@datnguyennnx/localterm-server 0.0.15

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Aiden Bai
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dist/agent-rpc.d.ts

@@ -0,0 +1,27 @@
+import { type CommandBoundary } from "./utils/parse-osc133-from-chunk.js";
+import { Session } from "./session.js";
+import { SessionRegistry } from "./session-registry.js";
+export interface ManagedSession {
+    id: string;
+    session: Session;
+    outputBuffer: string[];
+    outputOffset: number;
+    lastBoundary: CommandBoundary | null;
+}
+export interface RpcContext {
+    registry: SessionRegistry;
+    allowDestructiveCommands: boolean;
+    sendResponse: (id: string, result?: unknown, error?: string) => void;
+}
+export interface RpcRequest {
+    id: string;
+    method: string;
+    params?: Record<string, unknown>;
+}
+export declare const handleRpcRequest: (ctx: RpcContext, request: RpcRequest) => void;
+/**
+ * Map of session ID → ManagedSession for all sessions created via RPC.
+ * These are separate from the human-connection sessions managed by the registry.
+ */
+export declare const activeSessions: Map<string, ManagedSession>;
+//# sourceMappingURL=agent-rpc.d.ts.map

package/dist/agent-rpc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-rpc.d.ts","sourceRoot":"","sources":["../src/agent-rpc.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAE1E,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAUxD,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,eAAe,GAAG,IAAI,CAAC;CACtC;AAkBD,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,eAAe,CAAC;IAC1B,wBAAwB,EAAE,OAAO,CAAC;IAClC,YAAY,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;CACtE;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED,eAAO,MAAM,gBAAgB,GAC3B,KAAK,UAAU,EACf,SAAS,UAAU,KAClB,IAuBF,CAAC;AA2PF;;;GAGG;AACH,eAAO,MAAM,cAAc,6BAAoC,CAAC"}

package/dist/agent-rpc.js

@@ -0,0 +1,213 @@
+import { AGENT_COMMAND_DENYLIST } from "./constants.js";
+import { stripAnsi } from "./utils/strip-ansi.js";
+import {} from "./utils/parse-osc133-from-chunk.js";
+import {} from "./types.js";
+import { Session } from "./session.js";
+import { SessionRegistry } from "./session-registry.js";
+let nextSessionId = 1;
+const generateSessionId = () => `s${nextSessionId++}`;
+const DENYLIST_PATTERNS = AGENT_COMMAND_DENYLIST.map((pattern) => ({
+    pattern,
+    regex: new RegExp(`\\b${pattern.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}\\b`),
+}));
+const isCommandDenied = (command) => {
+    for (const { pattern } of DENYLIST_PATTERNS) {
+        if (command.includes(pattern))
+            return pattern;
+    }
+    return null;
+};
+export const handleRpcRequest = (ctx, request) => {
+    const { id, method, params } = request;
+    try {
+        switch (method) {
+            case "spawn_session":
+                return handleSpawnSession(ctx, id, params ?? {});
+            case "list_sessions":
+                return handleListSessions(ctx, id);
+            case "write_input":
+                return handleWriteInput(ctx, id, params ?? {});
+            case "read_output":
+                return handleReadOutput(ctx, id, params ?? {});
+            case "wait_for_boundary":
+                return handleWaitForBoundary(ctx, id, params ?? {});
+            case "exec":
+                return handleExec(ctx, id, params ?? {});
+            default:
+                ctx.sendResponse(id, undefined, `unknown method: ${method}`);
+        }
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        ctx.sendResponse(id, undefined, `internal error: ${message}`);
+    }
+};
+const handleSpawnSession = (ctx, id, params) => {
+    const { cwd, shell } = params;
+    const sessionId = generateSessionId();
+    const input = {
+        cwd,
+        shell,
+        mode: "agent",
+        env: { LOCALTERM_SHELL_INTEGRATION: "1" },
+    };
+    const session = new Session(input);
+    ctx.registry.register(session);
+    const managed = {
+        id: sessionId,
+        session,
+        outputBuffer: [],
+        outputOffset: 0,
+        lastBoundary: null,
+    };
+    activeSessions.set(sessionId, managed);
+    session.on("output", (data) => {
+        const text = stripAnsi(data);
+        if (text)
+            managed.outputBuffer.push(text);
+    });
+    session.on("commandBoundary", (boundary) => {
+        managed.lastBoundary = boundary;
+    });
+    session.on("exit", () => {
+        ctx.registry.unregister(session);
+        activeSessions.delete(sessionId);
+    });
+    ctx.sendResponse(id, {
+        sessionId,
+        shell: session.shell,
+        pid: session.pid,
+        cwd: session.cwd,
+    });
+};
+const handleListSessions = (ctx, id) => {
+    const sessions = Array.from(activeSessions.values()).map((m) => ({
+        id: m.id,
+        cwd: m.session.cwd,
+        pid: m.session.pid,
+        mode: "agent",
+        running: !m.session.isExited,
+    }));
+    ctx.sendResponse(id, { sessions });
+};
+const handleWriteInput = (ctx, id, params) => {
+    const { sessionId, data } = params;
+    const managed = activeSessions.get(sessionId);
+    if (!managed) {
+        ctx.sendResponse(id, undefined, `session not found: ${sessionId}`);
+        return;
+    }
+    if (managed.session.isExited) {
+        ctx.sendResponse(id, undefined, "session has exited");
+        return;
+    }
+    managed.session.write(data);
+    ctx.sendResponse(id, { ok: true });
+};
+const handleReadOutput = (ctx, id, params) => {
+    const { sessionId, sinceOffset } = params;
+    const managed = activeSessions.get(sessionId);
+    if (!managed) {
+        ctx.sendResponse(id, undefined, `session not found: ${sessionId}`);
+        return;
+    }
+    const offset = typeof sinceOffset === "number" ? sinceOffset : managed.outputOffset;
+    const buffer = managed.outputBuffer;
+    let charCount = 0;
+    let startIndex = -1;
+    for (let i = 0; i < buffer.length; i++) {
+        const entryLen = buffer[i].length;
+        if (charCount + entryLen > offset && startIndex === -1)
+            startIndex = i;
+        charCount += entryLen;
+    }
+    if (startIndex === -1) {
+        ctx.sendResponse(id, { text: "", offset: charCount });
+        return;
+    }
+    const text = buffer.slice(startIndex).join("");
+    const newOffset = charCount;
+    managed.outputOffset = newOffset;
+    ctx.sendResponse(id, { text, offset: newOffset });
+};
+const handleWaitForBoundary = (ctx, id, params) => {
+    const { sessionId, timeoutMs } = params;
+    const managed = activeSessions.get(sessionId);
+    if (!managed) {
+        ctx.sendResponse(id, undefined, `session not found: ${sessionId}`);
+        return;
+    }
+    const timeout = typeof timeoutMs === "number" ? timeoutMs : 30000;
+    if (managed.lastBoundary) {
+        const boundary = managed.lastBoundary;
+        managed.lastBoundary = null;
+        ctx.sendResponse(id, boundary);
+        return;
+    }
+    const handler = (boundary) => {
+        managed.session.off("commandBoundary", handler);
+        clearTimeout(timer);
+        ctx.sendResponse(id, boundary);
+    };
+    const timer = setTimeout(() => {
+        managed.session.off("commandBoundary", handler);
+        ctx.sendResponse(id, undefined, "timeout");
+    }, timeout);
+    timer.unref();
+    managed.session.on("commandBoundary", handler);
+};
+const handleExec = (ctx, id, params) => {
+    const { sessionId, command, timeoutMs } = params;
+    const managed = activeSessions.get(sessionId);
+    if (!managed) {
+        ctx.sendResponse(id, undefined, `session not found: ${sessionId}`);
+        return;
+    }
+    if (!command || typeof command !== "string") {
+        ctx.sendResponse(id, undefined, "command must be a non-empty string");
+        return;
+    }
+    if (!ctx.allowDestructiveCommands) {
+        const denied = isCommandDenied(command);
+        if (denied) {
+            ctx.sendResponse(id, undefined, `command denied by allowlist (matched pattern: "${denied}"). pass --yolo to localterm start to disable this check.`);
+            return;
+        }
+    }
+    if (managed.session.isExited) {
+        ctx.sendResponse(id, undefined, "session has exited");
+        return;
+    }
+    const timeout = typeof timeoutMs === "number" ? timeoutMs : 60000;
+    managed.session.write(command + "\n");
+    const handler = (boundary) => {
+        if (boundary.phase !== "command-end")
+            return;
+        managed.session.off("commandBoundary", handler);
+        clearTimeout(timer);
+        const text = managed.outputBuffer.join("");
+        managed.outputBuffer = [];
+        ctx.sendResponse(id, {
+            stdoutText: text,
+            exitCode: boundary.exitCode ?? 0,
+        });
+    };
+    const timer = setTimeout(() => {
+        managed.session.off("commandBoundary", handler);
+        const text = managed.outputBuffer.join("");
+        managed.outputBuffer = [];
+        ctx.sendResponse(id, {
+            stdoutText: text,
+            exitCode: null,
+            partial: true,
+        });
+    }, timeout);
+    timer.unref();
+    managed.session.on("commandBoundary", handler);
+};
+/**
+ * Map of session ID → ManagedSession for all sessions created via RPC.
+ * These are separate from the human-connection sessions managed by the registry.
+ */
+export const activeSessions = new Map();
+//# sourceMappingURL=agent-rpc.js.map

package/dist/agent-rpc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-rpc.js","sourceRoot":"","sources":["../src/agent-rpc.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAwB,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAsB,MAAM,YAAY,CAAC;AAChD,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAkBxD,IAAI,aAAa,GAAG,CAAC,CAAC;AAEtB,MAAM,iBAAiB,GAAG,GAAW,EAAE,CAAC,IAAI,aAAa,EAAE,EAAE,CAAC;AAE9D,MAAM,iBAAiB,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACjE,OAAO;IACP,KAAK,EAAE,IAAI,MAAM,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,KAAK,CAAC;CAC7E,CAAC,CAAC,CAAC;AAEJ,MAAM,eAAe,GAAG,CAAC,OAAe,EAAiB,EAAE;IACzD,KAAK,MAAM,EAAE,OAAO,EAAE,IAAI,iBAAiB,EAAE,CAAC;QAC5C,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,OAAO,OAAO,CAAC;IAChD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAcF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,GAAe,EACf,OAAmB,EACb,EAAE;IACR,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IACvC,IAAI,CAAC;QACH,QAAQ,MAAM,EAAE,CAAC;YACf,KAAK,eAAe;gBAClB,OAAO,kBAAkB,CAAC,GAAG,EAAE,EAAE,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC;YACnD,KAAK,eAAe;gBAClB,OAAO,kBAAkB,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACrC,KAAK,aAAa;gBAChB,OAAO,gBAAgB,CAAC,GAAG,EAAE,EAAE,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC;YACjD,KAAK,aAAa;gBAChB,OAAO,gBAAgB,CAAC,GAAG,EAAE,EAAE,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC;YACjD,KAAK,mBAAmB;gBACtB,OAAO,qBAAqB,CAAC,GAAG,EAAE,EAAE,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC;YACtD,KAAK,MAAM;gBACT,OAAO,UAAU,CAAC,GAAG,EAAE,EAAE,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC;YAC3C;gBACE,GAAG,CAAC,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,mBAAmB,MAAM,EAAE,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,GAAG,CAAC,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,mBAAmB,OAAO,EAAE,CAAC,CAAC;IAChE,CAAC;AACH,CAAC,CAAC;AAOF,MAAM,kBAAkB,GAAG,CACzB,GAAe,EACf,EAAU,EACV,MAA+B,EACzB,EAAE;IACR,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,MAAuC,CAAC;IAC/D,MAAM,SAAS,GAAG,iBAAiB,EAAE,CAAC;IAEtC,MAAM,KAAK,GAAkB;QAC3B,GAAG;QACH,KAAK;QACL,IAAI,EAAE,OAAO;QACb,GAAG,EAAE,EAAE,2BAA2B,EAAE,GAAG,EAAE;KAC1C,CAAC;IAEF,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC;IACnC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAE/B,MAAM,OAAO,GAAmB;QAC9B,EAAE,EAAE,SAAS;QACb,OAAO;QACP,YAAY,EAAE,EAAE;QAChB,YAAY,EAAE,CAAC;QACf,YAAY,EAAE,IAAI;KACnB,CAAC;IAEF,cAAc,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAEvC,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,IAAY,EAAE,EAAE;QACpC,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,IAAI;YAAE,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,EAAE,CAAC,iBAAiB,EAAE,CAAC,QAAyB,EAAE,EAAE;QAC1D,OAAO,CAAC,YAAY,GAAG,QAAQ,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;QACtB,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QACjC,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,YAAY,CAAC,EAAE,EAAE;QACnB,SAAS;QACT,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,GAAG,EAAE,OAAO,CAAC,GAAG;KACjB,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,kBAAkB,GAAG,CACzB,GAAe,EACf,EAAU,EACJ,EAAE;IACR,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/D,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG;QAClB,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG;QAClB,IAAI,EAAE,OAAgB;QACtB,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ;KAC7B,CAAC,CAAC,CAAC;IACJ,GAAG,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;AACrC,CAAC,CAAC;AAOF,MAAM,gBAAgB,GAAG,CACvB,GAAe,EACf,EAAU,EACV,MAA+B,EACzB,EAAE;IACR,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,MAAqC,CAAC;IAClE,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC9C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,GAAG,CAAC,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,sBAAsB,SAAS,EAAE,CAAC,CAAC;QACnE,OAAO;IACT,CAAC;IACD,IAAI,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;QAC7B,GAAG,CAAC,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,oBAAoB,CAAC,CAAC;QACtD,OAAO;IACT,CAAC;IACD,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5B,GAAG,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;AACrC,CAAC,CAAC;AAOF,MAAM,gBAAgB,GAAG,CACvB,GAAe,EACf,EAAU,EACV,MAA+B,EACzB,EAAE;IACR,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,MAAqC,CAAC;IACzE,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC9C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,GAAG,CAAC,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,sBAAsB,SAAS,EAAE,CAAC,CAAC;QACnE,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC;IACpF,MAAM,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAEpC,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,UAAU,GAAG,CAAC,CAAC,CAAC;IACpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAClC,IAAI,SAAS,GAAG,QAAQ,GAAG,MAAM,IAAI,UAAU,KAAK,CAAC,CAAC;YAAE,UAAU,GAAG,CAAC,CAAC;QACvE,SAAS,IAAI,QAAQ,CAAC;IACxB,CAAC;IAED,IAAI,UAAU,KAAK,CAAC,CAAC,EAAE,CAAC;QACtB,GAAG,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QACtD,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC/C,MAAM,SAAS,GAAG,SAAS,CAAC;IAC5B,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC;IAEjC,GAAG,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;AACpD,CAAC,CAAC;AAOF,MAAM,qBAAqB,GAAG,CAC5B,GAAe,EACf,EAAU,EACV,MAA+B,EACzB,EAAE;IACR,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,MAA0C,CAAC;IAC5E,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC9C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,GAAG,CAAC,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,sBAAsB,SAAS,EAAE,CAAC,CAAC;QACnE,OAAO;IACT,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;IAElE,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,OAAO,CAAC,YAAY,CAAC;QACtC,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC;QAC5B,GAAG,CAAC,YAAY,CAAC,EAAE,EAAE,QAA8C,CAAC,CAAC;QACrE,OAAO;IACT,CAAC;IAED,MAAM,OAAO,GAAG,CAAC,QAAyB,EAAE,EAAE;QAC5C,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC;QAChD,YAAY,CAAC,KAAK,CAAC,CAAC;QACpB,GAAG,CAAC,YAAY,CAAC,EAAE,EAAE,QAA8C,CAAC,CAAC;IACvE,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;QAC5B,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC;QAChD,GAAG,CAAC,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IAC7C,CAAC,EAAE,OAAO,CAAC,CAAC;IACZ,KAAK,CAAC,KAAK,EAAE,CAAC;IAEd,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC;AACjD,CAAC,CAAC;AAQF,MAAM,UAAU,GAAG,CACjB,GAAe,EACf,EAAU,EACV,MAA+B,EACzB,EAAE;IACR,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,MAA+B,CAAC;IAC1E,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC9C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,GAAG,CAAC,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,sBAAsB,SAAS,EAAE,CAAC,CAAC;QACnE,OAAO;IACT,CAAC;IAED,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5C,GAAG,CAAC,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,oCAAoC,CAAC,CAAC;QACtE,OAAO;IACT,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,wBAAwB,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;QACxC,IAAI,MAAM,EAAE,CAAC;YACX,GAAG,CAAC,YAAY,CACd,EAAE,EACF,SAAS,EACT,kDAAkD,MAAM,2DAA2D,CACpH,CAAC;YACF,OAAO;QACT,CAAC;IACH,CAAC;IAED,IAAI,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;QAC7B,GAAG,CAAC,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,oBAAoB,CAAC,CAAC;QACtD,OAAO;IACT,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;IAElE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IAEtC,MAAM,OAAO,GAAG,CAAC,QAAyB,EAAE,EAAE;QAC5C,IAAI,QAAQ,CAAC,KAAK,KAAK,aAAa;YAAE,OAAO;QAC7C,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC;QAChD,YAAY,CAAC,KAAK,CAAC,CAAC;QAEpB,MAAM,IAAI,GAAG,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC3C,OAAO,CAAC,YAAY,GAAG,EAAE,CAAC;QAE1B,GAAG,CAAC,YAAY,CAAC,EAAE,EAAE;YACnB,UAAU,EAAE,IAAI;YAChB,QAAQ,EAAE,QAAQ,CAAC,QAAQ,IAAI,CAAC;SACjC,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;QAC5B,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC;QAEhD,MAAM,IAAI,GAAG,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC3C,OAAO,CAAC,YAAY,GAAG,EAAE,CAAC;QAE1B,GAAG,CAAC,YAAY,CAAC,EAAE,EAAE;YACnB,UAAU,EAAE,IAAI;YAChB,QAAQ,EAAE,IAAI;YACd,OAAO,EAAE,IAAI;SACd,CAAC,CAAC;IACL,CAAC,EAAE,OAAO,CAAC,CAAC;IACZ,KAAK,CAAC,KAAK,EAAE,CAAC;IAEd,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC;AACjD,CAAC,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,GAAG,EAA0B,CAAC"}

package/dist/agent-token.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Load the agent token from ~/.localterm/agent-token.
+ * If the file doesn't exist, generate a new token, write it with 0600 perms,
+ * and return it.  This ensures every `localterm start` gets a fresh token
+ * and the file persists across the daemon's lifetime.
+ *
+ * Token is used for authenticating agent-mode WebSocket connections.
+ * Human-mode connections (default) do not require a token.
+ */
+export declare const loadOrCreateAgentToken: () => string;
+/**
+ * Validate a candidate token against the stored agent token.
+ * Returns true if the token matches (constant-time comparison not required —
+ * this is a local-only security boundary; timing attacks assume network access).
+ */
+export declare const validateAgentToken: (candidate: string) => boolean;
+/**
+ * Get the path to the agent token file (for CLI display / docs).
+ */
+export declare const getAgentTokenPath: () => string;
+//# sourceMappingURL=agent-token.d.ts.map

package/dist/agent-token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-token.d.ts","sourceRoot":"","sources":["../src/agent-token.ts"],"names":[],"mappings":"AAgBA;;;;;;;;GAQG;AACH,eAAO,MAAM,sBAAsB,QAAO,MAWzC,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,GAAI,WAAW,MAAM,KAAG,OAKtD,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,iBAAiB,QAAO,MAAoB,CAAC"}

package/dist/agent-token.js

@@ -0,0 +1,53 @@
+import { randomBytes } from "node:crypto";
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+import { homedir } from "node:os";
+const LOCALTERM_DIR = join(homedir(), ".localterm");
+const TOKEN_FILE = join(LOCALTERM_DIR, "agent-token");
+const TOKEN_BYTES = 32; // 256-bit token
+/**
+ * Generate a cryptographically random hex token.
+ */
+const generateToken = () => {
+    return randomBytes(TOKEN_BYTES).toString("hex");
+};
+/**
+ * Load the agent token from ~/.localterm/agent-token.
+ * If the file doesn't exist, generate a new token, write it with 0600 perms,
+ * and return it.  This ensures every `localterm start` gets a fresh token
+ * and the file persists across the daemon's lifetime.
+ *
+ * Token is used for authenticating agent-mode WebSocket connections.
+ * Human-mode connections (default) do not require a token.
+ */
+export const loadOrCreateAgentToken = () => {
+    if (existsSync(TOKEN_FILE)) {
+        const raw = readFileSync(TOKEN_FILE, "utf-8").trim();
+        if (raw.length > 0)
+            return raw;
+    }
+    const token = generateToken();
+    if (!existsSync(LOCALTERM_DIR)) {
+        mkdirSync(LOCALTERM_DIR, { recursive: true, mode: 0o755 });
+    }
+    writeFileSync(TOKEN_FILE, token + "\n", { mode: 0o600, encoding: "utf-8" });
+    return token;
+};
+/**
+ * Validate a candidate token against the stored agent token.
+ * Returns true if the token matches (constant-time comparison not required —
+ * this is a local-only security boundary; timing attacks assume network access).
+ */
+export const validateAgentToken = (candidate) => {
+    if (!existsSync(TOKEN_FILE))
+        return false;
+    const stored = readFileSync(TOKEN_FILE, "utf-8").trim();
+    if (!stored)
+        return false;
+    return candidate === stored;
+};
+/**
+ * Get the path to the agent token file (for CLI display / docs).
+ */
+export const getAgentTokenPath = () => TOKEN_FILE;
+//# sourceMappingURL=agent-token.js.map

package/dist/agent-token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-token.js","sourceRoot":"","sources":["../src/agent-token.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAElC,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,YAAY,CAAC,CAAC;AACpD,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;AACtD,MAAM,WAAW,GAAG,EAAE,CAAC,CAAC,gBAAgB;AAExC;;GAEG;AACH,MAAM,aAAa,GAAG,GAAW,EAAE;IACjC,OAAO,WAAW,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAClD,CAAC,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,GAAW,EAAE;IACjD,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QACrD,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,GAAG,CAAC;IACjC,CAAC;IACD,MAAM,KAAK,GAAG,aAAa,EAAE,CAAC;IAC9B,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QAC/B,SAAS,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7D,CAAC;IACD,aAAa,CAAC,UAAU,EAAE,KAAK,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;IAC5E,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,SAAiB,EAAW,EAAE;IAC/D,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1C,MAAM,MAAM,GAAG,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;IACxD,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,OAAO,SAAS,KAAK,MAAM,CAAC;AAC9B,CAAC,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAW,EAAE,CAAC,UAAU,CAAC"}

package/dist/constants.d.ts

@@ -0,0 +1,54 @@
+export declare const DEFAULT_PORT = 3417;
+export declare const DEFAULT_HOST = "127.0.0.1";
+export declare const DEFAULT_COLS = 120;
+export declare const DEFAULT_ROWS = 32;
+export declare const DEFAULT_SHELL_FALLBACK = "/bin/sh";
+export declare const TERM_TYPE = "xterm-256color";
+export declare const COLORTERM_VALUE = "truecolor";
+export declare const TITLE_POLL_INTERVAL_MS = 500;
+export declare const CWD_RESOLVE_TIMEOUT_MS = 250;
+export declare const CWD_RESOLVE_BACKOFF_MS = 30000;
+export declare const CWD_RESOLVE_COOLDOWN_MS = 5000;
+export declare const MAX_PENDING_PARSE_BYTES: number;
+export declare const TITLE_MAX_PATH_SEGMENTS = 3;
+export declare const TITLE_TRUNCATION_PREFIX = "\u2026";
+/**
+ * Strip terminal-emulator identity env vars inherited from the daemon's parent.
+ * If we leak e.g. TERM_PROGRAM=ghostty, modern Ink-based TUIs (Cursor Agent,
+ * Claude Code) will probe for that terminal's protocol (kitty keyboard,
+ * XTQVERSION, XTGETTCAP, OSC 1337, etc.) and — when xterm.js doesn't answer —
+ * fall back to a degraded inline-plain rendering instead of the full boxed
+ * TUI. Removing these lets the TUI treat us as a generic xterm-256color and
+ * render normally.
+ */
+export declare const PTY_ENV_DENYLIST: string[];
+export declare const MAX_INPUT_BYTES: number;
+export declare const MAX_OUTPUT_BYTES: number;
+export declare const MAX_TITLE_LENGTH: number;
+export declare const MAX_COLS = 1000;
+export declare const MAX_ROWS = 1000;
+export declare const MAX_CONCURRENT_SESSIONS = 64;
+export declare const OUTPUT_BATCH_WINDOW_MS = 2;
+export declare const OUTPUT_BATCH_MAX_BYTES: number;
+export declare const WS_OUTBOUND_PAUSE_HIGH_WATER_BYTES: number;
+export declare const WS_OUTBOUND_RESUME_LOW_WATER_BYTES: number;
+export declare const WS_OUTBOUND_DRAIN_POLL_MS = 50;
+export declare const WS_BACKPRESSURE_THRESHOLD_BYTES: number;
+export declare const WS_HEARTBEAT_INTERVAL_MS = 20000;
+export declare const WS_HEARTBEAT_TIMEOUT_MS = 60000;
+export declare const WS_HEARTBEAT_GRACE_MS = 15000;
+export declare const SERVER_STOP_GRACE_MS = 1500;
+export declare const LOOPBACK_HOSTS: Set<string>;
+export declare const HTTP_STATUS_NOT_FOUND = 404;
+export declare const WS_READY_STATE_OPEN = 1;
+export declare const WS_CLOSE_POLICY_VIOLATION = 1008;
+export declare const WS_CLOSE_BACKPRESSURE = 4429;
+export declare const WS_CLOSE_CAPACITY_REACHED = 4503;
+/**
+ * Commands that are denied by default in agent-mode exec() unless the
+ * --yolo flag is passed at server start.  Matching is substring-based so
+ * "rm -rf /" is caught by "rm".  This is a safety net, not a security
+ * boundary — the loopback-only binding is the real security model.
+ */
+export declare const AGENT_COMMAND_DENYLIST: string[];
+//# sourceMappingURL=constants.d.ts.map

package/dist/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,YAAY,OAAO,CAAC;AACjC,eAAO,MAAM,YAAY,cAAc,CAAC;AACxC,eAAO,MAAM,YAAY,MAAM,CAAC;AAChC,eAAO,MAAM,YAAY,KAAK,CAAC;AAC/B,eAAO,MAAM,sBAAsB,YAAY,CAAC;AAEhD,eAAO,MAAM,SAAS,mBAAmB,CAAC;AAC1C,eAAO,MAAM,eAAe,cAAc,CAAC;AAE3C,eAAO,MAAM,sBAAsB,MAAM,CAAC;AAC1C,eAAO,MAAM,sBAAsB,MAAM,CAAC;AAC1C,eAAO,MAAM,sBAAsB,QAAS,CAAC;AAC7C,eAAO,MAAM,uBAAuB,OAAQ,CAAC;AAC7C,eAAO,MAAM,uBAAuB,QAAW,CAAC;AAChD,eAAO,MAAM,uBAAuB,IAAI,CAAC;AACzC,eAAO,MAAM,uBAAuB,WAAM,CAAC;AAE3C;;;;;;;;GAQG;AACH,eAAO,MAAM,gBAAgB,UAe5B,CAAC;AAEF,eAAO,MAAM,eAAe,QAAY,CAAC;AACzC,eAAO,MAAM,gBAAgB,QAAkB,CAAC;AAChD,eAAO,MAAM,gBAAgB,QAAW,CAAC;AACzC,eAAO,MAAM,QAAQ,OAAO,CAAC;AAC7B,eAAO,MAAM,QAAQ,OAAO,CAAC;AAC7B,eAAO,MAAM,uBAAuB,KAAK,CAAC;AAC1C,eAAO,MAAM,sBAAsB,IAAI,CAAC;AACxC,eAAO,MAAM,sBAAsB,QAAY,CAAC;AAOhD,eAAO,MAAM,kCAAkC,QAAkB,CAAC;AAClE,eAAO,MAAM,kCAAkC,QAAkB,CAAC;AAClE,eAAO,MAAM,yBAAyB,KAAK,CAAC;AAC5C,eAAO,MAAM,+BAA+B,QAAmB,CAAC;AAOhE,eAAO,MAAM,wBAAwB,QAAS,CAAC;AAC/C,eAAO,MAAM,uBAAuB,QAAS,CAAC;AAC9C,eAAO,MAAM,qBAAqB,QAAS,CAAC;AAK5C,eAAO,MAAM,oBAAoB,OAAQ,CAAC;AAE1C,eAAO,MAAM,cAAc,aAOzB,CAAC;AAEH,eAAO,MAAM,qBAAqB,MAAM,CAAC;AAEzC,eAAO,MAAM,mBAAmB,IAAI,CAAC;AACrC,eAAO,MAAM,yBAAyB,OAAO,CAAC;AAC9C,eAAO,MAAM,qBAAqB,OAAO,CAAC;AAC1C,eAAO,MAAM,yBAAyB,OAAO,CAAC;AAE9C;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB,UAelC,CAAC"}

package/dist/constants.js

@@ -0,0 +1,106 @@
+export const DEFAULT_PORT = 3417;
+export const DEFAULT_HOST = "127.0.0.1";
+export const DEFAULT_COLS = 120;
+export const DEFAULT_ROWS = 32;
+export const DEFAULT_SHELL_FALLBACK = "/bin/sh";
+export const TERM_TYPE = "xterm-256color";
+export const COLORTERM_VALUE = "truecolor";
+export const TITLE_POLL_INTERVAL_MS = 500;
+export const CWD_RESOLVE_TIMEOUT_MS = 250;
+export const CWD_RESOLVE_BACKOFF_MS = 30_000;
+export const CWD_RESOLVE_COOLDOWN_MS = 5_000;
+export const MAX_PENDING_PARSE_BYTES = 4 * 1024;
+export const TITLE_MAX_PATH_SEGMENTS = 3;
+export const TITLE_TRUNCATION_PREFIX = "…";
+/**
+ * Strip terminal-emulator identity env vars inherited from the daemon's parent.
+ * If we leak e.g. TERM_PROGRAM=ghostty, modern Ink-based TUIs (Cursor Agent,
+ * Claude Code) will probe for that terminal's protocol (kitty keyboard,
+ * XTQVERSION, XTGETTCAP, OSC 1337, etc.) and — when xterm.js doesn't answer —
+ * fall back to a degraded inline-plain rendering instead of the full boxed
+ * TUI. Removing these lets the TUI treat us as a generic xterm-256color and
+ * render normally.
+ */
+export const PTY_ENV_DENYLIST = [
+    "LOCALTERM_DAEMON_CHILD",
+    "TERM_PROGRAM",
+    "TERM_PROGRAM_VERSION",
+    "TERM_SESSION_ID",
+    "ITERM_SESSION_ID",
+    "ITERM_PROFILE",
+    "KITTY_WINDOW_ID",
+    "KITTY_PID",
+    "WT_SESSION",
+    "WT_PROFILE_ID",
+    "GHOSTTY_RESOURCES_DIR",
+    "GHOSTTY_BIN_DIR",
+    "VSCODE_INJECTION",
+    "VSCODE_GIT_IPC_HANDLE",
+];
+export const MAX_INPUT_BYTES = 64 * 1024;
+export const MAX_OUTPUT_BYTES = 1 * 1024 * 1024;
+export const MAX_TITLE_LENGTH = 4 * 1024;
+export const MAX_COLS = 1000;
+export const MAX_ROWS = 1000;
+export const MAX_CONCURRENT_SESSIONS = 64;
+export const OUTPUT_BATCH_WINDOW_MS = 2;
+export const OUTPUT_BATCH_MAX_BYTES = 64 * 1024;
+// High/low water marks gate the PTY -> WS pipe instead of killing the socket.
+// Crossing the high water mark pauses the PTY so the OS pipe absorbs further
+// child output until the WS drains below the low water mark, at which point
+// we resume. Anything past WS_BACKPRESSURE_THRESHOLD_BYTES is treated as a
+// runaway: the WS *did* drain below low water at some point, the receiver is
+// genuinely stuck, and we'd rather drop the connection than balloon memory.
+export const WS_OUTBOUND_PAUSE_HIGH_WATER_BYTES = 4 * 1024 * 1024;
+export const WS_OUTBOUND_RESUME_LOW_WATER_BYTES = 1 * 1024 * 1024;
+export const WS_OUTBOUND_DRAIN_POLL_MS = 50;
+export const WS_BACKPRESSURE_THRESHOLD_BYTES = 64 * 1024 * 1024;
+// Heartbeat: send a WS ping every N ms; if no pong arrives within the timeout
+// we tear down the socket. Without this, half-open connections (laptop sleep,
+// VPN dropout, kernel‑side TCP keepalives at 2h+) wedge the session — the
+// server keeps a dead PTY tied to a phantom client and the browser eventually
+// trips its own write error and shows "Shell ended" with no idea why.
+export const WS_HEARTBEAT_INTERVAL_MS = 20_000;
+export const WS_HEARTBEAT_TIMEOUT_MS = 60_000;
+export const WS_HEARTBEAT_GRACE_MS = 15_000;
+// Hard ceiling for server.stop() — clients get terminated, then the http
+// server is given this long to actually close before we resolve anyway. Keeps
+// the daemon's SIGTERM path bounded so the CLI's force-exit fallback never
+// fires for normal shutdowns.
+export const SERVER_STOP_GRACE_MS = 1_500;
+export const LOOPBACK_HOSTS = new Set([
+    "127.0.0.1",
+    "localhost",
+    "::1",
+    "[::1]",
+    "0:0:0:0:0:0:0:1",
+    "[0:0:0:0:0:0:0:1]",
+]);
+export const HTTP_STATUS_NOT_FOUND = 404;
+export const WS_READY_STATE_OPEN = 1;
+export const WS_CLOSE_POLICY_VIOLATION = 1008;
+export const WS_CLOSE_BACKPRESSURE = 4429;
+export const WS_CLOSE_CAPACITY_REACHED = 4503;
+/**
+ * Commands that are denied by default in agent-mode exec() unless the
+ * --yolo flag is passed at server start.  Matching is substring-based so
+ * "rm -rf /" is caught by "rm".  This is a safety net, not a security
+ * boundary — the loopback-only binding is the real security model.
+ */
+export const AGENT_COMMAND_DENYLIST = [
+    "rm",
+    "dd",
+    "mkfs",
+    "mkfs.",
+    "fdisk",
+    "parted",
+    "format",
+    "shred",
+    "wipefs",
+    "blockdev",
+    "> /dev/",
+    "> /dev/sd",
+    "> /dev/nvme",
+    ":(){ :|:& };:", // fork bomb
+];
+//# sourceMappingURL=constants.js.map

package/dist/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,YAAY,GAAG,IAAI,CAAC;AACjC,MAAM,CAAC,MAAM,YAAY,GAAG,WAAW,CAAC;AACxC,MAAM,CAAC,MAAM,YAAY,GAAG,GAAG,CAAC;AAChC,MAAM,CAAC,MAAM,YAAY,GAAG,EAAE,CAAC;AAC/B,MAAM,CAAC,MAAM,sBAAsB,GAAG,SAAS,CAAC;AAEhD,MAAM,CAAC,MAAM,SAAS,GAAG,gBAAgB,CAAC;AAC1C,MAAM,CAAC,MAAM,eAAe,GAAG,WAAW,CAAC;AAE3C,MAAM,CAAC,MAAM,sBAAsB,GAAG,GAAG,CAAC;AAC1C,MAAM,CAAC,MAAM,sBAAsB,GAAG,GAAG,CAAC;AAC1C,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,CAAC;AAC7C,MAAM,CAAC,MAAM,uBAAuB,GAAG,KAAK,CAAC;AAC7C,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,GAAG,IAAI,CAAC;AAChD,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC;AACzC,MAAM,CAAC,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAE3C;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,wBAAwB;IACxB,cAAc;IACd,sBAAsB;IACtB,iBAAiB;IACjB,kBAAkB;IAClB,eAAe;IACf,iBAAiB;IACjB,WAAW;IACX,YAAY;IACZ,eAAe;IACf,uBAAuB;IACvB,iBAAiB;IACjB,kBAAkB;IAClB,uBAAuB;CACxB,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,GAAG,IAAI,CAAC;AACzC,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAChD,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,GAAG,IAAI,CAAC;AACzC,MAAM,CAAC,MAAM,QAAQ,GAAG,IAAI,CAAC;AAC7B,MAAM,CAAC,MAAM,QAAQ,GAAG,IAAI,CAAC;AAC7B,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,CAAC;AAC1C,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC;AACxC,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,GAAG,IAAI,CAAC;AAChD,8EAA8E;AAC9E,6EAA6E;AAC7E,4EAA4E;AAC5E,2EAA2E;AAC3E,6EAA6E;AAC7E,4EAA4E;AAC5E,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAClE,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAClE,MAAM,CAAC,MAAM,yBAAyB,GAAG,EAAE,CAAC;AAC5C,MAAM,CAAC,MAAM,+BAA+B,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAEhE,8EAA8E;AAC9E,8EAA8E;AAC9E,0EAA0E;AAC1E,8EAA8E;AAC9E,sEAAsE;AACtE,MAAM,CAAC,MAAM,wBAAwB,GAAG,MAAM,CAAC;AAC/C,MAAM,CAAC,MAAM,uBAAuB,GAAG,MAAM,CAAC;AAC9C,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC;AAC5C,yEAAyE;AACzE,8EAA8E;AAC9E,2EAA2E;AAC3E,8BAA8B;AAC9B,MAAM,CAAC,MAAM,oBAAoB,GAAG,KAAK,CAAC;AAE1C,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IACpC,WAAW;IACX,WAAW;IACX,KAAK;IACL,OAAO;IACP,iBAAiB;IACjB,mBAAmB;CACpB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAEzC,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC;AACrC,MAAM,CAAC,MAAM,yBAAyB,GAAG,IAAI,CAAC;AAC9C,MAAM,CAAC,MAAM,qBAAqB,GAAG,IAAI,CAAC;AAC1C,MAAM,CAAC,MAAM,yBAAyB,GAAG,IAAI,CAAC;AAE9C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,IAAI;IACJ,IAAI;IACJ,MAAM;IACN,OAAO;IACP,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,UAAU;IACV,SAAS;IACT,WAAW;IACX,aAAa;IACb,eAAe,EAAG,YAAY;CAC/B,CAAC"}

package/dist/default-shell.d.ts

@@ -0,0 +1,2 @@
+export declare const getDefaultShell: () => string;
+//# sourceMappingURL=default-shell.d.ts.map

package/dist/default-shell.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"default-shell.d.ts","sourceRoot":"","sources":["../src/default-shell.ts"],"names":[],"mappings":"AAaA,eAAO,MAAM,eAAe,QAAO,MAyBlC,CAAC"}

package/dist/default-shell.js

@@ -0,0 +1,44 @@
+import { accessSync, constants as fsConstants } from "node:fs";
+import os from "node:os";
+import { DEFAULT_SHELL_FALLBACK } from "./constants.js";
+const isExecutable = (binaryPath) => {
+    try {
+        accessSync(binaryPath, fsConstants.X_OK);
+        return true;
+    }
+    catch {
+        return false;
+    }
+};
+export const getDefaultShell = () => {
+    if (process.platform === "win32") {
+        return process.env.COMSPEC ?? "cmd.exe";
+    }
+    // Priority order (matches VS Code, Hyper, and Warp):
+    //   1. LOCALTERM_SHELL — explicit user override
+    //   2. os.userInfo().shell — the user's persistent login shell from passwd / DSCL
+    //   3. process.env.SHELL — only as a fallback; this leaks the parent process's
+    //      shell (often zsh from launchd / a Cursor terminal) and is wrong when the
+    //      user has changed their default with `chsh`
+    //   4. DEFAULT_SHELL_FALLBACK
+    const candidates = [];
+    if (process.env.LOCALTERM_SHELL)
+        candidates.push(process.env.LOCALTERM_SHELL);
+    try {
+        const userInfo = os.userInfo();
+        if (userInfo.shell)
+            candidates.push(userInfo.shell);
+    }
+    catch {
+        /* os.userInfo throws on systems without /etc/passwd entry for the uid */
+    }
+    if (process.env.SHELL)
+        candidates.push(process.env.SHELL);
+    candidates.push(DEFAULT_SHELL_FALLBACK);
+    for (const candidate of candidates) {
+        if (isExecutable(candidate))
+            return candidate;
+    }
+    return DEFAULT_SHELL_FALLBACK;
+};
+//# sourceMappingURL=default-shell.js.map

package/dist/default-shell.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"default-shell.js","sourceRoot":"","sources":["../src/default-shell.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,IAAI,WAAW,EAAE,MAAM,SAAS,CAAC;AAC/D,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAExD,MAAM,YAAY,GAAG,CAAC,UAAkB,EAAW,EAAE;IACnD,IAAI,CAAC;QACH,UAAU,CAAC,UAAU,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC;QACzC,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAG,GAAW,EAAE;IAC1C,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,OAAO,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,SAAS,CAAC;IAC1C,CAAC;IACD,qDAAqD;IACrD,gDAAgD;IAChD,kFAAkF;IAClF,+EAA+E;IAC/E,gFAAgF;IAChF,kDAAkD;IAClD,8BAA8B;IAC9B,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe;QAAE,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC9E,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC;QAC/B,IAAI,QAAQ,CAAC,KAAK;YAAE,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,yEAAyE;IAC3E,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK;QAAE,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC1D,UAAU,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACxC,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,YAAY,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;IAChD,CAAC;IACD,OAAO,sBAAsB,CAAC;AAChC,CAAC,CAAC"}

package/dist/ensure-spawn-helper-executable.d.ts

@@ -0,0 +1,2 @@
+export declare const ensureSpawnHelperExecutable: () => void;
+//# sourceMappingURL=ensure-spawn-helper-executable.d.ts.map

package/dist/ensure-spawn-helper-executable.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ensure-spawn-helper-executable.d.ts","sourceRoot":"","sources":["../src/ensure-spawn-helper-executable.ts"],"names":[],"mappings":"AAcA,eAAO,MAAM,2BAA2B,QAAO,IAkB9C,CAAC"}

package/dist/ensure-spawn-helper-executable.js

@@ -0,0 +1,34 @@
+import { chmodSync, existsSync } from "node:fs";
+import { createRequire } from "node:module";
+import path from "node:path";
+const requireCjs = createRequire(import.meta.url);
+const SPAWN_HELPER_MODE = 0o755;
+let alreadyEnsured = false;
+const candidateSpawnHelperPaths = (nodePtyDir) => [
+    path.join(nodePtyDir, "build", "Release", "spawn-helper"),
+    path.join(nodePtyDir, "prebuilds", `${process.platform}-${process.arch}`, "spawn-helper"),
+];
+export const ensureSpawnHelperExecutable = () => {
+    if (alreadyEnsured)
+        return;
+    alreadyEnsured = true;
+    let nodePtyDir;
+    try {
+        const ptyEntry = requireCjs.resolve("node-pty");
+        nodePtyDir = path.dirname(path.dirname(ptyEntry));
+    }
+    catch {
+        return;
+    }
+    for (const candidate of candidateSpawnHelperPaths(nodePtyDir)) {
+        if (!existsSync(candidate))
+            continue;
+        try {
+            chmodSync(candidate, SPAWN_HELPER_MODE);
+        }
+        catch {
+            /* helper already executable, or filesystem refused chmod (e.g. read-only mount) */
+        }
+    }
+};
+//# sourceMappingURL=ensure-spawn-helper-executable.js.map

package/dist/ensure-spawn-helper-executable.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ensure-spawn-helper-executable.js","sourceRoot":"","sources":["../src/ensure-spawn-helper-executable.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,MAAM,iBAAiB,GAAG,KAAK,CAAC;AAEhC,IAAI,cAAc,GAAG,KAAK,CAAC;AAE3B,MAAM,yBAAyB,GAAG,CAAC,UAAkB,EAAY,EAAE,CAAC;IAClE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,cAAc,CAAC;IACzD,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,EAAE,cAAc,CAAC;CAC1F,CAAC;AAEF,MAAM,CAAC,MAAM,2BAA2B,GAAG,GAAS,EAAE;IACpD,IAAI,cAAc;QAAE,OAAO;IAC3B,cAAc,GAAG,IAAI,CAAC;IACtB,IAAI,UAAkB,CAAC;IACvB,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAChD,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IACD,KAAK,MAAM,SAAS,IAAI,yBAAyB,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9D,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,SAAS;QACrC,IAAI,CAAC;YACH,SAAS,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;QAC1C,CAAC;QAAC,MAAM,CAAC;YACP,mFAAmF;QACrF,CAAC;IACH,CAAC;AACH,CAAC,CAAC"}