@juspay/shooter 1.19.0 → 1.20.0

package/src/routes/api/terminals/[id]/share/+server.ts

@@ -0,0 +1,98 @@
+// /api/terminals/[id]/share — owner management of a terminal's share.
+// GET: current state. PUT: create/update. DELETE: revoke.
+// All methods require the API key (owners only).
+
+import type { ShareConfigRequest, ShareInfoResponse, ShareMode } from '$lib/types';
+
+import { validateAuth } from '$lib/modules/server/auth';
+import { ptyManager } from '$lib/modules/server/terminal/pty-manager.js';
+import { hashPassword, shareStore } from '$lib/modules/server/terminal/share-store';
+import { closeGuests } from '$lib/modules/server/ws/guest-registry';
+import { json } from '@sveltejs/kit';
+
+import type { RequestHandler } from './$types';
+
+const MIN_PASSWORD_LENGTH = 6;
+const MODES: ShareMode[] = ['view', 'control'];
+
+function toInfo(terminalId: string): ShareInfoResponse {
+  const share = shareStore.getShare(terminalId);
+  if (!share) {
+    return { active: false, createdAt: null, mode: null, updatedAt: null };
+  }
+  return { active: true, createdAt: share.createdAt, mode: share.mode, updatedAt: share.updatedAt };
+}
+
+export const GET: RequestHandler = ({ params, request }) => {
+  const authError = validateAuth(request);
+  if (authError) {
+    return authError;
+  }
+  return json(toInfo(params.id));
+};
+
+export const PUT: RequestHandler = async ({ params, request }) => {
+  const authError = validateAuth(request);
+  if (authError) {
+    return authError;
+  }
+  if (!ptyManager.get(params.id)) {
+    return json({ error: 'Terminal not found' }, { status: 404 });
+  }
+
+  let body: ShareConfigRequest;
+  try {
+    body = (await request.json()) as ShareConfigRequest;
+  } catch {
+    return json({ error: 'Invalid JSON' }, { status: 400 });
+  }
+  if (!MODES.includes(body.mode)) {
+    return json({ error: "mode must be 'view' or 'control'" }, { status: 400 });
+  }
+
+  const existing = shareStore.getShare(params.id);
+  const password = typeof body.password === 'string' ? body.password : '';
+  if (!existing && password.length < MIN_PASSWORD_LENGTH) {
+    return json(
+      { error: `password is required (min ${String(MIN_PASSWORD_LENGTH)} chars)` },
+      { status: 400 }
+    );
+  }
+  if (password && password.length < MIN_PASSWORD_LENGTH) {
+    return json(
+      { error: `password must be at least ${String(MIN_PASSWORD_LENGTH)} chars` },
+      { status: 400 }
+    );
+  }
+
+  const now = Date.now();
+  shareStore.setShare({
+    createdAt: existing?.createdAt ?? now,
+    mode: body.mode,
+    // `existing` is guaranteed non-null when password is empty (validated above).
+    passwordHash: password ? hashPassword(password) : (existing?.passwordHash ?? ''),
+    terminalId: params.id,
+    updatedAt: now,
+  });
+
+  // A new password invalidates existing guest sessions; any change to the
+  // share forces connected guests to reconnect under the new scope.
+  if (password) {
+    shareStore.deleteSessions(params.id);
+  }
+  if (password || existing?.mode !== body.mode) {
+    closeGuests(params.id);
+  }
+
+  return json(toInfo(params.id));
+};
+
+export const DELETE: RequestHandler = ({ params, request }) => {
+  const authError = validateAuth(request);
+  if (authError) {
+    return authError;
+  }
+  shareStore.deleteShare(params.id);
+  const closed = closeGuests(params.id);
+  return json({ closedConnections: closed, success: true });
+};

package/src/routes/api/terminals/[id]/share/auth/+server.ts

@@ -0,0 +1,81 @@
+// POST /api/terminals/[id]/share/auth — exchange the share password for a
+// guest session token. Public endpoint; brute-force-limited per IP+terminal.
+
+import type { ShareAuthRequest } from '$lib/types';
+
+import { shareStore, verifyPassword } from '$lib/modules/server/terminal/share-store';
+import { json } from '@sveltejs/kit';
+
+import type { RequestHandler } from './$types';
+
+const RATE_LIMIT_WINDOW_MS = 60_000;
+const RATE_LIMIT_MAX = 10;
+
+/** Maps "ip:terminalId" -> attempt timestamps (epoch ms). */
+const attempts = new Map<string, number[]>();
+
+function checkRateLimit(key: string): boolean {
+  const now = Date.now();
+  const recent = (attempts.get(key) ?? []).filter((t) => t > now - RATE_LIMIT_WINDOW_MS);
+  attempts.set(key, recent);
+  if (recent.length >= RATE_LIMIT_MAX) {
+    return false;
+  }
+  recent.push(now);
+  return true;
+}
+
+// Cleanup stale rate limit entries every 5 minutes
+setInterval(() => {
+  const cutoff = Date.now() - RATE_LIMIT_WINDOW_MS;
+  for (const [key, timestamps] of attempts) {
+    const recent = timestamps.filter((t) => t > cutoff);
+    if (recent.length === 0) {
+      attempts.delete(key);
+    } else {
+      attempts.set(key, recent);
+    }
+  }
+}, 300_000).unref();
+
+export const POST: RequestHandler = async (event) => {
+  const { params, request } = event;
+
+  const share = shareStore.getShare(params.id);
+  if (!share) {
+    return json({ error: 'Not shared' }, { status: 404 });
+  }
+
+  // Behind Cloudflare Tunnel the connecting IP arrives in headers.
+  let ip = 'unknown';
+  const cfIp = request.headers.get('cf-connecting-ip');
+  const fwd = request.headers.get('x-forwarded-for');
+  if (cfIp) {
+    ip = cfIp;
+  } else if (fwd) {
+    ip = fwd.split(',')[0].trim();
+  } else {
+    try {
+      ip = event.getClientAddress();
+    } catch {
+      // Keep 'unknown' — the rate limit still applies per terminal.
+    }
+  }
+
+  if (!checkRateLimit(`${ip}:${params.id}`)) {
+    return json({ error: 'Too many attempts. Try again in a minute.' }, { status: 429 });
+  }
+
+  let body: ShareAuthRequest;
+  try {
+    body = (await request.json()) as ShareAuthRequest;
+  } catch {
+    return json({ error: 'Invalid JSON' }, { status: 400 });
+  }
+  if (typeof body.password !== 'string' || !verifyPassword(body.password, share.passwordHash)) {
+    return json({ error: 'Invalid password' }, { status: 401 });
+  }
+
+  const { expiresAt, token } = shareStore.createSession(params.id);
+  return json({ expiresAt, mode: share.mode, token });
+};

package/src/routes/api/terminals/[id]/share/status/+server.ts

@@ -0,0 +1,11 @@
+// GET /api/terminals/[id]/share/status — public probe used by the page to
+// decide whether to show the password gate. Reveals only a boolean.
+
+import { shareStore } from '$lib/modules/server/terminal/share-store';
+import { json } from '@sveltejs/kit';
+
+import type { RequestHandler } from './$types';
+
+export const GET: RequestHandler = ({ params }) => {
+  return json({ shared: shareStore.getShare(params.id) !== null });
+};

package/src/routes/api/ws-ticket/+server.ts

@@ -8,6 +8,7 @@
 // Rate limited to 30 requests per minute per API key.
 
 import { validateAuth } from '$lib/modules/server/auth';
+import { shareStore } from '$lib/modules/server/terminal/share-store';
 import { generateTicket } from '$lib/modules/server/ws/ticket-store';
 import { json } from '@sveltejs/kit';
 
@@ -63,15 +64,35 @@ setInterval(() => {
 // ── Endpoint ────────────────────────────────────────────────────────
 
 export const POST: RequestHandler = ({ request }) => {
+  const bearer = (
+    request.headers.get('authorization') ??
+    request.headers.get('Authorization') ??
+    ''
+  )
+    .replace(/^Bearer\s+/i, '')
+    .trim();
+
   const authError = validateAuth(request);
   if (authError) {
-    return authError;
+    // Not the API key — maybe a guest share token (issues a scoped ticket).
+    const session = bearer ? shareStore.resolveToken(bearer) : null;
+    if (!session) {
+      return authError;
+    }
+    if (!checkRateLimit(bearer)) {
+      return json(
+        { error: 'Rate limit exceeded. Maximum 30 ticket requests per minute.' },
+        { status: 429 }
+      );
+    }
+    const ticket = generateTicket({
+      readOnly: session.mode === 'view',
+      terminalId: session.terminalId,
+    });
+    return json({ expiresIn: 30, ticket });
   }
 
-  // Extract the API key for rate limiting
-  const apiKey = (request.headers.get('authorization') ?? '').substring(7).trim();
-
-  if (!checkRateLimit(apiKey)) {
+  if (!checkRateLimit(bearer)) {
     return json(
       { error: 'Rate limit exceeded. Maximum 30 ticket requests per minute.' },
       { status: 429 }

package/src/routes/terminals/[id]/+page.svelte

@@ -2,6 +2,9 @@
   import type {
     ConversationMessage,
     MessagePart,
+    ShareAuthResponse,
+    ShareMode,
+    ShareStatusResponse,
     ShooterConfig,
     TerminalDetailView,
     ToolUsePart,
@@ -17,6 +20,8 @@
   import ConnectionStatus from '$lib/modules/client/terminal/ConnectionStatus.svelte';
   import { createShortcutManager } from '$lib/modules/client/terminal/keyboard-shortcuts';
   import QuickKeys from '$lib/modules/client/terminal/QuickKeys.svelte';
+  import ShareGate from '$lib/modules/client/terminal/ShareGate.svelte';
+  import ShareSheet from '$lib/modules/client/terminal/ShareSheet.svelte';
   import ShortcutsHelp from '$lib/modules/client/terminal/ShortcutsHelp.svelte';
   import {
     Button,
@@ -46,6 +51,10 @@
   let inputText = $state('');
   let chatMessages = $state<ConversationMessage[]>([]);
   let chatSessionEnded = $state(false);
+  let authMode = $state<'guest' | 'owner' | null>(null);
+  let guestMode = $state<null | ShareMode>(null);
+  let shareGateVisible = $state(false);
+  let shareSheetOpen = $state(false);
 
   // DOM references
   let termContainer = $state<HTMLDivElement | null>(null);
@@ -80,6 +89,11 @@
   );
   const tabActiveIndex = $derived(viewMode === 'raw' ? 0 : 1);
   const displayCwd = $derived(shortenPath(currentCwd || terminal?.cwd || ''));
+  const isOwner = $derived(authMode === 'owner');
+  const viewOnly = $derived(authMode === 'guest' && guestMode === 'view');
+  const shareUrl = $derived(
+    typeof window !== 'undefined' ? `${window.location.origin}/terminals/${terminalId}` : ''
+  );
   const paletteCommands = $derived.by((): { action: () => void; label: string }[] => {
     const cmds: { action: () => void; label: string }[] = [
       { action: (): void => void goto('/'), label: 'Go to Home' },
@@ -92,7 +106,7 @@
         label: 'Show keyboard shortcuts',
       },
     ];
-    if (isRunning) {
+    if (isRunning && isOwner) {
       cmds.push({ action: (): void => void killTerminal(), label: 'Kill terminal' });
     }
     return cmds;
@@ -142,6 +156,47 @@
     }
   }
 
+  // ------- Guest share tokens -------
+
+  const SHARE_TOKENS_KEY = 'shooter_share_tokens';
+
+  function getShareToken(): null | string {
+    const id = terminalId;
+    if (!id) {
+      return null;
+    }
+    try {
+      const raw = localStorage.getItem(SHARE_TOKENS_KEY);
+      if (!raw) {
+        return null;
+      }
+      const map = JSON.parse(raw) as Record<string, string>;
+      return typeof map[id] === 'string' ? map[id] : null;
+    } catch {
+      return null;
+    }
+  }
+
+  function storeShareToken(token: string): void {
+    const id = terminalId;
+    if (!id) {
+      return;
+    }
+    let map: Record<string, string> = {};
+    try {
+      map = JSON.parse(localStorage.getItem(SHARE_TOKENS_KEY) ?? '{}') as Record<string, string>;
+    } catch {
+      // Corrupt entry — start fresh.
+    }
+    map[id] = token;
+    localStorage.setItem(SHARE_TOKENS_KEY, JSON.stringify(map));
+  }
+
+  /** Bearer for API calls: the owner's API key, or this terminal's guest token. */
+  function getBearer(): null | string {
+    return getConfig()?.apiKey ?? getShareToken();
+  }
+
   // ------- API calls -------
 
   async function fetchTerminal(): Promise<void> {
@@ -150,36 +205,92 @@
     }
 
     const config = getConfig();
-    if (!config) {
-      error = 'No configuration found. Please configure settings first.';
-      loading = false;
+    const bearer = config?.apiKey ?? getShareToken();
+    if (!bearer) {
+      await checkShareAccess();
       return;
     }
 
     try {
       const res = await fetch(`/api/terminals/${terminalId}`, {
-        headers: { Authorization: `Bearer ${config.apiKey}` },
+        headers: { Authorization: `Bearer ${bearer}` },
       });
+      if (res.status === 401 && !config) {
+        // Stale/revoked guest token — fall back to the password gate.
+        await checkShareAccess();
+        return;
+      }
       if (!res.ok) {
         error = res.status === 404 ? 'Terminal not found' : 'Failed to load terminal';
         loading = false;
         return;
       }
       terminal = (await res.json()) as TerminalDetailView;
+      if (config) {
+        authMode = 'owner';
+      } else {
+        authMode = 'guest';
+        guestMode = terminal.shareMode ?? 'view';
+      }
     } catch {
       error = 'Failed to connect to server';
     }
     loading = false;
   }
 
+  async function checkShareAccess(): Promise<void> {
+    try {
+      const res = await fetch(`/api/terminals/${terminalId}/share/status`);
+      if (res.ok) {
+        const data = (await res.json()) as ShareStatusResponse;
+        if (data.shared) {
+          shareGateVisible = true;
+          loading = false;
+          return;
+        }
+      }
+    } catch {
+      // Fall through to the configuration error.
+    }
+    error = 'No configuration found. Please configure settings first.';
+    loading = false;
+  }
+
+  async function submitSharePassword(password: string): Promise<null | string> {
+    try {
+      const res = await fetch(`/api/terminals/${terminalId}/share/auth`, {
+        body: JSON.stringify({ password }),
+        headers: { 'Content-Type': 'application/json' },
+        method: 'POST',
+      });
+      if (res.status === 429) {
+        return 'Too many attempts — try again in a minute.';
+      }
+      if (!res.ok) {
+        return 'Incorrect password.';
+      }
+      const data = (await res.json()) as ShareAuthResponse;
+      storeShareToken(data.token);
+      shareGateVisible = false;
+      loading = true;
+      await fetchTerminal();
+      if (terminal && !error) {
+        initViews();
+      }
+      return null;
+    } catch {
+      return 'Failed to reach the server.';
+    }
+  }
+
   async function getWsTicket(): Promise<null | string> {
-    const config = getConfig();
-    if (!config) {
+    const bearer = getBearer();
+    if (!bearer) {
       return null;
     }
     try {
       const res = await fetch('/api/ws-ticket', {
-        headers: { Authorization: `Bearer ${config.apiKey}` },
+        headers: { Authorization: `Bearer ${bearer}` },
         method: 'POST',
       });
       if (!res.ok) {
@@ -269,10 +380,12 @@
       }
 
       const instance = await createTerminal({
-        apiKey: getConfig()?.apiKey,
+        apiKey: getBearer() ?? undefined,
         container: termContainer,
         fontSize: window.innerWidth < 768 ? 12 : 14,
         getTicket,
+        initialCols: terminal.cols ?? undefined,
+        initialRows: terminal.rows ?? undefined,
         onActivity: (active: boolean) => {
           if (!disposed) {
             isActive = active;
@@ -304,6 +417,7 @@
             rawConnectionStatus = 'connected';
           }
         },
+        readOnly: viewOnly,
         terminalId,
         wsUrl,
       });
@@ -606,23 +720,7 @@
 
   // ------- Lifecycle -------
 
-  onMount(async () => {
-    await fetchTerminal();
-    if (disposed) {
-      return;
-    }
-
-    // Set up keyboard shortcuts
-    shortcutManager = createShortcutManager({
-      onHelp: () => {
-        showShortcutsHelp = !showShortcutsHelp;
-      },
-    });
-
-    if (!terminal || error) {
-      return;
-    }
-
+  function initViews(): void {
     // Default view: Chat on mobile for AI sessions, Raw on desktop
     if (isAI && window.innerWidth < 768) {
       viewMode = 'chat';
@@ -640,6 +738,26 @@
       void connectSessionWs();
       chatInitialized = true;
     }
+  }
+
+  onMount(async () => {
+    await fetchTerminal();
+    if (disposed) {
+      return;
+    }
+
+    // Set up keyboard shortcuts
+    shortcutManager = createShortcutManager({
+      onHelp: () => {
+        showShortcutsHelp = !showShortcutsHelp;
+      },
+    });
+
+    if (!terminal || error) {
+      return;
+    }
+
+    initViews();
   });
 
   onDestroy(() => {
@@ -664,6 +782,10 @@
       <div class="skeleton" style="width: 100%; height: 100%;"></div>
     </div>
   </div>
+{:else if shareGateVisible}
+  <div class="term-page">
+    <ShareGate onSubmit={submitSharePassword} />
+  </div>
 {:else if error}
   <main class="main">
     <div class="session-back-row">
@@ -681,7 +803,9 @@
     <!-- Top Bar -->
     <div class="term-topbar">
       <div class="term-topbar-left">
-        <a href="/terminals" class="term-back" aria-label="Back to terminals">&larr;</a>
+        {#if isOwner}
+          <a href="/terminals" class="term-back" aria-label="Back to terminals">&larr;</a>
+        {/if}
         <span class="term-command-name">{commandName}</span>
         <Pill text={badgeLabel} classes={badgeClass} />
         {#if isRunning}
@@ -695,7 +819,7 @@
           </Tooltip>
         {/if}
         <ConnectionStatus status={connectionStatus} onretry={handleRetry} />
-        {#if isAI && (terminal as TerminalDetailView & { sessionFile?: string })?.sessionFile}
+        {#if isOwner && isAI && (terminal as TerminalDetailView & { sessionFile?: string })?.sessionFile}
           {@const sessionFile =
             (terminal as TerminalDetailView & { sessionFile?: string }).sessionFile ?? ''}
           <a
@@ -729,22 +853,31 @@
           ariaLabel="Keyboard shortcuts"
         />
 
-        {#if isRunning}
-          <Button
-            classes="btn-danger btn-sm"
-            onclick={killTerminal}
-            disabled={killing}
-            showLoader={killing}
-            text="Kill"
-          />
-        {:else}
+        {#if isOwner}
           <Button
             classes="btn-secondary btn-sm"
-            onclick={removeTerminal}
-            disabled={removing}
-            showLoader={removing}
-            text="Remove"
+            onclick={(): void => {
+              shareSheetOpen = true;
+            }}
+            text="Share"
           />
+          {#if isRunning}
+            <Button
+              classes="btn-danger btn-sm"
+              onclick={killTerminal}
+              disabled={killing}
+              showLoader={killing}
+              text="Kill"
+            />
+          {:else}
+            <Button
+              classes="btn-secondary btn-sm"
+              onclick={removeTerminal}
+              disabled={removing}
+              showLoader={removing}
+              text="Remove"
+            />
+          {/if}
         {/if}
       </div>
     </div>
@@ -759,7 +892,7 @@
     ></div>
 
     <!-- Raw Input Bar + Quick Keys -->
-    {#if isRunning && viewMode === 'raw'}
+    {#if isRunning && viewMode === 'raw' && !viewOnly}
       <div class="term-input-area">
         <QuickKeys onKey={handleQuickKey} />
         <div class="term-input-bar">
@@ -788,7 +921,7 @@
         messages={chatMessages}
         connectionState={connectionStatus}
         sessionEnded={chatSessionEnded}
-        showInput={isRunning}
+        showInput={isRunning && !viewOnly}
         onSendInput={handleChatSendInput}
         onCancel={handleChatCancel}
       />
@@ -815,6 +948,14 @@
     showShortcutsHelp = false;
   }}
 />
+<ShareSheet
+  open={shareSheetOpen}
+  terminalId={terminalId ?? ''}
+  {shareUrl}
+  onClose={(): void => {
+    shareSheetOpen = false;
+  }}
+/>
 <CommandPalette
   bind:open={showCommandPalette}
   commands={paletteCommands}

package/build/client/_app/immutable/assets/11.v5KA95xm.css

@@ -1 +0,0 @@
-.command-palette{--command-menu-overlay-background: rgba(0, 0, 0, .5);--command-menu-background: var(--component-bg);--command-menu-border: 1px solid var(--border);--command-menu-border-radius: var(--radius-lg);--command-menu-width: 500px;--command-menu-max-width: 90vw;--command-menu-input-color: var(--text-primary);--command-menu-input-placeholder-color: var(--text-tertiary);--command-menu-input-font-family: var(--font-mono);--command-menu-separator-color: var(--border);--command-menu-item-color: var(--text-secondary);--command-menu-item-active-background: var(--component-bg-hover);--command-menu-item-active-color: var(--text-primary);--command-menu-empty-color: var(--text-tertiary);--command-menu-z-index: 1001}.connection-status.svelte-1cg9pai{display:inline-flex;align-items:center;gap:6px;font-size:12px;font-weight:500;line-height:1;flex-shrink:0}.connection-status.connected.svelte-1cg9pai{color:var(--ds-green-700)}.connection-status.reconnecting.svelte-1cg9pai{color:var(--ds-amber-900)}.connection-status.disconnected.svelte-1cg9pai{color:var(--ds-red-900)}.conn-dot.svelte-1cg9pai{width:8px;height:8px;border-radius:50%;flex-shrink:0}.conn-dot.connected.svelte-1cg9pai{background:var(--ds-green-700)}.conn-dot.reconnecting.svelte-1cg9pai{background:var(--ds-amber-700);animation:pulse-dot 1.5s ease-in-out infinite}.conn-dot.disconnected.svelte-1cg9pai{background:var(--ds-red-700)}.status-label.svelte-1cg9pai{white-space:nowrap}.btn-retry{--button-height: auto;--button-padding: 2px 8px;--button-font-size: 12px;--button-border: 1px solid currentColor;--button-text-color: inherit;margin-left:2px}@media(max-width:480px){.status-label.svelte-1cg9pai{display:none}}.quick-keys.svelte-64qat5{display:flex;overflow-x:auto;gap:6px;padding:var(--space-2) var(--space-3);scrollbar-width:none;-webkit-overflow-scrolling:touch;flex-shrink:0}.quick-keys.svelte-64qat5::-webkit-scrollbar{display:none}.btn-quick-key{--button-color: var(--ds-gray-200);--button-text-color: var(--ds-gray-700);--button-border: 1px solid var(--ds-gray-400);--button-hover-color: var(--ds-gray-300);--button-hover-text-color: var(--text-primary);--button-hover-border: 1px solid var(--ds-gray-400);--button-height: 44px;--button-padding: 0 var(--space-3);--button-border-radius: var(--radius-md);--button-font-family: var(--font-mono);--button-font-size: var(--text-xs);min-width:52px;flex-shrink:0;white-space:nowrap;user-select:none;-webkit-user-select:none;-webkit-tap-highlight-color:transparent;touch-action:manipulation}.shortcuts-modal{--modal-content-background-color: var(--component-bg);--modal-border-radius: var(--radius-lg);--modal-header-background-color: var(--component-bg);--modal-header-padding: var(--space-4) var(--space-5);--modal-header-border-bottom: 1px solid var(--border);--header-text-size: var(--text-lg);--modal-header-text-weight: 600;--background-color: rgba(0, 0, 0, .5);--modal-z-index: 1000}.shortcuts-modal .modal-content{max-width:420px;width:90vw;min-width:320px}.shortcuts-list.svelte-1u7lstk{display:flex;flex-direction:column;gap:var(--space-2);padding:var(--space-4) var(--space-5)}.shortcut-row.svelte-1u7lstk{display:flex;justify-content:space-between;align-items:center;padding:var(--space-2) 0}.shortcut-desc.svelte-1u7lstk{font-size:var(--text-sm);color:var(--text-secondary)}.shortcut-kbd{--keyboard-input-key-color: var(--text-primary);--keyboard-input-key-background: var(--ds-gray-200);--keyboard-input-key-border: 1px solid var(--ds-gray-400);--keyboard-input-key-box-shadow: 0 1px 0 var(--ds-gray-400);--keyboard-input-font-family: var(--font-mono);--keyboard-input-font-size: var(--text-xs)}.term-page.svelte-1tubujq{display:flex;flex-direction:column;height:calc(100vh - var(--header-height) - 64px);height:calc(100dvh - var(--header-height) - 64px);overflow:hidden;background:var(--ds-background-200)}.term-topbar.svelte-1tubujq{display:flex;align-items:center;justify-content:space-between;gap:var(--space-3);padding:var(--space-2) var(--space-4);background:var(--ds-background-100);border-bottom:1px solid var(--border);flex-shrink:0;min-height:48px}.term-topbar-left.svelte-1tubujq{display:flex;align-items:center;gap:var(--space-2);min-width:0;overflow:hidden}.term-topbar-right.svelte-1tubujq{display:flex;align-items:center;gap:var(--space-3);flex-shrink:1}.term-back.svelte-1tubujq{display:inline-flex;align-items:center;justify-content:center;width:44px;height:44px;border-radius:var(--radius-md);background:transparent;color:var(--text-secondary);text-decoration:none;font-size:18px;transition:background var(--transition-fast),color var(--transition-fast);flex-shrink:0}.term-back.svelte-1tubujq:hover{background:var(--ds-gray-alpha-100);color:var(--text-primary)}.term-command-name.svelte-1tubujq{font-family:var(--font-mono);font-size:var(--text-base);font-weight:600;color:var(--text-primary);white-space:nowrap;overflow:hidden;text-overflow:ellipsis}.term-tabs{--tabs-bar-border-bottom: none;--tabs-bar-background: var(--ds-gray-200);--tabs-bar-padding: 2px;--tabs-item-padding: 6px 12px;--tabs-item-font-size: var(--text-xs);--tabs-indicator-height: 0;--tabs-active-color: var(--text-primary);--tabs-item-color: var(--text-tertiary);border-radius:var(--radius-md);border:1px solid var(--ds-gray-400);overflow:hidden}.term-shortcuts-btn{--button-height: 28px;--button-width: 28px;--button-padding: 0;--button-border-radius: var(--radius-sm);--button-border: 1px solid var(--border);--button-color: transparent;--button-text-color: var(--text-tertiary);--button-font-size: 14px;--button-font-weight: 600;--button-hover-color: var(--component-bg-hover);--button-hover-text-color: var(--text-primary);flex-shrink:0}.term-cwd.svelte-1tubujq{font-family:var(--font-mono);font-size:11px;color:var(--text-tertiary);overflow:hidden;text-overflow:ellipsis;white-space:nowrap;max-width:200px}.term-session-link.svelte-1tubujq{font-size:11px;font-weight:500;color:var(--ds-blue-900);text-decoration:none;white-space:nowrap;padding:2px 8px;border-radius:var(--radius-sm);border:1px solid var(--ds-blue-400);transition:background var(--transition-fast),color var(--transition-fast)}.term-session-link.svelte-1tubujq:hover{background:var(--ds-blue-100);color:var(--ds-blue-1000)}.activity-dot.svelte-1tubujq{width:8px;height:8px;border-radius:50%;flex-shrink:0}.activity-active.svelte-1tubujq{background:var(--ds-green-500);animation:activity-pulse .6s ease-in-out infinite}.activity-idle.svelte-1tubujq{background:var(--ds-gray-600)}.term-body.svelte-1tubujq{flex:1;flex-direction:column;min-height:0;overflow:hidden;padding:var(--space-1);background:var(--ds-background-200, #0a0a0f)}.term-body.svelte-1tubujq .xterm{height:100%}.term-body.svelte-1tubujq .xterm-viewport{overflow-y:auto!important}.term-body-loading.svelte-1tubujq{flex:1;padding:var(--space-4);min-height:200px}.term-chat-body.svelte-1tubujq{flex:1;display:flex;flex-direction:column;min-height:0;overflow:hidden}.term-input-area.svelte-1tubujq{flex-shrink:0;background:var(--ds-background-100);border-top:1px solid var(--border);padding-bottom:env(safe-area-inset-bottom,0px)}.term-input-bar.svelte-1tubujq{display:flex;align-items:center;gap:var(--space-2);padding:var(--space-2) var(--space-3)}.term-input-field{--input-container-margin: 0;--input-height: 44px;flex:1}.btn-send{--button-height: 44px;--button-width: 44px;--button-padding: 0;--button-font-size: 18px;flex-shrink:0}.term-exited-bar.svelte-1tubujq{display:flex;align-items:center;justify-content:center;gap:var(--space-2);padding:var(--space-2) var(--space-3);padding-bottom:calc(var(--space-2) + env(safe-area-inset-bottom,0px));background:var(--ds-gray-200);border-top:1px solid var(--border);font-size:var(--text-sm);color:var(--text-tertiary);flex-shrink:0}@media(max-width:768px){.term-topbar.svelte-1tubujq{padding:var(--space-2) var(--space-3);gap:var(--space-2)}.term-command-name.svelte-1tubujq{font-size:var(--text-sm);max-width:100px}}@media(max-width:480px){.term-topbar.svelte-1tubujq{min-height:44px;padding:var(--space-1) var(--space-2)}.term-command-name.svelte-1tubujq{max-width:80px;text-overflow:ellipsis}.term-topbar-right.svelte-1tubujq{flex-shrink:1}}