@lifeaitools/clauth 1.19.0 → 1.19.3

package/cli/commands/serve.js

@@ -747,9 +747,9 @@ function dashboardHtml(port, whitelist, isStaged = false, initWriteToken = null)
   .btn-ccandme{background:linear-gradient(135deg,#1a1a2e,#16213e);color:#a78bfa;border:1px solid #4c1d95;padding:7px 16px;font-size:.85rem;border-radius:7px;cursor:pointer;font-weight:600;transition:all .15s;white-space:nowrap}
   .btn-ccandme:hover{background:linear-gradient(135deg,#2d1b69,#1e1b4b);border-color:#7c3aed;color:#c4b5fd;transform:translateY(-1px)}
   .btn-ccandme:disabled{opacity:.5;cursor:not-allowed;transform:none}
-  .btn-monkey{background:linear-gradient(135deg,#103c2f,#0f2f3f);color:#86efac;border:1px solid #166534;padding:7px 16px;font-size:.85rem;border-radius:7px;cursor:pointer;font-weight:700;transition:all .15s;white-space:nowrap}
-  .btn-monkey:hover{background:linear-gradient(135deg,#14532d,#155e75);border-color:#22c55e;color:#bbf7d0;transform:translateY(-1px)}
-  .btn-monkey:disabled{opacity:.5;cursor:not-allowed;transform:none}
+  .btn-tintin{background:linear-gradient(135deg,#103c2f,#0f2f3f);color:#86efac;border:1px solid #166534;padding:7px 16px;font-size:.85rem;border-radius:7px;cursor:pointer;font-weight:700;transition:all .15s;white-space:nowrap}
+  .btn-tintin:hover{background:linear-gradient(135deg,#14532d,#155e75);border-color:#22c55e;color:#bbf7d0;transform:translateY(-1px)}
+  .btn-tintin:disabled{opacity:.5;cursor:not-allowed;transform:none}
   .btn-claude{background:linear-gradient(135deg,#d97706,#f59e0b);color:#0a0f1a;padding:8px 18px;font-size:.85rem;border-radius:7px;border:none;cursor:pointer;font-weight:700;letter-spacing:.3px;transition:all .15s;white-space:nowrap}
   .btn-claude:hover{filter:brightness(1.1);transform:translateY(-1px)}
   .btn-claude:disabled{opacity:.4;cursor:not-allowed;transform:none;filter:none}
@@ -766,22 +766,22 @@ function dashboardHtml(port, whitelist, isStaged = false, initWriteToken = null)
   .build-label{font-size:.85rem;color:#94a3b8;flex:1}
   .build-label strong{color:#e2e8f0}
   .build-meta{font-family:'Courier New',monospace;font-size:.75rem;color:#64748b}
-  .monkey-panel{display:none;position:fixed;top:0;right:0;bottom:0;z-index:80;width:min(420px,calc(100vw - 24px));background:#081c1a;border-left:1px solid #14532d;padding:1rem 1.25rem;box-shadow:-22px 0 60px rgba(0,0,0,.42);overflow:auto}
-  .monkey-panel.open{display:block}
-  .monkey-head{display:flex;align-items:center;justify-content:space-between;gap:10px;margin-bottom:.8rem}
-  .monkey-title{font-size:.95rem;font-weight:700;color:#dcfce7}
-  .monkey-sub{font-size:.78rem;color:#6ee7b7;margin-top:2px}
-  .monkey-grid{display:grid;grid-template-columns:1fr 1fr;gap:10px;margin-bottom:10px}
-  .monkey-field{display:flex;flex-direction:column;gap:4px}
-  .monkey-field label{font-size:.72rem;color:#94a3b8;text-transform:uppercase;letter-spacing:.04em;font-weight:700}
-  .monkey-input,.monkey-textarea{background:#031312;border:1px solid #14532d;border-radius:6px;color:#e2e8f0;font-family:'Courier New',monospace;font-size:.85rem;padding:8px 10px;outline:none;transition:border-color .15s}
-  .monkey-input:focus,.monkey-textarea:focus{border-color:#22c55e}
-  .monkey-textarea{width:100%;min-height:92px;resize:vertical;line-height:1.45;margin-bottom:10px}
-  .monkey-actions{display:flex;align-items:center;gap:8px;flex-wrap:wrap}
-  .monkey-status{font-family:'Courier New',monospace;font-size:.78rem;color:#94a3b8}
-  .monkey-result{display:none;margin-top:12px;background:#020b0a;border:1px solid #134e4a;border-radius:8px;padding:10px;white-space:pre-wrap;word-break:break-word;font-family:'Courier New',monospace;font-size:.82rem;color:#bbf7d0;max-height:240px;overflow:auto}
-  .monkey-result.open{display:block}
-  @media (max-width:720px){.monkey-panel{width:100vw}.monkey-grid{grid-template-columns:1fr}}
+  .tintin-panel{display:none;position:fixed;top:0;right:0;bottom:0;z-index:80;width:min(420px,calc(100vw - 24px));background:#081c1a;border-left:1px solid #14532d;padding:1rem 1.25rem;box-shadow:-22px 0 60px rgba(0,0,0,.42);overflow:auto}
+  .tintin-panel.open{display:block}
+  .tintin-head{display:flex;align-items:center;justify-content:space-between;gap:10px;margin-bottom:.8rem}
+  .tintin-title{font-size:.95rem;font-weight:700;color:#dcfce7}
+  .tintin-sub{font-size:.78rem;color:#6ee7b7;margin-top:2px}
+  .tintin-grid{display:grid;grid-template-columns:1fr 1fr;gap:10px;margin-bottom:10px}
+  .tintin-field{display:flex;flex-direction:column;gap:4px}
+  .tintin-field label{font-size:.72rem;color:#94a3b8;text-transform:uppercase;letter-spacing:.04em;font-weight:700}
+  .tintin-input,.tintin-textarea{background:#031312;border:1px solid #14532d;border-radius:6px;color:#e2e8f0;font-family:'Courier New',monospace;font-size:.85rem;padding:8px 10px;outline:none;transition:border-color .15s}
+  .tintin-input:focus,.tintin-textarea:focus{border-color:#22c55e}
+  .tintin-textarea{width:100%;min-height:92px;resize:vertical;line-height:1.45;margin-bottom:10px}
+  .tintin-actions{display:flex;align-items:center;gap:8px;flex-wrap:wrap}
+  .tintin-status{font-family:'Courier New',monospace;font-size:.78rem;color:#94a3b8}
+  .tintin-result{display:none;margin-top:12px;background:#020b0a;border:1px solid #134e4a;border-radius:8px;padding:10px;white-space:pre-wrap;word-break:break-word;font-family:'Courier New',monospace;font-size:.82rem;color:#bbf7d0;max-height:240px;overflow:auto}
+  .tintin-result.open{display:block}
+  @media (max-width:720px){.tintin-panel{width:100vw}.tintin-grid{grid-template-columns:1fr}}
   .mcp-row{display:flex;align-items:center;gap:8px;margin-bottom:8px}
   .mcp-label{font-size:.72rem;color:#64748b;min-width:80px;text-transform:uppercase;letter-spacing:.5px;font-weight:600}
   .mcp-val{flex:1;font-family:'Courier New',monospace;font-size:.82rem;color:#60a5fa;background:#0a0f1a;border:1px solid #1e3a5f;border-radius:4px;padding:6px 10px;word-break:break-all;user-select:all}
@@ -950,7 +950,7 @@ function dashboardHtml(port, whitelist, isStaged = false, initWriteToken = null)
     <button class="btn-refresh" onclick="loadServices()">↻ Refresh</button>
     <button class="btn-add" onclick="toggleAddService()">+ Add Service</button>
     <button class="btn-check" id="check-btn" onclick="checkAll()">⬤ Check All</button>
-    <button class="btn-monkey" id="monkey-btn" onclick="toggleMonkeyPanel()" title="Open Monkey local CLI dispatch test panel">Monkey</button>
+    <button class="btn-monkey" id="tintin-btn" onclick="toggleTinTinPanel()" title="Open TinTin local CLI dispatch panel">TinTin</button>
     <button class="btn-ccandme" id="ccandme-btn" onclick="launchCCandMe()" title="Launch CCandMe — 4-pane WezTerm: Claude + Codex + Me">⚡ CCandMe</button>
     <button class="btn-lock" id="unlock-writes-btn" onclick="unlockWrites()" title="Enter password to enable saving changes this browser session (needed after a daemon restart when auto-unlocked via --pw)">🔓 Unlock Writes</button>
     <button class="btn-lock" onclick="lockVault()">🔒 Lock</button>
@@ -1079,31 +1079,31 @@ function dashboardHtml(port, whitelist, isStaged = false, initWriteToken = null)
     </div>
   </div>
 
-  <div class="monkey-panel" id="monkey-panel">
-    <div class="monkey-head">
+  <div class="tintin-panel" id="tintin-panel">
+    <div class="tintin-head">
       <div>
-        <div class="monkey-title">Monkey local CLI dispatch</div>
-        <div class="monkey-sub">Tests the same local clauth path the browser sidebar will use: /monkey/dispatch → Claude CLI → /monkey/dispatch/:job_id.</div>
+        <div class="tintin-title">TinTin — clauth CLI dispatch</div>
+        <div class="tintin-sub">Dispatches a Claude CLI agent with clauth context. Uses sonnet-4-6 model. Routes: /monkey/dispatch → Claude CLI → /monkey/dispatch/:job_id.</div>
       </div>
-      <button class="btn-cancel" onclick="toggleMonkeyPanel()">Close</button>
+      <button class="btn-cancel" onclick="toggleTinTinPanel()">Close</button>
     </div>
-    <div class="monkey-grid">
-      <div class="monkey-field">
+    <div class="tintin-grid">
+      <div class="tintin-field">
         <label>App slug</label>
-        <input class="monkey-input" id="monkey-app" value="clauth-dashboard" spellcheck="false" autocomplete="off">
+        <input class="tintin-input" id="tintin-app" value="clauth-dashboard" spellcheck="false" autocomplete="off">
       </div>
-      <div class="monkey-field">
+      <div class="tintin-field">
         <label>CWD</label>
-        <input class="monkey-input" id="monkey-cwd" value="C:\\Dev\\regen-root" spellcheck="false" autocomplete="off">
+        <input class="tintin-input" id="tintin-cwd" value="C:\\Dev\\regen-root" spellcheck="false" autocomplete="off">
       </div>
     </div>
-    <textarea class="monkey-textarea" id="monkey-prompt" spellcheck="false">Reply exactly: monkey-dashboard-ok</textarea>
-    <div class="monkey-actions">
-      <button class="btn-monkey" id="monkey-send" onclick="sendMonkeyDashboardMessage()">Dispatch CLI</button>
-      <button class="btn-check" onclick="fillMonkeySmoke()" style="padding:7px 12px">Smoke Prompt</button>
-      <span class="monkey-status" id="monkey-status">idle</span>
+    <textarea class="tintin-textarea" id="tintin-prompt" spellcheck="false">Reply exactly: tintin-dashboard-ok</textarea>
+    <div class="tintin-actions">
+      <button class="btn-monkey" id="tintin-send" onclick="sendTinTinMessage()">Dispatch</button>
+      <button class="btn-check" onclick="fillTinTinSmoke()" style="padding:7px 12px">Smoke Prompt</button>
+      <span class="tintin-status" id="tintin-status">idle</span>
     </div>
-    <div class="monkey-result" id="monkey-result"></div>
+    <div class="tintin-result" id="tintin-result"></div>
   </div>
 
 
@@ -1505,52 +1505,52 @@ async function launchCCandMe() {
   }
 }
 
-// ── Monkey local CLI dispatch test panel ──
-let monkeyPollTimer = null;
+// ── TinTin local CLI dispatch sidebar ──
+let tintinPollTimer = null;
 
-function toggleMonkeyPanel() {
-  const panel = document.getElementById("monkey-panel");
+function toggleTinTinPanel() {
+  const panel = document.getElementById("tintin-panel");
   if (!panel) return;
   panel.classList.toggle("open");
 }
 
-function fillMonkeySmoke() {
-  const prompt = document.getElementById("monkey-prompt");
-  const app = document.getElementById("monkey-app");
+function fillTinTinSmoke() {
+  const prompt = document.getElementById("tintin-prompt");
+  const app = document.getElementById("tintin-app");
   if (app) app.value = "clauth-dashboard";
-  if (prompt) prompt.value = "Reply exactly: monkey-dashboard-ok";
+  if (prompt) prompt.value = "Reply exactly: tintin-dashboard-ok";
 }
 
-function setMonkeyStatus(text) {
-  const el = document.getElementById("monkey-status");
+function setTinTinStatus(text) {
+  const el = document.getElementById("tintin-status");
   if (el) el.textContent = text || "";
 }
 
-function setMonkeyResult(text, open) {
-  const el = document.getElementById("monkey-result");
+function setTinTinResult(text, open) {
+  const el = document.getElementById("tintin-result");
   if (!el) return;
   el.textContent = text || "";
   if (open) el.classList.add("open");
   else el.classList.remove("open");
 }
 
-async function sendMonkeyDashboardMessage() {
-  const sendBtn = document.getElementById("monkey-send");
-  const promptEl = document.getElementById("monkey-prompt");
-  const appEl = document.getElementById("monkey-app");
-  const cwdEl = document.getElementById("monkey-cwd");
+async function sendTinTinMessage() {
+  const sendBtn = document.getElementById("tintin-send");
+  const promptEl = document.getElementById("tintin-prompt");
+  const appEl = document.getElementById("tintin-app");
+  const cwdEl = document.getElementById("tintin-cwd");
   const prompt = (promptEl && promptEl.value || "").trim();
   const appSlug = (appEl && appEl.value || "clauth-dashboard").trim() || "clauth-dashboard";
   const cwd = (cwdEl && cwdEl.value || "").trim();
   if (!prompt) {
-    setMonkeyStatus("prompt required");
+    setTinTinStatus("prompt required");
     return;
   }
-  if (monkeyPollTimer) {
-    clearTimeout(monkeyPollTimer);
-    monkeyPollTimer = null;
+  if (tintinPollTimer) {
+    clearTimeout(tintinPollTimer);
+    tintinPollTimer = null;
   }
-  const jobId = "monkey-dashboard-" + Date.now();
+  const jobId = "tintin-" + Date.now();
   const body = {
     prompt,
     job_id: jobId,
@@ -1558,14 +1558,14 @@ async function sendMonkeyDashboardMessage() {
     agent_context: {
       app: { slug: appSlug, route: "/clauth-dashboard", origin: window.location.origin },
       repo: { root: cwd, cwd },
-      runtime: { agent: "clauth-cli", requested_by: "clauth-dashboard" },
+      runtime: { agent: "clauth-cli", requested_by: "clauth-dashboard", model: "claude-sonnet-4-6" },
       task: { intent: "general_chat", thread_id: jobId }
     }
   };
 
   if (sendBtn) { sendBtn.disabled = true; sendBtn.textContent = "Dispatching..."; }
-  setMonkeyStatus("dispatching " + jobId);
-  setMonkeyResult("", false);
+  setTinTinStatus("dispatching " + jobId);
+  setTinTinResult("", false);
   try {
     const response = await fetch(BASE + "/monkey/dispatch", {
       method: "POST",
@@ -1574,35 +1574,35 @@ async function sendMonkeyDashboardMessage() {
     });
     const result = await response.json();
     if (!response.ok || result.error) {
-      setMonkeyStatus("dispatch failed");
-      setMonkeyResult(JSON.stringify(result, null, 2), true);
+      setTinTinStatus("dispatch failed");
+      setTinTinResult(JSON.stringify(result, null, 2), true);
       return;
     }
-    setMonkeyStatus("spawned pid " + result.pid + " - polling");
-    pollMonkeyDashboardJob(jobId, 0);
+    setTinTinStatus("spawned pid " + result.pid + " - polling");
+    pollTinTinJob(jobId, 0);
   } catch (err) {
-    setMonkeyStatus("dispatch error");
-    setMonkeyResult(err && err.message ? err.message : String(err), true);
+    setTinTinStatus("dispatch error");
+    setTinTinResult(err && err.message ? err.message : String(err), true);
   } finally {
-    if (sendBtn) { sendBtn.disabled = false; sendBtn.textContent = "Dispatch CLI"; }
+    if (sendBtn) { sendBtn.disabled = false; sendBtn.textContent = "Dispatch"; }
   }
 }
 
-async function pollMonkeyDashboardJob(jobId, attempt) {
+async function pollTinTinJob(jobId, attempt) {
   try {
     const response = await fetch(BASE + "/monkey/dispatch/" + encodeURIComponent(jobId), { cache: "no-store" });
     const job = await response.json();
     if (!response.ok || job.error) {
-      setMonkeyStatus("job lookup failed");
-      setMonkeyResult(JSON.stringify(job, null, 2), true);
+      setTinTinStatus("job lookup failed");
+      setTinTinResult(JSON.stringify(job, null, 2), true);
       return;
     }
     if (job.status === "running" && attempt < 60) {
-      setMonkeyStatus("running pid " + (job.pid || "?") + " - " + (attempt + 1));
-      monkeyPollTimer = setTimeout(function() { pollMonkeyDashboardJob(jobId, attempt + 1); }, 1500);
+      setTinTinStatus("running pid " + (job.pid || "?") + " - " + (attempt + 1));
+      tintinPollTimer = setTimeout(function() { pollTinTinJob(jobId, attempt + 1); }, 1500);
       return;
     }
-    setMonkeyStatus(job.status + " exit " + job.exit_code);
+    setTinTinStatus(job.status + " exit " + job.exit_code);
     const out = [
       "status: " + job.status,
       "job: " + jobId,
@@ -1612,10 +1612,10 @@ async function pollMonkeyDashboardJob(jobId, attempt) {
       job.stdout || "",
       job.stderr ? "\\nstderr:\\n" + job.stderr : ""
     ].join("\\n");
-    setMonkeyResult(out, true);
+    setTinTinResult(out, true);
   } catch (err) {
-    setMonkeyStatus("poll error");
-    setMonkeyResult(err && err.message ? err.message : String(err), true);
+    setTinTinStatus("poll error");
+    setTinTinResult(err && err.message ? err.message : String(err), true);
   }
 }
 
@@ -3857,6 +3857,7 @@ function createServer(initPassword, whitelist, port, tunnelHostnameInit = null,
     const NOAUTH_HOSTS = ["fs.regendevcorp.com", "clauth.regendevcorp.com", "chitchat.regendevcorp.com"];
     const requestHost = (req.headers.host || "").split(":")[0].toLowerCase();
     const noAuthHost = NOAUTH_HOSTS.includes(requestHost);
+    const localTrustedHost = ["127.0.0.1", "localhost", "::1", "[::1]"].includes(requestHost);
 
     // ── OAuth Discovery (RFC 9728 + RFC 8414) ──────────────
     // Suppress OAuth discovery on noauth hosts — prevents claude.ai from entering OAuth flow
@@ -4075,7 +4076,7 @@ function createServer(initPassword, whitelist, port, tunnelHostnameInit = null,
       const authHeader = req.headers.authorization;
       const token = authHeader?.startsWith("Bearer ") ? authHeader.slice(7) : null;
 
-      if (!noAuthHost && (!token || !oauthTokens.has(token))) {
+      if (!noAuthHost && !localTrustedHost && (!token || !oauthTokens.has(token))) {
         // No valid Bearer token → return 401 with discovery hint
         const base = oauthBase();
         const resourcePath = isMcpPath ? reqPath.slice(1) : "sse"; // "mcp", "gws", "clauth", or "sse"
@@ -4092,8 +4093,8 @@ function createServer(initPassword, whitelist, port, tunnelHostnameInit = null,
         }));
       }
 
-      // Valid token — mark as remote and fall through to MCP handling
-      req._clauthRemote = true;
+      // Valid token or trusted localhost — mark remote status and fall through to MCP handling
+      req._clauthRemote = !localTrustedHost;
     }
 
     // ── MCP Streamable HTTP transport ──
@@ -5337,6 +5338,29 @@ function createServer(initPassword, whitelist, port, tunnelHostnameInit = null,
       return;
     }
 
+    // POST /terminal/show — reveal/focus an active terminal session or open a visible inspector
+    if (method === "POST" && reqPath === "/terminal/show") {
+      let body = "";
+      req.on("data", d => body += d);
+      req.on("end", () => {
+        try {
+          const { session_id } = JSON.parse(body);
+          if (!session_id) {
+            res.writeHead(400, { "Content-Type": "application/json", ...CORS });
+            return res.end(JSON.stringify({ error: "session_id required" }));
+          }
+          const result = showTerminalSession(session_id);
+          const status = result.error === 'not_found' ? 404 : result.error ? 500 : 200;
+          res.writeHead(status, { "Content-Type": "application/json", ...CORS });
+          res.end(JSON.stringify(result));
+        } catch {
+          res.writeHead(400, { "Content-Type": "application/json", ...CORS });
+          res.end(JSON.stringify({ error: "invalid JSON" }));
+        }
+      });
+      return;
+    }
+
     // POST /terminal/stop — stop a terminal session
     if (method === "POST" && reqPath === "/terminal/stop") {
       let body = "";
@@ -7868,20 +7892,20 @@ function buildMonkeyDispatchPrompt({ prompt, job_id, agent_context }) {
   const normalized = normalizeAgentContext(agent_context);
   const jobInstruction = job_id
     ? [
-        `Monkey job id: ${job_id}`,
+        `TinTin job id: ${job_id}`,
         "If the prompt does not contain all job details, use clauth at http://127.0.0.1:52437 to fetch exact credentials and query the app database/API directly.",
         "Do not assume agent MCP/plugin tools are available to this spawned CLI process.",
       ].join("\n")
     : "";
 
   const body = prompt || [
-    "Process this Monkey job using the provided agent context.",
+    "Process this TinTin job using the provided agent context.",
     jobInstruction,
     "Find the job payload from the consuming app's declared data path before making changes.",
   ].filter(Boolean).join("\n\n");
 
   return [
-    "You are a clauth-spawned Monkey CLI worker.",
+    "You are a clauth-spawned TinTin CLI agent (model: claude-sonnet-4-6).",
     "Agent context setup follows. Treat it as the runtime contract for this task.",
     "```json",
     JSON.stringify(normalized, null, 2),
@@ -7989,7 +8013,18 @@ function generateSessionId() {
   return crypto.randomUUID();
 }
 
-function startTerminalSession(name, knowledge_tier, context_md, cwd) {
+function defaultTerminalCwd() {
+  const dir = process.env.CLAUTH_TERMINAL_CWD || path.join(os.tmpdir(), "clauth-tintin-terminal");
+  try {
+    fs.mkdirSync(dir, { recursive: true });
+  } catch {
+    // If the neutral directory cannot be created, fall back to the user's home.
+    return os.homedir();
+  }
+  return dir;
+}
+
+function startTerminalSession(name, knowledge_tier, context_md, cwd, use_warm = false) {
   const binary = findClaudeBinary();
   if (!binary) {
     return { error: 'binary_not_found', message: 'claude CLI not found in PATH or AppData/npm' };
@@ -7998,7 +8033,7 @@ function startTerminalSession(name, knowledge_tier, context_md, cwd) {
   const preamble = context_md
     ? `${context_md}\n\n---\n`
     : '';
-  const initialContext = `${preamble}Session: ${name}, Tier: ${knowledge_tier}\nReady. Await instructions.`;
+  const initialContext = `${preamble}Session: ${name}, Tier: ${knowledge_tier}\nConversation transcript follows. Respond only to the final User message.`;
   const session = {
     session_id,
     name,
@@ -8008,26 +8043,31 @@ function startTerminalSession(name, knowledge_tier, context_md, cwd) {
     context: initialContext,
     activeProc: null,
     warmWorker: null,
-    cwd: cwd || CHITCHAT_FALLBACK_CWD,
+    use_warm,
+    cwd: cwd || defaultTerminalCwd(),
   };
 
-  // Try to acquire a warm worker from the agent pool for low-latency turns
-  try {
-    const pool = getAgentPool();
-    if (pool) {
-      const worker = pool.acquireForSession(session_id);
-      if (worker) {
-        session.warmWorker = worker;
-        console.log(`[terminal] session ${session_id} acquired warm worker`);
+  // Try to acquire a warm worker only when explicitly requested. The warm pool
+  // is optimized for call_agent one-shots; TinTin browser chat needs reliable
+  // repeated turns more than experimental low-latency pinning.
+  if (use_warm) {
+    try {
+      const pool = getAgentPool();
+      if (pool) {
+        const worker = pool.acquireForSession(session_id);
+        if (worker) {
+          session.warmWorker = worker;
+          console.log(`[terminal] session ${session_id} acquired warm worker`);
+        }
       }
+    } catch (e) {
+      console.log(`[terminal] session ${session_id} warm pool unavailable, will use cold path: ${e.message}`);
     }
-  } catch (e) {
-    console.log(`[terminal] session ${session_id} warm pool unavailable, will use cold path: ${e.message}`);
   }
 
   terminalSessions.set(session_id, session);
   console.log(`[terminal] started session ${session_id} name=${name} cwd=${session.cwd} warm=${!!session.warmWorker}`);
-  return { session_id, status: 'ready' };
+  return { session_id, status: 'ready', warm: !!session.warmWorker };
 }
 
 function sendTerminalMessage(session_id, message) {
@@ -8036,6 +8076,11 @@ function sendTerminalMessage(session_id, message) {
   if (session.status === 'stopped') return { error: 'stopped', message: 'Session is stopped' };
   if (session.status === 'busy') return { error: 'session_busy', message: 'Session is busy — try again shortly' };
 
+  const nextTurn = (session.turn || 0) + 1;
+  session.lastResponse = undefined;
+  session.lastResponseAt = null;
+  session.pendingTurn = nextTurn;
+
   // ── Warm-pool path: dispatch to the pinned worker (maintains its own context) ──
   if (session.warmWorker && !session.warmWorker.isDead()) {
     session.status = 'busy';
@@ -8053,7 +8098,8 @@ function sendTerminalMessage(session_id, message) {
         s.context = combined.length > 8000 ? combined.slice(combined.length - 8000) : combined;
         s.lastResponse = response;
         s.lastResponseAt = new Date().toISOString();
-        s.turn = (s.turn || 0) + 1;
+        s.turn = s.pendingTurn || ((s.turn || 0) + 1);
+        s.pendingTurn = null;
         s.status = 'ready';
         s.activeProc = null;
         console.log(`[terminal] session ${session_id} turn=${s.turn} complete (warm) ok=${result.ok}`);
@@ -8069,13 +8115,14 @@ function sendTerminalMessage(session_id, message) {
         const s = terminalSessions.get(session_id);
         s.lastResponse = `(warm dispatch failed: ${err.message})`;
         s.lastResponseAt = new Date().toISOString();
-        s.turn = (s.turn || 0) + 1;
+        s.turn = s.pendingTurn || ((s.turn || 0) + 1);
+        s.pendingTurn = null;
         s.status = 'ready';
         s.activeProc = null;
         s.warmWorker = null; // fall back to cold on next turn
         console.log(`[terminal] session ${session_id} warm dispatch threw, falling back to cold: ${err.message}`);
       });
-    return { queued: true, session_id, warm: true };
+    return { queued: true, session_id, warm: true, turn: nextTurn };
   }
 
   // ── Cold-spawn fallback: original path ──
@@ -8083,13 +8130,16 @@ function sendTerminalMessage(session_id, message) {
   if (!binary) return { error: 'binary_not_found', message: 'claude CLI not found in PATH or AppData/npm' };
 
   session.status = 'busy';
-  const fullPrompt = `${session.context}\n\n---\nUser: ${message}`;
-
-  const proc = spawnProc(binary, ['-p', fullPrompt, '--dangerously-skip-permissions'], {
+  const isCmdShim = process.platform === "win32" && /\.cmd$/i.test(binary);
+  const command = isCmdShim ? "cmd" : binary;
+  const args = isCmdShim
+    ? ["/d", "/s", "/c", `"${binary}"`, "-p", message, "--system-prompt", session.context, "--setting-sources", "user", "--dangerously-skip-permissions"]
+    : ["-p", message, "--system-prompt", session.context, "--setting-sources", "user", "--dangerously-skip-permissions"];
+  const proc = spawnProc(command, args, {
     cwd: session.cwd || CHITCHAT_FALLBACK_CWD,
     env: process.env,
     stdio: ['ignore', 'pipe', 'pipe'],
-    shell: true,
+    shell: false,
     windowsHide: true,
   });
   session.activeProc = proc;
@@ -8108,14 +8158,15 @@ function sendTerminalMessage(session_id, message) {
       s.context = combined.length > 8000 ? combined.slice(combined.length - 8000) : combined;
       s.lastResponse = response;
       s.lastResponseAt = new Date().toISOString();
-      s.turn = (s.turn || 0) + 1;
+      s.turn = s.pendingTurn || ((s.turn || 0) + 1);
+      s.pendingTurn = null;
       s.status = 'ready';
       s.activeProc = null;
       console.log(`[terminal] session ${session_id} turn=${s.turn} complete code=${code}`);
     }
   });
 
-  return { queued: true, session_id, warm: false };
+  return { queued: true, session_id, warm: false, turn: nextTurn };
 }
 
 function recvTerminalResponse(session_id, timeout_ms = 30000) {
@@ -8157,6 +8208,101 @@ function listTerminalSessions() {
   return sessions;
 }
 
+function showTerminalSession(session_id) {
+  const session = terminalSessions.get(session_id);
+  if (!session) return { error: 'not_found', message: `Session ${session_id} not found` };
+
+  const pid = session.activeProc?.pid || null;
+  if (process.platform === "win32" && pid) {
+    try {
+      const script = [
+        "Add-Type @'",
+        "using System;",
+        "using System.Runtime.InteropServices;",
+        "public class Win32ShowWindow {",
+        "  [DllImport(\"user32.dll\")] public static extern bool ShowWindowAsync(IntPtr hWnd, int nCmdShow);",
+        "  [DllImport(\"user32.dll\")] public static extern bool SetForegroundWindow(IntPtr hWnd);",
+        "}",
+        "'@",
+        `$p = Get-Process -Id ${Number(pid)} -ErrorAction SilentlyContinue`,
+        "if ($p -and $p.MainWindowHandle -ne 0) {",
+        "  [Win32ShowWindow]::ShowWindowAsync($p.MainWindowHandle, 5) | Out-Null",
+        "  [Win32ShowWindow]::SetForegroundWindow($p.MainWindowHandle) | Out-Null",
+        "  'shown'",
+        "} else {",
+        "  'no-window'",
+        "}",
+      ].join("\n");
+      const result = spawnSync("powershell.exe", [
+        "-NoProfile",
+        "-ExecutionPolicy",
+        "Bypass",
+        "-Command",
+        script,
+      ], {
+        encoding: "utf8",
+        windowsHide: true,
+        timeout: 5000,
+      });
+      const stdout = String(result.stdout || "").trim();
+      if (stdout.includes("shown")) {
+        session.lastShownAt = new Date().toISOString();
+        return { shown: true, mode: "active_process", session_id, pid };
+      }
+    } catch (e) {
+      console.log(`[terminal] session ${session_id} active process show failed: ${e.message}`);
+    }
+  }
+
+  if (process.platform === "win32") {
+    try {
+      const title = `TinTin ${session.name || session_id}`;
+      const lines = [
+        `$Host.UI.RawUI.WindowTitle = ${JSON.stringify(title)}`,
+        `Set-Location -LiteralPath ${JSON.stringify(session.cwd || os.homedir())}`,
+        "Clear-Host",
+        `Write-Host ${JSON.stringify(`TinTin session ${session_id}`)} -ForegroundColor Cyan`,
+        `Write-Host ${JSON.stringify(`Name: ${session.name || ""}`)}`,
+        `Write-Host ${JSON.stringify(`Status: ${session.status}`)}`,
+        `Write-Host ${JSON.stringify(`CWD: ${session.cwd || ""}`)}`,
+        `Write-Host ${JSON.stringify(`Turn: ${session.turn || 0}`)}`,
+        `Write-Host ${JSON.stringify("This viewer is attached to clauth session metadata. If a Claude turn is active, terminal_show focuses it; otherwise this is the visible session inspection point.")} -ForegroundColor Yellow`,
+        "Write-Host ''",
+        "Write-Host 'Recent response preview:' -ForegroundColor Green",
+        `Write-Host ${JSON.stringify((session.lastResponse || "").slice(0, 1500))}`,
+        "Write-Host ''",
+        "Write-Host 'Leave this window open or close it when done.' -ForegroundColor DarkGray",
+      ].join("; ");
+      const child = spawnProc("powershell.exe", [
+        "-NoExit",
+        "-NoProfile",
+        "-ExecutionPolicy",
+        "Bypass",
+        "-Command",
+        lines,
+      ], {
+        cwd: session.cwd || os.homedir(),
+        env: process.env,
+        stdio: "ignore",
+        detached: true,
+        windowsHide: false,
+      });
+      child.unref?.();
+      session.lastShownAt = new Date().toISOString();
+      return { shown: true, mode: "session_inspector", session_id, pid: child.pid || null };
+    } catch (e) {
+      return { error: "show_failed", message: e.message };
+    }
+  }
+
+  return {
+    shown: false,
+    mode: "unsupported_platform",
+    session_id,
+    message: "terminal_show currently opens/focuses local Windows sessions only.",
+  };
+}
+
 function stopTerminalSession(session_id) {
   const session = terminalSessions.get(session_id);
   if (!session) return { error: 'not_found', message: `Session ${session_id} not found` };
@@ -9317,6 +9463,8 @@ const MCP_TOOLS = [
         name:           { type: "string", description: "Human-readable session name (e.g. 'knowledgedude-prt')" },
         knowledge_tier: { type: "string", enum: ["db_only", "corpus", "project"], description: "Knowledge tier for the session. 'corpus' injects context_md as preamble." },
         context_md:     { type: "string", description: "Optional markdown preamble injected as session context (used for 'corpus' tier)" },
+        cwd:            { type: "string", description: "Optional working directory. Defaults to a neutral temp directory so browser chat avoids repo hooks." },
+        use_warm:       { type: "boolean", description: "Opt into experimental pinned warm-worker mode. Defaults to false for reliable browser chat turns." },
       },
       required: ["name"],
       additionalProperties: false,
@@ -9340,6 +9488,18 @@ const MCP_TOOLS = [
     description: "List all active terminal sessions with their status (ready/busy/stopped), knowledge tier, and start time.",
     inputSchema: { type: "object", properties: {}, additionalProperties: false },
   },
+  {
+    name: "terminal_show",
+    description: "Reveal/focus a TinTin terminal session on this Windows machine. If no live Claude process window exists, opens a visible session inspector at the session cwd.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        session_id: { type: "string", description: "Session ID returned by terminal_start" },
+      },
+      required: ["session_id"],
+      additionalProperties: false,
+    },
+  },
   {
     name: "terminal_recv",
     description: "Read the last response from a terminal session. Returns response if ready, or status='busy' if still processing. Poll every 3-5 seconds until status='ready'.",
@@ -11085,10 +11245,10 @@ async function handleMcpTool(vault, name, args) {
     }
 
     case "terminal_start": {
-      const { name, knowledge_tier, context_md } = args;
+      const { name, knowledge_tier, context_md, use_warm, cwd: requestedCwd } = args;
       if (!name) return mcpError("name required");
-      const cwd = await resolveChitchatRoot(vault);
-      const result = startTerminalSession(name, knowledge_tier || 'db_only', context_md || null, cwd);
+      const cwd = requestedCwd ? path.resolve(String(requestedCwd)) : defaultTerminalCwd();
+      const result = startTerminalSession(name, knowledge_tier || 'db_only', context_md || null, cwd, use_warm === true);
       if (result.error) return mcpError(`${result.error}: ${result.message}`);
       return mcpResult(JSON.stringify(result));
     }
@@ -11105,6 +11265,14 @@ async function handleMcpTool(vault, name, args) {
       return mcpResult(JSON.stringify(listTerminalSessions()));
     }
 
+    case "terminal_show": {
+      const { session_id } = args;
+      if (!session_id) return mcpError("session_id required");
+      const result = showTerminalSession(session_id);
+      if (result.error) return mcpError(`${result.error}: ${result.message}`);
+      return mcpResult(JSON.stringify(result));
+    }
+
     case "terminal_recv": {
       const { session_id } = args;
       if (!session_id) return mcpError("session_id required");

package/cli/studio-debug.js

@@ -9,6 +9,7 @@ const MAX_POLL_TIMEOUT = 600_000;
 const MAX_EVENT_QUEUE = 100;
 const MAX_SNIPPET = 2_000;
 const STYLE_WRITE_EXTENSIONS = new Set([".css", ".scss", ".sass", ".less", ".html", ".jsx", ".tsx"]);
+const TEXT_WRITE_EXTENSIONS = new Set([".ts", ".tsx", ".js", ".jsx", ".html", ".md", ".txt", ".css", ".scss"]);
 
 const APP_TARGETS = {
   studio_test: {
@@ -99,16 +100,34 @@ function writeJson(res, status, data, cors) {
   res.end(JSON.stringify(data));
 }
 
-function resolveSourceFile(session, file) {
+function resolveSourceFile(session, file, allowedExtensions = STYLE_WRITE_EXTENSIONS) {
   if (!file || typeof file !== "string") return null;
   const root = path.resolve(session.repoRoot || session.cwd || process.cwd());
   const candidate = path.isAbsolute(file) ? path.resolve(file) : path.resolve(root, file);
   const rel = path.relative(root, candidate);
   if (rel.startsWith("..") || path.isAbsolute(rel)) return null;
-  if (!STYLE_WRITE_EXTENSIONS.has(path.extname(candidate).toLowerCase())) return null;
+  if (!allowedExtensions.has(path.extname(candidate).toLowerCase())) return null;
   return { root, path: candidate, relativePath: rel.replace(/\\/g, "/") };
 }
 
+function applyTextRangeEdit(sourceText, textEdit) {
+  const source = textEdit.source;
+  if (!source || !source.range || typeof source.range.start !== "number" || typeof source.range.end !== "number") {
+    throw new Error("text-write requires source.range.start and source.range.end.");
+  }
+  const { start, end } = source.range;
+  if (start < 0 || end < start || end > sourceText.length) {
+    throw new Error(`text-write source range [${start}, ${end}] is out of bounds (file length: ${sourceText.length}).`);
+  }
+  if (textEdit.oldText !== undefined) {
+    const oldSlice = sourceText.slice(start, end);
+    if (oldSlice !== textEdit.oldText) {
+      throw new Error(`text-write oldText mismatch at [${start}, ${end}]: expected "${String(textEdit.oldText).slice(0, 80)}", found "${oldSlice.slice(0, 80)}".`);
+    }
+  }
+  return `${sourceText.slice(0, start)}${textEdit.newText}${sourceText.slice(end)}`;
+}
+
 function escapeRegExp(value) {
   return String(value).replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
@@ -451,6 +470,40 @@ export class StudioDebugSessionStore {
     return { ok: true, status: session.status, reply };
   }
 
+  writeText(sessionId, body) {
+    const auth = this.authenticate(sessionId, body.token);
+    if (auth.error) return auth;
+    const session = auth.session;
+    const textEdit = body.textEdit && typeof body.textEdit === "object" ? body.textEdit : {};
+    const source = textEdit.source && typeof textEdit.source === "object" ? textEdit.source : {};
+    const file = source.file || textEdit.file || body.file;
+    const fileInfo = resolveSourceFile(session, file, TEXT_WRITE_EXTENSIONS);
+    if (!fileInfo) {
+      return { error: "invalid_source", message: `text-write requires a source file inside the debug session repo (got: ${file || "(none)"}).` };
+    }
+    if (typeof textEdit.newText !== "string") {
+      return { error: "invalid_body", message: "text-write requires textEdit.newText." };
+    }
+    try {
+      const original = fs.readFileSync(fileInfo.path, "utf8");
+      const updated = applyTextRangeEdit(original, { ...textEdit, source });
+      fs.writeFileSync(fileInfo.path, updated, "utf8");
+      const reply = {
+        eventId: body.id || `text_${crypto.randomUUID()}`,
+        status: "done",
+        message: `Direct text write (source_replace [${source.range?.start}, ${source.range?.end}])`,
+        filesChanged: [fileInfo.relativePath],
+        createdAt: nowIso(),
+      };
+      session.replies.push(reply);
+      session.status = "done";
+      session.updatedAt = nowIso();
+      return { ok: true, status: "done", eventId: reply.eventId, filesChanged: reply.filesChanged };
+    } catch (err) {
+      return { error: "text_write_failed", message: err instanceof Error ? err.message : String(err) };
+    }
+  }
+
   writeStyle(sessionId, body) {
     const auth = this.authenticate(sessionId, body.token);
     if (auth.error) return auth;
@@ -551,7 +604,7 @@ export function createStudioDebugRuntime(options) {
       }
     }
 
-    const debugMatch = reqPath.match(/^\/studio\/debug\/([^/]+)\/(events|style-write|status|stop)$/);
+    const debugMatch = reqPath.match(/^\/studio\/debug\/([^/]+)\/(events|style-write|text-write|status|stop)$/);
     const claudeMatch = reqPath.match(/^\/studio\/claude\/([^/]+)\/(poll|reply|status)$/);
     if (!debugMatch && !claudeMatch) return false;
     const [, sessionId, action] = debugMatch || claudeMatch;
@@ -565,6 +618,10 @@ export function createStudioDebugRuntime(options) {
         const result = store.writeStyle(sessionId, await readBody(req));
         return writeJson(res, result.error === "unauthorized" ? 401 : result.error ? 400 : 200, result, cors);
       }
+      if (method === "POST" && action === "text-write") {
+        const result = store.writeText(sessionId, await readBody(req));
+        return writeJson(res, result.error === "unauthorized" ? 401 : result.error ? 400 : 200, result, cors);
+      }
       if (method === "GET" && action === "poll") {
         const result = await store.poll(sessionId, url.searchParams.get("token"), url.searchParams.get("timeout"));
         return writeJson(res, result.error === "unauthorized" ? 401 : result.error ? 404 : 200, result, cors);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lifeaitools/clauth",
-  "version": "1.19.0",
+  "version": "1.19.3",
   "description": "Hardware-bound credential vault for the LIFEAI infrastructure stack",
   "type": "module",
   "bin": {