@band-app/server 0.59.0 → 0.60.1

package/dist/start-server.mjs

@@ -4323,11 +4323,11 @@ var require_pino = __commonJS({
       depthLimit: 5,
       edgeLimit: 100
     };
-    var normalize3 = createArgsNormalizer(defaultOptions2);
+    var normalize4 = createArgsNormalizer(defaultOptions2);
     var serializers = Object.assign(/* @__PURE__ */ Object.create(null), stdSerializers);
     function pino2(...args) {
       const instance = {};
-      const { opts, stream } = normalize3(instance, caller(), ...args);
+      const { opts, stream } = normalize4(instance, caller(), ...args);
       if (opts.level && typeof opts.level === "string" && DEFAULT_LEVELS[opts.level.toLowerCase()] !== void 0) opts.level = opts.level.toLowerCase();
       const {
         redact,
@@ -15184,7 +15184,7 @@ var require_stream = __commonJS({
       };
       duplex._final = function(callback) {
         if (ws.readyState === ws.CONNECTING) {
-          ws.once("open", function open4() {
+          ws.once("open", function open3() {
             duplex._final(callback);
           });
           return;
@@ -15205,7 +15205,7 @@ var require_stream = __commonJS({
       };
       duplex._write = function(chunk, encoding, callback) {
         if (ws.readyState === ws.CONNECTING) {
-          ws.once("open", function open4() {
+          ws.once("open", function open3() {
             duplex._write(chunk, encoding, callback);
           });
           return;
@@ -48171,27 +48171,27 @@ from generate_subscripts(${name5}, ${sql2.raw(dim.toString())}) ${aliases[dim -
 order by ${aliases[dim - 1]})`;
       return sql2`case when ${name5} is null then null else ${expression} end`;
     };
-    arrayCompatNormalize = (normalize3) => {
+    arrayCompatNormalize = (normalize4) => {
       const loop = (value, arrayDimensions) => {
         const innerDimensions = arrayDimensions - 1;
         if (arrayDimensions > 1) for (let i = 0; i < value.length; ++i) loop(value[i], innerDimensions);
-        else for (let i = 0; i < value.length; ++i) value[i] = normalize3(value[i]);
+        else for (let i = 0; i < value.length; ++i) value[i] = normalize4(value[i]);
         return value;
       };
       return loop;
     };
-    arrayCompatNormalizeInput = (normalize3, transformToPgArray = false) => {
+    arrayCompatNormalizeInput = (normalize4, transformToPgArray = false) => {
       const loop = (value, arrayDimensions) => {
         const innerDimensions = arrayDimensions - 1;
         const out = Array.from({ length: value.length });
         if (arrayDimensions > 1) for (let i = 0; i < value.length; ++i) out[i] = loop(value[i], innerDimensions);
-        else for (let i = 0; i < value.length; ++i) out[i] = normalize3(value[i]);
+        else for (let i = 0; i < value.length; ++i) out[i] = normalize4(value[i]);
         return out;
       };
       return transformToPgArray ? (v2, d) => makePgArray(loop(v2, d)) : loop;
     };
-    parsePgArrayAndNormalize = (normalize3) => {
-      const codec2 = arrayCompatNormalize(normalize3);
+    parsePgArrayAndNormalize = (normalize4) => {
+      const codec2 = arrayCompatNormalize(normalize4);
       return (value, arrayDimensions) => codec2(parsePgArray(value), arrayDimensions);
     };
     parseLineTuple = (v2) => {
@@ -67486,14 +67486,14 @@ function pickPullRequest(allNodes, repoOwner2, isDefaultBranch) {
   );
   const node2 = nodes2.find((n) => n.state === "OPEN") ?? (isDefaultBranch ? void 0 : nodes2.find((n) => n.state === "MERGED") ?? nodes2.find((n) => n.state === "CLOSED"));
   if (!node2) return null;
-  const open4 = node2.state === "OPEN";
-  const mergeQueue = open4 ? parseMergeQueue(node2) : null;
-  const autoMerge = open4 ? parseAutoMerge(node2) : null;
+  const open3 = node2.state === "OPEN";
+  const mergeQueue = open3 ? parseMergeQueue(node2) : null;
+  const autoMerge = open3 ? parseAutoMerge(node2) : null;
   return {
     number: node2.number,
     title: node2.title,
     url: node2.url,
-    state: open4 ? "open" : node2.state === "MERGED" ? "merged" : "closed",
+    state: open3 ? "open" : node2.state === "MERGED" ? "merged" : "closed",
     isDraft: node2.isDraft,
     ...mergeQueue && { mergeQueue },
     ...autoMerge && { autoMerge }
@@ -75671,8 +75671,8 @@ var init_placement_service = __esm({
        */
       async placeWorktree(input3, placement) {
         const worktreeId4 = toWorktreeId(input3.repo, input3.branch, void 0);
-        const open4 = this.queries.findOpenForWorktree(worktreeId4);
-        if (open4) return { kind: "request", requestId: open4.id };
+        const open3 = this.queries.findOpenForWorktree(worktreeId4);
+        if (open3) return { kind: "request", requestId: open3.id };
         const holders = this.holdersOfRemotelessRepo(input3.repo);
         const agent = input3.codingAgentId ? loadSettings().codingAgents?.find((a) => a.id === input3.codingAgentId)?.type ?? input3.codingAgentId : void 0;
         const allowed2 = allowedHostsOf(input3.repo);
@@ -75740,8 +75740,8 @@ var init_placement_service = __esm({
       requestWake(wake, repo, branch) {
         const first = wake.worktreeIds[0];
         if (!first) throw new Error("A wake request names no worktree");
-        const open4 = this.queries.findOpenForWorktree(first);
-        if (open4) return open4;
+        const open3 = this.queries.findOpenForWorktree(first);
+        if (open3) return open3;
         const earlier = this.queries.latestForHost(wake.hostId);
         const now = this.now();
         const row = {
@@ -79141,13 +79141,13 @@ var init_agent_session_registry_service = __esm({
        * agent sessions gets its row here, the first time its id is known.
        */
       recordChatProviderSession(chat, providerSessionId) {
-        const open4 = this.queries.findOpenByChat(chat.id);
-        if (open4 && open4.providerSessionId === providerSessionId) return;
-        if (open4 && open4.providerSessionId === null) {
-          if (providerSessionId) this.update(open4.id, { providerSessionId, state: "running" });
+        const open3 = this.queries.findOpenByChat(chat.id);
+        if (open3 && open3.providerSessionId === providerSessionId) return;
+        if (open3 && open3.providerSessionId === null) {
+          if (providerSessionId) this.update(open3.id, { providerSessionId, state: "running" });
           return;
         }
-        if (open4) this.end(open4.id);
+        if (open3) this.end(open3.id);
         if (!providerSessionId) return;
         this.create({
           worktreeId: chat.worktreeId,
@@ -79158,12 +79158,12 @@ var init_agent_session_registry_service = __esm({
         });
       }
       endForChat(chatId) {
-        const open4 = this.queries.findOpenByChat(chatId);
-        if (open4) this.end(open4.id);
+        const open3 = this.queries.findOpenByChat(chatId);
+        if (open3) this.end(open3.id);
       }
       endForTerminal(terminalId) {
-        const open4 = this.queries.findOpenByTerminal(terminalId);
-        if (open4) this.end(open4.id);
+        const open3 = this.queries.findOpenByTerminal(terminalId);
+        if (open3) this.end(open3.id);
       }
       end(id) {
         const ended = this.queries.update(id, { state: "ended", updatedAt: Date.now() });
@@ -88785,8 +88785,8 @@ var require_resolve = __commonJS({
       }
       return count3;
     }
-    function getFullPath(resolver, id = "", normalize3) {
-      if (normalize3 !== false)
+    function getFullPath(resolver, id = "", normalize4) {
+      if (normalize4 !== false)
         id = normalizeId(id);
       const p2 = resolver.parse(id);
       return _getFullPath(resolver, p2);
@@ -90126,7 +90126,7 @@ var require_fast_uri = __commonJS({
     "use strict";
     var { normalizeIPv6, removeDotSegments, recomposeAuthority, normalizeComponentEncoding, isIPv4, nonSimpleDomain } = require_utils();
     var { SCHEMES, getSchemeHandler } = require_schemes();
-    function normalize3(uri, options) {
+    function normalize4(uri, options) {
       if (typeof uri === "string") {
         uri = /** @type {T} */
         serialize2(parse8(uri, options), options);
@@ -90362,7 +90362,7 @@ var require_fast_uri = __commonJS({
     }
     var fastUri = {
       SCHEMES,
-      normalize: normalize3,
+      normalize: normalize4,
       resolve: resolve16,
       resolveComponent,
       equal,
@@ -111928,8 +111928,6 @@ var agentSessionsRouter = t.router({
 // src/server/api/browser-host/router.ts
 init_src();
 init_zod();
-import { constants as fsConstants, open as open3 } from "node:fs/promises";
-import { extname as extname2, isAbsolute as isAbsolute3 } from "node:path";
 
 // src/server/infra/browser-host/host-state.ts
 init_src();
@@ -112065,123 +112063,6 @@ var browserHostService = new BrowserHostService();
 
 // src/server/api/browser-host/router.ts
 var log63 = createLogger("trpc.browser-host");
-var MAX_FILE_SIZE = 1024 * 1024;
-var LANG_MAP = {
-  ".js": "javascript",
-  ".jsx": "jsx",
-  ".ts": "typescript",
-  ".tsx": "tsx",
-  ".mjs": "javascript",
-  ".cjs": "javascript",
-  ".json": "json",
-  ".html": "html",
-  ".css": "css",
-  ".scss": "scss",
-  ".md": "markdown",
-  ".yaml": "yaml",
-  ".yml": "yaml",
-  ".toml": "toml",
-  ".py": "python",
-  ".rb": "ruby",
-  ".rs": "rust",
-  ".go": "go",
-  ".java": "java",
-  ".swift": "swift",
-  ".c": "c",
-  ".cpp": "cpp",
-  ".sh": "bash",
-  ".sql": "sql",
-  ".graphql": "graphql",
-  ".vue": "vue",
-  ".svelte": "svelte",
-  ".diff": "diff"
-};
-function mapFsError(err) {
-  const code = err.code;
-  if (code === "ENOENT") return new Error("File not found");
-  if (code === "ELOOP") return new Error("Symbolic links are not allowed");
-  if (code === "EACCES" || code === "EPERM") return new Error("Permission denied");
-  if (code === "EISDIR") return new Error("Cannot operate on a directory");
-  return err instanceof Error ? err : new Error(String(err));
-}
-var hostRouter = t.router({
-  readFile: publicProcedure.input(external_exports2.object({ absolutePath: external_exports2.string().min(1) })).query(async ({ input: input3 }) => {
-    const target = input3.absolutePath;
-    if (!isAbsolute3(target)) {
-      throw new Error("Absolute path required");
-    }
-    let fh;
-    try {
-      fh = await open3(target, fsConstants.O_RDONLY | fsConstants.O_NOFOLLOW);
-    } catch (err) {
-      throw mapFsError(err);
-    }
-    try {
-      const stats = await fh.stat();
-      if (stats.isDirectory()) {
-        throw new Error("Cannot operate on a directory");
-      }
-      if (!stats.isFile()) {
-        throw new Error("Not a regular file");
-      }
-      const size = stats.size;
-      if (size > MAX_FILE_SIZE) {
-        return { tooLarge: true, size };
-      }
-      const sampleLen = Math.min(8192, size);
-      const sample = Buffer.alloc(sampleLen);
-      if (sampleLen > 0) {
-        await fh.read(sample, 0, sampleLen, 0);
-        if (sample.includes(0)) {
-          return { binary: true, size };
-        }
-      }
-      const buffer = await fh.readFile();
-      const ext = extname2(target).toLowerCase();
-      const language = LANG_MAP[ext];
-      return {
-        content: buffer.toString("utf-8"),
-        size,
-        language
-      };
-    } finally {
-      await fh.close();
-    }
-  }),
-  saveFile: publicProcedure.input(
-    external_exports2.object({
-      absolutePath: external_exports2.string().min(1),
-      // Match the read-side cap so a misbehaving client can't fill
-      // disk via the save endpoint while the read endpoint refuses
-      // anything that wide.
-      content: external_exports2.string().max(MAX_FILE_SIZE)
-    })
-  ).mutation(async ({ input: input3 }) => {
-    const target = input3.absolutePath;
-    if (!isAbsolute3(target)) {
-      throw new Error("Absolute path required");
-    }
-    let fh;
-    try {
-      fh = await open3(
-        target,
-        fsConstants.O_WRONLY | fsConstants.O_TRUNC | fsConstants.O_NOFOLLOW
-      );
-    } catch (err) {
-      throw mapFsError(err);
-    }
-    try {
-      const stats = await fh.stat();
-      if (!stats.isFile()) {
-        throw new Error("Not a regular file");
-      }
-      await fh.writeFile(input3.content, "utf-8");
-    } finally {
-      await fh.close();
-    }
-    return { ok: true };
-  })
-});
 var browserHostRouter = t.router({
   // Diagnostic: the desktop's BrowserHostBridge calls this on mount so we
   // can confirm in the server log that the bridge component actually
@@ -113262,7 +113143,7 @@ function formatFileLocation(filePath, line2, options) {
 
 // ../../packages/worktree-ops/src/resolve-path.ts
 init_resolver();
-import { isAbsolute as isAbsolute4, join as join52, resolve as resolve10, sep as sep6 } from "node:path";
+import { isAbsolute as isAbsolute3, join as join52, resolve as resolve10, sep as sep6 } from "node:path";
 var PathsService = class {
   constructor(worktrees2) {
     this.worktrees = worktrees2;
@@ -113280,7 +113161,7 @@ var PathsService = class {
   }
 };
 async function resolveTarget(fs3, root, filePath) {
-  const absoluteTarget = isAbsolute4(filePath) ? resolve10(filePath) : resolve10(root, filePath);
+  const absoluteTarget = isAbsolute3(filePath) ? resolve10(filePath) : resolve10(root, filePath);
   let canonicalRoot = root;
   try {
     canonicalRoot = await fs3.realpath(root);
@@ -113395,10 +113276,10 @@ async function pumpChanges(worktreeId4, entry, host, root) {
   for (const listener of entry.listeners) listener(null);
   stopWatcher(worktreeId4, entry);
 }
-function subscribeToFileChanges(worktreeId4, open4, listener) {
+function subscribeToFileChanges(worktreeId4, open3, listener) {
   let entry = watchers.get(worktreeId4);
   if (!entry) {
-    const target = open4();
+    const target = open3();
     if (!target) return () => {
     };
     entry = { controller: new AbortController(), listeners: /* @__PURE__ */ new Set(), pendingTimers: /* @__PURE__ */ new Map() };
@@ -113429,7 +113310,7 @@ function subscribeToFileChanges2(worktreeId4, listener) {
 // src/server/services/formatter.ts
 init_src();
 init_registry();
-import { basename as basename4, dirname as dirname15, isAbsolute as isAbsolute5, join as join53, resolve as resolvePath3 } from "node:path";
+import { basename as basename4, dirname as dirname15, isAbsolute as isAbsolute4, join as join53, resolve as resolvePath3 } from "node:path";
 import prettier from "prettier";
 var log65 = createLogger("formatter");
 var FormatterError = class extends Error {
@@ -113445,7 +113326,7 @@ var FormatterError = class extends Error {
 async function formatFile(worktreePath, filePath, content, options = {}) {
   const fs3 = options.fs ?? hostRegistry.local.fs;
   const onHub = fs3 === hostRegistry.local.fs;
-  const absFile = isAbsolute5(filePath) ? filePath : resolvePath3(worktreePath, filePath);
+  const absFile = isAbsolute4(filePath) ? filePath : resolvePath3(worktreePath, filePath);
   if (!await isInsideWorktree(fs3, absFile, worktreePath)) {
     throw new FormatterError(
       "FILE_NOT_IN_WORKTREE",
@@ -113735,7 +113616,7 @@ init_environment_build_service();
 init_src6();
 init_dist();
 init_registry();
-import { basename as basename5, dirname as dirname16, isAbsolute as isAbsolute6 } from "node:path";
+import { basename as basename5, dirname as dirname16, isAbsolute as isAbsolute5 } from "node:path";
 init_token_service();
 var EnvironmentService = class {
   /** The environment of a repo's main checkout, and which hosts meet its `requires`. */
@@ -113750,7 +113631,7 @@ var EnvironmentService = class {
    * name the `.band/environment.json` file itself.
    */
   async validatePath(path2) {
-    if (!isAbsolute6(path2)) {
+    if (!isAbsolute5(path2)) {
       throw new TRPCError({ code: "BAD_REQUEST", message: "path must be absolute" });
     }
     const isFile2 = basename5(path2) === "environment.json" && basename5(dirname16(path2)) === ".band";
@@ -114850,7 +114731,7 @@ init_registry();
 // package.json
 var package_default = {
   name: "@band-app/server",
-  version: "0.59.0",
+  version: "0.60.1",
   type: "module",
   types: "src/index.ts",
   exports: {
@@ -123578,18 +123459,53 @@ var directOps = {
 init_dist();
 init_zod();
 
-// src/server/services/_utils/worktree-preview-link.ts
+// src/server/services/_utils/worktree-download-link.ts
 init_state();
 import { createHmac as createHmac2, timingSafeEqual as timingSafeEqual8 } from "node:crypto";
+var WORKTREE_DOWNLOAD_PREFIX = "/api/worktree-download/";
+var DOWNLOAD_TTL_MS = 5 * 60 * 1e3;
+function signingKey() {
+  const token = resolveAdminToken(process.env.BAND_ADMIN_TOKEN).token;
+  return createHmac2("sha256", token).update("worktree-download-v1").digest();
+}
+function normalize3(path2) {
+  return path2.replace(/^\/+/, "");
+}
+function sign(worktreeId4, path2, expiresAt) {
+  return createHmac2("sha256", signingKey()).update(`${worktreeId4}
+${normalize3(path2)}
+${expiresAt}`).digest("hex");
+}
+function worktreeDownloadUrl(worktreeId4, path2, now = Date.now()) {
+  const expiresAt = now + DOWNLOAD_TTL_MS;
+  const grant = `${expiresAt}.${sign(worktreeId4, path2, expiresAt)}`;
+  const encodedPath = normalize3(path2).split("/").map(encodeURIComponent).join("/");
+  return `${WORKTREE_DOWNLOAD_PREFIX}${encodeURIComponent(worktreeId4)}/${grant}/${encodedPath}`;
+}
+function verifyWorktreeDownloadGrant(worktreeId4, grant, filePath, now = Date.now()) {
+  if (filePath.includes("\0")) return false;
+  const [expiry, signature, ...extra] = grant.split(".");
+  const expiresAt = Number(expiry);
+  if (extra.length > 0 || !signature || !Number.isSafeInteger(expiresAt) || expiresAt < now) {
+    return false;
+  }
+  const expected = Buffer.from(sign(worktreeId4, filePath, expiresAt), "hex");
+  const given = Buffer.from(signature, "hex");
+  return given.length === expected.length && timingSafeEqual8(given, expected);
+}
+
+// src/server/services/_utils/worktree-preview-link.ts
+init_state();
+import { createHmac as createHmac3, timingSafeEqual as timingSafeEqual9 } from "node:crypto";
 import { posix as posix10 } from "node:path";
 var WORKTREE_PREVIEW_PREFIX = "/api/worktree-preview/";
 var PREVIEW_TTL_MS = 60 * 60 * 1e3;
-function signingKey() {
+function signingKey2() {
   const token = resolveAdminToken(process.env.BAND_ADMIN_TOKEN).token;
-  return createHmac2("sha256", token).update("worktree-preview-v1").digest();
+  return createHmac3("sha256", token).update("worktree-preview-v1").digest();
 }
-function sign(worktreeId4, dir, expiresAt) {
-  return createHmac2("sha256", signingKey()).update(`${worktreeId4}
+function sign2(worktreeId4, dir, expiresAt) {
+  return createHmac3("sha256", signingKey2()).update(`${worktreeId4}
 ${dir}
 ${expiresAt}`).digest("hex");
 }
@@ -123598,7 +123514,7 @@ function worktreePreviewUrl(worktreeId4, path2, now = Date.now()) {
   const dir = posix10.dirname(path2.replace(/^\/+/, ""));
   const encodedDir = Buffer.from(dir, "utf8").toString("base64url");
   const encodedPath = path2.split("/").map(encodeURIComponent).join("/");
-  const grant = `${expiresAt}.${encodedDir}.${sign(worktreeId4, dir, expiresAt)}`;
+  const grant = `${expiresAt}.${encodedDir}.${sign2(worktreeId4, dir, expiresAt)}`;
   return `${WORKTREE_PREVIEW_PREFIX}${encodeURIComponent(worktreeId4)}/${grant}/${encodedPath}`;
 }
 function verifyWorktreePreviewGrant(worktreeId4, grant, filePath, now = Date.now()) {
@@ -123609,9 +123525,9 @@ function verifyWorktreePreviewGrant(worktreeId4, grant, filePath, now = Date.now
     return false;
   }
   const dir = Buffer.from(encodedDir, "base64url").toString("utf8");
-  const expected = Buffer.from(sign(worktreeId4, dir, expiresAt), "hex");
+  const expected = Buffer.from(sign2(worktreeId4, dir, expiresAt), "hex");
   const given = Buffer.from(signature, "hex");
-  if (given.length !== expected.length || !timingSafeEqual8(given, expected)) return false;
+  if (given.length !== expected.length || !timingSafeEqual9(given, expected)) return false;
   const target = posix10.normalize(filePath.replace(/^\/+/, ""));
   if (target === ".." || target.startsWith("../")) return false;
   return dir === "." || target === dir || target.startsWith(`${dir}/`);
@@ -124320,6 +124236,92 @@ var DirectAccessService = class {
 };
 var directAccessService = new DirectAccessService();
 
+// src/server/services/external-file-service.ts
+init_errors6();
+init_worktree_service();
+import { extname as extname2, isAbsolute as isAbsolute6 } from "node:path";
+var MAX_FILE_SIZE = 1024 * 1024;
+var LANG_MAP = {
+  ".js": "javascript",
+  ".jsx": "jsx",
+  ".ts": "typescript",
+  ".tsx": "tsx",
+  ".mjs": "javascript",
+  ".cjs": "javascript",
+  ".json": "json",
+  ".html": "html",
+  ".css": "css",
+  ".scss": "scss",
+  ".md": "markdown",
+  ".yaml": "yaml",
+  ".yml": "yaml",
+  ".toml": "toml",
+  ".py": "python",
+  ".rb": "ruby",
+  ".rs": "rust",
+  ".go": "go",
+  ".java": "java",
+  ".swift": "swift",
+  ".c": "c",
+  ".cpp": "cpp",
+  ".sh": "bash",
+  ".sql": "sql",
+  ".graphql": "graphql",
+  ".vue": "vue",
+  ".svelte": "svelte",
+  ".diff": "diff"
+};
+function hostFor2(worktreeId4) {
+  const resolved = worktreeService.resolve(worktreeId4);
+  if (!resolved) throw new WorktreeNotFoundError(worktreeId4);
+  return resolved.host;
+}
+async function statFile(fs3, path2) {
+  try {
+    return await fs3.stat(path2);
+  } catch (err) {
+    const text4 = err instanceof Error ? `${err.code ?? ""} ${err.message}` : "";
+    if (/ENOENT|no such file|not found/i.test(text4)) throw new Error("File not found");
+    throw err;
+  }
+}
+function assertAbsolute(path2) {
+  if (!isAbsolute6(path2)) throw new Error("Absolute path required");
+}
+var ExternalFileService = class {
+  async read(worktreeId4, absolutePath) {
+    assertAbsolute(absolutePath);
+    const { fs: fs3 } = hostFor2(worktreeId4);
+    const stat9 = await statFile(fs3, absolutePath);
+    if (stat9.kind === "symlink") throw new Error("Symbolic links are not allowed");
+    if (stat9.kind === "directory") throw new Error("Cannot operate on a directory");
+    if (stat9.kind !== "file") throw new Error("Not a regular file");
+    if (stat9.size > MAX_FILE_SIZE) return { tooLarge: true, size: stat9.size };
+    const bytes = await fs3.readFile(absolutePath);
+    const buffer = Buffer.from(bytes.buffer, bytes.byteOffset, bytes.byteLength);
+    if (buffer.subarray(0, 8192).includes(0)) return { binary: true, size: stat9.size };
+    return {
+      content: buffer.toString("utf-8"),
+      size: stat9.size,
+      language: LANG_MAP[extname2(absolutePath).toLowerCase()]
+    };
+  }
+  async save(worktreeId4, absolutePath, content) {
+    assertAbsolute(absolutePath);
+    if (Buffer.byteLength(content, "utf-8") > MAX_FILE_SIZE) throw new Error("File too large");
+    const { fs: fs3 } = hostFor2(worktreeId4);
+    const stat9 = await statFile(fs3, absolutePath);
+    if (stat9.kind === "symlink") throw new Error("Symbolic links are not allowed");
+    if (stat9.kind !== "file") throw new Error("Not a regular file");
+    if (absolutePath.split(/[\\/]/).includes(".git")) {
+      throw new Error("Refusing to write inside a .git folder");
+    }
+    await fs3.writeFile(absolutePath, content);
+    return { ok: true };
+  }
+};
+var externalFileService = new ExternalFileService();
+
 // ../../packages/worktree-ops/src/files.ts
 init_resolver();
 import { dirname as dirname18, extname as extname3, join as join59, resolve as resolve13, sep as sep10 } from "node:path";
@@ -125120,14 +125122,14 @@ function asciiFuzzyIndex(input3, pattern, caseSensitive) {
   }
   return firstIdx;
 }
-var fuzzyMatchV2 = (caseSensitive, normalize3, forward, input3, pattern, withPos, slab2) => {
+var fuzzyMatchV2 = (caseSensitive, normalize4, forward, input3, pattern, withPos, slab2) => {
   const M = pattern.length;
   if (M === 0) {
     return [{ start: 0, end: 0, score: 0 }, createPosSet(withPos)];
   }
   const N = input3.length;
   if (slab2 !== null && N * M > slab2.i16.length) {
-    return fuzzyMatchV1(caseSensitive, normalize3, forward, input3, pattern, withPos);
+    return fuzzyMatchV1(caseSensitive, normalize4, forward, input3, pattern, withPos);
   }
   const idx = asciiFuzzyIndex(input3, pattern, caseSensitive);
   if (idx < 0) {
@@ -125160,7 +125162,7 @@ var fuzzyMatchV2 = (caseSensitive, normalize3, forward, input3, pattern, withPos
       if (!caseSensitive && charClass === 2) {
         char2 = String.fromCodePoint(char2).toLowerCase().codePointAt(0);
       }
-      if (normalize3) {
+      if (normalize4) {
         char2 = normalizeRune(char2);
       }
     }
@@ -125300,7 +125302,7 @@ var fuzzyMatchV2 = (caseSensitive, normalize3, forward, input3, pattern, withPos
   }
   return [{ start: j, end: maxScorePos + 1, score: maxScore }, pos];
 };
-function calculateScore(caseSensitive, normalize3, text4, pattern, sidx, eidx, withPos) {
+function calculateScore(caseSensitive, normalize4, text4, pattern, sidx, eidx, withPos) {
   let pidx = 0, score = 0, inGap = false, consecutive = 0, firstBonus = toShort(0);
   const pos = createPosSet(withPos);
   let prevCharClass = 0;
@@ -125317,7 +125319,7 @@ function calculateScore(caseSensitive, normalize3, text4, pattern, sidx, eidx, w
         rune = String.fromCodePoint(rune).toLowerCase().codePointAt(0);
       }
     }
-    if (normalize3) {
+    if (normalize4) {
       rune = normalizeRune(rune);
     }
     if (rune === pattern[pidx]) {
@@ -125356,7 +125358,7 @@ function calculateScore(caseSensitive, normalize3, text4, pattern, sidx, eidx, w
   }
   return [score, pos];
 }
-var fuzzyMatchV1 = (caseSensitive, normalize3, forward, text4, pattern, withPos, slab2) => {
+var fuzzyMatchV1 = (caseSensitive, normalize4, forward, text4, pattern, withPos, slab2) => {
   if (pattern.length === 0) {
     return [{ start: 0, end: 0, score: 0 }, null];
   }
@@ -125375,7 +125377,7 @@ var fuzzyMatchV1 = (caseSensitive, normalize3, forward, text4, pattern, withPos,
         rune = String.fromCodePoint(rune).toLowerCase().codePointAt(0);
       }
     }
-    if (normalize3) {
+    if (normalize4) {
       rune = normalizeRune(rune);
     }
     const pchar = pattern[indexAt(pidx, lenPattern, forward)];
@@ -125419,7 +125421,7 @@ var fuzzyMatchV1 = (caseSensitive, normalize3, forward, text4, pattern, withPos,
     }
     const [score, pos] = calculateScore(
       caseSensitive,
-      normalize3,
+      normalize4,
       text4,
       pattern,
       sidx,
@@ -125430,7 +125432,7 @@ var fuzzyMatchV1 = (caseSensitive, normalize3, forward, text4, pattern, withPos,
   }
   return [{ start: -1, end: -1, score: 0 }, null];
 };
-var exactMatchNaive = (caseSensitive, normalize3, forward, text4, pattern, withPos, slab2) => {
+var exactMatchNaive = (caseSensitive, normalize4, forward, text4, pattern, withPos, slab2) => {
   if (pattern.length === 0) {
     return [{ start: 0, end: 0, score: 0 }, null];
   }
@@ -125454,7 +125456,7 @@ var exactMatchNaive = (caseSensitive, normalize3, forward, text4, pattern, withP
         rune = String.fromCodePoint(rune).toLowerCase().codePointAt(0);
       }
     }
-    if (normalize3) {
+    if (normalize4) {
       rune = normalizeRune(rune);
     }
     const pidx_ = indexAt(pidx, lenPattern, forward);
@@ -125491,7 +125493,7 @@ var exactMatchNaive = (caseSensitive, normalize3, forward, text4, pattern, withP
       sidx = lenRunes - (bestPos + 1);
       eidx = lenRunes - (bestPos - lenPattern + 1);
     }
-    const [score] = calculateScore(caseSensitive, normalize3, text4, pattern, sidx, eidx, false);
+    const [score] = calculateScore(caseSensitive, normalize4, text4, pattern, sidx, eidx, false);
     return [{ start: sidx, end: eidx, score }, null];
   }
   return [{ start: -1, end: -1, score: 0 }, null];
@@ -125505,7 +125507,7 @@ function makeSlab(size16, size32) {
   };
 }
 var slab = makeSlab(SLAB_16_SIZE, SLAB_32_SIZE);
-var buildPatternForBasicMatch = (query, casing, normalize3) => {
+var buildPatternForBasicMatch = (query, casing, normalize4) => {
   let caseSensitive = false;
   switch (casing) {
     case "smart-case":
@@ -125522,7 +125524,7 @@ var buildPatternForBasicMatch = (query, casing, normalize3) => {
       break;
   }
   let queryRunes = strToRunes(query);
-  if (normalize3) {
+  if (normalize4) {
     queryRunes = queryRunes.map(normalizeRune);
   }
   return {
@@ -125973,6 +125975,20 @@ var worktreeRouter = t.router({
   listFiles: publicProcedure.input(directOps["worktree.listFiles"].input).query(({ input: input3 }) => directOps["worktree.listFiles"].run(worktreeOps, input3)),
   getFile: publicProcedure.input(directOps["worktree.getFile"].input).query(({ input: input3 }) => directOps["worktree.getFile"].run(worktreeOps, input3)),
   saveFile: publicProcedure.input(directOps["worktree.saveFile"].input).mutation(({ input: input3 }) => directOps["worktree.saveFile"].run(worktreeOps, input3)),
+  /**
+   * A file outside the worktree, read on the worktree's own worker (never the
+   * hub's disk). Left out of the relay and the direct path: device tokens only.
+   */
+  readExternalFile: publicProcedure.input(external_exports2.object({ worktreeId: external_exports2.string().min(1), absolutePath: external_exports2.string().min(1) })).query(({ input: input3 }) => externalFileService.read(input3.worktreeId, input3.absolutePath)),
+  saveExternalFile: publicProcedure.input(
+    external_exports2.object({
+      worktreeId: external_exports2.string().min(1),
+      absolutePath: external_exports2.string().min(1),
+      content: external_exports2.string()
+    })
+  ).mutation(
+    ({ input: input3 }) => externalFileService.save(input3.worktreeId, input3.absolutePath, input3.content)
+  ),
   createFile: publicProcedure.input(directOps["worktree.createFile"].input).mutation(({ input: input3 }) => directOps["worktree.createFile"].run(worktreeOps, input3)),
   createDirectory: publicProcedure.input(directOps["worktree.createDirectory"].input).mutation(({ input: input3 }) => directOps["worktree.createDirectory"].run(worktreeOps, input3)),
   deletePath: publicProcedure.input(directOps["worktree.deletePath"].input).mutation(({ input: input3 }) => directOps["worktree.deletePath"].run(worktreeOps, input3)),
@@ -125985,6 +126001,13 @@ var worktreeRouter = t.router({
     }
     return { url: worktreePreviewUrl(input3.worktreeId, input3.path) };
   }),
+  /** A signed URL (5 minutes, one file) that a drag out of the Explorer hands to another app. */
+  downloadUrl: publicProcedure.input(external_exports2.object({ worktreeId: external_exports2.string(), path: external_exports2.string().min(1) })).query(({ input: input3 }) => {
+    if (!worktreeService.resolve(input3.worktreeId)) {
+      throw new TRPCError({ code: "NOT_FOUND", message: "Worktree not found" });
+    }
+    return { url: worktreeDownloadUrl(input3.worktreeId, input3.path) };
+  }),
   searchFiles: publicProcedure.input(directOps["worktree.searchFiles"].input).query(({ input: input3 }) => directOps["worktree.searchFiles"].run(worktreeOps, input3)),
   // Resolve an absolute (or worktree-relative) path against this
   // worktree: does it exist, is it a regular file, and does it live inside
@@ -125997,7 +126020,7 @@ var worktreeRouter = t.router({
   // path an authenticated caller supplies (not just in-worktree ones), so it
   // is a filesystem-existence oracle. That is acceptable under Band's threat
   // model — the same auth scope already reads arbitrary absolute paths via
-  // `host.readFile` — and the `external` flag is load-bearing, not dead code:
+  // `worktree.readExternalFile` — and the `external` flag is load-bearing, not dead code:
   // it's how the client decides between a worktree-relative and an external
   // tab. Do not "harden" this by dropping the out-of-worktree classification.
   resolvePath: publicProcedure.input(resolvePathInput).query(
@@ -126135,7 +126158,6 @@ var appRouter = t.router({
   accountUsage: accountUsageRouter,
   resources: resourcesRouter,
   hooks: hooksRouter,
-  host: hostRouter,
   workers: hostsRouter,
   // Old name, kept for desktop, mobile and CLI builds that still call it.
   hosts: hostsRouter,
@@ -126187,7 +126209,9 @@ function discoverProcedures() {
     path2.startsWith("hooks."))
       continue;
     if (path2 === "worktree.previewUrl") continue;
+    if (path2 === "worktree.downloadUrl") continue;
     if (path2 === "worktree.directAccess") continue;
+    if (path2 === "worktree.readExternalFile" || path2 === "worktree.saveExternalFile") continue;
     if (path2 === "environment.validate") continue;
     if (path2 === "repos.addFromWorker") continue;
     if (path2 === "repos.addByUrl") continue;
@@ -127370,7 +127394,7 @@ function parseModeRequest(text4) {
   }
   return null;
 }
-async function bridgePluginStream(ws, label2, open4, onOpenFailed) {
+async function bridgePluginStream(ws, label2, open3, onOpenFailed) {
   let controlling = false;
   let stream = null;
   ws.on("message", (data, isBinary) => {
@@ -127388,7 +127412,7 @@ async function bridgePluginStream(ws, label2, open4, onOpenFailed) {
   });
   ws.once("close", () => stream?.close());
   try {
-    stream = await open4();
+    stream = await open3();
   } catch (err) {
     const message = err instanceof Error ? err.message : String(err);
     log87.warn("%s is unavailable: %s", label2, message);
@@ -128289,18 +128313,18 @@ async function bridgeRemote(ws, worktreeId4) {
     ws.removeAllListeners("message");
     return pending2;
   }
-  const open4 = cdp;
+  const open3 = cdp;
   if (ws.readyState !== ws.OPEN) {
-    open4.close();
+    open3.close();
     return true;
   }
-  for (const msg of pending2) open4.send(msg);
+  for (const msg of pending2) open3.send(msg);
   pending2.length = 0;
-  ws.on("close", () => open4.close());
-  ws.on("error", () => open4.close());
+  ws.on("close", () => open3.close());
+  ws.on("error", () => open3.close());
   void (async () => {
     try {
-      for await (const message of open4.messages) {
+      for await (const message of open3.messages) {
         if (ws.readyState === ws.OPEN) ws.send(message);
       }
     } catch (err) {
@@ -137508,6 +137532,39 @@ async function handleWorktreePreview(req, res) {
     isValidVisualEditNonce(nonce) ? nonce : void 0
   );
 }
+async function handleWorktreeDownload(req, res) {
+  const [rest = ""] = (req.url ?? "").slice(WORKTREE_DOWNLOAD_PREFIX.length).split("?");
+  const [rawId, grant, ...pathParts] = rest.split("/");
+  let wId;
+  let filePath;
+  try {
+    wId = decodeURIComponent(rawId ?? "");
+    filePath = decodeURIComponent(pathParts.join("/"));
+  } catch {
+    res.writeHead(400);
+    res.end("Bad request");
+    return;
+  }
+  if (!wId || !grant || !filePath) {
+    res.writeHead(400);
+    res.end("Bad request");
+    return;
+  }
+  if (!verifyWorktreeDownloadGrant(wId, grant, filePath)) {
+    res.writeHead(403);
+    res.end("Forbidden");
+    return;
+  }
+  await serveWorktreeFile(
+    res,
+    wId,
+    filePath,
+    { "X-Content-Type-Options": "nosniff", "Cache-Control": "private, no-store" },
+    void 0,
+    true,
+    req.headers.range
+  );
+}
 var MAX_WEBHOOK_BODY_BYTES = 256 * 1024;
 var MAX_GITHUB_HOOK_BODY_BYTES = 2 * 1024 * 1024;
 async function handleGithubWebhook(req, res) {
@@ -137769,6 +137826,10 @@ async function main() {
       await handleWorktreePreview(req, res);
       return;
     }
+    if (req.method === "GET" && req.url?.startsWith(WORKTREE_DOWNLOAD_PREFIX)) {
+      await handleWorktreeDownload(req, res);
+      return;
+    }
     if (handleAuth(req, res)) return;
     if (req.url?.split("?")[0] === EXT_INSTALL_PATH) {
       await handleExtensionInstall(req, res, requestDevice(req).admin);