@cloudflare/sandbox 0.0.0-daf68b5 → 0.0.0-dc66e8e

package/container_src/index.ts

@@ -1,68 +1,44 @@
-import { spawn } from "node:child_process";
-import { mkdir, readFile, rename, unlink, writeFile } from "node:fs/promises";
-import { dirname } from "node:path";
+import { randomBytes } from "node:crypto";
 import { serve } from "bun";
-
-interface ExecuteRequest {
-  command: string;
-  args?: string[];
-}
-
-interface GitCheckoutRequest {
-  repoUrl: string;
-  branch?: string;
-  targetDir?: string;
-  sessionId?: string;
-}
-
-interface MkdirRequest {
-  path: string;
-  recursive?: boolean;
-  sessionId?: string;
-}
-
-interface WriteFileRequest {
-  path: string;
-  content: string;
-  encoding?: string;
-  sessionId?: string;
-}
-
-interface ReadFileRequest {
-  path: string;
-  encoding?: string;
-  sessionId?: string;
-}
-
-interface DeleteFileRequest {
-  path: string;
-  sessionId?: string;
-}
-
-interface RenameFileRequest {
-  oldPath: string;
-  newPath: string;
-  sessionId?: string;
-}
-
-interface MoveFileRequest {
-  sourcePath: string;
-  destinationPath: string;
-  sessionId?: string;
-}
-
-interface SessionData {
-  sessionId: string;
-  activeProcess: any | null;
-  createdAt: Date;
-}
+import { handleExecuteRequest, handleStreamingExecuteRequest } from "./handler/exec";
+import {
+  handleDeleteFileRequest,
+  handleMkdirRequest,
+  handleMoveFileRequest,
+  handleReadFileRequest,
+  handleRenameFileRequest,
+  handleWriteFileRequest,
+} from "./handler/file";
+import { handleGitCheckoutRequest } from "./handler/git";
+import {
+  handleExposePortRequest,
+  handleGetExposedPortsRequest,
+  handleProxyRequest,
+  handleUnexposePortRequest,
+} from "./handler/ports";
+import {
+  handleGetProcessLogsRequest,
+  handleGetProcessRequest,
+  handleKillAllProcessesRequest,
+  handleKillProcessRequest,
+  handleListProcessesRequest,
+  handleStartProcessRequest,
+  handleStreamProcessLogsRequest,
+} from "./handler/process";
+import type { ProcessRecord, SessionData } from "./types";
 
 // In-memory session storage (in production, you'd want to use a proper database)
 const sessions = new Map<string, SessionData>();
 
-// Generate a unique session ID
+// In-memory storage for exposed ports
+const exposedPorts = new Map<number, { name?: string; exposedAt: Date }>();
+
+// In-memory process storage - cleared on container restart
+const processes = new Map<string, ProcessRecord>();
+
+// Generate a unique session ID using cryptographically secure randomness
 function generateSessionId(): string {
-  return `session_${Date.now()}_${Math.random().toString(36).substr(2, 9)}`;
+  return `session_${Date.now()}_${randomBytes(6).toString('hex')}`;
 }
 
 // Clean up old sessions (older than 1 hour)
@@ -84,6 +60,8 @@ const server = serve({
     const url = new URL(req.url);
     const pathname = url.pathname;
 
+    console.log(`[Container] Incoming ${req.method} request to ${pathname}`);
+
     // Handle CORS
     const corsHeaders = {
       "Access-Control-Allow-Headers": "Content-Type, Authorization",
@@ -93,11 +71,13 @@ const server = serve({
 
     // Handle preflight requests
     if (req.method === "OPTIONS") {
+      console.log(`[Container] Handling CORS preflight for ${pathname}`);
       return new Response(null, { headers: corsHeaders, status: 200 });
     }
 
     try {
       // Handle different routes
+      console.log(`[Container] Processing ${req.method} ${pathname}`);
       switch (pathname) {
         case "/":
           return new Response("Hello from Bun server! 🚀", {
@@ -107,51 +87,6 @@ const server = serve({
             },
           });
 
-        case "/api/hello":
-          return new Response(
-            JSON.stringify({
-              message: "Hello from API!",
-              timestamp: new Date().toISOString(),
-            }),
-            {
-              headers: {
-                "Content-Type": "application/json",
-                ...corsHeaders,
-              },
-            }
-          );
-
-        case "/api/users":
-          if (req.method === "GET") {
-            return new Response(
-              JSON.stringify([
-                { id: 1, name: "Alice" },
-                { id: 2, name: "Bob" },
-                { id: 3, name: "Charlie" },
-              ]),
-              {
-                headers: {
-                  "Content-Type": "application/json",
-                  ...corsHeaders,
-                },
-              }
-            );
-          } else if (req.method === "POST") {
-            return new Response(
-              JSON.stringify({
-                message: "User created successfully",
-                method: "POST",
-              }),
-              {
-                headers: {
-                  "Content-Type": "application/json",
-                  ...corsHeaders,
-                },
-              }
-            );
-          }
-          break;
-
         case "/api/session/create":
           if (req.method === "POST") {
             const sessionId = generateSessionId();
@@ -208,13 +143,13 @@ const server = serve({
 
         case "/api/execute":
           if (req.method === "POST") {
-            return handleExecuteRequest(req, corsHeaders);
+            return handleExecuteRequest(sessions, req, corsHeaders);
           }
           break;
 
         case "/api/execute/stream":
           if (req.method === "POST") {
-            return handleStreamingExecuteRequest(req, corsHeaders);
+            return handleStreamingExecuteRequest(sessions, req, corsHeaders);
           }
           break;
 
@@ -269,96 +204,114 @@ const server = serve({
 
         case "/api/git/checkout":
           if (req.method === "POST") {
-            return handleGitCheckoutRequest(req, corsHeaders);
-          }
-          break;
-
-        case "/api/git/checkout/stream":
-          if (req.method === "POST") {
-            return handleStreamingGitCheckoutRequest(req, corsHeaders);
+            return handleGitCheckoutRequest(sessions, req, corsHeaders);
           }
           break;
 
         case "/api/mkdir":
           if (req.method === "POST") {
-            return handleMkdirRequest(req, corsHeaders);
+            return handleMkdirRequest(sessions, req, corsHeaders);
           }
           break;
 
-        case "/api/mkdir/stream":
+        case "/api/write":
           if (req.method === "POST") {
-            return handleStreamingMkdirRequest(req, corsHeaders);
+            return handleWriteFileRequest(req, corsHeaders);
           }
           break;
 
-        case "/api/write":
+        case "/api/read":
           if (req.method === "POST") {
-            return handleWriteFileRequest(req, corsHeaders);
+            return handleReadFileRequest(req, corsHeaders);
           }
           break;
 
-        case "/api/write/stream":
+        case "/api/delete":
           if (req.method === "POST") {
-            return handleStreamingWriteFileRequest(req, corsHeaders);
+            return handleDeleteFileRequest(req, corsHeaders);
           }
           break;
 
-        case "/api/read":
+        case "/api/rename":
           if (req.method === "POST") {
-            return handleReadFileRequest(req, corsHeaders);
+            return handleRenameFileRequest(req, corsHeaders);
           }
           break;
 
-        case "/api/read/stream":
+        case "/api/move":
           if (req.method === "POST") {
-            return handleStreamingReadFileRequest(req, corsHeaders);
+            return handleMoveFileRequest(req, corsHeaders);
           }
           break;
 
-        case "/api/delete":
+        case "/api/expose-port":
           if (req.method === "POST") {
-            return handleDeleteFileRequest(req, corsHeaders);
+            return handleExposePortRequest(exposedPorts, req, corsHeaders);
           }
           break;
 
-        case "/api/delete/stream":
-          if (req.method === "POST") {
-            return handleStreamingDeleteFileRequest(req, corsHeaders);
+        case "/api/unexpose-port":
+          if (req.method === "DELETE") {
+            return handleUnexposePortRequest(exposedPorts, req, corsHeaders);
           }
           break;
 
-        case "/api/rename":
-          if (req.method === "POST") {
-            return handleRenameFileRequest(req, corsHeaders);
+        case "/api/exposed-ports":
+          if (req.method === "GET") {
+            return handleGetExposedPortsRequest(exposedPorts, req, corsHeaders);
           }
           break;
 
-        case "/api/rename/stream":
+        case "/api/process/start":
           if (req.method === "POST") {
-            return handleStreamingRenameFileRequest(req, corsHeaders);
+            return handleStartProcessRequest(processes, req, corsHeaders);
           }
           break;
 
-        case "/api/move":
-          if (req.method === "POST") {
-            return handleMoveFileRequest(req, corsHeaders);
+        case "/api/process/list":
+          if (req.method === "GET") {
+            return handleListProcessesRequest(processes, req, corsHeaders);
           }
           break;
 
-        case "/api/move/stream":
-          if (req.method === "POST") {
-            return handleStreamingMoveFileRequest(req, corsHeaders);
+        case "/api/process/kill-all":
+          if (req.method === "DELETE") {
+            return handleKillAllProcessesRequest(processes, req, corsHeaders);
           }
           break;
 
         default:
+          // Handle dynamic routes for individual processes
+          if (pathname.startsWith("/api/process/")) {
+            const segments = pathname.split('/');
+            if (segments.length >= 4) {
+              const processId = segments[3];
+              const action = segments[4]; // Optional: logs, stream, etc.
+
+              if (!action && req.method === "GET") {
+                return handleGetProcessRequest(processes, req, corsHeaders, processId);
+              } else if (!action && req.method === "DELETE") {
+                return handleKillProcessRequest(processes, req, corsHeaders, processId);
+              } else if (action === "logs" && req.method === "GET") {
+                return handleGetProcessLogsRequest(processes, req, corsHeaders, processId);
+              } else if (action === "stream" && req.method === "GET") {
+                return handleStreamProcessLogsRequest(processes, req, corsHeaders, processId);
+              }
+            }
+          }
+          // Check if this is a proxy request for an exposed port
+          if (pathname.startsWith("/proxy/")) {
+            return handleProxyRequest(exposedPorts, req, corsHeaders);
+          }
+
+          console.log(`[Container] Route not found: ${pathname}`);
           return new Response("Not Found", {
             headers: corsHeaders,
             status: 404,
           });
       }
     } catch (error) {
-      console.error("[Server] Error handling request:", error);
+      console.error(`[Container] Error handling ${req.method} ${pathname}:`, error);
       return new Response(
         JSON.stringify({
           error: "Internal server error",
@@ -374,2527 +327,35 @@ const server = serve({
       );
     }
   },
+  hostname: "0.0.0.0",
   port: 3000,
-} as any);
-
-async function handleExecuteRequest(
-  req: Request,
-  corsHeaders: Record<string, string>
-): Promise<Response> {
-  try {
-    const body = (await req.json()) as ExecuteRequest & { sessionId?: string };
-    const { command, args = [], sessionId } = body;
-
-    if (!command || typeof command !== "string") {
-      return new Response(
-        JSON.stringify({
-          error: "Command is required and must be a string",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 400,
-        }
-      );
-    }
-
-    // Basic safety check - prevent dangerous commands
-    const dangerousCommands = [
-      "rm",
-      "rmdir",
-      "del",
-      "format",
-      "shutdown",
-      "reboot",
-    ];
-    const lowerCommand = command.toLowerCase();
-
-    if (
-      dangerousCommands.some((dangerous) => lowerCommand.includes(dangerous))
-    ) {
-      return new Response(
-        JSON.stringify({
-          error: "Dangerous command not allowed",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 400,
-        }
-      );
-    }
-
-    console.log(`[Server] Executing command: ${command} ${args.join(" ")}`);
-
-    const result = await executeCommand(command, args, sessionId);
-
-    return new Response(
-      JSON.stringify({
-        args,
-        command,
-        exitCode: result.exitCode,
-        stderr: result.stderr,
-        stdout: result.stdout,
-        success: result.success,
-        timestamp: new Date().toISOString(),
-      }),
-      {
-        headers: {
-          "Content-Type": "application/json",
-          ...corsHeaders,
-        },
-      }
-    );
-  } catch (error) {
-    console.error("[Server] Error in handleExecuteRequest:", error);
-    return new Response(
-      JSON.stringify({
-        error: "Failed to execute command",
-        message: error instanceof Error ? error.message : "Unknown error",
-      }),
-      {
-        headers: {
-          "Content-Type": "application/json",
-          ...corsHeaders,
-        },
-        status: 500,
-      }
-    );
-  }
-}
-
-async function handleStreamingExecuteRequest(
-  req: Request,
-  corsHeaders: Record<string, string>
-): Promise<Response> {
-  try {
-    const body = (await req.json()) as ExecuteRequest & { sessionId?: string };
-    const { command, args = [], sessionId } = body;
-
-    if (!command || typeof command !== "string") {
-      return new Response(
-        JSON.stringify({
-          error: "Command is required and must be a string",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 400,
-        }
-      );
-    }
-
-    // Basic safety check - prevent dangerous commands
-    const dangerousCommands = [
-      "rm",
-      "rmdir",
-      "del",
-      "format",
-      "shutdown",
-      "reboot",
-    ];
-    const lowerCommand = command.toLowerCase();
-
-    if (
-      dangerousCommands.some((dangerous) => lowerCommand.includes(dangerous))
-    ) {
-      return new Response(
-        JSON.stringify({
-          error: "Dangerous command not allowed",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 400,
-        }
-      );
-    }
-
-    console.log(
-      `[Server] Executing streaming command: ${command} ${args.join(" ")}`
-    );
-
-    const stream = new ReadableStream({
-      start(controller) {
-        const child = spawn(command, args, {
-          shell: true,
-          stdio: ["pipe", "pipe", "pipe"],
-        });
-
-        // Store the process reference for cleanup if sessionId is provided
-        if (sessionId && sessions.has(sessionId)) {
-          const session = sessions.get(sessionId)!;
-          session.activeProcess = child;
-        }
-
-        let stdout = "";
-        let stderr = "";
-
-        // Send command start event
-        controller.enqueue(
-          new TextEncoder().encode(
-            `data: ${JSON.stringify({
-              args,
-              command,
-              timestamp: new Date().toISOString(),
-              type: "command_start",
-            })}\n\n`
-          )
-        );
-
-        child.stdout?.on("data", (data) => {
-          const output = data.toString();
-          stdout += output;
-
-          // Send real-time output
-          controller.enqueue(
-            new TextEncoder().encode(
-              `data: ${JSON.stringify({
-                command,
-                data: output,
-                stream: "stdout",
-                type: "output",
-              })}\n\n`
-            )
-          );
-        });
-
-        child.stderr?.on("data", (data) => {
-          const output = data.toString();
-          stderr += output;
-
-          // Send real-time error output
-          controller.enqueue(
-            new TextEncoder().encode(
-              `data: ${JSON.stringify({
-                command,
-                data: output,
-                stream: "stderr",
-                type: "output",
-              })}\n\n`
-            )
-          );
-        });
-
-        child.on("close", (code) => {
-          // Clear the active process reference
-          if (sessionId && sessions.has(sessionId)) {
-            const session = sessions.get(sessionId)!;
-            session.activeProcess = null;
-          }
-
-          console.log(
-            `[Server] Command completed: ${command}, Exit code: ${code}`
-          );
-
-          // Send command completion event
-          controller.enqueue(
-            new TextEncoder().encode(
-              `data: ${JSON.stringify({
-                args,
-                command,
-                exitCode: code,
-                stderr,
-                stdout,
-                success: code === 0,
-                timestamp: new Date().toISOString(),
-                type: "command_complete",
-              })}\n\n`
-            )
-          );
-
-          controller.close();
-        });
-
-        child.on("error", (error) => {
-          // Clear the active process reference
-          if (sessionId && sessions.has(sessionId)) {
-            const session = sessions.get(sessionId)!;
-            session.activeProcess = null;
-          }
-
-          controller.enqueue(
-            new TextEncoder().encode(
-              `data: ${JSON.stringify({
-                args,
-                command,
-                error: error.message,
-                type: "error",
-              })}\n\n`
-            )
-          );
-
-          controller.close();
-        });
-      },
-    });
-
-    return new Response(stream, {
-      headers: {
-        "Cache-Control": "no-cache",
-        Connection: "keep-alive",
-        "Content-Type": "text/event-stream",
-        ...corsHeaders,
-      },
-    });
-  } catch (error) {
-    console.error("[Server] Error in handleStreamingExecuteRequest:", error);
-    return new Response(
-      JSON.stringify({
-        error: "Failed to execute streaming command",
-        message: error instanceof Error ? error.message : "Unknown error",
-      }),
-      {
-        headers: {
-          "Content-Type": "application/json",
-          ...corsHeaders,
-        },
-        status: 500,
-      }
-    );
-  }
-}
-
-async function handleGitCheckoutRequest(
-  req: Request,
-  corsHeaders: Record<string, string>
-): Promise<Response> {
-  try {
-    const body = (await req.json()) as GitCheckoutRequest;
-    const { repoUrl, branch = "main", targetDir, sessionId } = body;
-
-    if (!repoUrl || typeof repoUrl !== "string") {
-      return new Response(
-        JSON.stringify({
-          error: "Repository URL is required and must be a string",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 400,
-        }
-      );
-    }
-
-    // Validate repository URL format
-    const urlPattern =
-      /^(https?:\/\/|git@|ssh:\/\/).*\.git$|^https?:\/\/.*\/.*$/;
-    if (!urlPattern.test(repoUrl)) {
-      return new Response(
-        JSON.stringify({
-          error: "Invalid repository URL format",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 400,
-        }
-      );
-    }
-
-    // Generate target directory if not provided
-    const checkoutDir =
-      targetDir ||
-      `repo_${Date.now()}_${Math.random().toString(36).substr(2, 9)}`;
-
-    console.log(
-      `[Server] Checking out repository: ${repoUrl} to ${checkoutDir}`
-    );
-
-    const result = await executeGitCheckout(
-      repoUrl,
-      branch,
-      checkoutDir,
-      sessionId
-    );
-
-    return new Response(
-      JSON.stringify({
-        branch,
-        exitCode: result.exitCode,
-        repoUrl,
-        stderr: result.stderr,
-        stdout: result.stdout,
-        success: result.success,
-        targetDir: checkoutDir,
-        timestamp: new Date().toISOString(),
-      }),
-      {
-        headers: {
-          "Content-Type": "application/json",
-          ...corsHeaders,
-        },
-      }
-    );
-  } catch (error) {
-    console.error("[Server] Error in handleGitCheckoutRequest:", error);
-    return new Response(
-      JSON.stringify({
-        error: "Failed to checkout repository",
-        message: error instanceof Error ? error.message : "Unknown error",
-      }),
-      {
-        headers: {
-          "Content-Type": "application/json",
-          ...corsHeaders,
-        },
-        status: 500,
-      }
-    );
-  }
-}
-
-async function handleStreamingGitCheckoutRequest(
-  req: Request,
-  corsHeaders: Record<string, string>
-): Promise<Response> {
-  try {
-    const body = (await req.json()) as GitCheckoutRequest;
-    const { repoUrl, branch = "main", targetDir, sessionId } = body;
-
-    if (!repoUrl || typeof repoUrl !== "string") {
-      return new Response(
-        JSON.stringify({
-          error: "Repository URL is required and must be a string",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 400,
-        }
-      );
-    }
-
-    // Validate repository URL format
-    const urlPattern =
-      /^(https?:\/\/|git@|ssh:\/\/).*\.git$|^https?:\/\/.*\/.*$/;
-    if (!urlPattern.test(repoUrl)) {
-      return new Response(
-        JSON.stringify({
-          error: "Invalid repository URL format",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 400,
-        }
-      );
-    }
-
-    // Generate target directory if not provided
-    const checkoutDir =
-      targetDir ||
-      `repo_${Date.now()}_${Math.random().toString(36).substr(2, 9)}`;
-
-    console.log(
-      `[Server] Checking out repository: ${repoUrl} to ${checkoutDir}`
-    );
-
-    const stream = new ReadableStream({
-      start(controller) {
-        const child = spawn(
-          "git",
-          ["clone", "-b", branch, repoUrl, checkoutDir],
-          {
-            shell: true,
-            stdio: ["pipe", "pipe", "pipe"],
-          }
-        );
-
-        // Store the process reference for cleanup if sessionId is provided
-        if (sessionId && sessions.has(sessionId)) {
-          const session = sessions.get(sessionId)!;
-          session.activeProcess = child;
-        }
-
-        let stdout = "";
-        let stderr = "";
-
-        // Send command start event
-        controller.enqueue(
-          new TextEncoder().encode(
-            `data: ${JSON.stringify({
-              args: [branch, repoUrl, checkoutDir],
-              command: "git clone",
-              timestamp: new Date().toISOString(),
-              type: "command_start",
-            })}\n\n`
-          )
-        );
-
-        child.stdout?.on("data", (data) => {
-          const output = data.toString();
-          stdout += output;
-
-          // Send real-time output
-          controller.enqueue(
-            new TextEncoder().encode(
-              `data: ${JSON.stringify({
-                command: "git clone",
-                data: output,
-                stream: "stdout",
-                type: "output",
-              })}\n\n`
-            )
-          );
-        });
-
-        child.stderr?.on("data", (data) => {
-          const output = data.toString();
-          stderr += output;
-
-          // Send real-time error output
-          controller.enqueue(
-            new TextEncoder().encode(
-              `data: ${JSON.stringify({
-                command: "git clone",
-                data: output,
-                stream: "stderr",
-                type: "output",
-              })}\n\n`
-            )
-          );
-        });
-
-        child.on("close", (code) => {
-          // Clear the active process reference
-          if (sessionId && sessions.has(sessionId)) {
-            const session = sessions.get(sessionId)!;
-            session.activeProcess = null;
-          }
-
-          console.log(
-            `[Server] Command completed: git clone, Exit code: ${code}`
-          );
-
-          // Send command completion event
-          controller.enqueue(
-            new TextEncoder().encode(
-              `data: ${JSON.stringify({
-                args: [branch, repoUrl, checkoutDir],
-                command: "git clone",
-                exitCode: code,
-                stderr,
-                stdout,
-                success: code === 0,
-                timestamp: new Date().toISOString(),
-                type: "command_complete",
-              })}\n\n`
-            )
-          );
-
-          controller.close();
-        });
-
-        child.on("error", (error) => {
-          // Clear the active process reference
-          if (sessionId && sessions.has(sessionId)) {
-            const session = sessions.get(sessionId)!;
-            session.activeProcess = null;
-          }
-
-          controller.enqueue(
-            new TextEncoder().encode(
-              `data: ${JSON.stringify({
-                args: [branch, repoUrl, checkoutDir],
-                command: "git clone",
-                error: error.message,
-                type: "error",
-              })}\n\n`
-            )
-          );
-
-          controller.close();
-        });
-      },
-    });
-
-    return new Response(stream, {
-      headers: {
-        "Cache-Control": "no-cache",
-        Connection: "keep-alive",
-        "Content-Type": "text/event-stream",
-        ...corsHeaders,
-      },
-    });
-  } catch (error) {
-    console.error(
-      "[Server] Error in handleStreamingGitCheckoutRequest:",
-      error
-    );
-    return new Response(
-      JSON.stringify({
-        error: "Failed to checkout repository",
-        message: error instanceof Error ? error.message : "Unknown error",
-      }),
-      {
-        headers: {
-          "Content-Type": "application/json",
-          ...corsHeaders,
-        },
-        status: 500,
-      }
-    );
-  }
-}
-
-async function handleMkdirRequest(
-  req: Request,
-  corsHeaders: Record<string, string>
-): Promise<Response> {
-  try {
-    const body = (await req.json()) as MkdirRequest;
-    const { path, recursive = false, sessionId } = body;
-
-    if (!path || typeof path !== "string") {
-      return new Response(
-        JSON.stringify({
-          error: "Path is required and must be a string",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 400,
-        }
-      );
-    }
-
-    // Basic safety check - prevent dangerous paths
-    const dangerousPatterns = [
-      /^\/$/, // Root directory
-      /^\/etc/, // System directories
-      /^\/var/, // System directories
-      /^\/usr/, // System directories
-      /^\/bin/, // System directories
-      /^\/sbin/, // System directories
-      /^\/boot/, // System directories
-      /^\/dev/, // System directories
-      /^\/proc/, // System directories
-      /^\/sys/, // System directories
-      /^\/tmp\/\.\./, // Path traversal attempts
-      /\.\./, // Path traversal attempts
-    ];
-
-    if (dangerousPatterns.some((pattern) => pattern.test(path))) {
-      return new Response(
-        JSON.stringify({
-          error: "Dangerous path not allowed",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 400,
-        }
-      );
-    }
-
-    console.log(
-      `[Server] Creating directory: ${path} (recursive: ${recursive})`
-    );
-
-    const result = await executeMkdir(path, recursive, sessionId);
-
-    return new Response(
-      JSON.stringify({
-        exitCode: result.exitCode,
-        path,
-        recursive,
-        stderr: result.stderr,
-        stdout: result.stdout,
-        success: result.success,
-        timestamp: new Date().toISOString(),
-      }),
-      {
-        headers: {
-          "Content-Type": "application/json",
-          ...corsHeaders,
-        },
-      }
-    );
-  } catch (error) {
-    console.error("[Server] Error in handleMkdirRequest:", error);
-    return new Response(
-      JSON.stringify({
-        error: "Failed to create directory",
-        message: error instanceof Error ? error.message : "Unknown error",
-      }),
-      {
-        headers: {
-          "Content-Type": "application/json",
-          ...corsHeaders,
-        },
-        status: 500,
-      }
-    );
-  }
-}
-
-async function handleStreamingMkdirRequest(
-  req: Request,
-  corsHeaders: Record<string, string>
-): Promise<Response> {
-  try {
-    const body = (await req.json()) as MkdirRequest;
-    const { path, recursive = false, sessionId } = body;
-
-    if (!path || typeof path !== "string") {
-      return new Response(
-        JSON.stringify({
-          error: "Path is required and must be a string",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 400,
-        }
-      );
-    }
-
-    // Basic safety check - prevent dangerous paths
-    const dangerousPatterns = [
-      /^\/$/, // Root directory
-      /^\/etc/, // System directories
-      /^\/var/, // System directories
-      /^\/usr/, // System directories
-      /^\/bin/, // System directories
-      /^\/sbin/, // System directories
-      /^\/boot/, // System directories
-      /^\/dev/, // System directories
-      /^\/proc/, // System directories
-      /^\/sys/, // System directories
-      /^\/tmp\/\.\./, // Path traversal attempts
-      /\.\./, // Path traversal attempts
-    ];
-
-    if (dangerousPatterns.some((pattern) => pattern.test(path))) {
-      return new Response(
-        JSON.stringify({
-          error: "Dangerous path not allowed",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 400,
-        }
-      );
-    }
-
-    console.log(
-      `[Server] Creating directory: ${path} (recursive: ${recursive})`
-    );
-
-    const stream = new ReadableStream({
-      start(controller) {
-        const args = recursive ? ["-p", path] : [path];
-        const child = spawn("mkdir", args, {
-          shell: true,
-          stdio: ["pipe", "pipe", "pipe"],
-        });
-
-        // Store the process reference for cleanup if sessionId is provided
-        if (sessionId && sessions.has(sessionId)) {
-          const session = sessions.get(sessionId)!;
-          session.activeProcess = child;
-        }
-
-        let stdout = "";
-        let stderr = "";
-
-        // Send command start event
-        controller.enqueue(
-          new TextEncoder().encode(
-            `data: ${JSON.stringify({
-              args,
-              command: "mkdir",
-              timestamp: new Date().toISOString(),
-              type: "command_start",
-            })}\n\n`
-          )
-        );
-
-        child.stdout?.on("data", (data) => {
-          const output = data.toString();
-          stdout += output;
-
-          // Send real-time output
-          controller.enqueue(
-            new TextEncoder().encode(
-              `data: ${JSON.stringify({
-                command: "mkdir",
-                data: output,
-                stream: "stdout",
-                type: "output",
-              })}\n\n`
-            )
-          );
-        });
-
-        child.stderr?.on("data", (data) => {
-          const output = data.toString();
-          stderr += output;
-
-          // Send real-time error output
-          controller.enqueue(
-            new TextEncoder().encode(
-              `data: ${JSON.stringify({
-                command: "mkdir",
-                data: output,
-                stream: "stderr",
-                type: "output",
-              })}\n\n`
-            )
-          );
-        });
-
-        child.on("close", (code) => {
-          // Clear the active process reference
-          if (sessionId && sessions.has(sessionId)) {
-            const session = sessions.get(sessionId)!;
-            session.activeProcess = null;
-          }
-
-          console.log(`[Server] Command completed: mkdir, Exit code: ${code}`);
-
-          // Send command completion event
-          controller.enqueue(
-            new TextEncoder().encode(
-              `data: ${JSON.stringify({
-                args,
-                command: "mkdir",
-                exitCode: code,
-                stderr,
-                stdout,
-                success: code === 0,
-                timestamp: new Date().toISOString(),
-                type: "command_complete",
-              })}\n\n`
-            )
-          );
-
-          controller.close();
-        });
-
-        child.on("error", (error) => {
-          // Clear the active process reference
-          if (sessionId && sessions.has(sessionId)) {
-            const session = sessions.get(sessionId)!;
-            session.activeProcess = null;
-          }
-
-          controller.enqueue(
-            new TextEncoder().encode(
-              `data: ${JSON.stringify({
-                args,
-                command: "mkdir",
-                error: error.message,
-                type: "error",
-              })}\n\n`
-            )
-          );
-
-          controller.close();
-        });
-      },
-    });
-
-    return new Response(stream, {
-      headers: {
-        "Cache-Control": "no-cache",
-        Connection: "keep-alive",
-        "Content-Type": "text/event-stream",
-        ...corsHeaders,
-      },
-    });
-  } catch (error) {
-    console.error("[Server] Error in handleStreamingMkdirRequest:", error);
-    return new Response(
-      JSON.stringify({
-        error: "Failed to create directory",
-        message: error instanceof Error ? error.message : "Unknown error",
-      }),
-      {
-        headers: {
-          "Content-Type": "application/json",
-          ...corsHeaders,
-        },
-        status: 500,
-      }
-    );
-  }
-}
-
-async function handleWriteFileRequest(
-  req: Request,
-  corsHeaders: Record<string, string>
-): Promise<Response> {
-  try {
-    const body = (await req.json()) as WriteFileRequest;
-    const { path, content, encoding = "utf-8", sessionId } = body;
-
-    if (!path || typeof path !== "string") {
-      return new Response(
-        JSON.stringify({
-          error: "Path is required and must be a string",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 400,
-        }
-      );
-    }
-
-    // Basic safety check - prevent dangerous paths
-    const dangerousPatterns = [
-      /^\/$/, // Root directory
-      /^\/etc/, // System directories
-      /^\/var/, // System directories
-      /^\/usr/, // System directories
-      /^\/bin/, // System directories
-      /^\/sbin/, // System directories
-      /^\/boot/, // System directories
-      /^\/dev/, // System directories
-      /^\/proc/, // System directories
-      /^\/sys/, // System directories
-      /^\/tmp\/\.\./, // Path traversal attempts
-      /\.\./, // Path traversal attempts
-    ];
-
-    if (dangerousPatterns.some((pattern) => pattern.test(path))) {
-      return new Response(
-        JSON.stringify({
-          error: "Dangerous path not allowed",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 400,
-        }
-      );
-    }
-
-    console.log(
-      `[Server] Writing file: ${path} (content length: ${content.length})`
-    );
-
-    const result = await executeWriteFile(path, content, encoding, sessionId);
-
-    return new Response(
-      JSON.stringify({
-        exitCode: result.exitCode,
-        path,
-        success: result.success,
-        timestamp: new Date().toISOString(),
-      }),
-      {
-        headers: {
-          "Content-Type": "application/json",
-          ...corsHeaders,
-        },
-      }
-    );
-  } catch (error) {
-    console.error("[Server] Error in handleWriteFileRequest:", error);
-    return new Response(
-      JSON.stringify({
-        error: "Failed to write file",
-        message: error instanceof Error ? error.message : "Unknown error",
-      }),
-      {
-        headers: {
-          "Content-Type": "application/json",
-          ...corsHeaders,
-        },
-        status: 500,
-      }
-    );
-  }
-}
-
-async function handleStreamingWriteFileRequest(
-  req: Request,
-  corsHeaders: Record<string, string>
-): Promise<Response> {
-  try {
-    const body = (await req.json()) as WriteFileRequest;
-    const { path, content, encoding = "utf-8", sessionId } = body;
-
-    if (!path || typeof path !== "string") {
-      return new Response(
-        JSON.stringify({
-          error: "Path is required and must be a string",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 400,
-        }
-      );
-    }
-
-    // Basic safety check - prevent dangerous paths
-    const dangerousPatterns = [
-      /^\/$/, // Root directory
-      /^\/etc/, // System directories
-      /^\/var/, // System directories
-      /^\/usr/, // System directories
-      /^\/bin/, // System directories
-      /^\/sbin/, // System directories
-      /^\/boot/, // System directories
-      /^\/dev/, // System directories
-      /^\/proc/, // System directories
-      /^\/sys/, // System directories
-      /^\/tmp\/\.\./, // Path traversal attempts
-      /\.\./, // Path traversal attempts
-    ];
-
-    if (dangerousPatterns.some((pattern) => pattern.test(path))) {
-      return new Response(
-        JSON.stringify({
-          error: "Dangerous path not allowed",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 400,
-        }
-      );
-    }
-
-    console.log(
-      `[Server] Writing file (streaming): ${path} (content length: ${content.length})`
-    );
-
-    const stream = new ReadableStream({
-      start(controller) {
-        (async () => {
-          try {
-            // Send command start event
-            controller.enqueue(
-              new TextEncoder().encode(
-                `data: ${JSON.stringify({
-                  path,
-                  timestamp: new Date().toISOString(),
-                  type: "command_start",
-                })}\n\n`
-              )
-            );
-
-            // Ensure the directory exists
-            const dir = dirname(path);
-            if (dir !== ".") {
-              await mkdir(dir, { recursive: true });
-
-              // Send directory creation event
-              controller.enqueue(
-                new TextEncoder().encode(
-                  `data: ${JSON.stringify({
-                    message: `Created directory: ${dir}`,
-                    type: "output",
-                  })}\n\n`
-                )
-              );
-            }
-
-            // Write the file
-            await writeFile(path, content, {
-              encoding: encoding as BufferEncoding,
-            });
-
-            console.log(`[Server] File written successfully: ${path}`);
-
-            // Send command completion event
-            controller.enqueue(
-              new TextEncoder().encode(
-                `data: ${JSON.stringify({
-                  path,
-                  success: true,
-                  timestamp: new Date().toISOString(),
-                  type: "command_complete",
-                })}\n\n`
-              )
-            );
-
-            controller.close();
-          } catch (error) {
-            console.error(`[Server] Error writing file: ${path}`, error);
-
-            controller.enqueue(
-              new TextEncoder().encode(
-                `data: ${JSON.stringify({
-                  error:
-                    error instanceof Error ? error.message : "Unknown error",
-                  path,
-                  type: "error",
-                })}\n\n`
-              )
-            );
-
-            controller.close();
-          }
-        })();
-      },
-    });
-
-    return new Response(stream, {
-      headers: {
-        "Cache-Control": "no-cache",
-        Connection: "keep-alive",
-        "Content-Type": "text/event-stream",
-        ...corsHeaders,
-      },
-    });
-  } catch (error) {
-    console.error("[Server] Error in handleStreamingWriteFileRequest:", error);
-    return new Response(
-      JSON.stringify({
-        error: "Failed to write file",
-        message: error instanceof Error ? error.message : "Unknown error",
-      }),
-      {
-        headers: {
-          "Content-Type": "application/json",
-          ...corsHeaders,
-        },
-        status: 500,
-      }
-    );
-  }
-}
-
-async function handleReadFileRequest(
-  req: Request,
-  corsHeaders: Record<string, string>
-): Promise<Response> {
-  try {
-    const body = (await req.json()) as ReadFileRequest;
-    const { path, encoding = "utf-8", sessionId } = body;
-
-    if (!path || typeof path !== "string") {
-      return new Response(
-        JSON.stringify({
-          error: "Path is required and must be a string",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 400,
-        }
-      );
-    }
-
-    // Basic safety check - prevent dangerous paths
-    const dangerousPatterns = [
-      /^\/$/, // Root directory
-      /^\/etc/, // System directories
-      /^\/var/, // System directories
-      /^\/usr/, // System directories
-      /^\/bin/, // System directories
-      /^\/sbin/, // System directories
-      /^\/boot/, // System directories
-      /^\/dev/, // System directories
-      /^\/proc/, // System directories
-      /^\/sys/, // System directories
-      /^\/tmp\/\.\./, // Path traversal attempts
-      /\.\./, // Path traversal attempts
-    ];
-
-    if (dangerousPatterns.some((pattern) => pattern.test(path))) {
-      return new Response(
-        JSON.stringify({
-          error: "Dangerous path not allowed",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 400,
-        }
-      );
-    }
-
-    console.log(`[Server] Reading file: ${path}`);
-
-    const result = await executeReadFile(path, encoding, sessionId);
-
-    return new Response(
-      JSON.stringify({
-        content: result.content,
-        exitCode: result.exitCode,
-        path,
-        success: result.success,
-        timestamp: new Date().toISOString(),
-      }),
-      {
-        headers: {
-          "Content-Type": "application/json",
-          ...corsHeaders,
-        },
-      }
-    );
-  } catch (error) {
-    console.error("[Server] Error in handleReadFileRequest:", error);
-    return new Response(
-      JSON.stringify({
-        error: "Failed to read file",
-        message: error instanceof Error ? error.message : "Unknown error",
-      }),
-      {
-        headers: {
-          "Content-Type": "application/json",
-          ...corsHeaders,
-        },
-        status: 500,
-      }
-    );
-  }
-}
-
-async function handleStreamingReadFileRequest(
-  req: Request,
-  corsHeaders: Record<string, string>
-): Promise<Response> {
-  try {
-    const body = (await req.json()) as ReadFileRequest;
-    const { path, encoding = "utf-8", sessionId } = body;
-
-    if (!path || typeof path !== "string") {
-      return new Response(
-        JSON.stringify({
-          error: "Path is required and must be a string",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 400,
-        }
-      );
-    }
-
-    // Basic safety check - prevent dangerous paths
-    const dangerousPatterns = [
-      /^\/$/, // Root directory
-      /^\/etc/, // System directories
-      /^\/var/, // System directories
-      /^\/usr/, // System directories
-      /^\/bin/, // System directories
-      /^\/sbin/, // System directories
-      /^\/boot/, // System directories
-      /^\/dev/, // System directories
-      /^\/proc/, // System directories
-      /^\/sys/, // System directories
-      /^\/tmp\/\.\./, // Path traversal attempts
-      /\.\./, // Path traversal attempts
-    ];
-
-    if (dangerousPatterns.some((pattern) => pattern.test(path))) {
-      return new Response(
-        JSON.stringify({
-          error: "Dangerous path not allowed",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 400,
-        }
-      );
-    }
-
-    console.log(`[Server] Reading file (streaming): ${path}`);
-
-    const stream = new ReadableStream({
-      start(controller) {
-        (async () => {
-          try {
-            // Send command start event
-            controller.enqueue(
-              new TextEncoder().encode(
-                `data: ${JSON.stringify({
-                  path,
-                  timestamp: new Date().toISOString(),
-                  type: "command_start",
-                })}\n\n`
-              )
-            );
-
-            // Read the file
-            const content = await readFile(path, {
-              encoding: encoding as BufferEncoding,
-            });
-
-            console.log(`[Server] File read successfully: ${path}`);
-
-            // Send command completion event
-            controller.enqueue(
-              new TextEncoder().encode(
-                `data: ${JSON.stringify({
-                  content,
-                  path,
-                  success: true,
-                  timestamp: new Date().toISOString(),
-                  type: "command_complete",
-                })}\n\n`
-              )
-            );
-
-            controller.close();
-          } catch (error) {
-            console.error(`[Server] Error reading file: ${path}`, error);
-
-            controller.enqueue(
-              new TextEncoder().encode(
-                `data: ${JSON.stringify({
-                  error:
-                    error instanceof Error ? error.message : "Unknown error",
-                  path,
-                  type: "error",
-                })}\n\n`
-              )
-            );
-
-            controller.close();
-          }
-        })();
-      },
-    });
-
-    return new Response(stream, {
-      headers: {
-        "Cache-Control": "no-cache",
-        Connection: "keep-alive",
-        "Content-Type": "text/event-stream",
-        ...corsHeaders,
-      },
-    });
-  } catch (error) {
-    console.error("[Server] Error in handleStreamingReadFileRequest:", error);
-    return new Response(
-      JSON.stringify({
-        error: "Failed to read file",
-        message: error instanceof Error ? error.message : "Unknown error",
-      }),
-      {
-        headers: {
-          "Content-Type": "application/json",
-          ...corsHeaders,
-        },
-        status: 500,
-      }
-    );
-  }
-}
-
-async function handleDeleteFileRequest(
-  req: Request,
-  corsHeaders: Record<string, string>
-): Promise<Response> {
-  try {
-    const body = (await req.json()) as DeleteFileRequest;
-    const { path, sessionId } = body;
-
-    if (!path || typeof path !== "string") {
-      return new Response(
-        JSON.stringify({
-          error: "Path is required and must be a string",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 400,
-        }
-      );
-    }
-
-    // Basic safety check - prevent dangerous paths
-    const dangerousPatterns = [
-      /^\/$/, // Root directory
-      /^\/etc/, // System directories
-      /^\/var/, // System directories
-      /^\/usr/, // System directories
-      /^\/bin/, // System directories
-      /^\/sbin/, // System directories
-      /^\/boot/, // System directories
-      /^\/dev/, // System directories
-      /^\/proc/, // System directories
-      /^\/sys/, // System directories
-      /^\/tmp\/\.\./, // Path traversal attempts
-      /\.\./, // Path traversal attempts
-    ];
-
-    if (dangerousPatterns.some((pattern) => pattern.test(path))) {
-      return new Response(
-        JSON.stringify({
-          error: "Dangerous path not allowed",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 400,
-        }
-      );
-    }
-
-    console.log(`[Server] Deleting file: ${path}`);
-
-    const result = await executeDeleteFile(path, sessionId);
-
-    return new Response(
-      JSON.stringify({
-        exitCode: result.exitCode,
-        path,
-        success: result.success,
-        timestamp: new Date().toISOString(),
-      }),
-      {
-        headers: {
-          "Content-Type": "application/json",
-          ...corsHeaders,
-        },
-      }
-    );
-  } catch (error) {
-    console.error("[Server] Error in handleDeleteFileRequest:", error);
-    return new Response(
-      JSON.stringify({
-        error: "Failed to delete file",
-        message: error instanceof Error ? error.message : "Unknown error",
-      }),
-      {
-        headers: {
-          "Content-Type": "application/json",
-          ...corsHeaders,
-        },
-        status: 500,
-      }
-    );
-  }
-}
-
-async function handleStreamingDeleteFileRequest(
-  req: Request,
-  corsHeaders: Record<string, string>
-): Promise<Response> {
-  try {
-    const body = (await req.json()) as DeleteFileRequest;
-    const { path, sessionId } = body;
-
-    if (!path || typeof path !== "string") {
-      return new Response(
-        JSON.stringify({
-          error: "Path is required and must be a string",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 400,
-        }
-      );
-    }
-
-    // Basic safety check - prevent dangerous paths
-    const dangerousPatterns = [
-      /^\/$/, // Root directory
-      /^\/etc/, // System directories
-      /^\/var/, // System directories
-      /^\/usr/, // System directories
-      /^\/bin/, // System directories
-      /^\/sbin/, // System directories
-      /^\/boot/, // System directories
-      /^\/dev/, // System directories
-      /^\/proc/, // System directories
-      /^\/sys/, // System directories
-      /^\/tmp\/\.\./, // Path traversal attempts
-      /\.\./, // Path traversal attempts
-    ];
-
-    if (dangerousPatterns.some((pattern) => pattern.test(path))) {
-      return new Response(
-        JSON.stringify({
-          error: "Dangerous path not allowed",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 400,
-        }
-      );
-    }
-
-    console.log(`[Server] Deleting file (streaming): ${path}`);
-
-    const stream = new ReadableStream({
-      start(controller) {
-        (async () => {
-          try {
-            // Send command start event
-            controller.enqueue(
-              new TextEncoder().encode(
-                `data: ${JSON.stringify({
-                  path,
-                  timestamp: new Date().toISOString(),
-                  type: "command_start",
-                })}\n\n`
-              )
-            );
-
-            // Delete the file
-            await executeDeleteFile(path, sessionId);
-
-            console.log(`[Server] File deleted successfully: ${path}`);
-
-            // Send command completion event
-            controller.enqueue(
-              new TextEncoder().encode(
-                `data: ${JSON.stringify({
-                  path,
-                  success: true,
-                  timestamp: new Date().toISOString(),
-                  type: "command_complete",
-                })}\n\n`
-              )
-            );
-
-            controller.close();
-          } catch (error) {
-            console.error(`[Server] Error deleting file: ${path}`, error);
-
-            controller.enqueue(
-              new TextEncoder().encode(
-                `data: ${JSON.stringify({
-                  error:
-                    error instanceof Error ? error.message : "Unknown error",
-                  path,
-                  type: "error",
-                })}\n\n`
-              )
-            );
-
-            controller.close();
-          }
-        })();
-      },
-    });
-
-    return new Response(stream, {
-      headers: {
-        "Cache-Control": "no-cache",
-        Connection: "keep-alive",
-        "Content-Type": "text/event-stream",
-        ...corsHeaders,
-      },
-    });
-  } catch (error) {
-    console.error("[Server] Error in handleStreamingDeleteFileRequest:", error);
-    return new Response(
-      JSON.stringify({
-        error: "Failed to delete file",
-        message: error instanceof Error ? error.message : "Unknown error",
-      }),
-      {
-        headers: {
-          "Content-Type": "application/json",
-          ...corsHeaders,
-        },
-        status: 500,
-      }
-    );
-  }
-}
-
-async function handleRenameFileRequest(
-  req: Request,
-  corsHeaders: Record<string, string>
-): Promise<Response> {
-  try {
-    const body = (await req.json()) as RenameFileRequest;
-    const { oldPath, newPath, sessionId } = body;
-
-    if (!oldPath || typeof oldPath !== "string") {
-      return new Response(
-        JSON.stringify({
-          error: "Old path is required and must be a string",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 400,
-        }
-      );
-    }
-
-    if (!newPath || typeof newPath !== "string") {
-      return new Response(
-        JSON.stringify({
-          error: "New path is required and must be a string",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 400,
-        }
-      );
-    }
-
-    // Basic safety check - prevent dangerous paths
-    const dangerousPatterns = [
-      /^\/$/, // Root directory
-      /^\/etc/, // System directories
-      /^\/var/, // System directories
-      /^\/usr/, // System directories
-      /^\/bin/, // System directories
-      /^\/sbin/, // System directories
-      /^\/boot/, // System directories
-      /^\/dev/, // System directories
-      /^\/proc/, // System directories
-      /^\/sys/, // System directories
-      /^\/tmp\/\.\./, // Path traversal attempts
-      /\.\./, // Path traversal attempts
-    ];
-
-    if (
-      dangerousPatterns.some(
-        (pattern) => pattern.test(oldPath) || pattern.test(newPath)
-      )
-    ) {
-      return new Response(
-        JSON.stringify({
-          error: "Dangerous path not allowed",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 400,
-        }
-      );
-    }
-
-    console.log(`[Server] Renaming file: ${oldPath} -> ${newPath}`);
-
-    const result = await executeRenameFile(oldPath, newPath, sessionId);
-
-    return new Response(
-      JSON.stringify({
-        exitCode: result.exitCode,
-        newPath,
-        oldPath,
-        success: result.success,
-        timestamp: new Date().toISOString(),
-      }),
-      {
-        headers: {
-          "Content-Type": "application/json",
-          ...corsHeaders,
-        },
-      }
-    );
-  } catch (error) {
-    console.error("[Server] Error in handleRenameFileRequest:", error);
-    return new Response(
-      JSON.stringify({
-        error: "Failed to rename file",
-        message: error instanceof Error ? error.message : "Unknown error",
-      }),
-      {
-        headers: {
-          "Content-Type": "application/json",
-          ...corsHeaders,
-        },
-        status: 500,
-      }
-    );
-  }
-}
-
-async function handleStreamingRenameFileRequest(
-  req: Request,
-  corsHeaders: Record<string, string>
-): Promise<Response> {
-  try {
-    const body = (await req.json()) as RenameFileRequest;
-    const { oldPath, newPath, sessionId } = body;
-
-    if (!oldPath || typeof oldPath !== "string") {
-      return new Response(
-        JSON.stringify({
-          error: "Old path is required and must be a string",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 400,
-        }
-      );
-    }
-
-    if (!newPath || typeof newPath !== "string") {
-      return new Response(
-        JSON.stringify({
-          error: "New path is required and must be a string",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 400,
-        }
-      );
-    }
-
-    // Basic safety check - prevent dangerous paths
-    const dangerousPatterns = [
-      /^\/$/, // Root directory
-      /^\/etc/, // System directories
-      /^\/var/, // System directories
-      /^\/usr/, // System directories
-      /^\/bin/, // System directories
-      /^\/sbin/, // System directories
-      /^\/boot/, // System directories
-      /^\/dev/, // System directories
-      /^\/proc/, // System directories
-      /^\/sys/, // System directories
-      /^\/tmp\/\.\./, // Path traversal attempts
-      /\.\./, // Path traversal attempts
-    ];
-
-    if (
-      dangerousPatterns.some(
-        (pattern) => pattern.test(oldPath) || pattern.test(newPath)
-      )
-    ) {
-      return new Response(
-        JSON.stringify({
-          error: "Dangerous path not allowed",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 400,
-        }
-      );
-    }
-
-    console.log(`[Server] Renaming file (streaming): ${oldPath} -> ${newPath}`);
-
-    const stream = new ReadableStream({
-      start(controller) {
-        (async () => {
-          try {
-            // Send command start event
-            controller.enqueue(
-              new TextEncoder().encode(
-                `data: ${JSON.stringify({
-                  newPath,
-                  oldPath,
-                  timestamp: new Date().toISOString(),
-                  type: "command_start",
-                })}\n\n`
-              )
-            );
-
-            // Rename the file
-            await executeRenameFile(oldPath, newPath, sessionId);
-
-            console.log(
-              `[Server] File renamed successfully: ${oldPath} -> ${newPath}`
-            );
-
-            // Send command completion event
-            controller.enqueue(
-              new TextEncoder().encode(
-                `data: ${JSON.stringify({
-                  newPath,
-                  oldPath,
-                  success: true,
-                  timestamp: new Date().toISOString(),
-                  type: "command_complete",
-                })}\n\n`
-              )
-            );
-
-            controller.close();
-          } catch (error) {
-            console.error(
-              `[Server] Error renaming file: ${oldPath} -> ${newPath}`,
-              error
-            );
-
-            controller.enqueue(
-              new TextEncoder().encode(
-                `data: ${JSON.stringify({
-                  error:
-                    error instanceof Error ? error.message : "Unknown error",
-                  newPath,
-                  oldPath,
-                  type: "error",
-                })}\n\n`
-              )
-            );
-
-            controller.close();
-          }
-        })();
-      },
-    });
-
-    return new Response(stream, {
-      headers: {
-        "Cache-Control": "no-cache",
-        Connection: "keep-alive",
-        "Content-Type": "text/event-stream",
-        ...corsHeaders,
-      },
-    });
-  } catch (error) {
-    console.error("[Server] Error in handleStreamingRenameFileRequest:", error);
-    return new Response(
-      JSON.stringify({
-        error: "Failed to rename file",
-        message: error instanceof Error ? error.message : "Unknown error",
-      }),
-      {
-        headers: {
-          "Content-Type": "application/json",
-          ...corsHeaders,
-        },
-        status: 500,
-      }
-    );
-  }
-}
-
-async function handleMoveFileRequest(
-  req: Request,
-  corsHeaders: Record<string, string>
-): Promise<Response> {
-  try {
-    const body = (await req.json()) as MoveFileRequest;
-    const { sourcePath, destinationPath, sessionId } = body;
-
-    if (!sourcePath || typeof sourcePath !== "string") {
-      return new Response(
-        JSON.stringify({
-          error: "Source path is required and must be a string",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 400,
-        }
-      );
-    }
-
-    if (!destinationPath || typeof destinationPath !== "string") {
-      return new Response(
-        JSON.stringify({
-          error: "Destination path is required and must be a string",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 400,
-        }
-      );
-    }
-
-    // Basic safety check - prevent dangerous paths
-    const dangerousPatterns = [
-      /^\/$/, // Root directory
-      /^\/etc/, // System directories
-      /^\/var/, // System directories
-      /^\/usr/, // System directories
-      /^\/bin/, // System directories
-      /^\/sbin/, // System directories
-      /^\/boot/, // System directories
-      /^\/dev/, // System directories
-      /^\/proc/, // System directories
-      /^\/sys/, // System directories
-      /^\/tmp\/\.\./, // Path traversal attempts
-      /\.\./, // Path traversal attempts
-    ];
-
-    if (
-      dangerousPatterns.some(
-        (pattern) => pattern.test(sourcePath) || pattern.test(destinationPath)
-      )
-    ) {
-      return new Response(
-        JSON.stringify({
-          error: "Dangerous path not allowed",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 400,
-        }
-      );
-    }
-
-    console.log(`[Server] Moving file: ${sourcePath} -> ${destinationPath}`);
-
-    const result = await executeMoveFile(
-      sourcePath,
-      destinationPath,
-      sessionId
-    );
-
-    return new Response(
-      JSON.stringify({
-        destinationPath,
-        exitCode: result.exitCode,
-        sourcePath,
-        success: result.success,
-        timestamp: new Date().toISOString(),
-      }),
-      {
-        headers: {
-          "Content-Type": "application/json",
-          ...corsHeaders,
-        },
-      }
-    );
-  } catch (error) {
-    console.error("[Server] Error in handleMoveFileRequest:", error);
-    return new Response(
-      JSON.stringify({
-        error: "Failed to move file",
-        message: error instanceof Error ? error.message : "Unknown error",
-      }),
-      {
-        headers: {
-          "Content-Type": "application/json",
-          ...corsHeaders,
-        },
-        status: 500,
-      }
-    );
-  }
-}
-
-async function handleStreamingMoveFileRequest(
-  req: Request,
-  corsHeaders: Record<string, string>
-): Promise<Response> {
-  try {
-    const body = (await req.json()) as MoveFileRequest;
-    const { sourcePath, destinationPath, sessionId } = body;
-
-    if (!sourcePath || typeof sourcePath !== "string") {
-      return new Response(
-        JSON.stringify({
-          error: "Source path is required and must be a string",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 400,
-        }
-      );
-    }
-
-    if (!destinationPath || typeof destinationPath !== "string") {
-      return new Response(
-        JSON.stringify({
-          error: "Destination path is required and must be a string",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 400,
-        }
-      );
-    }
-
-    // Basic safety check - prevent dangerous paths
-    const dangerousPatterns = [
-      /^\/$/, // Root directory
-      /^\/etc/, // System directories
-      /^\/var/, // System directories
-      /^\/usr/, // System directories
-      /^\/bin/, // System directories
-      /^\/sbin/, // System directories
-      /^\/boot/, // System directories
-      /^\/dev/, // System directories
-      /^\/proc/, // System directories
-      /^\/sys/, // System directories
-      /^\/tmp\/\.\./, // Path traversal attempts
-      /\.\./, // Path traversal attempts
-    ];
-
-    if (
-      dangerousPatterns.some(
-        (pattern) => pattern.test(sourcePath) || pattern.test(destinationPath)
-      )
-    ) {
-      return new Response(
-        JSON.stringify({
-          error: "Dangerous path not allowed",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 400,
-        }
-      );
-    }
-
-    console.log(
-      `[Server] Moving file (streaming): ${sourcePath} -> ${destinationPath}`
-    );
-
-    const stream = new ReadableStream({
-      start(controller) {
-        (async () => {
-          try {
-            // Send command start event
-            controller.enqueue(
-              new TextEncoder().encode(
-                `data: ${JSON.stringify({
-                  destinationPath,
-                  sourcePath,
-                  timestamp: new Date().toISOString(),
-                  type: "command_start",
-                })}\n\n`
-              )
-            );
-
-            // Move the file
-            await executeMoveFile(sourcePath, destinationPath, sessionId);
-
-            console.log(
-              `[Server] File moved successfully: ${sourcePath} -> ${destinationPath}`
-            );
-
-            // Send command completion event
-            controller.enqueue(
-              new TextEncoder().encode(
-                `data: ${JSON.stringify({
-                  destinationPath,
-                  sourcePath,
-                  success: true,
-                  timestamp: new Date().toISOString(),
-                  type: "command_complete",
-                })}\n\n`
-              )
-            );
-
-            controller.close();
-          } catch (error) {
-            console.error(
-              `[Server] Error moving file: ${sourcePath} -> ${destinationPath}`,
-              error
-            );
-
-            controller.enqueue(
-              new TextEncoder().encode(
-                `data: ${JSON.stringify({
-                  destinationPath,
-                  error:
-                    error instanceof Error ? error.message : "Unknown error",
-                  sourcePath,
-                  type: "error",
-                })}\n\n`
-              )
-            );
-
-            controller.close();
-          }
-        })();
-      },
-    });
-
-    return new Response(stream, {
-      headers: {
-        "Cache-Control": "no-cache",
-        Connection: "keep-alive",
-        "Content-Type": "text/event-stream",
-        ...corsHeaders,
-      },
-    });
-  } catch (error) {
-    console.error("[Server] Error in handleStreamingMoveFileRequest:", error);
-    return new Response(
-      JSON.stringify({
-        error: "Failed to move file",
-        message: error instanceof Error ? error.message : "Unknown error",
-      }),
-      {
-        headers: {
-          "Content-Type": "application/json",
-          ...corsHeaders,
-        },
-        status: 500,
-      }
-    );
-  }
-}
-
-function executeCommand(
-  command: string,
-  args: string[],
-  sessionId?: string
-): Promise<{
-  success: boolean;
-  stdout: string;
-  stderr: string;
-  exitCode: number;
-}> {
-  return new Promise((resolve, reject) => {
-    const child = spawn(command, args, {
-      shell: true,
-      stdio: ["pipe", "pipe", "pipe"],
-    });
-
-    // Store the process reference for cleanup if sessionId is provided
-    if (sessionId && sessions.has(sessionId)) {
-      const session = sessions.get(sessionId)!;
-      session.activeProcess = child;
-    }
-
-    let stdout = "";
-    let stderr = "";
-
-    child.stdout?.on("data", (data) => {
-      stdout += data.toString();
-    });
-
-    child.stderr?.on("data", (data) => {
-      stderr += data.toString();
-    });
-
-    child.on("close", (code) => {
-      // Clear the active process reference
-      if (sessionId && sessions.has(sessionId)) {
-        const session = sessions.get(sessionId)!;
-        session.activeProcess = null;
-      }
-
-      console.log(`[Server] Command completed: ${command}, Exit code: ${code}`);
-
-      resolve({
-        exitCode: code || 0,
-        stderr,
-        stdout,
-        success: code === 0,
-      });
-    });
-
-    child.on("error", (error) => {
-      // Clear the active process reference
-      if (sessionId && sessions.has(sessionId)) {
-        const session = sessions.get(sessionId)!;
-        session.activeProcess = null;
-      }
-
-      reject(error);
-    });
-  });
-}
-
-function executeGitCheckout(
-  repoUrl: string,
-  branch: string,
-  targetDir: string,
-  sessionId?: string
-): Promise<{
-  success: boolean;
-  stdout: string;
-  stderr: string;
-  exitCode: number;
-}> {
-  return new Promise((resolve, reject) => {
-    // First, clone the repository
-    const cloneChild = spawn(
-      "git",
-      ["clone", "-b", branch, repoUrl, targetDir],
-      {
-        shell: true,
-        stdio: ["pipe", "pipe", "pipe"],
-      }
-    );
-
-    // Store the process reference for cleanup if sessionId is provided
-    if (sessionId && sessions.has(sessionId)) {
-      const session = sessions.get(sessionId)!;
-      session.activeProcess = cloneChild;
-    }
-
-    let stdout = "";
-    let stderr = "";
-
-    cloneChild.stdout?.on("data", (data) => {
-      stdout += data.toString();
-    });
-
-    cloneChild.stderr?.on("data", (data) => {
-      stderr += data.toString();
-    });
-
-    cloneChild.on("close", (code) => {
-      // Clear the active process reference
-      if (sessionId && sessions.has(sessionId)) {
-        const session = sessions.get(sessionId)!;
-        session.activeProcess = null;
-      }
-
-      if (code === 0) {
-        console.log(
-          `[Server] Repository cloned successfully: ${repoUrl} to ${targetDir}`
-        );
-        resolve({
-          exitCode: code || 0,
-          stderr,
-          stdout,
-          success: true,
-        });
-      } else {
-        console.error(
-          `[Server] Failed to clone repository: ${repoUrl}, Exit code: ${code}`
-        );
-        resolve({
-          exitCode: code || 1,
-          stderr,
-          stdout,
-          success: false,
-        });
-      }
-    });
-
-    cloneChild.on("error", (error) => {
-      // Clear the active process reference
-      if (sessionId && sessions.has(sessionId)) {
-        const session = sessions.get(sessionId)!;
-        session.activeProcess = null;
-      }
-
-      console.error(`[Server] Error cloning repository: ${repoUrl}`, error);
-      reject(error);
-    });
-  });
-}
-
-function executeMkdir(
-  path: string,
-  recursive: boolean,
-  sessionId?: string
-): Promise<{
-  success: boolean;
-  stdout: string;
-  stderr: string;
-  exitCode: number;
-}> {
-  return new Promise((resolve, reject) => {
-    const args = recursive ? ["-p", path] : [path];
-    const mkdirChild = spawn("mkdir", args, {
-      shell: true,
-      stdio: ["pipe", "pipe", "pipe"],
-    });
-
-    // Store the process reference for cleanup if sessionId is provided
-    if (sessionId && sessions.has(sessionId)) {
-      const session = sessions.get(sessionId)!;
-      session.activeProcess = mkdirChild;
-    }
-
-    let stdout = "";
-    let stderr = "";
-
-    mkdirChild.stdout?.on("data", (data) => {
-      stdout += data.toString();
-    });
-
-    mkdirChild.stderr?.on("data", (data) => {
-      stderr += data.toString();
-    });
-
-    mkdirChild.on("close", (code) => {
-      // Clear the active process reference
-      if (sessionId && sessions.has(sessionId)) {
-        const session = sessions.get(sessionId)!;
-        session.activeProcess = null;
-      }
-
-      if (code === 0) {
-        console.log(`[Server] Directory created successfully: ${path}`);
-        resolve({
-          exitCode: code || 0,
-          stderr,
-          stdout,
-          success: true,
-        });
-      } else {
-        console.error(
-          `[Server] Failed to create directory: ${path}, Exit code: ${code}`
-        );
-        resolve({
-          exitCode: code || 1,
-          stderr,
-          stdout,
-          success: false,
-        });
-      }
-    });
-
-    mkdirChild.on("error", (error) => {
-      // Clear the active process reference
-      if (sessionId && sessions.has(sessionId)) {
-        const session = sessions.get(sessionId)!;
-        session.activeProcess = null;
-      }
-
-      console.error(`[Server] Error creating directory: ${path}`, error);
-      reject(error);
-    });
-  });
-}
-
-function executeWriteFile(
-  path: string,
-  content: string,
-  encoding: string,
-  sessionId?: string
-): Promise<{
-  success: boolean;
-  exitCode: number;
-}> {
-  return new Promise((resolve, reject) => {
-    (async () => {
-      try {
-        // Ensure the directory exists
-        const dir = dirname(path);
-        if (dir !== ".") {
-          await mkdir(dir, { recursive: true });
-        }
-
-        // Write the file
-        await writeFile(path, content, {
-          encoding: encoding as BufferEncoding,
-        });
-
-        console.log(`[Server] File written successfully: ${path}`);
-        resolve({
-          exitCode: 0,
-          success: true,
-        });
-      } catch (error) {
-        console.error(`[Server] Error writing file: ${path}`, error);
-        reject(error);
-      }
-    })();
-  });
-}
-
-function executeReadFile(
-  path: string,
-  encoding: string,
-  sessionId?: string
-): Promise<{
-  success: boolean;
-  exitCode: number;
-  content: string;
-}> {
-  return new Promise((resolve, reject) => {
-    (async () => {
-      try {
-        // Read the file
-        const content = await readFile(path, {
-          encoding: encoding as BufferEncoding,
-        });
-
-        console.log(`[Server] File read successfully: ${path}`);
-        resolve({
-          content,
-          exitCode: 0,
-          success: true,
-        });
-      } catch (error) {
-        console.error(`[Server] Error reading file: ${path}`, error);
-        reject(error);
-      }
-    })();
-  });
-}
-
-function executeDeleteFile(
-  path: string,
-  sessionId?: string
-): Promise<{
-  success: boolean;
-  exitCode: number;
-}> {
-  return new Promise((resolve, reject) => {
-    (async () => {
-      try {
-        // Delete the file
-        await unlink(path);
-
-        console.log(`[Server] File deleted successfully: ${path}`);
-        resolve({
-          exitCode: 0,
-          success: true,
-        });
-      } catch (error) {
-        console.error(`[Server] Error deleting file: ${path}`, error);
-        reject(error);
-      }
-    })();
-  });
-}
-
-function executeRenameFile(
-  oldPath: string,
-  newPath: string,
-  sessionId?: string
-): Promise<{
-  success: boolean;
-  exitCode: number;
-}> {
-  return new Promise((resolve, reject) => {
-    (async () => {
-      try {
-        // Rename the file
-        await rename(oldPath, newPath);
-
-        console.log(
-          `[Server] File renamed successfully: ${oldPath} -> ${newPath}`
-        );
-        resolve({
-          exitCode: 0,
-          success: true,
-        });
-      } catch (error) {
-        console.error(
-          `[Server] Error renaming file: ${oldPath} -> ${newPath}`,
-          error
-        );
-        reject(error);
-      }
-    })();
-  });
-}
-
-function executeMoveFile(
-  sourcePath: string,
-  destinationPath: string,
-  sessionId?: string
-): Promise<{
-  success: boolean;
-  exitCode: number;
-}> {
-  return new Promise((resolve, reject) => {
-    (async () => {
-      try {
-        // Move the file
-        await rename(sourcePath, destinationPath);
-
-        console.log(
-          `[Server] File moved successfully: ${sourcePath} -> ${destinationPath}`
-        );
-        resolve({
-          exitCode: 0,
-          success: true,
-        });
-      } catch (error) {
-        console.error(
-          `[Server] Error moving file: ${sourcePath} -> ${destinationPath}`,
-          error
-        );
-        reject(error);
-      }
-    })();
-  });
-}
+  // We don't need this, but typescript complains
+  websocket: { async message() { } },
+});
 
-console.log(`🚀 Bun server running on http://localhost:${server.port}`);
+console.log(`🚀 Bun server running on http://0.0.0.0:${server.port}`);
 console.log(`📡 HTTP API endpoints available:`);
 console.log(`   POST /api/session/create - Create a new session`);
 console.log(`   GET  /api/session/list - List all sessions`);
 console.log(`   POST /api/execute - Execute a command (non-streaming)`);
 console.log(`   POST /api/execute/stream - Execute a command (streaming)`);
 console.log(`   POST /api/git/checkout - Checkout a git repository`);
-console.log(
-  `   POST /api/git/checkout/stream - Checkout a git repository (streaming)`
-);
 console.log(`   POST /api/mkdir - Create a directory`);
-console.log(`   POST /api/mkdir/stream - Create a directory (streaming)`);
 console.log(`   POST /api/write - Write a file`);
-console.log(`   POST /api/write/stream - Write a file (streaming)`);
 console.log(`   POST /api/read - Read a file`);
-console.log(`   POST /api/read/stream - Read a file (streaming)`);
 console.log(`   POST /api/delete - Delete a file`);
-console.log(`   POST /api/delete/stream - Delete a file (streaming)`);
 console.log(`   POST /api/rename - Rename a file`);
-console.log(`   POST /api/rename/stream - Rename a file (streaming)`);
 console.log(`   POST /api/move - Move a file`);
-console.log(`   POST /api/move/stream - Move a file (streaming)`);
+console.log(`   POST /api/expose-port - Expose a port for external access`);
+console.log(`   DELETE /api/unexpose-port - Unexpose a port`);
+console.log(`   GET  /api/exposed-ports - List exposed ports`);
+console.log(`   POST /api/process/start - Start a background process`);
+console.log(`   GET  /api/process/list - List all processes`);
+console.log(`   GET  /api/process/{id} - Get process status`);
+console.log(`   DELETE /api/process/{id} - Kill a process`);
+console.log(`   GET  /api/process/{id}/logs - Get process logs`);
+console.log(`   GET  /api/process/{id}/stream - Stream process logs (SSE)`);
+console.log(`   DELETE /api/process/kill-all - Kill all processes`);
+console.log(`   GET  /proxy/{port}/* - Proxy requests to exposed ports`);
 console.log(`   GET  /api/ping - Health check`);
 console.log(`   GET  /api/commands - List available commands`);