@lasso-ai/cli 2.1.14 → 2.1.16

package/dist/cli/auth.js

@@ -26,13 +26,7 @@ const CREDENTIALS_FILE = node_path_1.default.join(CREDENTIALS_DIR, "credentials.
  * local development.
  */
 function serverUrlFrom(fileEnv) {
-    return (process.env.LASSO_AUTH_URL ||
-        fileEnv.LASSO_AUTH_URL ||
-        process.env.LASSO_API_URL ||
-        fileEnv.LASSO_API_URL ||
-        process.env.LASSO_SERVER_URL ||
-        fileEnv.LASSO_SERVER_URL ||
-        (process.env.NODE_ENV === "development" ? "http://localhost:3005" : "https://api.lasso.byorello.space")).replace(/\/$/, "");
+    return (process.env.LASSO_AUTH_URL || fileEnv.LASSO_AUTH_URL || process.env.LASSO_API_URL || fileEnv.LASSO_API_URL || process.env.LASSO_SERVER_URL || fileEnv.LASSO_SERVER_URL || (process.env.NODE_ENV === "development" ? "http://localhost:3005" : "https://api.lasso.byorello.space")).replace(/\/$/, "");
 }
 function fetchWithTimeout(url, init, timeoutMs = 8000) {
     const controller = new AbortController();

package/dist/cli/bridge.d.ts

@@ -96,6 +96,11 @@ export type BridgeMessage = {
     type: "agent_prompt_response";
     taskId: string;
     response: string;
+} | {
+    type: "steer";
+    taskId: string;
+    queueId: string;
+    prompt: string;
 } | {
     type: "list_page_folders";
     path?: string;
@@ -221,6 +226,12 @@ export type ServerBridgeMessage = {
         kind: "permission" | "input" | "multiselect";
         options?: string[];
     };
+} | {
+    type: "steer_result";
+    taskId: string;
+    queueId: string;
+    success: boolean;
+    error?: string;
 } | {
     type: "page_folders";
     path: string;

package/dist/cli/bridge.js

@@ -35,37 +35,6 @@ function toRuntimeConversation(messages) {
     }));
     return turns.length > 0 ? turns : undefined;
 }
-function isConversationalPrompt(prompt) {
-    const p = prompt.trim().toLowerCase().replace(/[!?.,;:]+$/, "");
-    // 1. Direct greetings and conversational niceties
-    const greetings = [
-        "hi", "hello", "hey", "heya", "howdy", "sup", "yo",
-        "good morning", "good afternoon", "good evening",
-        "thanks", "thank you", "thx", "ty", "cool", "awesome", "great", "nice",
-        "who are you", "what are you", "what can you do", "help", "help me",
-        "what is lasso", "how do you work", "how does this work",
-    ];
-    if (greetings.includes(p))
-        return true;
-    // Short greetings
-    if (/^(hi|hello|hey|howdy|yo)\b/i.test(p) && p.split(/\s+/).length <= 4) {
-        const buildKeywords = /\b(build|create|add|make|fix|update|modify|change|refactor|implement|delete|remove|style|install|wire|code)\b/i;
-        if (!buildKeywords.test(p))
-            return true;
-    }
-    // 2. Action verbs indicating deliberate code changes
-    const mutationVerbs = /\b(build|create|add|make|fix|update|modify|change|refactor|implement|delete|remove|style|install|wire|code|replace|set|switch|swap|rewrite|restyle|rebuild|apply)\b/i;
-    // 3. Question / informational prefixes
-    const infoPrefixes = /^(what|how|why|when|where|who|which|can you explain|explain|describe|tell me|check out|check|look at|summarize|give me an overview|overview|inspect)\b/i;
-    if (infoPrefixes.test(p) && !mutationVerbs.test(p)) {
-        return true;
-    }
-    // 4. Questions about the project / app / page without mutation verbs
-    if (/\b(about|doing|does this|is this|mean|purpose|work|repo|project|codebase|app|application|page|overview|summary)\b/i.test(p) && !mutationVerbs.test(p)) {
-        return true;
-    }
-    return false;
-}
 function cleanConversationReply(value) {
     const text = typeof value === "string" ? value.trim() : "";
     if (!text)
@@ -91,7 +60,7 @@ function cleanConversationReply(value) {
 async function restartBridge(port = exports.DEFAULT_BRIDGE_PORT) {
     try {
         const response = await fetch(`http://127.0.0.1:${port}/__lasso/bridge/restart`, { method: "POST" });
-        const body = await response.json().catch(() => ({}));
+        const body = (await response.json().catch(() => ({})));
         if (!response.ok || !body.ok)
             return { ok: false, error: body.error || "The bridge rejected the restart request." };
         return { ok: true };
@@ -118,7 +87,10 @@ async function getGitState(cwd) {
 }
 function readEnvFile(filename, cwd) {
     try {
-        return node_fs_1.default.readFileSync(node_path_1.default.join(cwd, filename), "utf8").split(/\r?\n/).reduce((values, line) => {
+        return node_fs_1.default
+            .readFileSync(node_path_1.default.join(cwd, filename), "utf8")
+            .split(/\r?\n/)
+            .reduce((values, line) => {
             const match = line.match(/^\s*(?:export\s+)?([A-Z0-9_]+)\s*=\s*(.*)\s*$/);
             if (match) {
                 let value = match[2].trim();
@@ -245,15 +217,7 @@ async function startBridge(cwd = process.cwd(), collabConfig = null, bridgePort
         });
     }
     const cliCredentials = (0, auth_1.loadCredentials)();
-    const resolvedLassoKey = cliCredentials?.apiKey ||
-        (0, project_1.resolveLassoApiKey)(fileEnv) ||
-        process.env.LASSO_API_KEY ||
-        fileEnv.LASSO_API_KEY ||
-        process.env.VITE_LASSO_API_KEY ||
-        process.env.NEXT_LASSO_API_KEY ||
-        fileEnv.VITE_LASSO_API_KEY ||
-        fileEnv.NEXT_LASSO_API_KEY ||
-        "";
+    const resolvedLassoKey = cliCredentials?.apiKey || (0, project_1.resolveLassoApiKey)(fileEnv) || process.env.LASSO_API_KEY || fileEnv.LASSO_API_KEY || process.env.VITE_LASSO_API_KEY || process.env.NEXT_LASSO_API_KEY || fileEnv.VITE_LASSO_API_KEY || fileEnv.NEXT_LASSO_API_KEY || "";
     const lassoKeyConfigured = Boolean(resolvedLassoKey);
     const serverUrl = (0, auth_1.serverUrlFrom)(fileEnv) || "https://api.lasso.byorello.space";
     const runtimeClient = new runtime_client_1.RuntimeClient(serverUrl, resolvedLassoKey || undefined);
@@ -265,12 +229,7 @@ async function startBridge(cwd = process.cwd(), collabConfig = null, bridgePort
     let models = [];
     try {
         const modelsResponse = await (0, project_1.fetchModels)(fileEnv);
-        const allModels = [
-            ...(modelsResponse.anthropic || []),
-            ...(modelsResponse.openai || []),
-            ...(modelsResponse.google || []),
-            ...(modelsResponse.nvidia || []),
-        ];
+        const allModels = [...(modelsResponse.anthropic || []), ...(modelsResponse.openai || []), ...(modelsResponse.google || []), ...(modelsResponse.nvidia || [])];
         models = allModels.map((m) => ({
             id: m.id,
             label: m.name || m.id,
@@ -311,6 +270,11 @@ async function startBridge(cwd = process.cwd(), collabConfig = null, bridgePort
         const target = node_path_1.default.resolve(root, relative && relative !== "." ? relative : "");
         return target === root || target.startsWith(`${root}${node_path_1.default.sep}`) ? target : null;
     };
+    const resolveWorkspacePath = (relative) => {
+        if (typeof relative !== "string" || !relative || node_path_1.default.isAbsolute(relative))
+            return null;
+        return resolveInsideProject(node_path_1.default.resolve(cwd), relative);
+    };
     const pageEntries = (root, relative) => {
         const directory = resolveInsideProject(root, relative);
         if (!directory)
@@ -328,7 +292,7 @@ async function startBridge(cwd = process.cwd(), collabConfig = null, bridgePort
             }
         }
         catch { }
-        return entries.sort((a, b) => a.type === b.type ? a.name.localeCompare(b.name) : a.type === "directory" ? -1 : 1);
+        return entries.sort((a, b) => (a.type === b.type ? a.name.localeCompare(b.name) : a.type === "directory" ? -1 : 1));
     };
     bridgeServer.on("request", (req, res) => {
         if (req.method !== "POST" || req.url?.split("?", 1)[0] !== "/__lasso/bridge/restart")
@@ -358,11 +322,7 @@ async function startBridge(cwd = process.cwd(), collabConfig = null, bridgePort
                 const summary = event.data?.summary;
                 if (summary) {
                     const raw = event.data?.raw;
-                    const detail = typeof raw === "string" && raw.trim()
-                        ? raw.length > 800
-                            ? `${raw.slice(0, 800)}…`
-                            : raw
-                        : undefined;
+                    const detail = typeof raw === "string" && raw.trim() ? (raw.length > 800 ? `${raw.slice(0, 800)}…` : raw) : undefined;
                     socket.send(JSON.stringify({
                         type: "agent_status",
                         taskId,
@@ -420,17 +380,9 @@ async function startBridge(cwd = process.cwd(), collabConfig = null, bridgePort
             case "verification_completed": {
                 const data = event.data || {};
                 const passed = data.success ?? data.passed;
-                const summaries = (data.observations || [])
-                    .map((o) => o?.summary)
-                    .filter(Boolean);
-                const errList = (data.errors || [])
-                    .map((e) => e?.message)
-                    .filter(Boolean);
-                const message = summaries.length
-                    ? summaries.join(" · ")
-                    : passed
-                        ? "Checks passed"
-                        : "Checks failed";
+                const summaries = (data.observations || []).map((o) => o?.summary).filter(Boolean);
+                const errList = (data.errors || []).map((e) => e?.message).filter(Boolean);
+                const message = summaries.length ? summaries.join(" · ") : passed ? "Checks passed" : "Checks failed";
                 socket.send(JSON.stringify({
                     type: "agent_status",
                     taskId,
@@ -470,7 +422,8 @@ async function startBridge(cwd = process.cwd(), collabConfig = null, bridgePort
         const messages = finalSession.conversation || [];
         const reply = [...messages]
             .reverse()
-            .find((message) => message?.role === "assistant" && typeof message.content === "string")?.content?.trim();
+            .find((message) => message?.role === "assistant" && typeof message.content === "string")
+            ?.content?.trim();
         if (reply) {
             socket.send(JSON.stringify({
                 type: "assistant_message",
@@ -620,7 +573,7 @@ async function startBridge(cwd = process.cwd(), collabConfig = null, bridgePort
         const controller = new AbortController();
         taskControllers.set(taskId, controller);
         const isLocalAgent = ["claude_code", "opencode", "codex_cli", "cursor"].includes(provider || "");
-        if ((message.type === "ask" || isConversationalPrompt(instruction)) && !isLocalAgent) {
+        if (message.type === "ask" && !isLocalAgent) {
             await handleHostedConversation(taskId, instruction, model, provider, messages, socket, controller.signal, message.conversationId);
             return;
         }
@@ -644,30 +597,35 @@ async function startBridge(cwd = process.cwd(), collabConfig = null, bridgePort
                     projectId,
                     framework,
                     hasTypeScript: node_fs_1.default.existsSync(node_path_1.default.join(cwd, "tsconfig.json")),
-                    hasReact: node_fs_1.default.existsSync(node_path_1.default.join(cwd, "package.json")) &&
-                        node_fs_1.default.readFileSync(node_path_1.default.join(cwd, "package.json"), "utf8").includes("react"),
+                    hasReact: node_fs_1.default.existsSync(node_path_1.default.join(cwd, "package.json")) && node_fs_1.default.readFileSync(node_path_1.default.join(cwd, "package.json"), "utf8").includes("react"),
                 },
                 model: {
                     provider: (provider || "anthropic"),
                     id: model || "claude-3-5-sonnet-20241022",
                 },
-                selection: context ? {
-                    element: element ? {
-                        tag: element.tag,
-                        text: element.label,
-                        source: element.sourceHint,
-                        attributes: context.attributes,
-                    } : undefined,
-                    viewport: context?.viewport,
-                    route: context?.position?.route,
-                    screenshot: context?.screenshots?.full,
-                } : undefined,
-                backendConfig: isLocalAgent ? {
-                    type: "local_agent",
-                    provider: provider,
-                    modelId: backendModelId,
-                    projectPath: cwd,
-                } : undefined,
+                selection: context
+                    ? {
+                        element: element
+                            ? {
+                                tag: element.tag,
+                                text: element.label,
+                                source: element.sourceHint,
+                                attributes: context.attributes,
+                            }
+                            : undefined,
+                        viewport: context?.viewport,
+                        route: context?.position?.route,
+                        screenshot: context?.screenshots?.full,
+                    }
+                    : undefined,
+                backendConfig: isLocalAgent
+                    ? {
+                        type: "local_agent",
+                        provider: provider,
+                        modelId: backendModelId,
+                        projectPath: cwd,
+                    }
+                    : undefined,
             };
             const facade = isLocalAgent ? (0, local_runtime_1.getLocalRuntime)() : runtimeClient;
             const session = await facade.createSession(sessionInput);
@@ -690,13 +648,49 @@ async function startBridge(cwd = process.cwd(), collabConfig = null, bridgePort
                 message: error instanceof Error ? error.message : "Unknown error",
             }));
         }
+        finally {
+            if (taskControllers.get(taskId) === controller)
+                taskControllers.delete(taskId);
+        }
     }
     // Handler for apply - applies approved pending changes, then runs server-side
     // verification. On failure a corrective run is started automatically.
     async function handleApply(message, socket, cwd) {
         const { taskId, changes } = message;
         const session = activeSessions.get(taskId);
-        const filePaths = changes.map((c) => c.filePath);
+        const facade = taskFacades.get(taskId) || runtimeClient;
+        if (!session || !Array.isArray(changes)) {
+            socket.send(JSON.stringify({
+                type: "agent_status",
+                taskId,
+                status: "error",
+                message: "There is no reviewable agent session for this task.",
+            }));
+            return;
+        }
+        // The UI is only an approval surface. Never trust its diff as the source
+        // of truth; reload the authoritative diff captured by the runtime.
+        const latestSession = await facade.getSession(session.id);
+        const authoritative = (latestSession.metadata?.pendingChanges || []);
+        if (!Array.isArray(authoritative) || authoritative.length === 0) {
+            socket.send(JSON.stringify({
+                type: "agent_status",
+                taskId,
+                status: "error",
+                message: "This task has no pending changes to apply.",
+            }));
+            return;
+        }
+        const filePaths = authoritative.map((c) => c.filePath);
+        if (authoritative.some((change) => !resolveWorkspacePath(change.filePath))) {
+            socket.send(JSON.stringify({
+                type: "agent_status",
+                taskId,
+                status: "error",
+                message: "The review contains an invalid workspace path.",
+            }));
+            return;
+        }
         // The server rolled the workspace back before review, so the disk still
         // holds the originals — capture them now (if the review didn't already).
         if (filePaths.length > 0 && (!taskSnapshots.has(taskId) || (taskSnapshots.get(taskId) || []).length === 0)) {
@@ -713,9 +707,9 @@ async function startBridge(cwd = process.cwd(), collabConfig = null, bridgePort
             }));
         }
         if (filePaths.length > 0) {
-            (0, snapshot_1.createSnapshot)(cwd, taskId, `Apply changes for task ${taskId}`, filePaths, undefined, session?.id);
+            (0, snapshot_1.createSnapshot)(cwd, taskId, `Apply changes for task ${taskId}`, filePaths, undefined, session.id);
         }
-        const applyError = applyChanges(changes, cwd);
+        const applyError = applyChanges(authoritative, cwd);
         if (applyError) {
             // Roll back partial application so the project stays consistent
             const originals = taskSnapshots.get(taskId) || [];
@@ -744,7 +738,6 @@ async function startBridge(cwd = process.cwd(), collabConfig = null, bridgePort
         // Post-apply verification (inconclusive when the engine can't run —
         // never reported as a failure of the changes themselves).
         let validation;
-        const facade = taskFacades.get(taskId) || runtimeClient;
         if (session) {
             try {
                 const result = await facade.verifySession(session.id, cwd);
@@ -771,12 +764,13 @@ async function startBridge(cwd = process.cwd(), collabConfig = null, bridgePort
     /** Apply approved changes to disk. Returns an error message or null. */
     function applyChanges(changes, cwd) {
         for (const change of changes) {
-            const filePath = node_path_1.default.join(cwd, change.filePath);
+            const filePath = resolveWorkspacePath(change.filePath);
+            if (!filePath)
+                return `Cannot apply ${String(change.filePath)}: invalid workspace path.`;
             const dir = node_path_1.default.dirname(filePath);
             const oldString = typeof change.oldString === "string" ? change.oldString : "";
             const newString = typeof change.newString === "string" ? change.newString : "";
-            const operation = change.operation ||
-                (oldString === "" && newString === "" ? "deleted" : oldString === "" ? "created" : "modified");
+            const operation = change.operation || (oldString === "" && newString === "" ? "deleted" : oldString === "" ? "created" : "modified");
             try {
                 if (!node_fs_1.default.existsSync(dir)) {
                     node_fs_1.default.mkdirSync(dir, { recursive: true });
@@ -846,16 +840,27 @@ async function startBridge(cwd = process.cwd(), collabConfig = null, bridgePort
         const { taskId } = message;
         const snapshot = taskSnapshots.get(taskId) || [];
         for (const item of snapshot) {
+            const filePath = resolveWorkspacePath(item.filePath);
+            if (!filePath) {
+                socket.send(JSON.stringify({
+                    type: "agent_status",
+                    taskId,
+                    status: "error",
+                    message: `Cannot undo ${item.filePath}: invalid workspace path.`,
+                }));
+                return;
+            }
             if (item.content === null) {
                 // File didn't exist, delete if it was created
                 try {
-                    node_fs_1.default.unlinkSync(node_path_1.default.join(cwd, item.filePath));
+                    node_fs_1.default.unlinkSync(filePath);
                 }
                 catch { }
             }
             else {
                 // Restore original content
-                node_fs_1.default.writeFileSync(node_path_1.default.join(cwd, item.filePath), item.content);
+                node_fs_1.default.mkdirSync(node_path_1.default.dirname(filePath), { recursive: true });
+                node_fs_1.default.writeFileSync(filePath, item.content);
             }
         }
         socket.send(JSON.stringify({
@@ -895,6 +900,40 @@ async function startBridge(cwd = process.cwd(), collabConfig = null, bridgePort
             message: "Agent stopped",
         }));
     }
+    /** Forward an overlay answer to the runtime's pending user question. */
+    async function handleAgentPromptResponse(message, socket) {
+        const session = activeSessions.get(message.taskId);
+        const facade = taskFacades.get(message.taskId);
+        if (!session || !facade) {
+            throw new Error("No active agent session is waiting for a response.");
+        }
+        if (!facade.respondToPrompt) {
+            throw new Error("This agent backend does not support interactive prompts.");
+        }
+        await facade.respondToPrompt(session.id, message.response);
+        socket.send(JSON.stringify({
+            type: "agent_status",
+            taskId: message.taskId,
+            status: "working",
+            message: "Continuing with your response…",
+        }));
+    }
+    /** Queue a prompt for the active runtime's next model turn. */
+    async function handleSteer(message, socket) {
+        const session = activeSessions.get(message.taskId);
+        const facade = taskFacades.get(message.taskId);
+        if (!session || !facade?.steerSession) {
+            socket.send(JSON.stringify({ type: "steer_result", taskId: message.taskId, queueId: message.queueId, success: false, error: "This agent backend does not support live steering." }));
+            return;
+        }
+        try {
+            await facade.steerSession(session.id, message.prompt);
+            socket.send(JSON.stringify({ type: "steer_result", taskId: message.taskId, queueId: message.queueId, success: true }));
+        }
+        catch (error) {
+            socket.send(JSON.stringify({ type: "steer_result", taskId: message.taskId, queueId: message.queueId, success: false, error: error instanceof Error ? error.message : "Failed to steer the agent." }));
+        }
+    }
     // Handler for switch_model
     async function handleSwitchModel(message, socket) {
         const { taskId, provider, modelId } = message;
@@ -945,15 +984,10 @@ async function startBridge(cwd = process.cwd(), collabConfig = null, bridgePort
         taskControllers.get(taskId)?.abort();
         const controller = new AbortController();
         taskControllers.set(taskId, controller);
-        // Greetings and conversational messages still go through the selected
-        // agent/model. The overlay only skips expensive page capture for them;
-        // there are no canned assistant responses in the bridge.
+        // All oneshot prompts go through the selected agent/model. The agent
+        // decides whether the request needs project work or a conversational reply.
         try {
             const isLocalAgent = ["claude_code", "opencode", "codex_cli", "cursor"].includes(provider || "");
-            if (isConversationalPrompt(prompt) && !isLocalAgent) {
-                await handleHostedConversation(taskId, prompt, model, provider, message.messages, socket, controller.signal, message.conversationId);
-                return;
-            }
             const backendModelId = (0, backends_1.modelIdForBackend)(model || "", provider || "");
             const sessionInput = {
                 userPrompt: prompt,
@@ -961,19 +995,20 @@ async function startBridge(cwd = process.cwd(), collabConfig = null, bridgePort
                     projectId,
                     framework,
                     hasTypeScript: node_fs_1.default.existsSync(node_path_1.default.join(cwd, "tsconfig.json")),
-                    hasReact: node_fs_1.default.existsSync(node_path_1.default.join(cwd, "package.json")) &&
-                        node_fs_1.default.readFileSync(node_path_1.default.join(cwd, "package.json"), "utf8").includes("react"),
+                    hasReact: node_fs_1.default.existsSync(node_path_1.default.join(cwd, "package.json")) && node_fs_1.default.readFileSync(node_path_1.default.join(cwd, "package.json"), "utf8").includes("react"),
                 },
                 model: {
                     provider: (provider || "anthropic"),
                     id: model || "claude-3-5-sonnet-20241022",
                 },
-                backendConfig: isLocalAgent ? {
-                    type: "local_agent",
-                    provider: provider,
-                    modelId: backendModelId,
-                    projectPath: cwd,
-                } : undefined,
+                backendConfig: isLocalAgent
+                    ? {
+                        type: "local_agent",
+                        provider: provider,
+                        modelId: backendModelId,
+                        projectPath: cwd,
+                    }
+                    : undefined,
             };
             const facade = isLocalAgent ? (0, local_runtime_1.getLocalRuntime)() : runtimeClient;
             const session = await facade.createSession(sessionInput);
@@ -993,6 +1028,10 @@ async function startBridge(cwd = process.cwd(), collabConfig = null, bridgePort
                 message: error instanceof Error ? error.message : "Unknown oneshot error",
             }));
         }
+        finally {
+            if (taskControllers.get(taskId) === controller)
+                taskControllers.delete(taskId);
+        }
     }
     // Handler for restore_snapshot
     async function handleRestoreSnapshot(message, socket, cwd) {
@@ -1098,25 +1137,25 @@ async function startBridge(cwd = process.cwd(), collabConfig = null, bridgePort
         overlaySocket = socket;
         console.log(chalk_1.default.green("✓") + " Overlay connected");
         const creds = (0, auth_1.loadCredentials)();
-        const userInfo = creds?.userName
-            ? { name: creds.userName, email: creds.userEmail }
-            : (process.env.USER ? { name: process.env.USER } : null);
+        const userInfo = creds?.userName ? { name: creds.userName, email: creds.userEmail } : process.env.USER ? { name: process.env.USER } : null;
         socket.send(JSON.stringify({
             type: "config",
             apiKeyConfigured: lassoKeyConfigured,
             agentConfigured: lassoKeyConfigured,
             models,
             collab: collabConfig?.registered ? { ...collabConfig, plan: collabConfig.plan, configuredProviders: collabConfig.configuredProviders } : null,
-            user: userInfo
+            user: userInfo,
         }));
         void getGitState(cwd).then((git) => {
             if (socket.readyState === socket.OPEN)
                 socket.send(JSON.stringify({ type: "git_state", git }));
         });
         socket.on("message", async (raw) => {
-            const msg = JSON.parse(raw.toString());
-            console.log("[lasso] received from overlay:", msg.type);
+            let taskId;
             try {
+                const msg = JSON.parse(raw.toString());
+                taskId = msg.taskId;
+                console.log("[lasso] received from overlay:", msg.type);
                 switch (msg.type) {
                     case "hello":
                         break;
@@ -1133,6 +1172,12 @@ async function startBridge(cwd = process.cwd(), collabConfig = null, bridgePort
                     case "stop":
                         await handleStop(msg, socket);
                         break;
+                    case "agent_prompt_response":
+                        await handleAgentPromptResponse(msg, socket);
+                        break;
+                    case "steer":
+                        await handleSteer(msg, socket);
+                        break;
                     case "switch_model":
                         await handleSwitchModel(msg, socket);
                         break;
@@ -1228,6 +1273,17 @@ async function startBridge(cwd = process.cwd(), collabConfig = null, bridgePort
                         // daemon log so it's diagnosable.
                         console.error("[overlay error]", msg.selectionId || "", msg.details || msg.message || msg);
                         break;
+                    case "page_context_response": {
+                        const pending = pendingBrowserContext.get(msg.requestId);
+                        if (!pending)
+                            break;
+                        pendingBrowserContext.delete(msg.requestId);
+                        if (msg.error)
+                            pending.reject(new Error(msg.error));
+                        else
+                            pending.resolve(msg.pageContext);
+                        break;
+                    }
                     default:
                         console.warn("Unknown bridge message type:", msg.type);
                 }
@@ -1236,7 +1292,7 @@ async function startBridge(cwd = process.cwd(), collabConfig = null, bridgePort
                 console.error("Error handling bridge message:", error);
                 socket.send(JSON.stringify({
                     type: "agent_status",
-                    taskId: msg.taskId,
+                    taskId,
                     status: "error",
                     message: error instanceof Error ? error.message : "Unknown error",
                 }));
@@ -1245,6 +1301,10 @@ async function startBridge(cwd = process.cwd(), collabConfig = null, bridgePort
         socket.on("close", () => {
             if (socket === overlaySocket)
                 overlaySocket = null;
+            for (const [requestId, pending] of pendingBrowserContext) {
+                pending.reject(new Error("The overlay disconnected before browser context was returned."));
+                pendingBrowserContext.delete(requestId);
+            }
         });
     });
     bridgeServer.listen(bridgePort, "127.0.0.1", () => {

package/dist/cli/host/certificates.js

@@ -86,7 +86,8 @@ async function downloadMkcert() {
         const tempPath = node_path_1.default.join(tempDir, binaryName);
         console.log(`[Lasso] Downloading mkcert from ${downloadUrl}...`);
         const file = node_fs_1.default.createWriteStream(tempPath);
-        protocol.get(downloadUrl, (response) => {
+        protocol
+            .get(downloadUrl, (response) => {
             if (response.statusCode !== 200) {
                 node_fs_1.default.unlinkSync(tempPath);
                 return resolve({ ok: false, error: `Failed to download mkcert: ${response.statusCode}` });
@@ -98,7 +99,8 @@ async function downloadMkcert() {
                 console.log(`[Lasso] ✓ mkcert downloaded to ${tempPath}`);
                 resolve({ ok: true, path: tempPath });
             });
-        }).on("error", (error) => {
+        })
+            .on("error", (error) => {
             node_fs_1.default.unlinkSync(tempPath);
             resolve({ ok: false, error: error instanceof Error ? error.message : String(error) });
         });
@@ -260,11 +262,7 @@ async function ensureHostCertificate(onProgress) {
     const configFile = node_path_1.default.join(node_os_1.default.tmpdir(), `lasso-host-${process.pid}.cnf`);
     try {
         onProgress?.("Creating self-signed certificate with OpenSSL...");
-        node_fs_1.default.writeFileSync(configFile, [
-            "[req]", "distinguished_name = req_distinguished_name", "x509_extensions = v3_req", "prompt = no",
-            "[req_distinguished_name]", "CN = *.lasso", "[v3_req]",
-            "subjectAltName = DNS:*.lasso,DNS:localhost,IP:127.0.0.1,IP:::1", "",
-        ].join("\n"), { mode: 0o600 });
+        node_fs_1.default.writeFileSync(configFile, ["[req]", "distinguished_name = req_distinguished_name", "x509_extensions = v3_req", "prompt = no", "[req_distinguished_name]", "CN = *.lasso", "[v3_req]", "subjectAltName = DNS:*.lasso,DNS:localhost,IP:127.0.0.1,IP:::1", ""].join("\n"), { mode: 0o600 });
         (0, node_child_process_1.execFileSync)("openssl", ["req", "-x509", "-nodes", "-newkey", "rsa:2048", "-keyout", exports.TLS_KEY_FILE, "-out", exports.TLS_CERT_FILE, "-days", "825", "-config", configFile], { stdio: "ignore" });
         node_fs_1.default.chmodSync(exports.TLS_KEY_FILE, 0o600);
         onProgress?.("✓ SSL certificate ready (self-signed)");

package/dist/cli/host/daemon.js

@@ -158,7 +158,9 @@ class LassoHost {
                 route: "POST /_host/register",
                 handler: async (req, res) => {
                     const body = await readBody(req);
-                    const domain = String(body.domain || "").trim().toLowerCase();
+                    const domain = String(body.domain || "")
+                        .trim()
+                        .toLowerCase();
                     const directory = String(body.directory || "").trim();
                     const projectId = String(body.projectId || "").trim();
                     if (!(0, registry_1.validateDomain)(domain))
@@ -183,7 +185,9 @@ class LassoHost {
                 route: "POST /_host/unregister",
                 handler: async (req, res) => {
                     const body = await readBody(req);
-                    const domain = String(body.domain || "").trim().toLowerCase();
+                    const domain = String(body.domain || "")
+                        .trim()
+                        .toLowerCase();
                     if (!domain)
                         return writeJson(res, 400, { ok: false, error: "A domain is required." });
                     const had = domain in this.registry;
@@ -199,7 +203,9 @@ class LassoHost {
                 route: "POST /_host/stop",
                 handler: async (req, res) => {
                     const body = await readBody(req);
-                    const domain = String(body.domain || "").trim().toLowerCase();
+                    const domain = String(body.domain || "")
+                        .trim()
+                        .toLowerCase();
                     const runtime = this.running.get(domain);
                     if (!runtime)
                         return writeJson(res, 200, { ok: true, domain, status: "stopped" });
@@ -229,7 +235,9 @@ class LassoHost {
                 route: "POST /_host/restart-project",
                 handler: async (req, res) => {
                     const body = await readBody(req);
-                    const domain = String(body.domain || "").trim().toLowerCase();
+                    const domain = String(body.domain || "")
+                        .trim()
+                        .toLowerCase();
                     if (!domain)
                         return writeJson(res, 400, { ok: false, error: "A project domain is required." });
                     const runtime = this.running.get(domain);
@@ -377,7 +385,10 @@ class LassoHost {
                 this.log(`proxy listening on 127.0.0.1:${this.opts.proxyPort}`);
                 if (!certificate.ok)
                     return resolve({});
-                this.secureServer.once("error", (error) => { this.log(`https proxy failed: ${line(error)}`); resolve({}); });
+                this.secureServer.once("error", (error) => {
+                    this.log(`https proxy failed: ${line(error)}`);
+                    resolve({});
+                });
                 this.secureServer.listen(this.opts.httpsPort, "127.0.0.1", () => {
                     this.log(`https proxy listening on 127.0.0.1:${this.opts.httpsPort}`);
                     resolve({});

package/dist/cli/host/dns.js

@@ -200,7 +200,10 @@ class WindowsResolver {
             const match = content.match(new RegExp(`${HOSTS_BLOCK_START}\\n([\\s\\S]*?)\\n${HOSTS_BLOCK_END}`));
             if (!match)
                 return [];
-            return match[1].split(/\r?\n/).map((line) => line.trim()).filter((line) => line && !line.startsWith("#"));
+            return match[1]
+                .split(/\r?\n/)
+                .map((line) => line.trim())
+                .filter((line) => line && !line.startsWith("#"));
         }
         catch {
             return [];