/server/infra/db/queries/pending-removals.ts
 var PendingRemovalQueries;
 var init_pending_removals = __esm({
@@ -68286,6 +68396,11 @@ var init_mime_types = __esm({
       ".ico": "image/x-icon",
       ".bmp": "image/bmp",
       ".avif": "image/avif",
+      ".mp4": "video/mp4",
+      ".m4v": "video/mp4",
+      ".mov": "video/quicktime",
+      ".webm": "video/webm",
+      ".ogv": "video/ogg",
       ".pdf": "application/pdf",
       ".json": "application/json",
       ".txt": "text/plain",
@@ -68723,7 +68838,7 @@ var init_channel = __esm({
 });
 
 // ../../packages/link/src/chats.ts
-var CAPABILITY_CHAT_OWNERSHIP, CHAT_ID_BLOCK_SIZE, METHOD_CHAT_OWN, METHOD_CHAT_FORWARD, METHOD_CHAT_RELEASE, METHOD_CHAT_SET_CONFIG, METHOD_CHAT_LIST_SESSIONS, METHOD_CHAT_REPLICATE, METHOD_CHAT_ID_BLOCK, METHOD_CHAT_HISTORY, METHOD_CHAT_LAUNCH, METHOD_CHAT_SESSION_STATE, NOTIFY_CHAT_LIVE, NOTIFY_CHAT_TRANSIENT, NOTIFY_CHAT_ACTIVITY;
+var CAPABILITY_CHAT_OWNERSHIP, CHAT_ID_BLOCK_SIZE, METHOD_CHAT_OWN, METHOD_CHAT_FORWARD, METHOD_CHAT_RELEASE, METHOD_CHAT_SET_CONFIG, METHOD_CHAT_LIST_SESSIONS, METHOD_CHAT_VIEW_SESSION, METHOD_CHAT_REPLICATE, METHOD_CHAT_ID_BLOCK, METHOD_CHAT_HISTORY, METHOD_CHAT_LAUNCH, METHOD_CHAT_SESSION_STATE, NOTIFY_CHAT_LIVE, NOTIFY_CHAT_TRANSIENT, NOTIFY_CHAT_ACTIVITY;
 var init_chats2 = __esm({
   "../../packages/link/src/chats.ts"() {
     "use strict";
@@ -68734,6 +68849,7 @@ var init_chats2 = __esm({
     METHOD_CHAT_RELEASE = "chat.release";
     METHOD_CHAT_SET_CONFIG = "chat.setConfigOption";
     METHOD_CHAT_LIST_SESSIONS = "chat.listSessions";
+    METHOD_CHAT_VIEW_SESSION = "chat.viewSession";
     METHOD_CHAT_REPLICATE = "chat.replicate";
     METHOD_CHAT_ID_BLOCK = "chat.idBlock";
     METHOD_CHAT_HISTORY = "chat.history";
@@ -69676,7 +69792,7 @@ function forwardedTask(id, options) {
     codingAgentId: options.codingAgentId
   };
 }
-var log23, FORWARD_TIMEOUT_MS, RETRY_MS, HISTORY_MAX_ROWS, ChatOwnershipService, chatOwnershipService;
+var log23, FORWARD_TIMEOUT_MS, VIEW_SESSION_TIMEOUT_MS, RETRY_MS, HISTORY_MAX_ROWS, ChatOwnershipService, chatOwnershipService;
 var init_chat_ownership_service = __esm({
   "src/server/services/chat-ownership-service.ts"() {
     "use strict";
@@ -69697,6 +69813,7 @@ var init_chat_ownership_service = __esm({
     init_worktree_service();
     log23 = createLogger("chat-ownership");
     FORWARD_TIMEOUT_MS = 6e4;
+    VIEW_SESSION_TIMEOUT_MS = 2e5;
     RETRY_MS = 5e3;
     HISTORY_MAX_ROWS = 1e3;
     ChatOwnershipService = class {
@@ -70127,6 +70244,35 @@ var init_chat_ownership_service = __esm({
         );
         return readPayload(session, enc);
       }
+      /**
+       * The user picked another session for the chat: the owner learns of it from the chat's info,
+       * sent again. A chat with a turn running keeps its session, and the worker's own record wins.
+       */
+      syncActiveSession(chatId) {
+        const hostId2 = this.ownerOf(chatId);
+        if (!hostId2 || taskService.getTask(chatId)?.status === "running") return;
+        this.enqueue(chatId, hostId2, METHOD_CHAT_OWN, { chatId });
+      }
+      /**
+       * Has the owner load a session Band has no log for, and waits until the replayed rows are
+       * here. An offline owner, or an old worker without the method, does nothing, so the replay
+       * arrives with the first prompt as before.
+       */
+      async viewSession(chatId) {
+        const sessionId = chatService.get(chatId)?.activeSessionId;
+        const hostId2 = this.ownerOf(chatId);
+        const session = hostId2 ? this.sessions.get(hostId2) : void 0;
+        if (!session?.attached) return;
+        try {
+          await session.request(
+            METHOD_CHAT_VIEW_SESSION,
+            { chatId, sessionId },
+            { timeoutMs: VIEW_SESSION_TIMEOUT_MS }
+          );
+        } catch (err) {
+          log23.warn({ chatId, err }, "the owner could not load the session history");
+        }
+      }
       /** The agent's own session list on the owner, or null when it can't list or is offline. */
       async listSessions(chatId) {
         const hostId2 = this.ownerOf(chatId);
@@ -70380,7 +70526,7 @@ function toTaskInfo(task) {
 }
 async function promptBlocks(task, firstTurn, sharedDir) {
   const caps = agentSessionService.promptCapabilities(task.chatId);
-  const blocks = [{ type: "text", text: task.prompt }];
+  const blocks = task.prompt.trim() ? [{ type: "text", text: task.prompt }] : [];
   for (const file3 of task.attachments) {
     const name5 = file3.filename ?? file3.path.split("/").pop() ?? file3.path;
     if (caps.image && file3.mediaType.startsWith("image/")) {
@@ -70825,10 +70971,15 @@ async function buildSnapshot(host, cwd, wipDir, worktreeId4, label2, seedIndex =
   await host.fs.mkdir(wipDir, { recursive: true });
   const baseSha = await git2(["rev-parse", "HEAD"]);
   const branch = await git2(["rev-parse", "--abbrev-ref", "HEAD"]);
-  const indexFile = posix3.join(wipDir, `${worktreeId4}.index`);
+  const slotKey = `${wipDir}\0${worktreeId4}`;
+  const slot = takeIndexSlot(slotKey);
+  const indexFile = posix3.join(
+    wipDir,
+    slot === 0 ? `${worktreeId4}.index` : `${worktreeId4}.${slot}.index`
+  );
   const env = { ...SNAPSHOT_BOT, GIT_INDEX_FILE: indexFile };
-  await host.fs.rm(indexFile, { force: true });
   try {
+    await host.fs.rm(indexFile, { force: true });
     let treeSha;
     if (seedIndex) {
       try {
@@ -70850,8 +71001,25 @@ async function buildSnapshot(host, cwd, wipDir, worktreeId4, label2, seedIndex =
     return { baseSha, branch: branch === "HEAD" ? "" : branch, snapshotSha, treeSha };
   } finally {
     await host.fs.rm(indexFile, { force: true }).catch(() => void 0);
+    releaseIndexSlot(slotKey, slot);
   }
 }
+function takeIndexSlot(key2) {
+  let used = indexSlots.get(key2);
+  if (!used) {
+    used = /* @__PURE__ */ new Set();
+    indexSlots.set(key2, used);
+  }
+  let slot = 0;
+  while (used.has(slot)) slot++;
+  used.add(slot);
+  return slot;
+}
+function releaseIndexSlot(key2, slot) {
+  const used = indexSlots.get(key2);
+  used?.delete(slot);
+  if (used?.size === 0) indexSlots.delete(key2);
+}
 async function checkoutSnapshot(host, repoPath, worktreePath, snapshot, options = {}) {
   const git2 = gitIn(host, repoPath);
   await host.fs.mkdir(posix3.dirname(worktreePath), { recursive: true });
@@ -70897,7 +71065,7 @@ async function resetCheckoutToSnapshot(host, path2, snapshot) {
     await git2(["reset", "-q"]);
   }
 }
-var WIP_DIR, SNAPSHOT_BOT;
+var WIP_DIR, SNAPSHOT_BOT, indexSlots;
 var init_snapshot_git = __esm({
   "../../packages/host-api/src/snapshot-git.ts"() {
     "use strict";
@@ -70908,6 +71076,7 @@ var init_snapshot_git = __esm({
       GIT_COMMITTER_NAME: "Band",
       GIT_COMMITTER_EMAIL: "band@localhost"
     };
+    indexSlots = /* @__PURE__ */ new Map();
   }
 });
 
@@ -71273,7 +71442,7 @@ var init_remote_host = __esm({
         stat: (path2, options) => this.rpc.call("fs.stat", { path: path2, followSymlinks: options?.followSymlinks }),
         realpath: (path2) => this.rpc.call("fs.realpath", { path: path2 }),
         readFile: (path2) => this.rpc.callBytes("fs.readFile", { path: path2 }),
-        readStream: (path2) => this.streamOf("fs.readStream", { path: path2 }),
+        readStream: (path2, range) => this.streamOf("fs.readStream", { path: path2, start: range?.start, end: range?.end }),
         writeFile: (path2, data, options) => this.writeFile(path2, data, options),
         glob: (pattern, cwd) => this.rpc.call("fs.glob", { pattern, cwd }),
         mkdtemp: (prefix) => this.rpc.call("fs.mkdtemp", { prefix }),
@@ -77425,6 +77594,8 @@ __export(worktree_service_exports, {
   worktreeSetGroupInput: () => worktreeSetGroupInput,
   worktreeSetOriginInput: () => worktreeSetOriginInput,
   worktreeSetPinnedInput: () => worktreeSetPinnedInput,
+  worktreeSetTitleInput: () => worktreeSetTitleInput,
+  worktreeSetUnreadInput: () => worktreeSetUnreadInput,
   worktreeVia: () => worktreeVia
 });
 import { randomUUID as randomUUID11 } from "node:crypto";
@@ -77470,7 +77641,7 @@ function expandHome(given, home, hostId2) {
   }
   return path2;
 }
-var TEARDOWN_TIMEOUT_MS, log39, worktreeVia, worktreeCreateInput, worktreeRemoveInput, worktreeSetPinnedInput, worktreeSetOriginInput, worktreeRefInput, worktreeSetGroupInput, worktreeReorderInput, worktreeGitInput, worktreeRunScriptInput, RepoNotFoundError, InvalidOriginError, PlainRepoError, WorktreeService, worktreeService;
+var TEARDOWN_TIMEOUT_MS, log39, worktreeVia, worktreeCreateInput, worktreeRemoveInput, worktreeSetPinnedInput, worktreeSetOriginInput, worktreeRefInput, worktreeSetGroupInput, worktreeSetUnreadInput, worktreeSetTitleInput, worktreeReorderInput, worktreeGitInput, worktreeRunScriptInput, RepoNotFoundError, InvalidOriginError, PlainRepoError, WorktreeService, worktreeService;
 var init_worktree_service = __esm({
   "src/server/services/worktree-service.ts"() {
     "use strict";
@@ -77481,6 +77652,7 @@ var init_worktree_service = __esm({
     init_path();
     init_src();
     init_branch_name();
+    init_worktree_display();
     init_worktree_id();
     init_zod();
     init_errors6();
@@ -77598,6 +77770,17 @@ var init_worktree_service = __esm({
       // Also moves every worktree started from this one, on any repo and host, and theirs in turn.
       withChildren: external_exports2.boolean().optional()
     });
+    worktreeSetUnreadInput = external_exports2.object({
+      worktreeId: external_exports2.string().min(1),
+      unread: external_exports2.boolean(),
+      // Tells two same-named worktrees on different workers apart.
+      hostId: external_exports2.string().optional()
+    });
+    worktreeSetTitleInput = external_exports2.object({
+      worktreeId: external_exports2.string().min(1),
+      // Blank or null clears the title, so the card shows the name again.
+      title: external_exports2.string().max(WORKTREE_TITLE_MAX).nullable()
+    });
     worktreeReorderInput = external_exports2.object({
       // The worktrees of one list in their new order.
       order: external_exports2.array(worktreeRefInput).min(1).max(500),
@@ -77838,6 +78021,14 @@ var init_worktree_service = __esm({
           (wt) => sameName(wt) && (wt.hostId ?? hostRegistry.local.id) === hostId2
         );
         if (existing) return { ok: true, path: existing.path, hostId: hostId2 };
+        const caseClash = repo.worktrees.find(
+          (wt) => (wt.hostId ?? hostRegistry.local.id) === hostId2 && [wt.name, wt.branch].some((n) => n.toLowerCase() === input2.branch.toLowerCase())
+        );
+        if (caseClash) {
+          throw new Error(
+            `Branch "${input2.branch}" differs only in case from the existing worktree "${caseClash.branch}". Use that name or pick another.`
+          );
+        }
         assertHostAllowed(repo.name, hostId2);
         const elsewhere = listedWorktrees(repo).find(
           (wt) => sameName(wt) && !wt.supersededBy && (wt.hostId ?? hostRegistry.local.id) !== hostId2
@@ -78361,6 +78552,20 @@ var init_worktree_service = __esm({
         emit({ kind: "worktree-origin-changed", worktreeId: worktreeId4 });
         return { ok: true };
       }
+      /** Sets the title shown for a worktree, or clears it (blank or null). */
+      setTitle(input2) {
+        const title = input2.title?.trim() || null;
+        const state2 = loadState();
+        for (const repo of state2.repos) {
+          for (const wt of repo.worktrees) {
+            if (toWorktreeId(repo.name, wt.name, wt.hostId) !== input2.worktreeId) continue;
+            this.repoQueries.setTitle(repo.name, wt.name, title, wt.hostId ?? "local");
+            emit({ kind: "worktree-origin-changed", worktreeId: input2.worktreeId });
+            return { ok: true, title };
+          }
+        }
+        throw new WorktreeNotFoundError(input2.worktreeId);
+      }
       /**
        * Puts a worktree in a group, or in none with `null`. With `withChildren` every worktree
        * started from it, and theirs in turn, moves too.
@@ -78395,6 +78600,42 @@ var init_worktree_service = __esm({
         emit({ kind: "worktree-origin-changed", worktreeId: input2.worktreeId });
         return { ok: true, moved };
       }
+      /**
+       * Marks a worktree unread or read. Reading also clears a `done` or `failed` attention dot, the
+       * way `statuses.clearNeedsAttention` does.
+       */
+      setUnread(input2) {
+        const row = this.findRowById(input2.worktreeId, input2.hostId);
+        if (!row) throw new WorktreeNotFoundError(input2.worktreeId);
+        this.repoQueries.setUnread(row.repoName, row.name, input2.unread, row.hostId);
+        if (!input2.unread) {
+          const status = acknowledgeWorktreeAttention(input2.worktreeId);
+          if (status) emit({ kind: "update", status });
+        }
+        emit({ kind: "worktree-origin-changed", worktreeId: input2.worktreeId });
+        return { ok: true };
+      }
+      /**
+       * Clears the unread flag when the user opens the worktree. Does nothing, and emits nothing,
+       * for a worktree that is not marked unread or is gone.
+       */
+      clearUnreadOnOpen(worktreeId4) {
+        const row = this.findRowById(worktreeId4);
+        if (!row?.unread) return;
+        this.repoQueries.setUnread(row.repoName, row.name, false, row.hostId);
+        emit({ kind: "worktree-origin-changed", worktreeId: worktreeId4 });
+      }
+      findRowById(worktreeId4, hostId2) {
+        for (const repo of loadState().repos) {
+          for (const wt of repo.worktrees) {
+            if (toWorktreeId(repo.name, wt.name, wt.hostId) !== worktreeId4) continue;
+            const rowHost = wt.hostId ?? "local";
+            if (hostId2 !== void 0 && hostId2 !== rowHost) continue;
+            return { repoName: repo.name, name: wt.name, hostId: rowHost, unread: wt.unread === true };
+          }
+        }
+        return void 0;
+      }
       /**
        * Stores the order of one list of worktrees, and optionally the new parent of one of them. The
        * parent change goes first, so a refused parent leaves the order untouched.
@@ -83414,7 +83655,10 @@ var init_agent_session_service = __esm({
       async ensureSession(chatId, purpose, options = {}) {
         const chat = chatService.get(chatId);
         if (!chat) throw new ChatNotFoundError(chatId);
-        if (chat.ownerHostId) return null;
+        if (chat.ownerHostId) {
+          if (purpose === "view") await chatOwnershipService.viewSession(chatId);
+          return null;
+        }
         if (purpose === "prompt") await ephemeralLifecycleService.ensureAwake(chat.worktreeId);
         const worktree = worktreeService.resolve(chat.worktreeId);
         if (!worktree) throw new Error(`Worktree not found: ${chat.worktreeId}`);
@@ -94669,6 +94913,8 @@ var RepoService = class {
               head: wt.head,
               pinned: tracked2?.pinned ?? false,
               ...tracked2?.groupId ? { groupId: tracked2.groupId } : {},
+              ...tracked2?.unread ? { unread: true } : {},
+              ...tracked2?.title ? { title: tracked2.title } : {},
               ...tracked2?.sortIndex === void 0 ? {} : { sortIndex: tracked2.sortIndex },
               ...tracked2?.pinSortIndex === void 0 ? {} : { pinSortIndex: tracked2.pinSortIndex }
             };
@@ -94710,6 +94956,8 @@ var RepoService = class {
             lastCheckpointAt: lastCheckpoints.get(worktreeId4) ?? null,
             agent: status?.agent ?? null,
             groupId: wt.groupId ?? null,
+            unread: wt.unread ?? false,
+            title: wt.title ?? null,
             origin: links.origins.get(worktreeId4) ?? null,
             children: links.children.get(worktreeId4) ?? []
           };
@@ -95464,6 +95712,11 @@ var CheckpointService = class {
       log55.warn({ worktreeId: worktreeId4, trigger, err: errorText3(err) }, "could not take a checkpoint");
     }
   }
+  /** Refuses when a restore or move holds any of the worktrees. */
+  assertNotBusy(...worktreeIds) {
+    const held = worktreeIds.find((id) => this.busy.has(id));
+    if (held) throw new CheckpointError("conflict", `${held} is being restored or moved.`);
+  }
   /** Why no automatic checkpoint is taken for the worktree, or null when one may be. */
   ineligible(worktreeId4) {
     const found = worktreeService.resolve(worktreeId4);
@@ -95533,6 +95786,7 @@ var CheckpointService = class {
         "Checkpoints are for worktrees on a worker, not on the hub's own machine."
       );
     }
+    this.assertNotBusy(worktreeId4);
     if (!opts.ignoreSetting && !checkpointsEnabledFor(found.repo.checkpointsEnabled, found.repo.allowedHostIds)) {
       throw new CheckpointError("disabled", `Checkpoints are off for ${found.repo.name}.`);
     }
@@ -95965,9 +96219,8 @@ ${diff}`).digest("hex");
         `${worktreeId4} was already restored as ${worktree.supersededBy}.`
       );
     }
-    if (this.busy.has(worktreeId4)) {
-      throw new CheckpointError("conflict", `${worktreeId4} is being restored or moved.`);
-    }
+    const targetId = toWorktreeId(repo.name, worktree.name, toHostId);
+    this.assertNotBusy(worktreeId4, targetId);
     const row = this.pick(worktreeId4, input2.checkpointId);
     const sourceUp = this.sessions.get(fromHostId)?.attached === true;
     const leaseLeft = sourceUp ? 0 : workerLeaseService.remainingMs(fromHostId);
@@ -95998,7 +96251,6 @@ ${diff}`).digest("hex");
       (w2) => w2.name === worktree.name && (w2.hostId ?? LOCAL_HOST_ID8) === toHostId
     );
     if (onTarget && !onTarget.supersededBy && isRoot) {
-      const targetId = toWorktreeId(repo.name, worktree.name, toHostId);
       const busy = chatService.list(targetId).some(
         (chat) => hasRunningTask(chat.id) || agentSessionService.isActive(chat.id) || hasQueuedMessages(chat.id)
       ) || (await terminalService.list(targetId).catch(() => [])).length > 0;
@@ -96015,6 +96267,7 @@ ${diff}`).digest("hex");
         `Worker ${toHostId} already has a worktree ${worktree.name} of ${repo.name}. Remove it first.`
       );
     }
+    this.assertNotBusy(worktreeId4, targetId);
     const previousAllowed = repo.allowedHostIds ? [...repo.allowedHostIds] : null;
     let widened = false;
     let restored = false;
@@ -96025,7 +96278,9 @@ ${diff}`).digest("hex");
       widened = true;
     }
     this.busy.add(worktreeId4);
+    this.busy.add(targetId);
     try {
+      await this.inflight.get(targetId)?.catch(() => void 0);
       const host = hostRegistry.hostById(toHostId);
       const rpc = new RemoteRpc(toHostId, () => target);
       const [root] = (await host.info()).roots;
@@ -96042,7 +96297,7 @@ ${diff}`).digest("hex");
         input2.hostRepoPath
       );
       const git2 = gitIn(host, repoPath);
-      const newId = toWorktreeId(repo.name, worktree.name, toHostId);
+      const newId = targetId;
       const worktreePath = isRoot ? repoPath : posix8.join(root, ".band-worktrees", repo.name, worktree.name);
       const backups = [];
       const backupStamp = Date.now();
@@ -96178,6 +96433,10 @@ ${diff}`).digest("hex");
       if (worktree.groupId) {
         this.repos.setGroup(repo.name, worktree.name, worktree.groupId, toHostId);
       }
+      if (worktree.unread) this.repos.setUnread(repo.name, worktree.name, true, toHostId);
+      if (worktree.title) {
+        this.repos.setTitle(repo.name, worktree.name, worktree.title, toHostId);
+      }
       this.repos.setSupersededBy(repo.name, worktree.name, fromHostId, newId);
       await Promise.all([
         workerLeaseService.pushBlockedPaths(fromHostId),
@@ -96214,6 +96473,7 @@ ${diff}`).digest("hex");
         }
       }
       this.busy.delete(worktreeId4);
+      this.busy.delete(targetId);
     }
   }
   async restoreSessions(host, rpc, row, wipDir, fromCwd, toCwd) {
@@ -97375,8 +97635,9 @@ async function handleChatSubmit(req, res, chatId) {
   }
   const { text: text4, sessionId, mode, model, codingAgentId, files } = body;
   let { worktreeId: worktreeId4 } = body;
-  if (!worktreeId4 || !text4?.trim()) {
-    sendJson2(res, 400, { error: "worktreeId and text are required" });
+  const hasFiles = Array.isArray(files) && files.length > 0;
+  if (!worktreeId4 || !text4?.trim() && !hasFiles) {
+    sendJson2(res, 400, { error: "worktreeId and text or files are required" });
     return;
   }
   if (sessionId !== void 0 && !SESSION_ID_PATTERN2.test(sessionId)) {
@@ -97420,7 +97681,7 @@ async function handleChatSubmit(req, res, chatId) {
     const result = taskService.submitOrQueueTask({
       worktreeId: worktreeId4,
       chatId,
-      prompt: text4,
+      prompt: text4 ?? "",
       sessionId,
       attachments,
       mode,
@@ -109943,6 +110204,7 @@ init_zod();
 init_errors6();
 init_agent_login_service();
 init_agent_session_service();
+init_chat_ownership_service();
 init_chat_service();
 init_settings_service();
 init_task_service();
@@ -110114,6 +110376,7 @@ var chatsRouter = t.router({
       summary,
       lastModified
     });
+    chatOwnershipService.syncActiveSession(input2.chatId);
     return { ok: true };
   }),
   send: publicProcedure.input(
@@ -110275,6 +110538,7 @@ init_zod();
 
 // src/server/services/cli-service.ts
 init_cli_binary();
+init_local_host_enabled();
 import { execFile as execFile15 } from "node:child_process";
 import {
   accessSync as accessSync3,
@@ -110295,10 +110559,14 @@ function windowsBinDir() {
   return join49(localAppData, "band", "bin");
 }
 var SYMLINK_PATH = platform2() === "win32" ? join49(windowsBinDir(), "band.cmd") : "/usr/local/bin/band";
+function symlinkPath() {
+  if (platform2() === "win32") return SYMLINK_PATH;
+  return process.env.BAND_CLI_SYMLINK_PATH?.trim() || SYMLINK_PATH;
+}
 function checkCliWindows() {
   let contents;
   try {
-    contents = readFileSync11(SYMLINK_PATH, "utf-8");
+    contents = readFileSync11(symlinkPath(), "utf-8");
   } catch (err) {
     const code = err.code;
     if (code === "EACCES") return "NotWritable";
@@ -110310,18 +110578,22 @@ function checkCliWindows() {
   if (basename3(target).toLowerCase() !== "band.exe") return "ConflictingBinary";
   return existsSync16(target) ? "Installed" : "NotInstalled";
 }
+function isCliCheckApplicable(admin) {
+  return isLocalHostEnabled() && admin;
+}
 async function checkCli() {
   if (platform2() === "win32") {
     return checkCliWindows();
   }
+  const linkPath = symlinkPath();
   try {
-    const stat7 = lstatSync4(SYMLINK_PATH);
+    const stat7 = lstatSync4(linkPath);
     if (!stat7.isSymbolicLink()) {
       return "ConflictingBinary";
     }
     let target;
     try {
-      target = realpathSync5(SYMLINK_PATH);
+      target = realpathSync5(linkPath);
     } catch {
       return "NotInstalled";
     }
@@ -110330,6 +110602,13 @@ async function checkCli() {
     if (isCargoBuild || isElectronSidecar) {
       return "Installed";
     }
+    const resolved = findCliBinary();
+    if (resolved) {
+      try {
+        if (realpathSync5(resolved) === target) return "Installed";
+      } catch {
+      }
+    }
     const isStaleAppLink = target.toLowerCase().includes("/band.app/contents/macos/");
     if (isStaleAppLink) {
       return "NotInstalled";
@@ -110339,7 +110618,7 @@ async function checkCli() {
     const code = err.code;
     if (code === "ENOENT") {
       try {
-        lstatSync4("/usr/local/bin");
+        lstatSync4(dirname13(linkPath));
         return "NotInstalled";
       } catch {
         return "DirNotFound";
@@ -110364,7 +110643,7 @@ function noBinaryError(env = process.env) {
     return new Error("Bundled CLI binary missing - try reinstalling Band");
   }
   return new Error(
-    "Could not find band CLI binary. Build it first with: cargo build --release -p band-cli"
+    `Could not find band CLI binary. Install ${cliPackageName()} or set BAND_CLI_PATH. In a source checkout, build it with: cargo build --release -p band-cli`
   );
 }
 function runReg(args) {
@@ -110416,39 +110695,43 @@ async function installCli(_opts = {}) {
     await installCliWindows(binaryPath);
     return;
   }
-  const dir = dirname13(SYMLINK_PATH);
+  const linkPath = symlinkPath();
+  const dir = dirname13(linkPath);
   if (isDirWritable(dir)) {
     try {
-      lstatSync4(SYMLINK_PATH);
-      unlinkSync6(SYMLINK_PATH);
+      lstatSync4(linkPath);
+      unlinkSync6(linkPath);
     } catch (err) {
       const code = err.code;
       if (code !== "ENOENT") throw err;
     }
-    symlinkSync(binaryPath, SYMLINK_PATH);
+    symlinkSync(binaryPath, linkPath);
     return;
   }
   if (platform2() === "darwin") {
     throw new Error("elevation-required");
   }
-  throw new Error(`Run: sudo ln -sf "${binaryPath}" "${SYMLINK_PATH}"`);
+  throw new Error(`On the hub's server, run: sudo ln -sf "${binaryPath}" "${linkPath}"`);
 }
 function resolveCliPaths() {
   const binaryPath = findCliBinary();
   if (!binaryPath) return null;
-  return { binaryPath, symlinkPath: SYMLINK_PATH };
+  return { binaryPath, symlinkPath: symlinkPath() };
 }
 
 // src/server/api/cli/router.ts
 var cliRouter = t.router({
-  check: publicProcedure.query(async () => {
-    const status = await checkCli();
-    return { status };
+  // `applicable` is false when nobody can act on the answer: the hub runs no worktrees of its
+  // own (workers carry their own CLI), or the caller is not an admin.
+  check: publicProcedure.query(async ({ ctx }) => {
+    if (!isCliCheckApplicable(ctx.admin))
+      return { status: "Installed", applicable: false };
+    return { status: await checkCli(), applicable: true };
   }),
-  resolve: publicProcedure.query(() => {
+  resolve: adminProcedure.query(() => {
     return resolveCliPaths();
   }),
-  install: publicProcedure.input(external_exports2.object({ allowPrompt: external_exports2.boolean().optional() }).optional()).mutation(async ({ input: input2 }) => {
+  install: adminProcedure.input(external_exports2.object({ allowPrompt: external_exports2.boolean().optional() }).optional()).mutation(async ({ input: input2 }) => {
     try {
       await installCli({ allowPrompt: input2?.allowPrompt });
       return { ok: true };
@@ -111754,7 +112037,7 @@ init_registry();
 // package.json
 var package_default = {
   name: "@band-app/server",
-  version: "0.54.2",
+  version: "0.54.4",
   type: "module",
   types: "src/index.ts",
   exports: {
@@ -112089,6 +112372,7 @@ var RELAY_PROCEDURES = /* @__PURE__ */ new Set([
   "repos.remove",
   "groups.list",
   "worktrees.setGroup",
+  "worktrees.setTitle",
   "hosts.list",
   "hosts.forAgents",
   "workers.list",
@@ -118475,6 +118759,7 @@ init_zod();
 init_branch_status_poller();
 init_state();
 init_watcher_service();
+init_worktree_service();
 var statusesRouter = t.router({
   get: publicProcedure.input(external_exports2.object({ worktreeId: external_exports2.string() })).query(({ input: input2 }) => {
     return getWorktreeStatus(input2.worktreeId);
@@ -118501,7 +118786,15 @@ var statusesRouter = t.router({
   refreshBranchStatus: publicProcedure.input(external_exports2.object({ worktreeId: external_exports2.string() })).mutation(async ({ input: input2 }) => ({
     refreshed: await branchStatusPoller.refreshWorktree(input2.worktreeId)
   })),
-  clearNeedsAttention: publicProcedure.input(external_exports2.object({ worktreeId: external_exports2.string() })).mutation(({ input: input2 }) => {
+  clearNeedsAttention: publicProcedure.input(
+    external_exports2.object({
+      worktreeId: external_exports2.string(),
+      // Opening a worktree also drops a manual unread mark. The UI leaves it out for a
+      // worktree it just marked while that worktree was open.
+      clearUnread: external_exports2.boolean().optional()
+    })
+  ).mutation(({ input: input2 }) => {
+    if (input2.clearUnread) worktreeService.clearUnreadOnOpen(input2.worktreeId);
     const status = acknowledgeWorktreeAttention(input2.worktreeId);
     if (status) emit({ kind: "update", status });
     return { ok: true };
@@ -122250,6 +122543,23 @@ var worktreesRouter = t.router({
       throwAsTrpcError3(err);
     }
   }),
+  setUnread: publicProcedure.input(worktreeSetUnreadInput).mutation(({ input: input2 }) => {
+    try {
+      return worktreeService.setUnread(input2);
+    } catch (err) {
+      throwAsTrpcError3(err);
+    }
+  }),
+  setTitle: publicProcedure.input(worktreeSetTitleInput).mutation(({ input: input2 }) => {
+    try {
+      return worktreeService.setTitle(input2);
+    } catch (err) {
+      if (err instanceof WorktreeNotFoundError) {
+        throw new TRPCError({ code: "NOT_FOUND", message: err.message, cause: err });
+      }
+      throwAsTrpcError3(err);
+    }
+  }),
   gitPull: publicProcedure.input(worktreeGitInput).mutation(async ({ input: input2 }) => {
     try {
       return await worktreeService.gitPull(input2);
@@ -122364,6 +122674,7 @@ function discoverProcedures() {
     if (path2 === "repos.addByUrl") continue;
     if (path2 === "repos.inspectFolder" || path2 === "repos.resolveRemote") continue;
     if (path2 === "worktrees.setOrigin") continue;
+    if (path2 === "worktrees.setUnread") continue;
     if (path2.startsWith("groups.") && path2 !== "groups.list") continue;
     if (path2 === "worktrees.reorder") continue;
     if (path2 === "environment.build") continue;
@@ -124642,6 +124953,37 @@ async function handleLspConnection(ws, req) {
 // start-server.ts
 init_webhook();
 
+// src/server/services/_utils/byte-range.ts
+function parseByteRange(header, size) {
+  const match = /^bytes=(\d*)-(\d*)$/.exec(header?.trim() ?? "");
+  if (!match || match[1] === "" && match[2] === "") return null;
+  if (match[1] !== "" && match[2] !== "" && Number(match[2]) < Number(match[1])) return null;
+  let start;
+  let end;
+  if (match[1] === "") {
+    const length = Number(match[2]);
+    if (length === 0) return "unsatisfiable";
+    start = Math.max(0, size - length);
+    end = size - 1;
+  } else {
+    start = Number(match[1]);
+    end = match[2] === "" ? size - 1 : Math.min(Number(match[2]), size - 1);
+  }
+  if (start >= size || start > end) return "unsatisfiable";
+  return { start, end };
+}
+
+// src/server/services/_utils/content-disposition.ts
+function attachmentDisposition(filename) {
+  const clean = filename.replace(/[/\\]/g, "_") || "download";
+  const ascii = clean.replace(/[^\x20-\x7e]/g, "_").replace(/["%;]/g, "_");
+  const encoded = encodeURIComponent(clean).replace(
+    /['()*]/g,
+    (c) => `%${c.charCodeAt(0).toString(16).toUpperCase()}`
+  );
+  return `attachment; filename="${ascii}"; filename*=UTF-8''${encoded}`;
+}
+
 // src/server/services/_utils/hosted-file.ts
 init_registry();
 import { basename as basename6, dirname as dirname17, join as join57 } from "node:path";
@@ -133203,7 +133545,7 @@ async function serveHostedFile(res, kind, worktreeId4, rawName, chatId) {
   );
   return true;
 }
-async function serveWorktreeFile(res, worktreeId4, rawPath, extraHeaders = {}, visualEditNonce) {
+async function serveWorktreeFile(res, worktreeId4, rawPath, extraHeaders = {}, visualEditNonce, download = false, rangeHeader) {
   const worktree = worktreeService.resolve(worktreeId4);
   if (!worktree) {
     res.writeHead(404);
@@ -133226,6 +133568,11 @@ async function serveWorktreeFile(res, worktreeId4, rawPath, extraHeaders = {}, v
       return;
     }
     const fileStat = await fs3.stat(target, { followSymlinks: true });
+    if (download && fileStat.kind !== "file") {
+      res.writeHead(400);
+      res.end("Bad request");
+      return;
+    }
     const contentType = mimeTypeFromFilename(basename7(target));
     const isHtml = contentType.startsWith("text/html");
     const editHtml = isHtml && visualEditNonce !== void 0 && fileStat.kind === "file";
@@ -133241,28 +133588,37 @@ async function serveWorktreeFile(res, worktreeId4, rawPath, extraHeaders = {}, v
         body = Buffer.from(annotateHtmlForEdit(source, visualEditNonce), "utf8");
       }
     }
-    res.writeHead(200, {
+    const range = !body && !trailer && fileStat.kind === "file" ? parseByteRange(rangeHeader, fileStat.size) : null;
+    if (range === "unsatisfiable") {
+      res.writeHead(416, { "Content-Range": `bytes */${fileStat.size}` });
+      res.end();
+      return;
+    }
+    const partial3 = range !== null;
+    res.writeHead(partial3 ? 206 : 200, {
       "Content-Type": contentType,
-      "Content-Length": (body?.byteLength ?? fileStat.size + (trailer?.byteLength ?? 0)).toString(),
+      "Content-Length": (partial3 ? range.end - range.start + 1 : body?.byteLength ?? fileStat.size + (trailer?.byteLength ?? 0)).toString(),
+      ...partial3 ? { "Content-Range": `bytes ${range.start}-${range.end}/${fileStat.size}` } : {},
+      "Accept-Ranges": "bytes",
       "Cache-Control": "private, no-cache",
-      // HTML from a repo must not run with the hub's origin.
-      ...isHtml ? {
-        "Content-Security-Policy": "sandbox allow-scripts",
-        "X-Content-Type-Options": "nosniff"
-      } : {},
+      // HTML and SVG from a repo must not run with the hub's origin, and no
+      // type may be sniffed into one.
+      ...hostedFileHeaders(contentType),
+      ...download ? { "Content-Disposition": attachmentDisposition(basename7(target)) } : {},
       ...extraHeaders
     });
     if (body) {
       res.end(body);
       return;
     }
-    const stream = Readable2.from(fs3.readStream(target), {
+    const stream = Readable2.from(fs3.readStream(target, range ?? void 0), {
       objectMode: false,
       highWaterMark: 64 * 1024
     });
     if (trailer) {
       stream.on("end", () => res.end(trailer));
       stream.on("error", () => res.destroy());
+      res.once("close", () => stream.destroy());
       stream.pipe(res, { end: false });
     } else {
       pipeline2(stream, res, () => {
@@ -133640,6 +133996,7 @@ async function main() {
         "/api/worktree-file/".length,
         queryIdx === -1 ? void 0 : queryIdx
       );
+      const download = queryIdx !== -1 && new URLSearchParams(req.url.slice(queryIdx)).get("download") === "1";
       const slashIdx = rest.indexOf("/");
       if (slashIdx === -1) {
         res.writeHead(400);
@@ -133661,7 +134018,7 @@ async function main() {
         res.end("Bad request");
         return;
       }
-      await serveWorktreeFile(res, wId, filePath);
+      await serveWorktreeFile(res, wId, filePath, {}, void 0, download, req.headers.range);
       return;
     }
     if (req.url?.startsWith("/api/cdp/tabs")) {