@timqi/pier 0.0.16 → 0.0.19

package/dist/web/public/assets/terminal-zLyOvGto.js

@@ -0,0 +1,2 @@
+const __vite__mapDeps=(i,m=__vite__mapDeps,d=(m.f||(m.f=["assets/ghostty-web-D8CLFi_l.js","assets/index-BFzmvpGX.js","assets/index-yNocr797.css"])))=>i.map(i=>d[i]);
+import{B as e,G as t,H as n,I as r,M as i,a,d as o,i as s,n as c,w as l}from"./index-BFzmvpGX.js";var u=`pier.terminalPrefs`,d={fontFamily:`monospace`,fontSize:14,cursorBlink:!0},f=()=>{try{let e=JSON.parse(localStorage.getItem(u)??`null`),t=typeof e?.fontSize==`number`?e.fontSize:d.fontSize;return{fontFamily:typeof e?.fontFamily==`string`&&e.fontFamily.trim()?e.fontFamily.slice(0,200):d.fontFamily,fontSize:Math.round(Math.max(10,Math.min(24,t))),cursorBlink:typeof e?.cursorBlink==`boolean`?e.cursorBlink:d.cursorBlink}}catch{return{...d}}},p=e=>localStorage.setItem(u,JSON.stringify(e)),m=null,h=()=>(m||=o(()=>import(`./ghostty-web-D8CLFi_l.js`).then(async e=>(await e.init(),e)),__vite__mapDeps([0,1,2])).catch(e=>{throw m=null,e}),m),g=()=>{let e=()=>void h().catch(e=>{console.warn(`terminal: emulator warm-up failed`,e)});`requestIdleCallback`in window?requestIdleCallback(e,{timeout:1e4}):setTimeout(e,3e3)},_={background:`#1a1b26`,foreground:`#a9b1d6`,cursor:`#c0caf5`};function v(e){let t=e.renderer,n=document.createElement(`canvas`).getContext(`2d`);if(!n||typeof t?.remeasureFont!=`function`){console.warn(`terminal: could not correct cell metrics — rows will render tight`);return}t.measureFont=()=>{let{fontSize:t,fontFamily:r}=e.options;n.font=`${t}px ${r}`;let i=n.measureText(`M`),a=i.fontBoundingBoxAscent||i.actualBoundingBoxAscent||t*.8,o=i.fontBoundingBoxDescent||i.actualBoundingBoxDescent||t*.25;return{width:Math.ceil(i.width),height:Math.ceil(a+o),baseline:Math.ceil(a)}},t.remeasureFont()}var y=`w-full rounded border border-neutral-300 px-2 py-1.5 font-mono text-[12px] outline-none focus:border-indigo-400`;function b(o,u,m,b,x,S){g();let C=``,w=null,T=null,E=null,D=!1,O=0,k=!1,A=f(),j=r(`div`,`ml-auto flex min-w-0 flex-none items-center gap-2`),M=r(`header`,`flex h-10 flex-none items-center gap-2 border-b border-neutral-200 bg-white px-3`),N=r(`div`,`min-h-0 flex-1 overflow-hidden p-1`);N.style.background=_.background,N.setAttribute(`data-owns-keyboard`,``),N.addEventListener(`keydown`,e=>{e.metaKey&&!e.defaultPrevented&&e.stopImmediatePropagation()},!0),N.addEventListener(`scroll`,()=>{N.scrollTop=0,N.scrollLeft=0}),N.addEventListener(`compositionend`,()=>{for(let e=N.childNodes.length-1;e>=0;e--){let t=N.childNodes[e];t&&t.nodeName!==`CANVAS`&&t.nodeName!==`TEXTAREA`&&t.remove()}}),o.append(M,N);let P=e=>{let t=r(`button`,`min-w-0 max-w-72 cursor-pointer truncate rounded-md bg-neutral-100 px-2 py-0.5 text-left font-mono text-[11.5px] text-neutral-600 hover:bg-neutral-200`,e);return t.type=`button`,t};function F(e,t){if(j.replaceChildren(),e&&j.append(r(`span`,`min-w-0 truncate text-[11.5px] text-neutral-400`,e)),t){let e=P(t.label);e.className=e.className.replace(`bg-neutral-100`,`bg-indigo-50 font-medium text-indigo-700 hover:bg-indigo-100`),e.onclick=t.run,j.append(e)}}function I(){w&&(w.options.fontFamily=A.fontFamily,w.options.fontSize=A.fontSize,w.options.cursorBlink=A.cursorBlink,requestAnimationFrame(H))}function L(){let i=document.createElement(`input`);i.type=`text`,i.placeholder=`tmux new -As "$(basename $PWD)"`,i.spellcheck=!1,i.autocomplete=`off`,i.autocapitalize=`off`,i.disabled=!0,i.className=`${y} disabled:bg-neutral-50`;let a=r(`span`,`block text-[11.5px] text-neutral-400`,`loading…`),o=(e,t)=>{a.isConnected?l(a,e,t):e===`failed`&&F(t)},s=``;(async()=>{try{s=(await n(`/api/settings`,`Could not load the startup command`)).terminalInitCommand??``,i.value=s,i.disabled=!1,o(`idle`,`Runs when a shell starts — Restart applies it here.`)}catch(e){o(`failed`,String(e))}})();let c=async()=>{let n=i.value.trim();if(!(i.disabled||n===s)){o(`saving`,`saving…`);try{let r=await t(`/api/settings`,{terminalInitCommand:n},`PUT`);if(!r.ok)return o(`failed`,await e(r,`Could not save the startup command`));s=(await r.json()).terminalInitCommand,i.value=s,o(`saved`,s?`Saved — the next shell runs it.`:`Cleared.`)}catch(e){o(`failed`,`Could not save the startup command: ${String(e)}`)}}};return i.onblur=()=>void c(),i.onkeydown=e=>{e.key===`Enter`&&c()},r(`div`,`space-y-1.5 border-t border-neutral-200 pt-2.5`,r(`div`,``,r(`span`,`text-[12px] font-semibold text-neutral-700`,`Startup command`),r(`span`,`block text-[11px] text-neutral-400`,`This Pier, every shell — not only this browser.`)),i,a)}function R(e){let t=document.createElement(`input`);t.type=`text`,t.value=A.fontFamily,t.setAttribute(`list`,`terminal-font-presets`),t.className=y;let n=document.createElement(`datalist`);n.id=`terminal-font-presets`;for(let e of[`monospace`,`ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, monospace`,`JetBrains Mono, monospace`,`Cascadia Mono, monospace`,`Fira Code, monospace`]){let t=document.createElement(`option`);t.value=e,n.append(t)}let i=document.createElement(`input`);i.type=`number`,i.min=`10`,i.max=`24`,i.step=`1`,i.value=String(A.fontSize),i.className=`w-20 rounded border border-neutral-300 px-2 py-1.5 text-[12px] outline-none focus:border-indigo-400`;let o=document.createElement(`input`);o.type=`checkbox`,o.checked=A.cursorBlink,o.className=`h-4 w-4 accent-indigo-600`;let s=()=>{let e=t.value.trim(),n=Number(i.value);!e||!Number.isFinite(n)||(A={fontFamily:e.slice(0,200),fontSize:Math.round(Math.max(10,Math.min(24,n))),cursorBlink:o.checked},i.value=String(A.fontSize),p(A),I())};t.oninput=s,i.oninput=s,o.onchange=s;let c=r(`button`,`cursor-pointer text-[12px] text-neutral-500 hover:text-indigo-700`,`Reset`);c.type=`button`,c.onclick=()=>{A={...d},t.value=A.fontFamily,i.value=String(A.fontSize),o.checked=A.cursorBlink,p(A),I()},a(e,r(`div`,`w-72 space-y-3 px-3 py-2.5`,r(`div`,`flex items-center`,r(`span`,`text-[12px] font-semibold text-neutral-700`,`Terminal`),r(`span`,`ml-auto`,c)),r(`label`,`block space-y-1 text-[11.5px] text-neutral-500`,r(`span`,``,`Font family`),t,n),r(`label`,`flex items-center justify-between text-[11.5px] text-neutral-500`,r(`span`,``,`Font size`),i),r(`label`,`flex cursor-pointer items-center justify-between text-[11.5px] text-neutral-500`,r(`span`,``,`Blinking cursor`),o),L()))}function z(){let e=P(C||`Choose a folder…`);e.title=`Switch folder`,e.onclick=()=>c(e,u().map(e=>({path:e})),C||void 0,e=>e===C?void 0:b(e));let t=P(`Files`);t.title=`Browse this folder`,t.onclick=()=>x(C);let n=P(`Fit`);n.title=`Resize the shell to this window`,n.onclick=()=>{H(),w?.focus()};let i=P(`Restart`);i.title=`End this shell and start a new one`,i.onclick=()=>void V();let a=r(`button`,`icon-btn text-[15px]`,`⚙`);a.type=`button`,a.title=`Terminal settings`,a.setAttribute(`aria-label`,`Terminal settings`),a.onclick=()=>R(a);let o=r(`button`,`icon-btn`,`✕`);o.type=`button`,o.title=`Close Terminal`,o.setAttribute(`aria-label`,`Close Terminal`),o.onclick=S,M.replaceChildren(e,j,...C?[t]:[],n,i,a,o)}let B=()=>{w&&E?.readyState===WebSocket.OPEN&&E.send(JSON.stringify({t:`resize`,cols:w.cols,rows:w.rows}))};async function V(){if(E?.readyState!==WebSocket.OPEN){await W();return}window.confirm(`Restart the shell in ${C}? Anything running in it stops.`)&&(k=!0,F(`restarting…`),E.send(JSON.stringify({t:`restart`})))}function H(){!w||N.clientHeight===0||(T?.fit(),B())}window.addEventListener(`focus`,H),document.addEventListener(`visibilitychange`,()=>{document.hidden||H()});function U(){E?.close(),E=null,T=null,w?.dispose(),w=null,N.replaceChildren()}async function W(){let e=++O;U(),D=!1,k=!1,F(`connecting…`);let t;try{t=await h()}catch(e){F(`could not load the terminal: ${String(e)}`,{label:`Retry`,run:()=>void W()});return}if(e!==O)return;w=new t.Terminal({fontFamily:A.fontFamily,fontSize:A.fontSize,cursorBlink:A.cursorBlink,scrollback:2e3,theme:_}),w.open(N),v(w),T=new t.FitAddon,w.loadAddon(T),T.observeResize(),T.fit();let n=new WebSocket(`${location.protocol===`https:`?`wss`:`ws`}://${location.host}/api/terminal?cwd=${encodeURIComponent(C)}`);n.binaryType=`arraybuffer`,E=n,n.onopen=()=>{e===O&&(F(``),B(),w?.focus())},n.onmessage=t=>{if(e!==O)return;if(typeof t.data!=`string`){w?.write(new Uint8Array(t.data));return}let r;try{r=JSON.parse(t.data)}catch{D=!0,F(`invalid terminal response`,{label:`Reconnect`,run:()=>void W()}),n.close();return}if(r.t===`exit`){if(k){k=!1,W();return}D=!0,F(`shell exited (${r.code??`?`})`,{label:`Restart`,run:()=>void W()})}else r.t===`error`&&(D=!0,F(r.message??`terminal error`,{label:`Retry`,run:()=>void W()}))},n.onclose=()=>{e!==O||D||F(`disconnected`,{label:`Reconnect`,run:()=>void W()})},w.onData(e=>{n.readyState===WebSocket.OPEN&&n.send(JSON.stringify({t:`in`,d:e}))}),w.onResize(({cols:e,rows:t})=>{n.readyState===WebSocket.OPEN&&n.send(JSON.stringify({t:`resize`,cols:e,rows:t}))})}return i(o,e=>{let t=e?.startsWith(`/`)?e:C||m()||u()[0]||``;if(t===C&&w){z(),!D&&E&&E.readyState>WebSocket.OPEN?W():(H(),w.focus());return}if(C=t,z(),!C){F(`No project yet — pick a folder from the chip.`);return}W()},s)}export{b as createTerminalView};

package/dist/web/public/index.html

@@ -33,8 +33,8 @@
        which style.css pays for with the safe-area inset. -->
   <meta name="apple-mobile-web-app-status-bar-style" content="black-translucent" />
   <title>Pier</title>
-  <script type="module" crossorigin src="/assets/index-DVUvzNK1.js"></script>
-  <link rel="stylesheet" crossorigin href="/assets/index-2E9_cwpg.css">
+  <script type="module" crossorigin src="/assets/index-BFzmvpGX.js"></script>
+  <link rel="stylesheet" crossorigin href="/assets/index-yNocr797.css">
 </head>
 <!-- The document never scrolls: this is a fixed-viewport workbench, and every
      scrollable region is an inner pane. h-dvh, not h-screen, because 100vh can

package/dist/web/push.js

@@ -10,6 +10,7 @@
 import { readableTitle } from "../core/identity.js";
 import { pierDb } from "../db.js";
 import { logger } from "../log.js";
+import { sessionIdOf } from "./auth.js";
 import { generateVapidKeys, sendPush, } from "./webpush.js";
 const log = logger("push");
 /** Devices kept at once. A browser mints a new subscription whenever the old
@@ -29,6 +30,10 @@ const MAX_BODY_CHARS = 160;
  *  browser bug rather than as an unnamed session — and a listing that could
  *  not answer must not silence the push. */
 const label = (s) => readableTitle(s?.title) || s?.cwd.split("/").filter(Boolean).at(-1) || "Pier session";
+/** SQLite's "that parent row does not exist" — the session ended. Anything
+ *  else that goes wrong here is a broken database, not a signed-out browser. */
+const FOREIGN_KEY_VIOLATION = 787;
+const sessionGone = (err) => err.errcode === FOREIGN_KEY_VIOLATION;
 /** Subscriptions and the instance's VAPID identity. Both are per-instance
  *  facts nobody edits by hand, so they live beside every other one. */
 export class PushStore {
@@ -59,14 +64,16 @@ export class PushStore {
             .all();
     }
     /** Upsert: a browser re-posts the same subscription on every load, which is
-     *  what repairs a row this instance lost. */
-    save(target, label) {
+     *  what repairs a row this instance lost — and what re-attaches one to the
+     *  session that is signed in now. */
+    save(target, label, sessionId) {
         this.#db
-            .prepare(`INSERT INTO push_subscriptions(endpoint, p256dh, auth, label, created_at)
-         VALUES (?, ?, ?, ?, ?)
+            .prepare(`INSERT INTO push_subscriptions(endpoint, p256dh, auth, label, created_at, session_id)
+         VALUES (?, ?, ?, ?, ?, ?)
          ON CONFLICT(endpoint) DO UPDATE SET
-           p256dh = excluded.p256dh, auth = excluded.auth, label = excluded.label`)
-            .run(target.endpoint, target.p256dh, target.auth, label, Date.now());
+           p256dh = excluded.p256dh, auth = excluded.auth, label = excluded.label,
+           session_id = excluded.session_id`)
+            .run(target.endpoint, target.p256dh, target.auth, label, Date.now(), sessionId);
         this.#db
             .prepare(`DELETE FROM push_subscriptions WHERE endpoint NOT IN
            (SELECT endpoint FROM push_subscriptions ORDER BY created_at DESC LIMIT ?)`)
@@ -222,7 +229,23 @@ export function registerPushRoutes(app, deps) {
         if (!target)
             return c.json({ error: "not a push subscription" }, 400);
         const label = String(body.label ?? "a browser").slice(0, 80);
-        store.save(target, label);
+        // The session that is asking owns the subscription, and the foreign key is
+        // what makes signing this browser out take the subscription with it. It can
+        // refuse: the boundary let this request in and the browser was signed out
+        // while its body was still arriving. Say so rather than 500 — the browser
+        // is about to be sent to the login form by its next request anyway.
+        try {
+            store.save(target, label, sessionIdOf(c));
+        }
+        catch (err) {
+            // Only that. A full or read-only database answering 401 would send a
+            // signed-in browser to the login form, where the password it types will
+            // not help either.
+            if (!sessionGone(err))
+                throw err;
+            log.warn(`subscription refused for a session that ended: ${String(err)}`);
+            return c.json({ error: "session ended" }, 401);
+        }
         log.info(`subscribed ${label}`);
         return c.json({ ok: true }, 201);
     });

package/dist/web/route.js

@@ -0,0 +1,17 @@
+// A route body that throws answers as JSON — the one shape every view's
+// fetch helper already knows how to read, with the status the route owns.
+// It lives alone because all three route families use it and none of them is
+// where the other two would look for it.
+/** Register a route whose body may throw: the error becomes the JSON shape
+ *  the UI expects, with the status the route owns. Takes the literal path so
+ *  `c.req.param()` keeps its typed keys. */
+export function guarded(app, method, path, status, fn) {
+    app.on(method, path, async (c) => {
+        try {
+            return await fn(c);
+        }
+        catch (err) {
+            return c.json({ error: String(err) }, status);
+        }
+    });
+}

package/dist/web/server.js

@@ -1,8 +1,8 @@
 // Web workbench backend: REST + SSE, a pure consumer of core.
 // See docs/design/03-web-workbench.md for the route contract.
 import { hostname } from "node:os";
-import { readFile } from "node:fs/promises";
-import { join, relative } from "node:path";
+import { readFile, stat } from "node:fs/promises";
+import { isAbsolute, join, relative } from "node:path";
 import { fileURLToPath } from "node:url";
 import { serveStatic } from "@hono/node-server/serve-static";
 import { Hono } from "hono";
@@ -11,11 +11,13 @@ import { streamSSE } from "hono/streaming";
 import { EventHub } from "../core/hub.js";
 import { logger } from "../log.js";
 import { Router } from "../core/router.js";
+import { registerConfigRoutes } from "./config.js";
 import { registerExplorerRoutes } from "./explorer.js";
-import { guarded, registerFileRoutes } from "./files.js";
+import { fileHeaders, MAX_FILE_BYTES, registerFsRoutes, scopedFile } from "./fs.js";
+import { guarded } from "./route.js";
 import { isThinkingLevel } from "../core/types.js";
 import { SESSION_TITLE_MAX } from "../limits.js";
-import { saveInbound } from "../core/inbox.js";
+import { INBOX_DIR, saveInbound } from "../core/inbox.js";
 import { MAX_INBOUND_BYTES } from "../core/inbound-file.js";
 import { RepoIndex } from "./repos.js";
 import {} from "./session-state.js";
@@ -38,9 +40,30 @@ export const withTabPrefix = (html, prefix) => prefix
     ? html.replace("<title>Pier</title>", `<title>${prefix.replace(/&/g, "&amp;").replace(/</g, "&lt;")} - Pier</title>`)
     : html;
 const HEARTBEAT_MS = 15_000;
+/** A reader that stopped reading must not queue frames without bound. Past
+ *  this much frame text in flight the stream is dropped with a line in the
+ *  log; EventSource reconnects and replays from its Last-Event-ID. */
+const SSE_HIGH_WATER = 4 * 1024 * 1024;
 // Canonical base64 only: Buffer.from(.., "base64") happily "decodes" garbage.
 const BASE64_RE = /^[A-Za-z0-9+/]+={0,2}$/;
-export function createServer({ factory, router, hub, sessions: state, config, providers, settings, catalog, names, onToolsChanged, validateCustomTools, secrets, onUnlocked, reload, updates, updater, backgroundRuns, channelOf, }) {
+/** The SSE frame for one event, built once and shared by every stream watching
+ *  that session — three open tabs used to stringify the same delta three
+ *  times. One slot is the whole cache: the hub fans an event out to its
+ *  subscribers in one synchronous loop, so the reuse is always of the event
+ *  just built, and the memo is keyed on identity so a miss only costs a
+ *  rebuild. The hub stays transport-blind; this is the transport's business.
+ *  Byte-identical to hono's `writeSSE`: JSON has no raw newline, so `data` is
+ *  one line. */
+let lastEvent = null;
+let lastFrame = "";
+const sseFrame = (e) => {
+    if (e !== lastEvent) {
+        lastEvent = e;
+        lastFrame = `data: ${JSON.stringify(e)}\nid: ${e.seq}\n\n`;
+    }
+    return lastFrame;
+};
+export function createServer({ factory, router, hub, sessions: state, config, providers, settings, catalog, names, onToolsChanged, validateCustomTools, secrets, onUnlocked, reload, updates, updater, backgroundRuns, activeBackgroundRunCounts, channelOf, }) {
     const app = new Hono();
     // A finished turn marks its session unread until some client reports it was
     // seen (session selected + tab visible → POST read below). Server-side so
@@ -62,8 +85,10 @@ export function createServer({ factory, router, hub, sessions: state, config, pr
     });
     // Repository identity per project directory, refreshed off the request path.
     const repos = new RepoIndex(() => hub.emitWorkspace({ type: "sessions-changed" }));
-    /** Background runs this session launched that are still in flight. */
-    const activeRuns = (id) => backgroundRuns?.(id).filter((r) => r.state === "queued" || r.state === "running").length ?? 0;
+    /** Background runs still in flight, per launching session. One query for a
+     *  whole list: asking row by row loaded every run object of every session to
+     *  draw one dot each. */
+    const activeRuns = () => activeBackgroundRunCounts?.() ?? new Map();
     /** The web channel's session for `id` — every session route resolves here. */
     const ensure = (id) => router.ensure({ channelId: "web", conversationId: id });
     // Sessions created here that Pi doesn't list yet — it persists a session
@@ -118,7 +143,7 @@ export function createServer({ factory, router, hub, sessions: state, config, pr
     // decided about it, and what is true of it right now.
     // The listing's `modified` is dropped rather than forwarded: it dates a
     // transcript, and no surface renders it.
-    const present = ({ modified: _drop, ...s }, own) => {
+    const present = ({ modified: _drop, ...s }, own, active) => {
         return {
             ...s,
             ...(own?.sort === undefined ? {} : { sort: own.sort }),
@@ -133,7 +158,7 @@ export function createServer({ factory, router, hub, sessions: state, config, pr
             listed: own?.pinned ?? false,
             unread: own?.unread ?? false,
             channel: channelOf?.(s.id) ?? "web",
-            activeRuns: activeRuns(s.id),
+            activeRuns: active.get(s.id) ?? 0,
         };
     };
     // The rail: the same rows as the full list, minus everything Projects is not
@@ -141,8 +166,9 @@ export function createServer({ factory, router, hub, sessions: state, config, pr
     // the summaries out of SQLite, which is what had to be kept in step.
     app.get("/api/projects", async (c) => {
         const flags = state.flags();
+        const active = activeRuns();
         return c.json((await allSessions())
-            .map((s) => present(s, flags.get(s.id)))
+            .map((s) => present(s, flags.get(s.id), active))
             .filter((row) => row.listed));
     });
     // One drag, one write of the list that changed: the projects, or one
@@ -167,7 +193,8 @@ export function createServer({ factory, router, hub, sessions: state, config, pr
     });
     app.get("/api/sessions", async (c) => {
         const flags = state.flags();
-        return c.json((await allSessions()).map((s) => present(s, flags.get(s.id))));
+        const active = activeRuns();
+        return c.json((await allSessions()).map((s) => present(s, flags.get(s.id), active)));
     });
     app.post("/api/sessions", async (c) => {
         const body = await c.req.json().catch(() => ({}));
@@ -245,6 +272,29 @@ export function createServer({ factory, router, hub, sessions: state, config, pr
         // hands back what a surface shows, not the untruncated tool result.
         return c.json({ steps: turn.steps ?? [] });
     });
+    // Attachments, both directions: the agent links a file it produced, the chat
+    // renders a file the user sent. Read-only, and only from the session's own
+    // cwd or the inbox inbound files land in (core/inbox.ts) — a session route
+    // rather than an /api/fs one, because the session *is* the scope here.
+    guarded(app, "GET", "/api/sessions/:id/files", 400, async (c) => {
+        const raw = c.req.query("path");
+        if (!raw)
+            return c.json({ error: "path required" }, 400);
+        const id = c.req.param("id");
+        const cwd = nascent.get(id)?.cwd ?? (await factory.find(id))?.cwd;
+        // Absolute only: a link into a session's files is written by the agent or
+        // by Pier, and neither of them writes a path relative to anything.
+        const file = cwd && isAbsolute(raw) ? await scopedFile([cwd, INBOX_DIR], raw) : null;
+        if (!file)
+            return c.json({ error: "no such file" }, 404);
+        if ((await stat(file)).size > MAX_FILE_BYTES)
+            return c.json({ error: "file too large" }, 413);
+        const bytes = await readFile(file);
+        return c.body(bytes, 200, {
+            ...fileHeaders(file, bytes, c.req.query("download") === "1"),
+            "cache-control": "private, max-age=60",
+        });
+    });
     // Composer attachments: bytes land in the inbox, the message carries the
     // path as a `[name](file:///…)` line the client builds itself — upload
     // first, so the text it sends (and optimistically renders) is final.
@@ -450,12 +500,32 @@ export function createServer({ factory, router, hub, sessions: state, config, pr
             Number(c.req.query("after") ?? "") ||
             0;
         return streamSSE(c, async (stream) => {
-            const send = (e) => stream.writeSSE({ id: String(e.seq), data: JSON.stringify(e) });
-            for (const e of hub.replay(id, lastId))
-                await send(e);
-            // Same as above: the client may be gone by the time an event fires.
-            const unsubscribe = hub.subscribe(id, (e) => void send(e).catch(() => { }));
+            let queued = 0; // frame chars written but not yet drained by the reader
+            const send = (frame) => {
+                if (stream.aborted || stream.closed)
+                    return;
+                if (queued > SSE_HIGH_WATER) {
+                    log.warn(`dropping slow event client for ${id} — ${queued} chars queued`);
+                    stream.abort(); // unsubscribes; the client reconnects and replays
+                    return;
+                }
+                queued += frame.length;
+                void stream
+                    .write(frame)
+                    .catch((err) => log.warn(`event write for ${id} failed: ${String(err)}`))
+                    .finally(() => (queued -= frame.length));
+            };
+            // Subscribe before the replay write can wait on its reader: an event that
+            // arrives while that write is backpressured must queue behind it, not fall
+            // between replay() and subscribe(). Both snapshots happen synchronously,
+            // so live writes cannot overtake the replay write.
+            const unsubscribe = hub.subscribe(id, (e) => send(sseFrame(e)));
             stream.onAbort(unsubscribe);
+            // One write for the whole replay: a reconnect after a busy turn used to
+            // cost an await per event before the client saw any of them.
+            const missed = hub.replay(id, lastId);
+            if (missed.length)
+                await stream.write(missed.map(sseFrame).join(""));
             // Heartbeat keeps proxies from closing the stream; loop ends on abort.
             while (!stream.aborted) {
                 await stream.sleep(HEARTBEAT_MS);
@@ -509,12 +579,8 @@ export function createServer({ factory, router, hub, sessions: state, config, pr
         onSettingsChanged: () => recycle("instance settings"),
     });
     registerProviderRoutes(app, providers, () => recycle("provider configuration"));
-    registerFileRoutes(app, {
-        factory,
-        config,
-        nascentCwd: (id) => nascent.get(id)?.cwd,
-        onConfigWritten: () => recycle("an agent file"),
-    });
+    registerConfigRoutes(app, { factory, config, onConfigWritten: () => recycle("an agent file") });
+    registerFsRoutes(app);
     registerExplorerRoutes(app);
     // serveStatic resolves `root` against the *working directory*, and an
     // installed Pier is started from wherever the operator happens to be. The
@@ -530,6 +596,11 @@ export function createServer({ factory, router, hub, sessions: state, config, pr
     // at /login learns neither. Read once: neither can change under a process.
     const prefix = tabPrefix(process.env.PIER_TITLE, hostname().split(".")[0] ?? "");
     let shell = null;
+    // The one file the precompressed siblings below cannot cover: this route
+    // answers from the patched string, not from disk, and it is re-fetched on
+    // every navigation because it may not be cached. Exact path, like the two
+    // API routes above — never the SSE streams.
+    app.use("/", compress());
     app.get("/", async (c, next) => {
         // A release replaces hashed assets. Revalidate the shell on every
         // navigation so a cached index cannot name bundles that no longer exist.
@@ -563,6 +634,16 @@ export function createServer({ factory, router, hub, sessions: state, config, pr
         c.header("cache-control", "private, max-age=31536000, immutable");
         await next();
     });
-    app.use("/*", serveStatic({ root: relative(process.cwd(), bundle) || "." }));
+    // `precompressed` looks for a `.br`/`.gz` sibling of the file it is about to
+    // serve and hands that over when the request accepts the encoding; the build
+    // writes them (vite.config.ts). Without it the 325 kB bundle, the 87 kB
+    // stylesheet and the 636 kB terminal emulator all go out verbatim.
+    // serveStatic only sets Vary when it selects a sibling. Identity must carry
+    // it too, or a cache can reuse that response for a later Brotli request.
+    app.use("/*", async (c, next) => {
+        await next();
+        c.header("Vary", "Accept-Encoding");
+    });
+    app.use("/*", serveStatic({ root: relative(process.cwd(), bundle) || ".", precompressed: true }));
     return app;
 }

package/dist/web/terminal.js

@@ -6,12 +6,11 @@
 // to survive that — durability is tmux's job, not ours). This is the one
 // WebSocket surface: a keystroke is a round trip, which SSE cannot carry
 // upstream. Everything else stays on the event stream.
-import { realpath, stat } from "node:fs/promises";
-import { isAbsolute } from "node:path";
 import { spawn } from "node-pty";
 import { WebSocketServer } from "ws";
 import { logger } from "../log.js";
-import { upgradeAuthorized } from "./auth.js";
+import { scoped } from "./fs.js";
+import { ALL, upgradeAuthorized } from "./auth.js";
 const log = logger("terminal");
 /** Live shells at once — a guard against forgotten spawns, not a quota. */
 const MAX_TERMS = 8;
@@ -71,11 +70,7 @@ export class TerminalHub {
     async attach(cwd, sock) {
         let key;
         try {
-            if (!isAbsolute(cwd))
-                throw new Error("cwd must be an absolute directory");
-            key = await realpath(cwd);
-            if (!(await stat(key)).isDirectory())
-                throw new Error("cwd must be an absolute directory");
+            key = await scoped(cwd); // absolute, real, and a directory — or it throws
         }
         catch (err) {
             control(sock, { t: "error", message: String(err) });
@@ -276,10 +271,18 @@ export function attachTerminal(server, auth, opts = {}) {
     });
     server.once("close", () => hub.close());
     wss.on("error", (err) => log.error("terminal WebSocket server failed", err));
-    auth.onRotation(() => {
-        log.info("password changed; closing terminal clients");
-        for (const client of wss.clients)
-            client.close(1008, "password changed");
+    // A shell outlives the request that opened it, so revocation has to reach it
+    // here: the session that opened this socket was signed out (or every session
+    // was, by a password change), and the terminal goes with it.
+    const sessionOf = new WeakMap();
+    const revoked = new WeakSet();
+    auth.onRevoke((id) => {
+        for (const client of wss.clients) {
+            if (id !== ALL && sessionOf.get(client) !== id)
+                continue;
+            revoked.add(client);
+            client.close(1008, "signed out");
+        }
     });
     server.on("upgrade", (req, socket, head) => {
         let url;
@@ -296,14 +299,15 @@ export function attachTerminal(server, auth, opts = {}) {
             socket.destroy();
             return;
         }
-        if (!upgradeAuthorized(auth, req)) {
+        const sessionId = upgradeAuthorized(auth, req);
+        if (!sessionId) {
             log.warn("refused terminal upgrade (unauthorized)");
             socket.write("HTTP/1.1 401 Unauthorized\r\n\r\n");
             socket.destroy();
             return;
         }
-        const authKey = auth.cookieKey;
         wss.handleUpgrade(req, socket, head, (ws) => {
+            sessionOf.set(ws, sessionId);
             alive.add(ws);
             ws.on("pong", () => alive.add(ws));
             // Frames can land while attach() is resolving realpath; hold a bounded
@@ -320,9 +324,10 @@ export function attachTerminal(server, auth, opts = {}) {
             ws.on("message", (data, binary) => {
                 if (closed)
                     return;
-                if (auth.cookieKey !== authKey) {
+                // A frame can already be in flight when the close above goes out.
+                if (revoked.has(ws)) {
                     closed = true;
-                    ws.close(1008, "password changed");
+                    ws.close(1008, "signed out");
                     return;
                 }
                 if (binary) {

package/docs/deploy.md

@@ -229,8 +229,16 @@ sqlite3 ~/.pier/db/pier.db 'DELETE FROM auth'
 pier restart
 ```
 
-Changing the password invalidates every session cookie: the cookies are signed
-with the stored hash.
+Changing the password signs out every browser: the session rows behind the
+cookies are deleted. So does the recovery above — a new password does not leave
+the old one's browsers signed in. To end one browser without changing the
+password, use Settings → Instance → Signed-in devices. A session that is not
+used expires 7 days after its last request. However a session ends — signed
+out, expired, password changed, password recovered — its push subscription is
+deleted with it, so that browser stops being notified as well.
+
+The upgrade that introduced these rows signs everyone out once: a cookie issued
+before it names no row. Have the password to hand.
 
 ## Restarting and reloading
 
@@ -400,7 +408,8 @@ elsewhere, pick a tunnel rather than a wider bind:
   there, preserve the external `Host` (or pass `X-Forwarded-Host`), and pass
   `X-Forwarded-For`; Pier uses the external host for write-origin checks and
   counts login failures per forwarded client. Its session cookie is marked
-  `Secure` when the proxy reports `X-Forwarded-Proto: https`. The proxy must
+  `Secure` when a loopback proxy reports `X-Forwarded-Proto: https` (the header
+  is ignored from anywhere else, where it is a header the client wrote). The proxy must
   pass WebSocket upgrades for `/api/terminal` (Caddy does automatically;
   nginx needs its usual HTTP/1.1 `Upgrade`/`Connection` forwarding).
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@timqi/pier",
-  "version": "0.0.16",
+  "version": "0.0.19",
   "description": "A self-hosted workspace for coding agents: web workbench and IM channels in front of Pi sessions",
   "license": "AGPL-3.0-only",
   "repository": "github:timqi/pier",

package/skills/pier-slack/SKILL.md

@@ -24,20 +24,13 @@ this: there is no current conversation and `channel` is required.
 
 `{"operation":"channels"}` lists what Pier can reach (`id`, `name`, `kind`,
 `respondsToMessages`); pass either an id or a `#name` anywhere a channel is
-wanted. `not_in_channel` means someone must run `/invite @Pier`.
+wanted.
 
 ## Never ask for an id
 
-You already have them:
-
-- **The person talking to you** — a message may start with `[name<id> time]`,
-  added by Pier, not typed by them. It appears only on a change — new speaker,
-  a time gap, a new day — so the last one you saw still applies (a gap alone
-  shows as time only, like `[14:23]`).
-- **Anyone in a transcript** — every line carries `name[id]`.
-- **This channel and thread** — from `context`.
-
-Asking a human to paste their own user ID is never acceptable.
+You already have them: the sender header on the message you are answering,
+`name[id]` on every line of a transcript, and `context` for this channel and
+thread. Asking a human to paste their own user ID is never acceptable.
 
 ## Reading
 
@@ -107,8 +100,6 @@ The response carries `ts` and `threadTs` for replying under what you posted.
 `text` replaces the message outright; there is no partial edit. Read the
 message first if you are changing part of it.
 
-- Slack only lets Pier edit what **its own bot** posted — anyone else's message
-  answers `cant_update_message`, and the answer is to reply, not to retry.
 - `ts` is always explicit, as with `delete`, and means nothing outside the
   channel it was read in.
 - The old text is gone — Slack keeps no version a reader can open, and may not
@@ -123,9 +114,6 @@ message first if you are changing part of it.
 {"operation":"delete","channel":"#ops","ts":"1717243800.000100"}
 ```
 
-Slack only lets Pier delete what **its own bot** posted — a person's message
-answers `cant_delete_message`, and the answer is to ask them, not to retry.
-
 - `ts` is always explicit. There is no "delete the last one" and no default
   from the thread you are in: the wrong `ts` cannot be undone.
 - A `ts` means nothing outside the conversation it came from — pass the