@cloudflare/sandbox 0.0.0-f5fcd52 → 0.0.0-fb3c9c2

package/container_src/index.ts

@@ -1,100 +1,102 @@
-import { type ChildProcess, type SpawnOptions, spawn } from "node:child_process";
-import { mkdir, readFile, rename, unlink, writeFile } from "node:fs/promises";
-import { dirname } from "node:path";
 import { serve } from "bun";
+import { handleExecuteRequest, handleStreamingExecuteRequest } from "./handler/exec";
+import {
+  handleDeleteFileRequest,
+  handleListFilesRequest,
+  handleMkdirRequest,
+  handleMoveFileRequest,
+  handleReadFileRequest,
+  handleRenameFileRequest,
+  handleWriteFileRequest,
+} from "./handler/file";
+import { handleGitCheckoutRequest } from "./handler/git";
+import {
+  handleExposePortRequest,
+  handleGetExposedPortsRequest,
+  handleProxyRequest,
+  handleUnexposePortRequest,
+} from "./handler/ports";
+import {
+  handleGetProcessLogsRequest,
+  handleGetProcessRequest,
+  handleKillAllProcessesRequest,
+  handleKillProcessRequest,
+  handleListProcessesRequest,
+  handleStartProcessRequest,
+  handleStreamProcessLogsRequest,
+} from "./handler/process";
+import { handleCreateSession, handleListSessions } from "./handler/session";
+import { hasNamespaceSupport, SessionManager } from "./isolation";
+import type { CreateContextRequest } from "./jupyter-server";
+import { JupyterNotReadyError, JupyterService } from "./jupyter-service";
 
-interface ExecuteRequest {
-  command: string;
-  args?: string[];
-  sessionId?: string;
-  background?: boolean;
-}
-
-interface GitCheckoutRequest {
-  repoUrl: string;
-  branch?: string;
-  targetDir?: string;
-  sessionId?: string;
-}
-
-interface MkdirRequest {
-  path: string;
-  recursive?: boolean;
-  sessionId?: string;
-}
-
-interface WriteFileRequest {
-  path: string;
-  content: string;
-  encoding?: string;
-  sessionId?: string;
-}
-
-interface ReadFileRequest {
-  path: string;
-  encoding?: string;
-  sessionId?: string;
-}
-
-interface DeleteFileRequest {
-  path: string;
-  sessionId?: string;
-}
-
-interface RenameFileRequest {
-  oldPath: string;
-  newPath: string;
-  sessionId?: string;
-}
+// In-memory storage for exposed ports
+const exposedPorts = new Map<number, { name?: string; exposedAt: Date }>();
 
-interface MoveFileRequest {
-  sourcePath: string;
-  destinationPath: string;
-  sessionId?: string;
-}
+// Check isolation capabilities on startup
+const isolationAvailable = hasNamespaceSupport();
+console.log(
+  `[Container] Process isolation: ${
+    isolationAvailable
+      ? "ENABLED (production mode)"
+      : "DISABLED (development mode)"
+  }`
+);
 
-interface ExposePortRequest {
-  port: number;
-  name?: string;
-}
+// Session manager for secure execution with isolation
+const sessionManager = new SessionManager();
 
-interface UnexposePortRequest {
-  port: number;
-}
+// Graceful shutdown handler
+const SHUTDOWN_GRACE_PERIOD_MS = 5000; // Grace period for cleanup (5 seconds for proper async cleanup)
 
-interface SessionData {
-  sessionId: string;
-  activeProcess: ChildProcess | null;
-  createdAt: Date;
-}
+process.on("SIGTERM", async () => {
+  console.log("[Container] SIGTERM received, cleaning up sessions...");
+  await sessionManager.destroyAll();
+  setTimeout(() => {
+    process.exit(0);
+  }, SHUTDOWN_GRACE_PERIOD_MS);
+});
 
-// In-memory session storage (in production, you'd want to use a proper database)
-const sessions = new Map<string, SessionData>();
+process.on("SIGINT", async () => {
+  console.log("[Container] SIGINT received, cleaning up sessions...");
+  await sessionManager.destroyAll();
+  setTimeout(() => {
+    process.exit(0);
+  }, SHUTDOWN_GRACE_PERIOD_MS);
+});
 
-// In-memory storage for exposed ports
-const exposedPorts = new Map<number, { name?: string; exposedAt: Date }>();
+// Cleanup on uncaught exceptions (log but still exit)
+process.on("uncaughtException", async (error) => {
+  console.error("[Container] Uncaught exception:", error);
+  await sessionManager.destroyAll();
+  process.exit(1);
+});
 
-// Generate a unique session ID
-function generateSessionId(): string {
-  return `session_${Date.now()}_${Math.random().toString(36).substr(2, 9)}`;
-}
+// Initialize Jupyter service with graceful degradation
+const jupyterService = new JupyterService();
 
-// Clean up old sessions (older than 1 hour)
-function cleanupOldSessions() {
-  const oneHourAgo = new Date(Date.now() - 60 * 60 * 1000);
-  for (const [sessionId, session] of sessions.entries()) {
-    if (session.createdAt < oneHourAgo && !session.activeProcess) {
-      sessions.delete(sessionId);
-      console.log(`[Server] Cleaned up old session: ${sessionId}`);
-    }
-  }
-}
+// Start Jupyter initialization in background (non-blocking)
+console.log("[Container] Starting Jupyter initialization in background...");
+console.log(
+  "[Container] API endpoints are available immediately. Jupyter-dependent features will be available shortly."
+);
 
-// Run cleanup every 10 minutes
-setInterval(cleanupOldSessions, 10 * 60 * 1000);
+jupyterService
+  .initialize()
+  .then(() => {
+    console.log(
+      "[Container] Jupyter fully initialized - all features available"
+    );
+  })
+  .catch((error) => {
+    console.error("[Container] Jupyter initialization failed:", error.message);
+    console.error(
+      "[Container] The API will continue in degraded mode without code execution capabilities"
+    );
+  });
 
 const server = serve({
-  fetch(req: Request) {
+  async fetch(req: Request) {
     const url = new URL(req.url);
     const pathname = url.pathname;
 
@@ -127,108 +129,41 @@ const server = serve({
 
         case "/api/session/create":
           if (req.method === "POST") {
-            const sessionId = generateSessionId();
-            const sessionData: SessionData = {
-              activeProcess: null,
-              createdAt: new Date(),
-              sessionId,
-            };
-            sessions.set(sessionId, sessionData);
-
-            console.log(`[Server] Created new session: ${sessionId}`);
-
-            return new Response(
-              JSON.stringify({
-                message: "Session created successfully",
-                sessionId,
-                timestamp: new Date().toISOString(),
-              }),
-              {
-                headers: {
-                  "Content-Type": "application/json",
-                  ...corsHeaders,
-                },
-              }
-            );
+            return handleCreateSession(req, corsHeaders, sessionManager);
           }
           break;
 
         case "/api/session/list":
           if (req.method === "GET") {
-            const sessionList = Array.from(sessions.values()).map(
-              (session) => ({
-                createdAt: session.createdAt.toISOString(),
-                hasActiveProcess: !!session.activeProcess,
-                sessionId: session.sessionId,
-              })
-            );
-
-            return new Response(
-              JSON.stringify({
-                count: sessionList.length,
-                sessions: sessionList,
-                timestamp: new Date().toISOString(),
-              }),
-              {
-                headers: {
-                  "Content-Type": "application/json",
-                  ...corsHeaders,
-                },
-              }
-            );
+            return handleListSessions(corsHeaders, sessionManager);
           }
           break;
 
         case "/api/execute":
           if (req.method === "POST") {
-            return handleExecuteRequest(req, corsHeaders);
+            return handleExecuteRequest(req, corsHeaders, sessionManager);
           }
           break;
-
+  
         case "/api/execute/stream":
           if (req.method === "POST") {
-            return handleStreamingExecuteRequest(req, corsHeaders);
+            return handleStreamingExecuteRequest(req, sessionManager, corsHeaders);
           }
           break;
 
         case "/api/ping":
           if (req.method === "GET") {
+            const health = await jupyterService.getHealthStatus();
             return new Response(
               JSON.stringify({
                 message: "pong",
                 timestamp: new Date().toISOString(),
-              }),
-              {
-                headers: {
-                  "Content-Type": "application/json",
-                  ...corsHeaders,
-                },
-              }
-            );
-          }
-          break;
-
-        case "/api/commands":
-          if (req.method === "GET") {
-            return new Response(
-              JSON.stringify({
-                availableCommands: [
-                  "ls",
-                  "pwd",
-                  "echo",
-                  "cat",
-                  "grep",
-                  "find",
-                  "whoami",
-                  "date",
-                  "uptime",
-                  "ps",
-                  "top",
-                  "df",
-                  "du",
-                  "free",
-                ],
-                timestamp: new Date().toISOString(),
+                jupyter: health.ready
+                  ? "ready"
+                  : health.initializing
+                  ? "initializing"
+                  : "not ready",
+                jupyterHealth: health,
               }),
               {
                 headers: {
@@ -242,110 +177,363 @@ const server = serve({
 
         case "/api/git/checkout":
           if (req.method === "POST") {
-            return handleGitCheckoutRequest(req, corsHeaders);
+            return handleGitCheckoutRequest(req, corsHeaders, sessionManager);
           }
           break;
 
-        case "/api/git/checkout/stream":
+        case "/api/mkdir":
           if (req.method === "POST") {
-            return handleStreamingGitCheckoutRequest(req, corsHeaders);
+            return handleMkdirRequest(req, corsHeaders, sessionManager);
           }
           break;
 
-        case "/api/mkdir":
+        case "/api/write":
           if (req.method === "POST") {
-            return handleMkdirRequest(req, corsHeaders);
+            return handleWriteFileRequest(req, corsHeaders, sessionManager);
           }
           break;
 
-        case "/api/mkdir/stream":
+        case "/api/read":
           if (req.method === "POST") {
-            return handleStreamingMkdirRequest(req, corsHeaders);
+            return handleReadFileRequest(req, corsHeaders, sessionManager);
           }
           break;
 
-        case "/api/write":
+        case "/api/delete":
           if (req.method === "POST") {
-            return handleWriteFileRequest(req, corsHeaders);
+            return handleDeleteFileRequest(req, corsHeaders, sessionManager);
           }
           break;
 
-        case "/api/write/stream":
+        case "/api/rename":
           if (req.method === "POST") {
-            return handleStreamingWriteFileRequest(req, corsHeaders);
+            return handleRenameFileRequest(req, corsHeaders, sessionManager);
           }
           break;
 
-        case "/api/read":
+        case "/api/move":
           if (req.method === "POST") {
-            return handleReadFileRequest(req, corsHeaders);
+            return handleMoveFileRequest(req, corsHeaders, sessionManager);
           }
           break;
 
-        case "/api/read/stream":
+        case "/api/list-files":
           if (req.method === "POST") {
-            return handleStreamingReadFileRequest(req, corsHeaders);
+            return handleListFilesRequest(req, corsHeaders, sessionManager);
           }
           break;
 
-        case "/api/delete":
+        case "/api/expose-port":
           if (req.method === "POST") {
-            return handleDeleteFileRequest(req, corsHeaders);
+            return handleExposePortRequest(exposedPorts, req, corsHeaders);
           }
           break;
 
-        case "/api/delete/stream":
-          if (req.method === "POST") {
-            return handleStreamingDeleteFileRequest(req, corsHeaders);
+        case "/api/unexpose-port":
+          if (req.method === "DELETE") {
+            return handleUnexposePortRequest(exposedPorts, req, corsHeaders);
           }
           break;
 
-        case "/api/rename":
-          if (req.method === "POST") {
-            return handleRenameFileRequest(req, corsHeaders);
+        case "/api/exposed-ports":
+          if (req.method === "GET") {
+            return handleGetExposedPortsRequest(exposedPorts, req, corsHeaders);
           }
           break;
 
-        case "/api/rename/stream":
+        case "/api/process/start":
           if (req.method === "POST") {
-            return handleStreamingRenameFileRequest(req, corsHeaders);
+            return handleStartProcessRequest(req, corsHeaders, sessionManager);
           }
           break;
 
-        case "/api/move":
-          if (req.method === "POST") {
-            return handleMoveFileRequest(req, corsHeaders);
+        case "/api/process/list":
+          if (req.method === "GET") {
+            return handleListProcessesRequest(req, corsHeaders, sessionManager);
           }
           break;
 
-        case "/api/move/stream":
-          if (req.method === "POST") {
-            return handleStreamingMoveFileRequest(req, corsHeaders);
+        case "/api/process/kill-all":
+          if (req.method === "DELETE") {
+            return handleKillAllProcessesRequest(
+              req,
+              corsHeaders,
+              sessionManager
+            );
           }
           break;
 
-        case "/api/expose-port":
+        case "/api/contexts":
           if (req.method === "POST") {
-            return handleExposePortRequest(req, corsHeaders);
-          }
-          break;
+            try {
+              const body = (await req.json()) as CreateContextRequest;
+              const context = await jupyterService.createContext(body);
+              return new Response(
+                JSON.stringify({
+                  id: context.id,
+                  language: context.language,
+                  cwd: context.cwd,
+                  createdAt: context.createdAt,
+                  lastUsed: context.lastUsed,
+                }),
+                {
+                  headers: {
+                    "Content-Type": "application/json",
+                    ...corsHeaders,
+                  },
+                }
+              );
+            } catch (error) {
+              if (error instanceof JupyterNotReadyError) {
+                console.log(
+                  `[Container] Request timed out waiting for Jupyter (${error.progress}% complete)`
+                );
+                return new Response(
+                  JSON.stringify({
+                    error: error.message,
+                    status: "initializing",
+                    progress: error.progress,
+                  }),
+                  {
+                    status: 503,
+                    headers: {
+                      "Content-Type": "application/json",
+                      "Retry-After": String(error.retryAfter),
+                      ...corsHeaders,
+                    },
+                  }
+                );
+              }
 
-        case "/api/unexpose-port":
-          if (req.method === "DELETE") {
-            return handleUnexposePortRequest(req, corsHeaders);
+              // Check if it's a circuit breaker error
+              if (
+                error instanceof Error &&
+                error.message.includes("Circuit breaker is open")
+              ) {
+                console.log(
+                  "[Container] Circuit breaker is open:",
+                  error.message
+                );
+                return new Response(
+                  JSON.stringify({
+                    error:
+                      "Service temporarily unavailable due to high error rate. Please try again later.",
+                    status: "circuit_open",
+                    details: error.message,
+                  }),
+                  {
+                    status: 503,
+                    headers: {
+                      "Content-Type": "application/json",
+                      "Retry-After": "60",
+                      ...corsHeaders,
+                    },
+                  }
+                );
+              }
+
+              // Only log actual errors with stack traces
+              console.error("[Container] Error creating context:", error);
+              return new Response(
+                JSON.stringify({
+                  error:
+                    error instanceof Error
+                      ? error.message
+                      : "Failed to create context",
+                }),
+                {
+                  status: 500,
+                  headers: {
+                    "Content-Type": "application/json",
+                    ...corsHeaders,
+                  },
+                }
+              );
+            }
+          } else if (req.method === "GET") {
+            const contexts = await jupyterService.listContexts();
+            return new Response(JSON.stringify({ contexts }), {
+              headers: {
+                "Content-Type": "application/json",
+                ...corsHeaders,
+              },
+            });
           }
           break;
 
-        case "/api/exposed-ports":
-          if (req.method === "GET") {
-            return handleGetExposedPortsRequest(req, corsHeaders);
+        case "/api/execute/code":
+          if (req.method === "POST") {
+            try {
+              const body = (await req.json()) as {
+                context_id: string;
+                code: string;
+                language?: string;
+              };
+              return await jupyterService.executeCode(
+                body.context_id,
+                body.code,
+                body.language
+              );
+            } catch (error) {
+              // Check if it's a circuit breaker error
+              if (
+                error instanceof Error &&
+                error.message.includes("Circuit breaker is open")
+              ) {
+                console.log(
+                  "[Container] Circuit breaker is open for code execution:",
+                  error.message
+                );
+                return new Response(
+                  JSON.stringify({
+                    error:
+                      "Service temporarily unavailable due to high error rate. Please try again later.",
+                    status: "circuit_open",
+                    details: error.message,
+                  }),
+                  {
+                    status: 503,
+                    headers: {
+                      "Content-Type": "application/json",
+                      "Retry-After": "30",
+                      ...corsHeaders,
+                    },
+                  }
+                );
+              }
+
+              // Don't log stack traces for expected initialization state
+              if (
+                error instanceof Error &&
+                error.message.includes("initializing")
+              ) {
+                console.log(
+                  "[Container] Code execution deferred - Jupyter still initializing"
+                );
+              } else {
+                console.error("[Container] Error executing code:", error);
+              }
+              // Error response is already handled by jupyterService.executeCode for not ready state
+              return new Response(
+                JSON.stringify({
+                  error:
+                    error instanceof Error
+                      ? error.message
+                      : "Failed to execute code",
+                }),
+                {
+                  status: 500,
+                  headers: {
+                    "Content-Type": "application/json",
+                    ...corsHeaders,
+                  },
+                }
+              );
+            }
           }
           break;
 
         default:
+          // Handle dynamic routes for contexts
+          if (
+            pathname.startsWith("/api/contexts/") &&
+            pathname.split("/").length === 4
+          ) {
+            const contextId = pathname.split("/")[3];
+            if (req.method === "DELETE") {
+              try {
+                await jupyterService.deleteContext(contextId);
+                return new Response(JSON.stringify({ success: true }), {
+                  headers: {
+                    "Content-Type": "application/json",
+                    ...corsHeaders,
+                  },
+                });
+              } catch (error) {
+                if (error instanceof JupyterNotReadyError) {
+                  console.log(
+                    `[Container] Request timed out waiting for Jupyter (${error.progress}% complete)`
+                  );
+                  return new Response(
+                    JSON.stringify({
+                      error: error.message,
+                      status: "initializing",
+                      progress: error.progress,
+                    }),
+                    {
+                      status: 503,
+                      headers: {
+                        "Content-Type": "application/json",
+                        "Retry-After": "5",
+                        ...corsHeaders,
+                      },
+                    }
+                  );
+                }
+                return new Response(
+                  JSON.stringify({
+                    error:
+                      error instanceof Error
+                        ? error.message
+                        : "Failed to delete context",
+                  }),
+                  {
+                    status:
+                      error instanceof Error &&
+                      error.message.includes("not found")
+                        ? 404
+                        : 500,
+                    headers: {
+                      "Content-Type": "application/json",
+                      ...corsHeaders,
+                    },
+                  }
+                );
+              }
+            }
+          }
+
+          // Handle dynamic routes for individual processes
+          if (pathname.startsWith("/api/process/")) {
+            const segments = pathname.split("/");
+            if (segments.length >= 4) {
+              const processId = segments[3];
+              const action = segments[4]; // Optional: logs, stream, etc.
+
+              if (!action && req.method === "GET") {
+                return handleGetProcessRequest(
+                  req,
+                  corsHeaders,
+                  processId,
+                  sessionManager
+                );
+              } else if (!action && req.method === "DELETE") {
+                return handleKillProcessRequest(
+                  req,
+                  corsHeaders,
+                  processId,
+                  sessionManager
+                );
+              } else if (action === "logs" && req.method === "GET") {
+                return handleGetProcessLogsRequest(
+                  req,
+                  corsHeaders,
+                  processId,
+                  sessionManager
+                );
+              } else if (action === "stream" && req.method === "GET") {
+                return handleStreamProcessLogsRequest(
+                  req,
+                  corsHeaders,
+                  processId,
+                  sessionManager
+                );
+              }
+            }
+          }
           // Check if this is a proxy request for an exposed port
           if (pathname.startsWith("/proxy/")) {
-            return handleProxyRequest(req, corsHeaders);
+            return handleProxyRequest(exposedPorts, req, corsHeaders);
           }
 
           console.log(`[Container] Route not found: ${pathname}`);
@@ -355,7 +543,10 @@ const server = serve({
           });
       }
     } catch (error) {
-      console.error(`[Container] Error handling ${req.method} ${pathname}:`, error);
+      console.error(
+        `[Container] Error handling ${req.method} ${pathname}:`,
+        error
+      );
       return new Response(
         JSON.stringify({
           error: "Internal server error",
@@ -374,2798 +565,9 @@ const server = serve({
   hostname: "0.0.0.0",
   port: 3000,
   // We don't need this, but typescript complains
-  websocket: { async message() { } },
+  websocket: { async message() {} },
 });
 
-async function handleExecuteRequest(
-  req: Request,
-  corsHeaders: Record<string, string>
-): Promise<Response> {
-  try {
-    const body = (await req.json()) as ExecuteRequest;
-    const { command, args = [], sessionId, background } = body;
-
-    if (!command || typeof command !== "string") {
-      return new Response(
-        JSON.stringify({
-          error: "Command is required and must be a string",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 400,
-        }
-      );
-    }
-
-    console.log(`[Server] Executing command: ${command} ${args.join(" ")}`);
-
-    const result = await executeCommand(command, args, sessionId, background);
-
-    return new Response(
-      JSON.stringify({
-        args,
-        command,
-        exitCode: result.exitCode,
-        stderr: result.stderr,
-        stdout: result.stdout,
-        success: result.success,
-        timestamp: new Date().toISOString(),
-      }),
-      {
-        headers: {
-          "Content-Type": "application/json",
-          ...corsHeaders,
-        },
-      }
-    );
-  } catch (error) {
-    console.error("[Server] Error in handleExecuteRequest:", error);
-    return new Response(
-      JSON.stringify({
-        error: "Failed to execute command",
-        message: error instanceof Error ? error.message : "Unknown error",
-      }),
-      {
-        headers: {
-          "Content-Type": "application/json",
-          ...corsHeaders,
-        },
-        status: 500,
-      }
-    );
-  }
-}
-
-async function handleStreamingExecuteRequest(
-  req: Request,
-  corsHeaders: Record<string, string>
-): Promise<Response> {
-  try {
-    const body = (await req.json()) as ExecuteRequest;
-    const { command, args = [], sessionId, background } = body;
-
-    if (!command || typeof command !== "string") {
-      return new Response(
-        JSON.stringify({
-          error: "Command is required and must be a string",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 400,
-        }
-      );
-    }
-
-    console.log(
-      `[Server] Executing streaming command: ${command} ${args.join(" ")}`
-    );
-
-    const stream = new ReadableStream({
-      start(controller) {
-        const spawnOptions: SpawnOptions = {
-          shell: true,
-          stdio: ["pipe", "pipe", "pipe"] as const,
-          detached: background || false,
-        };
-
-        const child = spawn(command, args, spawnOptions);
-
-        // Store the process reference for cleanup if sessionId is provided
-        if (sessionId && sessions.has(sessionId)) {
-          const session = sessions.get(sessionId)!;
-          session.activeProcess = child;
-        }
-
-        // For background processes, unref to prevent blocking
-        if (background) {
-          child.unref();
-        }
-
-        let stdout = "";
-        let stderr = "";
-
-        // Send command start event
-        controller.enqueue(
-          new TextEncoder().encode(
-            `data: ${JSON.stringify({
-              args,
-              command,
-              timestamp: new Date().toISOString(),
-              type: "command_start",
-              background: background || false,
-            })}\n\n`
-          )
-        );
-
-        child.stdout?.on("data", (data) => {
-          const output = data.toString();
-          stdout += output;
-
-          // Send real-time output
-          controller.enqueue(
-            new TextEncoder().encode(
-              `data: ${JSON.stringify({
-                command,
-                data: output,
-                stream: "stdout",
-                type: "output",
-              })}\n\n`
-            )
-          );
-        });
-
-        child.stderr?.on("data", (data) => {
-          const output = data.toString();
-          stderr += output;
-
-          // Send real-time error output
-          controller.enqueue(
-            new TextEncoder().encode(
-              `data: ${JSON.stringify({
-                command,
-                data: output,
-                stream: "stderr",
-                type: "output",
-              })}\n\n`
-            )
-          );
-        });
-
-        child.on("close", (code) => {
-          // Clear the active process reference
-          if (sessionId && sessions.has(sessionId)) {
-            const session = sessions.get(sessionId)!;
-            session.activeProcess = null;
-          }
-
-          console.log(
-            `[Server] Command completed: ${command}, Exit code: ${code}`
-          );
-
-          // Send command completion event
-          controller.enqueue(
-            new TextEncoder().encode(
-              `data: ${JSON.stringify({
-                args,
-                command,
-                exitCode: code,
-                stderr,
-                stdout,
-                success: code === 0,
-                timestamp: new Date().toISOString(),
-                type: "command_complete",
-              })}\n\n`
-            )
-          );
-
-          // For non-background processes, close the stream
-          // For background processes with streaming, the stream stays open
-          if (!background) {
-            controller.close();
-          }
-        });
-
-        child.on("error", (error) => {
-          // Clear the active process reference
-          if (sessionId && sessions.has(sessionId)) {
-            const session = sessions.get(sessionId)!;
-            session.activeProcess = null;
-          }
-
-          controller.enqueue(
-            new TextEncoder().encode(
-              `data: ${JSON.stringify({
-                args,
-                command,
-                error: error.message,
-                type: "error",
-              })}\n\n`
-            )
-          );
-
-          controller.close();
-        });
-      },
-    });
-
-    return new Response(stream, {
-      headers: {
-        "Cache-Control": "no-cache",
-        Connection: "keep-alive",
-        "Content-Type": "text/event-stream",
-        ...corsHeaders,
-      },
-    });
-  } catch (error) {
-    console.error("[Server] Error in handleStreamingExecuteRequest:", error);
-    return new Response(
-      JSON.stringify({
-        error: "Failed to execute streaming command",
-        message: error instanceof Error ? error.message : "Unknown error",
-      }),
-      {
-        headers: {
-          "Content-Type": "application/json",
-          ...corsHeaders,
-        },
-        status: 500,
-      }
-    );
-  }
-}
-
-async function handleGitCheckoutRequest(
-  req: Request,
-  corsHeaders: Record<string, string>
-): Promise<Response> {
-  try {
-    const body = (await req.json()) as GitCheckoutRequest;
-    const { repoUrl, branch = "main", targetDir, sessionId } = body;
-
-    if (!repoUrl || typeof repoUrl !== "string") {
-      return new Response(
-        JSON.stringify({
-          error: "Repository URL is required and must be a string",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 400,
-        }
-      );
-    }
-
-    // Validate repository URL format
-    const urlPattern =
-      /^(https?:\/\/|git@|ssh:\/\/).*\.git$|^https?:\/\/.*\/.*$/;
-    if (!urlPattern.test(repoUrl)) {
-      return new Response(
-        JSON.stringify({
-          error: "Invalid repository URL format",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 400,
-        }
-      );
-    }
-
-    // Generate target directory if not provided
-    const checkoutDir =
-      targetDir ||
-      `repo_${Date.now()}_${Math.random().toString(36).substr(2, 9)}`;
-
-    console.log(
-      `[Server] Checking out repository: ${repoUrl} to ${checkoutDir}`
-    );
-
-    const result = await executeGitCheckout(
-      repoUrl,
-      branch,
-      checkoutDir,
-      sessionId
-    );
-
-    return new Response(
-      JSON.stringify({
-        branch,
-        exitCode: result.exitCode,
-        repoUrl,
-        stderr: result.stderr,
-        stdout: result.stdout,
-        success: result.success,
-        targetDir: checkoutDir,
-        timestamp: new Date().toISOString(),
-      }),
-      {
-        headers: {
-          "Content-Type": "application/json",
-          ...corsHeaders,
-        },
-      }
-    );
-  } catch (error) {
-    console.error("[Server] Error in handleGitCheckoutRequest:", error);
-    return new Response(
-      JSON.stringify({
-        error: "Failed to checkout repository",
-        message: error instanceof Error ? error.message : "Unknown error",
-      }),
-      {
-        headers: {
-          "Content-Type": "application/json",
-          ...corsHeaders,
-        },
-        status: 500,
-      }
-    );
-  }
-}
-
-async function handleStreamingGitCheckoutRequest(
-  req: Request,
-  corsHeaders: Record<string, string>
-): Promise<Response> {
-  try {
-    const body = (await req.json()) as GitCheckoutRequest;
-    const { repoUrl, branch = "main", targetDir, sessionId } = body;
-
-    if (!repoUrl || typeof repoUrl !== "string") {
-      return new Response(
-        JSON.stringify({
-          error: "Repository URL is required and must be a string",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 400,
-        }
-      );
-    }
-
-    // Validate repository URL format
-    const urlPattern =
-      /^(https?:\/\/|git@|ssh:\/\/).*\.git$|^https?:\/\/.*\/.*$/;
-    if (!urlPattern.test(repoUrl)) {
-      return new Response(
-        JSON.stringify({
-          error: "Invalid repository URL format",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 400,
-        }
-      );
-    }
-
-    // Generate target directory if not provided
-    const checkoutDir =
-      targetDir ||
-      `repo_${Date.now()}_${Math.random().toString(36).substr(2, 9)}`;
-
-    console.log(
-      `[Server] Checking out repository: ${repoUrl} to ${checkoutDir}`
-    );
-
-    const stream = new ReadableStream({
-      start(controller) {
-        const child = spawn(
-          "git",
-          ["clone", "-b", branch, repoUrl, checkoutDir],
-          {
-            shell: true,
-            stdio: ["pipe", "pipe", "pipe"],
-          }
-        );
-
-        // Store the process reference for cleanup if sessionId is provided
-        if (sessionId && sessions.has(sessionId)) {
-          const session = sessions.get(sessionId)!;
-          session.activeProcess = child;
-        }
-
-        let stdout = "";
-        let stderr = "";
-
-        // Send command start event
-        controller.enqueue(
-          new TextEncoder().encode(
-            `data: ${JSON.stringify({
-              args: [branch, repoUrl, checkoutDir],
-              command: "git clone",
-              timestamp: new Date().toISOString(),
-              type: "command_start",
-            })}\n\n`
-          )
-        );
-
-        child.stdout?.on("data", (data) => {
-          const output = data.toString();
-          stdout += output;
-
-          // Send real-time output
-          controller.enqueue(
-            new TextEncoder().encode(
-              `data: ${JSON.stringify({
-                command: "git clone",
-                data: output,
-                stream: "stdout",
-                type: "output",
-              })}\n\n`
-            )
-          );
-        });
-
-        child.stderr?.on("data", (data) => {
-          const output = data.toString();
-          stderr += output;
-
-          // Send real-time error output
-          controller.enqueue(
-            new TextEncoder().encode(
-              `data: ${JSON.stringify({
-                command: "git clone",
-                data: output,
-                stream: "stderr",
-                type: "output",
-              })}\n\n`
-            )
-          );
-        });
-
-        child.on("close", (code) => {
-          // Clear the active process reference
-          if (sessionId && sessions.has(sessionId)) {
-            const session = sessions.get(sessionId)!;
-            session.activeProcess = null;
-          }
-
-          console.log(
-            `[Server] Command completed: git clone, Exit code: ${code}`
-          );
-
-          // Send command completion event
-          controller.enqueue(
-            new TextEncoder().encode(
-              `data: ${JSON.stringify({
-                args: [branch, repoUrl, checkoutDir],
-                command: "git clone",
-                exitCode: code,
-                stderr,
-                stdout,
-                success: code === 0,
-                timestamp: new Date().toISOString(),
-                type: "command_complete",
-              })}\n\n`
-            )
-          );
-
-          controller.close();
-        });
-
-        child.on("error", (error) => {
-          // Clear the active process reference
-          if (sessionId && sessions.has(sessionId)) {
-            const session = sessions.get(sessionId)!;
-            session.activeProcess = null;
-          }
-
-          controller.enqueue(
-            new TextEncoder().encode(
-              `data: ${JSON.stringify({
-                args: [branch, repoUrl, checkoutDir],
-                command: "git clone",
-                error: error.message,
-                type: "error",
-              })}\n\n`
-            )
-          );
-
-          controller.close();
-        });
-      },
-    });
-
-    return new Response(stream, {
-      headers: {
-        "Cache-Control": "no-cache",
-        Connection: "keep-alive",
-        "Content-Type": "text/event-stream",
-        ...corsHeaders,
-      },
-    });
-  } catch (error) {
-    console.error(
-      "[Server] Error in handleStreamingGitCheckoutRequest:",
-      error
-    );
-    return new Response(
-      JSON.stringify({
-        error: "Failed to checkout repository",
-        message: error instanceof Error ? error.message : "Unknown error",
-      }),
-      {
-        headers: {
-          "Content-Type": "application/json",
-          ...corsHeaders,
-        },
-        status: 500,
-      }
-    );
-  }
-}
-
-async function handleMkdirRequest(
-  req: Request,
-  corsHeaders: Record<string, string>
-): Promise<Response> {
-  try {
-    const body = (await req.json()) as MkdirRequest;
-    const { path, recursive = false, sessionId } = body;
-
-    if (!path || typeof path !== "string") {
-      return new Response(
-        JSON.stringify({
-          error: "Path is required and must be a string",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 400,
-        }
-      );
-    }
-
-    // Basic safety check - prevent dangerous paths
-    const dangerousPatterns = [
-      /^\/$/, // Root directory
-      /^\/etc/, // System directories
-      /^\/var/, // System directories
-      /^\/usr/, // System directories
-      /^\/bin/, // System directories
-      /^\/sbin/, // System directories
-      /^\/boot/, // System directories
-      /^\/dev/, // System directories
-      /^\/proc/, // System directories
-      /^\/sys/, // System directories
-      /^\/tmp\/\.\./, // Path traversal attempts
-      /\.\./, // Path traversal attempts
-    ];
-
-    if (dangerousPatterns.some((pattern) => pattern.test(path))) {
-      return new Response(
-        JSON.stringify({
-          error: "Dangerous path not allowed",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 400,
-        }
-      );
-    }
-
-    console.log(
-      `[Server] Creating directory: ${path} (recursive: ${recursive})`
-    );
-
-    const result = await executeMkdir(path, recursive, sessionId);
-
-    return new Response(
-      JSON.stringify({
-        exitCode: result.exitCode,
-        path,
-        recursive,
-        stderr: result.stderr,
-        stdout: result.stdout,
-        success: result.success,
-        timestamp: new Date().toISOString(),
-      }),
-      {
-        headers: {
-          "Content-Type": "application/json",
-          ...corsHeaders,
-        },
-      }
-    );
-  } catch (error) {
-    console.error("[Server] Error in handleMkdirRequest:", error);
-    return new Response(
-      JSON.stringify({
-        error: "Failed to create directory",
-        message: error instanceof Error ? error.message : "Unknown error",
-      }),
-      {
-        headers: {
-          "Content-Type": "application/json",
-          ...corsHeaders,
-        },
-        status: 500,
-      }
-    );
-  }
-}
-
-async function handleStreamingMkdirRequest(
-  req: Request,
-  corsHeaders: Record<string, string>
-): Promise<Response> {
-  try {
-    const body = (await req.json()) as MkdirRequest;
-    const { path, recursive = false, sessionId } = body;
-
-    if (!path || typeof path !== "string") {
-      return new Response(
-        JSON.stringify({
-          error: "Path is required and must be a string",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 400,
-        }
-      );
-    }
-
-    // Basic safety check - prevent dangerous paths
-    const dangerousPatterns = [
-      /^\/$/, // Root directory
-      /^\/etc/, // System directories
-      /^\/var/, // System directories
-      /^\/usr/, // System directories
-      /^\/bin/, // System directories
-      /^\/sbin/, // System directories
-      /^\/boot/, // System directories
-      /^\/dev/, // System directories
-      /^\/proc/, // System directories
-      /^\/sys/, // System directories
-      /^\/tmp\/\.\./, // Path traversal attempts
-      /\.\./, // Path traversal attempts
-    ];
-
-    if (dangerousPatterns.some((pattern) => pattern.test(path))) {
-      return new Response(
-        JSON.stringify({
-          error: "Dangerous path not allowed",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 400,
-        }
-      );
-    }
-
-    console.log(
-      `[Server] Creating directory: ${path} (recursive: ${recursive})`
-    );
-
-    const stream = new ReadableStream({
-      start(controller) {
-        const args = recursive ? ["-p", path] : [path];
-        const child = spawn("mkdir", args, {
-          shell: true,
-          stdio: ["pipe", "pipe", "pipe"],
-        });
-
-        // Store the process reference for cleanup if sessionId is provided
-        if (sessionId && sessions.has(sessionId)) {
-          const session = sessions.get(sessionId)!;
-          session.activeProcess = child;
-        }
-
-        let stdout = "";
-        let stderr = "";
-
-        // Send command start event
-        controller.enqueue(
-          new TextEncoder().encode(
-            `data: ${JSON.stringify({
-              args,
-              command: "mkdir",
-              timestamp: new Date().toISOString(),
-              type: "command_start",
-            })}\n\n`
-          )
-        );
-
-        child.stdout?.on("data", (data) => {
-          const output = data.toString();
-          stdout += output;
-
-          // Send real-time output
-          controller.enqueue(
-            new TextEncoder().encode(
-              `data: ${JSON.stringify({
-                command: "mkdir",
-                data: output,
-                stream: "stdout",
-                type: "output",
-              })}\n\n`
-            )
-          );
-        });
-
-        child.stderr?.on("data", (data) => {
-          const output = data.toString();
-          stderr += output;
-
-          // Send real-time error output
-          controller.enqueue(
-            new TextEncoder().encode(
-              `data: ${JSON.stringify({
-                command: "mkdir",
-                data: output,
-                stream: "stderr",
-                type: "output",
-              })}\n\n`
-            )
-          );
-        });
-
-        child.on("close", (code) => {
-          // Clear the active process reference
-          if (sessionId && sessions.has(sessionId)) {
-            const session = sessions.get(sessionId)!;
-            session.activeProcess = null;
-          }
-
-          console.log(`[Server] Command completed: mkdir, Exit code: ${code}`);
-
-          // Send command completion event
-          controller.enqueue(
-            new TextEncoder().encode(
-              `data: ${JSON.stringify({
-                args,
-                command: "mkdir",
-                exitCode: code,
-                stderr,
-                stdout,
-                success: code === 0,
-                timestamp: new Date().toISOString(),
-                type: "command_complete",
-              })}\n\n`
-            )
-          );
-
-          controller.close();
-        });
-
-        child.on("error", (error) => {
-          // Clear the active process reference
-          if (sessionId && sessions.has(sessionId)) {
-            const session = sessions.get(sessionId)!;
-            session.activeProcess = null;
-          }
-
-          controller.enqueue(
-            new TextEncoder().encode(
-              `data: ${JSON.stringify({
-                args,
-                command: "mkdir",
-                error: error.message,
-                type: "error",
-              })}\n\n`
-            )
-          );
-
-          controller.close();
-        });
-      },
-    });
-
-    return new Response(stream, {
-      headers: {
-        "Cache-Control": "no-cache",
-        Connection: "keep-alive",
-        "Content-Type": "text/event-stream",
-        ...corsHeaders,
-      },
-    });
-  } catch (error) {
-    console.error("[Server] Error in handleStreamingMkdirRequest:", error);
-    return new Response(
-      JSON.stringify({
-        error: "Failed to create directory",
-        message: error instanceof Error ? error.message : "Unknown error",
-      }),
-      {
-        headers: {
-          "Content-Type": "application/json",
-          ...corsHeaders,
-        },
-        status: 500,
-      }
-    );
-  }
-}
-
-async function handleWriteFileRequest(
-  req: Request,
-  corsHeaders: Record<string, string>
-): Promise<Response> {
-  try {
-    const body = (await req.json()) as WriteFileRequest;
-    const { path, content, encoding = "utf-8", sessionId } = body;
-
-    if (!path || typeof path !== "string") {
-      return new Response(
-        JSON.stringify({
-          error: "Path is required and must be a string",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 400,
-        }
-      );
-    }
-
-    // Basic safety check - prevent dangerous paths
-    const dangerousPatterns = [
-      /^\/$/, // Root directory
-      /^\/etc/, // System directories
-      /^\/var/, // System directories
-      /^\/usr/, // System directories
-      /^\/bin/, // System directories
-      /^\/sbin/, // System directories
-      /^\/boot/, // System directories
-      /^\/dev/, // System directories
-      /^\/proc/, // System directories
-      /^\/sys/, // System directories
-      /^\/tmp\/\.\./, // Path traversal attempts
-      /\.\./, // Path traversal attempts
-    ];
-
-    if (dangerousPatterns.some((pattern) => pattern.test(path))) {
-      return new Response(
-        JSON.stringify({
-          error: "Dangerous path not allowed",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 400,
-        }
-      );
-    }
-
-    console.log(
-      `[Server] Writing file: ${path} (content length: ${content.length})`
-    );
-
-    const result = await executeWriteFile(path, content, encoding, sessionId);
-
-    return new Response(
-      JSON.stringify({
-        exitCode: result.exitCode,
-        path,
-        success: result.success,
-        timestamp: new Date().toISOString(),
-      }),
-      {
-        headers: {
-          "Content-Type": "application/json",
-          ...corsHeaders,
-        },
-      }
-    );
-  } catch (error) {
-    console.error("[Server] Error in handleWriteFileRequest:", error);
-    return new Response(
-      JSON.stringify({
-        error: "Failed to write file",
-        message: error instanceof Error ? error.message : "Unknown error",
-      }),
-      {
-        headers: {
-          "Content-Type": "application/json",
-          ...corsHeaders,
-        },
-        status: 500,
-      }
-    );
-  }
-}
-
-async function handleStreamingWriteFileRequest(
-  req: Request,
-  corsHeaders: Record<string, string>
-): Promise<Response> {
-  try {
-    const body = (await req.json()) as WriteFileRequest;
-    const { path, content, encoding = "utf-8", sessionId } = body;
-
-    if (!path || typeof path !== "string") {
-      return new Response(
-        JSON.stringify({
-          error: "Path is required and must be a string",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 400,
-        }
-      );
-    }
-
-    // Basic safety check - prevent dangerous paths
-    const dangerousPatterns = [
-      /^\/$/, // Root directory
-      /^\/etc/, // System directories
-      /^\/var/, // System directories
-      /^\/usr/, // System directories
-      /^\/bin/, // System directories
-      /^\/sbin/, // System directories
-      /^\/boot/, // System directories
-      /^\/dev/, // System directories
-      /^\/proc/, // System directories
-      /^\/sys/, // System directories
-      /^\/tmp\/\.\./, // Path traversal attempts
-      /\.\./, // Path traversal attempts
-    ];
-
-    if (dangerousPatterns.some((pattern) => pattern.test(path))) {
-      return new Response(
-        JSON.stringify({
-          error: "Dangerous path not allowed",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 400,
-        }
-      );
-    }
-
-    console.log(
-      `[Server] Writing file (streaming): ${path} (content length: ${content.length})`
-    );
-
-    const stream = new ReadableStream({
-      start(controller) {
-        (async () => {
-          try {
-            // Send command start event
-            controller.enqueue(
-              new TextEncoder().encode(
-                `data: ${JSON.stringify({
-                  path,
-                  timestamp: new Date().toISOString(),
-                  type: "command_start",
-                })}\n\n`
-              )
-            );
-
-            // Ensure the directory exists
-            const dir = dirname(path);
-            if (dir !== ".") {
-              await mkdir(dir, { recursive: true });
-
-              // Send directory creation event
-              controller.enqueue(
-                new TextEncoder().encode(
-                  `data: ${JSON.stringify({
-                    message: `Created directory: ${dir}`,
-                    type: "output",
-                  })}\n\n`
-                )
-              );
-            }
-
-            // Write the file
-            await writeFile(path, content, {
-              encoding: encoding as BufferEncoding,
-            });
-
-            console.log(`[Server] File written successfully: ${path}`);
-
-            // Send command completion event
-            controller.enqueue(
-              new TextEncoder().encode(
-                `data: ${JSON.stringify({
-                  path,
-                  success: true,
-                  timestamp: new Date().toISOString(),
-                  type: "command_complete",
-                })}\n\n`
-              )
-            );
-
-            controller.close();
-          } catch (error) {
-            console.error(`[Server] Error writing file: ${path}`, error);
-
-            controller.enqueue(
-              new TextEncoder().encode(
-                `data: ${JSON.stringify({
-                  error:
-                    error instanceof Error ? error.message : "Unknown error",
-                  path,
-                  type: "error",
-                })}\n\n`
-              )
-            );
-
-            controller.close();
-          }
-        })();
-      },
-    });
-
-    return new Response(stream, {
-      headers: {
-        "Cache-Control": "no-cache",
-        Connection: "keep-alive",
-        "Content-Type": "text/event-stream",
-        ...corsHeaders,
-      },
-    });
-  } catch (error) {
-    console.error("[Server] Error in handleStreamingWriteFileRequest:", error);
-    return new Response(
-      JSON.stringify({
-        error: "Failed to write file",
-        message: error instanceof Error ? error.message : "Unknown error",
-      }),
-      {
-        headers: {
-          "Content-Type": "application/json",
-          ...corsHeaders,
-        },
-        status: 500,
-      }
-    );
-  }
-}
-
-async function handleReadFileRequest(
-  req: Request,
-  corsHeaders: Record<string, string>
-): Promise<Response> {
-  try {
-    const body = (await req.json()) as ReadFileRequest;
-    const { path, encoding = "utf-8", sessionId } = body;
-
-    if (!path || typeof path !== "string") {
-      return new Response(
-        JSON.stringify({
-          error: "Path is required and must be a string",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 400,
-        }
-      );
-    }
-
-    // Basic safety check - prevent dangerous paths
-    const dangerousPatterns = [
-      /^\/$/, // Root directory
-      /^\/etc/, // System directories
-      /^\/var/, // System directories
-      /^\/usr/, // System directories
-      /^\/bin/, // System directories
-      /^\/sbin/, // System directories
-      /^\/boot/, // System directories
-      /^\/dev/, // System directories
-      /^\/proc/, // System directories
-      /^\/sys/, // System directories
-      /^\/tmp\/\.\./, // Path traversal attempts
-      /\.\./, // Path traversal attempts
-    ];
-
-    if (dangerousPatterns.some((pattern) => pattern.test(path))) {
-      return new Response(
-        JSON.stringify({
-          error: "Dangerous path not allowed",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 400,
-        }
-      );
-    }
-
-    console.log(`[Server] Reading file: ${path}`);
-
-    const result = await executeReadFile(path, encoding, sessionId);
-
-    return new Response(
-      JSON.stringify({
-        content: result.content,
-        exitCode: result.exitCode,
-        path,
-        success: result.success,
-        timestamp: new Date().toISOString(),
-      }),
-      {
-        headers: {
-          "Content-Type": "application/json",
-          ...corsHeaders,
-        },
-      }
-    );
-  } catch (error) {
-    console.error("[Server] Error in handleReadFileRequest:", error);
-    return new Response(
-      JSON.stringify({
-        error: "Failed to read file",
-        message: error instanceof Error ? error.message : "Unknown error",
-      }),
-      {
-        headers: {
-          "Content-Type": "application/json",
-          ...corsHeaders,
-        },
-        status: 500,
-      }
-    );
-  }
-}
-
-async function handleStreamingReadFileRequest(
-  req: Request,
-  corsHeaders: Record<string, string>
-): Promise<Response> {
-  try {
-    const body = (await req.json()) as ReadFileRequest;
-    const { path, encoding = "utf-8", sessionId } = body;
-
-    if (!path || typeof path !== "string") {
-      return new Response(
-        JSON.stringify({
-          error: "Path is required and must be a string",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 400,
-        }
-      );
-    }
-
-    // Basic safety check - prevent dangerous paths
-    const dangerousPatterns = [
-      /^\/$/, // Root directory
-      /^\/etc/, // System directories
-      /^\/var/, // System directories
-      /^\/usr/, // System directories
-      /^\/bin/, // System directories
-      /^\/sbin/, // System directories
-      /^\/boot/, // System directories
-      /^\/dev/, // System directories
-      /^\/proc/, // System directories
-      /^\/sys/, // System directories
-      /^\/tmp\/\.\./, // Path traversal attempts
-      /\.\./, // Path traversal attempts
-    ];
-
-    if (dangerousPatterns.some((pattern) => pattern.test(path))) {
-      return new Response(
-        JSON.stringify({
-          error: "Dangerous path not allowed",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 400,
-        }
-      );
-    }
-
-    console.log(`[Server] Reading file (streaming): ${path}`);
-
-    const stream = new ReadableStream({
-      start(controller) {
-        (async () => {
-          try {
-            // Send command start event
-            controller.enqueue(
-              new TextEncoder().encode(
-                `data: ${JSON.stringify({
-                  path,
-                  timestamp: new Date().toISOString(),
-                  type: "command_start",
-                })}\n\n`
-              )
-            );
-
-            // Read the file
-            const content = await readFile(path, {
-              encoding: encoding as BufferEncoding,
-            });
-
-            console.log(`[Server] File read successfully: ${path}`);
-
-            // Send command completion event
-            controller.enqueue(
-              new TextEncoder().encode(
-                `data: ${JSON.stringify({
-                  content,
-                  path,
-                  success: true,
-                  timestamp: new Date().toISOString(),
-                  type: "command_complete",
-                })}\n\n`
-              )
-            );
-
-            controller.close();
-          } catch (error) {
-            console.error(`[Server] Error reading file: ${path}`, error);
-
-            controller.enqueue(
-              new TextEncoder().encode(
-                `data: ${JSON.stringify({
-                  error:
-                    error instanceof Error ? error.message : "Unknown error",
-                  path,
-                  type: "error",
-                })}\n\n`
-              )
-            );
-
-            controller.close();
-          }
-        })();
-      },
-    });
-
-    return new Response(stream, {
-      headers: {
-        "Cache-Control": "no-cache",
-        Connection: "keep-alive",
-        "Content-Type": "text/event-stream",
-        ...corsHeaders,
-      },
-    });
-  } catch (error) {
-    console.error("[Server] Error in handleStreamingReadFileRequest:", error);
-    return new Response(
-      JSON.stringify({
-        error: "Failed to read file",
-        message: error instanceof Error ? error.message : "Unknown error",
-      }),
-      {
-        headers: {
-          "Content-Type": "application/json",
-          ...corsHeaders,
-        },
-        status: 500,
-      }
-    );
-  }
-}
-
-async function handleDeleteFileRequest(
-  req: Request,
-  corsHeaders: Record<string, string>
-): Promise<Response> {
-  try {
-    const body = (await req.json()) as DeleteFileRequest;
-    const { path, sessionId } = body;
-
-    if (!path || typeof path !== "string") {
-      return new Response(
-        JSON.stringify({
-          error: "Path is required and must be a string",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 400,
-        }
-      );
-    }
-
-    // Basic safety check - prevent dangerous paths
-    const dangerousPatterns = [
-      /^\/$/, // Root directory
-      /^\/etc/, // System directories
-      /^\/var/, // System directories
-      /^\/usr/, // System directories
-      /^\/bin/, // System directories
-      /^\/sbin/, // System directories
-      /^\/boot/, // System directories
-      /^\/dev/, // System directories
-      /^\/proc/, // System directories
-      /^\/sys/, // System directories
-      /^\/tmp\/\.\./, // Path traversal attempts
-      /\.\./, // Path traversal attempts
-    ];
-
-    if (dangerousPatterns.some((pattern) => pattern.test(path))) {
-      return new Response(
-        JSON.stringify({
-          error: "Dangerous path not allowed",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 400,
-        }
-      );
-    }
-
-    console.log(`[Server] Deleting file: ${path}`);
-
-    const result = await executeDeleteFile(path, sessionId);
-
-    return new Response(
-      JSON.stringify({
-        exitCode: result.exitCode,
-        path,
-        success: result.success,
-        timestamp: new Date().toISOString(),
-      }),
-      {
-        headers: {
-          "Content-Type": "application/json",
-          ...corsHeaders,
-        },
-      }
-    );
-  } catch (error) {
-    console.error("[Server] Error in handleDeleteFileRequest:", error);
-    return new Response(
-      JSON.stringify({
-        error: "Failed to delete file",
-        message: error instanceof Error ? error.message : "Unknown error",
-      }),
-      {
-        headers: {
-          "Content-Type": "application/json",
-          ...corsHeaders,
-        },
-        status: 500,
-      }
-    );
-  }
-}
-
-async function handleStreamingDeleteFileRequest(
-  req: Request,
-  corsHeaders: Record<string, string>
-): Promise<Response> {
-  try {
-    const body = (await req.json()) as DeleteFileRequest;
-    const { path, sessionId } = body;
-
-    if (!path || typeof path !== "string") {
-      return new Response(
-        JSON.stringify({
-          error: "Path is required and must be a string",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 400,
-        }
-      );
-    }
-
-    // Basic safety check - prevent dangerous paths
-    const dangerousPatterns = [
-      /^\/$/, // Root directory
-      /^\/etc/, // System directories
-      /^\/var/, // System directories
-      /^\/usr/, // System directories
-      /^\/bin/, // System directories
-      /^\/sbin/, // System directories
-      /^\/boot/, // System directories
-      /^\/dev/, // System directories
-      /^\/proc/, // System directories
-      /^\/sys/, // System directories
-      /^\/tmp\/\.\./, // Path traversal attempts
-      /\.\./, // Path traversal attempts
-    ];
-
-    if (dangerousPatterns.some((pattern) => pattern.test(path))) {
-      return new Response(
-        JSON.stringify({
-          error: "Dangerous path not allowed",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 400,
-        }
-      );
-    }
-
-    console.log(`[Server] Deleting file (streaming): ${path}`);
-
-    const stream = new ReadableStream({
-      start(controller) {
-        (async () => {
-          try {
-            // Send command start event
-            controller.enqueue(
-              new TextEncoder().encode(
-                `data: ${JSON.stringify({
-                  path,
-                  timestamp: new Date().toISOString(),
-                  type: "command_start",
-                })}\n\n`
-              )
-            );
-
-            // Delete the file
-            await executeDeleteFile(path, sessionId);
-
-            console.log(`[Server] File deleted successfully: ${path}`);
-
-            // Send command completion event
-            controller.enqueue(
-              new TextEncoder().encode(
-                `data: ${JSON.stringify({
-                  path,
-                  success: true,
-                  timestamp: new Date().toISOString(),
-                  type: "command_complete",
-                })}\n\n`
-              )
-            );
-
-            controller.close();
-          } catch (error) {
-            console.error(`[Server] Error deleting file: ${path}`, error);
-
-            controller.enqueue(
-              new TextEncoder().encode(
-                `data: ${JSON.stringify({
-                  error:
-                    error instanceof Error ? error.message : "Unknown error",
-                  path,
-                  type: "error",
-                })}\n\n`
-              )
-            );
-
-            controller.close();
-          }
-        })();
-      },
-    });
-
-    return new Response(stream, {
-      headers: {
-        "Cache-Control": "no-cache",
-        Connection: "keep-alive",
-        "Content-Type": "text/event-stream",
-        ...corsHeaders,
-      },
-    });
-  } catch (error) {
-    console.error("[Server] Error in handleStreamingDeleteFileRequest:", error);
-    return new Response(
-      JSON.stringify({
-        error: "Failed to delete file",
-        message: error instanceof Error ? error.message : "Unknown error",
-      }),
-      {
-        headers: {
-          "Content-Type": "application/json",
-          ...corsHeaders,
-        },
-        status: 500,
-      }
-    );
-  }
-}
-
-async function handleRenameFileRequest(
-  req: Request,
-  corsHeaders: Record<string, string>
-): Promise<Response> {
-  try {
-    const body = (await req.json()) as RenameFileRequest;
-    const { oldPath, newPath, sessionId } = body;
-
-    if (!oldPath || typeof oldPath !== "string") {
-      return new Response(
-        JSON.stringify({
-          error: "Old path is required and must be a string",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 400,
-        }
-      );
-    }
-
-    if (!newPath || typeof newPath !== "string") {
-      return new Response(
-        JSON.stringify({
-          error: "New path is required and must be a string",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 400,
-        }
-      );
-    }
-
-    // Basic safety check - prevent dangerous paths
-    const dangerousPatterns = [
-      /^\/$/, // Root directory
-      /^\/etc/, // System directories
-      /^\/var/, // System directories
-      /^\/usr/, // System directories
-      /^\/bin/, // System directories
-      /^\/sbin/, // System directories
-      /^\/boot/, // System directories
-      /^\/dev/, // System directories
-      /^\/proc/, // System directories
-      /^\/sys/, // System directories
-      /^\/tmp\/\.\./, // Path traversal attempts
-      /\.\./, // Path traversal attempts
-    ];
-
-    if (
-      dangerousPatterns.some(
-        (pattern) => pattern.test(oldPath) || pattern.test(newPath)
-      )
-    ) {
-      return new Response(
-        JSON.stringify({
-          error: "Dangerous path not allowed",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 400,
-        }
-      );
-    }
-
-    console.log(`[Server] Renaming file: ${oldPath} -> ${newPath}`);
-
-    const result = await executeRenameFile(oldPath, newPath, sessionId);
-
-    return new Response(
-      JSON.stringify({
-        exitCode: result.exitCode,
-        newPath,
-        oldPath,
-        success: result.success,
-        timestamp: new Date().toISOString(),
-      }),
-      {
-        headers: {
-          "Content-Type": "application/json",
-          ...corsHeaders,
-        },
-      }
-    );
-  } catch (error) {
-    console.error("[Server] Error in handleRenameFileRequest:", error);
-    return new Response(
-      JSON.stringify({
-        error: "Failed to rename file",
-        message: error instanceof Error ? error.message : "Unknown error",
-      }),
-      {
-        headers: {
-          "Content-Type": "application/json",
-          ...corsHeaders,
-        },
-        status: 500,
-      }
-    );
-  }
-}
-
-async function handleStreamingRenameFileRequest(
-  req: Request,
-  corsHeaders: Record<string, string>
-): Promise<Response> {
-  try {
-    const body = (await req.json()) as RenameFileRequest;
-    const { oldPath, newPath, sessionId } = body;
-
-    if (!oldPath || typeof oldPath !== "string") {
-      return new Response(
-        JSON.stringify({
-          error: "Old path is required and must be a string",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 400,
-        }
-      );
-    }
-
-    if (!newPath || typeof newPath !== "string") {
-      return new Response(
-        JSON.stringify({
-          error: "New path is required and must be a string",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 400,
-        }
-      );
-    }
-
-    // Basic safety check - prevent dangerous paths
-    const dangerousPatterns = [
-      /^\/$/, // Root directory
-      /^\/etc/, // System directories
-      /^\/var/, // System directories
-      /^\/usr/, // System directories
-      /^\/bin/, // System directories
-      /^\/sbin/, // System directories
-      /^\/boot/, // System directories
-      /^\/dev/, // System directories
-      /^\/proc/, // System directories
-      /^\/sys/, // System directories
-      /^\/tmp\/\.\./, // Path traversal attempts
-      /\.\./, // Path traversal attempts
-    ];
-
-    if (
-      dangerousPatterns.some(
-        (pattern) => pattern.test(oldPath) || pattern.test(newPath)
-      )
-    ) {
-      return new Response(
-        JSON.stringify({
-          error: "Dangerous path not allowed",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 400,
-        }
-      );
-    }
-
-    console.log(`[Server] Renaming file (streaming): ${oldPath} -> ${newPath}`);
-
-    const stream = new ReadableStream({
-      start(controller) {
-        (async () => {
-          try {
-            // Send command start event
-            controller.enqueue(
-              new TextEncoder().encode(
-                `data: ${JSON.stringify({
-                  newPath,
-                  oldPath,
-                  timestamp: new Date().toISOString(),
-                  type: "command_start",
-                })}\n\n`
-              )
-            );
-
-            // Rename the file
-            await executeRenameFile(oldPath, newPath, sessionId);
-
-            console.log(
-              `[Server] File renamed successfully: ${oldPath} -> ${newPath}`
-            );
-
-            // Send command completion event
-            controller.enqueue(
-              new TextEncoder().encode(
-                `data: ${JSON.stringify({
-                  newPath,
-                  oldPath,
-                  success: true,
-                  timestamp: new Date().toISOString(),
-                  type: "command_complete",
-                })}\n\n`
-              )
-            );
-
-            controller.close();
-          } catch (error) {
-            console.error(
-              `[Server] Error renaming file: ${oldPath} -> ${newPath}`,
-              error
-            );
-
-            controller.enqueue(
-              new TextEncoder().encode(
-                `data: ${JSON.stringify({
-                  error:
-                    error instanceof Error ? error.message : "Unknown error",
-                  newPath,
-                  oldPath,
-                  type: "error",
-                })}\n\n`
-              )
-            );
-
-            controller.close();
-          }
-        })();
-      },
-    });
-
-    return new Response(stream, {
-      headers: {
-        "Cache-Control": "no-cache",
-        Connection: "keep-alive",
-        "Content-Type": "text/event-stream",
-        ...corsHeaders,
-      },
-    });
-  } catch (error) {
-    console.error("[Server] Error in handleStreamingRenameFileRequest:", error);
-    return new Response(
-      JSON.stringify({
-        error: "Failed to rename file",
-        message: error instanceof Error ? error.message : "Unknown error",
-      }),
-      {
-        headers: {
-          "Content-Type": "application/json",
-          ...corsHeaders,
-        },
-        status: 500,
-      }
-    );
-  }
-}
-
-async function handleMoveFileRequest(
-  req: Request,
-  corsHeaders: Record<string, string>
-): Promise<Response> {
-  try {
-    const body = (await req.json()) as MoveFileRequest;
-    const { sourcePath, destinationPath, sessionId } = body;
-
-    if (!sourcePath || typeof sourcePath !== "string") {
-      return new Response(
-        JSON.stringify({
-          error: "Source path is required and must be a string",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 400,
-        }
-      );
-    }
-
-    if (!destinationPath || typeof destinationPath !== "string") {
-      return new Response(
-        JSON.stringify({
-          error: "Destination path is required and must be a string",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 400,
-        }
-      );
-    }
-
-    // Basic safety check - prevent dangerous paths
-    const dangerousPatterns = [
-      /^\/$/, // Root directory
-      /^\/etc/, // System directories
-      /^\/var/, // System directories
-      /^\/usr/, // System directories
-      /^\/bin/, // System directories
-      /^\/sbin/, // System directories
-      /^\/boot/, // System directories
-      /^\/dev/, // System directories
-      /^\/proc/, // System directories
-      /^\/sys/, // System directories
-      /^\/tmp\/\.\./, // Path traversal attempts
-      /\.\./, // Path traversal attempts
-    ];
-
-    if (
-      dangerousPatterns.some(
-        (pattern) => pattern.test(sourcePath) || pattern.test(destinationPath)
-      )
-    ) {
-      return new Response(
-        JSON.stringify({
-          error: "Dangerous path not allowed",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 400,
-        }
-      );
-    }
-
-    console.log(`[Server] Moving file: ${sourcePath} -> ${destinationPath}`);
-
-    const result = await executeMoveFile(
-      sourcePath,
-      destinationPath,
-      sessionId
-    );
-
-    return new Response(
-      JSON.stringify({
-        destinationPath,
-        exitCode: result.exitCode,
-        sourcePath,
-        success: result.success,
-        timestamp: new Date().toISOString(),
-      }),
-      {
-        headers: {
-          "Content-Type": "application/json",
-          ...corsHeaders,
-        },
-      }
-    );
-  } catch (error) {
-    console.error("[Server] Error in handleMoveFileRequest:", error);
-    return new Response(
-      JSON.stringify({
-        error: "Failed to move file",
-        message: error instanceof Error ? error.message : "Unknown error",
-      }),
-      {
-        headers: {
-          "Content-Type": "application/json",
-          ...corsHeaders,
-        },
-        status: 500,
-      }
-    );
-  }
-}
-
-async function handleStreamingMoveFileRequest(
-  req: Request,
-  corsHeaders: Record<string, string>
-): Promise<Response> {
-  try {
-    const body = (await req.json()) as MoveFileRequest;
-    const { sourcePath, destinationPath, sessionId } = body;
-
-    if (!sourcePath || typeof sourcePath !== "string") {
-      return new Response(
-        JSON.stringify({
-          error: "Source path is required and must be a string",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 400,
-        }
-      );
-    }
-
-    if (!destinationPath || typeof destinationPath !== "string") {
-      return new Response(
-        JSON.stringify({
-          error: "Destination path is required and must be a string",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 400,
-        }
-      );
-    }
-
-    // Basic safety check - prevent dangerous paths
-    const dangerousPatterns = [
-      /^\/$/, // Root directory
-      /^\/etc/, // System directories
-      /^\/var/, // System directories
-      /^\/usr/, // System directories
-      /^\/bin/, // System directories
-      /^\/sbin/, // System directories
-      /^\/boot/, // System directories
-      /^\/dev/, // System directories
-      /^\/proc/, // System directories
-      /^\/sys/, // System directories
-      /^\/tmp\/\.\./, // Path traversal attempts
-      /\.\./, // Path traversal attempts
-    ];
-
-    if (
-      dangerousPatterns.some(
-        (pattern) => pattern.test(sourcePath) || pattern.test(destinationPath)
-      )
-    ) {
-      return new Response(
-        JSON.stringify({
-          error: "Dangerous path not allowed",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 400,
-        }
-      );
-    }
-
-    console.log(
-      `[Server] Moving file (streaming): ${sourcePath} -> ${destinationPath}`
-    );
-
-    const stream = new ReadableStream({
-      start(controller) {
-        (async () => {
-          try {
-            // Send command start event
-            controller.enqueue(
-              new TextEncoder().encode(
-                `data: ${JSON.stringify({
-                  destinationPath,
-                  sourcePath,
-                  timestamp: new Date().toISOString(),
-                  type: "command_start",
-                })}\n\n`
-              )
-            );
-
-            // Move the file
-            await executeMoveFile(sourcePath, destinationPath, sessionId);
-
-            console.log(
-              `[Server] File moved successfully: ${sourcePath} -> ${destinationPath}`
-            );
-
-            // Send command completion event
-            controller.enqueue(
-              new TextEncoder().encode(
-                `data: ${JSON.stringify({
-                  destinationPath,
-                  sourcePath,
-                  success: true,
-                  timestamp: new Date().toISOString(),
-                  type: "command_complete",
-                })}\n\n`
-              )
-            );
-
-            controller.close();
-          } catch (error) {
-            console.error(
-              `[Server] Error moving file: ${sourcePath} -> ${destinationPath}`,
-              error
-            );
-
-            controller.enqueue(
-              new TextEncoder().encode(
-                `data: ${JSON.stringify({
-                  destinationPath,
-                  error:
-                    error instanceof Error ? error.message : "Unknown error",
-                  sourcePath,
-                  type: "error",
-                })}\n\n`
-              )
-            );
-
-            controller.close();
-          }
-        })();
-      },
-    });
-
-    return new Response(stream, {
-      headers: {
-        "Cache-Control": "no-cache",
-        Connection: "keep-alive",
-        "Content-Type": "text/event-stream",
-        ...corsHeaders,
-      },
-    });
-  } catch (error) {
-    console.error("[Server] Error in handleStreamingMoveFileRequest:", error);
-    return new Response(
-      JSON.stringify({
-        error: "Failed to move file",
-        message: error instanceof Error ? error.message : "Unknown error",
-      }),
-      {
-        headers: {
-          "Content-Type": "application/json",
-          ...corsHeaders,
-        },
-        status: 500,
-      }
-    );
-  }
-}
-
-function executeCommand(
-  command: string,
-  args: string[],
-  sessionId?: string,
-  background?: boolean
-): Promise<{
-  success: boolean;
-  stdout: string;
-  stderr: string;
-  exitCode: number;
-}> {
-  return new Promise((resolve, reject) => {
-    const spawnOptions: SpawnOptions = {
-      shell: true,
-      stdio: ["pipe", "pipe", "pipe"] as const,
-      detached: background || false,
-    };
-
-    const child = spawn(command, args, spawnOptions);
-
-    // Store the process reference for cleanup if sessionId is provided
-    if (sessionId && sessions.has(sessionId)) {
-      const session = sessions.get(sessionId)!;
-      session.activeProcess = child;
-    }
-
-    let stdout = "";
-    let stderr = "";
-
-    child.stdout?.on("data", (data) => {
-      stdout += data.toString();
-    });
-
-    child.stderr?.on("data", (data) => {
-      stderr += data.toString();
-    });
-
-    if (background) {
-      // For background processes, unref and return quickly
-      child.unref();
-
-      // Collect initial output for 100ms then return
-      setTimeout(() => {
-        resolve({
-          exitCode: 0, // Process is still running
-          stderr,
-          stdout,
-          success: true,
-        });
-      }, 100);
-
-      // Still handle errors
-      child.on("error", (error) => {
-        console.error(`[Server] Background process error: ${command}`, error);
-        // Don't reject since we might have already resolved
-      });
-    } else {
-      // Normal synchronous execution
-      child.on("close", (code) => {
-        // Clear the active process reference
-        if (sessionId && sessions.has(sessionId)) {
-          const session = sessions.get(sessionId)!;
-          session.activeProcess = null;
-        }
-
-        console.log(`[Server] Command completed: ${command}, Exit code: ${code}`);
-
-        resolve({
-          exitCode: code || 0,
-          stderr,
-          stdout,
-          success: code === 0,
-        });
-      });
-
-      child.on("error", (error) => {
-        // Clear the active process reference
-        if (sessionId && sessions.has(sessionId)) {
-          const session = sessions.get(sessionId)!;
-          session.activeProcess = null;
-        }
-
-        reject(error);
-      });
-    }
-  });
-}
-
-function executeGitCheckout(
-  repoUrl: string,
-  branch: string,
-  targetDir: string,
-  sessionId?: string
-): Promise<{
-  success: boolean;
-  stdout: string;
-  stderr: string;
-  exitCode: number;
-}> {
-  return new Promise((resolve, reject) => {
-    // First, clone the repository
-    const cloneChild = spawn(
-      "git",
-      ["clone", "-b", branch, repoUrl, targetDir],
-      {
-        shell: true,
-        stdio: ["pipe", "pipe", "pipe"],
-      }
-    );
-
-    // Store the process reference for cleanup if sessionId is provided
-    if (sessionId && sessions.has(sessionId)) {
-      const session = sessions.get(sessionId)!;
-      session.activeProcess = cloneChild;
-    }
-
-    let stdout = "";
-    let stderr = "";
-
-    cloneChild.stdout?.on("data", (data) => {
-      stdout += data.toString();
-    });
-
-    cloneChild.stderr?.on("data", (data) => {
-      stderr += data.toString();
-    });
-
-    cloneChild.on("close", (code) => {
-      // Clear the active process reference
-      if (sessionId && sessions.has(sessionId)) {
-        const session = sessions.get(sessionId)!;
-        session.activeProcess = null;
-      }
-
-      if (code === 0) {
-        console.log(
-          `[Server] Repository cloned successfully: ${repoUrl} to ${targetDir}`
-        );
-        resolve({
-          exitCode: code || 0,
-          stderr,
-          stdout,
-          success: true,
-        });
-      } else {
-        console.error(
-          `[Server] Failed to clone repository: ${repoUrl}, Exit code: ${code}`
-        );
-        resolve({
-          exitCode: code || 1,
-          stderr,
-          stdout,
-          success: false,
-        });
-      }
-    });
-
-    cloneChild.on("error", (error) => {
-      // Clear the active process reference
-      if (sessionId && sessions.has(sessionId)) {
-        const session = sessions.get(sessionId)!;
-        session.activeProcess = null;
-      }
-
-      console.error(`[Server] Error cloning repository: ${repoUrl}`, error);
-      reject(error);
-    });
-  });
-}
-
-function executeMkdir(
-  path: string,
-  recursive: boolean,
-  sessionId?: string
-): Promise<{
-  success: boolean;
-  stdout: string;
-  stderr: string;
-  exitCode: number;
-}> {
-  return new Promise((resolve, reject) => {
-    const args = recursive ? ["-p", path] : [path];
-    const mkdirChild = spawn("mkdir", args, {
-      shell: true,
-      stdio: ["pipe", "pipe", "pipe"],
-    });
-
-    // Store the process reference for cleanup if sessionId is provided
-    if (sessionId && sessions.has(sessionId)) {
-      const session = sessions.get(sessionId)!;
-      session.activeProcess = mkdirChild;
-    }
-
-    let stdout = "";
-    let stderr = "";
-
-    mkdirChild.stdout?.on("data", (data) => {
-      stdout += data.toString();
-    });
-
-    mkdirChild.stderr?.on("data", (data) => {
-      stderr += data.toString();
-    });
-
-    mkdirChild.on("close", (code) => {
-      // Clear the active process reference
-      if (sessionId && sessions.has(sessionId)) {
-        const session = sessions.get(sessionId)!;
-        session.activeProcess = null;
-      }
-
-      if (code === 0) {
-        console.log(`[Server] Directory created successfully: ${path}`);
-        resolve({
-          exitCode: code || 0,
-          stderr,
-          stdout,
-          success: true,
-        });
-      } else {
-        console.error(
-          `[Server] Failed to create directory: ${path}, Exit code: ${code}`
-        );
-        resolve({
-          exitCode: code || 1,
-          stderr,
-          stdout,
-          success: false,
-        });
-      }
-    });
-
-    mkdirChild.on("error", (error) => {
-      // Clear the active process reference
-      if (sessionId && sessions.has(sessionId)) {
-        const session = sessions.get(sessionId)!;
-        session.activeProcess = null;
-      }
-
-      console.error(`[Server] Error creating directory: ${path}`, error);
-      reject(error);
-    });
-  });
-}
-
-function executeWriteFile(
-  path: string,
-  content: string,
-  encoding: string,
-  sessionId?: string
-): Promise<{
-  success: boolean;
-  exitCode: number;
-}> {
-  return new Promise((resolve, reject) => {
-    (async () => {
-      try {
-        // Ensure the directory exists
-        const dir = dirname(path);
-        if (dir !== ".") {
-          await mkdir(dir, { recursive: true });
-        }
-
-        // Write the file
-        await writeFile(path, content, {
-          encoding: encoding as BufferEncoding,
-        });
-
-        console.log(`[Server] File written successfully: ${path}`);
-        resolve({
-          exitCode: 0,
-          success: true,
-        });
-      } catch (error) {
-        console.error(`[Server] Error writing file: ${path}`, error);
-        reject(error);
-      }
-    })();
-  });
-}
-
-function executeReadFile(
-  path: string,
-  encoding: string,
-  sessionId?: string
-): Promise<{
-  success: boolean;
-  exitCode: number;
-  content: string;
-}> {
-  return new Promise((resolve, reject) => {
-    (async () => {
-      try {
-        // Read the file
-        const content = await readFile(path, {
-          encoding: encoding as BufferEncoding,
-        });
-
-        console.log(`[Server] File read successfully: ${path}`);
-        resolve({
-          content,
-          exitCode: 0,
-          success: true,
-        });
-      } catch (error) {
-        console.error(`[Server] Error reading file: ${path}`, error);
-        reject(error);
-      }
-    })();
-  });
-}
-
-function executeDeleteFile(
-  path: string,
-  sessionId?: string
-): Promise<{
-  success: boolean;
-  exitCode: number;
-}> {
-  return new Promise((resolve, reject) => {
-    (async () => {
-      try {
-        // Delete the file
-        await unlink(path);
-
-        console.log(`[Server] File deleted successfully: ${path}`);
-        resolve({
-          exitCode: 0,
-          success: true,
-        });
-      } catch (error) {
-        console.error(`[Server] Error deleting file: ${path}`, error);
-        reject(error);
-      }
-    })();
-  });
-}
-
-function executeRenameFile(
-  oldPath: string,
-  newPath: string,
-  sessionId?: string
-): Promise<{
-  success: boolean;
-  exitCode: number;
-}> {
-  return new Promise((resolve, reject) => {
-    (async () => {
-      try {
-        // Rename the file
-        await rename(oldPath, newPath);
-
-        console.log(
-          `[Server] File renamed successfully: ${oldPath} -> ${newPath}`
-        );
-        resolve({
-          exitCode: 0,
-          success: true,
-        });
-      } catch (error) {
-        console.error(
-          `[Server] Error renaming file: ${oldPath} -> ${newPath}`,
-          error
-        );
-        reject(error);
-      }
-    })();
-  });
-}
-
-function executeMoveFile(
-  sourcePath: string,
-  destinationPath: string,
-  sessionId?: string
-): Promise<{
-  success: boolean;
-  exitCode: number;
-}> {
-  return new Promise((resolve, reject) => {
-    (async () => {
-      try {
-        // Move the file
-        await rename(sourcePath, destinationPath);
-
-        console.log(
-          `[Server] File moved successfully: ${sourcePath} -> ${destinationPath}`
-        );
-        resolve({
-          exitCode: 0,
-          success: true,
-        });
-      } catch (error) {
-        console.error(
-          `[Server] Error moving file: ${sourcePath} -> ${destinationPath}`,
-          error
-        );
-        reject(error);
-      }
-    })();
-  });
-}
-
-async function handleExposePortRequest(
-  req: Request,
-  corsHeaders: Record<string, string>
-): Promise<Response> {
-  try {
-    const body = (await req.json()) as ExposePortRequest;
-    const { port, name } = body;
-
-    if (!port || typeof port !== "number") {
-      return new Response(
-        JSON.stringify({
-          error: "Port is required and must be a number",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 400,
-        }
-      );
-    }
-
-    // Validate port range
-    if (port < 1 || port > 65535) {
-      return new Response(
-        JSON.stringify({
-          error: "Port must be between 1 and 65535",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 400,
-        }
-      );
-    }
-
-    // Store the exposed port
-    exposedPorts.set(port, { name, exposedAt: new Date() });
-
-    console.log(`[Server] Exposed port: ${port}${name ? ` (${name})` : ""}`);
-
-    return new Response(
-      JSON.stringify({
-        port,
-        name,
-        exposedAt: new Date().toISOString(),
-        success: true,
-        timestamp: new Date().toISOString(),
-      }),
-      {
-        headers: {
-          "Content-Type": "application/json",
-          ...corsHeaders,
-        },
-      }
-    );
-  } catch (error) {
-    console.error("[Server] Error in handleExposePortRequest:", error);
-    return new Response(
-      JSON.stringify({
-        error: "Failed to expose port",
-        message: error instanceof Error ? error.message : "Unknown error",
-      }),
-      {
-        headers: {
-          "Content-Type": "application/json",
-          ...corsHeaders,
-        },
-        status: 500,
-      }
-    );
-  }
-}
-
-async function handleUnexposePortRequest(
-  req: Request,
-  corsHeaders: Record<string, string>
-): Promise<Response> {
-  try {
-    const body = (await req.json()) as UnexposePortRequest;
-    const { port } = body;
-
-    if (!port || typeof port !== "number") {
-      return new Response(
-        JSON.stringify({
-          error: "Port is required and must be a number",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 400,
-        }
-      );
-    }
-
-    // Check if port is exposed
-    if (!exposedPorts.has(port)) {
-      return new Response(
-        JSON.stringify({
-          error: "Port is not exposed",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 404,
-        }
-      );
-    }
-
-    // Remove the exposed port
-    exposedPorts.delete(port);
-
-    console.log(`[Server] Unexposed port: ${port}`);
-
-    return new Response(
-      JSON.stringify({
-        port,
-        success: true,
-        timestamp: new Date().toISOString(),
-      }),
-      {
-        headers: {
-          "Content-Type": "application/json",
-          ...corsHeaders,
-        },
-      }
-    );
-  } catch (error) {
-    console.error("[Server] Error in handleUnexposePortRequest:", error);
-    return new Response(
-      JSON.stringify({
-        error: "Failed to unexpose port",
-        message: error instanceof Error ? error.message : "Unknown error",
-      }),
-      {
-        headers: {
-          "Content-Type": "application/json",
-          ...corsHeaders,
-        },
-        status: 500,
-      }
-    );
-  }
-}
-
-async function handleGetExposedPortsRequest(
-  req: Request,
-  corsHeaders: Record<string, string>
-): Promise<Response> {
-  try {
-    const ports = Array.from(exposedPorts.entries()).map(([port, info]) => ({
-      port,
-      name: info.name,
-      exposedAt: info.exposedAt.toISOString(),
-    }));
-
-    return new Response(
-      JSON.stringify({
-        ports,
-        count: ports.length,
-        timestamp: new Date().toISOString(),
-      }),
-      {
-        headers: {
-          "Content-Type": "application/json",
-          ...corsHeaders,
-        },
-      }
-    );
-  } catch (error) {
-    console.error("[Server] Error in handleGetExposedPortsRequest:", error);
-    return new Response(
-      JSON.stringify({
-        error: "Failed to get exposed ports",
-        message: error instanceof Error ? error.message : "Unknown error",
-      }),
-      {
-        headers: {
-          "Content-Type": "application/json",
-          ...corsHeaders,
-        },
-        status: 500,
-      }
-    );
-  }
-}
-
-async function handleProxyRequest(
-  req: Request,
-  corsHeaders: Record<string, string>
-): Promise<Response> {
-  try {
-    const url = new URL(req.url);
-    const pathParts = url.pathname.split("/");
-
-    // Extract port from path like /proxy/3000/...
-    if (pathParts.length < 3) {
-      return new Response(
-        JSON.stringify({
-          error: "Invalid proxy path",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 400,
-        }
-      );
-    }
-
-    const port = parseInt(pathParts[2]);
-    if (!port || Number.isNaN(port)) {
-      return new Response(
-        JSON.stringify({
-          error: "Invalid port in proxy path",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 400,
-        }
-      );
-    }
-
-    // Check if port is exposed
-    if (!exposedPorts.has(port)) {
-      return new Response(
-        JSON.stringify({
-          error: `Port ${port} is not exposed`,
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 404,
-        }
-      );
-    }
-
-    // Construct the target URL
-    const targetPath = `/${pathParts.slice(3).join("/")}`;
-    // Use 127.0.0.1 instead of localhost for more reliable container networking
-    const targetUrl = `http://127.0.0.1:${port}${targetPath}${url.search}`;
-
-    console.log(`[Server] Proxying request to: ${targetUrl}`);
-    console.log(`[Server] Method: ${req.method}, Port: ${port}, Path: ${targetPath}`);
-
-    try {
-      // Forward the request to the target port
-      const targetResponse = await fetch(targetUrl, {
-        method: req.method,
-        headers: req.headers,
-        body: req.body,
-      });
-
-      // Return the response from the target
-      return new Response(targetResponse.body, {
-        status: targetResponse.status,
-        statusText: targetResponse.statusText,
-        headers: {
-          ...Object.fromEntries(targetResponse.headers.entries()),
-          ...corsHeaders,
-        },
-      });
-    } catch (fetchError) {
-      console.error(`[Server] Error proxying to port ${port}:`, fetchError);
-      return new Response(
-        JSON.stringify({
-          error: `Service on port ${port} is not responding`,
-          message: fetchError instanceof Error ? fetchError.message : "Unknown error",
-        }),
-        {
-          headers: {
-            "Content-Type": "application/json",
-            ...corsHeaders,
-          },
-          status: 502,
-        }
-      );
-    }
-  } catch (error) {
-    console.error("[Server] Error in handleProxyRequest:", error);
-    return new Response(
-      JSON.stringify({
-        error: "Failed to proxy request",
-        message: error instanceof Error ? error.message : "Unknown error",
-      }),
-      {
-        headers: {
-          "Content-Type": "application/json",
-          ...corsHeaders,
-        },
-        status: 500,
-      }
-    );
-  }
-}
-
 console.log(`🚀 Bun server running on http://0.0.0.0:${server.port}`);
 console.log(`📡 HTTP API endpoints available:`);
 console.log(`   POST /api/session/create - Create a new session`);
@@ -3173,24 +575,27 @@ console.log(`   GET  /api/session/list - List all sessions`);
 console.log(`   POST /api/execute - Execute a command (non-streaming)`);
 console.log(`   POST /api/execute/stream - Execute a command (streaming)`);
 console.log(`   POST /api/git/checkout - Checkout a git repository`);
-console.log(
-  `   POST /api/git/checkout/stream - Checkout a git repository (streaming)`
-);
 console.log(`   POST /api/mkdir - Create a directory`);
-console.log(`   POST /api/mkdir/stream - Create a directory (streaming)`);
 console.log(`   POST /api/write - Write a file`);
-console.log(`   POST /api/write/stream - Write a file (streaming)`);
 console.log(`   POST /api/read - Read a file`);
-console.log(`   POST /api/read/stream - Read a file (streaming)`);
 console.log(`   POST /api/delete - Delete a file`);
-console.log(`   POST /api/delete/stream - Delete a file (streaming)`);
 console.log(`   POST /api/rename - Rename a file`);
-console.log(`   POST /api/rename/stream - Rename a file (streaming)`);
 console.log(`   POST /api/move - Move a file`);
-console.log(`   POST /api/move/stream - Move a file (streaming)`);
 console.log(`   POST /api/expose-port - Expose a port for external access`);
 console.log(`   DELETE /api/unexpose-port - Unexpose a port`);
 console.log(`   GET  /api/exposed-ports - List exposed ports`);
+console.log(`   POST /api/process/start - Start a background process`);
+console.log(`   GET  /api/process/list - List all processes`);
+console.log(`   GET  /api/process/{id} - Get process status`);
+console.log(`   DELETE /api/process/{id} - Kill a process`);
+console.log(`   GET  /api/process/{id}/logs - Get process logs`);
+console.log(`   GET  /api/process/{id}/stream - Stream process logs (SSE)`);
+console.log(`   DELETE /api/process/kill-all - Kill all processes`);
 console.log(`   GET  /proxy/{port}/* - Proxy requests to exposed ports`);
+console.log(`   POST /api/contexts - Create a code execution context`);
+console.log(`   GET  /api/contexts - List all contexts`);
+console.log(`   DELETE /api/contexts/{id} - Delete a context`);
+console.log(
+  `   POST /api/execute/code - Execute code in a context (streaming)`
+);
 console.log(`   GET  /api/ping - Health check`);
-console.log(`   GET  /api/commands - List available commands`);