@threadbase-sh/streamer 1.24.7 → 1.26.0

package/dist/cli.cjs

@@ -1530,6 +1530,15 @@ function loadPublicUrl() {
   }
   return void 0;
 }
+function loadBrowserCors() {
+  try {
+    const content = (0, import_fs.readFileSync)(configFile(), "utf-8");
+    const match2 = content.match(/browser_cors:\s*(.+)/);
+    if (match2?.[1]) return match2[1].trim();
+  } catch {
+  }
+  return void 0;
+}
 function loadCacheDir() {
   try {
     const content = (0, import_fs.readFileSync)(configFile(), "utf-8");
@@ -1548,6 +1557,42 @@ function loadTailSize() {
   }
   return void 0;
 }
+function loadDefaultPermissionMode() {
+  try {
+    const content = (0, import_fs.readFileSync)(configFile(), "utf-8");
+    const match2 = content.match(/default_permission_mode:\s*(\S+)/);
+    const value = match2?.[1]?.trim();
+    if (value === "acceptEdits" || value === "manual") return value;
+  } catch {
+  }
+  return void 0;
+}
+function setDefaultPermissionMode(mode) {
+  const file2 = configFile();
+  (0, import_fs.mkdirSync)(configDir(), { recursive: true });
+  let content = "";
+  try {
+    content = (0, import_fs.readFileSync)(file2, "utf-8");
+  } catch (err) {
+    if (err.code !== "ENOENT") throw err;
+  }
+  const line = `default_permission_mode: ${mode}`;
+  let updated;
+  if (/^default_permission_mode:\s*.+$/m.test(content)) {
+    updated = content.replace(/^default_permission_mode:\s*.+$/m, line);
+  } else if (content.length === 0 || content.endsWith("\n")) {
+    updated = `${content}${line}
+`;
+  } else {
+    updated = `${content}
+${line}
+`;
+  }
+  const tmpFile = `${file2}.tmp`;
+  (0, import_fs.writeFileSync)(tmpFile, updated, { encoding: "utf-8", mode: 384 });
+  (0, import_fs.chmodSync)(tmpFile, 384);
+  (0, import_fs.renameSync)(tmpFile, file2);
+}
 function validatePublicUrl(raw2) {
   let parsed;
   try {
@@ -123699,6 +123744,68 @@ var init_check_sqlite_abi = __esm({
   }
 });
 
+// src/lifecycle/prompt.ts
+var prompt_exports = {};
+__export(prompt_exports, {
+  interactivePermissionModePrompt: () => interactivePermissionModePrompt,
+  interactivePrompt: () => interactivePrompt
+});
+var import_node_process2, import_promises18, interactivePrompt, interactivePermissionModePrompt;
+var init_prompt = __esm({
+  "src/lifecycle/prompt.ts"() {
+    "use strict";
+    import_node_process2 = require("process");
+    import_promises18 = require("readline/promises");
+    interactivePrompt = async ({ prodPort, suggestedAltPort, prodActive }) => {
+      const rl = (0, import_promises18.createInterface)({ input: import_node_process2.stdin, output: import_node_process2.stdout });
+      try {
+        if (!prodActive) {
+          import_node_process2.stdout.write(
+            `
+Port ${prodPort} is already in use by another process.
+Running dev on port ${suggestedAltPort} instead.
+`
+          );
+          const rememberAns2 = (await rl.question("Remember this choice for this repo? [y/N]: ")).trim().toLowerCase();
+          return {
+            choice: "use-port",
+            port: suggestedAltPort,
+            remember: rememberAns2 === "y" || rememberAns2 === "yes"
+          };
+        }
+        import_node_process2.stdout.write(
+          `
+The supervised prod streamer is already holding port ${prodPort}.
+  [r] Stop prod and take port ${prodPort}
+  [p] Run dev on port ${suggestedAltPort} instead
+`
+        );
+        const choiceAns = (await rl.question("Choice [r/p]: ")).trim().toLowerCase();
+        const rememberAns = (await rl.question("Remember this choice for this repo? [y/N]: ")).trim().toLowerCase();
+        const remember = rememberAns === "y" || rememberAns === "yes";
+        if (choiceAns === "r") {
+          return { choice: "replace-prod", remember };
+        }
+        return { choice: "use-port", port: suggestedAltPort, remember };
+      } finally {
+        rl.close();
+      }
+    };
+    interactivePermissionModePrompt = async () => {
+      const rl = (0, import_promises18.createInterface)({ input: import_node_process2.stdin, output: import_node_process2.stdout });
+      try {
+        import_node_process2.stdout.write(
+          "\nWhich permission mode should spawned Claude Code sessions use?\n  [a] acceptEdits \u2014 auto-approve file edits, still prompt for shell commands (default)\n  [m] manual \u2014 prompt for every edit and command\n"
+        );
+        const ans = (await rl.question("Choice [a/m] (default a): ")).trim().toLowerCase();
+        return ans === "m" ? "manual" : "acceptEdits";
+      } finally {
+        rl.close();
+      }
+    };
+  }
+});
+
 // src/lifecycle/prefs.ts
 function readPrefs() {
   const path2 = prefsPath();
@@ -123781,7 +123888,7 @@ async function resolveDevPlan(opts) {
   }
   const prodActive = opts.isProdActive();
   const portTaken = opts.portInUse(opts.requestedPort);
-  if (!prodActive && !portTaken) {
+  if (!portTaken) {
     return { kind: "use-port", port: opts.requestedPort };
   }
   if (!opts.forget) {
@@ -123796,7 +123903,12 @@ async function resolveDevPlan(opts) {
     }
   }
   const suggested = await opts.findFreePort(opts.requestedPort + 1);
-  const answer = await opts.prompt({ prodPort: opts.requestedPort, suggestedAltPort: suggested });
+  const answer = await opts.prompt({
+    prodPort: opts.requestedPort,
+    suggestedAltPort: suggested,
+    prodActive,
+    portTaken
+  });
   if (answer.remember && opts.repoToplevel) {
     if (answer.choice === "replace-prod") {
       writePrefForRepo(opts.repoToplevel, { choice: "replace-prod" });
@@ -123902,41 +124014,6 @@ var init_dev_takeover = __esm({
   }
 });
 
-// src/lifecycle/prompt.ts
-var prompt_exports = {};
-__export(prompt_exports, {
-  interactivePrompt: () => interactivePrompt
-});
-var import_node_process2, import_promises18, interactivePrompt;
-var init_prompt = __esm({
-  "src/lifecycle/prompt.ts"() {
-    "use strict";
-    import_node_process2 = require("process");
-    import_promises18 = require("readline/promises");
-    interactivePrompt = async ({ prodPort, suggestedAltPort }) => {
-      const rl = (0, import_promises18.createInterface)({ input: import_node_process2.stdin, output: import_node_process2.stdout });
-      try {
-        import_node_process2.stdout.write(
-          `
-Prod streamer is running on port ${prodPort}.
-  [r] Stop prod and take port ${prodPort}
-  [p] Run dev on port ${suggestedAltPort} instead
-`
-        );
-        const choiceAns = (await rl.question("Choice [r/p]: ")).trim().toLowerCase();
-        const rememberAns = (await rl.question("Remember this choice for this repo? [y/N]: ")).trim().toLowerCase();
-        const remember = rememberAns === "y" || rememberAns === "yes";
-        if (choiceAns === "r") {
-          return { choice: "replace-prod", remember };
-        }
-        return { choice: "use-port", port: suggestedAltPort, remember };
-      } finally {
-        rl.close();
-      }
-    };
-  }
-});
-
 // src/lifecycle/repo.ts
 var repo_exports = {};
 __export(repo_exports, {
@@ -124017,6 +124094,9 @@ var init_setKey = __esm({
   );
 })();
 
+// cli/index.ts
+var import_node_process3 = require("process");
+
 // node_modules/commander/lib/error.js
 var CommanderError = class extends Error {
   /**
@@ -135731,25 +135811,55 @@ var authMiddleware = (deps) => async (c, next) => {
 };
 
 // src/api/middleware/cors.middleware.ts
-var ALLOWED_ORIGINS = /* @__PURE__ */ new Set([
+var DEFAULT_DEV_ORIGINS = [
   "http://localhost:8081",
   "http://localhost:19006",
   "http://localhost:3000"
-]);
-var corsMiddleware = () => async (c, next) => {
-  const origin = c.req.header("origin");
-  const allowedOrigin = origin && ALLOWED_ORIGINS.has(origin) ? origin : null;
-  if (allowedOrigin) {
-    c.res.headers.set("Access-Control-Allow-Origin", allowedOrigin);
-    c.res.headers.set("Vary", "Origin");
-    c.res.headers.set("Access-Control-Allow-Methods", "GET, POST, PATCH, OPTIONS");
-    c.res.headers.set("Access-Control-Allow-Headers", "Authorization, Content-Type, If-None-Match");
-    c.res.headers.set("Access-Control-Expose-Headers", "ETag");
-  }
-  if (c.req.method === "OPTIONS") {
-    return c.newResponse(null, allowedOrigin ? 204 : 403);
-  }
-  await next();
+];
+function resolveAllowedOrigins(raw2) {
+  if (!raw2) return null;
+  const trimmed = raw2.trim();
+  const lower = trimmed.toLowerCase();
+  if (lower === "0" || lower === "false" || lower === "no" || lower === "off" || trimmed === "") {
+    return null;
+  }
+  const origins = new Set(DEFAULT_DEV_ORIGINS);
+  if (!["1", "true", "yes", "on"].includes(lower)) {
+    for (const o of trimmed.split(",")) {
+      const origin = o.trim();
+      if (origin) origins.add(origin);
+    }
+  }
+  return origins;
+}
+var corsMiddleware = (configValue) => {
+  const allowedOrigins = resolveAllowedOrigins(
+    process.env.THREADBASE_ALLOW_BROWSER_CORS ?? configValue
+  );
+  return async (c, next) => {
+    const origin = c.req.header("origin");
+    const allowedOrigin = allowedOrigins && origin && allowedOrigins.has(origin) ? origin : null;
+    if (allowedOrigin) {
+      const raw2 = c.env.outgoing;
+      raw2.setHeader("Access-Control-Allow-Origin", allowedOrigin);
+      raw2.setHeader("Vary", "Origin");
+      raw2.setHeader("Access-Control-Allow-Methods", "GET, POST, PATCH, OPTIONS");
+      raw2.setHeader("Access-Control-Allow-Headers", "Authorization, Content-Type, If-None-Match");
+      raw2.setHeader("Access-Control-Expose-Headers", "ETag");
+      c.res.headers.set("Access-Control-Allow-Origin", allowedOrigin);
+      c.res.headers.set("Vary", "Origin");
+      c.res.headers.set("Access-Control-Allow-Methods", "GET, POST, PATCH, OPTIONS");
+      c.res.headers.set(
+        "Access-Control-Allow-Headers",
+        "Authorization, Content-Type, If-None-Match"
+      );
+      c.res.headers.set("Access-Control-Expose-Headers", "ETag");
+    }
+    if (c.req.method === "OPTIONS") {
+      return c.newResponse(null, allowedOrigin ? 204 : 403);
+    }
+    await next();
+  };
 };
 
 // src/api/middleware/error.middleware.ts
@@ -136246,7 +136356,7 @@ var createHonoApp = (deps, upgradeWebSocket) => {
       event: "http.request"
     });
   });
-  app.use("*", corsMiddleware());
+  app.use("*", corsMiddleware(deps.browserCors));
   app.use("*", authMiddleware(deps));
   app.onError(errorMiddleware);
   app.route("/healthz", createHealthRoutes());
@@ -136542,11 +136652,11 @@ var ConversationCache = class _ConversationCache {
         INSERT INTO conversation_meta
           (id, file_path, project_path, project_name, title, model, account, branch,
            message_count, last_activity, first_message, last_message, preview, updated_at,
-           mtime_ms, file_size, provider)
+           mtime_ms, file_size, provider, scanner_meta_json)
         VALUES
           (@id, @file_path, @project_path, @project_name, @title, @model, @account, @branch,
            @message_count, @last_activity, @first_message, @last_message, @preview, @updated_at,
-           @mtime_ms, @file_size, @provider)
+           @mtime_ms, @file_size, @provider, @scanner_meta_json)
         ON CONFLICT(id) DO UPDATE SET
           file_path     = excluded.file_path,
           project_path  = excluded.project_path,
@@ -136566,7 +136676,8 @@ var ConversationCache = class _ConversationCache {
           updated_at    = excluded.updated_at,
           mtime_ms      = excluded.mtime_ms,
           file_size     = excluded.file_size,
-          provider      = excluded.provider
+          provider      = excluded.provider,
+          scanner_meta_json = excluded.scanner_meta_json
         WHERE conversation_meta.updated_at < excluded.updated_at
       `),
       getTail: db.prepare("SELECT * FROM conversation_tail WHERE conversation_id = ?"),
@@ -136603,6 +136714,27 @@ var ConversationCache = class _ConversationCache {
       allFileStats: db.prepare(
         "SELECT file_path, mtime_ms, file_size FROM conversation_meta WHERE mtime_ms IS NOT NULL AND file_size IS NOT NULL"
       ),
+      allScannerStatCacheRows: db.prepare(
+        "SELECT file_path, mtime_ms, file_size, scanner_meta_json FROM conversation_meta WHERE mtime_ms IS NOT NULL AND file_size IS NOT NULL AND scanner_meta_json IS NOT NULL"
+      ),
+      updateScannerCache: db.prepare(
+        "UPDATE conversation_meta SET mtime_ms = ?, file_size = ?, scanner_meta_json = ? WHERE id = ?"
+      ),
+      getFileMetadata: db.prepare(
+        "SELECT mtime_ms, file_size, is_agent, agent_entrypoints_key FROM conversation_file_metadata WHERE file_path = ?"
+      ),
+      upsertFileMetadata: db.prepare(`
+        INSERT INTO conversation_file_metadata
+          (file_path, mtime_ms, file_size, is_agent, agent_entrypoints_key, updated_at)
+        VALUES
+          (@file_path, @mtime_ms, @file_size, @is_agent, @agent_entrypoints_key, @updated_at)
+        ON CONFLICT(file_path) DO UPDATE SET
+          mtime_ms = excluded.mtime_ms,
+          file_size = excluded.file_size,
+          is_agent = excluded.is_agent,
+          agent_entrypoints_key = excluded.agent_entrypoints_key,
+          updated_at = excluded.updated_at
+      `),
       upsertSessionName: db.prepare(`
         INSERT INTO session_names (session_id, name, updated_at)
         VALUES (?, ?, ?)
@@ -136643,8 +136775,35 @@ var ConversationCache = class _ConversationCache {
   getDatabase() {
     return this.db;
   }
-  getAgentEntrypoints() {
-    return this.agentEntrypoints;
+  agentEntrypointsKey() {
+    return [...this.agentEntrypoints].sort().join(",");
+  }
+  classifyAgentFile(filePath, mtimeMs, fileSize) {
+    if (this.agentEntrypoints.size === 0) return false;
+    const entrypointsKey = this.agentEntrypointsKey();
+    const cached3 = this.stmts.getFileMetadata.get(filePath);
+    if (cached3 && cached3.mtime_ms === mtimeMs && cached3.file_size === fileSize && cached3.agent_entrypoints_key === entrypointsKey) {
+      return cached3.is_agent === 1;
+    }
+    const isAgent = isAgentFile(filePath, this.agentEntrypoints);
+    this.stmts.upsertFileMetadata.run({
+      file_path: filePath,
+      mtime_ms: mtimeMs,
+      file_size: fileSize,
+      is_agent: isAgent ? 1 : 0,
+      agent_entrypoints_key: entrypointsKey,
+      updated_at: Date.now()
+    });
+    return isAgent;
+  }
+  isAgentFileCached(filePath) {
+    let s3;
+    try {
+      s3 = (0, import_fs16.statSync)(filePath);
+    } catch {
+      return false;
+    }
+    return this.classifyAgentFile(filePath, s3.mtimeMs, s3.size);
   }
   static open(dbPath, tailSize = 10, migrationsDir, options) {
     (0, import_fs16.mkdirSync)((0, import_path12.dirname)(dbPath), { recursive: true });
@@ -136820,11 +136979,9 @@ var ConversationCache = class _ConversationCache {
   // in conversation-cache.test.ts).
   upsertFromScannerMeta(metas) {
     const filter = this.filterAgentConversations;
-    const entrypoints = this.agentEntrypoints;
     const upsertedIds = [];
     const run2 = this.db.transaction((items) => {
       for (const m2 of items) {
-        if (filter && isAgentFile(m2.filePath, entrypoints)) continue;
         const id = m2.sessionId || m2.id.split("/").pop()?.replace(/\.jsonl$/, "") || m2.id;
         const lastActivityMs = m2.timestamp ? new Date(m2.timestamp).getTime() : null;
         let mtimeMs = null;
@@ -136836,6 +136993,10 @@ var ConversationCache = class _ConversationCache {
         } catch {
         }
         const seq = ++this.tailSeq;
+        if (filter && mtimeMs !== null && fileSize !== null && this.classifyAgentFile(m2.filePath, mtimeMs, fileSize)) {
+          continue;
+        }
+        const scannerMetaJson = JSON.stringify(m2);
         this.stmts.upsertFull.run({
           id,
           file_path: m2.filePath,
@@ -136853,8 +137014,10 @@ var ConversationCache = class _ConversationCache {
           updated_at: seq,
           mtime_ms: mtimeMs,
           file_size: fileSize,
-          provider: m2.provider ?? CLAUDE_CODE_PROVIDER2
+          provider: m2.provider ?? CLAUDE_CODE_PROVIDER2,
+          scanner_meta_json: scannerMetaJson
         });
+        this.stmts.updateScannerCache.run(mtimeMs, fileSize, scannerMetaJson, id);
         if (this.fileIndexLoaded) this.fileIndex.set(m2.filePath, id);
         upsertedIds.push(id);
       }
@@ -136978,6 +137141,21 @@ var ConversationCache = class _ConversationCache {
     }
     return map2;
   }
+  getScannerStatCache() {
+    const rows = this.stmts.allScannerStatCacheRows.all();
+    const map2 = /* @__PURE__ */ new Map();
+    for (const r of rows) {
+      try {
+        const meta3 = JSON.parse(r.scanner_meta_json);
+        map2.set(r.file_path, {
+          stat: { mtimeMs: r.mtime_ms, size: r.file_size },
+          meta: meta3
+        });
+      } catch {
+      }
+    }
+    return map2;
+  }
   getMetaById(id) {
     const row = this.stmts.getFullById.get(id);
     if (!row) return null;
@@ -138280,6 +138458,37 @@ function detectShellPrompt(lines) {
   return null;
 }
 
+// src/utils/debounce.ts
+function debounce(fn, waitMs) {
+  let timer = null;
+  let lastArgs = null;
+  const run2 = () => {
+    timer = null;
+    if (lastArgs) {
+      const args = lastArgs;
+      lastArgs = null;
+      fn(...args);
+    }
+  };
+  const debounced = (...args) => {
+    lastArgs = args;
+    if (timer) clearTimeout(timer);
+    timer = setTimeout(run2, waitMs);
+  };
+  debounced.cancel = () => {
+    if (timer) clearTimeout(timer);
+    timer = null;
+    lastArgs = null;
+  };
+  debounced.flush = () => {
+    if (timer) {
+      clearTimeout(timer);
+      run2();
+    }
+  };
+  return debounced;
+}
+
 // src/pty-manager.ts
 var OUTPUT_BUFFER_MAX2 = 65536;
 var PTY_COLS2 = 120;
@@ -138287,11 +138496,13 @@ var PTY_ROWS2 = 40;
 var SCREEN_SCROLLBACK2 = 1e3;
 var CLAUDE_PROMPT_MARKERS = ["\u256D", "\u276F"];
 var PROMPT_MARKER_FALLBACK_MS = 1e4;
+var QUIET_DETECT_MS = 500;
 function buildPasteBytes(input) {
   return `\x1B[200~${input}\x1B[201~`;
 }
 var SUBMIT_BYTES2 = "\r";
 var SUBMIT_DELAY_MS = 16;
+var SUBMIT_MAX_WAIT_MS = 500;
 function digestBytes2(s3) {
   const escaped = s3.replace(new RegExp(String.fromCharCode(27), "g"), "\\x1b").replace(/\r/g, "\\r").replace(/\n/g, "\\n").replace(/\t/g, "\\t");
   if (escaped.length <= 200) return escaped;
@@ -138368,6 +138579,10 @@ var PTYManager = class {
   // to a given input or fell silent. Reset on dispose().
   chunkIndex = /* @__PURE__ */ new Map();
   lastChunkAt = /* @__PURE__ */ new Map();
+  // Per-session debounced "went quiet" checker, re-armed on every chunk. Fires
+  // QUIET_DETECT_MS after the last chunk so ready/prompt detection doesn't
+  // wait for another chunk that may never arrive (Claude blocked on input).
+  quietCheckers = /* @__PURE__ */ new Map();
   // In-flight start()/startFresh() calls keyed by sessionId. A second
   // concurrent resume for the same session (double-tap, client retry) awaits
   // the first call's promise instead of spawning a duplicate PTY (CRITICAL #3).
@@ -138383,16 +138598,19 @@ var PTYManager = class {
   }
   // Resume an existing Claude conversation. sessionId is the JSONL UUID.
   //
-  // We use `--permission-mode acceptEdits` rather than `--dangerously-skip-permissions`.
-  // Both suppress file-edit prompts, but in an interactive (TUI) launch the
-  // skip-permissions flag renders a blocking "Bypass Permissions mode" warning
-  // menu on every boot that no known ~/.claude.json flag suppressed (as of
-  // Claude CLI v2.1.x) — the session never reaches a usable prompt, so the
-  // mobile app shows an empty/stuck screen. `acceptEdits` auto-approves file edits
+  // options.permissionMode defaults to `acceptEdits` rather than
+  // `--dangerously-skip-permissions`/`bypassPermissions`. Both suppress
+  // file-edit prompts, but in an interactive (TUI) launch the skip-permissions
+  // flag renders a blocking "Bypass Permissions mode" warning menu on every
+  // boot that no known ~/.claude.json flag suppressed (as of Claude CLI
+  // v2.1.x) — the session never reaches a usable prompt, so the mobile app
+  // shows an empty/stuck screen. `acceptEdits` auto-approves file edits
   // without that warning gate, while still prompting for shell commands.
+  // `manual` (prompt for everything) is the only other mode callers may pass;
+  // `bypassPermissions`/`plan`/`dontAsk`/`auto` are not supported here.
   // (The other first-run gates — onboarding/theme, workspace trust,
   // custom-API-key — are cleared by the seeded ~/.claude.json in
-  // docker/entrypoint.sh.) startFresh() uses the same flag for the same reason.
+  // docker/entrypoint.sh.) startFresh() uses the same default for the same reason.
   async start(sessionId, options) {
     const existing = this.sessions.get(sessionId);
     if (existing) return toPublicSession2(existing);
@@ -138411,7 +138629,7 @@ var PTYManager = class {
       resolveClaudeExe(),
       [
         "--permission-mode",
-        "acceptEdits",
+        options.permissionMode ?? "acceptEdits",
         "--settings",
         '{"spinnerTipsEnabled":false}',
         "--resume",
@@ -138460,7 +138678,7 @@ var PTYManager = class {
     const projectName = options.projectName ?? (0, import_path17.basename)(options.projectPath);
     const args = [
       "--permission-mode",
-      "acceptEdits",
+      options.permissionMode ?? "acceptEdits",
       "--settings",
       '{"spinnerTipsEnabled":false}',
       "--session-id",
@@ -138554,9 +138772,20 @@ var PTYManager = class {
     session.promptCount++;
     return session.promptCount;
   }
-  // Two-step paste-then-submit. Writes the bracketed-paste body, yields the
-  // event loop for SUBMIT_DELAY_MS, then writes \r. See buildPasteBytes() for
-  // why the split matters.
+  // Two-step paste-then-submit. Writes the bracketed-paste body, then waits
+  // for the PTY to go quiet before writing \r. See buildPasteBytes() for why
+  // the split matters.
+  //
+  // The wait is quiescence-based, not a flat delay: a fixed SUBMIT_DELAY_MS
+  // timer (the original fix) still races a TUI that's mid-redraw of its own
+  // output (e.g. re-painting right after posting a question) when the paste
+  // lands — the timer can elapse and fire \r while the TUI is still busy,
+  // and that \r gets absorbed by the redraw instead of submitting (see
+  // 2026-07 session 14dda340: a "Yes" reply was accepted into the input line
+  // but never landed as a submitted JSONL turn). Polling in SUBMIT_DELAY_MS
+  // steps and only submitting once lastChunkAt hasn't advanced for a full
+  // step gives the TUI as many extra ticks as it needs, capped at
+  // SUBMIT_MAX_WAIT_MS so a silent/wedged PTY still gets its \r eventually.
   writeSubmit(sessionId, session, input, path2, promptCount) {
     const pasteBytes = buildPasteBytes(input);
     this.log.info(
@@ -138571,12 +138800,21 @@ var PTYManager = class {
         phase: "paste"
       }
     );
+    const pasteAt = Date.now();
     session.process.write(pasteBytes);
-    setTimeout(() => {
+    const trySubmit = () => {
       const current = this.sessions.get(sessionId);
       if (!current || current !== session) return;
+      const now = Date.now();
+      const lastChunk = this.lastChunkAt.get(sessionId) ?? pasteAt;
+      const quiet = now - lastChunk >= SUBMIT_DELAY_MS;
+      const timedOut = now - pasteAt >= SUBMIT_MAX_WAIT_MS;
+      if (!quiet && !timedOut) {
+        setTimeout(trySubmit, SUBMIT_DELAY_MS);
+        return;
+      }
       this.log.info(
-        `[pty.input.submit] ${sessionId.slice(0, 8)} promptCount=${promptCount} digest=\\r`,
+        `[pty.input.submit] ${sessionId.slice(0, 8)} promptCount=${promptCount} digest=\\r waitedMs=${now - pasteAt} timedOut=${timedOut}`,
         {
           event: "pty.input_write",
           sessionId,
@@ -138584,11 +138822,14 @@ var PTYManager = class {
           byteLen: SUBMIT_BYTES2.length,
           digest: "\\r",
           path: path2,
-          phase: "submit"
+          phase: "submit",
+          waitedMs: now - pasteAt,
+          timedOut
         }
       );
       current.process.write(SUBMIT_BYTES2);
-    }, SUBMIT_DELAY_MS);
+    };
+    setTimeout(trySubmit, SUBMIT_DELAY_MS);
   }
   // Drain any inputs that were sent while the session was still pendingReady,
   // writing them in arrival order now that Claude is at its prompt.
@@ -138637,6 +138878,8 @@ var PTYManager = class {
     this.permissionOpen.delete(sessionId);
     this.lastScreenQuestionKey.delete(sessionId);
     this.shellPromptOpen.delete(sessionId);
+    this.quietCheckers.get(sessionId)?.cancel();
+    this.quietCheckers.delete(sessionId);
     try {
       session.process.kill("SIGINT");
     } catch {
@@ -138696,6 +138939,8 @@ var PTYManager = class {
     this.firstChunkAt.clear();
     this.chunkIndex.clear();
     this.lastChunkAt.clear();
+    for (const quiet of this.quietCheckers.values()) quiet.cancel();
+    this.quietCheckers.clear();
     this.permissionOpen.clear();
     this.lastScreenQuestionKey.clear();
     this.shellPromptOpen.clear();
@@ -138749,6 +138994,12 @@ var PTYManager = class {
         err
       });
     });
+    let quiet = this.quietCheckers.get(sessionId);
+    if (!quiet) {
+      quiet = debounce(() => this.handleQuiet(sessionId), QUIET_DETECT_MS);
+      this.quietCheckers.set(sessionId, quiet);
+    }
+    quiet();
   }
   // Detect permission gates (OSC 777 + scraped options) and AskUserQuestion
   // menus from the rendered screen, firing the additive callbacks. Async because
@@ -138824,6 +139075,24 @@ var PTYManager = class {
       }
     }
   }
+  // Fired QUIET_DETECT_MS after the last PTY chunk. Re-runs the same
+  // ready/prompt detection handleOutput() runs per-chunk, using the last
+  // rendered output — a session blocked on a prompt (or an unmarked boot
+  // screen) may never produce another chunk to trigger detection otherwise.
+  handleQuiet(sessionId) {
+    const session = this.sessions.get(sessionId);
+    if (session?.status !== "running") return;
+    if (this.pendingReady.has(sessionId)) {
+      this.markReady(sessionId, session, "quiet:timeout");
+    }
+    this.detectLivePrompts(sessionId, "", session.lastOutput).catch((err) => {
+      this.log.warn("[pty.prompt_detect] failed", {
+        event: "pty.prompt_detect_failed",
+        sessionId,
+        err
+      });
+    });
+  }
   // Transition a session from "running" to "waiting_input", clear pendingReady,
   // and flush any queued input. Idempotent: callers can invoke at any chunk.
   markReady(sessionId, session, reason) {
@@ -138864,6 +139133,8 @@ var PTYManager = class {
     this.permissionOpen.delete(sessionId);
     this.lastScreenQuestionKey.delete(sessionId);
     this.shellPromptOpen.delete(sessionId);
+    this.quietCheckers.get(sessionId)?.cancel();
+    this.quietCheckers.delete(sessionId);
   }
 };
 function toPublicSession2(s3) {
@@ -141091,7 +141362,7 @@ function pruneAgentConversations(cache) {
       missing += 1;
       continue;
     }
-    if (isAgentFile(row.file_path, cache.getAgentEntrypoints())) {
+    if (cache.isAgentFileCached(row.file_path)) {
       cache.deleteByFilePath(row.file_path);
       pruned += 1;
     }
@@ -141511,37 +141782,6 @@ function computeConversationEtag({
   return `"${digest}"`;
 }
 
-// src/utils/debounce.ts
-function debounce(fn, waitMs) {
-  let timer = null;
-  let lastArgs = null;
-  const run2 = () => {
-    timer = null;
-    if (lastArgs) {
-      const args = lastArgs;
-      lastArgs = null;
-      fn(...args);
-    }
-  };
-  const debounced = (...args) => {
-    lastArgs = args;
-    if (timer) clearTimeout(timer);
-    timer = setTimeout(run2, waitMs);
-  };
-  debounced.cancel = () => {
-    if (timer) clearTimeout(timer);
-    timer = null;
-    lastArgs = null;
-  };
-  debounced.flush = () => {
-    if (timer) {
-      clearTimeout(timer);
-      run2();
-    }
-  };
-  return debounced;
-}
-
 // node_modules/date-fns/constants.js
 var daysInYear = 365.2425;
 var maxTime = Math.pow(10, 8) * 24 * 60 * 60 * 1e3;
@@ -141900,6 +142140,7 @@ var WSHub = class {
 var BROWSE_SYSTEM_PROMPT = (browseRoot) => `You are working within the project boundary: ${browseRoot}. Do not read, write, or execute commands that access files or directories outside this boundary.`;
 var DEFAULT_SYSTEM_PROMPT = "When presenting options or choices to the user, limit the options to at most 3.";
 var DEFAULT_PTY_GRACE_PERIOD_MS = 27e4;
+var START_READY_TIMEOUT_MS = 15e3;
 function parseIncludeAgentsEnv(raw2) {
   if (raw2 === void 0) return false;
   const v3 = raw2.trim().toLowerCase();
@@ -141962,12 +142203,14 @@ var StreamerServer = class {
   disableDb = false;
   browseRoot = null;
   publicUrl = null;
+  browserCors;
   pairTokens = new PairTokenStore();
   exchangeAttempts = /* @__PURE__ */ new Map();
   sessionStartAttempts = /* @__PURE__ */ new Map();
   sessionInputAttempts = /* @__PURE__ */ new Map();
   ptyGracePeriodMs;
   defaultSystemPrompt;
+  defaultPermissionMode;
   // Map of sessionId → grace timer; fires to kill PTY after WS disconnect
   ptyGraceTimers = /* @__PURE__ */ new Map();
   // Map of sessionId → set of subscribed WS clients
@@ -142016,6 +142259,7 @@ var StreamerServer = class {
     this.codexRoots = config2.codexRoots ?? [(0, import_path21.join)((0, import_os10.homedir)(), ".codex", "sessions")];
     this.ptyGracePeriodMs = config2.ptyGracePeriodMs ?? DEFAULT_PTY_GRACE_PERIOD_MS;
     this.defaultSystemPrompt = config2.defaultSystemPrompt ?? DEFAULT_SYSTEM_PROMPT;
+    this.defaultPermissionMode = config2.defaultPermissionMode ?? loadDefaultPermissionMode() ?? "acceptEdits";
     this.cacheDir = config2.cacheDir ?? loadCacheDir() ?? (0, import_path21.join)((0, import_os10.homedir)(), ".threadbase", "cache");
     this.tailSize = config2.tailSize ?? loadTailSize() ?? 10;
     this.directoryDebounceMs = parseDirScanDebounceEnv(process.env.THREADBASE_DIR_SCAN_DEBOUNCE_MS) ?? config2.directoryScanDebounceMs ?? 1e3;
@@ -142045,6 +142289,7 @@ var StreamerServer = class {
         this.log.warn(`Warning: ${result.error}`, { error: result.error });
       }
     }
+    this.browserCors = config2.browserCors ?? loadBrowserCors();
     this.sessionStore = new SessionStore();
     this.wsHub = new WSHub();
     this.fileWatcher = new ConversationWatcher({
@@ -142199,6 +142444,7 @@ var StreamerServer = class {
       rotateApiKey: () => this.rotateApiKey(),
       publicUrl: this.publicUrl,
       browseRoot: this.browseRoot,
+      browserCors: this.browserCors,
       ptyManager: this.ptyManager,
       sessionStore: this.sessionStore,
       wsHub: this.wsHub,
@@ -142445,9 +142691,9 @@ var StreamerServer = class {
           );
           this.scannerPersistenceDisabled = true;
         }
-        const warmupScanner = this.newScanner();
-        this.allScanners.add(warmupScanner);
         const warmupStatCache = this.buildStatCache(null);
+        const warmupScanner = this.newScanner(warmupStatCache ? { persistent: false } : void 0);
+        this.allScanners.add(warmupScanner);
         const shouldEmitProgress = createScanProgressThrottle();
         const scanOpts = {
           ...this.scanProfiles ? { profiles: this.scanProfiles } : {},
@@ -142887,6 +143133,10 @@ var StreamerServer = class {
   }
   buildStatCache(previousScanner) {
     if (!this.cache) return void 0;
+    if (!previousScanner) {
+      const persisted = this.cache.getScannerStatCache();
+      return persisted.size > 0 ? persisted : void 0;
+    }
     const dbStats = this.cache.getFileStats();
     if (dbStats.size === 0) return void 0;
     const metaByPath = /* @__PURE__ */ new Map();
@@ -142916,9 +143166,9 @@ var StreamerServer = class {
   // this — its per-file refreshFile (in findConversationByUuid) already
   // reconciles the one conversation being requested, so paying a full-tree
   // rescan just because some OTHER file changed is the stall this avoids.
-  newScanner() {
+  newScanner(options) {
     return new ConversationScanner(
-      this.scannerPersistenceDisabled ? { persistent: false } : void 0
+      options ?? (this.scannerPersistenceDisabled ? { persistent: false } : void 0)
     );
   }
   async getScanner(skipStaleRescan = false) {
@@ -142937,7 +143187,7 @@ var StreamerServer = class {
     }
     this.scannerStale = false;
     const statCache = this.buildStatCache(this.scanner);
-    this.scanner = this.newScanner();
+    this.scanner = this.newScanner(statCache ? { persistent: false } : void 0);
     this.allScanners.add(this.scanner);
     this.scannerReady = this.scanner.scan({
       ...this.scanProfiles ? { profiles: this.scanProfiles } : {},
@@ -142960,9 +143210,8 @@ var StreamerServer = class {
     this.scannerReady = null;
     return this.getScanner();
   }
-  // refresh=1's scan: reuse the WARM persistent scanner (its index.db + cursors
-  // survive, so classify() still skips unchanged files) and re-run its scan
-  // with fullRescan:true — the escape hatch that bypasses the scanner's
+  // refresh=1's scan: reuse the WARM scanner and re-run its scan with
+  // fullRescan:true — the escape hatch that bypasses the scanner's
   // dir-mtime discovery gate, since an explicit user pull-to-refresh is exactly
   // the "don't trust the gate, check disk for real" signal. Unlike
   // getFreshScanner() this does NOT discard the warm scanner. scannerReady is
@@ -143350,7 +143599,8 @@ var StreamerServer = class {
       provider,
       projectPath,
       projectName: body.projectName,
-      branch: body.branch
+      branch: body.branch,
+      permissionMode: this.defaultPermissionMode
     });
     this.sessionStore.addManaged(session);
     void this.watchConversationFile(sessionId);
@@ -143674,7 +143924,8 @@ var StreamerServer = class {
     const session = await this.ptyManager.start(convId, {
       projectPath,
       projectName,
-      branch
+      branch,
+      permissionMode: this.defaultPermissionMode
     });
     this.sessionStore.addManaged(session);
     void this.watchConversationFile(session.id);
@@ -143744,10 +143995,35 @@ var StreamerServer = class {
         provider,
         projectPath: resolvedPath,
         projectName: body.projectName,
-        systemPrompt: systemPromptParts.join("\n")
+        systemPrompt: systemPromptParts.join("\n"),
+        permissionMode: this.defaultPermissionMode
       });
       this.sessionStore.addManaged(session);
-      json2(res, 202, { id: session.id, status: "pending" });
+      const readyOrFailed = new Promise((resolve6) => {
+        const handler = (status) => {
+          if (status === "waiting_input" || status === "idle") {
+            this.sessionStatusBus.off(`status:${session.id}`, handler);
+            resolve6(status === "waiting_input" ? "ready" : "failed");
+          }
+        };
+        this.sessionStatusBus.on(`status:${session.id}`, handler);
+      });
+      const timeoutPromise = new Promise(
+        (resolve6) => setTimeout(() => resolve6("timeout"), START_READY_TIMEOUT_MS)
+      );
+      const outcome = await Promise.race([readyOrFailed, timeoutPromise]);
+      const current = this.sessionStore.get(session.id, this.ptyAttachedIds());
+      if (outcome === "ready" && current) {
+        json2(res, 200, { session: current });
+      } else if (outcome === "failed" && current) {
+        json2(res, 502, {
+          id: session.id,
+          status: "idle",
+          error: current.failureReason ?? "Session exited before becoming ready"
+        });
+      } else {
+        json2(res, 202, { id: session.id, status: "pending" });
+      }
       if (provider === CODEX_CLI_PROVIDER2) {
         this.watchForCodexRollout(session.id, resolvedPath);
       } else {
@@ -147937,7 +148213,10 @@ program2.name("threadbase-streamer").description("PTY session management, WebSoc
 program2.command("serve").description("Start the streamer server").option("-p, --port <number>", "Port to listen on", "8766").option("--api-key <key>", "API key for authentication").option("--local-no-auth", "Skip auth for localhost requests", false).option("-v, --verbose", "Verbose output", false).option("--log-menubar-requests", "Log /healthz requests from the menubar app", false).option("--browse-root <path>", "Root directory for file browsing").option(
   "--public-url <url>",
   "Public URL clients should use to reach this server (https:// required, except localhost). Falls back to THREADBASE_PUBLIC_URL env or public_url: in ~/.threadbase/server.yaml."
-).option("--no-pair-qr", "Skip the pairing QR on startup", false).option("--replace-prod", "Stop the launchd-supervised prod streamer and bind its port", false).option("--forget", "Clear this repo's remembered dev-vs-prod choice and re-prompt", false).option("--forget-all", "Clear every repo's remembered dev-vs-prod choice", false).option(
+).option(
+  "--default-permission-mode <mode>",
+  "Claude Code permission mode for spawned sessions: acceptEdits (auto-approve file edits, default) or manual (prompt for everything). Falls back to default_permission_mode: in ~/.threadbase/server.yaml, or a first-run interactive prompt on a human TTY invocation (skip with THREADBASE_SKIP_PERMISSION_MODE_PROMPT=true)."
+).option("--no-pair-qr", "Skip the pairing QR on startup").option("--replace-prod", "Stop the launchd-supervised prod streamer and bind its port", false).option("--forget", "Clear this repo's remembered dev-vs-prod choice and re-prompt", false).option("--forget-all", "Clear every repo's remembered dev-vs-prod choice", false).option(
   "--prod",
   "Run as if invoked by launchd: skip the dev-takeover prompt and signal handlers",
   false
@@ -147956,11 +148235,25 @@ program2.command("serve").description("Start the streamer server").option("-p, -
   if (opts.multiAgentFlow) {
     process.env.MULTI_AGENT_FLOW = "true";
   }
+  if (opts.defaultPermissionMode !== void 0 && opts.defaultPermissionMode !== "acceptEdits" && opts.defaultPermissionMode !== "manual") {
+    log7.error(
+      `Invalid --default-permission-mode: ${opts.defaultPermissionMode}`,
+      void 0,
+      "console"
+    );
+    process.exit(1);
+  }
   const requestedPort = Number.parseInt(opts.port, 10);
   const apiKey = opts.apiKey ?? loadOrCreateApiKey();
   const publicUrl = opts.publicUrl ?? loadPublicUrl() ?? null;
   const isProdInvocation = opts.prod === true || process.ppid === 1;
   if (!isProdInvocation) appendDevSessionMarker();
+  let resolvedDefaultPermissionMode = opts.defaultPermissionMode;
+  if (resolvedDefaultPermissionMode === void 0 && !isProdInvocation && process.env.THREADBASE_SKIP_PERMISSION_MODE_PROMPT !== "true" && loadDefaultPermissionMode() === void 0 && import_node_process3.stdin.isTTY) {
+    const { interactivePermissionModePrompt: interactivePermissionModePrompt2 } = await Promise.resolve().then(() => (init_prompt(), prompt_exports));
+    resolvedDefaultPermissionMode = await interactivePermissionModePrompt2();
+    setDefaultPermissionMode(resolvedDefaultPermissionMode);
+  }
   let resolvedPort = requestedPort;
   if (!isProdInvocation) {
     const { resolveDevPlan: resolveDevPlan2, detectProdActive: detectProdActive2, isPortInUse: isPortInUse2, findFreePort: findFreePort2, takeoverProd: takeoverProd2 } = await Promise.resolve().then(() => (init_dev_takeover(), dev_takeover_exports));
@@ -147992,7 +148285,8 @@ program2.command("serve").description("Start the streamer server").option("-p, -
     verbose: opts.verbose,
     logMenubarRequests: opts.logMenubarRequests,
     browseRoot: opts.browseRoot,
-    publicUrl: opts.publicUrl
+    publicUrl: opts.publicUrl,
+    defaultPermissionMode: resolvedDefaultPermissionMode
   });
   await server.listen(resolvedPort);
   {
@@ -148006,13 +148300,21 @@ program2.command("serve").description("Start the streamer server").option("-p, -
     wsUrl: `ws://localhost:${resolvedPort}/ws`
   });
   log7.info(`API key: ${apiKey}`, { apiKeyMasked: `${apiKey.slice(0, 6)}\u2026` });
-  if (opts.pairQr !== false) {
-    try {
-      await printPairQR({ port: resolvedPort, apiKey, publicUrl });
-    } catch (err) {
-      const message = err instanceof Error ? err.message : String(err);
-      log7.warn(`(skipped pairing QR: ${message})`, { reason: message });
-    }
+  try {
+    await printServerBanner({
+      port: resolvedPort,
+      apiKey,
+      publicUrl,
+      includeQr: opts.pairQr !== false
+    });
+  } catch (err) {
+    const message = err instanceof Error ? err.message : String(err);
+    log7.warn(`(skipped pairing QR: ${message})`, { reason: message });
+    log7.info(
+      printUrlBanner({ url: resolveServerUrl({ publicUrl, port: resolvedPort }) }),
+      void 0,
+      "console"
+    );
   }
   const shutdown = async () => {
     log7.info("Shutting down...");
@@ -148067,7 +148369,7 @@ program2.command("pair").description("Print a pairing QR code (server must alrea
   const port = Number.parseInt(opts.port, 10);
   const apiKey = loadOrCreateApiKey();
   const publicUrl = loadPublicUrl() ?? null;
-  await printPairQR({ port, apiKey, publicUrl });
+  await printServerBanner({ port, apiKey, publicUrl, includeQr: true });
 });
 program2.command("set-key [key]").description("Set the streamer API key in ~/.threadbase/server.yaml").action(async (key) => {
   const { runSetKey: runSetKey2 } = await Promise.resolve().then(() => (init_setKey(), setKey_exports));
@@ -148163,11 +148465,49 @@ program2.command("update").description("Check for streamer updates from GitHub R
 });
 registerProdCommands(program2);
 program2.parse();
-async function printPairQR({
+function generateQr(payload) {
+  return new Promise((resolve6) => {
+    import_qrcode_terminal.default.generate(payload, { small: true }, resolve6);
+  });
+}
+function printUrlBanner({
+  url: url2,
+  qr: qr2,
+  expiresAt
+}) {
+  const contentLines = ["Threadbase Streamer \u2014 server address", "", url2];
+  if (qr2) {
+    contentLines.push("", ...qr2.split("\n").filter((l) => l.length > 0));
+    if (expiresAt !== void 0) {
+      contentLines.push(
+        "",
+        `Scan to pair a mobile client (expires ${new Date(expiresAt).toLocaleTimeString()})`
+      );
+    } else {
+      contentLines.push("", "Scan to pair a mobile client");
+    }
+  }
+  const width = Math.max(...contentLines.map((l) => l.length));
+  const pad = (l) => `\u2551 ${l}${" ".repeat(width - l.length)} \u2551`;
+  const top = `\u2554${"\u2550".repeat(width + 2)}\u2557`;
+  const bottom = `\u255A${"\u2550".repeat(width + 2)}\u255D`;
+  return `
+${top}
+${contentLines.map(pad).join("\n")}
+${bottom}
+`;
+}
+async function printServerBanner({
   port,
   apiKey,
-  publicUrl
+  publicUrl,
+  includeQr
 }) {
+  const url2 = resolveServerUrl({ publicUrl, port });
+  if (!includeQr) {
+    log7.info(printUrlBanner({ url: url2 }), void 0, "console");
+    return;
+  }
   const res = await fetch(`http://localhost:${port}/api/pair/start`, {
     method: "POST",
     headers: { Authorization: `Bearer ${apiKey}`, "Content-Type": "application/json" },
@@ -148177,19 +148517,12 @@ async function printPairQR({
     throw new Error(`/api/pair/start returned ${res.status}`);
   }
   const { token, expiresAt, expiresInSeconds } = await res.json();
-  const url2 = resolveServerUrl({ publicUrl, port });
   const expSeconds = Math.floor(expiresAt / 1e3);
   const payload = `threadbase://pair?url=${encodeURIComponent(url2)}&token=${token}&exp=${expSeconds}`;
-  log7.info("Scan to pair a mobile client:\n", void 0, "console");
-  import_qrcode_terminal.default.generate(payload, { small: true });
-  log7.info(`Server URL : ${url2}`, void 0, "console");
-  log7.info(`Pair URL   : ${payload}`, void 0, "console");
-  log7.info(
-    `Expires    : ${new Date(expiresAt).toLocaleTimeString()} (${expiresInSeconds}s)
-`,
-    void 0,
-    "console"
-  );
+  const qr2 = await generateQr(payload);
+  log7.info(printUrlBanner({ url: url2, qr: qr2, expiresAt }), void 0, "console");
+  log7.info(`Pair URL: ${payload}`, void 0, "console");
+  log7.info(`Expires in ${expiresInSeconds}s`, void 0, "console");
 }
 /*! Bundled license information: