@juspay/shooter 1.19.0 → 1.21.0

package/build/server/chunks/_server.ts-CA5KUENM.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-CA5KUENM.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/terminals/_id_/share/_server.ts.js"],"sourcesContent":["import { v as validateAuth } from \"../../../../../../chunks/auth.js\";\nimport { p as ptyManager } from \"../../../../../../chunks/pty-manager.js\";\nimport { s as shareStore, h as hashPassword } from \"../../../../../../chunks/share-store.js\";\nimport { c as closeGuests } from \"../../../../../../chunks/guest-registry.js\";\nimport { json } from \"@sveltejs/kit\";\nconst MIN_PASSWORD_LENGTH = 6;\nconst MODES = [\"view\", \"control\"];\nfunction toInfo(terminalId) {\n  const share = shareStore.getShare(terminalId);\n  if (!share) {\n    return { active: false, createdAt: null, mode: null, updatedAt: null };\n  }\n  return { active: true, createdAt: share.createdAt, mode: share.mode, updatedAt: share.updatedAt };\n}\nconst GET = ({ params, request }) => {\n  const authError = validateAuth(request);\n  if (authError) {\n    return authError;\n  }\n  return json(toInfo(params.id));\n};\nconst PUT = async ({ params, request }) => {\n  const authError = validateAuth(request);\n  if (authError) {\n    return authError;\n  }\n  if (!ptyManager.get(params.id)) {\n    return json({ error: \"Terminal not found\" }, { status: 404 });\n  }\n  let body;\n  try {\n    body = await request.json();\n  } catch {\n    return json({ error: \"Invalid JSON\" }, { status: 400 });\n  }\n  if (!MODES.includes(body.mode)) {\n    return json({ error: \"mode must be 'view' or 'control'\" }, { status: 400 });\n  }\n  const existing = shareStore.getShare(params.id);\n  const password = typeof body.password === \"string\" ? body.password : \"\";\n  if (!existing && password.length < MIN_PASSWORD_LENGTH) {\n    return json(\n      { error: `password is required (min ${String(MIN_PASSWORD_LENGTH)} chars)` },\n      { status: 400 }\n    );\n  }\n  if (password && password.length < MIN_PASSWORD_LENGTH) {\n    return json(\n      { error: `password must be at least ${String(MIN_PASSWORD_LENGTH)} chars` },\n      { status: 400 }\n    );\n  }\n  const now = Date.now();\n  shareStore.setShare({\n    createdAt: existing?.createdAt ?? now,\n    mode: body.mode,\n    // `existing` is guaranteed non-null when password is empty (validated above).\n    passwordHash: password ? hashPassword(password) : existing?.passwordHash ?? \"\",\n    terminalId: params.id,\n    updatedAt: now\n  });\n  if (password) {\n    shareStore.deleteSessions(params.id);\n  }\n  if (password || existing?.mode !== body.mode) {\n    closeGuests(params.id);\n  }\n  return json(toInfo(params.id));\n};\nconst DELETE = ({ params, request }) => {\n  const authError = validateAuth(request);\n  if (authError) {\n    return authError;\n  }\n  shareStore.deleteShare(params.id);\n  const closed = closeGuests(params.id);\n  return json({ closedConnections: closed, success: true });\n};\nexport {\n  DELETE,\n  GET,\n  PUT\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;AAKA,MAAM,mBAAmB,GAAG,CAAC;AAC7B,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC;AACjC,SAAS,MAAM,CAAC,UAAU,EAAE;AAC5B,EAAE,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC;AAC/C,EAAE,IAAI,CAAC,KAAK,EAAE;AACd,IAAI,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE;AAC1E,EAAE;AACF,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE;AACnG;AACK,MAAC,GAAG,GAAG,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK;AACrC,EAAE,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,CAAC;AACzC,EAAE,IAAI,SAAS,EAAE;AACjB,IAAI,OAAO,SAAS;AACpB,EAAE;AACF,EAAE,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAChC;AACK,MAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK;AAC3C,EAAE,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,CAAC;AACzC,EAAE,IAAI,SAAS,EAAE;AACjB,IAAI,OAAO,SAAS;AACpB,EAAE;AACF,EAAE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE;AAClC,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACjE,EAAE;AACF,EAAE,IAAI,IAAI;AACV,EAAE,IAAI;AACN,IAAI,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE;AAC/B,EAAE,CAAC,CAAC,MAAM;AACV,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC3D,EAAE;AACF,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;AAClC,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,kCAAkC,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC/E,EAAE;AACF,EAAE,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;AACjD,EAAE,MAAM,QAAQ,GAAG,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,GAAG,IAAI,CAAC,QAAQ,GAAG,EAAE;AACzE,EAAE,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,mBAAmB,EAAE;AAC1D,IAAI,OAAO,IAAI;AACf,MAAM,EAAE,KAAK,EAAE,CAAC,0BAA0B,EAAE,MAAM,CAAC,mBAAmB,CAAC,CAAC,OAAO,CAAC,EAAE;AAClF,MAAM,EAAE,MAAM,EAAE,GAAG;AACnB,KAAK;AACL,EAAE;AACF,EAAE,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,mBAAmB,EAAE;AACzD,IAAI,OAAO,IAAI;AACf,MAAM,EAAE,KAAK,EAAE,CAAC,0BAA0B,EAAE,MAAM,CAAC,mBAAmB,CAAC,CAAC,MAAM,CAAC,EAAE;AACjF,MAAM,EAAE,MAAM,EAAE,GAAG;AACnB,KAAK;AACL,EAAE;AACF,EAAE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;AACxB,EAAE,UAAU,CAAC,QAAQ,CAAC;AACtB,IAAI,SAAS,EAAE,QAAQ,EAAE,SAAS,IAAI,GAAG;AACzC,IAAI,IAAI,EAAE,IAAI,CAAC,IAAI;AACnB;AACA,IAAI,YAAY,EAAE,QAAQ,GAAG,YAAY,CAAC,QAAQ,CAAC,GAAG,QAAQ,EAAE,YAAY,IAAI,EAAE;AAClF,IAAI,UAAU,EAAE,MAAM,CAAC,EAAE;AACzB,IAAI,SAAS,EAAE;AACf,GAAG,CAAC;AACJ,EAAE,IAAI,QAAQ,EAAE;AAChB,IAAI,UAAU,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;AACxC,EAAE;AACF,EAAE,IAAI,QAAQ,IAAI,QAAQ,EAAE,IAAI,KAAK,IAAI,CAAC,IAAI,EAAE;AAChD,IAAI,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;AAC1B,EAAE;AACF,EAAE,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAChC;AACK,MAAC,MAAM,GAAG,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK;AACxC,EAAE,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,CAAC;AACzC,EAAE,IAAI,SAAS,EAAE;AACjB,IAAI,OAAO,SAAS;AACpB,EAAE;AACF,EAAE,UAAU,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;AACnC,EAAE,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;AACvC,EAAE,OAAO,IAAI,CAAC,EAAE,iBAAiB,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3D;;;;"}

package/build/server/chunks/{_server.ts-DhJx0DLr.js → _server.ts-CC2K8-L2.js}

@@ -1,6 +1,9 @@
 import { v as validateAuth } from './auth-DuunT7Cg.js';
-import { p as ptyManager } from './pty-manager-41h3IK8K.js';
+import { p as ptyManager } from './pty-manager-ZqXqa-6A.js';
+import { r as resolveAccess } from './share-auth-BS7JuiHf.js';
+import { s as shareStore } from './share-store-B9jMpVg0.js';
 import { t as toErrorMessage } from './error-DDXB3duW.js';
+import { c as closeGuests } from './guest-registry-Dxvd7p-g.js';
 import { j as json } from './index-CoD1IJuy.js';
 import './shared-server-DaWdgxVh.js';
 import 'crypto';
@@ -10,7 +13,6 @@ import 'path';
 import 'url';
 import './qwen-reader-DGfUbKaJ.js';
 import 'os';
-import './events-handler-Dm1mNPQP.js';
 import './super-session-handler-DPyxFgmz.js';
 import './registry-D4J_CuzW.js';
 import 'better-sqlite3';
@@ -31,9 +33,9 @@ function lastScrollbackLine(scrollback) {
   return null;
 }
 const GET = ({ params, request }) => {
-  const authError = validateAuth(request);
-  if (authError) {
-    return authError;
+  const access = resolveAccess(request, params.id);
+  if (!access) {
+    return json({ error: "Unauthorized" }, { status: 401 });
   }
   try {
     const terminal = ptyManager.get(params.id);
@@ -43,6 +45,7 @@ const GET = ({ params, request }) => {
     return json({
       args: terminal.args,
       clientCount: terminal.clients.size,
+      cols: terminal.cols,
       command: terminal.command,
       createdAt: terminal.createdAt.toISOString(),
       cwd: terminal.cwd,
@@ -51,10 +54,12 @@ const GET = ({ params, request }) => {
       id: terminal.id,
       lastOutput: lastScrollbackLine(terminal.scrollback),
       pid: terminal.pid,
+      rows: terminal.rows,
       sessionWs: `/ws/session/${terminal.id}`,
       status: terminal.status,
       timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-      ws: `/ws/terminal/${terminal.id}`
+      ws: `/ws/terminal/${terminal.id}`,
+      ...access.level === "guest" ? { shareMode: access.mode } : {}
     });
   } catch (error) {
     console.error("[terminals] Failed to get terminal:", toErrorMessage(error));
@@ -73,6 +78,8 @@ const DELETE = ({ params, request }) => {
     }
     if (terminal.status === "exited") {
       ptyManager.remove(params.id);
+      shareStore.deleteShare(params.id);
+      closeGuests(params.id);
       console.log(`[terminals] Removed exited terminal ${params.id}`);
       return json({
         removed: true,
@@ -81,6 +88,8 @@ const DELETE = ({ params, request }) => {
       });
     }
     ptyManager.kill(params.id);
+    shareStore.deleteShare(params.id);
+    closeGuests(params.id);
     console.log(`[terminals] Killed terminal ${params.id} (pid=${terminal.pid})`);
     return json({
       success: true,
@@ -93,4 +102,4 @@ const DELETE = ({ params, request }) => {
 };
 
 export { DELETE, GET };
-//# sourceMappingURL=_server.ts-DhJx0DLr.js.map
+//# sourceMappingURL=_server.ts-CC2K8-L2.js.map

package/build/server/chunks/_server.ts-CC2K8-L2.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-CC2K8-L2.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/terminals/_id_/_server.ts.js"],"sourcesContent":["import { v as validateAuth } from \"../../../../../chunks/auth.js\";\nimport { p as ptyManager } from \"../../../../../chunks/pty-manager.js\";\nimport { r as resolveAccess } from \"../../../../../chunks/share-auth.js\";\nimport { s as shareStore } from \"../../../../../chunks/share-store.js\";\nimport { t as toErrorMessage } from \"../../../../../chunks/error.js\";\nimport { c as closeGuests } from \"../../../../../chunks/guest-registry.js\";\nimport { json } from \"@sveltejs/kit\";\nfunction lastScrollbackLine(scrollback) {\n  if (!scrollback) {\n    return null;\n  }\n  const lines = scrollback.trimEnd().split(\"\\n\");\n  for (let i = lines.length - 1; i >= 0; i--) {\n    const line = lines[i].trim();\n    if (line) {\n      return line.slice(0, 200);\n    }\n  }\n  return null;\n}\nconst GET = ({ params, request }) => {\n  const access = resolveAccess(request, params.id);\n  if (!access) {\n    return json({ error: \"Unauthorized\" }, { status: 401 });\n  }\n  try {\n    const terminal = ptyManager.get(params.id);\n    if (!terminal) {\n      return json({ error: \"Terminal not found\" }, { status: 404 });\n    }\n    return json({\n      args: terminal.args,\n      clientCount: terminal.clients.size,\n      cols: terminal.cols,\n      command: terminal.command,\n      createdAt: terminal.createdAt.toISOString(),\n      cwd: terminal.cwd,\n      exitCode: terminal.exitCode,\n      exitedAt: terminal.exitedAt?.toISOString() ?? null,\n      id: terminal.id,\n      lastOutput: lastScrollbackLine(terminal.scrollback),\n      pid: terminal.pid,\n      rows: terminal.rows,\n      sessionWs: `/ws/session/${terminal.id}`,\n      status: terminal.status,\n      timestamp: (/* @__PURE__ */ new Date()).toISOString(),\n      ws: `/ws/terminal/${terminal.id}`,\n      ...access.level === \"guest\" ? { shareMode: access.mode } : {}\n    });\n  } catch (error) {\n    console.error(\"[terminals] Failed to get terminal:\", toErrorMessage(error));\n    return json({ error: \"Failed to get terminal\" }, { status: 500 });\n  }\n};\nconst DELETE = ({ params, request }) => {\n  const authError = validateAuth(request);\n  if (authError) {\n    return authError;\n  }\n  try {\n    const terminal = ptyManager.get(params.id);\n    if (!terminal) {\n      return json({ error: \"Terminal not found\" }, { status: 404 });\n    }\n    if (terminal.status === \"exited\") {\n      ptyManager.remove(params.id);\n      shareStore.deleteShare(params.id);\n      closeGuests(params.id);\n      console.log(`[terminals] Removed exited terminal ${params.id}`);\n      return json({\n        removed: true,\n        success: true,\n        timestamp: (/* @__PURE__ */ new Date()).toISOString()\n      });\n    }\n    ptyManager.kill(params.id);\n    shareStore.deleteShare(params.id);\n    closeGuests(params.id);\n    console.log(`[terminals] Killed terminal ${params.id} (pid=${terminal.pid})`);\n    return json({\n      success: true,\n      timestamp: (/* @__PURE__ */ new Date()).toISOString()\n    });\n  } catch (error) {\n    console.error(\"[terminals] Failed to kill terminal:\", toErrorMessage(error));\n    return json({ error: \"Failed to kill terminal\" }, { status: 500 });\n  }\n};\nexport {\n  DELETE,\n  GET\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;AAOA,SAAS,kBAAkB,CAAC,UAAU,EAAE;AACxC,EAAE,IAAI,CAAC,UAAU,EAAE;AACnB,IAAI,OAAO,IAAI;AACf,EAAE;AACF,EAAE,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;AAChD,EAAE,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE;AAC9C,IAAI,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;AAChC,IAAI,IAAI,IAAI,EAAE;AACd,MAAM,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;AAC/B,IAAI;AACJ,EAAE;AACF,EAAE,OAAO,IAAI;AACb;AACK,MAAC,GAAG,GAAG,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK;AACrC,EAAE,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC;AAClD,EAAE,IAAI,CAAC,MAAM,EAAE;AACf,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC3D,EAAE;AACF,EAAE,IAAI;AACN,IAAI,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;AAC9C,IAAI,IAAI,CAAC,QAAQ,EAAE;AACnB,MAAM,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACnE,IAAI;AACJ,IAAI,OAAO,IAAI,CAAC;AAChB,MAAM,IAAI,EAAE,QAAQ,CAAC,IAAI;AACzB,MAAM,WAAW,EAAE,QAAQ,CAAC,OAAO,CAAC,IAAI;AACxC,MAAM,IAAI,EAAE,QAAQ,CAAC,IAAI;AACzB,MAAM,OAAO,EAAE,QAAQ,CAAC,OAAO;AAC/B,MAAM,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC,WAAW,EAAE;AACjD,MAAM,GAAG,EAAE,QAAQ,CAAC,GAAG;AACvB,MAAM,QAAQ,EAAE,QAAQ,CAAC,QAAQ;AACjC,MAAM,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,WAAW,EAAE,IAAI,IAAI;AACxD,MAAM,EAAE,EAAE,QAAQ,CAAC,EAAE;AACrB,MAAM,UAAU,EAAE,kBAAkB,CAAC,QAAQ,CAAC,UAAU,CAAC;AACzD,MAAM,GAAG,EAAE,QAAQ,CAAC,GAAG;AACvB,MAAM,IAAI,EAAE,QAAQ,CAAC,IAAI;AACzB,MAAM,SAAS,EAAE,CAAC,YAAY,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;AAC7C,MAAM,MAAM,EAAE,QAAQ,CAAC,MAAM;AAC7B,MAAM,SAAS,EAAE,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW,EAAE;AAC3D,MAAM,EAAE,EAAE,CAAC,aAAa,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;AACvC,MAAM,GAAG,MAAM,CAAC,KAAK,KAAK,OAAO,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG;AACjE,KAAK,CAAC;AACN,EAAE,CAAC,CAAC,OAAO,KAAK,EAAE;AAClB,IAAI,OAAO,CAAC,KAAK,CAAC,qCAAqC,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC;AAC/E,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACrE,EAAE;AACF;AACK,MAAC,MAAM,GAAG,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK;AACxC,EAAE,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,CAAC;AACzC,EAAE,IAAI,SAAS,EAAE;AACjB,IAAI,OAAO,SAAS;AACpB,EAAE;AACF,EAAE,IAAI;AACN,IAAI,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;AAC9C,IAAI,IAAI,CAAC,QAAQ,EAAE;AACnB,MAAM,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACnE,IAAI;AACJ,IAAI,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ,EAAE;AACtC,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;AAClC,MAAM,UAAU,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;AACvC,MAAM,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;AAC5B,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,oCAAoC,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;AACrE,MAAM,OAAO,IAAI,CAAC;AAClB,QAAQ,OAAO,EAAE,IAAI;AACrB,QAAQ,OAAO,EAAE,IAAI;AACrB,QAAQ,SAAS,EAAE,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW;AAC3D,OAAO,CAAC;AACR,IAAI;AACJ,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;AAC9B,IAAI,UAAU,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;AACrC,IAAI,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;AAC1B,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,4BAA4B,EAAE,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AACjF,IAAI,OAAO,IAAI,CAAC;AAChB,MAAM,OAAO,EAAE,IAAI;AACnB,MAAM,SAAS,EAAE,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW;AACzD,KAAK,CAAC;AACN,EAAE,CAAC,CAAC,OAAO,KAAK,EAAE;AAClB,IAAI,OAAO,CAAC,KAAK,CAAC,sCAAsC,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC;AAChF,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACtE,EAAE;AACF;;;;"}

package/build/server/chunks/{_server.ts-Bi0Oe4PF.js → _server.ts-CD7JP3fz.js}

@@ -1,26 +1,31 @@
-import { v as validateAuth } from './auth-DuunT7Cg.js';
-import { p as ptyManager } from './pty-manager-41h3IK8K.js';
+import { p as ptyManager } from './pty-manager-ZqXqa-6A.js';
+import { r as resolveAccess } from './share-auth-BS7JuiHf.js';
 import { t as toErrorMessage } from './error-DDXB3duW.js';
 import { j as json } from './index-CoD1IJuy.js';
-import './shared-server-DaWdgxVh.js';
-import 'crypto';
 import 'child_process';
+import 'crypto';
 import 'fs';
 import 'path';
 import 'url';
 import './qwen-reader-DGfUbKaJ.js';
 import 'os';
-import './events-handler-Dm1mNPQP.js';
+import './guest-registry-Dxvd7p-g.js';
 import './super-session-handler-DPyxFgmz.js';
 import './registry-D4J_CuzW.js';
 import 'better-sqlite3';
 import './coordinator-DMU_ADXf.js';
 import 'net';
+import './auth-DuunT7Cg.js';
+import './shared-server-DaWdgxVh.js';
+import './share-store-B9jMpVg0.js';
 
 const POST = async ({ params, request }) => {
-  const authError = validateAuth(request);
-  if (authError) {
-    return authError;
+  const access = resolveAccess(request, params.id);
+  if (!access) {
+    return json({ error: "Unauthorized" }, { status: 401 });
+  }
+  if (access.level === "guest" && access.mode !== "control") {
+    return json({ error: "View-only access" }, { status: 403 });
   }
   let body;
   try {
@@ -62,4 +67,4 @@ const POST = async ({ params, request }) => {
 };
 
 export { POST };
-//# sourceMappingURL=_server.ts-Bi0Oe4PF.js.map
+//# sourceMappingURL=_server.ts-CD7JP3fz.js.map

package/build/server/chunks/_server.ts-CD7JP3fz.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-CD7JP3fz.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/terminals/_id_/resize/_server.ts.js"],"sourcesContent":["import { p as ptyManager } from \"../../../../../../chunks/pty-manager.js\";\nimport { r as resolveAccess } from \"../../../../../../chunks/share-auth.js\";\nimport { t as toErrorMessage } from \"../../../../../../chunks/error.js\";\nimport { json } from \"@sveltejs/kit\";\nconst POST = async ({ params, request }) => {\n  const access = resolveAccess(request, params.id);\n  if (!access) {\n    return json({ error: \"Unauthorized\" }, { status: 401 });\n  }\n  if (access.level === \"guest\" && access.mode !== \"control\") {\n    return json({ error: \"View-only access\" }, { status: 403 });\n  }\n  let body;\n  try {\n    body = await request.json();\n  } catch {\n    return json({ error: \"Invalid JSON in request body\" }, { status: 400 });\n  }\n  try {\n    const { cols, rows } = body;\n    if (cols === void 0 || rows === void 0) {\n      return json({ error: \"cols and rows are required\" }, { status: 400 });\n    }\n    if (typeof cols !== \"number\" || cols < 1) {\n      return json({ error: \"cols must be a positive number\" }, { status: 400 });\n    }\n    if (typeof rows !== \"number\" || rows < 1) {\n      return json({ error: \"rows must be a positive number\" }, { status: 400 });\n    }\n    if (cols > 500 || rows > 200) {\n      return json({ error: \"cols must be <= 500 and rows must be <= 200\" }, { status: 400 });\n    }\n    const terminal = ptyManager.get(params.id);\n    if (!terminal) {\n      return json({ error: \"Terminal not found\" }, { status: 404 });\n    }\n    if (terminal.status === \"exited\") {\n      return json({ error: \"Terminal already exited\" }, { status: 409 });\n    }\n    ptyManager.resize(params.id, cols, rows);\n    console.log(`[terminals] Resized terminal ${params.id} to ${cols}x${rows}`);\n    return json({\n      success: true,\n      timestamp: (/* @__PURE__ */ new Date()).toISOString()\n    });\n  } catch (error) {\n    console.error(\"[terminals] Failed to resize terminal:\", toErrorMessage(error));\n    return json({ error: \"Failed to resize terminal\" }, { status: 500 });\n  }\n};\nexport {\n  POST\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;AAIK,MAAC,IAAI,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK;AAC5C,EAAE,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC;AAClD,EAAE,IAAI,CAAC,MAAM,EAAE;AACf,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC3D,EAAE;AACF,EAAE,IAAI,MAAM,CAAC,KAAK,KAAK,OAAO,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE;AAC7D,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC/D,EAAE;AACF,EAAE,IAAI,IAAI;AACV,EAAE,IAAI;AACN,IAAI,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE;AAC/B,EAAE,CAAC,CAAC,MAAM;AACV,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,8BAA8B,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC3E,EAAE;AACF,EAAE,IAAI;AACN,IAAI,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI;AAC/B,IAAI,IAAI,IAAI,KAAK,KAAK,CAAC,IAAI,IAAI,KAAK,KAAK,CAAC,EAAE;AAC5C,MAAM,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,4BAA4B,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC3E,IAAI;AACJ,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,GAAG,CAAC,EAAE;AAC9C,MAAM,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,gCAAgC,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC/E,IAAI;AACJ,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,GAAG,CAAC,EAAE;AAC9C,MAAM,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,gCAAgC,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC/E,IAAI;AACJ,IAAI,IAAI,IAAI,GAAG,GAAG,IAAI,IAAI,GAAG,GAAG,EAAE;AAClC,MAAM,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,6CAA6C,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC5F,IAAI;AACJ,IAAI,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;AAC9C,IAAI,IAAI,CAAC,QAAQ,EAAE;AACnB,MAAM,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACnE,IAAI;AACJ,IAAI,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ,EAAE;AACtC,MAAM,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACxE,IAAI;AACJ,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC;AAC5C,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,6BAA6B,EAAE,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;AAC/E,IAAI,OAAO,IAAI,CAAC;AAChB,MAAM,OAAO,EAAE,IAAI;AACnB,MAAM,SAAS,EAAE,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW;AACzD,KAAK,CAAC;AACN,EAAE,CAAC,CAAC,OAAO,KAAK,EAAE;AAClB,IAAI,OAAO,CAAC,KAAK,CAAC,wCAAwC,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC;AAClF,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,2BAA2B,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACxE,EAAE;AACF;;;;"}

package/build/server/chunks/{_server.ts-C_OOUqsd.js → _server.ts-D0zRDSx0.js}

@@ -1,5 +1,5 @@
 import { v as validateAuth } from './auth-DuunT7Cg.js';
-import { g as getEventsClientCount } from './events-handler-Dm1mNPQP.js';
+import { g as getEventsClientCount } from './guest-registry-Dxvd7p-g.js';
 import './super-session-handler-DPyxFgmz.js';
 import { j as json } from './index-CoD1IJuy.js';
 import './shared-server-DaWdgxVh.js';
@@ -26,4 +26,4 @@ const GET = ({ request }) => {
 };
 
 export { GET };
-//# sourceMappingURL=_server.ts-C_OOUqsd.js.map
+//# sourceMappingURL=_server.ts-D0zRDSx0.js.map

package/build/server/chunks/{_server.ts-C_OOUqsd.js.map → _server.ts-D0zRDSx0.js.map}

@@ -1 +1 @@
-{"version":3,"file":"_server.ts-C_OOUqsd.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/ws-status/_server.ts.js"],"sourcesContent":["import { v as validateAuth } from \"../../../../chunks/auth.js\";\nimport { g as getEventsClientCount } from \"../../../../chunks/events-handler.js\";\nimport \"../../../../chunks/super-session-handler.js\";\nimport { json } from \"@sveltejs/kit\";\nfunction getConnectedClientCount() {\n  return getEventsClientCount();\n}\nconst GET = ({ request }) => {\n  const authError = validateAuth(request);\n  if (authError) {\n    return authError;\n  }\n  return json({\n    connectedClients: getConnectedClientCount()\n  });\n};\nexport {\n  GET\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;AAIA,SAAS,uBAAuB,GAAG;AACnC,EAAE,OAAO,oBAAoB,EAAE;AAC/B;AACK,MAAC,GAAG,GAAG,CAAC,EAAE,OAAO,EAAE,KAAK;AAC7B,EAAE,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,CAAC;AACzC,EAAE,IAAI,SAAS,EAAE;AACjB,IAAI,OAAO,SAAS;AACpB,EAAE;AACF,EAAE,OAAO,IAAI,CAAC;AACd,IAAI,gBAAgB,EAAE,uBAAuB;AAC7C,GAAG,CAAC;AACJ;;;;"}
+{"version":3,"file":"_server.ts-D0zRDSx0.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/ws-status/_server.ts.js"],"sourcesContent":["import { v as validateAuth } from \"../../../../chunks/auth.js\";\nimport { g as getEventsClientCount } from \"../../../../chunks/guest-registry.js\";\nimport \"../../../../chunks/super-session-handler.js\";\nimport { json } from \"@sveltejs/kit\";\nfunction getConnectedClientCount() {\n  return getEventsClientCount();\n}\nconst GET = ({ request }) => {\n  const authError = validateAuth(request);\n  if (authError) {\n    return authError;\n  }\n  return json({\n    connectedClients: getConnectedClientCount()\n  });\n};\nexport {\n  GET\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;AAIA,SAAS,uBAAuB,GAAG;AACnC,EAAE,OAAO,oBAAoB,EAAE;AAC/B;AACK,MAAC,GAAG,GAAG,CAAC,EAAE,OAAO,EAAE,KAAK;AAC7B,EAAE,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,CAAC;AACzC,EAAE,IAAI,SAAS,EAAE;AACjB,IAAI,OAAO,SAAS;AACpB,EAAE;AACF,EAAE,OAAO,IAAI,CAAC;AACd,IAAI,gBAAgB,EAAE,uBAAuB;AAC7C,GAAG,CAAC;AACJ;;;;"}

package/build/server/chunks/{_server.ts-DxT9IlZF.js → _server.ts-Dp-hXW_I.js}

@@ -1,6 +1,6 @@
 import { v as validateAuth } from './auth-DuunT7Cg.js';
 import { P as PROVIDER_COMMANDS } from './registry-D4J_CuzW.js';
-import { p as ptyManager } from './pty-manager-41h3IK8K.js';
+import { p as ptyManager } from './pty-manager-ZqXqa-6A.js';
 import { t as toErrorMessage } from './error-DDXB3duW.js';
 import { j as json } from './index-CoD1IJuy.js';
 import { realpathSync, statSync } from 'fs';
@@ -12,7 +12,7 @@ import 'os';
 import 'better-sqlite3';
 import 'child_process';
 import 'url';
-import './events-handler-Dm1mNPQP.js';
+import './guest-registry-Dxvd7p-g.js';
 import './super-session-handler-DPyxFgmz.js';
 import './coordinator-DMU_ADXf.js';
 import 'net';
@@ -138,4 +138,4 @@ const POST = async ({ request }) => {
 };
 
 export { GET, POST };
-//# sourceMappingURL=_server.ts-DxT9IlZF.js.map
+//# sourceMappingURL=_server.ts-Dp-hXW_I.js.map

package/build/server/chunks/{_server.ts-DxT9IlZF.js.map → _server.ts-Dp-hXW_I.js.map}

@@ -1 +1 @@
-{"version":3,"file":"_server.ts-DxT9IlZF.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/terminals/_server.ts.js"],"sourcesContent":["import { v as validateAuth } from \"../../../../chunks/auth.js\";\nimport { P as PROVIDER_COMMANDS } from \"../../../../chunks/registry.js\";\nimport { p as ptyManager } from \"../../../../chunks/pty-manager.js\";\nimport { t as toErrorMessage } from \"../../../../chunks/error.js\";\nimport { json } from \"@sveltejs/kit\";\nimport { realpathSync, statSync } from \"fs\";\nimport { relative, isAbsolute } from \"path\";\nconst ALLOWED_COMMANDS = [\"zsh\", \"bash\", \"sh\", \"fish\", ...PROVIDER_COMMANDS];\nfunction lastScrollbackLine(scrollback) {\n  if (!scrollback) {\n    return null;\n  }\n  const lines = scrollback.trimEnd().split(\"\\n\");\n  for (let i = lines.length - 1; i >= 0; i--) {\n    const line = lines[i].trim();\n    if (line) {\n      return line.slice(0, 200);\n    }\n  }\n  return null;\n}\nconst GET = ({ request }) => {\n  const authError = validateAuth(request);\n  if (authError) {\n    return authError;\n  }\n  try {\n    const terminals = ptyManager.list().map((t) => ({\n      args: t.args,\n      clientCount: t.clients.size,\n      command: t.command,\n      createdAt: t.createdAt.toISOString(),\n      currentCwd: t.currentCwd,\n      cwd: t.cwd,\n      exitCode: t.exitCode,\n      exitedAt: t.exitedAt?.toISOString() ?? null,\n      id: t.id,\n      isActive: t.isActive,\n      lastOutput: lastScrollbackLine(t.scrollback),\n      pid: t.pid,\n      status: t.status\n    }));\n    return json({\n      count: terminals.length,\n      terminals,\n      timestamp: (/* @__PURE__ */ new Date()).toISOString()\n    });\n  } catch (error) {\n    console.error(\"[terminals] Failed to list terminals:\", toErrorMessage(error));\n    return json({ error: \"Failed to list terminals\" }, { status: 500 });\n  }\n};\nconst POST = async ({ request }) => {\n  const authError = validateAuth(request);\n  if (authError) {\n    return authError;\n  }\n  let body;\n  try {\n    body = await request.json();\n  } catch {\n    return json({ error: \"Invalid JSON in request body\" }, { status: 400 });\n  }\n  try {\n    const { args, cols, command, cwd, rows } = body;\n    if (!command) {\n      return json({ error: \"command is required\" }, { status: 400 });\n    }\n    if (command.includes(\"/\") || command.includes(\"\\\\\") || !ALLOWED_COMMANDS.includes(command)) {\n      return json(\n        { error: `Command not allowed. Allowed: ${ALLOWED_COMMANDS.join(\", \")}` },\n        { status: 400 }\n      );\n    }\n    if (!cwd) {\n      return json({ error: \"cwd is required\" }, { status: 400 });\n    }\n    let realCwd;\n    try {\n      realCwd = realpathSync(cwd);\n      if (!statSync(realCwd).isDirectory()) {\n        return json({ error: \"cwd must be a directory\" }, { status: 400 });\n      }\n    } catch {\n      return json({ error: \"cwd must be a directory\" }, { status: 400 });\n    }\n    const home = process.env.HOME || \"\";\n    if (home) {\n      const rel = relative(home, realCwd);\n      if (rel.startsWith(\"..\") || isAbsolute(rel)) {\n        return json({ error: \"Working directory must be under home directory\" }, { status: 400 });\n      }\n    }\n    if (args !== void 0 && !Array.isArray(args)) {\n      return json({ error: \"args must be an array of strings\" }, { status: 400 });\n    }\n    if (args && !args.every((a) => typeof a === \"string\")) {\n      return json({ error: \"All args must be strings\" }, { status: 400 });\n    }\n    if (cols !== void 0 && (typeof cols !== \"number\" || cols < 1)) {\n      return json({ error: \"cols must be a positive number\" }, { status: 400 });\n    }\n    if (rows !== void 0 && (typeof rows !== \"number\" || rows < 1)) {\n      return json({ error: \"rows must be a positive number\" }, { status: 400 });\n    }\n    const terminal = await ptyManager.create(command, args ?? [], realCwd, cols ?? 80, rows ?? 24);\n    console.log(\n      `[terminals] Created terminal ${terminal.id} (pid=${terminal.pid}, command=${command})`\n    );\n    return json(\n      {\n        command: terminal.command,\n        createdAt: terminal.createdAt instanceof Date ? terminal.createdAt.toISOString() : terminal.createdAt,\n        cwd: terminal.cwd,\n        id: terminal.id,\n        pid: terminal.pid,\n        sessionWs: `/ws/session/${terminal.id}`,\n        ws: `/ws/terminal/${terminal.id}`\n      },\n      { status: 201 }\n    );\n  } catch (error) {\n    console.error(\"[terminals] Failed to create terminal:\", toErrorMessage(error));\n    return json({ error: \"Failed to create terminal\" }, { status: 500 });\n  }\n};\nexport {\n  GET,\n  POST\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;AAOA,MAAM,gBAAgB,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,iBAAiB,CAAC;AAC5E,SAAS,kBAAkB,CAAC,UAAU,EAAE;AACxC,EAAE,IAAI,CAAC,UAAU,EAAE;AACnB,IAAI,OAAO,IAAI;AACf,EAAE;AACF,EAAE,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;AAChD,EAAE,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE;AAC9C,IAAI,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;AAChC,IAAI,IAAI,IAAI,EAAE;AACd,MAAM,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;AAC/B,IAAI;AACJ,EAAE;AACF,EAAE,OAAO,IAAI;AACb;AACK,MAAC,GAAG,GAAG,CAAC,EAAE,OAAO,EAAE,KAAK;AAC7B,EAAE,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,CAAC;AACzC,EAAE,IAAI,SAAS,EAAE;AACjB,IAAI,OAAO,SAAS;AACpB,EAAE;AACF,EAAE,IAAI;AACN,IAAI,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM;AACpD,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI;AAClB,MAAM,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI;AACjC,MAAM,OAAO,EAAE,CAAC,CAAC,OAAO;AACxB,MAAM,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,WAAW,EAAE;AAC1C,MAAM,UAAU,EAAE,CAAC,CAAC,UAAU;AAC9B,MAAM,GAAG,EAAE,CAAC,CAAC,GAAG;AAChB,MAAM,QAAQ,EAAE,CAAC,CAAC,QAAQ;AAC1B,MAAM,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,IAAI,IAAI;AACjD,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE;AACd,MAAM,QAAQ,EAAE,CAAC,CAAC,QAAQ;AAC1B,MAAM,UAAU,EAAE,kBAAkB,CAAC,CAAC,CAAC,UAAU,CAAC;AAClD,MAAM,GAAG,EAAE,CAAC,CAAC,GAAG;AAChB,MAAM,MAAM,EAAE,CAAC,CAAC;AAChB,KAAK,CAAC,CAAC;AACP,IAAI,OAAO,IAAI,CAAC;AAChB,MAAM,KAAK,EAAE,SAAS,CAAC,MAAM;AAC7B,MAAM,SAAS;AACf,MAAM,SAAS,EAAE,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW;AACzD,KAAK,CAAC;AACN,EAAE,CAAC,CAAC,OAAO,KAAK,EAAE;AAClB,IAAI,OAAO,CAAC,KAAK,CAAC,uCAAuC,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC;AACjF,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,0BAA0B,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACvE,EAAE;AACF;AACK,MAAC,IAAI,GAAG,OAAO,EAAE,OAAO,EAAE,KAAK;AACpC,EAAE,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,CAAC;AACzC,EAAE,IAAI,SAAS,EAAE;AACjB,IAAI,OAAO,SAAS;AACpB,EAAE;AACF,EAAE,IAAI,IAAI;AACV,EAAE,IAAI;AACN,IAAI,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE;AAC/B,EAAE,CAAC,CAAC,MAAM;AACV,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,8BAA8B,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC3E,EAAE;AACF,EAAE,IAAI;AACN,IAAI,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,IAAI;AACnD,IAAI,IAAI,CAAC,OAAO,EAAE;AAClB,MAAM,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACpE,IAAI;AACJ,IAAI,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE;AAChG,MAAM,OAAO,IAAI;AACjB,QAAQ,EAAE,KAAK,EAAE,CAAC,8BAA8B,EAAE,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;AACjF,QAAQ,EAAE,MAAM,EAAE,GAAG;AACrB,OAAO;AACP,IAAI;AACJ,IAAI,IAAI,CAAC,GAAG,EAAE;AACd,MAAM,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAChE,IAAI;AACJ,IAAI,IAAI,OAAO;AACf,IAAI,IAAI;AACR,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC;AACjC,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,EAAE;AAC5C,QAAQ,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC1E,MAAM;AACN,IAAI,CAAC,CAAC,MAAM;AACZ,MAAM,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACxE,IAAI;AACJ,IAAI,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE;AACvC,IAAI,IAAI,IAAI,EAAE;AACd,MAAM,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;AACzC,MAAM,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE;AACnD,QAAQ,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,gDAAgD,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACjG,MAAM;AACN,IAAI;AACJ,IAAI,IAAI,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;AACjD,MAAM,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,kCAAkC,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACjF,IAAI;AACJ,IAAI,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE;AAC3D,MAAM,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,0BAA0B,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACzE,IAAI;AACJ,IAAI,IAAI,IAAI,KAAK,KAAK,CAAC,KAAK,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,GAAG,CAAC,CAAC,EAAE;AACnE,MAAM,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,gCAAgC,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC/E,IAAI;AACJ,IAAI,IAAI,IAAI,KAAK,KAAK,CAAC,KAAK,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,GAAG,CAAC,CAAC,EAAE;AACnE,MAAM,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,gCAAgC,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC/E,IAAI;AACJ,IAAI,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,IAAI,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC;AAClG,IAAI,OAAO,CAAC,GAAG;AACf,MAAM,CAAC,6BAA6B,EAAE,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;AAC5F,KAAK;AACL,IAAI,OAAO,IAAI;AACf,MAAM;AACN,QAAQ,OAAO,EAAE,QAAQ,CAAC,OAAO;AACjC,QAAQ,SAAS,EAAE,QAAQ,CAAC,SAAS,YAAY,IAAI,GAAG,QAAQ,CAAC,SAAS,CAAC,WAAW,EAAE,GAAG,QAAQ,CAAC,SAAS;AAC7G,QAAQ,GAAG,EAAE,QAAQ,CAAC,GAAG;AACzB,QAAQ,EAAE,EAAE,QAAQ,CAAC,EAAE;AACvB,QAAQ,GAAG,EAAE,QAAQ,CAAC,GAAG;AACzB,QAAQ,SAAS,EAAE,CAAC,YAAY,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;AAC/C,QAAQ,EAAE,EAAE,CAAC,aAAa,EAAE,QAAQ,CAAC,EAAE,CAAC;AACxC,OAAO;AACP,MAAM,EAAE,MAAM,EAAE,GAAG;AACnB,KAAK;AACL,EAAE,CAAC,CAAC,OAAO,KAAK,EAAE;AAClB,IAAI,OAAO,CAAC,KAAK,CAAC,wCAAwC,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC;AAClF,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,2BAA2B,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACxE,EAAE;AACF;;;;"}
+{"version":3,"file":"_server.ts-Dp-hXW_I.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/terminals/_server.ts.js"],"sourcesContent":["import { v as validateAuth } from \"../../../../chunks/auth.js\";\nimport { P as PROVIDER_COMMANDS } from \"../../../../chunks/registry.js\";\nimport { p as ptyManager } from \"../../../../chunks/pty-manager.js\";\nimport { t as toErrorMessage } from \"../../../../chunks/error.js\";\nimport { json } from \"@sveltejs/kit\";\nimport { realpathSync, statSync } from \"fs\";\nimport { relative, isAbsolute } from \"path\";\nconst ALLOWED_COMMANDS = [\"zsh\", \"bash\", \"sh\", \"fish\", ...PROVIDER_COMMANDS];\nfunction lastScrollbackLine(scrollback) {\n  if (!scrollback) {\n    return null;\n  }\n  const lines = scrollback.trimEnd().split(\"\\n\");\n  for (let i = lines.length - 1; i >= 0; i--) {\n    const line = lines[i].trim();\n    if (line) {\n      return line.slice(0, 200);\n    }\n  }\n  return null;\n}\nconst GET = ({ request }) => {\n  const authError = validateAuth(request);\n  if (authError) {\n    return authError;\n  }\n  try {\n    const terminals = ptyManager.list().map((t) => ({\n      args: t.args,\n      clientCount: t.clients.size,\n      command: t.command,\n      createdAt: t.createdAt.toISOString(),\n      currentCwd: t.currentCwd,\n      cwd: t.cwd,\n      exitCode: t.exitCode,\n      exitedAt: t.exitedAt?.toISOString() ?? null,\n      id: t.id,\n      isActive: t.isActive,\n      lastOutput: lastScrollbackLine(t.scrollback),\n      pid: t.pid,\n      status: t.status\n    }));\n    return json({\n      count: terminals.length,\n      terminals,\n      timestamp: (/* @__PURE__ */ new Date()).toISOString()\n    });\n  } catch (error) {\n    console.error(\"[terminals] Failed to list terminals:\", toErrorMessage(error));\n    return json({ error: \"Failed to list terminals\" }, { status: 500 });\n  }\n};\nconst POST = async ({ request }) => {\n  const authError = validateAuth(request);\n  if (authError) {\n    return authError;\n  }\n  let body;\n  try {\n    body = await request.json();\n  } catch {\n    return json({ error: \"Invalid JSON in request body\" }, { status: 400 });\n  }\n  try {\n    const { args, cols, command, cwd, rows } = body;\n    if (!command) {\n      return json({ error: \"command is required\" }, { status: 400 });\n    }\n    if (command.includes(\"/\") || command.includes(\"\\\\\") || !ALLOWED_COMMANDS.includes(command)) {\n      return json(\n        { error: `Command not allowed. Allowed: ${ALLOWED_COMMANDS.join(\", \")}` },\n        { status: 400 }\n      );\n    }\n    if (!cwd) {\n      return json({ error: \"cwd is required\" }, { status: 400 });\n    }\n    let realCwd;\n    try {\n      realCwd = realpathSync(cwd);\n      if (!statSync(realCwd).isDirectory()) {\n        return json({ error: \"cwd must be a directory\" }, { status: 400 });\n      }\n    } catch {\n      return json({ error: \"cwd must be a directory\" }, { status: 400 });\n    }\n    const home = process.env.HOME || \"\";\n    if (home) {\n      const rel = relative(home, realCwd);\n      if (rel.startsWith(\"..\") || isAbsolute(rel)) {\n        return json({ error: \"Working directory must be under home directory\" }, { status: 400 });\n      }\n    }\n    if (args !== void 0 && !Array.isArray(args)) {\n      return json({ error: \"args must be an array of strings\" }, { status: 400 });\n    }\n    if (args && !args.every((a) => typeof a === \"string\")) {\n      return json({ error: \"All args must be strings\" }, { status: 400 });\n    }\n    if (cols !== void 0 && (typeof cols !== \"number\" || cols < 1)) {\n      return json({ error: \"cols must be a positive number\" }, { status: 400 });\n    }\n    if (rows !== void 0 && (typeof rows !== \"number\" || rows < 1)) {\n      return json({ error: \"rows must be a positive number\" }, { status: 400 });\n    }\n    const terminal = await ptyManager.create(command, args ?? [], realCwd, cols ?? 80, rows ?? 24);\n    console.log(\n      `[terminals] Created terminal ${terminal.id} (pid=${terminal.pid}, command=${command})`\n    );\n    return json(\n      {\n        command: terminal.command,\n        createdAt: terminal.createdAt instanceof Date ? terminal.createdAt.toISOString() : terminal.createdAt,\n        cwd: terminal.cwd,\n        id: terminal.id,\n        pid: terminal.pid,\n        sessionWs: `/ws/session/${terminal.id}`,\n        ws: `/ws/terminal/${terminal.id}`\n      },\n      { status: 201 }\n    );\n  } catch (error) {\n    console.error(\"[terminals] Failed to create terminal:\", toErrorMessage(error));\n    return json({ error: \"Failed to create terminal\" }, { status: 500 });\n  }\n};\nexport {\n  GET,\n  POST\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;AAOA,MAAM,gBAAgB,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,iBAAiB,CAAC;AAC5E,SAAS,kBAAkB,CAAC,UAAU,EAAE;AACxC,EAAE,IAAI,CAAC,UAAU,EAAE;AACnB,IAAI,OAAO,IAAI;AACf,EAAE;AACF,EAAE,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;AAChD,EAAE,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE;AAC9C,IAAI,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;AAChC,IAAI,IAAI,IAAI,EAAE;AACd,MAAM,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;AAC/B,IAAI;AACJ,EAAE;AACF,EAAE,OAAO,IAAI;AACb;AACK,MAAC,GAAG,GAAG,CAAC,EAAE,OAAO,EAAE,KAAK;AAC7B,EAAE,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,CAAC;AACzC,EAAE,IAAI,SAAS,EAAE;AACjB,IAAI,OAAO,SAAS;AACpB,EAAE;AACF,EAAE,IAAI;AACN,IAAI,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM;AACpD,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI;AAClB,MAAM,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI;AACjC,MAAM,OAAO,EAAE,CAAC,CAAC,OAAO;AACxB,MAAM,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,WAAW,EAAE;AAC1C,MAAM,UAAU,EAAE,CAAC,CAAC,UAAU;AAC9B,MAAM,GAAG,EAAE,CAAC,CAAC,GAAG;AAChB,MAAM,QAAQ,EAAE,CAAC,CAAC,QAAQ;AAC1B,MAAM,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,IAAI,IAAI;AACjD,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE;AACd,MAAM,QAAQ,EAAE,CAAC,CAAC,QAAQ;AAC1B,MAAM,UAAU,EAAE,kBAAkB,CAAC,CAAC,CAAC,UAAU,CAAC;AAClD,MAAM,GAAG,EAAE,CAAC,CAAC,GAAG;AAChB,MAAM,MAAM,EAAE,CAAC,CAAC;AAChB,KAAK,CAAC,CAAC;AACP,IAAI,OAAO,IAAI,CAAC;AAChB,MAAM,KAAK,EAAE,SAAS,CAAC,MAAM;AAC7B,MAAM,SAAS;AACf,MAAM,SAAS,EAAE,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW;AACzD,KAAK,CAAC;AACN,EAAE,CAAC,CAAC,OAAO,KAAK,EAAE;AAClB,IAAI,OAAO,CAAC,KAAK,CAAC,uCAAuC,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC;AACjF,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,0BAA0B,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACvE,EAAE;AACF;AACK,MAAC,IAAI,GAAG,OAAO,EAAE,OAAO,EAAE,KAAK;AACpC,EAAE,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,CAAC;AACzC,EAAE,IAAI,SAAS,EAAE;AACjB,IAAI,OAAO,SAAS;AACpB,EAAE;AACF,EAAE,IAAI,IAAI;AACV,EAAE,IAAI;AACN,IAAI,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE;AAC/B,EAAE,CAAC,CAAC,MAAM;AACV,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,8BAA8B,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC3E,EAAE;AACF,EAAE,IAAI;AACN,IAAI,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,IAAI;AACnD,IAAI,IAAI,CAAC,OAAO,EAAE;AAClB,MAAM,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACpE,IAAI;AACJ,IAAI,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE;AAChG,MAAM,OAAO,IAAI;AACjB,QAAQ,EAAE,KAAK,EAAE,CAAC,8BAA8B,EAAE,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;AACjF,QAAQ,EAAE,MAAM,EAAE,GAAG;AACrB,OAAO;AACP,IAAI;AACJ,IAAI,IAAI,CAAC,GAAG,EAAE;AACd,MAAM,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAChE,IAAI;AACJ,IAAI,IAAI,OAAO;AACf,IAAI,IAAI;AACR,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC;AACjC,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,EAAE;AAC5C,QAAQ,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC1E,MAAM;AACN,IAAI,CAAC,CAAC,MAAM;AACZ,MAAM,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACxE,IAAI;AACJ,IAAI,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE;AACvC,IAAI,IAAI,IAAI,EAAE;AACd,MAAM,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;AACzC,MAAM,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE;AACnD,QAAQ,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,gDAAgD,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACjG,MAAM;AACN,IAAI;AACJ,IAAI,IAAI,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;AACjD,MAAM,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,kCAAkC,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACjF,IAAI;AACJ,IAAI,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE;AAC3D,MAAM,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,0BAA0B,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACzE,IAAI;AACJ,IAAI,IAAI,IAAI,KAAK,KAAK,CAAC,KAAK,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,GAAG,CAAC,CAAC,EAAE;AACnE,MAAM,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,gCAAgC,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC/E,IAAI;AACJ,IAAI,IAAI,IAAI,KAAK,KAAK,CAAC,KAAK,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,GAAG,CAAC,CAAC,EAAE;AACnE,MAAM,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,gCAAgC,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC/E,IAAI;AACJ,IAAI,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,IAAI,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC;AAClG,IAAI,OAAO,CAAC,GAAG;AACf,MAAM,CAAC,6BAA6B,EAAE,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;AAC5F,KAAK;AACL,IAAI,OAAO,IAAI;AACf,MAAM;AACN,QAAQ,OAAO,EAAE,QAAQ,CAAC,OAAO;AACjC,QAAQ,SAAS,EAAE,QAAQ,CAAC,SAAS,YAAY,IAAI,GAAG,QAAQ,CAAC,SAAS,CAAC,WAAW,EAAE,GAAG,QAAQ,CAAC,SAAS;AAC7G,QAAQ,GAAG,EAAE,QAAQ,CAAC,GAAG;AACzB,QAAQ,EAAE,EAAE,QAAQ,CAAC,EAAE;AACvB,QAAQ,GAAG,EAAE,QAAQ,CAAC,GAAG;AACzB,QAAQ,SAAS,EAAE,CAAC,YAAY,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;AAC/C,QAAQ,EAAE,EAAE,CAAC,aAAa,EAAE,QAAQ,CAAC,EAAE,CAAC;AACxC,OAAO;AACP,MAAM,EAAE,MAAM,EAAE,GAAG;AACnB,KAAK;AACL,EAAE,CAAC,CAAC,OAAO,KAAK,EAAE;AAClB,IAAI,OAAO,CAAC,KAAK,CAAC,wCAAwC,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC;AAClF,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,2BAA2B,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACxE,EAAE;AACF;;;;"}

package/build/server/chunks/_server.ts-DpRr0Tfh.js

@@ -0,0 +1,68 @@
+import { s as shareStore, v as verifyPassword } from './share-store-B9jMpVg0.js';
+import { j as json } from './index-CoD1IJuy.js';
+import 'better-sqlite3';
+import 'crypto';
+import 'fs';
+import 'path';
+
+const RATE_LIMIT_WINDOW_MS = 6e4;
+const RATE_LIMIT_MAX = 10;
+const attempts = /* @__PURE__ */ new Map();
+function checkRateLimit(key) {
+  const now = Date.now();
+  const recent = (attempts.get(key) ?? []).filter((t) => t > now - RATE_LIMIT_WINDOW_MS);
+  attempts.set(key, recent);
+  if (recent.length >= RATE_LIMIT_MAX) {
+    return false;
+  }
+  recent.push(now);
+  return true;
+}
+setInterval(() => {
+  const cutoff = Date.now() - RATE_LIMIT_WINDOW_MS;
+  for (const [key, timestamps] of attempts) {
+    const recent = timestamps.filter((t) => t > cutoff);
+    if (recent.length === 0) {
+      attempts.delete(key);
+    } else {
+      attempts.set(key, recent);
+    }
+  }
+}, 3e5).unref();
+const POST = async (event) => {
+  const { params, request } = event;
+  const share = shareStore.getShare(params.id);
+  if (!share) {
+    return json({ error: "Not shared" }, { status: 404 });
+  }
+  let ip = "unknown";
+  const cfIp = request.headers.get("cf-connecting-ip");
+  const fwd = request.headers.get("x-forwarded-for");
+  if (cfIp) {
+    ip = cfIp;
+  } else if (fwd) {
+    ip = fwd.split(",")[0].trim();
+  } else {
+    try {
+      ip = event.getClientAddress();
+    } catch {
+    }
+  }
+  if (!checkRateLimit(`${ip}:${params.id}`)) {
+    return json({ error: "Too many attempts. Try again in a minute." }, { status: 429 });
+  }
+  let body;
+  try {
+    body = await request.json();
+  } catch {
+    return json({ error: "Invalid JSON" }, { status: 400 });
+  }
+  if (typeof body.password !== "string" || !verifyPassword(body.password, share.passwordHash)) {
+    return json({ error: "Invalid password" }, { status: 401 });
+  }
+  const { expiresAt, token } = shareStore.createSession(params.id);
+  return json({ expiresAt, mode: share.mode, token });
+};
+
+export { POST };
+//# sourceMappingURL=_server.ts-DpRr0Tfh.js.map

package/build/server/chunks/_server.ts-DpRr0Tfh.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-DpRr0Tfh.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/terminals/_id_/share/auth/_server.ts.js"],"sourcesContent":["import { s as shareStore, v as verifyPassword } from \"../../../../../../../chunks/share-store.js\";\nimport { json } from \"@sveltejs/kit\";\nconst RATE_LIMIT_WINDOW_MS = 6e4;\nconst RATE_LIMIT_MAX = 10;\nconst attempts = /* @__PURE__ */ new Map();\nfunction checkRateLimit(key) {\n  const now = Date.now();\n  const recent = (attempts.get(key) ?? []).filter((t) => t > now - RATE_LIMIT_WINDOW_MS);\n  attempts.set(key, recent);\n  if (recent.length >= RATE_LIMIT_MAX) {\n    return false;\n  }\n  recent.push(now);\n  return true;\n}\nsetInterval(() => {\n  const cutoff = Date.now() - RATE_LIMIT_WINDOW_MS;\n  for (const [key, timestamps] of attempts) {\n    const recent = timestamps.filter((t) => t > cutoff);\n    if (recent.length === 0) {\n      attempts.delete(key);\n    } else {\n      attempts.set(key, recent);\n    }\n  }\n}, 3e5).unref();\nconst POST = async (event) => {\n  const { params, request } = event;\n  const share = shareStore.getShare(params.id);\n  if (!share) {\n    return json({ error: \"Not shared\" }, { status: 404 });\n  }\n  let ip = \"unknown\";\n  const cfIp = request.headers.get(\"cf-connecting-ip\");\n  const fwd = request.headers.get(\"x-forwarded-for\");\n  if (cfIp) {\n    ip = cfIp;\n  } else if (fwd) {\n    ip = fwd.split(\",\")[0].trim();\n  } else {\n    try {\n      ip = event.getClientAddress();\n    } catch {\n    }\n  }\n  if (!checkRateLimit(`${ip}:${params.id}`)) {\n    return json({ error: \"Too many attempts. Try again in a minute.\" }, { status: 429 });\n  }\n  let body;\n  try {\n    body = await request.json();\n  } catch {\n    return json({ error: \"Invalid JSON\" }, { status: 400 });\n  }\n  if (typeof body.password !== \"string\" || !verifyPassword(body.password, share.passwordHash)) {\n    return json({ error: \"Invalid password\" }, { status: 401 });\n  }\n  const { expiresAt, token } = shareStore.createSession(params.id);\n  return json({ expiresAt, mode: share.mode, token });\n};\nexport {\n  POST\n};\n"],"names":[],"mappings":";;;;;;;AAEA,MAAM,oBAAoB,GAAG,GAAG;AAChC,MAAM,cAAc,GAAG,EAAE;AACzB,MAAM,QAAQ,mBAAmB,IAAI,GAAG,EAAE;AAC1C,SAAS,cAAc,CAAC,GAAG,EAAE;AAC7B,EAAE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;AACxB,EAAE,MAAM,MAAM,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,GAAG,GAAG,oBAAoB,CAAC;AACxF,EAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC;AAC3B,EAAE,IAAI,MAAM,CAAC,MAAM,IAAI,cAAc,EAAE;AACvC,IAAI,OAAO,KAAK;AAChB,EAAE;AACF,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;AAClB,EAAE,OAAO,IAAI;AACb;AACA,WAAW,CAAC,MAAM;AAClB,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,oBAAoB;AAClD,EAAE,KAAK,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,QAAQ,EAAE;AAC5C,IAAI,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC;AACvD,IAAI,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE;AAC7B,MAAM,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC;AAC1B,IAAI,CAAC,MAAM;AACX,MAAM,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC;AAC/B,IAAI;AACJ,EAAE;AACF,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,EAAE;AACV,MAAC,IAAI,GAAG,OAAO,KAAK,KAAK;AAC9B,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK;AACnC,EAAE,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;AAC9C,EAAE,IAAI,CAAC,KAAK,EAAE;AACd,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACzD,EAAE;AACF,EAAE,IAAI,EAAE,GAAG,SAAS;AACpB,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;AACtD,EAAE,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;AACpD,EAAE,IAAI,IAAI,EAAE;AACZ,IAAI,EAAE,GAAG,IAAI;AACb,EAAE,CAAC,MAAM,IAAI,GAAG,EAAE;AAClB,IAAI,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;AACjC,EAAE,CAAC,MAAM;AACT,IAAI,IAAI;AACR,MAAM,EAAE,GAAG,KAAK,CAAC,gBAAgB,EAAE;AACnC,IAAI,CAAC,CAAC,MAAM;AACZ,IAAI;AACJ,EAAE;AACF,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE;AAC7C,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,2CAA2C,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACxF,EAAE;AACF,EAAE,IAAI,IAAI;AACV,EAAE,IAAI;AACN,IAAI,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE;AAC/B,EAAE,CAAC,CAAC,MAAM;AACV,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC3D,EAAE;AACF,EAAE,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,YAAY,CAAC,EAAE;AAC/F,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC/D,EAAE;AACF,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,UAAU,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;AAClE,EAAE,OAAO,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;AACrD;;;;"}

package/build/server/chunks/{_server.ts-Bjbr7glm.js → _server.ts-QN-Bo5ql.js}

@@ -1,14 +1,21 @@
-import { v as validateAuth } from './auth-DuunT7Cg.js';
+import { r as resolveAccess } from './share-auth-BS7JuiHf.js';
 import { t as toErrorMessage } from './error-DDXB3duW.js';
 import { j as json } from './index-CoD1IJuy.js';
 import { mkdirSync, writeFileSync } from 'fs';
+import './auth-DuunT7Cg.js';
 import './shared-server-DaWdgxVh.js';
 import 'crypto';
+import './share-store-B9jMpVg0.js';
+import 'better-sqlite3';
+import 'path';
 
 const POST = async ({ params, request }) => {
-  const authError = validateAuth(request);
-  if (authError) {
-    return authError;
+  const access = resolveAccess(request, params.id);
+  if (!access) {
+    return json({ error: "Unauthorized" }, { status: 401 });
+  }
+  if (access.level === "guest" && access.mode !== "control") {
+    return json({ error: "View-only access" }, { status: 403 });
   }
   const terminalId = params.id;
   if (!/^[A-Za-z0-9_-]+$/.test(terminalId)) {
@@ -47,4 +54,4 @@ const POST = async ({ params, request }) => {
 };
 
 export { POST };
-//# sourceMappingURL=_server.ts-Bjbr7glm.js.map
+//# sourceMappingURL=_server.ts-QN-Bo5ql.js.map

package/build/server/chunks/_server.ts-QN-Bo5ql.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-QN-Bo5ql.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/terminals/_id_/paste-image/_server.ts.js"],"sourcesContent":["import { r as resolveAccess } from \"../../../../../../chunks/share-auth.js\";\nimport { t as toErrorMessage } from \"../../../../../../chunks/error.js\";\nimport { json } from \"@sveltejs/kit\";\nimport { mkdirSync, writeFileSync } from \"fs\";\nconst POST = async ({ params, request }) => {\n  const access = resolveAccess(request, params.id);\n  if (!access) {\n    return json({ error: \"Unauthorized\" }, { status: 401 });\n  }\n  if (access.level === \"guest\" && access.mode !== \"control\") {\n    return json({ error: \"View-only access\" }, { status: 403 });\n  }\n  const terminalId = params.id;\n  if (!/^[A-Za-z0-9_-]+$/.test(terminalId)) {\n    return json({ error: \"Invalid terminal ID\" }, { status: 400 });\n  }\n  let body;\n  try {\n    body = await request.json();\n  } catch {\n    return json({ error: \"Invalid JSON\" }, { status: 400 });\n  }\n  if (!body.image || typeof body.image !== \"string\") {\n    return json({ error: \"image (base64) is required\" }, { status: 400 });\n  }\n  let imageBuffer;\n  try {\n    const base64Data = body.image.replace(/^data:image\\/\\w+;base64,/, \"\");\n    const decoded = Buffer.from(base64Data, \"base64\");\n    if (decoded.length === 0 || decoded.toString(\"base64\") !== base64Data) {\n      return json({ error: \"Invalid base64 image data\" }, { status: 400 });\n    }\n    imageBuffer = decoded;\n  } catch {\n    return json({ error: \"Invalid base64 image data\" }, { status: 400 });\n  }\n  const clipboardDir = `/tmp/shooter-clipboard-${terminalId}`;\n  const imagePath = `${clipboardDir}/image.png`;\n  try {\n    mkdirSync(clipboardDir, { recursive: true });\n    writeFileSync(imagePath, imageBuffer);\n  } catch (err) {\n    console.error(\"[paste-image] Failed to write image:\", toErrorMessage(err));\n    return json({ error: \"Failed to write image\" }, { status: 500 });\n  }\n  return json({ size: imageBuffer.length, success: true });\n};\nexport {\n  POST\n};\n"],"names":[],"mappings":";;;;;;;;;;;AAIK,MAAC,IAAI,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK;AAC5C,EAAE,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC;AAClD,EAAE,IAAI,CAAC,MAAM,EAAE;AACf,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC3D,EAAE;AACF,EAAE,IAAI,MAAM,CAAC,KAAK,KAAK,OAAO,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE;AAC7D,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC/D,EAAE;AACF,EAAE,MAAM,UAAU,GAAG,MAAM,CAAC,EAAE;AAC9B,EAAE,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE;AAC5C,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAClE,EAAE;AACF,EAAE,IAAI,IAAI;AACV,EAAE,IAAI;AACN,IAAI,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE;AAC/B,EAAE,CAAC,CAAC,MAAM;AACV,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC3D,EAAE;AACF,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE;AACrD,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,4BAA4B,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACzE,EAAE;AACF,EAAE,IAAI,WAAW;AACjB,EAAE,IAAI;AACN,IAAI,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,0BAA0B,EAAE,EAAE,CAAC;AACzE,IAAI,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC;AACrD,IAAI,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,UAAU,EAAE;AAC3E,MAAM,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,2BAA2B,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC1E,IAAI;AACJ,IAAI,WAAW,GAAG,OAAO;AACzB,EAAE,CAAC,CAAC,MAAM;AACV,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,2BAA2B,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACxE,EAAE;AACF,EAAE,MAAM,YAAY,GAAG,CAAC,uBAAuB,EAAE,UAAU,CAAC,CAAC;AAC7D,EAAE,MAAM,SAAS,GAAG,CAAC,EAAE,YAAY,CAAC,UAAU,CAAC;AAC/C,EAAE,IAAI;AACN,IAAI,SAAS,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AAChD,IAAI,aAAa,CAAC,SAAS,EAAE,WAAW,CAAC;AACzC,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,OAAO,CAAC,KAAK,CAAC,sCAAsC,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC;AAC9E,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACpE,EAAE;AACF,EAAE,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC1D;;;;"}

package/build/server/chunks/_server.ts-VzDcFFgy.js

@@ -0,0 +1,157 @@
+import { v as validateAuth } from './auth-DuunT7Cg.js';
+import Database from 'better-sqlite3';
+import * as fs from 'fs';
+import * as path from 'path';
+import { j as json } from './index-CoD1IJuy.js';
+import './shared-server-DaWdgxVh.js';
+import 'crypto';
+
+const DB_DIR = path.join(process.env.HOME || "", ".shooter");
+const DB_PATH = path.join(DB_DIR, "shooter.db");
+const COLUMNS = [
+  "id",
+  "terminal_id",
+  "session_id",
+  "project_name",
+  "summary",
+  "next_steps",
+  "trigger",
+  "created_at"
+];
+class SummaryStore {
+  db;
+  constructor() {
+    fs.mkdirSync(DB_DIR, { recursive: true });
+    this.db = new Database(DB_PATH);
+    this.db.pragma("journal_mode = WAL");
+    this.db.exec(`
+      CREATE TABLE IF NOT EXISTS session_summaries (
+        id           TEXT PRIMARY KEY,
+        terminal_id  TEXT,
+        session_id   TEXT,
+        project_name TEXT,
+        summary      TEXT NOT NULL,
+        next_steps   TEXT NOT NULL DEFAULT '[]',
+        trigger      TEXT NOT NULL,
+        created_at   TEXT NOT NULL
+      )
+    `);
+  }
+  insert(record) {
+    const placeholders = COLUMNS.map(() => "?").join(", ");
+    this.db.prepare(`INSERT INTO session_summaries (${COLUMNS.join(", ")}) VALUES (${placeholders})`).run(
+      record.id,
+      record.terminalId,
+      record.sessionId,
+      record.projectName,
+      record.summary,
+      record.nextSteps,
+      record.trigger,
+      record.createdAt
+    );
+  }
+  listRecent(limit, sessionId) {
+    if (sessionId) {
+      const rows2 = this.db.prepare(
+        "SELECT * FROM session_summaries WHERE session_id = ? ORDER BY created_at DESC LIMIT ?"
+      ).all(sessionId, limit);
+      return rows2.map(rowToRecord);
+    }
+    const rows = this.db.prepare("SELECT * FROM session_summaries ORDER BY created_at DESC LIMIT ?").all(limit);
+    return rows.map(rowToRecord);
+  }
+}
+function rowToRecord(row) {
+  return {
+    createdAt: row.created_at,
+    id: row.id,
+    nextSteps: row.next_steps,
+    projectName: row.project_name ?? null,
+    sessionId: row.session_id ?? null,
+    summary: row.summary,
+    terminalId: row.terminal_id ?? null,
+    trigger: row.trigger
+  };
+}
+const SS_GLOBAL_KEY = "__shooter_summary_store";
+const summaryStore = globalThis[SS_GLOBAL_KEY] || new SummaryStore();
+globalThis[SS_GLOBAL_KEY] = summaryStore;
+const DEFAULT_LIMIT = 50;
+const MAX_LIMIT = 200;
+const POST = async ({ request }) => {
+  const authError = validateAuth(request);
+  if (authError) {
+    return authError;
+  }
+  const rawBody = await request.json();
+  if (!rawBody || typeof rawBody !== "object" || Array.isArray(rawBody)) {
+    return json({ error: "Request body must be a JSON object" }, { status: 400 });
+  }
+  const body = rawBody;
+  if (typeof body.id !== "string" || !body.id) {
+    return json({ error: "id is required and must be a non-empty string" }, { status: 400 });
+  }
+  if (body.id.length > 128) {
+    return json({ error: "id must be 128 characters or fewer" }, { status: 400 });
+  }
+  if (typeof body.summary !== "string" || !body.summary) {
+    return json({ error: "summary is required and must be a non-empty string" }, { status: 400 });
+  }
+  if (body.summary.length > 1e3) {
+    return json({ error: "summary must be 1000 characters or fewer" }, { status: 400 });
+  }
+  if (typeof body.trigger !== "string" || !body.trigger) {
+    return json({ error: "trigger is required and must be a non-empty string" }, { status: 400 });
+  }
+  if (body.trigger.length > 64) {
+    return json({ error: "trigger must be 64 characters or fewer" }, { status: 400 });
+  }
+  if (typeof body.createdAt !== "string" || !body.createdAt) {
+    return json({ error: "createdAt is required and must be a non-empty string" }, { status: 400 });
+  }
+  if (body.createdAt.length > 64 || isNaN(Date.parse(body.createdAt))) {
+    return json({ error: "createdAt must be a valid ISO 8601 date string" }, { status: 400 });
+  }
+  if (typeof body.nextSteps === "string" && body.nextSteps.length > 8192) {
+    return json({ error: "nextSteps must be 8192 characters or fewer" }, { status: 400 });
+  }
+  const record = {
+    createdAt: body.createdAt,
+    id: body.id,
+    nextSteps: typeof body.nextSteps === "string" ? body.nextSteps : "[]",
+    projectName: typeof body.projectName === "string" ? body.projectName : null,
+    sessionId: typeof body.sessionId === "string" ? body.sessionId : null,
+    summary: body.summary,
+    terminalId: typeof body.terminalId === "string" ? body.terminalId : null,
+    trigger: body.trigger
+  };
+  try {
+    summaryStore.insert(record);
+  } catch (err) {
+    const message = err instanceof Error ? err.message : String(err);
+    const isDuplicate = typeof message === "string" && message.includes("UNIQUE constraint failed");
+    if (isDuplicate) {
+      return json({ error: "Record with this id already exists" }, { status: 409 });
+    }
+    return json({ error: "Failed to persist summary" }, { status: 500 });
+  }
+  return json({ id: record.id, success: true }, { status: 201 });
+};
+const GET = ({ request, url }) => {
+  const authError = validateAuth(request);
+  if (authError) {
+    return authError;
+  }
+  const sessionId = url.searchParams.get("sessionId") ?? void 0;
+  const rawLimit = parseInt(url.searchParams.get("limit") || String(DEFAULT_LIMIT));
+  const limit = Number.isFinite(rawLimit) && rawLimit >= 1 ? Math.min(rawLimit, MAX_LIMIT) : DEFAULT_LIMIT;
+  const summaries = summaryStore.listRecent(limit, sessionId);
+  return json({
+    count: summaries.length,
+    summaries,
+    timestamp: (/* @__PURE__ */ new Date()).toISOString()
+  });
+};
+
+export { GET, POST };
+//# sourceMappingURL=_server.ts-VzDcFFgy.js.map

package/build/server/chunks/_server.ts-VzDcFFgy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-VzDcFFgy.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/summaries/_server.ts.js"],"sourcesContent":["import { v as validateAuth } from \"../../../../chunks/auth.js\";\nimport Database from \"better-sqlite3\";\nimport * as fs from \"fs\";\nimport * as path from \"path\";\nimport { json } from \"@sveltejs/kit\";\nconst DB_DIR = path.join(process.env.HOME || \"\", \".shooter\");\nconst DB_PATH = path.join(DB_DIR, \"shooter.db\");\nconst COLUMNS = [\n  \"id\",\n  \"terminal_id\",\n  \"session_id\",\n  \"project_name\",\n  \"summary\",\n  \"next_steps\",\n  \"trigger\",\n  \"created_at\"\n];\nclass SummaryStore {\n  db;\n  constructor() {\n    fs.mkdirSync(DB_DIR, { recursive: true });\n    this.db = new Database(DB_PATH);\n    this.db.pragma(\"journal_mode = WAL\");\n    this.db.exec(`\n      CREATE TABLE IF NOT EXISTS session_summaries (\n        id           TEXT PRIMARY KEY,\n        terminal_id  TEXT,\n        session_id   TEXT,\n        project_name TEXT,\n        summary      TEXT NOT NULL,\n        next_steps   TEXT NOT NULL DEFAULT '[]',\n        trigger      TEXT NOT NULL,\n        created_at   TEXT NOT NULL\n      )\n    `);\n  }\n  insert(record) {\n    const placeholders = COLUMNS.map(() => \"?\").join(\", \");\n    this.db.prepare(`INSERT INTO session_summaries (${COLUMNS.join(\", \")}) VALUES (${placeholders})`).run(\n      record.id,\n      record.terminalId,\n      record.sessionId,\n      record.projectName,\n      record.summary,\n      record.nextSteps,\n      record.trigger,\n      record.createdAt\n    );\n  }\n  listRecent(limit, sessionId) {\n    if (sessionId) {\n      const rows2 = this.db.prepare(\n        \"SELECT * FROM session_summaries WHERE session_id = ? ORDER BY created_at DESC LIMIT ?\"\n      ).all(sessionId, limit);\n      return rows2.map(rowToRecord);\n    }\n    const rows = this.db.prepare(\"SELECT * FROM session_summaries ORDER BY created_at DESC LIMIT ?\").all(limit);\n    return rows.map(rowToRecord);\n  }\n}\nfunction rowToRecord(row) {\n  return {\n    createdAt: row.created_at,\n    id: row.id,\n    nextSteps: row.next_steps,\n    projectName: row.project_name ?? null,\n    sessionId: row.session_id ?? null,\n    summary: row.summary,\n    terminalId: row.terminal_id ?? null,\n    trigger: row.trigger\n  };\n}\nconst SS_GLOBAL_KEY = \"__shooter_summary_store\";\nconst summaryStore = globalThis[SS_GLOBAL_KEY] || new SummaryStore();\nglobalThis[SS_GLOBAL_KEY] = summaryStore;\nconst DEFAULT_LIMIT = 50;\nconst MAX_LIMIT = 200;\nconst POST = async ({ request }) => {\n  const authError = validateAuth(request);\n  if (authError) {\n    return authError;\n  }\n  const rawBody = await request.json();\n  if (!rawBody || typeof rawBody !== \"object\" || Array.isArray(rawBody)) {\n    return json({ error: \"Request body must be a JSON object\" }, { status: 400 });\n  }\n  const body = rawBody;\n  if (typeof body.id !== \"string\" || !body.id) {\n    return json({ error: \"id is required and must be a non-empty string\" }, { status: 400 });\n  }\n  if (body.id.length > 128) {\n    return json({ error: \"id must be 128 characters or fewer\" }, { status: 400 });\n  }\n  if (typeof body.summary !== \"string\" || !body.summary) {\n    return json({ error: \"summary is required and must be a non-empty string\" }, { status: 400 });\n  }\n  if (body.summary.length > 1e3) {\n    return json({ error: \"summary must be 1000 characters or fewer\" }, { status: 400 });\n  }\n  if (typeof body.trigger !== \"string\" || !body.trigger) {\n    return json({ error: \"trigger is required and must be a non-empty string\" }, { status: 400 });\n  }\n  if (body.trigger.length > 64) {\n    return json({ error: \"trigger must be 64 characters or fewer\" }, { status: 400 });\n  }\n  if (typeof body.createdAt !== \"string\" || !body.createdAt) {\n    return json({ error: \"createdAt is required and must be a non-empty string\" }, { status: 400 });\n  }\n  if (body.createdAt.length > 64 || isNaN(Date.parse(body.createdAt))) {\n    return json({ error: \"createdAt must be a valid ISO 8601 date string\" }, { status: 400 });\n  }\n  if (typeof body.nextSteps === \"string\" && body.nextSteps.length > 8192) {\n    return json({ error: \"nextSteps must be 8192 characters or fewer\" }, { status: 400 });\n  }\n  const record = {\n    createdAt: body.createdAt,\n    id: body.id,\n    nextSteps: typeof body.nextSteps === \"string\" ? body.nextSteps : \"[]\",\n    projectName: typeof body.projectName === \"string\" ? body.projectName : null,\n    sessionId: typeof body.sessionId === \"string\" ? body.sessionId : null,\n    summary: body.summary,\n    terminalId: typeof body.terminalId === \"string\" ? body.terminalId : null,\n    trigger: body.trigger\n  };\n  try {\n    summaryStore.insert(record);\n  } catch (err) {\n    const message = err instanceof Error ? err.message : String(err);\n    const isDuplicate = typeof message === \"string\" && message.includes(\"UNIQUE constraint failed\");\n    if (isDuplicate) {\n      return json({ error: \"Record with this id already exists\" }, { status: 409 });\n    }\n    return json({ error: \"Failed to persist summary\" }, { status: 500 });\n  }\n  return json({ id: record.id, success: true }, { status: 201 });\n};\nconst GET = ({ request, url }) => {\n  const authError = validateAuth(request);\n  if (authError) {\n    return authError;\n  }\n  const sessionId = url.searchParams.get(\"sessionId\") ?? void 0;\n  const rawLimit = parseInt(url.searchParams.get(\"limit\") || String(DEFAULT_LIMIT));\n  const limit = Number.isFinite(rawLimit) && rawLimit >= 1 ? Math.min(rawLimit, MAX_LIMIT) : DEFAULT_LIMIT;\n  const summaries = summaryStore.listRecent(limit, sessionId);\n  return json({\n    count: summaries.length,\n    summaries,\n    timestamp: (/* @__PURE__ */ new Date()).toISOString()\n  });\n};\nexport {\n  GET,\n  POST\n};\n"],"names":[],"mappings":";;;;;;;;AAKA,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,EAAE,UAAU,CAAC;AAC5D,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC;AAC/C,MAAM,OAAO,GAAG;AAChB,EAAE,IAAI;AACN,EAAE,aAAa;AACf,EAAE,YAAY;AACd,EAAE,cAAc;AAChB,EAAE,SAAS;AACX,EAAE,YAAY;AACd,EAAE,SAAS;AACX,EAAE;AACF,CAAC;AACD,MAAM,YAAY,CAAC;AACnB,EAAE,EAAE;AACJ,EAAE,WAAW,GAAG;AAChB,IAAI,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AAC7C,IAAI,IAAI,CAAC,EAAE,GAAG,IAAI,QAAQ,CAAC,OAAO,CAAC;AACnC,IAAI,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC;AACxC,IAAI,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC;AACjB;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,IAAI,CAAC,CAAC;AACN,EAAE;AACF,EAAE,MAAM,CAAC,MAAM,EAAE;AACjB,IAAI,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;AAC1D,IAAI,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,+BAA+B,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG;AACzG,MAAM,MAAM,CAAC,EAAE;AACf,MAAM,MAAM,CAAC,UAAU;AACvB,MAAM,MAAM,CAAC,SAAS;AACtB,MAAM,MAAM,CAAC,WAAW;AACxB,MAAM,MAAM,CAAC,OAAO;AACpB,MAAM,MAAM,CAAC,SAAS;AACtB,MAAM,MAAM,CAAC,OAAO;AACpB,MAAM,MAAM,CAAC;AACb,KAAK;AACL,EAAE;AACF,EAAE,UAAU,CAAC,KAAK,EAAE,SAAS,EAAE;AAC/B,IAAI,IAAI,SAAS,EAAE;AACnB,MAAM,MAAM,KAAK,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO;AACnC,QAAQ;AACR,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC;AAC7B,MAAM,OAAO,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC;AACnC,IAAI;AACJ,IAAI,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,kEAAkE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;AAC/G,IAAI,OAAO,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC;AAChC,EAAE;AACF;AACA,SAAS,WAAW,CAAC,GAAG,EAAE;AAC1B,EAAE,OAAO;AACT,IAAI,SAAS,EAAE,GAAG,CAAC,UAAU;AAC7B,IAAI,EAAE,EAAE,GAAG,CAAC,EAAE;AACd,IAAI,SAAS,EAAE,GAAG,CAAC,UAAU;AAC7B,IAAI,WAAW,EAAE,GAAG,CAAC,YAAY,IAAI,IAAI;AACzC,IAAI,SAAS,EAAE,GAAG,CAAC,UAAU,IAAI,IAAI;AACrC,IAAI,OAAO,EAAE,GAAG,CAAC,OAAO;AACxB,IAAI,UAAU,EAAE,GAAG,CAAC,WAAW,IAAI,IAAI;AACvC,IAAI,OAAO,EAAE,GAAG,CAAC;AACjB,GAAG;AACH;AACA,MAAM,aAAa,GAAG,yBAAyB;AAC/C,MAAM,YAAY,GAAG,UAAU,CAAC,aAAa,CAAC,IAAI,IAAI,YAAY,EAAE;AACpE,UAAU,CAAC,aAAa,CAAC,GAAG,YAAY;AACxC,MAAM,aAAa,GAAG,EAAE;AACxB,MAAM,SAAS,GAAG,GAAG;AAChB,MAAC,IAAI,GAAG,OAAO,EAAE,OAAO,EAAE,KAAK;AACpC,EAAE,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,CAAC;AACzC,EAAE,IAAI,SAAS,EAAE;AACjB,IAAI,OAAO,SAAS;AACpB,EAAE;AACF,EAAE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE;AACtC,EAAE,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE;AACzE,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,oCAAoC,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACjF,EAAE;AACF,EAAE,MAAM,IAAI,GAAG,OAAO;AACtB,EAAE,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE;AAC/C,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,+CAA+C,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC5F,EAAE;AACF,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC,MAAM,GAAG,GAAG,EAAE;AAC5B,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,oCAAoC,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACjF,EAAE;AACF,EAAE,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;AACzD,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,oDAAoD,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACjG,EAAE;AACF,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,GAAG,EAAE;AACjC,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,0CAA0C,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACvF,EAAE;AACF,EAAE,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;AACzD,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,oDAAoD,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACjG,EAAE;AACF,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,EAAE,EAAE;AAChC,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,wCAAwC,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACrF,EAAE;AACF,EAAE,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE;AAC7D,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,sDAAsD,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACnG,EAAE;AACF,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE;AACvE,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,gDAAgD,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC7F,EAAE;AACF,EAAE,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,IAAI,EAAE;AAC1E,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,4CAA4C,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACzF,EAAE;AACF,EAAE,MAAM,MAAM,GAAG;AACjB,IAAI,SAAS,EAAE,IAAI,CAAC,SAAS;AAC7B,IAAI,EAAE,EAAE,IAAI,CAAC,EAAE;AACf,IAAI,SAAS,EAAE,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,GAAG,IAAI,CAAC,SAAS,GAAG,IAAI;AACzE,IAAI,WAAW,EAAE,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,GAAG,IAAI,CAAC,WAAW,GAAG,IAAI;AAC/E,IAAI,SAAS,EAAE,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,GAAG,IAAI,CAAC,SAAS,GAAG,IAAI;AACzE,IAAI,OAAO,EAAE,IAAI,CAAC,OAAO;AACzB,IAAI,UAAU,EAAE,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,GAAG,IAAI,CAAC,UAAU,GAAG,IAAI;AAC5E,IAAI,OAAO,EAAE,IAAI,CAAC;AAClB,GAAG;AACH,EAAE,IAAI;AACN,IAAI,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC;AAC/B,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,GAAG,GAAG,CAAC,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC;AACpE,IAAI,MAAM,WAAW,GAAG,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,0BAA0B,CAAC;AACnG,IAAI,IAAI,WAAW,EAAE;AACrB,MAAM,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,oCAAoC,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACnF,IAAI;AACJ,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,2BAA2B,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACxE,EAAE;AACF,EAAE,OAAO,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAChE;AACK,MAAC,GAAG,GAAG,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK;AAClC,EAAE,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,CAAC;AACzC,EAAE,IAAI,SAAS,EAAE;AACjB,IAAI,OAAO,SAAS;AACpB,EAAE;AACF,EAAE,MAAM,SAAS,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,MAAM;AAC/D,EAAE,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,aAAa,CAAC,CAAC;AACnF,EAAE,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAC,GAAG,aAAa;AAC1G,EAAE,MAAM,SAAS,GAAG,YAAY,CAAC,UAAU,CAAC,KAAK,EAAE,SAAS,CAAC;AAC7D,EAAE,OAAO,IAAI,CAAC;AACd,IAAI,KAAK,EAAE,SAAS,CAAC,MAAM;AAC3B,IAAI,SAAS;AACb,IAAI,SAAS,EAAE,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW;AACvD,GAAG,CAAC;AACJ;;;;"}

package/build/server/chunks/{_server.ts-BrqaMMAa.js → _server.ts-W6i3EnGX.js}

@@ -1,14 +1,23 @@
 import { v as validateAuth } from './auth-DuunT7Cg.js';
+import { s as shareStore } from './share-store-B9jMpVg0.js';
 import { randomBytes } from 'crypto';
 import { j as json } from './index-CoD1IJuy.js';
 import './shared-server-DaWdgxVh.js';
+import 'better-sqlite3';
+import 'fs';
+import 'path';
 
 const GLOBAL_KEY = "__shooter_ws_tickets";
 const tickets = globalThis[GLOBAL_KEY] || /* @__PURE__ */ new Map();
 globalThis[GLOBAL_KEY] = tickets;
-function generateTicket() {
+function generateTicket(scope) {
   const ticket = randomBytes(32).toString("hex");
-  tickets.set(ticket, { createdAt: Date.now(), used: false });
+  tickets.set(ticket, {
+    createdAt: Date.now(),
+    readOnly: scope?.readOnly ?? null,
+    terminalId: scope?.terminalId ?? null,
+    used: false
+  });
   return ticket;
 }
 setInterval(() => {
@@ -50,12 +59,26 @@ setInterval(() => {
   }
 }, 3e5).unref();
 const POST = ({ request }) => {
+  const bearer = (request.headers.get("authorization") ?? request.headers.get("Authorization") ?? "").replace(/^Bearer\s+/i, "").trim();
   const authError = validateAuth(request);
   if (authError) {
-    return authError;
+    const session = bearer ? shareStore.resolveToken(bearer) : null;
+    if (!session) {
+      return authError;
+    }
+    if (!checkRateLimit(bearer)) {
+      return json(
+        { error: "Rate limit exceeded. Maximum 30 ticket requests per minute." },
+        { status: 429 }
+      );
+    }
+    const ticket2 = generateTicket({
+      readOnly: session.mode === "view",
+      terminalId: session.terminalId
+    });
+    return json({ expiresIn: 30, ticket: ticket2 });
   }
-  const apiKey = (request.headers.get("authorization") ?? "").substring(7).trim();
-  if (!checkRateLimit(apiKey)) {
+  if (!checkRateLimit(bearer)) {
     return json(
       { error: "Rate limit exceeded. Maximum 30 ticket requests per minute." },
       { status: 429 }
@@ -69,4 +92,4 @@ const POST = ({ request }) => {
 };
 
 export { POST };
-//# sourceMappingURL=_server.ts-BrqaMMAa.js.map
+//# sourceMappingURL=_server.ts-W6i3EnGX.js.map