@open-mercato/cezar 0.1.5-pr506.357

package/dist/server/git.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git.js","sourceRoot":"","sources":["../../src/server/git.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAoBjC,KAAK,UAAU,GAAG,CAAC,IAAY,EAAE,IAAc;IAC7C,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC,CAAC;IACvF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,qDAAqD;AACrD,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,GAAW;IAC3C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACvE,MAAM,MAAM,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC/E,IAAI,MAA0B,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,SAAS,CAAC;QAClF,CAAC;QAAC,MAAM,CAAC;YACP,uEAAuE;YACvE,wEAAwE;YACxE,wEAAwE;YACxE,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBAC7F,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;oBACb,MAAM,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,SAAS,CAAC;gBAClF,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,sCAAsC;YACxC,CAAC;QACH,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAY;IAC1C,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC;IACvD,OAAO,GAAG;SACP,KAAK,CAAC,IAAI,CAAC;SACX,MAAM,CAAC,OAAO,CAAC;SACf,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACvF,CAAC;AAED,yEAAyE;AACzE,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,IAAY,EAAE,GAAG,GAAG,OAAO;IACvD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/C,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,sBAAsB,CAAC;IAC1E,OAAO,IAAI,CAAC;AACd,CAAC;AAED;+CAC+C;AAC/C,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAY;IAC5C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,2BAA2B,CAAC,CAAC,CAAC;QACjF,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YACzB,IAAI,IAAI;gBAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,2BAA2B;IAC7B,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,2BAA2B,CAAC,CAAC,CAAC;QACxF,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YACzB,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAAE,SAAS;YAC7C,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,0BAA0B;IAC5B,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;AAC5F,CAAC;AAED,iFAAiF;AACjF,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAY,EAAE,GAAW,EAAE,GAAG,GAAG,OAAO;IACtE,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,qBAAqB,CAAC;IACjE,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,GAAG,CAAC,CAAC,CAAC;IAC9E,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,sBAAsB,CAAC;IACxE,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,IAAY,EAAE,KAAK,GAAG,EAAE;IACnD,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE;QAC1B,KAAK;QACL,IAAI,KAAK,EAAE;QACX,wCAAwC;KACzC,CAAC,CAAC;IACH,OAAO,GAAG;SACP,KAAK,CAAC,IAAI,CAAC;SACX,MAAM,CAAC,OAAO,CAAC;SACf,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACZ,MAAM,CAAC,IAAI,GAAG,EAAE,EAAE,OAAO,GAAG,EAAE,EAAE,MAAM,GAAG,EAAE,EAAE,IAAI,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC7E,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACzC,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/server/github.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Thin delegate — the gh-CLI listing logic moved behind the forge-driver seam
+ * (`src/server/forge/github.ts`, cockpit-ui redesign spec §"Forge-driver
+ * seam"). Kept so existing imports and the protected `/api/github` response
+ * shape (BACKWARD_COMPATIBILITY.md §2) stay exactly as they were.
+ */
+export { fetchGithub, GH_MAX_LIMIT } from './forge/github.js';
+export type { GithubData, GithubItem } from './forge/github.js';

package/dist/server/github.js

@@ -0,0 +1,8 @@
+/**
+ * Thin delegate — the gh-CLI listing logic moved behind the forge-driver seam
+ * (`src/server/forge/github.ts`, cockpit-ui redesign spec §"Forge-driver
+ * seam"). Kept so existing imports and the protected `/api/github` response
+ * shape (BACKWARD_COMPATIBILITY.md §2) stay exactly as they were.
+ */
+export { fetchGithub, GH_MAX_LIMIT } from './forge/github.js';
+//# sourceMappingURL=github.js.map

package/dist/server/github.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"github.js","sourceRoot":"","sources":["../../src/server/github.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC"}

package/dist/server/launch-key.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Launch-key (spec 011): a random secret baked into the bookmarklets so only
+ * pages that got it from THIS cockpit can auto-start a run via `/new?auto=1`.
+ * A rogue web page can navigate the browser to localhost, but it cannot read
+ * `.ai/cezar/launch-key` — without the key `/new` only prefills the form.
+ */
+export declare function ensureLaunchKey(dataDir: string): string;

package/dist/server/launch-key.js

@@ -0,0 +1,33 @@
+import { chmodSync, existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { randomUUID } from 'node:crypto';
+import { join } from 'node:path';
+/**
+ * Launch-key (spec 011): a random secret baked into the bookmarklets so only
+ * pages that got it from THIS cockpit can auto-start a run via `/new?auto=1`.
+ * A rogue web page can navigate the browser to localhost, but it cannot read
+ * `.ai/cezar/launch-key` — without the key `/new` only prefills the form.
+ */
+export function ensureLaunchKey(dataDir) {
+    const path = join(dataDir, 'launch-key');
+    try {
+        if (existsSync(path)) {
+            const existing = readFileSync(path, 'utf8').trim();
+            if (existing)
+                return existing;
+        }
+    }
+    catch {
+        // unreadable — fall through and regenerate
+    }
+    const key = randomUUID();
+    try {
+        mkdirSync(dataDir, { recursive: true });
+        writeFileSync(path, `${key}\n`, { encoding: 'utf8', mode: 0o600 });
+        chmodSync(path, 0o600); // best-effort — mode is ignored on pre-existing files
+    }
+    catch {
+        // non-fatal: the key still protects auto-start for this process lifetime
+    }
+    return key;
+}
+//# sourceMappingURL=launch-key.js.map

package/dist/server/launch-key.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"launch-key.js","sourceRoot":"","sources":["../../src/server/launch-key.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxF,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,OAAe;IAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IACzC,IAAI,CAAC;QACH,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;YACnD,IAAI,QAAQ;gBAAE,OAAO,QAAQ,CAAC;QAChC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,2CAA2C;IAC7C,CAAC;IACD,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;IACzB,IAAI,CAAC;QACH,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxC,aAAa,CAAC,IAAI,EAAE,GAAG,GAAG,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACnE,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,sDAAsD;IAChF,CAAC;IAAC,MAAM,CAAC;QACP,yEAAyE;IAC3E,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/server/open-in-app.d.ts

@@ -0,0 +1,51 @@
+/**
+ * "Open in…" session takeover (#open-in): detect the editors / file managers / terminals on THIS
+ * machine, and open a run's worktree in the one the user picks — the desktop-app equivalent of
+ * the "cd <path>" hint. Local-only; the server gates these behind `localHandoff` (CEZ_REMOTE).
+ *
+ * Detection is best-effort and cross-platform: an editor counts as present if its CLI is on PATH
+ * or (macOS) its .app bundle is installed. Finder/file-manager and Terminal are always offered.
+ *
+ * WSL (#361): when this process itself runs inside WSL, `process.platform` reads `linux` but the
+ * user's GUI apps mostly live on the Windows side, reachable through interop. `resolveOnPath`
+ * additionally probes directly-spawnable `.com`/`.exe` suffixes there (Node's own PATH lookup
+ * only does that under real win32), and `openInApp`/`openFileManager` translate the worktree path
+ * to its `\\wsl$\…` (or `C:\…`) form before handing it to a resolved Windows-side binary — a WSL-native
+ * launcher (e.g. VS Code's Remote-WSL `code` shim) keeps the POSIX path unchanged.
+ */
+export interface OpenTarget {
+    id: string;
+    label: string;
+    /** A stable icon key the UI maps to a concrete icon component (#361). Optional so an older
+     *  server talking to a newer client (or vice versa) just falls back to a generic icon —
+     *  never a protocol break. */
+    icon?: string;
+}
+/** Is `bin` (with a directly-spawnable Windows suffix under win32/WSL interop) on PATH?
+ *  Returns the exact resolved name (which may carry the suffix) — pure filesystem probe, no
+ *  child process — or null. `.cmd`/`.bat` are intentionally excluded: modern Node refuses to
+ *  spawn them directly, while launching them through a shell would reintroduce the BatBadBut
+ *  command-injection surface fixed in #459. An unavailable target is safer than one the menu
+ *  offers and then silently fails to open (#469 review).
+ *
+ *  The optional environment arguments keep Windows/WSL suffix behavior testable on any host. */
+export declare function resolveOnPath(bin: string, platform?: NodeJS.Platform, wsl?: boolean, searchPath?: string): string | null;
+/** The runner behind a `cli:<runner>` open target, or null when the id isn't a CLI handoff. */
+export declare function agentCliRunner(targetId: string): 'claude' | 'codex' | 'opencode' | null;
+/** The open targets available on this machine: the file manager, a terminal, every detected
+ *  editor, and every installed coding-agent CLI. Order is stable so the menu never reshuffles. */
+export declare function detectOpenTargets(): OpenTarget[];
+/** The (bin, args) a file-manager launch resolves to — pure so the per-platform routing
+ *  (including the WSL→Explorer interop branch) is unit-testable without spawning anything.
+ *  `platform`/`wsl` default to the real environment; tests pass them explicitly. */
+export declare function fileManagerLaunch(dir: string, platform?: NodeJS.Platform, wsl?: boolean): {
+    bin: string;
+    args: string[];
+};
+/** Open `dir` in the given target. Unknown/unavailable target → false (the caller 409s). */
+export declare function openInApp(targetId: string, dir: string): Promise<boolean>;
+/** The path argument to hand a resolved binary: a Windows-suffixed name found through WSL
+ *  interop needs the Windows-side path; a bare-name binary (native Linux, or a WSL-aware shim
+ *  like VS Code's Remote-WSL `code`) takes the POSIX path unchanged. `wsl` defaults to the real
+ *  environment; tests pass it explicitly so this needs no global platform stubbing. */
+export declare function launchPathFor(resolvedBin: string, dir: string, wsl?: boolean): string;

package/dist/server/open-in-app.js

@@ -0,0 +1,189 @@
+import { spawn } from 'node:child_process';
+import { accessSync, constants, existsSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import { openInTerminal } from './open-in-terminal.js';
+import { isWsl, translateToWindowsPath } from './wsl.js';
+const EDITORS = [
+    { id: 'vscode', label: 'VS Code', icon: 'vscode', cli: 'code', mac: 'Visual Studio Code' },
+    { id: 'cursor', label: 'Cursor', icon: 'cursor', cli: 'cursor', mac: 'Cursor' },
+    { id: 'zed', label: 'Zed', icon: 'zed', cli: 'zed', mac: 'Zed' },
+    { id: 'windsurf', label: 'Windsurf', icon: 'windsurf', cli: 'windsurf', mac: 'Windsurf' },
+    { id: 'sublime', label: 'Sublime Text', icon: 'sublime', cli: 'subl', mac: 'Sublime Text' },
+    // JetBrains (#361 gap 3): Toolbox's "generate shell scripts" produces one bare-name launcher
+    // per product on every OS (idea, pycharm, …); the .app names below cover the Community /
+    // Ultimate / Professional edition splits Toolbox and the standalone installers both produce.
+    { id: 'idea', label: 'IntelliJ IDEA', icon: 'idea', cli: 'idea', mac: ['IntelliJ IDEA', 'IntelliJ IDEA CE', 'IntelliJ IDEA Ultimate'] },
+    { id: 'pycharm', label: 'PyCharm', icon: 'pycharm', cli: 'pycharm', mac: ['PyCharm', 'PyCharm CE', 'PyCharm Professional'] },
+    { id: 'webstorm', label: 'WebStorm', icon: 'webstorm', cli: 'webstorm', mac: 'WebStorm' },
+    { id: 'goland', label: 'GoLand', icon: 'goland', cli: 'goland', mac: 'GoLand' },
+    { id: 'rubymine', label: 'RubyMine', icon: 'rubymine', cli: 'rubymine', mac: 'RubyMine' },
+    { id: 'phpstorm', label: 'PhpStorm', icon: 'phpstorm', cli: 'phpstorm', mac: 'PhpStorm' },
+    { id: 'clion', label: 'CLion', icon: 'clion', cli: 'clion', mac: 'CLion' },
+    { id: 'rider', label: 'Rider', icon: 'rider', cli: 'rider', mac: 'Rider' },
+    { id: 'android-studio', label: 'Android Studio', icon: 'android-studio', cli: 'studio', mac: 'Android Studio' },
+    { id: 'xcode', label: 'Xcode', icon: 'xcode', mac: 'Xcode' },
+    { id: 'warp', label: 'Warp', icon: 'warp', cli: 'warp', mac: 'Warp' },
+];
+const FILE_MANAGER_LABEL = process.platform === 'darwin' ? 'Finder' : process.platform === 'win32' || isWsl() ? 'Explorer' : 'Files';
+/** Is `bin` (with a directly-spawnable Windows suffix under win32/WSL interop) on PATH?
+ *  Returns the exact resolved name (which may carry the suffix) — pure filesystem probe, no
+ *  child process — or null. `.cmd`/`.bat` are intentionally excluded: modern Node refuses to
+ *  spawn them directly, while launching them through a shell would reintroduce the BatBadBut
+ *  command-injection surface fixed in #459. An unavailable target is safer than one the menu
+ *  offers and then silently fails to open (#469 review).
+ *
+ *  The optional environment arguments keep Windows/WSL suffix behavior testable on any host. */
+export function resolveOnPath(bin, platform = process.platform, wsl = isWsl(), searchPath = process.env.PATH ?? '') {
+    const dirs = searchPath.split(platform === 'win32' ? ';' : ':');
+    const suffixed = platform === 'win32' || wsl;
+    const names = suffixed ? [bin, `${bin}.com`, `${bin}.exe`] : [bin];
+    for (const dir of dirs) {
+        if (!dir)
+            continue;
+        for (const name of names) {
+            try {
+                accessSync(join(dir, name), constants.X_OK);
+                return name;
+            }
+            catch {
+                // keep looking
+            }
+        }
+    }
+    return null;
+}
+function onPath(bin) {
+    return resolveOnPath(bin) !== null;
+}
+/** macOS: is any of `names` (`<name>.app`) installed in a standard Applications dir? */
+function macAppExists(names) {
+    if (process.platform !== 'darwin')
+        return false;
+    const candidates = Array.isArray(names) ? names : [names];
+    return candidates.some((name) => [
+        `/Applications/${name}.app`,
+        join(homedir(), 'Applications', `${name}.app`),
+        `/System/Applications/${name}.app`,
+    ].some((p) => existsSync(p)));
+}
+function editorAvailable(editor) {
+    if (editor.cli && onPath(editor.cli))
+        return true;
+    if (editor.mac && macAppExists(editor.mac))
+        return true;
+    return false;
+}
+/** Coding-agent CLIs a session can be handed off to (#cli-handoff). Selecting one opens a
+ *  terminal that resumes THIS run's session when the runner matches, or launches a fresh CLI in
+ *  the worktree otherwise. The actual command is built server-side (needs the run's session). */
+const AGENT_CLIS = [
+    { runner: 'claude', label: 'Claude CLI', icon: 'claude', bin: 'claude', envBin: process.env.CEZ_CLAUDE_BIN },
+    { runner: 'codex', label: 'Codex CLI', icon: 'codex', bin: 'codex', envBin: process.env.CEZ_CODEX_BIN },
+    { runner: 'opencode', label: 'OpenCode', icon: 'opencode', bin: 'opencode', envBin: process.env.CEZ_OPENCODE_BIN },
+];
+/** The runner behind a `cli:<runner>` open target, or null when the id isn't a CLI handoff. */
+export function agentCliRunner(targetId) {
+    const match = AGENT_CLIS.find((c) => `cli:${c.runner}` === targetId);
+    return match ? match.runner : null;
+}
+/** The open targets available on this machine: the file manager, a terminal, every detected
+ *  editor, and every installed coding-agent CLI. Order is stable so the menu never reshuffles. */
+export function detectOpenTargets() {
+    const targets = [
+        { id: 'finder', label: FILE_MANAGER_LABEL, icon: 'folder' },
+        { id: 'terminal', label: 'Terminal', icon: 'terminal' },
+    ];
+    for (const editor of EDITORS) {
+        if (editorAvailable(editor))
+            targets.push({ id: editor.id, label: editor.label, icon: editor.icon });
+    }
+    for (const cli of AGENT_CLIS) {
+        if ((cli.envBin && existsSync(cli.envBin)) || onPath(cli.bin)) {
+            targets.push({ id: `cli:${cli.runner}`, label: cli.label, icon: cli.icon });
+        }
+    }
+    return targets;
+}
+/** The (bin, args) a file-manager launch resolves to — pure so the per-platform routing
+ *  (including the WSL→Explorer interop branch) is unit-testable without spawning anything.
+ *  `platform`/`wsl` default to the real environment; tests pass them explicitly. */
+export function fileManagerLaunch(dir, platform = process.platform, wsl = isWsl()) {
+    if (platform === 'darwin')
+        return { bin: 'open', args: [dir] };
+    if (platform === 'win32')
+        return { bin: 'explorer', args: [dir] };
+    if (wsl)
+        return { bin: 'explorer.exe', args: [translateToWindowsPath(dir)] };
+    return { bin: 'xdg-open', args: [dir] };
+}
+/** Open `dir` in the file manager, natively per platform. Under WSL there is no Linux desktop to
+ *  hand `xdg-open` to — go through interop to Windows Explorer instead, translating the path. */
+async function openFileManager(dir) {
+    const { bin, args } = fileManagerLaunch(dir);
+    return runDetached(bin, args);
+}
+/** Open `dir` in the given target. Unknown/unavailable target → false (the caller 409s). */
+export async function openInApp(targetId, dir) {
+    if (targetId === 'finder')
+        return openFileManager(dir);
+    // A bare interactive shell at the worktree — `:` is a no-op so no command actually runs.
+    if (targetId === 'terminal')
+        return openInTerminal(dir, ':');
+    const editor = EDITORS.find((e) => e.id === targetId);
+    if (!editor)
+        return false;
+    if (editor.cli) {
+        const resolved = resolveOnPath(editor.cli);
+        if (resolved)
+            return runDetached(resolved, [launchPathFor(resolved, dir)]);
+    }
+    if (editor.mac && macAppExists(editor.mac))
+        return runDetached('open', ['-a', pickInstalledMacApp(editor.mac), dir]);
+    return false;
+}
+/** The path argument to hand a resolved binary: a Windows-suffixed name found through WSL
+ *  interop needs the Windows-side path; a bare-name binary (native Linux, or a WSL-aware shim
+ *  like VS Code's Remote-WSL `code`) takes the POSIX path unchanged. `wsl` defaults to the real
+ *  environment; tests pass it explicitly so this needs no global platform stubbing. */
+export function launchPathFor(resolvedBin, dir, wsl = isWsl()) {
+    if (wsl && /\.(com|exe)$/i.test(resolvedBin))
+        return translateToWindowsPath(dir);
+    return dir;
+}
+/** Which of an editor's candidate .app names is actually installed — `macAppExists` already
+ *  confirmed at least one is, this just picks it for the `open -a` argument. */
+function pickInstalledMacApp(names) {
+    const candidates = Array.isArray(names) ? names : [names];
+    return (candidates.find((name) => [
+        `/Applications/${name}.app`,
+        join(homedir(), 'Applications', `${name}.app`),
+        `/System/Applications/${name}.app`,
+    ].some((p) => existsSync(p))) ?? candidates[0]);
+}
+/** Spawn detached; success = no error within a short settle window (mirrors open-in-terminal). */
+function runDetached(bin, args) {
+    return new Promise((resolve) => {
+        let child;
+        try {
+            child = spawn(bin, args, { stdio: 'ignore', detached: true });
+        }
+        catch {
+            resolve(false);
+            return;
+        }
+        let settled = false;
+        const settle = (ok) => {
+            if (settled)
+                return;
+            settled = true;
+            resolve(ok);
+        };
+        child.once('error', () => settle(false));
+        setTimeout(() => {
+            child.unref();
+            settle(true);
+        }, 250);
+    });
+}
+//# sourceMappingURL=open-in-app.js.map

package/dist/server/open-in-app.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"open-in-app.js","sourceRoot":"","sources":["../../src/server/open-in-app.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC5D,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,KAAK,EAAE,sBAAsB,EAAE,MAAM,UAAU,CAAC;AAuCzD,MAAM,OAAO,GAAgB;IAC3B,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,oBAAoB,EAAE;IAC1F,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE;IAC/E,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE;IAChE,EAAE,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE;IACzF,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,cAAc,EAAE;IAC3F,6FAA6F;IAC7F,yFAAyF;IACzF,6FAA6F;IAC7F,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,eAAe,EAAE,kBAAkB,EAAE,wBAAwB,CAAC,EAAE;IACvI,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE,YAAY,EAAE,sBAAsB,CAAC,EAAE;IAC5H,EAAE,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE;IACzF,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE;IAC/E,EAAE,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE;IACzF,EAAE,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE;IACzF,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE;IAC1E,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE;IAC1E,EAAE,EAAE,EAAE,gBAAgB,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,gBAAgB,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,gBAAgB,EAAE;IAC/G,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE;IAC5D,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE;CACtE,CAAC;AAEF,MAAM,kBAAkB,GACtB,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC;AAE5G;;;;;;;gGAOgG;AAChG,MAAM,UAAU,aAAa,CAC3B,GAAW,EACX,WAA4B,OAAO,CAAC,QAAQ,EAC5C,MAAe,KAAK,EAAE,EACtB,aAAqB,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE;IAE3C,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAChE,MAAM,QAAQ,GAAG,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC;IAC7C,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,GAAG,MAAM,EAAE,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACnE,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;gBAC5C,OAAO,IAAI,CAAC;YACd,CAAC;YAAC,MAAM,CAAC;gBACP,eAAe;YACjB,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,MAAM,CAAC,GAAW;IACzB,OAAO,aAAa,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC;AACrC,CAAC;AAED,wFAAwF;AACxF,SAAS,YAAY,CAAC,KAAwB;IAC5C,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAChD,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC1D,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAC9B;QACE,iBAAiB,IAAI,MAAM;QAC3B,IAAI,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,IAAI,MAAM,CAAC;QAC9C,wBAAwB,IAAI,MAAM;KACnC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAC7B,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,MAAiB;IACxC,IAAI,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAClD,IAAI,MAAM,CAAC,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACxD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;iGAEiG;AACjG,MAAM,UAAU,GAAkH;IAChI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE;IAC5G,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE;IACvG,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE;CACnH,CAAC;AAEF,+FAA+F;AAC/F,MAAM,UAAU,cAAc,CAAC,QAAgB;IAC7C,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,KAAK,QAAQ,CAAC,CAAC;IACrE,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AACrC,CAAC;AAED;kGACkG;AAClG,MAAM,UAAU,iBAAiB;IAC/B,MAAM,OAAO,GAAiB;QAC5B,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,kBAAkB,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC3D,EAAE,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE;KACxD,CAAC;IACF,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,eAAe,CAAC,MAAM,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IACvG,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9D,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,OAAO,GAAG,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QAC9E,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;oFAEoF;AACpF,MAAM,UAAU,iBAAiB,CAC/B,GAAW,EACX,WAA4B,OAAO,CAAC,QAAQ,EAC5C,MAAe,KAAK,EAAE;IAEtB,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;IAC/D,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;IAClE,IAAI,GAAG;QAAE,OAAO,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;IAC7E,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;AAC1C,CAAC;AAED;iGACiG;AACjG,KAAK,UAAU,eAAe,CAAC,GAAW;IACxC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC7C,OAAO,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AAChC,CAAC;AAED,4FAA4F;AAC5F,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,QAAgB,EAAE,GAAW;IAC3D,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO,eAAe,CAAC,GAAG,CAAC,CAAC;IACvD,yFAAyF;IACzF,IAAI,QAAQ,KAAK,UAAU;QAAE,OAAO,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAE7D,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC;IACtD,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;QACf,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC3C,IAAI,QAAQ;YAAE,OAAO,WAAW,CAAC,QAAQ,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,MAAM,CAAC,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC;QAAE,OAAO,WAAW,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,mBAAmB,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IACrH,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;uFAGuF;AACvF,MAAM,UAAU,aAAa,CAAC,WAAmB,EAAE,GAAW,EAAE,MAAe,KAAK,EAAE;IACpF,IAAI,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC;QAAE,OAAO,sBAAsB,CAAC,GAAG,CAAC,CAAC;IACjF,OAAO,GAAG,CAAC;AACb,CAAC;AAED;gFACgF;AAChF,SAAS,mBAAmB,CAAC,KAAwB;IACnD,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC1D,OAAO,CACL,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CACvB;QACE,iBAAiB,IAAI,MAAM;QAC3B,IAAI,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,IAAI,MAAM,CAAC;QAC9C,wBAAwB,IAAI,MAAM;KACnC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAC7B,IAAI,UAAU,CAAC,CAAC,CAAE,CACpB,CAAC;AACJ,CAAC;AAED,kGAAkG;AAClG,SAAS,WAAW,CAAC,GAAW,EAAE,IAAc;IAC9C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,KAAK,CAAC;QACV,IAAI,CAAC;YACH,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAChE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,KAAK,CAAC,CAAC;YACf,OAAO;QACT,CAAC;QACD,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,MAAM,GAAG,CAAC,EAAW,EAAE,EAAE;YAC7B,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,CAAC,EAAE,CAAC,CAAC;QACd,CAAC,CAAC;QACF,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACzC,UAAU,CAAC,GAAG,EAAE;YACd,KAAK,CAAC,KAAK,EAAE,CAAC;YACd,MAAM,CAAC,IAAI,CAAC,CAAC;QACf,CAAC,EAAE,GAAG,CAAC,CAAC;IACV,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/server/open-in-terminal.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Open a real terminal window at `cwd` running `command` — the "take over the
+ * agent session locally" handoff. Cross-platform strategy ported from
+ * github-janitor's `openInTerminal.ts`: macOS via osascript, Windows via
+ * cmd/start, Linux by probing common emulators with a temp launch script
+ * (which sidesteps per-emulator quoting rules). WSL (#361) reuses the Linux
+ * script but hands it to a Windows-side terminal through interop, re-entering
+ * the distro with `wsl.exe` — there is no Linux desktop of its own to open
+ * `x-terminal-emulator` etc. on.
+ *
+ * Returns true when a launcher was started without an immediate error; the
+ * caller shows a copy-the-command fallback otherwise.
+ */
+export declare function openInTerminal(cwd: string, command: string): Promise<boolean>;
+/** The Windows-side (bin, args) candidates for launching `scriptPath` inside `distro` through
+ *  WSL interop, in try-order — Windows Terminal first, a classic console window as fallback. Pure
+ *  (no spawning) so the exact command line is unit-testable without a real WSL host.
+ *
+ *  Every launcher here is shell-free by construction, and must stay that way: routing through
+ *  `cmd.exe` (`/c start …`) would reintroduce BatBadBut (CVE-2024-27980, see #459). Passing an
+ *  argument array is NOT protection when the binary is a shell — libuv only quotes arguments
+ *  containing space, tab or quote, so a space-free `distro` like `a&calc&` would reach `cmd`
+ *  live and be interpreted. `wt.exe` and `conhost.exe` parse no metacharacters, so the same
+ *  input is inert. `distro` is additionally validated at the source (`wslDistroName`). */
+export declare function wslTerminalLaunchers(scriptPath: string, distro: string): Array<[string, string[]]>;

package/dist/server/open-in-terminal.js

@@ -0,0 +1,120 @@
+import { spawn } from 'node:child_process';
+import { chmodSync, mkdtempSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { isWsl, wslDistroName } from './wsl.js';
+/**
+ * Open a real terminal window at `cwd` running `command` — the "take over the
+ * agent session locally" handoff. Cross-platform strategy ported from
+ * github-janitor's `openInTerminal.ts`: macOS via osascript, Windows via
+ * cmd/start, Linux by probing common emulators with a temp launch script
+ * (which sidesteps per-emulator quoting rules). WSL (#361) reuses the Linux
+ * script but hands it to a Windows-side terminal through interop, re-entering
+ * the distro with `wsl.exe` — there is no Linux desktop of its own to open
+ * `x-terminal-emulator` etc. on.
+ *
+ * Returns true when a launcher was started without an immediate error; the
+ * caller shows a copy-the-command fallback otherwise.
+ */
+export async function openInTerminal(cwd, command) {
+    if (process.platform === 'darwin') {
+        const script = `cd ${shellQuote(cwd)} && ${command}`;
+        return runDetached('osascript', [
+            '-e',
+            'tell application "Terminal" to activate',
+            '-e',
+            `tell application "Terminal" to do script ${appleScriptQuote(script)}`,
+        ]);
+    }
+    if (process.platform === 'win32') {
+        const inner = `cd /d "${cwd}" && ${command}`;
+        // Windows Terminal first, classic cmd window as fallback.
+        if (await runDetached('cmd', ['/c', 'start', '', 'wt', '-d', cwd, 'cmd', '/K', command])) {
+            return true;
+        }
+        return runDetached('cmd', ['/c', 'start', '', 'cmd', '/K', inner]);
+    }
+    // Linux/other: a temp script avoids each emulator's own quoting rules.
+    const scriptPath = writeLaunchScript(cwd, command);
+    if (isWsl()) {
+        // No Linux GUI here — go through interop to a Windows terminal, which re-enters this same
+        // distro (`wsl.exe -d <distro>`) to run the script we just wrote. `scriptPath`/`cwd` stay
+        // POSIX: `wsl.exe` interprets its command line inside the distro, not on the Windows side.
+        for (const [bin, args] of wslTerminalLaunchers(scriptPath, wslDistroName())) {
+            if (await runDetached(bin, args))
+                return true;
+        }
+        return false;
+    }
+    const candidates = [
+        ['x-terminal-emulator', ['-e', scriptPath]],
+        ['gnome-terminal', ['--', scriptPath]],
+        ['konsole', ['-e', scriptPath]],
+        ['wezterm', ['start', '--', scriptPath]],
+        ['kitty', [scriptPath]],
+        ['alacritty', ['-e', scriptPath]],
+        ['xterm', ['-e', scriptPath]],
+    ];
+    for (const [bin, args] of candidates) {
+        if (await runDetached(bin, args))
+            return true;
+    }
+    return false;
+}
+/** The Windows-side (bin, args) candidates for launching `scriptPath` inside `distro` through
+ *  WSL interop, in try-order — Windows Terminal first, a classic console window as fallback. Pure
+ *  (no spawning) so the exact command line is unit-testable without a real WSL host.
+ *
+ *  Every launcher here is shell-free by construction, and must stay that way: routing through
+ *  `cmd.exe` (`/c start …`) would reintroduce BatBadBut (CVE-2024-27980, see #459). Passing an
+ *  argument array is NOT protection when the binary is a shell — libuv only quotes arguments
+ *  containing space, tab or quote, so a space-free `distro` like `a&calc&` would reach `cmd`
+ *  live and be interpreted. `wt.exe` and `conhost.exe` parse no metacharacters, so the same
+ *  input is inert. `distro` is additionally validated at the source (`wslDistroName`). */
+export function wslTerminalLaunchers(scriptPath, distro) {
+    return [
+        ['wt.exe', ['wsl.exe', '-d', distro, '--', scriptPath]],
+        ['conhost.exe', ['wsl.exe', '-d', distro, '--', scriptPath]],
+    ];
+}
+/** Writes the temp launch script shared by the plain-Linux and WSL branches: `cd` into the
+ *  worktree, run `command`, then drop into an interactive shell so the window stays open. */
+function writeLaunchScript(cwd, command) {
+    const dir = mkdtempSync(join(tmpdir(), 'cez-term-'));
+    const scriptPath = join(dir, 'launch.sh');
+    writeFileSync(scriptPath, `#!/usr/bin/env bash\ncd ${shellQuote(cwd)}\n${command}\nexec bash\n`, 'utf8');
+    chmodSync(scriptPath, 0o755);
+    return scriptPath;
+}
+/** Spawn detached; success = no error within a short settle window. */
+function runDetached(bin, args) {
+    return new Promise((resolve) => {
+        let child;
+        try {
+            child = spawn(bin, args, { stdio: 'ignore', detached: true });
+        }
+        catch {
+            resolve(false);
+            return;
+        }
+        let settled = false;
+        const settle = (ok) => {
+            if (settled)
+                return;
+            settled = true;
+            resolve(ok);
+        };
+        child.once('error', () => settle(false));
+        setTimeout(() => {
+            child.unref();
+            settle(true);
+        }, 250);
+    });
+}
+function shellQuote(s) {
+    return `'${s.replaceAll("'", `'\\''`)}'`;
+}
+function appleScriptQuote(s) {
+    return `"${s.replaceAll('\\', '\\\\').replaceAll('"', '\\"')}"`;
+}
+//# sourceMappingURL=open-in-terminal.js.map

package/dist/server/open-in-terminal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"open-in-terminal.js","sourceRoot":"","sources":["../../src/server/open-in-terminal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAChE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEhD;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,GAAW,EAAE,OAAe;IAC/D,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,OAAO,OAAO,EAAE,CAAC;QACrD,OAAO,WAAW,CAAC,WAAW,EAAE;YAC9B,IAAI;YACJ,yCAAyC;YACzC,IAAI;YACJ,4CAA4C,gBAAgB,CAAC,MAAM,CAAC,EAAE;SACvE,CAAC,CAAC;IACL,CAAC;IAED,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,UAAU,GAAG,QAAQ,OAAO,EAAE,CAAC;QAC7C,0DAA0D;QAC1D,IAAI,MAAM,WAAW,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC;YACzF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,WAAW,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;IACrE,CAAC;IAED,uEAAuE;IACvE,MAAM,UAAU,GAAG,iBAAiB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAEnD,IAAI,KAAK,EAAE,EAAE,CAAC;QACZ,0FAA0F;QAC1F,0FAA0F;QAC1F,2FAA2F;QAC3F,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,oBAAoB,CAAC,UAAU,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC;YAC5E,IAAI,MAAM,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAC;QAChD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,UAAU,GAA8B;QAC5C,CAAC,qBAAqB,EAAE,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC3C,CAAC,gBAAgB,EAAE,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QACtC,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC/B,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;QACxC,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC,CAAC;QACvB,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QACjC,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;KAC9B,CAAC;IACF,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,UAAU,EAAE,CAAC;QACrC,IAAI,MAAM,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;IAChD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;0FAS0F;AAC1F,MAAM,UAAU,oBAAoB,CAAC,UAAkB,EAAE,MAAc;IACrE,OAAO;QACL,CAAC,QAAQ,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;QACvD,CAAC,aAAa,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;KAC7D,CAAC;AACJ,CAAC;AAED;6FAC6F;AAC7F,SAAS,iBAAiB,CAAC,GAAW,EAAE,OAAe;IACrD,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC;IACrD,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAC1C,aAAa,CAAC,UAAU,EAAE,2BAA2B,UAAU,CAAC,GAAG,CAAC,KAAK,OAAO,eAAe,EAAE,MAAM,CAAC,CAAC;IACzG,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAC7B,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,uEAAuE;AACvE,SAAS,WAAW,CAAC,GAAW,EAAE,IAAc;IAC9C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,KAAK,CAAC;QACV,IAAI,CAAC;YACH,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAChE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,KAAK,CAAC,CAAC;YACf,OAAO;QACT,CAAC;QACD,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,MAAM,GAAG,CAAC,EAAW,EAAE,EAAE;YAC7B,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,CAAC,EAAE,CAAC,CAAC;QACd,CAAC,CAAC;QACF,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACzC,UAAU,CAAC,GAAG,EAAE;YACd,KAAK,CAAC,KAAK,EAAE,CAAC;YACd,MAAM,CAAC,IAAI,CAAC,CAAC;QACf,CAAC,EAAE,GAAG,CAAC,CAAC;IACV,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,UAAU,CAAC,CAAS;IAC3B,OAAO,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC;AAC3C,CAAC;AAED,SAAS,gBAAgB,CAAC,CAAS;IACjC,OAAO,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC;AAClE,CAAC"}

package/dist/server/pr.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Thin delegate — draft-PR creation (review gate, spec 009) moved behind the
+ * forge-driver seam (`src/server/forge/github.ts`, cockpit-ui redesign spec
+ * §"Forge-driver seam"). Kept so existing imports keep working.
+ */
+export { buildPrBody, createDraftPr } from './forge/github.js';
+export type { DraftPrInput, DraftPrOutcome } from './forge/types.js';

package/dist/server/pr.js

@@ -0,0 +1,7 @@
+/**
+ * Thin delegate — draft-PR creation (review gate, spec 009) moved behind the
+ * forge-driver seam (`src/server/forge/github.ts`, cockpit-ui redesign spec
+ * §"Forge-driver seam"). Kept so existing imports keep working.
+ */
+export { buildPrBody, createDraftPr } from './forge/github.js';
+//# sourceMappingURL=pr.js.map

package/dist/server/pr.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pr.js","sourceRoot":"","sources":["../../src/server/pr.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC"}

package/dist/server/server.d.ts

@@ -0,0 +1,41 @@
+import { Hono } from 'hono';
+import { type ServerType } from '@hono/node-server';
+import type { RunRecord, RunStatus, RunStore } from '../runs/store.js';
+import type { RunManager } from '../workflows/run.js';
+export interface ServerDeps {
+    repoRoot: string;
+    store: RunStore;
+    manager: RunManager;
+    version: string;
+    /** Mutable holder for the async npm-registry update check (#368) —
+     *  `latest` appears once the registry answers with a newer version. */
+    update?: {
+        latest?: string;
+    };
+    /** Host the HTTP server binds (default 127.0.0.1). A non-loopback host
+     *  implies hosted mode — `capabilities.localHandoff:false`. */
+    bindHost?: string;
+}
+/** One column of `GET /api/groups/:groupId`. NOTE: `diffStat` here is the raw
+ *  `git diff --stat` text (worktreeDiffStat), NOT the numeric `RunRecord.diffStat`. */
+export interface GroupVariant {
+    id: string;
+    variant: string;
+    title: string;
+    status: RunStatus;
+    archived: boolean;
+    tokensUsed: number;
+    costUsd?: number;
+    diffStat: string;
+    handoffExcerpt: string;
+}
+export interface GroupResponse {
+    groupId: string;
+    runs: GroupVariant[];
+}
+/** `POST /api/groups/:groupId/pick` — the winner, parked at `review` when it has a diff. */
+export interface PickVariantResponse {
+    winner?: RunRecord;
+}
+export declare function createApp(deps: ServerDeps): Hono;
+export declare function startServer(deps: ServerDeps, port: number): ServerType;