@rubytech/create-maxy 1.0.685 → 1.0.686

package/payload/platform/plugins/docs/references/graph.md

@@ -0,0 +1,38 @@
+# Graph View
+
+The **Graph** admin page (`/graph`) renders a force-directed view of your
+account's Neo4j subgraph. Labels on the canvas follow the zoom level, so you
+see the most useful identity at every scale.
+
+## Conversation label tiers
+
+Conversation nodes carry the most operator-meaningful identity in the
+subgraph (the conversation name or summary, the date it started, the message
+count). They render in one of three tiers, switched by canvas scale:
+
+| Zoom | Label shape | Example |
+|------|-------------|---------|
+| Zoomed out (< 0.7×) | Compact — one line, capped at 24 characters. Preserves the no-overlap contract that matters when nodes are tightly packed. | `Maxyfi branding conflict…` |
+| Mid zoom (0.7× to 1.3×) | Wrapped — up to two lines of 24 characters each, soft-ellipsis on overflow. Full name is visible without hover. | `Maxyfi branding conflict` / `with Rubytech` |
+| Zoomed in (≥ 1.3×) | Detailed — wrapped name plus a metadata line reading `YYYY-MM-DD · N msgs`. | `Maxyfi branding conflict` / `with Rubytech` / `2026-04-23 · 7 msgs` |
+
+Non-Conversation nodes (People, Messages, Tasks, WorkflowRuns, etc.) keep
+their concise single-line labels at every zoom level — the canvas stays
+readable when you zoom out to see a large subgraph.
+
+Tier transitions are debounced so spinning the scroll wheel does not cause
+label flicker; labels only rewrite once zoom settles on a new tier.
+
+## Tooltips and side panel
+
+Hovering a node still shows the full 5-line tooltip (display name, labels,
+id, created at, updated at). Clicking a Conversation opens the side panel
+with the full property table — zoom-tier changes never alter these paths.
+
+## Trashed conversations
+
+Trashed Conversation nodes are hidden by default. Toggle **Show trashed** in
+the filter popover to surface them; they render with a faded fill and dashed
+border, with their zoom-tier labels intact. The `N msgs` count excludes
+trashed Messages, so the detailed-tier label reflects only live turns in the
+conversation.

package/payload/platform/plugins/docs/references/platform.md

@@ -62,19 +62,22 @@ There is no dashboard, no settings panel, no menus. Everything is done through c
 
 The chat input auto-grows as you type — it expands to fit your message and shrinks back when you delete text. You can also drag the resize handle above the input to set a custom height.
 
-## Admin Terminal
+## Software Update and Cloudflare Setup
 
-The admin UI has a single terminal surface — one pipeline (a real GUI terminal emulator running on the Pi's VNC display `:99`, rendered inside an `iframe` of `/vnc-viewer.html`) with two entry points: the burger menu's **Terminal** button (opens a plain operator shell) and the Software Update modal's **Upgrade** button (opens the same iframe with `npx -y @rubytech/create-maxy@latest` already running in the spawned shell).
+There is no free-form terminal surface in the admin UI — ad-hoc shell access stays on SSH. The two flows that used to need a terminal (upgrade, Cloudflare tunnel setup) run as **detached actions** instead.
 
-The binary is chosen by target display. For the VNC virtual display `:99`, **xterm** is preferred because it honours `DISPLAY` directly with no IPC layer. For the native loopback display, **gnome-terminal** is preferred because the login session's `gnome-terminal-server` owns that display. (gnome-terminal cannot be used for the VNC display — it's a D-Bus launcher that delegates window creation to the session's server, and the window would appear on the physical screen instead of inside the admin iframe.) Post-spawn, the launch pipeline asserts the window actually landed on the target display via `xdotool search --onlyvisible --class '.'` — if anything went wrong (gnome-terminal D-Bus delegation, missing `xdotool`, broken X server), the 502 response body carries the exact diagnostic string inline in the UI instead of showing a black rectangle.
+**Software Update flow.** Click Upgrade in the modal → the modal asks for your sudo password once → the admin server validates it and launches a transient `systemd-run --user` unit running `npx -y @rubytech/create-maxy@latest`. The action unit is a peer of the brand service (not a child), so the installer's mid-run `systemctl --user restart maxy` does not kill the upgrade itself — it finishes running, then the web UI reloads on the new version. The modal shows a live log panel with three event types:
+- every stdout/stderr line the installer emits, timestamped server-side;
+- a heartbeat every 5 seconds carrying `state=active` + `last_phase` so you can see the installer is alive even during silent phases (tarball download, dep install);
+- a final banner on exit with the return code and elapsed time.
 
-**Software Update flow.** Click Upgrade in the modal → the admin server kills any pre-existing terminal on `:99` (the upgrade must run in a fresh shell) and spawns the chosen binary with a command dispatcher: `xterm -e bash -c "npx …; exec bash"` or `gnome-terminal -- bash -c "npx …; exec bash"`. The trailing `exec bash` replaces the shell process after `npx` exits so the window stays open — you can scroll through the full installer output and read the final "Open in your browser:" line at your own pace. The modal mounts the fullscreen VNC terminal overlay (the same surface the burger menu's Terminal button uses) and the operator watches the installer run at viewport height. A background poll of `GET /api/admin/version` every 5 seconds detects completion: the moment `installed === latest`, the modal flips to success and the page reloads two seconds later. Password-protected `sudo` prompts appear natively inside the terminal — the password you type never leaves the Pi.
+If the browser drops the SSE connection mid-upgrade (typical during the maxy restart window), the panel reconnects within two seconds and replays any lines you missed from the persisted log.
 
-**Operator Terminal flow.** The burger menu's Terminal button uses the exact same pipeline, minus the pre-loaded command. Click Terminal → the admin server spawns the same binary (no `-e`/`--` dispatcher, no `bash -c` wrapper) → the iframe shows an empty shell. Closing the overlay with Esc or × kills the spawned PID on the Pi via `POST /api/admin/terminal/close`; reopening launches a fresh shell.
+**Cloudflare setup flow.** Same pattern — POST to `/api/admin/cloudflare/setup` launches a `cloudflare-setup` action that runs `~/setup-tunnel.sh <brand> <port> <hostname...>`. When the script emits the OAuth consent URL on stdout, the log panel surfaces an **"Authorise in Cloudflare"** button; clicking it opens the consent page in a new tab. After you approve, the script's callback receives `cert.pem` and the setup continues through `tunnel create`/`route`/`run`. On devices where a VNC Chromium is also running, the script can drive the click via CDP automatically (same button remains a harmless safety net).
 
-**If you click Upgrade while an operator Terminal is open** (or vice versa), the pre-existing shell is killed and the iframe refreshes with the new shell. The upgrade is disruptive by design — you cannot graft an installer onto a shell that already has your env, cwd, and aliases.
+**Sudo password** is prompted once per upgrade. The admin server pipes it to `sudo -S -v` to validate + cache, then forwards it to the action unit via `systemd-run --setenv=SUDO_PASSWORD` so the installer's in-unit `sudo -S` reads it directly — per-TTY sudoers configurations where the user-level cache does not cover a fresh systemd-run unit still work. The password is never written to any log, SSE frame, or persisted file.
 
-**Error surface.** If the terminal emulator fails to spawn on `:99` (missing xterm, gnome-terminal broken, X server down), the UpdateModal renders the verbatim server-side diagnostic — e.g. `[terminal-launch] failed err="window absent from target display after spawn" pid=... display=:99 observed_windows=0 transport=vnc reason=upgrade` — and the Upgrade button re-labels to "Try again". The same string lands in `~/.maxy/logs/vnc-boot.log` under `action=launch-upgrade-failed err="..."`, so what you see in the modal and what your operator-visible diagnostic grep finds are identical.
+**Log files.** Each action writes its full output to `~/.maxy/logs/actions/<actionId>.log` for seven days. `journalctl --user --identifier=maxy-action-<actionId>` gives the systemd-level view.
 
 **Authorisation** is inherited from the same `canAccessAdmin()` gate that wraps every `/api/admin/*` route.
 

package/payload/platform/plugins/docs/references/troubleshooting.md

@@ -93,26 +93,36 @@ If the initial Cloudflare login fails during setup, Maxy will fall back to askin
 
 ---
 
-## Admin terminal renders leading `0`, `1`, or `2` characters (wire-format decoder not running)
+## Action runner — upgrade or Cloudflare setup appears stuck
 
-**Symptom:** The header-menu Terminal or Software Update modal connects, but the xterm.js buffer shows literal digits where the tmux prompt should be — e.g. `1tmux new-session -A -s maxy-pty -x 200 -y 50 (neo)2{"..."}`. Typing keystrokes does nothing (the terminal looks alive but nothing echoes).
+Task 664 replaced the ttyd/xterm admin terminal with a detached action runner. Upgrades and Cloudflare setup now run under transient `systemd-run --user` units whose stdout+stderr land in a persisted per-action log, streamed to the browser via SSE.
 
-**What it means:** ttyd 1.7.7 frames every WebSocket message with a 1-byte command prefix (`'0'` for output, `'1'` for window title, `'2'` for preferences). The React terminal needs the [ttyd-protocol.ts](../../../../platform/ui/app/lib/ttyd-protocol.ts) decoder to split the prefix and route accordingly. If the decoder isn't wired up — typically because an older bundle was installed or a hotfix reverted the wiring — xterm.js receives the raw bytes and renders the prefix as a literal digit. Outbound keystrokes have the mirror problem: ttyd discards any frame that doesn't start with `'0'` INPUT.
+**Heartbeat stalled** (log panel header shows rising `silent Ns` amber badge).
 
-**Check (browser DevTools console on admin.maxy.bot):**
+- Open the log panel header: `state: <systemd_state>` tells you the unit's current state.
+- `systemd_state: active` + silent >30s → the child is running but emitting nothing. Expected for `npx` while it downloads the tarball, or `cloudflared tunnel login` waiting for an operator click.
+- `systemd_state: inactive` + no `exit` event → the exit event was missed; the server-side heartbeat timer will emit it on the next 5 s tick.
+- `systemd_state: failed` → see the next symptom.
 
-```
-[terminal] connected
-[ttyd-client] protocol negotiated cmd=0 payloadBytes=<n>   ← expected within 3s of connect
-```
+**`ActiveState=failed`** (log panel's exit banner shows a non-zero code).
+
+- Read the persisted log directly: `~/.maxy/logs/actions/<actionId>.log` (or `.realagent/...`) has every stdout+stderr line the unit emitted.
+- `journalctl --user --identifier=maxy-action-<actionId>` shows systemd's own record including ExecStartPre/ExecStopPost if any.
+- Common cases:
+  - Wrong sudo password → `sudo: 1 incorrect password attempt` near the top of the log; re-open the upgrade modal, enter the correct password.
+  - Network failure during `npx` → `npm ERR! network` lines; re-open the modal and retry when network is restored.
+  - `cloudflared tunnel login` timed out waiting for OAuth → action exits non-zero with `Timed out after Ns waiting for cert.pem`; re-trigger from the Cloudflare setup form.
+
+**"Authorise in Cloudflare" button never appears** (cloudflare-setup action).
+
+The setup script emits either the raw `https://dash.cloudflare.com/argotunnel?...` URL in cloudflared's own stderr OR an explicit `OAUTH_URL: <url>` stdout line once URL extraction succeeds. The log panel's regex matches either. If neither appears within ~15 s of launch:
 
-- `[terminal] connected` present but `[ttyd-client] protocol negotiated` absent → the decoder is not running. Re-install: `npx -y @rubytech/create-maxy@latest` (or Software Update from the admin header when reachable).
-- `[ttyd-client] unknown cmd prefix=<hex> bytes=<n>` cluster → ttyd version drift. The 1.7.7 pin is expected; a newer ttyd may have added command classes. Safe-ignore on 1.7.7.
-- Neither line appears → the WebSocket itself isn't connecting; see the "Admin terminal blank / flashing cursor" section below (pre-Task-657 sections are historical, not applicable).
+- The action log file (`~/.maxy/logs/actions/<actionId>.log`) should show `[script:setup-tunnel:cloudflared]` lines. No such lines → cloudflared isn't spawning (check whether the binary is on PATH in the transient unit; `systemctl --user show maxy-action-<actionId>` reveals the environment).
+- Lines present but no URL → cloudflared output-format drift; file a task with the last 20 lines of the action log.
 
-**Correlate with server side.** `grep corrId=<id> ~/.maxy/logs/edge-boot.log` reveals whether bytes are flowing end-to-end — `ttyd-proxy-chunk dir=upstream→client` lines prove ttyd is sending output. If those lines exist but the browser shows leading digits, the decode listener isn't wired to the live socket; if those lines are absent, the failure is upstream of the client (maxy-ttyd service, tmux attach).
+**Log file missing (action stream returns 404).**
 
-**Regression boundary:** `platform/ui/app/RemoteTerminal.tsx` must import `decodeFrame`, `encodeInput`, and `encodeResize` from `./lib/ttyd-protocol`. `@xterm/addon-attach` is not a dependency — it pipes WS bytes to `term.write` raw and cannot satisfy the ttyd framing contract.
+The transient unit was auto-collected by systemd before the client subscribed. Race condition: action finished in <1 s. The per-action log file is retained for 7 days; look for it by name under `~/.maxy/logs/actions/`. If it isn't there, the unit failed before any output (check `journalctl --user -u maxy-action-<id>`).
 
 ---
 

package/payload/platform/scripts/vnc.sh

@@ -10,9 +10,10 @@
 #   Chromium :9222       — headed browser with CDP enabled
 #                          (Playwright MCP connects via --cdp-endpoint)
 #
-# Task 657: the admin Terminal overlay and upgrade modal now use the
-# byte-stream xterm.js surface over /ttyd on maxy-edge, not VNC. This
-# script no longer spawns GUI terminal emulators.
+# Task 664 retired the admin-UI terminal surface entirely. This script
+# no longer spawns GUI terminal emulators of any kind; upgrades and
+# cloudflare-setup actions run via the detached action runner
+# (/api/admin/actions/*) rather than an in-browser terminal.
 #
 # Display modes (DISPLAY_MODE env var, set by installer --display flag):
 #   virtual (default) — Chromium runs on :99 (VNC virtual display)
@@ -185,10 +186,9 @@ start_chrome() {
 }
 
 # ---------------------------------------------------------------------------
-# Task 657 retired the VNC-as-terminal path (Task 627/643): the header
-# TerminalOverlay and UpdateModal now mount xterm.js against /ttyd on
-# maxy-edge. The GUI-terminal spawn pipeline that lived here is gone.
-# Only the Chromium surface remains for BrowserOverlay.
+# Task 664 retired the admin-UI terminal surface entirely: the header
+# TerminalOverlay + UpdateModal embedded terminal stack is gone. Only
+# the Chromium surface remains for BrowserOverlay.
 # ---------------------------------------------------------------------------
 
 start_chrome_native() {

package/payload/platform/templates/systemd/edge.service.template

@@ -1,5 +1,5 @@
 [Unit]
-Description=Edge service (public port + VNC + ttyd transport — independent of the main brand service)
+Description=Edge service (public port + VNC transport — independent of the main brand service)
 # No ordering dependency on the main brand service: the edge is the long-running
 # front door. The main brand unit declares Wants/After this unit so it only
 # starts once the edge is listening, but this unit has no such reciprocal
@@ -8,8 +8,10 @@ Description=Edge service (public port + VNC + ttyd transport — independent of
 [Service]
 Type=simple
 # ExecStartPre owns the VNC stack so an `npx -y @rubytech/create-maxy@latest`
-# run from the admin terminal can restart the main brand service without
-# taking Xtigervnc, websockify, or the upgrade shell down with it. Task 647.
+# run from the admin UI can restart the main brand service without taking
+# Xtigervnc or websockify down with it. Task 647. Task 664 removed the ttyd
+# transport — upgrades now run via systemd-run --user transient units that
+# are peers of maxy-ui and survive its restart structurally.
 ExecStartPre=/bin/bash __INSTALL_DIR__/platform/scripts/vnc.sh start
 ExecStart=/usr/bin/node __INSTALL_DIR__/server/maxy-edge.js
 ExecStopPost=/bin/bash __INSTALL_DIR__/platform/scripts/vnc.sh stop
@@ -24,7 +26,6 @@ Environment=MAXY_UI_HOST=127.0.0.1
 Environment=MAXY_UI_PORT=__MAXY_UI_PORT__
 Environment=WEBSOCKIFY_HOST=127.0.0.1
 Environment=WEBSOCKIFY_PORT=6080
-Environment=TTYD_PORT=__TTYD_PORT__
 Environment=DISPLAY=:99
 Environment=MAXY_PLATFORM_ROOT=__INSTALL_DIR__/platform
 Environment=PATH=%h/.local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin

package/payload/server/maxy-edge.js

@@ -1,5 +1,4 @@
 import {
-  LOG_DIR,
   canAccessAdmin,
   describeRemoteSession,
   newCorrId,
@@ -10,7 +9,7 @@ import {
 
 // server/edge.ts
 import { createServer, request as httpRequest } from "http";
-import { createConnection as createConnection3 } from "net";
+import { createConnection as createConnection2 } from "net";
 import { readFileSync, existsSync, watchFile } from "fs";
 import { homedir } from "os";
 import { join } from "path";
@@ -276,358 +275,6 @@ Content-Length: 0\r
   socket.destroy();
 }
 
-// server/ws-proxy-ttyd.ts
-import { createConnection as createConnection2 } from "net";
-
-// app/lib/ttyd-logger.ts
-import { appendFileSync, mkdirSync } from "fs";
-import { resolve } from "path";
-var EDGE_LOG_FILE = resolve(LOG_DIR, "edge-boot.log");
-try {
-  mkdirSync(LOG_DIR, { recursive: true });
-} catch (err) {
-  console.error(`[ttyd-log-fail] mkdir ${LOG_DIR} failed: ${err.message}`);
-}
-function ttydLog(phase, fields = {}) {
-  const ts = (/* @__PURE__ */ new Date()).toISOString();
-  const kv = Object.entries(fields).map(([k, v]) => `${k}=${JSON.stringify(v)}`).join(" ");
-  const line = kv.length > 0 ? `[${ts}] [${phase}] ${kv}
-` : `[${ts}] [${phase}]
-`;
-  try {
-    appendFileSync(EDGE_LOG_FILE, line);
-  } catch (err) {
-    console.error(`[ttyd-log-fail] ${err.message} \u2014 dropped: ${line.slice(0, 300).trim()}`);
-  }
-}
-
-// server/ws-proxy-ttyd.ts
-var WS_PATH2 = "/ttyd";
-var UPSTREAM_WS_PATH = "/ws";
-var UPSTREAM_TIMEOUT_MS2 = 5e3;
-var FLOW_ACTIVE_INTERVAL_MS = 5e3;
-var FLOW_IDLE_INTERVAL_MS = 3e4;
-var CHUNK_THROTTLE_MS = 1e3;
-var CHUNK_UNTHROTTLED_COUNT = 5;
-var HOP_BY_HOP2 = /* @__PURE__ */ new Set([
-  "connection",
-  "keep-alive",
-  "proxy-authenticate",
-  "proxy-authorization",
-  "te",
-  "trailer",
-  "transfer-encoding",
-  "upgrade"
-]);
-function attachTtydWsProxy(server2, opts) {
-  const upstreamHost = opts.upstreamHost ?? "127.0.0.1";
-  const upstreamPort = opts.upstreamPort ?? 7681;
-  const now = opts.now ?? (() => Date.now());
-  server2.on("upgrade", (req, clientSocket, head) => {
-    try {
-      handleUpgrade2(req, clientSocket, head, {
-        isPublicHost: opts.isPublicHost,
-        upstreamHost,
-        upstreamPort,
-        now
-      });
-    } catch (err) {
-      ttydLog("ttyd-ws-upgrade", {
-        decision: "rejected",
-        reason: "handler-exception",
-        err: err.message
-      });
-      clientSocket.destroy();
-    }
-  });
-}
-function handleUpgrade2(req, clientSocket, head, opts) {
-  const url = req.url ?? "";
-  const qsIndex = url.indexOf("?");
-  const pathname = qsIndex === -1 ? url : url.slice(0, qsIndex);
-  if (pathname !== WS_PATH2) return;
-  const corrId = newCorrId();
-  const query = qsIndex === -1 ? "" : url.slice(qsIndex + 1);
-  const clientCorrId = sanitizeClientCorrId(parseQueryParam2(query, "corrId"));
-  const hostHeader = (req.headers.host ?? "").split(":")[0];
-  const originHeader = headerString2(req.headers.origin);
-  const remote = req.socket.remoteAddress;
-  const xff = headerString2(req.headers["x-forwarded-for"]);
-  const cookieHeader = headerString2(req.headers.cookie);
-  const decision = canAccessAdmin({
-    host: hostHeader,
-    remoteAddress: remote,
-    xForwardedFor: xff,
-    cookieHeader,
-    isPublicHost: opts.isPublicHost
-  });
-  if (!decision.allow) {
-    const status = decision.reason === "public-host" ? 404 : 401;
-    const rawToken = parseCookieValue(cookieHeader, "__remote_session");
-    const tokenInfo = describeRemoteSession(rawToken);
-    ttydLog("ttyd-ws-upgrade", {
-      corrId,
-      clientCorrId: clientCorrId ?? null,
-      decision: "rejected",
-      reason: decision.reason,
-      ip: remote,
-      xff: xff ?? null,
-      origin: originHeader ?? null,
-      host: hostHeader,
-      cookieHeaderPresent: cookieHeader != null && cookieHeader.length > 0,
-      tokenPresent: tokenInfo.present,
-      tokenExpired: tokenInfo.expired
-    });
-    writeStatusAndDestroy2(clientSocket, status, decision.reason === "public-host" ? "Not Found" : "Unauthorized");
-    return;
-  }
-  const originHost = parseOriginHost2(originHeader);
-  if (!originHost) {
-    ttydLog("ttyd-ws-upgrade", {
-      corrId,
-      clientCorrId: clientCorrId ?? null,
-      decision: "rejected",
-      reason: "origin-missing-or-invalid",
-      origin: originHeader ?? null,
-      host: hostHeader,
-      ip: remote
-    });
-    writeStatusAndDestroy2(clientSocket, 403, "Forbidden");
-    return;
-  }
-  if (originHost !== hostHeader) {
-    ttydLog("ttyd-ws-upgrade", {
-      corrId,
-      clientCorrId: clientCorrId ?? null,
-      decision: "rejected",
-      reason: "origin-mismatch",
-      origin_host: originHost,
-      host: hostHeader,
-      ip: remote
-    });
-    writeStatusAndDestroy2(clientSocket, 403, "Forbidden");
-    return;
-  }
-  if (opts.isPublicHost(originHost)) {
-    ttydLog("ttyd-ws-upgrade", {
-      corrId,
-      clientCorrId: clientCorrId ?? null,
-      decision: "rejected",
-      reason: "origin-public-host",
-      origin_host: originHost,
-      host: hostHeader,
-      ip: remote
-    });
-    writeStatusAndDestroy2(clientSocket, 403, "Forbidden");
-    return;
-  }
-  ttydLog("ttyd-ws-upgrade", {
-    corrId,
-    clientCorrId: clientCorrId ?? null,
-    decision: "accepted",
-    ip: remote,
-    xff: xff ?? null,
-    origin: originHeader ?? null,
-    host: hostHeader,
-    sec_ws_version: headerString2(req.headers["sec-websocket-version"]) ?? null,
-    sec_ws_protocol: headerString2(req.headers["sec-websocket-protocol"]) ?? null
-  });
-  const connectStart = opts.now();
-  const upstream = createConnection2({ host: opts.upstreamHost, port: opts.upstreamPort });
-  upstream.setTimeout(UPSTREAM_TIMEOUT_MS2);
-  let bytesClientToUpstream = 0;
-  let bytesUpstreamToClient = 0;
-  let lastFlowBytesClient = 0;
-  let lastFlowBytesUpstream = 0;
-  let lastActivityAt = opts.now();
-  let lastChunkLogAtClient = 0;
-  let lastChunkLogAtUpstream = 0;
-  let chunkCountClient = 0;
-  let chunkCountUpstream = 0;
-  let closedBy = null;
-  let proxyOpened = false;
-  const sessionStart = opts.now();
-  let flowHandle = null;
-  let currentFlowInterval = FLOW_ACTIVE_INTERVAL_MS;
-  const scheduleFlow = (intervalMs) => {
-    if (flowHandle) clearInterval(flowHandle);
-    currentFlowInterval = intervalMs;
-    flowHandle = setInterval(emitFlow, intervalMs);
-  };
-  const emitFlow = () => {
-    if (!proxyOpened || closedBy) return;
-    const deltaClient = bytesClientToUpstream - lastFlowBytesClient;
-    const deltaUpstream = bytesUpstreamToClient - lastFlowBytesUpstream;
-    lastFlowBytesClient = bytesClientToUpstream;
-    lastFlowBytesUpstream = bytesUpstreamToClient;
-    const idleMs = opts.now() - lastActivityAt;
-    ttydLog("ttyd-proxy-flow", {
-      corrId,
-      clientBytes: bytesClientToUpstream,
-      upstreamBytes: bytesUpstreamToClient,
-      clientBytesDelta: deltaClient,
-      upstreamBytesDelta: deltaUpstream,
-      idleMs
-    });
-    const active = deltaClient > 0 || deltaUpstream > 0;
-    const desiredInterval = active ? FLOW_ACTIVE_INTERVAL_MS : FLOW_IDLE_INTERVAL_MS;
-    if (desiredInterval !== currentFlowInterval) scheduleFlow(desiredInterval);
-  };
-  const finish = (side, reason) => {
-    if (closedBy) return;
-    closedBy = side;
-    if (flowHandle) {
-      clearInterval(flowHandle);
-      flowHandle = null;
-    }
-    if (proxyOpened) {
-      ttydLog("ttyd-proxy-close", {
-        corrId,
-        closedBy: side,
-        reason,
-        clientBytes: bytesClientToUpstream,
-        upstreamBytes: bytesUpstreamToClient,
-        durationMs: opts.now() - sessionStart
-      });
-    }
-    clientSocket.destroy();
-    upstream.destroy();
-  };
-  upstream.once("connect", () => {
-    upstream.setTimeout(0);
-    proxyOpened = true;
-    ttydLog("ttyd-proxy-open", {
-      corrId,
-      upstream: `${opts.upstreamHost}:${opts.upstreamPort}`,
-      connect_ms: opts.now() - connectStart
-    });
-    const lines = [];
-    lines.push(`${req.method ?? "GET"} ${UPSTREAM_WS_PATH} HTTP/${req.httpVersion}`);
-    lines.push(`host: ${opts.upstreamHost}:${opts.upstreamPort}`);
-    for (const [name, value] of Object.entries(req.headers)) {
-      if (name === "host") continue;
-      if (HOP_BY_HOP2.has(name)) continue;
-      if (value == null) continue;
-      if (Array.isArray(value)) {
-        for (const v of value) lines.push(`${name}: ${v}`);
-      } else {
-        lines.push(`${name}: ${value}`);
-      }
-    }
-    const upgradeHeader = headerString2(req.headers.upgrade);
-    const connectionHeader = headerString2(req.headers.connection);
-    if (upgradeHeader) lines.push(`upgrade: ${upgradeHeader}`);
-    if (connectionHeader) lines.push(`connection: ${connectionHeader}`);
-    upstream.write(lines.join("\r\n") + "\r\n\r\n");
-    if (head && head.length > 0) upstream.write(head);
-    const logChunk = (dir, bytes) => {
-      const now = opts.now();
-      if (dir === "client\u2192upstream") {
-        chunkCountClient += 1;
-        const sinceLastMs = lastChunkLogAtClient === 0 ? 0 : now - lastChunkLogAtClient;
-        if (chunkCountClient <= CHUNK_UNTHROTTLED_COUNT || sinceLastMs >= CHUNK_THROTTLE_MS) {
-          ttydLog("ttyd-proxy-chunk", { corrId, dir, bytes, sinceLastMs });
-          lastChunkLogAtClient = now;
-        }
-      } else {
-        chunkCountUpstream += 1;
-        const sinceLastMs = lastChunkLogAtUpstream === 0 ? 0 : now - lastChunkLogAtUpstream;
-        if (chunkCountUpstream <= CHUNK_UNTHROTTLED_COUNT || sinceLastMs >= CHUNK_THROTTLE_MS) {
-          ttydLog("ttyd-proxy-chunk", { corrId, dir, bytes, sinceLastMs });
-          lastChunkLogAtUpstream = now;
-        }
-      }
-      lastActivityAt = now;
-    };
-    clientSocket.on("data", (chunk) => {
-      bytesClientToUpstream += chunk.length;
-      logChunk("client\u2192upstream", chunk.length);
-    });
-    upstream.on("data", (chunk) => {
-      bytesUpstreamToClient += chunk.length;
-      logChunk("upstream\u2192client", chunk.length);
-    });
-    clientSocket.pipe(upstream);
-    upstream.pipe(clientSocket);
-    scheduleFlow(FLOW_ACTIVE_INTERVAL_MS);
-    clientSocket.once("close", (hadError) => {
-      finish("client", hadError ? "error" : "normal");
-    });
-    upstream.once("close", (hadError) => {
-      finish("upstream", hadError ? "error" : "normal");
-    });
-    clientSocket.once("error", (err) => {
-      ttydLog("ttyd-proxy-error", { corrId, side: "client", err: err.message });
-      finish("client", "error");
-    });
-    upstream.once("error", (err) => {
-      ttydLog("ttyd-proxy-error", { corrId, side: "upstream", err: err.message });
-      finish("upstream", "error");
-    });
-  });
-  upstream.once("timeout", () => {
-    if (proxyOpened) return;
-    ttydLog("ttyd-proxy-error", {
-      corrId,
-      side: "upstream-connect",
-      err: "timeout",
-      timeout_ms: UPSTREAM_TIMEOUT_MS2
-    });
-    writeStatusAndDestroy2(clientSocket, 504, "Gateway Timeout");
-    upstream.destroy();
-  });
-  upstream.once("error", (err) => {
-    if (proxyOpened) return;
-    ttydLog("ttyd-proxy-error", {
-      corrId,
-      side: "upstream-connect",
-      err: err.message
-    });
-    writeStatusAndDestroy2(clientSocket, 502, "Bad Gateway");
-    upstream.destroy();
-  });
-}
-function parseQueryParam2(query, key) {
-  if (!query) return null;
-  for (const pair of query.split("&")) {
-    const eq = pair.indexOf("=");
-    const k = eq === -1 ? pair : pair.slice(0, eq);
-    if (k !== key) continue;
-    const v = eq === -1 ? "" : pair.slice(eq + 1);
-    try {
-      return decodeURIComponent(v);
-    } catch {
-      return null;
-    }
-  }
-  return null;
-}
-function headerString2(value) {
-  if (value == null) return void 0;
-  return Array.isArray(value) ? value[0] : value;
-}
-function parseOriginHost2(origin) {
-  if (!origin) return null;
-  try {
-    return new URL(origin).hostname;
-  } catch {
-    return null;
-  }
-}
-function writeStatusAndDestroy2(socket, status, statusText) {
-  try {
-    socket.write(
-      `HTTP/1.1 ${status} ${statusText}\r
-Connection: close\r
-Content-Length: 0\r
-\r
-`
-    );
-  } catch {
-  }
-  socket.destroy();
-}
-
 // server/edge.ts
 var PLATFORM_ROOT = process.env.MAXY_PLATFORM_ROOT || "";
 var BRAND_JSON_PATH = PLATFORM_ROOT ? join(PLATFORM_ROOT, "config", "brand.json") : "";
@@ -665,9 +312,7 @@ var UPSTREAM_HOST = process.env.MAXY_UI_HOST ?? "127.0.0.1";
 var UPSTREAM_PORT = parseInt(process.env.MAXY_UI_PORT ?? "19199", 10);
 var WEBSOCKIFY_HOST = process.env.WEBSOCKIFY_HOST ?? "127.0.0.1";
 var WEBSOCKIFY_PORT = parseInt(process.env.WEBSOCKIFY_PORT ?? "6080", 10);
-var TTYD_HOST = process.env.TTYD_HOST ?? "127.0.0.1";
-var TTYD_PORT = parseInt(process.env.TTYD_PORT ?? "7681", 10);
-var HOP_BY_HOP3 = /* @__PURE__ */ new Set([
+var HOP_BY_HOP2 = /* @__PURE__ */ new Set([
   "connection",
   "keep-alive",
   "proxy-authenticate",
@@ -681,7 +326,7 @@ function forwardHttp(clientReq, clientRes) {
   const headers = {};
   for (const [name, value] of Object.entries(clientReq.headers)) {
     if (value == null) continue;
-    if (HOP_BY_HOP3.has(name)) continue;
+    if (HOP_BY_HOP2.has(name)) continue;
     headers[name] = value;
   }
   const existingXff = headers["x-forwarded-for"];
@@ -711,7 +356,7 @@ function forwardHttp(clientReq, clientRes) {
   clientReq.pipe(upstream);
 }
 function forwardUpgrade(req, clientSocket, head) {
-  const upstream = createConnection3({ host: UPSTREAM_HOST, port: UPSTREAM_PORT });
+  const upstream = createConnection2({ host: UPSTREAM_HOST, port: UPSTREAM_PORT });
   upstream.setTimeout(5e3);
   upstream.once("connect", () => {
     upstream.setTimeout(0);
@@ -720,7 +365,7 @@ function forwardUpgrade(req, clientSocket, head) {
     lines.push(`host: ${UPSTREAM_HOST}:${UPSTREAM_PORT}`);
     for (const [name, value] of Object.entries(req.headers)) {
       if (name === "host") continue;
-      if (HOP_BY_HOP3.has(name)) continue;
+      if (HOP_BY_HOP2.has(name)) continue;
       if (value == null) continue;
       if (Array.isArray(value)) {
         for (const v of value) lines.push(`${name}: ${v}`);
@@ -771,22 +416,15 @@ attachVncWsProxy(server, {
   upstreamHost: WEBSOCKIFY_HOST,
   upstreamPort: WEBSOCKIFY_PORT
 });
-attachTtydWsProxy(server, {
-  isPublicHost,
-  upstreamHost: TTYD_HOST,
-  upstreamPort: TTYD_PORT
-});
 server.on("upgrade", (req, socket, head) => {
   const url = req.url ?? "";
   const qsIndex = url.indexOf("?");
   const pathname = qsIndex === -1 ? url : url.slice(0, qsIndex);
   if (pathname === "/websockify") return;
-  if (pathname === "/ttyd") return;
   forwardUpgrade(req, socket, head);
 });
 server.listen(EDGE_PORT, EDGE_HOSTNAME, () => {
   console.log(`[edge] listening on http://${EDGE_HOSTNAME}:${EDGE_PORT}`);
   console.log(`[edge] /websockify \u2192 ${WEBSOCKIFY_HOST}:${WEBSOCKIFY_PORT}`);
-  console.log(`[edge] /ttyd       \u2192 ${TTYD_HOST}:${TTYD_PORT}`);
   console.log(`[edge] everything else \u2192 ${UPSTREAM_HOST}:${UPSTREAM_PORT}`);
 });