@factiii/runner 0.9.0 → 0.9.1

package/dist/cli.js

@@ -15239,6 +15239,9 @@ ${buildPrompt(prompts_default.implement)}`;
   }
 };
 
+// ../../shared/all/helpers/terminal-ai/terminal-mode.ts
+var import_crypto4 = require("crypto");
+
 // ../../shared/all/helpers/board-agent-core/tmux.ts
 var TMUX_CONF = [
   // Wheel scrolls, drag selects in copy mode.
@@ -15659,6 +15662,34 @@ var TerminalModeEngine = class {
     const session = this.sessions.get(String(postId));
     if (session) delete session.buffers[path15];
   }
+  /** Write a dropped image to the per-space drops dir (`paths.root`, OUTSIDE the
+   *  card worktree so it never touches the repo) and return its absolute path. */
+  async terminalDropImage({
+    postId,
+    content,
+    ext
+  }) {
+    const target = this.getBareTarget(postId);
+    if (!/^[A-Za-z0-9+/=\n\r]*$/.test(content)) {
+      throw new Error("Invalid base64 payload.");
+    }
+    if (content.length > 14e6) {
+      throw new Error("Image too large (max ~10MB).");
+    }
+    const safeExt = (ext || "png").toLowerCase().replace(/[^a-z0-9]/g, "") || "png";
+    const dropsDir = `${target.paths.root}/drops`;
+    const abs = `${dropsDir}/${(0, import_crypto4.randomUUID)()}.${safeExt}`;
+    await target.sh(
+      `mkdir -p ${shEscape(dropsDir)} && printf %s ${shEscape(content)} | base64 -d > ${shEscape(abs)}`
+    );
+    try {
+      await target.sh(
+        `find ${shEscape(dropsDir)} -type f -mtime +1 -delete 2>/dev/null || true`
+      );
+    } catch {
+    }
+    return abs;
+  }
   bareEditorState({
     postId: rawPostId
   }) {
@@ -16717,7 +16748,7 @@ var import_path11 = __toESM(require("path"));
 
 // ../../shared/all/helpers/board-agent-core/host-secrets.ts
 var import_child_process6 = require("child_process");
-var import_crypto4 = __toESM(require("crypto"));
+var import_crypto5 = __toESM(require("crypto"));
 var import_promises4 = __toESM(require("fs/promises"));
 var import_path10 = __toESM(require("path"));
 var import_util6 = require("util");
@@ -16745,7 +16776,7 @@ async function assertBinaries() {
   }
 }
 function deriveKey(password, salt) {
-  return import_crypto4.default.scryptSync(password, salt, 32, {
+  return import_crypto5.default.scryptSync(password, salt, 32, {
     N: SCRYPT_N2,
     maxmem: 64 * 1024 * 1024
   });
@@ -16774,9 +16805,9 @@ async function initSecrets(configDir, password) {
   if (!identity || !recipient) {
     throw new Error("age-keygen returned no usable keypair.");
   }
-  const salt = import_crypto4.default.randomBytes(16);
-  const iv = import_crypto4.default.randomBytes(12);
-  const cipher = import_crypto4.default.createCipheriv(
+  const salt = import_crypto5.default.randomBytes(16);
+  const iv = import_crypto5.default.randomBytes(12);
+  const cipher = import_crypto5.default.createCipheriv(
     "aes-256-gcm",
     deriveKey(password, salt),
     iv
@@ -16801,7 +16832,7 @@ async function initSecrets(configDir, password) {
   return { success: true };
 }
 function decryptIdentity(box, password) {
-  const decipher = import_crypto4.default.createDecipheriv(
+  const decipher = import_crypto5.default.createDecipheriv(
     "aes-256-gcm",
     deriveKey(password, Buffer.from(box.salt, "base64")),
     Buffer.from(box.iv, "base64")
@@ -18392,6 +18423,9 @@ var BoardAgentEngine = class _BoardAgentEngine {
   bareFsWrite(p) {
     return this.terminal.bareFsWrite(p);
   }
+  terminalDropImage(p) {
+    return this.terminal.terminalDropImage(p);
+  }
   bareFsDelete(p) {
     return this.terminal.bareFsDelete(p);
   }
@@ -18965,6 +18999,10 @@ ${c.content.trim() || "(no description)"}`
           payload
         );
         return void 0;
+      case "terminalDropImage":
+        return await this.terminalDropImage(
+          payload
+        );
       case "bareFsDelete":
         await this.bareFsDelete(
           payload
@@ -19029,7 +19067,7 @@ ${c.content.trim() || "(no description)"}`
 
 // ../../shared/all/helpers/board-agent-core/index-service.ts
 var import_child_process7 = require("child_process");
-var import_crypto5 = require("crypto");
+var import_crypto6 = require("crypto");
 var import_fs7 = require("fs");
 var import_promises5 = __toESM(require("fs/promises"));
 var import_net2 = require("net");
@@ -19047,7 +19085,7 @@ var IndexService = class {
   /** Per-space bearer for MCP + file, derived from the control token (the
    *  service computes the same). */
   bearerToken(spaceSlug) {
-    return (0, import_crypto5.createHmac)("sha256", this.opts.controlToken).update(`mcp:${spaceSlug}`).digest("hex");
+    return (0, import_crypto6.createHmac)("sha256", this.opts.controlToken).update(`mcp:${spaceSlug}`).digest("hex");
   }
   /** MCP bridge for a space. Null until the service is up (which it kicks
    *  off), so a bad :0 URL is never baked in; provisionMcpLane re-runs. */
@@ -19398,7 +19436,7 @@ function makeChunkReassembler() {
 }
 
 // src/daemon.ts
-var import_crypto6 = require("crypto");
+var import_crypto7 = require("crypto");
 var import_fs9 = __toESM(require("fs"));
 var import_node_datachannel = require("node-datachannel");
 var import_path15 = __toESM(require("path"));
@@ -23420,7 +23458,7 @@ async function startDaemon(config) {
   ];
   const indexDir = indexCandidates.find((p) => import_fs9.default.existsSync(p)) ?? indexCandidates[0];
   const odIndex = new IndexService({
-    controlToken: (0, import_crypto6.createHash)("sha256").update(config.authToken).digest("hex"),
+    controlToken: (0, import_crypto7.createHash)("sha256").update(config.authToken).digest("hex"),
     embedUrl: () => config.serverUrl,
     indexDir,
     dataDir: import_path15.default.join(CONFIG_DIR, "index-data")

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@factiii/runner",
-  "version": "0.9.0",
+  "version": "0.9.1",
   "description": "Factiii Runner, run Board AI agents on a machine you control. Pairs with the Factiii web/mobile clients over WebRTC.",
   "license": "ISC",
   "keywords": [