@sma1lboy/kobe 0.7.22 → 0.7.23

package/dist/cli/index.js

@@ -90,7 +90,7 @@ var init_package = __esm(() => {
   package_default = {
     $schema: "https://json.schemastore.org/package.json",
     name: "@sma1lboy/kobe",
-    version: "0.7.22",
+    version: "0.7.23",
     description: "TUI orchestrator for Claude Code (codename)",
     type: "module",
     packageManager: "bun@1.3.13",
@@ -13256,6 +13256,62 @@ async function handleDiffRequest(req, url) {
 }
 var GIT_TIMEOUT_MS = 15000, UNTRACKED_DIFF_CONCURRENCY = 8;
 
+// src/web/history.ts
+import { isAbsolute } from "path";
+function isSafeVendor(value) {
+  return typeof value === "string" && value.length > 0 && /^[A-Za-z0-9_-]+$/.test(value);
+}
+function isSafeSessionId(value) {
+  return typeof value === "string" && value.length > 0 && /^[A-Za-z0-9._-]+$/.test(value) && !value.includes("..");
+}
+async function handleSessions(url) {
+  const worktreePath = url.searchParams.get("worktreePath");
+  const vendor = url.searchParams.get("vendor") ?? "claude";
+  if (!worktreePath || !isAbsolute(worktreePath)) {
+    return Response.json({ error: "worktreePath must be an absolute path" }, { status: 400 });
+  }
+  if (!isSafeVendor(vendor)) {
+    return Response.json({ error: "invalid vendor" }, { status: 400 });
+  }
+  try {
+    const reader = engineEntry(vendor).history;
+    const [sessions, latestMtime] = await Promise.all([
+      reader.listSessionIdsForWorktree(worktreePath),
+      reader.latestTranscriptMtimeForWorktree(worktreePath)
+    ]);
+    return Response.json({ sessions, latestMtime });
+  } catch (err) {
+    return Response.json({ error: err instanceof Error ? err.message : String(err) }, { status: 500 });
+  }
+}
+async function handleMessages(url) {
+  const vendor = url.searchParams.get("vendor") ?? "claude";
+  const sessionId = url.searchParams.get("sessionId");
+  if (!isSafeVendor(vendor)) {
+    return Response.json({ error: "invalid vendor" }, { status: 400 });
+  }
+  if (!isSafeSessionId(sessionId)) {
+    return Response.json({ error: "invalid sessionId" }, { status: 400 });
+  }
+  try {
+    const messages = await engineEntry(vendor).history.readHistory(sessionId);
+    return Response.json({ messages });
+  } catch (err) {
+    return Response.json({ error: err instanceof Error ? err.message : String(err) }, { status: 500 });
+  }
+}
+async function handleHistoryRequest(req, url) {
+  if (url.pathname !== SESSIONS_ROUTE && url.pathname !== MESSAGES_ROUTE)
+    return null;
+  if (req.method !== "GET")
+    return Response.json({ error: "method not allowed" }, { status: 405 });
+  return url.pathname === SESSIONS_ROUTE ? handleSessions(url) : handleMessages(url);
+}
+var SESSIONS_ROUTE = "/api/history/sessions", MESSAGES_ROUTE = "/api/history/messages";
+var init_history4 = __esm(() => {
+  init_registry();
+});
+
 // src/web/notes.ts
 import { mkdir as mkdir7, readFile as readFile8, writeFile as writeFile5 } from "fs/promises";
 import { join as join11 } from "path";
@@ -13321,6 +13377,89 @@ var init_notes = __esm(() => {
   init_env();
 });
 
+// src/web/themes.ts
+function resolveHex(themeJson, value, chain = []) {
+  if (value === undefined)
+    return null;
+  if (typeof value !== "string")
+    return resolveHex(themeJson, value.dark, chain);
+  if (value === "transparent" || value === "none")
+    return null;
+  if (value.startsWith("#"))
+    return value;
+  if (chain.includes(value))
+    return null;
+  const next = themeJson.defs?.[value] ?? themeJson.theme[value];
+  return resolveHex(themeJson, next, [...chain, value]);
+}
+function clampByte(n) {
+  return Math.max(0, Math.min(255, Math.round(n)));
+}
+function mix(a, b, t) {
+  const pa = Number.parseInt(a.slice(1), 16);
+  const pb = Number.parseInt(b.slice(1), 16);
+  const ch = (p, shift) => p >> shift & 255;
+  const out = clampByte(ch(pa, 16) + (ch(pb, 16) - ch(pa, 16)) * t) << 16 | clampByte(ch(pa, 8) + (ch(pb, 8) - ch(pa, 8)) * t) << 8 | clampByte(ch(pa, 0) + (ch(pb, 0) - ch(pa, 0)) * t);
+  return `#${out.toString(16).padStart(6, "0")}`;
+}
+function toWebPalette(themeJson) {
+  const slot = (name) => resolveHex(themeJson, themeJson.theme[name]);
+  const bg = slot("background");
+  const fg = slot("text");
+  if (!bg || !fg)
+    return null;
+  const muted = slot("textMuted") ?? mix(fg, bg, 0.35);
+  const primary = slot("primary") ?? fg;
+  const line = slot("border") ?? mix(fg, bg, 0.8);
+  return {
+    bg,
+    surface: slot("backgroundPanel") ?? bg,
+    inset: slot("backgroundElement") ?? bg,
+    menu: slot("backgroundMenu") ?? slot("backgroundElement") ?? bg,
+    line,
+    "line-subtle": slot("borderSubtle") ?? line,
+    "line-active": slot("borderActive") ?? mix(line, fg, 0.3),
+    fg,
+    muted,
+    subtle: mix(muted, bg, 0.35),
+    primary,
+    "primary-hover": mix(primary, fg, 0.35),
+    "kobe-orange": primary,
+    "kobe-green": slot("success") ?? fg,
+    "kobe-blue": slot("info") ?? fg,
+    "kobe-red": slot("error") ?? fg,
+    "kobe-yellow": slot("warning") ?? fg,
+    "kobe-violet": slot("secondary") ?? primary
+  };
+}
+function handleThemesRequest(req, url) {
+  if (url.pathname !== THEMES_ROUTE)
+    return null;
+  if (req.method !== "GET")
+    return Response.json({ error: "method not allowed" }, { status: 405 });
+  return Response.json({ themes: WEB_THEMES });
+}
+var THEME_JSONS, WEB_THEMES, THEMES_ROUTE = "/api/themes";
+var init_themes = __esm(() => {
+  init_claude();
+  init_conductor();
+  init_dracula();
+  init_nord();
+  init_opencode();
+  init_osaka_jade();
+  init_tokyonight();
+  THEME_JSONS = {
+    claude: claude_default,
+    conductor: conductor_default,
+    dracula: dracula_default,
+    nord: nord_default,
+    opencode: opencode_default,
+    "osaka-jade": osaka_jade_default,
+    tokyonight: tokyonight_default
+  };
+  WEB_THEMES = Object.fromEntries(Object.entries(THEME_JSONS).map(([name, json]) => [name, toWebPalette(json)]).filter((entry) => entry[1] !== null));
+});
+
 // ../kobe-web/server/spa-channels.ts
 var SPA_CHANNELS, SPA_CHANNEL_SET;
 var init_spa_channels = __esm(() => {
@@ -13328,7 +13467,10 @@ var init_spa_channels = __esm(() => {
     "task.snapshot",
     "active-task",
     "engine-state",
-    "update"
+    "update",
+    "task.jobs",
+    "worktree.changes",
+    "ui-prefs"
   ];
   SPA_CHANNEL_SET = new Set(SPA_CHANNELS);
 });
@@ -13349,6 +13491,9 @@ class DaemonLink {
   activeTaskId = null;
   engineStates = {};
   update = null;
+  jobs = {};
+  worktreeChanges = {};
+  uiPrefs = null;
   async start() {
     await this.connectOnce(true);
   }
@@ -13358,6 +13503,9 @@ class DaemonLink {
       activeTaskId: this.activeTaskId,
       engineStates: this.engineStates,
       update: this.update,
+      jobs: this.jobs,
+      worktreeChanges: this.worktreeChanges,
+      uiPrefs: this.uiPrefs,
       connected: this.connected
     };
   }
@@ -13399,6 +13547,7 @@ class DaemonLink {
       if (hello.tasks)
         this.tasks = hello.tasks;
       this.engineStates = {};
+      this.jobs = {};
       client.on("*", (frame) => this.onFrame(frame.name, frame.payload));
       client.onLifecycle("close", () => this.onDrop(client));
       await client.subscribe({ role: "gui", channels: SPA_CHANNELS });
@@ -13432,9 +13581,16 @@ class DaemonLink {
   }
   onFrame(name, payload) {
     switch (name) {
-      case "task.snapshot":
-        this.tasks = payload.tasks;
+      case "task.snapshot": {
+        const tasks = payload.tasks;
+        this.tasks = tasks;
+        const live = new Set(tasks.map((t) => t.id));
+        const kept = Object.entries(this.engineStates).filter(([id]) => live.has(id));
+        if (kept.length !== Object.keys(this.engineStates).length) {
+          this.engineStates = Object.fromEntries(kept);
+        }
         break;
+      }
       case "active-task":
         this.activeTaskId = payload.taskId;
         break;
@@ -13446,6 +13602,22 @@ class DaemonLink {
       case "update":
         this.update = payload.info;
         break;
+      case "task.jobs": {
+        const job = payload;
+        if (job.phase === "running") {
+          this.jobs = { ...this.jobs, [job.taskId]: job };
+        } else {
+          const { [job.taskId]: _done, ...rest } = this.jobs;
+          this.jobs = rest;
+        }
+        break;
+      }
+      case "worktree.changes":
+        this.worktreeChanges = payload.changes;
+        break;
+      case "ui-prefs":
+        this.uiPrefs = payload;
+        break;
       case "daemon.stopping":
         return;
       default:
@@ -13474,6 +13646,31 @@ var init_daemon_link = __esm(() => {
   init_spa_channels();
 });
 
+// ../kobe-web/server/rpc-allowlist.ts
+var WEB_RPC_ALLOWLIST, WEB_RPC_ALLOWSET;
+var init_rpc_allowlist = __esm(() => {
+  WEB_RPC_ALLOWLIST = [
+    "daemon.status",
+    "task.list",
+    "task.get",
+    "task.create",
+    "task.archive",
+    "task.rename",
+    "task.setBranch",
+    "task.setVendor",
+    "task.delete",
+    "task.pin",
+    "task.move",
+    "task.status",
+    "task.ensureMain",
+    "task.ensureWorktree",
+    "task.setActive",
+    "worktree.discoverAdoptable",
+    "worktree.adopt"
+  ];
+  WEB_RPC_ALLOWSET = new Set(WEB_RPC_ALLOWLIST);
+});
+
 // ../kobe-web/server/session.ts
 async function getTask2(link, taskId) {
   const { task } = await link.request("task.get", { taskId });
@@ -13524,9 +13721,15 @@ async function terminalSpec(link, taskId) {
   const shell = process.env.SHELL?.trim() || "/bin/zsh";
   return { cwd: worktreePath, command: [shell, "-il"] };
 }
+async function tearDownTaskSession(taskId) {
+  const session = tmuxSessionName(taskId);
+  await switchClientBeforeKill(session).catch(() => {});
+  await killSession(session).catch(() => {});
+}
 var init_session = __esm(() => {
   init_interactive_command();
   init_repo_init();
+  init_client2();
   init_tmux();
 });
 
@@ -13570,20 +13773,35 @@ data: ${JSON.stringify(data)}
     }
   });
 }
-async function rpcResponse(req, link) {
+async function rpcResponse(req, link, tearDown) {
   try {
     const { name, payload } = await req.json();
     if (!name)
       return Response.json({ error: "missing rpc name" }, { status: 400 });
-    if (name === "hello" || name === "subscribe" || name === "daemon.stop") {
-      throw new Error(`rpc ${name} is not exposed to the web UI`);
+    if (!WEB_RPC_ALLOWSET.has(name)) {
+      return Response.json({ error: `rpc ${name} is not exposed to the web UI` }, { status: 403 });
     }
     const result = await link.request(name, payload);
+    const taskId = payload?.taskId;
+    if (typeof taskId === "string") {
+      const archiving = name === "task.archive" && payload.archived !== false;
+      if (name === "task.delete" || archiving)
+        tearDown(taskId);
+    }
     return Response.json({ result });
   } catch (err) {
     return Response.json({ error: err instanceof Error ? err.message : String(err) }, { status: 500 });
   }
 }
+async function enginesResponse() {
+  try {
+    const ids = await availableEngineIds();
+    const engines = ids.map((id) => ({ id, label: engineDisplayName(id) }));
+    return Response.json({ engines: engines.length > 0 ? engines : [{ id: "claude", label: "Claude" }] });
+  } catch (err) {
+    return Response.json({ error: err instanceof Error ? err.message : String(err) }, { status: 500 });
+  }
+}
 async function sessionResponse(req, link) {
   try {
     const { taskId } = await req.json();
@@ -13604,6 +13822,49 @@ async function specResponse(url, link, spec) {
     return Response.json({ error: err instanceof Error ? err.message : String(err) }, { status: 500 });
   }
 }
+function createRequestHandler(deps) {
+  const { link, sseSends, staticDir } = deps;
+  const tearDown = deps.tearDownSession ?? ((taskId) => void tearDownTaskSession(taskId));
+  return async function handle(req) {
+    const url = new URL(req.url);
+    if (url.pathname === WEB_HEALTH_PATH)
+      return new Response(WEB_HEALTH_MARKER);
+    if (url.pathname === "/events") {
+      return sseResponse((send2) => {
+        send2("snapshot", link.snapshot());
+        sseSends.add(send2);
+        return () => {
+          sseSends.delete(send2);
+        };
+      });
+    }
+    if (url.pathname === "/api/rpc" && req.method === "POST")
+      return rpcResponse(req, link, tearDown);
+    if (url.pathname === "/api/session" && req.method === "POST")
+      return sessionResponse(req, link);
+    if (url.pathname === "/api/engine-spec" && req.method === "GET")
+      return specResponse(url, link, engineSpec);
+    if (url.pathname === "/api/terminal-spec" && req.method === "GET")
+      return specResponse(url, link, terminalSpec);
+    if (url.pathname === "/api/engines" && req.method === "GET")
+      return enginesResponse();
+    const notes = await handleNotesRequest(req, url);
+    if (notes)
+      return notes;
+    const diff = await handleDiffRequest(req, url);
+    if (diff)
+      return diff;
+    const history = await handleHistoryRequest(req, url);
+    if (history)
+      return history;
+    const themes = handleThemesRequest(req, url);
+    if (themes)
+      return themes;
+    if (staticDir)
+      return staticResponse(url.pathname, staticDir);
+    return new Response("not found", { status: 404 });
+  };
+}
 async function staticResponse(pathname, staticDir) {
   const rel = pathname === "/" ? "/index.html" : pathname;
   const resolved = normalize2(join12(staticDir, rel));
@@ -13670,41 +13931,9 @@ async function createBridgeServer(opts = {}) {
     for (const send2 of sseSends)
       send2("snapshot", link.snapshot());
   });
-  const server = Bun.serve({
-    port,
-    idleTimeout: 0,
-    async fetch(req) {
-      const url = new URL(req.url);
-      if (url.pathname === WEB_HEALTH_PATH)
-        return new Response(WEB_HEALTH_MARKER);
-      if (url.pathname === "/events") {
-        return sseResponse((send2) => {
-          send2("snapshot", link.snapshot());
-          sseSends.add(send2);
-          return () => {
-            sseSends.delete(send2);
-          };
-        });
-      }
-      if (url.pathname === "/api/rpc" && req.method === "POST")
-        return rpcResponse(req, link);
-      if (url.pathname === "/api/session" && req.method === "POST")
-        return sessionResponse(req, link);
-      if (url.pathname === "/api/engine-spec" && req.method === "GET")
-        return specResponse(url, link, engineSpec);
-      if (url.pathname === "/api/terminal-spec" && req.method === "GET")
-        return specResponse(url, link, terminalSpec);
-      const notes = await handleNotesRequest(req, url);
-      if (notes)
-        return notes;
-      const diff = await handleDiffRequest(req, url);
-      if (diff)
-        return diff;
-      if (staticDir)
-        return staticResponse(url.pathname, staticDir);
-      return new Response("not found", { status: 404 });
-    }
-  });
+  const handle = createRequestHandler({ link, sseSends, staticDir });
+  const hostname = process.env.KOBE_WEB_HOST?.trim() || "127.0.0.1";
+  const server = Bun.serve({ port, hostname, idleTimeout: 0, fetch: handle });
   return {
     port: server.port ?? port,
     close() {
@@ -13715,8 +13944,13 @@ async function createBridgeServer(opts = {}) {
 }
 var WEB_HEALTH_MARKER = "kobe-web", WEB_HEALTH_PATH = "/__kobe_web";
 var init_bridge = __esm(() => {
+  init_account_detect();
+  init_interactive_command();
+  init_history4();
   init_notes();
+  init_themes();
   init_daemon_link();
+  init_rpc_allowlist();
   init_session();
 });
 
@@ -13731,8 +13965,13 @@ __export(exports_web_cmd, {
   runWebSubcommand: () => runWebSubcommand
 });
 import { existsSync as existsSync12 } from "fs";
+import { homedir as homedir17 } from "os";
 import { resolve as resolve6 } from "path";
 import { fileURLToPath as fileURLToPath3 } from "url";
+function homeLabel() {
+  const explicit = process.env.KOBE_HOME_DIR?.trim();
+  return explicit ? `sandbox: ${explicit}` : `${homedir17()}/.kobe (production)`;
+}
 function resolveStaticDir() {
   const here = fileURLToPath3(import.meta.url);
   const candidates = [
@@ -13850,10 +14089,14 @@ async function runWebSubcommand(args) {
     };
     if (bridgeOnly) {
       process.stdout.write(`kobe web bridge listening on http://localhost:${bridge.port} (routes only)
+`);
+      process.stdout.write(`  home: ${homeLabel()}
 `);
     } else {
       pty = await startPtyServer({ webPort: bridge.port, takeover });
       process.stdout.write(`kobe web \u2192 http://localhost:${bridge.port}
+`);
+      process.stdout.write(`  home: ${homeLabel()}
 `);
       if (!pty) {
         process.stderr.write(`kobe web: PTY server not found; terminal tabs will be unavailable
@@ -14007,7 +14250,7 @@ __export(exports_hook_cmd, {
   parseWorktreeAddPath: () => parseWorktreeAddPath,
   ensureGlobalKobeHooks: () => ensureGlobalKobeHooks
 });
-import { homedir as homedir17 } from "os";
+import { homedir as homedir18 } from "os";
 import { join as join13, resolve as resolve7 } from "path";
 async function readTextWithTimeout(read, timeoutMs = STDIN_READ_TIMEOUT_MS) {
   let raceTimer;
@@ -14139,7 +14382,7 @@ function activityHookAdapters() {
   return ALL_VENDORS.map((v) => createEngineHookAdapter(v)).filter((a) => a.supportsHooks());
 }
 function globalSettingsPath() {
-  return join13(homedir17(), ".claude", "settings.json");
+  return join13(homedir18(), ".claude", "settings.json");
 }
 function persistedSyncPath(stored) {
   if (!stored || stored === "off")
@@ -19074,7 +19317,7 @@ var init_pulse = () => {};
 // src/tui/lib/sound.ts
 import { existsSync as existsSync14, mkdirSync as mkdirSync6 } from "fs";
 import { tmpdir as tmpdir2 } from "os";
-import { basename as basename6, isAbsolute, join as join15, resolve as resolve8 } from "path";
+import { basename as basename6, isAbsolute as isAbsolute2, join as join15, resolve as resolve8 } from "path";
 function args(player, file, volume) {
   if (player === "ffplay")
     return [player, "-autoexit", "-nodisp", "-af", `volume=${volume}`, file];
@@ -19132,7 +19375,7 @@ function pulse(volume = 0.4) {
 var pulseAsset, DIR, PLAYERS, cachedPlayer, cachedPath;
 var init_sound = __esm(() => {
   init_pulse();
-  pulseAsset = isAbsolute(pulse_default) ? pulse_default : resolve8(import.meta.dir, pulse_default);
+  pulseAsset = isAbsolute2(pulse_default) ? pulse_default : resolve8(import.meta.dir, pulse_default);
   DIR = join15(tmpdir2(), "kobe-sfx");
   PLAYERS = [
     "ffplay",
@@ -22586,9 +22829,9 @@ var init_task_actions = __esm(() => {
 // src/tui/lib/worktree-opener.ts
 import { spawn as spawn5 } from "child_process";
 import { existsSync as existsSync15 } from "fs";
-import { basename as basename7, delimiter, isAbsolute as isAbsolute2, join as join17 } from "path";
+import { basename as basename7, delimiter, isAbsolute as isAbsolute3, join as join17 } from "path";
 function executableOnPath(command, env, exists) {
-  if (isAbsolute2(command))
+  if (isAbsolute3(command))
     return exists(command);
   const pathEnv = env.PATH ?? "";
   for (const dir of pathEnv.split(delimiter)) {