@ours.network/fleet 0.17.9 → 0.17.11

package/dist/runner.d.ts

@@ -35,6 +35,15 @@ export interface RunnerDeps {
 }
 /** Environment injected only into the managed harness process. */
 export declare function managedFleetProxyEnv(role: ResolvedRole, stateDir: string): Record<string, string>;
+/**
+ * The environment a managed harness child actually receives, checked at the one
+ * point where it is composed. `role.env` deliberately wins over harness prep,
+ * which is exactly how a stale fleet-wide model pin used to outrank the model
+ * the role was spawned with — so the model pin is verified here rather than
+ * trusted, and a disagreement stops the launch instead of being reported as a
+ * success (see src/model-env.ts).
+ */
+export declare function harnessChildEnv(role: ResolvedRole, launchEnv: Record<string, string> | undefined, stateDir: string): Record<string, string>;
 /**
  * Record who owns wake delivery for this run. Returning true means a fleet
  * monitor is taking ownership back from a native harness and must start at the

package/dist/runner.js

@@ -24,6 +24,7 @@ import { RoleTurnArbiter } from './session/arbiter.js';
 import { ScheduledLoopManager, } from './loops/manager.js';
 import { FLEET_PROXY_CALLER_ENV, FLEET_PROXY_STATE_DIR_ENV, inheritCallerSpawnDefaults, } from './fleet-proxy.js';
 import { effectivePermissionMode } from './permissions.js';
+import { assertModelPinReachesChild, effectiveRoleModel, repinModelEnv } from './model-env.js';
 import { archiveTempState, markTempSupervisorActive, requestedTempStopReason, } from './temp-lifecycle.js';
 const defaultDeps = () => ({
     tmux: new Tmux(),
@@ -72,6 +73,19 @@ export function managedFleetProxyEnv(role, stateDir) {
         [FLEET_PROXY_CALLER_ENV]: role.name,
     };
 }
+/**
+ * The environment a managed harness child actually receives, checked at the one
+ * point where it is composed. `role.env` deliberately wins over harness prep,
+ * which is exactly how a stale fleet-wide model pin used to outrank the model
+ * the role was spawned with — so the model pin is verified here rather than
+ * trusted, and a disagreement stops the launch instead of being reported as a
+ * success (see src/model-env.ts).
+ */
+export function harnessChildEnv(role, launchEnv, stateDir) {
+    const env = { ...(launchEnv ?? {}), ...managedFleetProxyEnv(role, stateDir) };
+    assertModelPinReachesChild(role, env);
+    return env;
+}
 /**
  * Execute a typed proxy request in the caller's supervisor. Dynamic imports
  * avoid a runner↔spawn initialization cycle (spawn imports runner constants).
@@ -109,7 +123,9 @@ async function executeManagedSpawn(caller, configPath, requested, log) {
         statePath,
         harness: preview.harness,
         session: preview.session,
-        ...(preview.model ? { model: preview.model } : {}),
+        // Read back from the resolved environment, not from the request: the banner
+        // must name the model the child will run, not the one that was asked for.
+        ...(effectiveRoleModel(preview) ? { model: effectiveRoleModel(preview) } : {}),
         monitor: { mode: preview.monitor.mode, interrupt: preview.monitor.interrupt },
         permissionMode: effectivePermissionMode(preview),
         inherited,
@@ -117,6 +133,7 @@ async function executeManagedSpawn(caller, configPath, requested, log) {
     };
     log(`[${caller.name}] managed fleet proxy spawned ${result.lifetime} role ${result.role} `
         + `harness=${result.harness} session=${result.session} `
+        + `model=${result.model ?? '(harness default)'} `
         + `permission=${result.permissionMode.fleetMode} `
         + `native=${result.permissionMode.nativeMode}`);
     return result;
@@ -458,11 +475,18 @@ export async function runOnce(name, opts = {}, partialDeps = {}) {
     const effectiveModel = effectiveModelForRole(dir, role);
     if (effectiveModel !== role.model) {
         deps.log(`[${name}] model recovery drift: declared=${role.model ?? '(none)'} effective=${effectiveModel}`);
-        role = { ...role, model: effectiveModel };
+        // The env pin has to move with it. A down-shift that changed only
+        // `role.model` was reported as a model change while the child kept running
+        // the model that had just failed, because the pin is what the harness reads.
+        role = { ...role, model: effectiveModel, env: repinModelEnv(role, effectiveModel) };
     }
     if (modelRecoveryHeld(dir))
         throw new Error(`[${name}] model chain exhausted — held down until config changes or recovery reset`);
     const adapter = getAdapter(role.harness);
+    // Say the running model out loud, once, from the resolved environment. The
+    // spawn banner is a claim made before the process exists; this is the log line
+    // that can be checked against the session afterwards.
+    deps.log(`[${name}] model: ${effectiveRoleModel(role) ?? '(harness default)'}`);
     mkdirSync(dir, { recursive: true });
     const rotation = rotateWorklog(join(dir, 'WORKLOG.md'), role.worklog);
     if (rotation.deferred)
@@ -603,7 +627,7 @@ export async function runOnce(name, opts = {}, partialDeps = {}) {
             name,
             argv: wrappedArgv,
             cwd: runCwd,
-            env: { ...launch.env, ...managedFleetProxyEnv(role, dir) },
+            env: harnessChildEnv(role, launch.env, dir),
             stateDir: dir,
             mode,
             permissions: perms,

package/dist/session/acp.d.ts

@@ -83,6 +83,8 @@ export declare class AcpSession implements SessionHandle {
     private readonly child;
     private readonly events;
     private readonly conversation;
+    /** Cursor before this runner generation began; older durable events stay off the live console. */
+    private readonly conversationStartCursor?;
     /** New on every runner start; permission/turn IDs from prior generations are stale. */
     private readonly sessionGeneration;
     /** True while `session/load` replays history as ordinary updates. */
@@ -300,5 +302,6 @@ export declare class AcpSession implements SessionHandle {
     }): ConversationHandlePage;
     conversationSnapshot(): ConversationSnapshot;
     subscribeConversation(listener: Parameters<ConversationEventStore['subscribe']>[0]): () => void;
+    private isCurrentConversationEvent;
     private fail;
 }

package/dist/session/acp.js

@@ -208,6 +208,8 @@ export class AcpSession {
     child;
     events;
     conversation;
+    /** Cursor before this runner generation began; older durable events stay off the live console. */
+    conversationStartCursor;
     /** New on every runner start; permission/turn IDs from prior generations are stale. */
     sessionGeneration = randomUUID();
     /** True while `session/load` replays history as ordinary updates. */
@@ -265,6 +267,7 @@ export class AcpSession {
         this.conversation = new ConversationEventStore(join(options.stateDir, '.conversation'), {
             roleId: options.name, log: line => options.log(`[${options.name}] ${line}`),
         });
+        this.conversationStartCursor = this.conversation.lastCursor();
         this.sessionFile = join(options.stateDir, '.acp-session-id');
         this.terminated = new Promise((_resolve, reject) => { this.terminate = reject; });
         // Nothing awaits this promise until a request races it; an unobserved
@@ -1464,7 +1467,25 @@ export class AcpSession {
     }
     // ── conversation ledger access (SessionHandle) ─────────────────────────────
     conversationPage(request = {}) {
-        return { ...this.conversation.page(request), snapshot: this.conversationSnapshot() };
+        const floor = Number(this.conversationStartCursor ?? 0);
+        const requested = Number(request.after ?? 0);
+        let after = String(Math.max(Number.isSafeInteger(floor) ? floor : 0, Number.isSafeInteger(requested) ? requested : 0));
+        const limit = Math.min(Math.max(request.limit ?? 200, 1), 1_000);
+        let page = this.conversation.page({ after, limit });
+        let visible = page.events.filter(event => this.isCurrentConversationEvent(event));
+        // A resumed adapter may replay a page made entirely of prior session/load
+        // history. Advance over it without exposing it or making the browser stop
+        // before later current-session records.
+        while (!visible.length && page.hasMore && page.nextCursor && page.nextCursor !== after) {
+            after = page.nextCursor;
+            page = this.conversation.page({ after, limit });
+            visible = page.events.filter(event => this.isCurrentConversationEvent(event));
+        }
+        return {
+            ...page,
+            events: visible,
+            snapshot: this.conversationSnapshot(),
+        };
     }
     conversationSnapshot() {
         return {
@@ -1476,7 +1497,13 @@ export class AcpSession {
         };
     }
     subscribeConversation(listener) {
-        return this.conversation.subscribe(listener);
+        return this.conversation.subscribe(event => {
+            if (this.isCurrentConversationEvent(event))
+                listener(event);
+        });
+    }
+    isCurrentConversationEvent(event) {
+        return event.sessionGeneration === this.sessionGeneration && event.source !== 'agent_replay';
     }
     fail(error) {
         this.lastError = error?.message ?? String(error);

package/dist/session/conversation-normalizer.d.ts

@@ -11,6 +11,12 @@ import type { AdapterMeta, ConversationEventKind, ConversationPayload } from './
  */
 /** Cap for any single normalized text payload (spec §5.3). */
 export declare const MAX_TEXT_BYTES: number;
+/** Cap for each retained side of an oversized snapshot-style file diff. */
+export declare const MAX_DIFF_TEXT_BYTES: number;
+/** Cap for attacker-controlled filesystem paths while retaining their useful basename tail. */
+export declare const MAX_PATH_BYTES: number;
+/** Hard cap for the complete normalized update before the durable event envelope is added. */
+export declare const MAX_NORMALIZED_UPDATE_BYTES: number;
 /** Cap for one adapter `_meta` namespace value. */
 export declare const MAX_META_BYTES: number;
 /** Cap for serialized raw tool input/output retained as structured JSON. */

package/dist/session/conversation-normalizer.js

@@ -10,6 +10,12 @@ import { createHash } from 'node:crypto';
  */
 /** Cap for any single normalized text payload (spec §5.3). */
 export const MAX_TEXT_BYTES = 256 * 1024;
+/** Cap for each retained side of an oversized snapshot-style file diff. */
+export const MAX_DIFF_TEXT_BYTES = 64 * 1024;
+/** Cap for attacker-controlled filesystem paths while retaining their useful basename tail. */
+export const MAX_PATH_BYTES = 4 * 1024;
+/** Hard cap for the complete normalized update before the durable event envelope is added. */
+export const MAX_NORMALIZED_UPDATE_BYTES = 320 * 1024;
 /** Cap for one adapter `_meta` namespace value. */
 export const MAX_META_BYTES = 16 * 1024;
 /** Cap for serialized raw tool input/output retained as structured JSON. */
@@ -27,6 +33,28 @@ function truncateUtf8(text, maxBytes) {
     const buffer = Buffer.from(text).subarray(0, maxBytes);
     return buffer.toString('utf8').replace(/�+$/u, '');
 }
+/** Keep a UTF-8-safe suffix. Paths and identifiers have no line semantics. */
+function truncateUtf8Tail(text, maxBytes) {
+    const buffer = Buffer.from(text);
+    let start = Math.max(0, buffer.length - maxBytes);
+    while (start < buffer.length && (buffer[start] & 0xc0) === 0x80)
+        start++;
+    return { text: buffer.subarray(start).toString('utf8'), omittedPrefixBytes: start };
+}
+function boundedPath(raw) {
+    const path = asString(raw) ?? '';
+    const pathBytes = Buffer.byteLength(path);
+    if (pathBytes <= MAX_PATH_BYTES)
+        return { path };
+    const retained = truncateUtf8Tail(path, MAX_PATH_BYTES);
+    return {
+        path: retained.text,
+        pathBytes,
+        pathTruncated: true,
+        pathDigest: digest24(path),
+        pathOmittedPrefixBytes: retained.omittedPrefixBytes,
+    };
+}
 function cappedText(raw, redact) {
     const text = asString(raw) ?? '';
     const bytes = Buffer.byteLength(text);
@@ -39,6 +67,95 @@ function cappedText(raw, redact) {
         truncated: true, digest: digest24(text),
     };
 }
+/** Keep the newest UTF-8 tail, aligning to a whole line whenever one fits. */
+function cappedTextTail(text, maxBytes) {
+    const buffer = Buffer.from(text);
+    const bytes = buffer.length;
+    if (bytes <= maxBytes)
+        return { text, bytes };
+    let start = bytes - maxBytes;
+    while (start < bytes && (buffer[start] & 0xc0) === 0x80)
+        start++;
+    let startsMidLine = start > 0 && buffer[start - 1] !== 0x0a;
+    if (startsMidLine) {
+        const newline = buffer.indexOf(0x0a, start);
+        if (newline >= 0 && newline + 1 < bytes) {
+            start = newline + 1;
+            startsMidLine = false;
+        }
+    }
+    return {
+        text: buffer.subarray(start).toString('utf8'), bytes,
+        truncated: true, digest: digest24(text), omittedPrefixBytes: start,
+        ...(startsMidLine ? { startsMidLine: true } : {}),
+    };
+}
+/** Common unchanged edges in UTF-16 indices, adjusted away from split surrogates. */
+function commonEdges(oldText, newText) {
+    const limit = Math.min(oldText.length, newText.length);
+    let prefix = 0;
+    while (prefix < limit && oldText.charCodeAt(prefix) === newText.charCodeAt(prefix))
+        prefix++;
+    if (prefix > 0 && prefix < limit
+        && oldText.charCodeAt(prefix) >= 0xdc00 && oldText.charCodeAt(prefix) <= 0xdfff)
+        prefix--;
+    let oldEnd = oldText.length;
+    let newEnd = newText.length;
+    while (oldEnd > prefix && newEnd > prefix
+        && oldText.charCodeAt(oldEnd - 1) === newText.charCodeAt(newEnd - 1)) {
+        oldEnd--;
+        newEnd--;
+    }
+    // A suffix must never begin at the low half of a surrogate pair.
+    if (oldEnd < oldText.length && oldText.charCodeAt(oldEnd) >= 0xdc00
+        && oldText.charCodeAt(oldEnd) <= 0xdfff) {
+        oldEnd++;
+        newEnd++;
+    }
+    return { prefix, suffix: oldText.length - oldEnd };
+}
+function normalizedDiff(item, redact) {
+    const path = boundedPath(item.path);
+    const oldText = asString(item.oldText);
+    const newText = asString(item.newText) ?? '';
+    // Preserve the established small-diff contract exactly. Redacted turns also
+    // retain their established placeholder shape and never derive private text.
+    if (redact !== undefined || oldText === undefined
+        || (Buffer.byteLength(oldText) <= MAX_TEXT_BYTES
+            && Buffer.byteLength(newText) <= MAX_TEXT_BYTES)) {
+        return {
+            type: 'diff', ...path,
+            newText: cappedText(newText, redact),
+            ...(oldText !== undefined ? { oldText: cappedText(oldText, redact) } : {}),
+        };
+    }
+    // ACP adapters may describe an append by sending two complete file snapshots.
+    // Persist only the changed region: otherwise a multi-megabyte historical file
+    // contributes its prefix twice while the current append disappears past the cap.
+    const { prefix, suffix } = commonEdges(oldText, newText);
+    const oldEnd = oldText.length - suffix;
+    const newEnd = newText.length - suffix;
+    const oldDelta = oldText.slice(prefix, oldEnd);
+    const newDelta = newText.slice(prefix, newEnd);
+    const beforeBytes = Buffer.byteLength(oldText);
+    const afterBytes = Buffer.byteLength(newText);
+    const commonPrefixBytes = Buffer.byteLength(oldText.slice(0, prefix));
+    const commonSuffixBytes = Buffer.byteLength(oldText.slice(oldEnd));
+    const operation = oldDelta.length === 0 && newDelta.length === 0
+        ? 'noop'
+        : oldDelta.length === 0 && prefix === oldText.length
+            ? 'append'
+            : newDelta.length === 0
+                ? 'delete'
+                : prefix === 0 && suffix === 0 ? 'replace' : 'edit';
+    return {
+        type: 'diff', ...path, operation, beforeBytes, afterBytes,
+        commonPrefixBytes, commonSuffixBytes, bounded: true,
+        newText: cappedTextTail(newDelta, MAX_DIFF_TEXT_BYTES),
+        ...(oldDelta.length > 0
+            ? { oldText: cappedTextTail(oldDelta, MAX_DIFF_TEXT_BYTES) } : {}),
+    };
+}
 function normalizedText(raw, redact) {
     const text = asString(raw) ?? '';
     const bytes = Buffer.byteLength(text);
@@ -189,12 +306,7 @@ function normalizeToolContent(raw, redact) {
     return raw.filter(isRecord).map((item) => {
         switch (item.type) {
             case 'diff':
-                return {
-                    type: 'diff',
-                    path: asString(item.path) ?? '',
-                    newText: cappedText(item.newText, redact),
-                    ...(item.oldText != null ? { oldText: cappedText(item.oldText, redact) } : {}),
-                };
+                return normalizedDiff(item, redact);
             case 'terminal':
                 return { type: 'terminal', terminalId: asString(item.terminalId) ?? '' };
             case 'content':
@@ -220,7 +332,7 @@ function toolUpsert(update, snapshot, options) {
         payload.content = content;
     if (Array.isArray(update.locations)) {
         payload.locations = update.locations.filter(isRecord).map(location => ({
-            path: asString(location.path) ?? '',
+            ...boundedPath(location.path),
             ...(asFiniteNumber(location.line) !== undefined ? { line: asFiniteNumber(location.line) } : {}),
         }));
     }
@@ -240,18 +352,49 @@ function unsupported(update) {
     }
     const kind = isRecord(update) ? asString(update.sessionUpdate) : undefined;
     return {
-        sessionUpdate: kind ?? 'unknown',
+        sessionUpdate: truncateUtf8(kind ?? 'unknown', 256),
         bytes: Buffer.byteLength(serialized),
         preview: serialized.slice(0, MAX_UNSUPPORTED_PREVIEW_CHARS),
+        ...(Buffer.byteLength(serialized) > Buffer.byteLength(serialized.slice(0, MAX_UNSUPPORTED_PREVIEW_CHARS))
+            ? { digest: digest24(serialized) } : {}),
+    };
+}
+function capNormalizedUpdate(result, sessionUpdate) {
+    let serialized;
+    try {
+        serialized = JSON.stringify(result);
+    }
+    catch {
+        return {
+            kind: 'unsupported',
+            payload: {
+                sessionUpdate: truncateUtf8(sessionUpdate, 256),
+                bytes: 0,
+                preview: '[normalized update was not serializable]',
+            },
+        };
+    }
+    const bytes = Buffer.byteLength(serialized);
+    if (bytes <= MAX_NORMALIZED_UPDATE_BYTES)
+        return result;
+    return {
+        kind: 'unsupported',
+        payload: {
+            sessionUpdate: truncateUtf8(sessionUpdate, 256),
+            bytes,
+            digest: digest24(serialized),
+            preview: `[normalized update exceeded ${MAX_NORMALIZED_UPDATE_BYTES}-byte durable-event cap]`,
+        },
     };
 }
 export function normalizeSessionUpdate(update, options = {}) {
     const redact = options.redactText;
     const raw = update;
     if (!isRecord(raw) || typeof raw.sessionUpdate !== 'string')
-        return { kind: 'unsupported', payload: unsupported(raw) };
+        return capNormalizedUpdate({ kind: 'unsupported', payload: unsupported(raw) }, 'unknown');
+    const sessionUpdate = raw.sessionUpdate;
     const adapterMeta = quarantineMeta(raw._meta);
-    const withMeta = (result) => adapterMeta ? { ...result, adapterMeta } : result;
+    const withMeta = (result) => capNormalizedUpdate(adapterMeta ? { ...result, adapterMeta } : result, sessionUpdate);
     switch (raw.sessionUpdate) {
         case 'user_message_chunk':
         case 'agent_message_chunk': {

package/dist/session/conversation-types.d.ts

@@ -48,15 +48,33 @@ export interface CappedText {
     bytes: number;
     truncated?: true;
     digest?: string;
+    /** Bytes omitted from the front when the retained fragment is a tail. */
+    omittedPrefixBytes?: number;
+    /** The retained tail starts inside one logical line because that line alone exceeded the cap. */
+    startsMidLine?: true;
+}
+/** A path kept as a UTF-8-safe tail, with additive provenance only when capped. */
+export interface BoundedPath {
+    path: string;
+    pathBytes?: number;
+    pathTruncated?: true;
+    pathDigest?: string;
+    pathOmittedPrefixBytes?: number;
 }
 export type NormalizedToolContent = {
     type: 'content';
     content: NormalizedContentBlock;
-} | {
+} | BoundedPath & {
     type: 'diff';
-    path: string;
     newText: CappedText;
     oldText?: CappedText;
+    /** Additive provenance for oversized snapshot diffs reduced to their changed region. */
+    operation?: 'append' | 'edit' | 'delete' | 'noop' | 'replace';
+    beforeBytes?: number;
+    afterBytes?: number;
+    commonPrefixBytes?: number;
+    commonSuffixBytes?: number;
+    bounded?: true;
 }
 /** A tool-owned display terminal reference — never a PTY attachment. */
  | {
@@ -105,8 +123,7 @@ export interface ToolUpsertPayload {
     kind?: string;
     status?: string;
     content?: NormalizedToolContent[];
-    locations?: Array<{
-        path: string;
+    locations?: Array<BoundedPath & {
         line?: number;
     }>;
     rawInput?: BoundedJson;
@@ -140,6 +157,8 @@ export interface UnsupportedPayload {
     /** The wire discriminant (or 'unknown' when even that was absent). */
     sessionUpdate: string;
     bytes: number;
+    /** Digest of the omitted original/normalized representation when it was bounded. */
+    digest?: string;
     /** Sanitized JSON preview, capped; enough to diagnose, never to exhaust. */
     preview?: string;
 }

package/dist/spawn.js

@@ -5,6 +5,7 @@ import { parse, stringify } from 'yaml';
 import { agentDir, fleetDDir } from './paths.js';
 import { validateIsolationConfig } from './isolation/policy.js';
 import { loadConfig, resolveAuthProxy, resolveModelChain, resolveMonitorConfig, resolveOwnerChannelConfig, resolvePermissions, resolveRoleModel, resolveWorklogPolicy, validateMonitorConfig, } from './config.js';
+import { resolveRoleModelEnv } from './model-env.js';
 import { applyRole, up } from './ops.js';
 import { START_STAGGER_FILE } from './runner.js';
 import { buildProvenance, daemonIdentityProvisioner, ensureIdentity, provenanceOf, withCreationTransaction, writeProvenance, writeRoleFile, } from './creation.js';
@@ -191,7 +192,17 @@ export function spawnDryRun(o) {
     const harness = raw.harness ?? cfg.defaults.harness ?? 'claude-code';
     const defaultHarness = cfg.defaults.harness ?? 'claude-code';
     const inheritsModelDefaults = harness === defaultHarness && raw.model !== null;
-    const model = resolveRoleModel(raw.model, raw.harness, cfg.defaults);
+    const authProxy = resolveAuthProxy(cfg.defaults.auth_proxy, raw.auth_proxy);
+    // One resolution for the environment and the model it pins (src/model-env.ts).
+    const modelEnv = resolveRoleModelEnv({
+        harness,
+        model: resolveRoleModel(raw.model, raw.harness, cfg.defaults),
+        modelWasExplicit: raw.model !== undefined,
+        defaultsEnv: (cfg.defaults.env ?? {}),
+        roleEnv: raw.env,
+        ...(authProxy ? { authProxyBaseUrl: authProxy.base_url } : {}),
+    });
+    const model = modelEnv.model;
     const session = raw.session ?? cfg.defaults.session ?? 'tmux';
     const resolvedRole = {
         ...raw,
@@ -212,15 +223,9 @@ export function spawnDryRun(o) {
         monitor: resolveMonitorConfig(cfg.defaults.monitor, raw.monitor),
         owner_channel: resolveOwnerChannelConfig(cfg.defaults.owner_channel, raw.owner_channel, session),
         worklog: resolveWorklogPolicy(cfg.defaults.worklog, raw.worklog),
-        auth_proxy: resolveAuthProxy(cfg.defaults.auth_proxy, raw.auth_proxy),
-    };
-    resolvedRole.env = {
-        ...(cfg.defaults.env ?? {}),
-        ...(raw.env ?? {}),
-        ...(resolvedRole.auth_proxy
-            ? { ANTHROPIC_BASE_URL: resolvedRole.auth_proxy.base_url }
-            : {}),
+        auth_proxy: authProxy,
     };
+    resolvedRole.env = modelEnv.env;
     const adapter = getAdapter(resolvedRole.harness);
     if (resolvedRole.auth_proxy && resolvedRole.harness !== 'claude-code')
         throw new Error('auth_proxy is supported only by claude-code');
@@ -403,7 +408,18 @@ async function spawnTempInner(o, binPath, launch, tx, guarantee, onStage) {
     };
     const harness = o.harness ?? defaultHarness ?? 'claude-code';
     const inheritsModelDefaults = harness === (defaultHarness ?? 'claude-code') && o.model !== null;
-    const model = resolveRoleModel(o.model, o.harness, cfg.defaults);
+    const tempAuthProxy = resolveAuthProxy(cfg.defaults.auth_proxy, fromOpts.auth_proxy);
+    // An explicitly requested --model must reach the child, not just the banner
+    // (src/model-env.ts).
+    const modelEnv = resolveRoleModelEnv({
+        harness,
+        model: resolveRoleModel(o.model, o.harness, cfg.defaults),
+        modelWasExplicit: o.model !== undefined,
+        defaultsEnv: (cfg.defaults.env ?? {}),
+        roleEnv: fromOpts.env,
+        ...(tempAuthProxy ? { authProxyBaseUrl: tempAuthProxy.base_url } : {}),
+    });
+    const model = modelEnv.model;
     const session = o.session ?? cfg.defaults.session ?? 'tmux';
     const role = {
         ...fromOpts, // includes `isolation` when --isolation-file was given
@@ -422,14 +438,10 @@ async function spawnTempInner(o, binPath, launch, tx, guarantee, onStage) {
         monitor: resolveMonitorConfig(cfg.defaults.monitor, fromOpts.monitor),
         owner_channel: resolveOwnerChannelConfig(cfg.defaults.owner_channel, fromOpts.owner_channel, session),
         worklog: resolveWorklogPolicy(cfg.defaults.worklog, fromOpts.worklog),
-        auth_proxy: resolveAuthProxy(cfg.defaults.auth_proxy, fromOpts.auth_proxy),
+        auth_proxy: tempAuthProxy,
         sourceFile: '(temp)',
     };
-    role.env = {
-        ...(cfg.defaults.env ?? {}),
-        ...(fromOpts.env ?? {}),
-        ...(role.auth_proxy ? { ANTHROPIC_BASE_URL: role.auth_proxy.base_url } : {}),
-    };
+    role.env = modelEnv.env;
     if (role.auth_proxy && role.harness !== 'claude-code')
         throw new Error('auth_proxy is supported only by claude-code');
     onStage?.('writing_role');

package/dist/web-app/assets/{TerminalView-BAVk1Bot.js → TerminalView-C_G1ID2P.js}

@@ -1,4 +1,4 @@
-import{r as le,a as Ee,j as re}from"./index-C3S-xFRU.js";var ge={exports:{}},Se;function ke(){return Se||(Se=1,(function(se,ne){(function(Q,X){se.exports=X()})(globalThis,(()=>(()=>{var Q={4567:function(B,r,o){var l=this&&this.__decorate||function(e,i,a,v){var f,g=arguments.length,c=g<3?i:v===null?v=Object.getOwnPropertyDescriptor(i,a):v;if(typeof Reflect=="object"&&typeof Reflect.decorate=="function")c=Reflect.decorate(e,i,a,v);else for(var m=e.length-1;m>=0;m--)(f=e[m])&&(c=(g<3?f(c):g>3?f(i,a,c):f(i,a))||c);return g>3&&c&&Object.defineProperty(i,a,c),c},_=this&&this.__param||function(e,i){return function(a,v){i(a,v,e)}};Object.defineProperty(r,"__esModule",{value:!0}),r.AccessibilityManager=void 0;const n=o(9042),d=o(9924),u=o(844),p=o(4725),h=o(2585),t=o(3656);let s=r.AccessibilityManager=class extends u.Disposable{constructor(e,i,a,v){super(),this._terminal=e,this._coreBrowserService=a,this._renderService=v,this._rowColumns=new WeakMap,this._liveRegionLineCount=0,this._charsToConsume=[],this._charsToAnnounce="",this._accessibilityContainer=this._coreBrowserService.mainDocument.createElement("div"),this._accessibilityContainer.classList.add("xterm-accessibility"),this._rowContainer=this._coreBrowserService.mainDocument.createElement("div"),this._rowContainer.setAttribute("role","list"),this._rowContainer.classList.add("xterm-accessibility-tree"),this._rowElements=[];for(let f=0;f<this._terminal.rows;f++)this._rowElements[f]=this._createAccessibilityTreeNode(),this._rowContainer.appendChild(this._rowElements[f]);if(this._topBoundaryFocusListener=f=>this._handleBoundaryFocus(f,0),this._bottomBoundaryFocusListener=f=>this._handleBoundaryFocus(f,1),this._rowElements[0].addEventListener("focus",this._topBoundaryFocusListener),this._rowElements[this._rowElements.length-1].addEventListener("focus",this._bottomBoundaryFocusListener),this._refreshRowsDimensions(),this._accessibilityContainer.appendChild(this._rowContainer),this._liveRegion=this._coreBrowserService.mainDocument.createElement("div"),this._liveRegion.classList.add("live-region"),this._liveRegion.setAttribute("aria-live","assertive"),this._accessibilityContainer.appendChild(this._liveRegion),this._liveRegionDebouncer=this.register(new d.TimeBasedDebouncer(this._renderRows.bind(this))),!this._terminal.element)throw new Error("Cannot enable accessibility before Terminal.open");this._terminal.element.insertAdjacentElement("afterbegin",this._accessibilityContainer),this.register(this._terminal.onResize((f=>this._handleResize(f.rows)))),this.register(this._terminal.onRender((f=>this._refreshRows(f.start,f.end)))),this.register(this._terminal.onScroll((()=>this._refreshRows()))),this.register(this._terminal.onA11yChar((f=>this._handleChar(f)))),this.register(this._terminal.onLineFeed((()=>this._handleChar(`
+import{r as le,a as Ee,j as re}from"./index-BCBK78hw.js";var ge={exports:{}},Se;function ke(){return Se||(Se=1,(function(se,ne){(function(Q,X){se.exports=X()})(globalThis,(()=>(()=>{var Q={4567:function(B,r,o){var l=this&&this.__decorate||function(e,i,a,v){var f,g=arguments.length,c=g<3?i:v===null?v=Object.getOwnPropertyDescriptor(i,a):v;if(typeof Reflect=="object"&&typeof Reflect.decorate=="function")c=Reflect.decorate(e,i,a,v);else for(var m=e.length-1;m>=0;m--)(f=e[m])&&(c=(g<3?f(c):g>3?f(i,a,c):f(i,a))||c);return g>3&&c&&Object.defineProperty(i,a,c),c},_=this&&this.__param||function(e,i){return function(a,v){i(a,v,e)}};Object.defineProperty(r,"__esModule",{value:!0}),r.AccessibilityManager=void 0;const n=o(9042),d=o(9924),u=o(844),p=o(4725),h=o(2585),t=o(3656);let s=r.AccessibilityManager=class extends u.Disposable{constructor(e,i,a,v){super(),this._terminal=e,this._coreBrowserService=a,this._renderService=v,this._rowColumns=new WeakMap,this._liveRegionLineCount=0,this._charsToConsume=[],this._charsToAnnounce="",this._accessibilityContainer=this._coreBrowserService.mainDocument.createElement("div"),this._accessibilityContainer.classList.add("xterm-accessibility"),this._rowContainer=this._coreBrowserService.mainDocument.createElement("div"),this._rowContainer.setAttribute("role","list"),this._rowContainer.classList.add("xterm-accessibility-tree"),this._rowElements=[];for(let f=0;f<this._terminal.rows;f++)this._rowElements[f]=this._createAccessibilityTreeNode(),this._rowContainer.appendChild(this._rowElements[f]);if(this._topBoundaryFocusListener=f=>this._handleBoundaryFocus(f,0),this._bottomBoundaryFocusListener=f=>this._handleBoundaryFocus(f,1),this._rowElements[0].addEventListener("focus",this._topBoundaryFocusListener),this._rowElements[this._rowElements.length-1].addEventListener("focus",this._bottomBoundaryFocusListener),this._refreshRowsDimensions(),this._accessibilityContainer.appendChild(this._rowContainer),this._liveRegion=this._coreBrowserService.mainDocument.createElement("div"),this._liveRegion.classList.add("live-region"),this._liveRegion.setAttribute("aria-live","assertive"),this._accessibilityContainer.appendChild(this._liveRegion),this._liveRegionDebouncer=this.register(new d.TimeBasedDebouncer(this._renderRows.bind(this))),!this._terminal.element)throw new Error("Cannot enable accessibility before Terminal.open");this._terminal.element.insertAdjacentElement("afterbegin",this._accessibilityContainer),this.register(this._terminal.onResize((f=>this._handleResize(f.rows)))),this.register(this._terminal.onRender((f=>this._refreshRows(f.start,f.end)))),this.register(this._terminal.onScroll((()=>this._refreshRows()))),this.register(this._terminal.onA11yChar((f=>this._handleChar(f)))),this.register(this._terminal.onLineFeed((()=>this._handleChar(`
 `)))),this.register(this._terminal.onA11yTab((f=>this._handleTab(f)))),this.register(this._terminal.onKey((f=>this._handleKey(f.key)))),this.register(this._terminal.onBlur((()=>this._clearLiveRegion()))),this.register(this._renderService.onDimensionsChange((()=>this._refreshRowsDimensions()))),this.register((0,t.addDisposableDomListener)(document,"selectionchange",(()=>this._handleSelectionChange()))),this.register(this._coreBrowserService.onDprChange((()=>this._refreshRowsDimensions()))),this._refreshRows(),this.register((0,u.toDisposable)((()=>{this._accessibilityContainer.remove(),this._rowElements.length=0})))}_handleTab(e){for(let i=0;i<e;i++)this._handleChar(" ")}_handleChar(e){this._liveRegionLineCount<21&&(this._charsToConsume.length>0?this._charsToConsume.shift()!==e&&(this._charsToAnnounce+=e):this._charsToAnnounce+=e,e===`
 `&&(this._liveRegionLineCount++,this._liveRegionLineCount===21&&(this._liveRegion.textContent+=n.tooMuchOutput)))}_clearLiveRegion(){this._liveRegion.textContent="",this._liveRegionLineCount=0}_handleKey(e){this._clearLiveRegion(),new RegExp("\\p{Control}","u").test(e)||this._charsToConsume.push(e)}_refreshRows(e,i){this._liveRegionDebouncer.refresh(e,i,this._terminal.rows)}_renderRows(e,i){const a=this._terminal.buffer,v=a.lines.length.toString();for(let f=e;f<=i;f++){const g=a.lines.get(a.ydisp+f),c=[],m=g?.translateToString(!0,void 0,void 0,c)||"",E=(a.ydisp+f+1).toString(),k=this._rowElements[f];k&&(m.length===0?(k.innerText=" ",this._rowColumns.set(k,[0,1])):(k.textContent=m,this._rowColumns.set(k,c)),k.setAttribute("aria-posinset",E),k.setAttribute("aria-setsize",v))}this._announceCharacters()}_announceCharacters(){this._charsToAnnounce.length!==0&&(this._liveRegion.textContent+=this._charsToAnnounce,this._charsToAnnounce="")}_handleBoundaryFocus(e,i){const a=e.target,v=this._rowElements[i===0?1:this._rowElements.length-2];if(a.getAttribute("aria-posinset")===(i===0?"1":`${this._terminal.buffer.lines.length}`)||e.relatedTarget!==v)return;let f,g;if(i===0?(f=a,g=this._rowElements.pop(),this._rowContainer.removeChild(g)):(f=this._rowElements.shift(),g=a,this._rowContainer.removeChild(f)),f.removeEventListener("focus",this._topBoundaryFocusListener),g.removeEventListener("focus",this._bottomBoundaryFocusListener),i===0){const c=this._createAccessibilityTreeNode();this._rowElements.unshift(c),this._rowContainer.insertAdjacentElement("afterbegin",c)}else{const c=this._createAccessibilityTreeNode();this._rowElements.push(c),this._rowContainer.appendChild(c)}this._rowElements[0].addEventListener("focus",this._topBoundaryFocusListener),this._rowElements[this._rowElements.length-1].addEventListener("focus",this._bottomBoundaryFocusListener),this._terminal.scrollLines(i===0?-1:1),this._rowElements[i===0?1:this._rowElements.length-2].focus(),e.preventDefault(),e.stopImmediatePropagation()}_handleSelectionChange(){if(this._rowElements.length===0)return;const e=document.getSelection();if(!e)return;if(e.isCollapsed)return void(this._rowContainer.contains(e.anchorNode)&&this._terminal.clearSelection());if(!e.anchorNode||!e.focusNode)return void console.error("anchorNode and/or focusNode are null");let i={node:e.anchorNode,offset:e.anchorOffset},a={node:e.focusNode,offset:e.focusOffset};if((i.node.compareDocumentPosition(a.node)&Node.DOCUMENT_POSITION_PRECEDING||i.node===a.node&&i.offset>a.offset)&&([i,a]=[a,i]),i.node.compareDocumentPosition(this._rowElements[0])&(Node.DOCUMENT_POSITION_CONTAINED_BY|Node.DOCUMENT_POSITION_FOLLOWING)&&(i={node:this._rowElements[0].childNodes[0],offset:0}),!this._rowContainer.contains(i.node))return;const v=this._rowElements.slice(-1)[0];if(a.node.compareDocumentPosition(v)&(Node.DOCUMENT_POSITION_CONTAINED_BY|Node.DOCUMENT_POSITION_PRECEDING)&&(a={node:v,offset:v.textContent?.length??0}),!this._rowContainer.contains(a.node))return;const f=({node:m,offset:E})=>{const k=m instanceof Text?m.parentNode:m;let D=parseInt(k?.getAttribute("aria-posinset"),10)-1;if(isNaN(D))return console.warn("row is invalid. Race condition?"),null;const b=this._rowColumns.get(k);if(!b)return console.warn("columns is null. Race condition?"),null;let x=E<b.length?b[E]:b.slice(-1)[0]+1;return x>=this._terminal.cols&&(++D,x=0),{row:D,column:x}},g=f(i),c=f(a);if(g&&c){if(g.row>c.row||g.row===c.row&&g.column>=c.column)throw new Error("invalid range");this._terminal.select(g.column,g.row,(c.row-g.row)*this._terminal.cols-g.column+c.column)}}_handleResize(e){this._rowElements[this._rowElements.length-1].removeEventListener("focus",this._bottomBoundaryFocusListener);for(let i=this._rowContainer.children.length;i<this._terminal.rows;i++)this._rowElements[i]=this._createAccessibilityTreeNode(),this._rowContainer.appendChild(this._rowElements[i]);for(;this._rowElements.length>e;)this._rowContainer.removeChild(this._rowElements.pop());this._rowElements[this._rowElements.length-1].addEventListener("focus",this._bottomBoundaryFocusListener),this._refreshRowsDimensions()}_createAccessibilityTreeNode(){const e=this._coreBrowserService.mainDocument.createElement("div");return e.setAttribute("role","listitem"),e.tabIndex=-1,this._refreshRowDimensions(e),e}_refreshRowsDimensions(){if(this._renderService.dimensions.css.cell.height){this._accessibilityContainer.style.width=`${this._renderService.dimensions.css.canvas.width}px`,this._rowElements.length!==this._terminal.rows&&this._handleResize(this._terminal.rows);for(let e=0;e<this._terminal.rows;e++)this._refreshRowDimensions(this._rowElements[e])}}_refreshRowDimensions(e){e.style.height=`${this._renderService.dimensions.css.cell.height}px`}};r.AccessibilityManager=s=l([_(1,h.IInstantiationService),_(2,p.ICoreBrowserService),_(3,p.IRenderService)],s)},3614:(B,r)=>{function o(d){return d.replace(/\r?\n/g,"\r")}function l(d,u){return u?"\x1B[200~"+d+"\x1B[201~":d}function _(d,u,p,h){d=l(d=o(d),p.decPrivateModes.bracketedPasteMode&&h.rawOptions.ignoreBracketedPasteMode!==!0),p.triggerDataEvent(d,!0),u.value=""}function n(d,u,p){const h=p.getBoundingClientRect(),t=d.clientX-h.left-10,s=d.clientY-h.top-10;u.style.width="20px",u.style.height="20px",u.style.left=`${t}px`,u.style.top=`${s}px`,u.style.zIndex="1000",u.focus()}Object.defineProperty(r,"__esModule",{value:!0}),r.rightClickHandler=r.moveTextAreaUnderMouseCursor=r.paste=r.handlePasteEvent=r.copyHandler=r.bracketTextForPaste=r.prepareTextForTerminal=void 0,r.prepareTextForTerminal=o,r.bracketTextForPaste=l,r.copyHandler=function(d,u){d.clipboardData&&d.clipboardData.setData("text/plain",u.selectionText),d.preventDefault()},r.handlePasteEvent=function(d,u,p,h){d.stopPropagation(),d.clipboardData&&_(d.clipboardData.getData("text/plain"),u,p,h)},r.paste=_,r.moveTextAreaUnderMouseCursor=n,r.rightClickHandler=function(d,u,p,h,t){n(d,u,p),t&&h.rightClickSelect(d),u.value=h.selectionText,u.select()}},7239:(B,r,o)=>{Object.defineProperty(r,"__esModule",{value:!0}),r.ColorContrastCache=void 0;const l=o(1505);r.ColorContrastCache=class{constructor(){this._color=new l.TwoKeyMap,this._css=new l.TwoKeyMap}setCss(_,n,d){this._css.set(_,n,d)}getCss(_,n){return this._css.get(_,n)}setColor(_,n,d){this._color.set(_,n,d)}getColor(_,n){return this._color.get(_,n)}clear(){this._color.clear(),this._css.clear()}}},3656:(B,r)=>{Object.defineProperty(r,"__esModule",{value:!0}),r.addDisposableDomListener=void 0,r.addDisposableDomListener=function(o,l,_,n){o.addEventListener(l,_,n);let d=!1;return{dispose:()=>{d||(d=!0,o.removeEventListener(l,_,n))}}}},3551:function(B,r,o){var l=this&&this.__decorate||function(s,e,i,a){var v,f=arguments.length,g=f<3?e:a===null?a=Object.getOwnPropertyDescriptor(e,i):a;if(typeof Reflect=="object"&&typeof Reflect.decorate=="function")g=Reflect.decorate(s,e,i,a);else for(var c=s.length-1;c>=0;c--)(v=s[c])&&(g=(f<3?v(g):f>3?v(e,i,g):v(e,i))||g);return f>3&&g&&Object.defineProperty(e,i,g),g},_=this&&this.__param||function(s,e){return function(i,a){e(i,a,s)}};Object.defineProperty(r,"__esModule",{value:!0}),r.Linkifier=void 0;const n=o(3656),d=o(8460),u=o(844),p=o(2585),h=o(4725);let t=r.Linkifier=class extends u.Disposable{get currentLink(){return this._currentLink}constructor(s,e,i,a,v){super(),this._element=s,this._mouseService=e,this._renderService=i,this._bufferService=a,this._linkProviderService=v,this._linkCacheDisposables=[],this._isMouseOut=!0,this._wasResized=!1,this._activeLine=-1,this._onShowLinkUnderline=this.register(new d.EventEmitter),this.onShowLinkUnderline=this._onShowLinkUnderline.event,this._onHideLinkUnderline=this.register(new d.EventEmitter),this.onHideLinkUnderline=this._onHideLinkUnderline.event,this.register((0,u.getDisposeArrayDisposable)(this._linkCacheDisposables)),this.register((0,u.toDisposable)((()=>{this._lastMouseEvent=void 0,this._activeProviderReplies?.clear()}))),this.register(this._bufferService.onResize((()=>{this._clearCurrentLink(),this._wasResized=!0}))),this.register((0,n.addDisposableDomListener)(this._element,"mouseleave",(()=>{this._isMouseOut=!0,this._clearCurrentLink()}))),this.register((0,n.addDisposableDomListener)(this._element,"mousemove",this._handleMouseMove.bind(this))),this.register((0,n.addDisposableDomListener)(this._element,"mousedown",this._handleMouseDown.bind(this))),this.register((0,n.addDisposableDomListener)(this._element,"mouseup",this._handleMouseUp.bind(this)))}_handleMouseMove(s){this._lastMouseEvent=s;const e=this._positionFromMouseEvent(s,this._element,this._mouseService);if(!e)return;this._isMouseOut=!1;const i=s.composedPath();for(let a=0;a<i.length;a++){const v=i[a];if(v.classList.contains("xterm"))break;if(v.classList.contains("xterm-hover"))return}this._lastBufferCell&&e.x===this._lastBufferCell.x&&e.y===this._lastBufferCell.y||(this._handleHover(e),this._lastBufferCell=e)}_handleHover(s){if(this._activeLine!==s.y||this._wasResized)return this._clearCurrentLink(),this._askForLink(s,!1),void(this._wasResized=!1);this._currentLink&&this._linkAtPosition(this._currentLink.link,s)||(this._clearCurrentLink(),this._askForLink(s,!0))}_askForLink(s,e){this._activeProviderReplies&&e||(this._activeProviderReplies?.forEach((a=>{a?.forEach((v=>{v.link.dispose&&v.link.dispose()}))})),this._activeProviderReplies=new Map,this._activeLine=s.y);let i=!1;for(const[a,v]of this._linkProviderService.linkProviders.entries())e?this._activeProviderReplies?.get(a)&&(i=this._checkLinkProviderResult(a,s,i)):v.provideLinks(s.y,(f=>{if(this._isMouseOut)return;const g=f?.map((c=>({link:c})));this._activeProviderReplies?.set(a,g),i=this._checkLinkProviderResult(a,s,i),this._activeProviderReplies?.size===this._linkProviderService.linkProviders.length&&this._removeIntersectingLinks(s.y,this._activeProviderReplies)}))}_removeIntersectingLinks(s,e){const i=new Set;for(let a=0;a<e.size;a++){const v=e.get(a);if(v)for(let f=0;f<v.length;f++){const g=v[f],c=g.link.range.start.y<s?0:g.link.range.start.x,m=g.link.range.end.y>s?this._bufferService.cols:g.link.range.end.x;for(let E=c;E<=m;E++){if(i.has(E)){v.splice(f--,1);break}i.add(E)}}}}_checkLinkProviderResult(s,e,i){if(!this._activeProviderReplies)return i;const a=this._activeProviderReplies.get(s);let v=!1;for(let f=0;f<s;f++)this._activeProviderReplies.has(f)&&!this._activeProviderReplies.get(f)||(v=!0);if(!v&&a){const f=a.find((g=>this._linkAtPosition(g.link,e)));f&&(i=!0,this._handleNewLink(f))}if(this._activeProviderReplies.size===this._linkProviderService.linkProviders.length&&!i)for(let f=0;f<this._activeProviderReplies.size;f++){const g=this._activeProviderReplies.get(f)?.find((c=>this._linkAtPosition(c.link,e)));if(g){i=!0,this._handleNewLink(g);break}}return i}_handleMouseDown(){this._mouseDownLink=this._currentLink}_handleMouseUp(s){if(!this._currentLink)return;const e=this._positionFromMouseEvent(s,this._element,this._mouseService);e&&this._mouseDownLink===this._currentLink&&this._linkAtPosition(this._currentLink.link,e)&&this._currentLink.link.activate(s,this._currentLink.link.text)}_clearCurrentLink(s,e){this._currentLink&&this._lastMouseEvent&&(!s||!e||this._currentLink.link.range.start.y>=s&&this._currentLink.link.range.end.y<=e)&&(this._linkLeave(this._element,this._currentLink.link,this._lastMouseEvent),this._currentLink=void 0,(0,u.disposeArray)(this._linkCacheDisposables))}_handleNewLink(s){if(!this._lastMouseEvent)return;const e=this._positionFromMouseEvent(this._lastMouseEvent,this._element,this._mouseService);e&&this._linkAtPosition(s.link,e)&&(this._currentLink=s,this._currentLink.state={decorations:{underline:s.link.decorations===void 0||s.link.decorations.underline,pointerCursor:s.link.decorations===void 0||s.link.decorations.pointerCursor},isHovered:!0},this._linkHover(this._element,s.link,this._lastMouseEvent),s.link.decorations={},Object.defineProperties(s.link.decorations,{pointerCursor:{get:()=>this._currentLink?.state?.decorations.pointerCursor,set:i=>{this._currentLink?.state&&this._currentLink.state.decorations.pointerCursor!==i&&(this._currentLink.state.decorations.pointerCursor=i,this._currentLink.state.isHovered&&this._element.classList.toggle("xterm-cursor-pointer",i))}},underline:{get:()=>this._currentLink?.state?.decorations.underline,set:i=>{this._currentLink?.state&&this._currentLink?.state?.decorations.underline!==i&&(this._currentLink.state.decorations.underline=i,this._currentLink.state.isHovered&&this._fireUnderlineEvent(s.link,i))}}}),this._linkCacheDisposables.push(this._renderService.onRenderedViewportChange((i=>{if(!this._currentLink)return;const a=i.start===0?0:i.start+1+this._bufferService.buffer.ydisp,v=this._bufferService.buffer.ydisp+1+i.end;if(this._currentLink.link.range.start.y>=a&&this._currentLink.link.range.end.y<=v&&(this._clearCurrentLink(a,v),this._lastMouseEvent)){const f=this._positionFromMouseEvent(this._lastMouseEvent,this._element,this._mouseService);f&&this._askForLink(f,!1)}}))))}_linkHover(s,e,i){this._currentLink?.state&&(this._currentLink.state.isHovered=!0,this._currentLink.state.decorations.underline&&this._fireUnderlineEvent(e,!0),this._currentLink.state.decorations.pointerCursor&&s.classList.add("xterm-cursor-pointer")),e.hover&&e.hover(i,e.text)}_fireUnderlineEvent(s,e){const i=s.range,a=this._bufferService.buffer.ydisp,v=this._createLinkUnderlineEvent(i.start.x-1,i.start.y-a-1,i.end.x,i.end.y-a-1,void 0);(e?this._onShowLinkUnderline:this._onHideLinkUnderline).fire(v)}_linkLeave(s,e,i){this._currentLink?.state&&(this._currentLink.state.isHovered=!1,this._currentLink.state.decorations.underline&&this._fireUnderlineEvent(e,!1),this._currentLink.state.decorations.pointerCursor&&s.classList.remove("xterm-cursor-pointer")),e.leave&&e.leave(i,e.text)}_linkAtPosition(s,e){const i=s.range.start.y*this._bufferService.cols+s.range.start.x,a=s.range.end.y*this._bufferService.cols+s.range.end.x,v=e.y*this._bufferService.cols+e.x;return i<=v&&v<=a}_positionFromMouseEvent(s,e,i){const a=i.getCoords(s,e,this._bufferService.cols,this._bufferService.rows);if(a)return{x:a[0],y:a[1]+this._bufferService.buffer.ydisp}}_createLinkUnderlineEvent(s,e,i,a,v){return{x1:s,y1:e,x2:i,y2:a,cols:this._bufferService.cols,fg:v}}};r.Linkifier=t=l([_(1,h.IMouseService),_(2,h.IRenderService),_(3,p.IBufferService),_(4,h.ILinkProviderService)],t)},9042:(B,r)=>{Object.defineProperty(r,"__esModule",{value:!0}),r.tooMuchOutput=r.promptLabel=void 0,r.promptLabel="Terminal input",r.tooMuchOutput="Too much output to announce, navigate to rows manually to read"},3730:function(B,r,o){var l=this&&this.__decorate||function(h,t,s,e){var i,a=arguments.length,v=a<3?t:e===null?e=Object.getOwnPropertyDescriptor(t,s):e;if(typeof Reflect=="object"&&typeof Reflect.decorate=="function")v=Reflect.decorate(h,t,s,e);else for(var f=h.length-1;f>=0;f--)(i=h[f])&&(v=(a<3?i(v):a>3?i(t,s,v):i(t,s))||v);return a>3&&v&&Object.defineProperty(t,s,v),v},_=this&&this.__param||function(h,t){return function(s,e){t(s,e,h)}};Object.defineProperty(r,"__esModule",{value:!0}),r.OscLinkProvider=void 0;const n=o(511),d=o(2585);let u=r.OscLinkProvider=class{constructor(h,t,s){this._bufferService=h,this._optionsService=t,this._oscLinkService=s}provideLinks(h,t){const s=this._bufferService.buffer.lines.get(h-1);if(!s)return void t(void 0);const e=[],i=this._optionsService.rawOptions.linkHandler,a=new n.CellData,v=s.getTrimmedLength();let f=-1,g=-1,c=!1;for(let m=0;m<v;m++)if(g!==-1||s.hasContent(m)){if(s.loadCell(m,a),a.hasExtendedAttrs()&&a.extended.urlId){if(g===-1){g=m,f=a.extended.urlId;continue}c=a.extended.urlId!==f}else g!==-1&&(c=!0);if(c||g!==-1&&m===v-1){const E=this._oscLinkService.getLinkData(f)?.uri;if(E){const k={start:{x:g+1,y:h},end:{x:m+(c||m!==v-1?0:1),y:h}};let D=!1;if(!i?.allowNonHttpProtocols)try{const b=new URL(E);["http:","https:"].includes(b.protocol)||(D=!0)}catch{D=!0}D||e.push({text:E,range:k,activate:(b,x)=>i?i.activate(b,x,k):p(0,x),hover:(b,x)=>i?.hover?.(b,x,k),leave:(b,x)=>i?.leave?.(b,x,k)})}c=!1,a.hasExtendedAttrs()&&a.extended.urlId?(g=m,f=a.extended.urlId):(g=-1,f=-1)}}t(e)}};function p(h,t){if(confirm(`Do you want to navigate to ${t}?