@factiii/runner 0.9.3 → 0.9.5

package/dist/cli.js

@@ -4537,7 +4537,7 @@ var require_permessage_deflate = __commonJS({
       acceptAsServer(offers) {
         const opts = this._options;
         const accepted = offers.find((params) => {
-          if (opts.serverNoContextTakeover === false && params.server_no_context_takeover || params.server_max_window_bits && (opts.serverMaxWindowBits === false || typeof opts.serverMaxWindowBits === "number" && opts.serverMaxWindowBits > params.server_max_window_bits) || typeof opts.clientMaxWindowBits === "number" && !params.client_max_window_bits) {
+          if (opts.serverNoContextTakeover === false && params.server_no_context_takeover || params.server_max_window_bits && (opts.serverMaxWindowBits === false || typeof opts.serverMaxWindowBits === "number" && opts.serverMaxWindowBits > params.server_max_window_bits) || typeof opts.clientMaxWindowBits === "number" && (typeof params.client_max_window_bits === "number" ? opts.clientMaxWindowBits > params.client_max_window_bits : !params.client_max_window_bits)) {
             return false;
           }
           return true;
@@ -5057,6 +5057,7 @@ var require_receiver = __commonJS({
         this._opcode = 0;
         this._totalPayloadLength = 0;
         this._messageLength = 0;
+        this._numFragments = 0;
         this._fragments = [];
         this._errored = false;
         this._loop = false;
@@ -5407,23 +5408,23 @@ var require_receiver = __commonJS({
           this.controlMessage(data, cb);
           return;
         }
+        if (this._maxFragments > 0 && ++this._numFragments > this._maxFragments) {
+          const error = this.createError(
+            RangeError,
+            "Too many message fragments",
+            false,
+            1008,
+            "WS_ERR_TOO_MANY_BUFFERED_PARTS"
+          );
+          cb(error);
+          return;
+        }
         if (this._compressed) {
           this._state = INFLATING;
           this.decompress(data, cb);
           return;
         }
         if (data.length) {
-          if (this._maxFragments > 0 && this._fragments.length >= this._maxFragments) {
-            const error = this.createError(
-              RangeError,
-              "Too many message fragments",
-              false,
-              1008,
-              "WS_ERR_TOO_MANY_BUFFERED_PARTS"
-            );
-            cb(error);
-            return;
-          }
           this._messageLength = this._totalPayloadLength;
           this._fragments.push(data);
         }
@@ -5453,17 +5454,6 @@ var require_receiver = __commonJS({
               cb(error);
               return;
             }
-            if (this._maxFragments > 0 && this._fragments.length >= this._maxFragments) {
-              const error = this.createError(
-                RangeError,
-                "Too many message fragments",
-                false,
-                1008,
-                "WS_ERR_TOO_MANY_BUFFERED_PARTS"
-              );
-              cb(error);
-              return;
-            }
             this._fragments.push(buf);
           }
           this.dataMessage(cb);
@@ -5486,6 +5476,7 @@ var require_receiver = __commonJS({
         this._totalPayloadLength = 0;
         this._messageLength = 0;
         this._fragmented = 0;
+        this._numFragments = 0;
         this._fragments = [];
         if (this._opcode === 2) {
           let data;
@@ -6986,8 +6977,8 @@ var require_websocket = __commonJS({
         autoPong: true,
         closeTimeout: CLOSE_TIMEOUT,
         protocolVersion: protocolVersions[1],
-        maxBufferedChunks: 1024 * 1024,
-        maxFragments: 128 * 1024,
+        maxBufferedChunks: 256 * 1024,
+        maxFragments: 16 * 1024,
         maxPayload: 100 * 1024 * 1024,
         skipUTF8Validation: false,
         perMessageDeflate: true,
@@ -7574,9 +7565,9 @@ var require_websocket_server = __commonJS({
        *     called
        * @param {Function} [options.handleProtocols] A hook to handle protocols
        * @param {String} [options.host] The hostname where to bind the server
-       * @param {Number} [options.maxBufferedChunks=1048576] The maximum number of
+       * @param {Number} [options.maxBufferedChunks=262144] The maximum number of
        *     buffered data chunks
-       * @param {Number} [options.maxFragments=131072] The maximum number of message
+       * @param {Number} [options.maxFragments=16384] The maximum number of message
        *     fragments
        * @param {Number} [options.maxPayload=104857600] The maximum allowed message
        *     size
@@ -7599,8 +7590,8 @@ var require_websocket_server = __commonJS({
         options = {
           allowSynchronousEvents: true,
           autoPong: true,
-          maxBufferedChunks: 1024 * 1024,
-          maxFragments: 128 * 1024,
+          maxBufferedChunks: 256 * 1024,
+          maxFragments: 16 * 1024,
           maxPayload: 100 * 1024 * 1024,
           skipUTF8Validation: false,
           perMessageDeflate: false,
@@ -13526,6 +13517,48 @@ function toSummary(session) {
     provider: session.provider
   };
 }
+var ActivityTracker = class {
+  constructor(emitter) {
+    this.emitter = emitter;
+    this.live = /* @__PURE__ */ new Map();
+  }
+  /** Start or update one activity. Re-calling with the same id replaces the
+   *  row, which is how a step label advances (`setup` → "installing node"). */
+  set(kind, state, label, detail = "", key = "") {
+    const id = key ? `${kind}:${key}` : kind;
+    const activity = {
+      id,
+      kind,
+      state,
+      label,
+      detail,
+      // Keep the original start so a step change doesn't reset the clock.
+      startedAt: this.live.get(id)?.startedAt ?? Date.now()
+    };
+    this.live.set(id, activity);
+    this.emitter.emitActivityUpdate(activity);
+  }
+  /** Retire an activity. Safe to call for one that never started. */
+  clear(kind, key = "") {
+    const id = key ? `${kind}:${key}` : kind;
+    const existing = this.live.get(id);
+    if (!existing) return;
+    this.live.delete(id);
+    this.emitter.emitActivityUpdate({ ...existing, state: null });
+  }
+  /** Everything live right now, for the replay a fresh channel needs. */
+  list() {
+    return [...this.live.values()];
+  }
+  /** Runner shutdown: nothing survives the process, so drop the rows. */
+  destroy() {
+    for (const id of [...this.live.keys()]) {
+      const existing = this.live.get(id);
+      this.live.delete(id);
+      this.emitter.emitActivityUpdate({ ...existing, state: null });
+    }
+  }
+};
 function createEventSink(send, spaceSlug, notify) {
   const PHASE_LABELS = {
     research: "Research started",
@@ -13623,6 +13656,9 @@ function createEventSink(send, spaceSlug, notify) {
     },
     emitBareFsChange(postId, change) {
       send(channel(`bare-fs:${postId}`), change);
+    },
+    emitActivityUpdate(activity) {
+      send(channel("activity-update"), activity);
     }
   };
 }
@@ -16887,6 +16923,7 @@ var SpaceCore = class {
     this.serverUrl = options.serverUrl;
     this.mcp = options.mcp;
     this.requestSudo = options.requestSudo;
+    this.activity = new ActivityTracker(this.emitter);
   }
   setLoggedIn(provider, value2) {
     this.loggedIn[provider] = value2;
@@ -17036,10 +17073,26 @@ var SpaceCore = class {
     const status = (msg) => {
       onStatus?.(msg);
       this.emitter.emitSetupStatus(msg);
+      if (msg && !msg.startsWith(SETUP_LOG_PREFIX)) {
+        this.activity.set("setup", "working", "Setting up space", msg);
+      }
     };
     if (this.setupPromise) return this.setupPromise;
     if (this.ready) {
-      if (refreshGit) await this.provisionGitLane(status);
+      if (refreshGit) {
+        try {
+          await this.provisionGitLane(status);
+          this.activity.clear("setup");
+        } catch (err) {
+          this.activity.set(
+            "setup",
+            "error",
+            "Setup failed",
+            err instanceof Error ? err.message : String(err)
+          );
+          throw err;
+        }
+      }
       return;
     }
     this.setupPromise = (async () => {
@@ -17074,8 +17127,17 @@ var SpaceCore = class {
         ]);
         status("");
         this.ready = true;
+      } catch (err) {
+        this.activity.set(
+          "setup",
+          "error",
+          "Setup failed",
+          err instanceof Error ? err.message : String(err)
+        );
+        throw err;
       } finally {
         this.setupPromise = null;
+        if (this.ready) this.activity.clear("setup");
       }
     })();
     return this.setupPromise;
@@ -17170,6 +17232,7 @@ var SpaceCore = class {
   destroy() {
     this.ready = false;
     this.setupPromise = null;
+    this.activity.destroy();
   }
 };
 
@@ -17183,6 +17246,7 @@ var mergedCardSchema = external_exports.object({
   title: external_exports.string().trim().min(1).max(255),
   content: external_exports.string().max(5e3)
 });
+var errText = (err) => err instanceof Error ? err.message : String(err);
 var BoardAgentEngine = class _BoardAgentEngine {
   constructor(options) {
     // In-flight creator session, memory-only (the repo is the source of truth
@@ -17235,6 +17299,12 @@ var BoardAgentEngine = class _BoardAgentEngine {
     this.claude = new ClaudeModeEngine(this.core, this.emitter);
     this.terminal = new TerminalModeEngine(this.core, this.emitter);
   }
+  /** Everything the runner does for this space that isn't a card session, so
+   *  the Running jobs panel can report the whole machine. Owned by the core,
+   *  which the setup path also drives. */
+  get activity() {
+    return this.core.activity;
+  }
   /** How this host protects stored credentials. Read-only: the daemon answers
    *  unlock and password changes itself (SECURE_ACTIONS in daemon.ts). */
   secureStatus() {
@@ -17315,6 +17385,11 @@ var BoardAgentEngine = class _BoardAgentEngine {
       throw new Error("An environment fix is already running.");
     }
     this.envState = { phase, logs: [], result: null, error: "" };
+    this.activity.set(
+      "deploy-env",
+      "working",
+      phase === "fixing" ? "Fixing deploy environment" : "Checking deploy environment"
+    );
     try {
       const result = await work();
       this.envState = {
@@ -17324,15 +17399,22 @@ var BoardAgentEngine = class _BoardAgentEngine {
         error: ""
       };
       this.emitter.emitDeployEnv({ phase: "done" });
+      this.activity.clear("deploy-env");
       return result;
     } catch (err) {
       this.envState = {
         phase: "done",
         logs: this.envState.logs,
         result: null,
-        error: err instanceof Error ? err.message : String(err)
+        error: errText(err)
       };
       this.emitter.emitDeployEnv({ phase: "error" });
+      this.activity.set(
+        "deploy-env",
+        "error",
+        "Deploy environment failed",
+        errText(err)
+      );
       throw err;
     }
   }
@@ -17370,6 +17452,36 @@ var BoardAgentEngine = class _BoardAgentEngine {
   setRun(partial) {
     this.runState = { ...this.runState, ...partial };
     this.emitter.emitDeployRun({ phase: this.runState.phase });
+    this.syncRunActivity();
+  }
+  /** Mirror the deploy run's phase onto the Running jobs panel. A deploy can
+   *  sit on `awaiting-input` for hours, which is exactly the state worth
+   *  seeing without opening the modal. */
+  syncRunActivity() {
+    const { phase, question, pendingCommand, error } = this.runState;
+    switch (phase) {
+      case "running":
+        return this.activity.set("deploy-run", "working", "Deploying");
+      case "awaiting-input":
+        return this.activity.set(
+          "deploy-run",
+          "awaiting-input",
+          "Deploy needs your answer",
+          question
+        );
+      case "awaiting-auth":
+        return this.activity.set(
+          "deploy-run",
+          "awaiting-input",
+          "Deploy needs authorization",
+          pendingCommand
+        );
+      case "failed":
+        return this.activity.set("deploy-run", "error", "Deploy failed", error);
+      // success / idle: the run is over and the modal holds the report.
+      default:
+        return this.activity.clear("deploy-run");
+    }
   }
   deployRunStart(sendLog) {
     if (this.runState.phase === "running" || this.runState.phase === "awaiting-input" || this.runState.phase === "awaiting-auth") {
@@ -17389,6 +17501,7 @@ var BoardAgentEngine = class _BoardAgentEngine {
       finishedAt: 0
     };
     this.emitter.emitDeployRun({ phase: "running" });
+    this.syncRunActivity();
     const bufferLog = (entry) => {
       const logs = this.runState.logs;
       const last = logs[logs.length - 1];
@@ -17567,6 +17680,7 @@ var BoardAgentEngine = class _BoardAgentEngine {
   }
   async runCreatorPass(work) {
     this.creatorState = { phase: "working", logs: [], draft: null, error: "" };
+    this.activity.set("deploy-skill", "working", "Writing deploy skill");
     try {
       const draft = await work();
       this.creatorState = {
@@ -17576,15 +17690,21 @@ var BoardAgentEngine = class _BoardAgentEngine {
         error: ""
       };
       this.emitter.emitDeployCreator({ phase: "review" });
+      this.activity.set(
+        "deploy-skill",
+        "awaiting-input",
+        "Deploy skill ready to review"
+      );
       return draft;
     } catch (err) {
-      const error = err instanceof Error ? err.message : String(err);
+      const error = errText(err);
       this.creatorState = {
         ...this.creatorState,
         phase: this.creatorState.draft ? "review" : "idle",
         error
       };
       this.emitter.emitDeployCreator({ phase: "error", error });
+      this.activity.set("deploy-skill", "error", "Deploy skill failed", error);
       throw err;
     }
   }
@@ -17663,6 +17783,7 @@ var BoardAgentEngine = class _BoardAgentEngine {
     this.skillCreatorSessionId = null;
     this.skillDraftBranch = null;
     this.creatorState = { phase: "idle", logs: [], draft: null, error: "" };
+    this.activity.clear("deploy-skill");
     return approveDeploySkill({
       spaceDir: this.core.spaceDir(),
       gitName: config.gitName,
@@ -17674,6 +17795,7 @@ var BoardAgentEngine = class _BoardAgentEngine {
     this.skillCreatorSessionId = null;
     this.skillDraftBranch = null;
     this.creatorState = { phase: "idle", logs: [], draft: null, error: "" };
+    this.activity.clear("deploy-skill");
     return discardDeploySkill({ spaceDir: this.core.spaceDir() });
   }
   // Start the host-run device-code flow and return the code to show the user.
@@ -17683,11 +17805,15 @@ var BoardAgentEngine = class _BoardAgentEngine {
     console.log(
       `[onedrive] device-code started: userCode=${start.userCode} expiresIn=${start.expiresIn}s interval=${start.interval}s`
     );
-    void this.pollDeviceCodeUntilDone(
-      p.clientId,
-      start.deviceCode,
-      start.interval,
-      start.expiresIn
+    this.trackSignin(
+      "onedrive",
+      "OneDrive sign-in",
+      this.pollDeviceCodeUntilDone(
+        p.clientId,
+        start.deviceCode,
+        start.interval,
+        start.expiresIn
+      )
     );
     return {
       userCode: start.userCode,
@@ -17755,11 +17881,15 @@ var BoardAgentEngine = class _BoardAgentEngine {
     console.log(
       `[github] device-code started: userCode=${start.userCode} expiresIn=${start.expiresIn}s interval=${start.interval}s`
     );
-    void this.pollGithubUntilDone(
-      p.clientId,
-      start.deviceCode,
-      start.interval,
-      start.expiresIn
+    this.trackSignin(
+      "github",
+      "GitHub sign-in",
+      this.pollGithubUntilDone(
+        p.clientId,
+        start.deviceCode,
+        start.interval,
+        start.expiresIn
+      )
     );
     return {
       userCode: start.userCode,
@@ -17844,6 +17974,24 @@ var BoardAgentEngine = class _BoardAgentEngine {
     if (!githubToken) throw new Error("Connect GitHub first.");
     return listGithubBranches(githubToken, p.fullName);
   }
+  /** A device-code sign-in is blocked on the user until the code expires, so
+   *  it reports as awaiting-input rather than working. Keyed so GitHub and
+   *  Claude can both be pending without overwriting each other. */
+  beginSignin(key, label) {
+    this.activity.set(
+      "signin",
+      "awaiting-input",
+      label,
+      "Waiting for you to finish signing in",
+      key
+    );
+  }
+  /** Same, for the two flows whose completion is a settled promise rather
+   *  than a callback. Neither poller rejects; both end on their own deadline. */
+  trackSignin(key, label, poll) {
+    this.beginSignin(key, label);
+    void poll.finally(() => this.activity.clear("signin", key));
+  }
   async claudeLoginStart() {
     if (!this.core.isReady()) {
       throw new Error("Initialize the environment first, then sign in.");
@@ -17855,11 +18003,14 @@ var BoardAgentEngine = class _BoardAgentEngine {
         if (result.status === "complete") {
           this.core.setLoggedIn("claude", true);
         }
+        this.activity.clear("signin", "claude");
         this.emitter.emitClaudeAuth(result);
       }
     );
     if (this.claudeLogin.active) await this.claudeLogin.cancel();
-    return this.claudeLogin.start();
+    const started = await this.claudeLogin.start();
+    this.beginSignin("claude", "Claude sign-in");
+    return started;
   }
   claudeLoginCode(p) {
     if (!this.claudeLogin) throw new Error("No Claude sign-in in progress.");
@@ -17867,6 +18018,7 @@ var BoardAgentEngine = class _BoardAgentEngine {
   }
   async claudeLoginCancel() {
     await this.claudeLogin?.cancel();
+    this.activity.clear("signin", "claude");
     return { success: true };
   }
   async codexLoginStart() {
@@ -17880,14 +18032,18 @@ var BoardAgentEngine = class _BoardAgentEngine {
         if (result.status === "complete") {
           this.core.setLoggedIn("codex", true);
         }
+        this.activity.clear("signin", "codex");
         this.emitter.emitCodexAuth(result);
       }
     );
     if (this.codexLogin.active) await this.codexLogin.cancel();
-    return this.codexLogin.start();
+    const started = await this.codexLogin.start();
+    this.beginSignin("codex", "Codex sign-in");
+    return started;
   }
   async codexLoginCancel() {
     await this.codexLogin?.cancel();
+    this.activity.clear("signin", "codex");
     return { success: true };
   }
   async claudeLogout() {
@@ -17905,8 +18061,16 @@ var BoardAgentEngine = class _BoardAgentEngine {
     return { success: true };
   }
   // ── Ask AI + claude-only controls (→ claude) ──
-  ask(params, sendLog) {
-    return this.claude.ask(params, sendLog);
+  async ask(params, sendLog) {
+    this.activity.set("ask", "working", "Ask AI", params.question.slice(0, 80));
+    try {
+      const answer = await this.claude.ask(params, sendLog);
+      this.activity.clear("ask");
+      return answer;
+    } catch (err) {
+      this.activity.set("ask", "error", "Ask AI", errText(err));
+      throw err;
+    }
   }
   resetBoardSession() {
     this.claude.resetBoardSession();
@@ -23663,6 +23827,25 @@ var localConfigProvider = {
 };
 
 // src/daemon.ts
+function toRtcIceServers(servers) {
+  const fallback = ["stun:stun.l.google.com:19302"];
+  if (!servers?.length) return fallback;
+  const out = [];
+  for (const server of servers) {
+    const urls = Array.isArray(server.urls) ? server.urls : [server.urls];
+    for (const url2 of urls) {
+      const turn = /^(turns?):(.+)$/.exec(url2);
+      if (!turn || !server.username || !server.credential) {
+        out.push(url2);
+        continue;
+      }
+      const user = encodeURIComponent(server.username);
+      const pass = encodeURIComponent(server.credential);
+      out.push(`${turn[1]}:${user}:${pass}@${turn[2]}`);
+    }
+  }
+  return out.length > 0 ? out : fallback;
+}
 function toChannelScope(raw) {
   if (!raw || raw.role === "owner") return { role: "owner" };
   return { role: "member", spaceSlugs: new Set(raw.spaceSlugs) };
@@ -23827,15 +24010,35 @@ async function startDaemon(config) {
       },
       webhook,
       full,
-      (p) => broadcastToBoard(
-        spaceSlug,
-        JSON.stringify({
-          type: "event",
+      (p) => {
+        broadcastToBoard(
           spaceSlug,
-          event: "onedrive-index",
-          payload: { status: p.status, done: p.done, error: p.error }
-        })
-      )
+          JSON.stringify({
+            type: "event",
+            spaceSlug,
+            event: "onedrive-index",
+            payload: { status: p.status, done: p.done, error: p.error }
+          })
+        );
+        const activity = getEngine(spaceSlug).activity;
+        if (p.status === "indexing") {
+          activity.set(
+            "onedrive-index",
+            "working",
+            "Indexing OneDrive",
+            `${p.done} files`
+          );
+        } else if (p.status === "error") {
+          activity.set(
+            "onedrive-index",
+            "error",
+            "OneDrive index failed",
+            p.error ?? ""
+          );
+        } else {
+          activity.clear("onedrive-index");
+        }
+      }
     ).catch((err) => {
       console.error(
         `[onedrive] index start failed for ${spaceSlug}:`,
@@ -23923,9 +24126,11 @@ async function startDaemon(config) {
     console.log(`Received WebRTC offer from ${data.fromSocketId}`);
     const scope = toChannelScope(data.scope);
     try {
-      const peer = new import_node_datachannel.PeerConnection("runner", {
-        iceServers: ["stun:stun.l.google.com:19302"]
-      });
+      const iceServers = toRtcIceServers(data.iceServers);
+      console.log(
+        `[webrtc] ICE servers: ${iceServers.map((u) => u.replace(/:[^:@]+@/, ":***@")).join(", ")}`
+      );
+      const peer = new import_node_datachannel.PeerConnection("runner", { iceServers });
       const iceCandidateHandler = (msg) => {
         if (msg.fromSocketId === data.fromSocketId) {
           console.log(`[webrtc] remote ICE candidate: ${msg.candidate.candidate.slice(0, 60)}...`);
@@ -24009,6 +24214,16 @@ async function startDaemon(config) {
               });
               sendToChannel(msg);
             }
+            for (const activity of engine.activity.list()) {
+              sendToChannel(
+                JSON.stringify({
+                  type: "event",
+                  spaceSlug,
+                  event: `board-agent:${spaceSlug}:activity-update`,
+                  payload: activity
+                })
+              );
+            }
           }
         });
         dc.onMessage((raw) => {

package/index/index.js

@@ -3112,7 +3112,6 @@ var require_utils = __commonJS({
     var isHexPair = RegExp.prototype.test.bind(/^[\da-f]{2}$/iu);
     var isUnreserved = RegExp.prototype.test.bind(/^[\da-z\-._~]$/iu);
     var isPathCharacter = RegExp.prototype.test.bind(/^[\da-z\-._~!$&'()*+,;=:@/]$/iu);
-    var isQueryFragmentCharacter = RegExp.prototype.test.bind(/^[\da-z\-._~!$&'()*+,;=:@/?]$/iu);
     function stringArrayToHexStripped(input) {
       let acc = "";
       let code = 0;
@@ -3255,7 +3254,7 @@ var require_utils = __commonJS({
               continue;
             }
           } else if (input[0] === "/") {
-            if (input[1] === ".") {
+            if (input[1] === "." || input[1] === "/") {
               output.push("/");
               break;
             }
@@ -3337,30 +3336,10 @@ var require_utils = __commonJS({
       }
       return output;
     }
-    var BYTE_HEX = new Array(256);
-    {
-      const HEX_DIGITS = "0123456789ABCDEF";
-      for (let i = 0; i < 256; i++) {
-        BYTE_HEX[i] = "%" + HEX_DIGITS[i >> 4] + HEX_DIGITS[i & 15];
-      }
-    }
-    function isEscapeSafe(cp2) {
-      return cp2 >= 48 && cp2 <= 57 || cp2 >= 65 && cp2 <= 90 || cp2 >= 97 && cp2 <= 122 || cp2 === 42 || cp2 === 43 || cp2 === 45 || cp2 === 46 || cp2 === 47 || cp2 === 64 || cp2 === 95;
-    }
-    function percentEncodeNonAscii(cp2) {
-      if (cp2 < 2048) {
-        return BYTE_HEX[192 | cp2 >> 6] + BYTE_HEX[128 | cp2 & 63];
-      }
-      if (cp2 < 65536) {
-        return BYTE_HEX[224 | cp2 >> 12] + BYTE_HEX[128 | cp2 >> 6 & 63] + BYTE_HEX[128 | cp2 & 63];
-      }
-      return BYTE_HEX[240 | cp2 >> 18] + BYTE_HEX[128 | cp2 >> 12 & 63] + BYTE_HEX[128 | cp2 >> 6 & 63] + BYTE_HEX[128 | cp2 & 63];
-    }
     function normalizePathEncoding(input) {
       let output = "";
       for (let i = 0; i < input.length; i++) {
-        const ch2 = input[i];
-        if (ch2 === "%" && i + 2 < input.length) {
+        if (input[i] === "%" && i + 2 < input.length) {
           const hex = input.slice(i + 1, i + 3);
           if (isHexPair(hex)) {
             const normalizedHex = hex.toUpperCase();
@@ -3374,66 +3353,10 @@ var require_utils = __commonJS({
             continue;
           }
         }
-        if (isPathCharacter(ch2)) {
-          output += ch2;
-        } else {
-          const code = input.charCodeAt(i);
-          if (code < 128) {
-            output += isEscapeSafe(code) ? ch2 : BYTE_HEX[code];
-          } else if (code < 55296 || code > 57343) {
-            output += percentEncodeNonAscii(code);
-          } else if (code <= 56319 && i + 1 < input.length) {
-            const low = input.charCodeAt(i + 1);
-            if (low >= 56320 && low <= 57343) {
-              output += percentEncodeNonAscii(65536 + (code - 55296 << 10) + (low - 56320));
-              i++;
-            } else {
-              output += percentEncodeNonAscii(65533);
-            }
-          } else {
-            output += percentEncodeNonAscii(65533);
-          }
-        }
-      }
-      return output;
-    }
-    function normalizeQueryFragmentEncoding(input) {
-      let output = "";
-      for (let i = 0; i < input.length; i++) {
-        const ch2 = input[i];
-        if (ch2 === "%" && i + 2 < input.length) {
-          const hex = input.slice(i + 1, i + 3);
-          if (isHexPair(hex)) {
-            const normalizedHex = hex.toUpperCase();
-            const decoded = String.fromCharCode(parseInt(normalizedHex, 16));
-            if (isUnreserved(decoded)) {
-              output += decoded;
-            } else {
-              output += "%" + normalizedHex;
-            }
-            i += 2;
-            continue;
-          }
-        }
-        if (isQueryFragmentCharacter(ch2)) {
-          output += ch2;
+        if (isPathCharacter(input[i])) {
+          output += input[i];
         } else {
-          const code = input.charCodeAt(i);
-          if (code < 128) {
-            output += isEscapeSafe(code) ? ch2 : BYTE_HEX[code];
-          } else if (code < 55296 || code > 57343) {
-            output += percentEncodeNonAscii(code);
-          } else if (code <= 56319 && i + 1 < input.length) {
-            const low = input.charCodeAt(i + 1);
-            if (low >= 56320 && low <= 57343) {
-              output += percentEncodeNonAscii(65536 + (code - 55296 << 10) + (low - 56320));
-              i++;
-            } else {
-              output += percentEncodeNonAscii(65533);
-            }
-          } else {
-            output += percentEncodeNonAscii(65533);
-          }
+          output += escape(input[i]);
         }
       }
       return output;
@@ -3441,8 +3364,7 @@ var require_utils = __commonJS({
     function escapePreservingEscapes(input) {
       let output = "";
       for (let i = 0; i < input.length; i++) {
-        const ch2 = input[i];
-        if (ch2 === "%" && i + 2 < input.length) {
+        if (input[i] === "%" && i + 2 < input.length) {
           const hex = input.slice(i + 1, i + 3);
           if (isHexPair(hex)) {
             output += "%" + hex.toUpperCase();
@@ -3450,22 +3372,7 @@ var require_utils = __commonJS({
             continue;
           }
         }
-        const code = input.charCodeAt(i);
-        if (code < 128) {
-          output += isEscapeSafe(code) ? ch2 : BYTE_HEX[code];
-        } else if (code < 55296 || code > 57343) {
-          output += percentEncodeNonAscii(code);
-        } else if (code <= 56319 && i + 1 < input.length) {
-          const low = input.charCodeAt(i + 1);
-          if (low >= 56320 && low <= 57343) {
-            output += percentEncodeNonAscii(65536 + (code - 55296 << 10) + (low - 56320));
-            i++;
-          } else {
-            output += percentEncodeNonAscii(65533);
-          }
-        } else {
-          output += percentEncodeNonAscii(65533);
-        }
+        output += escape(input[i]);
       }
       return output;
     }
@@ -3499,7 +3406,6 @@ var require_utils = __commonJS({
       reescapeHostDelimiters,
       normalizePercentEncoding,
       normalizePathEncoding,
-      normalizeQueryFragmentEncoding,
       escapePreservingEscapes,
       removeDotSegments,
       isIPv4,
@@ -3724,7 +3630,7 @@ var require_schemes = __commonJS({
 var require_fast_uri = __commonJS({
   "../../node_modules/fast-uri/index.js"(exports2, module2) {
     "use strict";
-    var { normalizeIPv6, removeDotSegments, recomposeAuthority, normalizePercentEncoding, normalizePathEncoding, normalizeQueryFragmentEncoding, escapePreservingEscapes, reescapeHostDelimiters, isIPv4, nonSimpleDomain } = require_utils();
+    var { normalizeIPv6, removeDotSegments, recomposeAuthority, normalizePercentEncoding, normalizePathEncoding, escapePreservingEscapes, reescapeHostDelimiters, isIPv4, nonSimpleDomain } = require_utils();
     var { SCHEMES, getSchemeHandler } = require_schemes();
     function normalize(uri, options) {
       if (typeof uri === "string") {
@@ -3738,7 +3644,12 @@ var require_fast_uri = __commonJS({
     }
     function resolve(baseURI, relativeURI, options) {
       const schemelessOptions = options ? Object.assign({ scheme: "null" }, options) : { scheme: "null" };
-      const resolved = resolveComponent(parse3(baseURI, schemelessOptions), parse3(relativeURI, schemelessOptions), schemelessOptions, true);
+      const { parsed: baseParsed, malformedAuthorityOrPort: baseMalformed } = parseWithStatus(baseURI, schemelessOptions);
+      const { parsed: relativeParsed, malformedAuthorityOrPort: relativeMalformed } = parseWithStatus(relativeURI, schemelessOptions);
+      if (baseMalformed || relativeMalformed) {
+        throw new Error(baseParsed.error || relativeParsed.error || "URI is malformed.");
+      }
+      const resolved = resolveComponent(baseParsed, relativeParsed, schemelessOptions, true);
       schemelessOptions.skipEscape = true;
       return serialize(resolved, schemelessOptions);
     }
@@ -3864,6 +3775,7 @@ var require_fast_uri = __commonJS({
     }
     var URI_PARSE = /^(?:([^#/:?]+):)?(?:\/\/((?:([^#/?@]*)@)?(\[[^#/?\]]+\]|[^#/:?]*)(?::(\d*))?))?([^#?]*)(?:\?([^#]*))?(?:#((?:.|[\n\r])*))?/u;
     var AUTHORITY_PREFIX = /^(?:[^#/:?]+:)?\/\/([^/?#]*)/;
+    var AUTHORITY_INTRODUCER_REGION = /^(?:[^#/:?]+:)?([/\\\t\n\r]*)/;
     function getParseError(parsed, matches) {
       if (matches[2] !== void 0 && parsed.path && parsed.path[0] !== "/") {
         return 'URI path must start with "/" when authority is present.';
@@ -3898,9 +3810,23 @@ var require_fast_uri = __commonJS({
         parsed.error = "URI authority must not contain a literal backslash.";
         malformedAuthorityOrPort = true;
       }
+      const introducerMatch = uri.match(AUTHORITY_INTRODUCER_REGION);
+      if (introducerMatch !== null) {
+        const region = introducerMatch[1];
+        const normalizedRegion = region.replace(/[\t\n\r]/g, "");
+        if (normalizedRegion.length >= 2) {
+          if (normalizedRegion.slice(0, 2) !== "//") {
+            parsed.error = parsed.error || "URI authority must not contain a literal backslash.";
+            malformedAuthorityOrPort = true;
+          } else if (region.length !== normalizedRegion.length) {
+            parsed.error = parsed.error || "URI authority introducer must not contain whitespace.";
+            malformedAuthorityOrPort = true;
+          }
+        }
+      }
       const matches = uri.match(URI_PARSE);
       if (matches) {
-        parsed.scheme = matches[1] === void 0 ? void 0 : matches[1].toLowerCase();
+        parsed.scheme = matches[1];
         parsed.userinfo = matches[3];
         parsed.host = matches[4];
         parsed.port = parseInt(matches[5], 10);
@@ -3959,11 +3885,12 @@ var require_fast_uri = __commonJS({
           if (parsed.path) {
             parsed.path = normalizePathEncoding(parsed.path);
           }
-          if (parsed.query) {
-            parsed.query = normalizeQueryFragmentEncoding(parsed.query);
-          }
           if (parsed.fragment) {
-            parsed.fragment = normalizeQueryFragmentEncoding(parsed.fragment);
+            try {
+              parsed.fragment = encodeURI(decodeURIComponent(parsed.fragment));
+            } catch {
+              parsed.error = parsed.error || "URI malformed";
+            }
           }
         }
         if (schemeHandler && schemeHandler.parse) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@factiii/runner",
-  "version": "0.9.3",
+  "version": "0.9.5",
   "description": "Factiii Runner, run Board AI agents on a machine you control. Pairs with the Factiii web/mobile clients over WebRTC.",
   "license": "ISC",
   "keywords": [
@@ -52,7 +52,7 @@
     "@types/node": "^20.0.0",
     "commander": "^12.1.0",
     "esbuild": "*",
-    "socket.io-client": "^4.8.1",
+    "socket.io-client": "^4.8.3",
     "tsx": "^4.22.4",
     "typescript": "catalog:"
   }